nntrivi2001 600e8eec6a fix(avatars): every signed-in account sees other users' pictures ...

System Health shows every user's name and avatarAt to everyone, but the
picture route GET /api/users/:id/avatar sat under the staff-only /users
prefix, so a developer got 403 EADMIN and saw only initials. authGuard now
lets any signed-in account make that one read (EVERYONE_READS); every
other /users path stays staff-only, and the test checks both.

2026-11-02 16:40:29 +07:00

..

ai-tools.js

chore: v2.8.15 — Oh My Pi login sharing, omp --allow-home, Markdown Preview default, first-login password

2026-10-22 10:04:30 +07:00

artifacts.js

feat(artifacts): Share again takes a skill's newest version; a same-named upload updates it

2026-10-30 14:20:18 +07:00

auth.js

fix(avatars): every signed-in account sees other users' pictures

2026-11-02 16:40:29 +07:00

cc-config.js

chore: maintenance — dependency majors, rename step 4, member Claude config, OpenAPI coverage

2026-10-26 14:22:41 +07:00

codex-config.js

fix(codex-config): close whole-branch review defects in the Codex panel

2026-09-09 01:17:06 +07:00

files.js

feat(files): uploads survive a dashboard restart

2026-11-02 16:12:57 +07:00

git-history.js

feat(git): history graph with search, commit details, file history, blame/browse at a revision, compare refs, and multi-commit cherry-pick/revert with preview, pause banner and undo

2026-11-02 12:22:46 +07:00

git-refs.js

feat(git): Branches & tags panel — rename, branch from any ref, upstream, tags

2026-11-02 12:00:55 +07:00

git-rewrite.js

feat(git): 3-way merge editor, reflog, rebase/interactive rebase, reset with undo, force-with-lease push, remote branches and remotes

2026-11-02 12:12:45 +07:00

lanes-more.js

feat(clone): background clone jobs that survive a reload and a server restart

2026-11-02 10:47:51 +07:00

lanes.js

feat(git): history graph with search, commit details, file history, blame/browse at a revision, compare refs, and multi-commit cherry-pick/revert with preview, pause banner and undo

2026-11-02 12:22:46 +07:00

misc.js

perf: hourly update check only with a browser open; opt-in retention, incremental auto-vacuum and Compact

2026-10-16 10:20:38 +07:00

ops-more.js

feat(artifacts): Share again takes a skill's newest version; a same-named upload updates it

2026-10-30 14:20:18 +07:00

override-core.js

docs: UI-audit fixes in CLAUDE.md, API, OpenAPI, LANES and READMEs

2026-10-05 13:22:13 +07:00

override-ops.js

fix: event-loop freezes, plugin-install boot crash, tmux attach/scrollbar, Codex transcripts

2026-10-05 17:01:05 +07:00

override-pricing-alerts.js

feat: workspace aliases, tab groups of split panes, native path picker (v2.1.0)

2026-10-06 11:31:26 +07:00

override-sessions-agents.js

feat: file upload/download and pinned sessions, text size, git identity and clone

2026-10-14 12:21:55 +07:00

push.js

feat(run,notifications,profiles): stop sending prompts nobody typed, and fix notification + profile delivery

2026-09-21 15:15:22 +07:00

run.js

feat(server-mode): spend quota per user — no new session, prompts refused once used up

2026-10-28 14:31:11 +07:00

tools-more.js

fix(profiles): a Codex switch reaches running and new sessions

2026-10-29 15:54:20 +07:00