mirror of https://github.com/rcourtman/Pulse.git synced 2026-10-24 12:42:49 +00:00

Files

T

rcourtman 7432995fe8 Stop websocket upgrade headers exempting demo-mode writes (#2666 )

`DemoModeMiddleware` let any request carrying `Upgrade: websocket`
through, whatever its method or path. On a `DEMO_MODE` instance a
`POST`/`PUT`/`PATCH`/`DELETE` with that header reached its handler, and
the read-only guard did nothing.

## How exposed the public demo was

- The public demo (`demo.pulserelay.pro`, v6.5.0) runs `DEMO_MODE=true`
with `PULSE_AUTH_USER=demo`, and its login page signs visitors in as
demo/demo. No proxy auth is configured. Caddy is a plain `reverse_proxy`
with no method filtering, and it forwards `Connection: Upgrade` and
`Upgrade: websocket` unchanged.
- That session is the configured admin.
`sessionUserHasSettingsAdminPrivileges` matches `cfg.AuthUser`, so
`RequireAdmin` accepts it, and session requests skip token scope checks.
Nothing in the handlers checks demo mode on its own, so this middleware
was the only write guard.
- Anyone using the public credentials could therefore make any admin
write by adding the two headers. That covers switching the demo out of
mock mode (`POST /api/system/mock-mode`), changing system settings,
creating organisations, importing config, changing the password and
adding notification targets. A CSRF token was needed, but the attacker
gets one from their own login.
- On the old code, the new contract test reproduces this end to end. A
demo/demo session's mock-mode POST with upgrade headers returned 200 and
turned mock mode off.
- I found no sign it was used. Over the last 30 days the demo journal
shows every "mock mode disabled" line paired with a process restart (new
PID). Config file mtimes match deploys. 5,782 ordinary writes were
blocked over the same period. Caddy keeps no access log for the demo, so
this is the absence of evidence, not proof.

## Change

The exemption is deleted rather than narrowed. RFC 6455 handshakes are
`GET` requests, gorilla's `Upgrader` refuses any other method, and `GET`
already passes the read-only branch above it. A narrowed `GET`-only
exemption would never run. `/ws` and `/api/agent/ws` keep connecting,
and the request method alone decides.

## Tests

- `TestContract_DemoModeUpgradeHeadersDoNotExemptWrites` (registered
api-contracts proof) runs against the full router. It signs in as the
configured demo admin and checks that the session passes `RequireAdmin`
for a read. A mock-mode POST carrying `Connection: Upgrade` and
`Upgrade: websocket` now gets the demo 403 and leaves mock mode on, and
a real `/ws` handshake from the same session still upgrades.
- `demo_middleware_test.go`: the table row that asserted the bypass now
expects 403. POST/PUT/PATCH/DELETE with handshake headers to mock-mode,
settings, orgs, `/ws` and `/api/agent/ws` all get 403. Real gorilla
handshakes to `/ws` and `/api/agent/ws` through the middleware still
upgrade and echo.
- Negative control: run against the old middleware via `go test
-overlay`, the new contract test and the upgrade-header test fail, and
the handshake test passes on both versions.

## Not changed here

- `auth.go` `isWebSocketUpgrade` and `configapi`
`explicitAPITokenFromRequest` still accept a `?token=` query credential
on any request with `Upgrade: websocket`. A valid, scoped token is still
required, so no access is gained, but the credential can travel in a
URL. The `ErrorHandler` skip in `middleware.go` only bypasses recovery
and metrics.
- Older and separate:
`/api/ai/sessions/{id}/{abort,summarize,fork,undo,redo}` change state on
`GET`, which the demo guard admits as reads. Tracked separately.

2026-10-07 15:49:33 +01:00

agentbinding

Let agents without a command channel reduce their authority

2026-10-05 23:38:18 +01:00

agenttokens

Fence runner activation session authority

2026-08-31 23:52:25 +01:00

alerting

Resolve masked webhook values per key and keep responses masked

2026-10-06 09:21:41 +01:00

apicontext

Extract alert delivery API package

2026-08-21 14:56:04 +01:00

apihttp

Extract alert delivery API package

2026-08-21 14:56:04 +01:00

chartapi

Bound chart response cache retention

2026-08-30 12:55:50 +01:00

configapi

Bound private token input without terminal truncation

2026-10-01 10:04:11 +01:00

resourceapi

test(slo): only enforce latency budgets on hosted runners

2026-09-19 17:26:25 +01:00

testdata/rg09

Use Development SSD for RG09 Go cache

2026-07-12 22:13:04 +01:00

access_admin_handlers.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

access_admin_recovery.go

Fix RBAC assignment migration and loading

2026-07-23 22:11:48 +01:00

access_control_handlers.go

fix(rbac): make SSO user access manageable

2026-08-09 13:36:07 +01:00

access_metrics_handlers.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

access_tenant_provider.go

Measure Pro feature adoption and drop the dead Patrol autofix counter

2026-08-05 14:34:50 +01:00

action_authority_test.go

Enforce explicit SSO administrator grants

2026-08-31 00:43:42 +01:00

action_authority.go

Require authority for infrastructure actions

2026-08-30 08:36:31 +01:00

action_dispatch_test.go

Add durable action dispatch continuity

2026-07-11 16:08:44 +01:00

action_executor.go

Fix Docker command recovery after token rotation

2026-08-23 09:18:44 +01:00

action_request_identity_test.go

Preserve canonical Patrol planning and outcome continuity

2026-09-07 17:24:25 +01:00

action_result_v2_contract_test.go

Require independent evidence for verified findings

2026-07-12 23:15:54 +01:00

action_runner_credentials_test.go

Fence runner activation session authority

2026-08-31 23:52:25 +01:00

action_runner_credentials.go

Fence runner activation session authority

2026-08-31 23:52:25 +01:00

actions_mock_test.go

Polish Actions layout and review details

2026-07-13 17:00:36 +01:00

actions_projection_ceremony_test.go

Collapse the container update ceremony to a single review

2026-07-19 14:48:24 +01:00

actions_test.go

Preserve canonical Patrol planning and outcome continuity

2026-09-07 17:24:25 +01:00

actions.go

Preserve canonical Patrol planning and outcome continuity

2026-09-07 17:24:25 +01:00

activity_audit_handlers.go

Fix audit storage migration and viewer races

2026-07-24 10:33:57 +01:00

admin_bypass_mode_dev.go

Compile out release env guardrail bypasses

2026-04-22 00:05:57 +01:00

admin_bypass_mode_release.go

Compile out release env guardrail bypasses

2026-04-22 00:05:57 +01:00

admin_bypass_release_test.go

Compile out release env guardrail bypasses

2026-04-22 00:05:57 +01:00

admin_bypass_router_test.go

test(api): own router worker cleanup in early API fixtures

2026-09-08 21:29:36 +01:00

admin_docs_test.go

Isolate administration guide session-revocation proof

2026-10-01 08:55:56 +01:00

agent_activity_telemetry_test.go

Enforce server-owned action approval authority

2026-07-11 19:49:17 +01:00

agent_activity_telemetry.go

Fail closed on unknown remediation lock state for autonomous dispatches

2026-07-10 00:14:01 +01:00

agent_capabilities_test.go

Enforce server-owned action approval authority

2026-07-11 19:49:17 +01:00

agent_capabilities.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

agent_command_authorization_test.go

fix: close chat command authority boundary

2026-07-11 11:54:56 +01:00

agent_command_authorization.go

fix: close chat command authority boundary

2026-07-11 11:54:56 +01:00

agent_command_redaction.go

Harden Patrol and Assistant action boundaries

2026-05-12 12:06:27 +01:00

agent_config_fetch_audit_test.go

Bound config-fetch audit suppression without evicting recent agents

2026-10-02 21:18:55 +01:00

agent_config_fetch_audit.go

Bound config-fetch audit suppression without evicting recent agents

2026-10-02 21:18:55 +01:00

agent_events_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

agent_events.go

Add canonical action result truth

2026-07-11 21:27:00 +01:00

agent_exec_token_binding.go

Let agents without a command channel reduce their authority

2026-10-05 23:38:18 +01:00

agent_fleet_doctor_test.go

Make action runner rotation activation-safe

2026-08-30 18:00:33 +01:00

agent_fleet_doctor.go

Make action runner rotation activation-safe

2026-08-30 18:00:33 +01:00

agent_handlers_base.go

Bound server state broadcast memory

2026-07-02 23:27:49 +01:00

agent_ingest.go

2026-10-06 00:36:41 +01:00

agent_install_command_shared_test.go

Keep container diagnostics bootstrap credentials out of copied commands

2026-10-01 09:22:15 +01:00

agent_install_command_shared.go

Keep container diagnostics bootstrap credentials out of copied commands

2026-10-01 09:22:15 +01:00

agent_profiles_security_test.go

test(api): own router worker cleanup in early API fixtures

2026-09-08 21:29:36 +01:00

agent_profiles_tools_extra_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

agent_profiles_tools_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

agent_profiles_tools.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

agent_report_decode_test.go

Classify oversized agent reports correctly

2026-09-01 13:59:36 +01:00

agent_report_decode.go

Classify oversized agent reports correctly

2026-09-01 13:59:36 +01:00

agent_resource_context_test.go

Enforce server-owned action approval authority

2026-07-11 19:49:17 +01:00

agent_resource_context.go

feat(alerts): add recurring scoped maintenance

2026-08-27 18:20:03 +01:00

agent_substrate_e2e_test.go

test(api): own router worker cleanup in early API fixtures

2026-09-08 21:29:36 +01:00

agent_version_shared.go

Keep diagnostic source builds out of release update flows

2026-09-10 17:06:27 +01:00

ai_chat_transport_test.go

feat(ai): add compact and max_bytes to the chat messages endpoint

2026-07-18 20:23:41 +01:00

ai_chat_transport.go

feat(ai): add compact and max_bytes to the chat messages endpoint

2026-07-18 20:23:41 +01:00

ai_findings_endpoint_test.go

fix(relay): introduce dedicated mobile runtime scope

2026-03-24 23:59:52 +00:00

ai_handler_chat_recovery_test.go

fix(ai): expose recovery-backed storage chat path

2026-03-27 08:39:59 +00:00

ai_handler_recovery_wiring_test.go

Retire disconnected incident recording and preserve archives

2026-09-06 17:42:24 +01:00

ai_handler_restart_test.go

Fix TestRestart_StartIfServiceMissing expectation for single config load

2026-06-04 11:23:05 +01:00

ai_handler_test.go

Retire disconnected incident recording and preserve archives

2026-09-06 17:42:24 +01:00

ai_handler_unified_store_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

ai_handler.go

Retire disconnected incident recording and preserve archives

2026-09-06 17:42:24 +01:00

ai_handlers_concurrency_test.go

Judge disk heat under the reporting host's Disk Temp override

2026-10-07 11:54:53 +01:00

ai_handlers_cost_export_additional_test.go

test: expand backend coverage

2026-01-25 21:08:44 +00:00

ai_handlers_cost_reset_additional_test.go

Complete Patrol retained objective loop

2026-08-14 03:11:10 +01:00

ai_handlers_finding_notify_test.go

Expose Patrol finding notification settings in the API and Patrol settings page

2026-07-18 12:14:12 +01:00

ai_handlers_helpers_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

ai_handlers_intelligence_additional_test.go

Route AI recent changes through canonical intelligence

2026-03-19 04:04:14 +00:00

ai_handlers_investigation_additional_test.go

Preserve native filesystem evidence and Patrol action history

2026-09-07 09:45:31 +01:00

ai_handlers_knowledge_test.go

Enforce Assistant read-only scope integrity

2026-07-11 12:43:55 +01:00

ai_handlers_more_test.go

Judge disk heat under the reporting host's Disk Temp override

2026-10-07 11:54:53 +01:00

ai_handlers_oauth_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

ai_handlers_patrol_actions_additional_test.go

Repair resource evidence for Patrol and Assistant

2026-09-05 21:43:02 +01:00

ai_handlers_patrol_stream_resume_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

ai_handlers_patrol_test.go

Checkpoint current workspace progress

2026-05-15 22:45:48 +01:00

ai_handlers_setters_additional_test.go

Retire disconnected incident recording and preserve archives

2026-09-06 17:42:24 +01:00

ai_handlers_stream_test.go

Surface Assistant idle progress on SSE streams

2026-06-07 00:06:34 +01:00

ai_handlers_test.go

Preserve canonical Patrol planning and outcome continuity

2026-09-07 17:24:25 +01:00

ai_handlers.go

Account Anthropic prompt-cache usage instead of dropping it

2026-10-03 09:31:34 +01:00

ai_hosted_runtime_test.go

Retire self-hosted AI quickstart surfaces

2026-04-28 15:49:18 +01:00

ai_hosted_runtime.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

ai_intelligence_handlers_additional_test.go

fix(release): align api and hostagent rc contracts

2026-03-26 17:12:27 +00:00

ai_intelligence_handlers_data_additional_test.go

Stabilize rc1 mock mode and metrics history

2026-04-11 16:47:37 +01:00

ai_intelligence_handlers_more2_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

ai_intelligence_handlers_more_test.go

Fix missing impact text and incomplete alert type coverage in unified findings

2026-06-27 14:43:09 +01:00

ai_intelligence_handlers_remediation_additional_test.go

Preserve canonical incident history and Assistant handoffs

2026-09-08 02:08:15 +01:00

ai_intelligence_handlers_remediation_more_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

ai_intelligence_handlers_test.go

Lighten AI intelligence handler test setup

2026-05-28 15:10:39 +01:00

ai_intelligence_handlers.go

Preserve canonical incident history and Assistant handoffs

2026-09-08 02:08:15 +01:00

ai_intelligence_helpers_additional_test.go

test: expand backend coverage

2026-01-25 21:08:44 +00:00

ai_ollama_auth_lifecycle_test.go

fix(settings): restore Ollama Basic Auth configuration

2026-09-10 18:21:29 +01:00

ai_patrol_community_limits_test.go

Clamp Patrol monitor-only autonomy saves

2026-05-08 02:21:31 +01:00

ai_patrol_cost_preview_test.go

Guide the Patrol model choice with cost preview and budget pause

2026-09-02 07:55:42 +01:00

ai_patrol_cost_preview.go

Guide the Patrol model choice with cost preview and budget pause

2026-09-02 07:55:42 +01:00

ai_patrol_digest_handler_test.go

Add the Patrol weekly digest endpoint

2026-09-02 08:53:50 +01:00

ai_patrol_digest_handler.go

Email the Patrol weekly summary as a report schedule kind

2026-09-02 11:15:22 +01:00

ai_patrol_handlers_test.go

Add resource priority to Patrol queue

2026-06-30 10:37:54 +01:00

ai_relay_converters_branchcov0722pm_test.go

Cover API relay converters, request filters and AI approval helpers

2026-07-22 16:29:44 +01:00

ai_resource_types.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

alerting_compat.go

feat(alerts): add destination severity routing

2026-08-27 19:13:32 +01:00

alerts_endpoints_test.go

feat(alerts): add per-alert snooze

2026-08-27 17:20:32 +01:00

api_foundation_test.go

Merge origin/pulse/v6-release and fix reconciled API regressions

2026-03-28 21:14:54 +00:00

api_token_identity.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

api_token_org_routes_integration_test.go

Stabilize release validation boundaries

2026-08-29 14:54:04 +01:00

api_token_org_scope_integration_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

api_token_owner_identity_integration_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

api_token_scope_transport_integration_test.go

Allow in-place API token scope edits (#1629 )

2026-07-30 12:06:19 +01:00

apt_workflow_integration_test.go

Require independent evidence for verified findings

2026-07-12 23:15:54 +01:00

apt_workflows_colima_real_lab_test.go

Require independent evidence for verified findings

2026-07-12 23:15:54 +01:00

assistant_typed_action_planner.go

Enforce server-owned action approval authority

2026-07-11 19:49:17 +01:00

attention_actions_test.go

Harden Operational Trust rollout contracts

2026-07-19 15:11:02 +01:00

attention_actions.go

Harden Operational Trust rollout contracts

2026-07-19 15:11:02 +01:00

attention_evidence.go

Harden Operational Trust rollout contracts

2026-07-19 15:11:02 +01:00

attention_handlers_test.go

Simplify and harden verified Patrol receipts

2026-08-15 10:25:04 +01:00

attention_handlers.go

Show verified Patrol work receipts

2026-08-15 08:48:49 +01:00

attention_mutations.go

Let mobile relay tokens reach the Patrol attention routes

2026-07-22 12:31:44 +01:00

attention_receipts.go

Simplify and harden verified Patrol receipts

2026-08-15 10:25:04 +01:00

attention_relay_mobile_scope_test.go

Let mobile relay tokens reach the Patrol attention routes

2026-07-22 12:31:44 +01:00

audit_handlers_test.go

Fix audit storage migration and viewer races

2026-07-24 10:33:57 +01:00

audit_reporting_scope_test.go

Add MSP report scheduling and alert rollup

2026-07-07 20:37:18 +01:00

auth_additional_coverage_test.go

Prevent mixed-auth configuration deadlock

2026-07-16 15:25:47 +01:00

auth_context_middleware_test.go

Propagate Basic auth identity into action authorization

2026-07-16 16:34:26 +01:00

auth_context_tenant_test.go

Keep auth context tests independent of tenant runtime writers

2026-10-03 18:16:20 +01:00

auth_denial_signal_test.go

Stabilize API test log capture

2026-08-31 19:47:01 +01:00

auth_denial_signal.go

fix(api): log routine authorization refusals at debug, warn on the rate

2026-08-07 21:38:47 +01:00

auth_env_path.go

Keep first-run credential reset atomic

2026-08-29 06:16:52 +01:00

auth_general_test.go

feat: enhance API router with multi-tenant authorization

2026-01-24 22:42:23 +00:00

auth_helpers_test.go

Close remaining CodeQL allocation and cookie gaps

2026-07-09 20:10:08 +01:00

auth_oidc_refresh_additional_test.go

Fix late issue triage regressions

2026-05-28 14:49:20 +01:00

auth_principal_identity_test.go

fix(rbac): make SSO user access manageable

2026-08-09 13:36:07 +01:00

auth_principal_identity.go

fix(rbac): make SSO user access manageable

2026-08-09 13:36:07 +01:00

auth_query_token_test.go

fix(security): restrict query-string token auth to WebSocket upgrades only

2026-02-04 09:52:32 +00:00

auth_scope_test.go

fix(relay): introduce dedicated mobile runtime scope

2026-03-24 23:59:52 +00:00

auth.go

Use typed Proxmox runners and preserve cross-clock action evidence

2026-09-07 12:00:48 +01:00

authorization_additional_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

authorization_test.go

Harden MSP tenant isolation: scope org-bound tokens away from default org, propagate webhook allowlist to all tenants

2026-06-10 11:37:39 +01:00

authorization.go

Harden MSP tenant isolation: scope org-bound tokens away from default org, propagate webhook allowlist to all tenants

2026-06-10 11:37:39 +01:00

availability_handlers_test.go

Add application response contracts to availability checks

2026-08-30 17:38:59 +01:00

availability_handlers.go

Add multi-location service delivery evidence

2026-08-30 21:44:32 +01:00

availability_history_handlers_test.go

Add availability history and fleet view

2026-08-30 15:38:34 +01:00

availability_history_handlers.go

Add availability history and fleet view

2026-08-30 15:38:34 +01:00

availability_probe_agent_test.go

Add multi-location service delivery evidence

2026-08-30 21:44:32 +01:00

billing_state_authz_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

billing_state_handlers_test.go

Remove monitored-system volume caps

2026-05-05 12:59:59 +01:00

bootstrap_token_test.go

Fix bootstrap token logger race

2026-05-03 12:25:56 +01:00

bootstrap_token.go

Show container-console route for the setup token

2026-09-28 15:29:15 +01:00

change_password_session_admin_test.go

test(api): own password-change fixture router lifecycle

2026-09-08 21:53:18 +01:00

charts_compat.go

Extract chart and resource query services

2026-08-21 18:36:21 +01:00

chat_service_adapter_additional_test.go

test(api): comprehensively improve test coverage to Security, Infra, and Features

2026-02-02 18:59:44 +00:00

chat_service_adapter_test.go

Preserve Patrol evidence and surface action submission failures

2026-09-06 20:09:54 +01:00

chat_service_adapter.go

Account Anthropic prompt-cache usage instead of dropping it

2026-10-03 09:31:34 +01:00

cloud_agent_install_command.go

Contain agent command authority

2026-08-29 22:12:41 +01:00

cloud_handoff_handlers_test.go

Harden provider MSP tenant isolation

2026-06-02 17:34:10 +01:00

cloud_handoff_handlers.go

Close remaining CodeQL allocation and cookie gaps

2026-07-09 20:10:08 +01:00

cloud_handoff_queryplan_test.go

fix(release): stabilize backend rehearsal blockers

2026-03-26 20:51:29 +00:00

cloud_handoff_test.go

Fail closed on hosted handoff identity

2026-05-04 09:47:54 +01:00

cloud_handoff.go

Close remaining CodeQL allocation and cookie gaps

2026-07-09 20:10:08 +01:00

cloud_org_admin_auth.go

Enforce explicit SSO administrator grants

2026-08-31 00:43:42 +01:00

cloud_org_admin_handlers.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

code_standards_test.go

feat(reporting): availability section computed from the resource state timeline

2026-06-10 17:48:11 +01:00

collector_authority_test.go

Harden secure agent runtime boundaries

2026-08-31 00:06:24 +01:00

collector_authority.go

Harden secure agent runtime boundaries

2026-08-31 00:06:24 +01:00

config_handlers_compat.go

Extract configuration API runtime package

2026-08-21 14:56:07 +01:00

config_handlers_test_support_test.go

Extract configuration API runtime package

2026-08-21 14:56:07 +01:00

config_profiles_additional_test.go

test: expand backend coverage

2026-01-25 21:08:44 +00:00

config_profiles_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

config_profiles.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

config_transfer_authorization_test.go

test(api): close config-transfer fixture router lifecycles

2026-09-08 21:42:28 +01:00

config_transfer_authorization.go

Secure configuration transfer authorization (#1714 )

2026-08-12 07:32:50 +01:00

connections_aggregator_adaptive_stale_test.go

Scale connection stale cutoff by the adaptive planned poll interval

2026-08-11 14:05:06 +01:00

connections_aggregator_pmg_branchcov0722am_test.go

Scale connection staleness cutoff with the configured polling cadence

2026-07-26 12:42:22 +01:00

connections_aggregator_test.go

Prevent connection alerts from bypassing offline policy

2026-08-24 22:45:59 +01:00

connections_aggregator.go

Add multi-location service delivery evidence

2026-08-30 21:44:32 +01:00

connections_alerts_branchcov0722am_test.go

Prevent connection alerts from bypassing offline policy

2026-08-24 22:45:59 +01:00

connections_alerts.go

Prevent connection alerts from bypassing offline policy

2026-08-24 22:45:59 +01:00

connections_command_policy_token_test.go

Fail closed on unresolvable agent tokens in the connections command-policy view

2026-07-18 13:09:18 +01:00

connections_grouping_test.go

Let fresher evidence decide merged connection member state

2026-08-30 00:02:15 +01:00

connections_grouping.go

Keep agent-reported disks out of cluster member state

2026-10-05 22:27:03 +01:00

connections_handlers_continuity_test.go

Separate TrueNAS probes from runtime poll and readiness evidence

2026-10-03 23:58:11 +01:00

connections_handlers_mock_test.go

fix(mock): keep real configured sources out of the mock connections ledger

2026-08-06 11:09:52 +01:00

connections_handlers.go

Fix agent command channel admission

2026-07-24 13:00:03 +01:00

connections_probe_test.go

Harden remaining CodeQL security boundaries

2026-07-09 19:46:40 +01:00

connections_probe.go

Harden remaining CodeQL security boundaries

2026-07-09 19:46:40 +01:00

connections_types.go

Prevent connection alerts from bypassing offline policy

2026-08-24 22:45:59 +01:00

contract_test.go

Stop websocket upgrade headers exempting demo-mode writes

2026-10-07 13:46:17 +01:00

cors_policy.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

csrf_store_test.go

Fix concurrent CSRF token refresh

2026-04-26 15:27:10 +01:00

csrf_store.go

fix(rbac): make SSO user access manageable

2026-08-09 13:36:07 +01:00

demo_middleware_test.go

Stop websocket upgrade headers exempting demo-mode writes

2026-10-07 13:46:17 +01:00

demo_middleware.go

Stop websocket upgrade headers exempting demo-mode writes

2026-10-07 13:46:17 +01:00

demo_mode_commercial_test.go

Remove monitored-system volume caps

2026-05-05 12:59:59 +01:00

demo_mode_commercial.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

demo_mode_operations_test.go

Hide public demo admin reads

2026-05-04 09:14:09 +01:00

demo_mode_operations.go

Hide public demo admin reads

2026-05-04 09:14:09 +01:00

deploy_handlers_test.go

Keep deployed agents' command channel across restarts

2026-10-05 22:23:09 +01:00

deploy_handlers.go

Keep deployed agents' command channel across restarts

2026-10-05 22:23:09 +01:00

deprecation_metrics.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

diagnostics_additional_test.go

Exercise authoritative guest-lock admission in VM diagnostics fixtures

2026-10-03 20:24:47 +01:00

diagnostics_contract_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

diagnostics_memory_test.go

Fix cache-aware Linux memory fallbacks

2026-07-24 00:19:40 +01:00

diagnostics_system_test.go

Honor namespaced cgroup memory limits

2026-08-29 22:23:54 +01:00

diagnostics_test.go

Fix PBS connection health authority

2026-07-24 09:45:05 +01:00

diagnostics.go

Honor namespaced cgroup memory limits

2026-08-29 22:23:54 +01:00

discovery_handlers_info_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

discovery_handlers_test.go

Add discovery-led service assurance onboarding

2026-08-30 18:40:06 +01:00

discovery_handlers.go

Enforce explicit SSO administrator grants

2026-08-31 00:43:42 +01:00

DO_NOT_EDIT_FRONTEND_HERE.md

Fix embedded frontend dev entrypoint guidance

2026-03-24 16:05:19 +00:00

docker_agents_additional_test.go

Enforce the canonical mutation plane

2026-07-11 15:19:41 +01:00

docker_agents_error_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

docker_agents_report_size_test.go

Fix Docker report size contract drift

2026-07-23 23:57:42 +01:00

docker_agents_routes_more_test.go

Enforce the canonical mutation plane

2026-07-11 15:19:41 +01:00

docker_agents_test.go

…

docker_agents.go

Fix Docker report size contract drift

2026-07-23 23:57:42 +01:00

docker_container_action_executor_test.go

fix(api): validate Docker update agent running health readback

2026-09-05 22:25:48 +01:00

docker_container_action_executor.go

fix(patrol): require Docker health recovery

2026-08-27 20:43:54 +01:00

docker_container_action_result_test.go

Use typed Proxmox runners and preserve cross-clock action evidence

2026-09-07 12:00:48 +01:00

docker_container_action_result.go

Use typed Proxmox runners and preserve cross-clock action evidence

2026-09-07 12:00:48 +01:00

docker_metadata_additional_test.go

Complete canonical web interface links

2026-07-24 12:42:16 +01:00

docker_metadata.go

Complete canonical web interface links

2026-07-24 12:42:16 +01:00

docker_restart_colima_real_lab_test.go

fix(patrol): require Docker health recovery

2026-08-27 20:43:54 +01:00

docs_links.go

fix(api): localize shipped security doc refs

2026-03-28 20:35:10 +00:00

ensure_admin_session_sso_test.go

Enforce explicit SSO administrator grants

2026-08-31 00:43:42 +01:00

enterprise_extension_ai_alert_analysis_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_ai_alert_analysis.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_ai_autofix_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_ai_autofix.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_ai_investigation_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_ai_investigation.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_audit_admin_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_audit_admin.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_rbac_admin_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_rbac_admin.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_reporting_admin_test.go

Remove redundant inventory definition route

2026-03-25 23:40:22 +00:00

enterprise_extension_reporting_admin.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_sso_admin_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_sso_admin.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

entitlement_handlers_test.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

export_test.go

Fail closed on wildcard trusted proxy configuration

2026-04-22 04:23:23 +01:00

filters_branchcov0722pm_test.go

Extract chart and resource query services

2026-08-21 18:36:21 +01:00

flapping_postmortem_test.go

emit reliability finding when an alert starts flapping

2026-05-13 00:28:24 +01:00

flapping_postmortem.go

emit reliability finding when an alert starts flapping

2026-05-13 00:28:24 +01:00

frontend_embed_sync_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

frontend_embed_test.go

Fix legacy OIDC SSO discovery and CSP nonce

2026-07-07 09:54:14 +01:00

frontend_embed.go

Serve shipped markdown docs as text instead of a forced download

2026-07-08 14:36:55 +01:00

guest_metadata_additional_test.go

Preserve resource URLs across runtime identity changes

2026-07-23 22:33:07 +01:00

guest_metadata.go

Complete canonical web interface links

2026-07-24 12:42:16 +01:00

helpers_branchcov0722pm_test.go

Cover API relay converters, request filters and AI approval helpers

2026-07-22 16:29:44 +01:00

host_agent_install_token_test.go

Fix command policy after agent reinstall

2026-08-23 23:39:20 +01:00

host_agent_removal_lifecycle_integration_test.go

2026-10-06 00:36:41 +01:00

host_apt_action_result_test.go

Use typed Proxmox runners and preserve cross-clock action evidence

2026-09-07 12:00:48 +01:00

host_apt_action_result.go

Use typed Proxmox runners and preserve cross-clock action evidence

2026-09-07 12:00:48 +01:00

host_apt_partial_truth_test.go

Fix Patrol autonomy and refusal reporting

2026-08-13 23:26:08 +01:00

host_metadata.go

Complete canonical web interface links

2026-07-24 12:42:16 +01:00

host_storage_cleanup_action_executor_test.go

Complete durable APT workflow continuity

2026-07-12 05:23:02 +01:00

host_storage_cleanup_action_executor.go

Gate Patrol actions on agent preflight

2026-08-14 01:12:49 +01:00

host_update_action_executor_test.go

Gate Patrol actions on agent preflight

2026-08-14 01:12:49 +01:00

host_update_action_executor.go

Gate Patrol actions on agent preflight

2026-08-14 01:12:49 +01:00

hosted_agent_install_command_test.go

Align routed and hosted Proxmox private-input contracts

2026-10-01 05:51:09 +01:00

hosted_entitlement_refresh_fallback_test.go

api: refresh hosted entitlement fallback lease

2026-04-05 13:18:30 +01:00

hosted_entitlement_refresh_quickstart_test.go

Retire self-hosted AI quickstart surfaces

2026-04-28 15:49:18 +01:00

hosted_entitlement_refresh.go

Retire self-hosted AI quickstart surfaces

2026-04-28 15:49:18 +01:00

hosted_lifecycle_integration_test.go

Retire self-hosted trial activation callback

2026-04-28 16:36:09 +01:00

hosted_org_admin_handlers_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

hosted_signup_handlers_test.go

Use stable hosted signup owner ids

2026-05-04 09:33:19 +01:00

http_metrics_allocations_test.go

Isolate route allocation checks from API fixture workers

2026-10-03 21:53:22 +01:00

http_metrics_bench_test.go

Stop timing the per-segment route normaliser

2026-09-24 17:33:21 +01:00

http_metrics_test.go

Compose current upstream allocation guard with reviewed maintenance repairs

2026-10-04 00:15:28 +01:00

http_metrics.go

perf(api): avoid rune decoding in route label checks

2026-09-06 08:31:26 +01:00

httptest_ipv4_external_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

httptest_ipv4_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

httptest_ipv6_test.go

Prove IPv6 trusted proxy websocket continuity

2026-04-10 12:54:12 +01:00

identity_invariant_contract_test.go

Canonicalize install security helpers

2026-08-21 14:56:11 +01:00

identity_sso_handlers.go

Secure configuration transfer authorization (#1714 )

2026-08-12 07:32:50 +01:00

isolation_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

issue1640_readiness_gate_test.go

Gate Patrol readiness on the completed overall verdict (#1640 )

2026-07-28 13:57:48 +01:00

issue1640_readiness_transport_test.go

test(api): gate readiness transport proof on client observation

2026-09-10 02:01:25 +01:00

issue1644_exec_binding_integration_test.go

Extract configuration API runtime package

2026-08-21 14:56:07 +01:00

issue1753_agent_ingest_integration_test.go

Refresh the resource store at most once per 2s of agent reports

2026-09-24 10:24:29 +01:00

issue1753_agent_report_auth_test.go

Stop shared-token same-hostname agents collapsing identities

2026-09-01 14:36:49 +01:00

issue1753_docker_report_auth_test.go

Stop Docker records flip-flopping under shared same-hostname tokens

2026-09-01 15:26:48 +01:00

kubernetes_agents_additional_test.go

Remove monitored-system volume caps

2026-05-05 12:59:59 +01:00

kubernetes_agents_error_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

kubernetes_agents.go

Classify oversized agent reports correctly

2026-09-01 13:59:36 +01:00

ledger_licensing_branchcov0722pm_test.go

Cover API relay converters, request filters and AI approval helpers

2026-07-22 16:29:44 +01:00

license_expiry_integration_test.go

Move license test signers to testsupport

2026-04-28 19:12:21 +01:00

license_handlers_demo_fixtures_dev_test.go

Stabilize rc1 mock mode and metrics history

2026-04-11 16:47:37 +01:00

license_handlers_demo_fixtures_test.go

Fix demo fixture entitlement recovery

2026-07-04 22:44:43 +01:00

license_handlers_test.go

Classify license server transport failures as retryable

2026-08-02 00:04:40 +01:00

license_limits_test_helpers_test.go

Remove monitored-system volume caps

2026-05-05 12:59:59 +01:00

license_user_limit_test.go

Move license test signers to testsupport

2026-04-28 19:12:21 +01:00

licensing_bridge.go

Prevent mock license migration warnings

2026-08-04 14:19:47 +01:00

licensing_handlers_auto_migrate_test.go

Prevent mock license migration warnings

2026-08-04 14:19:47 +01:00

licensing_handlers_self_hosted_fallback_test.go

Canonicalize self-hosted purchase handoff intent

2026-04-16 10:17:37 +01:00

licensing_handlers.go

revert(commercial): restore self-hosted opt-in posture

2026-08-08 16:48:19 +01:00

licensing_legacy_retry_test.go

Enforce installation-scoped license invalidation

2026-07-14 16:18:21 +01:00

licensing_legacy_retry.go

Enforce installation-scoped license invalidation

2026-07-14 16:18:21 +01:00

licensing_status_test_helpers_test.go

Enforce installation-scoped license invalidation

2026-07-14 16:18:21 +01:00

load_test.go

test(slo): only enforce latency budgets on hosted runners

2026-09-19 17:26:25 +01:00

log_handlers_additional_test.go

test(api): make log stream SSE test deterministic via history replay

2026-06-11 13:10:16 +01:00

log_handlers.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

log_redact_test.go

Test: expand api feature test coverage

2026-02-02 22:02:22 +00:00

log_redact.go

Show AI cost refresh errors and harden log redaction

2025-12-12 11:05:24 +00:00

loopback_request_test.go

Bind recovery and bootstrap auth to direct loopback

2026-04-22 00:39:53 +01:00

magic_link_expiry_branchcov0723am_test.go

Cover replay bundle loading, magic link expiry and subscription mapping

2026-07-23 06:59:05 +01:00

magic_link_handlers_test.go

Fail closed on blank magic-link principals

2026-05-04 22:43:35 +01:00

magic_link_handlers.go

fix(api): validate hosted magic-link URL before token mint

2026-08-08 12:07:40 +01:00

magic_link_store_queryplan_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

magic_link_store_sqlite_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

magic_link_store_sqlite.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

magic_link_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

magic_link.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

main_test.go

Stabilize API test log capture

2026-08-31 19:47:01 +01:00

maintenance_verification_test.go

Add maintenance verification reports

2026-05-12 21:10:58 +01:00

maintenance_verification_wiring_branchcov0722pm_test.go

Cover report schedule, recovery point and maintenance wiring helpers

2026-07-22 15:53:34 +01:00

maintenance_verification_wiring.go

Add maintenance verification reports

2026-05-12 21:10:58 +01:00

maintenance_verification.go

Clear all errcheck and gofmt violations so make lint gates on real findings

2026-06-09 21:42:21 +01:00

metadata_handlers_shared.go

Complete canonical web interface links

2026-07-24 12:42:16 +01:00

metadata_handlers_test.go

Complete canonical web interface links

2026-07-24 12:42:16 +01:00

metadata_helpers.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

metadata_provider_test.go

test: Add comprehensive test coverage across packages

2026-01-19 19:26:18 +00:00

metadata_provider.go

feat(ai): Add URL discovery tool - AI can find and set resource URLs

2025-12-10 00:29:07 +00:00

metrics_history_fallback_test.go

Fix mock storage history continuity

2026-08-26 13:54:55 +01:00

metrics_reporting_handlers.go

Stop reports and resource history calling a moved alert recovered (#2607 )

2026-10-07 09:10:57 +01:00

metrics_reporting_telemetry_test.go

Emit structured telemetry on reporting and summarize invocations

2026-05-10 22:59:23 +01:00

middleware_license.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

middleware_tenant_additional_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

middleware_tenant_authorization_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

middleware_tenant_test.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

middleware_tenant_token_org_fallback_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

middleware_tenant.go

Extract alert delivery API package

2026-08-21 14:56:04 +01:00

middleware_test.go

Harden API request and bootstrap state handling

2026-04-22 05:42:45 +01:00

middleware.go

fix(api): log routine authorization refusals at debug, warn on the rate

2026-08-07 21:38:47 +01:00

mock_state_provider_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

mockmode_external_test.go

Stabilize rc1 mock mode and metrics history

2026-04-11 16:47:37 +01:00

mockmode_internal_test.go

Stabilize rc1 mock mode and metrics history

2026-04-11 16:47:37 +01:00

monitored_system_ledger_test.go

Clear all errcheck and gofmt violations so make lint gates on real findings

2026-06-09 21:42:21 +01:00

monitored_system_ledger.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

monitored_system_usage_test_helpers_test.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

monitored_system_usage.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

multi_tenant_setters_additional_test.go

Extract configuration API runtime package

2026-08-21 14:56:07 +01:00

multi_tenant_stress_test.go

test(api): distinguish stress setup and first-request latency

2026-09-08 21:14:29 +01:00

norace_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

notifications_scope_test.go

fix(notifications): refresh recovery queue owner after monitor reload

2026-09-08 11:37:20 +01:00

oidc_admin_auth_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

oidc_handlers_callback_url_test.go

Fix legacy OIDC SSO discovery and CSP nonce

2026-07-07 09:54:14 +01:00

oidc_handlers_test.go

Retire dashboard landing surface

2026-04-29 16:25:09 +01:00

oidc_handlers.go

fix(rbac): make SSO user access manageable

2026-08-09 13:36:07 +01:00

oidc_legacy_callback_recovery_test.go

Recover the initiating provider on the legacy OIDC callback path

2026-07-10 09:53:09 +01:00

oidc_mapping_test.go

Adopt the agent's preferred host when re-registering a matched node

2026-07-09 09:52:59 +01:00

oidc_only_admin_parity_test.go

Enforce explicit SSO administrator grants

2026-08-31 00:43:42 +01:00

oidc_service_additional_test.go

chore(deps): qualify ID OAuth and concurrency updates

2026-09-10 00:39:00 +01:00

oidc_service_test.go

Keep mixed OIDC key sets usable

2026-09-04 11:40:20 +01:00

oidc_service.go

Recover the initiating provider on the legacy OIDC callback path

2026-07-10 09:53:09 +01:00

oidc_token_auth_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

onboarding_handlers_test.go

Fix mobile onboarding URL handoff sanitization

2026-07-07 15:12:59 +01:00

onboarding_handlers.go

Retire Relay labels and upsells inside Pulse

2026-09-29 13:19:54 +01:00

org_handlers_test.go

Add Kubernetes RBAC inventory to the agent + canonical + UI

2026-05-25 09:25:03 +01:00

org_handlers.go

Coalesce guest identity writes and retain incomplete tenant shutdown

2026-10-05 09:21:40 +01:00

org_lifecycle_handlers_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

org_lifecycle_handlers.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

org_shutdown_safety_test.go

Coalesce guest identity writes and retain incomplete tenant shutdown

2026-10-05 09:21:40 +01:00

org_validation_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

patrol_action_broker_test.go

Preserve canonical Patrol planning and outcome continuity

2026-09-07 17:24:25 +01:00

patrol_action_broker.go

Preserve canonical Patrol planning and outcome continuity

2026-09-07 17:24:25 +01:00

patrol_action_reconciliation.go

Preserve native filesystem evidence and Patrol action history

2026-09-07 09:45:31 +01:00

patrol_autonomy_colima_real_lab_test.go

Require independent evidence for verified findings

2026-07-12 23:15:54 +01:00

patrol_autopilot_test.go

Give Patrol autopilot tests their own session store

2026-10-05 17:25:52 +01:00

patrol_digest_email_test.go

Email the Patrol weekly summary as a report schedule kind

2026-09-02 11:15:22 +01:00

patrol_digest_email.go

Email the Patrol weekly summary as a report schedule kind

2026-09-02 11:15:22 +01:00

patrol_finding_notifications_test.go

Route new Patrol findings to alert notification channels

2026-07-18 11:59:05 +01:00

patrol_finding_notifications.go

Route new Patrol findings to alert notification channels

2026-07-18 11:59:05 +01:00

patrol_objectives_test.go

Rework Patrol around outcome-driven autonomous operations

2026-08-14 12:52:51 +01:00

patrol_objectives.go

Complete Patrol retained objective loop

2026-08-14 03:11:10 +01:00

patrol_suppression_management_test.go

Keep rule-help browser fixtures on their intended request paths

2026-10-05 17:24:27 +01:00

payments_webhook_handlers.go

fix(api): validate hosted magic-link URL before token mint

2026-08-08 12:07:40 +01:00

pbs_backups_test.go

Fix Proxmox PBS backup artifact surface

2026-05-25 21:47:12 +01:00

pbs_backups.go

Fix Proxmox PBS backup artifact surface

2026-05-25 21:47:12 +01:00

persistent_auth_stores_test.go

Bind recovery and bootstrap auth to direct loopback

2026-04-22 00:39:53 +01:00

platform_admin_session_parity_test.go

Enforce explicit SSO administrator grants

2026-08-31 00:43:42 +01:00

platform_connection_shared.go

Dedupe internal/api handler families behind shared flows and generics

2026-06-10 10:52:05 +01:00

platform_mock_connections.go

Add multi-location service delivery evidence

2026-08-30 21:44:32 +01:00

pmg_test.go

Stabilize dev runtime and complete PMG read-state migration

2026-05-21 15:15:23 +01:00

pmg.go

Stabilize dev runtime and complete PMG read-state migration

2026-05-21 15:15:23 +01:00

profile_suggestions_handlers_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

profile_suggestions_test.go

test: Add comprehensive test coverage across packages

2026-01-19 19:26:18 +00:00

profile_suggestions.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

proxmox_guest_action_executor_test.go

Use typed Proxmox runners and preserve cross-clock action evidence

2026-09-07 12:00:48 +01:00

proxmox_guest_action_executor.go

Use typed Proxmox runners and preserve cross-clock action evidence

2026-09-07 12:00:48 +01:00

proxmox_guest_action_observer.go

Wire production Proxmox action verification

2026-07-13 11:04:09 +01:00

proxmox_guest_action_result.go

Use typed Proxmox runners and preserve cross-clock action evidence

2026-09-07 12:00:48 +01:00

proxmox_patrol_integration_test.go

Use typed Proxmox runners and preserve cross-clock action evidence

2026-09-07 12:00:48 +01:00

proxy_admin_gating_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

proxy_token_admin_conflict_test.go

Deny proxy non-admin despite token

2026-02-04 14:35:08 +00:00

public_signup_handlers.go

Use stable hosted signup owner ids

2026-05-04 09:33:19 +01:00

purchase_return_redemptions_test.go

Persist self-hosted purchase redemption records

2026-04-08 20:42:36 +01:00

purchase_return_redemptions.go

Dedupe internal/api handler families behind shared flows and generics

2026-06-10 10:52:05 +01:00

pure_helpers_branchcov0724pm_test.go

Extract chart and resource query services

2026-08-21 18:36:21 +01:00

pve_backups.go

proxmox(replication+backups): bespoke tables backed by new read-only endpoints

2026-05-16 13:57:53 +01:00

race_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

rate_limit_config_test.go

test(api): stop rate-limit fixture cleanup workers

2026-09-09 11:00:59 +01:00

rate_limit_config.go

Join Router-owned limiter workers during shutdown

2026-10-05 13:20:08 +01:00

rate_limit_fixture_cleanup_test.go

test(api): stop rate-limit fixture cleanup workers

2026-09-09 11:00:59 +01:00

rate_limit_journey_budget_test.go

test(api): prove journey rate-budget isolation preserves enforcement

2026-09-10 17:51:49 +01:00

ratelimit_tenant_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

ratelimit_tenant.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

ratelimit_test.go

Make rate limiter sliding-window test deterministic

2026-06-03 23:14:25 +01:00

ratelimit.go

Join Router-owned limiter workers during shutdown

2026-10-05 13:20:08 +01:00

rbac_admin_handlers_test.go

Bind recovery and bootstrap auth to direct loopback

2026-04-22 00:39:53 +01:00

rbac_admin_recovery_test.go

Fix RBAC assignment migration and loading

2026-07-23 22:11:48 +01:00

rbac_handlers_additional_test.go

test(api): comprehensively improve test coverage to Security, Infra, and Features

2026-02-02 18:59:44 +00:00

rbac_handlers_more_test.go

test: expand api handler coverage

2026-02-02 23:01:29 +00:00

rbac_handlers_test.go

fix(rbac): make SSO user access manageable

2026-08-09 13:36:07 +01:00

rbac_isolation_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

rbac_lifecycle_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

rbac_metrics_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

rbac_reporting_auth_test.go

Add MSP report scheduling and alert rollup

2026-07-07 20:37:18 +01:00

rbac_tenant_provider_bench_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

rbac_tenant_provider_test.go

Measure Pro feature adoption and drop the dead Patrol autofix counter

2026-08-05 14:34:50 +01:00

rbac_test.go

Fix API auth failure handling

2026-04-26 17:26:16 +01:00

README.md

chore: Mac-compatible dev scripts

2026-01-22 00:30:15 +00:00

recovery_handlers_branchcov0722pm_test.go

Cover report schedule, recovery point and maintenance wiring helpers

2026-07-22 15:53:34 +01:00

recovery_handlers_test.go

Define recovery list pagination bounds once in the recovery model

2026-08-24 10:21:10 +01:00

recovery_handlers.go

Define recovery list pagination bounds once in the recovery model

2026-08-24 10:21:10 +01:00

recovery_proxy_bypass_test.go

Reject recovery via untrusted XFF

2026-02-04 15:01:09 +00:00

recovery_tokens_test.go

Bind recovery and bootstrap auth to direct loopback

2026-04-22 00:39:53 +01:00

recovery_tokens.go

Fix RC3 backend release blockers

2026-05-01 21:36:28 +01:00

relay_hosted_runtime_test.go

feat(alerts): add destination severity routing

2026-08-27 19:13:32 +01:00

relay_hosted_runtime.go

Fix mobile relay runtime startup

2026-07-01 10:38:57 +01:00

relay_mobile_capability_generated.go

feat(alerts): add destination severity routing

2026-08-27 19:13:32 +01:00

relay_mobile_capability_test.go

Harden external probe outage alerting

2026-07-29 20:09:23 +01:00

relay_mobile_capability.go

Enforce Pulse Mobile compatibility from the core contract

2026-07-22 13:41:09 +01:00

relay_sso_license_gating_test.go

Gate relay mobile tokens behind Relay license

2026-04-30 12:53:29 +01:00

release_demo_fixtures_dev.go

Stabilize rc1 mock mode and metrics history

2026-04-11 16:47:37 +01:00

release_demo_fixtures_release.go

Stabilize rc1 mock mode and metrics history

2026-04-11 16:47:37 +01:00

replication.go

proxmox(replication+backups): bespoke tables backed by new read-only endpoints

2026-05-16 13:57:53 +01:00

report_schedules_branchcov0722pm_test.go

Cover report schedule, recovery point and maintenance wiring helpers

2026-07-22 15:53:34 +01:00

report_schedules_test.go

Email the Patrol weekly summary as a report schedule kind

2026-09-02 11:15:22 +01:00

report_schedules.go

Email the Patrol weekly summary as a report schedule kind

2026-09-02 11:15:22 +01:00

reporting_availability_test.go

feat(reporting): availability section computed from the resource state timeline

2026-06-10 17:48:11 +01:00

reporting_availability.go

feat(reporting): availability section computed from the resource state timeline

2026-06-10 17:48:11 +01:00

reporting_catalog_handlers.go

Canonicalize reporting settings catalog

2026-03-25 22:27:35 +00:00

reporting_handlers_test.go

fix(reporting): resolve unified resource IDs to metrics targets and render honest report subjects

2026-06-10 17:10:30 +01:00

reporting_inventory_handlers.go

Canonicalize reporting transport filenames and format errors

2026-03-26 09:15:15 +00:00

reporting_recovery_resilience_test.go

test(recovery): cover downstream malformed metadata consumers

2026-03-26 22:58:27 +00:00

reporting_runtime_snapshot_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

reporting_runtime_snapshot.go

Keep retained disk temperatures out of AI, Patrol and reports

2026-10-06 23:09:52 +01:00

require_admin_proxy_test.go

test: expand security regression coverage

2026-02-04 10:28:41 +00:00

resource_test_support_test.go

Extract chart and resource query services

2026-08-21 18:36:21 +01:00

resources_compat.go

Extract chart and resource query services

2026-08-21 18:36:21 +01:00

resources_operator_state_test.go

feat(alerts): add recurring scoped maintenance

2026-08-27 18:20:03 +01:00

resources_operator_state.go

feat(alerts): add recurring scoped maintenance

2026-08-27 18:20:03 +01:00

resources_state_integration_test.go

Extract chart and resource query services

2026-08-21 18:36:21 +01:00

route_inventory_test.go

Add the Patrol weekly digest endpoint

2026-09-02 08:53:50 +01:00

router_action_recovery_test.go

Fix agent update triage and durable action recovery

2026-07-23 11:19:50 +01:00

router_auth_additional_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_auth_bypass_inventory_test.go

Fix API auth failure handling

2026-04-26 17:26:16 +01:00

router_bench_test.go

Seed store-backed chart benchmarks once per run

2026-10-05 22:45:56 +01:00

router_csrf_middleware_test.go

Fix concurrent CSRF token refresh

2026-04-26 15:27:10 +01:00

router_csrf_skip_inventory_test.go

Retire self-hosted trial activation callback

2026-04-28 16:36:09 +01:00

router_csrf_skip_routes_test.go

fix(release): align api and hostagent rc contracts

2026-03-26 17:12:27 +00:00

router_decomposition_contract_test.go

Extract configuration API runtime package

2026-08-21 14:56:07 +01:00

router_download_inventory_test.go

Separate agent remediation runtime

2026-08-29 23:48:28 +01:00

router_fixture_cleanup_test.go

test(api): own router worker cleanup in early API fixtures

2026-09-08 21:29:36 +01:00

router_frontend_inventory_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_general_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_handlers_additional_test.go

Harden connection probe and simple stats rendering

2026-04-22 01:18:33 +01:00

router_helpers_additional_test.go

Harden session and setup token auth flows

2026-04-18 00:06:50 +01:00

router_helpers_more_test.go

Extract configuration API runtime package

2026-08-21 14:56:07 +01:00

router_helpers.go

fix(notifications): refresh recovery queue owner after monitor reload

2026-09-08 11:37:20 +01:00

router_integration_test.go

Join Router-owned limiter workers during shutdown

2026-10-05 13:20:08 +01:00

router_limiter_lifecycle_test.go

Join Router-owned limiter workers during shutdown

2026-10-05 13:20:08 +01:00

router_logging.go

Fix bootstrap token logger race

2026-05-03 12:25:56 +01:00

router_low_coverage_additional_test.go

Keep container diagnostics bootstrap credentials out of copied commands

2026-10-01 09:22:15 +01:00

router_misc_additional_test.go

Extract chart and resource query services

2026-08-21 18:36:21 +01:00

router_mock_platforms_test.go

Clear all errcheck and gofmt violations so make lint gates on real findings

2026-06-09 21:42:21 +01:00

router_proxy_auth_admin_routes_test.go

test: expand security regression coverage

2026-02-04 10:28:41 +00:00

router_proxy_auth_security_test.go

test: expand security regression coverage

2026-02-04 10:28:41 +00:00

router_public_paths_inventory_test.go

Separate agent remediation runtime

2026-08-29 23:48:28 +01:00

router_rate_limit_security_test.go

test: expand security regression coverage

2026-02-04 10:28:41 +00:00

router_recovery_test.go

Bind recovery and bootstrap auth to direct loopback

2026-04-22 00:39:53 +01:00

router_routes_additional_test.go

Rewire Patrol investigation after chat restart

2026-08-16 11:15:16 +01:00

router_routes_ai_execute_stream_test.go

fix(api): bind router teardown to owned auth stores

2026-03-26 21:43:30 +00:00

router_routes_ai_execute_test.go

Fix API auth failure handling

2026-04-26 17:26:16 +01:00

router_routes_ai_helpers_test.go

fix(api): bind router teardown to owned auth stores

2026-03-26 21:43:30 +00:00

router_routes_ai_models_test.go

fix(api): bind router teardown to owned auth stores

2026-03-26 21:43:30 +00:00

router_routes_ai_relay.go

Preserve canonical Patrol planning and outcome continuity

2026-09-07 17:24:25 +01:00

router_routes_ai_test_connection_test.go

Update stale test-connection assertion to the Provider & Models rename

2026-07-10 12:45:27 +01:00

router_routes_ai_test_provider_test.go

Move Patrol run Assistant handoffs server-side

2026-05-07 21:58:06 +01:00

router_routes_auth_security_branchcov0722pm_test.go

Cover SSO conversion, TrueNAS app mapping and config store round-trips

2026-07-22 16:18:00 +01:00

router_routes_auth_security_sso_runtime_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_routes_auth_security.go

fix(web): preserve scoped local principal for organisation management

2026-09-05 16:04:12 +01:00

router_routes_cloud_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_routes_cloud.go

Retire self-hosted trial activation callback

2026-04-28 16:36:09 +01:00

router_routes_debug_test.go

Fix API auth failure handling

2026-04-26 17:26:16 +01:00

router_routes_debug.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_routes_licensing_reporting_runtime_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_routes_licensing.go

Replace the two non-discriminating audit telemetry fields and guard the class

2026-08-05 17:33:57 +01:00

router_routes_monitoring.go

Add discovery-led service assurance onboarding

2026-08-30 18:40:06 +01:00

router_routes_registration.go

Harden secure agent runtime boundaries

2026-08-31 00:06:24 +01:00

router_set_monitor_agents_test.go

Preserve resource URLs across runtime identity changes

2026-07-23 22:33:07 +01:00

router_state_test.go

Preserve observed Docker storage evidence

2026-09-06 12:45:40 +01:00

router_test.go

fix(api): validate request-derived command origins

2026-08-08 09:42:21 +01:00

router_version_tenant_metrics_test.go

Use agent update target for stale notices

2026-06-03 14:42:43 +01:00

router_webhook_cidr_reload_test.go

Stabilize API test log capture

2026-08-31 19:47:01 +01:00

router_wrappers_additional_test.go

Retire disconnected incident recording and preserve archives

2026-09-06 17:42:24 +01:00

router.go

Stop serving retained disk temperatures as current readings

2026-10-06 20:16:38 +01:00

runtime_branding_test.go

feat(branding): customize application identity

2026-07-30 16:25:36 +01:00

runtime_branding.go

feat(branding): customize application identity

2026-07-30 16:25:36 +01:00

runtime_display_test.go

Show the real monitoring cadence to non-admin sessions

2026-08-12 09:20:01 +01:00

runtime_display.go

Show the real monitoring cadence to non-admin sessions

2026-08-12 09:20:01 +01:00

runtime_inventory_sources_test.go

Make platform telemetry presentation evidence-aware

2026-08-14 00:18:23 +01:00

runtime_inventory_sources.go

Make platform telemetry presentation evidence-aware

2026-08-14 00:18:23 +01:00

saml_handlers_additional_test.go

Fix SSO session display labels

2026-07-07 16:35:07 +01:00

saml_handlers_more_test.go

Clear server-side CSRF token on logout

2026-05-21 16:26:00 +01:00

saml_handlers_success_test.go

Audit SSO entitlement and provider settings

2026-05-03 13:19:51 +01:00

saml_handlers.go

Enforce explicit SSO administrator grants

2026-08-31 00:43:42 +01:00

saml_runtime_license_gating_test.go

Make self-hosted SSO Community-tier

2026-05-03 12:48:01 +01:00

saml_service_additional_test.go

Retire dashboard landing surface

2026-04-29 16:25:09 +01:00

saml_service_test.go

Harden SAML URL validation paths

2026-04-01 12:00:31 +01:00

saml_service.go

Validate SAML LogoutResponse before clearing session

2026-05-21 16:15:53 +01:00

security_additional_coverage_test.go

Harden remaining CodeQL security boundaries

2026-07-09 19:46:40 +01:00

security_first_run_reset_test.go

fix(auth): synchronise local admin permissions during setup

2026-09-10 06:52:38 +01:00

security_first_run_reset.go

fix(auth): synchronise local admin permissions during setup

2026-09-10 06:52:38 +01:00

security_regression_test.go

2026-10-06 00:36:41 +01:00

security_request_body_test.go

Bound security request decoding

2026-08-31 01:43:55 +01:00

security_request_body.go

Bound security request decoding

2026-08-31 01:43:55 +01:00

security_setup_admin_sync_test.go

fix(auth): synchronise local admin permissions during setup

2026-09-10 06:52:38 +01:00

security_setup_fix_additional_test.go

Keep token issuance atomic on persistence failure

2026-08-29 05:19:19 +01:00

security_setup_fix_test.go

Persist first-run auth for systemd installs

2026-08-11 16:38:21 +01:00

security_setup_fix.go

Offer org owners the settings their own org's routes serve

2026-09-23 22:11:03 +01:00

security_setup_settings_preservation_test.go

2026-09-15 02:22:04 +01:00

security_status_additional_test.go

Harden first-run security boundaries

2026-07-10 01:28:33 +01:00

security_status_capabilities.go

Offer org owners the settings their own org's routes serve

2026-09-23 22:11:03 +01:00

security_status_capability_enforcement_test.go

Enforce explicit SSO administrator grants

2026-08-31 00:43:42 +01:00

security_test.go

test(api): isolate CSRF middleware fixtures

2026-09-17 12:35:20 +01:00

security_tokens_handlers_test.go

Allow existing API tokens to be renamed

2026-08-11 16:38:21 +01:00

security_tokens_lifecycle_test.go

Make action runner rotation activation-safe

2026-08-30 18:00:33 +01:00

security_tokens_owner_binding_test.go

Bind owner identity across token minting

2026-05-04 00:50:14 +01:00

security_tokens_rotate_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

security_tokens_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

security_tokens_update_test.go

Allow in-place API token scope edits (#1629 )

2026-07-30 12:06:19 +01:00

security_tokens.go

Keep API token creation atomic

2026-08-28 07:08:08 +01:00

security.go

fix(rbac): make SSO user access manageable

2026-08-09 13:36:07 +01:00

session_oidc_test.go

Fix SSO session display labels

2026-07-07 16:35:07 +01:00

session_store_test.go

fix(rbac): make SSO user access manageable

2026-08-09 13:36:07 +01:00

session_store.go

fix(rbac): make SSO user access manageable

2026-08-09 13:36:07 +01:00

setup_and_adapters_branchcov0723am_test.go

Cover control plane status helpers, patrol assertions and setup classifiers

2026-07-23 06:34:03 +01:00

slo_bench_test.go

test(slo): only enforce latency budgets on hosted runners

2026-09-19 17:26:25 +01:00

slo.go

Stabilize RC release proof contracts

2026-04-11 14:51:10 +01:00

sso_admin_license_gating_test.go

Make self-hosted SSO Community-tier

2026-05-03 12:48:01 +01:00

sso_handlers_crud_test.go

Allow clearing SSO provider restriction fields from Settings

2026-07-07 22:04:46 +01:00

sso_handlers_test.go

Harden outbound SSO fetch boundaries

2026-04-01 16:36:44 +01:00

sso_outbound_test.go

Harden remaining CodeQL security boundaries

2026-07-09 19:46:40 +01:00

sso_outbound.go

Harden remaining CodeQL security boundaries

2026-07-09 19:46:40 +01:00

state_provider_branchcov0723am_test.go

Cover telemetry classifiers, lifecycle records and install snapshot counts

2026-07-23 07:15:13 +01:00

state_provider.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

state_summary.go

feat: add fleet health home

2026-09-01 01:02:17 +01:00

stripe_webhook_handlers_additional_test.go

Remove monitored-system volume caps

2026-05-05 12:59:59 +01:00

stripe_webhook_handlers_test.go

fix(api): validate hosted magic-link URL before token mint

2026-08-08 12:07:40 +01:00

subscription_entitlements.go

Preserve resource URLs across runtime identity changes

2026-07-23 22:33:07 +01:00

subscription_state_handlers.go

Centralize demo commercial boundary policy

2026-04-07 10:24:53 +01:00

subscription_state_reconciler_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

subscription_state_reconciler.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

system_settings_guest_docker_test.go

Give the Docker-in-LXC opt-in an admin Settings toggle

2026-08-20 14:27:12 +01:00

system_settings_handlers_test.go

Clear temperature SSH failure backoff on system-settings save (#1638 )

2026-07-28 13:28:55 +01:00

system_settings_ssh_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

system_settings_telemetry_test.go

Preserve telemetry sender transitions and bound-socket health

2026-10-01 13:28:21 +01:00

system_settings_temperature_test.go

Fix API auth failure handling

2026-04-26 17:26:16 +01:00

system_settings_utils_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

system_settings_validate_test.go

Remove dead autoUpdateCheckInterval and autoUpdateTime settings

2026-07-28 11:13:37 +01:00

system_settings.go

Preserve telemetry sender transitions and bound-socket health

2026-10-01 13:28:21 +01:00

telemetry_audit_reads_test.go

Replace the two non-discriminating audit telemetry fields and guard the class

2026-08-05 17:33:57 +01:00

telemetry_audit_reads.go

Replace the two non-discriminating audit telemetry fields and guard the class

2026-08-05 17:33:57 +01:00

telemetry_licensed_features_test.go

Replace the two non-discriminating audit telemetry fields and guard the class

2026-08-05 17:33:57 +01:00

telemetry_licensed_features.go

Replace the two non-discriminating audit telemetry fields and guard the class

2026-08-05 17:33:57 +01:00

telemetry_pulse_intelligence_patrol_test.go

Add schema v17 Patrol provider, cost, autonomy, and outcome telemetry

2026-09-02 11:09:25 +01:00

telemetry_pulse_intelligence_test.go

feat(patrol): reconcile actionable findings on activation

2026-08-27 19:44:02 +01:00

telemetry_pulse_intelligence.go

Report update channel and last update check outcome in telemetry (#2285 )

2026-09-27 23:50:23 +01:00

telemetry_workload_history_test.go

Add workload history discovery lens

2026-08-30 13:49:58 +01:00

telemetry_workload_history.go

Add workload history discovery lens

2026-08-30 13:49:58 +01:00

tenant_legacy_token_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

tenant_org_binding_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

tenant_org_cookie_test.go

Reject org cookie for non-member

2026-02-04 14:48:03 +00:00

tenant_org_header_precedence_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

tenant_org_ids_binding_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

tenant_token_over_user_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

tenant_user_membership_test.go

Use strict org principals for runtime access

2026-05-04 23:16:15 +01:00

test_helpers_mt_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

test_log_capture_test.go

Stabilize API test log capture

2026-08-31 19:47:01 +01:00

test_remediation_engine_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

test_store_reset_helpers_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

trial_handlers_test.go

Retire self-hosted trial activation callback

2026-04-28 16:36:09 +01:00

truenas_app_action_provider.go

feat(ai): add canonical truenas app control

2026-03-29 19:50:31 +01:00

truenas_app_config_provider.go

feat(ai): add canonical truenas app config reads

2026-03-29 20:36:43 +01:00

truenas_app_providers_branchcov0722pm_test.go

Cover SSO conversion, TrueNAS app mapping and config store round-trips

2026-07-22 16:18:00 +01:00

truenas_app_read_provider.go

feat(ai): add canonical truenas app log reads

2026-03-29 20:13:39 +01:00

truenas_handlers_test.go

Keep platform polling independent of organisation metadata

2026-10-04 09:45:21 +01:00

truenas_handlers.go

Separate TrueNAS probes from runtime poll and readiness evidence

2026-10-03 23:58:11 +01:00

truenas_poll_evidence_test.go

Separate TrueNAS probes from runtime poll and readiness evidence

2026-10-03 23:58:11 +01:00

types_additional_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

types.go

Extract chart and resource query services

2026-08-21 18:36:21 +01:00

unified_agent_config_binding_router_test.go

Diagnostics: handle blank-name instances; add report-token router test

2026-06-04 11:49:17 +01:00

unified_agent_config_scope_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

unified_agent_download_test.go

Prepare v6.0.0 release candidate

2026-06-04 14:07:14 +01:00

unified_agent_handlers_additional_test.go

Fix Proxmox physical disk inventory continuity

2026-07-23 22:05:09 +01:00

unified_agent_handlers_test.go

Audit agent config fetches only when they carry new information

2026-09-24 10:42:33 +01:00

unified_agent_lookup_test.go

Allow legacy report-only agent tokens to fetch their own config (#1254 )

2026-06-04 08:39:31 +01:00

unified_agent_more_test.go

Separate agent remediation runtime

2026-08-29 23:48:28 +01:00

unified_agent_offline_preflight_test.go

test(agent): exercise offline FreeBSD preflight through local downloads

2026-09-22 18:42:51 +01:00

unified_agent_test.go

Serve signed Windows agents from canonical assets

2026-09-01 16:16:56 +01:00

unified_agent_upgrade_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

unified_agent_zip_branchcov0723am_test.go

Cover telemetry classifiers, lifecycle records and install snapshot counts

2026-07-23 07:15:13 +01:00

unified_agent.go

Serve signed Windows agents from canonical assets

2026-09-01 16:16:56 +01:00

update_detection_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

update_detection.go

Harden unified agent update preflight

2026-06-02 23:54:48 +01:00

update_readiness_test.go

Extract configuration API runtime package

2026-08-21 14:56:07 +01:00

update_readiness.go

Keep integration-monitored machines out of Agent Doctor and surface workload-only agents

2026-07-21 21:24:15 +01:00

updates_test.go

Keep the update progress modal moving when the update stream goes quiet

2026-09-30 23:39:35 +01:00

updates.go

Keep the update progress modal moving when the update stream goes quiet

2026-09-30 23:39:35 +01:00

user_limit_enforcement.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

user_limit_isolation_test.go

Require accepted org invitations and stable runtime capabilities

2026-04-22 03:06:22 +01:00

vmware_handlers_test.go

test(vmware): align API probe expectations

2026-09-13 10:59:02 +01:00

vmware_handlers.go

Fix VMware connection test degradation handling

2026-07-23 22:06:57 +01:00

websocket_isolation_test.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

websocket_origin_security_test.go

Require explicit websocket origin continuity

2026-04-22 04:46:13 +01:00

README.md

Internal API Package

This directory contains the API server implementation for Pulse.

Important Note About `frontend-modern/`

The frontend-modern/ subdirectory that appears here is:

AUTO-GENERATED during builds
NOT the source code - just a build artifact
IN .gitignore - never committed
REQUIRED BY GO - The embed directive needs it here

Frontend Development Location

👉 Edit frontend files at: ${PULSE_REPOS_DIR}/pulse/frontend-modern/src/

Why This Structure?

Go's //go:embed directive has limitations:

Cannot use ../ paths to access parent directories
Cannot follow symbolic links
Must embed files within the Go module

This is a known Go limitation and our structure works around it.

README.md

Internal API Package

Important Note About frontend-modern/

Frontend Development Location

Why This Structure?

Important Note About `frontend-modern/`