4 Commits

Include renames

Author	SHA1	Message	Date
Hermes	468bc00106	[grade=A] installer: stop shipping production CA private keys in installers ... electron-builder extraResources bundled ../dashcaddy-api wholesale, so every built AppImage/deb/NSIS/mac-zip carried Sami's PRODUCTION pki/root.key, pki/intermediate.key, generated-certs/* TLS keys, data/, logs. Fix: denylist excludes all key/cert extensions, secret dirs, pki/**, generated-certs/**, data/**, .env*; Dockerfile needs only *.js,src/,routes/, openapi.yaml,VERSION (verified). New scripts/check-artifact-secrets.sh (build:scan) greps built trees for key material + PRIVATE KEY----- blocks. Verified: pre-fix build leaked keys (find . -name '*.key' -> root.key etc); post-fix build clean on linux/win/mac resource trees (scanner passes). Judge: qwen3.8-max stand-in lane, round1 B+7 polish, polish folded, round2 A 0 blocking. Verdicts /tmp/judge-batch3a-{verdict,r2-verdict}.json	2026-09-01 00:20:00 -07:00
Krystie	8ac1937784	fix: recursive data nesting guard + VM destroy in uninstall wizard ... - Cleaned 242MB of recursive data/data/data/ nesting - Added nesting-guard.js: auto-detects and removes recursive duplicates at startup - Wired VM sandbox cleanup into uninstall wizard (calls vmDestroy before regular uninstall) - Container stats, health data, and VM disk all cleaned on uninstall	2026-08-13 02:49:25 -07:00
Krystie	2ff6c05a45	cleanup: remove stale SAMI Caddy files + add download landing page	2026-08-13 01:32:07 -07:00
Sami	f61e85d9a7	Initial commit: DashCaddy v1.0 ... Full codebase including API server (32 modules + routes), dashboard frontend, DashCA certificate distribution, installer script, and deployment skills.	2026-03-05 02:26:12 -08:00