Repository navigation
Fix local dashboard password prompts and document verified setup - #36
Merged
seathatflowsinourveins merged 2 commits intoSep 21, 2026
Merged
Conversation
|
You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard. |
seathatflowsinourveins
added a commit
that referenced
this pull request
Sep 23, 2026
* Run Codex lane children blind: no user config, no hooks; prompt rule 6 Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]> * Vendor the blind Claude lane workflow (agent-lab aacd937) and register it The layer-verdict lane now runs its refuters as the Read/Glob/Grep-only semantic-evidence-reviewer and adds a blind rule to every prompt (agent-lab #36). The vendored bytes, SHA256SUMS, vendored-lanes.json and two lane-provenance entries name the new hash 0d66c9a1. Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]> * Close the blind-lane review: no web search, no git history, post-run audit - codex_lane.py pins native web search off (web_search="disabled"; an unpinned probe child ran a web search), refuses a --repo with .git unless --allow-git-history, and writes a report-only codex/blind-audit.json of web searches, MCP calls and commands reaching outside the repository and packets or running git/memory/index CLIs. The comment and README name what configuration denies and what still rests on the prompt. - blind_checkout.py --export copies the stripped tree without .git or BLIND-MANIFEST.json for the lanes; the README drops the git archive advice, which would export the unstripped committed tree. - lane-prompt.md keeps five rules (lane_packets.py embeds them); the blind boundary is a sentence in rule 1. Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]> * Blind audit: flag home-relative and parent paths and sqlite3; refuse repos under any .git Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]> * Blind audit: flag a bare / (cd /; rg ... home) Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]> --------- Co-authored-by: seathatflowsinourveins <[email protected]> Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]>
seathatflowsinourveins
deleted the
codex/passwordless-dashboards-20260921
branch
September 25, 2026 18:47
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Dagu's HTML loaded, but its API returned an HTTP Basic-auth challenge on repeated reads, causing browser password popups. The local profile now uses upstream passwordless authentication on loopback, preserving disabled DAG execution/write permissions. Monitoring now expects HTTP 200.
This also installs Qdrant's official web UI assets, supervises the existing scoped AgentsView archive with a native user service, and records OmniRoute's supported passwordless dashboard setting while retaining gateway API-key checks. The portable dashboard guide includes exact upstream commands, source pins, observed responses and local-administration boundaries.
Validation: all eight local dashboard endpoints returned HTTP 200/exit 0; retained native browser outputs cover Dagu, Grafana, Qdrant, AgentsView and OmniRoute without password fields/dialogs. Dagu run/wiki-write probes returned 403; OmniRoute anonymous and invalid-key requests returned 401. Qdrant matched 225 upstream assets and retained five visible, green collections. AgentsView passed a supervised restart and browser reload after its initial unmanaged process disappeared. 68 relevant project tests, native Prometheus rule validation and deterministic publication checks passed.
These are local dashboard/API integration results, not full upstream suites or provider/token-saving benchmarks. Passwordless Dagu and OmniRoute permit ordinary local administration; keep loopback bindings. Hosted Insight was not enrolled. Previous failed browser profiles and the unmanaged archive-server failure remain recorded.