Agentabrams Viewer

repo: ~/Projects/agentabrams-viewer · 17 commits · 0 in last 24h, 0 in last 7d ·

Search the build

17 commits indexed

  1. 9a406b8 2026-08-25 creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap)
  2. 096b817 2026-08-11 domain viewer: add sort + list/grid toggle + density + per-field on/off menu (viewer control standard)
  3. 6f754cb 2026-08-05 retire rentv-website: drop stale domain reference (TK-10123, DTD verdict A)
  4. ea8bb3a 2026-07-25 chore: lint (loadDomains try/catch), (session close)
  5. 814faa8 2026-07-25 viewer UI: 3-way status dots (Basic/login/open) + per-dot tooltip
  6. a983e0c 2026-07-25 Fix self-XSS in domain search filter: escape filter + labels before innerHTML
  7. 1eb9bf1 2026-07-25 viewer: follow redirects + detect login-form/SSO gating, not just HTTP 401
  8. d7674a9 2026-07-22 proxy: strip upstream Referrer-Policy — no-referrer (from the 7/22 fleet CSP sweep) blinded the referer-based asset escape hatch, previews rendered unstyled
  9. 12882d2 2026-07-22 5x fleet: 5-sweep report — 47/47 clean, CSP/schema/asset fixes, harness --location-trusted
  10. a0a5729 2026-07-22 domains: livesiteaudit.aa renamed to barber.aa
  11. 2dbe2c3 2026-07-22 5x sweeps 3-4 clean: REPORT — 7/7 stable, stop on clean-twice
  12. 15161bc 2026-07-22 5x sweep 2: add data-URI favicon (Chrome's auto /favicon.ico request 404'd -> console error in E2E)
  13. b807e6b 2026-07-22 5x sweep 1: handle aborted/failed api fetches in boot IIFE (unhandled rejection -> page error in E2E)
  14. 4175e4a 2026-07-22 chore: lint, refactor (dedup loadDomains, proxy-error writableEnded guard), version bump (session close)
  15. 8ef170b 2026-07-22 fix SSO cookie rewrite in site proxy: fleet-wide (Domain=) cookies scope to /site/, strip Secure for http loopback
  16. 02f58ea 2026-07-22 viewer: credential-injecting reverse proxy so unified admin pw auto-applies to in-panel sites
  17. 21d5179 2026-07-22 agentabrams domain viewer: left-rail list of all 47 *.agentabrams.com vhosts, right-panel live iframe, health dots, frame-block fallback

Authors

Agents used

  • none detected

Skills used

  • /login2
  • /status2
  • /site2
  • /grid1
  • /off1
  • /catch1
  • /open1
  • /pw-rejected1
  • /schema1
  • /asset1
  • /favicon1
  • /failed1

Creative ideas + design notes

Commits with substantial prose (≥120 chars) — the rationale behind each move.

9a406b8 · 2026-08-25 · creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap) 
Fleet inoculation — opening this basic-auth app with credentials in the URL
poisoned document.baseURI and made relative fetch('/api/…') throw. Guard resolves
non-absolute request URLs against location instead. Ref: creds-in-url-fetch-guard-fleet-pattern.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
814faa8 · 2026-07-25 · viewer UI: 3-way status dots (Basic/login/open) + per-dot tooltip 
Front-end now reads authType from /api/status: amber=Basic un/pw, blue=login/SSO,
green=open(no auth), red=down/pw-rejected. Legend + hover tooltip updated so 'is this
protected, and how' is answerable at a glance.
1eb9bf1 · 2026-07-25 · viewer: follow redirects + detect login-form/SSO gating, not just HTTP 401 
probe() now walks the redirect chain and classifies authType as
basic (401 wall) | login (redirect-to-auth or password field) | open | down,
so a 302->/login and a 200 login page are correctly counted as protected
instead of 'open'. Adds authType + finalStatus to /api/status.
02f58ea · 2026-07-22 · viewer: credential-injecting reverse proxy so unified admin pw auto-applies to in-panel sites 
- /site/<domain>/ proxies upstream with admin/DW2024! injected (browsers won't basic-auth cross-origin iframes)
- strips X-Frame-Options/CSP so authed sites render in the panel; TLS verify stays ON
- status probe now does a 2nd authed HEAD to flag a rejected pw (authFail) vs a healthy gate
- allowlisted to domains.json; localhost-only, still behind admin/DW2024!

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

File tree

10 files tracked. Click any to browse the source at HEAD.

Other build journals

← Agent Cabinet  ·  all 4 projects  ·  Ai Workforce →

Export

commits.csv · feed.atom · project.json · commits.json

rendered in 0ms