docs(review): three-way (Claude+Gemini+Grok) codebase review + remediation plan
Some checks failed
Build and Test / Security Audit (push) Successful in 9m2s
Build and Test / Build Server (Linux) (push) Failing after 16m9s
Build and Test / Build Agent (Windows) (push) Successful in 19m25s
Build and Test / Build Summary (push) Has been skipped

Independent reviews of server/agent/dashboard by Gemini 3.1 Pro and
Grok 4.3, each reading source via its own read_file tool, plus a Claude
synthesis and a phased remediation plan. Top convergent finding:
secrets/tokens in WebSocket URL query strings across agent + dashboard.
See SYNTHESIS-three-way.md and REMEDIATION-PLAN.md.
This commit is contained in:
2026-06-05 17:20:30 -07:00
parent 72835fa1b5
commit ded99c5882
23 changed files with 828 additions and 0 deletions

View File

@@ -0,0 +1,66 @@
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/App.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/api/auth.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/api/client.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/api/codes.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/api/index.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/api/machines.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/api/sessions.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/api/stubs.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/api/types.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/api/users.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/auth/AdminRoute.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/auth/AuthContext.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/auth/AuthProvider.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/auth/ProtectedRoute.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/layout/AppShell.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/layout/PageHeader.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/layout/Sidebar.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/layout/Topbar.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/layout/icons.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/ui/Badge.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/ui/Button.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/ui/ConfirmDialog.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/ui/Drawer.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/ui/Input.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/ui/Modal.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/ui/Panel.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/ui/Spinner.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/ui/States.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/ui/StatusDot.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/ui/Table.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/ui/TableSkeleton.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/ui/dialogStack.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/ui/status.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/ui/toast-context.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/components/ui/toast.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/auth/LoginPage.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/codes/CancelCodeDialog.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/codes/GenerateCodeModal.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/codes/SupportCodesPage.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/codes/hooks.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/machines/BulkRemoveMachinesDialog.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/machines/DeleteMachineDialog.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/machines/KeyRevealModal.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/machines/MachineDetailDrawer.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/machines/MachineKeysModal.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/machines/MachinesPage.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/machines/RemoveMachineDialog.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/machines/hooks.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/sessions/EndSessionDialog.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/sessions/JoinSessionModal.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/sessions/RemoveSessionDialog.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/sessions/SessionsPage.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/sessions/hooks.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/users/CreateUserModal.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/users/DeleteUserDialog.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/users/EditUserModal.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/users/PasswordField.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/users/PermissionsField.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/users/UsersPage.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/users/hooks.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/features/users/password.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/lib/time.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/lib/useClipboard.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/lib/useRelayStatus.ts
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/main.tsx
/d/claudetools/projects/msp-tools/guru-connect/dashboard/src/vite-env.d.ts