Corvette Dashboard Viewer

repo: ~/Projects/corvette-dashboard-viewer · 23 commits · 0 in last 24h, 0 in last 7d ·

Search the build

23 commits indexed

  1. e420244 2026-08-30 add creds-in-URL fetch guard to gated pages (TK-10984)
  2. c74832b 2026-08-25 creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap)
  3. f45e428 2026-08-13 Move corvette console default port 9797->9803 (RENTV Live Console owns 9797)
  4. 3e6c8b1 2026-07-28 Close /img socket leak: destroy the response on mid-body CDN stall instead of leaving it half-piped and never-ended
  5. 9115bd3 2026-07-28 Harden now-public surface: guard /img double-writeHead (ERR_HTTP_HEADERS_SENT on CDN stall) + whitelist /api/new-items gids against log-poisoning
  6. 635e992 2026-07-28 Make BASIC_AUTH a real env override in ecosystem.config.js (rotate liveskus cred without touching source)
  7. 0d3c544 2026-07-28 Add fleet-standard basic auth (admin/DW2024!) for public liveskus subdomain; keep /healthz open
  8. 0ca6eea 2026-07-28 trip computer: live processing rate (SKUs/min) + ETA to finish color normalize on the console
  9. 3d45dba 2026-07-28 auto-save: 2026-07-28T09:59:38 (1 files) — assets/dash-pistons.png
  10. dfe1272 2026-07-28 piston bank: small numbers (Style/Material/Collection/Label) as pumping engine cylinders — piston height = progress, glows green at 100%
  11. 9c81258 2026-07-28 5x: REPORT + sweeps 4-5 clean (clean-twice); feed-toggle verified
  12. dcde435 2026-07-28 5x sweep 3: add inline data-URI favicon — kills /favicon.ico 404
  13. 5539a5c 2026-07-28 5x sweep 1: proxy live-ticker images via /img (placeholder on dead CDN asset) — kills intermittent console 404
  14. bad80a3 2026-07-28 live twin gauges: speedo=SKUs normalized, tach=descriptor tags, mini=per-job counts — poll /api/stats every 3s, needles climb in real time
  15. 26818b3 2026-07-28 pm2-manage the console (ecosystem.config.js, reboot-safe)
  16. 21a046b 2026-07-28 live new-arrivals viewer (new.html + /api/new-items): newest color-normalized SKUs, top 50, deep palette + fresh descriptors + image + href, auto-refresh
  17. c4c8d1a 2026-07-28 Live SKU ticker below engine (image+sku+palette, slide-in motion, processed counter) + glovebox starts collapsed; /api/new-items returns sku+image
  18. c665d54 2026-07-28 auto-save: 2026-07-28T08:58:52 (2 files) — server.js public/new.html
  19. 8bbdd4d 2026-07-28 Harden fallback (guard snapshot JSON.parse against process crash) + honest feed cap (contrarian gate)
  20. 15efc4e 2026-07-28 Make console dynamic: live /api/data (shopify_color_enrichment⋈shopify_products) with true totals + snapshot fallback
  21. b1bb47d 2026-07-28 Show DW SKU on glovebox cards + enrich data.json with sku (gid→dw_sku from mirror)
  22. 97b1505 2026-07-28 67 Corvette console: Figma design captured (file aswBuEFbP4imoq4IvigvoU); remove temp capture script; add preview art
  23. c433c79 2026-07-28 67 Corvette catalog console — twin-cockpit dashboard viewer for TK-135 palettes (CSS/SVG gauges, glovebox feed)

Authors

Agents used

  • none detected

Skills used

  • /new-items3
  • /healthz1
  • /min1
  • /dash-pistons1
  • /favicon1
  • /stats1
  • /new1
  • /data1

Creative ideas + design notes

Commits with substantial prose (≥120 chars) — the rationale behind each move.

c74832b · 2026-08-25 · creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap) 
Fleet inoculation — opening this basic-auth app with credentials in the URL
poisoned document.baseURI and made relative fetch('/api/…') throw. Guard resolves
non-absolute request URLs against location instead. Ref: creds-in-url-fetch-guard-fleet-pattern.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

File tree

14 files tracked. Click any to browse the source at HEAD.

Other build journals

← Corkwallcovering  ·  all 4 projects  ·  Costa Rica →

Export

commits.csv · feed.atom · project.json · commits.json

rendered in 2ms