Repository navigation
share: send chats to IRIS's own share server, never opncd.ai (#191488) - #356
Merged
Merged
Conversation
opencode's share client defaulted to opencode's public servers (opncd.ai) or, for a signed-in opencode organisation, opencode's console. IRIS never changed that, so Share in IRIS Desktop uploaded people's chats to a third party. request() now goes through irisShareTarget(): IRIS at IRIS_API (heyiris.io) /api/v6/shares, signed with the person's IRIS_API_KEY. An enterprise.url someone configures on purpose is still honoured. There is no fallback: without an IRIS sign-in, Share refuses and says why. opencode accounts no longer decide where a share goes. Server: fl-iris-api #233. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This was referenced Oct 28, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
Share in IRIS Desktop uploaded people's chats to a third party (#191488, HIGH). opencode's share client defaults to
https://opncd.ai(opencode's public servers), or, for a signed-in opencode organisation, to opencode's console, and IRIS never changed either. Alex: "we need to point that at our OWN servers."What
src/share/iris-target.tsholds the pure functionirisShareTarget().IRIS_API(https://heyiris.io)/api/v6/shares, signed with the person'sIRIS_API_KEY.enterprise.url: still honoured. It's a deliberate config choice.opncd.aior opencode's console.ShareNext.request()uses it, socreate,sync,removeandimportall follow. opencode accounts no longer decide where a share goes.reject.phi, and links onheyiris.io/share/<id>. Until that is deployed, Share fails closed with an HTTP error, which is safer than today.Verification
src/share/iris-target.test.ts(4): the IRIS target and key; refusal without sign-in;enterprise.urlhonoured; the share client source no longer containshttps://opncd.aioractive_org_id.test/share/share-next.test.ts: two tests that asserted the old behaviour ("default URL is opncd.ai", "an org account goes to opencode's console") were rewritten to the new rules. A third would only duplicate the source guard, so it was dropped, with a note.test/share/share-next.test.ts+test/cli/import.test.ts+ the new file: 17 pass.bun run typecheck(bun 1.3.14) is clean.After merge
A Desktop release ships it. To check on the released app: run Share on a chat, and the link starts
https://heyiris.io/share/.GET /api/v6/shares/<id>/datawith your key returns the chat. Nothing reaches opncd.ai.🤖 Generated with Claude Code