New Engine

repo: ~/Projects/new-engine · 11 commits · 0 in last 24h, 0 in last 7d ·

Search the build

11 commits indexed

  1. 5d3e091 2026-08-25 creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap)
  2. 1e55589 2026-08-12 viewer standard: add Grid/List toggle + per-field on/off menu to internal record-grid viewer
  3. fe0b370 2026-07-28 fix 'connecting' hang: add response cache (single-flight + serve-stale) so the slow canonical-DB catalog query isn't re-run every refresh; slower 15s poll, pause-when-hidden, clear loading state
  4. 40f95bb 2026-07-28 deploy.conf: HEALTH_URL -> public https domain (surfaces on projects.agentabrams.com as public)
  5. 6df1adf 2026-07-28 Add search + vendor filter, sort, since-date filter, and density slider
  6. da6a927 2026-07-28 Save prod nginx vhost (IP-specific listen 45.61.58.125:80/443 + LE SSL + /var/www/html ACME webroot)
  7. c6f56d6 2026-07-28 Repoint engine to port 9870 (9840 taken on Kamatera)
  8. 9fc2f59 2026-07-28 Basic Auth default → house admin/DW2024! (still BASIC_AUTH-overridable)
  9. 09f66bb 2026-07-28 auto-save: 2026-07-28T09:59:38 (1 files) — .deploy.conf
  10. ff8a755 2026-07-28 Add HTTP Basic Auth (admin/admin, env-overridable via BASIC_AUTH); /healthz stays open
  11. f73dcfd 2026-07-28 New Arrivals engine for new.engine.designerwallcoverings.com — corvette-9797 pattern, live newest-first pull from dw_unified (port 9840)

Authors

Agents used

  • none detected

Skills used

  • /off1
  • /vendor1
  • /since1
  • /facets1
  • /www1
  • /html1
  • /healthz1

Creative ideas + design notes

Commits with substantial prose (≥120 chars) — the rationale behind each move.

5d3e091 · 2026-08-25 · creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap) 
Fleet inoculation — opening this basic-auth app with credentials in the URL
poisoned document.baseURI and made relative fetch('/api/…') throw. Guard resolves
non-absolute request URLs against location instead. Ref: creds-in-url-fetch-guard-fleet-pattern.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
6df1adf · 2026-07-28 · Add search + vendor filter, sort, since-date filter, and density slider 
- server: fetchItems() with safe filters (sq-escaped q/vendor, whitelisted sort/since) + /api/facets vendor list
- front-end: persisted controls (localStorage), density switches list<->multi-col image grid
- injection-guarded, verified across all filters

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
da6a927 · 2026-07-28 · Save prod nginx vhost (IP-specific listen 45.61.58.125:80/443 + LE SSL + /var/www/html ACME webroot) 
The IP-specific listen is required — wildcard 'listen 80' loses to the fleet's
'listen 45.61.58.125:80' blocks for external traffic, which was breaking cert issuance.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

File tree

6 files tracked. Click any to browse the source at HEAD.

Other build journals

← New Arrivals Content Engine  ·  all 4 projects  ·  New Import Viewer →

Export

commits.csv · feed.atom · project.json · commits.json

rendered in 1ms