6 commits

Author	SHA1	Message	Date
oliver	3fd1e9131d	Record WebCRT commands from xterm visible line including prompt. ... On Enter, send audit_line from the terminal row so tab completion and edits match what the operator executed; keep the device prompt prefix in audit logs. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-02 09:58:48 +08:00
oliver	8915455b52	Record WebCRT device login/commands and NE exec in operation audit. ... Make session lifecycle and typed CLI lines searchable in audit_log with password redaction, and surface summaries plus device filters in the ops UI. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-01 21:36:44 +08:00
oliver	6ed08e24de	Stream WebCRT login live and unblock Huawei hop interactive connect. ... Skip Huawei special_login_handler under interactive WebCRT, harden stelnet host-key auth, and echo hop/login progress into the terminal during connect. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-28 21:41:36 +08:00
oliver	20c2fcd496	Harden auth with revocable sessions, cookies, and single-login default. ... Issue short-lived access JWTs backed by AuthSession rows, HttpOnly cookies with refresh rotation, idle timeout, session management UI, WebCRT ownership caps, and optional Redis login rate limits; new logins revoke other sessions by default. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-06 14:13:37 +08:00
oliver	d56020d84c	Harden runtime budgets: DB pool, CLI concurrency, timeouts, and metrics. ... Add shared CLI budget/timeout with force-close, parallel port-traffic dispatch, unified shutdown, bounded audit queue, output/log caps, and /metrics probes. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-02 18:02:43 +08:00
oliver	96b76294b4	Split UME sync and WebCRT session into focused modules. ... Keep public facades stable, re-export symbols tests patch, and fix missing threading import plus reaper fixture state. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-02 17:12:55 +08:00