Codeman maintainer 24a1c6c427 fix(multi-user): make the server-wide system operations admin-only ...

docs/multi-user-plan.md lists the system operations as admin-only, but
these routes had no role check, so any signed-in regular user could run
them in multi-user mode:

- POST /api/auth/revoke with an empty body cleared EVERY login session on
  the server, every admin's included. A non-admin now revokes only their
  own logins, and a named sessionToken only when it is one of theirs.
- POST /api/system/update (update and restart the server for everyone),
  POST /api/system/span-displays (a window on the server's desktop),
  POST /api/tunnel/qr/regenerate (clears every user's pending QR login
  code) and POST /api/cleanup-state (drops every user's stale session
  records) now answer 403 FORBIDDEN to a non-admin.
- GET /api/tunnel/info lists only a non-admin's own logins (it showed the
  address and browser of every user's sessions).

Admins and single-user mode are unchanged. The tunnel panel's Regenerate
QR button no longer reports success for a refused request.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-16 13:11:41 +02:00

..

_route-test-utils.ts

fix(preview): hold a folder file's resolved target to the attachment gate; accept long names

2026-10-12 12:04:34 +02:00

agent-case-marker-routes.test.ts

feat(cli): add codeman agent — session-to-session verbs for every CLI mode

2026-10-09 12:59:56 +02:00

approval-routes.test.ts

feat(codex): raise a screen-read dialog as BLOCKED, alert-only

2026-10-14 05:18:37 +02:00

case-clone-credential-helpers.test.ts

fix(docker): gate gh/az seeding on its switch; no shared git sign-in for non-admin clones

2026-09-23 14:44:26 +08:00

case-clone-routes.test.ts

fix(cases): tell an unreachable path from an absent one, scope the stall cap

2026-10-04 20:30:40 -04:00

case-custom-path-routes.test.ts

fix(cases): custom-folder create landing fixes (#535)

2026-10-05 19:51:59 +02:00

case-routes.test.ts

fix(cases): show the real reason when Link Existing rejects a case

2026-10-10 13:50:04 +08:00

cli-registry-routes.test.ts

fix(cli-install): address review: drop every npm_config_prefix spelling, probe async

2026-10-09 19:42:06 +08:00

custom-model-routes.test.ts

fix(custom-model): address fourth pre-merge review + merge upstream master (Ark0N)

2026-09-19 18:05:51 +08:00

doctor-routes.test.ts

fix(doctor): resolve CLIs via searchDirs, single-flight runs, admin-gate the group (#536 review)

2026-10-05 09:11:10 +08:00

external-cli-bypass-clamp.test.ts

test(codex): pin reasoning effort through quick-start and the multi-user clamp

2026-10-01 17:16:18 +02:00

file-routes-attachment-path-guard.test.ts

feat(preview): render XLSX spreadsheets in the file-preview overlay

2026-09-26 23:13:21 -04:00

file-routes-preview-thumbnail.test.ts

fix(attachments): harden document preview/thumbnail path (review of #120)

2026-06-14 08:43:57 +02:00

file-routes-range.test.ts

feat(files): raise the download cap to 2GB and stream /api/download

2026-09-10 02:57:07 +02:00

file-routes-remote.test.ts

fix(files): fail closed on remote symlinks, guard PUT for remote cases, bound ssh fan-out

2026-09-14 23:42:06 +02:00

file-routes.test.ts

fix(preview): folder grid review — multi-user scope, bounded probing, smaller items

2026-10-11 14:03:20 +02:00

file-search-mode.test.ts

feat(files): search the Files panel by name or path

2026-08-19 09:17:20 -04:00

file-write-routes.test.ts

feat(file-viewer): edit mode for text files (edit + save in the viewer)

2026-08-05 08:44:47 +02:00

folder-grid-routes.test.ts

fix(preview): refuse a bare ~ folder in a Docker case too (#604 merge-time fix)

2026-10-13 18:08:38 +02:00

git-status-routes.test.ts

fix(git): pin git's locale for clone, so failures classify on any host

2026-10-09 17:48:28 +02:00

hook-event-routes.test.ts

fix(session): learn the live Claude conversation from the CLI's own hook

2026-09-01 12:33:24 +08:00

html-view-routes.test.ts

fix(html-view): a ~/ HTML link renders as a page too (#547/#604 integration)

2026-10-13 18:56:58 +02:00

mcp-sync-routes.test.ts

fix(mcp-sync): route tests never follow COPILOT_HOME, and docs name Copilot (#581)

2026-10-10 03:41:38 +02:00

mux-routes.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

orchestrator-routes.test.ts

test: repair route harness error rendering + stop AI-checker spawning real processes in tests (#97)

2026-05-25 23:55:57 +02:00

plan-routes.test.ts

fix(api): close contract gaps found by post-merge adversarial audit

2026-06-10 03:41:04 +02:00

push-routes.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

quick-start-custom-model.test.ts

feat(custom-model): warn before launching Claude on a model too small for its own overhead

2026-09-17 07:36:57 +08:00

ralph-routes.test.ts

feat(tabs): COD-359 add owner-scoped tab layouts

2026-08-23 14:46:10 -04:00

readmymind-routes.test.ts

feat: Read My Mind phase 2, the predictor and the brain button

2026-08-09 23:05:11 +02:00

reboot-restore-rebuild-failure.test.ts

feat(uploads): write prompt uploads to a hidden, self-ignoring .codeman-uploads/ folder

2026-10-09 14:10:54 -04:00

reboot-restore-routes.test.ts

fix(reboot-restore): the merge-time items from the #442 review

2026-09-18 13:46:04 +02:00

remote-discover-routes.test.ts

COD-105 discover + attach existing remote tmux sessions (detach-not-kill)

2026-07-17 15:49:24 -04:00

respawn-routes.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

scheduled-routes.test.ts

fix(multiuser): close cross-user web-layer scoping holes found in review

2026-07-20 12:33:12 +02:00

search-routes.test.ts

style: drop em-dashes from the prose added in this branch

2026-08-10 03:15:13 +02:00

session-create-unreachable-path.test.ts

fix(uploads): bound the paste-image workspace probe (#516)

2026-10-10 15:03:32 -04:00

session-custom-model.test.ts

fix(release): the seven findings from the pre-release review of the whole tree

2026-09-19 12:58:33 +02:00

session-input-delivery.test.ts

fix(input): deliver API prompts through tmux so their Enter is not lost

2026-09-28 16:44:59 +02:00

session-input-wait.test.ts

fix(wait): a retried send-and-wait finds a screen-read dialog

2026-10-14 05:53:58 +02:00

session-name-routes.test.ts

fix(sessions): stop pinning the w1-myapp placeholder as Claude's /resume title (#457)

2026-09-24 01:48:33 +02:00

session-order-routes.test.ts

feat(tabs): COD-359 add owner-scoped tab layouts

2026-08-23 14:46:10 -04:00

session-pin-routes.test.ts

Merge master into PR #157 (session manager polish)

2026-07-20 14:31:44 +02:00

session-remote-wake.test.ts

fix(remote): authorize the attach wake first; tell the caller what happened to its bytes

2026-09-19 11:39:50 +02:00

session-routes-agent-skill.test.ts

feat(agent-skill): give the codeman skill to every agent CLI, not just Claude

2026-10-13 12:33:47 +02:00

session-routes-claude-last-response.test.ts

fix(web): show the whole last turn in the Claude response viewer's brief view

2026-09-10 12:45:16 +08:00

session-routes-claude-model.test.ts

fix(sessions): scope the launch model to claude and pin it with the advisor (#514, #515, #530 landing)

2026-10-04 23:52:41 +02:00

session-routes-codex-defaults.test.ts

fix(cli-registry): codex launch defaults as registry data, ultra footer, schema doc defaults

2026-10-09 09:35:56 +02:00

session-routes-codex-last-response.test.ts

fix(web): pin the Claude response viewer to the pane's own conversation

2026-08-03 14:53:42 +08:00

session-routes-external-cli-last-response.test.ts

fix(response-viewer): role on full-context blocks, divider ReDoS, pi mode (#326 follow-up)

2026-08-21 02:25:43 +02:00

session-routes-parent-lineage.test.ts

chore: version packages

2026-08-12 02:30:08 +02:00

session-routes-tab-group.test.ts

fix(tabs): put child follow behind a setting, stop unpinning children on order PUTs

2026-10-09 20:34:37 -04:00

session-routes-workspace-hooks.test.ts

fix(statusline): sticky telemetry collection, footer print-through, EOF fix

2026-09-07 20:37:29 -05:00

session-routes.test.ts

fix(#621): correct three upload doc claims

2026-10-16 01:23:28 +02:00

session-wait-output-routes.test.ts

chore: version packages

2026-08-09 01:18:03 +02:00

session-wait-routes.test.ts

feat(codex): raise a screen-read dialog as BLOCKED, alert-only

2026-10-14 05:18:37 +02:00

status-telemetry-routes.test.ts

fix(telemetry): keep the first 20 miss causes instead of refusing the post

2026-10-13 20:45:13 -04:00

system-routes-settings-admin-only.test.ts

fix(multi-user): keep the admin's Deepgram key out of a non-admin's settings read

2026-10-16 13:10:59 +02:00

system-routes-settings-get-plan-usage-default.test.ts

fix(statusline): GET /api/settings never writes, and a save sends the collection switch only on a flip

2026-09-14 15:59:00 +02:00

system-routes-settings-partial-put.test.ts

fix(statusline): sticky telemetry collection, footer print-through, EOF fix

2026-09-07 20:37:29 -05:00

system-routes-system-ops-admin-only.test.ts

fix(multi-user): make the server-wide system operations admin-only

2026-10-16 13:11:41 +02:00

system-routes-tunnel-guard.test.ts

feat(tunnel,ui): purple tunnel button + opt-in unauthenticated tunnel with warning (v1.1.9)

2026-06-16 18:44:03 +02:00

system-routes.test.ts

fix(screenshots): #551 landing fixes

2026-10-09 04:52:24 +02:00

system-span-displays.test.ts

feat(api): establish stable HTTP contract — uniform {success,data} envelope, status codes, /api/v1

2026-06-10 01:30:43 +02:00

tab-layout-routes.test.ts

feat(tabs): COD-359 add owner-scoped tab layouts

2026-08-23 14:46:10 -04:00

team-routes.test.ts

chore: version packages

2026-03-01 17:34:09 +01:00

unified-sessions-routes.test.ts

fix(review): dedupe resumed-session rows + newest-wins lifecycle name/mode (PR #139)

2026-07-12 12:41:48 +02:00

voice-routes.test.ts

test: bind the port-sharing test servers to ephemeral ports; guard new fixed ports

2026-10-08 14:56:42 +02:00

webhook-routes.test.ts

feat(notifications): ntfy/Slack/Discord/generic webhook for the push events

2026-10-02 22:06:29 +08:00

webview-routes.test.ts

fix(webview): refuse link-local and cloud-metadata targets on the resolved address

2026-09-04 15:21:12 +02:00

workflow-routes.test.ts

feat(ultracode): master-detail tab for Workflow/ultracode run visualization

2026-06-15 08:40:05 +02:00

worktree-routes.test.ts

fix(#625): never remove a worktree that is, or holds, a Docker case workspace

2026-10-16 01:36:45 +02:00

ws-routes.test.ts

test: bind the port-sharing test servers to ephemeral ports; guard new fixed ports

2026-10-08 14:56:42 +02:00