dashcaddy

ai-intent.test.js

[grade=A] AI Intent Router — natural language → structured actions

2026-08-12 16:32:44 -07:00

audit-log.routes.test.js

feat(api): audit-log viewer route + UI enhancements (DC-050) [glm-grade=A]

2026-08-17 18:19:41 -07:00

auth.me.always-mounted.test.js

[glm-grade=B] fix(auth): /auth/me hotfix — isValid not isSessionValid + guard (DC-093 r2)

2026-08-22 19:06:34 -07:00

auth.sso-gate.routes.test.js

DC-026/027/028: close 3 more auth security holes + rate limit /auth/* + audit credential exposures

2026-07-01 04:20:57 -07:00

auth.totp.routes.test.js

[grade=B] feat(auth): onboard missing credentials into encrypted vault

2026-08-22 05:41:38 -07:00

backups.schedule.routes.test.js

[glm-grade=A] fix(backups): remove dead-shadow POST /backups/schedule handler (DC-057)

2026-08-18 03:32:54 -07:00

ca-dc076.routes.test.js

fix(ca): gate per-service cert/key download behind TOTP+admin scope; require explicit PFX password; add rate limit (DC-076) [glm-grade=A]

2026-08-18 16:40:28 -07:00

caddy-upstreams-dc073.routes.test.js

fix(caddy-upstreams): validate host is known upstream on all 3 mute endpoints (DC-073) [glm-grade=A]

2026-08-18 15:10:36 -07:00

caddy-upstreams.routes.test.js

feat(monitoring): dead-upstream surfacing + mute toggle (DC-049) [mm-grade=B+]

2026-08-17 17:11:27 -07:00

caddycode-dc070.routes.test.js

fix(caddycode): validate + escape generation config — block CRLF / " / brace injection in Caddyfile interpolation (DC-070) [glm-grade=A]

2026-08-18 14:16:24 -07:00

caddycode-fleet.routes.test.js

fix(fleet): SSRF hardening — hostname validation + DNS rebinding + probe-by-IP (DC-068) [glm-grade=A]

2026-08-18 13:16:44 -07:00

containers.routes.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

discover-adopt.routes.test.js

fix(discover-adopt): use fetchT + caddy.adminUrl (no hardcoded localhost:2019) (DC-064) [glm-grade=A]

2026-08-18 11:31:47 -07:00

discover-disaster.routes.test.js

fix(disaster-recovery): stage Caddyfile + close path-traversal in assets/themes (DC-079) [glm-grade=A]

2026-08-18 17:52:49 -07:00

discover.routes.test.js

[grade=B] DC-100: Service discovery — auto-detect running containers

2026-08-12 12:27:57 -07:00

disk-space.routes.test.js

[glm-grade=B] fix(disk-space): enforce monotonic threshold ordering (DC-059)

2026-08-18 05:09:15 -07:00

errorlogs.routes.test.js

[glm-grade=A] feat(api): error-log filter + pagination + distinct-contexts (DC-052)

2026-08-17 20:53:13 -07:00

errorresponse-arg-order.regression.test.js

fix(routes): convert alias-import + canonical-shape callsites to canonical errorResponse (DC-063) [glm-grade=A]

2026-08-18 11:06:34 -07:00

exec.routes.test.js

fix(exec): scope-based authorization + tighten containerId charset (DC-072) [glm-grade=A]

2026-08-18 14:53:57 -07:00

fleet-ssrf.routes.test.js

fix(fleet): SSRF hardening — hostname validation + DNS rebinding + probe-by-IP (DC-068) [glm-grade=A]

2026-08-18 13:16:44 -07:00

health.routes.test.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

i18n-routes.test.js

[glm-grade=B+] feat(i18n): complete card/filter/action translation keys for 31 languages

2026-08-15 00:01:17 -07:00

log-insights.routes.test.js

[glm-grade=A] fix(log-insights): wire dispose to /app/data paths + bound keepDays (DC-081)

2026-08-18 18:56:13 -07:00

logs-journal.routes.test.js

[glm-grade=B] feat(monitoring): host journald log viewer (DC-055)

2026-08-18 01:29:19 -07:00

notifications-dc092.routes.test.js

[glm-grade=B] fix(notifications): repair UI/API contract drift — SMTP auth, event gate, test button (DC-092)

2026-08-22 18:17:14 -07:00

openclaw.proxy-hardening.test.js

fix(openclaw): harden proxy — 5 MiB cap, RFC 7230 hop-by-hop strip, open-redirect (Location/Refresh/WWW-Auth) strip, path + status validators (DC-065) [glm-grade=A]

2026-08-18 11:59:58 -07:00

security-perimeter.routes.test.js

[glm-grade=A] fix(security): DC-120 surface caddy-source perimeter events in Log Insights dashboard — new GET /api/v1/security/events/perimeter endpoint with per-IP/per-vhost aggregations, event-store compileFilter/filterEvents primitives, and Perimeter section in Log Insights modal with XSS-safe rendering and stale-request guards

2026-08-23 17:26:07 -07:00

services.routes.test.js

[grade=B] feat(auth): onboard missing credentials into encrypted vault

2026-08-22 05:41:38 -07:00

sites-dc074.routes.test.js

fix(sites): SSRF hardening — validate upstream + externalUrl reject private/reserved hosts (DC-074) [glm-grade=A]

2026-08-18 15:31:07 -07:00

system-health.routes.test.js

[grade=A] DC-068: Fix all 3 ESLint errors + auto-fix warnings

2026-08-12 12:35:58 -07:00

tailscale-admin.test.js

fix(tailscale-admin): harden apiToken/tags/description validation (DC-080) [glm-grade=B]

2026-08-18 18:32:34 -07:00

version-http.test.js

[glm-grade=A-] refactor: extract /api/v1/version into routes/version.js + npm ci build

2026-08-15 00:01:16 -07:00

wizard.routes.test.js

Add tests for DC-105/106/108 endpoints + fleet env fix

2026-08-12 13:00:14 -07:00