Commit Graph

140 Commits

Author SHA1 Message Date
Jage9
1a8f750aa6 Split client and server revision tracking 2026-03-09 02:31:00 -04:00
Jage9
97ff19581a Fix server version parsing 2026-03-09 01:42:59 -04:00
Jage9
6aaa49bed3 Add configurable grid branding 2026-03-09 01:21:02 -04:00
Jage9
d111146554 Fix session resume and auth helper fallbacks 2026-03-08 23:12:02 -04:00
Jage9
19b593b1aa Scope session cookies by grid path 2026-03-08 22:59:59 -04:00
Jage9
54a7a3085b Scope server routes by base path 2026-03-08 22:24:32 -04:00
Jage9
ba34ce4e9b Tighten auth helper origin checks 2026-03-08 21:58:19 -04:00
Jage9
6e8ecf44c1 Require auth session for media proxy 2026-03-08 21:44:27 -04:00
Jage9
78bc931cce Harden origin and media URL security 2026-03-08 20:51:50 -04:00
Jage9
c14a4e322d Extract server UI metadata definitions 2026-03-08 19:40:18 -04:00
Jage9
f5cb5ebb78 Move command metadata authority to server 2026-03-08 19:35:04 -04:00
Jage9
873b00e070 Harden forwarded IP parsing for auth throttling 2026-03-02 00:41:58 -05:00
Jage9
2956fa8083 Fix session cookie routing and proxy-aware auth throttling 2026-03-01 23:57:31 -05:00
Jage9
a57e48a265 Allow pre-ready heartbeat pings and include local doc updates 2026-02-28 21:20:59 -05:00
Jage9
429b295a64 Defer world activation until welcome preflight confirmation 2026-02-28 20:58:23 -05:00
Jage9
449f2c9530 Require targetUserId for item transfers 2026-02-28 20:26:40 -05:00
Jage9
daab7bb759 Support account-wide item transfer targets and fix delete confirm exit 2026-02-28 20:24:37 -05:00
Jage9
9fe9c6da4d Allow valid self-target item transfers 2026-02-28 20:17:49 -05:00
Jage9
83b7e1f9ce Include self in transfer targets and exclude item owner 2026-02-28 20:13:39 -05:00
Jage9
c1cf100898 Refine confirm menu speech and item action notifications 2026-02-28 20:09:52 -05:00
Jage9
906c320e51 Add admin delete-account flow with yes/no confirmation 2026-02-28 20:06:43 -05:00
Jage9
b0fa040d33 Add z item management menu with transfer and yes/no confirmation 2026-02-28 05:11:49 -05:00
Jage9
8a2b95ce68 Reapply "Return friendly generic auth messages for login and resume failures"
This reverts commit 9c5011a8fd.
2026-02-28 04:53:11 -05:00
Jage9
9c5011a8fd Revert "Return friendly generic auth messages for login and resume failures"
This reverts commit 9f3cd1fbdc.
2026-02-28 04:52:44 -05:00
Jage9
027f04e58d Revert "Enforce websocket origin allowlist with secure-mode config"
This reverts commit cf30229b37.
2026-02-28 04:52:44 -05:00
Jage9
cf30229b37 Enforce websocket origin allowlist with secure-mode config 2026-02-28 04:47:07 -05:00
Jage9
9f3cd1fbdc Return friendly generic auth messages for login and resume failures 2026-02-28 04:39:26 -05:00
Jage9
b8843e7c21 Move auth session persistence to true HttpOnly cookies 2026-02-28 04:29:57 -05:00
Jage9
cf54132c25 Make websocket transport secure by default 2026-02-28 03:52:05 -05:00
Jage9
294ccfa902 Add emit initial delay option for widget audio emit 2026-02-28 03:21:55 -05:00
Jage9
887aad9435 Add emit loop delay control for item emit audio 2026-02-28 02:30:10 -05:00
Jage9
1b2c7cdc56 Fix bootstrap admin user-list method name 2026-02-28 00:26:49 -05:00
Jage9
1b24b3a449 Ignore stale item-type folders without plugin.py 2026-02-28 00:23:28 -05:00
Jage9
71d6309efa Add admin recovery option to bootstrap flow 2026-02-28 00:19:33 -05:00
Jage9
37419a5592 Lock admin role permissions on server and client 2026-02-27 19:36:09 -05:00
Jage9
0867e7b4c1 Fix reboot notice scope and preserve raw slash command input 2026-02-27 19:25:36 -05:00
Jage9
ef5fa024c0 Refine reboot notices and sounds for in-progress state 2026-02-27 19:23:09 -05:00
Jage9
d522ba10a8 Protect user role from deletion and use action sound asset 2026-02-27 19:15:13 -05:00
Jage9
7d25cc226f Add item transfer own/any role permissions 2026-02-27 05:19:15 -05:00
Jage9
8ba0398d25 Add reboot and version slash commands with permission guard 2026-02-27 04:40:36 -05:00
Jage9
464d39f78b Add server chat slash commands for me and uptime 2026-02-27 04:33:54 -05:00
Jage9
84db109e63 Polish role admin speech flow and permission tooltips 2026-02-27 04:12:37 -05:00
Jage9
7c0ddf99d1 Remove retroactive editor permission fallback 2026-02-27 03:54:02 -05:00
Jage9
181ab22a80 Refine admin role menus and editor default pickup permission 2026-02-27 03:52:02 -05:00
Jage9
aba319751b Move admin menu wiring server-side and filter ban/unban lists 2026-02-27 03:49:28 -05:00
Jage9
52584197e9 Implement server-authoritative roles and Shift+Z admin flows 2026-02-27 03:37:20 -05:00
Jage9
6ab3325263 Include coordinates in self drop confirmation message 2026-02-27 02:41:11 -05:00
Jage9
1508e7e371 Broadcast pickup and drop system chat messages to other users 2026-02-27 02:39:25 -05:00
Jage9
31ecb8eb5c Store item actor ids with display-name snapshots and nickname carrier display 2026-02-27 02:34:58 -05:00
Jage9
4fcd006856 Track item updatedBy as readonly metadata and inspect field 2026-02-27 02:27:16 -05:00