Issues

• Secrets service route-shape mismatch: every consumer requests /api/v1/secrets/* but the service maps /secrets/*

  apibugsecurity
  SandboxServers/MeridianConsole#147 · Filter by author Cadacious opened on Jul 26, 2026
  1

• BetterAuth JS credential fallbacks: remove dev-secret/dhadgar defaults in secrets-client.js and auth.js

  securitytech-debt
  SandboxServers/MeridianConsole#146 · Filter by author Cadacious opened on Jul 26, 2026
  1

• Service-account secret rotation + startup entropy validation + Key Vault storage (#111 remnant)

  security
  SandboxServers/MeridianConsole#145 · Filter by author Cadacious opened on Jul 26, 2026
  1

• Break-glass hardening: SIEM alerting, second-admin approval, distributed nonce tracker (#110 remnant)

  architecturesecurity
  SandboxServers/MeridianConsole#144 · Filter by author Cadacious opened on Jul 26, 2026

• OpenIddict dev-client seeding: fail startup when unconfigured (currently warn-and-skip) + integration test (#109 remnant)

  security
  SandboxServers/MeridianConsole#143 · Filter by author Cadacious opened on Jul 26, 2026
  1

• Document required credential env vars + add CI credential-detection check (#108 remnant)

  security
  SandboxServers/MeridianConsole#142 · Filter by author Cadacious opened on Jul 26, 2026
  1

• Helm chart is non-functional: inert ServiceUrls__*/RABBITMQ_* env contracts, ghost firewall service, no BetterAuth deployment (DV-7)

  bugbuildtech-debt
  SandboxServers/MeridianConsole#135 · Filter by author Cadacious opened on Jul 26, 2026
  1

• AppHost cannot run the platform: no BetterAuth resource, no service-discovery references, no WaitFor (DV-6)

  builddxtech-debt
  SandboxServers/MeridianConsole#134 · Filter by author Cadacious opened on Jul 26, 2026
  2

• Phase 4: Panel + deploy + demo hardening - Panel pages on live APIs, compose deployment + runbooks, P0 integration tests in CI, demo + seed

  builddocumentationenhancementtesting
  SandboxServers/MeridianConsole#133 · Filter by author Cadacious opened on Jul 26, 2026
  2

• Phase 3: Server lifecycle through the control plane - merge PR #88, wire Servers->Nodes->agent dispatch, service auth, console streaming

  architectureenhancementmessagingsecurity
  SandboxServers/MeridianConsole#132 · Filter by author Cadacious opened on Jul 26, 2026
  2

• Phase 2: Agent vertical - /hubs/agent hub, contract reconciliation, agent runtime, command handlers, signing, versioning

  architectureenhancementsecuritytesting
  SandboxServers/MeridianConsole#131 · Filter by author Cadacious opened on Jul 26, 2026
  2

• Phase 1: Sessions that survive + honest login - Identity POST /refresh with rotation, config-driven provider list, localhost dev login

  bugdxenhancementsecurity
  SandboxServers/MeridianConsole#130 · Filter by author Cadacious opened on Jul 26, 2026
  1

• Phase 0: Unblock - merge security PR #127, deflake Nodes timing tests, file audit issues, clear Dependabot critical/high backlog

  dependenciessecuritytech-debttesting
  SandboxServers/MeridianConsole#129 · Filter by author Cadacious opened on Jul 26, 2026
  5

• Beta roadmap: full vertical slice (login → Panel → enrolled agent → real game server)

  architectureenhancement
  SandboxServers/MeridianConsole#128 · Filter by author Cadacious opened on Jul 26, 2026
  2

• ServerTemplateService: Optional fields are write-once (cannot clear to null)

  SandboxServers/MeridianConsole#126 · Filter by author Cadacious opened on Feb 15, 2026

• Wrap list endpoints in Result<T> to match error handling contract

  enhancement
  SandboxServers/MeridianConsole#125 · Filter by author Cadacious opened on Feb 15, 2026

• Add scheduled purge job for MassTransit inbox/outbox records

  enhancement
  SandboxServers/MeridianConsole#124 · Filter by author Cadacious opened on Feb 15, 2026

• Replace REPLACE_ME config placeholders with environment-aware defaults

  enhancement
  SandboxServers/MeridianConsole#123 · Filter by author Cadacious opened on Feb 15, 2026
  1

• Add TrustedHosts validation to ServerOwnershipValidator (SSRF prevention)

  enhancementsecurity
  SandboxServers/MeridianConsole#122 · Filter by author Cadacious opened on Feb 15, 2026

• testing: implement cross-functional integration tests runnable in CI pipeline

  testing
  SandboxServers/MeridianConsole#121 · Filter by author Cadacious opened on Feb 14, 2026
  1

• investigation: BetterAuth + OpenIddict hybrid auth architecture - security posture and hardening

  architecturesecurity
  SandboxServers/MeridianConsole#120 · Filter by author Cadacious opened on Feb 14, 2026
  1

• refactor: resolve Result<T> vs Exception inconsistency across codebase

  architecture
  SandboxServers/MeridianConsole#119 · Filter by author Cadacious opened on Feb 14, 2026

• feat: implement agent command handlers (Ping, StartServer, StopServer minimum)

  enhancement
  SandboxServers/MeridianConsole#118 · Filter by author Cadacious opened on Feb 14, 2026
  1

• feat: design and implement agent self-update mechanism

  enhancement
  SandboxServers/MeridianConsole#117 · Filter by author Cadacious opened on Feb 14, 2026

• feat: add API versioning before agent deployment

  architecture
  SandboxServers/MeridianConsole#116 · Filter by author Cadacious opened on Feb 14, 2026