4 Commits

Include renames

Author	SHA1	Message	Date
Matthew MeszarosandDevin AI	dfed1e1593	feat: validate API UUIDs, recover expired Gmail history and guard consumer startup and stale frontend assets ... Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-10-07 07:19:15 +00:00
Matthew MeszarosandDevin AI	589bc823ed	feat: generate static dashboard CSP hashes and isolate email preview styling across Vite nginx and Pages ... Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-10-06 05:46:52 +00:00
Matthew Meszaros	e668a2a36b	feat: complete the ADA CASA v2.1.1 AL1 control set across authentication, sessions, access control, cryptography, input validation and configuration, adding a breached-password denylist and per-account login throttling, enforced multi-factor authentication on the admin panel, step-up confirmation before an action that mints a lasting credential, purpose-scoped session tokens, single-use TOTP steps, tenant verification on every cross-referenced identifier, security headers on every surface, encrypted webhook signing secrets, per-organization idempotency, PKCE and a minimal two-scope Gmail consent on the mailbox OAuth flow, bounded spreadsheet and archive decoding, a patched Go toolchain with govulncheck in CI, and the evidence pack under compliance/casa	2026-09-19 08:18:35 +02:00
Matthew Meszaros	664774e1e3	feat: add production nginx Dockerfiles for the web dashboard and admin panel that build the SPA once and render /config.js from WARMBLY_* env at container start	2026-07-22 18:40:06 +02:00