fix hf oauth: handle redirect at app level instead of settings panel

fix hf oauth: prevent double token exchange on redirect

fix hf oauth: switch to client-side PKCE, remove server oauth routes

fix hf oauth token storage, disable codex on hf spaces

fix inference-api scope in hf readme

fix hf oauth using internal container hostname instead of public url

fix huggingface oauth token forwarding, sanitize html error responses

add huggingface provider, settings ui overhaul with connect/disconnect flow

remove gpt-5.3-spark from supported models for now

add new provider "Codex (ChatGPT sub)", secure auth cookies and parallel tool calls

replace auto-capture with user-managed thumbnails, server mode fixes

add scheduled functions (cron jobs) with admin UI and scheduler

add site templates with automatic backend provisioning

fix env constant for hf

improve screenshot reliability, add site project swapping, sidebar version display

add optional skill evaluation pre-flight and non-streaming api support

add image input for vision models, dismissable toasts and updated to use Next.js 15.5.9

fix next.js versioning

improved sync modal with granular controls and skills/templates support

update Next.js to 15.3.8 (CVE-2025-55182)

fix server mode docs and dashboard redirect, cleanup dependencies

upgrade edge and server functions to quickjs wasm sandbox

add browser mode dashboard and set as default landing page

add admin dashboard with traffic logging and fix browser mode route access

fix site-database parameter binding for file sync

fix static site path rewriting for nav links

fix file sync parameter error

add secure cookies option and fix admin login redirect

fix deployment issues

add extended server features: edge & server functions, secrets management, dbs and site context for ai

fix app type

migrate server mode to sqlite and fix memory leaks

add reasoning tokens, toggle and malformed tool call fix

fix add docs folder to docker container

fix docs missing on hf build

add server mode, sites publishing, compliance banners, gemini thinking support

add agent skills system with built-in osw workflow and accessibility guides

fix guided tour compatibility, monaco save conflict, routing and json repair

add event-driven chat architecture, debug panel and handlebars subdirectories

add limit helper and improve json_patch error handling

fix template selection and centralize registry

fix json_patch duplicate detection

fix streaming tool call parsing and enhance tool error handling

added custom template creation and management

deleted errant svg, retry

deleted errant svg

overhauled orchestrator, vfs, chat and renamed to "osw-studio"