DashCaddy Polish Loop 2fef1c47e5 fix(ca): gate per-service cert/key download behind TOTP+admin scope; require explicit PFX password; add rate limit (DC-076) [glm-grade=A]

2026-08-18 16:40:28 -07:00

..

auth/providers

[grade=pending] QA sprint: commit 103 at-risk files from multi-agent sprint work

2026-08-12 17:34:10 -07:00

billing

[mm-grade=A] DC-058: Stripe license + invoice email automation

2026-08-14 22:39:22 -07:00

config

fix(api): rehydrate process.env from disk-settings.json on boot (DC-048) [glm-grade=A]

2026-08-17 16:04:18 -07:00

context

[glm-grade=B] fix: dead dashboard WS, corrupted error.log, auth-polling storm, re-auth freeze + CVE bumps

2026-08-16 04:18:07 -07:00

dns

[glm-grade=B] fix: dead dashboard WS, corrupted error.log, auth-polling storm, re-auth freeze + CVE bumps

2026-08-16 04:18:07 -07:00

docker

[grade=B] feat: add Vintage Stereo radio app template

2026-08-13 14:29:10 -07:00

managers

[glm-grade=A] fix(auto-restart): await async servicesStateManager.read() so handleContainerDown actually fires (DC-060)

2026-08-18 05:52:32 -07:00

mcp

[grade=A] DashCaddy MCP Server — AI-native self-hosting control plane

2026-08-12 16:30:17 -07:00

monitoring

[glm-grade=B] feat(monitoring): host journald log viewer (DC-055)

2026-08-18 01:29:19 -07:00

plugins

[glm-grade=B] fix: dead dashboard WS, corrupted error.log, auth-polling storm, re-auth freeze + CVE bumps

2026-08-16 04:18:07 -07:00

recipes

[grade=pending] QA sprint: commit 103 at-risk files from multi-agent sprint work

2026-08-12 17:34:10 -07:00

security

[glm-grade=A] fix(csrf): tag browser auto-retry as [CSRF-debug], keep [CSRF] for real probes (DC-058)

2026-08-18 04:17:50 -07:00

utilities

fix(ca): gate per-service cert/key download behind TOTP+admin scope; require explicit PFX password; add rate limit (DC-076) [glm-grade=A]

2026-08-18 16:40:28 -07:00

utils

fix(caddy-admin): IPv6 loopback origin allowlist + bracket-strip helper (DC-069) [glm-grade=A]

2026-08-18 13:34:51 -07:00

websocket

[glm-grade=A] fix(websocket): preserve default-export compat for createDashboardWS

2026-08-18 08:28:24 -07:00

app.js

fix(discover-adopt): use fetchT + caddy.adminUrl (no hardcoded localhost:2019) (DC-064) [glm-grade=A]

2026-08-18 11:31:47 -07:00