Codeman maintainer a0ac10a07c feat(tunnel,ui): purple tunnel button + opt-in unauthenticated tunnel with warning (v1.1.9) ...

- Daylight Blue: Cloudflare Tunnel welcome button is now purple (was orange),
  keeping Claude blue / Tunnel purple / OpenCode green distinct.
- Allow enabling the Cloudflare tunnel with no CODEMAN_PASSWORD via the UI: the
  toggle now pops a security confirm dialog and, on confirm, sends an explicit
  per-request acknowledgeUnauthTunnel:true (new action field, never persisted).
  Server logs a loud warning whenever a passwordless public tunnel starts.
  curl/API/CLI stay refused unless password/env/flag — no accidental exposure.

Tests: extend test/routes/system-routes-tunnel-guard.test.ts (ack allows + not
persisted; ack:false still refuses). Verified e2e on an isolated instance
(purple button, confirm dialog, retry carries the flag, no real tunnel opened).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-16 18:44:03 +02:00

..

config

feat(ultracode): master-detail tab for Workflow/ultracode run visualization

2026-06-15 08:40:05 +02:00

prompts

fix(terminal): linear-time link-provider regex; always allow blob workers in CSP

2026-06-10 18:06:45 +02:00

templates

fix(terminal): linear-time link-provider regex; always allow blob workers in CSP

2026-06-10 18:06:45 +02:00

types

feat(ultracode): master-detail tab for Workflow/ultracode run visualization

2026-06-15 08:40:05 +02:00

utils

Add codeman doctor tool-dependency checker (COD-45)

2026-06-14 12:25:49 -04:00

web

feat(tunnel,ui): purple tunnel button + opt-in unauthenticated tunnel with warning (v1.1.9)

2026-06-16 18:44:03 +02:00

ai-checker-base.ts

chore: version packages

2026-03-27 01:43:59 +01:00

ai-idle-checker.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

ai-plan-checker.ts

chore: version packages

2026-05-31 05:17:07 +02:00

attachment-magic.ts

COD-37 add server-side attachment pipeline (registry, magic-link, path guard)

2026-06-11 10:27:09 +02:00

attachment-registry.ts

fix(attachments): harden registry + close magic-link injection vector

2026-06-11 10:27:09 +02:00

bash-tool-parser.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

cli.ts

fix(doctor): correct Node minimum, drop phantom gemini, add pdftoppm, validate --category

2026-06-14 22:24:46 +02:00

document-conversion-limiter.ts

fix(attachments): harden document preview/thumbnail path (review of #120)

2026-06-14 08:43:57 +02:00

document-preview-cache.ts

fix(attachments): harden document preview/thumbnail path (review of #120)

2026-06-14 08:43:57 +02:00

document-thumbnailer.ts

fix(attachments): harden document preview/thumbnail path (review of #120)

2026-06-14 08:43:57 +02:00

file-stream-manager.ts

fix(security): push-endpoint SSRF guard + tmux name validation; document tail-file roots

2026-06-09 20:02:17 +02:00

hooks-config.ts

fix(hooks): self-heal stale pre-secret hook configs so COD-91 doesn't 401 them

2026-06-14 22:35:29 +02:00

image-watcher.ts

COD-38 document attachment previews + thumbnails (attachment cards)

2026-06-12 09:09:14 -04:00

index.ts

refactor: consolidate ~70 scattered constants into 6 new config files (phase 6)

2026-03-01 13:19:16 +01:00

mux-factory.ts

chore: bump version to 0.1538

2026-02-18 12:51:35 +01:00

mux-interface.ts

feat(codex): add Codex (OpenAI CLI) run-mode foundation

2026-06-10 09:34:52 -04:00

orchestrator-loop.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

orchestrator-planner.ts

feat: add Orchestrator Loop — phased plan execution with team agents

2026-03-21 07:20:18 +01:00

orchestrator-verifier.ts

chore: version packages

2026-03-27 01:43:59 +01:00

plan-orchestrator.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

push-store.ts

feat(web): session detach/undock + beta instance isolation (port 5000)

2026-06-06 03:53:54 +02:00

ralph-config.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

ralph-fix-plan-watcher.ts

refactor: split god files into focused modules (phase 4, steps 2-4)

2026-03-01 04:04:35 +01:00

ralph-loop.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

ralph-plan-tracker.ts

refactor: split god files into focused modules (phase 4, steps 2-4)

2026-03-01 04:04:35 +01:00

ralph-stall-detector.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

ralph-status-parser.ts

refactor: pass 3 — extract helpers, split long functions, deduplicate patterns

2026-03-26 22:50:25 +01:00

ralph-tracker.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

respawn-adaptive-timing.ts

fix: code cleanup — path traversal, test leaks, dead code, consistency

2026-03-01 17:26:31 +01:00

respawn-controller.ts

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

respawn-health.ts

refactor: split god files into focused modules (phase 4, steps 2-4)

2026-03-01 04:04:35 +01:00

respawn-metrics.ts

refactor: split god files into focused modules (phase 4, steps 2-4)

2026-03-01 04:04:35 +01:00

respawn-patterns.ts

refactor: split god files into focused modules (phase 4, steps 2-4)

2026-03-01 04:04:35 +01:00

run-summary.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

session-attachment-history.ts

COD-39 attachment history drawer

2026-06-14 09:05:17 +02:00

session-auto-ops.ts

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

session-cli-builder.ts

fix(security): deliver the hook secret to hooks + isolate its rate-limit bucket

2026-06-10 22:31:09 +02:00

session-lifecycle-log.ts

feat(web): session detach/undock + beta instance isolation (port 5000)

2026-06-06 03:53:54 +02:00

session-manager.ts

refactor: pass envOverrides via tmux export instead of disk write

2026-04-24 09:49:52 +08:00

session-task-cache.ts

refactor: split god files into focused modules (phase 4, steps 2-4)

2026-03-01 04:04:35 +01:00

session.ts

fix(terminal): keep Claude scrollback reachable — strip alt-screen/3J/mouse for claude mode (v1.1.7)

2026-06-16 18:08:45 +02:00

state-store.ts

fix(state-store): scope legacy ~/.claudeman migration to the default instance

2026-06-06 04:06:29 +02:00

subagent-watcher.ts

fix(subagent-watcher): discover workflow-nested agents + harden meta→transcript upgrade

2026-06-15 01:43:15 +02:00

task-queue.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

task-tracker.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

task.ts

refactor: pre-compile regex patterns and remove dead code

2026-01-24 04:36:18 +01:00

team-watcher.ts

chore: codebase cleanup — remove dead code, consolidate imports, extract constants

2026-03-12 15:50:40 +01:00

tmux-manager.ts

feat(terminal): snapshot-replay on tab switches (xterm serialize + live pane capture)

2026-06-10 19:56:30 -04:00

transcript-watcher.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

tunnel-manager.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

types.ts

refactor: SSE event handlers, LLM context optimization, @fileoverview docs (#29)

2026-03-03 22:40:18 +01:00

usage-limit-patterns.ts

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

usage-telemetry.ts

fix(usage): address code-review findings in plan-usage telemetry

2026-06-14 07:33:52 +02:00

workflow-run-watcher.ts

fix(ultracode): floating windows pop for LIVE runs (watch transcript tree)

2026-06-15 22:20:52 +02:00