minecraft-account-manager/design/log.md

Design Update Log

2026-08-14

• Verify: Persist complete administrator-attributed RCON commands in correlated requested/completed audit events and add protected history search by command text, server, and administrator without retaining responses or credentials.

2026-08-08

• Verify: Added encrypted, allowlisted administrator RCON connection management with credential-safe audits and a generated Drizzle migration.
• Implement: Added a bounded server-side RCON command console with safe output and error handling; internal-only deployment verification remains pending.
• Refine: Removed deployment-managed RCON endpoint allowlisting so administrators may configure any valid DNS hostname and port, while retaining IP-literal rejection and documenting the outbound-connectivity trust boundary.
• Verify: Confirmed the RCON console uses an authenticated internal ClusterIP deployment with secret-backed credentials and no public RCON exposure.
• Refine: Renamed RCON host configuration to server addresses, documented internal and external targets, and redesigned the console as a portal-colored terminal with a target bar, command prompt, and latest-response viewport.
• Refine: Consolidated RCON connection management into a full-width terminal workspace with header controls, modal add/edit/delete flows, terminal-contained notices, and no duplicate configuration panels.
• Extend: Added bounded page-memory RCON command recall with Arrow Up/Arrow Down navigation, unsent-draft restoration, and prompt focus retention after results and server changes.
• Extend: Retained up to 50 chronological page-memory RCON command/response exchanges in the auto-scrolling terminal transcript without persisting them.
• Extend: Added the Docker-build-supplied immutable application version to the dependency-free /healthz response, with a development fallback.

2026-08-07

• Extend: Show each grouped recent address's latest approximate location and network classification on administrator user records.
• Refine: Select each admin map marker from the user's latest coordinate-bearing clear or hosting observation while keeping VPN, proxy, and Tor activity in the network-risk view.

2026-08-02

• Extend: Add recurring UTC group-access windows, browser-local schedule editing, and validated static denial-message variables.
• Refine: Replace admin group cards with a policy table, confirmed modal workflows, editable group details, and reusable effective-member management.
• Add: Provide Users-page group assignment, effective-group VPN/proxy/Tor exceptions for game admission, and independent configurable denial messages.
• Fix: Treat malformed ProxyCheck proxy signals as unknown and classify every authenticated Velocity login before identity resolution.
• Fix: Replace the dashboard's pre-enrichment network label with enriched company, ASN, connection type, Proxy/VPN status, and risk fields.
• Fix: Group collocated map users into count-badged markers with complete nickname tooltips and per-user interactive-map links.
• Refine: Replace registration counts with daily active users, collapse enriched VPN activity per user, add opt-in OpenStreetMap zoom, show managed nickname tooltips, and measure active Minecraft accounts from confirmed Velocity connections.
• Governance: Require user review and explicit confirmation of relevant OKF story changes before future implementation work.

2026-08-01

• Extend: Plot each user's latest approximate location on an accessible, server-rendered Natural Earth world map in the operations dashboard.
• Refine: Make group assignment exclusive with default fallback, add group deletion, automatically synchronize Discord nicknames with status notices, expose filterable event details, add an SSR operations dashboard, and improve accessibility.
• Extend: Add SoMC Portal branding, live Discord identity details, admin guild configuration visibility, and fail-closed group-based Minecraft admission.
• Refine: Group repeated access networks, confirm linked Discord nickname changes before mutation, and add DMG Games sponsorship attribution.
• Extend: Add shared Pino logging with credential redaction and actionable web and Discord runtime diagnostics.
• Fix: Build magic-link redirects from the configured public portal URL instead of the reverse proxy's internal request origin.
• Verify: Confirmed v1.1.1 left all pre-existing latest digests unchanged while publishing versioned artifacts.
• Refine: Removed mutable latest publication so all deployable artifacts use explicit semantic versions.
• Verify: Confirmed the v1.1.0 Discord bot image and matching web, migration, and Velocity artifacts.
• Extend: Added a releasable Discord bot image and a dependency-free web health endpoint for Kubernetes deployment.
• Verify: Confirmed the initial v1.0.0 release, public Velocity JAR, and versioned and latest web and migration image manifests.
• Create: Added Gitea CI and semantic-release pipelines for downloadable Velocity JARs and versioned web and migration images.
• Document: Added container deployment order, artifact names, and required repository secrets.
• Refine: Corrected the Velocity Java and Gradle namespace to the repository owner's games.dmg reverse domain.
• Create: Established the OKF v0.1 user-story index.
• Document: Captured the implemented player portal, Discord authentication, onboarding, account management, network intelligence, Velocity admission, auditing, administration, API error, and operational stories.
• Governance: Added repository agent guidance and automated OKF validation for story-driven development.