23 Commits

Author	SHA1	Message	Date
Gan, Jimmy	cc3e9dc6fa	fix: improve terminal robustness with exponential backoff and better keepalive ... - Backend: Add 10s connection timeout, improve SSH keepalive (15s × 8 retries) - Backend: Add detailed error logging for debugging - Frontend: Implement exponential backoff (1s → 30s max) instead of fixed 2s - Frontend: Reduce heartbeat to 12s (within 15s SSH keepalive window) - Frontend: Reset reconnect counter on successful connection - Frontend: Fix race condition in auth recovery after manual close	2026-03-11 00:24:17 +08:00
Gan, Jimmy	4201917e17	fix: harden dashboard RBAC and cookie auth flows ... Restrict Docker/Files writes to admins, move terminal websocket auth to cookie-first with temporary query fallback, and migrate refresh-token handling to httpOnly cookies for safer session persistence. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-09 23:44:23 +08:00
Gan, Jimmy	e72665c466	fix: refresh terminal websocket auth on reconnect ... Reuse the existing refresh-token flow before opening terminal websocket connections so reconnects can recover from expired access tokens without requiring a full dashboard reload. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-07 17:49:46 +08:00
Gan, Jimmy	1b9ea140b6	fix: raise terminal per-user session cap ... Allow more concurrent dashboard terminal tabs per user and use the current access token for websocket reconnects so refreshed sessions keep working. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-07 10:37:08 +08:00
Gan, Jimmy	44f0ed5d04	fix: harden dashboard auth and terminal flows ... Tighten terminal websocket auth and proxy trust handling while making file-backed auth/RBAC writes atomic to reduce high-impact security and persistence risks. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-06 23:53:58 +08:00
Gan, Jimmy	c9f06fbbbb	fix: keep terminal sessions alive ... Add WebSocket and SSH keepalives so idle dashboard terminal sessions stay connected across proxies and long-running idle periods. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-06 16:11:43 +08:00
Gan, Jimmy	aaabb8a373	fix: sync terminal page with dashboard theme ... Make terminal tabs, controls, and xterm colors follow the global light/dark theme so terminal UI stays visually consistent with the rest of the dashboard. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-06 10:51:53 +08:00
Gan, Jimmy	b0f66f9650	fix: show terminal close reason in UI ... Display websocket close reason text (or close code fallback) in terminal tabs so SSH/session failures are diagnosable without checking backend logs. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-06 09:15:48 +08:00
Gan, Jimmy	4f95f0249d	feat: add Mac host to dashboard terminal ... Add a dedicated Mac terminal target with separate SSH host/user/key settings and mount a dedicated Mac key file for dashboard containers. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-06 08:32:54 +08:00
jimmy	c29bda76f3	fix: support image drop and paste in terminal ... Allow drag/drop and clipboard image paste in the dashboard terminal so users can quickly upload images into the active shell session, with a visible hint for discoverability. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-03 05:48:10 +00:00
Gan, Jimmy	7f94013bf9	feat: add Caddy VPS terminal connection	2026-02-27 00:26:01 +08:00
Gan, Jimmy	394a1aa367	security: harden dashboard (SSH keys, auth, uploads, CORS, non-root) ... Remove SSH private keys from git, add SECRET_KEY validation, move WS auth from query string to first message, add session limits/idle timeout, PBKDF2 Fernet key, refresh token rotation, TOTP replay protection, file upload size limit + filename sanitization, symlink safety check, restrict CORS methods, IP-gate OpenClaw token, run container as non-root, rate-limit refresh/passkey endpoints, sanitize Gitea path params. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-02-26 17:22:25 +08:00
Gan, Jimmy	d25b3f0785	fix: use flex layout in voice mode to prevent page scroll competing with xterm	2026-02-26 16:57:29 +08:00
Gan, Jimmy	1b06aaa5c7	fix: compact voice mode bottom sheet, hide title, inline mic+transcript	2026-02-26 16:25:35 +08:00
Gan, Jimmy	3d6fb06439	feat: add TTS voice picker to voice mode bottom sheet	2026-02-26 16:22:16 +08:00
Gan, Jimmy	70c716fd19	feat: voice mode bottom sheet with hold/tap/auto talk modes	2026-02-26 16:03:43 +08:00
Gan, Jimmy	70d3be71b9	fix: voice controls reactivity, disable mic on unsupported browsers	2026-02-26 15:40:15 +08:00
Gan, Jimmy	9c5dbcdb37	feat: add voice mode (STT/TTS) to terminal page	2026-02-26 15:35:43 +08:00
Gan, Jimmy	b03b20aee6	feat: terminal tabs with on-demand connections and Claude Dev host	2026-02-26 02:59:25 +08:00
Gan, Jimmy	a882f45f2e	Add multi-host terminal: NAS + VPS side-by-side	2026-02-20 00:53:29 +08:00
Gan, Jimmy	69bd41b5a1	Fix terminal: pass JWT via query param, remove Docker-incompatible IP check	2026-02-19 17:44:55 +08:00
Gan, Jimmy	f3db7d3654	Dashboard UI overhaul: modern design with system stats, SVG icons, Inter font, theme toggle, loading states, and log modal	2026-02-19 02:29:25 +08:00
Gan, Jimmy	70aa421d7f	Add NAS dashboard MVP: Docker mgmt, Gitea, Files, Terminal	2026-02-19 01:59:50 +08:00