dayuan.jiang d415f19cf5 feat(mcp-server): serve the bundled draw.io same-origin behind an api token ...

GET /drawio/<path> serves dist/drawio with a MIME table, a day of
caching and nosniff; paths are normalized and never reach WEB-INF or
META-INF. The preview embeds /drawio/index.html when the copy exists and
DRAWIO_BASE_URL is unset, else the external draw.io as before (and
start_session says so). Every /api request must carry the per-process
X-Drawio-Token the page gets in its HTML; pages send
frame-ancestors 'self' and nosniff.

2026-10-11 20:56:07 +09:00

..

admin-providers-route.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

admin-providers.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

admin-secret-input.test.tsx

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

admin-settings.test.ts

fix: validate admin settings file target (#894)

2026-10-06 08:21:27 +09:00

admin-test-model.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

ai-providers-cache.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

ai-providers-credentials.test.ts

feat(ui): canvas-first redesign with a self-hosted draw.io (#957)

2026-10-08 16:20:15 +09:00

ai-providers-google.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

ai-providers-openai.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

ai-providers.test.ts

fix(ollama): send chat requests to the /api path (#954)

2026-10-06 09:37:05 +09:00

api-access-code.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

app-menu.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

base-url.test.ts

fix(ollama): send chat requests to the /api path (#954)

2026-10-06 09:37:05 +09:00

bedrock-api-key.test.ts

feat(ui): canvas-first redesign with a self-hosted draw.io (#957)

2026-10-08 16:20:15 +09:00

cached-responses.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

canvas-import-boundary.test.ts

test(unit): canvas import boundary and the shared version card

2026-10-11 20:56:07 +09:00

chat-helpers.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

chat-route-abort.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

chat-route-edgeone.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

chat-route-errors.test.ts

feat(chat): show a quota hint when the server's key is refused (#953)

2026-10-06 09:49:48 +09:00

chat-route-quota.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

client-ip.test.ts

feat(api): count the quota by the CDN's client IP and refuse direct calls (#956)

2026-10-06 10:32:43 +09:00

compact-cells.test.ts

feat(diagram): named styles and compact cells for shorter model output (#969)

2026-10-10 21:58:21 +09:00

config-manager.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

cross-site-requests.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

deprecated-params.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

diagram-context.test.tsx

feat(ui): canvas-first redesign with a self-hosted draw.io (#957)

2026-10-08 16:20:15 +09:00

diagram-diff.test.ts

fix(chat): the AI reads and draws the page the user is viewing (#974)

2026-10-10 23:30:51 +09:00

diagram-pages.test.ts

fix(chat): the AI reads and draws the page the user is viewing (#974)

2026-10-10 23:30:51 +09:00

diagram-validator.test.ts

Add VLM-based diagram validation (#602)

2026-01-20 20:52:04 +09:00

edgeone-function.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

env-loader.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

llm-errors.test.ts

feat(chat): show a quota hint when the server's key is refused (#953)

2026-10-06 09:49:48 +09:00

log-save-route.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

mcp-core.test.ts

fix(chat): the AI reads and draws the page the user is viewing (#974)

2026-10-10 23:30:51 +09:00

mcp-preview-history.test.ts

feat(mcp-server): serve the bundled draw.io same-origin behind an api token

2026-10-11 20:56:07 +09:00

mcp-preview-recovery.test.ts

feat(mcp-server): serve the bundled draw.io same-origin behind an api token

2026-10-11 20:56:07 +09:00

model-catalog.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

output-token-limit.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

parse-url-route.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

pdf-utils.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

port-manager.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

provider-models.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

provider-setup.test.ts

feat(settings): reorganize the settings dialog and the model settings (#958)

2026-10-08 18:10:07 +09:00

redesign-helpers.test.ts

refactor(canvas): decouple the canvas from the chat engine

2026-10-11 20:56:07 +09:00

server-model-config.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

short-model-name.test.ts

feat(ui): canvas-first redesign with a self-hosted draw.io (#957)

2026-10-08 16:20:15 +09:00

ssrf-protection.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

style-classes.test.ts

feat(diagram): named styles and compact cells for shorter model output (#969)

2026-10-10 21:58:21 +09:00

template-storage.test.ts

feat: add personal My Templates library alongside Quick Examples (#773)

2026-04-03 12:16:01 +09:00

tool-activity.test.tsx

feat(ui): canvas-first redesign with a self-hosted draw.io (#957)

2026-10-08 16:20:15 +09:00

url-utils.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

use-diagram-streaming.test.tsx

fix(chat): the AI reads and draws the page the user is viewing (#974)

2026-10-10 23:30:51 +09:00

use-diagram-tool-handlers.test.tsx

fix(chat): the AI reads and draws the page the user is viewing (#974)

2026-10-10 23:30:51 +09:00

use-file-processor.test.tsx

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

use-model-config.test.tsx

feat(settings): reorganize the settings dialog and the model settings (#958)

2026-10-08 18:10:07 +09:00

use-session-manager.test.tsx

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

utils.test.ts

feat(mcp-server): load .drawio.svg, change summary, XML reference by topic, preview options, truncation message (#982)

2026-10-11 20:40:05 +09:00

validate-diagram-route.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

validate-model-bedrock.test.ts

feat(ui): canvas-first redesign with a self-hosted draw.io (#957)

2026-10-08 16:20:15 +09:00

validate-model-route.test.ts

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

version-card.test.tsx

test(unit): canvas import boundary and the shared version card

2026-10-11 20:56:07 +09:00