-
b32231d4f4
fix(a11y): gate always-mounted sheet dialog semantics on open state
fabi
2026-06-30 21:23:05 +02:00
-
-
1c7495e568
Merge fix/security-audit-port: image-decode DoS cap + audit backlog/media-auth docs
fabi
2026-06-30 20:27:59 +02:00
-
-
d9025f783a
fix(security): port image-decode DoS cap + audit backlog/media-auth docs
fabi
2026-06-30 20:26:57 +02:00
-
-
a490642f5f
Merge fix/security-review-batch-2: cross-event authz + upload OOM backstop
fabi
2026-06-30 20:02:47 +02:00
-
-
8f5afb9df7
Merge feat/ux-review-batch-3: feed virtualization + UX review batch fixes
fabi
2026-06-30 19:51:11 +02:00
-
-
0d7938aff5
fix(feed): width-change measurement invalidation + best-effort SSE counts
fabi
2026-06-30 19:32:32 +02:00
-
e79e020566
feat(eventsnap): UX review batch-3 — feed virtualization, a11y/UX fixes, shared primitives
fabi
2026-06-30 19:16:48 +02:00
-
-
1bb58b59ad
fix(security): re-review follow-ups — drop HEIC/HEIF, fix stale comment
fabi
2026-06-29 19:48:46 +02:00
-
edcef0258c
fix(security): batch-2 hardening — XSS allowlist, event-scoping, deploy
fabi
2026-06-29 19:39:29 +02:00
-
-
77d55e941c
harden(deploy): add app/frontend healthchecks + readiness-gate Caddy
fix/audit-2026-06-27-critical-medium
MechaCat02
2026-06-28 17:38:51 +02:00
-
a895bebdc2
harden(deploy): close public DB exposure + make JWT prod guard effective
MechaCat02
2026-06-28 17:35:57 +02:00
-
2d7169e971
harden: low-severity bucket — unspoofable IP, admin floor, log/SSE hygiene
MechaCat02
2026-06-27 18:01:41 +02:00
-
db1e5b8833
fix: post-review punch-list — upload concurrency cap, atomic release, ban SSE
MechaCat02
2026-06-27 17:40:54 +02:00
-
d4181b1119
chore(git): ignore local audit/review reports
MechaCat02
2026-06-27 16:55:51 +02:00
-
23a7d89a89
fix(migrations): renumber feed-view migration 006 → 010
MechaCat02
2026-06-27 16:47:27 +02:00
-
8272197cea
fix(auth): escalating recovery-PIN lockout backoff (M4)
MechaCat02
2026-06-27 16:28:31 +02:00
-
0737288ed9
a11y: viewport-fit, reduced-motion, like aria-pressed, labels, contrast (M13-M18)
MechaCat02
2026-06-27 16:26:21 +02:00
-
5bd008591b
fix(frontend): surface upload errors, push ban/lock, route guards (WS8)
MechaCat02
2026-06-27 16:16:01 +02:00
-
cf428725b9
perf(feed): rewrite v_feed, bound feed_delta, server-time SSE cursor (H6,H7,M9)
MechaCat02
2026-06-27 15:58:35 +02:00
-
ae6c496f94
fix(authz): event-scope social handlers, atomic gallery release (M1, M3, M8)
MechaCat02
2026-06-27 15:43:12 +02:00
-
9364cb624a
fix(dos): bound uploads, offload bcrypt, cap image decode, split queues
MechaCat02
2026-06-27 15:38:59 +02:00
-
8faf702208
feat(media): authenticated signed media gateway (C1, C2-sink, C3, H2, H10)
MechaCat02
2026-06-27 15:30:30 +02:00
-
ab9f1d89b2
fix(upload): server-side MIME/ext allowlist + atomic transactional write
MechaCat02
2026-06-27 15:19:34 +02:00
-
2068e8c1f3
fix(auth): reconcile role/ban from DB, revoke sessions, fix pin/comment bugs
MechaCat02
2026-06-27 15:14:22 +02:00
-
-
bbec815854
Merge feat/ux-review-followups: UX review batch fixes + shared primitives
MechaCat02
2026-05-24 22:50:34 +02:00
-
-
309c25bc06
feat(frontend): UX review followups — primitives + a11y/UX fixes across 4 passes
MechaCat02
2026-05-24 22:50:28 +02:00
-
-
b241ba6415
Merge fix/security-review-followups: security review batch fixes
MechaCat02
2026-05-17 21:00:55 +02:00
-
-
d228676a56
fix(security): cross-event authz, SSE ticket flow, account hardening, audit logs
MechaCat02
2026-05-17 21:00:51 +02:00
-
-
2340f21637
Merge feat/e2e-test-suite: Playwright E2E suite + small fixes
MechaCat02
2026-05-16 19:37:42 +02:00
-
-
e42d8a92a1
feat(e2e): Playwright suite — 134 tests across 9 spec areas + UA matrix
MechaCat02
2026-05-16 19:02:29 +02:00
-
1cdab21514
fix(frontend): a11y backdrop, ≥44px PIN button, test-ids on auth & upload
MechaCat02
2026-05-16 19:01:54 +02:00
-
05f76514a2
fix(backend): JWT jti, NUL-byte guard, dev-only truncate endpoint
MechaCat02
2026-05-16 19:01:34 +02:00
-
-
e6efffafe5
Merge feat/platform-v0.16: platform features, dark mode, hardening
MechaCat02
2026-05-16 14:39:13 +02:00
-
-
16d8bdb680
Merge feat/html-viewer-export: SvelteKit-static offline viewer
MechaCat02
2026-05-16 14:38:14 +02:00
-
-
2761ac7db6
chore: rebuild export-viewer with the shared Tailwind theme
MechaCat02
2026-05-16 14:33:44 +02:00
-
e619a3bd64
feat(ui): v0.16 features + dark mode across every page
MechaCat02
2026-05-16 14:33:30 +02:00
-
8a769b52bf
feat(diashow): live slideshow with two-queue policy + pluggable transitions
MechaCat02
2026-05-16 14:32:55 +02:00
-
251f9f1469
frontend(plumbing): shared theme tokens, cross-cutting stores, gestures, sheets
MechaCat02
2026-05-16 14:32:37 +02:00
-
2e98f5ddf5
backend(features): quota enforcement, PIN reset, /me, original download, toggles
MechaCat02
2026-05-16 14:32:05 +02:00
-
141c918dd5
backend(infra): shared config helper, startup recovery, periodic maintenance
MechaCat02
2026-05-16 14:31:41 +02:00
-
9a0ceeced7
docs: realign blueprint with shipped state + add feature/journey/ideas docs
MechaCat02
2026-05-16 14:31:06 +02:00
-
-
f7fdfa4627
docs: add mobile testing guide
MechaCat02
2026-04-06 21:29:25 +02:00
-
1685bf105c
fix: update export page guide text for new viewer
MechaCat02
2026-04-06 21:26:06 +02:00
-
ffc926bf4d
feat: replace HTML export with SvelteKit viewer
MechaCat02
2026-04-06 21:26:03 +02:00
-
2fd66a800a
chore: build and commit export-viewer static output
MechaCat02
2026-04-06 21:01:08 +02:00
-
4f966533fe
feat: add export-viewer SvelteKit static app
MechaCat02
2026-04-06 21:01:01 +02:00
-
-
4a5506f32d
feat: mobile-first UI redesign (v0.15.0)
MechaCat02
2026-04-05 18:40:57 +02:00
-
4757be71a3
feat: role-aware nav icons across feed, host, and admin pages
MechaCat02
2026-04-03 20:08:37 +02:00
-
d0a199e9b5
fix: HTML export tojson filter + authenticated file download (v0.14.1)
MechaCat02
2026-04-03 20:01:48 +02:00
-
2375a9cfa6
fix: refresh only export jobs list on Aktualisieren, not the whole page
MechaCat02
2026-04-03 19:47:07 +02:00
-
0bda0eecc8
fix: stringify config values before PATCH to avoid 422 (number vs string)
MechaCat02
2026-04-03 19:39:55 +02:00
-
eab5bb4d1c
feat: add /admin/login page (v0.14.0)
MechaCat02
2026-04-03 19:35:40 +02:00
-
5b2947cdbe
docs: add admin & host dashboard test steps (Steps 10–15)
MechaCat02
2026-04-03 19:31:04 +02:00
-
0351e967c0
feat: unique display names + inline recover on join (v0.13.1)
MechaCat02
2026-04-03 18:37:51 +02:00
-
de0e395a9e
feat: auto-retry uploads when rate limited (v0.13.0)
MechaCat02
2026-04-03 18:37:51 +02:00
-
3dc69e6c6d
fix: upload body limit, role case, and connection drain (v0.12.1)
MechaCat02
2026-04-03 18:14:12 +02:00
-
87b5aff478
feat: implement onboarding guide and HTML export guide
v0.12.0
MechaCat02
2026-04-02 21:13:14 +02:00
-
75d186fad3
feat: implement My Account page
v0.11.0
MechaCat02
2026-04-02 21:11:11 +02:00
-
989d88022a
feat: implement rate limiting across all API endpoints
v0.10.0
MechaCat02
2026-04-02 21:03:59 +02:00
-
258e2bd84d
feat: implement export engine
v0.9.0
MechaCat02
2026-04-02 20:56:21 +02:00
-
32c16da3e2
feat: implement admin dashboard
v0.8.0
MechaCat02
2026-04-02 20:45:37 +02:00
-
71a2987a3e
feat: implement host dashboard
v0.7.0
MechaCat02
2026-04-02 20:43:09 +02:00
-
25f4fb1810
feat: implement camera capture step
v0.6.0
MechaCat02
2026-04-02 20:20:51 +02:00
-
964598e41d
feat: implement gallery feed with social features and SSE
v0.5.0
fabi
2026-04-01 19:17:06 +02:00
-
4e1f1d6426
feat: implement client-side upload queue with IndexedDB persistence
v0.4.0
fabi
2026-04-01 18:59:23 +02:00
-
3f052a4f91
feat: implement upload pipeline with compression and SSE
v0.3.0
fabi
2026-03-31 21:48:59 +02:00
-
8b9d916265
feat: implement authentication flow
v0.2.0
fabi
2026-03-31 21:44:03 +02:00
-
e976f0f670
feat: add database schema and SQLx migrations
v0.1.0
fabi
2026-03-31 21:15:25 +02:00
-
b89b1d6ffa
chore: scaffold monorepo for EventSnap
fabi
2026-03-31 20:15:44 +02:00