-
bf1bcb1133
P1-3 through P1-8: mark done in production-grade backlog
Hermes
2026-08-10 20:24:22 -07:00
-
7b04bc1d3c
[grade=A] P1-8: replace 66 console.* calls across 6 remaining files with structured logger
Hermes
2026-08-10 20:23:58 -07:00
-
191d3340a7
[grade=A] P1-7: replace 18 console.* calls in bundled-workflows.js with structured logger
Hermes
2026-08-10 20:16:45 -07:00
-
84f63a3261
[grade=A] P1-5, P1-6: replace 40 console.* calls in credential-manager.js + auth-manager.js
Hermes
2026-08-10 20:15:15 -07:00
-
f2c6fa69f5
[grade=A] P1-4: replace 32 console.* calls in resource-monitor.js with structured logger
Hermes
2026-08-10 20:12:22 -07:00
-
c55abdab87
[grade=A] P1-3: replace 36 console.* calls in backup-manager.js with structured logger
Hermes
2026-08-10 20:10:08 -07:00
-
-
0bf4406253
P1-2: mark done in production-grade backlog
Hermes
2026-08-10 15:50:03 -07:00
-
cbc5dc96c8
DC-060: mark done in BACKLOG
Hermes
2026-08-10 15:49:53 -07:00
-
e8b9dd5b91
[grade=A] DC-060: replace 49 console.* calls in update-manager.js with structured logger
Hermes
2026-08-10 15:49:40 -07:00
-
baba762dab
DC-060: claim for Hermes
Hermes
2026-08-10 15:44:59 -07:00
-
f9eaa324dd
DC-059: mark done in BACKLOG + DC-PRODUCTION-GRADE-BACKLOG
Hermes
2026-08-08 15:40:18 -07:00
-
a667de7920
DC-059: Joi validation middleware + schemas for destructive routes
Hermes
2026-08-08 15:39:48 -07:00
-
c1358df0ec
DC-059: claim for Hermes
Hermes
2026-08-08 15:20:09 -07:00
-
55a50fdeb7
P0-3, P0-4, P0-5: mark done in backlog
Hermes
2026-08-08 03:36:52 -07:00
-
609ccd32c4
[grade=A] P0-5: apps-revert catch — log err server-side, return generic 'Revert failed' to client
Hermes
2026-08-08 03:35:55 -07:00
-
57ed09fe91
[grade=A] P0-4: assets upload — wire decodeImageData helper (MIME whitelist + 5MB cap)
Hermes
2026-08-08 03:33:32 -07:00
-
b3488f14ca
[grade=A] P0-3: backups config route — destructure req.body to backups/defaultRetention only
Hermes
2026-08-08 03:30:20 -07:00
-
8072c076e2
P0-2: mark done in backlog
Hermes
2026-08-08 03:27:48 -07:00
-
66e44606af
[grade=A] P0-2: ca.js pkcs12 password — execSync template literal → execFileSync argv (no shell)
Hermes
2026-08-08 03:26:55 -07:00
-
a042645299
P0-1: mark done in backlog
Hermes
2026-08-08 03:24:35 -07:00
-
3a0a5bc897
[grade=A] P0-1: npm audit fix — minimatch 9.0.9 in webdav transitive resolves 3 high CVEs
Hermes
2026-08-08 03:23:39 -07:00
-
9ab3452b19
[grade=B] DC-058: close as done — share UI shipped + tests pass
Hermes
2026-08-06 15:13:19 -07:00
-
a7057e4fba
[grade=B] DC-058: complete Share UI — admin modal + public preview page + grid share button + 3 frontend tests
Hermes
2026-08-06 15:11:31 -07:00
-
f8b088916b
DC-058: claim for Hermes
Hermes
2026-08-06 14:28:00 -07:00
-
9b9711bf24
DC-057: close checkout-to-license contract drift (grade B)
Hermes
2026-08-04 14:18:49 -07:00
-
f154f501ff
DC-057: claim for Hermes
Hermes
2026-08-04 13:13:24 -07:00
-
1c02131fe0
fix(server): DC-058 close 3 P0 bugs — restore.js missing dep, dns.js ok ref, dead /billing/checkout
Hermes
2026-08-03 00:43:34 -07:00
-
f89079804c
Merge fix/readme-license-mismatch into main
Krystie
2026-08-03 00:38:48 -07:00
-
-
7f6203b2f7
fix(readme): correct license badge — MIT to Proprietary EULA, bump version badge to 1.15.0
fix/readme-license-mismatch
Hermes
2026-08-03 00:37:15 -07:00
-
-
b40cb6458b
[grade=D] DC-057: return incomplete claim to todo
Hermes
2026-08-02 13:06:53 -07:00
-
54e8042764
[grade=A] DC-057: release incomplete claim
Hermes
2026-08-02 12:57:52 -07:00
-
fadbfc8eb5
[grade=A] DC-057: claim for Hermes
Hermes
2026-08-02 12:10:57 -07:00
-
d8f9df7e77
[grade=A] DC-055: close with public-routes-drift fix result
Hermes
2026-08-02 03:38:45 -07:00
-
86df178022
[grade=A] DC-055: fix public-routes drift — bill prefix + services mount, drop dead webhook
Hermes
2026-08-02 03:38:23 -07:00
-
d45ebb8f39
[krystie] chore(backlog): close DC-044 (workflow health-check fix shipped on main,
be798a9) + clarify DC-056 result
Krystie
2026-08-01 09:50:24 -07:00
-
a2ab1f85eb
[grade=A] feat(legal): DC-056 ToS + Privacy pages with deploy + regression guard
Hermes
2026-07-31 01:07:46 -07:00
-
be798a9bc2
[grade=B] fix(workflows): DC-044 root-cause — gate notify-on-failure, interpolate failingServices, fix Health.Status check
Hermes
2026-07-31 00:43:29 -07:00
-
8a512774d7
[grade=B] refactor(assets): delete two repo-debris files
Hermes
2026-07-25 14:09:40 -07:00
-
592a9fd939
[grade=B] refactor(license-keygen): extract programmatic API + atomic counter
Hermes
2026-07-25 14:07:47 -07:00
-
6d5b1992b5
[grade=A] refactor: remove stale nested monitoring widget
Hermes
2026-07-24 22:59:22 -07:00
-
649c714aea
[grade=A] refactor: remove dead legacy route context
Hermes
2026-07-24 22:51:31 -07:00
-
0d46225efc
[grade=B] test: sync auth and version contracts
Hermes
2026-07-24 22:39:29 -07:00
-
140ef8726b
[grade=B] refactor: remove stale duplicate license key generator
Hermes
2026-07-24 21:47:31 -07:00
-
0cc278abf1
[grade=B] fix(auth): generalize cross-host SSO handoff
Krystie
2026-07-24 16:03:34 -07:00
-
003b152230
[grade=A] fix(auth): preserve cross-host SSO return URLs
Krystie
2026-07-24 14:36:28 -07:00
-
75f835641f
[grade=B] fix(auth): use host-only session cookies on custom TLDs
Krystie
2026-07-24 05:05:41 -07:00
-
872923dba2
fix(auth): route /api/auth/sso-exchange through the v1 rewrite shim
Krystie
2026-07-24 02:33:29 -07:00
-
10f2bf707b
fix(auth): token-based handoff for cross-subdomain SSO
Krystie
2026-07-24 02:25:25 -07:00
-
f42e761e52
fix(auth): remove stray brace breaking auto-login page inline script
Krystie
2026-07-24 01:39:38 -07:00
-
e208e05b83
fix(auth): relax CSP script-src for auto-login page (inline JS was silently blocked)
Krystie
2026-07-23 23:13:58 -07:00
-
ba21dad550
DC-XXX: never-trap auto-login fallback — stale localStorage + manual links
Krystie
2026-07-22 14:03:34 -07:00
-
09d2451f2c
DC-XXX: add AbortSignal timeouts to auto-login page JS, kill hang
Krystie
2026-07-22 01:43:59 -07:00
-
e69a93a825
bump version: cookie-only session
Krystie
2026-07-21 23:52:36 -07:00
-
96e2ef8609
DC-XXX: cookie-only session validation, kill IP-key cache mismatch
Krystie
2026-07-21 23:52:33 -07:00
-
d450580ef5
DC-054: claim for Hermes
Hermes
2026-07-23 10:07:09 -07:00
-
7143c36187
fix: preserve share store in application context
Krystie
2026-07-21 22:53:43 -07:00
-
7682cb77bf
fix: pass platform paths to share store
Krystie
2026-07-21 22:45:50 -07:00
-
ed32deb4ba
merge: integrate upstream license-tier updates
Krystie
2026-07-21 21:59:56 -07:00
-
-
a2a2bee71e
fix: match parameterized public auth routes
Krystie
2026-07-21 21:59:03 -07:00
-
5660c55cb6
DC-052: mark license tier enforcement complete
Hermes
2026-07-21 09:55:18 -07:00
-
9e1ee75814
DC-052: claim for Hermes
Hermes
2026-07-21 09:49:27 -07:00
-
-
d9e61ce1b7
DC-053: Public share links + Tailscale-mediated share (Pro-gated)
Krystie
2026-07-21 00:45:46 -07:00
-
f0afc4358c
Claim DC-053 (Pro-gated share: public links + Tailscale-mediated)
Krystie
2026-07-20 23:04:49 -07:00
-
273f6b8edb
DC-052: license-tier enforcement (Free caps at 3, gates share on Pro)
hermes
2026-07-20 21:40:26 -07:00
-
b105d5abae
PRODUCT-SPEC: clarify Free has no trial; LIFETIME is creator-only
hermes
2026-07-20 21:22:34 -07:00
-
4671e51465
PRODUCT-SPEC-DECISIONS: lock the 14 product decisions
hermes
2026-07-20 21:01:10 -07:00
-
375dea22ca
PRODUCT-SPEC-DECISIONS + DC-052–056 build pipeline
hermes
2026-07-20 21:00:54 -07:00
-
0b85caa80a
DC-041: integration test for dashcaddy-update.sh auto-update pipeline
hermes
2026-07-20 20:01:42 -07:00
-
321334cd33
DC-048: multi-user bootstrap + admin invites (opt-in)
hermes
2026-07-20 17:44:11 -07:00
-
bd480a69a7
BACKLOG + CHANGELOG: mark DC-049 done
Hermes Agent
2026-07-20 02:23:26 -07:00
-
c54739e110
DC-049 follow-on: email fallback link on TOTP-only overlay
Hermes Agent
2026-07-20 02:21:59 -07:00
-
923ce8c300
DC-049 auth gate UI: pluggable provider selector + email challenge
Hermes
2026-07-20 02:17:12 -07:00
-
56f1a001f2
start.sh auto-sync dashboard bundle into /var/www/dashcaddy-status/
Hermes Agent
2026-07-20 02:07:25 -07:00
-
c619d3a36b
DC-046 DC-047 pluggable auth providers + email magic link
Hermes Agent
2026-07-20 01:40:33 -07:00
-
894e091335
DC-050 harden dataDir + add image-layer migration
Hermes Agent
2026-07-20 00:53:05 -07:00
-
09efce2891
DC-047: claim for Hermes
Hermes
2026-07-17 09:16:55 -07:00
-
9689592086
DC-046: claim for Hermes
Hermes
2026-07-15 09:04:30 -07:00
-
3cf5980083
fix(middleware): split /auth/gate from authLimiter — 20/15min was burning budget on per-asset forward_auth chatter
Krystie
2026-07-14 04:22:32 -07:00
-
de3215f704
fix(update-manager): add ghcr.io registry support
Krystie
2026-07-14 04:10:35 -07:00
-
fb8942a3fa
chore(release): bump to 1.15.0 — DC-042/043 Tailscale admin + DC-044 health-check marker
Krystie
2026-07-14 01:52:59 -07:00
-
a800f0d74e
DC-047: clarify email-only is the identity (no username field)
Hermes
2026-07-13 16:42:47 -07:00
-
fb42663ff2
DC-046..049: backlog — pluggable auth + email magic link
Hermes
2026-07-13 16:40:18 -07:00
-
92eb04ada8
DC-045: fix WorkflowEngine init — new (require(...))() precedence bug
Hermes
2026-07-13 15:47:07 -07:00
-
b492e1cd4f
DC-044: fix WorkflowEngine healthCheckService — servicesStateManager.getState bug
Hermes
2026-07-13 15:38:11 -07:00
-
49e6c9cc11
DC-041: claim for Hermes
Hermes
2026-07-13 15:12:52 -07:00
-
cbe0c912fc
DC-040: repurpose post-deploy-patches.sh as a verifier (fail-loud, not patch-and-continue)
Hermes
2026-07-13 15:08:35 -07:00
-
b13960fa9a
DC-040: claim for Hermes
Hermes
2026-07-13 15:03:49 -07:00
-
5f30fbf1ca
DC-038: mark done in BACKLOG
Hermes
2026-07-13 13:27:47 -07:00
-
1cc112f1e4
DC-038: backup trigger.json + result.json in dashcaddy-update.sh
Hermes
2026-07-13 13:27:38 -07:00
-
2f583e176e
DC-038: claim for Hermes
Hermes
2026-07-13 13:22:57 -07:00
-
fdfe37fcc4
DC-039: mark done + record result
Hermes
2026-07-13 09:00:06 -07:00
-
f750d01ed0
DC-039: route all module file defaults through platformPaths.dataDir
Hermes
2026-07-13 08:59:38 -07:00
-
c9d067c2f0
Add Security Center — multi-source event pipeline with dashboard UI
hermes
2026-07-13 02:28:56 -07:00
-
f405186eb8
Add API-SURFACE.md — full route inventory with auth + rate-limit classification
Hermes Agent
2026-07-13 00:59:22 -07:00
-
58f737a173
Add PRODUCT-SPEC.md draft — sellable subscription model
Hermes Agent
2026-07-13 00:29:32 -07:00
-
81f6049ded
DC-044 Add X-DashCaddy-HealthCheck marker to batch probe endpoint
Krystie
2026-07-09 02:02:45 -07:00
-
0f04bb3638
DC-044: mount Sami CA + fix ca.sami /etc/hosts in DashCaddy container
Krystie
2026-07-08 22:00:25 -07:00
-
2169ec9853
DC-044: fix slice(13) -> slice(12) for /api/v1/auth/totp/check-session drift
Krystie
2026-07-08 21:43:12 -07:00
-
1baef432c4
DC-044: also handle /api/v1/auth/* drift variant in back-compat shim
Krystie
2026-07-08 21:42:03 -07:00
-
cf8909740f
DC-044: fix legacy /api/auth/totp/check-session shim path (drop /auth)
Krystie
2026-07-08 21:29:20 -07:00