Codeman maintainer 2c084966f1 fix: refuse one-shot prompts on an adopted session (release review) ...

`POST /api/sessions/:id/run` had no adopted gate, so while the wrapper had no
attached PTY it spawned `claude -p --dangerously-skip-permissions <prompt>`
in /tmp, a launch every other adopted route refuses.

The route answers INVALID_INPUT, and `runPrompt()` refuses too, which also
covers the legacy `sendInput()` path and leaves no direct spawn in Session
that an adopted session can reach.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-06 07:10:49 +01:00

..

middleware

fix(auth): share one verify between identical in-flight logins

2026-10-24 14:54:44 +02:00

ports

Merge pull request #693: feat: edit history panel for local claude sessions (files edited, diffs, generated images)

2026-11-04 17:04:46 +01:00

public

Merge #774 fix(clone): treat Clone Repo's custom folder as a parent, like Create New

2026-11-06 05:37:14 +01:00

routes

fix: refuse one-shot prompts on an adopted session (release review)

2026-11-06 07:10:49 +01:00

admin-audit.ts

feat(multiuser): phase 5a, admin user-management API

2026-07-20 04:26:44 +02:00

agent-inbox-persistence.ts

feat(agent): per-session agent inbox (discussion #558)

2026-10-23 12:45:48 +02:00

agent-inbox.ts

fix(agent-inbox): review round 1

2026-10-23 12:45:48 +02:00

approval-inbox.ts

feat(sessions): keep an idle session's prompt cache warm with a guarded keep-alive turn

2026-10-18 15:19:08 -04:00

away-digest.ts

COD-8 add away digest

2026-06-19 17:58:06 -04:00

case-path.ts

fix: apply the review items for #744 at merge

2026-11-04 16:50:44 +01:00

CLAUDE.md

Merge #510 feat(adopt): adopt tmux sessions a human started, in all three locations

2026-11-06 05:36:20 +01:00

edit-history-sync.ts

Merge #510 feat(adopt): adopt tmux sessions a human started, in all three locations

2026-11-06 05:36:20 +01:00

heic-jpeg-converter.ts

fix(review): worker-thread HEIC conversion with bomb guard, concurrency cap, and magic-byte routing (PR #151)

2026-07-12 18:06:59 +02:00

heic-jpeg-worker.ts

fix(review): worker-thread HEIC conversion with bomb guard, concurrency cap, and magic-byte routing (PR #151)

2026-07-12 18:06:59 +02:00

http-range.ts

fix(file-viewer): make previewed video seekable and stop it on close

2026-08-14 00:14:21 +02:00

launch-defaults.ts

docs(codex): say what Allow network access leaves alone

2026-11-06 02:52:52 +01:00

linked-cases-writer.ts

fix(cases): serialize every write to linked-cases.json

2026-11-05 02:11:27 +01:00

network-auth-policy.ts

fix(tunnel): give the unauthenticated tunnel its own acknowledgement

2026-10-26 03:13:25 -04:00

paste-image-gc.ts

fix(adopt): an adopted session has no workspace of ours

2026-11-06 03:13:52 +01:00

plan-usage-latest.ts

feat(copilot): plan-usage chip row for the monthly premium-request quota (#662)

2026-10-22 19:32:17 +02:00

reboot-restore-registry.ts

fix(sessions): scope the launch model to claude and pin it with the advisor (#514, #515, #530 landing)

2026-10-04 23:52:41 +02:00

repo-status.ts

fix(repo-status): async git, single-flight TTL cache, credential redaction, local-upstream parse

2026-08-21 02:25:43 +02:00

request-body-parser.ts

fix: apply the review items for #725 at merge

2026-10-28 09:06:52 +01:00

respawn-event-wiring.ts

chore: version packages

2026-03-27 01:43:59 +01:00

response-viewer-transcript.ts

fix(#592): a rule inside a Copilot answer stays part of it in agent read

2026-10-18 08:07:11 +02:00

route-error-handler.ts

test: repair route harness error rendering + stop AI-checker spawning real processes in tests (#97)

2026-05-25 23:55:57 +02:00

route-helpers.ts

Merge pull request #690: feat(agent): per-session agent inbox (discussion #558)

2026-10-24 15:29:15 +02:00

schemas.ts

Merge #510 feat(adopt): adopt tmux sessions a human started, in all three locations

2026-11-06 05:36:20 +01:00

screen-blocked.ts

feat(codex): raise a screen-read dialog as BLOCKED, alert-only

2026-10-14 05:18:37 +02:00

self-update.ts

feat(install): install without administrator rights (--no-admin)

2026-11-05 18:50:58 +01:00

sensitive-path.ts

fix: keep credential files out of the file routes and Discord uploads (release review)

2026-11-04 17:28:52 +01:00

server.ts

fix(custom-model): keep a session's own config dir conversation across an endpoint

2026-11-06 06:10:41 +01:00

session-history-index.ts

style: drop em-dashes from the prose added in this branch

2026-08-10 03:15:13 +02:00

session-listener-wiring.ts

fix(sessions): leave a pending idle alert to the user through a keep-alive turn

2026-10-19 01:42:00 -04:00

session-order-sse.ts

feat(tabs): COD-359 add owner-scoped tab layouts

2026-08-23 14:46:10 -04:00

session-wait-registry.ts

Merge remote-tracking branch 'origin/master' into relprep/pr-510

2026-11-06 02:51:00 +01:00

settings-writer.ts

fix: apply the review items for #719 at merge

2026-10-27 01:24:15 +01:00

sse-events.ts

fix: apply the review items for #680 at merge

2026-10-24 14:01:33 +02:00

sse-stream-manager.ts

feat(tabs): COD-359 add owner-scoped tab layouts

2026-08-23 14:46:10 -04:00

tab-layout-sse.ts

feat(tabs): COD-359 add owner-scoped tab layouts

2026-08-23 14:46:10 -04:00

voice-stream.ts

feat(voice): dictate through the server's Claude Code login, no API key

2026-08-10 11:19:51 +02:00

webview-egress-policy.ts

fix(webview): refuse link-local and cloud-metadata targets on the resolved address

2026-09-04 15:21:12 +02:00

webview-egress.ts

fix(webview): refuse link-local and cloud-metadata targets on the resolved address

2026-09-04 15:21:12 +02:00

webview-proxy.ts

fix(webview): relay the request Content-Length so length-only dashboards get the body

2026-10-21 08:34:14 +02:00

webview-sse.ts

fix(webview): route webview:changed only to its owner in multi-user mode

2026-09-26 22:45:35 -04:00

ws-connection-registry.ts

fix(review): WS state machine, per-tab supersede key, backoff, dot CSS (PR #149)

2026-07-12 18:42:36 +02:00