40 Commits

Author	SHA1	Message	Date
timmy	43b0216bda	security: bind passkeys to upstream identity (Closes #1448)	2026-08-27 00:12:57 +00:00
timmy	d6e6cf2e67	feat: bind operator sessions to upstream identity (Closes #1372)	2026-08-25 01:12:42 +00:00
timmy	b753cdd922	feat: prepare conflict-safe release rollback pulls (Closes #1370)	2026-08-24 23:55:33 +00:00
timmy	a43ecac94b	fix: authorize secure source branch deletion (Closes #1368)	2026-08-24 22:30:56 +00:00
timmy	fdd3cf03b4	security: keep mobile share content private (Closes #903)	2026-08-15 16:02:35 +00:00
timmy	8f92286cce	test: make event-loop release gate deterministic (Closes #884)	2026-08-15 10:13:05 +00:00
timmy	ec86bf55a8	Scope mobile Search by repository	2026-08-14 03:11:40 +00:00
timmy	bd054998b2	feat: scope mobile search by type and status (Closes #793)	2026-08-14 02:34:44 +00:00
timmy	43163ed926	feat: share resumable mobile search previews (Closes #787)	2026-08-14 01:04:20 +00:00
timmy	4cfcb92eec	fix: preserve shared screenshots through sign-in (Closes #741)	2026-08-13 13:25:26 +00:00
timmy	bb1712279c	feat: launch mobile work from PWA shortcuts (Closes #737)	2026-08-13 12:26:27 +00:00
timmy	d2b2c7bada	feat: isolate readiness probes from Gitea traffic (Closes #687)	2026-08-12 23:10:29 +00:00
timmy	c91194c283	fix: detect atomic passkey counter anomalies (Closes #641)	2026-08-12 10:26:51 +00:00
timmy	8ea46974ff	feat: bind operator mode to public origin (Closes #609)	2026-08-12 01:54:51 +00:00
timmy	c99dd3e3be	test: make async deadline checks contention-safe	2026-08-11 21:39:04 +00:00
timmy	350bfc067d	feat: surface failed token sign-in alerts (Closes #543)	2026-08-11 05:35:35 +00:00
timmy	8bc5f623ac	feat: protect passkey sign-in from challenge floods (Closes #535)	2026-08-11 03:02:42 +00:00
timmy	b1890a29ff	feat: enforce confirmed offline idle deadlines (Closes #523)	2026-08-11 00:00:19 +00:00
timmy	b455dc6286	feat: audit passkey enrollment (Closes #513)	2026-08-10 20:56:20 +00:00
timmy	877dc475dd	feat: make consequential reviews passkey-native (Closes #509)	2026-08-10 19:56:12 +00:00
timmy	2a6f2ab12d	feat: authorize consequential pull reviews (Closes #507)	2026-08-10 19:02:16 +00:00
timmy	91c59a2953	fix: make access revocation atomic (Closes #501)	2026-08-10 17:24:54 +00:00
timmy	21a386b94f	feat: manage enrolled passkeys (Closes #499)	2026-08-10 17:06:36 +00:00
timmy	78d044f1af	feat: make security-journaled actions outcome truthful (Closes #497)	2026-08-10 16:30:31 +00:00
timmy	6565165295	feat: add durable security activity center (Closes #493)	2026-08-10 15:37:37 +00:00
timmy	ced644b275	feat: add device passkeys for operator access (Closes #485)	2026-08-10 13:14:18 +00:00
timmy	0b992543f1	feat: lock idle dashboard sessions (#463)	2026-08-10 07:45:00 +00:00
timmy	2e2a7821ae	feat: expire offline work with sessions (#399)	2026-08-09 12:03:55 +00:00
timmy	a919242b8f	perf: bundle and fingerprint the PWA runtime (#379)	2026-08-09 06:59:05 +00:00
timmy	3726360baa	security: require fresh authorization for high-impact actions (#341)	2026-08-08 21:04:28 +00:00
timmy	b4dc785dd8	security: purge data after remote session revocation (#337)	2026-08-08 20:17:13 +00:00
timmy	7034ec55ed	feat: review and revoke active devices (#325)	2026-08-08 17:59:17 +00:00
timmy	8ba4d48549	feat: preserve mobile shares through sign-in (#313)	2026-08-08 15:18:30 +00:00
timmy	d026bbd400	perf: isolate authentication database work (#311)	2026-08-08 14:56:45 +00:00
timmy	37d55e9b20	feat: sign out all operator sessions (#287)	2026-08-08 09:55:34 +00:00
timmy	0ac1277479	perf: keep session validation off event loop (#275)	2026-08-08 07:15:37 +00:00
timmy	87becb08ad	feat: throttle repeated operator sign-in failures (#270)	2026-08-08 06:19:08 +00:00
timmy	c8de28ca0c	feat: revoke operator sessions on logout (#268)	2026-08-08 05:55:51 +00:00
timmy	00a956b1fb	feat: fail closed on invalid dashboard auth (#262)	2026-08-08 04:32:15 +00:00
timmy	39357263d0	feat: require operator sessions for privileged access (#258)	2026-08-08 03:41:30 +00:00