iamdoubz 8d5475cfbf security: fix the review leftovers (owner, 08 §6) ...

- Asterisk doesn't load app_system, func_shell, app_disa, res_agi, app_externalivr.
- Turning two-step sign-in on asks for the password again.
- *97/*98: one voicemail login at a time per phone, 10 an hour (sp-sub-vmlimit).
- /prov: an unknown MAC gets the same 401 as a known one.
- The login limiter sweeps keys past every window.
Also the v1 checklist with the owner's results from 2026-10-21.

2026-10-21 10:54:44 -05:00

..

asterisk

security: fix the review leftovers (owner, 08 §6)

2026-10-21 10:54:44 -05:00

fixtures

parking: parked calls live, on the dashboard and Home, pick up from Home

2026-10-19 04:23:21 -05:00

announcements.test.ts

announcements: play a sound, then continue

2026-10-18 11:00:33 -05:00

app.ts

backups: daily backup, Back up now, download, restore.sh

2026-10-19 17:07:58 -05:00

audio.ts

sounds: upload, convert, play, rename, delete with references

2026-10-18 10:13:58 -05:00

auth.test.ts

security: review fixes (dialed-number filter, browser endpoint ACL, IVR direct dial, …)

2026-10-20 12:19:47 -05:00

backup.test.ts

backups: daily backup, Back up now, download, restore.sh

2026-10-19 17:07:58 -05:00

blocked.test.ts

blocked: blocked numbers page and API; M6 milestone check

2026-10-18 13:57:27 -05:00

calls.test.ts

parking: parked calls live, on the dashboard and Home, pick up from Home

2026-10-19 04:23:21 -05:00

cdr.test.ts

parking: parked calls live, on the dashboard and Home, pick up from Home

2026-10-19 04:23:21 -05:00

conferences.test.ts

conferences: rooms with PIN and admin PIN, per-room limits, recording

2026-10-19 04:56:41 -05:00

db.ts

db: drizzle schema matching spec 02, initial migrations, settings service

2026-10-17 15:04:18 -05:00

devices.test.ts

security: fix the review leftovers (owner, 08 §6)

2026-10-21 10:54:44 -05:00

dids.test.ts

cdr: store Cdr events, aggregate calls, fixtures from real calls

2026-10-18 14:37:14 -05:00

emergency.test.ts

emergency: 911 dialplan, notifications, test button, settings, warnings

2026-10-17 20:52:50 -05:00

extensions.test.ts

trunks: CRUD API, PJSIP trunk config, live registration status, Trunks page

2026-10-17 19:42:14 -05:00

generator.test.ts

provisioning: phones, /prov with Basic auth, rate limit and IP block

2026-10-19 13:38:18 -05:00

integrations.test.ts

test: wait for fire-and-forget inserts instead of a fixed 200 ms

2026-10-20 13:12:59 -05:00

ivrs.test.ts

destinations: full picker everywhere, numbers in summaries, Ring everyone

2026-10-18 11:04:42 -05:00

jobs.test.ts

system: information panel and event log; about: download this build's source

2026-10-20 11:26:34 -05:00

live.test.ts

security: review fixes (dialed-number filter, browser endpoint ACL, IVR direct dial, …)

2026-10-20 12:19:47 -05:00

livecalls.test.ts

live: listen, whisper and barge on calls in progress

2026-10-19 14:30:48 -05:00

me-settings.test.ts

featurecodes: DND, forwarding, pickup, echo, say-ext; /me settings

2026-10-18 11:19:21 -05:00

me-voicemail.test.ts

sounds: upload, convert, play, rename, delete with references

2026-10-18 10:13:58 -05:00

moh.test.ts

moh: music-on-hold classes, uploads, pickers for users and queues

2026-10-19 10:10:01 -05:00

outbound.test.ts

setup: first-run wizard, telephony restart, system status

2026-10-17 21:11:04 -05:00

paging.test.ts

paging: paging groups, *80 intercom, auto-answer headers

2026-10-19 09:40:22 -05:00

queues.test.ts

queues: service level counts callers who weren't answered

2026-10-19 12:13:39 -05:00

recordings.test.ts

recordings: record calls, link them to history, Recordings page

2026-10-18 14:57:52 -05:00

reports.test.ts

reports: calls per day, missed, busiest hours, queue table

2026-10-19 22:09:43 -05:00

ringgroups.test.ts

destinations: full picker everywhere, numbers in summaries, Ring everyone

2026-10-18 11:04:42 -05:00

schema.test.ts

system: information panel and event log; about: download this build's source

2026-10-20 11:26:34 -05:00

settings.test.ts

emergency: 911 dialplan, notifications, test button, settings, warnings

2026-10-17 20:52:50 -05:00

setup.test.ts

setup: first-run wizard, telephony restart, system status

2026-10-17 21:11:04 -05:00

sounds.test.ts

sounds: upload, convert, play, rename, delete with references

2026-10-18 10:13:58 -05:00

system-events.test.ts

release: container images when a release is published; version 0.0.1

2026-10-20 13:27:49 -05:00

timeconditions.test.ts

featurecodes: DND, forwarding, pickup, echo, say-ext; /me settings

2026-10-18 11:19:21 -05:00

tls.test.ts

sip: TLS transport with a checked certificate, TLS + SRTP trunks

2026-10-19 16:33:11 -05:00

totp.test.ts

security: fix the review leftovers (owner, 08 §6)

2026-10-21 10:54:44 -05:00

trunks.test.ts

outbound: routes with failover and caller ID, test box, Outbound rules page

2026-10-17 20:04:35 -05:00

users.test.ts

users: admin CRUD API and admin shell UI

2026-10-17 15:18:08 -05:00

voicemail.test.ts

ci: run the check job in a container so "postgres" resolves

2026-10-18 14:17:24 -05:00

voipms.test.ts

voipms: API client, POP server list, import numbers

2026-10-19 12:41:45 -05:00