Hermes 74e21c1edc [pending-judge] feat(DC-161): calendar widget + Radicale auto-wiring ...

- Top-bar calendar widget (status/js/calendar-widget.js): next-appointment
  display, settings modal with CalDAV/ICS source management and a
  Test-connection probe. Follows the weather-widget pattern.
- Backend routes/calendar.js: sources CRUD (secrets in credential manager,
  never in responses), aggregated events across sources with per-source
  error isolation, Radicale provision endpoint, CalDAV discover probe.
- src/calendar/ics-parser.js: dependency-free RFC 5545 parser with bounded
  RRULE expansion (DAILY/WEEKLY-BYDAY/MONTHLY/YEARLY, COUNT/UNTIL/INTERVAL,
  EXDATE consumes COUNT, RECURRENCE-ID overrides), 500-event cap.
- src/calendar/caldav-client.js: CalDAV REPORT time-range queries over
  node:https (no new deps), HTTPS-enforced off localhost, 5MiB response cap.
- src/calendar/radicale-provisioner.js: zero-config auto-wiring - generates
  a 24-char password, writes Radicale htpasswd config (pure-Node APR1 hash
  verified byte-for-byte against openssl passwd -apr1 vectors), stores
  credentials, registers the source. Deploy hook in routes/apps/deploy.js
  wires any Radicale deployed via the App Selector automatically.
- Radicale app template (tomsquest/docker-radicale) in the catalog.
- Tests: 32 new (parser unit, provisioner unit incl. openssl vectors,
  route tests). Full suite 3552 passed; only pre-existing pdf-parse
  billing/invoice failures remain (proven red at base 448f535).
- OpenAPI: 5 calendar paths documented. CHANGELOG entry added.

2026-10-07 19:57:22 -07:00

..

apps

[pending-judge] feat(DC-161): calendar widget + Radicale auto-wiring

2026-10-07 19:57:22 -07:00

arr

[glm-grade=A] fix(notifications): un-gate 7 dead emitters + repair legacy 4-arg send shape (DC-094)

2026-08-22 19:42:25 -07:00

auth

[grade=A] Register sec.sami dashboard in DashCaddy login-page map

2026-09-13 05:32:13 -07:00

config

DC-059: Joi validation middleware + schemas for destructive routes

2026-08-08 15:39:48 -07:00

recipes

[glm-grade=A] fix(notifications): un-gate 7 dead emitters + repair legacy 4-arg send shape (DC-094)

2026-08-22 19:42:25 -07:00

ai-intent.js

feat: Jellyfin/Emby recommendations + piracy disclaimer + TOTP fix + AI chat

2026-08-13 03:38:46 -07:00

audit-log.js

feat(api): audit-log viewer route + UI enhancements (DC-050) [glm-grade=A]

2026-08-17 18:19:41 -07:00

auto-restart.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

backups.js

[glm-grade=A] fix(backups): remove dead-shadow POST /backups/schedule handler (DC-057)

2026-08-18 03:32:54 -07:00

billing.js

DC-057: close checkout-to-license contract drift (grade B)

2026-08-04 14:18:49 -07:00

browse.js

Merge krystie-improvements into main

2026-06-25 16:43:10 -07:00

ca.js

DC-147: named root CA with critical name constraints, leaf compliance assertions, install-page hardening, encrypted backup + tests

2026-10-03 21:43:11 -07:00

caddy-upstreams.js

fix(caddy-upstreams): validate host is known upstream on all 3 mute endpoints (DC-073) [glm-grade=A]

2026-08-18 15:10:36 -07:00

caddycode.js

[grade=B] api: fix undeclared 'format' runtime bug in routes/ca.js + 10 lint errors

2026-08-31 23:37:00 -07:00

calendar.js

[pending-judge] feat(DC-161): calendar widget + Radicale auto-wiring

2026-10-07 19:57:22 -07:00

catalog.js

[pending-judge] fix(integration): catalog detail reads app.docker.* (DC-160); Shield committed; composition-root e2e

2026-10-07 00:58:03 -07:00

config-drift.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

containers.js

[glm-grade=B] fix: dead dashboard WS, corrupted error.log, auth-polling storm, re-auth freeze + CVE bumps

2026-08-16 04:18:07 -07:00

credentials.js

Consolidate response helpers and error logger to single modules

2026-06-10 21:37:55 -07:00

dependencies.js

[grade=B] DC-081: Input validation for 20 highest-risk mutating routes

2026-08-12 06:20:48 -07:00

deploys.js

[pending-judge] fix(r5): exercise the boot-timeout kill, total bridge-body handling, strict subdomain labels (judge r4 blockers)

2026-10-07 08:31:14 -07:00

disaster-recovery.js

fix(disaster-recovery): stage Caddyfile + close path-traversal in assets/themes (DC-079) [glm-grade=A]

2026-08-18 17:52:49 -07:00

discover-adopt.js

fix(discover-adopt): use fetchT + caddy.adminUrl (no hardcoded localhost:2019) (DC-064) [glm-grade=A]

2026-08-18 11:31:47 -07:00

discover.js

[grade=B] DC-100: Service discovery — auto-detect running containers

2026-08-12 12:27:57 -07:00

disk-settings.js

fix(api): rehydrate process.env from disk-settings.json on boot (DC-048) [glm-grade=A]

2026-08-17 16:04:18 -07:00

disk-space.js

[glm-grade=B] fix(disk-space): enforce monotonic threshold ordering (DC-059)

2026-08-18 05:09:15 -07:00

dns.js

[glm-grade=B] fix: dead dashboard WS, corrupted error.log, auth-polling storm, re-auth freeze + CVE bumps

2026-08-16 04:18:07 -07:00

docker-resources.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

errorlogs.js

[glm-grade=A] feat(api): error-log filter + pagination + distinct-contexts (DC-052)

2026-08-17 20:53:13 -07:00

events.js

Merge krystie-improvements into main

2026-06-25 16:43:10 -07:00

exec.js

fix(exec): scope-based authorization + tighten containerId charset (DC-072) [glm-grade=A]

2026-08-18 14:53:57 -07:00

fleet.js

fix(fleet): SSRF hardening — hostname validation + DNS rebinding + probe-by-IP (DC-068) [glm-grade=A]

2026-08-18 13:16:44 -07:00

health.js

[grade=A] DC-075: System health endpoint + DC-069 notification cooldown verified

2026-08-12 04:59:03 -07:00

i18n.js

[glm-grade=B+] feat(i18n): complete card/filter/action translation keys for 31 languages

2026-08-15 00:01:17 -07:00

license.js

[grade=A] Harden server-managed license renewals

2026-08-22 18:15:37 -07:00

log-insights.js

[glm-grade=A] fix(log-insights): wire dispose to /app/data paths + bound keepDays (DC-081)

2026-08-18 18:56:13 -07:00

logs.js

[grade=B] api: fix undeclared 'format' runtime bug in routes/ca.js + 10 lint errors

2026-08-31 23:37:00 -07:00

monitoring.js

Merge krystie-improvements into main

2026-06-25 16:43:10 -07:00

network-access.js

DC-145: access map store (grants, effective access, change events) + /network/access routes + tests

2026-10-03 21:12:35 -07:00

network-forward-auth.js

P7 r8 fix: forward_auth trust boundary (XFF/XFH honored only from trusted proxy; direct/spoofed requests use socket identity) + adversarial tests

2026-10-03 23:25:23 -07:00

network-groups.js

DC-144: DashCaddy-side groups + resources model/routes with cascade delete + tests

2026-10-03 21:37:13 -07:00

network-invites.js

DC-142: link-first invites routes via network provider + tests

2026-10-03 21:31:57 -07:00

network-lifecycle.js

DC-143: block/unblock/remove person + revoke device orchestration + tests

2026-10-03 21:29:41 -07:00

network-people.js

DC-141: people store (atomic JSON) + /network/people routes + last-admin guard + tests

2026-10-03 21:14:20 -07:00

network-resources.js

DC-144: DashCaddy-side groups + resources model/routes with cascade delete + tests

2026-10-03 21:37:13 -07:00

network-wg-redeem.js

DC-150: WG invite redemption page (browser X25519 keygen, client-side config+QR) + public redeem API + tests

2026-10-03 21:40:09 -07:00

network-wizard.js

DC-152: Private Network setup wizard (mode/domain/connect/dns/ca/admin steps) + status API + tests

2026-10-03 21:47:34 -07:00

notifications.js

[glm-grade=A] fix(notifications): un-gate 7 dead emitters + repair legacy 4-arg send shape (DC-094)

2026-08-22 19:42:25 -07:00

openclaw.js

[grade=B] api: fix undeclared 'format' runtime bug in routes/ca.js + 10 lint errors

2026-08-31 23:37:00 -07:00

security.js

[glm-grade=A] fix(security): DC-120 surface caddy-source perimeter events in Log Insights dashboard — new GET /api/v1/security/events/perimeter endpoint with per-IP/per-vhost aggregations, event-store compileFilter/filterEvents primitives, and Perimeter section in Log Insights modal with XSS-safe rendering and stale-request guards

2026-08-23 17:26:07 -07:00

services.js

[grade=B] feat(auth): onboard missing credentials into encrypted vault

2026-08-22 05:41:38 -07:00

share.js

[glm-grade=A] fix(share): public-endpoint input hardening + rate limit (DC-083)

2026-08-19 00:10:37 -07:00

shield.js

[pending-judge] fix(integration): catalog detail reads app.docker.* (DC-160); Shield committed; composition-root e2e

2026-10-07 00:58:03 -07:00

sites.js

fix(sites): SSRF hardening — validate upstream + externalUrl reject private/reserved hosts (DC-074) [glm-grade=A]

2026-08-18 15:31:07 -07:00

ssl-monitor.js

Consolidate response helpers and error logger to single modules

2026-06-10 21:37:55 -07:00

tailscale-admin.js

fix(tailscale-admin): harden apiToken/tags/description validation (DC-080) [glm-grade=B]

2026-08-18 18:32:34 -07:00

tailscale.js

[grade=B] DC-081: Input validation for 20 highest-risk mutating routes

2026-08-12 06:20:48 -07:00

themes.js

[glm-grade=B] fix: dead dashboard WS, corrupted error.log, auth-polling storm, re-auth freeze + CVE bumps

2026-08-16 04:18:07 -07:00

updates.js

Merge krystie-improvements into main

2026-06-25 16:43:10 -07:00

version.js

[glm-grade=A-] refactor: extract /api/v1/version into routes/version.js + npm ci build

2026-08-15 00:01:16 -07:00

wizard.js

[grade=B] DC-105: Smart defaults wizard — 'What do you want to self-host?'

2026-08-12 12:50:39 -07:00

workflows.js

[grade=B] DC-081: Input validation for 20 highest-risk mutating routes

2026-08-12 06:20:48 -07:00