xarmian 05a9665f50 feat(auth): first-run logs-token bootstrap flow (TASK-1167) (#424) ...

One-time bootstrap token generated on first start with no users in self-host
mode. Token is logged in a banner the operator can grab from `docker logs`,
persists at <DataDir>/.bootstrap-token (mode 0600), and bypasses the
loopback-only gate via the X-Bootstrap-Token header — letting the user
claim the first admin from a remote browser at /setup#token=<x>.

Header-only contract + URL-fragment (browser-only, never transmitted) +
log-redaction middleware keeps the secret out of access logs, proxy logs,
and browser history. Cloud mode unchanged: token never loaded, never
honored. Validate → UserCount-check → CreateUser → consume sequence is
mutex-serialized to prevent concurrent valid-token requests from creating
multiple admins.

Part of PLAN-1166 (Pad on Unraid — Community Apps launch).

2026-05-06 08:40:11 -04:00

..

render

fix(ci): gofmt + bump race-detector timeout to 30m (#299)

2026-04-29 15:41:12 -04:00

bootstrap_test.go

feat(auth): first-run logs-token bootstrap flow (TASK-1167) (#424)

2026-05-06 08:40:11 -04:00

bootstrap.go

feat(auth): first-run logs-token bootstrap flow (TASK-1167) (#424)

2026-05-06 08:40:11 -04:00

cloud_admin_gate_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

context.go

feat(mcp): persistent audit log for /mcp tool calls (TASK-960) (#389)

2026-05-02 22:56:10 -04:00

decode_json_test.go

chore: bump Go toolchain to 1.26 (TASK-763) (#247)

2026-04-25 11:35:19 -04:00

handlers_2fa_recovery_test.go

chore: bump Go toolchain to 1.26 (TASK-763) (#247)

2026-04-25 11:35:19 -04:00

handlers_2fa.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_account_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_account.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_activity.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_admin_billing_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_admin_billing.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_admin_invitations.go

fix: green up Go (PostgreSQL) CI (BUG-842) (#275)

2026-04-28 16:21:43 -04:00

handlers_admin_users_test.go

feat(attachments): admin per-user storage quota override UI (TASK-883) (#304)

2026-04-29 17:56:19 -04:00

handlers_admin_users.go

feat(attachments): admin per-user storage quota override UI (TASK-883) (#304)

2026-04-29 17:56:19 -04:00

handlers_admin.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_agent_roles.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_attachments_download_test.go

fix(ci): gofmt + bump race-detector timeout to 30m (#299)

2026-04-29 15:41:12 -04:00

handlers_attachments_test.go

feat(attachments): ImageProcessor interface + pure-Go impl + thumbnail pipeline (TASK-878) (#295)

2026-04-29 14:35:49 -04:00

handlers_attachments_thumbnails_test.go

feat(attachments): ImageProcessor interface + pure-Go impl + thumbnail pipeline (TASK-878) (#295)

2026-04-29 14:35:49 -04:00

handlers_attachments_thumbnails.go

feat(attachments): orphan GC sweep with periodic scheduler (TASK-886) (#307)

2026-04-29 19:25:55 -04:00

handlers_attachments_transform_test.go

feat(attachments): editor image crop with aspect presets (TASK-880) (#298)

2026-04-29 15:02:07 -04:00

handlers_attachments_transform.go

feat(attachments): orphan GC sweep with periodic scheduler (TASK-886) (#307)

2026-04-29 19:25:55 -04:00

handlers_attachments.go

feat(attachments): orphan GC sweep with periodic scheduler (TASK-886) (#307)

2026-04-29 19:25:55 -04:00

handlers_audit.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_auth_bootstrap_token_test.go

feat(auth): first-run logs-token bootstrap flow (TASK-1167) (#424)

2026-05-06 08:40:11 -04:00

handlers_auth_loopback_test.go

fix(server): read raw TCP peer for loopback check (TASK-662) (#175)

2026-04-21 19:33:47 -04:00

handlers_auth_ratelimit_test.go

feat(auth): per-email login rate limiter (TASK-651) (#178)

2026-04-21 20:52:03 -04:00

handlers_auth_session_rotation_test.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

handlers_auth_test.go

feat(auth): expose mcp_public_url on /auth/session (TASK-1113) (#393)

2026-05-03 10:40:44 -04:00

handlers_auth.go

feat(auth): first-run logs-token bootstrap flow (TASK-1167) (#424)

2026-05-06 08:40:11 -04:00

handlers_capabilities.go

feat(attachments): ImageProcessor interface + pure-Go impl + thumbnail pipeline (TASK-878) (#295)

2026-04-29 14:35:49 -04:00

handlers_changes.go

chore: clear staticcheck SA + U1000 findings on main (TASK-764) (#249)

2026-04-25 11:53:31 -04:00

handlers_cli_auth_test.go

fix(server): derive CLI auth URL scheme from r.TLS, gate X-Forwarded-Proto on trusted proxies (TASK-665) (#190)

2026-04-22 09:27:45 -04:00

handlers_cli_auth.go

fix(server): derive CLI auth URL scheme from r.TLS, gate X-Forwarded-Proto on trusted proxies (TASK-665) (#190)

2026-04-22 09:27:45 -04:00

handlers_cloud.go

fix: green up Go (PostgreSQL) CI (BUG-842) (#275)

2026-04-28 16:21:43 -04:00

handlers_collections.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_comments.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_connected_apps_test.go

feat(connected-apps): user-facing OAuth connection management page (TASK-954) (#390)

2026-05-02 23:21:07 -04:00

handlers_connected_apps.go

feat(connected-apps): user-facing OAuth connection management page (TASK-954) (#390)

2026-05-02 23:21:07 -04:00

handlers_convention_library.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_dashboard_test.go

feat(onboarding): make banner + CLI hint template-aware (TASK-1150) (#409)

2026-05-04 12:05:07 -04:00

handlers_dashboard.go

feat(onboarding): make banner + CLI hint template-aware (TASK-1150) (#409)

2026-05-04 12:05:07 -04:00

handlers_documents_test.go

fix(server): summarise structured field changes in activity feed (BUG-748) (#236)

2026-04-24 19:13:03 -04:00

handlers_documents.go

feat(mcp): pluggable Dispatcher + HTTPHandlerDispatcher for remote MCP (TASK-965) (#343)

2026-05-01 11:51:28 -04:00

handlers_events_revalidation_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_events_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_events.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_export_bundle_test.go

feat(attachments): bundle attachments + manifest in workspace export (TASK-884) (#305)

2026-04-29 18:30:43 -04:00

handlers_export_bundle.go

feat(attachments): bundle attachments + manifest in workspace export (TASK-884) (#305)

2026-04-29 18:30:43 -04:00

handlers_grants.go

fix: green up Go (PostgreSQL) CI (BUG-842) (#275)

2026-04-28 16:21:43 -04:00

handlers_import_bundle_test.go

fix(cli): construct auth login URL on CLI side to avoid 0.0.0.0 leak (TASK-839) (#311)

2026-04-29 22:03:27 -04:00

handlers_import_bundle.go

chore(import-bundle): audit + harden bundle import validation (TASK-891) (#308)

2026-04-29 20:24:25 -04:00

handlers_item_links_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_item_links.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_item_versions.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_items_test.go

feat(dashboard): broaden agent-activity signal to include MCP source (TASK-1112) (#394)

2026-05-03 10:50:54 -04:00

handlers_items.go

feat(dashboard): broaden agent-activity signal to include MCP source (TASK-1112) (#394)

2026-05-03 10:50:54 -04:00

handlers_mcp_audit_test.go

feat(mcp): persistent audit log for /mcp tool calls (TASK-960) (#389)

2026-05-02 22:56:10 -04:00

handlers_mcp_audit.go

feat(mcp): persistent audit log for /mcp tool calls (TASK-960) (#389)

2026-05-02 22:56:10 -04:00

handlers_mcp_test.go

fix(mcp): publish PAD_MCP_PUBLIC_URL verbatim as canonical resource (no /mcp suffix) (#381)

2026-05-02 18:36:55 -04:00

handlers_mcp.go

feat(metrics): session-id-keyed TTL sweep for mcp_active_sessions (TASK-1120) (#400)

2026-05-03 17:40:18 -04:00

handlers_me_test.go

feat(workspace): expose currentRole + resource-scoped permission helpers (TASK-1101) (#415)

2026-05-05 08:52:05 -04:00

handlers_me.go

feat(workspace): expose currentRole + resource-scoped permission helpers (TASK-1101) (#415)

2026-05-05 08:52:05 -04:00

handlers_members.go

fix: green up Go (PostgreSQL) CI (BUG-842) (#275)

2026-04-28 16:21:43 -04:00

handlers_oauth_clients.go

feat(oauth): MCPBearerAuth OAuth integration + public-info (TASK-1027) — closes TASK-951 (#375)

2026-05-02 13:33:53 -04:00

handlers_oauth_test.go

fix(oauth): CSP nonce on consent screen so the inline UI-state script can run (#383)

2026-05-02 19:21:25 -04:00

handlers_oauth.go

feat(metrics): MCP + OAuth observability metrics for /mcp (TASK-961) (#398)

2026-05-03 16:37:49 -04:00

handlers_playbook_library.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_rbac_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_role_board.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_search.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_share_links.go

fix: green up Go (PostgreSQL) CI (BUG-842) (#275)

2026-04-28 16:21:43 -04:00

handlers_stars_test.go

fix(mcp): bundle BUG-1081 + BUG-1082 + TASK-1076 — three small MCP-UX fixes from dogfooding (#387)

2026-05-02 21:31:48 -04:00

handlers_stars.go

fix(mcp): bundle BUG-1081 + BUG-1082 + TASK-1076 — three small MCP-UX fixes from dogfooding (#387)

2026-05-02 21:31:48 -04:00

handlers_storage_test.go

feat(attachments): Settings → Storage tab with attachment list (TASK-882) (#303)

2026-04-29 17:44:12 -04:00

handlers_storage.go

feat(attachment): add pad attachment view|show|list CLI surfaces (IDEA-898) (#321)

2026-04-30 16:06:08 -04:00

handlers_timeline.go

fix(timeline): drop \xff cursor sentinel that broke Postgres pagination (BUG-1086) (#391)

2026-05-03 00:12:50 -04:00

handlers_tokens.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_unsubscribe_test.go

fix(server): escape unsubscribe page via html/template + add strict CSP (TASK-657) (#185)

2026-04-21 22:53:27 -04:00

handlers_unsubscribe.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_versions.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_views.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_webhooks.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_well_known.go

fix(mcp): publish PAD_MCP_PUBLIC_URL verbatim as canonical resource (no /mcp suffix) (#381)

2026-05-02 18:36:55 -04:00

handlers_workspaces_test.go

fix(workspaces): scope admin's personal workspace list to memberships (BUG-982) (#392)

2026-05-03 00:35:31 -04:00

handlers_workspaces.go

fix(workspaces): scope admin's personal workspace list to memberships (BUG-982) (#392)

2026-05-03 00:35:31 -04:00

item_lineage.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

metrics_auth_test.go

fix: green up Go (PostgreSQL) CI (BUG-842) (#275)

2026-04-28 16:21:43 -04:00

middleware_auth.go

feat(metrics): emit mcp_authz_denials_total{reason=tier_mismatch} (TASK-1119) (#399)

2026-05-03 16:55:30 -04:00

middleware_csrf_test.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

middleware_csrf.go

feat(mcp): pluggable Dispatcher + HTTPHandlerDispatcher for remote MCP (TASK-965) (#343)

2026-05-01 11:51:28 -04:00

middleware_logging_test.go

feat(auth): first-run logs-token bootstrap flow (TASK-1167) (#424)

2026-05-06 08:40:11 -04:00

middleware_logging.go

feat(auth): first-run logs-token bootstrap flow (TASK-1167) (#424)

2026-05-06 08:40:11 -04:00

middleware_mcp_audit_test.go

feat(metrics): session-id-keyed TTL sweep for mcp_active_sessions (TASK-1120) (#400)

2026-05-03 17:40:18 -04:00

middleware_mcp_audit.go

feat(metrics): session-id-keyed TTL sweep for mcp_active_sessions (TASK-1120) (#400)

2026-05-03 17:40:18 -04:00

middleware_mcp_auth.go

feat(metrics): MCP + OAuth observability metrics for /mcp (TASK-961) (#398)

2026-05-03 16:37:49 -04:00

middleware_mcp_metrics_test.go

feat(metrics): session-id-keyed TTL sweep for mcp_active_sessions (TASK-1120) (#400)

2026-05-03 17:40:18 -04:00

middleware_mcp_session_test.go

feat(metrics): session-id-keyed TTL sweep for mcp_active_sessions (TASK-1120) (#400)

2026-05-03 17:40:18 -04:00

middleware_mcp_session.go

feat(metrics): session-id-keyed TTL sweep for mcp_active_sessions (TASK-1120) (#400)

2026-05-03 17:40:18 -04:00

middleware_metrics_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

middleware_metrics.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

middleware_ratelimit_test.go

PHASE-12: Security Hardening for Pad Cloud (#67)

2026-04-05 10:26:00 -04:00

middleware_ratelimit.go

feat(mcp): per-token rate limit on /mcp (TASK-959) (#378)

2026-05-02 15:15:36 -04:00

middleware_realip_test.go

chore: bump Go toolchain to 1.26 (TASK-763) (#247)

2026-04-25 11:35:19 -04:00

middleware_realip.go

fix(server): read raw TCP peer for loopback check (TASK-662) (#175)

2026-04-21 19:33:47 -04:00

middleware_security_test.go

chore: bump Go toolchain to 1.26 (TASK-763) (#247)

2026-04-25 11:35:19 -04:00

middleware_security.go

fix(server): reject CORS wildcard when credentials are on (TASK-664) (#188)

2026-04-21 23:59:54 -04:00

middleware_session_ip_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

orphan_gc_test.go

feat(attachments): orphan GC sweep with periodic scheduler (TASK-886) (#307)

2026-04-29 19:25:55 -04:00

orphan_gc.go

feat(attachments): orphan GC sweep with periodic scheduler (TASK-886) (#307)

2026-04-29 19:25:55 -04:00

password_strength_test.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

password_strength.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

server_test.go

fix(server): drain ipRateLimiter cleanup goroutines on Stop() (BUG-851) (#276)

2026-04-28 17:20:03 -04:00

server.go

feat(auth): first-run logs-token bootstrap flow (TASK-1167) (#424)

2026-05-06 08:40:11 -04:00

testimageprocessor_libvips_test.go

feat(attachments): ImageProcessor interface + pure-Go impl + thumbnail pipeline (TASK-878) (#295)

2026-04-29 14:35:49 -04:00

testimageprocessor_purego_test.go

feat(attachments): ImageProcessor interface + pure-Go impl + thumbnail pipeline (TASK-878) (#295)

2026-04-29 14:35:49 -04:00

token_scopes_test.go

feat(oauth): MCPBearerAuth OAuth integration + public-info (TASK-1027) — closes TASK-951 (#375)

2026-05-02 13:33:53 -04:00

token_workspace_allowlist_test.go

feat(oauth): live workspace allow-list + role enforcement (TASK-953) (#377)

2026-05-02 14:29:17 -04:00

twofactor_challenge.go

fix: persist 2FA challenge key and prevent duplicate TOTP verification

2026-04-08 20:30:39 +00:00

username.go

feat: username validation, reserved words, and registration flow

2026-04-10 23:12:59 +00:00