docs(roadmap): record embedded sync console

This commit is contained in:
mirivlad 2026-07-17 07:02:15 +08:00
parent cf26f7c3c1
commit 78cfc367b3
1 changed files with 8 additions and 3 deletions

View File

@ -163,9 +163,14 @@ Verified in the current implementation:
users, devices, vaults, storage, audit, SMTP settings, and diagnostics; users, devices, vaults, storage, audit, SMTP settings, and diagnostics;
protect its mutations with sessions, CSRF, security headers, and protect its mutations with sessions, CSRF, security headers, and
administrator re-authentication for sensitive changes. administrator re-authentication for sensitive changes.
- [x] remove the former hardcoded server HTML, add bounded admin list queries, - [x] remove the former hardcoded server HTML and split the embedded console
vault aggregate/detail diagnostics without file payloads, sanitised admin into shared layout/sidebar plus public, account, and per-admin-section
diagnostics download, and a real headless-Chromium smoke script. templates; add locale-aware timestamps, local confirmation dialog, safe
public-form CSRF, server-side filters/sorting/pagination, user email
confirmation/device lifecycle actions, one-time generated admin password
resets without URL/audit/cookie/plaintext persistence, vault metadata diagnostics without file
payloads, sanitised diagnostics download, and an interactive headless-
Chromium smoke script without npm dependencies.
Known limits in this phase: Known limits in this phase: