gsadmin/pulse
1
0
Fork 0
mirror of https://github.com/rcourtman/Pulse.git synced 2026-11-02 08:41:03 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
573dbbc389f01782f294cbaea9ec97aa01d9b392
pulse/scripts
T
History
pulse-triage[bot] c3c9cacd06 Fix cleanup fixture confinement through directory aliases (#3364) 
Both macOS native jobs on 2d226d4f fail the key-read-failure check
because its staging guard compares the logical temp path with the
writer's physical target. Canonicalise the private fixture root before
building the guard, without widening the allowed cleanup path, and
exercise both direct and aliased roots. All key-preservation,
nonzero-result, no-user-removal and staging-cleanup assertions remain.

Contract-Neutral: Test-fixture path normalisation only; no runtime
behaviour or subsystem contract change.

---
Fleet candidate `20261026T220018Z-delivery-trust` from the
`delivery-trust` lane. Reviewed tip
`81575dd1f944bbecfacdd139c8728ab38b7c905e` on `main`.

[How Pulse handles
triage](https://github.com/rcourtman/Pulse/blob/main/docs/AI_TRANSPARENCY.md)
2026-10-26 23:14:54 +00:00
..
dev
…
eval
…
installtests
Fix cleanup fixture confinement through directory aliases
2026-10-26 22:16:29 +00:00
intelligence_lab
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
lib
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
lint-fixer
…
memory
ci: compare memory with the latest stable release every day
2026-10-21 14:16:15 +01:00
release_control
Confine release credentials to the release environment (#3303)
2026-10-26 14:22:52 +00:00
tests
Align agent auth documentation checks with route authority
2026-10-26 22:25:11 +00:00
.go-version
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
audit-private-boundary.sh
Ratchet private boundary audit debt
2026-07-29 20:09:23 +01:00
backfill-release-assets.sh
…
BENCHMARK_EVIDENCE.md
fix: measure workload chart generation in performance guards
2026-10-18 17:32:34 +01:00
browser_os_packages.py
Cache browser OS packages so slow apt mirrors stop E2E
2026-10-23 18:02:39 +01:00
build-pve-backup-reconciliation.mjs
Retain PVE recovery history across incomplete backup scans
2026-10-23 20:46:39 +01:00
build-release-binaries.sh
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
build-release.sh
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
build-secure-runtime-qualification.sh
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
bundle.manifest
…
bundle.sh
…
capture-release-note-visuals.sh
Improve release highlights and reusable screenshot evidence
2026-10-15 11:42:25 +01:00
check_docs_mirror.py
Keep the docs guard out of the branch-tip link scan
2026-09-01 12:17:00 +01:00
check_notification_runtime.py
Respect deployment telemetry lock in notification CI journey
2026-10-11 05:18:21 +01:00
check_public_docs.py
Align TrueNAS guidance with JSON-RPC runtime
2026-09-01 18:32:39 +01:00
check_telemetry_schema_parity.py
Harden Patrol activation telemetry
2026-08-28 11:35:41 +01:00
check_workflow_trust.py
Confine release credentials to the release environment
2026-10-26 00:30:23 +00:00
check-alert-diagnosis-ordering.mjs
fix(alerts): ignore superseded delivery diagnosis responses
2026-09-06 17:17:36 +01:00
check-alert-dispatch-copy.mjs
fix(alerts): distinguish dispatch from notification receipt
2026-09-06 15:12:07 +01:00
check-backup-app-refresh.mjs
Repair the remaining drawer and storage history browser proofs
2026-10-14 11:27:57 +01:00
check-backup-browser-polling.mjs
Preserve backup coverage row focus across polling snapshots
2026-09-05 01:33:47 +01:00
check-bench-regression.sh
Interpret byte-throughput benchmark changes in the right direction
2026-10-25 11:25:52 +00:00
check-browser-lifecycle-control.mjs
test(web): retain failing browser suspension control diagnostic
2026-09-08 07:00:33 +01:00
check-browser-single-session-control.mjs
test(web): cover production incident refresh after tab suspension
2026-09-08 08:42:45 +01:00
check-delivery-health-ordering.mjs
Merge current main and verify diagnostic workflows
2026-09-06 04:22:09 +01:00
check-delivery-log-ordering.mjs
fix(web): retain current delivery evidence across overlapping reads
2026-09-06 10:19:46 +01:00
check-delivery-server-error-copy.mjs
fix(web): identify notification destination server failures
2026-09-08 12:54:21 +01:00
check-docs-fragment-navigation.cjs
Document maintenance API and repair documentation section links
2026-09-21 07:23:24 +01:00
check-drawer-tab-retention.cjs
Chart history on Overview in Docker host and resource drawers
2026-10-13 23:30:46 +01:00
check-frontend-serialization.mjs
Reject stale Solid serialization overrides before frontend installation
2026-10-14 01:53:13 +01:00
check-github-release-immutability.sh
Gate release publication on immutable setting
2026-08-29 22:41:04 +01:00
check-host-disk-patrol.mjs
fix(patrol): resolve disk alerts through canonical resource owners
2026-10-08 17:22:29 +01:00
check-incident-request-ownership.mjs
fix(alerts): discard pending history reads after clearing
2026-09-10 06:44:37 +01:00
check-navigation-admission-race.mjs
test(web): qualify superseded admission and diagnose narrow table access
2026-09-05 17:57:42 +01:00
check-overview-health-refresh.mjs
Merge current main and verify diagnostic workflows
2026-09-06 04:22:09 +01:00
check-patrol-assistant-journey.mjs
Stop sending the ignored autonomous_mode chat field
2026-10-08 00:17:08 +01:00
check-pbs-host-history-correlation.cjs
Repair the PBS drawer browser fixture and its two proofs
2026-10-14 09:02:31 +01:00
check-pve-backup-reconciliation.cjs
Match the full workload identity in the PVE browser journey
2026-10-23 21:03:01 +01:00
check-recovery-feedback.mjs
test(web): verify recovery preserves real settings-parent edits
2026-09-07 16:39:11 +01:00
check-update-access-copy.mjs
fix(web): avoid prescribing permissions from update access failures
2026-09-08 21:59:40 +01:00
check-webhook-test-save-parity.mjs
fix(web): align webhook test custom fields with saved configuration
2026-09-08 23:29:31 +01:00
check-workflow-dispatch-inputs.py
…
ci_browser_proof_only.py
Avoid runtime CI fan-out for browser-receipt-only tree changes
2026-10-14 04:13:00 +01:00
ci_triage_only.py
Keep isolated issue-triage changes on their dedicated CI path
2026-10-25 09:04:08 +00:00
clean-mock-alerts.sh
…
cleanup.sh
…
cloud-backup.sh
…
collect_e2e_container_logs.py
Retain E2E container diagnostics without flooding Actions logs
2026-10-10 19:00:17 +01:00
com.pulse.hot-dev.plist.template
…
compile-go-tests.sh
Reject incompatible Go test fixtures before backend CI fan-out
2026-10-06 19:54:22 +01:00
conformance-smoke.sh
…
demo_public_browser_smoke.cjs
Prove demo auto sign-in in the public browser smoke
2026-10-24 14:31:21 +01:00
dependency_advisory_watch.py
Audit main without directing dependency repairs to retired lines
2026-10-10 23:43:37 +01:00
dev-check.sh
…
dev-deploy-agent.sh
…
dev-launchd-setup.sh
fix(dev): preserve executable launchd wrapper mode
2026-08-27 17:54:10 +01:00
dev-launchd-wrapper.sh
…
dev-prepush.sh
Fail closed when local pre-push source reads fail
2026-10-25 19:47:30 +00:00
diagnose-root-pair.py
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
diagnose-uuid-layout.py
ci: add fixed UUID layout diagnostic without release gate waiver
2026-09-06 22:11:03 +01:00
docker-build.sh
…
e2e_test_images.py
Build Core E2E test images once per exact workflow run
2026-10-09 22:25:34 +01:00
ensure_test_assets.sh
…
exclusive-lock.mjs
…
generate-pulse-intelligence-docs.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
generate-release-notes.sh
Keep a real change out of the Highlights example
2026-10-24 20:43:52 +01:00
generate-self-hosted-feature-catalog.go
Format generated self-hosted feature catalog with prettier in the generator
2026-07-27 11:58:05 +01:00
generate-types.go
Retire the Assistant chat window; alert Investigate runs Patrol
2026-10-23 00:15:04 +01:00
go-mod-download.sh
Keep a kill backstop on the bounded module download
2026-10-07 15:46:01 +01:00
go-test-compile-required.sh
Reject incompatible Go test fixtures before backend CI fan-out
2026-10-06 19:54:22 +01:00
history-clear-browser-fixture.mjs
fix(alerts): discard pending history reads after clearing
2026-09-10 06:44:37 +01:00
hot-dev-bg.sh
Point dev:verify at the Proxmox backups layout spec
2026-10-08 09:56:53 +01:00
hot-dev.sh
Keep hot-dev build temp on the configured Go temp volume
2026-08-31 22:11:38 +01:00
incident-browser-checks.md
test(alerts): distinguish staged recovery edits from saved intent
2026-09-08 10:32:49 +01:00
incident-browser-fixture.mjs
test(web): verify incident convergence after native tab suspension
2026-09-08 08:23:44 +01:00
incident-convergence-server.mjs
test(web): verify incident convergence after native tab suspension
2026-09-08 08:23:44 +01:00
install-container-agent.sh
Restore Docker agents to Hosts inventory
2026-07-23 22:06:56 +01:00
install-docker.sh
Prepare v6.7.0-beta.1
2026-10-26 11:11:36 +00:00
install-go-toolchain.sh
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
install-mcp.ps1
Fail closed when installing MCP binaries
2026-08-30 05:11:55 +01:00
install-mcp.sh
fix(installer): verify checksums on FreeBSD without coreutils
2026-09-20 02:43:57 +01:00
install.ps1
Refuse Windows agent mutation until service removal is confirmed
2026-10-08 06:09:08 +01:00
install.sh
Keep non-root agent preflight outside saved installer trust
2026-10-26 12:37:01 +00:00
npm_audit_process.py
Own audit subprocess cleanup through completion and cancellation
2026-10-13 05:34:03 +01:00
npm-audit-retry.sh
Preserve literal Bash audit invocation inside the owned group
2026-10-13 05:39:13 +01:00
package-helm-chart.sh
…
patrol_e2e_matrix.sh
…
playwright-apt.conf
Scope browser OS acquisition to the runner's signed Ubuntu sources
2026-10-25 04:00:03 +00:00
prepare-release-container-context.sh
Keep Windows agent update signatures addressable
2026-09-01 16:11:04 +01:00
pulse-auto-update.sh
Refuse incomplete updater manager observations
2026-10-14 11:58:09 +01:00
readme_entrypoints_test.py
Make getting-started installs fail closed and plans current
2026-10-02 02:53:31 +01:00
release_asset_common.sh
Keep Windows agent update signatures addressable
2026-09-01 16:11:04 +01:00
release_browser_packet.py
fix(release): admit real archive sizes and enforce workflow trust
2026-10-04 03:00:30 +01:00
release_browser_tailnet.py
Bind release browser qualification to the narrow CI identity
2026-10-04 04:57:17 +01:00
release_build_targets.sh
Separate agent remediation runtime
2026-08-29 23:48:28 +01:00
release_candidate_manifest.py
Enforce exact release visual assets
2026-08-29 02:59:47 +01:00
release_ldflags.sh
…
release_lifecycle_rehearsal_versions.py
Recover lifecycle discovery from peer stream cancellation
2026-10-26 14:57:25 +00:00
release_lifecycle_rehearsal.sh
Stop release browser access at every authenticated refusal
2026-10-04 03:44:51 +01:00
release_update_key.go
Wire secure runtime RC qualification
2026-08-31 01:50:48 +01:00
release-go-test-events.py
fix(release): mark store-history SLO measurement windows
2026-09-09 01:34:22 +01:00
release-preflight-worker.sh
fix(release): give the rehearsal backend an explicit package timeout
2026-09-19 21:24:38 +01:00
release-resource-snapshot.py
chore(release): retain bounded backend resource evidence
2026-09-07 16:47:55 +01:00
remerge-parallel.sh
…
render_installers.go
…
repo-boundary-paid-surface.allowlist
Declare the shared reporting telemetry adapter boundary
2026-10-17 21:24:54 +01:00
repo-boundary-private-implementation.baseline
Ratchet private boundary audit debt
2026-07-29 20:09:23 +01:00
repo-boundary-regression.py
Declare the shared reporting telemetry adapter boundary
2026-10-17 21:24:54 +01:00
require-safe-gh-attestation.sh
Bind release activation to trusted provenance
2026-08-30 01:51:58 +01:00
run_cloud_public_signup_smoke.sh
…
run_demo_public_browser_smoke.sh
…
run_hosted_staging_smoke.sh
…
run-ci-benchmarks.sh
Keep paired PR benchmarks inside their time budget
2026-10-05 22:39:51 +01:00
run-native-pve-action-qualification.sh
Add native PVE action qualification harness
2026-09-01 10:43:35 +01:00
run-release-backend-tests.sh
Warm the pulse-agent build before the pinned release API shards
2026-10-12 16:28:14 +01:00
run-release-preflight.sh
Accelerate release qualification with exact-SHA worker
2026-08-12 17:07:12 +01:00
run-secure-runtime-rootful-qualification.sh
Tighten rootful runtime cleanup proof
2026-09-02 02:52:13 +01:00
run-secure-runtime-rootless-qualification.sh
Give rootless qualification hosts unique identities
2026-09-01 21:18:24 +01:00
scan-ci-secrets.sh
Scan delivered source history instead of an empty merge log
2026-10-14 05:15:15 +01:00
secure-runtime-rootful-runtime.sh
Tighten rootful runtime cleanup proof
2026-09-02 02:52:13 +01:00
security_review_auth_credentials.sh
Make security review baseline fail closed
2026-09-01 01:02:17 +01:00
select-smoke-test-shard.py
Balance isolated smoke suites with measured scheduling hints
2026-10-26 17:32:06 +00:00
session-handoff.sh
…
shard_go_tests.py
Harden release backend cold-run qualification
2026-08-28 03:36:33 +01:00
standalone.manifest
Require immutable attested releases
2026-08-29 19:59:04 +01:00
sync_chart_release_metadata.py
…
sync-production-config.sh
…
telemetry_adoption_report.py
Separate reporting generation days from successful repeat periods
2026-10-17 21:51:08 +01:00
test-vm-disk.sh
Bound the complete passive VM preflight read
2026-10-12 00:10:22 +01:00
toggle-mock.sh
Scale large-estate workload and Proxmox demo performance
2026-08-23 15:09:32 +01:00
trigger-release-dry-run.sh
Soak release candidates for 24 hours before stable
2026-09-28 16:42:46 +01:00
trigger-release.sh
Improve release highlights and reusable screenshot evidence
2026-10-15 11:42:25 +01:00
trigger-stable-patch.sh
Bind release dispatches to the admitted commit
2026-09-02 02:28:14 +01:00
uninstall-sensor-proxy.sh
Preserve recovery keys when local legacy cleanup cannot complete
2026-10-26 20:52:58 +00:00
validate-published-release.sh
Authenticate every published installer
2026-08-31 04:55:15 +01:00
validate-release.sh
Keep Windows agent update signatures addressable
2026-09-01 16:11:04 +01:00
verify-github-release-integrity.sh
fix(release): reject ambiguous activation asset inventories
2026-09-05 15:43:23 +01:00
verify-release-container-images.sh
Stop container continuity reads at explicit access refusals
2026-10-26 06:00:47 +00:00
verify-release-helm-chart.sh
Recover Helm Pages from attested OCI charts
2026-09-04 01:04:30 +01:00
verify-stable-container-aliases.sh
Stop container continuity reads at explicit access refusals
2026-10-26 06:00:47 +00:00
write_github_output.py
Close runner output alias bypasses
2026-09-01 16:54:07 +01:00