nntrivi2001 600e8eec6a fix(avatars): every signed-in account sees other users' pictures ...

System Health shows every user's name and avatarAt to everyone, but the
picture route GET /api/users/:id/avatar sat under the staff-only /users
prefix, so a developer got 403 EADMIN and saw only initials. authGuard now
lets any signed-in account make that one read (EVERYONE_READS); every
other /users path stays staff-only, and the test checks both.

2026-11-02 16:40:29 +07:00

..

accounts.js

feat(pool): one board of pools with split/merge by drag; plan names from tier and seat

2026-10-28 11:47:19 +07:00

agents.js

feat: v2.5.10 — server mode for a team, file drops in the prompt, tab joins

2026-10-07 14:11:25 +07:00

ai-proxies.js

feat: choose your own pool account; skills with "token" in a doc name upload; System Health off Linux

2026-10-28 10:41:53 +07:00

ai-tools.js

chore: v2.8.15 — Oh My Pi login sharing, omp --allow-home, Markdown Preview default, first-login password

2026-10-22 10:04:30 +07:00

alerts.js

chore: maintenance — dependency majors, rename step 4, member Claude config, OpenAPI coverage

2026-10-26 14:22:41 +07:00

analytics.js

perf: v2.5.10 — ready for 10+ concurrent users, leaner locally

2026-10-07 13:24:15 +07:00

artifacts.js

feat(artifacts): Share again takes a skill's newest version; a same-named upload updates it

2026-10-30 14:20:18 +07:00

auth.js

feat: v2.5.10 — server mode for a team, file drops in the prompt, tab joins

2026-10-07 14:11:25 +07:00

budgets.js

feat: v2.5.10 — server mode for a team, file drops in the prompt, tab joins

2026-10-07 14:11:25 +07:00

cc-config.js

chore: maintenance — dependency majors, rename step 4, member Claude config, OpenAPI coverage

2026-10-26 14:22:41 +07:00

codex-config.js

docs: OpenAPI and API.md cover every route; drop removed endpoints; guard config writes

2026-10-22 12:17:18 +07:00

events.js

feat: v2.5.10 — server mode for a team, file drops in the prompt, tab joins

2026-10-07 14:11:25 +07:00

git-credentials.js

feat: v2.5.5 — AI Router renamed AI Proxy, reload onto new builds, update no longer spins

2026-10-06 22:48:09 +07:00

git-identity.js

feat(git-identity): import an existing SSH key and sign commits with it

2026-11-02 16:12:57 +07:00

homes.js

feat(files): uploads survive a dashboard restart

2026-11-02 16:12:57 +07:00

hooks.js

fix(cost): bill a session outside every workspace to its Linux account's user

2026-10-30 08:50:34 +07:00

host.js

feat(health): System Health in three groups, a score that sees lag; admin user detail

2026-10-27 16:39:38 +07:00

import.js

refactor!: rebrand CCAM to AgentHub

2026-09-07 12:09:15 +07:00

lane-git-history.js

feat(git): history graph with search, commit details, file history, blame/browse at a revision, compare refs, and multi-commit cherry-pick/revert with preview, pause banner and undo

2026-11-02 12:22:46 +07:00

lane-sources.js

feat(server-s3): one Linux user per account (S3) — experimental

2026-10-09 14:57:10 +07:00

lanes.js

feat(files): uploads survive a dashboard restart

2026-11-02 16:12:57 +07:00

locks.js

feat: v2.5.10 — server mode for a team, file drops in the prompt, tab joins

2026-10-07 14:11:25 +07:00

me.js

fix(accounts): a display name may not read as another account's

2026-10-29 13:47:20 +07:00

metrics.js

feat(health): System Health in three groups, a score that sees lag; admin user detail

2026-10-27 16:39:38 +07:00

pets.js

chore: maintenance — dependency majors, rename step 4, member Claude config, OpenAPI coverage

2026-10-26 14:22:41 +07:00

pricing.js

fix: per-user Today, native paste and drop on a local machine

2026-10-26 11:18:05 +07:00

projects.js

feat: v2.5.10 — server mode for a team, file drops in the prompt, tab joins

2026-10-07 14:11:25 +07:00

push.js

feat: v2.5.10 — server mode for a team, file drops in the prompt, tab joins

2026-10-07 14:11:25 +07:00

query.js

feat: analytics parity — tool cost, date ranges, budgets, query explorer, replay, snapshots (v2.4.0)

2026-10-06 17:12:28 +07:00

remote-sources.js

feat: analytics parity — tool cost, date ranges, budgets, query explorer, replay, snapshots (v2.4.0)

2026-10-06 17:12:28 +07:00

reports.js

chore: maintenance — dependency majors, rename step 4, member Claude config, OpenAPI coverage

2026-10-26 14:22:41 +07:00

run.js

feat(server-mode): spend quota per user — no new session, prompts refused once used up

2026-10-28 14:31:11 +07:00

sessions.js

fix(sessions): Top tools counts each tool call once

2026-10-29 14:53:45 +07:00

settings.js

feat(health): System Health in three groups, a score that sees lag; admin user detail

2026-10-27 16:39:38 +07:00

snapshots.js

feat: v2.5.10 — server mode for a team, file drops in the prompt, tab joins

2026-10-07 14:11:25 +07:00

stats.js

feat: analytics parity — tool cost, date ranges, budgets, query explorer, replay, snapshots (v2.4.0)

2026-10-06 17:12:28 +07:00

tool-profiles.js

feat(settings): every AI tool's login profiles in one Settings section, linked to the account pool

2026-10-22 11:11:38 +07:00

updates.js

fix: v2.7.4 — a developer's System page carries no host or other-user path

2026-10-12 15:56:26 +07:00

users.js

fix(avatars): every signed-in account sees other users' pictures

2026-11-02 16:40:29 +07:00

webhooks.js

chore: maintenance — dependency majors, rename step 4, member Claude config, OpenAPI coverage

2026-10-26 14:22:41 +07:00

workflows.js

feat: v2.5.10 — server mode for a team, file drops in the prompt, tab joins

2026-10-07 14:11:25 +07:00