Commit Graph
847 Commits
Author SHA1 Message Date
Tam Nhu Tran b602ab99ab fix(auth): harden agy safety endpoints and config writes
- add safer error responses for settings/auth routes to avoid leaking internals

- guard sensitive AGY settings endpoints to localhost when dashboard auth is off

- validate start-route bodies and reject OAuth start in remote mode for consistency

- preserve cliproxy.kiro_no_incognito and token_refresh during config merges

- enforce AGY acknowledgement in remote auth-token run/auth command paths
2026-02-24 18:09:36 +07:00
Tam Nhu Tran 3148014c6c fix(agy): align responsibility flow with issue #509
- replace issue #622/#619 references with issue #509 across CLI and dashboard

- shorten acknowledgement phrase to "I ACCEPT AGY RISK" for faster typing

- rename acknowledgement payload field to reviewedIssue509 and update tests
2026-02-24 18:09:10 +07:00
Tam Nhu Tran d3c271ab2c feat(agy): add power-user bypass for responsibility acknowledgement 2026-02-24 17:42:57 +07:00
Tam Nhu Tran 3b1271b5e4 fix(agy): enforce multi-step responsibility acknowledgement for antigravity oauth 2026-02-24 17:23:02 +07:00
Tam Nhu Tran 00495b6675 fix(cliproxy): strengthen account safety warning and redesign alert UI 2026-02-24 12:01:07 +07:00
Tam Nhu Tran 4eb2be79fc fix(cliproxy): prevent blank page in remote mode 2026-02-24 00:47:40 +07:00
Kai (Tam Nhu) TranandGitHub 8cdb67842f Merge pull request #612 from unclemimo/fix/shared-skills-symlink-scan
fix(web-server): detect symlinked shared entries
2026-02-23 11:42:40 -05:00
Kai (Tam Nhu) TranandGitHub 1f56460527 Merge pull request #614 from kaitranntt/kai/feat/601-shared-memory
feat(memory): share project memory across account instances
2026-02-23 11:41:52 -05:00
Tam Nhu Tran c98e58383c Merge remote-tracking branch 'origin/dev' into pr-612-review
# Conflicts:
#	src/utils/claude-config-path.ts
#	src/web-server/shared-routes.ts
2026-02-23 23:30:03 +07:00
Tam Nhu Tran c6c44d0341 fix(memory): use async fs APIs to satisfy maintainability gate 2026-02-23 23:29:22 +07:00
Tam Nhu Tran 498b66d9cc fix(web-server): harden shared route symlink scanning 2026-02-23 23:22:29 +07:00
Tam Nhu Tran e2623e632c feat(memory): share project memory across account instances 2026-02-23 23:18:34 +07:00
Tam Nhu Tran db80f85e38 fix(codex): preserve codex tier efforts in auto thinking 2026-02-23 23:10:12 +07:00
Tam Nhu Tran 57e14cf3a6 fix(codex): validate tier thinking values before suffixing 2026-02-23 22:59:02 +07:00
Tam Nhu Tran be96b84e61 fix(codex): canonicalize dashboard presets and migrate suffixed settings 2026-02-23 22:52:44 +07:00
innovatiasandClaude Opus 4.6 e3dbc67634 fix(web-server): detect symlinked shared entries
Handle shared skills and agents when entries are symlinked directories.
Also avoid classifying root markdown files in skills/agents as commands.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-23 22:08:53 +07:00
Kai (Tam Nhu) TranandGitHub 3901e23485 Merge pull request #607 from kaitranntt/kai/fix/604-cannot-set-auto-approve
fix(persist): add auto-approve permission flags
2026-02-22 12:09:51 -05:00
Tam Nhu Tran 29cceb3a88 fix(persist): harden persist restore safety and edge cases 2026-02-23 00:05:47 +07:00
Kai (Tam Nhu) TranandGitHub b3ce680b58 Merge pull request #609 from kaitranntt/kai/fix/602-codex-model-suffix
fix(cliproxy): keep canonical codex model ids in settings
2026-02-22 11:46:12 -05:00
Tam Nhu Tran a81176da79 fix(cliproxy): keep canonical codex model ids in settings 2026-02-22 23:40:45 +07:00
Tam Nhu Tran 742b5ed580 fix(cliproxy): normalize codex effort aliases without reasoning proxy 2026-02-22 23:12:23 +07:00
Tam Nhu Tran 61bcd4df5e fix(persist): resolve CI gate and review test gaps 2026-02-22 23:01:38 +07:00
Tam Nhu Tran e3255e5615 fix(persist): add auto-approve permission flags 2026-02-22 22:51:40 +07:00
Tam Nhu Tran 88be99f8a0 fix(cliproxy): keep remote-proxy client under maintainability limit 2026-02-22 22:44:26 +07:00
Tam Nhu Tran 34292ca7f8 fix(cliproxy): prevent false remote timeout on reachable proxy 2026-02-22 22:38:50 +07:00
Tam Nhu Tran ca58cb5a08 fix(cliproxy): harden quota guards and review follow-ups 2026-02-22 02:35:07 +07:00
Tam Nhu Tran 8c790f41ff fix(cliproxy): close remaining quota edge-case gaps 2026-02-22 02:12:40 +07:00
Tam Nhu Tran 9371a72c16 fix(cliproxy): split claude quota fetcher for maintainability gate 2026-02-22 01:35:32 +07:00
Tam Nhu Tran d47620592d Merge remote-tracking branch 'origin/dev' into fix/548-claude-quota-balance
# Conflicts:
#	src/commands/cliproxy/help-subcommand.ts
#	src/commands/cliproxy/index.ts
#	src/commands/cliproxy/quota-subcommand.ts
2026-02-22 01:24:44 +07:00
Tam Nhu Tran 2385d9028a feat(cliproxy): add Claude quota windows and account failover 2026-02-22 01:19:02 +07:00
Kai (Tam Nhu) TranandGitHub 06a4f3f131 Merge pull request #599 from kaitranntt/fix/598-gemini-3-1-pro-preview
fix(cliproxy): support gemini-3.1-pro-preview alias routing
2026-02-22 00:57:30 +07:00
Tam Nhu Tran 63619cb9dc fix(cliproxy): harden antigravity alias generation 2026-02-22 00:35:20 +07:00
Tam Nhu Tran 653f8092ae fix(cliproxy): add gemini 3.1 preview alias compatibility 2026-02-22 00:14:15 +07:00
Kai (Tam Nhu) TranandGitHub 4c7501fe39 Merge pull request #596 from kaitranntt/feat/refactor-hardcode-dx-one-pr
refactor(core): centralize hardcoded paths and command/provider sources
2026-02-21 10:40:51 +07:00
Tam Nhu Tran 343ec959fc fix(core): resolve edge cases and hardcoded drift 2026-02-21 10:32:19 +07:00
Tam Nhu Tran 187c6f7f13 docs(cliproxy): add normalizer API usage examples 2026-02-21 02:21:32 +07:00
Tam Nhu Tran 6429781e8f fix(cliproxy): normalize provider-aware Claude model IDs 2026-02-21 02:14:09 +07:00
Tam Nhu Tran 6074fcb0b6 fix(refactor): address PR review follow-up findings 2026-02-21 01:44:44 +07:00
Tam Nhu Tran af6aa2d7b2 fix(types): use type-only import for composite tier config 2026-02-21 01:35:58 +07:00
Tam Nhu Tran 8d2ec86155 refactor(core): centralize claude paths and command parsing 2026-02-21 01:31:16 +07:00
Tam Nhu Tran 5b12ce7f00 fix(api): sanitize preset help text rendering
- strip control characters from dynamic preset output

- render preset help from shared registry data

- include normalized alias hints without hardcoded lines
2026-02-20 23:24:11 +07:00
Tam Nhu Tran 21d6754ec6 refactor(presets): centralize shared provider preset catalog
- add shared preset catalog used by CLI and Dashboard

- enforce alias/id integrity and canonical normalization

- replace duplicated preset definitions in service and UI layers

- allow Vite dev fs access to repo root for shared catalog imports
2026-02-20 23:24:11 +07:00
Tam Nhu Tran e32192177b Merge remote-tracking branch 'origin/dev' into kai/fix/588-nested-session-guard 2026-02-20 23:04:59 +07:00
Tam Nhu Tran 8e57d59479 fix(execution): strip claudecode in remaining claude paths
- sanitize Copilot profile Claude launch environment

- sanitize auth create isolated instance launch environment

- sanitize doctor Claude CLI version check spawn environment

Refs #588
2026-02-20 23:00:59 +07:00
Tam Nhu Tran d25eda8435 fix(spawn): sanitize claudecode in shared claude env builders
- strip CLAUDECODE from cliproxy-built Claude environments

- enforce sanitization in ClaudeAdapter buildEnv

- apply same env hardening in shared spawnClaude helper

Refs #588
2026-02-20 23:00:47 +07:00
Tam Nhu Tran 50412dc679 fix(delegation): strip claudecode in core delegation spawn paths
- add shared CLAUDECODE sanitizer for child env construction

- apply sanitizer in execClaude and headless delegation execution

- sanitize GLMT embedded Claude spawn environment

Refs #588
2026-02-20 23:00:33 +07:00
Tam Nhu Tran 8201204380 fix(quota): address ghcp review follow-ups 2026-02-20 22:53:49 +07:00
Tam Nhu Tran 8d9d4987dc feat(quota): add GitHub Copilot quota checks for ghcp and copilot 2026-02-20 22:32:27 +07:00
Tam Nhu Tran 4303ee48c9 fix(delegation): strip CLAUDECODE env var to bypass nested session guard
Claude Code v2.1.39+ sets CLAUDECODE env var and refuses to launch
if detected, breaking CCS auto-delegation which spawns child Claude
processes. Strip the var from both interactive (execClaude) and
headless (HeadlessExecutor) spawn paths.

Closes #588
2026-02-20 22:22:11 +07:00
Kai (Tam Nhu) TranandGitHub e63292c793 Merge pull request #587 from kaitranntt/kai/feat/583-thinking-ux-dx
feat(thinking): complete thinking UX/DX for all providers
2026-02-19 16:32:05 +07:00