Sami 7e23cb5b06 fix(updates): allow notify endpoint past CSRF + portable JSON parse in release.sh ...

- csrf-protection: skip CSRF validation on /api/system/update-notify. The
  endpoint has its own X-DashCaddy-Notify-Secret auth and is only ever called
  machine-to-machine; browsers never reach it. Without this, the CSRF cookie
  check rejects the notify POST before the secret comparison runs.
- release.sh: the verify step piped curl into `node -p ".../dev/stdin"` which
  works on Linux but blows up on Windows/git-bash. Replaced with portable
  grep+sed extraction so the same script works on both publisher OSes.

2026-05-16 23:55:08 -07:00

..

__tests__

Fix DNS2 self-updater path and sync live dashboard version UI

2026-05-05 17:26:42 -07:00

assets

fix(routes): complete post-refactor dependency wiring cleanup

2026-05-04 16:44:18 -07:00

ca

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

generated-certs

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

pki

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

pylon

fix: add pylon relay fallback to dashboard status endpoint

2026-03-23 16:50:24 -07:00

routes

feat(updates): seamless release flow — push-notify, VERSION copy, robust mirror

2026-05-16 23:46:53 -07:00

scripts

feat(updates): seamless release flow — push-notify, VERSION copy, robust mirror

2026-05-16 23:46:53 -07:00

src

fix(routes): complete post-refactor dependency wiring cleanup

2026-05-04 16:44:18 -07:00

.dockerignore

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

.eslintignore

fix(lint): Add ctx shim to routes/apps and routes/arr

2026-03-29 22:35:13 -07:00

.eslintrc.js

Add dashboard version button and self-update UI wiring

2026-05-05 17:52:05 -07:00

.gitignore

test: build comprehensive test suite reaching 80%+ coverage threshold

2026-04-06 21:36:46 -07:00

.license-counter

fix: service edit, CSRF token stability, and license restore (v1.1.1)

2026-03-23 13:39:05 -07:00

.license-secret

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

.prettierignore

fix(lint): Add ctx shim to routes/apps and routes/arr

2026-03-29 22:35:13 -07:00

.prettierrc

fix(lint): Add ctx shim to routes/apps and routes/arr

2026-03-29 22:35:13 -07:00

app-templates.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

audit-logger.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

auth-manager.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

backup-manager.js

feat: cloud backup destinations + long-term resource history

2026-05-06 19:14:38 -07:00

cache-config.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

comprehensive-test.js

fix(routes): complete post-refactor dependency wiring cleanup

2026-05-04 16:44:18 -07:00

config-schema.js

fix: resolve ctx naming conflict in arr/config.js, add pylon to known config keys

2026-03-30 03:23:59 -07:00

constants.js

fix: increase general rate limit from 100 to 1000 per 15min

2026-03-31 23:26:30 -07:00

credential-manager.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

crypto-utils.js

fix: prevent encryption key conflicts and add license backup

2026-03-23 14:17:25 -07:00

csrf-protection.js

fix(updates): allow notify endpoint past CSRF + portable JSON parse in release.sh

2026-05-16 23:55:08 -07:00

docker-maintenance.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

docker-security.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

Dockerfile

fix(updater): stop false-positive "update available" loop when commit is unknown

2026-05-12 18:20:59 -07:00

error-handler.js

Unified error handling system

2026-03-29 18:46:02 -07:00

error-logger.js

refactor: Phase 2 - add error handling modules and response helpers

2026-03-28 19:01:24 -07:00

errors.js

Unified error handling system

2026-03-29 18:46:02 -07:00

fs-helpers.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

health-checker.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

input-validator.js

fix(routes): complete post-refactor dependency wiring cleanup

2026-05-04 16:44:18 -07:00

jest.config.js

fix(test): remove stale jest setupFilesAfterEnv entry

2026-05-04 16:36:09 -07:00

keychain-manager.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

license-keygen.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

license-manager.js

fix: prevent encryption key conflicts and add license backup

2026-03-23 14:17:25 -07:00

log-digest.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

metrics.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

middleware.js

feat(updates): seamless release flow — push-notify, VERSION copy, robust mirror

2026-05-16 23:46:53 -07:00

openapi.yaml

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

package-lock.json

feat: add 7 new features — exec shell, SSE events, compose import, docker resources, resource limits, email notifications, auto-updates

2026-04-05 16:15:14 -07:00

package.json

chore(release): bump to 1.4.3

2026-05-16 23:47:34 -07:00

pagination.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

platform-paths.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

port-lock-manager.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

recipe-templates.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

resource-monitor.js

feat: cloud backup destinations + long-term resource history

2026-05-06 19:14:38 -07:00

response-helpers.js

fix: spread response data instead of nesting under 'data' key

2026-04-01 02:00:05 -07:00

self-updater.js

feat(updates): seamless release flow — push-notify, VERSION copy, robust mirror

2026-05-16 23:46:53 -07:00

server.js

fix(routes): complete post-refactor dependency wiring cleanup

2026-05-04 16:44:18 -07:00

startup-validator.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

state-manager.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

test-security-fixes.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

update-manager.js

feat: add 7 new features — exec shell, SSE events, compose import, docker resources, resource limits, email notifications, auto-updates

2026-04-05 16:15:14 -07:00

url-resolver.js

Unify URL resolution, add health checker sync, and make modules optional

2026-03-14 23:01:20 -07:00

VERSION

fix(updater): stop false-positive "update available" loop when commit is unknown

2026-05-12 18:20:59 -07:00