gsadmin/pulse
1
0
Fork 0
mirror of https://github.com/rcourtman/Pulse.git synced 2026-10-26 13:39:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
751dfcce0ac604bae10e81afdd1e128744d7a1c8
pulse/scripts
T
History
rcourtman e78f17979e Read action token file modes portably on macOS 
The agent installer checked an --action-token-file's permissions with
GNU-only stat -c. BSD stat on macOS rejects it, the mode read came back
empty, and every action token file was refused as group- or
world-accessible. It now uses the existing portable_path_mode helper,
which the collector token path already relies on.

The ingress test runs both token options through the real installer
functions and the compiled token reader; on the macOS runner it is the
proof for this fix.

Contract-Neutral: portability fix restoring the documented --action-token-file option; no contract change
2026-10-23 13:03:55 +01:00
..
dev
…
eval
…
installtests
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
intelligence_lab
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
lib
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
lint-fixer
…
memory
ci: compare memory with the latest stable release every day
2026-10-21 14:16:15 +01:00
release_control
Retire the Assistant chat window; alert Investigate runs Patrol
2026-10-23 00:15:04 +01:00
tests
Match the Mail Gateway window check to the shared drawer
2026-10-22 17:00:53 +01:00
.go-version
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
audit-private-boundary.sh
Ratchet private boundary audit debt
2026-07-29 20:09:23 +01:00
backfill-release-assets.sh
…
BENCHMARK_EVIDENCE.md
fix: measure workload chart generation in performance guards
2026-10-18 17:32:34 +01:00
build-release-binaries.sh
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
build-release.sh
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
build-secure-runtime-qualification.sh
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
bundle.manifest
…
bundle.sh
…
capture-release-note-visuals.sh
Improve release highlights and reusable screenshot evidence
2026-10-15 11:42:25 +01:00
check_docs_mirror.py
Keep the docs guard out of the branch-tip link scan
2026-09-01 12:17:00 +01:00
check_notification_runtime.py
Respect deployment telemetry lock in notification CI journey
2026-10-11 05:18:21 +01:00
check_public_docs.py
Align TrueNAS guidance with JSON-RPC runtime
2026-09-01 18:32:39 +01:00
check_telemetry_schema_parity.py
Harden Patrol activation telemetry
2026-08-28 11:35:41 +01:00
check_workflow_trust.py
fix(ci): qualify the Actions patch and minor refresh
2026-10-14 17:38:18 +01:00
check-alert-card-footer.cjs
fix(alerts): align the Started run with the alert-card footer (#2119)
2026-09-21 14:31:27 +01:00
check-alert-diagnosis-ordering.mjs
fix(alerts): ignore superseded delivery diagnosis responses
2026-09-06 17:17:36 +01:00
check-alert-dispatch-copy.mjs
fix(alerts): distinguish dispatch from notification receipt
2026-09-06 15:12:07 +01:00
check-backup-app-refresh.mjs
Repair the remaining drawer and storage history browser proofs
2026-10-14 11:27:57 +01:00
check-backup-browser-polling.mjs
Preserve backup coverage row focus across polling snapshots
2026-09-05 01:33:47 +01:00
check-bench-regression.sh
Pair benchmark evidence on one runner
2026-09-04 13:13:04 +01:00
check-browser-lifecycle-control.mjs
test(web): retain failing browser suspension control diagnostic
2026-09-08 07:00:33 +01:00
check-browser-single-session-control.mjs
test(web): cover production incident refresh after tab suspension
2026-09-08 08:42:45 +01:00
check-clone-identity-guidance.cjs
Make cloned-host identity guidance safe and persistent
2026-09-30 02:29:54 +01:00
check-community-troubleshooting.cjs
Run troubleshooting browser proof with frontend styling
2026-09-30 00:33:11 +01:00
check-delivery-health-ordering.mjs
Merge current main and verify diagnostic workflows
2026-09-06 04:22:09 +01:00
check-delivery-log-ordering.mjs
fix(web): retain current delivery evidence across overlapping reads
2026-09-06 10:19:46 +01:00
check-delivery-server-error-copy.mjs
fix(web): identify notification destination server failures
2026-09-08 12:54:21 +01:00
check-docs-fragment-navigation.cjs
Document maintenance API and repair documentation section links
2026-09-21 07:23:24 +01:00
check-drawer-tab-retention.cjs
Chart history on Overview in Docker host and resource drawers
2026-10-13 23:30:46 +01:00
check-frontend-serialization.mjs
Reject stale Solid serialization overrides before frontend installation
2026-10-14 01:53:13 +01:00
check-github-release-immutability.sh
Gate release publication on immutable setting
2026-08-29 22:41:04 +01:00
check-host-disk-patrol.mjs
fix(patrol): resolve disk alerts through canonical resource owners
2026-10-08 17:22:29 +01:00
check-incident-request-ownership.mjs
fix(alerts): discard pending history reads after clearing
2026-09-10 06:44:37 +01:00
check-navigation-admission-race.mjs
test(web): qualify superseded admission and diagnose narrow table access
2026-09-05 17:57:42 +01:00
check-overview-health-refresh.mjs
Merge current main and verify diagnostic workflows
2026-09-06 04:22:09 +01:00
check-patrol-assistant-journey.mjs
Stop sending the ignored autonomous_mode chat field
2026-10-08 00:17:08 +01:00
check-pbs-host-history-correlation.cjs
Repair the PBS drawer browser fixture and its two proofs
2026-10-14 09:02:31 +01:00
check-recovery-feedback.mjs
test(web): verify recovery preserves real settings-parent edits
2026-09-07 16:39:11 +01:00
check-thresholds-windowed-list.cjs
fix(alerts): keep grouped-list window estimate off the header (#2130)
2026-09-20 23:50:19 +01:00
check-update-access-copy.mjs
fix(web): avoid prescribing permissions from update access failures
2026-09-08 21:59:40 +01:00
check-webhook-test-save-parity.mjs
fix(web): align webhook test custom fields with saved configuration
2026-09-08 23:29:31 +01:00
check-workflow-dispatch-inputs.py
…
ci_browser_proof_only.py
Avoid runtime CI fan-out for browser-receipt-only tree changes
2026-10-14 04:13:00 +01:00
clean-mock-alerts.sh
…
cleanup.sh
…
cloud-backup.sh
…
collect_e2e_container_logs.py
Retain E2E container diagnostics without flooding Actions logs
2026-10-10 19:00:17 +01:00
com.pulse.hot-dev.plist.template
…
compile-go-tests.sh
Reject incompatible Go test fixtures before backend CI fan-out
2026-10-06 19:54:22 +01:00
conformance-smoke.sh
…
demo_public_browser_smoke.cjs
Use semantic demo connection status
2026-08-29 04:02:06 +01:00
dependency_advisory_watch.py
Audit main without directing dependency repairs to retired lines
2026-10-10 23:43:37 +01:00
dev-check.sh
Switch script-reference integrity test from rg to git grep for portable CI
2026-05-12 00:30:43 +01:00
dev-deploy-agent.sh
…
dev-launchd-setup.sh
fix(dev): preserve executable launchd wrapper mode
2026-08-27 17:54:10 +01:00
dev-launchd-wrapper.sh
…
dev-prepush.sh
Keep the audit process owner in strict delivery checks
2026-10-13 05:37:14 +01:00
diagnose-root-pair.py
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
diagnose-uuid-layout.py
ci: add fixed UUID layout diagnostic without release gate waiver
2026-09-06 22:11:03 +01:00
docker-build.sh
…
e2e_test_images.py
Build Core E2E test images once per exact workflow run
2026-10-09 22:25:34 +01:00
ensure_test_assets.sh
…
exclusive-lock.mjs
…
generate-pulse-intelligence-docs.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
generate-release-notes.sh
Keep release visuals near highlights and collapse upgrade guidance
2026-10-15 13:52:44 +01:00
generate-self-hosted-feature-catalog.go
Format generated self-hosted feature catalog with prettier in the generator
2026-07-27 11:58:05 +01:00
generate-types.go
Retire the Assistant chat window; alert Investigate runs Patrol
2026-10-23 00:15:04 +01:00
go-mod-download.sh
Keep a kill backstop on the bounded module download
2026-10-07 15:46:01 +01:00
go-test-compile-required.sh
Reject incompatible Go test fixtures before backend CI fan-out
2026-10-06 19:54:22 +01:00
history-clear-browser-fixture.mjs
fix(alerts): discard pending history reads after clearing
2026-09-10 06:44:37 +01:00
hot-dev-bg.sh
Point dev:verify at the Proxmox backups layout spec
2026-10-08 09:56:53 +01:00
hot-dev.sh
Keep hot-dev build temp on the configured Go temp volume
2026-08-31 22:11:38 +01:00
incident-browser-checks.md
test(alerts): distinguish staged recovery edits from saved intent
2026-09-08 10:32:49 +01:00
incident-browser-fixture.mjs
test(web): verify incident convergence after native tab suspension
2026-09-08 08:23:44 +01:00
incident-convergence-server.mjs
test(web): verify incident convergence after native tab suspension
2026-09-08 08:23:44 +01:00
install-container-agent.sh
Restore Docker agents to Hosts inventory
2026-07-23 22:06:56 +01:00
install-docker.sh
Prepare v6.6.0-rc.6
2026-10-22 03:15:00 +01:00
install-go-toolchain.sh
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
install-mcp.ps1
Fail closed when installing MCP binaries
2026-08-30 05:11:55 +01:00
install-mcp.sh
fix(installer): verify checksums on FreeBSD without coreutils
2026-09-20 02:43:57 +01:00
install.ps1
Refuse Windows agent mutation until service removal is confirmed
2026-10-08 06:09:08 +01:00
install.sh
Read action token file modes portably on macOS
2026-10-23 13:03:55 +01:00
npm_audit_process.py
Own audit subprocess cleanup through completion and cancellation
2026-10-13 05:34:03 +01:00
npm-audit-retry.sh
Preserve literal Bash audit invocation inside the owned group
2026-10-13 05:39:13 +01:00
package-helm-chart.sh
…
patrol_e2e_matrix.sh
…
playwright-apt.conf
Bound Playwright dependency setup before E2E execution
2026-10-08 09:47:17 +01:00
prepare-release-container-context.sh
Keep Windows agent update signatures addressable
2026-09-01 16:11:04 +01:00
pulse-auto-update.sh
Refuse incomplete updater manager observations
2026-10-14 11:58:09 +01:00
readme_entrypoints_test.py
Make getting-started installs fail closed and plans current
2026-10-02 02:53:31 +01:00
release_asset_common.sh
Keep Windows agent update signatures addressable
2026-09-01 16:11:04 +01:00
release_browser_packet.py
fix(release): admit real archive sizes and enforce workflow trust
2026-10-04 03:00:30 +01:00
release_browser_tailnet.py
Bind release browser qualification to the narrow CI identity
2026-10-04 04:57:17 +01:00
release_build_targets.sh
Separate agent remediation runtime
2026-08-29 23:48:28 +01:00
release_candidate_manifest.py
Enforce exact release visual assets
2026-08-29 02:59:47 +01:00
release_ldflags.sh
…
release_lifecycle_rehearsal_versions.py
Add shadow release lifecycle rehearsal workflow
2026-10-01 09:11:15 +01:00
release_lifecycle_rehearsal.sh
Stop release browser access at every authenticated refusal
2026-10-04 03:44:51 +01:00
release_update_key.go
Wire secure runtime RC qualification
2026-08-31 01:50:48 +01:00
release-go-test-events.py
fix(release): mark store-history SLO measurement windows
2026-09-09 01:34:22 +01:00
release-preflight-worker.sh
fix(release): give the rehearsal backend an explicit package timeout
2026-09-19 21:24:38 +01:00
release-resource-snapshot.py
chore(release): retain bounded backend resource evidence
2026-09-07 16:47:55 +01:00
remerge-parallel.sh
…
render_installers.go
…
repo-boundary-paid-surface.allowlist
Declare the shared reporting telemetry adapter boundary
2026-10-17 21:24:54 +01:00
repo-boundary-private-implementation.baseline
Ratchet private boundary audit debt
2026-07-29 20:09:23 +01:00
repo-boundary-regression.py
Declare the shared reporting telemetry adapter boundary
2026-10-17 21:24:54 +01:00
require-safe-gh-attestation.sh
Bind release activation to trusted provenance
2026-08-30 01:51:58 +01:00
run_cloud_public_signup_smoke.sh
…
run_demo_public_browser_smoke.sh
…
run_hosted_staging_smoke.sh
…
run-ci-benchmarks.sh
Keep paired PR benchmarks inside their time budget
2026-10-05 22:39:51 +01:00
run-native-pve-action-qualification.sh
Add native PVE action qualification harness
2026-09-01 10:43:35 +01:00
run-release-backend-tests.sh
Warm the pulse-agent build before the pinned release API shards
2026-10-12 16:28:14 +01:00
run-release-preflight.sh
Accelerate release qualification with exact-SHA worker
2026-08-12 17:07:12 +01:00
run-secure-runtime-rootful-qualification.sh
Tighten rootful runtime cleanup proof
2026-09-02 02:52:13 +01:00
run-secure-runtime-rootless-qualification.sh
Give rootless qualification hosts unique identities
2026-09-01 21:18:24 +01:00
scan-ci-secrets.sh
Scan delivered source history instead of an empty merge log
2026-10-14 05:15:15 +01:00
secure-runtime-rootful-runtime.sh
Tighten rootful runtime cleanup proof
2026-09-02 02:52:13 +01:00
security_review_auth_credentials.sh
Make security review baseline fail closed
2026-09-01 01:02:17 +01:00
session-handoff.sh
…
shard_go_tests.py
Harden release backend cold-run qualification
2026-08-28 03:36:33 +01:00
standalone.manifest
Require immutable attested releases
2026-08-29 19:59:04 +01:00
sync_chart_release_metadata.py
…
sync-production-config.sh
…
telemetry_adoption_report.py
Separate reporting generation days from successful repeat periods
2026-10-17 21:51:08 +01:00
test-vm-disk.sh
Bound the complete passive VM preflight read
2026-10-12 00:10:22 +01:00
toggle-mock.sh
Scale large-estate workload and Proxmox demo performance
2026-08-23 15:09:32 +01:00
trigger-release-dry-run.sh
Soak release candidates for 24 hours before stable
2026-09-28 16:42:46 +01:00
trigger-release.sh
Improve release highlights and reusable screenshot evidence
2026-10-15 11:42:25 +01:00
trigger-stable-patch.sh
Bind release dispatches to the admitted commit
2026-09-02 02:28:14 +01:00
uninstall-sensor-proxy.sh
Stop legacy sensor cleanup on unconfirmed service or container state
2026-10-07 22:07:07 +01:00
validate-published-release.sh
Authenticate every published installer
2026-08-31 04:55:15 +01:00
validate-release.sh
Keep Windows agent update signatures addressable
2026-09-01 16:11:04 +01:00
verify-github-release-integrity.sh
fix(release): reject ambiguous activation asset inventories
2026-09-05 15:43:23 +01:00
verify-release-container-images.sh
Retry registry reads when verifying release container images
2026-10-12 12:44:29 +01:00
verify-release-helm-chart.sh
Recover Helm Pages from attested OCI charts
2026-09-04 01:04:30 +01:00
verify-stable-container-aliases.sh
Continuously verify stable container aliases
2026-08-30 13:55:41 +01:00
write_github_output.py
Close runner output alias bypasses
2026-09-01 16:54:07 +01:00