Repository navigation
Conversation
…ode Mode Code Mode's authorization and the CLI's idempotent-retry check both ask the same question: does this concrete path match this OpenAPI template? Code Mode looped over segments, and the CLI compiled a regex per template. Both now use `matchApiPathTemplate()` from toolkit-core, and each keeps its own policy on top: Code Mode decodes and rejects separators, picks the most literal template and checks the organization; the CLI filters by method. Code Mode also adds a missing trailing slash, as the CLI's retry check does, and sends that canonical path. A request for `/organizations/acme/issues` now reaches the published route instead of failing authorization. `sentry schema` keeps its own matcher: it also matches template-shaped queries and returns every tie for discovery. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017M6odW3kt5i65zATxfz9RX
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017M6odW3kt5i65zATxfz9RX
|
The latest updates on your projects. Learn more about Vercel for GitHub. 1 Skipped Deployment
|
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017M6odW3kt5i65zATxfz9RX
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017M6odW3kt5i65zATxfz9RX
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017M6odW3kt5i65zATxfz9RX
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017M6odW3kt5i65zATxfz9RX
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017M6odW3kt5i65zATxfz9RX
This was referenced Nov 3, 2026
This branch was previously deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Stacked on #1670.
Code Mode's authorization (
access.ts) and the CLI's idempotent-retry check (idempotent-operations.ts) both ask whether a concrete API path matches an OpenAPI template. Code Mode looped over segments, and the CLI compiled a regex per template. Both now callmatchApiPathTemplate()from@sentry/toolkit-core/api-path-template.Each product keeps its own policy on top:
Behavior change in Code Mode: a path missing its trailing slash, such as
/organizations/acme/issues, failed authorization with a 403. Code Mode now adds the slash (the CLI's retry check already normalized it this way) and sends that canonical path. Templates without a trailing slash, like SCIM, still match as published. Paths that are not in the schema still fail.sentry schemakeeps its own matcher: it also matches template-shaped queries and returns every tie, which a discovery command needs and authorization must not do.Tests:
Generated by Claude Code