Commit Graph

399 Commits

Author SHA1 Message Date
Jage9
528f05c4e7 Remove tracked security audit report 2026-03-08 23:24:37 -04:00
Jage9
d008c659b9 Move footer version block below help 2026-03-08 23:17:35 -04:00
Jage9
d111146554 Fix session resume and auth helper fallbacks 2026-03-08 23:12:02 -04:00
Jage9
b229e20ae2 Fix media proxy auth origin forwarding 2026-03-08 23:04:37 -04:00
Jage9
19b593b1aa Scope session cookies by grid path 2026-03-08 22:59:59 -04:00
Jage9
54a7a3085b Scope server routes by base path 2026-03-08 22:24:32 -04:00
Jage9
bd0ec1b01e Add collapsible footer help panel 2026-03-08 22:18:18 -04:00
Jage9
7b180e6d27 Show public release version and GitHub link 2026-03-08 22:14:19 -04:00
Jage9
135c8ccd82 Refresh client lockfile audit fixes 2026-03-08 22:06:13 -04:00
Jage9
ba34ce4e9b Tighten auth helper origin checks 2026-03-08 21:58:19 -04:00
Jage9
0fc6018ca8 Use server Python for deploy config parsing 2026-03-08 21:46:57 -04:00
Jage9
6e8ecf44c1 Require auth session for media proxy 2026-03-08 21:44:27 -04:00
Jage9
47d4a61256 Generate media proxy origin config on deploy 2026-03-08 21:26:07 -04:00
Jage9
6368187ee4 Add sample server env file 2026-03-08 20:56:41 -04:00
Jage9
78bc931cce Harden origin and media URL security 2026-03-08 20:51:50 -04:00
Jage9
3d69bbcea2 Updated readme 2026-03-08 20:32:39 -04:00
Jage9
34818d30f5 Move piano glue behind behavior registry 2026-03-08 20:31:35 -04:00
Jage9
ffba9530c8 Bump client version for controller extraction 2026-03-08 20:24:51 -04:00
Jage9
50d97ae734 Extract main.ts controllers 2026-03-08 20:22:46 -04:00
Jage9
3d9405bff9 Fix piano key release while command palette is open 2026-03-08 19:53:00 -04:00
Jage9
5dafc05c8e Clarify command metadata docs 2026-03-08 19:42:19 -04:00
Jage9
c14a4e322d Extract server UI metadata definitions 2026-03-08 19:40:18 -04:00
Jage9
c3791de3a3 Spell out punctuation command shortcuts 2026-03-08 19:37:11 -04:00
Jage9
f5cb5ebb78 Move command metadata authority to server 2026-03-08 19:35:04 -04:00
Jage9
1741bcc2bc Add context-aware command palette 2026-03-08 19:27:23 -04:00
Jage9
9e41013fe8 Updated changelog 2026-03-02 00:42:56 -05:00
Jage9
873b00e070 Harden forwarded IP parsing for auth throttling 2026-03-02 00:41:58 -05:00
Jage9
26d6bafce0 Support Cmd shortcuts in canvas text-edit modes 2026-03-02 00:24:46 -05:00
Jage9
daa30c57aa Document auth session proxy routes for Apache deploys 2026-03-02 00:11:49 -05:00
Jage9
2956fa8083 Fix session cookie routing and proxy-aware auth throttling 2026-03-01 23:57:31 -05:00
Jage9
b8375e82f7 Restore seamless native looping for zero emit loop delay 2026-02-28 21:24:08 -05:00
Jage9
a57e48a265 Allow pre-ready heartbeat pings and include local doc updates 2026-02-28 21:20:59 -05:00
Jage9
aa5bcd12cc Fix emit loop zero-delay restart and resume initial-delay checks 2026-02-28 21:07:34 -05:00
Jage9
429b295a64 Defer world activation until welcome preflight confirmation 2026-02-28 20:58:23 -05:00
Jage9
e669bf8a57 Use title-first announcement for mic gain menu 2026-02-28 20:49:52 -05:00
Jage9
74f1ab75ac Extend title-first announcements across list menus 2026-02-28 20:46:51 -05:00
Jage9
ca300a084e Standardize title-style menu announcements 2026-02-28 20:44:24 -05:00
Jage9
313ff581c0 Standardize menu entry announcements and fix effect escape 2026-02-28 20:41:54 -05:00
Jage9
0bbef06d5c Adjust item menu prompt and option order 2026-02-28 20:34:41 -05:00
Jage9
449f2c9530 Require targetUserId for item transfers 2026-02-28 20:26:40 -05:00
Jage9
daab7bb759 Support account-wide item transfer targets and fix delete confirm exit 2026-02-28 20:24:37 -05:00
Jage9
9fe9c6da4d Allow valid self-target item transfers 2026-02-28 20:17:49 -05:00
Jage9
04eb5b26ef Announce yes-no choice labels while navigating confirmations 2026-02-28 20:15:15 -05:00
Jage9
83b7e1f9ce Include self in transfer targets and exclude item owner 2026-02-28 20:13:39 -05:00
Jage9
c1cf100898 Refine confirm menu speech and item action notifications 2026-02-28 20:09:52 -05:00
Jage9
906c320e51 Add admin delete-account flow with yes/no confirmation 2026-02-28 20:06:43 -05:00
Jage9
b0fa040d33 Add z item management menu with transfer and yes/no confirmation 2026-02-28 05:11:49 -05:00
Jage9
8a2b95ce68 Reapply "Return friendly generic auth messages for login and resume failures"
This reverts commit 9c5011a8fd.
2026-02-28 04:53:11 -05:00
Jage9
9c5011a8fd Revert "Return friendly generic auth messages for login and resume failures"
This reverts commit 9f3cd1fbdc.
2026-02-28 04:52:44 -05:00
Jage9
027f04e58d Revert "Enforce websocket origin allowlist with secure-mode config"
This reverts commit cf30229b37.
2026-02-28 04:52:44 -05:00