devdesk (0.5.1) bookworm; urgency=medium * A session created by opening its URL shows up in the Sessions panel and the switcher right away instead of at the next poll. -- Jared Vititoe Wed, 07 Oct 2026 23:42:01 -0400 devdesk (0.5.0) bookworm; urgency=medium * Security (from the 2026-10-07 review): - ttyd :7681 is firewalled to NPM in CT 126 and its credential was rotated (#1). - "Ask Claude" strips control characters from Grafana text and pastes it as bracketed paste, so alert text can never run a command (#2). - OSC 52 clipboard is write-only: terminal output can no longer read the browser clipboard; tmux allow-passthrough is off (#7). - Gitea/Grafana tokens reach curl on stdin, never on its command line; remote URLs lose any userinfo (#11). * Fixes: - Ending the session you are in no longer leaves a ghost entry (#3). - Reconnecting after a drop never re-creates a session that was ended or renamed meanwhile (`attach --existing`) (#4). - Repo panel uses git --no-optional-locks and drops the safe.directory override (#5); uploads get unique names and are cleaned up on hangup (#6); uploads are size-checked first and streamed in slices with an idle timeout (#9); paths with tabs no longer break the session list (#10). - ttyd allows 32 clients; side-channel calls run two at a time and one tab polls for all open tabs (#8). * Header: the SSO chip is gone ("Sign in again" appears only when the session expires); the session chip shows Claude's state as a dot and opens a session switcher; LIVE is a dot; text size, notifications (with mute) and fullscreen move into a ⋯ menu; the Panels button shows a badge for waiting sessions and alerts (#13, #16). * A bare URL reattaches your last session instead of opening the picker (#16). * Notifications when *other* sessions start waiting, and alerts are polled with the panels closed (#15). * Sidebar: the Claude Context panel is folded into a context bar in each session row; Repo/CI collapses for non-git folders and offers "Ask Claude to fix CI"; the new-session form hides behind "+ New"; more legible labels (#17). * Phone: key bar (Esc, Tab, ⇧Tab, ^C, arrows, ⏎, Claude/Shell), drawer with backdrop, layout that follows the on-screen keyboard, DOM renderer on touch devices, no clock in the tmux status line (#14). * Matrix "Claude needs you": a wait that lasts 30 s with nobody attached posts one message with a link to the Devdesk hookshot webhook (#28). -- Jared Vititoe Wed, 07 Oct 2026 23:34:48 -0400 devdesk (0.4.0) bookworm; urgency=medium * Session status at a glance: Claude hooks record whether each session is working, waiting on you (with Claude's message) or idle. The sidebar shows it with context %, the header shows the current session's state, and a pulsing "needs you" chip jumps to sessions waiting for input. * File & image drop: drag files onto the terminal or paste a screenshot. They're uploaded through ttyd to /var/lib/devdesk/uploads// (25 MB max, pruned after 7 days) and the path is pasted into Claude, which attaches images itself. * Ops Alerts panel is live: firing/pending Grafana alert rules with severity, instances, summary and a link, plus an "Ask Claude" button that types an investigation prompt into the current session. -- Jared Vititoe Wed, 07 Oct 2026 19:24:15 -0400 devdesk (0.3.1) bookworm; urgency=medium * Auto-deploy: tagged releases trigger CT 126's webhook listener (house HMAC pattern), which runs /usr/lib/devdesk/devdesk-deploy to upgrade the package from the apt registry. Running sessions are untouched. -- Jared Vititoe Wed, 07 Oct 2026 13:20:58 -0400 devdesk (0.3.0) bookworm; urgency=medium * Repo / CI panel is live: branch, ahead/behind, uncommitted changes, the Gitea CI status of HEAD (linked to the run) and open PRs for the current session's folder, via `devdesk attach --repo` over the ttyd channel. No sidecar needed; public repos need no token (optional /etc/devdesk/gitea-token for private ones). A notification fires when CI for HEAD finishes while the tab is in the background. * Remote Control verified with resume (same claude.ai session link). * Local settings now go in /etc/devdesk/env.local (read after the packaged env, never shipped), so upgrades no longer stop at a conffile prompt. -- Jared Vititoe Wed, 07 Oct 2026 12:57:04 -0400 devdesk (0.2.1) bookworm; urgency=medium * Session hook and status line only record for panes on DevDesk's own tmux server (Claude run with these settings elsewhere no longer writes into DevDesk's state). * The Claude wrapper re-reads /etc/devdesk/env before every Claude launch, so Remote Control and CLAUDE_ARGS changes apply on the next restart. -- Jared Vititoe Wed, 07 Oct 2026 12:54:06 -0400 devdesk (0.2.0) bookworm; urgency=medium * Sessions no longer need a project folder: any name works and starts in DEVDESK_DEFAULT_DIR unless it matches a project; new NAME [PROJECT]. * Rename and end sessions from the Sessions panel (and devdesk rename). Renames keep the running Claude and its recorded conversation. * Claude Context panel is live: a statusLine command snapshots model, context-window use, cost and edits per session; Claude's footer shows a one-line summary. * Drop GANDALF from the Ops Alerts panel. * CI: bash shell, download retries, Node 22 test invocation, build-essential, smoke-test pipe fix. -- Jared Vititoe Wed, 07 Oct 2026 03:01:21 -0400 devdesk (0.1.0) bookworm; urgency=medium * Initial release: persistent browser terminal for Claude Code (ttyd + tmux) with LotusGuild TDS styling, multiple named sessions, per-session conversation resume and Debian packaging. -- Jared Vititoe Tue, 06 Oct 2026 22:58:26 -0400