dashcaddy

apps

[glm-grade=B] fix: dead dashboard WS, corrupted error.log, auth-polling storm, re-auth freeze + CVE bumps

2026-08-16 04:18:07 -07:00

arr

[glm-grade=B] fix: dead dashboard WS, corrupted error.log, auth-polling storm, re-auth freeze + CVE bumps

2026-08-16 04:18:07 -07:00

auth

[grade=B] fix(auth): reuse valid session for cross-host SSO

2026-08-22 04:06:27 -07:00

config

DC-059: Joi validation middleware + schemas for destructive routes

2026-08-08 15:39:48 -07:00

recipes

[glm-grade=B] fix: dead dashboard WS, corrupted error.log, auth-polling storm, re-auth freeze + CVE bumps

2026-08-16 04:18:07 -07:00

ai-intent.js

feat: Jellyfin/Emby recommendations + piracy disclaimer + TOTP fix + AI chat

2026-08-13 03:38:46 -07:00

audit-log.js

feat(api): audit-log viewer route + UI enhancements (DC-050) [glm-grade=A]

2026-08-17 18:19:41 -07:00

auto-restart.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

backups.js

[glm-grade=A] fix(backups): remove dead-shadow POST /backups/schedule handler (DC-057)

2026-08-18 03:32:54 -07:00

billing.js

DC-057: close checkout-to-license contract drift (grade B)

2026-08-04 14:18:49 -07:00

browse.js

Merge krystie-improvements into main

2026-06-25 16:43:10 -07:00

ca.js

fix(ca): gate per-service cert/key download behind TOTP+admin scope; require explicit PFX password; add rate limit (DC-076) [glm-grade=A]

2026-08-18 16:40:28 -07:00

caddy-upstreams.js

fix(caddy-upstreams): validate host is known upstream on all 3 mute endpoints (DC-073) [glm-grade=A]

2026-08-18 15:10:36 -07:00

caddycode.js

fix(caddycode): validate + escape generation config — block CRLF / " / brace injection in Caddyfile interpolation (DC-070) [glm-grade=A]

2026-08-18 14:16:24 -07:00

catalog.js

Fix: Catalog handles APP_TEMPLATES as object map (not just array)

2026-08-12 13:06:07 -07:00

config-drift.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

containers.js

[glm-grade=B] fix: dead dashboard WS, corrupted error.log, auth-polling storm, re-auth freeze + CVE bumps

2026-08-16 04:18:07 -07:00

credentials.js

Consolidate response helpers and error logger to single modules

2026-06-10 21:37:55 -07:00

dependencies.js

[grade=B] DC-081: Input validation for 20 highest-risk mutating routes

2026-08-12 06:20:48 -07:00

disaster-recovery.js

fix(disaster-recovery): stage Caddyfile + close path-traversal in assets/themes (DC-079) [glm-grade=A]

2026-08-18 17:52:49 -07:00

discover-adopt.js

fix(discover-adopt): use fetchT + caddy.adminUrl (no hardcoded localhost:2019) (DC-064) [glm-grade=A]

2026-08-18 11:31:47 -07:00

discover.js

[grade=B] DC-100: Service discovery — auto-detect running containers

2026-08-12 12:27:57 -07:00

disk-settings.js

fix(api): rehydrate process.env from disk-settings.json on boot (DC-048) [glm-grade=A]

2026-08-17 16:04:18 -07:00

disk-space.js

[glm-grade=B] fix(disk-space): enforce monotonic threshold ordering (DC-059)

2026-08-18 05:09:15 -07:00

dns.js

[glm-grade=B] fix: dead dashboard WS, corrupted error.log, auth-polling storm, re-auth freeze + CVE bumps

2026-08-16 04:18:07 -07:00

docker-resources.js

DC-005: Fix all 138 broken test paths after src/ refactor

2026-06-13 12:16:56 -07:00

errorlogs.js

[glm-grade=A] feat(api): error-log filter + pagination + distinct-contexts (DC-052)

2026-08-17 20:53:13 -07:00

events.js

Merge krystie-improvements into main

2026-06-25 16:43:10 -07:00

exec.js

fix(exec): scope-based authorization + tighten containerId charset (DC-072) [glm-grade=A]

2026-08-18 14:53:57 -07:00

fleet.js

fix(fleet): SSRF hardening — hostname validation + DNS rebinding + probe-by-IP (DC-068) [glm-grade=A]

2026-08-18 13:16:44 -07:00

health.js

[grade=A] DC-075: System health endpoint + DC-069 notification cooldown verified

2026-08-12 04:59:03 -07:00

i18n.js

[glm-grade=B+] feat(i18n): complete card/filter/action translation keys for 31 languages

2026-08-15 00:01:17 -07:00

license.js

DC-084/085/089/090: Quick wins batch

2026-08-12 02:24:28 -07:00

log-insights.js

[glm-grade=A] fix(log-insights): wire dispose to /app/data paths + bound keepDays (DC-081)

2026-08-18 18:56:13 -07:00

logs.js

[glm-grade=B] feat(monitoring): host journald log viewer (DC-055)

2026-08-18 01:29:19 -07:00

monitoring.js

Merge krystie-improvements into main

2026-06-25 16:43:10 -07:00

notifications.js

Merge krystie-improvements into main

2026-06-25 16:43:10 -07:00

openclaw.js

fix(openclaw): harden proxy — 5 MiB cap, RFC 7230 hop-by-hop strip, open-redirect (Location/Refresh/WWW-Auth) strip, path + status validators (DC-065) [glm-grade=A]

2026-08-18 11:59:58 -07:00

security.js

fix(routes): convert alias-import + canonical-shape callsites to canonical errorResponse (DC-063) [glm-grade=A]

2026-08-18 11:06:34 -07:00

services.js

fix(routes): convert alias-import + canonical-shape callsites to canonical errorResponse (DC-063) [glm-grade=A]

2026-08-18 11:06:34 -07:00

share.js

[glm-grade=A] fix(share): public-endpoint input hardening + rate limit (DC-083)

2026-08-19 00:10:37 -07:00

sites.js

fix(sites): SSRF hardening — validate upstream + externalUrl reject private/reserved hosts (DC-074) [glm-grade=A]

2026-08-18 15:31:07 -07:00

ssl-monitor.js

Consolidate response helpers and error logger to single modules

2026-06-10 21:37:55 -07:00

tailscale-admin.js

fix(tailscale-admin): harden apiToken/tags/description validation (DC-080) [glm-grade=B]

2026-08-18 18:32:34 -07:00

tailscale.js

[grade=B] DC-081: Input validation for 20 highest-risk mutating routes

2026-08-12 06:20:48 -07:00

themes.js

[glm-grade=B] fix: dead dashboard WS, corrupted error.log, auth-polling storm, re-auth freeze + CVE bumps

2026-08-16 04:18:07 -07:00

updates.js

Merge krystie-improvements into main

2026-06-25 16:43:10 -07:00

version.js

[glm-grade=A-] refactor: extract /api/v1/version into routes/version.js + npm ci build

2026-08-15 00:01:16 -07:00

wizard.js

[grade=B] DC-105: Smart defaults wizard — 'What do you want to self-host?'

2026-08-12 12:50:39 -07:00

workflows.js

[grade=B] DC-081: Input validation for 20 highest-risk mutating routes

2026-08-12 06:20:48 -07:00