sysadminandClaude Opus 4.8 b179610e7f fix(webui): remediate PR #876 REQUEST_CHANGES for analytics (#651) ...

Address review blockers and medium/low findings:

- F1: HTML-escape all dynamic analytics fields (html.escape quote=True)
- F2: Gate POST /api/v1/analytics/usage through console_authz
  record_analytics_usage (fail closed for unauthenticated / Phase 1)
- F3: Enforce usage_events retention (max rows + max age)
- F4: Coerce None remote/org/repo to empty strings in load_analytics

Add tests for XSS escaping, unauthorized ingest deny, retention, and
None scope coercion. Document authz + retention in analytics guide.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

2026-07-24 08:11:12 -04:00

..

data

feat(webui): versioned project registry API (Closes #635)

2026-07-22 16:12:07 -04:00

__init__.py

feat: add internal web UI server skeleton (Closes #426)

2026-07-07 13:23:09 -04:00

__main__.py

fix: restore ISSUE_LOCK_FILE import and fail-closed public bind

2026-07-09 11:52:24 -04:00

analytics_loader.py

fix(webui): remediate PR #876 REQUEST_CHANGES for analytics (#651)

2026-07-24 08:11:12 -04:00

analytics_views.py

fix(webui): remediate PR #876 REQUEST_CHANGES for analytics (#651)

2026-07-24 08:11:12 -04:00

app.py

fix(webui): remediate PR #876 REQUEST_CHANGES for analytics (#651)

2026-07-24 08:11:12 -04:00

audit_validator.py

feat: add final-report audit paste tool to web UI (Closes #431)

2026-07-07 15:20:47 -04:00

audit_views.py

feat: add final-report audit paste tool to web UI (Closes #431)

2026-07-07 15:20:47 -04:00

ci_paths.py

feat(webui): test coverage and CI gate (#436)

2026-07-09 11:59:23 -04:00

console_audit.py

feat(webui): console authorization, RBAC, redaction, and audit model (Closes #633)

2026-07-22 14:37:35 -05:00

console_authz.py

fix(webui): remediate PR #876 REQUEST_CHANGES for analytics (#651)

2026-07-24 08:11:12 -04:00

console_redaction.py

feat(webui): console authorization, RBAC, redaction, and audit model (Closes #633)

2026-07-22 14:37:35 -05:00

deployment_boundary.py

feat(webui): auth and deployment boundary (#435)

2026-07-09 11:50:40 -04:00

gated_action_views.py

feat(webui): gated action framework (#434)

2026-07-07 15:34:39 -04:00

gated_actions.py

feat(webui): gated action framework (#434)

2026-07-07 15:34:39 -04:00

layout.py

Merge master into feat/issue-639-webui-system-health-dashboard

2026-07-23 19:56:57 -04:00

lease_loader.py

test: keep webui CI hermetic offline

2026-07-09 11:59:23 -04:00

lease_views.py

feat: add lease and collision visibility to web UI (Closes #433)

2026-07-07 15:29:56 -04:00

nav.py

Merge branch 'master' into feat/issue-651-usage-cost-analytics

2026-07-24 06:55:03 -05:00

project_registry.py

feat(webui): versioned project registry API (Closes #635)

2026-07-22 16:12:07 -04:00

project_views.py

feat(webui): versioned project registry API (Closes #635)

2026-07-22 16:12:07 -04:00

prompt_library.py

feat: add web UI prompt library from canonical workflows (#428)

2026-07-07 14:53:16 -04:00

prompt_views.py

feat: add web UI prompt library from canonical workflows (#428)

2026-07-07 14:53:16 -04:00

queue_loader.py

test: keep webui CI hermetic offline

2026-07-09 11:59:23 -04:00

queue_views.py

fix(webui): suppress empty queue copy on fetch failure (#458)

2026-07-07 15:53:10 -04:00

registry_safety.py

feat(webui): worker registry and configuration schema (Closes #798)

2026-07-22 06:10:34 -05:00

runtime_health.py

test: keep webui CI hermetic offline

2026-07-09 11:59:23 -04:00

runtime_views.py

feat: add MCP runtime health dashboard to web UI (Closes #430)

2026-07-09 00:04:11 -04:00

system_health_views.py

feat(webui): system-health dashboard (Closes #639)

2026-07-23 16:08:36 -04:00

system_health.py

feat(webui): read-only system-health API (Closes #634)

2026-07-22 15:59:30 -05:00

timeline.py

fix(webui): validate externally influenced event_type at the timeline boundary (#637)

2026-07-23 18:45:54 -04:00

worker_registry.py

feat(webui): worker registry and configuration schema (Closes #798)

2026-07-22 06:10:34 -05:00

worktree_scanner.py

fix(preflight): unify review worktree regex, resolve Web UI NameError, and fix test isolation

2026-07-11 19:49:16 -04:00

worktree_views.py

feat: add worktree hygiene dashboard to web UI (Closes #432)

2026-07-07 15:26:22 -04:00