JD fc0ecc6051 fix(tunnel): give the unauthenticated tunnel its own acknowledgement ...

The network acknowledgement that install.sh writes for every passwordless LAN install also satisfied the tunnel guard, so one click on the welcome screen's tunnel link published full terminal control to a public URL with no login and no confirm. The tunnel now needs CODEMAN_ALLOW_UNAUTHENTICATED_TUNNEL or --allow-unauthenticated-tunnel (carried by web -d and service install), and with no login the browser asks before every enable, reading a new loginConfigured field from GET /api/tunnel/status.

The guard is now decided once per request and required again where the tunnel starts, so a save that found the tunnel running can no longer restart it unguarded after a concurrent stop.

Closes #706

2026-10-26 03:13:25 -04:00

..

index.ts

fix(test): a real home is never "the test HOME" to the deletion guards

2026-10-17 05:07:38 +08:00

mock-route-context-completeness.test.ts

fix(sessions): make the discard a real inverse of the construction

2026-09-16 15:34:47 +02:00

mock-route-context.ts

fix(tunnel): give the unauthenticated tunnel its own acknowledgement

2026-10-26 03:13:25 -04:00

mock-session.ts

fix(sessions): leave a pending idle alert to the user through a keep-alive turn

2026-10-19 01:42:00 -04:00

mock-state-store.ts

test: add shared mock infrastructure and route tests (phase 7)

2026-03-01 14:33:18 +01:00

terminal-tile-fakes.ts

fix(tiles): the wheel scrolls Claude's fullscreen transcript in a tile, and Shift+wheel scrolls local history

2026-10-10 02:25:54 +02:00

test-helpers.ts

docs(test): a bare vitest is isolated now, and the guards need the sandbox HOME

2026-10-22 19:25:52 +02:00

tile-grid-vm.ts

fix(uploads): say how many files a mixed pick, drop or paste skipped

2026-10-16 10:37:20 -04:00