6 Commits

Author	SHA1	Message	Date
null	cf2ed37c1e	feat: add INIT_REGULAR_USER env var, move bill_history_ranges to v0.42 migration ... - Add INIT_REGULAR_USER/INIT_REGULAR_PASS for non-admin test user creation - Regular user created at startup with role='user', not admin - Move bill_history_ranges from inline to versioned migration v0.42 - Clean up FUTURE.md: remove completed items, add skip-first-login item	2026-05-09 16:38:28 -05:00
null	6c7d481494	feat: add admin about page with security hardening ... - Add /api/about-admin endpoint (admin-only, path traversal protection, content redaction, error sanitization) - Add /admin/about route with RequireAuth admin guard - Add adminActionLimiter rate limiting on about-admin endpoint - Add rehype-sanitize XSS prevention in AboutPage.jsx - Add aboutAdmin API client endpoint - Create HISTORY.md with version bump convention (patch/minor/major) - Update Engineering Reference Manual with about-admin docs and security measures - Add INIT_REGULAR_USER/INIT_REGULAR_PASS env vars to docs - Update FUTURE.md with critical regular user env var item	2026-05-09 16:25:12 -05:00
null	6c730635ec	docs: add bill_history_ranges cleanup to FUTURE.md	2026-05-09 15:20:17 -05:00
null	d5057a6325	feat: add migration version tracking, update docs, add dev log ... - Added schema_migrations table for explicit version tracking (CRITICAL fix) - Refactored runMigrations() to use versioned migration objects - Added hasMigrationBeenApplied() and recordMigration() helpers - Migrations now skip already-applied versions and log progress - Updated FUTURE.md with migration system issues and criticality ratings - Updated Engineering_Reference_Manual.md with migration system docs - Added DEVELOPMENT_LOG.md for agent work tracking	2026-05-09 15:17:40 -05:00
null	a815817c27	push-test	2026-05-09 14:29:17 -05:00
kaspa	4d1709aea3	push	2026-05-09 13:03:36 -05:00