UserandClaude Opus 4.6 6471cc55d7 fix(docker): harden cliproxy local proxy with auth guard, dynamic port, and body handling ...

Move reverse proxy under /api/cliproxy-local so it sits behind auth
middleware. Enforce localhost-only access when dashboard auth is disabled.
Resolve the target port from unified config instead of hardcoding 8317.
Re-serialize parsed JSON bodies before forwarding so writes still work
behind express.json(). Clean up proxy connections on client abort.

On the frontend, point the iframe and health check at the new same-origin
API path, probe the proxy directly, and tighten iframe origin/path
validation before sending the auto-login secret.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-30 16:33:32 -07:00

..

api

feat(profiles): expose codex runtime across surfaces

2026-03-29 13:14:15 -04:00

auth

feat: make cliproxy provider nicknames optional by default

2026-03-23 11:02:08 -04:00

bin

fix(codex): align cliproxy guidance with runtime behavior

2026-03-29 21:04:59 -04:00

channels

feat(profiles): expose codex runtime across surfaces

2026-03-29 13:14:15 -04:00

cliproxy

fix(cliproxy): preserve manual high-minor alias clusters

2026-03-29 14:13:23 -04:00

commands

fix(codex): align cliproxy guidance with runtime behavior

2026-03-29 21:04:59 -04:00

config

feat(auth): let power user mode skip Gemini auth gate

2026-03-26 15:03:24 -04:00

copilot

fix(copilot): stop mutating config on read

2026-03-15 14:53:43 -04:00

cursor

test: isolate shared-state test suites for CI stability

2026-03-25 16:41:41 -04:00

delegation

fix: respect auto_update preference by disabling Claude auto-updater

2026-03-02 21:13:15 +07:00

docker

fix(docker): wrap session registration in try-catch and narrow ETXTBSY guard

2026-03-28 19:00:54 -04:00

errors

fix(security): harden API endpoints and resolve PR #674 review findings

2026-03-04 01:30:46 +07:00

glmt

feat: deprecate GLMT user-facing surfaces

2026-03-17 15:49:29 -04:00

management

chore(types): use type-only imports

2026-03-25 16:31:55 -04:00

shared

feat(codex): harden runtime targeting and dashboard editing

2026-03-29 14:18:51 -04:00

targets

docs(codex): clarify ccsxp and cliproxy setup

2026-03-29 19:43:46 -04:00

types

fix: stabilize validate pipeline and cliproxy route tests

2026-03-20 09:29:51 -04:00

utils

fix(codex): harden native alias launches

2026-03-29 15:54:18 -04:00

web-server

fix(docker): harden cliproxy local proxy with auth guard, dynamic port, and body handling

2026-03-30 16:33:32 -07:00

ccs.ts

feat(codex): add ccsxp runtime shortcut

2026-03-29 19:43:26 -04:00