Team messaging.
Actually affordable.

Sets a short-lived signed state cookie and 302s the browser to github.com/login/oauth/authorize. After the user approves, GitHub redirects to /auth/callback, which exchanges the code, upserts the GitHub profile in SQLite, and writes a 30-day signed session cookie.

Reads the session cookie and returns the authenticated user's profile (id, githubId, login, name, avatarUrl, email). Responds 401 with null body when no valid session is attached.

Removes the signed session cookie. The user record stays in SQLite — the next OAuth round trip will reuse it.

Resolves the seeded default room (the lobby) for the signed-in user. Used by the SPA on first load to know where to send people who haven't picked a room yet.

Returns the room's branding, owner, and settings. Whitelisted rooms reject non-members with 403; the lobby is always public.

Owners can rename the room (collision-checked against reserved slugs), update its display name, description, accent colors, and avatar. Updates are broadcast over Redis pub/sub so every connected member's UI updates live.

Flips the room between open and whitelist-only. When enabled, only allow-listed GitHub logins or verified emails can read/write; everyone else hits the access-request flow.

Returns channels in the room — public ones plus any private/group channels and DMs the caller is a member of. Each row carries id, slug, name, visibility, memberCount, and createdBy.

Owner-only. The lobby has no admin, so its create-channel UI is hidden and this endpoint refuses calls there. visibility is public | private | group | personal; inviteLogins[] seeds co-admin members.

{
  "name": "Engineering",
  "slug": "engineering",
  "visibility": "public",
  "inviteLogins": ["alice", "bob"]
}

Available to anyone with room access. Creates (or reuses) a private DM channel between the caller and the supplied GitHub logins. Returns the channel DTO and broadcasts a direct_created event so the other parties' tabs add it without refresh.

Allowed if the caller owns the room or created the channel. Wipes the channel's messages from SQLite and publishes a deleted event to all subscribers.

Returns every user who has spoken in or been invited to the room. Used by the mention picker and the DM flow.

Reads from SQLite (the hot store). Use channelId=__lobby for the room-wide thread, a real channel id to scope to one channel, or omit to get everything visible. Pagination uses a (beforeCreatedAt, beforeId) keyset so concurrent inserts can't shift pages.

The HTTP send path mirrors the WebSocket path: it builds the message row, publishes to Redis first (so other tabs see it in one RTT), then persists to SQLite asynchronously. Mentions are processed off the response path. Content is trimmed and capped at 4,000 characters.

{
  "content": "Deploy looks green. ",
  "channelId": "ch_8fd2…"
}

Only the original author may edit. Updated body is published as a message_updated event so connected clients can rerender in place.

Author or room owner. Removes the row from SQLite and publishes a message_deleted event with the channel id so clients can drop it from the relevant view.

The primary live transport. On connect the server replays the last 20 messages as a sync frame, then forwards every Redis pub/sub event for the room. Clients send {"type":"send","clientMsgId","content","channelId"} frames; the server fans out via Redis and acks on the same socket so optimistic UI can promote in place.

// server → client (initial)
{ "type": "sync", "messages": [...] }

// client → server
{ "type": "send", "clientMsgId": "c_42", "content": "hi", "channelId": null }

// server → client (echo on every connected tab)
{ "type": "message", "clientMsgId": "c_42", "message": { ... } }

// server → sender only
{ "type": "ack", "clientMsgId": "c_42", "serverId": "msg_…", "createdAt": "…" }

Read-only SSE stream for environments where WebSockets are blocked. Sends an initial sync with the last 20 messages, then relays every message, message_updated, message_deleted, and channel/branding event the room publishes. A ping event fires every 20 seconds to keep proxies open.

event: room
data: {"type":"sync","messages":[ ... ]}

event: room
data: {"type":"message","message":{ ... }}

event: room
data: {"type":"message_updated","message":{ ... }}

event: room
data: {"type":"message_deleted","messageId":"msg_…","channelId":"ch_…"}

event: ping
data:

Returns every login or email allowed into a gated room.

Owner-only. Accepts a GitHub login or an email address and a free-form note.

Owner-only. The user keeps any session they already have until it expires, but new joins are blocked.

Owner-only. Returns the queue of would-be members the room hasn't yet approved or denied.

Any signed-in user can call this against a gated room. The request becomes a notification on the owner's dashboard.

Owner-only. Marks the request approved and inserts the requester into the room's whitelist atomically.

Owner-only. The requester is not notified beyond the existing dashboard state change.

Returns mentions, access requests, and other room-scoped notifications addressed to the caller.

Updates the notification's lifecycle state.

Pin a notification so it shows up in the saved tab regardless of read state.

Used by room owners to mark a notification public or private inside the room.

Idempotent. Returns the existing thread if one already exists, otherwise creates a new one and returns its id.

Returns thread replies in chronological order with author profile data joined in.

Posts a reply on behalf of the caller. Thread replies aren't broadcast on the room socket — clients refetch the thread on focus.

Returns the first board for a room. Creates a default Todo · Doing · Done board the first time it's hit.

Spins up another board with default columns alongside the room's first one.

Returns the board with its columns and cards inlined.

Drops the new card into the board's first column.

Updates the card's column and position. The board owner can move any card; other members can only move their own.

Saved cards float to the top of their column for the caller.

Multipart form upload. Images are converted to WebP under 70 KB before storage. Bind the result to a message or other entity by sending entityType + entityId in the same form.

Streams the stored bytes back with the right content-type. Access is gated by the entity the attachment belongs to.

Backed by Redis TTL keys. Connected clients heartbeat every 30 seconds; stale entries fall off automatically.

Bumps the caller's presence key and broadcasts an online event if they were stale.

Used by the AI add-on's private chat surface. Publishes a short-lived typing event for the named conversation.

Unauthenticated. Pings Redis and returns a small JSON document used by the workspace server's external uptime probe.

{
  "ok": true,
  "ts": "2026-05-04T23:30:00.000Z",
  "checks": { "server": "ok", "redis": "ok" }
}