gsadmin/pulse
1
0
Fork 0
mirror of https://github.com/rcourtman/Pulse.git synced 2026-10-24 04:33:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
295edef4d591997e19a818ec8d104dde8344659e
pulse/internal/api
T
History
rcourtman 295edef4d5 Bind SAML logins to the browser that started them (#2729) 
## Why

With `allowIdpInitiated` off, the default, every SAML login failed.
`SAMLService.ProcessResponse` passed crewjam/saml an empty list of
request IDs, and crewjam refuses any Response whose `InResponseTo` is
not in that list, so both SP-initiated and unsolicited Responses ended
in "Authentication failed". Only providers with IdP-initiated logins
enabled, which skips the check, could sign in.

## What changes

- `/api/saml/{id}/login` records each AuthnRequest ID, on the provider's
service, with the login's `returnTo` and the hash of a random token it
sets as the `HttpOnly`, `SameSite=Lax` cookie `pulse_saml_login`
(`__Host-pulse_saml_login` over HTTPS). A browser that already holds a
token keeps it, so logins started one after another in several tabs all
stay valid. Records last ten minutes, 1,024 per provider, oldest
evicted.
- The IdP posts its Response cross-site, and browsers withhold
`SameSite=Lax` cookies from cross-site POSTs. The ACS answers a
cookieless POST with a small page that re-posts the same fields once
from Pulse's own origin (no form action, so path prefixes survive; CSP
nonce on the script; a no-JS Continue button; a marker field stops a
second repost).
- `ProcessResponse` reads the answered request ID from the canonical
content goxmldsig verified for the signature covering the assertion
crewjam returns: the signed Response (or the Response in a signed
ArtifactResponse), otherwise that assertion's own
`SubjectConfirmationData`. It spends the record only when it is bound to
the presenting browser, and the login returns to the recorded `returnTo`
rather than the posted `RelayState`. A Response for another browser
leaves that browser's record intact.
- The signature verifier refuses signed content carrying a prefixed
attribute or namespace declaration named like an un-namespaced attribute
crewjam reads. encoding/xml fills such a field from any attribute with
that local name, and exclusive canonicalization leaves an unused
declaration out of the signed form. On the base commit, appending
`xmlns:IssueInstant` and `xmlns:NotOnOrAfter` to a two-hour-old signed
Response got it accepted, so with `allowIdpInitiated` on a captured
login could be replayed indefinitely.
- RelayState is now URL-escaped into the redirect, so a `returnTo` with
its own query string reaches the IdP whole.
- With `allowIdpInitiated` on, behaviour is otherwise unchanged: no
cookie or repost needed, posted `RelayState` honoured.
- The SLO LogoutRequest store from #2713 is generalised into a shared
record store; its `consume` semantics are unchanged.

Stacked on #2714 (on #2713, on #2707). Those three conflict with main in
`storage-recovery.md`, where their boundary notes and main's land at the
same anchor, so none can merge on its own. This branch carries a merge
of main that keeps both sets of notes; landing it lands the stack.

## Verification

- New tests in `internal/api/saml_handlers_more_test.go`,
`saml_service_test.go` and `audit_handlers_test.go`: default-settings
login through the repost, multiple tabs, refusal of another browser's,
unknown, unsolicited and replayed Responses (the refused browser's own
login still completes afterwards), the `xmlns:InResponseTo` spoof with
the Response signed and with only the Assertion signed, a
confirmation-less signed assertion spliced ahead of another browser's
assertion, assertion-only signed success, stale IdP-initiated Responses
with spoofed ages, repost escaping and CSP nonce, and the audit event
for a binding refusal.
`TestContract_SAMLManualIDPCertificateVerifiesIdPSignatures` now runs at
default settings instead of enabling IdP-initiated logins.
- Negative controls by `-overlay`: with the attribute refusal disabled
the stale-Response replay is accepted again; with the refusal disabled
and the binding read from crewjam's parsed fields the
`xmlns:InResponseTo` spoof logs in; the round-one binding code accepted
the spliced-assertion case as the other user.
- A real Chromium run against a test IdP on `127.0.0.1` and the SP
handlers on `localhost`, behind `SecurityHeadersWithConfig` in
production CSP mode: the IdP's POST arrived `Sec-Fetch-Site: cross-site`
without the login cookie, the repost arrived `same-origin` with it, and
the login landed signed in at
`/alerts?range=7d&saml=success&tab=history`.

## Known limits

- Records live in memory: a restart, a provider re-initialization, or a
login started on a host that does not share cookies with the configured
public URL leaves the Response unmatched, and the user signs in again.
- Two logins started at the same moment in a browser that holds no token
yet each mint one; the last cookie wins and the other login fails.
- As with OIDC login state, a sustained flood of unauthenticated login
starts can evict pending records.
- On plain HTTP, or HTTPS that Pulse does not recognise behind a proxy,
the cookie has no `__Host-` prefix, so a sibling subdomain could plant
one, the same exposure the session cookie has there.
2026-10-08 02:45:20 +01:00
..
agentbinding
Let agents without a command channel reduce their authority
2026-10-05 23:38:18 +01:00
agenttokens
Fence runner activation session authority
2026-08-31 23:52:25 +01:00
alerting
Keep alert settings a config save leaves out
2026-10-07 16:31:52 +01:00
apicontext
Extract alert delivery API package
2026-08-21 14:56:04 +01:00
apihttp
Extract alert delivery API package
2026-08-21 14:56:04 +01:00
chartapi
Bound chart response cache retention
2026-08-30 12:55:50 +01:00
configapi
Bound private token input without terminal truncation
2026-10-01 10:04:11 +01:00
resourceapi
Split a manually linked pair when the API unlinks it
2026-10-08 00:07:49 +01:00
testdata/rg09
Use Development SSD for RG09 Go cache
2026-07-12 22:13:04 +01:00
access_admin_handlers.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
access_admin_recovery.go
Fix RBAC assignment migration and loading
2026-07-23 22:11:48 +01:00
access_control_handlers.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
access_metrics_handlers.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
access_tenant_provider.go
Measure Pro feature adoption and drop the dead Patrol autofix counter
2026-08-05 14:34:50 +01:00
action_authority_test.go
Enforce explicit SSO administrator grants
2026-08-31 00:43:42 +01:00
action_authority.go
Require authority for infrastructure actions
2026-08-30 08:36:31 +01:00
action_dispatch_test.go
Add durable action dispatch continuity
2026-07-11 16:08:44 +01:00
action_executor.go
Fix Docker command recovery after token rotation
2026-08-23 09:18:44 +01:00
action_request_identity_test.go
Preserve canonical Patrol planning and outcome continuity
2026-09-07 17:24:25 +01:00
action_result_v2_contract_test.go
Require independent evidence for verified findings
2026-07-12 23:15:54 +01:00
action_runner_credentials_test.go
Fence runner activation session authority
2026-08-31 23:52:25 +01:00
action_runner_credentials.go
Fence runner activation session authority
2026-08-31 23:52:25 +01:00
actions_mock_test.go
Polish Actions layout and review details
2026-07-13 17:00:36 +01:00
actions_projection_ceremony_test.go
Collapse the container update ceremony to a single review
2026-07-19 14:48:24 +01:00
actions_test.go
Preserve canonical Patrol planning and outcome continuity
2026-09-07 17:24:25 +01:00
actions.go
Preserve canonical Patrol planning and outcome continuity
2026-09-07 17:24:25 +01:00
activity_audit_handlers.go
Fix audit storage migration and viewer races
2026-07-24 10:33:57 +01:00
admin_bypass_mode_dev.go
Compile out release env guardrail bypasses
2026-04-22 00:05:57 +01:00
admin_bypass_mode_release.go
Compile out release env guardrail bypasses
2026-04-22 00:05:57 +01:00
admin_bypass_release_test.go
Compile out release env guardrail bypasses
2026-04-22 00:05:57 +01:00
admin_bypass_router_test.go
test(api): own router worker cleanup in early API fixtures
2026-09-08 21:29:36 +01:00
admin_docs_test.go
Isolate administration guide session-revocation proof
2026-10-01 08:55:56 +01:00
agent_activity_telemetry_test.go
Enforce server-owned action approval authority
2026-07-11 19:49:17 +01:00
agent_activity_telemetry.go
Fail closed on unknown remediation lock state for autonomous dispatches
2026-07-10 00:14:01 +01:00
agent_capabilities_test.go
Enforce server-owned action approval authority
2026-07-11 19:49:17 +01:00
agent_capabilities.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
agent_command_authorization_test.go
fix: close chat command authority boundary
2026-07-11 11:54:56 +01:00
agent_command_authorization.go
fix: close chat command authority boundary
2026-07-11 11:54:56 +01:00
agent_command_redaction.go
Harden Patrol and Assistant action boundaries
2026-05-12 12:06:27 +01:00
agent_config_fetch_audit_test.go
Bound config-fetch audit suppression without evicting recent agents
2026-10-02 21:18:55 +01:00
agent_config_fetch_audit.go
Bound config-fetch audit suppression without evicting recent agents
2026-10-02 21:18:55 +01:00
agent_events_test.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
agent_events.go
Add canonical action result truth
2026-07-11 21:27:00 +01:00
agent_exec_token_binding.go
Let agents without a command channel reduce their authority
2026-10-05 23:38:18 +01:00
agent_fleet_doctor_test.go
Make action runner rotation activation-safe
2026-08-30 18:00:33 +01:00
agent_fleet_doctor.go
Make action runner rotation activation-safe
2026-08-30 18:00:33 +01:00
agent_handlers_base.go
Bound server state broadcast memory
2026-07-02 23:27:49 +01:00
agent_ingest.go
Register agent command channels under the identity Pulse resolves
2026-10-06 00:36:41 +01:00
agent_install_command_shared_test.go
Keep container diagnostics bootstrap credentials out of copied commands
2026-10-01 09:22:15 +01:00
agent_install_command_shared.go
Keep container diagnostics bootstrap credentials out of copied commands
2026-10-01 09:22:15 +01:00
agent_profiles_security_test.go
test(api): own router worker cleanup in early API fixtures
2026-09-08 21:29:36 +01:00
agent_profiles_tools_extra_test.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
agent_profiles_tools_test.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
agent_profiles_tools.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
agent_report_decode_test.go
Classify oversized agent reports correctly
2026-09-01 13:59:36 +01:00
agent_report_decode.go
Classify oversized agent reports correctly
2026-09-01 13:59:36 +01:00
agent_resource_context_test.go
Enforce server-owned action approval authority
2026-07-11 19:49:17 +01:00
agent_resource_context.go
feat(alerts): add recurring scoped maintenance
2026-08-27 18:20:03 +01:00
agent_substrate_e2e_test.go
test(api): own router worker cleanup in early API fixtures
2026-09-08 21:29:36 +01:00
agent_version_shared.go
Keep diagnostic source builds out of release update flows
2026-09-10 17:06:27 +01:00
ai_chat_transport_test.go
feat(ai): add compact and max_bytes to the chat messages endpoint
2026-07-18 20:23:41 +01:00
ai_chat_transport.go
feat(ai): add compact and max_bytes to the chat messages endpoint
2026-07-18 20:23:41 +01:00
ai_findings_endpoint_test.go
fix(relay): introduce dedicated mobile runtime scope
2026-03-24 23:59:52 +00:00
ai_handler_chat_recovery_test.go
fix(ai): expose recovery-backed storage chat path
2026-03-27 08:39:59 +00:00
ai_handler_recovery_wiring_test.go
Retire disconnected incident recording and preserve archives
2026-09-06 17:42:24 +01:00
ai_handler_restart_test.go
Fix TestRestart_StartIfServiceMissing expectation for single config load
2026-06-04 11:23:05 +01:00
ai_handler_test.go
Retire disconnected incident recording and preserve archives
2026-09-06 17:42:24 +01:00
ai_handler_unified_store_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
ai_handler.go
Require POST for Assistant session mutation routes
2026-10-07 14:19:53 +01:00
ai_handlers_concurrency_test.go
Judge disk heat under the reporting host's Disk Temp override
2026-10-07 11:54:53 +01:00
ai_handlers_cost_export_additional_test.go
test: expand backend coverage
2026-01-25 21:08:44 +00:00
ai_handlers_cost_reset_additional_test.go
Complete Patrol retained objective loop
2026-08-14 03:11:10 +01:00
ai_handlers_finding_notify_test.go
Expose Patrol finding notification settings in the API and Patrol settings page
2026-07-18 12:14:12 +01:00
ai_handlers_helpers_test.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
ai_handlers_intelligence_additional_test.go
Route AI recent changes through canonical intelligence
2026-03-19 04:04:14 +00:00
ai_handlers_investigation_additional_test.go
Preserve native filesystem evidence and Patrol action history
2026-09-07 09:45:31 +01:00
ai_handlers_knowledge_test.go
Enforce Assistant read-only scope integrity
2026-07-11 12:43:55 +01:00
ai_handlers_more_test.go
Merge origin/main into fix/saml-acs-request-binding
2026-10-08 00:14:01 +01:00
ai_handlers_oauth_test.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
ai_handlers_patrol_actions_additional_test.go
Repair resource evidence for Patrol and Assistant
2026-09-05 21:43:02 +01:00
ai_handlers_patrol_stream_resume_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
ai_handlers_patrol_test.go
Checkpoint current workspace progress
2026-05-15 22:45:48 +01:00
ai_handlers_setters_additional_test.go
Retire disconnected incident recording and preserve archives
2026-09-06 17:42:24 +01:00
ai_handlers_stream_test.go
Surface Assistant idle progress on SSE streams
2026-06-07 00:06:34 +01:00
ai_handlers_test.go
Preserve canonical Patrol planning and outcome continuity
2026-09-07 17:24:25 +01:00
ai_handlers.go
Let only POST narrate single-resource reports with Pulse Assistant
2026-10-07 21:00:34 +01:00
ai_hosted_runtime_test.go
Retire self-hosted AI quickstart surfaces
2026-04-28 15:49:18 +01:00
ai_hosted_runtime.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
ai_intelligence_handlers_additional_test.go
fix(release): align api and hostagent rc contracts
2026-03-26 17:12:27 +00:00
ai_intelligence_handlers_data_additional_test.go
Stabilize rc1 mock mode and metrics history
2026-04-11 16:47:37 +01:00
ai_intelligence_handlers_more2_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
ai_intelligence_handlers_more_test.go
Fix missing impact text and incomplete alert type coverage in unified findings
2026-06-27 14:43:09 +01:00
ai_intelligence_handlers_remediation_additional_test.go
Preserve canonical incident history and Assistant handoffs
2026-09-08 02:08:15 +01:00
ai_intelligence_handlers_remediation_more_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
ai_intelligence_handlers_test.go
Lighten AI intelligence handler test setup
2026-05-28 15:10:39 +01:00
ai_intelligence_handlers.go
Preserve canonical incident history and Assistant handoffs
2026-09-08 02:08:15 +01:00
ai_intelligence_helpers_additional_test.go
test: expand backend coverage
2026-01-25 21:08:44 +00:00
ai_ollama_auth_lifecycle_test.go
fix(settings): restore Ollama Basic Auth configuration
2026-09-10 18:21:29 +01:00
ai_patrol_community_limits_test.go
Clamp Patrol monitor-only autonomy saves
2026-05-08 02:21:31 +01:00
ai_patrol_cost_preview_test.go
Guide the Patrol model choice with cost preview and budget pause
2026-09-02 07:55:42 +01:00
ai_patrol_cost_preview.go
Guide the Patrol model choice with cost preview and budget pause
2026-09-02 07:55:42 +01:00
ai_patrol_digest_handler_test.go
Add the Patrol weekly digest endpoint
2026-09-02 08:53:50 +01:00
ai_patrol_digest_handler.go
Email the Patrol weekly summary as a report schedule kind
2026-09-02 11:15:22 +01:00
ai_patrol_handlers_test.go
Add resource priority to Patrol queue
2026-06-30 10:37:54 +01:00
ai_relay_converters_branchcov0722pm_test.go
Cover API relay converters, request filters and AI approval helpers
2026-07-22 16:29:44 +01:00
ai_resource_types.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
alerting_compat.go
feat(alerts): add destination severity routing
2026-08-27 19:13:32 +01:00
alerts_endpoints_test.go
feat(alerts): add per-alert snooze
2026-08-27 17:20:32 +01:00
api_foundation_test.go
Merge origin/pulse/v6-release and fix reconciled API regressions
2026-03-28 21:14:54 +00:00
api_token_identity.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
api_token_org_routes_integration_test.go
Stabilize release validation boundaries
2026-08-29 14:54:04 +01:00
api_token_org_scope_integration_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
api_token_owner_identity_integration_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
api_token_scope_transport_integration_test.go
Allow in-place API token scope edits (#1629)
2026-07-30 12:06:19 +01:00
apt_workflow_integration_test.go
Require independent evidence for verified findings
2026-07-12 23:15:54 +01:00
apt_workflows_colima_real_lab_test.go
Require independent evidence for verified findings
2026-07-12 23:15:54 +01:00
assistant_typed_action_planner.go
Enforce server-owned action approval authority
2026-07-11 19:49:17 +01:00
attention_actions_test.go
Harden Operational Trust rollout contracts
2026-07-19 15:11:02 +01:00
attention_actions.go
Harden Operational Trust rollout contracts
2026-07-19 15:11:02 +01:00
attention_evidence.go
Harden Operational Trust rollout contracts
2026-07-19 15:11:02 +01:00
attention_handlers_test.go
Simplify and harden verified Patrol receipts
2026-08-15 10:25:04 +01:00
attention_handlers.go
Show verified Patrol work receipts
2026-08-15 08:48:49 +01:00
attention_mutations.go
Let mobile relay tokens reach the Patrol attention routes
2026-07-22 12:31:44 +01:00
attention_receipts.go
Simplify and harden verified Patrol receipts
2026-08-15 10:25:04 +01:00
attention_relay_mobile_scope_test.go
Let mobile relay tokens reach the Patrol attention routes
2026-07-22 12:31:44 +01:00
audit_handlers_test.go
Bind SAML logins to the browser that started them
2026-10-07 23:02:13 +01:00
audit_reporting_scope_test.go
Add MSP report scheduling and alert rollup
2026-07-07 20:37:18 +01:00
auth_additional_coverage_test.go
Prevent mixed-auth configuration deadlock
2026-07-16 15:25:47 +01:00
auth_context_middleware_test.go
Propagate Basic auth identity into action authorization
2026-07-16 16:34:26 +01:00
auth_context_tenant_test.go
Keep auth context tests independent of tenant runtime writers
2026-10-03 18:16:20 +01:00
auth_denial_signal_test.go
Stabilize API test log capture
2026-08-31 19:47:01 +01:00
auth_denial_signal.go
fix(api): log routine authorization refusals at debug, warn on the rate
2026-08-07 21:38:47 +01:00
auth_env_path.go
Keep first-run credential reset atomic
2026-08-29 06:16:52 +01:00
auth_general_test.go
feat: enhance API router with multi-tenant authorization
2026-01-24 22:42:23 +00:00
auth_helpers_test.go
Close remaining CodeQL allocation and cookie gaps
2026-07-09 20:10:08 +01:00
auth_oidc_refresh_additional_test.go
Fix late issue triage regressions
2026-05-28 14:49:20 +01:00
auth_principal_identity_test.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
auth_principal_identity.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
auth_query_token_test.go
fix(security): restrict query-string token auth to WebSocket upgrades only
2026-02-04 09:52:32 +00:00
auth_scope_test.go
fix(relay): introduce dedicated mobile runtime scope
2026-03-24 23:59:52 +00:00
auth.go
Use typed Proxmox runners and preserve cross-clock action evidence
2026-09-07 12:00:48 +01:00
authorization_additional_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
authorization_test.go
Harden MSP tenant isolation: scope org-bound tokens away from default org, propagate webhook allowlist to all tenants
2026-06-10 11:37:39 +01:00
authorization.go
Harden MSP tenant isolation: scope org-bound tokens away from default org, propagate webhook allowlist to all tenants
2026-06-10 11:37:39 +01:00
availability_handlers_test.go
Add application response contracts to availability checks
2026-08-30 17:38:59 +01:00
availability_handlers.go
Add multi-location service delivery evidence
2026-08-30 21:44:32 +01:00
availability_history_handlers_test.go
Add availability history and fleet view
2026-08-30 15:38:34 +01:00
availability_history_handlers.go
Add availability history and fleet view
2026-08-30 15:38:34 +01:00
availability_probe_agent_test.go
Add multi-location service delivery evidence
2026-08-30 21:44:32 +01:00
billing_state_authz_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
billing_state_handlers_test.go
Remove monitored-system volume caps
2026-05-05 12:59:59 +01:00
bootstrap_token_test.go
Fix bootstrap token logger race
2026-05-03 12:25:56 +01:00
bootstrap_token.go
Show container-console route for the setup token
2026-09-28 15:29:15 +01:00
change_password_session_admin_test.go
test(api): own password-change fixture router lifecycle
2026-09-08 21:53:18 +01:00
charts_compat.go
Extract chart and resource query services
2026-08-21 18:36:21 +01:00
chat_service_adapter_additional_test.go
test(api): comprehensively improve test coverage to Security, Infra, and Features
2026-02-02 18:59:44 +00:00
chat_service_adapter_test.go
Preserve Patrol evidence and surface action submission failures
2026-09-06 20:09:54 +01:00
chat_service_adapter.go
Account Anthropic prompt-cache usage instead of dropping it
2026-10-03 09:31:34 +01:00
cloud_agent_install_command.go
Contain agent command authority
2026-08-29 22:12:41 +01:00
cloud_handoff_handlers_test.go
Harden provider MSP tenant isolation
2026-06-02 17:34:10 +01:00
cloud_handoff_handlers.go
Close remaining CodeQL allocation and cookie gaps
2026-07-09 20:10:08 +01:00
cloud_handoff_queryplan_test.go
fix(release): stabilize backend rehearsal blockers
2026-03-26 20:51:29 +00:00
cloud_handoff_test.go
Fail closed on hosted handoff identity
2026-05-04 09:47:54 +01:00
cloud_handoff.go
Close remaining CodeQL allocation and cookie gaps
2026-07-09 20:10:08 +01:00
cloud_org_admin_auth.go
Enforce explicit SSO administrator grants
2026-08-31 00:43:42 +01:00
cloud_org_admin_handlers.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
code_standards_test.go
feat(reporting): availability section computed from the resource state timeline
2026-06-10 17:48:11 +01:00
collector_authority_test.go
Harden secure agent runtime boundaries
2026-08-31 00:06:24 +01:00
collector_authority.go
Harden secure agent runtime boundaries
2026-08-31 00:06:24 +01:00
config_handlers_compat.go
Extract configuration API runtime package
2026-08-21 14:56:07 +01:00
config_handlers_test_support_test.go
Extract configuration API runtime package
2026-08-21 14:56:07 +01:00
config_profiles_additional_test.go
test: expand backend coverage
2026-01-25 21:08:44 +00:00
config_profiles_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
config_profiles.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
config_transfer_authorization_test.go
test(api): close config-transfer fixture router lifecycles
2026-09-08 21:42:28 +01:00
config_transfer_authorization.go
Secure configuration transfer authorization (#1714)
2026-08-12 07:32:50 +01:00
connections_aggregator_adaptive_stale_test.go
Scale connection stale cutoff by the adaptive planned poll interval
2026-08-11 14:05:06 +01:00
connections_aggregator_pmg_branchcov0722am_test.go
Scale connection staleness cutoff with the configured polling cadence
2026-07-26 12:42:22 +01:00
connections_aggregator_test.go
Prevent connection alerts from bypassing offline policy
2026-08-24 22:45:59 +01:00
connections_aggregator.go
Add multi-location service delivery evidence
2026-08-30 21:44:32 +01:00
connections_alerts_branchcov0722am_test.go
Prevent connection alerts from bypassing offline policy
2026-08-24 22:45:59 +01:00
connections_alerts.go
Prevent connection alerts from bypassing offline policy
2026-08-24 22:45:59 +01:00
connections_command_policy_token_test.go
Fail closed on unresolvable agent tokens in the connections command-policy view
2026-07-18 13:09:18 +01:00
connections_grouping_test.go
Let fresher evidence decide merged connection member state
2026-08-30 00:02:15 +01:00
connections_grouping.go
Keep agent-reported disks out of cluster member state
2026-10-05 22:27:03 +01:00
connections_handlers_continuity_test.go
Separate TrueNAS probes from runtime poll and readiness evidence
2026-10-03 23:58:11 +01:00
connections_handlers_mock_test.go
fix(mock): keep real configured sources out of the mock connections ledger
2026-08-06 11:09:52 +01:00
connections_handlers.go
Fix agent command channel admission
2026-07-24 13:00:03 +01:00
connections_probe_test.go
Harden remaining CodeQL security boundaries
2026-07-09 19:46:40 +01:00
connections_probe.go
Harden remaining CodeQL security boundaries
2026-07-09 19:46:40 +01:00
connections_types.go
Prevent connection alerts from bypassing offline policy
2026-08-24 22:45:59 +01:00
contract_test.go
Merge origin/main into fix/saml-acs-request-binding
2026-10-08 00:14:01 +01:00
cors_policy.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
csrf_store_test.go
Fix concurrent CSRF token refresh
2026-04-26 15:27:10 +01:00
csrf_store.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
demo_middleware_test.go
Stop websocket upgrade headers exempting demo-mode writes
2026-10-07 13:46:17 +01:00
demo_middleware.go
Stop websocket upgrade headers exempting demo-mode writes
2026-10-07 13:46:17 +01:00
demo_mode_commercial_test.go
Remove monitored-system volume caps
2026-05-05 12:59:59 +01:00
demo_mode_commercial.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
demo_mode_operations_test.go
Hide pprof routes on demo-mode instances
2026-10-07 20:04:07 +01:00
demo_mode_operations.go
Hide pprof routes on demo-mode instances
2026-10-07 20:04:07 +01:00
deploy_handlers_test.go
Keep deployed agents' command channel across restarts
2026-10-05 22:23:09 +01:00
deploy_handlers.go
Keep deployed agents' command channel across restarts
2026-10-05 22:23:09 +01:00
deprecation_metrics.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
diagnostics_additional_test.go
Exercise authoritative guest-lock admission in VM diagnostics fixtures
2026-10-03 20:24:47 +01:00
diagnostics_contract_test.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
diagnostics_memory_test.go
Fix cache-aware Linux memory fallbacks
2026-07-24 00:19:40 +01:00
diagnostics_system_test.go
Honor namespaced cgroup memory limits
2026-08-29 22:23:54 +01:00
diagnostics_test.go
Fix PBS connection health authority
2026-07-24 09:45:05 +01:00
diagnostics.go
Honor namespaced cgroup memory limits
2026-08-29 22:23:54 +01:00
discovery_handlers_info_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
discovery_handlers_test.go
Refuse GET and HEAD on discovery settings and SAML logout
2026-10-07 19:31:50 +01:00
discovery_handlers.go
Refuse GET and HEAD on discovery settings and SAML logout
2026-10-07 19:31:50 +01:00
DO_NOT_EDIT_FRONTEND_HERE.md
Fix embedded frontend dev entrypoint guidance
2026-03-24 16:05:19 +00:00
docker_agents_additional_test.go
Enforce the canonical mutation plane
2026-07-11 15:19:41 +01:00
docker_agents_error_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
docker_agents_report_size_test.go
Fix Docker report size contract drift
2026-07-23 23:57:42 +01:00
docker_agents_routes_more_test.go
Enforce the canonical mutation plane
2026-07-11 15:19:41 +01:00
docker_agents_test.go
…
docker_agents.go
Fix Docker report size contract drift
2026-07-23 23:57:42 +01:00
docker_container_action_executor_test.go
fix(api): validate Docker update agent running health readback
2026-09-05 22:25:48 +01:00
docker_container_action_executor.go
fix(patrol): require Docker health recovery
2026-08-27 20:43:54 +01:00
docker_container_action_result_test.go
Use typed Proxmox runners and preserve cross-clock action evidence
2026-09-07 12:00:48 +01:00
docker_container_action_result.go
Use typed Proxmox runners and preserve cross-clock action evidence
2026-09-07 12:00:48 +01:00
docker_metadata_additional_test.go
Complete canonical web interface links
2026-07-24 12:42:16 +01:00
docker_metadata.go
Complete canonical web interface links
2026-07-24 12:42:16 +01:00
docker_restart_colima_real_lab_test.go
fix(patrol): require Docker health recovery
2026-08-27 20:43:54 +01:00
docs_links.go
fix(api): localize shipped security doc refs
2026-03-28 20:35:10 +00:00
ensure_admin_session_sso_test.go
Enforce explicit SSO administrator grants
2026-08-31 00:43:42 +01:00
enterprise_extension_ai_alert_analysis_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
enterprise_extension_ai_alert_analysis.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
enterprise_extension_ai_autofix_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
enterprise_extension_ai_autofix.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
enterprise_extension_ai_investigation_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
enterprise_extension_ai_investigation.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
enterprise_extension_audit_admin_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
enterprise_extension_audit_admin.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
enterprise_extension_rbac_admin_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
enterprise_extension_rbac_admin.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
enterprise_extension_reporting_admin_test.go
Remove redundant inventory definition route
2026-03-25 23:40:22 +00:00
enterprise_extension_reporting_admin.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
enterprise_extension_sso_admin_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
enterprise_extension_sso_admin.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
entitlement_handlers_test.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
export_test.go
Fail closed on wildcard trusted proxy configuration
2026-04-22 04:23:23 +01:00
filters_branchcov0722pm_test.go
Extract chart and resource query services
2026-08-21 18:36:21 +01:00
flapping_postmortem_test.go
emit reliability finding when an alert starts flapping
2026-05-13 00:28:24 +01:00
flapping_postmortem.go
emit reliability finding when an alert starts flapping
2026-05-13 00:28:24 +01:00
frontend_embed_sync_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
frontend_embed_test.go
Fix legacy OIDC SSO discovery and CSP nonce
2026-07-07 09:54:14 +01:00
frontend_embed.go
Serve shipped markdown docs as text instead of a forced download
2026-07-08 14:36:55 +01:00
guest_metadata_additional_test.go
Preserve resource URLs across runtime identity changes
2026-07-23 22:33:07 +01:00
guest_metadata.go
Complete canonical web interface links
2026-07-24 12:42:16 +01:00
helpers_branchcov0722pm_test.go
Cover API relay converters, request filters and AI approval helpers
2026-07-22 16:29:44 +01:00
host_agent_install_token_test.go
Fix command policy after agent reinstall
2026-08-23 23:39:20 +01:00
host_agent_removal_lifecycle_integration_test.go
Register agent command channels under the identity Pulse resolves
2026-10-06 00:36:41 +01:00
host_apt_action_result_test.go
Use typed Proxmox runners and preserve cross-clock action evidence
2026-09-07 12:00:48 +01:00
host_apt_action_result.go
Use typed Proxmox runners and preserve cross-clock action evidence
2026-09-07 12:00:48 +01:00
host_apt_partial_truth_test.go
Fix Patrol autonomy and refusal reporting
2026-08-13 23:26:08 +01:00
host_metadata.go
Complete canonical web interface links
2026-07-24 12:42:16 +01:00
host_storage_cleanup_action_executor_test.go
Complete durable APT workflow continuity
2026-07-12 05:23:02 +01:00
host_storage_cleanup_action_executor.go
Gate Patrol actions on agent preflight
2026-08-14 01:12:49 +01:00
host_update_action_executor_test.go
Gate Patrol actions on agent preflight
2026-08-14 01:12:49 +01:00
host_update_action_executor.go
Gate Patrol actions on agent preflight
2026-08-14 01:12:49 +01:00
hosted_agent_install_command_test.go
Align routed and hosted Proxmox private-input contracts
2026-10-01 05:51:09 +01:00
hosted_entitlement_refresh_fallback_test.go
api: refresh hosted entitlement fallback lease
2026-04-05 13:18:30 +01:00
hosted_entitlement_refresh_quickstart_test.go
Retire self-hosted AI quickstart surfaces
2026-04-28 15:49:18 +01:00
hosted_entitlement_refresh.go
Retire self-hosted AI quickstart surfaces
2026-04-28 15:49:18 +01:00
hosted_lifecycle_integration_test.go
Retire self-hosted trial activation callback
2026-04-28 16:36:09 +01:00
hosted_org_admin_handlers_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
hosted_signup_handlers_test.go
Use stable hosted signup owner ids
2026-05-04 09:33:19 +01:00
http_metrics_allocations_test.go
Isolate route allocation checks from API fixture workers
2026-10-03 21:53:22 +01:00
http_metrics_bench_test.go
Stop timing the per-segment route normaliser
2026-09-24 17:33:21 +01:00
http_metrics_test.go
Compose current upstream allocation guard with reviewed maintenance repairs
2026-10-04 00:15:28 +01:00
http_metrics.go
perf(api): avoid rune decoding in route label checks
2026-09-06 08:31:26 +01:00
httptest_ipv4_external_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
httptest_ipv4_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
httptest_ipv6_test.go
Prove IPv6 trusted proxy websocket continuity
2026-04-10 12:54:12 +01:00
identity_invariant_contract_test.go
Canonicalize install security helpers
2026-08-21 14:56:11 +01:00
identity_sso_handlers.go
Secure configuration transfer authorization (#1714)
2026-08-12 07:32:50 +01:00
isolation_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
issue1640_readiness_gate_test.go
Gate Patrol readiness on the completed overall verdict (#1640)
2026-07-28 13:57:48 +01:00
issue1640_readiness_transport_test.go
test(api): gate readiness transport proof on client observation
2026-09-10 02:01:25 +01:00
issue1644_exec_binding_integration_test.go
Extract configuration API runtime package
2026-08-21 14:56:07 +01:00
issue1753_agent_ingest_integration_test.go
Refresh the resource store at most once per 2s of agent reports
2026-09-24 10:24:29 +01:00
issue1753_agent_report_auth_test.go
Stop shared-token same-hostname agents collapsing identities
2026-09-01 14:36:49 +01:00
issue1753_docker_report_auth_test.go
Stop Docker records flip-flopping under shared same-hostname tokens
2026-09-01 15:26:48 +01:00
kubernetes_agents_additional_test.go
Remove monitored-system volume caps
2026-05-05 12:59:59 +01:00
kubernetes_agents_error_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
kubernetes_agents.go
Classify oversized agent reports correctly
2026-09-01 13:59:36 +01:00
ledger_licensing_branchcov0722pm_test.go
Cover API relay converters, request filters and AI approval helpers
2026-07-22 16:29:44 +01:00
license_expiry_integration_test.go
Move license test signers to testsupport
2026-04-28 19:12:21 +01:00
license_handlers_demo_fixtures_dev_test.go
Stabilize rc1 mock mode and metrics history
2026-04-11 16:47:37 +01:00
license_handlers_demo_fixtures_test.go
Fix demo fixture entitlement recovery
2026-07-04 22:44:43 +01:00
license_handlers_test.go
Classify license server transport failures as retryable
2026-08-02 00:04:40 +01:00
license_limits_test_helpers_test.go
Remove monitored-system volume caps
2026-05-05 12:59:59 +01:00
license_user_limit_test.go
Move license test signers to testsupport
2026-04-28 19:12:21 +01:00
licensing_bridge.go
Prevent mock license migration warnings
2026-08-04 14:19:47 +01:00
licensing_handlers_auto_migrate_test.go
Prevent mock license migration warnings
2026-08-04 14:19:47 +01:00
licensing_handlers_self_hosted_fallback_test.go
Canonicalize self-hosted purchase handoff intent
2026-04-16 10:17:37 +01:00
licensing_handlers.go
revert(commercial): restore self-hosted opt-in posture
2026-08-08 16:48:19 +01:00
licensing_legacy_retry_test.go
Enforce installation-scoped license invalidation
2026-07-14 16:18:21 +01:00
licensing_legacy_retry.go
Enforce installation-scoped license invalidation
2026-07-14 16:18:21 +01:00
licensing_status_test_helpers_test.go
Enforce installation-scoped license invalidation
2026-07-14 16:18:21 +01:00
load_test.go
test(slo): only enforce latency budgets on hosted runners
2026-09-19 17:26:25 +01:00
log_handlers_additional_test.go
test(api): make log stream SSE test deterministic via history replay
2026-06-11 13:10:16 +01:00
log_handlers.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
log_redact_test.go
Test: expand api feature test coverage
2026-02-02 22:02:22 +00:00
log_redact.go
Show AI cost refresh errors and harden log redaction
2025-12-12 11:05:24 +00:00
loopback_request_test.go
Bind recovery and bootstrap auth to direct loopback
2026-04-22 00:39:53 +01:00
magic_link_expiry_branchcov0723am_test.go
Cover replay bundle loading, magic link expiry and subscription mapping
2026-07-23 06:59:05 +01:00
magic_link_handlers_test.go
Fail closed on blank magic-link principals
2026-05-04 22:43:35 +01:00
magic_link_handlers.go
fix(api): validate hosted magic-link URL before token mint
2026-08-08 12:07:40 +01:00
magic_link_store_queryplan_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
magic_link_store_sqlite_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
magic_link_store_sqlite.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
magic_link_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
magic_link.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
main_test.go
Stabilize API test log capture
2026-08-31 19:47:01 +01:00
maintenance_verification_test.go
Add maintenance verification reports
2026-05-12 21:10:58 +01:00
maintenance_verification_wiring_branchcov0722pm_test.go
Cover report schedule, recovery point and maintenance wiring helpers
2026-07-22 15:53:34 +01:00
maintenance_verification_wiring.go
Add maintenance verification reports
2026-05-12 21:10:58 +01:00
maintenance_verification.go
Clear all errcheck and gofmt violations so make lint gates on real findings
2026-06-09 21:42:21 +01:00
metadata_handlers_shared.go
Complete canonical web interface links
2026-07-24 12:42:16 +01:00
metadata_handlers_test.go
Complete canonical web interface links
2026-07-24 12:42:16 +01:00
metadata_helpers.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
metadata_provider_test.go
test: Add comprehensive test coverage across packages
2026-01-19 19:26:18 +00:00
metadata_provider.go
feat(ai): Add URL discovery tool - AI can find and set resource URLs
2025-12-10 00:29:07 +00:00
method_guard.go
Refuse GET and HEAD on discovery settings and SAML logout
2026-10-07 19:31:50 +01:00
metrics_history_fallback_test.go
Fix mock storage history continuity
2026-08-26 13:54:55 +01:00
metrics_reporting_handlers.go
Let only POST narrate single-resource reports with Pulse Assistant
2026-10-07 21:00:34 +01:00
metrics_reporting_telemetry_test.go
Emit structured telemetry on reporting and summarize invocations
2026-05-10 22:59:23 +01:00
middleware_license.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
middleware_tenant_additional_test.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
middleware_tenant_authorization_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
middleware_tenant_test.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
middleware_tenant_token_org_fallback_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
middleware_tenant.go
Extract alert delivery API package
2026-08-21 14:56:04 +01:00
middleware_test.go
Harden API request and bootstrap state handling
2026-04-22 05:42:45 +01:00
middleware.go
fix(api): log routine authorization refusals at debug, warn on the rate
2026-08-07 21:38:47 +01:00
mock_state_provider_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
mockmode_external_test.go
Stabilize rc1 mock mode and metrics history
2026-04-11 16:47:37 +01:00
mockmode_internal_test.go
Stabilize rc1 mock mode and metrics history
2026-04-11 16:47:37 +01:00
monitored_system_ledger_test.go
Clear all errcheck and gofmt violations so make lint gates on real findings
2026-06-09 21:42:21 +01:00
monitored_system_ledger.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
monitored_system_usage_test_helpers_test.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
monitored_system_usage.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
multi_tenant_setters_additional_test.go
Extract configuration API runtime package
2026-08-21 14:56:07 +01:00
multi_tenant_stress_test.go
test(api): distinguish stress setup and first-request latency
2026-09-08 21:14:29 +01:00
norace_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
notifications_scope_test.go
fix(notifications): refresh recovery queue owner after monitor reload
2026-09-08 11:37:20 +01:00
oidc_admin_auth_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
oidc_handlers_callback_url_test.go
Fix legacy OIDC SSO discovery and CSP nonce
2026-07-07 09:54:14 +01:00
oidc_handlers_test.go
Retire dashboard landing surface
2026-04-29 16:25:09 +01:00
oidc_handlers.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
oidc_legacy_callback_recovery_test.go
Recover the initiating provider on the legacy OIDC callback path
2026-07-10 09:53:09 +01:00
oidc_mapping_test.go
Adopt the agent's preferred host when re-registering a matched node
2026-07-09 09:52:59 +01:00
oidc_only_admin_parity_test.go
Enforce explicit SSO administrator grants
2026-08-31 00:43:42 +01:00
oidc_service_additional_test.go
chore(deps): qualify ID OAuth and concurrency updates
2026-09-10 00:39:00 +01:00
oidc_service_test.go
Keep mixed OIDC key sets usable
2026-09-04 11:40:20 +01:00
oidc_service.go
Recover the initiating provider on the legacy OIDC callback path
2026-07-10 09:53:09 +01:00
oidc_token_auth_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
onboarding_handlers_test.go
Fix mobile onboarding URL handoff sanitization
2026-07-07 15:12:59 +01:00
onboarding_handlers.go
Retire Relay labels and upsells inside Pulse
2026-09-29 13:19:54 +01:00
org_handlers_test.go
Add Kubernetes RBAC inventory to the agent + canonical + UI
2026-05-25 09:25:03 +01:00
org_handlers.go
Coalesce guest identity writes and retain incomplete tenant shutdown
2026-10-05 09:21:40 +01:00
org_lifecycle_handlers_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
org_lifecycle_handlers.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
org_shutdown_safety_test.go
Coalesce guest identity writes and retain incomplete tenant shutdown
2026-10-05 09:21:40 +01:00
org_validation_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
patrol_action_broker_test.go
Preserve canonical Patrol planning and outcome continuity
2026-09-07 17:24:25 +01:00
patrol_action_broker.go
Preserve canonical Patrol planning and outcome continuity
2026-09-07 17:24:25 +01:00
patrol_action_reconciliation.go
Preserve native filesystem evidence and Patrol action history
2026-09-07 09:45:31 +01:00
patrol_autonomy_colima_real_lab_test.go
Require independent evidence for verified findings
2026-07-12 23:15:54 +01:00
patrol_autopilot_test.go
Give Patrol autopilot tests their own session store
2026-10-05 17:25:52 +01:00
patrol_digest_email_test.go
Email the Patrol weekly summary as a report schedule kind
2026-09-02 11:15:22 +01:00
patrol_digest_email.go
Email the Patrol weekly summary as a report schedule kind
2026-09-02 11:15:22 +01:00
patrol_finding_notifications_test.go
Route new Patrol findings to alert notification channels
2026-07-18 11:59:05 +01:00
patrol_finding_notifications.go
Route new Patrol findings to alert notification channels
2026-07-18 11:59:05 +01:00
patrol_objectives_test.go
Rework Patrol around outcome-driven autonomous operations
2026-08-14 12:52:51 +01:00
patrol_objectives.go
Complete Patrol retained objective loop
2026-08-14 03:11:10 +01:00
patrol_suppression_management_test.go
Keep rule-help browser fixtures on their intended request paths
2026-10-05 17:24:27 +01:00
payments_webhook_handlers.go
fix(api): validate hosted magic-link URL before token mint
2026-08-08 12:07:40 +01:00
pbs_backups_test.go
Fix Proxmox PBS backup artifact surface
2026-05-25 21:47:12 +01:00
pbs_backups.go
Fix Proxmox PBS backup artifact surface
2026-05-25 21:47:12 +01:00
persistent_auth_stores_test.go
Bind recovery and bootstrap auth to direct loopback
2026-04-22 00:39:53 +01:00
platform_admin_session_parity_test.go
Enforce explicit SSO administrator grants
2026-08-31 00:43:42 +01:00
platform_connection_shared.go
Dedupe internal/api handler families behind shared flows and generics
2026-06-10 10:52:05 +01:00
platform_mock_connections.go
Add multi-location service delivery evidence
2026-08-30 21:44:32 +01:00
pmg_test.go
Stabilize dev runtime and complete PMG read-state migration
2026-05-21 15:15:23 +01:00
pmg.go
Stabilize dev runtime and complete PMG read-state migration
2026-05-21 15:15:23 +01:00
profile_suggestions_handlers_test.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
profile_suggestions_test.go
test: Add comprehensive test coverage across packages
2026-01-19 19:26:18 +00:00
profile_suggestions.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
proxmox_guest_action_executor_test.go
Use typed Proxmox runners and preserve cross-clock action evidence
2026-09-07 12:00:48 +01:00
proxmox_guest_action_executor.go
Use typed Proxmox runners and preserve cross-clock action evidence
2026-09-07 12:00:48 +01:00
proxmox_guest_action_observer.go
Wire production Proxmox action verification
2026-07-13 11:04:09 +01:00
proxmox_guest_action_result.go
Use typed Proxmox runners and preserve cross-clock action evidence
2026-09-07 12:00:48 +01:00
proxmox_patrol_integration_test.go
Use typed Proxmox runners and preserve cross-clock action evidence
2026-09-07 12:00:48 +01:00
proxy_admin_gating_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
proxy_token_admin_conflict_test.go
Deny proxy non-admin despite token
2026-02-04 14:35:08 +00:00
public_signup_handlers.go
Use stable hosted signup owner ids
2026-05-04 09:33:19 +01:00
purchase_return_redemptions_test.go
Persist self-hosted purchase redemption records
2026-04-08 20:42:36 +01:00
purchase_return_redemptions.go
Dedupe internal/api handler families behind shared flows and generics
2026-06-10 10:52:05 +01:00
pure_helpers_branchcov0724pm_test.go
Extract chart and resource query services
2026-08-21 18:36:21 +01:00
pve_backups.go
proxmox(replication+backups): bespoke tables backed by new read-only endpoints
2026-05-16 13:57:53 +01:00
race_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
rate_limit_config_test.go
test(api): stop rate-limit fixture cleanup workers
2026-09-09 11:00:59 +01:00
rate_limit_config.go
Join Router-owned limiter workers during shutdown
2026-10-05 13:20:08 +01:00
rate_limit_fixture_cleanup_test.go
test(api): stop rate-limit fixture cleanup workers
2026-09-09 11:00:59 +01:00
rate_limit_journey_budget_test.go
test(api): prove journey rate-budget isolation preserves enforcement
2026-09-10 17:51:49 +01:00
ratelimit_tenant_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
ratelimit_tenant.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
ratelimit_test.go
Make rate limiter sliding-window test deterministic
2026-06-03 23:14:25 +01:00
ratelimit.go
Join Router-owned limiter workers during shutdown
2026-10-05 13:20:08 +01:00
rbac_admin_handlers_test.go
Bind recovery and bootstrap auth to direct loopback
2026-04-22 00:39:53 +01:00
rbac_admin_recovery_test.go
Fix RBAC assignment migration and loading
2026-07-23 22:11:48 +01:00
rbac_handlers_additional_test.go
test(api): comprehensively improve test coverage to Security, Infra, and Features
2026-02-02 18:59:44 +00:00
rbac_handlers_more_test.go
test: expand api handler coverage
2026-02-02 23:01:29 +00:00
rbac_handlers_test.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
rbac_isolation_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
rbac_lifecycle_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
rbac_metrics_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
rbac_reporting_auth_test.go
Add MSP report scheduling and alert rollup
2026-07-07 20:37:18 +01:00
rbac_tenant_provider_bench_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
rbac_tenant_provider_test.go
Measure Pro feature adoption and drop the dead Patrol autofix counter
2026-08-05 14:34:50 +01:00
rbac_test.go
Fix API auth failure handling
2026-04-26 17:26:16 +01:00
README.md
chore: Mac-compatible dev scripts
2026-01-22 00:30:15 +00:00
recovery_handlers_branchcov0722pm_test.go
Cover report schedule, recovery point and maintenance wiring helpers
2026-07-22 15:53:34 +01:00
recovery_handlers_test.go
Define recovery list pagination bounds once in the recovery model
2026-08-24 10:21:10 +01:00
recovery_handlers.go
Define recovery list pagination bounds once in the recovery model
2026-08-24 10:21:10 +01:00
recovery_proxy_bypass_test.go
Reject recovery via untrusted XFF
2026-02-04 15:01:09 +00:00
recovery_tokens_test.go
Bind recovery and bootstrap auth to direct loopback
2026-04-22 00:39:53 +01:00
recovery_tokens.go
Fix RC3 backend release blockers
2026-05-01 21:36:28 +01:00
relay_hosted_runtime_test.go
feat(alerts): add destination severity routing
2026-08-27 19:13:32 +01:00
relay_hosted_runtime.go
Fix mobile relay runtime startup
2026-07-01 10:38:57 +01:00
relay_mobile_capability_generated.go
feat(alerts): add destination severity routing
2026-08-27 19:13:32 +01:00
relay_mobile_capability_test.go
Harden external probe outage alerting
2026-07-29 20:09:23 +01:00
relay_mobile_capability.go
Enforce Pulse Mobile compatibility from the core contract
2026-07-22 13:41:09 +01:00
relay_sso_license_gating_test.go
Gate relay mobile tokens behind Relay license
2026-04-30 12:53:29 +01:00
release_demo_fixtures_dev.go
Stabilize rc1 mock mode and metrics history
2026-04-11 16:47:37 +01:00
release_demo_fixtures_release.go
Stabilize rc1 mock mode and metrics history
2026-04-11 16:47:37 +01:00
replication.go
proxmox(replication+backups): bespoke tables backed by new read-only endpoints
2026-05-16 13:57:53 +01:00
report_schedules_branchcov0722pm_test.go
Cover report schedule, recovery point and maintenance wiring helpers
2026-07-22 15:53:34 +01:00
report_schedules_test.go
Email the Patrol weekly summary as a report schedule kind
2026-09-02 11:15:22 +01:00
report_schedules.go
Email the Patrol weekly summary as a report schedule kind
2026-09-02 11:15:22 +01:00
reporting_availability_test.go
feat(reporting): availability section computed from the resource state timeline
2026-06-10 17:48:11 +01:00
reporting_availability.go
feat(reporting): availability section computed from the resource state timeline
2026-06-10 17:48:11 +01:00
reporting_catalog_handlers.go
Canonicalize reporting settings catalog
2026-03-25 22:27:35 +00:00
reporting_handlers_test.go
Let only POST narrate single-resource reports with Pulse Assistant
2026-10-07 21:00:34 +01:00
reporting_inventory_handlers.go
Canonicalize reporting transport filenames and format errors
2026-03-26 09:15:15 +00:00
reporting_recovery_resilience_test.go
test(recovery): cover downstream malformed metadata consumers
2026-03-26 22:58:27 +00:00
reporting_runtime_snapshot_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
reporting_runtime_snapshot.go
Keep retained disk temperatures out of AI, Patrol and reports
2026-10-06 23:09:52 +01:00
require_admin_proxy_test.go
test: expand security regression coverage
2026-02-04 10:28:41 +00:00
resource_test_support_test.go
Extract chart and resource query services
2026-08-21 18:36:21 +01:00
resources_compat.go
Extract chart and resource query services
2026-08-21 18:36:21 +01:00
resources_operator_state_test.go
feat(alerts): add recurring scoped maintenance
2026-08-27 18:20:03 +01:00
resources_operator_state.go
feat(alerts): add recurring scoped maintenance
2026-08-27 18:20:03 +01:00
resources_state_integration_test.go
Extract chart and resource query services
2026-08-21 18:36:21 +01:00
route_inventory_test.go
Add the Patrol weekly digest endpoint
2026-09-02 08:53:50 +01:00
router_action_recovery_test.go
Fix agent update triage and durable action recovery
2026-07-23 11:19:50 +01:00
router_auth_additional_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
router_auth_bypass_inventory_test.go
Fix API auth failure handling
2026-04-26 17:26:16 +01:00
router_bench_test.go
Seed store-backed chart benchmarks once per run
2026-10-05 22:45:56 +01:00
router_csrf_middleware_test.go
Fix concurrent CSRF token refresh
2026-04-26 15:27:10 +01:00
router_csrf_skip_inventory_test.go
Retire self-hosted trial activation callback
2026-04-28 16:36:09 +01:00
router_csrf_skip_routes_test.go
fix(release): align api and hostagent rc contracts
2026-03-26 17:12:27 +00:00
router_decomposition_contract_test.go
Extract configuration API runtime package
2026-08-21 14:56:07 +01:00
router_download_inventory_test.go
Separate agent remediation runtime
2026-08-29 23:48:28 +01:00
router_fixture_cleanup_test.go
test(api): own router worker cleanup in early API fixtures
2026-09-08 21:29:36 +01:00
router_frontend_inventory_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
router_general_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
router_handlers_additional_test.go
Harden connection probe and simple stats rendering
2026-04-22 01:18:33 +01:00
router_helpers_additional_test.go
Harden session and setup token auth flows
2026-04-18 00:06:50 +01:00
router_helpers_more_test.go
Extract configuration API runtime package
2026-08-21 14:56:07 +01:00
router_helpers.go
fix(notifications): refresh recovery queue owner after monitor reload
2026-09-08 11:37:20 +01:00
router_integration_test.go
Join Router-owned limiter workers during shutdown
2026-10-05 13:20:08 +01:00
router_limiter_lifecycle_test.go
Join Router-owned limiter workers during shutdown
2026-10-05 13:20:08 +01:00
router_logging.go
Fix bootstrap token logger race
2026-05-03 12:25:56 +01:00
router_low_coverage_additional_test.go
Keep container diagnostics bootstrap credentials out of copied commands
2026-10-01 09:22:15 +01:00
router_misc_additional_test.go
Extract chart and resource query services
2026-08-21 18:36:21 +01:00
router_mock_platforms_test.go
Clear all errcheck and gofmt violations so make lint gates on real findings
2026-06-09 21:42:21 +01:00
router_proxy_auth_admin_routes_test.go
test: expand security regression coverage
2026-02-04 10:28:41 +00:00
router_proxy_auth_security_test.go
test: expand security regression coverage
2026-02-04 10:28:41 +00:00
router_public_paths_inventory_test.go
Separate agent remediation runtime
2026-08-29 23:48:28 +01:00
router_rate_limit_security_test.go
test: expand security regression coverage
2026-02-04 10:28:41 +00:00
router_recovery_test.go
Bind recovery and bootstrap auth to direct loopback
2026-04-22 00:39:53 +01:00
router_routes_additional_test.go
Rewire Patrol investigation after chat restart
2026-08-16 11:15:16 +01:00
router_routes_ai_execute_stream_test.go
fix(api): bind router teardown to owned auth stores
2026-03-26 21:43:30 +00:00
router_routes_ai_execute_test.go
Fix API auth failure handling
2026-04-26 17:26:16 +01:00
router_routes_ai_helpers_test.go
fix(api): bind router teardown to owned auth stores
2026-03-26 21:43:30 +00:00
router_routes_ai_models_test.go
fix(api): bind router teardown to owned auth stores
2026-03-26 21:43:30 +00:00
router_routes_ai_relay.go
Preserve canonical Patrol planning and outcome continuity
2026-09-07 17:24:25 +01:00
router_routes_ai_test_connection_test.go
Update stale test-connection assertion to the Provider & Models rename
2026-07-10 12:45:27 +01:00
router_routes_ai_test_provider_test.go
Move Patrol run Assistant handoffs server-side
2026-05-07 21:58:06 +01:00
router_routes_auth_security_branchcov0722pm_test.go
Cover SSO conversion, TrueNAS app mapping and config store round-trips
2026-07-22 16:18:00 +01:00
router_routes_auth_security_sso_runtime_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
router_routes_auth_security.go
fix(web): preserve scoped local principal for organisation management
2026-09-05 16:04:12 +01:00
router_routes_cloud_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
router_routes_cloud.go
Retire self-hosted trial activation callback
2026-04-28 16:36:09 +01:00
router_routes_debug_test.go
Fix API auth failure handling
2026-04-26 17:26:16 +01:00
router_routes_debug.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
router_routes_licensing_reporting_runtime_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
router_routes_licensing.go
Replace the two non-discriminating audit telemetry fields and guard the class
2026-08-05 17:33:57 +01:00
router_routes_monitoring.go
Add discovery-led service assurance onboarding
2026-08-30 18:40:06 +01:00
router_routes_registration.go
Harden secure agent runtime boundaries
2026-08-31 00:06:24 +01:00
router_set_monitor_agents_test.go
Preserve resource URLs across runtime identity changes
2026-07-23 22:33:07 +01:00
router_state_test.go
Preserve observed Docker storage evidence
2026-09-06 12:45:40 +01:00
router_test.go
fix(api): validate request-derived command origins
2026-08-08 09:42:21 +01:00
router_version_tenant_metrics_test.go
Use agent update target for stale notices
2026-06-03 14:42:43 +01:00
router_webhook_cidr_reload_test.go
Stabilize API test log capture
2026-08-31 19:47:01 +01:00
router_wrappers_additional_test.go
Retire disconnected incident recording and preserve archives
2026-09-06 17:42:24 +01:00
router.go
Let only POST narrate single-resource reports with Pulse Assistant
2026-10-07 21:00:34 +01:00
runtime_branding_test.go
feat(branding): customize application identity
2026-07-30 16:25:36 +01:00
runtime_branding.go
feat(branding): customize application identity
2026-07-30 16:25:36 +01:00
runtime_display_test.go
Show the real monitoring cadence to non-admin sessions
2026-08-12 09:20:01 +01:00
runtime_display.go
Show the real monitoring cadence to non-admin sessions
2026-08-12 09:20:01 +01:00
runtime_inventory_sources_test.go
Make platform telemetry presentation evidence-aware
2026-08-14 00:18:23 +01:00
runtime_inventory_sources.go
Make platform telemetry presentation evidence-aware
2026-08-14 00:18:23 +01:00
saml_handlers_additional_test.go
Fix SSO session display labels
2026-07-07 16:35:07 +01:00
saml_handlers_more_test.go
Bind SAML logins to the browser that started them
2026-10-07 23:02:13 +01:00
saml_handlers_success_test.go
Audit SSO entitlement and provider settings
2026-05-03 13:19:51 +01:00
saml_handlers.go
Bind SAML logins to the browser that started them
2026-10-07 23:02:13 +01:00
saml_runtime_license_gating_test.go
Refuse GET and HEAD on discovery settings and SAML logout
2026-10-07 19:31:50 +01:00
saml_service_additional_test.go
Bind SAML logins to the browser that started them
2026-10-07 23:02:13 +01:00
saml_service_test.go
Bind SAML logins to the browser that started them
2026-10-07 23:02:13 +01:00
saml_service.go
Bind SAML logins to the browser that started them
2026-10-07 23:02:13 +01:00
security_additional_coverage_test.go
Harden remaining CodeQL security boundaries
2026-07-09 19:46:40 +01:00
security_first_run_reset_test.go
fix(auth): synchronise local admin permissions during setup
2026-09-10 06:52:38 +01:00
security_first_run_reset.go
fix(auth): synchronise local admin permissions during setup
2026-09-10 06:52:38 +01:00
security_regression_test.go
Register agent command channels under the identity Pulse resolves
2026-10-06 00:36:41 +01:00
security_request_body_test.go
Bound security request decoding
2026-08-31 01:43:55 +01:00
security_request_body.go
Bound security request decoding
2026-08-31 01:43:55 +01:00
security_setup_admin_sync_test.go
fix(auth): synchronise local admin permissions during setup
2026-09-10 06:52:38 +01:00
security_setup_fix_additional_test.go
Keep token issuance atomic on persistence failure
2026-08-29 05:19:19 +01:00
security_setup_fix_test.go
Persist first-run auth for systemd installs
2026-08-11 16:38:21 +01:00
security_setup_fix.go
Offer org owners the settings their own org's routes serve
2026-09-23 22:11:03 +01:00
security_setup_settings_preservation_test.go
Register the dedicated security setup contract regression
2026-09-15 02:22:04 +01:00
security_status_additional_test.go
Harden first-run security boundaries
2026-07-10 01:28:33 +01:00
security_status_capabilities.go
Offer org owners the settings their own org's routes serve
2026-09-23 22:11:03 +01:00
security_status_capability_enforcement_test.go
Enforce explicit SSO administrator grants
2026-08-31 00:43:42 +01:00
security_test.go
test(api): isolate CSRF middleware fixtures
2026-09-17 12:35:20 +01:00
security_tokens_handlers_test.go
Allow existing API tokens to be renamed
2026-08-11 16:38:21 +01:00
security_tokens_lifecycle_test.go
Make action runner rotation activation-safe
2026-08-30 18:00:33 +01:00
security_tokens_owner_binding_test.go
Bind owner identity across token minting
2026-05-04 00:50:14 +01:00
security_tokens_rotate_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
security_tokens_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
security_tokens_update_test.go
Allow in-place API token scope edits (#1629)
2026-07-30 12:06:19 +01:00
security_tokens.go
Keep API token creation atomic
2026-08-28 07:08:08 +01:00
security.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
session_oidc_test.go
Fix SSO session display labels
2026-07-07 16:35:07 +01:00
session_store_test.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
session_store.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
setup_and_adapters_branchcov0723am_test.go
Cover control plane status helpers, patrol assertions and setup classifiers
2026-07-23 06:34:03 +01:00
slo_bench_test.go
test(slo): only enforce latency budgets on hosted runners
2026-09-19 17:26:25 +01:00
slo.go
Stabilize RC release proof contracts
2026-04-11 14:51:10 +01:00
sso_admin_license_gating_test.go
Make self-hosted SSO Community-tier
2026-05-03 12:48:01 +01:00
sso_handlers_crud_test.go
Allow clearing SSO provider restriction fields from Settings
2026-07-07 22:04:46 +01:00
sso_handlers_test.go
Harden outbound SSO fetch boundaries
2026-04-01 16:36:44 +01:00
sso_outbound_test.go
Harden remaining CodeQL security boundaries
2026-07-09 19:46:40 +01:00
sso_outbound.go
Harden remaining CodeQL security boundaries
2026-07-09 19:46:40 +01:00
state_provider_branchcov0723am_test.go
Cover telemetry classifiers, lifecycle records and install snapshot counts
2026-07-23 07:15:13 +01:00
state_provider.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
state_summary.go
feat: add fleet health home
2026-09-01 01:02:17 +01:00
stripe_webhook_handlers_additional_test.go
Remove monitored-system volume caps
2026-05-05 12:59:59 +01:00
stripe_webhook_handlers_test.go
fix(api): validate hosted magic-link URL before token mint
2026-08-08 12:07:40 +01:00
subscription_entitlements.go
Preserve resource URLs across runtime identity changes
2026-07-23 22:33:07 +01:00
subscription_state_handlers.go
Centralize demo commercial boundary policy
2026-04-07 10:24:53 +01:00
subscription_state_reconciler_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
subscription_state_reconciler.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
system_settings_guest_docker_test.go
Give the Docker-in-LXC opt-in an admin Settings toggle
2026-08-20 14:27:12 +01:00
system_settings_handlers_test.go
Clear temperature SSH failure backoff on system-settings save (#1638)
2026-07-28 13:28:55 +01:00
system_settings_ssh_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
system_settings_telemetry_test.go
Preserve telemetry sender transitions and bound-socket health
2026-10-01 13:28:21 +01:00
system_settings_temperature_test.go
Fix API auth failure handling
2026-04-26 17:26:16 +01:00
system_settings_utils_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
system_settings_validate_test.go
Remove dead autoUpdateCheckInterval and autoUpdateTime settings
2026-07-28 11:13:37 +01:00
system_settings.go
Preserve telemetry sender transitions and bound-socket health
2026-10-01 13:28:21 +01:00
telemetry_audit_reads_test.go
Replace the two non-discriminating audit telemetry fields and guard the class
2026-08-05 17:33:57 +01:00
telemetry_audit_reads.go
Replace the two non-discriminating audit telemetry fields and guard the class
2026-08-05 17:33:57 +01:00
telemetry_licensed_features_test.go
Replace the two non-discriminating audit telemetry fields and guard the class
2026-08-05 17:33:57 +01:00
telemetry_licensed_features.go
Replace the two non-discriminating audit telemetry fields and guard the class
2026-08-05 17:33:57 +01:00
telemetry_pulse_intelligence_patrol_test.go
Add schema v17 Patrol provider, cost, autonomy, and outcome telemetry
2026-09-02 11:09:25 +01:00
telemetry_pulse_intelligence_test.go
feat(patrol): reconcile actionable findings on activation
2026-08-27 19:44:02 +01:00
telemetry_pulse_intelligence.go
Report update channel and last update check outcome in telemetry (#2285)
2026-09-27 23:50:23 +01:00
telemetry_workload_history_test.go
Add workload history discovery lens
2026-08-30 13:49:58 +01:00
telemetry_workload_history.go
Add workload history discovery lens
2026-08-30 13:49:58 +01:00
tenant_legacy_token_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
tenant_org_binding_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
tenant_org_cookie_test.go
Reject org cookie for non-member
2026-02-04 14:48:03 +00:00
tenant_org_header_precedence_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
tenant_org_ids_binding_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
tenant_token_over_user_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
tenant_user_membership_test.go
Use strict org principals for runtime access
2026-05-04 23:16:15 +01:00
test_helpers_mt_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
test_log_capture_test.go
Stabilize API test log capture
2026-08-31 19:47:01 +01:00
test_remediation_engine_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
test_store_reset_helpers_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
trial_handlers_test.go
Retire self-hosted trial activation callback
2026-04-28 16:36:09 +01:00
truenas_app_action_provider.go
feat(ai): add canonical truenas app control
2026-03-29 19:50:31 +01:00
truenas_app_config_provider.go
feat(ai): add canonical truenas app config reads
2026-03-29 20:36:43 +01:00
truenas_app_providers_branchcov0722pm_test.go
Cover SSO conversion, TrueNAS app mapping and config store round-trips
2026-07-22 16:18:00 +01:00
truenas_app_read_provider.go
feat(ai): add canonical truenas app log reads
2026-03-29 20:13:39 +01:00
truenas_handlers_test.go
Keep platform polling independent of organisation metadata
2026-10-04 09:45:21 +01:00
truenas_handlers.go
Separate TrueNAS probes from runtime poll and readiness evidence
2026-10-03 23:58:11 +01:00
truenas_poll_evidence_test.go
Separate TrueNAS probes from runtime poll and readiness evidence
2026-10-03 23:58:11 +01:00
types_additional_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
types.go
Extract chart and resource query services
2026-08-21 18:36:21 +01:00
unified_agent_config_binding_router_test.go
Diagnostics: handle blank-name instances; add report-token router test
2026-06-04 11:49:17 +01:00
unified_agent_config_scope_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
unified_agent_download_test.go
Prepare v6.0.0 release candidate
2026-06-04 14:07:14 +01:00
unified_agent_handlers_additional_test.go
Fix Proxmox physical disk inventory continuity
2026-07-23 22:05:09 +01:00
unified_agent_handlers_test.go
Audit agent config fetches only when they carry new information
2026-09-24 10:42:33 +01:00
unified_agent_lookup_test.go
Allow legacy report-only agent tokens to fetch their own config (#1254)
2026-06-04 08:39:31 +01:00
unified_agent_more_test.go
Separate agent remediation runtime
2026-08-29 23:48:28 +01:00
unified_agent_offline_preflight_test.go
test(agent): exercise offline FreeBSD preflight through local downloads
2026-09-22 18:42:51 +01:00
unified_agent_test.go
Serve signed Windows agents from canonical assets
2026-09-01 16:16:56 +01:00
unified_agent_upgrade_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
unified_agent_zip_branchcov0723am_test.go
Cover telemetry classifiers, lifecycle records and install snapshot counts
2026-07-23 07:15:13 +01:00
unified_agent.go
Serve signed Windows agents from canonical assets
2026-09-01 16:16:56 +01:00
update_detection_test.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
update_detection.go
Harden unified agent update preflight
2026-06-02 23:54:48 +01:00
update_readiness_test.go
Extract configuration API runtime package
2026-08-21 14:56:07 +01:00
update_readiness.go
Keep integration-monitored machines out of Agent Doctor and surface workload-only agents
2026-07-21 21:24:15 +01:00
updates_test.go
Keep the update progress modal moving when the update stream goes quiet
2026-09-30 23:39:35 +01:00
updates.go
Keep the update progress modal moving when the update stream goes quiet
2026-09-30 23:39:35 +01:00
user_limit_enforcement.go
feat: Pulse v6 release
2026-03-18 16:06:30 +00:00
user_limit_isolation_test.go
Require accepted org invitations and stable runtime capabilities
2026-04-22 03:06:22 +01:00
vmware_handlers_test.go
test(vmware): align API probe expectations
2026-09-13 10:59:02 +01:00
vmware_handlers.go
Fix VMware connection test degradation handling
2026-07-23 22:06:57 +01:00
websocket_isolation_test.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
websocket_origin_security_test.go
Require explicit websocket origin continuity
2026-04-22 04:46:13 +01:00

README.md

Internal API Package

This directory contains the API server implementation for Pulse.

Important Note About frontend-modern/

The frontend-modern/ subdirectory that appears here is:

  • AUTO-GENERATED during builds
  • NOT the source code - just a build artifact
  • IN .gitignore - never committed
  • REQUIRED BY GO - The embed directive needs it here

Frontend Development Location

👉 Edit frontend files at: ${PULSE_REPOS_DIR}/pulse/frontend-modern/src/

Why This Structure?

Go's //go:embed directive has limitations:

  1. Cannot use ../ paths to access parent directories
  2. Cannot follow symbolic links
  3. Must embed files within the Go module

This is a known Go limitation and our structure works around it.

Reference in New Issue View Git Blame Copy Permalink