Codeman maintainer e9f9497259 feat(docker): allowlist container-to-host gateway aliases in host guard ...

An in-container hook curl carries Host: host.docker.internal:<port> (the derived
CODEMAN_API_URL), so the always-on host guard must allow host.docker.internal /
host.containers.internal or every in-container hook is blocked 403. Exact-match
only; not a browser DNS-rebinding surface (resolves to the host only from inside
a container netns). Verified end-to-end: quick-start launches claude/shell in a
real container with the workspace bind-mounted and hooks scaffolded.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-19 15:32:45 +02:00

..

middleware

fix(auth): re-issue session cookie on each request (sliding expiry)

2026-07-03 18:24:24 +00:00

ports

Merge PR #141 from chatgptkrylor/feat/scheduler: recurring cron-style scheduled jobs

2026-07-12 20:01:16 +02:00

public

chore: version packages

2026-07-16 23:34:03 +02:00

routes

feat(docker): docker-hosts CRUD, docker-link, and quick-start branch

2026-07-19 15:28:44 +02:00

away-digest.ts

COD-8 add away digest

2026-06-19 17:58:06 -04:00

heic-jpeg-converter.ts

fix(review): worker-thread HEIC conversion with bomb guard, concurrency cap, and magic-byte routing (PR #151)

2026-07-12 18:06:59 +02:00

heic-jpeg-worker.ts

fix(review): worker-thread HEIC conversion with bomb guard, concurrency cap, and magic-byte routing (PR #151)

2026-07-12 18:06:59 +02:00

network-auth-policy.ts

feat(docker): allowlist container-to-host gateway aliases in host guard

2026-07-19 15:32:45 +02:00

paste-image-gc.ts

security(paste-image): harden against 7 findings from PR #84 review (#90)

2026-05-19 10:36:05 +02:00

plan-usage-latest.ts

feat(usage): replay last-known plan usage in the SSE init snapshot

2026-06-14 06:15:34 +02:00

respawn-event-wiring.ts

chore: version packages

2026-03-27 01:43:59 +01:00

route-error-handler.ts

test: repair route harness error rendering + stop AI-checker spawning real processes in tests (#97)

2026-05-25 23:55:57 +02:00

route-helpers.ts

feat(web): session detach/undock + beta instance isolation (port 5000)

2026-06-06 03:53:54 +02:00

schemas.ts

feat(docker): Docker session mode foundation (types, storage, tmux builders)

2026-07-19 15:09:48 +02:00

self-update.ts

feat(self-update): launchd-daemon supervisor — rootless restart on headless Macs

2026-06-10 17:08:36 +02:00

sensitive-path.ts

COD-37 add server-side attachment pipeline (registry, magic-link, path guard)

2026-06-11 10:27:09 +02:00

server.ts

feat(docker): thread SessionDocker through Session + recovery

2026-07-19 15:22:38 +02:00

session-listener-wiring.ts

Merge PR #150 from aakhter/cod-166-codex-generated-artifact-attachments: Codex generated artifacts as attachment cards

2026-07-12 20:08:32 +02:00

sse-events.ts

Merge PR #147 from aakhter/cod-168-pty-exit-breaker: scrub TMUX vars + PTY-exit circuit breaker (COD-115/COD-118)

2026-07-12 20:07:19 +02:00

sse-stream-manager.ts

feat(sse): per-client live subscription filter (#86)

2026-05-17 05:56:53 +02:00

ws-connection-registry.ts

fix(review): WS state machine, per-tab supersede key, backoff, dot CSS (PR #149)

2026-07-12 18:42:36 +02:00