Skip to content

Release: 1 feature, 2 fixes, 1 doc, 1 chore → Main#9456

Merged
h0lybyte merged 5 commits intomainfrom
dev
Apr 1, 2026
Merged

Release: 1 feature, 2 fixes, 1 doc, 1 chore → Main#9456
h0lybyte merged 5 commits intomainfrom
dev

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot commented Apr 1, 2026

Release: Dev → Main

5 atomic commits ready for main

Features

Bug Fixes

Documentation

  • docs(journal): updating the daily entry and version bump of the irc gateway. (3564687)

Chores

  • chore(api|rust): updating the kbve deployment and cargo lock. (b11be00)

This PR is automatically maintained by CI — KBVE Studio

#9455)

1. noVNC fix: remove @novnc/novnc and guacamole-common-js from
   Vite build.rollupOptions.external and optimizeDeps.exclude.
   They stay in ssr.external (server-side only). Vite now bundles
   them for the client — fixes "module not available" runtime error.

2. KASM cards: new ReactKasmCards component wired into
   AstroVMDashboard.astro. Shows KASM workspaces with:
   - Start/Stop buttons (scale deployment 0↔1)
   - VPN status indicator (Gluetun sidecar)
   - Open button for KASM web access
   - Bitmask state flags matching VM cards pattern
@github-actions
Copy link
Copy Markdown
Contributor Author

github-actions Bot commented Apr 1, 2026

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA c490460.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

Scanned Files

None

@github-actions github-actions Bot changed the title Release: 1 fix → Main Release: 1 fix, 1 chore → Main Apr 1, 2026
…9457)

Add cross-subdomain auth for *.kbve.com:

Shared cookie (kbve_auth_token):
- Set on .kbve.com domain after OAuth callback on any subdomain
- AuthBridge.handleCallback() sets it, signOut() clears it
- chat.kbve.com checks cookie if no IDB session found
- 1h TTL matching Supabase JWT expiry

Redirect relay (/auth/relay?token=jwt):
- Accepts JWT from URL param (for "Chat" links on kbve.com)
- Validates JWT structure, stores in shared cookie
- Cleans token from URL history, redirects to /chat

Auth check order on chat.kbve.com:
1. IDB session (same-origin, from direct OAuth on chat.kbve.com)
2. Shared cookie (cross-origin, from OAuth on kbve.com)
3. Show login prompt (independent OAuth as fallback)
@github-actions github-actions Bot changed the title Release: 1 fix, 1 chore → Main Release: 1 feature, 1 fix, 1 chore → Main Apr 1, 2026
h0lybyte added 2 commits April 1, 2026 14:25
…9458)

The staff_permissions RPC resolves after the initial auth session.
fetchAll() ran with isStaff=false on first call, marking staff
cards (Grafana, ArgoCD, ClickHouse, ROWS) as 'unavailable'.

Fix: re-check $auth flags directly in fetchAll() before deciding
which services to load. If staff resolved late, update isStaff
and fetch staff-only services.
@github-actions github-actions Bot changed the title Release: 1 feature, 1 fix, 1 chore → Main Release: 1 feature, 2 fixes, 1 doc, 1 chore → Main Apr 1, 2026
@h0lybyte h0lybyte merged commit fecb340 into main Apr 1, 2026
5 checks passed
@github-project-automation github-project-automation Bot moved this from Review to Done in KBVE Apr 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

1 participant