The dashboard restart button and install service used local-mode process
management (stopProxy + ensureCliproxyService) which conflicts with
supervisord in Docker deployments. Killing the CLIProxy binary caused the
bootstrap wrapper to exit, supervisord to attempt a restart, but
ensureCliproxyService already spawned an orphaned process on :8317
resulting in EADDRINUSE and supervisord entering FATAL state.
Detect supervisord via /var/run/supervisor.sock and delegate to
supervisorctl restart, matching the pattern already used by
ccs docker update.
Closes#964
- allow raw JSON model arrays with partial fields to format safely
- keep the requested=upstream review fixes compatible with raw editor input
Refs #941
- keep raw JSON model mappings aligned with requested=upstream semantics
- block malformed mapping lines instead of coercing them on save
- render saved mappings as requested to upstream and add regression coverage
Refs #941
- add the huggingface preset and hf alias to the shared preset catalog
- default the preset to Factory Droid because the documented path is generic chat completions
- cover the CLI and dialog behavior with preset metadata and UI tests
- keep requested=upstream semantics stable in the AI Providers editors
- preview the client-visible ANTHROPIC_MODEL instead of the upstream target
- add UI coverage for alias parsing and formatting helpers
Refs #941
- replace the popover list scroll area with a native overflow container
- keep keyboard navigation behavior while restoring wheel scroll in long dropdowns
- only reuse provider catalogs after /api/cliproxy/catalog has resolved
- avoid passing synthesized static fallback catalogs into preset application
- cover quick-setup and cliproxy add-account flows with regression tests
- let applyDefaultPreset accept a caller-provided provider catalog
- pass cached catalog data from cliproxy and quick-setup flows
- add regression coverage for skipping the extra catalog fetch
- fetch live provider model definitions through /api/cliproxy/catalog
- overlay CCS preset metadata without keeping UI dropdowns as the source of truth
- wire /cliproxy and quick setup to the upstream-backed catalog path
- reshape the page into a management-center style control surface
- add activity and CLIProxy error tabs with denser list/detail ergonomics
- switch filters to practical chip groups and update the page tests
Refs #926
- add roadmap note for the new CCS logging surface
- record logging architecture and codebase ownership
- add logging standards for bounded, redacted runtime logs
Refs #926
- stop the Codex free-plan compatibility guard from rewriting codex.settings.json
- keep saved dashboard selections intact and rely on runtime fallback when needed
- update reconcile coverage to lock the non-mutating behavior in place
- switch the reviewer workflow from glm-5-turbo to glm-5.1
- increase workflow timeout to 20 minutes and max turns to 45
- lock the workflow test to the full reviewer model configuration
Closes#922
Replace local mtime-only ProviderTokenSnapshot type and
listProviderTokenSnapshots/findNewTokenSnapshotForPendingAuth in
cliproxy-auth-routes with shared implementations from token-manager.
Ensures dashboard parity with CLI-side SHA-256 fingerprint detection.
Use extractLikelyOAuthAuthorizationUrl before falling back to naive
regex when detecting auth URLs in stderr for manual callback replay.
Prevents prompting with non-OAuth URLs when stderr emits multiple URLs.
Cache file content in RawTokenCandidate to avoid double-reading token
files (TOCTOU race between metadata extraction and fingerprinting).
Rename stale test description and add fingerprint fields to test
snapshots so they exercise the same comparison path as production.
- add explicit access modes so remote users see setup guidance instead of an ambiguous login
- redesign the login page with remote setup messaging, password visibility, and light/dark controls
- cover the access-state contract and login UI with focused tests
- keep headless paste routing aligned with the selected Kiro auth method
- validate local callback replay targets and add prompt cancellation safeguards
- wire IDC params through the dashboard start route and support equals-form CLI flags
- auto-select Builder ID for the default Kiro AWS auth flow
- support IDC auth flags and callback-based Kiro paste replay
- update regression coverage for Kiro auth routing
- add an OpenCode sync guide link to the README docs matrix
- keep the community project attribution intact
- document that contributor community integrations should move
into docs pages instead of being dropped
- reframe README and internal docs around CCS as a multi-provider,
multi-runtime manager
- preserve protected README sections and add guidance to avoid
Gemini and Antigravity as generic hero examples
- update architecture and product docs to use Codex- and
Droid-oriented examples in generic flows
Tam Nhu Tran