myron f8aaaf725c fix: scope session_start() skip to machine-agent calls only ...

agent/list and agent/status are browser-facing and need $_SESSION loaded
to verify auth. Only skip session_start() for machine-agent sub-actions
(heartbeat, metrics, ha_state, command_result, register) that fire every
10-30s. Previous fix skipped session for all agent/* causing the agents
panel to return 401 to the browser.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-17 13:49:45 +00:00

..

admin

Add DOCS tab to admin panel with infrastructure reference download

2026-06-15 04:05:53 +00:00

agent

Fix Windows agent: exit(1) after self-update so SCM restarts the service

2026-06-13 14:30:20 +00:00

assets

Fix chat URL routing and agent.php fact_type column error

2026-06-17 12:33:09 +00:00

.gitignore

Add reactor.py to deploy/ + gitignore WireGuard .conf files in public_html

2026-06-11 20:47:23 +00:00

.htaccess

Initial commit: JARVIS AI dashboard v2.3

2026-05-25 13:22:57 +00:00

api.php

fix: scope session_start() skip to machine-agent calls only

2026-06-17 13:49:45 +00:00

bridge.php

fix: use default PHP session (PHPSESSID) not custom name — must match what api.php expects

2026-06-01 09:57:02 +00:00

index.html

feat: implement 7 JARVIS UI enhancements

2026-06-17 11:39:45 +00:00

index.php

fix: remove var sessionToken/sessionUser from injected script — conflicted with main script let declarations, killing all JS including logout()

2026-06-01 10:09:14 +00:00

install-agent.sh

install-agent.sh: rewrite for agent v3.0 config format

2026-06-11 21:33:53 +00:00

login.php

fix: inject token as JS global (no sessionStorage needed), skip bridge.php, direct login→app

2026-06-01 10:01:00 +00:00

webhook.php

Add NovaCPX to webhook router (VM deploys via its own cron)

2026-06-09 23:06:02 +00:00