Agentabrams Viewer

repo: ~/Projects/agentabrams-viewer · 14 commits · 0 in last 24h, 14 in last 7d · █ ▃

Search the build

14 commits indexed

  1. ea8bb3a 2026-07-25 chore: lint (loadDomains try/catch), (session close)
  2. 814faa8 2026-07-25 viewer UI: 3-way status dots (Basic/login/open) + per-dot tooltip
  3. a983e0c 2026-07-25 Fix self-XSS in domain search filter: escape filter + labels before innerHTML
  4. 1eb9bf1 2026-07-25 viewer: follow redirects + detect login-form/SSO gating, not just HTTP 401
  5. d7674a9 2026-07-22 proxy: strip upstream Referrer-Policy — no-referrer (from the 7/22 fleet CSP sweep) blinded the referer-based asset escape hatch, previews rendered unstyled
  6. 12882d2 2026-07-22 5x fleet: 5-sweep report — 47/47 clean, CSP/schema/asset fixes, harness --location-trusted
  7. a0a5729 2026-07-22 domains: livesiteaudit.aa renamed to barber.aa
  8. 2dbe2c3 2026-07-22 5x sweeps 3-4 clean: REPORT — 7/7 stable, stop on clean-twice
  9. 15161bc 2026-07-22 5x sweep 2: add data-URI favicon (Chrome's auto /favicon.ico request 404'd -> console error in E2E)
  10. b807e6b 2026-07-22 5x sweep 1: handle aborted/failed api fetches in boot IIFE (unhandled rejection -> page error in E2E)
  11. 4175e4a 2026-07-22 chore: lint, refactor (dedup loadDomains, proxy-error writableEnded guard), version bump (session close)
  12. 8ef170b 2026-07-22 fix SSO cookie rewrite in site proxy: fleet-wide (Domain=) cookies scope to /site/, strip Secure for http loopback
  13. 02f58ea 2026-07-22 viewer: credential-injecting reverse proxy so unified admin pw auto-applies to in-panel sites
  14. 21d5179 2026-07-22 agentabrams domain viewer: left-rail list of all 47 *.agentabrams.com vhosts, right-panel live iframe, health dots, frame-block fallback

Authors

Agents used

  • none detected

Skills used

  • /login2
  • /status2
  • /site2
  • /catch1
  • /open1
  • /pw-rejected1
  • /schema1
  • /asset1
  • /favicon1
  • /failed1

Creative ideas + design notes

Commits with substantial prose (≥120 chars) — the rationale behind each move.

814faa8 · 2026-07-25 · viewer UI: 3-way status dots (Basic/login/open) + per-dot tooltip 
Front-end now reads authType from /api/status: amber=Basic un/pw, blue=login/SSO,
green=open(no auth), red=down/pw-rejected. Legend + hover tooltip updated so 'is this
protected, and how' is answerable at a glance.
1eb9bf1 · 2026-07-25 · viewer: follow redirects + detect login-form/SSO gating, not just HTTP 401 
probe() now walks the redirect chain and classifies authType as
basic (401 wall) | login (redirect-to-auth or password field) | open | down,
so a 302->/login and a 200 login page are correctly counted as protected
instead of 'open'. Adds authType + finalStatus to /api/status.
02f58ea · 2026-07-22 · viewer: credential-injecting reverse proxy so unified admin pw auto-applies to in-panel sites 
- /site/<domain>/ proxies upstream with admin/DW2024! injected (browsers won't basic-auth cross-origin iframes)
- strips X-Frame-Options/CSP so authed sites render in the panel; TLS verify stays ON
- status probe now does a 2nd authed HEAD to flag a rejected pw (authFail) vs a healthy gate
- allowlisted to domains.json; localhost-only, still behind admin/DW2024!

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

File tree

10 files tracked. Click any to browse the source at HEAD.

Other build journals

← Agent Cabinet  ·  all 4 projects  ·  Ai Workforce →

Export

commits.csv · feed.atom · project.json · commits.json

rendered in 0ms