[softglazee]

What this is

A redesign of three pages plus a security-hardening pass. Stacked on #13 (fix/captcha-automation-mode); it will retarget to main once #13 merges.

UI

• New dedicated Proxy providers page with its own sidebar entry under Groups, showing all 31 integrations, a "needs attention" list, filterable table and a per-provider pull panel (the working connector logic is reused unchanged).
• Settings redesigned: section nav with scroll-spy, search, grouped cards with aligned rows, auto-save status. Every option and its save path is preserved.
• Dashboard redesigned in the app's brand tokens: keeps the greeting/clock/quote, adds quick-access link cards and dependency-free inline-SVG analytics (pool health, countries, proxy types, new-proxies). One series with no backing data is labelled sample.
• Renderer fixes: bulk actions scoped to visible rows, confirmations on destructive actions, settings apply request-guard + revert-on-failure, number inputs, masked secrets, missing Spanish strings, Start Links wipe guard.

Security / engine

• Persona autofill isolated from the page main world; per-launch Firefox bridge token; SoftGlaze detection tells removed.
• Proxy passwords encrypted at rest (keyed-hash unique index + migration).
• Launch-race locks, geo-degraded launch warning, Firefox graceful close, SOCKS4 DNS-leak block, socks5h for checks.
• Permission fixes: 2FA masked in list/export, SMTP owner-only, SSRF guard, vendor-pull quota, zip entry validation, backup unreadable-secret report.
• Owner-certificate gating for the Super Admin licensing exemption; main-process auth gate for signed-out/locked state.

Licensing server

• Forged Cryptomus webhooks rejected; per-provider config; idempotent, retry-safe webhooks; correct PayPal/Stripe capture, refund and renewal handling; machine-bound installs; Prisma migrations with migrate deploy; hardened Dockerfile.

Dependencies

• nodemailer and axios upgraded; proxy-agent chain pinned via overrides.

Adds ~40 test files; full suite green (620/620 on this branch's content).

Not included

• The owner's in-progress payments/receipt work (payments.js, its tests, and the receipt hunks in ipcHandlers.js) is deliberately left out and stays in the working tree.

Deploy notes

• Licensing server: prisma migrate resolve --applied 20260916000000_init once, then migrate deploy + generate; ship the matching app build (older clients can't get leases).
• First launch of a new build encrypts existing proxy passwords; do not downgrade afterwards.