BitSquare/Codeman
2
0
Fork 0
mirror of https://github.com/Ark0N/Codeman.git synced 2026-09-30 12:39:42 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,697 Commits 58 Branches 191 Tags
193ce6348d3196d6ed571ccd9f2c89f78b8e630e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Ark0N 193ce6348d Merge pull request #268 from Ark0N/feat/mobile-shell-keyboard-262 
feat(mobile): shell keyboard bar with a one-shot Ctrl modifier
 2026-08-10 04:33:22 +02:00
Ark0N 312ca541e6 Merge pull request #271 from Ark0N/feat/app-settings-redesign 
feat(settings): rebuild App Settings as a rail over one scrolling document
 2026-08-10 04:29:13 +02:00
Ark0N 40ce91f098 Merge pull request #267 from Ark0N/fix/mobile-tab-scroll-257 
fix(mobile): make every session tab reachable in the tab strip
 2026-08-10 04:27:42 +02:00
Ark0N 250a53125a Merge pull request #264 from Ark0N/fix/history-search-260-261 
fix(web): usable past-conversation list (#260) and search that finds past sessions (#261)
 2026-08-10 04:27:12 +02:00
Ark0N 14ea9f630f Merge pull request #269 from jordan8037310/feat/session-worktree-label 
feat(sessions): show the git worktree (name + branch) on session rows
 2026-08-10 04:26:23 +02:00
Ark0N f98922063a Merge pull request #256 from Ark0N/feat/readmymind-phase2 
Read My Mind phase 2: the predictor and the 🧠 button
 2026-08-10 00:54:27 +02:00
Ark0N d5375d7f0b Merge pull request #251 from Ark0N/feat/clone-repo-case 
feat(cases): clone a Git repository as a new case (#236)
 2026-08-10 00:45:13 +02:00
Ark0N e6df0c4094 Merge pull request #253 from Ark0N/feat/readmymind 
feat: Read My Mind phase 1, per-case intent profiles (opt-in)
 2026-08-09 18:34:11 +02:00
Ark0N 527ce10491 Merge pull request #248 from Ark0N/feat/offline-state 
feat(web): make a dead connection unmistakable instead of a red dot
 2026-08-09 17:08:15 +02:00
Ark0N e087198056 Merge pull request #250 from Ark0N/feat/path-picker-show-hidden 
feat(path-picker): show hidden files and folders, and harden the secret blocklist
 2026-08-09 16:59:33 +02:00
Ark0N 2e266380f8 Merge pull request #247 from Ark0N/feat/file-viewer-show-hidden 
feat(file-viewer): show hidden files and folders
 2026-08-09 16:59:14 +02:00
Ark0N 3363d25876 Merge pull request #245 from Ark0N/feat/approvals-inbox 
feat: Approvals Inbox, answer any session's pending prompt from one place (opt-in)
 2026-08-09 16:58:56 +02:00
Ark0N b793ff3294 Merge pull request #249 from Ark0N/fix/trust-dialog-auto-accept 
fix: workspace trust dialog auto-accept has been dead (tmux sends cursor-forwards, not spaces)
 2026-08-09 16:58:30 +02:00
Ark0N a68b2c5bc5 Merge pull request #246 from Ark0N/fix/idle-detection-working-state 
fix: sessions reported idle while working, plus a working state you can see
 2026-08-09 16:58:04 +02:00
Ark0N 89f9e0becb Merge pull request #243 from Ark0N/feat/skill-cross-session-messaging 
feat(skill): drive claude workers over Claude Code cross-session messaging
 2026-08-09 16:57:25 +02:00
Ark0N b374032699 Merge pull request #241 from Lint111/fix/mobile-test-vendor 
test(mobile): serve the xterm vendor bundles the browser suite needs
 2026-08-09 12:09:36 +02:00
Ark0N b6efdfccf4 Merge pull request #240 from Ark0N/feat/predictive-echo-codex 
Zero-lag predictive echo for Codex sessions (mosh-style write-through)
 2026-08-09 11:42:53 +02:00
Ark0N 1184720648 Merge pull request #239 from Ark0N/feat/daemon-mode 
feat(cli): codeman web -d and codeman service install (#231)
 2026-08-09 02:19:50 +02:00
Ark0N b067aad9b6 Merge pull request #235 from Lint111/feat/deferred-terminal-flush 
fix(terminal): drain deferred output without a wake event
 2026-08-09 02:19:32 +02:00
Ark0N 19a3d7c773 Merge pull request #234 from Lint111/feat/ai-checker-stderr 
fix(ai-checker): keep CLI stderr out of the verdict and surface it on failure
 2026-08-09 02:19:10 +02:00
Ark0N 2524759655 Merge pull request #229 from Lint111/feat/keyboard-viewport-settle 
fix(mobile): coalesce keyboard viewport settling
 2026-08-08 12:51:04 +02:00
Ark0N aed1e59ee3 Merge pull request #227 from Ark0N/fix/scrollback-205-round2 
fix(terminal): scrollback round 2 for #205 (re-pull downgrade guard, PageUp fallback, CLI version probe retry)
 2026-08-08 01:36:03 +02:00
Ark0N 7f6d18b398 Merge pull request #226 from christianhaberl/fix/input-loss-on-failed-delivery 
fix(api,ws): an input whose delivery fails can be retried instead of being lost
 2026-08-08 01:31:10 +02:00
Ark0N 52571c7fd4 Merge pull request #225 from christianhaberl/fix/bound-the-process-tree-walk 
fix(mux): bound the process-tree walk — unbounded pgrep recursion can take a machine down
 2026-08-08 01:31:00 +02:00
Ark0N cb95a8562c Merge pull request #224 from christianhaberl/fix/raw-writehead-drops-security-headers 
fix(http): raw writeHead routes drop every header the security hook set
 2026-08-08 01:30:47 +02:00
Ark0N 6f1ff17ccc Merge pull request #223 from Ark0N/fix/scrollback-shell-alt-screen 
fix: terminal scrollback overhaul for shell and CLI sessions (#205)
 2026-08-07 13:42:47 +02:00
Ark0N bfff20a093 Merge pull request #216 from shenlvkang-collab/fix/response-viewer-brief-format 
fix(web): align brief Response Viewer formatting
 2026-08-06 07:22:13 +02:00
Ark0N c19d884a51 Merge pull request #215 from timkjr/fix/past-sessions-history-quality 
fix(history): three Past Sessions data-quality bugs (automated-session noise, cross-contaminated previews, blank restart-heavy rows)
 2026-08-05 21:44:47 +02:00
Ark0N 22e77a1827 Merge pull request #214 from timkjr/fix/mobile-overview-run-gating 
fix(mobile): gate the phone overview's run picker on CLI availability
 2026-08-05 21:44:42 +02:00
Ark0N b641560040 Merge pull request #203 from shenlvkang-collab/contrib/claude-viewer-session-pin 
fix(web): pin the Claude response viewer to the pane's own conversation
 2026-08-05 21:44:37 +02:00
Ark0N cd5a101626 Merge pull request #213 from Ark0N/feat/file-viewer-edit-mode 
File Viewer: edit mode for text files (edit + save in the viewer)
 2026-08-05 09:00:22 +02:00
Ark0N ddc267c6ff Merge pull request #181 from Lint111/agent/split-codex-animations 
feat(codex): make terminal animations configurable
 2026-08-05 00:20:38 +02:00
Ark0N db24fc6d7e Merge pull request #180 from Lint111/agent/split-preserve-active-launch 
fix(sessions): preserve active terminal during launches
 2026-08-04 23:53:14 +02:00
Ark0N 2891ae0d6d Merge pull request #178 from Lint111/agent/split-notification-noise 
fix(notifications): quiet lifecycle hook noise
 2026-08-03 14:07:54 +02:00
Ark0N 17b86b1007 Merge pull request #177 from Lint111/agent/split-transcript-tool-results 
fix(transcripts): complete tools from user results
 2026-08-03 14:05:38 +02:00
Ark0N e0226f7186 Merge pull request #176 from Lint111/agent/split-hook-lifecycle 
fix(hooks): reawaken jobs without replacing user hooks
 2026-07-31 08:33:58 +02:00
Ark0N e8681f575f Merge pull request #175 from Lint111/agent/split-quick-start-fixture 
test: isolate runtime state and PTY integration
 2026-07-31 07:22:30 +02:00
Ark0N b586007f14 Merge pull request #169 from shenlvkang-collab/contrib/claude-response-viewer-normalization 
fix(web): normalize Claude response viewer turns at real human boundaries
 2026-07-28 11:10:28 +02:00
Ark0N 80a88ea857 Merge pull request #168 from shenlvkang-collab/contrib/mobile-path-picker-preview 
feat(mobile): add filesystem path picker and document/image previews
 2026-07-28 10:25:17 +02:00
Ark0N cbae989e02 Merge pull request #170 from shenlvkang-collab/contrib/light-skins-1.8.0 
feat(ui): add four light skins (Paper Gray, Solarized Light, Catppuccin Latte, Rosé Pine Dawn)
 2026-07-28 01:01:54 +02:00
Ark0N fad7cdc1ab Merge pull request #165 from shenlvkang-collab/feat/custom-name-i18n 
feat(ui): add custom branding and Chinese localization
 2026-07-23 09:41:48 +02:00
Ark0N 689d9fc5e5 Merge pull request #164 from shenlvkang-collab/fix/run-session-tab-dedup 
fix(ui): show new run tabs immediately
 2026-07-23 09:14:22 +02:00
Ark0N 50547a4e89 Merge pull request #163 from shenlvkang-collab/fix/unicode-working-directories 
fix(paths): accept Unicode working directories
 2026-07-23 09:13:24 +02:00
Ark0N 3c2a5bfef3 Merge pull request #162 from shenlvkang-collab/fix/foldable-mobile-settings 
fix(mobile): preserve settings across foldable postures
 2026-07-22 19:05:02 +02:00
Ark0N 6351b4143f Merge pull request #157 from aakhter/cod-162-session-manager-polish 
Session Manager: pinning, cross-device ordering, name/prompt retention
 2026-07-20 14:43:11 +02:00
Ark0N 5c20fcf464 Merge pull request #156 from aakhter/cod-114-remote-tmux-durability 
Remote tmux durability: survive SSH drop, discover/attach, collaborative sessions
 2026-07-20 14:32:50 +02:00
Ark0N ed47a599be Merge pull request #161 from Ark0N/feat/multiuser-mode 
feat: opt-in multi-user mode (per-user spaces + admin panel)
 2026-07-20 13:07:58 +02:00
Ark0N d1928f300e Merge pull request #160 from Ark0N/feat/docker-session-mode 
v1.4.1: Docker session mode hardening + File Viewer button
 2026-07-20 01:41:58 +02:00
Ark0N a3fe0ae728 Merge pull request #159 from Ark0N/feat/docker-session-mode 
docs: reflect shipped Docker session mode (1.4.0)
 2026-07-19 22:28:41 +02:00
Ark0N d1868516f7 Merge pull request #158 from Ark0N/feat/docker-session-mode 
feat: Docker session mode (isolated per-case containers + export/import) — v1.4.0
 2026-07-19 21:59:47 +02:00
Ark0N 7d5ea0bd50 Merge PR #155 from dennisentruencer/fix/sliding-auth-cookie: slide the session cookie so active users aren't logged out 
Re-issue the codeman_session cookie on every authenticated request so the browser cookie lifetime tracks the server-side sliding TTL (authSessions already used refreshOnGet: true). Fixes the recurring native Basic Auth dialog during active use.

Reviewed: no token rotation (same server-generated token re-issued, so no fixation vector), forged cookies are not blessed, logout still emits only the clearing cookie and server-side invalidation holds, cookie attributes identical to the Basic Auth path. Verified against the merge result: tsc --noEmit, lint, format:check, check:frontend-syntax, check:lockfile, and npm run test:ci (3404 passed) all green.
 2026-07-16 23:49:10 +02:00
Ark0N 3f23621f8d Merge pull request #144 from TeigenZhang/pr/mouse-restore-decset-strip 
feat(web): restore tap/click/wheel mouse interaction when server strips mouse DECSETs
 2026-07-12 13:23:22 +02:00
Ark0N 5cca965aa4 Merge pull request #143 from TeigenZhang/pr/cjk-input-loss 
fix(mobile): CJK input loss — IME state machine, focus routing, and Android InputConnection recovery
 2026-07-12 13:23:19 +02:00
Ark0N b74a904b41 Merge pull request #142 from TeigenZhang/fix/mobile-response-viewer-typography 
fix(mobile): improve response-viewer readability on phones
 2026-07-12 13:23:17 +02:00
Ark0N 9204e42812 Merge pull request #139 from aakhter/cod-160-unified-session-service 
Unified session list: backend service + endpoint
 2026-07-12 13:22:39 +02:00
Ark0N a9749ead6a Merge pull request #138 from aakhter/cod-80-raise-terminal-defaults 
Raise terminal history/scrollback/buffer defaults (50k→100k, 2MB→32MB)
 2026-07-12 13:22:37 +02:00
Ark0N 613eb25302 Merge PR #137: Centralize terminal history/scrollback/buffer limits into config (COD-80) 
Introduces src/config/terminal-history.ts as the single source of truth for terminal scrollback lines, tmux history-limit, and PTY buffer byte caps. Behavior-neutral: defaults match prior hardcoded values; env overrides preserved. tmuxHistoryLimit is wired live (setHistoryLimit + respawn re-apply); the other three keys are scaffolding for a stacked follow-up. Reviewed: CI green (typecheck/lint + full test suite).
 2026-07-01 09:06:15 +02:00
Ark0N d8da1bd3ff Merge pull request #132 from aakhter/cod-127-xss-ultracode-handlers 
Harden ultracode inline onclick handlers against XSS
 2026-06-19 15:10:28 +02:00
Ark0N dfe20a3742 Merge PR #131: terminal touch tap interaction + forced redraw resize 
feat(terminal): touch tap interaction + forced redraw resize
 2026-06-17 18:08:07 +02:00
Ark0N de5216b83f Merge PR #130: mobile CJK input reliability + iPad keyboard accessory bar 
fix(mobile): CJK input reliability + iPad keyboard accessory bar
 2026-06-17 18:02:37 +02:00
Ark0N e1e670594b Merge PR #128: auto-wrap desktop session tabs on overflow + resize re-eval 
Auto-wrap desktop session tabs to a second row on overflow
 2026-06-14 22:43:43 +02:00
Ark0N 2e28e17834 Merge PR #123: hide CJK textarea on welcome screen + mobile test update 
fix(cjk): hide CJK textarea on welcome screen and fix vertical centering
 2026-06-14 22:43:17 +02:00
Ark0N 90f18438ff Merge PR #127: require hook-event secret unconditionally + stale-config self-heal 
Require the hook-event secret unconditionally (drop managed-tunnel gating)
 2026-06-14 22:43:13 +02:00
Ark0N 5b62f397ec Merge PR #129: macOS Option/physical-key session shortcuts + terminal-ui ESC-leak fix 
Make Option/Alt session shortcuts work on macOS (physical key codes)
 2026-06-14 22:43:08 +02:00
Ark0N 1e54ebcdf4 Merge PR #125: add codeman doctor dependency checker + accuracy review fixes 
Add `codeman doctor` tool-dependency checker
 2026-06-14 22:43:04 +02:00
Ark0N 0364bea166 Merge PR #126: harden markdown sanitizer with DOMPurify (mXSS) + allowlist/test review fixes 
Harden markdown HTML sanitizer with vendored DOMPurify (mXSS)
 2026-06-14 22:42:59 +02:00
Ark0N a122e867ef Merge PR #122: restore response-viewer eye button on mobile 
Remove the dead mobile-collapsed header tray that hid the entire header-right cluster (incl. the opt-in response-viewer eye) on phones/tablets, and update the mobile test to assert inline reachability. Eye stays hidden by default (showResponseViewer).
 2026-06-14 19:46:11 +02:00
Ark0N 3f2c23cb0f Merge pull request #119 from aakhter/pr/cod-37-attachments 
Add server-side attachment pipeline (registry, magic-link, path guard)

Review fixes (2767e80): force-confine the terminal magic-link scan path to the
session workspace (closes a prompt-injectable arbitrary host-file read primitive
that broadcast over SSE); keep PNG on the image-popup path (the attachment UI
consumer is out of scope, so rerouting it broke the screenshot popup); serve the
re-resolved path (TOCTOU); 50MB raw cap; per-session registry cap; CLI .env via
dataPath(). Documented in security-architecture.md.
 2026-06-11 10:32:34 +02:00
Ark0N 12c8e080c1 Merge pull request #118 from aakhter/pr/cod-81-snapshot 
feat(terminal): snapshot-replay on tab switches (xterm serialize + live pane capture)

Review fixes (9893a7f): bounded/hardened xterm snapshot persistence — shell-session skip, true LRU eviction, localStorage quota-deadlock fix with evict-and-retry, OSC-strip regex tightened.
 2026-06-11 10:22:59 +02:00
Ark0N aa84447899 Update README to include 'Terminal' in description 2026-06-11 00:38:34 +02:00
Ark0N a0e1a2e33b Update README.md 2026-06-11 00:36:51 +02:00
Ark0N dc9c4b3bda Merge pull request #117 from aakhter/pr/cod-86-codex-frontend 
fix(codex): smaller first-frame write budget + scroll-up grace for codex
 2026-06-10 22:59:40 +02:00
Ark0N 1cf5c8c8ad Merge pull request #116 from aakhter/pr/cod-35-codex-polish 
fix(codex): strip alt-screen + scrollback-erase from the codex byte stream
 2026-06-10 22:52:02 +02:00
Ark0N f0db5f827f Merge pull request #115 from aakhter/pr/cod-78-security 
feat(security): hook-event auth secret + tunnel password guard
 2026-06-10 22:36:47 +02:00
Ark0N 9c986b2869 Merge pull request #114 from aakhter/pr/cod-34-codex 
feat(codex): add Codex (OpenAI CLI) run-mode foundation
 2026-06-10 16:22:52 +02:00
Ark0N e0ddbb147b Merge pull request #111 from aakhter/pr/cod-33-mobile 
fix(mobile): terminal and layout fixes for touch devices
 2026-06-10 08:51:30 +02:00
Ark0N 272f0d13ad Merge pull request #113 from Ark0N/v1-readiness-hardening 
v1.0 readiness: governance docs, CI test gate, and security hardening (M1/M7)
 2026-06-10 03:46:27 +02:00
Ark0N 227495a9bd Merge pull request #112 from aakhter/pr/cod-32-terminal 
feat(terminal): tmux pane-buffer primitives and session/render reliability
 2026-06-10 03:09:07 +02:00
Ark0N 2952256d65 Update README.md 2026-06-09 14:19:53 +02:00
Ark0N 4d0586a2aa Merge pull request #110 from aakhter/cod-31-tmux-session-reliability 
fix: harden tmux launch cwd
 2026-06-08 19:02:37 +02:00
Ark0N 6bf69a82c8 Merge pull request #106 from aakhter/cod-28-security-public-assets 
chore: COD-28 harden dependencies and public assets
 2026-06-08 18:12:42 +02:00
Ark0N e6b18fd126 Merge pull request #107 from aakhter/cod-29-network-auth-downloads 
fix: COD-29 harden network auth and downloads
 2026-06-08 18:03:01 +02:00
Ark0N 1316725fdc Merge pull request #108 from aakhter/cod-30-test-ci-stability 
test: COD-30 stabilize focused and perf browser tests
 2026-06-08 17:54:33 +02:00
Ark0N 6ea73a9251 Merge pull request #109 from Ark0N/fix/gesture-beta-label 
feat(settings): label Gesture Control as (beta)
 2026-06-08 16:42:32 +02:00
Ark0N ce65d5f2ad Merge pull request #105 from Ark0N/beta/settings-toggles 
feat(settings): toggle gesture control + multi-monitor button (off by default)
 2026-06-08 16:37:17 +02:00
Ark0N cc45191c62 Merge pull request #103 from Ark0N/beta/session-detach 
feat(web): session detach/undock + beta instance isolation (port 5000)
 2026-06-08 16:36:46 +02:00
Ark0N ad89a97106 fix(renderer): WebGL longtask fallback hardening (#91) 
Closes #89.

- _disposeWebGLObserver() called from both trip path and onContextLoss (fixes the leak)
- Thresholds (200ms/3/30s/5s/7d) hoisted to WEBGL_FALLBACK in constants.js
- Pure evaluateWebGLLongTaskTrip() helper + 9 Playwright tests (test/webgl-fallback.test.ts, port 3166)
 2026-05-19 11:43:36 +02:00
Ark0NandClaude Opus 4.7 8006cc5db3 fix: allowlist opusContext1mEnabled in SettingsUpdateSchema (#78) 
Same root cause as the thinkingEffort fix in #73: the schema is
.strict(), so unknown keys in PUT /api/settings are rejected with
INVALID_INPUT and the toggle never persists. Verified live:
pre-fix returned {"errorCode":"INVALID_INPUT"}, post-fix accepts.

The frontend has been reading and writing this key for a while
(settings-ui.js:336, :1137; session-ui.js:331), so saves were
silently failing — users never noticed because the load path
falls back to false on missing keys.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-04-28 03:29:48 +02:00
Ark0N d07b59db4e Merge pull request #74 from TeigenZhang/refactor/envoverrides-tmux-export 
refactor: pass envOverrides via tmux export instead of disk write
 2026-04-28 02:45:11 +02:00
Ark0N 79d7117e6d Merge pull request #73 from TeigenZhang/feat/thinking-effort 
feat: thinking effort setting for new sessions (with xhigh/max)
 2026-04-28 02:21:57 +02:00
Ark0N 546bbcbe7c Merge pull request #68 from aakhter/feat/clipboard-api 
feat: add clipboard API for remote browser clipboard access
 2026-04-18 04:10:31 +02:00
Ark0N 774d5ff321 Merge pull request #67 from aakhter/feat/tab-badges 
feat: improve active tab visibility and add Alt+N number badges
 2026-04-18 04:08:09 +02:00
Ark0N 98ceb5da1d Merge pull request #66 from aakhter/feat/tab-reorder-shortcuts 
feat: add Ctrl+Shift+{/} to reorder session tabs
 2026-04-18 04:07:01 +02:00
Ark0N 34fb5e49f8 Merge pull request #65 from aakhter/fix/android-shift-double-char 
fix: prevent double character input on Android Shift+key
 2026-04-18 04:05:21 +02:00
Ark0N c3027b21e1 Merge pull request #63 from Typhon0/fix/quick-start-linked-cases 
Good catch — quick-start was ignoring linked-cases.json. Thanks @Typhon0!
 2026-04-11 20:58:57 +02:00
Ark0N a11bcb0029 Merge pull request #59 from aakhter/feat/pwa-support 
feat: add PWA support for Android/iOS home screen install
 2026-04-11 06:54:06 +02:00
Ark0N 47fd9a922f Merge pull request #58 from ToRvaLDz/master 
feat: add named Cloudflare tunnel support
 2026-04-11 06:53:56 +02:00
Ark0N 14f7d8298d Merge pull request #62 from TeigenZhang/feat/mobile-response-viewer 
feat: mobile response viewer with markdown rendering
 2026-04-11 06:53:47 +02:00
Ark0N 0e6cd94312 Merge pull request #56 from TeigenZhang/feat/case-manage-reorder-delete 
feat: add case reorder and delete in Manage tab
 2026-04-03 03:53:25 +02:00
Ark0N 8e679a280b Merge pull request #55 from TeigenZhang/fix/auto-attach-on-restart 
fix: auto-attach PTY on server restart
 2026-04-03 03:50:31 +02:00