`CHANGES.md`

21 lines
## Applied
- server.js:18 — removed hardcoded Basic Auth defaults and fail fast unless `YOLO_AUTH_USER`/`YOLO_AUTH_PASS` are set — prevents fallback to shipped credentials.
- server.js:605 — added JSON body guards on task/mode/cooldown POST routes — malformed requests now return 400 instead of destructuring failures.
- server.js:1051 — changed listener from public bind to `127.0.0.1` and removed the public dashboard URL — local-only tool should not expose the agent port.
- ledger-app/src/lib/xfetch.ts:18, dashboard/task-ledger.html:584, ledger-dist/assets/index-BwgB1DeC.js:149 — removed embedded `admin` password headers and use same-origin credentials — avoids shipping agent credentials in browser code.
- create-missing-collections.js:15, scripts/collection-descriptions.js:17 — moved Slack/Gemini/local dashboard auth to env vars with fail-fast checks — removes live-looking secrets from source.
- scripts/body-html-cleanup.js:72 — escaped generated product title/vendor HTML and changed logs/env loading to project-relative paths — prevents stored HTML injection and nonportable `/root` paths.
- scripts/collection-image-refresh.js:91, orphan-audit.js:188 — replaced `/root` log/report paths with paths derived from `__dirname` — keeps generated files inside this project.
- .env.example:1 — added placeholder env keys only — documents required config without adding real secrets.

## Deferred (needs Steve)
- P0 — server.js:226 — Claude still runs with Bash/Write/Edit over `/Users/stevestudio2/Projects` — permission/workflow redesign is not a safe surgical fix.
- P0 — server.js:614 — `/api/run` still queues arbitrary prompts and auto-starts — changing approval semantics needs owner decision.
- P0 — tasks/done/* — committed task artifacts still contain exposed Slack/Gemini/DB/auth values — requires credential rotation and archive purge/redaction by Steve.
- P0 — promote-and-parallel.sh:7, setup-yolo-remote.sh:101 — old auth remains in operational scripts — changing deployment/CLI auth patterns was outside the cited safe source/browser fix.
- P1 — server.js:441 — Basic Auth parser/timing-safe compare unchanged — not in the safe fix list.
- P1 — server.js:486 — `/api/live-log` can read recent `/tmp/*.log` tails — behavior change needs log ownership design.
- P1 — server.js:1058 — auto-retry metadata remains in-memory — persistence changes are not safe without testing.
- P1 — promote-and-parallel.sh:45 — parallel workers still bypass scheduler guardrails — scheduler redesign deferred.
- P1 — server.js:491 — synchronous dashboard API work remains — async/cache refactor deferred.