0.27.0 — In-GUI log viewer
No more SSH for monitoring. New admin page tails the live server logs with filters.
📜 /admin/logs — ring-buffered last 5000 lines (tunable via LOG_BUFFER_LINES). Filter by category (stream / resolve / refresh / warm / admin / server / denylist / etc.), user, free-text search, and severity. "Tail (3s refresh)" auto-polls so you can watch live activity. Severity-highlighted rows: errors red-tinted, warnings yellow-labelled.
🛡️ Every captured line runs through lib/redact.js before storage, so the buffer can't accidentally retain secrets even if a logging path forgets to redact.
🧠 Auto-categorisation from the existing log prefix conventions ([stream u=name], [resolve u=admin], [refresh], etc.) — no per-call instrumentation needed.
🔗 New "📜 Logs" link in the admin nav alongside Health and Backup.
Upgrading: standard deploy. The buffer starts empty on each boot.