efitenandClaude Opus 5.5 25ae52e52f fix(observer-logins): final review fixes ...

1. Audit actions renamed to observer.login.create/resend/revoke/reissue and
   observer.binding.set so the admin audit filter accepts them; test pins
   auditActionRE against all five, create/resend rows now asserted.
2. "three formats" is four formats in openapi.go and the doc.
3. hookSecret needs 16+ characters (env override applies first); the E2E
   secret is lengthened to match.
4. broker.transport accepts only tcp or websockets.
5. openapi GET /api/account/export names observerLogin and observerBindings.
6. observer.binding.set audit detail carries previousUserId ("none" when
   the key was unbound).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-25 18:15:09 +01:00

..

e2e

fix(observer-logins): final review fixes

2026-10-25 18:15:09 +01:00

unit

fix(observer-logins): admin tab updates rows, not whole tables

2026-10-25 16:43:58 +01:00

a11y-allowlist.yaml

fix(#1715): dark-theme role swatches via per-theme CSS tokens (#1757)

2026-06-20 16:15:58 -07:00

emoji-allowlist.txt

fix(#1648): final emoji leaks — .obs-clock-naive-chip warning + analytics Channels encrypted group labels (#1665)

2026-06-11 18:29:30 -07:00