Hermes 571b86b660 [grade=B] feat: add root-level /metrics Prometheus endpoint ...

Documentation tells users to scrape /metrics (the Prometheus convention)
but the route only existed at /api/v1/metrics/prometheus. The root-level
/metrics returned the SPA HTML fallback via Caddy.

- Add GET /metrics to app.js (same output as /api/v1/metrics/prometheus)
- Add /metrics to PUBLIC_ROUTES in middleware.js (no auth required)
- Add /metrics to rate-limiter skip list
- Add 5 tests in metrics-root-endpoint.test.js
- Add Caddy route for /metrics on test server
- All 1775 tests pass

Codex grade: B (no blocking issues)

2026-08-13 12:40:40 -07:00

..

billing

[grade=A] DC-066: End-to-end billing integration test

2026-08-12 05:47:27 -07:00

helpers

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

mcp

[grade=A] DashCaddy MCP Server — AI-native self-hosting control plane

2026-08-12 16:30:17 -07:00

plugins

[grade=B] DC-080: Plugin/extension system framework

2026-08-12 12:25:26 -07:00

routes

[grade=pending] fix: i18n detectLanguage q-value parsing + update tests for 31-language expansion

2026-08-13 08:48:43 -07:00

test-helpers

DC-017: Regression tests for depth-2 route paths + PUBLIC_ROUTES drift

2026-06-26 12:16:38 -07:00

unit

DC-059: Joi validation middleware + schemas for destructive routes

2026-08-08 15:39:48 -07:00

websocket

[grade=B] DC-076: WebSocket server for real-time dashboard updates

2026-08-12 12:15:17 -07:00

app-startup-smoke.test.js

DC-020: fix last broken require in server.js (./state-manager -> ./src/managers/state-manager)

2026-07-01 07:37:45 -07:00

app-templates.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

audit-logger.security.test.js

DC-026/027/028: close 3 more auth security holes + rate limit /auth/* + audit credential exposures

2026-07-01 04:20:57 -07:00

auth-manager.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

auth-multistore-integration.test.js

DC-048: multi-user bootstrap + admin invites (opt-in)

2026-07-20 17:44:11 -07:00

auth-provider-registry.test.js

DC-046 DC-047 pluggable auth providers + email magic link

2026-07-20 01:40:33 -07:00

auth-rate-limiter.test.js

DC-029: skip authLimiter for already-authenticated requests

2026-07-02 18:27:03 -07:00

auto-restart-manager.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

backup-manager.test.js

DC-019: fix flaky backup-manager tamper test (authTag byte corruption)

2026-06-27 07:02:47 -07:00

bundled-workflows-health-check.test.js

[grade=B] fix(workflows): DC-044 root-cause — gate notify-on-failure, interpolate failingServices, fix Health.Status check

2026-07-31 00:43:29 -07:00

config-drift-detector.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

config-migrations.test.js

[grade=A] DC-068: Fix all 3 ESLint errors + auto-fix warnings

2026-08-12 12:35:58 -07:00

credential-manager.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

crypto-utils.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

csrf-protection.test.js

DC-012: Add Kubernetes-style /healthz + /readyz probe aliases

2026-06-25 17:16:16 -07:00

depth2-routes-smoke.test.js

DC-017: Regression tests for depth-2 route paths + PUBLIC_ROUTES drift

2026-06-26 12:16:38 -07:00

dns-propagation.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

docker-security.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

error-handler.test.js

[grade=A] DC-065: Sweep 15 console.* calls to process.stderr.write

2026-08-12 04:50:16 -07:00

error-tracker.test.js

[grade=B] DC-071: Error tracking integration framework (Sentry-compatible)

2026-08-12 12:30:57 -07:00

errors.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

health-checker.test.js

[grade=pending] fix: eliminate CPU waste from duplicate workflows, self-updater crash loop, and aggressive polling

2026-08-13 10:57:20 -07:00

health-endpoints.test.js

DC-044: fix /health/ready caddy probe false negative

2026-07-08 21:33:06 -07:00

health-probe-aliases.test.js

DC-044: fix /health/ready caddy probe false negative

2026-07-08 21:33:06 -07:00

i18n.test.js

[grade=pending] fix: i18n detectLanguage q-value parsing + update tests for 31-language expansion

2026-08-13 08:48:43 -07:00

input-validator.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

invite-store.test.js

DC-048: multi-user bootstrap + admin invites (opt-in)

2026-07-20 17:44:11 -07:00

jest.setup.js

test: build comprehensive test suite reaching 80%+ coverage threshold

2026-04-06 21:36:46 -07:00

license-keygen.test.js

DC-057: close checkout-to-license contract drift (grade B)

2026-08-04 14:18:49 -07:00

license-manager.test.js

[grade=B] DC-083: comprehensive license-manager.js test coverage (77 tests, revenue path)

2026-08-12 16:11:15 -07:00

license-tier-enforcement.test.js

DC-052: license-tier enforcement (Free caps at 3, gates share on Pro)

2026-07-20 21:40:26 -07:00

log-digest.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

logging.test.js

DC-012: Add Kubernetes-style /healthz + /readyz probe aliases

2026-06-25 17:16:16 -07:00

metrics-root-endpoint.test.js

[grade=B] feat: add root-level /metrics Prometheus endpoint

2026-08-13 12:40:40 -07:00

metrics.test.js

[grade=A] DC-068: Fix all 3 ESLint errors + auto-fix warnings

2026-08-12 12:35:58 -07:00

network-ips-route.test.js

DC-031: fix /api/v1/network/ips ReferenceError + add regression tests

2026-07-06 15:06:28 -07:00

notification-manager.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

pagination.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

platform-paths.test.js

[grade=B] DC-063: Coverage threshold adjustment + toDockerMountPath edge case test

2026-08-12 05:07:24 -07:00

port-lock-manager.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

public-route-placeholders.test.js

fix: match parameterized public auth routes

2026-07-21 21:59:03 -07:00

public-routes-drift.test.js

[grade=A] DC-055: fix public-routes drift — bill prefix + services mount, drop dead webhook

2026-08-02 03:38:23 -07:00

resource-monitor.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

self-updater-version.test.js

[grade=B] test: sync auth and version contracts

2026-07-24 22:39:29 -07:00

session-cookie-scope.test.js

[grade=B] fix(auth): use host-only session cookies on custom TLDs

2026-07-24 05:15:08 -07:00

share-routes.test.js

DC-053: Public share links + Tailscale-mediated share (Pro-gated)

2026-07-21 00:45:46 -07:00

share-store.test.js

DC-053: Public share links + Tailscale-mediated share (Pro-gated)

2026-07-21 00:45:46 -07:00

ssl-monitor.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

sso-handoff-exchange.test.js

[grade=B] fix(auth): generalize cross-host SSO handoff

2026-07-24 16:03:34 -07:00

state-manager.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

tailscale-coord.test.js

DC-043: tailscale coordination API client + admin/settings routes

2026-07-06 21:28:03 -07:00

tailscale-manager.test.js

DC-042: implement real Tailscale manager — replace null stub

2026-07-06 18:55:16 -07:00

update-manager.test.js

[grade=A] DC-068: Fix all 3 ESLint errors + auto-fix warnings

2026-08-12 12:35:58 -07:00

url-resolver.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

user-store.test.js

DC-048: multi-user bootstrap + admin invites (opt-in)

2026-07-20 17:44:11 -07:00