Codeman maintainer 076f62fa1b fix(preview): refuse a bare ~ folder in a Docker case too (#604 merge-time fix) ...

The Docker refusal on POST /api/sessions/:id/folders tested only `~/`, but
listFolder also expands a bare `~` to this host's home, so a Docker case
could list and serve the host home through it (the preview's "Show folder"
for a `~/x.png` link reached it with no typing). A bare `~` now gets the same
400.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-13 18:08:38 +02:00

..

admin-routes.ts

fix(webview): revoke proxy capabilities on logout and stamp Referrer-Policy

2026-09-04 15:21:13 +02:00

approval-routes.ts

fix(deepseek): review-driven hardening across the harness integration

2026-08-25 19:01:29 +02:00

case-routes.ts

fix(cases): bounded path probe landing fixes (#516)

2026-10-05 20:00:30 +02:00

cli-registry-routes.ts

fix(cli-install): address review: drop every npm_config_prefix spelling, probe async

2026-10-09 19:42:06 +08:00

clipboard-routes.ts

fix(multiuser): close cross-user web-layer scoping holes found in review

2026-07-20 12:33:12 +02:00

cron-routes.ts

refactor(cli-registry): make CLI backends data instead of per-mode branching

2026-09-02 08:26:45 +08:00

custom-model-routes.ts

fix(custom-model): split the two confirmation questions, and seed the API key the way claude reads it

2026-09-19 12:32:50 +02:00

doctor-routes.ts

fix(doctor): resolve CLIs via searchDirs, single-flight runs, admin-gate the group (#536 review)

2026-10-05 09:11:10 +08:00

file-routes.ts

fix(preview): refuse a bare ~ folder in a Docker case too (#604 merge-time fix)

2026-10-13 18:08:38 +02:00

git-status-routes.ts

fix(git-status): #543 landing fixes

2026-10-09 05:36:57 +02:00

hook-event-routes.ts

feat(approvals): let a watching session keep quiet, and fix the tui gate

2026-09-22 08:10:05 +02:00

index.ts

Merge pull request #537 from opticon454/feat/git-status-indicator

2026-10-05 19:51:43 +02:00

mcp-sync-routes.ts

feat(mcp-sync): sync GitHub Copilot CLI's MCP servers too

2026-10-09 18:42:00 +08:00

me-routes.ts

feat(multiuser): phase 5b, frontend (identity boot + admin panel)

2026-07-20 04:31:30 +02:00

mux-routes.ts

fix(multiuser): close cross-user web-layer scoping holes found in review

2026-07-20 12:33:12 +02:00

orchestrator-routes.ts

fix(multiuser): close cross-user web-layer scoping holes found in review

2026-07-20 12:33:12 +02:00

plan-routes.ts

fix(multiuser): close cross-user web-layer scoping holes found in review

2026-07-20 12:33:12 +02:00

push-routes.ts

fix(multiuser): close cross-user web-layer scoping holes found in review

2026-07-20 12:33:12 +02:00

ralph-routes.ts

feat(claude): advisor tool support, per session and as an App Settings default

2026-10-04 19:05:43 +02:00

readmymind-routes.ts

fix(deepseek): close the env-var clamp hole, bound the profile install, make the hook gate per-session

2026-08-24 16:01:02 +02:00

reboot-restore-routes.ts

feat(agent-skill): give the codeman skill to every agent CLI, not just Claude

2026-10-13 12:33:47 +02:00

respawn-routes.ts

fix(multiuser): close cross-user web-layer scoping holes found in review

2026-07-20 12:33:12 +02:00

scheduled-routes.ts

fix(multiuser): close cross-user web-layer scoping holes found in review

2026-07-20 12:33:12 +02:00

search-routes.ts

style: drop em-dashes from the prose added in this branch

2026-08-10 03:15:13 +02:00

session-routes.ts

fix(terminal): no paneHistoryLines for a remote session (#583/#602 integration)

2026-10-13 18:05:30 +02:00

status-telemetry-routes.ts

fix(telemetry): stamp a compaction on entering the null window

2026-10-11 12:36:59 -04:00

system-routes.ts

chore(uploads): remove the broken upload page and deprecate /api/screenshots

2026-10-08 00:24:55 -04:00

tab-layout-routes.ts

feat(tabs): COD-359 add owner-scoped tab layouts

2026-08-23 14:46:10 -04:00

team-routes.ts

refactor: extract server.ts routes into domain modules (phase 3)

2026-02-28 19:12:45 +01:00

voice-routes.ts

feat(voice): dictate through the server's Claude Code login, no API key

2026-08-10 11:19:51 +02:00

webhook-routes.ts

fix(notifications): main Save keeps webhook edits, glue test, docs and nits (#523 review)

2026-10-04 23:52:41 +02:00

webview-routes.ts

fix(webview): route webview:changed only to its owner in multi-user mode

2026-09-26 22:45:35 -04:00

ws-routes.ts

fix(input): an oversized paste no longer poisons the durable input queue (#484)

2026-09-24 18:17:06 +02:00