Codeman maintainer 5a8fc853c3 fix(auth): share one verify between identical in-flight logins ...

Reserving a slot per request refused a correct password with the slots it had
filled itself: after a restart the browser replays its cached Basic header on many
parallel requests. Identical credentials from one IP now join the verify already in
flight for them (keyed on a SHA-256 digest), skipping the gates and its scrypt cost.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-24 14:54:44 +02:00

..

middleware

fix(auth): share one verify between identical in-flight logins

2026-10-24 14:54:44 +02:00

ports

Merge pull request #676: feat(tabs): per-case default session group

2026-10-22 19:54:54 +02:00

public

chore: version packages

2026-10-22 20:33:07 +02:00

routes

Merge pull request #676: feat(tabs): per-case default session group

2026-10-22 19:54:54 +02:00

admin-audit.ts

feat(multiuser): phase 5a, admin user-management API

2026-07-20 04:26:44 +02:00

approval-inbox.ts

feat(sessions): keep an idle session's prompt cache warm with a guarded keep-alive turn

2026-10-18 15:19:08 -04:00

away-digest.ts

COD-8 add away digest

2026-06-19 17:58:06 -04:00

case-path.ts

fix(#567): separate refusal messages for the cases folder and a direct child

2026-10-18 08:05:39 +02:00

CLAUDE.md

Merge pull request #674: fix(mobile): give a sideways drag on the terminal to the session swipe alone

2026-10-22 19:28:49 +02:00

heic-jpeg-converter.ts

fix(review): worker-thread HEIC conversion with bomb guard, concurrency cap, and magic-byte routing (PR #151)

2026-07-12 18:06:59 +02:00

heic-jpeg-worker.ts

fix(review): worker-thread HEIC conversion with bomb guard, concurrency cap, and magic-byte routing (PR #151)

2026-07-12 18:06:59 +02:00

http-range.ts

fix(file-viewer): make previewed video seekable and stop it on close

2026-08-14 00:14:21 +02:00

launch-defaults.ts

fix(cli-registry): codex launch defaults as registry data, ultra footer, schema doc defaults

2026-10-09 09:35:56 +02:00

network-auth-policy.ts

feat(docker): allowlist container-to-host gateway aliases in host guard

2026-07-19 15:32:45 +02:00

paste-image-gc.ts

fix(uploads): list upload dirs bounded and async, and keep uploads inside the data dir collected

2026-10-09 20:05:21 -04:00

plan-usage-latest.ts

feat(copilot): plan-usage chip row for the monthly premium-request quota (#662)

2026-10-22 19:32:17 +02:00

reboot-restore-registry.ts

fix(sessions): scope the launch model to claude and pin it with the advisor (#514, #515, #530 landing)

2026-10-04 23:52:41 +02:00

repo-status.ts

fix(repo-status): async git, single-flight TTL cache, credential redaction, local-upstream parse

2026-08-21 02:25:43 +02:00

respawn-event-wiring.ts

chore: version packages

2026-03-27 01:43:59 +01:00

response-viewer-transcript.ts

fix(#592): a rule inside a Copilot answer stays part of it in agent read

2026-10-18 08:07:11 +02:00

route-error-handler.ts

test: repair route harness error rendering + stop AI-checker spawning real processes in tests (#97)

2026-05-25 23:55:57 +02:00

route-helpers.ts

fix(preview): hold a folder file's resolved target to the attachment gate; accept long names

2026-10-12 12:04:34 +02:00

schemas.ts

Merge pull request #676: feat(tabs): per-case default session group

2026-10-22 19:54:54 +02:00

screen-blocked.ts

feat(codex): raise a screen-read dialog as BLOCKED, alert-only

2026-10-14 05:18:37 +02:00

self-update.ts

fix(self-update): stalled status and hung shutdown on launchd-daemon installs (#478)

2026-09-24 01:35:27 +02:00

sensitive-path.ts

fix: file-link and session-sidebar review follow-ups from 1.19.0

2026-08-16 20:34:34 +02:00

server.ts

fix: apply the review items for #684 at merge

2026-10-24 14:15:21 +02:00

session-history-index.ts

style: drop em-dashes from the prose added in this branch

2026-08-10 03:15:13 +02:00

session-listener-wiring.ts

fix(sessions): leave a pending idle alert to the user through a keep-alive turn

2026-10-19 01:42:00 -04:00

session-order-sse.ts

feat(tabs): COD-359 add owner-scoped tab layouts

2026-08-23 14:46:10 -04:00

session-wait-registry.ts

feat(codex): raise a screen-read dialog as BLOCKED, alert-only

2026-10-14 05:18:37 +02:00

sse-events.ts

feat(sessions): keep an idle session's prompt cache warm with a guarded keep-alive turn

2026-10-18 15:19:08 -04:00

sse-stream-manager.ts

feat(tabs): COD-359 add owner-scoped tab layouts

2026-08-23 14:46:10 -04:00

tab-layout-sse.ts

feat(tabs): COD-359 add owner-scoped tab layouts

2026-08-23 14:46:10 -04:00

voice-stream.ts

feat(voice): dictate through the server's Claude Code login, no API key

2026-08-10 11:19:51 +02:00

webview-egress-policy.ts

fix(webview): refuse link-local and cloud-metadata targets on the resolved address

2026-09-04 15:21:12 +02:00

webview-egress.ts

fix(webview): refuse link-local and cloud-metadata targets on the resolved address

2026-09-04 15:21:12 +02:00

webview-proxy.ts

fix(webview): relay the request Content-Length so length-only dashboards get the body

2026-10-21 08:34:14 +02:00

webview-sse.ts

fix(webview): route webview:changed only to its owner in multi-user mode

2026-09-26 22:45:35 -04:00

ws-connection-registry.ts

fix(review): WS state machine, per-tab supersede key, backoff, dot CSS (PR #149)

2026-07-12 18:42:36 +02:00