Spaces:
Paused
Paused
Commit History
-
chore: fix footer — @somratpro as main author, @anurag008w as contributor
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>8607bed -
chore: remove legacy TELEGRAM_USER_IDS from env-builder
Canonical var is TELEGRAM_ALLOWED_USERS. Processing fallback in start.sh is kept for backward compat, but the UI should not expose the old alias. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>83010db -
Merge pull request #21 from anurag008w/main
Somrat SorkarUnverified signatureEnhance Jupyter security, environment builder UX, and browser reliability18ecb3d -
Merge branch 'main' into main
AnuragUnverified signatureb835b9d -
Remove legacy TELEGRAM_USER_ID and BACKUP_DATASET from env-builder
Codex67c54ed -
Fix sync robustness, devdata activation, alias cleanup, and timing-safe auth compare
Codex14fd0fa -
fix: use GATEWAY_TOKEN as Jupyter token fallback when JUPYTER_TOKEN unset
health-server.js starts before start_jupyter_once() runs, so process.env.JUPYTER_TOKEN is empty in Node. Mirror start.sh fallback: if JUPYTER_TOKEN is unset or "huggingface", use GATEWAY_TOKEN instead — that's what Jupyter is started with, so the injected header now matches. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>8f6996c -
fix: inject Jupyter token header to skip JupyterLab's own login screen
Proxy requests to JupyterLab now include Authorization: token <JUPYTER_TOKEN> so Jupyter recognises the session and doesn't show its password prompt. Our /login gate handles auth — no need for a second Jupyter login. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>0546372 -
refactor: port HuggingMes auth pattern — unified /login, HMAC session, crypto.timingSafeEqual
- Replace per-route env-builder cookie auth with a single /login + /logout route - HMAC-SHA256 session token (huggingclaw-session-v1) instead of raw GATEWAY_TOKEN in cookie - Use crypto.timingSafeEqual to prevent timing-attack token comparisons - Session cookie now uses Path=/ (fixes /env-builder.js 401 that caused empty page) - requireAuth() helper redirects any protected route → /login?next=<path> - Gate /terminal/ (JupyterLab) and /env-builder + /env-builder.js with requireAuth() - Remove old /env-builder/login and /env-builder/logout routes - If already authed, /login redirects to ?next= instead of showing form Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>1c989b2 -
Default Jupyter root changed to /home/node and README updated
AnuragUnverified signatureDefault Jupyter root changed to /home/node and README updatedb617e46 -
Revert Jupyter root default to /home/node and document /home option
Anurag2ddec0e -
Improve privacy-detection timeout, robust state snapshotting, and Jupyter terminal defaults
AnuragUnverified signatureImprove privacy-detection timeout, robust state snapshotting, and Jupyter terminal defaults094b01a -
Set default Jupyter root to filesystem root
Anuragbe6d947 -
Implement sessions_marker to monitor session changes
AnuragUnverified signatureAdded sessions_marker function to track changes in the sessions directory and trigger immediate sync on session updates.c68251f -
Fix shutdown process to handle sync loop correctly
AnuragUnverified signatureFixed bug by ensuring the background sync loop is killed before running the shutdown syncs to avoid timeout issues.8b566d2 -
Update comments and instructions in .env.example
AnuragUnverified signature73b8a17 -
Update labels for key rotation settings
AnuragUnverified signaturef570788 -
Refactor key rotator and merge kimi-coding with moonshot
AnuragUnverified signatureRefactor multi-provider key rotator to improve key management and error handling. Merge kimi-coding and moonshot providers due to shared hostname.233a0dc
-
Merge branch 'main' into edit
AnuragUnverified signaturee19a071 -
Merge pull request #117 from anurag008w/codex/fix-bugs-in-start.sh,-health-server.js,-env-builder.js,-env-5ae6s5
AnuragUnverified signatureImprove provider mapping, harden env-builder, and tighten health-server security/behavior8665528 -
Merge branch 'edit' into codex/fix-bugs-in-start.sh,-health-server.js,-env-builder.js,-env-5ae6s5
AnuragUnverified signature6f89b5f -
Stop gating env-builder.js behind cookie auth to eliminate iframe 401
Anuraga9c21e0 -
Merge pull request #115 from anurag008w/codex/fix-bugs-in-start.sh,-health-server.js,-env-builder.js,-env-y8p5pn
AnuragUnverified signatureHarden env-builder & health-server, fix model/provider mappings, and improve startup robustnesse511ea7 -
Merge branch 'edit' into codex/fix-bugs-in-start.sh,-health-server.js,-env-builder.js,-env-y8p5pn
AnuragUnverified signature73d2e96 -
Restore LLM_MODEL picker type and catalog binding
Anurag6c56d83 -
Fix startup crash, provider key mapping, Jupyter gating, and ENV Builder rendering
AnuragUnverified signatureFix startup crash, provider key mapping, Jupyter gating, and ENV Builder rendering4db8e05 -
Fix startup/env-builder provider mapping and rendering regressions
Anuragafd41e0 -
add 'Required' selector, UI/scroll fixes, auth cookie/cache tweaks, and gateway password gating
AnuragUnverified signatureenv-builder: add 'Required' selector, UI/scroll fixes, auth cookie/cache tweaks, and gateway password gatingc808e75 -
Merge branch 'edit' into codex/investigate-environment-builder-issues
AnuragUnverified signature51fc341 -
Remove quick guide and fix right-panel scrolling
Anuragb829968 -
Env Builder: add Quick Guide and 'Required' selector; auth cookie/caching and password gating fixes
AnuragUnverified signatureEnv Builder: add Quick Guide and 'Required' selector; auth cookie/caching and password gating fixesafb94cb -
Hide env-builder toolbar hint on narrow screens
Anurage79d3d4 -
Polish env-builder UX with quick guide and required selector
Anurag1c87ad6 -
Merge branch 'main' into edit
AnuragUnverified signature2be260d -
Merge branch 'main' into main
AnuragUnverified signaturee8b08e4 -
Merge branch 'main' into main
AnuragUnverified signature68fc4b1 -
feat: add hf_transfer, provider tile, telegram detail, dockerignore, readme sync
- Dockerfile: add --no-install-recommends, hf_transfer for faster backups - health-server.js: show LLM provider in model tile, webhook/polling in telegram tile - .dockerignore: add to reduce build context - README.md: fix stale DEV_MODE-only terminal references, add TELEGRAM_WEBHOOK_URL row Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>8ba914e -
Merge pull request #106 from anurag008w/edit
AnuragUnverified signatureEnhance startup robustness, Jupyter security, and browser reliabilityc8c3bcb -
Harden Chromium launch flags for headless HF container stability
AnuragUnverified signature2b974b9 -
Harden Chromium launch flags for headless HF container stability
Anurag21a9e26 -
feat: password-protect env-builder with GATEWAY_TOKEN
- GET /env-builder — shows login form if not authed - POST /env-builder/login — validates GATEWAY_TOKEN, sets httpOnly cookie - GET /env-builder/logout — clears cookie - GET /env-builder.js — 401 if not authed (prevents unauthenticated JS load) - Constant-time token comparison to prevent timing attacks - Cookie: HttpOnly, SameSite=Strict, 24h TTL, scoped to /env-builder - No protection when GATEWAY_TOKEN is unset (dev mode) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>b05a526 -
fix: center login form, simplify startup logs
login.html: - Fix token input/button centering (remove Bootstrap navbar pull-left) - Update token hint: GATEWAY_TOKEN is default, JUPYTER_TOKEN overrides - Remove stale "default token is huggingface" text start.sh: - Silence GATEWAY_TOKEN auto-enable message (was noisy debug output) - Redirect pip install output to /dev/null, show one-liner status - Remove "JUPYTER_TOKEN not set — using GATEWAY_TOKEN" noise - Replace "DEV_MODE enabled (false) — starting JupyterLab..." with clean "Terminal : starting / started / installed" format - Remove "Jupyter terminal disabled for this boot" noise - Remove "Private :" line from startup summary - Clean DevData restore messages to match consistent format Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>80dd8e5 -
chore: remove legacy alias env vars from env-builder
Drop 4 backward-compat aliases superseded by canonical vars: - GOOGLE_API_KEY → use GEMINI_API_KEY - GOOGLE_API_KEYS → use GEMINI_API_KEYS - CLOUDFLARE_API_TOKEN → use CLOUDFLARE_WORKERS_TOKEN - BACKUP_DATASET → use BACKUP_DATASET_NAME 152 → 148 fields. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>6b48202 -
improve Chromium/file detection and runtime install
AnuragUnverified signature0975e23 -
Merge branch 'edit' into codex/update-readme-and-scripts-for-token-changes
AnuragUnverified signaturef24e27d -
chore: remove legacy Telegram user ID aliases from env-builder
TELEGRAM_USER_ID and TELEGRAM_USER_IDS are legacy aliases for TELEGRAM_ALLOWED_USERS. Remove from UI to avoid confusion — use TELEGRAM_ALLOWED_USERS instead. 154 → 152 fields. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>dd34167 -
Remove merge comparison section from README per review
Anuragc1cd231 -
chore: remove dead env vars from env-builder
Drop 5 fields with no codebase references: - WS_MIN_PROTOCOL, WS_MAX_PROTOCOL (wa-guardian hardcodes these values) - KEEP_ALIVE_INTERVAL (no usage; sync uses SYNC_INTERVAL) - WORKSPACE_GIT_USER, WORKSPACE_GIT_NAME (unused) 159 → 154 fields. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>1230e4d -
fix: default JUPYTER_ENABLED to true, remove baked DEV_MODE from image
Dockerfile: remove ENV DEV_MODE=false baked at build time — was causing start.sh auto-enable check to fail (DEV_MODE non-empty → condition skipped). DEV_MODE is now unset at runtime by default; HF Space Variable overrides still work normally. health-server.js: simplify JUPYTER_ENABLED logic — true by default, only false when DEV_MODE=false or HUGGINGCLAW_JUPYTER_ENABLED=false is explicitly set by the user. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>d8ef5a6 -
fix: default JUPYTER_ENABLED to true, clean up footer
- JUPYTER_ENABLED now defaults to true; only disabled when DEV_MODE=false or HUGGINGCLAW_JUPYTER_ENABLED=false is explicitly set - Fixes logic bug where HUGGINGCLAW_JUPYTER_ENABLED="false" (truthy string) short-circuited the GATEWAY_TOKEN fallback check - Remove Private Space explanation text from dashboard footer Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>5d10651