3 commits

Author	SHA1	Message	Date
oliver	8915455b52	Record WebCRT device login/commands and NE exec in operation audit. ... Make session lifecycle and typed CLI lines searchable in audit_log with password redaction, and surface summaries plus device filters in the ops UI. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-01 21:36:44 +08:00
oliver	d56020d84c	Harden runtime budgets: DB pool, CLI concurrency, timeouts, and metrics. ... Add shared CLI budget/timeout with force-close, parallel port-traffic dispatch, unified shutdown, bounded audit queue, output/log caps, and /metrics probes. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-02 18:02:43 +08:00
oliver	633a9d55bd	Harden auth scopes, SQL/WebCRT gates, and per-install JWT secrets. ... Add capability RBAC, Alembic bootstrap, optional worker schedulers, and close public docs by default so lab installs stay usable without shared signing keys. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-02 16:24:34 +08:00