cyberapi

Version 0.6.2-nightly.20261108.0f1efaf, built from main at 0f1efaf522869829e3eb251ea168bf3a4523c81e on 2026-11-08 22:43 UTC.

A development build, replaced every night. The macOS app is signed and notarized; the Windows and Linux packages are not signed.

0.6.0 - 2026-11-08

⛰️ Features

• (bridge) Enable zstd and gzip response compression with zstd preferred - (1306f3f)
• (directory) Support marking accounts as demo to disallow password changes - (1f28db0)
• (template) Resolve bare {{variable}} placeholders and Postman dynamic variables - (d90644d)
• Show and toggle parameter required status and recheck web session on focus - (a9f17c3)
• Set public preview from the home Edit project dialog - (3ba0d9b)
• Let a project publish its online documentation - (0fe7f94)
• Toggle line comments in request editors and strip commented JSON trailing commas - (0a97cd8)
• Refine workspace tabs, parameter rows, menus, and card source badges - (0b4d46e)
• Make the online docs page searchable and stop recursive schemas - (556b06a)
• Open a project from its outline and sync the edits - (1d247ef)

🐛 Bug Fixes

• (web) Keep wasm name section for wasm-bindgen in web-release and version asset URLs - (3bea632)

📚 Documentation

• Add live web demo link and credentials to README - (628df45)
• Record follow-up optimization plan in issue-plan.md - (523e1e8)
• Update document - (4185d88)

⚙️ Miscellaneous Tasks

• (package) Install binaryen version_132 from GitHub releases for web build - (5c54030)

0.5.0 - 2026-11-01

⛰️ Features

• (A6) Check that a response conforms to a JSON Schema - (494b9c1)
• (A7) Load test an API on the desktop - (1855b16)
• (B10) Opt-in local polling of bound sources to match API field docs - (35c7783)
• (B7) A project keeps the address it was imported from, and syncs from it again - (9e9b112)
• (B8) Import a .http file, and its environment files - (6def49d)
• (B9) Bind an import source to a folder and sync it there - (856603a)
• (D5) Folders and APIs have variables of their own - (4fcc5ab)
• (D6) An environment marked as production asks before a send that may change something - (8c27841)
• (D7) More template functions, and now() shifted - (fc7c3ab)
• (F1) Align the tab bar and tree header at 36px and disambiguate same-name tabs - (b8fc268)
• (F10) Per-parameter descriptions in query, headers and form bodies - (5857741)
• (F11) Show and edit request and response field schemas in Docs - (0f3b9aa)
• (F5) Copy or move an API or a folder to another project - (755eb2c)
• (F6) Undo a delete from the tree, and the desktop backs up every day - (714f098)
• (F7) Open a tab in a window of its own on the desktop - (cbf8a58)
• (F8) Find an API by its path in the command palette - (fbc81ae)
• (F9) Pick a file on any multipart row, and import binary fields as file:// - (dc409b8)
• (G8) Compare a project's version with now, or with the version after it - (7220ffe)
• (source) Follow the document on sync except values and secrets - (55bf382)
• (source) Add periodic auto-sync with configurable interval for bound OpenAPI sources - (bbaa963)
• (source) Highlight breaking schema changes in source sync preview - (69fea4a)
• (workspace) Keep pinned APIs out of the open tabs bar - (2d6646e)
• Show path, query, and header types from OpenAPI - (5dda0f0)
• Add OIDC sign-in, snapshot assertions, and page file picks - ([b687e54](https://github.com/vica

0.4.0 - 2026-10-28

⛰️ Features

• (A1) MCP's get_api lists an API's assertions; the docs say what assertions do - (52ebeb9)
• (A1) An Assert tab edits an API's assertions, each marked against the response shown; the status line counts how many held. The Raw HTTP tab is Wire (报文), to fit - (e62e454)
• (A1) An API's assertions on its status, headers, JSON, body, time and size, kept in its request; model 6 - (a93243f)
• (A3, A2) Run a folder or the project, once or for each row of a data file, values taken from one answer for the requests after it - (4c94709)
• (A4) Cyberapi-cli run — a project file's APIs run from a terminal or CI, as Run… runs them - (8bf2cd7)
• (B1, B2) A project or a folder exports as a Postman collection (v2.1) or an OpenAPI 3.0 document (YAML) too, from the export submenu - (3c08f44)
• (B3) Importing again into a project adds only what is new, into the folders of the same name, or also updates the APIs it has - (829eec1)
• (B3) An address in the import dialog is fetched, as the app sends, redirects followed and nothing kept - (5edd405)
• (B4) Imports bring how they sign in and their environments — Postman's and Insomnia's auth at every level, OpenAPI's security schemes as the project's, a Postman environment file and Insomnia's sub-environments as named environments; the project keeps its own auth, and an environment it has gets only what it lacks - (35a8460)
• (B5) Imports HAR archives, Hoppscotch collections and environments, Bruno .bru files and OpenCollection documents - (130b64f)
• (B6) Copy a request as Node.js axios, PHP Guzzle, Rust reqwest, Java's and C#'s HttpClient or Swift's URLSession - (05f4eac)
• (C2) Digest auth — a 401 that asks for Digest (MD5 or SHA-256, -sess, qop=auth) is answered once by sending again signed; an API, folder or project can sign in with it; cURL copies it as --digest; data model 7 - (9353619)
• (C4) OAuth tokens kept as cookies are, and an audience and a resource asked with - (06932bb)
• (C4) OAuth 2.0's client credentials and password grants, the token asked for before sending and kept in memory - (ba038e3)
• (C5) Client certificates by host (PEM, or PKCS#12 with its password) and authorities trusted besides the system's, in the desktop's settings; only the desktop's engine reads the files, never the bridge's; cURL copies them - (992d261)
• (D1) {{prompt(label, start)}} asks for a value as the request is sent: one dialog for all of them, what was typed kept by project until the app quits; an AI assistant's send that has one is refused - ([b98b1c3](https://github.com/vicanso/cyberapi/commit