google-labs-jules[bot]andPR0M3TH3AN 171836d2ac fix: restrict dashboard file access to allowed directories ...

This patch addresses a security vulnerability where the dashboard server could serve any file from the package root.

Changes:
- Implemented an allowlist in `src/dashboard.mjs` to restrict file access to:
  - `dashboard/`
  - `assets/`
  - `src/docs/`
  - `torch-config.json`
- Added `test/dashboard-security.test.mjs` to verify the fix and prevent regressions.

The fix ensures that sensitive files like `package.json` or source code cannot be accessed via the dashboard server.

Co-authored-by: PR0M3TH3AN <[email protected]>

2026-02-17 17:35:32 +00:00

..

__snapshots__

Add scheduler error rendering snapshot coverage

2026-02-14 20:10:26 -05:00

build_verification.test.mjs

Fix dashboard build failure and missing documentation

2026-02-17 03:53:55 +00:00

cli-parser.test.mjs

refactor(core): extract parseArgs to cli-parser.mjs

2026-02-15 15:49:29 +00:00

dashboard-auth.test.mjs

feat(security): add authentication and host binding to dashboard

2026-02-17 17:24:33 +00:00

dashboard-security.test.mjs

fix: restrict dashboard file access to allowed directories

2026-02-17 17:35:32 +00:00

lib.test.mjs

Fix race condition in cmdLock sort order

2026-02-15 15:31:28 +00:00

lock-acquisition-resilience.integration.test.mjs

Add ci-resilience lock acquisition test suite

2026-02-14 20:06:30 -05:00

lock-ops-publish-retry.test.mjs

test: add publish retry matrix coverage for lock backend

2026-02-14 19:47:32 -05:00

lock-ops.test.mjs

Improve lock publish diagnostics and scheduler failure summaries

2026-02-14 19:30:00 -05:00

memory-admin.test.mjs

Add memory rollout feature flags and docs

2026-02-14 15:23:51 -05:00

memory-cache.test.mjs

Add scoped runtime memory cache with LRU and metrics

2026-02-14 14:44:07 -05:00

memory-embedder.test.mjs

Implement persistent JSON memory store and disable embeddings

2026-02-15 23:18:13 +00:00

memory-feature-flags.test.mjs

Add memory rollout feature flags and docs

2026-02-14 15:23:51 -05:00

memory-formatter.test.mjs

test: add unit tests for memory formatter

2026-02-17 17:10:52 +00:00

memory-ingestor.test.mjs

Add pluggable memory embedder adapter and vector metadata

2026-02-14 14:55:07 -05:00

memory-pruner.test.mjs

Implement memory pruning lifecycle planning and actions

2026-02-14 15:02:49 -05:00

memory-retriever.test.mjs

Add memory rollout feature flags and docs

2026-02-14 15:23:51 -05:00

memory-scheduler.test.mjs

Add memory rollout feature flags and docs

2026-02-14 15:23:51 -05:00

memory-schema.test.mjs

Add durable memory schema validation in ingest pipeline

2026-02-14 14:37:28 -05:00

memory-summarizer.test.mjs

Add memory prompt templates and robust JSON summarization

2026-02-14 14:51:50 -05:00

nostr-lock.test.mjs

Refactor torch-lock into an installable NPM library and CLI

2026-02-14 06:41:49 +00:00

ops.test.mjs

chore(ai): refactor duplicated copying logic in src/ops.mjs

2026-02-17 17:09:39 +00:00

relay-fanout-quorum.integration.test.mjs

Add relay fanout quorum integration tests

2026-02-14 19:51:56 -05:00

relay-health-thresholds.test.mjs

Add relay health preflight job and scheduler deferral handling

2026-02-14 19:35:56 -05:00

run-scheduler-cycle-memory-policy.test.mjs

Add scheduler error rendering snapshot coverage

2026-02-14 20:10:26 -05:00

run-selected-prompt.test.mjs

Add scheduler handoff runner for selected prompts

2026-02-14 17:38:20 -05:00

scheduler-lock-failure-schema.contract.test.mjs

test: add scheduler lock failure frontmatter contract coverage

2026-02-14 20:01:32 -05:00

scheduler-preflight-lock.e2e.test.mjs

test: add scheduler lock failure frontmatter contract coverage

2026-02-14 20:01:32 -05:00

scheduler-ratchet.test.mjs

feat: support platform and model info in nostr lock events

2026-02-15 20:18:59 +00:00

summarize-lock-reliability.test.mjs

Improve scheduler lock observability and reliability reporting

2026-02-14 18:42:52 -05:00

torch-config-unit.test.mjs

Add unit tests for loadTorchConfig with dependency injection

2026-02-14 14:15:08 +00:00

torch-config.test.mjs

Improve lock relay health ranking and quarantine handling

2026-02-14 19:15:31 -05:00

utils.test.mjs

feat: implement scheduler ratcheting by excluding completed tasks

2026-02-14 18:29:20 +00:00

verify-run-artifacts.test.mjs

Strengthen run-artifact verification metadata and issue linkage

2026-02-14 18:05:54 -05:00