Jeremy McSpadden ab03677567 fix(security): activate auth middleware and harden shutdown/update routes (#4023) ... The Next.js auth middleware (proxy.ts) was never wired in — it exported `proxy` from a file named proxy.ts, but Next.js requires a `middleware` export from middleware.ts. The middleware-manifest.json was empty, leaving all 42 API routes accessible without authentication. Fixes: - Rename web/proxy.ts → web/middleware.ts, export `middleware` not `proxy` - Add defense-in-depth auth-guard to /api/shutdown and /api/update routes - Remove shell: true from update-service spawn (command injection surface) - Update contract tests to verify middleware file name and export Closes #4014 Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-04-13 07:52:43 -04:00
..
__tests__	fix(web): fall back to project totals when dashboard metrics are zero (#2847)	2026-03-27 18:09:55 -06:00
auth-guard.ts	fix(security): activate auth middleware and harden shutdown/update routes (#4023)	2026-04-13 07:52:43 -04:00
auth.ts	fix: use localStorage for auth token to enable multi-tab usage (#2785)	2026-03-26 20:06:50 -06:00
browser-slash-command-dispatch.ts	fix(gsd): align model switching and prefs surfaces	2026-04-09 05:33:13 -05:00
command-surface-contract.ts	feat: managed RTK integration with opt-in preference and web UI toggle (#2620)	2026-03-26 09:33:07 -06:00
dev-overrides.tsx	feat(web): browser-based web interface (#1717)	2026-03-21 12:16:54 -06:00
diagnostics-types.ts	feat: enhance /gsd forensics with journal and activity log awareness	2026-03-25 18:19:08 +00:00
git-summary-contract.ts	feat(web): browser-based web interface (#1717)	2026-03-21 12:16:54 -06:00
gsd-workspace-store.tsx	fix(web): drop provisional pre-tool question text	2026-04-11 07:20:18 -05:00
image-utils.ts	feat(web): browser-based web interface (#1717)	2026-03-21 12:16:54 -06:00
initial-gsd-header-filter.ts	feat(web): browser-based web interface (#1717)	2026-03-21 12:16:54 -06:00
knowledge-captures-types.ts	feat(web): browser-based web interface (#1717)	2026-03-21 12:16:54 -06:00
project-store-manager.tsx	feat(web): browser-based web interface (#1717)	2026-03-21 12:16:54 -06:00
project-url.ts	feat(web): browser-based web interface (#1717)	2026-03-21 12:16:54 -06:00
pty-chat-parser.ts	fix: chat mode misrepresents terminal output, looks stuck, omits user messages (#3092)	2026-03-30 14:36:21 -06:00
pty-manager.ts	feat: managed RTK integration with opt-in preference and web UI toggle (#2620)	2026-03-26 09:33:07 -06:00
remaining-command-types.ts	feat(web): browser-based web interface (#1717)	2026-03-21 12:16:54 -06:00
session-browser-contract.ts	feat(web): browser-based web interface (#1717)	2026-03-21 12:16:54 -06:00
settings-types.ts	fix(gsd): align model switching and prefs surfaces	2026-04-09 05:33:13 -05:00
shutdown-gate.ts	fix(web): skip shutdown in daemon mode so server survives tab close (#2842)	2026-03-27 18:07:44 -06:00
use-editor-font-size.ts	feat(web): browser-based web interface (#1717)	2026-03-21 12:16:54 -06:00
use-terminal-font-size.ts	feat(web): browser-based web interface (#1717)	2026-03-21 12:16:54 -06:00
use-user-mode.ts	feat(web): browser-based web interface (#1717)	2026-03-21 12:16:54 -06:00
utils.ts	feat(web): browser-based web interface (#1717)	2026-03-21 12:16:54 -06:00
visualizer-types.ts	feat(web): browser-based web interface (#1717)	2026-03-21 12:16:54 -06:00
workflow-action-execution.ts	feat(web): browser-based web interface (#1717)	2026-03-21 12:16:54 -06:00
workflow-actions.ts	fix(state-machine): 9 resilience fixes + 86 regression tests (#3161)	2026-04-07 07:27:08 -05:00
workspace-status.ts	fix: use authoritative milestone status in web roadmap (#2807) (#3258)	2026-03-30 13:50:57 -06:00
workspace-types.ts	fix: use authoritative milestone status in web roadmap (#2807) (#3258)	2026-03-30 13:50:57 -06:00
xterm-theme.ts	fix(web): improve light theme terminal contrast (#2819)	2026-03-27 14:47:44 -06:00