Kai (Tam Nhu) Tran and GitHub
9a420988bc
fix(analytics): support sqlite3 path resolution on Windows and NixOS ( #1354 )
...
- Add CCS_SQLITE_BIN env-var override; validated with fs.realpathSync so
symlinks are fully resolved before prefix check
- Reject any override whose realpath does not start under a trusted system
prefix (prevents PATH-hijack reintroduction from #1347 )
- Add TRUSTED_PREFIX_UNIX covering /nix/store/, /opt/local/ (MacPorts),
/snap/, /run/current-system/ in addition to existing /usr/* and
/opt/homebrew/ entries
- Add TRUSTED_PREFIX_WINDOWS covering Program Files, System32, and the
Chocolatey managed bin dir (no canonical winget/Scoop path exists)
- Keep TRUSTED_SQLITE_PATHS_WINDOWS empty — Windows users set CCS_SQLITE_BIN
- Pass env as optional third param to querySqliteJson (backward compatible)
- Add 16-test suite covering env-var acceptance, /tmp rejection, symlink
traversal, NixOS paths, MacPorts, Windows fallback, and prefix safety
2026-05-23 17:29:52 -04:00
Tam Nhu Tran
fc5851e3a2
fix: ensure dashboard cliproxy restart waits for recovery
2026-05-22 13:37:21 -04:00
Kai (Tam Nhu) Tran and GitHub
fa17ad5af1
Merge pull request #1318 from kaitranntt/kai/feat/1255-analytics-profile-filter
...
feat: filter analytics dashboard by profile
2026-05-22 12:38:50 -04:00
Tam Nhu Tran
f1d655e425
feat: filter analytics by profile
2026-05-22 11:24:21 -04:00
Tam Nhu Tran
e2f2c7dc2e
fix: redact Codex diagnostics metadata
2026-05-22 11:12:20 -04:00
Kai (Tam Nhu) Tran and GitHub
3b2016462a
fix(persist): block codex claude settings bridge
2026-05-19 07:32:04 -04:00
Kai (Tam Nhu) Tran and GitHub
db175b6807
fix(security): require localhost for Claude extension /setup when dashboard auth is disabled ( #1270 )
...
* fix(security): restrict Claude extension setup endpoint
* style: apply prettier formatting
2026-05-16 13:58:57 -04:00
Kai (Tam Nhu) Tran and GitHub
14cbe8fb67
fix(security): reject 127-prefixed websocket origins ( #1263 )
...
* fix(security): reject 127-prefixed websocket origins
* style: apply prettier formatting
2026-05-16 13:56:10 -04:00
Kai (Tam Nhu) Tran and GitHub
349db830df
fix(settings): confine dashboard settings paths ( #1231 )
2026-05-12 18:13:26 -04:00
Kai (Tam Nhu) Tran and GitHub
d61469edcb
fix(config): bind dashboard to loopback by default
2026-05-12 10:59:49 -04:00
Kai (Tam Nhu) Tran and GitHub
f09cdfcf2b
fix(security): protect dashboard WebSocket upgrades
2026-05-12 10:42:05 -04:00
Kai (Tam Nhu) Tran and GitHub
bd588a271d
fix(codex): require local access for dashboard config routes
2026-05-12 10:24:25 -04:00
Kai (Tam Nhu) Tran and GitHub
29da75c0d4
fix(cliproxy): explain headless Codex OAuth recovery
...
Closes #1213
2026-05-11 14:25:34 -04:00
Tam Nhu Tran
a983332016
refactor(web-server): modularize shared-routes and Windows-aware symlink status
2026-05-10 22:15:33 -04:00
Tam Nhu Tran
8b34060294
fix(dashboard): show real shared plugin registry state
2026-05-09 03:18:20 -04:00
Tam Nhu Tran
2a422b3bd3
feat(dashboard): add shared resource controls
2026-05-09 02:29:08 -04:00
Tam Nhu Tran
64e1d1f815
feat(auth): add shared resource controls
2026-05-08 11:15:28 -04:00
Kai (Tam Nhu) Tran and GitHub
8b681df455
fix: route Cursor auth through browser polling
...
Closes #1194
2026-05-07 11:25:17 -04:00
Tam Nhu Tran
3862411bb7
fix(cliproxy): harden custom local port handling
2026-05-03 14:07:31 -04:00
walker1211 and GitHub
11b12f146d
fix(analytics): cache native Codex usage scans
...
Cache parsed native Codex rollout usage entries per file fingerprint to avoid repeated full-history JSONL parsing on dashboard refreshes.
Add regression coverage for cache reuse, invalid cache fallback, cliproxy cache separation, and scoped cache fixtures.
2026-05-02 21:16:07 -04:00
Tam Nhu Tran
31dc18657c
fix(cliproxy): fix base-config-loader __dirname path and stale mock.module paths
...
- base-config-loader.ts moved from src/cliproxy/ to src/cliproxy/config/,
so __dirname relative path needs one more .. to reach config/ dir
- Update mock.module paths for proxy-detector and routing-strategy
in non-colocated test files
2026-04-29 17:40:33 -04:00
Tam Nhu Tran
2c817fae48
fix(cliproxy): update remaining stale imports in non-colocated tests
...
Fix auth-token-manager, quota-response-cache, stats-fetcher,
and proxy-detector import paths in tests/ outside cliproxy.
2026-04-29 17:26:51 -04:00
Tam Nhu Tran
30f350a74f
fix(usage): preserve pricing overrides and legacy merges
2026-04-28 16:51:06 -04:00
Tam Nhu Tran
c7141b3d3a
fix(usage): honor provider-aware pricing precedence
2026-04-28 16:11:07 -04:00
Tam Nhu Tran
a38c1a75ba
feat: integrate models.dev pricing metadata
2026-04-28 14:50:26 -04:00
Tam Nhu Tran
4309db89c3
feat(cliproxy): add local session affinity controls
2026-04-28 12:17:26 -04:00
Tam Nhu Tran
b2e4be310d
fix(ui): tighten analytics session and query contracts
2026-04-27 12:30:56 -04:00
Tam Nhu Tran
e95b354297
fix(analytics): avoid bridge double counting in native collectors
2026-04-26 18:19:41 -04:00
Tam Nhu Tran
fe7cc6f9ba
fix(analytics): add native codex and droid collectors
2026-04-26 18:13:33 -04:00
Tam Nhu Tran
01fcd77573
fix(cli-proxy): preserve historical analytics across syncs
2026-04-26 16:52:12 -04:00
Tam Nhu Tran
69b75c0449
fix(cli-proxy): durable analytics history persistence and dedupe migration
2026-04-26 16:44:39 -04:00
Tam Nhu Tran
286b5781a7
fix: address analytics review follow-ups
2026-04-26 15:31:32 -04:00
Tam Nhu Tran
e2f1363708
fix(analytics): correct token accounting and usage aggregation
...
Align snapshot handling and UI contracts with the current analytics payloads.
2026-04-26 15:21:52 -04:00
Tam Nhu Tran
3d22bb07f0
fix(cliproxy): route plus backend to maintained fork
2026-04-23 21:25:29 -04:00
Tam Nhu Tran
5ff0370c1c
chore: merge origin/dev into pr-1061 fix branch
2026-04-22 22:38:20 -04:00
Tam Nhu Tran
c24033dc6b
fix(browser): preserve opt-in browser settings and env isolation
2026-04-22 22:35:02 -04:00
Tam Nhu Tran
e2ca197397
fix: preserve codex effort suffixes in dashboard profiles
2026-04-22 14:24:00 -04:00
Tam Nhu Tran
3e7ce1743b
hotfix: preserve plus fallback state and guard variant updates
2026-04-22 08:52:17 -04:00
Tam Nhu Tran
dd90ea7e2f
hotfix: close cliproxy plus fallback gaps
2026-04-22 08:52:17 -04:00
walker1211
96db93ee6c
Merge upstream/dev into feat/browser-mcp-hover-phase11e
2026-04-22 00:59:24 +08:00
Tam Nhu Tran
6604357b22
fix(browser): default browser tooling to manual opt-in
2026-04-20 21:15:31 -04:00
Tam Nhu Tran
039ed63a39
fix(browser): harden runtime policy edge cases
2026-04-20 21:01:19 -04:00
Tam Nhu Tran
7d02f55f9f
feat(browser): add explicit runtime policy controls
2026-04-20 21:01:19 -04:00
Tam Nhu Tran
b52503300b
fix(browser): bootstrap managed attach profile setup
2026-04-18 17:18:14 -04:00
walker1211
b90eae3892
feat(browser): 完成 browser MCP 第一阶段能力与配置打通
...
- 增加 browser_wait_for、browser_eval 及 click/query 扩展能力
- 打通 browser eval_mode 的配置、状态、启动链路与设置界面
- 补充浏览器相关测试隔离、文档和 CI parity 收尾调整
2026-04-18 00:29:43 +08:00
Tam Nhu Tran
4583ffa022
fix(browser): reset blank attach path to default
2026-04-16 19:00:14 -04:00
Tam Nhu Tran
4e30c9b080
feat(cli): add browser automation commands
2026-04-16 18:49:24 -04:00
Tam Nhu Tran
80847b4e6b
fix(cliproxy): align codex defaults with gpt-5.4
2026-04-16 03:41:38 -04:00
Tam Nhu Tran
1923d87a84
chore: merge dev into openai provider routing
2026-04-15 20:36:03 -04:00
Tam Nhu Tran
2d9f8c9695
feat(cliproxy): integrate missing provider support
2026-04-15 00:26:12 -04:00
