mirror of
https://github.com/hansjone/oclaw.git
synced 2026-10-13 07:13:20 +08:00
oliver
df97c5e042
Emergency (fallback / sealed-box) admins lost the workspace sidebar and saw "sign-in failed / add API key" on DSH Desktop because the remote.mux opens anonymously at boot and every early call was rejected terminally. - gateway: anonymous workspace/follow reaches dsh-acl's empty baseline; anonymous streams are parked until the carrier aborts instead of failing; anonymous workspace/initializeDefault answers "nothing created" - request-auth: a dead UDS_SESSION cookie no longer shadows a valid WS ticket or bridge (sync + async variants used by all callers) - dsh-acl: /api/* waits (bounded 15s) for the gateway ACL during Host startup instead of 403, so the Desktop welcome read no longer fails - desktop-bootstrap: key/account projection is best-effort per reference - client: emit connection/reset after login so boot-time caches (settings describe mirror -> Settings > Models) re-read under the real principal - sessions: absolute lifetime fixed at 7 days (was min(ttl, 7d) = 30 min); bridge expiry slides with its session; MemoryStore persisted to sessions.json (bearer hash only, userData AES-256-GCM sealed) - README: session lifetime/persistence and DSH compatibility notes Also includes previously uncommitted uds-auth 0.3.x work in this tree. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
24 lines
444 B
Text
24 lines
444 B
Text
node_modules/
|
|
lib/qrcode-lib/node_modules/
|
|
pnpm-lock.yaml
|
|
roles.json
|
|
config.runtime.json
|
|
*.log
|
|
.DS_Store
|
|
Thumbs.db
|
|
session-owners.json
|
|
session-owners.json.bak*
|
|
user-workspaces.json
|
|
skill-credentials.json
|
|
|
|
# Local one-off probes / scratch (do not commit)
|
|
scripts/find-dsh-process.ps1
|
|
scripts/inspect-session-sample.cjs
|
|
scripts/merge-sessions-into-workspace.ps1
|
|
|
|
session-bridge.json
|
|
roles.json
|
|
|
|
sessions.json
|
|
local-admin.box
|
|
.uds-auth-secret-key
|