DorkOS
ApiWorkbenchSign

Mint a signed URL for the embedded browser

POST
/api/workbench/sign

Mints what the embedded browser needs to load a target, gated by the app-wide session auth. A serve request gets a short-lived signed URL into GET /api/workbench/serve/{token}/{splat}, after its cwd is checked against the boundary. A proxy request opens (or reuses) a preview listener for that dev-server port and returns its bootstrap URL — a whole origin of its own, because a dev server served under a path prefix cannot resolve its own root-absolute assets.

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

curl -X POST "https://example.com/api/workbench/sign" \  -H "Content-Type: application/json" \  -d '{    "kind": "serve",    "cwd": "string"  }'
{  "url": "string",  "unavailable": "tunnel"}