Peter Steinberger 97a4d324f5 fix(gateway): allow non-admin cloud sessions (#125787) ...

* fix(gateway): allow non-admin cloud sessions

Admin-provisioned shared runners are now usable by operator.write while raw environment, config, and pairing controls remain admin-only.

Closes #125602

* chore(test): prune assertion safety baseline

* refactor(gateway): isolate cloud reclaim lifecycle

* test(gateway): declare Codex dispatch ownership

* test(ui): cover session-scoped cloud cleanup

* perf(ui): trim tooltip startup path

* fix(gateway): fence cloud placement activation

* test(gateway): update move recovery dispatch contract

* fix(gateway): fail closed on placement recovery

* docs(gateway): explain fail-closed move recovery

* refactor(gateway): consolidate session mutation target keys

2026-08-18 11:33:54 -07:00

..

security

fix(gateway): restore external Tailscale Serve and Funnel proxies (#125412)

2026-08-17 16:01:35 -07:00

1password.md

fix(onepassword): make SecretRef setup production-safe

2026-07-25 06:03:30 -05:00

audit.md

feat: record subagent execution lineage (#122015)

2026-08-17 21:41:30 -07:00

authentication.md

feat(secrets): add SQLite-backed secret store (#121559)

2026-08-10 07:08:40 -07:00

background-process.md

fix(exec): make timeout unit explicit (#119874)

2026-08-10 20:02:53 -07:00

bonjour.md

docs: replace retired config keys with canonical schema keys (#121330)

2026-08-09 20:30:43 -07:00

bridge-protocol.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

cli-backends.md

fix: preserve Claude CLI prompt cache reuse across turns (#124300)

2026-08-15 18:17:17 -07:00

clients.md

feat(ui): session-reset dividers + boundary markers for DB-backed sessions (#122222)

2026-08-11 12:59:11 -07:00

cloud-workers.md

fix(gateway): allow non-admin cloud sessions (#125787)

2026-08-18 11:33:54 -07:00

config-agents.md

fix(agents): honor system owner for unscoped reads (#125318)

2026-08-17 14:07:56 -07:00

config-channels.md

fix(slack): drop the tool-call receipt from finished progress cards (#123851)

2026-08-16 14:58:23 -07:00

config-tools.md

improve(ui): rebuild agent GitHub identity panel on settings primitives (#125472)

2026-08-17 18:09:22 -07:00

configuration-examples.md

fix(gateway): reject unattributable loopback proxy traffic [AI] (#119950)

2026-08-16 21:01:20 -07:00

configuration-reference.md

fix(gateway): harden hook admission and shutdown (#125893)

2026-08-18 10:39:56 -07:00

configuration.md

fix(config): keep missing env references unavailable without rejecting literals (#125455)

2026-08-17 19:05:29 -07:00

diagnostics.md

refactor(config): purge numeric tuning knobs behind built-in defaults (#111382)

2026-07-19 07:35:45 -07:00

discovery.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

doctor.md

fix(upgrade): repair stable state before gateway startup (#125483)

2026-08-18 07:40:01 -07:00

embedding.md

docs(gateway): add client-building and embedding guides (#111726)

2026-07-20 02:12:52 -07:00

external-apps.md

fix(gateway): restart after prepared maintenance suspension (#124157)

2026-08-15 04:53:38 -07:00

gateway-lock.md

fix(gateway): derive lock and coordinator paths from the resolved state dir (#120110)

2026-08-06 19:16:13 -07:00

health.md

fix(health): surface blocked ingress lanes (#123234)

2026-08-13 12:44:59 -07:00

heartbeat.md

feat(heartbeat): default delivery to the configured owner, never groups (#121988)

2026-08-11 13:18:22 +00:00

index.md

docs: drop retired gateway.reload keys and modes from config docs (#116975)

2026-07-31 15:35:16 -07:00

local-model-services.md

refactor(plugins): replace node-llama-cpp with managed llama-server (#123105)

2026-08-13 16:58:20 -07:00

local-models.md

refactor(config): consolidate context budget to one per-model knob (#124665)

2026-08-16 10:05:01 -07:00

logging.md

refactor(channels): flatten channel-turn dispatch naming layers (#121308)

2026-08-09 22:22:46 -07:00

multi-tenant-hosting.md

docs(fleet): remove MVP framing

2026-07-13 17:56:18 -07:00

multiple-gateways.md

fix(sqlite): serialize offline maintenance with gateway (#106210)

2026-07-13 18:15:32 +08:00

network-model.md

…

openai-http-api.md

fix(gateway): validate chat completion token caps (#116563)

2026-07-30 14:37:04 -07:00

openresponses-http-api.md

refactor(config): purge numeric tuning knobs behind built-in defaults (#111382)

2026-07-19 07:35:45 -07:00

openshell.md

docs: replace retired config keys with canonical schema keys (#121330)

2026-08-09 20:30:43 -07:00

opentelemetry.md

fix(diagnostics-otel): keep telemetry exporting across in-process restarts (#120131)

2026-08-07 22:24:18 +08:00

operator-scopes.md

fix(gateway): allow non-admin cloud sessions (#125787)

2026-08-18 11:33:54 -07:00

pairing.md

docs(gateway): clarify dynamic operator scopes (#122931)

2026-08-12 19:23:54 -07:00

permission-modes.md

feat: session permission modes with worktree-scoped defaults (#124909)

2026-08-17 04:37:35 -07:00

portals.md

docs(gateway): document portal tool gating and tighten its description (#123091)

2026-08-13 02:38:24 -07:00

prometheus.md

feat: trace Claude Code CLI model calls (#108304)

2026-07-18 06:23:49 +10:00

protocol.md

fix(gateway): allow non-admin cloud sessions (#125787)

2026-08-18 11:33:54 -07:00

remote-gateway-readme.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

remote.md

feat(gateway): reach a Gateway behind an identity-aware proxy from the CLI (#125700)

2026-08-18 03:29:56 -07:00

restart-recovery.md

fix(delivery): keep failed queue rows payload-free (#123642)

2026-08-14 06:22:51 -07:00

sandbox-vs-tool-policy-vs-elevated.md

feat(agents): unify agent status into a durable progress_card (#125125)

2026-08-17 09:44:04 -07:00

sandboxing.md

docs(install): clarify lifecycle script trust (#124727)

2026-08-17 01:00:17 -07:00

secrets-plan-contract.md

fix(cli): oversized secrets plans consume unbounded memory (#109652)

2026-07-18 07:18:21 +01:00

secrets.md

fix(secrets): scope egress sentinels to Gateway and survive client tunnel resets (#123527)

2026-08-14 01:56:29 -07:00

stable-https-url.md

fix(gateway): reject unattributable loopback proxy traffic [AI] (#119950)

2026-08-16 21:01:20 -07:00

tailscale.md

fix(gateway): restore external Tailscale Serve and Funnel proxies (#125412)

2026-08-17 16:01:35 -07:00

tools-invoke-http-api.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

troubleshooting.md

refactor(heartbeat): delete unreachable prompt-null skip and dead lanes-busy surface (#124385)

2026-08-15 20:48:00 -07:00

trusted-proxy-auth.md

fix(gateway): reject unattributable loopback proxy traffic [AI] (#119950)

2026-08-16 21:01:20 -07:00