Commit Graph
4153 Commits
Author SHA1 Message Date
Kai (Tam Nhu) TranandGitHub 6ed9e097e7 hotfix: sync Docker release publishing fix to dev
Refs #1400
2026-05-29 10:33:55 -04:00
github-actions[bot] b37255ec35 chore(release): 8.1.1-dev.1 2026-05-29 14:23:36 +00:00
Kai (Tam Nhu) TranandGitHub 0f0ad4e6ed fix: normalize Codex provider requests
Fixes #1399
Fixes #1406
2026-05-29 10:19:51 -04:00
github-actions[bot] 065df76820 chore(release): 8.1.0-dev.12 2026-05-29 02:41:12 +00:00
Kai (Tam Nhu) TranandGitHub 8e228a2cda Merge pull request #1405 from kaitranntt/kai/fix/1404-bare-claude-subcommands
fix: forward bare Claude subcommands through the default profile
2026-05-28 22:37:41 -04:00
Tam Nhu Tran 3fbf850471 fix: forward bare Claude subcommands through the default profile
`ccs agents` exited with "Profile not found: agents" instead of opening
the Claude agent view. The first positional token was treated as a
profile name, so `detectProfileType` threw for any bare Claude subcommand
that is not also a profile. `ccs <profile> agents` (#1218) and
`ccs default agents` already worked; only the bare form was unrouted.

On the profile-not-found path, reroute documented Claude subcommands
(agents, mcp, plugin, project, setup-token, auto-mode, remote-control,
ultrareview, upgrade, install) through the default profile so they launch
`claude <subcommand>` — where the existing launcher already strips
interactive-session args. Gated to the claude target so codex/droid keep
their own subcommand routing, and only reached when no profile of that
name exists, so a real configured profile still wins. CCS commands that
shadow Claude subcommands (doctor, update, auth) are intercepted earlier
by the root-command router and are unaffected.

Closes #1404
2026-05-28 22:21:26 -04:00
github-actions[bot] 88b8ce7a5e chore(release): 8.1.0-dev.11 2026-05-29 02:11:44 +00:00
Halil ErtekinandGitHub f42aee9a20 fix: handle system messages in OpenAI proxy (#1403) 2026-05-28 22:08:07 -04:00
github-actions[bot] e22424097e chore(release): 8.1.0-dev.10 2026-05-27 15:18:13 +00:00
Kai (Tam Nhu) TranandGitHub d7d5ad2ad2 fix: time out stalled CLIProxy response streams 2026-05-27 11:14:40 -04:00
github-actions[bot] b4a81327b2 chore(release): 8.1.0-dev.9 2026-05-27 14:16:37 +00:00
Kai (Tam Nhu) TranandGitHub 5f1976f69c fix: add CLIProxy account reauthentication 2026-05-27 10:13:03 -04:00
github-actions[bot] d212c72ad8 chore(release): 8.1.0-dev.8 2026-05-27 12:31:40 +00:00
Kai (Tam Nhu) TranandGitHub 52a427a7a3 fix(ci): close dev-released issues on stable release (#1396) 2026-05-27 08:28:01 -04:00
github-actions[bot] aecd8beb54 chore(release): 8.1.0-dev.7 2026-05-24 16:37:11 +00:00
Kai (Tam Nhu) TranandGitHub f1ba01334a Merge pull request #1392 from kaitranntt/kai/fix/1390-analytics-disclaimer-shrink
fix(analytics): tighten profile-aware top bar (disclaimer + trigger + timestamp)
2026-05-24 12:33:44 -04:00
Tam Nhu Tran bfa4c704eb fix(analytics): tighten top-bar layout (single-line trigger, grouped cluster, compact timestamp)
Three design taste fixes that ride on top of the disclaimer collapse:

- Single-line profile trigger: render only `option.label` in the
  Select trigger; keep label+description in the open menu where the
  description earns its keep. Removes the two-line trigger that broke
  the row baseline (taller pill, vertical-center cascade).
- Group Select + Info icon in an `inline-flex … shrink-0` cluster so
  they wrap as a single unit and the icon never orphans onto a second
  row under the refresh button.
- Compact timestamp: "Updated less than a minute ago" → "1m ago"
  rendered in font-mono. Full phrase preserved via `title`
  attribute. Drops the localized prefix into a tooltip-only context.
- Trigger width trimmed 190px → 170px since it no longer needs to fit
  a description line.
2026-05-24 11:34:57 -04:00
Tam Nhu Tran 9130c7d869 fix(analytics): collapse profile-scope disclaimer into tooltip icon
The disclaimer paragraph rendered as a two-line block under the
controls row, eating vertical real-estate while the cards stayed
empty. Replace it with a small Info icon beside the profile
dropdown that surfaces the same copy in a tooltip on hover/focus.

- Same copy preserved verbatim; no informational loss
- Icon only renders when a non-All profile is selected
- Reclaims ~32px of vertical space on the analytics header

Closes #1390
2026-05-23 23:40:02 -04:00
github-actions[bot] 0a482bd2d3 chore(release): 8.1.0-dev.6 2026-05-24 02:41:07 +00:00
Kai (Tam Nhu) TranandGitHub 88fbac3a32 fix(channels): avoid secrets in --set-token argv (#1389) 2026-05-23 22:37:55 -04:00
Kai (Tam Nhu) TranandGitHub fec84417a6 fix(web): avoid runtime proxy probes on public masked settings route (#1388) 2026-05-23 22:37:49 -04:00
Kai (Tam Nhu) TranandGitHub b35a23a6e4 fix: reject unsupported image analysis backends (#1387)
* fix: reject unsupported image analysis backends

* style: apply prettier formatting
2026-05-23 22:37:44 -04:00
Kai (Tam Nhu) TranandGitHub 4cf840ea0a fix(cliproxy): prevent management key leak on runtime proxy overrides (#1386)
* fix(cliproxy): clear yaml management key on runtime overrides

* style: apply prettier formatting
2026-05-23 22:37:39 -04:00
github-actions[bot] 2237011b59 chore(release): 8.1.0-dev.5 2026-05-24 02:14:01 +00:00
Kai (Tam Nhu) TranandGitHub ba887e012a fix(cursor-daemon): widen safeResolve type for daemonToken (#1385)
* fix(cursor-daemon): auto-generate token + expose for callers

PRs #1373/#1377 gated cursor daemon endpoints behind a token check, but
startDaemon() did not generate or expose a token. Health-check probing
during startup then 401'd against the new auth, so startDaemon waited 30s
then reported failure. Same for tests asserting /404 and validation
behavior — they couldn't reach the downstream logic past the 401 gate.

- Auto-generate a 32-byte hex token in startDaemon when caller did not
  provide one
- Return daemonToken in startDaemon result so callers/tests can attach it
- Update integration tests to include x-ccs-cursor-token header

* fix(cursor-daemon): widen safeResolve type for daemonToken field
2026-05-23 22:09:53 -04:00
Kai (Tam Nhu) TranandGitHub b7d5ce178a fix(cursor-daemon): auto-generate token + expose for callers (#1384)
PRs #1373/#1377 gated cursor daemon endpoints behind a token check, but
startDaemon() did not generate or expose a token. Health-check probing
during startup then 401'd against the new auth, so startDaemon waited 30s
then reported failure. Same for tests asserting /404 and validation
behavior — they couldn't reach the downstream logic past the 401 gate.

- Auto-generate a 32-byte hex token in startDaemon when caller did not
  provide one
- Return daemonToken in startDaemon result so callers/tests can attach it
- Update integration tests to include x-ccs-cursor-token header
2026-05-23 22:07:15 -04:00
Kai (Tam Nhu) TranandGitHub b63943eb45 fix(browser): track explicit devtools_port from config (#1383)
#1369 unconditionally set hasExplicitDevtoolsPort=false for config-attach,
which broke users who explicitly set devtools_port in config. Now track
whether config.claude.devtools_port was actually provided.
2026-05-23 21:55:02 -04:00
Kai (Tam Nhu) TranandGitHub f985cec3ff fix(browser): avoid implicit explicit devtools port for config attach (#1369)
* fix(browser): avoid implicit explicit devtools port for config attach

* style: apply prettier formatting
2026-05-23 21:46:04 -04:00
Kai (Tam Nhu) TranandGitHub e59ee6df79 docs(docker): avoid exposing dashboard password in examples (#1382) 2026-05-23 21:45:17 -04:00
Kai (Tam Nhu) TranandGitHub 7ccea955ad docs(docker): harden remote token migration staging (#1381) 2026-05-23 21:45:15 -04:00
Kai (Tam Nhu) TranandGitHub 55cd78bce4 fix: create explicit CODEX_HOME with secure permissions (#1380) 2026-05-23 21:45:12 -04:00
Kai (Tam Nhu) TranandGitHub 90d5ca2cbb fix(proxy): honor backpressure in cliproxy local streaming (#1379) 2026-05-23 21:45:09 -04:00
Kai (Tam Nhu) TranandGitHub 0db9705d75 fix(claude-extension): enforce private permissions for settings writes (#1378) 2026-05-23 21:45:07 -04:00
Kai (Tam Nhu) TranandGitHub 210ab761e2 fix(cursor): enforce auth token for anthropic daemon route (#1377) 2026-05-23 21:45:05 -04:00
Kai (Tam Nhu) TranandGitHub 781c84b04b fix: narrow legacy GLMT base URL normalization (#1376)
* fix: narrow legacy glmt base url normalization

* style: apply prettier formatting
2026-05-23 21:45:02 -04:00
Kai (Tam Nhu) TranandGitHub b0a754179c fix(codex): cap buffered upstream error response size (#1375) 2026-05-23 21:45:00 -04:00
Kai (Tam Nhu) TranandGitHub cba1414b7e fix(ci): qualify docker release checkout refs (#1374)
* fix(ci): qualify docker release checkout refs

* style: apply prettier formatting
2026-05-23 21:44:57 -04:00
Kai (Tam Nhu) TranandGitHub 03a30119d9 fix(cursor): authenticate local daemon health/runtime traffic (#1373) 2026-05-23 21:44:55 -04:00
Kai (Tam Nhu) TranandGitHub 6c0f7ac39c fix(dashboard): clear local control-panel management key (#1372) 2026-05-23 21:44:53 -04:00
Kai (Tam Nhu) TranandGitHub e6f764c79b fix(cursor): block cross-origin runtime probe requests (#1371) 2026-05-23 21:44:50 -04:00
Kai (Tam Nhu) TranandGitHub 37fdf90e30 fix(ci): constrain PR-Agent GitHub App token permissions (#1370)
* fix(ci): constrain pr-agent app token permissions

* style: apply prettier formatting
2026-05-23 21:44:47 -04:00
Kai (Tam Nhu) TranandGitHub 4e7894a3da fix: honor browser eval env override in attach config (#1368) 2026-05-23 21:44:44 -04:00
Kai (Tam Nhu) TranandGitHub c322829f44 fix(browser): cap click and key repeat counts in MCP (#1367)
* fix(browser): cap click and key repeat counts in MCP

* style: apply prettier formatting
2026-05-23 21:44:42 -04:00
Kai (Tam Nhu) TranandGitHub 8b3ba5532e fix(browser): log only matched intercepted requests (#1366) 2026-05-23 21:44:40 -04:00
Kai (Tam Nhu) TranandGitHub 2188cdc990 fix(cliproxy): clean up upstream proxy on response disconnect (#1361)
* fix(cliproxy): clean up upstream proxy on response disconnect

* style: apply prettier formatting
2026-05-23 21:44:37 -04:00
Kai (Tam Nhu) TranandGitHub e658e838f9 fix(cliproxy): scrub GitLab PAT env after token-login auth (#1360)
* fix(cliproxy): scrub gitlab pat env var after auth handoff

* style: apply prettier formatting
2026-05-23 21:44:35 -04:00
Kai (Tam Nhu) TranandGitHub 2ec23c6c3a fix(sse): make CRLF normalization chunk-boundary safe (#1359)
* fix(sse): handle CRLF split across chunk boundaries

* style: apply prettier formatting
2026-05-23 21:44:32 -04:00
Kai (Tam Nhu) TranandGitHub 21764d5b90 fix(web): harden localhost guard against DNS rebinding (#1357)
* fix(web): harden localhost guard against DNS rebinding

* style: apply prettier formatting
2026-05-23 21:44:19 -04:00
Kai (Tam Nhu) TranandGitHub 0bd2e577b2 fix(codex-auth): restrict symlink fallback and harden copy path (#1365) 2026-05-23 21:43:51 -04:00
github-actions[bot] 1065f68eae chore(release): 8.1.0-dev.4 2026-05-24 01:42:35 +00:00