3 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
hermes	bb01a77ae7	DC-067: fix shutdown sequencing — stop managers AFTER server.close drains ... Codex grade D flagged two real defects: 1. Managers were stopped before HTTP server finished draining, so in-flight requests could fail when their backing services were already down. 2. _stopManager() promises weren't awaited, contradicting the documented 'declaration order' claim for async stop methods. Fix: server.close callback now awaits _stopManagersInOrder() before exiting. The 'shutdown' event fires first (so listeners can observe the signal); the 'closed' event fires after all managers are stopped.	2026-08-12 03:46:42 -07:00
hermes	88ff260e5e	DC-067: graceful shutdown coordinator (EventEmitter, 10s drain, idempotent)	2026-08-12 03:36:49 -07:00
hermes	c9d067c2f0	Add Security Center — multi-source event pipeline with dashboard UI ... Introduces a unified security event store and HTTP API that ingests events from any of the configured sources (API audit, Caddy access log, fail2ban, shared_bans, future remote agents) and surfaces them in the dashboard. New files: src/security/event-store.js JSONL-backed store + in-memory query index src/security/host-registry.js Registered hosts with per-host API keys src/security/event-workers.js Tail-followers for Caddy/fail2ban/shared_bans logs routes/security.js Events, hosts, ingest, SSE stream endpoints status/js/security-center.js Dashboard modal with Overview/Events/Hosts tabs SECURITY-FEATURE.md Full feature documentation DEAD-CODE.md, DUP-CODE.md, HARDENING.md Prior audits Modified: src/app.js Mount /api/v1/security/* src/utilities/middleware.js Add ingest endpoints to PUBLIC_ROUTES src/security/audit-logger.js Mirror audit events into security store server.js Start security workers on boot status/build.js Bundle security-center.js status/index.html Add Security button to nav	2026-07-13 02:28:56 -07:00