042e7ef966
Harden remaining CodeQL security boundaries
2026-07-09 19:46:40 +01:00
6340cd36f2
Dedupe internal/api handler families behind shared flows and generics
...
Clears the sixteen dupl pair groups in internal/api plus the pkg/pulsecli
pair:
- router.go: privileged settings endpoints share the
serveSetupTokenOrSettingsWrite gate; patrol findings convert via one
unifiedFindingFromAI; the five infrastructure-summary chart loops share
collectGuestChartData / fillChartSeriesFromBatch; the VM/LXC workloads
summary loops share appendGuestWorkloadSummaries.
- deploy_handlers.go: preflight and job status/SSE handlers share
handleDeployJobStatus / handleDeployJobEvents.
- recovery_handlers.go: points series/facets share
parseRecoveryListPointsOptions.
- truenas_handlers.go / vmware_handlers.go / router_routes_registration.go:
the connection update flow (locate, decode-with-fallback, normalize,
preserve masked secrets, validate, save, redact) moves to the new
platform_connection_shared.go (updatePlatformConnection +
decodeOptionalInstanceRequest + the admin-gated item-route builder);
per-platform wrappers carry nolint'd declarative wiring only.
- docker_metadata.go / guest_metadata.go: GET/PUT payload semantics move
to metadata_handlers_shared.go; the zero-record-instead-of-404 contract
is pinned by TestContract_MetadataGetPayloadsUseZeroRecordsInsteadOf404.
- kubernetes_agents.go / docker_agents.go: lifecycle PUTs share
per-handler action helpers.
- config_node_handlers.go: PBS/PMG probes share
testProxmoxPlatformConnection.
- cloud_handoff_handlers.go / purchase_return_redemptions.go: secrets
sqlite stores open through openHardenedSecretsDB so permission
hardening stays single-sourced.
- ai_handlers.go / chat_service_adapter.go: the GetMessages adapters are
deliberate contract mirrors — suppressed with nolint and enforced by
TestOrchestratorAndChatAdaptersMapTheSameMessageFields.
- pkg/pulsecli/actions.go: action subcommands seed env defaults via
actionAPIDefaults (tested); the audit/events cobra registration pair is
nolint'd parallel wiring.
- .golangci.yml: exclude gitignored tmp/ from ./... typechecking.
- subsystem_lookup_test.py: refresh the pinned api-contracts.md line
numbers shifted by the contract additions.
golangci-lint run ./... is now fully green. Full internal/api and
pkg/pulsecli test suites pass.
2026-06-10 10:52:05 +01:00
81b31e4d3b
Remove monitored-system volume caps
...
Retire runtime/API/UI monitored-system volume enforcement now that infrastructure monitoring is no longer capped.
Keep only legacy metadata scrubbing and purchase-start compatibility for old max_monitored_systems references.
Rename the remaining preview surface to monitored-system impact and make previews explanatory rather than save-blocking.
Update subsystem contracts and RA7 evidence for the caps-retired invariant.
2026-05-05 12:59:59 +01:00
3953554ae1
Bind owner identity across token minting
2026-05-04 00:50:14 +01:00
e0c4533fb4
Remove self-hosted monitoring upsell copy
2026-04-28 09:33:26 +01:00
3ec2c0779e
Harden agent command and deploy trust boundaries
2026-04-21 23:50:34 +01:00
894a73ab90
Fail closed on unavailable platform admission usage
2026-04-08 23:55:00 +01:00
7a47f0923e
Canonicalize monitored-system admission enforcement
2026-04-07 20:11:57 +01:00
778a2577b6
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
rcourtman