typebot.io/packages
Baptiste Arnaud 512c988951
Some checks failed
Create Tag / create-tag (push) Has been cancelled
Deploy Workflows (Fly.io) / deploy (push) Has been cancelled
👌 Add camera capture options to file uploads (#2560)
## What changed

- add an optional Capture setting for image-only File Upload blocks with
None, Back camera, and Front camera choices
- persist the standard `environment` and `user` values and apply them
through the runtime file input `capture` attribute
- preserve existing behavior when capture is unset, including the legacy
Android accept workaround
- normalize extension-based image allowlists for capture while keeping
server-side validation fail-closed
- update schemas, generated OpenAPI specs, embed package versions, and
focused tests
- install Playwright Chromium during Codex worktree setup and ignore
local Revue session state

## Validation

- pre-commit affected format, lint, link, test, and OpenAPI targets:
passed
- affected tests across 14 projects under `.env.dev.example`: passed
- typecheck for builder, viewer, JS embed, File Input, input schemas,
lib, and bot engine: passed
- targeted Viewer Playwright file-upload capture test: passed (2 tests)
- targeted schema, allowlist, runtime helper, and upload validation
suites: passed

## Browser behavior

The standard capture attribute is a browser hint. Supported mobile
browsers may open the selected camera directly; desktop and unsupported
browsers may continue to show a regular file chooser.
2026-07-15 18:53:17 +02:00
..
ai 🔒️ Upgrade vulnerable deps (ai v5, nodemailer v8, otel sdk-node 0.217) (#2491) 2026-05-19 16:30:36 +02:00
auth 🐛 Harden email login codes (#2542) 2026-06-27 15:36:28 +02:00
billing 🔧 Restore OpenAPI docs generation pipeline (#2553) 2026-07-03 20:19:08 +02:00
blocks 👌 Add camera capture options to file uploads (#2560) 2026-07-15 18:53:17 +02:00
bot-engine 🔧 Restore OpenAPI docs generation pipeline (#2553) 2026-07-03 20:19:08 +02:00
chat-api 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00
chat-session 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00
conditions 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00
config 🔧 Restore OpenAPI docs generation pipeline (#2553) 2026-07-03 20:19:08 +02:00
credentials 🐛 Fix WhatsApp webhook verification (#2498) 2026-05-21 16:45:32 +02:00
deprecated/legacy 🔒️ Upgrade vulnerable deps (ai v5, nodemailer v8, otel sdk-node 0.217) (#2491) 2026-05-19 16:30:36 +02:00
emails Fix Dependabot vulnerabilities 2026-06-29 08:19:20 +02:00
embeds 👌 Add camera capture options to file uploads (#2560) 2026-07-15 18:53:17 +02:00
env 🐛 Fix WhatsApp webhook verification (#2498) 2026-05-21 16:45:32 +02:00
events 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00
forge 🔧 Prepare Ask Assistant migration campaign 2026-07-04 16:12:30 +02:00
groups 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00
lib 👌 Add camera capture options to file uploads (#2560) 2026-07-15 18:53:17 +02:00
logs 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00
partykit 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00
playwright 🔧 Hash API tokens (#2492) 2026-05-19 18:17:11 +02:00
prisma 🐛 Harden email login codes (#2542) 2026-06-27 15:36:28 +02:00
radar 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00
results 🐛 Fix S3 operations without full config (#2533) 2026-06-18 17:30:39 +02:00
rich-text 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00
runtime-session-store 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00
schemas 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00
scripts 🔧 Prepare Ask Assistant migration campaign 2026-07-04 16:12:30 +02:00
services/feature-flags 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00
settings 👌 Configure WhatsApp webhook forwarding URL (#2529) 2026-06-17 15:56:16 +02:00
shared-core 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00
spaces 📝 Document status page and analytics completion criteria (#2480) 2026-05-01 11:10:10 +02:00
telemetry 🔒️ Upgrade vulnerable deps (ai v5, nodemailer v8, otel sdk-node 0.217) (#2491) 2026-05-19 16:30:36 +02:00
templates 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00
theme 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00
typebot 🐛 Fix cross-workspace credential theft via preview endpoint (#2430) 2026-04-07 16:21:17 +02:00
ui 🔒️ Fix TAC scan header findings (#2549) 2026-06-29 16:16:36 +02:00
user 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00
variables 🐛 Fix SSRF bypass via DNS rebinding in HTTP request and script fetch flows (#2461) 2026-04-15 09:28:06 +00:00
whatsapp 🔧 Restore OpenAPI docs generation pipeline (#2553) 2026-07-03 20:19:08 +02:00
workspaces 🔧 Remove "baseUrl": "." from tsconfigs 2026-03-25 16:40:12 +01:00