Codeman maintainer f496e35d71 feat(multiuser): phase 1, user store, mode plumbing, CLI ...

Opt-in multi-user foundation (off by default; no behavior change without
CODEMAN_MULTIUSER/--multiuser):

- src/config/multiuser.ts: isMultiUserMode(), getUserSpacesDir()/userCasesDir(),
  maxUsers(), maxSessionsPerUser() (per-user fairness cap = global/2).
- src/types/user.ts: UserRecord/PasswordHash/AuthUser/PublicUser/UserRole.
- src/user-store.ts: ~/.codeman/users.json (atomic tmp+rename, mode 0600, short
  TTL cache). scrypt hashing with per-record params + timingSafeEqual verify plus
  rehash detection; createUser/setPassword/updateUser/deleteUser with last-admin
  invariants; guarded deleteUserSpace (symlink + realpath confinement, section 8);
  pure section-6.3 resolvers (resolveClaudeModeForUser downgrades bypass to auto
  for non-granted users; canRunPrivilegedCommands); bootstrapInitialAdmin.
- src/cli.ts: "codeman users add|passwd|list|rm" (hidden prompt or
  --password-stdin) operating directly on users.json; a --multiuser flag on the
  web command.

Tests: test/user-store.test.ts (29 tests: hashing/verify/rehash, username
validation, atomic 0600 write, last-admin invariants, 6.3 resolvers,
delete-space guards, bootstrap).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-20 02:58:51 +02:00

..

config

feat(multiuser): phase 1, user store, mode plumbing, CLI

2026-07-20 02:58:51 +02:00

cron

fix(review): harden cron security, session lifecycle, skip policy (PR #141)

2026-07-12 19:25:42 +02:00

prompts

fix(terminal): linear-time link-provider regex; always allow blob workers in CSP

2026-06-10 18:06:45 +02:00

services

COD-121 unified session list: welcome list frontend (slice A, unit 2)

2026-07-12 12:19:10 -04:00

templates

fix(terminal): linear-time link-provider regex; always allow blob workers in CSP

2026-06-10 18:06:45 +02:00

types

feat(multiuser): phase 1, user store, mode plumbing, CLI

2026-07-20 02:58:51 +02:00

utils

fix(terminal): restore Claude scroll-back on macOS trackpads (#154)

2026-07-16 09:33:39 +02:00

web

feat(claude): add 'auto' startup permission mode

2026-07-20 02:48:14 +02:00

ai-checker-base.ts

chore: version packages

2026-03-27 01:43:59 +01:00

ai-idle-checker.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

ai-plan-checker.ts

chore: version packages

2026-05-31 05:17:07 +02:00

attachment-magic.ts

fix(review): harden Codex generated-artifact attachment pipeline (PR #150)

2026-07-12 17:50:21 +02:00

attachment-registry.ts

fix: COD-152 surface Codex generated artifacts

2026-07-10 20:54:41 -04:00

bash-tool-parser.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

cli.ts

feat(multiuser): phase 1, user store, mode plumbing, CLI

2026-07-20 02:58:51 +02:00

docker-export.ts

feat(docker): export/import (move a container to another machine) + boot reaper

2026-07-19 17:38:01 +02:00

docker-hosts.ts

feat(docker): harden session mode + File Viewer button (v1.4.1)

2026-07-20 01:36:21 +02:00

document-conversion-limiter.ts

fix(attachments): harden document preview/thumbnail path (review of #120)

2026-06-14 08:43:57 +02:00

document-preview-cache.ts

fix(attachments): harden document preview/thumbnail path (review of #120)

2026-06-14 08:43:57 +02:00

document-thumbnailer.ts

fix(review): harden Codex generated-artifact attachment pipeline (PR #150)

2026-07-12 17:50:21 +02:00

file-stream-manager.ts

fix(security): push-endpoint SSRF guard + tmux name validation; document tail-file roots

2026-06-09 20:02:17 +02:00

generated-artifact-attachments.ts

fix(review): harden Codex generated-artifact attachment pipeline (PR #150)

2026-07-12 17:50:21 +02:00

hooks-config.ts

fix(hooks): self-heal stale pre-secret hook configs so COD-91 doesn't 401 them

2026-06-14 22:35:29 +02:00

image-watcher.ts

COD-38 document attachment previews + thumbnails (attachment cards)

2026-06-12 09:09:14 -04:00

index.ts

COD-115 fix: scrub TMUX/TMUX_PANE so tmux-backed sessions don't crash-loop

2026-07-09 11:47:38 -04:00

mux-factory.ts

chore: bump version to 0.1538

2026-02-18 12:51:35 +01:00

mux-interface.ts

feat(docker): Docker session mode foundation (types, storage, tmux builders)

2026-07-19 15:09:48 +02:00

orchestrator-loop.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

orchestrator-planner.ts

feat: add Orchestrator Loop — phased plan execution with team agents

2026-03-21 07:20:18 +01:00

orchestrator-verifier.ts

chore: version packages

2026-03-27 01:43:59 +01:00

plan-orchestrator.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

push-store.ts

feat(web): session detach/undock + beta instance isolation (port 5000)

2026-06-06 03:53:54 +02:00

ralph-config.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

ralph-fix-plan-watcher.ts

refactor: split god files into focused modules (phase 4, steps 2-4)

2026-03-01 04:04:35 +01:00

ralph-loop.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

ralph-plan-tracker.ts

refactor: split god files into focused modules (phase 4, steps 2-4)

2026-03-01 04:04:35 +01:00

ralph-stall-detector.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

ralph-status-parser.ts

refactor: pass 3 — extract helpers, split long functions, deduplicate patterns

2026-03-26 22:50:25 +01:00

ralph-tracker.ts

fix: address PR review findings for Gemini run mode + Ralph todo-config

2026-06-25 00:26:06 +02:00

remote-hosts.ts

fix(review): harden + wire remote-host SSH cases end-to-end (PR #145)

2026-07-12 19:49:58 +02:00

respawn-adaptive-timing.ts

fix: code cleanup — path traversal, test leaks, dead code, consistency

2026-03-01 17:26:31 +01:00

respawn-controller.ts

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

respawn-health.ts

refactor: split god files into focused modules (phase 4, steps 2-4)

2026-03-01 04:04:35 +01:00

respawn-metrics.ts

refactor: split god files into focused modules (phase 4, steps 2-4)

2026-03-01 04:04:35 +01:00

respawn-patterns.ts

refactor: split god files into focused modules (phase 4, steps 2-4)

2026-03-01 04:04:35 +01:00

run-summary.ts

refactor: codebase cleanup — dead code, regex helper, centralized constants, tests

2026-03-07 07:33:44 +01:00

search-service.ts

COD-9 add cross-session search backend (GET /api/search) v1

2026-06-19 12:35:16 -04:00

session-attachment-history.ts

COD-39 attachment history drawer

2026-06-14 09:05:17 +02:00

session-auto-ops.ts

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

session-cli-builder.ts

feat(claude): add 'auto' startup permission mode

2026-07-20 02:48:14 +02:00

session-lifecycle-log.ts

feat(web): session detach/undock + beta instance isolation (port 5000)

2026-06-06 03:53:54 +02:00

session-manager.ts

refactor: pass envOverrides via tmux export instead of disk write

2026-04-24 09:49:52 +08:00

session-pty-exit-breaker.ts

COD-118 feat: circuit breaker bounding repeated non-zero interactive-PTY exits

2026-07-09 11:49:23 -04:00

session-task-cache.ts

refactor: split god files into focused modules (phase 4, steps 2-4)

2026-03-01 04:04:35 +01:00

session.ts

feat(claude): add 'auto' startup permission mode

2026-07-20 02:48:14 +02:00

state-store.ts

refactor(cron): rename scheduler feature to cron

2026-06-29 11:35:56 +05:30

subagent-watcher.ts

fix(subagent-watcher): discover workflow-nested agents + harden meta→transcript upgrade

2026-06-15 01:43:15 +02:00

task-queue.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

task-tracker.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

task.ts

refactor: pre-compile regex patterns and remove dead code

2026-01-24 04:36:18 +01:00

team-watcher.ts

chore: codebase cleanup — remove dead code, consolidate imports, extract constants

2026-03-12 15:50:40 +01:00

tmux-manager.ts

feat(claude): add 'auto' startup permission mode

2026-07-20 02:48:14 +02:00

transcript-watcher.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

tunnel-manager.ts

refactor: remove dead code and narrow internal exports (knip sweep)

2026-04-23 11:57:00 +02:00

types.ts

refactor: SSE event handlers, LLM context optimization, @fileoverview docs (#29)

2026-03-03 22:40:18 +01:00

usage-limit-patterns.ts

feat(session,mobile): auto-resume on usage limit + mobile view fixes

2026-06-10 20:41:34 +02:00

usage-telemetry.ts

fix(usage): address code-review findings in plan-usage telemetry

2026-06-14 07:33:52 +02:00

user-store.ts

feat(multiuser): phase 1, user store, mode plumbing, CLI

2026-07-20 02:58:51 +02:00

workflow-run-watcher.ts

feat(ultracode): enrich live run tracking — real per-agent tokens/tools/state, readable title, blue connector line, click-to-open window

2026-06-18 10:00:04 +02:00