Simos Mikelatos 12e7f074d9 Merge commit from fork ...

* fix(security): prevent shell injection in WebSocket handler and harden auth

  - Replace hardcoded JWT secret with auto-generated per-installation secret
  - Add database validation to WebSocket authentication
  - Add token expiration (7d) with auto-refresh
  - Validate projectPath and sessionId in shell handler
  - Use cwd instead of shell string interpolation for project paths
  - Add CORS exposedHeaders for token refresh

* fix: small fix on languages

2026-03-10 17:23:55 +01:00

..

constants

Refactor WebSocket context + centralize platform flag (#363)

2026-02-03 10:05:15 +01:00

database

Merge commit from fork

2026-03-10 17:23:55 +01:00

middleware

Merge commit from fork

2026-03-10 17:23:55 +01:00

routes

feat: new plugin system (#489)

2026-03-09 13:00:52 +03:00

utils

feat: new plugin system (#489)

2026-03-09 13:00:52 +03:00

claude-sdk.js

fix: preserve pending permission requests across WebSocket reconnections (#462)

2026-03-03 20:31:27 +03:00

cli.js

…

cursor-cli.js

fix: don't stream response to another session

2026-01-16 14:04:12 +03:00

gemini-cli.js

feat: Google's gemini-cli integration (#422)

2026-02-27 17:36:35 +03:00

gemini-response-handler.js

feat: Google's gemini-cli integration (#422)

2026-02-27 17:36:35 +03:00

index.js

Merge commit from fork

2026-03-10 17:23:55 +01:00

load-env.js

feat: migrate legacy database to new location and improve last login update handling

2026-02-23 22:12:00 +00:00

openai-codex.js

Refactor/app content main content and chat interface (#374)

2026-02-13 20:26:47 +01:00

projects.js

feat: add full-text search across conversations (#482)

2026-03-06 16:59:23 +03:00

sessionManager.js

feat: Google's gemini-cli integration (#422)

2026-02-27 17:36:35 +03:00