Codeman maintainer ac6fe6ef79 feat(multiuser): phase 5b, frontend (identity boot + admin panel) ...

- public/admin-ui.js (new, self-contained): on boot fetches GET /api/me and
  stores window.__codemanUser; installs a fetch interceptor that opens a
  change-password modal on any 403 PASSWORD_CHANGE_REQUIRED (and on boot when
  mustChangePassword is set); for a multi-user admin, injects a "Users" tab into
  the existing App Settings modal (create/reset/disable/enable/promote/demote/
  grant-bypass/delete with typed confirm + one-time-password reveal). No header
  button, so the mobile-header policy stays green; nothing renders in single-user
  mode.
- me-routes: GET /api/me returns a `multiUser` flag so the UI distinguishes a
  single-user admin (no admin UI) from a multi-user admin.
- index.html: load admin-ui.js after settings-ui.js, before session-ui.js.

Tests: test/admin-ui.test.ts (JSDOM: identity boot, Users-tab injection gating by
role/mode, forced change-password modal, script-order wiring). Backend verified
end-to-end by test/admin-routes.test.ts against a live server. A full Playwright
pass is recommended before merge.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-20 04:31:30 +02:00

..

config

fix(web): address self-review findings on #103 (master-safe defaults + hardening)

2026-06-08 15:41:46 +02:00

mobile

Merge PR #123: hide CJK textarea on welcome screen + mobile test update

2026-06-14 22:43:17 +02:00

mocks

COD-118 fix(test): stub resetRespawnBreaker in MockSession

2026-07-09 16:00:06 -04:00

routes

feat(docker): harden session mode + File Viewer button (v1.4.1)

2026-07-20 01:36:21 +02:00

services

COD-121 unified session list: welcome list frontend (slice A, unit 2)

2026-07-12 12:19:10 -04:00

utils

test: de-flake StaleExpirationMap age/TTL timing assertions for CI

2026-06-10 01:38:40 +02:00

admin-routes.test.ts

feat(multiuser): phase 5a, admin user-management API

2026-07-20 04:26:44 +02:00

admin-ui.test.ts

feat(multiuser): phase 5b, frontend (identity boot + admin panel)

2026-07-20 04:31:30 +02:00

ai-idle-checker.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

api-generate-plan.test.ts

chore: bump version to 0.1402

2026-01-27 23:15:25 +01:00

api-responses.test.ts

test(ci): run the unit suite in CI + frontend-syntax gate; green pre-existing test debt

2026-06-09 20:02:15 +02:00

attachment-magic.test.ts

fix(review): harden Codex generated-artifact attachment pipeline (PR #150)

2026-07-12 17:50:21 +02:00

auth-security.test.ts

Require the hook-event secret unconditionally, not only under a managed tunnel

2026-06-14 12:46:58 -04:00

away-digest-ui.test.ts

COD-8 add away digest

2026-06-19 17:58:06 -04:00

away-digest.test.ts

COD-8 add away digest

2026-06-19 17:58:06 -04:00

bash-tool-parser.test.ts

chore: bump version to 0.1486

2026-02-12 13:44:07 +01:00

buffer-accumulator.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

buffer-management.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

claude-permission-mode.test.ts

feat(claude): add 'auto' startup permission mode

2026-07-20 02:48:14 +02:00

claude-scrollback-strip.test.ts

fix(terminal): keep Claude scrollback reachable — strip alt-screen/3J/mouse for claude mode (v1.1.7)

2026-06-16 18:08:45 +02:00

cleanup-manager.test.ts

test: add unit tests for Debouncer, CleanupManager, and timer migration refactors

2026-03-01 16:50:23 +01:00

cli-commands.test.ts

fix: COD-29 fail closed for unauthenticated network binds

2026-06-08 11:01:34 -04:00

cod54-hook-event-auth.test.ts

Require the hook-event secret unconditionally, not only under a managed tunnel

2026-06-14 12:46:58 -04:00

codex-snapshot-replay.test.ts

fix(terminal): bound + harden xterm snapshot persistence

2026-06-11 10:16:47 +02:00

codex-terminal-output.test.ts

fix(codex): reassemble chunk-split sequences before the strip; mouse parity on replay

2026-06-10 22:47:02 +02:00

command-palette-ui.test.ts

fix(review): wire Session Manager to /api/sessions/unified contract, stop Ctrl+K PTY leak, finish shortcut registry (PR #146)

2026-07-12 19:06:12 +02:00

connection-indicator.test.ts

fix(review): WS state machine, per-tab supersede key, backoff, dot CSS (PR #149)

2026-07-12 18:42:36 +02:00

cron-service.test.ts

fix(review): harden cron security, session lifecycle, skip policy (PR #141)

2026-07-12 19:25:42 +02:00

cron-time.test.ts

refactor(cron): rename scheduler feature to cron

2026-06-29 11:35:56 +05:30

debouncer.test.ts

test: add unit tests for Debouncer, CleanupManager, and timer migration refactors

2026-03-01 16:50:23 +01:00

dependency-checker.test.ts

fix(doctor): correct Node minimum, drop phantom gemini, add pdftoppm, validate --category

2026-06-14 22:24:46 +02:00

dependency-report.test.ts

Add codeman doctor tool-dependency checker (COD-45)

2026-06-14 12:25:49 -04:00

dependency-security.test.ts

chore: COD-28 harden dependencies and public assets

2026-06-08 09:56:06 -04:00

docker-exec-options.test.ts

feat(docker): harden session mode + File Viewer button (v1.4.1)

2026-07-20 01:36:21 +02:00

docker-export.test.ts

feat(docker): export/import (move a container to another machine) + boot reaper

2026-07-19 17:38:01 +02:00

docker-hosts.test.ts

feat(docker): harden session mode + File Viewer button (v1.4.1)

2026-07-20 01:36:21 +02:00

document-conversion-limiter.test.ts

fix(attachments): harden document preview/thumbnail path (review of #120)

2026-06-14 08:43:57 +02:00

document-preview-cache-eviction.test.ts

fix(attachments): harden document preview/thumbnail path (review of #120)

2026-06-14 08:43:57 +02:00

document-preview-cache.test.ts

COD-38 document attachment previews + thumbnails (attachment cards)

2026-06-12 09:09:14 -04:00

document-thumbnailer.test.ts

fix(review): harden Codex generated-artifact attachment pipeline (PR #150)

2026-07-12 17:50:21 +02:00

edge-cases.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

effort-injection.test.ts

feat: inject effort as soft default via CLI flags instead of env var (#104)

2026-06-07 04:33:11 +02:00

file-link-click.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

file-stream-manager.test.ts

test(ci): run the unit suite in CI + frontend-syntax gate; green pre-existing test debt

2026-06-09 20:02:15 +02:00

frontend-public-tooling.test.ts

chore: COD-28 harden dependencies and public assets

2026-06-08 09:56:06 -04:00

gemini-mode.test.ts

feat: add Gemini run mode

2026-06-19 13:10:17 -04:00

generated-artifact-attachments.test.ts

fix(review): harden Codex generated-artifact attachment pipeline (PR #150)

2026-07-12 17:50:21 +02:00

heic-jpeg-core.test.ts

fix(review): worker-thread HEIC conversion with bomb guard, concurrency cap, and magic-byte routing (PR #151)

2026-07-12 18:06:59 +02:00

help-modal-shortcuts.test.ts

fix(merge): reconcile cross-PR test seams after #141/#145/#146 merges

2026-07-12 20:06:32 +02:00

hook-secret-selfheal.test.ts

fix(hooks): self-heal stale pre-secret hook configs so COD-91 doesn't 401 them

2026-06-14 22:35:29 +02:00

hooks-config.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

http-contract.test.ts

fix(api): close contract gaps found by post-merge adversarial audit

2026-06-10 03:41:04 +02:00

image-watcher.test.ts

COD-38 document attachment previews + thumbnails (attachment cards)

2026-06-12 09:09:14 -04:00

inline-rename.test.ts

fix(client): harden inline rename against CJK, mid-rename deletion, and double-fire

2026-05-12 09:57:08 +02:00

input-cjk.test.ts

fix(review): content-free IME traces, guarded onData self-heal, Android-only retap recovery (PR #143)

2026-07-12 12:42:14 +02:00

input-send-order.test.ts

COD-135 re-drive lost input ACK on a live WebSocket (durable-delivery gap)

2026-07-10 14:38:52 -04:00

integration-flows.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

keyboard-shortcuts.test.ts

fix(review): wire Session Manager to /api/sessions/unified contract, stop Ctrl+K PTY leak, finish shortcut registry (PR #146)

2026-07-12 19:06:12 +02:00

link-provider-regex.test.ts

fix(terminal): linear-time link-provider regex; always allow blob workers in CSP

2026-06-10 18:06:45 +02:00

lru-map.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

markdown-sanitizer.test.ts

fix(sanitizer): enforce the curated allowlist + make the test run order-independently

2026-06-14 22:21:13 +02:00

memory-leak-prevention.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

mobile-header-buttons-policy.test.ts

fix(review): rebuild Session Manager additions on the merged #146 implementation (PR #153)

2026-07-13 00:38:56 +02:00

multiuser-auth.test.ts

feat(multiuser): phase 2, multi-user auth pipeline

2026-07-20 03:26:21 +02:00

mux-factory.test.ts

chore: bump version to 0.1538

2026-02-18 12:51:35 +01:00

network-auth-policy.test.ts

fix: COD-29 harden downloads and extract auth policy

2026-06-08 11:01:34 -04:00

network-host-guard.test.ts

feat(docker): allowlist container-to-host gateway aliases in host guard

2026-07-19 15:32:45 +02:00

nice-wrapper.test.ts

chore: bump version to 0.1486

2026-02-12 13:44:07 +01:00

opencode-resize.test.ts

fix: address code review findings for OpenCode integration

2026-02-26 15:58:26 +01:00

operation-lightspeed.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

orchestrator-loop.test.ts

fix: patch 3 production bugs found during deep audit

2026-03-21 19:23:37 +01:00

orchestrator-planner.test.ts

feat: add Orchestrator Loop — phased plan execution with team agents

2026-03-21 07:20:18 +01:00

ownership-scoping.test.ts

feat(multiuser): phase 3, ownership threading + scoping

2026-07-20 04:02:46 +02:00

perf-browser.test.ts

test: COD-30 stabilize perf browser timing

2026-06-08 10:27:18 -04:00

perf-subagent-load.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

pty-interactive.test.ts

fix: bulletproof test safety — IS_TEST_MODE guards prevent tests from killing real tmux sessions

2026-02-12 18:26:16 +01:00

push-endpoint-validation.test.ts

fix(security): push-endpoint SSRF guard + tmux name validation; document tail-file roots

2026-06-09 20:02:17 +02:00

push-payload-host-title.test.ts

test: fix title tests for new host constructor arg + async renderIndexHtml

2026-06-08 18:01:20 +02:00

qr-auth.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

quick-start.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

ralph-config.test.ts

refactor: rename inner-loop-tracker to ralph-tracker with API improvements

2026-01-21 22:36:45 +01:00

ralph-integration.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

ralph-loop-deep.test.ts

fix: ralph tracker — 3 bugs: first-occurrence completion, double-counting, TodoWrite pattern

2026-02-19 14:00:10 +01:00

ralph-loop.test.ts

refactor: improve code quality with stricter TypeScript and memory leak prevention

2026-01-21 14:01:47 +01:00

ralph-prompt.test.ts

fix(terminal): linear-time link-provider regex; always allow blob workers in CSP

2026-06-10 18:06:45 +02:00

ralph-tracker.test.ts

test: add unit tests for Debouncer, CleanupManager, and timer migration refactors

2026-03-01 16:50:23 +01:00

reliable-input-dedup.test.ts

fix(input): durable exactly-once input delivery so a dropped link can't lose a prompt

2026-06-19 16:58:40 +02:00

remote-hosts.test.ts

fix(review): harden + wire remote-host SSH cases end-to-end (PR #145)

2026-07-12 19:49:58 +02:00

remote-ssh-options.test.ts

fix(review): harden + wire remote-host SSH cases end-to-end (PR #145)

2026-07-12 19:49:58 +02:00

render-index-html.test.ts

fix(web): address self-review findings on #105 (settings cache + brittle reveal)

2026-06-08 15:46:10 +02:00

respawn-adaptive-timing.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

respawn-analysis.md

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

respawn-controller.test.ts

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

respawn-health.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

respawn-metrics.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

respawn-patterns.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

respawn-pty-breaker.test.ts

fix(review): breaker reset semantics, trip observability, push template (PR #147)

2026-07-12 18:21:42 +02:00

respawn-scenarios.md

fix: use temp file for plan checker prompt to avoid E2BIG + fix cancel race condition

2026-01-25 07:52:40 +01:00

respawn-team-awareness.test.ts

test: add shared mock infrastructure and route tests (phase 7)

2026-03-01 14:33:18 +01:00

respawn-test-plan.md

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

run-mode-ui.test.ts

feat(docker): harden session mode + File Viewer button (v1.4.1)

2026-07-20 01:36:21 +02:00

scheduled-runs.test.ts

fix(api): close contract gaps found by post-merge adversarial audit

2026-06-10 03:41:04 +02:00

screenshot-capture.test.ts

chore: bump version to 0.1541

2026-02-18 18:14:13 +01:00

search-service.test.ts

COD-9 add cross-session search backend (GET /api/search) v1

2026-06-19 12:35:16 -04:00

security-regression.test.ts

test(ci): run the unit suite in CI + frontend-syntax gate; green pre-existing test debt

2026-06-09 20:02:15 +02:00

self-update.test.ts

feat(self-update): launchd-daemon supervisor — rootless restart on headless Macs

2026-06-10 17:08:36 +02:00

server-index-title.test.ts

fix(usage): address code-review findings in plan-usage telemetry

2026-06-14 07:33:52 +02:00

session-attachment-history.test.ts

fix(review): harden + wire remote-host SSH cases end-to-end (PR #145)

2026-07-12 19:49:58 +02:00

session-auto-resume.test.ts

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

session-cleanup.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

session-cli-builder.test.ts

COD-115 fix: scrub TMUX/TMUX_PANE so tmux-backed sessions don't crash-loop

2026-07-09 11:47:38 -04:00

session-listener-wiring.test.ts

fix(review): harden Codex generated-artifact attachment pipeline (PR #150)

2026-07-12 17:50:21 +02:00

session-manager.test.ts

fix(mobile): address review blockers on the touch-device change set

2026-06-10 04:07:26 +02:00

session-resize-arbitration.test.ts

feat(terminal): add forced redraw resize

2026-06-17 23:41:47 +08:00

session-state.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

session.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

setup.ts

docs+test: document Codex run mode in CLAUDE.md; make tests immune to CODEMAN_GESTURE

2026-06-10 16:23:57 +02:00

shortcut-registry-overlay.test.ts

fix(review): preserve shortcutOverrides across settings saves + keep help modal reachable (PR #146)

2026-07-12 19:58:32 +02:00

sse-events.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

sse-registry-parity.test.ts

test(ci): run the unit suite in CI + frontend-syntax gate; green pre-existing test debt

2026-06-09 20:02:15 +02:00

sse-subscription-filter.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

stale-expiration-map.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

state-store.test.ts

chore: version packages

2026-02-28 14:45:39 +01:00

string-utilities.test.ts

test: add global test setup with screen limits and reach 1337 tests

2026-01-22 11:30:10 +01:00

strip-ink-redraw-bloat.test.ts

test(routes): regression coverage for stripInkRedrawBloat

2026-05-12 10:11:47 +02:00

subagent-watcher.test.ts

fix(subagent-watcher): discover workflow-nested agents + harden meta→transcript upgrade

2026-06-15 01:43:15 +02:00

tab-overflow.test.ts

fix(tabs): re-evaluate auto-wrap on resize and on every full tab rebuild

2026-06-14 22:38:19 +02:00

task-queue.test.ts

perf: implement phase 1-3 performance optimizations

2026-02-28 17:39:44 +01:00

task-tracker.test.ts

perf: implement phase 1-3 performance optimizations

2026-02-28 17:39:44 +01:00

task.test.ts

test: add unit tests for Task class

2026-01-21 07:19:49 +01:00

team-watcher.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

templates.test.ts

fix(terminal): linear-time link-provider regex; always allow blob workers in CSP

2026-06-10 18:06:45 +02:00

terminal-buffer-flush.test.ts

COD-144 flush queued SSE output on empty buffer-load so new shells paint immediately

2026-07-10 14:39:19 -04:00

terminal-flush-budget.test.ts

fix(codex): smaller first-frame write budget + scroll-up grace for codex

2026-06-10 13:34:45 -04:00

terminal-history-schema.test.ts

COD-80 centralize terminal history/scrollback/buffer limits into config

2026-06-30 19:52:49 -04:00

terminal-history.test.ts

fix(review): clamp env-path trim below max; revert unwired scrollback raise (PR #138)

2026-07-12 12:39:46 +02:00

terminal-layout-css.test.ts

feat(terminal): tmux pane-buffer primitives and session/render reliability

2026-06-09 15:39:03 -04:00

terminal-parsing.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

terminal-touch-tap.test.ts

fix(terminal): restore Claude scroll-back on macOS trackpads (#154)

2026-07-16 09:33:39 +02:00

tmux-capture-color.test.ts

feat(terminal): tmux pane-buffer primitives and session/render reliability

2026-06-09 15:39:03 -04:00

tmux-capture-full-history.test.ts

fix(review): wire full-scrollback replay to an explicit ?full=1, dedup + bound the capture (PR #148)

2026-07-12 18:33:18 +02:00

tmux-manager.test.ts

fix(review): harden + wire remote-host SSH cases end-to-end (PR #145)

2026-07-12 19:49:58 +02:00

tmux-restart-recovery.test.ts

fix(review): harden + wire remote-host SSH cases end-to-end (PR #145)

2026-07-12 19:49:58 +02:00

tmux-scrollback-eol.test.ts

COD-138 normalize shell scrollback to CRLF so replay doesn't staircase

2026-07-10 11:14:26 -04:00

tmux-window-size-query.test.ts

fix(tmux): isolate sessions on a dedicated socket + raise pane nofile limit (fixes new-session crash after tmux upgrade) (#96)

2026-05-25 23:28:58 +02:00

transcript-watcher.test.ts

feat: add hook-based idle detection for respawn controller

2026-01-25 21:29:35 +01:00

types.test.ts

feat(multiuser): phase 2, multi-user auth pipeline

2026-07-20 03:26:21 +02:00

usage-limit-patterns.test.ts

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

usage-telemetry.test.ts

fix(usage): address code-review findings in plan-usage telemetry

2026-06-14 07:33:52 +02:00

user-store.test.ts

feat(multiuser): phase 1, user store, mode plumbing, CLI

2026-07-20 02:58:51 +02:00

validation-utilities.test.ts

test: add global test setup with screen limits and reach 1337 tests

2026-01-22 11:30:10 +01:00

webgl-fallback.test.ts

fix(review): make WebGL toggle per-device and fix sticky-marker semantics (PR #140)

2026-07-12 12:42:36 +02:00

workflow-run-watcher.test.ts

feat(ultracode): enrich live run tracking — real per-agent tokens/tools/state, readable title, blue connector line, click-to-open window

2026-06-18 10:00:04 +02:00

ws-connection-registry.test.ts

fix(review): WS state machine, per-tab supersede key, backoff, dot CSS (PR #149)

2026-07-12 18:42:36 +02:00

ws-reconnect-plan.test.ts

fix(review): WS state machine, per-tab supersede key, backoff, dot CSS (PR #149)

2026-07-12 18:42:36 +02:00

ws-state-lifecycle.test.ts

fix(review): WS state machine, per-tab supersede key, backoff, dot CSS (PR #149)

2026-07-12 18:42:36 +02:00