8 Commits

Include renames

Author	SHA1	Message	Date
Hermes	46b6952c36	[glm-grade=A] fix(security): DC-120 surface caddy-source perimeter events in Log Insights dashboard — new GET /api/v1/security/events/perimeter endpoint with per-IP/per-vhost aggregations, event-store compileFilter/filterEvents primitives, and Perimeter section in Log Insights modal with XSS-safe rendering and stale-request guards	2026-08-23 17:26:07 -07:00
Hermes	4d97a11978	fix(build): frontend build determinism across line endings (DC-119) [glm-grade=A] ... The deploy host showed phantom dist drift on every git pull: committed dist bundles could not be reproduced on DNS2. Root cause (verified with esbuild 0.25.12 probes): the production transform uses sourcemap:'both', whose inline map base64-embeds RAW source bytes as sourcesContent — a CRLF working copy (Windows dev, core.autocrlf=true) vs an LF checkout produces different dist bytes and a different sw.js cache tag. - build.js: normalizeSource (\r\n -> \n) on every source read (bundle inputs + sw.js read); exported + require.main guard so tests can import it without triggering a build - .gitattributes: * text=auto eol=lf (git-layer kill of the CRLF vector) + binary exclusions; 9 CRLF-in-index asset files renormalized - tests/build-determinism.test.js: 3-case pin (byte-identity after normalization, divergence pre-normalization, CR-strip contract) importing the ACTUAL normalizeSource from build.js - package.json: declare jsdom devDependency — 2 committed test files require('jsdom') but it was never declared, so fresh-checkout npm test failed (it only passed where a stray ancestor node_modules happened to contain it) - dist/features.js + sw.js: canonical deterministic rebuild (cache tag 3354f5fd96 -> d39ab69dd4) Verified: status 54/54, API 2858/2858 (128 suites); CRLF-sim tree and LF tree of same HEAD produce byte-identical dist artifacts (sha256-equal). Judge: glm-5.3 cold round 1 = A, round 2 (post-fold) = A clean, 0 blocking.	2026-08-23 16:34:49 -07:00
Hermes	84edb035e3	[grade=B] feat(auth): onboard missing credentials into encrypted vault	2026-08-22 05:41:38 -07:00
Hermes	d313b1e872	[grade=B] fix(auth): reuse valid session for cross-host SSO	2026-08-22 04:06:27 -07:00
Krystie	ef685e515e	[glm-grade=B+] feat(i18n): complete card/filter/action translation keys for 31 languages ... Full language display names + RTL set (ar/fa/ur) on /i18n/languages; card.internet/auth/tailscale/dashca, status pills, filter bar and batch-operation strings added to every language dictionary. Frontend: English now loads the server dictionary too (keys are semantic ids, not fallback copy), failed loads keep existing DOM text instead of exposing raw keys, isLoaded() gate for pre-load renders. Rebuilt status/dist. Tests: i18n-cards 9/9, full suite 1837/1837.	2026-08-15 00:01:17 -07:00
Hermes	a7057e4fba	[grade=B] DC-058: complete Share UI — admin modal + public preview page + grid share button + 3 frontend tests	2026-08-06 15:11:31 -07:00
Krystie	0cc278abf1	[grade=B] fix(auth): generalize cross-host SSO handoff ... Codex deployment review: urn:ump:sufisot7ewy33mhjude3ly6wxcjizagt42ywaicwve6qufqdtvbq Caddy path-order correction: urn:ump:o6apvvpvhynkouii4cl5ghxpprrwtilrg2dejdy2lqsupoktc6tq	2026-07-24 16:03:34 -07:00
Krystie	003b152230	[grade=A] fix(auth): preserve cross-host SSO return URLs ... Codex: urn:ump:endpmb3rgtqogn2u2jkbbjmsaha6ysjjcxl46fd27ayig5yosawq	2026-07-24 14:36:28 -07:00