 arkonandClaude Opus 4.8
|
a8e0e2a343
|
chore: release 0.9.0 — security hardening + warn-don't-block network policy
Release 0.9.0 covering the merged security/reliability PRs (#106 deps/
supply-chain, #107 auth/network, #108 test stability, #110 tmux cwd) plus:
- Network policy: a non-loopback bind without CODEMAN_PASSWORD now STARTS
with a loud warning (3 ways to secure) instead of refusing to start.
Loopback stays the safe default. --allow-unauthenticated-network just
acknowledges (terser note). (src/web/server.ts start())
- Post-install security note explaining the loopback default + safe exposure.
- New docs/security-architecture.md documenting the full model (binding,
auth pipeline, tunnel req.ip caveat, file-serving, supply-chain, isolation,
recommended setups). CLAUDE.md Security section + gotcha updated.
- Updated auth-security test: asserts warn-and-start (not throw).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-08 19:29:47 +02:00 |
|
|
arkonandClaude Opus 4.6
|
8fc0dc8c2e
|
chore: bump version to 0.1655
Security hardening: timing-safe auth comparison, localhost-only hook bypass,
SSE client limit, TLS key permissions, strict settings schema, logout endpoint.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
2026-02-27 01:13:58 +01:00 |
|