Claude Fable 5
db4c5ce9ca
All checks were successful
CI / Lint, typecheck, test (pull_request) Successful in 4m53s
CI / Build container images (pull_request) Successful in 3m55s
CI / Auth e2e pack (pull_request) Successful in 7m53s
CI / Import/export fidelity gate (pull_request) Successful in 55s
CD / Build and push images (push) Successful in 19s
CD / Deploy to Test (push) Successful in 12s
CD / Smoke tests against Test (push) Successful in 1m17s
CD / Promote to Int (push) Successful in 11s
CI / Lint, typecheck, test (push) Successful in 4m53s
CI / Build container images (push) Has been skipped
CI / Auth e2e pack (push) Successful in 7m37s
CI / Import/export fidelity gate (push) Successful in 52s
SESSION_ABSOLUTE_HOURS (default 168 h) caps a session's total lifetime from login: expiresAt is set once at creation and never extended — the old sliding 30-day renewal is gone. SESSION_IDLE_HOURS (default 72 h) ends sessions unused for that long, enforced server-side against lastSeenAt with a write throttle scaled to the idle bound so short idle windows still renew. Expired rows are removed on validation and the session list applies both bounds, so idle-dead sessions never show as active. The cookie maxAge follows the configured absolute bound. Documented in .env.example (with the VS-NfD reference values for the upcoming hardening guide #227), compose passes the variables through, security.md and ADR 0007 record the amendment. Refs #190 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0168Ph5uBmHm8X28CSVpbpnJ |
||
|---|---|---|
| .. | ||
| 0001-typescript-monorepo.md | ||
| 0002-postgresql.md | ||
| 0003-yjs-crdt-collaboration.md | ||
| 0004-tiptap-editor.md | ||
| 0005-react-vite-frontend.md | ||
| 0006-nestjs-prisma-backend.md | ||
| 0007-auth-sessions-oidc-ready.md | ||
| 0008-plugin-sandbox.md | ||
| 0009-import-export-converters.md | ||
| 0010-postgres-fulltext-search.md | ||
| 0011-file-storage-quotas.md | ||
| 0012-i18n.md | ||
| 0013-versioning-and-trash.md | ||
| 0014-gitea-actions-cicd.md | ||
| 0015-backup-strategy.md | ||
| 0016-self-hosted-fonts.md | ||
| 0017-accessibility-by-default.md | ||
| 0018-color-theming.md | ||
| 0019-no-security-base-functions.md | ||
| 0020-token-crypto-key-separation.md | ||
| 0021-external-authentication.md | ||
| 0022-page-classification.md | ||
| 0023-read-access-audit-trail.md | ||
| 0024-reproducible-offline-deployment.md | ||
| 0025-plugin-trust-model.md | ||
| 0026-backup-target-restriction.md | ||