feat: multiple profiles (named configuration slots) - #1092

Open

mairas wants to merge 28 commits into

mxtommy:masterfrom

mairas:profiles-upstream

Commits on Jun 24, 2026

feat(auth): stop persisting the plaintext login password (Unit 1)

mairas
and
claude
committed
3213ed3
feat(auth): synchronous auth-mode detection + cookie-mode token suppression (Unit 2)

mairas
and
claude
committed
06f2833
feat(auth): derive cookie-mode session state from loginStatus

mairas
and
claude
committed
fc057ce
feat(auth): carry the session cookie on REST, WS and the Freeboard iframe

mairas
and
claude
committed
0f96e0b
feat(auth): route config persistence by resolved mode, not useSharedConfig

mairas
and
claude
committed
42240f9
feat(auth): cookie-mode SSO bootstrap redirect with budget and recovery

mairas
and
claude
committed
34f1df4
feat(auth): cookie-mode Connectivity UX and SSO login route

mairas
and
claude
committed
0798893
docs(auth): add CHANGELOG entry; mark Units 6-7-9 complete

mairas
and
claude
committed
7cfc8bf
fix(auth): gate write capability on userLevel, not the server readOnlyAccess flag

mairas
and
claude
committed
c3d8303
fix(auth): bound loginStatus with a timeout; drop dead renewal/readOnlyAccess

mairas
and
claude
committed
6d3437c
fix(storage): timeout getConfig and survive a failed patch

mairas
and
claude
committed
8cc428d
fix(auth): scope cookie-mode withCredentials to same-origin requests

mairas
and
claude
committed
186c80f
fix(bootstrap): do not open an anonymous WebSocket on the auth-blocked path

mairas
and
claude
committed
503d604
fix(settings): guard empty server config; simplify useDeviceToken

mairas
and
claude
committed
d8e6603
fix(connectivity): persist config only after the token-mode login succeeds

mairas
and
claude
committed
27d46e4
fix(auth): reject a returnTo that normalizes to a protocol-relative path

mairas
and
claude
committed
08b3b57
test: align global auth/bootstrap stubs with the new public surface

mairas
and
claude
committed
2e7ecb8

Commits on Jun 26, 2026

feat(settings): runtime-mutable active profile + storage write-safety (Unit 2)

mairas
and
claude
committed
1571183
feat(profiles): add ProfileService for profile CRUD + switching (Unit 3)

mairas
and
claude
committed
8ba20fa
feat(settings): hoist remote-control identity to per-device config (Unit 5, R8)

mairas
and
claude
committed
f88d816
feat(profiles): Profiles UI in the Configurations tab (Unit 4)

mairas
and
claude
committed
0fbae43
fix(profiles): gate availability on the user session, not token presence

mairas
and
claude
committed
3c87b51
feat(profiles): collapse profile creation to a single "New" action

mairas
and
claude
committed
693518f
fix(profiles): harden ProfileService mutations (review #2)

mairas
and
claude
committed
7a4aa42
fix(profiles): gate profile write controls on canWriteUserData (review #2)

mairas
and
claude
committed
081e3f7
fix(config): preserve connectionConfig version across writes (review #2)

mairas
and
claude
committed
b1b4475
fix(storage): make awaitQueueDrain report patch failures (review #2)

mairas
and
claude
committed
703c8be
fix(profiles): theme the profile-row divider; cover the demo-config guard (review #2)

mairas
and
claude
committed
2a86ffe

Navigation Menu

feat: multiple profiles (named configuration slots) - #1092

feat: multiple profiles (named configuration slots)#1092
mairas wants to merge 28 commits into
mxtommy:masterfrom
mairas:profiles-upstream

Commits on Jun 24, 2026

feat(auth): stop persisting the plaintext login password (Unit 1)

feat(auth): synchronous auth-mode detection + cookie-mode token suppression (Unit 2)

feat(auth): derive cookie-mode session state from loginStatus

feat(auth): carry the session cookie on REST, WS and the Freeboard iframe

feat(auth): route config persistence by resolved mode, not useSharedConfig

feat(auth): cookie-mode SSO bootstrap redirect with budget and recovery

feat(auth): cookie-mode Connectivity UX and SSO login route

docs(auth): add CHANGELOG entry; mark Units 6-7-9 complete

fix(auth): gate write capability on userLevel, not the server readOnlyAccess flag

fix(auth): bound loginStatus with a timeout; drop dead renewal/readOnlyAccess

fix(storage): timeout getConfig and survive a failed patch

fix(auth): scope cookie-mode withCredentials to same-origin requests

fix(bootstrap): do not open an anonymous WebSocket on the auth-blocked path

fix(settings): guard empty server config; simplify useDeviceToken

fix(connectivity): persist config only after the token-mode login succeeds

fix(auth): reject a returnTo that normalizes to a protocol-relative path

test: align global auth/bootstrap stubs with the new public surface

Commits on Jun 26, 2026

feat(settings): runtime-mutable active profile + storage write-safety (Unit 2)

feat(profiles): add ProfileService for profile CRUD + switching (Unit 3)

feat(settings): hoist remote-control identity to per-device config (Unit 5, R8)

feat(profiles): Profiles UI in the Configurations tab (Unit 4)

fix(profiles): gate availability on the user session, not token presence

feat(profiles): collapse profile creation to a single "New" action

fix(profiles): harden ProfileService mutations (review #2)

fix(profiles): gate profile write controls on canWriteUserData (review #2)

fix(config): preserve connectionConfig version across writes (review #2)

fix(storage): make awaitQueueDrain report patch failures (review #2)

fix(profiles): theme the profile-row divider; cover the demo-config guard (review #2)