Kai (Tam Nhu) Tran and GitHub
78c5c85e2b
Merge pull request #1244 from kaitranntt/dev
...
feat: promote dev to main
2026-05-14 12:52:25 -04:00
github-actions[bot]
e694f3cd38
chore(release): 7.78.1-dev.8
2026-05-14 16:38:52 +00:00
Kai (Tam Nhu) Tran and GitHub
4748c452bd
fix(codex): self-heal ccsxp cliproxy provider ( #1243 )
2026-05-14 12:35:31 -04:00
github-actions[bot]
9748ba4ee0
chore(release): 7.78.1-dev.7
2026-05-14 14:21:39 +00:00
walker1211 and GitHub
35b6210cd2
fix: support Claude subcommands and background sessions
...
Squash merge PR #1240.\n\nValidated locally from the PR head because trusted-author GitHub CI was skipped for this fork PR:\n- bun run validate\n- bun run build:all\n- bun run test:all\n- CCS_E2E_SKIP_BUILD=1 bun run test:e2e
2026-05-14 10:18:23 -04:00
github-actions[bot]
e87b627764
chore(release): 7.78.1-dev.6
2026-05-13 13:38:07 +00:00
Kai (Tam Nhu) Tran and GitHub
54f1aa70c0
fix(proxy): strip stale encoding from upstream error responses ( #1239 )
2026-05-13 09:31:43 -04:00
Tam Nhu Tran
1932b2ca61
fix(proxy): strip stale encoding from upstream error responses
2026-05-13 09:13:28 -04:00
github-actions[bot]
ab096ac37e
chore(release): 7.78.1-dev.5
2026-05-13 02:23:37 +00:00
Kai (Tam Nhu) Tran and GitHub
667b1d1e1f
fix: ignore internal instance directories in health scans
...
Closes #1236
2026-05-12 22:17:16 -04:00
github-actions[bot]
ac00ba4f00
chore(release): 7.78.1-dev.4
2026-05-12 23:27:59 +00:00
Kai (Tam Nhu) Tran and GitHub
ac333dd1d5
fix: clarify CLIProxy setup actions
...
Make account setup the primary CLIProxy CTA, keep advanced variant creation secondary, and contain setup dialogs across narrow viewports.
2026-05-12 19:23:59 -04:00
github-actions[bot]
26311f7752
chore(release): 7.78.1-dev.3
2026-05-12 22:18:38 +00:00
Kai (Tam Nhu) Tran and GitHub
40300c286e
fix(security): constrain image fallback hook to workspace ( #1232 )
2026-05-12 18:13:32 -04:00
Kai (Tam Nhu) Tran and GitHub
349db830df
fix(settings): confine dashboard settings paths ( #1231 )
2026-05-12 18:13:26 -04:00
Kai (Tam Nhu) Tran and GitHub
a840793a9b
fix(proxy): avoid exposing local auth token in daemon argv ( #1230 )
2026-05-12 18:13:20 -04:00
Kai (Tam Nhu) Tran and GitHub
9c5d4976c5
fix(windows): pin cmd shell for wrapper launches ( #1229 )
2026-05-12 18:13:13 -04:00
github-actions[bot]
2e5439290e
chore(release): 7.78.1-dev.2
2026-05-12 20:49:48 +00:00
Kai (Tam Nhu) Tran and GitHub
d9b6abf134
Merge pull request #1233 from kaitranntt/kai/feat/1218-claude-subcommand-passthrough
...
feat(dispatcher): pass through Claude subcommands without interactive-session args
2026-05-12 16:46:12 -04:00
Tam Nhu Tran
c2b00b7ad6
feat(dispatcher): pass through Claude subcommands without interactive-session args
...
Closes #1218 .
When the user invokes `ccs <profile> agents` (and other Claude subcommands
like `mcp`, `doctor`, `plugin`, ...), CCS was unconditionally injecting
session-only Claude flags (`--append-system-prompt`, `--disallowedTools`,
`--settings`, official-channels plugin specs) and forwarding the
`DISABLE_TELEMETRY=1` env var from profile settings. Each of those
either errored out the subcommand (`error: unknown option
'--append-system-prompt'`) or silently flipped Claude into
non-interactive list mode, so the new `claude agents` agent view never
opened under CCS.
Add a small `claude-subcommand-detector` that recognizes the documented
Claude subcommand set after skipping known value-taking flags, then have
the three steering-prompt injectors (websearch, image-analysis, browser),
the cliproxy and settings launchers, and the official-channels plan
short-circuit when a subcommand invocation is detected. Also strip
`DISABLE_TELEMETRY` from the spawned env only for subcommand
invocations — upstream Claude Code uses that var as a kill switch for
the subcommand TUIs, and the user's telemetry preference still applies
to every normal interactive session.
Verified end-to-end against `ccs glm agents` and `ccs ck agents`: the
agent view opens correctly, no `unknown option` error, and all 1938
existing tests pass.
2026-05-12 16:35:37 -04:00
github-actions[bot]
72f2f9993d
chore(release): 7.78.1-dev.1
2026-05-12 16:50:48 +00:00
Tam Nhu Tran
4c0aa83c82
chore(sync): merge main into dev after release
...
# Conflicts:
# .github/workflows/ci.yml
# package.json
2026-05-12 12:43:02 -04:00
semantic-release-bot
4099dfc3ca
chore(release): 7.78.1 [skip ci]
...
## [7.78.1](https://github.com/kaitranntt/ccs/compare/v7.78.0...v7.78.1 ) (2026-05-12)
### Bug Fixes
* **ci:** harden self-hosted workflow trust boundaries ([2273757 ](https://github.com/kaitranntt/ccs/commit/2273757c837254edd2277c785530835d6db2a977 ))
2026-05-12 16:37:30 +00:00
Kai (Tam Nhu) Tran and GitHub
2273757c83
fix(ci): harden self-hosted workflow trust boundaries
...
Keep active CCS workflows on self-hosted runners, gate self-hosted PR execution to trusted authors, and scope privileged release credentials to the exact git operations that need them.
2026-05-12 12:34:15 -04:00
github-actions[bot]
9afb09aad3
chore(release): 7.78.0-dev.10
2026-05-12 15:04:01 +00:00
Kai (Tam Nhu) Tran and GitHub
d61469edcb
fix(config): bind dashboard to loopback by default
2026-05-12 10:59:49 -04:00
github-actions[bot]
837f7f46e3
chore(release): 7.78.0-dev.9
2026-05-12 14:45:34 +00:00
Kai (Tam Nhu) Tran and GitHub
f09cdfcf2b
fix(security): protect dashboard WebSocket upgrades
2026-05-12 10:42:05 -04:00
github-actions[bot]
25e21d311c
chore(release): 7.78.0-dev.8
2026-05-12 14:37:27 +00:00
Kai (Tam Nhu) Tran and GitHub
e7174d63bb
fix(ci): run pull request validation on hosted runners
2026-05-12 10:33:47 -04:00
github-actions[bot]
f830115dcc
chore(release): 7.78.0-dev.7
2026-05-12 14:27:56 +00:00
Kai (Tam Nhu) Tran and GitHub
bd588a271d
fix(codex): require local access for dashboard config routes
2026-05-12 10:24:25 -04:00
github-actions[bot]
1ad8a54aa1
chore(release): 7.78.0-dev.6
2026-05-12 13:01:00 +00:00
Kai (Tam Nhu) Tran and GitHub
eb4bbfddf3
security(browser-mcp): restrict model-callable local file uploads/downloads to safe roots and deny sensitive paths ( #1220 )
...
* fix(browser): restrict file transfer paths
* fix(browser): normalize safe transfer paths
* fix(browser): reject sensitive transfer roots
2026-05-12 08:57:33 -04:00
github-actions[bot]
f7d5d08bbf
chore(release): 7.78.0-dev.5
2026-05-12 11:56:16 +00:00
Kai (Tam Nhu) Tran and GitHub
5138741b5c
fix(ui): keep codex toml tokens inline ( #1219 )
2026-05-12 07:51:59 -04:00
github-actions[bot]
e5a10c9ed9
chore(release): 7.78.0-dev.4
2026-05-12 02:02:48 +00:00
Kai (Tam Nhu) Tran and GitHub
ba761a0d1e
fix(ui): wrap codex config highlight editor ( #1217 )
2026-05-11 21:58:55 -04:00
github-actions[bot]
a3e8e2e58c
chore(release): 7.78.0-dev.3
2026-05-12 01:37:02 +00:00
Kai (Tam Nhu) Tran and GitHub
e1777247b3
fix(ui): restore codex config highlighting ( #1216 )
2026-05-11 21:33:33 -04:00
github-actions[bot]
46b8ac2560
chore(release): 7.78.0-dev.2
2026-05-12 00:46:52 +00:00
Kai (Tam Nhu) Tran and GitHub
225401ceca
fix(ui): render codex config as exact text ( #1215 )
2026-05-11 20:43:26 -04:00
github-actions[bot]
56d5493a61
chore(release): 7.78.0-dev.1
2026-05-11 18:29:03 +00:00
Kai (Tam Nhu) Tran and GitHub
29da75c0d4
fix(cliproxy): explain headless Codex OAuth recovery
...
Closes #1213
2026-05-11 14:25:34 -04:00
semantic-release-bot
d86032ed0a
chore(release): 7.78.0 [skip ci]
...
## [7.78.0](https://github.com/kaitranntt/ccs/compare/v7.77.1...v7.78.0 ) (2026-05-11)
### Features
* **auth:** add shared resource controls ([64e1d1f ](https://github.com/kaitranntt/ccs/commit/64e1d1f815836802c1f2ed37758a9d4d104d9e14 ))
* clarify account history sync route ([#1187 ](https://github.com/kaitranntt/ccs/issues/1187 )) ([be9effc ](https://github.com/kaitranntt/ccs/commit/be9effcce34a7545943d195b3a5ce5369083e98a ))
* **cliproxy:** add OAuth callback traceability across profiles ([641d492 ](https://github.com/kaitranntt/ccs/commit/641d492cd696fb8ff82c55bf8dc5495abf81e7c9 )), closes [#1206 ](https://github.com/kaitranntt/ccs/issues/1206 )
* **dashboard:** add shared resource controls ([2a422b3 ](https://github.com/kaitranntt/ccs/commit/2a422b3bd32d989e03e8f20efc875b4bb6d35584 ))
* deprecate GitHub Copilot compatibility surfaces ([#1196 ](https://github.com/kaitranntt/ccs/issues/1196 )) ([19a50a8 ](https://github.com/kaitranntt/ccs/commit/19a50a8dd86ffcc602165701aa15981a53b822b8 ))
* support Codex fast service-tier aliases ([74d7374 ](https://github.com/kaitranntt/ccs/commit/74d73748eef656902d857c8fae7b8e1af7ff5cb4 ))
### Bug Fixes
* **auth:** reject resource mode outside resources command ([bfe3225 ](https://github.com/kaitranntt/ccs/commit/bfe32257b6e354b5007e6607b786f9b56ce49743 ))
* **auth:** require resource mode value ([3b55020 ](https://github.com/kaitranntt/ccs/commit/3b550205ddcc98d31a221427dd71f1c9bf3073c4 ))
* **cliproxy/auth:** generalize Plus OAuth credential guards for gemini and agy ([4ba9df5 ](https://github.com/kaitranntt/ccs/commit/4ba9df54251baa60c13f146820f06076c585aa45 )), closes [#1131 ](https://github.com/kaitranntt/ccs/issues/1131 ) [#1208 ](https://github.com/kaitranntt/ccs/issues/1208 )
* **cliproxy:** diagnose Gemini Plus OAuth credentials ([61390e5 ](https://github.com/kaitranntt/ccs/commit/61390e5691e91d67ce04b6813a68135b7d283790 )), closes [#1131 ](https://github.com/kaitranntt/ccs/issues/1131 )
* count CLIProxy OAuth usage in dashboard stats ([#1190 ](https://github.com/kaitranntt/ccs/issues/1190 )) ([ba18b68 ](https://github.com/kaitranntt/ccs/commit/ba18b68494a7b0563786d582d7e3d344238fbaf2 ))
* **dashboard:** show real shared plugin registry state ([8b34060 ](https://github.com/kaitranntt/ccs/commit/8b340602947312335c368109455488e5ed51cca2 ))
* **dispatcher:** re-inject anthropic auth env for anthropic-compatible api profiles ([#1181 ](https://github.com/kaitranntt/ccs/issues/1181 )) ([d6b705e ](https://github.com/kaitranntt/ccs/commit/d6b705e6a9e4215c45721f929f69a2680c1eb725 )), closes [#1175 ](https://github.com/kaitranntt/ccs/issues/1175 )
* preserve native Claude passthrough args ([1b53762 ](https://github.com/kaitranntt/ccs/commit/1b5376239fbdd788de90717792297714e8d48ab9 )), closes [#1189 ](https://github.com/kaitranntt/ccs/issues/1189 )
* route Cursor auth through browser polling ([8b681df ](https://github.com/kaitranntt/ccs/commit/8b681df455ed1386818e5a3f919b7ac4f3f7b53b )), closes [#1194 ](https://github.com/kaitranntt/ccs/issues/1194 )
* route OpenRouter profiles through v1 API ([dc8bbd8 ](https://github.com/kaitranntt/ccs/commit/dc8bbd85e7937e34689d07e2224334eb3db7bce2 ))
* **ui:** keep profile dialog actions visible on small screens ([#1204 ](https://github.com/kaitranntt/ccs/issues/1204 )) ([35346a9 ](https://github.com/kaitranntt/ccs/commit/35346a981ff7c175cd8097bd3083d0bdd4d377f2 ))
* **ui:** surface Claude Opus 4.7 in Claude picker ([58af9cd ](https://github.com/kaitranntt/ccs/commit/58af9cd501f5add0c056ea7d62df32a3f8016435 ))
* **ui:** surface Claude Opus 4.7 in Claude picker ([#1184 ](https://github.com/kaitranntt/ccs/issues/1184 )) ([b05bb30 ](https://github.com/kaitranntt/ccs/commit/b05bb30d44d625f266e6b4ff7a2858c74202b02d ))
* **ui:** surface Plus OAuth credential diagnostics in Add Account dialog ([497bca8 ](https://github.com/kaitranntt/ccs/commit/497bca8684d77cd0242eddea6162b2986b976f80 )), closes [#1208 ](https://github.com/kaitranntt/ccs/issues/1208 )
* **web-server:** gate Gemini/AGY dashboard OAuth on Plus credential availability ([31076df ](https://github.com/kaitranntt/ccs/commit/31076dff3e494645e8177e19aed64961d073b206 )), closes [#1131 ](https://github.com/kaitranntt/ccs/issues/1131 ) [#1208 ](https://github.com/kaitranntt/ccs/issues/1208 )
### Code Refactoring
* **web-server:** modularize shared-routes and Windows-aware symlink status ([a983332 ](https://github.com/kaitranntt/ccs/commit/a983332016b8f0572cceb8575516ff37178c5c9b ))
### Tests
* **ci:** make routing mock complete and websearch trace path env-robust ([9d0690e ](https://github.com/kaitranntt/ccs/commit/9d0690e1a86291e93ac775c9ffd06f8e0a0dc974 ))
### CI
* **ai-review:** move PR-Agent jobs to ubuntu-latest ([c02c66d ](https://github.com/kaitranntt/ccs/commit/c02c66dcd116715e7ea7557a0b539920acc24038 ))
* trigger fresh CI run after claw runner recovery ([15e0e62 ](https://github.com/kaitranntt/ccs/commit/15e0e62bd884283f8076f137a3ee65a7ed321973 ))
2026-05-11 02:52:35 +00:00
Kai (Tam Nhu) Tran and GitHub
f3c2efd23e
Merge pull request #1212 from kaitranntt/dev
...
feat: release 7.77.1 — shared resources, OAuth diagnostics, Codex fast tier
2026-05-10 22:49:23 -04:00
github-actions[bot]
0d9f64aaa6
chore(release): 7.77.1-dev.13
2026-05-11 02:24:18 +00:00
Kai (Tam Nhu) Tran and GitHub
f7c1cea133
Merge pull request #1211 from kaitranntt/kai/refactor/shared-routes-modularize
...
refactor(web-server): modularize shared-routes and Windows-aware symlink status
2026-05-10 22:20:49 -04:00
Tam Nhu Tran
a983332016
refactor(web-server): modularize shared-routes and Windows-aware symlink status
2026-05-10 22:15:33 -04:00
github-actions[bot]
119f7da980
chore(release): 7.77.1-dev.12
2026-05-11 02:08:09 +00:00