Commit Graph

2510 Commits

Author SHA1 Message Date
rcourtman 05d00a65a6 Hide raw Assistant tool-call output 2026-06-05 14:05:38 +01:00
rcourtman df203b0ce6 Let Assistant send during provider checks 2026-06-05 13:38:00 +01:00
rcourtman 2b8ce06c03 metrics: drain freelist proportionally so metrics.db stops bloating
runRetention reclaimed only PRAGMA incremental_vacuum(5000) (~20MB) and
only when that hourly cycle deleted rows. On instances where an hourly
retention pass frees more than 5000 pages, the freelist grows net-positive
every cycle and the sqlite file bloats unboundedly (5GB+ of free pages over
~60MB of live data) even though row retention works. This is the documented
'50+ resources -> 5GB+' symptom the 5000-page batch was meant to fix.

Reclaim every cycle (so a pre-existing backlog drains even in a no-delete
hour) and size each reclaim to the current freelist, capped at 50000 pages
(~200MB) so a large backlog drains over several cycles without holding the
write lock for minutes. Skip the checkpoint when the freelist is empty so
steady-state WAL cadence is unchanged.

Surfaced by the demo server (pulse-relay): metrics.db had grown to 5.9GB
(5GB freelist), filling its 25GB disk and breaking the nightly backup.

Adds TestStoreRetentionReclaimsFreePages to the perf-and-scalability proof
set and documents the reclaim invariant in the subsystem contract.
2026-06-05 13:29:48 +01:00
rcourtman 2199423821 Gate Assistant sends on provider readiness 2026-06-05 13:28:34 +01:00
rcourtman 890b1d35ec Clarify Assistant interruption state 2026-06-05 13:16:01 +01:00
rcourtman 3209a08cf0 Add Assistant provider route recovery 2026-06-05 12:58:56 +01:00
rcourtman c5bee4a785 Surface Assistant provider readiness 2026-06-05 12:50:02 +01:00
rcourtman 6ba21c7a2b Clean up Assistant provider error messages 2026-06-05 12:25:56 +01:00
rcourtman 1bf0ffde55 Surface Assistant workflow progress status 2026-06-05 12:17:35 +01:00
rcourtman 86de23cc78 Focus Assistant composer on chat entry 2026-06-05 12:08:47 +01:00
rcourtman cd24716f90 Make Assistant new chat a local reset 2026-06-05 11:57:58 +01:00
rcourtman 479ac6db2c Stream Assistant cold sessions directly 2026-06-05 11:54:01 +01:00
rcourtman 6bbbf185bb Make workload discovery repair known service results 2026-06-05 09:21:53 +01:00
rcourtman 91528f5a07 Fix Assistant resource context and model route labels 2026-06-04 23:45:15 +01:00
rcourtman 82bf3138dc Make discovery scan scope fully selectable
Turn the discovery settings scan-scope choices into full-row controls so Custom subnets can be selected reliably from the dialog.

Add regression coverage for custom scope selection and common subnet chips.
2026-06-04 23:37:47 +01:00
rcourtman e7c091b63f Surface discovery scan status in infrastructure settings
Make network discovery observable from Connected systems with status, scope, candidate review, and settings actions.

Update the continuous-discovery follow-up and subsystem contracts to capture the visibility requirement.
2026-06-04 23:19:55 +01:00
rcourtman a43f7cbe7f Add discovery readiness to Assistant context 2026-06-04 21:56:36 +01:00
rcourtman 29ac5945bc Fix resource-context Assistant tool targeting 2026-06-04 19:18:08 +01:00
rcourtman d305d602a6 Add resource-context Assistant eval 2026-06-04 18:44:47 +01:00
rcourtman 3f8525a7c2 Implement resource-aware Assistant context 2026-06-04 16:36:04 +01:00
rcourtman c9414e5be8 Record v6.0.0 GA rehearsal
Capture the passing Release Dry Run metadata, rollback command, GA date, v5 support window, and follow-up state for the v6.0.0 publication gate.
2026-06-04 14:47:18 +01:00
rcourtman bd6f77e093 Prepare v6.0.0 release candidate
Tighten v5-to-v6 upgrade safety, release installability, provider MSP mode handling, AI cost accounting, metrics flushing, and frontend guardrails for the v6.0.0 GA candidate.
2026-06-04 14:07:14 +01:00
rcourtman cf65853108 Fix guest metadata race in release backend
Copy guest metadata at the store boundary so asynchronous monitor persistence cannot race with caller-owned metadata during release backend race tests.
2026-06-03 19:40:57 +01:00
rcourtman d1969564b6 Record v6 GA rehearsal evidence 2026-06-03 18:55:33 +01:00
rcourtman 0d0eb4bf11 Stabilize v6 release dry-run backend gate 2026-06-03 18:12:42 +01:00
rcourtman d5f144f8f1 Prepare v6.0.0 stable release 2026-06-03 17:31:11 +01:00
rcourtman 4ef6caaa9d Finalize v6 GA release packet 2026-06-03 17:15:00 +01:00
rcourtman 7440208163 Project Kubernetes agent versions onto node rows 2026-06-03 15:57:51 +01:00
rcourtman e52df68d30 Add vSphere stale guest agent notice 2026-06-03 15:33:53 +01:00
rcourtman 96252ea0a7 Remove aggregate in-guest agent banner 2026-06-03 14:57:03 +01:00
rcourtman 17e854e7b6 Use agent update target for stale notices 2026-06-03 14:42:43 +01:00
rcourtman b50b99c7c6 Route stale agents to scoped update commands 2026-06-03 14:11:33 +01:00
rcourtman bdc232cd07 Fix alert re-notification rate limiting
Apply max alerts/hour to cooldown and critical re-notification paths so active alerts cannot bypass the UI delivery cap.

Persist LastNotified on active alert records when dispatching, including clone dispatches after reload.

Refs #1444
2026-06-03 12:43:17 +01:00
rcourtman 28bc1e9875 Align Machines disk bars with host tables 2026-06-03 11:52:34 +01:00
rcourtman eab73d2453 Fix PBS backup identity matching 2026-06-03 11:43:20 +01:00
rcourtman 458ffd351b Scale Docker network attachment details 2026-06-03 11:36:36 +01:00
rcourtman 9dfadc38e5 Surface Docker network attachments 2026-06-03 11:18:28 +01:00
rcourtman eab62de61c Improve Machines disk summaries 2026-06-03 11:09:58 +01:00
rcourtman 65cdcdd457 Add v5 agent self-update runtime proof
Extend the unified-agent RC rehearsal with an optional local v5-to-v6 process-swap check.

Record the v5.1.34 to v6.0.0-rc.6 proof result for the upgrade-continuity gate.
2026-06-03 09:39:25 +01:00
rcourtman e17916e3bc Surface v5 agent migration security guidance
Warn when update readiness includes v5 agents and document the trusted-transport first hop.
2026-06-03 09:18:07 +01:00
rcourtman 1afd708e5a Harden unified agent update preflight
Record the single pulse-agent product invariant and clarify Docker / Podman module terminology.
2026-06-02 23:54:48 +01:00
rcourtman d8f5519eed Fix provider MSP tenant rootless startup 2026-06-02 21:31:17 +01:00
rcourtman c7e50d5602 Harden provider-hosted MSP isolation
Broker provider control-plane Docker access through a socket proxy, remove broad host mounts, align audit and rate-limit proxy trust, harden tenant runtime containers, restrict workspace report logo paths, and update provider deploy guardrails.
2026-06-02 21:10:13 +01:00
rcourtman d6964832a0 Add entitlement-gated report branding 2026-06-02 18:11:25 +01:00
rcourtman d729461cad Harden provider MSP tenant isolation
- isolate provider MSP tenant runtimes onto per-client Docker networks
- add adversarial proofs for workspace cap races, handoff retargeting, and org-bound agent report retargeting
- pin provider deploy proof to start Traefik before tenant network creation
2026-06-02 17:34:10 +01:00
rcourtman 473a0ddee6 Add provider MSP tenant rollout upgrade proof 2026-06-02 16:45:03 +01:00
rcourtman a0f2fcf1fe Add provider MSP upgrade runner 2026-06-02 16:19:51 +01:00
rcourtman e86143f07f Surface provider MSP backup readiness 2026-06-02 16:02:04 +01:00
rcourtman 42fb8eed3f Publish provider MSP control-plane image 2026-06-02 15:51:21 +01:00
rcourtman 25febfbf82 Fix provider MSP compose mount identity 2026-06-02 15:25:05 +01:00