What's New
High Priority (PR #45)
- Docker Support (#34) — Multi-stage Dockerfile, docker-compose.yml, .dockerignore, standalone output
- Session Controls (#35) — Monitor/pause/terminate buttons wired to gateway CLI via
/api/sessions/[id]/control - Dynamic Model Catalog (#36) — Single source of truth in
src/lib/models.tsreplacing 2 hardcoded arrays - API Rate Limiting (#37) — Factory-based rate limiter: login (5/min), mutations (60/min), heavy ops (10/min)
Medium Priority (PR #46)
- Error Boundaries (#38) — React
ErrorBoundarywrapping panels with retry UI - Structured Logging (#39) — Pino logger replacing console.log/error across lib + API routes
- Accessibility (#40) — WCAG 2.1 AA: ARIA landmarks, labels,
aria-current,role="alert"on errors - HSTS Header (#41) — Conditional via
MC_ENABLE_HSTS=1env var - Zod Validation (#42) — Input schemas for tasks, agents, webhooks, alerts mutation endpoints
- Export Row Limits (#43) — Bounded SELECT queries with configurable LIMIT caps
Verification
pnpm typecheck && pnpm lint && pnpm build— all passpnpm test— 5 passed, 7 todo (pre-existing)