6 commits

Author	SHA1	Message	Date
oliver	d35d3992c2	Dedupe auth.unauthorized floods from unauthenticated page loads. ... Keep one 401 audit per IP+path window, and hide historical unauthorized noise from the default business view. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-01 21:48:18 +08:00
oliver	ea3d45ddc2	Stop auditing successful auth.me and auth.sessions polls. ... These are UI session checks that flooded the business audit view; keep failures only. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-01 21:44:52 +08:00
oliver	c181158209	Drop HTTP polling noise from operation audit by default. ... Persist only business events and mutating/failed HTTP calls, and default the audit UI to a business view with an explicit HTTP filter. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-01 21:41:05 +08:00
oliver	8915455b52	Record WebCRT device login/commands and NE exec in operation audit. ... Make session lifecycle and typed CLI lines searchable in audit_log with password redaction, and surface summaries plus device filters in the ops UI. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-01 21:36:44 +08:00
oliver	d56020d84c	Harden runtime budgets: DB pool, CLI concurrency, timeouts, and metrics. ... Add shared CLI budget/timeout with force-close, parallel port-traffic dispatch, unified shutdown, bounded audit queue, output/log caps, and /metrics probes. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-02 18:02:43 +08:00
oliver	633a9d55bd	Harden auth scopes, SQL/WebCRT gates, and per-install JWT secrets. ... Add capability RBAC, Alembic bootstrap, optional worker schedulers, and close public docs by default so lab installs stay usable without shared signing keys. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-02 16:24:34 +08:00