feat(refactor): ready for manual QA after main sync (#274)
nyk+1: Claude Opus 4.6
Unverified signature
b6ecafa
* fix: preserve gateway token query in websocket URLs
* fix: classify secure-context device identity handshake errors
* fix: normalize trailing dot in host allowlist checks
* fix: support proxied gateway websocket paths and tailnet host normalization
* fix: auto-connect startup to primary configured gateway
* fix: keep gateway tokens server-side only
* fix: allow authenticated viewers to resolve gateway connect credentials
* fix: identify mission control as operator gateway client
* fix: redirect remote http sessions to https for gateway auth
* fix: support URL-style gateway hosts in health probes
* fix: resolve primary gateway credentials from detected openclaw runtime
* fix: hide duplicate gateway connection summary when managed
* refactor: remove super admin and workspaces panels from UI navigation
* fix: treat configured gateways as full-mode capability
* refactor: move promo banner copy into subtle footer note
* fix: stabilize gateway websocket connect protocol dete…
feat: phase 1 workspace isolation across auth and core APIs (#112)
nyk
Unverified signature
4e0867d
* feat: add workspace-scoped auth sessions and core API filtering
* feat: extend workspace scoping to search status standup and messaging
* feat: scope agent connect github and alert workflows by workspace
* fix: scope status sync and session alerts by workspace
* feat: add phase2 workspace migration and scope chat pipeline alerts
* feat: add model selection for agents and cron jobs
* feat: add deterministic agent avatars to task and squad views
* feat: add read-only cron calendar and agenda views
* feat: render task descriptions with markdown
feat: audit hardening, webhook retry, and local Claude session tracking (#68)
nyk
Unverified signature
959f8d7
Security hardening:
- Fix timing-safe comparison bugs in webhooks.ts and auth.ts (was comparing buffer with itself)
- Harden rate limiter IP extraction — use rightmost untrusted IP from XFF chain with MC_TRUSTED_PROXIES support
- Add 12-char minimum password validation in Zod schema and runtime check
- Add Zod validation on PUT /api/tasks bulk status update
Webhook retry system (completing in-progress feature):
- Exponential backoff with circuit breaker in webhooks.ts
- POST /api/webhooks/retry endpoint for manual retry
- GET /api/webhooks/verify-docs endpoint for signature verification docs
- Scheduler integration for automatic retry processing
- Unit tests for signature verification and backoff logic
Local Claude Code session tracking:
- New claude-sessions.ts scanner parses JSONL transcripts from ~/.claude/projects/
- Extracts model, tokens, messages, cost estimates, active status per session
- Migration 020 adds claude_sessions table
- GET/POST /api/claude/sessions endpoint with …
fix: add auth checks on all GET endpoints, timing-safe comparisons, and XSS sanitization
Nyk
1dc7696
feat: initial open-source release
Nyk
bbbc03f
OpenClaw Mission Control — agent orchestration dashboard.
Built with Next.js 16, React 19, TypeScript, SQLite, and Tailwind CSS.
MIT License.
