Krystie d230b39948 feat(totp): 4-part defense against permanent lockout ...

- credential-manager.js: add diagnose(key) method that distinguishes
  ok | missing | unreadable | corrupt instead of silently returning null
- crypto-utils.js: silent fallback to .encryption-key.bak when primary
  can't decrypt existing credentials; first-run bootstrap writes .bak;
  rotateKey() backs up old key before swap
- routes/auth/totp.js: new public /api/v1/totp/recovery-info endpoint
  returns {status, isSetUp, hint} so UI can show meaningful errors
- middleware.js: add /totp/recovery-info to PUBLIC_ROUTES so the
  locked-out user can read the diagnostic without being logged in

2026-06-18 19:56:45 -07:00

..

__tests__

feat: 1.5.0 prep — API v1 cutover, LICENSE, CHANGELOG, CI

2026-05-17 11:38:45 -07:00

assets

fix(routes): complete post-refactor dependency wiring cleanup

2026-05-04 16:44:18 -07:00

ca

feat: 1.5.0 prep — API v1 cutover, LICENSE, CHANGELOG, CI

2026-05-17 11:38:45 -07:00

data

feat: restore monitoring widget + add sami-files template

2026-06-18 18:52:48 -07:00

generated-certs

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

pki

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

pylon

fix: add pylon relay fallback to dashboard status endpoint

2026-03-23 16:50:24 -07:00

routes

feat(totp): 4-part defense against permanent lockout

2026-06-18 19:56:45 -07:00

scripts

fix: rebuild bundle with widget, restore TOTP across container recreate, integrate auto-updater changes

2026-06-18 19:23:30 -07:00

src

fix: rebuild bundle with widget, restore TOTP across container recreate, integrate auto-updater changes

2026-06-18 19:23:30 -07:00

status/js

feat: restore monitoring widget + add sami-files template

2026-06-18 18:52:48 -07:00

.dockerignore

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

.eslintignore

fix(lint): Add ctx shim to routes/apps and routes/arr

2026-03-29 22:35:13 -07:00

.eslintrc.js

Add dashboard version button and self-update UI wiring

2026-05-05 17:52:05 -07:00

.gitignore

test: build comprehensive test suite reaching 80%+ coverage threshold

2026-04-06 21:36:46 -07:00

.license-counter

fix: service edit, CSRF token stability, and license restore (v1.1.1)

2026-03-23 13:39:05 -07:00

.license-secret

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

.prettierignore

fix(lint): Add ctx shim to routes/apps and routes/arr

2026-03-29 22:35:13 -07:00

.prettierrc

fix(lint): Add ctx shim to routes/apps and routes/arr

2026-03-29 22:35:13 -07:00

app-templates.js

feat: restore monitoring widget + add sami-files template

2026-06-18 18:52:48 -07:00

audit-logger.js

feat: 1.5.0 prep — API v1 cutover, LICENSE, CHANGELOG, CI

2026-05-17 11:38:45 -07:00

auth-manager.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

backup-manager.js

feat: enforceStorageLimit - prune oldest backups when maxStorageBytes exceeded

2026-05-28 15:14:59 -07:00

bundled-workflows.js

feat: premium tier features — auto-backup scheduling, resource alerting, bundled workflows, one-click revert, notification manager

2026-05-27 23:39:46 -07:00

cache-config.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

comprehensive-test.js

fix(routes): complete post-refactor dependency wiring cleanup

2026-05-04 16:44:18 -07:00

config-schema.js

fix: resolve ctx naming conflict in arr/config.js, add pylon to known config keys

2026-03-30 03:23:59 -07:00

constants.js

fix: increase general rate limit from 100 to 1000 per 15min

2026-03-31 23:26:30 -07:00

credential-manager.js

feat(totp): 4-part defense against permanent lockout

2026-06-18 19:56:45 -07:00

crypto-utils.js

feat(totp): 4-part defense against permanent lockout

2026-06-18 19:56:45 -07:00

csrf-protection.js

fix: cross-subdomain SSO auto-login for *arr services

2026-05-23 16:15:56 -07:00

docker-maintenance.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

docker-security.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

Dockerfile

fix(updater): stop false-positive "update available" loop when commit is unknown

2026-05-12 18:20:59 -07:00

error-handler.js

Unified error handling system

2026-03-29 18:46:02 -07:00

error-logger.js

refactor: Phase 2 - add error handling modules and response helpers

2026-03-28 19:01:24 -07:00

errors.js

Unified error handling system

2026-03-29 18:46:02 -07:00

fs-helpers.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

health-checker.js

fix: rebuild bundle with widget, restore TOTP across container recreate, integrate auto-updater changes

2026-06-18 19:23:30 -07:00

input-validator.js

fix(routes): complete post-refactor dependency wiring cleanup

2026-05-04 16:44:18 -07:00

jest.config.js

fix(test): remove stale jest setupFilesAfterEnv entry

2026-05-04 16:36:09 -07:00

keychain-manager.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

license-keygen.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

license-manager.js

fix: prevent encryption key conflicts and add license backup

2026-03-23 14:17:25 -07:00

log-digest.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

metrics.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

middleware.js

feat(totp): 4-part defense against permanent lockout

2026-06-18 19:56:45 -07:00

notification-manager.js

feat: premium tier features — auto-backup scheduling, resource alerting, bundled workflows, one-click revert, notification manager

2026-05-27 23:39:46 -07:00

openapi.yaml

feat: 1.5.0 prep — API v1 cutover, LICENSE, CHANGELOG, CI

2026-05-17 11:38:45 -07:00

package-lock.json

feat: add 7 new features — exec shell, SSE events, compose import, docker resources, resource limits, email notifications, auto-updates

2026-04-05 16:15:14 -07:00

package.json

fix: rebuild bundle with widget, restore TOTP across container recreate, integrate auto-updater changes

2026-06-18 19:23:30 -07:00

pagination.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

platform-paths.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

port-lock-manager.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

recipe-templates.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

resource-monitor.js

feat: premium tier features — auto-backup scheduling, resource alerting, bundled workflows, one-click revert, notification manager

2026-05-27 23:39:46 -07:00

response-helpers.js

fix: spread response data instead of nesting under 'data' key

2026-04-01 02:00:05 -07:00

self-updater.js

fix(updates): route frontend deploy through host-side updater

2026-05-17 01:29:07 -07:00

server.js

feat: premium tier features — auto-backup scheduling, resource alerting, bundled workflows, one-click revert, notification manager

2026-05-27 23:39:46 -07:00

startup-validator.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

state-manager.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

test-security-fixes.js

Sync DNS2 production changes - removed obsolete test suite and refactored structure

2026-03-23 10:47:15 +01:00

update-manager.js

feat: premium tier features — auto-backup scheduling, resource alerting, bundled workflows, one-click revert, notification manager

2026-05-27 23:39:46 -07:00

url-resolver.js

Unify URL resolution, add health checker sync, and make modules optional

2026-03-14 23:01:20 -07:00

VERSION

fix: rebuild bundle with widget, restore TOTP across container recreate, integrate auto-updater changes

2026-06-18 19:23:30 -07:00