ico
/
pingql
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
330 Commits 1 Branch 0 Tags 3.2 MiB
Commit Graph

179 Commits

Author SHA1 Message Date
nate e9ca90324b fix: align chart points by run_id avg time so regions stack vertically 2026-03-18 19:55:48 +04:00
nate 1706e83a3f fix: reduce chart spline tension to prevent jittery overshoot 2026-03-18 19:52:46 +04:00
nate 59861651bd feat: interactive canvas latency chart with hover tooltips and smooth curves 2026-03-18 19:49:44 +04:00
nate df22029755 fix: no region text 2026-03-18 19:43:28 +04:00
nate f013890c40 refactor: extract monitor form into shared partial for create and edit 2026-03-18 19:41:31 +04:00
nate 5b7a211c21 fix: show latest latency from fastest region instead of average on home 2026-03-18 19:36:24 +04:00
nate 688245b0c2 fix: match client-side sparkline behavior to SSR region-aware rendering 2026-03-18 19:31:41 +04:00
nate 6beb7f8039 update: tos 2026-03-18 19:27:10 +04:00
M1 7b98ae78e5 fix: run_id = hash(monitor_id, interval_bucket) — unique per window, consistent across regions 2026-03-18 17:03:17 +04:00
M1 77534a037c feat: show run_id (first 8 chars) in recent pings table 2026-03-18 16:42:50 +04:00
M1 e057a65535 fix: avgLatency NaN — extract .latency_ms from ping objects 2026-03-18 16:31:08 +04:00
M1 07648672ad feat: per-region chart lines and lowest-avg sparkline 2026-03-18 16:25:47 +04:00
M1 8c39fb45c1 feat: add region selector to monitor edit form 2026-03-18 16:15:19 +04:00
M1 93db31db3b feat: multi-region monitor support — region selector in UI, region flag on pings 2026-03-18 16:08:39 +04:00
M1 baea9f8e7e fix: sub-key notice as separate card below account section 2026-03-18 12:05:24 +04:00
M1 6d057d5797 fix: move sub-key notice inside account section 2026-03-18 12:04:40 +04:00
M1 988c43090b fix: make sub-key notice match page style 2026-03-18 12:03:02 +04:00
M1 a9a1e43146 feat: add sub-key notice banner on settings page 2026-03-18 12:01:35 +04:00
M1 f7d6eff972 fix: block sub-keys from accessing/modifying email, account key, and other sub-keys 2026-03-18 11:51:52 +04:00
M1 eeb0318c4d fix: hide login key and sub-keys from sub-key sessions 2026-03-18 11:48:51 +04:00
M1 c56af82053 fix: increase key input maxlength to 64 for new key format 2026-03-18 11:45:31 +04:00
M1 641af86779 fix: separate jsHash for app.js cache busting 2026-03-18 09:43:11 +04:00
M1 3a9cd62cdd fix: increase tos top padding to pt-28 2026-03-18 09:26:18 +04:00
M1 1325512c6d fix: reduce tos page padding and section spacing 2026-03-18 04:04:47 +04:00
M1 143868eb21 fix: increase TOS top padding, add spacing above h2s 2026-03-18 03:59:52 +04:00
M1 7db2889960 feat: add Terms of Service page 2026-03-18 03:52:58 +04:00
M1 705073b508 fix: center hero section vertically on pageload 2026-03-18 03:45:14 +04:00
M1 ce4411b13b feat: add 1-20s interval options, lower API minimum to 1s 2026-03-18 03:20:33 +04:00
M1 8221b3a33d fix: remove redundant 'jitter' word from pings table 2026-03-18 03:05:39 +04:00
M1 a246b60cbe fix: space between time and jitter label 2026-03-17 11:23:01 +04:00
M1 e7ec457d0e feat: show jitter_ms in pings table time column 2026-03-17 10:48:24 +04:00
M1 5c91cbc522 refactor: convert all static HTML to EJS with cssHash cache-busting, remove stale html files 2026-03-17 09:54:44 +04:00
M1 41bfe52f10 feat: cache-bust static assets with CSS content hash on startup 2026-03-17 09:44:18 +04:00
M1 a995fe3c94 feat: replace Tailwind CDN with self-hosted pre-built CSS 2026-03-17 09:32:34 +04:00
M1 cf8903f95d fix: fixed width on text column prevents layout shift when timestamp changes 2026-03-17 07:48:00 +04:00
M1 017d489e2e fix: mutate polyline points in place on SSE ping, no fetch, no flicker 2026-03-17 07:44:09 +04:00
M1 2c32bc1115 Revert "fix: client-side sparkline with local buffer, no server fetch on update" 
This reverts commit 72bc11813d.
 2026-03-17 07:42:36 +04:00
M1 72bc11813d fix: client-side sparkline with local buffer, no server fetch on update 2026-03-17 07:38:26 +04:00
M1 6929d8f51f fix: atomic SVG replaceWith() on sparkline update, no empty-frame bounce 2026-03-17 07:35:54 +04:00
M1 0874583a4f Revert "fix: static HTML label spans outside swap zone, chart only returns SVG + label update script" 
This reverts commit e8bfaa42d7.
 2026-03-17 07:34:02 +04:00
M1 e8bfaa42d7 fix: static HTML label spans outside swap zone, chart only returns SVG + label update script 2026-03-17 07:32:39 +04:00
M1 5eb463a03a fix: SVG h-full so it fills container exactly, no overflow or clipping 2026-03-17 07:28:57 +04:00
M1 51baf7c495 fix: chart container w-full overflow-hidden prevents graph escaping bounds 2026-03-17 07:27:05 +04:00
M1 f00c78116b fix: detail page updates all stats, status bar, pings table in realtime via SSE 2026-03-17 07:23:54 +04:00
M1 93c3a1e84a fix: pin sparkline container to 120x32 to prevent layout shift on update 2026-03-17 07:20:56 +04:00
M1 1794c05b4f fix: restore status dot, latency, last-ping time updates on SSE 2026-03-17 07:15:31 +04:00
M1 94d24bac35 fix: fetch sparkline/chart immediately on SSE ping, no debounce delay 2026-03-17 07:12:48 +04:00
M1 b802c7c68b fix: bust Cloudflare cache on app.js with version query string 2026-03-17 07:10:27 +04:00
M1 66b368453d refactor: single account-level SSE stream instead of per-monitor connections 2026-03-17 07:06:09 +04:00
M1 55f9f6d8ed refactor: SSE just refreshes sparkline/chart from server, no DOM stat patching 2026-03-17 07:03:10 +04:00
M1 e461d73ce3 refactor: drop all hashing, store keys plaintext 2026-03-17 06:47:22 +04:00
M1 54c89a5a11 fix: store key_plain on sub-keys, display always in settings with copy button 2026-03-17 06:40:33 +04:00
M1 c684d96d90 fix: rename API Keys -> Sub-Keys, show key inline on creation, no reload 2026-03-17 06:37:29 +04:00
M1 ab4f60e159 fix: rotate button inline with key field, updates in place 2026-03-17 06:34:57 +04:00
M1 0c65b5e3fa fix: just show the login key on settings page 2026-03-17 06:33:13 +04:00
M1 2ec1915ef5 fix: remove pointless internal UUID from settings, show login key label instead 2026-03-17 06:31:41 +04:00
M1 9d8982ae50 fix: key rotation shows new key in dedicated reveal, not sub-key div; clarify account ID label 2026-03-17 06:29:58 +04:00
M1 6bdd76b4f0 security: auth redesign, SSRF protection, CORS lockdown, and 13 other fixes 
- Auth (#2/#3): UUID PK, 256-bit keys, SHA-256 lookup + bcrypt hash
- SSRF (#1): validate URLs, block private IPs, cloud metadata endpoints
- CORS (#4): lock to pingql.com origins, not wildcard
- SSE limit (#6): 10 connections per monitor max
- ReDoS (#7): cap $regex patterns at 200 chars
- Monitor limit (#8): 100 per account default
- Cookie env config (#9): secure/domain from env vars
- Bearer parsing (#10): case-insensitive RFC 6750
- Pings retention (#11): 90-day pruner, hourly interval
- monitors.enabled index (#12): partial index for /internal/due
- Runner locking (#14): locked_until for horizontal scale safety
- COALESCE nullable bug (#17): dynamic PATCH with explicit undefined checks
- MONITOR_TOKEN null guard (#18): startup validation + middleware hardening
- reset-key cookie fix (#16): sets new cookie in response
 2026-03-17 06:10:10 +04:00
M1 5071e340c7 fix: SSE-driven chart/sparkline refresh, debounced server-side partials 2026-03-16 21:21:56 +04:00
M1 2f7273604b refactor: full SSR dashboard, minimal SSE DOM patches, poll-based refresh 2026-03-16 21:14:45 +04:00
M1 878829111f fix: use raw ETA tag for timestamp HTML in SSR monitor list 2026-03-16 17:37:48 +04:00
M1 31f95288e6 fix: missing closing ETA block tag in home.ejs SSR section 2026-03-16 17:32:22 +04:00
M1 ef56b47b09 feat: cookie-based auth, SSR dashboard, JS-optional login 2026-03-16 17:25:59 +04:00
M1 8e4cb84599 ux: widen dashboard layout to max-w-7xl, consistent px-8 padding 2026-03-16 17:15:45 +04:00
M1 d41d3a3737 fix: latency chart red dots — track up/down with latency values 2026-03-16 17:13:48 +04:00
M1 923f0349dc feat: fully SSE-driven detail/home pages, kill polling intervals 2026-03-16 17:10:12 +04:00
M1 037013b564 fix: SSE ping rows match existing table row style 2026-03-16 17:07:31 +04:00
M1 a681833d8d feat: detail edit form matches new monitor form (method, headers, body, timeout) 2026-03-16 17:04:30 +04:00
M1 ef2b2c043d feat: live sparkline updates on SSE ping 2026-03-16 16:20:34 +04:00
M1 31d1fa7b04 fix: SSE via fetch for auth headers, remove query param auth, add heartbeat every 10s 2026-03-16 16:17:33 +04:00
M1 6d48a83560 feat: SSE live ping stream for monitors 2026-03-16 16:14:23 +04:00
M1 1e95149456 feat: live-updating timestamps via data-ts attribute 2026-03-16 16:10:04 +04:00
M1 2bfe3a0272 fix: remove double popup on key rotation 2026-03-16 16:07:12 +04:00
M1 3368dbdd7f feat: custom method, headers, body, timeout on monitors 2026-03-16 15:30:35 +04:00
M1 d98aa5e46f fix: query-builder.js missing from monitor detail page 2026-03-16 15:25:16 +04:00
M1 5944fae824 fix: query-builder.js missing from new monitor EJS page 2026-03-16 15:21:21 +04:00
M1 4c5e426292 fix: remove defer from app.js so functions available to inline scripts 2026-03-16 15:19:33 +04:00
M1 87c924d8d0 fix: app.js deferred in head (fixes requireAuth undefined), extract app.css 2026-03-16 15:16:59 +04:00
M1 e36c239000 refactor: ETA templating engine for dashboard, shared nav/head/foot partials 2026-03-16 15:14:26 +04:00