DevvynandClaude Opus 5.5 02e40f506b fix(docker): gate gh/az seeding on its switch; no shared git sign-in for non-admin clones ...

Addresses the review on #472.

- CRED_STORES: `.config/gh` and `.azure` now carry `enabledByEnv`
  (CODEMAN_AGENT_IMAGE_INSTALL_GH / _AZ), and resolveDockerCredentialArtifacts
  skips a store unless that variable is exactly `1`, read at container
  create. A host that merely has ~/.config/gh/hosts.yml or a plaintext MSAL
  cache no longer copies them into every case container. Tests: the default
  environment seeds neither even with the files present, and each store
  follows only its own switch.
- Multi-user mode: a non-admin's Clone Repo clone and preflight run with
  `git -c credential.helper=` (GIT_NO_CREDENTIAL_HELPERS, placed before the
  subcommand), so the server account's helpers are never lent to them.
  Verified against a real private repo that it also clears the URL-scoped
  credential.<url>.helper entries, and that public clones still work.
  Tests: the argv in test/git-clone.test.ts, and the route decision
  (non-admin cleared; admin and single-user kept) in
  test/routes/case-clone-credential-helpers.test.ts.
- Docs: recreate the case container to pick up seeds (docker/README.md,
  Docker-Cases wiki, docker-cases.md); the multi-user behaviour in
  docker/README.md and security-architecture.md; "functionally unchanged"
  instead of "unchanged" for an image built with both switches off
  (server.Dockerfile comment, README, changeset).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0167CiuzLrmjYWxwKp3rMWjw

2026-09-23 14:44:26 +08:00

..

_route-test-utils.ts

fix(security): scope the filesystem path picker per user in multi-user mode

2026-07-28 10:49:49 +02:00

agent-case-marker-routes.test.ts

feat(agent-cases): tag agent-spawned case dirs and sweep their leftovers

2026-09-07 19:09:24 +02:00

approval-routes.test.ts

chore: version packages

2026-08-17 01:46:48 +02:00

case-clone-credential-helpers.test.ts

fix(docker): gate gh/az seeding on its switch; no shared git sign-in for non-admin clones

2026-09-23 14:44:26 +08:00

case-clone-routes.test.ts

docs(test): name the real reason the suite could reach ~/.codeman

2026-09-04 13:50:22 +02:00

case-routes.test.ts

fix(review): harden + wire remote-host SSH cases end-to-end (PR #145)

2026-07-12 19:49:58 +02:00

custom-model-routes.test.ts

fix(custom-model): address fourth pre-merge review + merge upstream master (Ark0N)

2026-09-19 18:05:51 +08:00

external-cli-bypass-clamp.test.ts

feat(grok): add Grok Build (xAI) as a seventh CLI run mode

2026-08-23 08:39:03 +02:00

file-routes-attachment-path-guard.test.ts

feat(files): preview text files from outside the workspace, and stop routing them at a viewer that cannot read them

2026-08-16 18:12:00 +02:00

file-routes-preview-thumbnail.test.ts

fix(attachments): harden document preview/thumbnail path (review of #120)

2026-06-14 08:43:57 +02:00

file-routes-range.test.ts

feat(files): raise the download cap to 2GB and stream /api/download

2026-09-10 02:57:07 +02:00

file-routes-remote.test.ts

fix(files): fail closed on remote symlinks, guard PUT for remote cases, bound ssh fan-out

2026-09-14 23:42:06 +02:00

file-routes.test.ts

feat(files): let the path picker jump to a typed path and sort by name or date

2026-09-10 12:42:33 +08:00

file-search-mode.test.ts

feat(files): search the Files panel by name or path

2026-08-19 09:17:20 -04:00

file-write-routes.test.ts

feat(file-viewer): edit mode for text files (edit + save in the viewer)

2026-08-05 08:44:47 +02:00

hook-event-routes.test.ts

fix(session): learn the live Claude conversation from the CLI's own hook

2026-09-01 12:33:24 +08:00

mux-routes.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

orchestrator-routes.test.ts

test: repair route harness error rendering + stop AI-checker spawning real processes in tests (#97)

2026-05-25 23:55:57 +02:00

plan-routes.test.ts

fix(api): close contract gaps found by post-merge adversarial audit

2026-06-10 03:41:04 +02:00

push-routes.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

quick-start-custom-model.test.ts

feat(custom-model): warn before launching Claude on a model too small for its own overhead

2026-09-17 07:36:57 +08:00

ralph-routes.test.ts

feat(tabs): COD-359 add owner-scoped tab layouts

2026-08-23 14:46:10 -04:00

readmymind-routes.test.ts

feat: Read My Mind phase 2, the predictor and the brain button

2026-08-09 23:05:11 +02:00

reboot-restore-rebuild-failure.test.ts

docs(sessions): correct what a failed rebuild is actually likely to be

2026-09-17 08:26:29 +02:00

reboot-restore-routes.test.ts

fix(reboot-restore): the merge-time items from the #442 review

2026-09-18 13:46:04 +02:00

remote-discover-routes.test.ts

COD-105 discover + attach existing remote tmux sessions (detach-not-kill)

2026-07-17 15:49:24 -04:00

respawn-routes.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

scheduled-routes.test.ts

fix(multiuser): close cross-user web-layer scoping holes found in review

2026-07-20 12:33:12 +02:00

search-routes.test.ts

style: drop em-dashes from the prose added in this branch

2026-08-10 03:15:13 +02:00

session-custom-model.test.ts

fix(release): the seven findings from the pre-release review of the whole tree

2026-09-19 12:58:33 +02:00

session-input-delivery.test.ts

fix(api,ws): an input whose delivery fails can be retried instead of being lost

2026-08-07 01:36:33 +02:00

session-input-wait.test.ts

chore: version packages

2026-08-09 01:18:03 +02:00

session-name-routes.test.ts

feat(sessions): land auto-naming opt-in, in the prefix form, from the first user prompt only

2026-09-15 17:59:16 +02:00

session-order-routes.test.ts

feat(tabs): COD-359 add owner-scoped tab layouts

2026-08-23 14:46:10 -04:00

session-pin-routes.test.ts

Merge master into PR #157 (session manager polish)

2026-07-20 14:31:44 +02:00

session-remote-wake.test.ts

fix(remote): authorize the attach wake first; tell the caller what happened to its bytes

2026-09-19 11:39:50 +02:00

session-routes-agent-skill.test.ts

test: cover the skill CLI, the injection call site, and endpoints.md drift

2026-08-09 12:09:51 +02:00

session-routes-claude-last-response.test.ts

fix(web): show the whole last turn in the Claude response viewer's brief view

2026-09-10 12:45:16 +08:00

session-routes-codex-last-response.test.ts

fix(web): pin the Claude response viewer to the pane's own conversation

2026-08-03 14:53:42 +08:00

session-routes-external-cli-last-response.test.ts

fix(response-viewer): role on full-context blocks, divider ReDoS, pi mode (#326 follow-up)

2026-08-21 02:25:43 +02:00

session-routes-parent-lineage.test.ts

chore: version packages

2026-08-12 02:30:08 +02:00

session-routes-workspace-hooks.test.ts

fix(statusline): sticky telemetry collection, footer print-through, EOF fix

2026-09-07 20:37:29 -05:00

session-routes.test.ts

Merge pull request #439

2026-09-19 12:18:18 +02:00

session-wait-output-routes.test.ts

chore: version packages

2026-08-09 01:18:03 +02:00

session-wait-routes.test.ts

chore: version packages

2026-08-09 01:18:03 +02:00

status-telemetry-routes.test.ts

fix(statusline): print nothing instead of the bare word codeman

2026-09-14 15:59:00 +02:00

system-routes-settings-get-plan-usage-default.test.ts

fix(statusline): GET /api/settings never writes, and a save sends the collection switch only on a flip

2026-09-14 15:59:00 +02:00

system-routes-settings-partial-put.test.ts

fix(statusline): sticky telemetry collection, footer print-through, EOF fix

2026-09-07 20:37:29 -05:00

system-routes-tunnel-guard.test.ts

feat(tunnel,ui): purple tunnel button + opt-in unauthenticated tunnel with warning (v1.1.9)

2026-06-16 18:44:03 +02:00

system-routes.test.ts

fix(statusline): GET /api/settings never writes, and a save sends the collection switch only on a flip

2026-09-14 15:59:00 +02:00

system-span-displays.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

tab-layout-routes.test.ts

feat(tabs): COD-359 add owner-scoped tab layouts

2026-08-23 14:46:10 -04:00

team-routes.test.ts

chore: version packages

2026-03-01 17:34:09 +01:00

unified-sessions-routes.test.ts

fix(review): dedupe resumed-session rows + newest-wins lifecycle name/mode (PR #139)

2026-07-12 12:41:48 +02:00

voice-routes.test.ts

docs(test): name the real reason the suite could reach ~/.codeman

2026-09-04 13:50:22 +02:00

webview-routes.test.ts

fix(webview): refuse link-local and cloud-metadata targets on the resolved address

2026-09-04 15:21:12 +02:00

workflow-routes.test.ts

feat(ultracode): master-detail tab for Workflow/ultracode run visualization

2026-06-15 08:40:05 +02:00

ws-routes.test.ts

fix(input): recover when the seq counter falls behind the server watermark

2026-09-14 23:56:19 +02:00