6 Commits

Include renames

Author	SHA1	Message	Date
jaredandClaude Sonnet 4.6	162ca5f7a7	Add CI badges and CI/CD section to README ... Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-14 12:53:48 -04:00
jaredandClaude Sonnet 4.6	3f6e04d1ab	Apply LotusGuild design system convergence (aesthetic_diff.md) ... - §5: Section headers now ╠═══ TITLE ═══╣ (was ═══ TITLE ═══) - §8+§18: Replace inline-style showTerminalNotification() with lt.toast.* delegate wrapper; load base.js from /base.js - §12: Fix --text-muted #008822→#00bb33 (WCAG AA contrast) base.js symlinked from web_template into public/ so lt.* is available. showTerminalNotification() is kept as a thin wrapper so all existing call sites continue to work unchanged. README: Remove completed pending items (toast, text-muted, position) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-14 21:40:36 -04:00
jaredandClaude Sonnet 4.6	58c172e131	Security hardening, bug fixes, and performance improvements ... Security fixes: - Replace new Function() condition eval with vm.runInNewContext() (RCE fix) - Add admin checks to DELETE executions, all scheduled-commands endpoints - Remove api_key from GET /api/workers response (was exposed to all employees) - Separate browserClients/workerClients sets; broadcast() now sends to browsers only - Add worker WebSocket auth: reject if api_key provided but invalid - Fix XSS: escapeHtml() on step_name, duration, worker_id, user info, execution_id Bug fixes: - Replace DB-polling waitForCommandResult with event-driven _commandResolvers Map - Replace non-atomic addExecutionLog with JSON_ARRAY_APPEND (fixes concurrent write race) - Add stale execution recovery on startup: running→failed with log entry - Fix calculateNextRun returning null for unknown types (now throws) - Fix scheduler overlap: skip if previous execution still running - Fix JSON double-parse on worker_ids column - Fix switchTab() bare event.target reference - Fix selectedExecutions Array→Set (O(1) lookups, fixes performance regression) - Fix param modal event listener leak (delegated handler, removes before re-adding) - Add ws.onerror handler (was silently swallowing WebSocket errors) - Move misplaced routes to before server.listen() Performance/cleanup: - DB connection pool 10→50 - EXECUTION_RETENTION_DAYS default 1→30 (matches docs) - Remove unused packages: bcryptjs, body-parser, cors, js-yaml, jsonwebtoken - Remove generateUUID() wrapper, use crypto.randomUUID() directly - Remove dead example workflow constants - Add ESC key handler to close modals - Fix clearCompletedExecutions limit 1000→9999 - Add security notice to README.md Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-11 22:53:25 -04:00
jaredandClaude Sonnet 4.5	4baecc54d3	Phase 7: Multi-Worker Command Execution ... Added ability to execute commands on multiple workers simultaneously: - Added execution mode selector (Single/Multiple Workers) - Multi-worker mode with checkbox list for worker selection - Helper buttons: Select All, Online Only, Clear All - Sequential execution across selected workers - Results summary showing success/fail count per worker - Updated command history to track multi-worker executions - Terminal beep feedback based on overall success/failure - Maintained backward compatibility with single worker mode Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-01-07 23:03:45 -05:00
jared	753a906f25	README created for wanted tasks	2025-11-29 17:24:17 -05:00
jared	447d7537ec	first commit	2025-11-29 16:54:22 -05:00