mirror of https://github.com/rcourtman/Pulse.git synced 2026-09-11 14:00:29 +00:00

Files

T

rcourtman a0170d3252 Block silent downgrades on apply and give the updater a sanctioned rollback path

The in-app updater validated download URL and channel but never compared
the target against the running version, so any valid older release asset
URL installed silently while the UI presented it as an update. ApplyUpdate
now rejects targets at or below the running version on both the community
and Pro broker paths before any history entry or download, with an explicit
allowDowngrade opt-in on POST /api/updates/apply for sanctioned cases.

The rollback half already existed but nothing reached it: createBackup
retains three backups, restoreBackup works, and history records BackupPath,
yet no endpoint or UI called restoreBackup. RollbackToBackup restores the
retained backup recorded on a history entry after re-validating the path
against the managed backup roots, shares the update-in-flight slot with
ApplyUpdate, records an Action rollback history entry linked to the source
update, marks that update rolled_back, streams a restoring stage through
the existing status/SSE machinery, and restarts via the exit-for-systemd
path. POST /api/updates/rollback carries it with the same RequireAdmin plus
settings:write gating as apply. Rollback is purely local, so the Pro
edition gate never applies to it.

Settings now has the update history surface that was missing entirely:
nothing called /api/updates/history before. The Updates panel lists recent
updates with a Roll back action on successful entries whose backup is still
retained, behind a confirmation dialog naming the restore version, and the
rollback rides updateStore's shared pending-apply marker for the
post-restart toast. restoreBackup also honors PULSE_INSTALL_DIR now instead
of hardcoding /opt/pulse, matching createBackup.

Contract deltas ride along: api-contracts picks up the rollback transport
and downgrade-conflict semantics, agent-lifecycle and storage-recovery pin
rollback as server self-update plumbing, ai-runtime and cloud-paid pin the
update watcher stage vocabulary as non-assistant non-paid shell chrome, and
frontend-primitives adds UpdateHistorySection as the history/rollback
presentation owner with matching architecture proofs.

2026-07-10 01:46:08 +01:00

access_admin_handlers.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

access_admin_recovery.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

access_control_handlers.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

access_metrics_handlers.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

access_tenant_provider.go

Harden remaining CodeQL security boundaries

2026-07-09 19:46:40 +01:00

action_executor.go

Add governed Proxmox guest lifecycle actions

2026-06-13 14:11:32 +01:00

actions_test.go

Persist permanent action refusal outcomes

2026-05-13 14:04:14 +01:00

actions.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

activity_audit_handlers.go

Harden audit log store failures

2026-05-28 13:44:20 +01:00

admin_bypass_mode_dev.go

Compile out release env guardrail bypasses

2026-04-22 00:05:57 +01:00

admin_bypass_mode_release.go

Compile out release env guardrail bypasses

2026-04-22 00:05:57 +01:00

admin_bypass_release_test.go

Compile out release env guardrail bypasses

2026-04-22 00:05:57 +01:00

admin_bypass_router_test.go

Cover admin bypass routing

2026-02-04 14:24:42 +00:00

agent_activity_telemetry_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

agent_activity_telemetry.go

Fail closed on unknown remediation lock state for autonomous dispatches

2026-07-10 00:14:01 +01:00

agent_capabilities_test.go

feat(mcp): add list_resource_capabilities tool

2026-07-03 17:07:41 +01:00

agent_capabilities.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

agent_command_redaction.go

Harden Patrol and Assistant action boundaries

2026-05-12 12:06:27 +01:00

agent_events_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

agent_events.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

agent_exec_token_binding.go

Make agent command-exec token rejection actionable, not a silent 'Invalid token'

2026-06-09 17:55:09 +01:00

agent_fleet_doctor_test.go

Add agent fleet diagnostics endpoint

2026-06-29 18:03:46 +01:00

agent_fleet_doctor.go

Add agent fleet diagnostics endpoint

2026-06-29 18:03:46 +01:00

agent_handlers_base.go

Bound server state broadcast memory

2026-07-02 23:27:49 +01:00

agent_ingest.go

Fix Proxmox agent install token isolation

2026-07-05 17:21:34 +01:00

agent_install_command_shared_test.go

Clarify Proxmox Docker LXC host setup

2026-06-12 10:46:38 +01:00

agent_install_command_shared.go

Clarify Proxmox Docker LXC host setup

2026-06-12 10:46:38 +01:00

agent_profiles_security_test.go

Require settings:write for agent profiles

2026-02-04 13:43:28 +00:00

agent_profiles_tools_extra_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

agent_profiles_tools_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

agent_profiles_tools.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

agent_resource_context_test.go

Remove uncalled test helpers

2026-07-10 00:29:10 +01:00

agent_resource_context.go

Fail closed on unknown remediation lock state for autonomous dispatches

2026-07-10 00:14:01 +01:00

agent_substrate_e2e_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

agent_version_shared.go

Surface agent version in infrastructure settings

2026-04-22 22:57:08 +01:00

ai_findings_endpoint_test.go

fix(relay): introduce dedicated mobile runtime scope

2026-03-24 23:59:52 +00:00

ai_handler_chat_recovery_test.go

fix(ai): expose recovery-backed storage chat path

2026-03-27 08:39:59 +00:00

ai_handler_recovery_wiring_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

ai_handler_restart_test.go

Fix TestRestart_StartIfServiceMissing expectation for single config load

2026-06-04 11:23:05 +01:00

ai_handler_test.go

Canonicalize assistant provider registry

2026-06-23 19:38:22 +01:00

ai_handler_unified_store_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

ai_handler.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

ai_handlers_concurrency_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

ai_handlers_cost_export_additional_test.go

test: expand backend coverage

2026-01-25 21:08:44 +00:00

ai_handlers_cost_reset_additional_test.go

Clear all errcheck and gofmt violations so make lint gates on real findings

2026-06-09 21:42:21 +01:00

ai_handlers_helpers_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

ai_handlers_intelligence_additional_test.go

Route AI recent changes through canonical intelligence

2026-03-19 04:04:14 +00:00

ai_handlers_investigation_additional_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

ai_handlers_knowledge_test.go

Restore RC backend proof regressions

2026-04-09 20:15:17 +01:00

ai_handlers_more_test.go

Stabilize rc1 mock mode and metrics history

2026-04-11 16:47:37 +01:00

ai_handlers_oauth_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

ai_handlers_patrol_actions_additional_test.go

alerts: offer manual targeted Patrol check from the alert AI button

2026-06-25 08:49:29 +01:00

ai_handlers_patrol_stream_resume_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

ai_handlers_patrol_test.go

Checkpoint current workspace progress

2026-05-15 22:45:48 +01:00

ai_handlers_setters_additional_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

ai_handlers_stream_test.go

Surface Assistant idle progress on SSE streams

2026-06-07 00:06:34 +01:00

ai_handlers_test.go

Fix mobile relay runtime startup

2026-07-01 10:38:57 +01:00

ai_handlers.go

Fix mobile relay runtime startup

2026-07-01 10:38:57 +01:00

ai_hosted_runtime_test.go

Retire self-hosted AI quickstart surfaces

2026-04-28 15:49:18 +01:00

ai_hosted_runtime.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

ai_intelligence_handlers_additional_test.go

fix(release): align api and hostagent rc contracts

2026-03-26 17:12:27 +00:00

ai_intelligence_handlers_data_additional_test.go

Stabilize rc1 mock mode and metrics history

2026-04-11 16:47:37 +01:00

ai_intelligence_handlers_more2_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

ai_intelligence_handlers_more_test.go

Fix missing impact text and incomplete alert type coverage in unified findings

2026-06-27 14:43:09 +01:00

ai_intelligence_handlers_remediation_additional_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

ai_intelligence_handlers_remediation_more_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

ai_intelligence_handlers_test.go

Lighten AI intelligence handler test setup

2026-05-28 15:10:39 +01:00

ai_intelligence_handlers.go

Fix missing impact text and incomplete alert type coverage in unified findings

2026-06-27 14:43:09 +01:00

ai_intelligence_helpers_additional_test.go

test: expand backend coverage

2026-01-25 21:08:44 +00:00

ai_patrol_community_limits_test.go

Clamp Patrol monitor-only autonomy saves

2026-05-08 02:21:31 +01:00

ai_patrol_handlers_test.go

Add resource priority to Patrol queue

2026-06-30 10:37:54 +01:00

ai_resource_types.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

alerts_endpoints_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

alerts_test.go

Add alert delivery diagnosis endpoint

2026-06-29 22:27:01 +01:00

alerts.go

Bound server state broadcast memory

2026-07-02 23:27:49 +01:00

api_foundation_test.go

Merge origin/pulse/v6-release and fix reconciled API regressions

2026-03-28 21:14:54 +00:00

api_token_identity.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

api_token_org_routes_integration_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

api_token_org_scope_integration_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

api_token_owner_identity_integration_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

api_token_scope_transport_integration_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

audit_handlers_test.go

Harden remaining CodeQL security boundaries

2026-07-09 19:46:40 +01:00

audit_reporting_scope_test.go

Add MSP report scheduling and alert rollup

2026-07-07 20:37:18 +01:00

auth_additional_coverage_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

auth_context_middleware_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

auth_context_tenant_test.go

Stabilize rc1 mock mode and metrics history

2026-04-11 16:47:37 +01:00

auth_env_path.go

test(first-session): prove deterministic setup handoff

2026-03-25 00:36:47 +00:00

auth_general_test.go

feat: enhance API router with multi-tenant authorization

2026-01-24 22:42:23 +00:00

auth_helpers_test.go

Close remaining CodeQL allocation and cookie gaps

2026-07-09 20:10:08 +01:00

auth_oidc_refresh_additional_test.go

Fix late issue triage regressions

2026-05-28 14:49:20 +01:00

auth_principal_identity_test.go

Use stable SSO principals

2026-05-04 00:16:31 +01:00

auth_principal_identity.go

Use stable SSO principals

2026-05-04 00:16:31 +01:00

auth_query_token_test.go

fix(security): restrict query-string token auth to WebSocket upgrades only

2026-02-04 09:52:32 +00:00

auth_scope_test.go

fix(relay): introduce dedicated mobile runtime scope

2026-03-24 23:59:52 +00:00

auth.go

Close remaining CodeQL allocation and cookie gaps

2026-07-09 20:10:08 +01:00

authorization_additional_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

authorization_test.go

Harden MSP tenant isolation: scope org-bound tokens away from default org, propagate webhook allowlist to all tenants

2026-06-10 11:37:39 +01:00

authorization.go

Harden MSP tenant isolation: scope org-bound tokens away from default org, propagate webhook allowlist to all tenants

2026-06-10 11:37:39 +01:00

auto_register_test_helpers_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

availability_handlers_test.go

Accept ping alias for availability targets

2026-06-29 22:43:13 +01:00

availability_handlers.go

fix: ensure availability probes report at least 1ms latency on success

2026-06-26 22:52:28 +01:00

billing_state_authz_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

billing_state_handlers_test.go

Remove monitored-system volume caps

2026-05-05 12:59:59 +01:00

bootstrap_token_test.go

Fix bootstrap token logger race

2026-05-03 12:25:56 +01:00

bootstrap_token.go

Fix bootstrap token logger race

2026-05-03 12:25:56 +01:00

charts_test.go

Unify mock chart history timelines

2026-04-01 01:04:06 +01:00

chat_service_adapter_additional_test.go

test(api): comprehensively improve test coverage to Security, Infra, and Features

2026-02-02 18:59:44 +00:00

chat_service_adapter_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

chat_service_adapter.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

cloud_agent_install_command.go

Add provider MSP proof command

2026-06-02 12:45:48 +01:00

cloud_handoff_handlers_test.go

Harden provider MSP tenant isolation

2026-06-02 17:34:10 +01:00

cloud_handoff_handlers.go

Close remaining CodeQL allocation and cookie gaps

2026-07-09 20:10:08 +01:00

cloud_handoff_queryplan_test.go

fix(release): stabilize backend rehearsal blockers

2026-03-26 20:51:29 +00:00

cloud_handoff_test.go

Fail closed on hosted handoff identity

2026-05-04 09:47:54 +01:00

cloud_handoff.go

Close remaining CodeQL allocation and cookie gaps

2026-07-09 20:10:08 +01:00

cloud_org_admin_auth.go

Use strict org principals for runtime access

2026-05-04 23:16:15 +01:00

cloud_org_admin_handlers.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

code_standards_test.go

feat(reporting): availability section computed from the resource state timeline

2026-06-10 17:48:11 +01:00

config_discovery_handlers.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

config_export_import_compat_test.go

Strengthen export and license persistence encryption

2026-04-22 01:03:10 +01:00

config_export_import_handlers.go

Restore RC backend proof regressions

2026-04-09 20:15:17 +01:00

config_handlers_add_test.go

Prepare v6.0.0 release candidate

2026-06-04 14:07:14 +01:00

config_handlers_admin_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

config_handlers_auto_reg_test.go

test: Add edge cases for markAutoRegistered empty inputs

2025-12-01 23:50:10 +00:00

config_handlers_auto_register_test.go

Stabilize Proxmox guest Docker inventory

2026-06-12 12:10:54 +01:00

config_handlers_canonical_auto_register_test.go

Synchronize auto-register reload test

2026-06-03 22:40:30 +01:00

config_handlers_cluster_additional_test.go

Clear all errcheck and gofmt violations so make lint gates on real findings

2026-06-09 21:42:21 +01:00

config_handlers_cluster_test.go

test: Improve coverage for cluster config handler functions

2025-12-01 14:46:00 +00:00

config_handlers_connection_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

config_handlers_delete_test.go

Accept aggregator semantic IDs on node mutation endpoints

2026-04-19 20:42:22 +01:00

config_handlers_discovery_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

config_handlers_helpers_additional_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

config_handlers_host_test.go

style: Apply gofmt to 37 files

2025-12-02 17:21:48 +00:00

config_handlers_pve_user_test.go

Fix setup-script teardown symmetry

2026-04-22 20:26:15 +01:00

config_handlers_sanitize_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

config_handlers_setup_script_test.go

Add Proxmox token smoke diagnostics

2026-07-07 10:10:16 +01:00

config_handlers_setup_token_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

config_handlers_setup_url_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

config_handlers_temperature_ssh_test.go

fix(api): localize shipped security doc refs

2026-03-28 20:35:10 +00:00

config_handlers_transport_guard_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

config_handlers_update_test.go

Fix Proxmox token preservation regressions

2026-07-07 09:49:26 +01:00

config_handlers.go

Fix Proxmox token preservation regressions

2026-07-07 09:49:26 +01:00

config_node_handlers_additional_test.go

Clear all errcheck and gofmt violations so make lint gates on real findings

2026-06-09 21:42:21 +01:00

config_node_handlers.go

Fix Proxmox token preservation regressions

2026-07-07 09:49:26 +01:00

config_profiles_additional_test.go

test: expand backend coverage

2026-01-25 21:08:44 +00:00

config_profiles_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

config_profiles.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

config_setup_handlers_test.go

Adopt the agent's preferred host when re-registering a matched node

2026-07-09 09:56:04 +01:00

config_setup_handlers.go

Adopt the agent's preferred host when re-registering a matched node

2026-07-09 09:56:04 +01:00

config_system_handlers.go

Gate release mock fixtures behind demo entitlement

2026-04-10 12:33:57 +01:00

config_token_helpers_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

connections_aggregator_test.go

Modernize Unified Agent lifecycle and platform support

2026-07-09 23:20:35 +01:00

connections_aggregator.go

Modernize Unified Agent lifecycle and platform support

2026-07-09 23:20:35 +01:00

connections_alerts.go

Fix host metric percent normalization

2026-07-06 10:08:36 +01:00

connections_grouping_test.go

Surface blocked workload inventory sources

2026-05-14 00:22:18 +01:00

connections_grouping.go

Surface blocked workload inventory sources

2026-05-14 00:22:18 +01:00

connections_handlers_continuity_test.go

Wire platform poller state into connections ledger

2026-05-25 18:20:11 +01:00

connections_handlers_mock_test.go

Add ESPHome mock availability fixture

2026-05-06 14:25:36 +01:00

connections_handlers.go

Wire platform poller state into connections ledger

2026-05-25 18:20:11 +01:00

connections_probe_test.go

Harden remaining CodeQL security boundaries

2026-07-09 19:46:40 +01:00

connections_probe.go

Harden remaining CodeQL security boundaries

2026-07-09 19:46:40 +01:00

connections_types.go

Modernize Unified Agent lifecycle and platform support

2026-07-09 23:20:35 +01:00

contract_test.go

Harden first-run security boundaries

2026-07-10 01:28:33 +01:00

cors_policy.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

csrf_store_test.go

Fix concurrent CSRF token refresh

2026-04-26 15:27:10 +01:00

csrf_store.go

Fix concurrent CSRF token refresh

2026-04-26 15:27:10 +01:00

demo_middleware_test.go

Hide public demo admin reads

2026-05-04 09:14:09 +01:00

demo_middleware.go

Hide admin operations from public demo

2026-04-11 17:20:58 +01:00

demo_mode_commercial_test.go

Remove monitored-system volume caps

2026-05-05 12:59:59 +01:00

demo_mode_commercial.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

demo_mode_operations_test.go

Hide public demo admin reads

2026-05-04 09:14:09 +01:00

demo_mode_operations.go

Hide public demo admin reads

2026-05-04 09:14:09 +01:00

deploy_handlers_test.go

Remove monitored-system volume caps

2026-05-05 12:59:59 +01:00

deploy_handlers.go

Harden remaining CodeQL security boundaries

2026-07-09 19:46:40 +01:00

deprecation_metrics.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

diagnostics_additional_test.go

Add Proxmox token smoke diagnostics

2026-07-07 10:10:16 +01:00

diagnostics_contract_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

diagnostics_memory_test.go

Remove internal analytics from diagnostics

2026-04-30 09:23:40 +01:00

diagnostics_test.go

Add Proxmox token smoke diagnostics

2026-07-07 10:10:16 +01:00

diagnostics.go

Add Proxmox token smoke diagnostics

2026-07-07 10:10:16 +01:00

discovery_handlers_info_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

discovery_handlers_test.go

Seed mock Discovery fixtures

2026-05-20 14:54:19 +01:00

discovery_handlers.go

Make workload discovery repair known service results

2026-06-05 09:21:53 +01:00

DO_NOT_EDIT_FRONTEND_HERE.md

Fix embedded frontend dev entrypoint guidance

2026-03-24 16:05:19 +00:00

docker_agents_additional_test.go

Harden unified agent update preflight

2026-06-02 23:54:48 +01:00

docker_agents_error_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

docker_agents_routes_more_test.go

Harden unified agent update preflight

2026-06-02 23:54:48 +01:00

docker_agents_test.go

ADA: Add normalizeCommandStatus helper with unit tests

2025-11-29 17:06:18 +00:00

docker_agents.go

Dedupe internal/api handler families behind shared flows and generics

2026-06-10 10:52:05 +01:00

docker_container_action_executor_test.go

Fix Docker lifecycle command-agent dispatch

2026-06-13 11:50:09 +01:00

docker_container_action_executor.go

Add governed Proxmox guest lifecycle actions

2026-06-13 14:11:32 +01:00

docker_metadata_additional_test.go

Canonicalize Docker Podman management API copy

2026-04-30 09:13:04 +01:00

docker_metadata.go

Dedupe internal/api handler families behind shared flows and generics

2026-06-10 10:52:05 +01:00

docs_links.go

fix(api): localize shipped security doc refs

2026-03-28 20:35:10 +00:00

enterprise_extension_ai_alert_analysis_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_ai_alert_analysis.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_ai_autofix_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_ai_autofix.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_ai_investigation_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_ai_investigation.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_audit_admin_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_audit_admin.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_rbac_admin_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_rbac_admin.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_reporting_admin_test.go

Remove redundant inventory definition route

2026-03-25 23:40:22 +00:00

enterprise_extension_reporting_admin.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_sso_admin_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

enterprise_extension_sso_admin.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

entitlement_handlers_test.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

export_test.go

Fail closed on wildcard trusted proxy configuration

2026-04-22 04:23:23 +01:00

flapping_postmortem_test.go

emit reliability finding when an alert starts flapping

2026-05-13 00:28:24 +01:00

flapping_postmortem.go

emit reliability finding when an alert starts flapping

2026-05-13 00:28:24 +01:00

frontend_embed_sync_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

frontend_embed_test.go

Fix legacy OIDC SSO discovery and CSP nonce

2026-07-07 09:54:14 +01:00

frontend_embed.go

Serve shipped markdown docs as text instead of a forced download

2026-07-08 14:36:55 +01:00

guest_metadata_additional_test.go

test: expand backend coverage

2026-01-25 21:08:44 +00:00

guest_metadata.go

Dedupe internal/api handler families behind shared flows and generics

2026-06-10 10:52:05 +01:00

host_metadata.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

hosted_agent_install_command_test.go

Harden provider MSP tenant isolation

2026-06-02 17:34:10 +01:00

hosted_entitlement_refresh_fallback_test.go

api: refresh hosted entitlement fallback lease

2026-04-05 13:18:30 +01:00

hosted_entitlement_refresh_quickstart_test.go

Retire self-hosted AI quickstart surfaces

2026-04-28 15:49:18 +01:00

hosted_entitlement_refresh.go

Retire self-hosted AI quickstart surfaces

2026-04-28 15:49:18 +01:00

hosted_lifecycle_integration_test.go

Retire self-hosted trial activation callback

2026-04-28 16:36:09 +01:00

hosted_org_admin_handlers_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

hosted_signup_handlers_test.go

Use stable hosted signup owner ids

2026-05-04 09:33:19 +01:00

http_metrics_bench_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

http_metrics_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

http_metrics.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

httptest_ipv4_external_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

httptest_ipv4_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

httptest_ipv6_test.go

Prove IPv6 trusted proxy websocket continuity

2026-04-10 12:54:12 +01:00

identity_invariant_contract_test.go

Fix SSO session display labels

2026-07-07 16:35:07 +01:00

identity_sso_handlers.go

Allow clearing SSO provider restriction fields from Settings

2026-07-07 22:04:46 +01:00

isolation_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

kubernetes_agents_additional_test.go

Remove monitored-system volume caps

2026-05-05 12:59:59 +01:00

kubernetes_agents_error_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

kubernetes_agents.go

Dedupe internal/api handler families behind shared flows and generics

2026-06-10 10:52:05 +01:00

license_expiry_integration_test.go

Move license test signers to testsupport

2026-04-28 19:12:21 +01:00

license_handlers_demo_fixtures_dev_test.go

Stabilize rc1 mock mode and metrics history

2026-04-11 16:47:37 +01:00

license_handlers_demo_fixtures_test.go

Fix demo fixture entitlement recovery

2026-07-04 22:44:43 +01:00

license_handlers_test.go

Clarify missing license public key activation error

2026-06-26 13:00:42 +01:00

license_limits_test_helpers_test.go

Remove monitored-system volume caps

2026-05-05 12:59:59 +01:00

license_user_limit_test.go

Move license test signers to testsupport

2026-04-28 19:12:21 +01:00

licensing_bridge.go

Fail closed on unknown remediation lock state for autonomous dispatches

2026-07-10 00:14:01 +01:00

licensing_handlers_auto_migrate_test.go

Clarify v5 migration recovery states

2026-07-07 21:46:07 +01:00

licensing_handlers_self_hosted_fallback_test.go

Canonicalize self-hosted purchase handoff intent

2026-04-16 10:17:37 +01:00

licensing_handlers.go

Clarify v5 migration recovery states

2026-07-07 21:46:07 +01:00

licensing_legacy_retry_test.go

Clarify v5 migration recovery states

2026-07-07 21:46:07 +01:00

licensing_legacy_retry.go

fix(licensing): surface unreadable persisted v5 licenses and retry failed startup exchanges

2026-06-11 08:44:35 +01:00

load_test.go

test(go): skip perf-budget overruns on contended local hosts, enforce in CI

2026-06-11 13:12:59 +01:00

log_handlers_additional_test.go

test(api): make log stream SSE test deterministic via history replay

2026-06-11 13:10:16 +01:00

log_handlers.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

log_redact_test.go

Test: expand api feature test coverage

2026-02-02 22:02:22 +00:00

log_redact.go

Show AI cost refresh errors and harden log redaction

2025-12-12 11:05:24 +00:00

loopback_request_test.go

Bind recovery and bootstrap auth to direct loopback

2026-04-22 00:39:53 +01:00

magic_link_handlers_test.go

Fail closed on blank magic-link principals

2026-05-04 22:43:35 +01:00

magic_link_handlers.go

Close remaining CodeQL allocation and cookie gaps

2026-07-09 20:10:08 +01:00

magic_link_store_queryplan_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

magic_link_store_sqlite_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

magic_link_store_sqlite.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

magic_link_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

magic_link.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

main_test.go

Isolate internal/api tests from system data dir

2026-04-15 13:40:24 +01:00

maintenance_verification_test.go

Add maintenance verification reports

2026-05-12 21:10:58 +01:00

maintenance_verification_wiring.go

Add maintenance verification reports

2026-05-12 21:10:58 +01:00

maintenance_verification.go

Clear all errcheck and gofmt violations so make lint gates on real findings

2026-06-09 21:42:21 +01:00

metadata_handlers_shared.go

Dedupe internal/api handler families behind shared flows and generics

2026-06-10 10:52:05 +01:00

metadata_handlers_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

metadata_helpers.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

metadata_provider_test.go

test: Add comprehensive test coverage across packages

2026-01-19 19:26:18 +00:00

metadata_provider.go

feat(ai): Add URL discovery tool - AI can find and set resource URLs

2025-12-10 00:29:07 +00:00

metrics_history_fallback_test.go

Clear all errcheck and gofmt violations so make lint gates on real findings

2026-06-09 21:42:21 +01:00

metrics_reporting_handlers.go

Add MSP report scheduling and alert rollup

2026-07-07 20:37:18 +01:00

metrics_reporting_telemetry_test.go

Emit structured telemetry on reporting and summarize invocations

2026-05-10 22:59:23 +01:00

middleware_license.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

middleware_tenant_additional_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

middleware_tenant_authorization_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

middleware_tenant_test.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

middleware_tenant_token_org_fallback_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

middleware_tenant.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

middleware_test.go

Harden API request and bootstrap state handling

2026-04-22 05:42:45 +01:00

middleware.go

Harden API request and bootstrap state handling

2026-04-22 05:42:45 +01:00

mock_state_provider_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

mockmode_external_test.go

Stabilize rc1 mock mode and metrics history

2026-04-11 16:47:37 +01:00

mockmode_internal_test.go

Stabilize rc1 mock mode and metrics history

2026-04-11 16:47:37 +01:00

monitor_wrappers_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

monitor_wrappers.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

monitored_system_ledger_test.go

Clear all errcheck and gofmt violations so make lint gates on real findings

2026-06-09 21:42:21 +01:00

monitored_system_ledger.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

monitored_system_usage_test_helpers_test.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

monitored_system_usage.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

multi_tenant_setters_additional_test.go

Harden multi-tenant GA readiness

2026-04-23 23:04:03 +01:00

multi_tenant_stress_test.go

test(go): skip perf-budget overruns on contended local hosts, enforce in CI

2026-06-11 13:12:59 +01:00

norace_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

notification_queue_additional_test.go

test: expand backend coverage

2026-01-25 21:08:44 +00:00

notification_queue_error_test.go

Test: expand api feature test coverage

2026-02-02 22:02:22 +00:00

notification_queue.go

security: Add request body size limits to remaining API handlers

2025-12-02 16:47:13 +00:00

notifications_scope_test.go

Add scope checks for notification endpoints

2026-02-04 15:10:02 +00:00

notifications_test.go

Pin metadata GET zero-record payload contract

2026-06-10 10:53:57 +01:00

notifications.go

Pin metadata GET zero-record payload contract

2026-06-10 10:53:57 +01:00

oidc_admin_auth_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

oidc_handlers_callback_url_test.go

Fix legacy OIDC SSO discovery and CSP nonce

2026-07-07 09:54:14 +01:00

oidc_handlers_test.go

Retire dashboard landing surface

2026-04-29 16:25:09 +01:00

oidc_handlers.go

Adopt the agent's preferred host when re-registering a matched node

2026-07-09 09:52:59 +01:00

oidc_mapping_test.go

Adopt the agent's preferred host when re-registering a matched node

2026-07-09 09:52:59 +01:00

oidc_service_additional_test.go

Harden API request and bootstrap state handling

2026-04-22 05:42:45 +01:00

oidc_service_test.go

Harden outbound SSO fetch boundaries

2026-04-01 16:36:44 +01:00

oidc_service.go

Harden API request and bootstrap state handling

2026-04-22 05:42:45 +01:00

oidc_token_auth_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

onboarding_handlers_test.go

Fix mobile onboarding URL handoff sanitization

2026-07-07 15:12:59 +01:00

onboarding_handlers.go

Fix mobile onboarding URL handoff sanitization

2026-07-07 15:12:59 +01:00

org_handlers_test.go

Add Kubernetes RBAC inventory to the agent + canonical + UI

2026-05-25 09:25:03 +01:00

org_handlers.go

Add Kubernetes RBAC inventory to the agent + canonical + UI

2026-05-25 09:25:03 +01:00

org_lifecycle_handlers_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

org_lifecycle_handlers.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

org_validation_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

payments_webhook_handlers.go

Remove monitored-system volume caps

2026-05-05 12:59:59 +01:00

pbs_backups_test.go

Fix Proxmox PBS backup artifact surface

2026-05-25 21:47:12 +01:00

pbs_backups.go

Fix Proxmox PBS backup artifact surface

2026-05-25 21:47:12 +01:00

persistent_auth_stores_test.go

Bind recovery and bootstrap auth to direct loopback

2026-04-22 00:39:53 +01:00

platform_connection_shared.go

Dedupe internal/api handler families behind shared flows and generics

2026-06-10 10:52:05 +01:00

platform_mock_connections.go

Classify agentless machine availability targets

2026-05-25 21:38:43 +01:00

pmg_test.go

Stabilize dev runtime and complete PMG read-state migration

2026-05-21 15:15:23 +01:00

pmg.go

Stabilize dev runtime and complete PMG read-state migration

2026-05-21 15:15:23 +01:00

profile_suggestions_handlers_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

profile_suggestions_test.go

test: Add comprehensive test coverage across packages

2026-01-19 19:26:18 +00:00

profile_suggestions.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

proxmox_guest_action_executor_test.go

Add governed Proxmox guest lifecycle actions

2026-06-13 14:11:32 +01:00

proxmox_guest_action_executor.go

Add governed Proxmox guest lifecycle actions

2026-06-13 14:11:32 +01:00

proxy_admin_gating_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

proxy_token_admin_conflict_test.go

Deny proxy non-admin despite token

2026-02-04 14:35:08 +00:00

public_signup_handlers.go

Use stable hosted signup owner ids

2026-05-04 09:33:19 +01:00

purchase_return_redemptions_test.go

Persist self-hosted purchase redemption records

2026-04-08 20:42:36 +01:00

purchase_return_redemptions.go

Dedupe internal/api handler families behind shared flows and generics

2026-06-10 10:52:05 +01:00

pve_backups.go

proxmox(replication+backups): bespoke tables backed by new read-only endpoints

2026-05-16 13:57:53 +01:00

race_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

rate_limit_config_test.go

fix(release): stabilize backend rehearsal blockers

2026-03-26 20:51:29 +00:00

rate_limit_config.go

fix(release): stabilize backend rehearsal blockers

2026-03-26 20:51:29 +00:00

rate_limit_integration_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

ratelimit_tenant_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

ratelimit_tenant.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

ratelimit_test.go

Make rate limiter sliding-window test deterministic

2026-06-03 23:14:25 +01:00

ratelimit.go

fix(trial): align retry-after and hosted signup flows

2026-03-27 12:04:44 +00:00

rbac_admin_handlers_test.go

Bind recovery and bootstrap auth to direct loopback

2026-04-22 00:39:53 +01:00

rbac_admin_recovery_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

rbac_handlers_additional_test.go

test(api): comprehensively improve test coverage to Security, Infra, and Features

2026-02-02 18:59:44 +00:00

rbac_handlers_more_test.go

test: expand api handler coverage

2026-02-02 23:01:29 +00:00

rbac_handlers_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

rbac_isolation_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

rbac_lifecycle_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

rbac_metrics_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

rbac_reporting_auth_test.go

Add MSP report scheduling and alert rollup

2026-07-07 20:37:18 +01:00

rbac_tenant_provider_bench_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

rbac_tenant_provider_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

rbac_test.go

Fix API auth failure handling

2026-04-26 17:26:16 +01:00

README.md

chore: Mac-compatible dev scripts

2026-01-22 00:30:15 +00:00

recovery_handlers_test.go

Clear all errcheck and gofmt violations so make lint gates on real findings

2026-06-09 21:42:21 +01:00

recovery_handlers.go

Dedupe internal/api handler families behind shared flows and generics

2026-06-10 10:52:05 +01:00

recovery_proxy_bypass_test.go

Reject recovery via untrusted XFF

2026-02-04 15:01:09 +00:00

recovery_tokens_test.go

Bind recovery and bootstrap auth to direct loopback

2026-04-22 00:39:53 +01:00

recovery_tokens.go

Fix RC3 backend release blockers

2026-05-01 21:36:28 +01:00

relay_hosted_runtime_test.go

Fix hosted relay onboarding test setup

2026-07-02 22:34:37 +01:00

relay_hosted_runtime.go

Fix mobile relay runtime startup

2026-07-01 10:38:57 +01:00

relay_mobile_capability_test.go

Add Assistant session rename

2026-06-06 18:32:21 +01:00

relay_mobile_capability.go

Add Assistant session rename

2026-06-06 18:32:21 +01:00

relay_sso_license_gating_test.go

Gate relay mobile tokens behind Relay license

2026-04-30 12:53:29 +01:00

release_demo_fixtures_dev.go

Stabilize rc1 mock mode and metrics history

2026-04-11 16:47:37 +01:00

release_demo_fixtures_release.go

Stabilize rc1 mock mode and metrics history

2026-04-11 16:47:37 +01:00

replication.go

proxmox(replication+backups): bespoke tables backed by new read-only endpoints

2026-05-16 13:57:53 +01:00

report_schedules_test.go

Harden scanned request and storage boundaries

2026-07-09 17:22:29 +01:00

report_schedules.go

Harden scanned request and storage boundaries

2026-07-09 17:22:29 +01:00

reporting_availability_test.go

feat(reporting): availability section computed from the resource state timeline

2026-06-10 17:48:11 +01:00

reporting_availability.go

feat(reporting): availability section computed from the resource state timeline

2026-06-10 17:48:11 +01:00

reporting_catalog_handlers.go

Canonicalize reporting settings catalog

2026-03-25 22:27:35 +00:00

reporting_handlers_test.go

fix(reporting): resolve unified resource IDs to metrics targets and render honest report subjects

2026-06-10 17:10:30 +01:00

reporting_inventory_handlers.go

Canonicalize reporting transport filenames and format errors

2026-03-26 09:15:15 +00:00

reporting_recovery_resilience_test.go

test(recovery): cover downstream malformed metadata consumers

2026-03-26 22:58:27 +00:00

reporting_runtime_snapshot_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

reporting_runtime_snapshot.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

require_admin_proxy_test.go

test: expand security regression coverage

2026-02-04 10:28:41 +00:00

resources_frontend_types_test.go

Fix encoded resource type filters

2026-06-25 20:20:35 +01:00

resources_k8s_namespaces.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

resources_operator_state_test.go

Make maintenance evidence writes atomic

2026-05-13 14:19:59 +01:00

resources_operator_state.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

resources_store_isolation_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

resources_tenant_security_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

resources_test.go

Add discovery readiness to Assistant context

2026-06-04 21:56:36 +01:00

resources.go

Fix encoded resource type filters

2026-06-25 20:20:35 +01:00

route_inventory_test.go

Block silent downgrades on apply and give the updater a sanctioned rollback path

2026-07-10 01:46:08 +01:00

router_auth_additional_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_auth_bypass_inventory_test.go

Fix API auth failure handling

2026-04-26 17:26:16 +01:00

router_bench_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_csrf_middleware_test.go

Fix concurrent CSRF token refresh

2026-04-26 15:27:10 +01:00

router_csrf_skip_inventory_test.go

Retire self-hosted trial activation callback

2026-04-28 16:36:09 +01:00

router_csrf_skip_routes_test.go

fix(release): align api and hostagent rc contracts

2026-03-26 17:12:27 +00:00

router_decomposition_contract_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_download_inventory_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_frontend_inventory_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_general_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_handlers_additional_test.go

Harden connection probe and simple stats rendering

2026-04-22 01:18:33 +01:00

router_helpers_additional_test.go

Harden session and setup token auth flows

2026-04-18 00:06:50 +01:00

router_helpers_more_test.go

Harden multi-tenant GA readiness

2026-04-23 23:04:03 +01:00

router_helpers.go

Harden multi-tenant GA readiness

2026-04-23 23:04:03 +01:00

router_integration_test.go

Clear all errcheck and gofmt violations so make lint gates on real findings

2026-06-09 21:42:21 +01:00

router_logging.go

Fix bootstrap token logger race

2026-05-03 12:25:56 +01:00

router_low_coverage_additional_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_misc_additional_test.go

Fix SSO session display labels

2026-07-07 16:35:07 +01:00

router_mock_platforms_test.go

Clear all errcheck and gofmt violations so make lint gates on real findings

2026-06-09 21:42:21 +01:00

router_proxy_auth_admin_routes_test.go

test: expand security regression coverage

2026-02-04 10:28:41 +00:00

router_proxy_auth_security_test.go

test: expand security regression coverage

2026-02-04 10:28:41 +00:00

router_public_paths_inventory_test.go

Stability sweep on the agent-substrate arc

2026-05-09 23:04:22 +01:00

router_rate_limit_security_test.go

test: expand security regression coverage

2026-02-04 10:28:41 +00:00

router_recovery_test.go

Bind recovery and bootstrap auth to direct loopback

2026-04-22 00:39:53 +01:00

router_routes_additional_test.go

Reject unsupported Assistant session diff/revert

2026-06-07 18:01:55 +01:00

router_routes_ai_execute_stream_test.go

fix(api): bind router teardown to owned auth stores

2026-03-26 21:43:30 +00:00

router_routes_ai_execute_test.go

Fix API auth failure handling

2026-04-26 17:26:16 +01:00

router_routes_ai_helpers_test.go

fix(api): bind router teardown to owned auth stores

2026-03-26 21:43:30 +00:00

router_routes_ai_models_test.go

fix(api): bind router teardown to owned auth stores

2026-03-26 21:43:30 +00:00

router_routes_ai_relay.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

router_routes_ai_test_connection_test.go

Move Patrol run Assistant handoffs server-side

2026-05-07 21:58:06 +01:00

router_routes_ai_test_provider_test.go

Move Patrol run Assistant handoffs server-side

2026-05-07 21:58:06 +01:00

router_routes_auth_security_sso_runtime_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_routes_auth_security.go

Harden first-run security boundaries

2026-07-10 01:28:33 +01:00

router_routes_cloud_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_routes_cloud.go

Retire self-hosted trial activation callback

2026-04-28 16:36:09 +01:00

router_routes_debug_test.go

Fix API auth failure handling

2026-04-26 17:26:16 +01:00

router_routes_debug.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_routes_licensing_reporting_runtime_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_routes_licensing.go

Add MSP report scheduling and alert rollup

2026-07-07 20:37:18 +01:00

router_routes_monitoring.go

feat(mcp): add list_resource_capabilities tool

2026-07-03 17:07:41 +01:00

router_routes_registration.go

Block silent downgrades on apply and give the updater a sanctioned rollback path

2026-07-10 01:46:08 +01:00

router_state_test.go

Document state summary integration contract

2026-06-29 17:39:11 +01:00

router_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router_version_tenant_metrics_test.go

Use agent update target for stale notices

2026-06-03 14:42:43 +01:00

router_webhook_cidr_reload_test.go

Fix webhook private CIDR allowlist lost after monitor reload (#1507 )

2026-06-26 22:15:48 +01:00

router_wrappers_additional_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

router.go

Close remaining CodeQL allocation and cookie gaps

2026-07-09 20:10:08 +01:00

saml_handlers_additional_test.go

Fix SSO session display labels

2026-07-07 16:35:07 +01:00

saml_handlers_more_test.go

Clear server-side CSRF token on logout

2026-05-21 16:26:00 +01:00

saml_handlers_success_test.go

Audit SSO entitlement and provider settings

2026-05-03 13:19:51 +01:00

saml_handlers.go

Close remaining CodeQL allocation and cookie gaps

2026-07-09 20:10:08 +01:00

saml_runtime_license_gating_test.go

Make self-hosted SSO Community-tier

2026-05-03 12:48:01 +01:00

saml_service_additional_test.go

Retire dashboard landing surface

2026-04-29 16:25:09 +01:00

saml_service_test.go

Harden SAML URL validation paths

2026-04-01 12:00:31 +01:00

saml_service.go

Validate SAML LogoutResponse before clearing session

2026-05-21 16:15:53 +01:00

security_additional_coverage_test.go

Harden remaining CodeQL security boundaries

2026-07-09 19:46:40 +01:00

security_first_run_reset_test.go

Harden first-run security boundaries

2026-07-10 01:28:33 +01:00

security_first_run_reset.go

fix(setup): prove api-backed first-session handoff

2026-03-30 09:52:07 +01:00

security_regression_test.go

Harden first-run security boundaries

2026-07-10 01:28:33 +01:00

security_setup_fix_additional_test.go

Bind owner identity across token minting

2026-05-04 00:50:14 +01:00

security_setup_fix_test.go

Harden first-run security boundaries

2026-07-10 01:28:33 +01:00

security_setup_fix.go

Harden first-run security boundaries

2026-07-10 01:28:33 +01:00

security_status_additional_test.go

Harden first-run security boundaries

2026-07-10 01:28:33 +01:00

security_status_capabilities.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

security_test.go

Fix security scan findings

2026-07-01 09:55:35 +01:00

security_tokens_handlers_test.go

fix(relay): introduce dedicated mobile runtime scope

2026-03-24 23:59:52 +00:00

security_tokens_lifecycle_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

security_tokens_owner_binding_test.go

Bind owner identity across token minting

2026-05-04 00:50:14 +01:00

security_tokens_rotate_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

security_tokens_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

security_tokens.go

Bind owner identity across token minting

2026-05-04 00:50:14 +01:00

security.go

Close remaining CodeQL allocation and cookie gaps

2026-07-09 20:10:08 +01:00

session_oidc_test.go

Fix SSO session display labels

2026-07-07 16:35:07 +01:00

session_store_test.go

Fix SSO session display labels

2026-07-07 16:35:07 +01:00

session_store.go

Fix SSO session display labels

2026-07-07 16:35:07 +01:00

setup_script_render.go

Add Proxmox token smoke diagnostics

2026-07-07 10:10:16 +01:00

slo_bench_test.go

test(go): skip perf-budget overruns on contended local hosts, enforce in CI

2026-06-11 13:12:59 +01:00

slo.go

Stabilize RC release proof contracts

2026-04-11 14:51:10 +01:00

sso_admin_license_gating_test.go

Make self-hosted SSO Community-tier

2026-05-03 12:48:01 +01:00

sso_handlers_crud_test.go

Allow clearing SSO provider restriction fields from Settings

2026-07-07 22:04:46 +01:00

sso_handlers_test.go

Harden outbound SSO fetch boundaries

2026-04-01 16:36:44 +01:00

sso_outbound_test.go

Harden remaining CodeQL security boundaries

2026-07-09 19:46:40 +01:00

sso_outbound.go

Harden remaining CodeQL security boundaries

2026-07-09 19:46:40 +01:00

state_provider.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

state_summary.go

Prepare v6.0.0 release candidate

2026-06-04 14:07:14 +01:00

stripe_webhook_handlers_additional_test.go

Remove monitored-system volume caps

2026-05-05 12:59:59 +01:00

stripe_webhook_handlers_test.go

Remove monitored-system volume caps

2026-05-05 12:59:59 +01:00

subscription_entitlements.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

subscription_state_handlers.go

Centralize demo commercial boundary policy

2026-04-07 10:24:53 +01:00

subscription_state_reconciler_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

subscription_state_reconciler.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

system_settings_handlers_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

system_settings_ssh_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

system_settings_telemetry_test.go

Clear all errcheck and gofmt violations so make lint gates on real findings

2026-06-09 21:42:21 +01:00

system_settings_temperature_test.go

Fix API auth failure handling

2026-04-26 17:26:16 +01:00

system_settings_utils_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

system_settings_validate_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

system_settings.go

Harden MSP tenant isolation: scope org-bound tokens away from default org, propagate webhook allowlist to all tenants

2026-06-10 11:37:39 +01:00

telemetry_pulse_intelligence_test.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

telemetry_pulse_intelligence.go

Harden GA telemetry disclosure

2026-07-02 11:50:03 +01:00

tenant_legacy_token_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

tenant_org_binding_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

tenant_org_cookie_test.go

Reject org cookie for non-member

2026-02-04 14:48:03 +00:00

tenant_org_header_precedence_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

tenant_org_ids_binding_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

tenant_token_over_user_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

tenant_user_membership_test.go

Use strict org principals for runtime access

2026-05-04 23:16:15 +01:00

test_helpers_mt_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

test_remediation_engine_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

test_store_reset_helpers_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

trial_handlers_test.go

Retire self-hosted trial activation callback

2026-04-28 16:36:09 +01:00

truenas_app_action_provider.go

feat(ai): add canonical truenas app control

2026-03-29 19:50:31 +01:00

truenas_app_config_provider.go

feat(ai): add canonical truenas app config reads

2026-03-29 20:36:43 +01:00

truenas_app_read_provider.go

feat(ai): add canonical truenas app log reads

2026-03-29 20:13:39 +01:00

truenas_handlers_test.go

Clear all errcheck and gofmt violations so make lint gates on real findings

2026-06-09 21:42:21 +01:00

truenas_handlers.go

Dedupe internal/api handler families behind shared flows and generics

2026-06-10 10:52:05 +01:00

types_additional_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

types.go

Use agent update target for stale notices

2026-06-03 14:42:43 +01:00

unified_agent_config_binding_router_test.go

Diagnostics: handle blank-name instances; add report-token router test

2026-06-04 11:49:17 +01:00

unified_agent_config_scope_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

unified_agent_download_test.go

Prepare v6.0.0 release candidate

2026-06-04 14:07:14 +01:00

unified_agent_handlers_additional_test.go

Fix Proxmox agent install token isolation

2026-07-05 17:21:34 +01:00

unified_agent_handlers_test.go

Harden MSP onboarding proof gaps

2026-06-02 10:15:35 +01:00

unified_agent_lookup_test.go

Allow legacy report-only agent tokens to fetch their own config (#1254 )

2026-06-04 08:39:31 +01:00

unified_agent_more_test.go

Remove the /install.sh GitHub proxy fallback; serve bundled agent installer or fail closed (#1470 )

2026-05-29 14:51:18 +01:00

unified_agent_test.go

Never serve the server installer at /install.sh; serve local agent installer (#1470 )

2026-05-29 14:19:04 +01:00

unified_agent_upgrade_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

unified_agent.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

update_detection_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

update_detection.go

Harden unified agent update preflight

2026-06-02 23:54:48 +01:00

update_readiness_test.go

Surface v5 agent migration security guidance

2026-06-03 09:18:07 +01:00

update_readiness.go

Surface v5 agent migration security guidance

2026-06-03 09:18:07 +01:00

updates_test.go

Block silent downgrades on apply and give the updater a sanctioned rollback path

2026-07-10 01:46:08 +01:00

updates.go

Block silent downgrades on apply and give the updater a sanctioned rollback path

2026-07-10 01:46:08 +01:00

user_limit_enforcement.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

user_limit_isolation_test.go

Require accepted org invitations and stable runtime capabilities

2026-04-22 03:06:22 +01:00

vmware_handlers_test.go

Clear all errcheck and gofmt violations so make lint gates on real findings

2026-06-09 21:42:21 +01:00

vmware_handlers.go

Dedupe internal/api handler families behind shared flows and generics

2026-06-10 10:52:05 +01:00

websocket_isolation_test.go

Remove 198 unreachable Go functions

2026-06-03 12:29:37 +01:00

websocket_origin_security_test.go

Require explicit websocket origin continuity

2026-04-22 04:46:13 +01:00

README.md

Internal API Package

This directory contains the API server implementation for Pulse.

Important Note About `frontend-modern/`

The frontend-modern/ subdirectory that appears here is:

AUTO-GENERATED during builds
NOT the source code - just a build artifact
IN .gitignore - never committed
REQUIRED BY GO - The embed directive needs it here

Frontend Development Location

👉 Edit frontend files at: ${PULSE_REPOS_DIR}/pulse/frontend-modern/src/

Why This Structure?

Go's //go:embed directive has limitations:

Cannot use ../ paths to access parent directories
Cannot follow symbolic links
Must embed files within the Go module

This is a known Go limitation and our structure works around it.

README.md

Internal API Package

Important Note About frontend-modern/

Frontend Development Location

Why This Structure?

Important Note About `frontend-modern/`