5 Commits

Include renames

Author	SHA1	Message	Date
imSp4rky	a7d6791136	feat(remote): verify server-CDM vault keys on the client and report bad pairs ... The licence response lists KIDs a server vault supplied, the client proves them with the decode check, and a bad pair goes to the new session keys/bad route so the server flags its own row. Client vault keys go first over --remote, and the dashboard health warns when no SQLite vault can store flags.	2026-09-12 15:13:08 -06:00
imSp4rky	76d82df25b	fix(api): keep error URLs readable and mask host paths in dashboard logs	2026-09-08 17:37:32 -06:00
imSp4rky	c9f178f8f0	test(serve): make the session touch test clock-independent	2026-09-03 00:15:17 -06:00
imSp4rky	8354235d56	feat(serve): add operator dashboard endpoints and per-key rate limits	2026-09-02 23:52:55 -06:00
imSp4rky	e3f4e52444	feat(serve): add --quiet mode and developer dashboard API ... Headless serve with plain stderr logging; /api/dashboard/* (status, sessions, jobs, logs, SSE/poll events) behind a separate serve.dashboard.key.	2026-08-28 13:18:41 -06:00