Jage9
|
ba34ce4e9b
|
Tighten auth helper origin checks
|
2026-03-08 21:58:19 -04:00 |
|
Jage9
|
6e8ecf44c1
|
Require auth session for media proxy
|
2026-03-08 21:44:27 -04:00 |
|
Jage9
|
78bc931cce
|
Harden origin and media URL security
|
2026-03-08 20:51:50 -04:00 |
|
Jage9
|
c14a4e322d
|
Extract server UI metadata definitions
|
2026-03-08 19:40:18 -04:00 |
|
Jage9
|
f5cb5ebb78
|
Move command metadata authority to server
|
2026-03-08 19:35:04 -04:00 |
|
Jage9
|
873b00e070
|
Harden forwarded IP parsing for auth throttling
|
2026-03-02 00:41:58 -05:00 |
|
Jage9
|
2956fa8083
|
Fix session cookie routing and proxy-aware auth throttling
|
2026-03-01 23:57:31 -05:00 |
|
Jage9
|
a57e48a265
|
Allow pre-ready heartbeat pings and include local doc updates
|
2026-02-28 21:20:59 -05:00 |
|
Jage9
|
429b295a64
|
Defer world activation until welcome preflight confirmation
|
2026-02-28 20:58:23 -05:00 |
|
Jage9
|
449f2c9530
|
Require targetUserId for item transfers
|
2026-02-28 20:26:40 -05:00 |
|
Jage9
|
daab7bb759
|
Support account-wide item transfer targets and fix delete confirm exit
|
2026-02-28 20:24:37 -05:00 |
|
Jage9
|
9fe9c6da4d
|
Allow valid self-target item transfers
|
2026-02-28 20:17:49 -05:00 |
|
Jage9
|
83b7e1f9ce
|
Include self in transfer targets and exclude item owner
|
2026-02-28 20:13:39 -05:00 |
|
Jage9
|
c1cf100898
|
Refine confirm menu speech and item action notifications
|
2026-02-28 20:09:52 -05:00 |
|
Jage9
|
906c320e51
|
Add admin delete-account flow with yes/no confirmation
|
2026-02-28 20:06:43 -05:00 |
|
Jage9
|
b0fa040d33
|
Add z item management menu with transfer and yes/no confirmation
|
2026-02-28 05:11:49 -05:00 |
|
Jage9
|
8a2b95ce68
|
Reapply "Return friendly generic auth messages for login and resume failures"
This reverts commit 9c5011a8fd.
|
2026-02-28 04:53:11 -05:00 |
|
Jage9
|
9c5011a8fd
|
Revert "Return friendly generic auth messages for login and resume failures"
This reverts commit 9f3cd1fbdc.
|
2026-02-28 04:52:44 -05:00 |
|
Jage9
|
027f04e58d
|
Revert "Enforce websocket origin allowlist with secure-mode config"
This reverts commit cf30229b37.
|
2026-02-28 04:52:44 -05:00 |
|
Jage9
|
cf30229b37
|
Enforce websocket origin allowlist with secure-mode config
|
2026-02-28 04:47:07 -05:00 |
|
Jage9
|
9f3cd1fbdc
|
Return friendly generic auth messages for login and resume failures
|
2026-02-28 04:39:26 -05:00 |
|
Jage9
|
b8843e7c21
|
Move auth session persistence to true HttpOnly cookies
|
2026-02-28 04:29:57 -05:00 |
|
Jage9
|
cf54132c25
|
Make websocket transport secure by default
|
2026-02-28 03:52:05 -05:00 |
|
Jage9
|
294ccfa902
|
Add emit initial delay option for widget audio emit
|
2026-02-28 03:21:55 -05:00 |
|
Jage9
|
887aad9435
|
Add emit loop delay control for item emit audio
|
2026-02-28 02:30:10 -05:00 |
|
Jage9
|
1b2c7cdc56
|
Fix bootstrap admin user-list method name
|
2026-02-28 00:26:49 -05:00 |
|
Jage9
|
1b24b3a449
|
Ignore stale item-type folders without plugin.py
|
2026-02-28 00:23:28 -05:00 |
|
Jage9
|
71d6309efa
|
Add admin recovery option to bootstrap flow
|
2026-02-28 00:19:33 -05:00 |
|
Jage9
|
37419a5592
|
Lock admin role permissions on server and client
|
2026-02-27 19:36:09 -05:00 |
|
Jage9
|
0867e7b4c1
|
Fix reboot notice scope and preserve raw slash command input
|
2026-02-27 19:25:36 -05:00 |
|
Jage9
|
ef5fa024c0
|
Refine reboot notices and sounds for in-progress state
|
2026-02-27 19:23:09 -05:00 |
|
Jage9
|
d522ba10a8
|
Protect user role from deletion and use action sound asset
|
2026-02-27 19:15:13 -05:00 |
|
Jage9
|
7d25cc226f
|
Add item transfer own/any role permissions
|
2026-02-27 05:19:15 -05:00 |
|
Jage9
|
8ba0398d25
|
Add reboot and version slash commands with permission guard
|
2026-02-27 04:40:36 -05:00 |
|
Jage9
|
464d39f78b
|
Add server chat slash commands for me and uptime
|
2026-02-27 04:33:54 -05:00 |
|
Jage9
|
84db109e63
|
Polish role admin speech flow and permission tooltips
|
2026-02-27 04:12:37 -05:00 |
|
Jage9
|
7c0ddf99d1
|
Remove retroactive editor permission fallback
|
2026-02-27 03:54:02 -05:00 |
|
Jage9
|
181ab22a80
|
Refine admin role menus and editor default pickup permission
|
2026-02-27 03:52:02 -05:00 |
|
Jage9
|
aba319751b
|
Move admin menu wiring server-side and filter ban/unban lists
|
2026-02-27 03:49:28 -05:00 |
|
Jage9
|
52584197e9
|
Implement server-authoritative roles and Shift+Z admin flows
|
2026-02-27 03:37:20 -05:00 |
|
Jage9
|
6ab3325263
|
Include coordinates in self drop confirmation message
|
2026-02-27 02:41:11 -05:00 |
|
Jage9
|
1508e7e371
|
Broadcast pickup and drop system chat messages to other users
|
2026-02-27 02:39:25 -05:00 |
|
Jage9
|
31ecb8eb5c
|
Store item actor ids with display-name snapshots and nickname carrier display
|
2026-02-27 02:34:58 -05:00 |
|
Jage9
|
4fcd006856
|
Track item updatedBy as readonly metadata and inspect field
|
2026-02-27 02:27:16 -05:00 |
|
Jage9
|
ac88195c6e
|
Add tooltips for readonly item system properties
|
2026-02-27 02:22:59 -05:00 |
|
Jage9
|
cc54842334
|
Allow clock alarm toggle updates without revalidating unchanged time
|
2026-02-27 02:15:15 -05:00 |
|
Jage9
|
d74937b2dc
|
Set default clock alarm time and gate alarm time field by visibility
|
2026-02-27 02:11:08 -05:00 |
|
Jage9
|
78be266fcf
|
Add clock alarm scheduling with formatted alarm time options
|
2026-02-27 02:06:51 -05:00 |
|
Jage9
|
4840aa454b
|
Move readonly item property display values to server
|
2026-02-27 01:32:25 -05:00 |
|
Jage9
|
3b414b1f89
|
Apply clock announcement spatial range from server
|
2026-02-27 01:12:24 -05:00 |
|