6 commits

Author	SHA1	Message	Date
oliver	c1b1c0f75d	Persist cutover evidence cards with device-raw A/B keys for board and AI. ... Evaluate keeps match keys for normalize/map pairing while diffs, reds, and the board show collected ports plus show-command provenance; add monitor-context and command-raw read APIs with biz-monitor:read scope. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-19 22:48:37 +08:00
oliver	9ba4d051dc	Add concurrent multi-NE CLI exec batch for field sweeps. ... execManagedNe can take ne_ids/ume_ne_ids/targets and POST /v1/managed-ne/exec-batch so many show commands run in parallel instead of serial one-NE MCP loops. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-10 23:34:19 +08:00
oliver	e4a135ec16	Fix fabric path search, read scope, orbit total ranking, and edge menu clamp. ... Prefer BFS shortest paths, allow ne:read on path find, honor objective=total clearance trades, and keep context menus on-screen without a11y clock spam. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-10 21:31:50 +08:00
oliver	298859e608	add topology tool	2026-08-10 20:29:05 +08:00
oliver	20c2fcd496	Harden auth with revocable sessions, cookies, and single-login default. ... Issue short-lived access JWTs backed by AuthSession rows, HttpOnly cookies with refresh rotation, idle timeout, session management UI, WebCRT ownership caps, and optional Redis login rate limits; new logins revoke other sessions by default. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-06 14:13:37 +08:00
oliver	633a9d55bd	Harden auth scopes, SQL/WebCRT gates, and per-install JWT secrets. ... Add capability RBAC, Alembic bootstrap, optional worker schedulers, and close public docs by default so lab installs stay usable without shared signing keys. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-02 16:24:34 +08:00