Merge remote-tracking branch 'gitea/master' into sidecar-app-store

src/server.tsx

@@ -304,6 +304,18 @@ const server = serve({
     '/.well-known/carddav': honoServer.fetch,
     '/dav': honoServer.fetch,
     '/dav/*': honoServer.fetch,
+    // Vaultwarden for third-party Bitwarden clients, unauthenticated at Officer's layer. Needs its own
+    // entry for the same reason /dav does: only the paths listed here reach hono, and anything else
+    // falls through to the SPA — which answers 200 with the React shell, so a missing line here looks
+    // like a working endpoint returning nonsense rather than a 404.
+    '/vaultwarden/*': honoServer.fetch,
+    // The same proxy at the root, so the extension needs only the bare Officer URL. These four prefixes
+    // are Vaultwarden's alone — nothing in Officer answers on them — so routing them here costs nothing.
+    // `/api/*` already reaches hono below, where a Bitwarden client header diverts it.
+    '/identity/*': honoServer.fetch,
+    '/notifications/*': honoServer.fetch,
+    '/icons/*': honoServer.fetch,
+    '/events/*': honoServer.fetch,
     '/': officerWeb,
     '/*': officerWeb,
     '/api': honoServer.fetch,