Aamer Akhter f0f43ddbad Require the hook-event secret unconditionally, not only under a managed tunnel ...

COD-54 gated the /api/hook-event + /api/status-telemetry localhost bypass
behind the shared X-Codeman-Hook-Secret only WHILE a managed tunnel was
running, keeping a plain localhost bypass otherwise. But Codeman can't detect
a user's OWN loopback reverse proxy (their own `cloudflared --url`,
`tailscale serve`, nginx -> 127.0.0.1), which proxies internet traffic into
the loopback origin with req.ip === 127.0.0.1 — so that setup kept the unsafe
plain bypass.

Require the secret on the loopback bypass unconditionally. Managed-session
hooks already always present it (X-Codeman-Hook-Secret from
$CODEMAN_HOOK_SECRET_FILE, generated for every instance), so the legitimate
hook channel is unaffected; only the previously-unguarded own-proxy path is
now rejected. Drops the now-unused getTunnelRunning param from
registerAuthMiddleware.

Tests: cod54-hook-event-auth (tunnel-down now also requires the secret, plus
a good-secret positive case); auth-security (hook tests present the secret to
reach schema validation).

2026-06-14 12:46:58 -04:00

..

config

fix(web): address self-review findings on #103 (master-safe defaults + hardening)

2026-06-08 15:41:46 +02:00

mobile

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

mocks

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

routes

Merge PR #120: document attachment previews + thumbnails (COD-38)

2026-06-14 08:49:36 +02:00

utils

test: de-flake StaleExpirationMap age/TTL timing assertions for CI

2026-06-10 01:38:40 +02:00

ai-idle-checker.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

api-generate-plan.test.ts

chore: bump version to 0.1402

2026-01-27 23:15:25 +01:00

api-responses.test.ts

test(ci): run the unit suite in CI + frontend-syntax gate; green pre-existing test debt

2026-06-09 20:02:15 +02:00

attachment-magic.test.ts

COD-37 add server-side attachment pipeline (registry, magic-link, path guard)

2026-06-11 10:27:09 +02:00

auth-security.test.ts

Require the hook-event secret unconditionally, not only under a managed tunnel

2026-06-14 12:46:58 -04:00

bash-tool-parser.test.ts

chore: bump version to 0.1486

2026-02-12 13:44:07 +01:00

buffer-accumulator.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

buffer-management.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

cleanup-manager.test.ts

test: add unit tests for Debouncer, CleanupManager, and timer migration refactors

2026-03-01 16:50:23 +01:00

cli-commands.test.ts

fix: COD-29 fail closed for unauthenticated network binds

2026-06-08 11:01:34 -04:00

cod54-hook-event-auth.test.ts

Require the hook-event secret unconditionally, not only under a managed tunnel

2026-06-14 12:46:58 -04:00

codex-snapshot-replay.test.ts

fix(terminal): bound + harden xterm snapshot persistence

2026-06-11 10:16:47 +02:00

codex-terminal-output.test.ts

fix(codex): reassemble chunk-split sequences before the strip; mouse parity on replay

2026-06-10 22:47:02 +02:00

debouncer.test.ts

test: add unit tests for Debouncer, CleanupManager, and timer migration refactors

2026-03-01 16:50:23 +01:00

dependency-security.test.ts

chore: COD-28 harden dependencies and public assets

2026-06-08 09:56:06 -04:00

document-conversion-limiter.test.ts

fix(attachments): harden document preview/thumbnail path (review of #120)

2026-06-14 08:43:57 +02:00

document-preview-cache-eviction.test.ts

fix(attachments): harden document preview/thumbnail path (review of #120)

2026-06-14 08:43:57 +02:00

document-preview-cache.test.ts

COD-38 document attachment previews + thumbnails (attachment cards)

2026-06-12 09:09:14 -04:00

document-thumbnailer.test.ts

COD-38 document attachment previews + thumbnails (attachment cards)

2026-06-12 09:09:14 -04:00

edge-cases.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

effort-injection.test.ts

feat: inject effort as soft default via CLI flags instead of env var (#104)

2026-06-07 04:33:11 +02:00

file-link-click.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

file-stream-manager.test.ts

test(ci): run the unit suite in CI + frontend-syntax gate; green pre-existing test debt

2026-06-09 20:02:15 +02:00

frontend-public-tooling.test.ts

chore: COD-28 harden dependencies and public assets

2026-06-08 09:56:06 -04:00

hooks-config.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

http-contract.test.ts

fix(api): close contract gaps found by post-merge adversarial audit

2026-06-10 03:41:04 +02:00

image-watcher.test.ts

COD-38 document attachment previews + thumbnails (attachment cards)

2026-06-12 09:09:14 -04:00

inline-rename.test.ts

fix(client): harden inline rename against CJK, mid-rename deletion, and double-fire

2026-05-12 09:57:08 +02:00

integration-flows.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

link-provider-regex.test.ts

fix(terminal): linear-time link-provider regex; always allow blob workers in CSP

2026-06-10 18:06:45 +02:00

lru-map.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

memory-leak-prevention.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

mux-factory.test.ts

chore: bump version to 0.1538

2026-02-18 12:51:35 +01:00

network-auth-policy.test.ts

fix: COD-29 harden downloads and extract auth policy

2026-06-08 11:01:34 -04:00

network-host-guard.test.ts

fix(security): block DNS rebinding + cross-site CSRF + subagent-panel XSS

2026-06-09 03:19:51 +02:00

nice-wrapper.test.ts

chore: bump version to 0.1486

2026-02-12 13:44:07 +01:00

opencode-resize.test.ts

fix: address code review findings for OpenCode integration

2026-02-26 15:58:26 +01:00

operation-lightspeed.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

orchestrator-loop.test.ts

fix: patch 3 production bugs found during deep audit

2026-03-21 19:23:37 +01:00

orchestrator-planner.test.ts

feat: add Orchestrator Loop — phased plan execution with team agents

2026-03-21 07:20:18 +01:00

perf-browser.test.ts

test: COD-30 stabilize perf browser timing

2026-06-08 10:27:18 -04:00

perf-subagent-load.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

pty-interactive.test.ts

fix: bulletproof test safety — IS_TEST_MODE guards prevent tests from killing real tmux sessions

2026-02-12 18:26:16 +01:00

push-endpoint-validation.test.ts

fix(security): push-endpoint SSRF guard + tmux name validation; document tail-file roots

2026-06-09 20:02:17 +02:00

push-payload-host-title.test.ts

test: fix title tests for new host constructor arg + async renderIndexHtml

2026-06-08 18:01:20 +02:00

qr-auth.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

quick-start.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

ralph-config.test.ts

refactor: rename inner-loop-tracker to ralph-tracker with API improvements

2026-01-21 22:36:45 +01:00

ralph-integration.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

ralph-loop-deep.test.ts

fix: ralph tracker — 3 bugs: first-occurrence completion, double-counting, TodoWrite pattern

2026-02-19 14:00:10 +01:00

ralph-loop.test.ts

refactor: improve code quality with stricter TypeScript and memory leak prevention

2026-01-21 14:01:47 +01:00

ralph-prompt.test.ts

fix(terminal): linear-time link-provider regex; always allow blob workers in CSP

2026-06-10 18:06:45 +02:00

ralph-tracker.test.ts

test: add unit tests for Debouncer, CleanupManager, and timer migration refactors

2026-03-01 16:50:23 +01:00

render-index-html.test.ts

fix(web): address self-review findings on #105 (settings cache + brittle reveal)

2026-06-08 15:46:10 +02:00

respawn-adaptive-timing.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

respawn-analysis.md

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

respawn-controller.test.ts

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

respawn-health.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

respawn-metrics.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

respawn-patterns.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

respawn-scenarios.md

fix: use temp file for plan checker prompt to avoid E2BIG + fix cancel race condition

2026-01-25 07:52:40 +01:00

respawn-team-awareness.test.ts

test: add shared mock infrastructure and route tests (phase 7)

2026-03-01 14:33:18 +01:00

respawn-test-plan.md

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

run-mode-ui.test.ts

fix(codex): review fixes — envelope handling, mode guards, UI parity

2026-06-10 16:16:20 +02:00

scheduled-runs.test.ts

fix(api): close contract gaps found by post-merge adversarial audit

2026-06-10 03:41:04 +02:00

screenshot-capture.test.ts

chore: bump version to 0.1541

2026-02-18 18:14:13 +01:00

security-regression.test.ts

test(ci): run the unit suite in CI + frontend-syntax gate; green pre-existing test debt

2026-06-09 20:02:15 +02:00

self-update.test.ts

feat(self-update): launchd-daemon supervisor — rootless restart on headless Macs

2026-06-10 17:08:36 +02:00

server-index-title.test.ts

fix(usage): address code-review findings in plan-usage telemetry

2026-06-14 07:33:52 +02:00

session-attachment-history.test.ts

fix(attachments): address review findings on attachment history drawer (#121)

2026-06-14 09:30:01 +02:00

session-auto-resume.test.ts

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

session-cleanup.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

session-manager.test.ts

fix(mobile): address review blockers on the touch-device change set

2026-06-10 04:07:26 +02:00

session-resize-arbitration.test.ts

revert(session): drop the cross-device needsRefresh buffer reload

2026-06-10 20:50:24 +02:00

session-state.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

session.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

setup.ts

docs+test: document Codex run mode in CLAUDE.md; make tests immune to CODEMAN_GESTURE

2026-06-10 16:23:57 +02:00

sse-events.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

sse-registry-parity.test.ts

test(ci): run the unit suite in CI + frontend-syntax gate; green pre-existing test debt

2026-06-09 20:02:15 +02:00

sse-subscription-filter.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

stale-expiration-map.test.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

state-store.test.ts

chore: version packages

2026-02-28 14:45:39 +01:00

string-utilities.test.ts

test: add global test setup with screen limits and reach 1337 tests

2026-01-22 11:30:10 +01:00

strip-ink-redraw-bloat.test.ts

test(routes): regression coverage for stripInkRedrawBloat

2026-05-12 10:11:47 +02:00

subagent-watcher.test.ts

fix: repair 15 pre-existing subagent-watcher test failures

2026-03-12 16:08:39 +01:00

task-queue.test.ts

perf: implement phase 1-3 performance optimizations

2026-02-28 17:39:44 +01:00

task-tracker.test.ts

perf: implement phase 1-3 performance optimizations

2026-02-28 17:39:44 +01:00

task.test.ts

test: add unit tests for Task class

2026-01-21 07:19:49 +01:00

team-watcher.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

templates.test.ts

fix(terminal): linear-time link-provider regex; always allow blob workers in CSP

2026-06-10 18:06:45 +02:00

terminal-flush-budget.test.ts

fix(codex): smaller first-frame write budget + scroll-up grace for codex

2026-06-10 13:34:45 -04:00

terminal-layout-css.test.ts

feat(terminal): tmux pane-buffer primitives and session/render reliability

2026-06-09 15:39:03 -04:00

terminal-parsing.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

tmux-capture-color.test.ts

feat(terminal): tmux pane-buffer primitives and session/render reliability

2026-06-09 15:39:03 -04:00

tmux-manager.test.ts

feat(terminal): snapshot-replay on tab switches (xterm serialize + live pane capture)

2026-06-10 19:56:30 -04:00

tmux-restart-recovery.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

tmux-window-size-query.test.ts

fix(tmux): isolate sessions on a dedicated socket + raise pane nofile limit (fixes new-session crash after tmux upgrade) (#96)

2026-05-25 23:28:58 +02:00

transcript-watcher.test.ts

feat: add hook-based idle detection for respawn controller

2026-01-25 21:29:35 +01:00

types.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

usage-limit-patterns.test.ts

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

usage-telemetry.test.ts

fix(usage): address code-review findings in plan-usage telemetry

2026-06-14 07:33:52 +02:00

validation-utilities.test.ts

test: add global test setup with screen limits and reach 1337 tests

2026-01-22 11:30:10 +01:00

webgl-fallback.test.ts

fix(renderer): WebGL longtask fallback hardening (#91)

2026-05-19 11:43:36 +02:00