gsadmin/pulse
1
0
Fork 0
mirror of https://github.com/rcourtman/Pulse.git synced 2026-11-01 16:29:50 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
c021e9fc336a4906fc8cb467d3205073676a88b1
pulse/internal/api
T
History
rcourtman c021e9fc33 Require an instance admin to replace instance credentials; check embedded IPv4 in webhook guard (#3013) 
## Check embedded IPv4 destinations in the webhook SSRF guard

The notification webhook client refuses private and special-use
addresses at dial time, but it matched each address exactly as given.
An IPv6 transition address carries an IPv4 destination inside it, so
64:ff9b::a9fe:a9fe looked like a public address while a NAT64 gateway
delivered it to 169.254.169.254. The audit webhook and the shared
restricted client already decode these forms through
pkg/securityutil.EmbeddedIPv4Candidates; the notification guard had its
own range check and did not.

isPrivateIP now also judges every IPv4 destination embedded in NAT64,
6to4, Teredo, IPv4-compatible and ISATAP addresses, so URL validation
and the dial-time guard both refuse them.

Contract-Neutral: Closes an address-decoding gap in the existing webhook
private-address guard; no new configuration or API surface.

## Require an instance admin to replace instance credentials

POST /api/security/regenerate-token and a forced POST
/api/security/quick-setup replace the instance's own credentials: the
whole API token inventory and, for quick setup, the administrator login.
Their session check was ensureAdminSession, which on an org-scoped
request admits anyone who can manage that organization. An organization
owner who named their organization in the request could therefore mint
a full-access default-organization token or set a new administrator
password, and take the instance over.

Session callers of both routes now also need instance administrator
privileges: a session that is not org-scoped and belongs to the
configured administrator or an RBAC admin grant, the rule
RequirePlatformAdmin and the security status capabilities already use.
Token callers keep the instance-wide token check added earlier, and
first-run setup, the bootstrap token and the recovery token are
unchanged.

Contract-Neutral: Narrows two instance-credential routes to the
instance-administrator rule the status capabilities already advertise;
no new API surface.
2026-10-17 02:50:13 +01:00
..
agentbinding
Let agents without a command channel reduce their authority
2026-10-05 23:38:18 +01:00
agenttokens
Fence runner activation session authority
2026-08-31 23:52:25 +01:00
alerting
Incorporate batch-start upstream alert configuration repair
2026-10-07 22:36:57 +01:00
apicontext
Extract alert delivery API package
2026-08-21 14:56:04 +01:00
apihttp
Extract alert delivery API package
2026-08-21 14:56:04 +01:00
chartapi
Count successful history reads beyond seven days
2026-10-16 19:21:03 +01:00
configapi
fix(settings): test edited TLS with saved credentials
2026-10-16 21:17:30 +01:00
resourceapi
Remove AI Discovery
2026-10-11 22:20:25 +01:00
testdata/rg09
Use Development SSD for RG09 Go cache
2026-07-12 22:13:04 +01:00
access_admin_handlers.go
…
access_admin_recovery.go
Fix RBAC assignment migration and loading
2026-07-23 22:11:48 +01:00
access_control_handlers.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
access_metrics_handlers.go
…
access_tenant_provider.go
Measure Pro feature adoption and drop the dead Patrol autofix counter
2026-08-05 14:34:50 +01:00
action_authority_test.go
Enforce explicit SSO administrator grants
2026-08-31 00:43:42 +01:00
action_authority.go
Require authority for infrastructure actions
2026-08-30 08:36:31 +01:00
action_dispatch_test.go
Add durable action dispatch continuity
2026-07-11 16:08:44 +01:00
action_executor.go
Fix Docker command recovery after token rotation
2026-08-23 09:18:44 +01:00
action_request_identity_test.go
Preserve canonical Patrol planning and outcome continuity
2026-09-07 17:24:25 +01:00
action_result_v2_contract_test.go
Require independent evidence for verified findings
2026-07-12 23:15:54 +01:00
action_runner_credentials_test.go
Fence runner activation session authority
2026-08-31 23:52:25 +01:00
action_runner_credentials.go
Fence runner activation session authority
2026-08-31 23:52:25 +01:00
actions_mock_test.go
Polish Actions layout and review details
2026-07-13 17:00:36 +01:00
actions_projection_ceremony_test.go
Collapse the container update ceremony to a single review
2026-07-19 14:48:24 +01:00
actions_test.go
Preserve canonical Patrol planning and outcome continuity
2026-09-07 17:24:25 +01:00
actions.go
Preserve canonical Patrol planning and outcome continuity
2026-09-07 17:24:25 +01:00
activity_audit_handlers.go
Reject malformed audit export and summary time filters
2026-10-08 02:44:07 +01:00
admin_bypass_mode_dev.go
…
admin_bypass_mode_release.go
…
admin_bypass_release_test.go
…
admin_bypass_router_test.go
test(api): own router worker cleanup in early API fixtures
2026-09-08 21:29:36 +01:00
admin_docs_test.go
Isolate administration guide session-revocation proof
2026-10-01 08:55:56 +01:00
agent_activity_telemetry_test.go
Enforce server-owned action approval authority
2026-07-11 19:49:17 +01:00
agent_activity_telemetry.go
Fail closed on unknown remediation lock state for autonomous dispatches
2026-07-10 00:14:01 +01:00
agent_capabilities_test.go
Enforce server-owned action approval authority
2026-07-11 19:49:17 +01:00
agent_capabilities.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
agent_command_authorization_test.go
fix: close chat command authority boundary
2026-07-11 11:54:56 +01:00
agent_command_authorization.go
fix: close chat command authority boundary
2026-07-11 11:54:56 +01:00
agent_command_redaction.go
Harden Patrol and Assistant action boundaries
2026-05-12 12:06:27 +01:00
agent_config_fetch_audit_test.go
Bound config-fetch audit suppression without evicting recent agents
2026-10-02 21:18:55 +01:00
agent_config_fetch_audit.go
Bound config-fetch audit suppression without evicting recent agents
2026-10-02 21:18:55 +01:00
agent_events_test.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
agent_events.go
Add canonical action result truth
2026-07-11 21:27:00 +01:00
agent_exec_token_binding.go
Let agents without a command channel reduce their authority
2026-10-05 23:38:18 +01:00
agent_fleet_doctor_test.go
Make action runner rotation activation-safe
2026-08-30 18:00:33 +01:00
agent_fleet_doctor.go
Read diagnostics token inventory under the config lock
2026-10-17 00:18:10 +01:00
agent_handlers_base.go
Bound server state broadcast memory
2026-07-02 23:27:49 +01:00
agent_ingest.go
Register agent command channels under the identity Pulse resolves
2026-10-06 00:36:41 +01:00
agent_install_command_shared_test.go
Keep container diagnostics bootstrap credentials out of copied commands
2026-10-01 09:22:15 +01:00
agent_install_command_shared.go
Keep container diagnostics bootstrap credentials out of copied commands
2026-10-01 09:22:15 +01:00
agent_profiles_security_test.go
test(api): own router worker cleanup in early API fixtures
2026-09-08 21:29:36 +01:00
agent_profiles_tools_extra_test.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
agent_profiles_tools_test.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
agent_profiles_tools.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
agent_report_decode_test.go
Classify oversized agent reports correctly
2026-09-01 13:59:36 +01:00
agent_report_decode.go
Classify oversized agent reports correctly
2026-09-01 13:59:36 +01:00
agent_resource_context_test.go
Remove AI Discovery
2026-10-11 22:20:25 +01:00
agent_resource_context.go
Remove AI Discovery
2026-10-11 22:20:25 +01:00
agent_substrate_e2e_test.go
test(api): own router worker cleanup in early API fixtures
2026-09-08 21:29:36 +01:00
agent_uninstall_scope_test.go
Require an admin for non-token agent uninstall
2026-10-11 16:30:23 +01:00
agent_version_shared.go
Keep diagnostic source builds out of release update flows
2026-09-10 17:06:27 +01:00
ai_chat_transport_test.go
feat(ai): add compact and max_bytes to the chat messages endpoint
2026-07-18 20:23:41 +01:00
ai_chat_transport.go
feat(ai): add compact and max_bytes to the chat messages endpoint
2026-07-18 20:23:41 +01:00
ai_findings_endpoint_test.go
…
ai_handler_chat_recovery_test.go
…
ai_handler_recovery_wiring_test.go
Remove AI Discovery
2026-10-11 22:20:25 +01:00
ai_handler_restart_test.go
Fix TestRestart_StartIfServiceMissing expectation for single config load
2026-06-04 11:23:05 +01:00
ai_handler_test.go
Remove AI Discovery
2026-10-11 22:20:25 +01:00
ai_handler_unified_store_test.go
…
ai_handler.go
Remove AI Discovery
2026-10-11 22:20:25 +01:00
ai_handlers_concurrency_test.go
Resolve TrueNAS Patrol disk heat through its alert policy
2026-10-08 11:03:46 +01:00
ai_handlers_cost_export_additional_test.go
…
ai_handlers_cost_reset_additional_test.go
Complete Patrol retained objective loop
2026-08-14 03:11:10 +01:00
ai_handlers_finding_notify_test.go
Expose Patrol finding notification settings in the API and Patrol settings page
2026-07-18 12:14:12 +01:00
ai_handlers_helpers_test.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
ai_handlers_intelligence_additional_test.go
…
ai_handlers_investigation_additional_test.go
Preserve native filesystem evidence and Patrol action history
2026-09-07 09:45:31 +01:00
ai_handlers_knowledge_test.go
Enforce Assistant read-only scope integrity
2026-07-11 12:43:55 +01:00
ai_handlers_more_test.go
Honour recurring and descendant maintenance in Patrol findings
2026-10-13 12:58:17 +01:00
ai_handlers_oauth_test.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
ai_handlers_patrol_actions_additional_test.go
Keep historical fix results from closing recurring findings
2026-10-16 00:42:22 +01:00
ai_handlers_patrol_stream_resume_test.go
…
ai_handlers_patrol_test.go
Remove AI Discovery
2026-10-11 22:20:25 +01:00
ai_handlers_setters_additional_test.go
Remove AI Discovery
2026-10-11 22:20:25 +01:00
ai_handlers_stream_test.go
Surface Assistant idle progress on SSE streams
2026-06-07 00:06:34 +01:00
ai_handlers_test.go
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
ai_handlers.go
Keep historical fix results from closing recurring findings
2026-10-16 00:42:22 +01:00
ai_hosted_runtime_test.go
Retire self-hosted AI quickstart surfaces
2026-04-28 15:49:18 +01:00
ai_hosted_runtime.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
ai_intelligence_handlers_additional_test.go
…
ai_intelligence_handlers_data_additional_test.go
…
ai_intelligence_handlers_more2_test.go
…
ai_intelligence_handlers_more_test.go
Fix missing impact text and incomplete alert type coverage in unified findings
2026-06-27 14:43:09 +01:00
ai_intelligence_handlers_remediation_additional_test.go
Preserve canonical incident history and Assistant handoffs
2026-09-08 02:08:15 +01:00
ai_intelligence_handlers_remediation_more_test.go
…
ai_intelligence_handlers_test.go
Lighten AI intelligence handler test setup
2026-05-28 15:10:39 +01:00
ai_intelligence_handlers.go
Preserve canonical incident history and Assistant handoffs
2026-09-08 02:08:15 +01:00
ai_intelligence_helpers_additional_test.go
…
ai_ollama_auth_lifecycle_test.go
fix(settings): restore Ollama Basic Auth configuration
2026-09-10 18:21:29 +01:00
ai_patrol_community_limits_test.go
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
ai_patrol_cost_preview_test.go
Guide the Patrol model choice with cost preview and budget pause
2026-09-02 07:55:42 +01:00
ai_patrol_cost_preview.go
Guide the Patrol model choice with cost preview and budget pause
2026-09-02 07:55:42 +01:00
ai_patrol_digest_handler_test.go
Add the Patrol weekly digest endpoint
2026-09-02 08:53:50 +01:00
ai_patrol_digest_handler.go
Email the Patrol weekly summary as a report schedule kind
2026-09-02 11:15:22 +01:00
ai_patrol_handlers_test.go
Add resource priority to Patrol queue
2026-06-30 10:37:54 +01:00
ai_relay_converters_branchcov0722pm_test.go
Cover API relay converters, request filters and AI approval helpers
2026-07-22 16:29:44 +01:00
ai_resource_types.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
alerting_compat.go
feat(alerts): add destination severity routing
2026-08-27 19:13:32 +01:00
alerts_endpoints_test.go
feat(alerts): add per-alert snooze
2026-08-27 17:20:32 +01:00
api_foundation_test.go
…
api_token_identity.go
…
api_token_org_routes_integration_test.go
Stabilize release validation boundaries
2026-08-29 14:54:04 +01:00
api_token_org_scope_integration_test.go
…
api_token_owner_identity_integration_test.go
…
api_token_scope_transport_integration_test.go
Allow in-place API token scope edits (#1629)
2026-07-30 12:06:19 +01:00
apt_workflow_integration_test.go
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
apt_workflows_colima_real_lab_test.go
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
assistant_locked_resource_planning_test.go
Remove the inert Assistant Protected guests setting
2026-10-10 07:46:45 +01:00
assistant_typed_action_planner.go
Remove the inert Assistant Protected guests setting
2026-10-10 07:46:45 +01:00
attention_actions_test.go
Harden Operational Trust rollout contracts
2026-07-19 15:11:02 +01:00
attention_actions.go
Harden Operational Trust rollout contracts
2026-07-19 15:11:02 +01:00
attention_evidence.go
Harden Operational Trust rollout contracts
2026-07-19 15:11:02 +01:00
attention_handlers_test.go
Simplify and harden verified Patrol receipts
2026-08-15 10:25:04 +01:00
attention_handlers.go
Show verified Patrol work receipts
2026-08-15 08:48:49 +01:00
attention_mutation_scope_test.go
Admit attention lifecycle POSTs on the mutation scope
2026-10-11 16:05:31 +01:00
attention_mutations.go
Let mobile relay tokens reach the Patrol attention routes
2026-07-22 12:31:44 +01:00
attention_receipts.go
Simplify and harden verified Patrol receipts
2026-08-15 10:25:04 +01:00
attention_relay_mobile_scope_test.go
Let mobile relay tokens reach the Patrol attention routes
2026-07-22 12:31:44 +01:00
audit_filter_validation_test.go
Reject malformed audit export and summary time filters
2026-10-08 02:44:07 +01:00
audit_handlers_test.go
Merge reviewed audit filter validation repair
2026-10-08 04:33:06 +01:00
audit_reporting_scope_test.go
Add MSP report scheduling and alert rollup
2026-07-07 20:37:18 +01:00
auth_additional_coverage_test.go
Prevent mixed-auth configuration deadlock
2026-07-16 15:25:47 +01:00
auth_context_middleware_test.go
Propagate Basic auth identity into action authorization
2026-07-16 16:34:26 +01:00
auth_context_tenant_test.go
Keep auth context tests independent of tenant runtime writers
2026-10-03 18:16:20 +01:00
auth_denial_signal_test.go
Stabilize API test log capture
2026-08-31 19:47:01 +01:00
auth_denial_signal.go
fix(api): log routine authorization refusals at debug, warn on the rate
2026-08-07 21:38:47 +01:00
auth_env_path.go
Keep first-run credential reset atomic
2026-08-29 06:16:52 +01:00
auth_general_test.go
…
auth_helpers_test.go
Close remaining CodeQL allocation and cookie gaps
2026-07-09 20:10:08 +01:00
auth_oidc_refresh_additional_test.go
Fix late issue triage regressions
2026-05-28 14:49:20 +01:00
auth_principal_identity_test.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
auth_principal_identity.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
auth_query_token_test.go
…
auth_scope_test.go
…
auth.go
Use typed Proxmox runners and preserve cross-clock action evidence
2026-09-07 12:00:48 +01:00
authorization_additional_test.go
…
authorization_test.go
Harden MSP tenant isolation: scope org-bound tokens away from default org, propagate webhook allowlist to all tenants
2026-06-10 11:37:39 +01:00
authorization.go
Harden MSP tenant isolation: scope org-bound tokens away from default org, propagate webhook allowlist to all tenants
2026-06-10 11:37:39 +01:00
availability_handlers_test.go
Add application response contracts to availability checks
2026-08-30 17:38:59 +01:00
availability_handlers.go
Add multi-location service delivery evidence
2026-08-30 21:44:32 +01:00
availability_history_handlers_test.go
Add availability history and fleet view
2026-08-30 15:38:34 +01:00
availability_history_handlers.go
Add availability history and fleet view
2026-08-30 15:38:34 +01:00
availability_probe_agent_test.go
Add multi-location service delivery evidence
2026-08-30 21:44:32 +01:00
billing_state_authz_test.go
…
billing_state_handlers_test.go
Remove monitored-system volume caps
2026-05-05 12:59:59 +01:00
bootstrap_token_test.go
Fix bootstrap token logger race
2026-05-03 12:25:56 +01:00
bootstrap_token.go
Show container-console route for the setup token
2026-09-28 15:29:15 +01:00
change_password_session_admin_test.go
test(api): own password-change fixture router lifecycle
2026-09-08 21:53:18 +01:00
charts_compat.go
fix(api): initialize chart services once per router
2026-10-16 21:45:03 +01:00
chat_service_adapter_additional_test.go
…
chat_service_adapter_test.go
Preserve Patrol evidence and surface action submission failures
2026-09-06 20:09:54 +01:00
chat_service_adapter.go
Account Anthropic prompt-cache usage instead of dropping it
2026-10-03 09:31:34 +01:00
cloud_agent_install_command.go
Contain agent command authority
2026-08-29 22:12:41 +01:00
cloud_handoff_handlers_test.go
Harden provider MSP tenant isolation
2026-06-02 17:34:10 +01:00
cloud_handoff_handlers.go
Close remaining CodeQL allocation and cookie gaps
2026-07-09 20:10:08 +01:00
cloud_handoff_queryplan_test.go
…
cloud_handoff_test.go
Fail closed on hosted handoff identity
2026-05-04 09:47:54 +01:00
cloud_handoff.go
Close remaining CodeQL allocation and cookie gaps
2026-07-09 20:10:08 +01:00
cloud_org_admin_auth.go
Enforce explicit SSO administrator grants
2026-08-31 00:43:42 +01:00
cloud_org_admin_handlers.go
…
code_standards_test.go
Attach subject report alerts with shared disk hardware ownership
2026-10-07 12:36:24 +01:00
collector_authority_test.go
Harden secure agent runtime boundaries
2026-08-31 00:06:24 +01:00
collector_authority.go
Harden secure agent runtime boundaries
2026-08-31 00:06:24 +01:00
config_handlers_compat.go
Extract configuration API runtime package
2026-08-21 14:56:07 +01:00
config_handlers_test_support_test.go
Extract configuration API runtime package
2026-08-21 14:56:07 +01:00
config_profiles_additional_test.go
…
config_profiles_test.go
…
config_profiles.go
…
config_transfer_authorization_test.go
test(api): close config-transfer fixture router lifecycles
2026-09-08 21:42:28 +01:00
config_transfer_authorization.go
Secure configuration transfer authorization (#1714)
2026-08-12 07:32:50 +01:00
connections_aggregator_adaptive_stale_test.go
Scale connection stale cutoff by the adaptive planned poll interval
2026-08-11 14:05:06 +01:00
connections_aggregator_pmg_branchcov0722am_test.go
Honour saved PMG collection scope without inventing recovery
2026-10-08 06:54:46 +01:00
connections_aggregator_test.go
Carry the PBS-reported node name into the connections ledger
2026-10-10 12:06:38 +01:00
connections_aggregator.go
Judge connection freshness by the monitor's live poll cadence
2026-10-10 07:37:03 +01:00
connections_alerts_branchcov0722am_test.go
Prevent connection alerts from bypassing offline policy
2026-08-24 22:45:59 +01:00
connections_alerts.go
Stop mock-mode callers that read identity rebuilding the estate view
2026-10-10 12:37:42 +01:00
connections_command_policy_token_test.go
Fail closed on unresolvable agent tokens in the connections command-policy view
2026-07-18 13:09:18 +01:00
connections_grouping_test.go
Let fresher evidence decide merged connection member state
2026-08-30 00:02:15 +01:00
connections_grouping.go
Keep agent-reported disks out of cluster member state
2026-10-05 22:27:03 +01:00
connections_handlers_continuity_test.go
Separate TrueNAS probes from runtime poll and readiness evidence
2026-10-03 23:58:11 +01:00
connections_handlers_mock_test.go
fix(mock): keep real configured sources out of the mock connections ledger
2026-08-06 11:09:52 +01:00
connections_handlers.go
Fix agent command channel admission
2026-07-24 13:00:03 +01:00
connections_probe_test.go
Harden remaining CodeQL security boundaries
2026-07-09 19:46:40 +01:00
connections_probe.go
Harden remaining CodeQL security boundaries
2026-07-09 19:46:40 +01:00
connections_types.go
Prevent connection alerts from bypassing offline policy
2026-08-24 22:45:59 +01:00
contract_test.go
fix(api): publish SSO config changes as immutable snapshots
2026-10-17 00:24:06 +01:00
cors_policy.go
…
csrf_store_test.go
Fix concurrent CSRF token refresh
2026-04-26 15:27:10 +01:00
csrf_store.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
demo_middleware_test.go
Stop websocket upgrade headers exempting demo-mode writes
2026-10-07 13:46:17 +01:00
demo_middleware.go
Stop websocket upgrade headers exempting demo-mode writes
2026-10-07 13:46:17 +01:00
demo_mode_commercial_test.go
Remove monitored-system volume caps
2026-05-05 12:59:59 +01:00
demo_mode_commercial.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
demo_mode_operations_test.go
Hide pprof routes on demo-mode instances
2026-10-07 20:04:07 +01:00
demo_mode_operations.go
Hide pprof routes on demo-mode instances
2026-10-07 20:04:07 +01:00
deploy_handlers_test.go
Keep deployed agents' command channel across restarts
2026-10-05 22:23:09 +01:00
deploy_handlers.go
Keep deployed agents' command channel across restarts
2026-10-05 22:23:09 +01:00
deprecation_metrics.go
…
diagnostics_additional_test.go
Show diagnostics callers only the API tokens they may manage
2026-10-11 20:29:30 +01:00
diagnostics_contract_test.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
diagnostics_memory_test.go
Fix cache-aware Linux memory fallbacks
2026-07-24 00:19:40 +01:00
diagnostics_system_test.go
Honor namespaced cgroup memory limits
2026-08-29 22:23:54 +01:00
diagnostics_test.go
Fix PBS connection health authority
2026-07-24 09:45:05 +01:00
diagnostics_token_visibility_test.go
Read diagnostics token inventory under the config lock
2026-10-17 00:18:10 +01:00
diagnostics.go
Read diagnostics token inventory under the config lock
2026-10-17 00:18:10 +01:00
DO_NOT_EDIT_FRONTEND_HERE.md
…
docker_agents_additional_test.go
Enforce the canonical mutation plane
2026-07-11 15:19:41 +01:00
docker_agents_error_test.go
…
docker_agents_report_size_test.go
Fix Docker report size contract drift
2026-07-23 23:57:42 +01:00
docker_agents_routes_more_test.go
Enforce the canonical mutation plane
2026-07-11 15:19:41 +01:00
docker_agents_test.go
…
docker_agents.go
Fix Docker report size contract drift
2026-07-23 23:57:42 +01:00
docker_container_action_executor_test.go
fix(api): validate Docker update agent running health readback
2026-09-05 22:25:48 +01:00
docker_container_action_executor.go
fix(patrol): require Docker health recovery
2026-08-27 20:43:54 +01:00
docker_container_action_result_test.go
fix: reconcile uncertain restarts and preserve Patrol follow-up
2026-10-16 12:45:45 +01:00
docker_container_action_result.go
fix: reconcile uncertain restarts and preserve Patrol follow-up
2026-10-16 12:45:45 +01:00
docker_metadata_additional_test.go
Complete canonical web interface links
2026-07-24 12:42:16 +01:00
docker_metadata.go
Complete canonical web interface links
2026-07-24 12:42:16 +01:00
docker_restart_colima_real_lab_test.go
fix(patrol): require Docker health recovery
2026-08-27 20:43:54 +01:00
docs_links.go
…
ensure_admin_session_sso_test.go
Enforce explicit SSO administrator grants
2026-08-31 00:43:42 +01:00
enterprise_extension_ai_alert_analysis_test.go
…
enterprise_extension_ai_alert_analysis.go
…
enterprise_extension_ai_autofix_test.go
…
enterprise_extension_ai_autofix.go
…
enterprise_extension_ai_investigation_test.go
…
enterprise_extension_ai_investigation.go
…
enterprise_extension_audit_admin_test.go
…
enterprise_extension_audit_admin.go
…
enterprise_extension_rbac_admin_test.go
…
enterprise_extension_rbac_admin.go
…
enterprise_extension_reporting_admin_test.go
…
enterprise_extension_reporting_admin.go
…
enterprise_extension_sso_admin_test.go
…
enterprise_extension_sso_admin.go
…
entitlement_handlers_test.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
export_test.go
…
filters_branchcov0722pm_test.go
Extract chart and resource query services
2026-08-21 18:36:21 +01:00
flapping_postmortem_test.go
emit reliability finding when an alert starts flapping
2026-05-13 00:28:24 +01:00
flapping_postmortem.go
emit reliability finding when an alert starts flapping
2026-05-13 00:28:24 +01:00
frontend_embed_sync_test.go
…
frontend_embed_test.go
Fix legacy OIDC SSO discovery and CSP nonce
2026-07-07 09:54:14 +01:00
frontend_embed.go
Serve shipped markdown docs as text instead of a forced download
2026-07-08 14:36:55 +01:00
guest_metadata_additional_test.go
Preserve resource URLs across runtime identity changes
2026-07-23 22:33:07 +01:00
guest_metadata.go
Complete canonical web interface links
2026-07-24 12:42:16 +01:00
helpers_branchcov0722pm_test.go
Cover API relay converters, request filters and AI approval helpers
2026-07-22 16:29:44 +01:00
host_agent_credential_handoff_test.go
Observe compressed reports in the credential hand-off journey
2026-10-11 18:44:36 +01:00
host_agent_install_token_test.go
Fix command policy after agent reinstall
2026-08-23 23:39:20 +01:00
host_agent_removal_lifecycle_integration_test.go
Register agent command channels under the identity Pulse resolves
2026-10-06 00:36:41 +01:00
host_apt_action_result_test.go
Use typed Proxmox runners and preserve cross-clock action evidence
2026-09-07 12:00:48 +01:00
host_apt_action_result.go
Use typed Proxmox runners and preserve cross-clock action evidence
2026-09-07 12:00:48 +01:00
host_apt_partial_truth_test.go
Fix Patrol autonomy and refusal reporting
2026-08-13 23:26:08 +01:00
host_metadata.go
Complete canonical web interface links
2026-07-24 12:42:16 +01:00
host_storage_cleanup_action_executor_test.go
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
host_storage_cleanup_action_executor.go
Gate Patrol actions on agent preflight
2026-08-14 01:12:49 +01:00
host_update_action_executor_test.go
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
host_update_action_executor.go
Gate Patrol actions on agent preflight
2026-08-14 01:12:49 +01:00
hosted_agent_install_command_test.go
Align routed and hosted Proxmox private-input contracts
2026-10-01 05:51:09 +01:00
hosted_entitlement_refresh_fallback_test.go
…
hosted_entitlement_refresh_quickstart_test.go
Retire self-hosted AI quickstart surfaces
2026-04-28 15:49:18 +01:00
hosted_entitlement_refresh.go
Retire self-hosted AI quickstart surfaces
2026-04-28 15:49:18 +01:00
hosted_lifecycle_integration_test.go
Retire self-hosted trial activation callback
2026-04-28 16:36:09 +01:00
hosted_org_admin_handlers_test.go
…
hosted_signup_handlers_test.go
Use stable hosted signup owner ids
2026-05-04 09:33:19 +01:00
http_metrics_allocations_test.go
Stop timing the route normaliser rows that flip with layout
2026-10-13 10:25:33 +01:00
http_metrics_bench_test.go
Stop timing the route normaliser rows that flip with layout
2026-10-13 10:25:33 +01:00
http_metrics_route_test.go
Stop timing the route normaliser rows that flip with layout
2026-10-13 10:25:33 +01:00
http_metrics_test.go
Compose current upstream allocation guard with reviewed maintenance repairs
2026-10-04 00:15:28 +01:00
http_metrics.go
Reduce HTTP metric route-label intermediates
2026-10-09 20:44:07 +01:00
httptest_ipv4_external_test.go
…
httptest_ipv4_test.go
…
httptest_ipv6_test.go
…
identity_invariant_contract_test.go
Canonicalize install security helpers
2026-08-21 14:56:11 +01:00
identity_sso_handlers.go
fix(api): publish SSO config changes as immutable snapshots
2026-10-17 00:24:06 +01:00
instance_credential_session_authority_test.go
Require an instance admin to replace instance credentials
2026-10-17 00:16:58 +01:00
investigation_evidence_parity_test.go
fix(storage): read canonical backup inventory
2026-10-15 17:16:32 +01:00
isolation_test.go
…
issue1640_readiness_gate_test.go
Gate Patrol readiness on the completed overall verdict (#1640)
2026-07-28 13:57:48 +01:00
issue1640_readiness_transport_test.go
test(api): gate readiness transport proof on client observation
2026-09-10 02:01:25 +01:00
issue1644_exec_binding_integration_test.go
Extract configuration API runtime package
2026-08-21 14:56:07 +01:00
issue1753_agent_ingest_integration_test.go
Refresh the resource store at most once per 2s of agent reports
2026-09-24 10:24:29 +01:00
issue1753_agent_report_auth_test.go
Stop shared-token same-hostname agents collapsing identities
2026-09-01 14:36:49 +01:00
issue1753_docker_report_auth_test.go
Stop Docker records flip-flopping under shared same-hostname tokens
2026-09-01 15:26:48 +01:00
kubernetes_agents_additional_test.go
Remove monitored-system volume caps
2026-05-05 12:59:59 +01:00
kubernetes_agents_error_test.go
…
kubernetes_agents.go
Classify oversized agent reports correctly
2026-09-01 13:59:36 +01:00
ledger_licensing_branchcov0722pm_test.go
Cover API relay converters, request filters and AI approval helpers
2026-07-22 16:29:44 +01:00
license_expiry_integration_test.go
Move license test signers to testsupport
2026-04-28 19:12:21 +01:00
license_handlers_demo_fixtures_dev_test.go
…
license_handlers_demo_fixtures_test.go
Fix demo fixture entitlement recovery
2026-07-04 22:44:43 +01:00
license_handlers_test.go
Classify license server transport failures as retryable
2026-08-02 00:04:40 +01:00
license_limits_test_helpers_test.go
Remove monitored-system volume caps
2026-05-05 12:59:59 +01:00
license_user_limit_test.go
Move license test signers to testsupport
2026-04-28 19:12:21 +01:00
licensing_bridge.go
Prevent mock license migration warnings
2026-08-04 14:19:47 +01:00
licensing_handlers_auto_migrate_test.go
Prevent mock license migration warnings
2026-08-04 14:19:47 +01:00
licensing_handlers_self_hosted_fallback_test.go
…
licensing_handlers.go
revert(commercial): restore self-hosted opt-in posture
2026-08-08 16:48:19 +01:00
licensing_legacy_retry_test.go
Enforce installation-scoped license invalidation
2026-07-14 16:18:21 +01:00
licensing_legacy_retry.go
Enforce installation-scoped license invalidation
2026-07-14 16:18:21 +01:00
licensing_status_test_helpers_test.go
Enforce installation-scoped license invalidation
2026-07-14 16:18:21 +01:00
load_test.go
test(slo): only enforce latency budgets on hosted runners
2026-09-19 17:26:25 +01:00
log_handlers_additional_test.go
test(api): make log stream SSE test deterministic via history replay
2026-06-11 13:10:16 +01:00
log_handlers.go
…
log_redact_test.go
…
log_redact.go
…
loopback_request_test.go
…
magic_link_expiry_branchcov0723am_test.go
Cover replay bundle loading, magic link expiry and subscription mapping
2026-07-23 06:59:05 +01:00
magic_link_handlers_test.go
Fail closed on blank magic-link principals
2026-05-04 22:43:35 +01:00
magic_link_handlers.go
fix(api): validate hosted magic-link URL before token mint
2026-08-08 12:07:40 +01:00
magic_link_store_queryplan_test.go
…
magic_link_store_sqlite_test.go
…
magic_link_store_sqlite.go
…
magic_link_test.go
…
magic_link.go
…
main_test.go
Stabilize API test log capture
2026-08-31 19:47:01 +01:00
maintenance_verification_test.go
Add maintenance verification reports
2026-05-12 21:10:58 +01:00
maintenance_verification_wiring_branchcov0722pm_test.go
Cover report schedule, recovery point and maintenance wiring helpers
2026-07-22 15:53:34 +01:00
maintenance_verification_wiring.go
Add maintenance verification reports
2026-05-12 21:10:58 +01:00
maintenance_verification.go
Clear all errcheck and gofmt violations so make lint gates on real findings
2026-06-09 21:42:21 +01:00
metadata_handlers_shared.go
Complete canonical web interface links
2026-07-24 12:42:16 +01:00
metadata_handlers_test.go
Complete canonical web interface links
2026-07-24 12:42:16 +01:00
metadata_helpers.go
…
metadata_provider_test.go
…
metadata_provider.go
…
method_guard.go
Refuse GET and HEAD on discovery settings and SAML logout
2026-10-07 19:31:50 +01:00
metrics_history_fallback_test.go
Fix mock storage history continuity
2026-08-26 13:54:55 +01:00
metrics_reporting_handlers.go
Gate report narration in the resolver, keeping the pinned handler shape
2026-10-11 19:17:54 +01:00
metrics_reporting_telemetry_test.go
Emit structured telemetry on reporting and summarize invocations
2026-05-10 22:59:23 +01:00
middleware_license.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
middleware_tenant_additional_test.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
middleware_tenant_authorization_test.go
…
middleware_tenant_test.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
middleware_tenant_token_org_fallback_test.go
…
middleware_tenant.go
Extract alert delivery API package
2026-08-21 14:56:04 +01:00
middleware_test.go
Harden API request and bootstrap state handling
2026-04-22 05:42:45 +01:00
middleware.go
fix(api): log routine authorization refusals at debug, warn on the rate
2026-08-07 21:38:47 +01:00
mock_state_provider_test.go
…
mockmode_external_test.go
…
mockmode_internal_test.go
…
monitored_system_ledger_test.go
Clear all errcheck and gofmt violations so make lint gates on real findings
2026-06-09 21:42:21 +01:00
monitored_system_ledger.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
monitored_system_usage_test_helpers_test.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
monitored_system_usage.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
multi_tenant_setters_additional_test.go
Extract configuration API runtime package
2026-08-21 14:56:07 +01:00
multi_tenant_stress_test.go
test(api): distinguish stress setup and first-request latency
2026-09-08 21:14:29 +01:00
norace_test.go
…
notifications_scope_test.go
fix(notifications): refresh recovery queue owner after monitor reload
2026-09-08 11:37:20 +01:00
oidc_admin_auth_test.go
…
oidc_handlers_callback_url_test.go
Fix legacy OIDC SSO discovery and CSP nonce
2026-07-07 09:54:14 +01:00
oidc_handlers_test.go
Retire dashboard landing surface
2026-04-29 16:25:09 +01:00
oidc_handlers.go
fix(api): publish SSO config changes as immutable snapshots
2026-10-17 00:24:06 +01:00
oidc_legacy_callback_recovery_test.go
Recover the initiating provider on the legacy OIDC callback path
2026-07-10 09:53:09 +01:00
oidc_mapping_test.go
Adopt the agent's preferred host when re-registering a matched node
2026-07-09 09:52:59 +01:00
oidc_only_admin_parity_test.go
Remove AI Discovery
2026-10-11 22:20:25 +01:00
oidc_service_additional_test.go
chore(deps): qualify ID OAuth and concurrency updates
2026-09-10 00:39:00 +01:00
oidc_service_test.go
Keep mixed OIDC key sets usable
2026-09-04 11:40:20 +01:00
oidc_service.go
Recover the initiating provider on the legacy OIDC callback path
2026-07-10 09:53:09 +01:00
oidc_token_auth_test.go
…
onboarding_handlers_test.go
Fix mobile onboarding URL handoff sanitization
2026-07-07 15:12:59 +01:00
onboarding_handlers.go
Retire Relay labels and upsells inside Pulse
2026-09-29 13:19:54 +01:00
org_handlers_test.go
Add Kubernetes RBAC inventory to the agent + canonical + UI
2026-05-25 09:25:03 +01:00
org_handlers.go
Join runtime alert checks before tenant shutdown completes
2026-10-10 16:47:05 +01:00
org_lifecycle_handlers_test.go
…
org_lifecycle_handlers.go
…
org_shutdown_safety_test.go
Coalesce guest identity writes and retain incomplete tenant shutdown
2026-10-05 09:21:40 +01:00
org_validation_test.go
…
patrol_action_broker_test.go
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
patrol_action_broker.go
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
patrol_action_reconciliation.go
Preserve native filesystem evidence and Patrol action history
2026-09-07 09:45:31 +01:00
patrol_autonomy_colima_real_lab_test.go
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
patrol_autopilot_test.go
Default Pro Patrol to Ask first until a mode is chosen
2026-10-12 21:00:52 +01:00
patrol_digest_email_test.go
Email the Patrol weekly summary as a report schedule kind
2026-09-02 11:15:22 +01:00
patrol_digest_email.go
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
patrol_finding_notifications_test.go
Route new Patrol findings to alert notification channels
2026-07-18 11:59:05 +01:00
patrol_finding_notifications.go
Route new Patrol findings to alert notification channels
2026-07-18 11:59:05 +01:00
patrol_host_disk_scope_test.go
fix(patrol): resolve disk alerts through canonical resource owners
2026-10-08 17:22:29 +01:00
patrol_objectives_test.go
Rework Patrol around outcome-driven autonomous operations
2026-08-14 12:52:51 +01:00
patrol_objectives.go
Complete Patrol retained objective loop
2026-08-14 03:11:10 +01:00
patrol_suppression_management_test.go
Make permanent Patrol suppression rules reversible
2026-10-05 19:02:00 +01:00
payments_webhook_handlers.go
fix(api): validate hosted magic-link URL before token mint
2026-08-08 12:07:40 +01:00
pbs_backups_test.go
Fix Proxmox PBS backup artifact surface
2026-05-25 21:47:12 +01:00
pbs_backups.go
Fix Proxmox PBS backup artifact surface
2026-05-25 21:47:12 +01:00
persistent_auth_stores_test.go
…
platform_admin_session_parity_test.go
Enforce explicit SSO administrator grants
2026-08-31 00:43:42 +01:00
platform_connection_shared.go
Dedupe internal/api handler families behind shared flows and generics
2026-06-10 10:52:05 +01:00
platform_mock_connections.go
Add multi-location service delivery evidence
2026-08-30 21:44:32 +01:00
pmg_test.go
Stabilize dev runtime and complete PMG read-state migration
2026-05-21 15:15:23 +01:00
pmg.go
Stabilize dev runtime and complete PMG read-state migration
2026-05-21 15:15:23 +01:00
profile_suggestions_handlers_test.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
profile_suggestions_test.go
…
profile_suggestions.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
proxmox_guest_action_executor_test.go
Use typed Proxmox runners and preserve cross-clock action evidence
2026-09-07 12:00:48 +01:00
proxmox_guest_action_executor.go
Use typed Proxmox runners and preserve cross-clock action evidence
2026-09-07 12:00:48 +01:00
proxmox_guest_action_observer.go
Wire production Proxmox action verification
2026-07-13 11:04:09 +01:00
proxmox_guest_action_result.go
Use typed Proxmox runners and preserve cross-clock action evidence
2026-09-07 12:00:48 +01:00
proxmox_patrol_integration_test.go
Use typed Proxmox runners and preserve cross-clock action evidence
2026-09-07 12:00:48 +01:00
proxy_admin_gating_test.go
Require an admin for non-token agent uninstall
2026-10-11 16:30:23 +01:00
proxy_token_admin_conflict_test.go
…
public_signup_handlers.go
Use stable hosted signup owner ids
2026-05-04 09:33:19 +01:00
purchase_return_redemptions_test.go
…
purchase_return_redemptions.go
Dedupe internal/api handler families behind shared flows and generics
2026-06-10 10:52:05 +01:00
pure_helpers_branchcov0724pm_test.go
Remove the summary chart routes no client calls
2026-10-07 23:14:49 +01:00
pve_backups.go
proxmox(replication+backups): bespoke tables backed by new read-only endpoints
2026-05-16 13:57:53 +01:00
quick_setup_token_authority_test.go
Require instance-wide authority to rotate credentials by token
2026-10-11 18:10:20 +01:00
race_test.go
…
rate_limit_config_test.go
test(api): stop rate-limit fixture cleanup workers
2026-09-09 11:00:59 +01:00
rate_limit_config.go
Join Router-owned limiter workers during shutdown
2026-10-05 13:20:08 +01:00
rate_limit_fixture_cleanup_test.go
test(api): stop rate-limit fixture cleanup workers
2026-09-09 11:00:59 +01:00
rate_limit_journey_budget_test.go
test(api): prove journey rate-budget isolation preserves enforcement
2026-09-10 17:51:49 +01:00
ratelimit_tenant_test.go
…
ratelimit_tenant.go
…
ratelimit_test.go
Make rate limiter sliding-window test deterministic
2026-06-03 23:14:25 +01:00
ratelimit.go
Join Router-owned limiter workers during shutdown
2026-10-05 13:20:08 +01:00
rbac_admin_handlers_test.go
…
rbac_admin_recovery_test.go
Fix RBAC assignment migration and loading
2026-07-23 22:11:48 +01:00
rbac_handlers_additional_test.go
…
rbac_handlers_more_test.go
…
rbac_handlers_test.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
rbac_isolation_test.go
…
rbac_lifecycle_test.go
…
rbac_metrics_test.go
…
rbac_reporting_auth_test.go
Add MSP report scheduling and alert rollup
2026-07-07 20:37:18 +01:00
rbac_tenant_provider_bench_test.go
…
rbac_tenant_provider_test.go
Measure Pro feature adoption and drop the dead Patrol autofix counter
2026-08-05 14:34:50 +01:00
rbac_test.go
Fix API auth failure handling
2026-04-26 17:26:16 +01:00
README.md
…
recovery_handlers_branchcov0722pm_test.go
Cover report schedule, recovery point and maintenance wiring helpers
2026-07-22 15:53:34 +01:00
recovery_handlers_test.go
Define recovery list pagination bounds once in the recovery model
2026-08-24 10:21:10 +01:00
recovery_handlers.go
fix(patrol): restore collected investigation evidence
2026-10-15 15:48:28 +01:00
recovery_proxy_bypass_test.go
…
recovery_tokens_test.go
…
recovery_tokens.go
Fix RC3 backend release blockers
2026-05-01 21:36:28 +01:00
relay_hosted_runtime_test.go
feat(alerts): add destination severity routing
2026-08-27 19:13:32 +01:00
relay_hosted_runtime.go
Fix mobile relay runtime startup
2026-07-01 10:38:57 +01:00
relay_mobile_capability_generated.go
feat(alerts): add destination severity routing
2026-08-27 19:13:32 +01:00
relay_mobile_capability_test.go
Harden external probe outage alerting
2026-07-29 20:09:23 +01:00
relay_mobile_capability.go
Enforce Pulse Mobile compatibility from the core contract
2026-07-22 13:41:09 +01:00
relay_sso_license_gating_test.go
Gate relay mobile tokens behind Relay license
2026-04-30 12:53:29 +01:00
release_demo_fixtures_dev.go
…
release_demo_fixtures_release.go
…
replication.go
proxmox(replication+backups): bespoke tables backed by new read-only endpoints
2026-05-16 13:57:53 +01:00
report_ai_narration_scope_test.go
Align report help and scope proofs with narration spending permissions
2026-10-11 19:10:36 +01:00
report_schedules_branchcov0722pm_test.go
Cover report schedule, recovery point and maintenance wiring helpers
2026-07-22 15:53:34 +01:00
report_schedules_test.go
Email the Patrol weekly summary as a report schedule kind
2026-09-02 11:15:22 +01:00
report_schedules.go
Email the Patrol weekly summary as a report schedule kind
2026-09-02 11:15:22 +01:00
reporting_availability_test.go
feat(reporting): availability section computed from the resource state timeline
2026-06-10 17:48:11 +01:00
reporting_availability.go
feat(reporting): availability section computed from the resource state timeline
2026-06-10 17:48:11 +01:00
reporting_boundary_test.go
Attach subject report alerts with shared disk hardware ownership
2026-10-07 12:36:24 +01:00
reporting_catalog_handlers.go
…
reporting_handlers_test.go
Let only POST narrate single-resource reports with Pulse Assistant
2026-10-07 21:00:34 +01:00
reporting_inventory_handlers.go
…
reporting_recovery_resilience_test.go
…
reporting_runtime_snapshot_test.go
…
reporting_runtime_snapshot.go
Keep retained disk temperatures out of AI, Patrol and reports
2026-10-06 23:09:52 +01:00
reporting_subject_alerts_test.go
Attach subject report alerts with shared disk hardware ownership
2026-10-07 12:36:24 +01:00
reporting_subject_alerts.go
Attach subject report alerts with shared disk hardware ownership
2026-10-07 12:36:24 +01:00
require_admin_proxy_test.go
…
resource_test_support_test.go
Extract chart and resource query services
2026-08-21 18:36:21 +01:00
resources_compat.go
Remove AI Discovery
2026-10-11 22:20:25 +01:00
resources_link_continuity_test.go
Resolve saved hosts an operator link joins to the link's primary
2026-10-08 06:27:50 +01:00
resources_mutation_scope_test.go
Stop token callers widening or bypassing their scopes
2026-10-11 15:57:35 +01:00
resources_operator_state_test.go
feat(alerts): add recurring scoped maintenance
2026-08-27 18:20:03 +01:00
resources_operator_state.go
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
resources_state_integration_test.go
Extract chart and resource query services
2026-08-21 18:36:21 +01:00
route_inventory_test.go
Merge current main into release highlights
2026-10-15 11:50:26 +01:00
router_action_recovery_test.go
Fix agent update triage and durable action recovery
2026-07-23 11:19:50 +01:00
router_auth_additional_test.go
test(api): initialise persistent stores in bare auth fixtures
2026-10-11 01:22:36 +01:00
router_auth_bypass_inventory_test.go
Fix API auth failure handling
2026-04-26 17:26:16 +01:00
router_bench_test.go
Remove the summary chart routes no client calls
2026-10-07 23:14:49 +01:00
router_csrf_middleware_test.go
Fix concurrent CSRF token refresh
2026-04-26 15:27:10 +01:00
router_csrf_skip_inventory_test.go
Retire self-hosted trial activation callback
2026-04-28 16:36:09 +01:00
router_csrf_skip_routes_test.go
…
router_decomposition_contract_test.go
Extract configuration API runtime package
2026-08-21 14:56:07 +01:00
router_download_inventory_test.go
Separate agent remediation runtime
2026-08-29 23:48:28 +01:00
router_fixture_cleanup_test.go
test(api): own router worker cleanup in early API fixtures
2026-09-08 21:29:36 +01:00
router_frontend_inventory_test.go
…
router_general_test.go
…
router_handlers_additional_test.go
…
router_helpers_additional_test.go
…
router_helpers_more_test.go
Extract configuration API runtime package
2026-08-21 14:56:07 +01:00
router_helpers.go
Judge resources API freshness by the monitor's thresholds
2026-10-08 08:53:19 +01:00
router_integration_test.go
Join Router-owned limiter workers during shutdown
2026-10-05 13:20:08 +01:00
router_limiter_lifecycle_test.go
Join Router-owned limiter workers during shutdown
2026-10-05 13:20:08 +01:00
router_logging.go
Fix bootstrap token logger race
2026-05-03 12:25:56 +01:00
router_low_coverage_additional_test.go
Keep container diagnostics bootstrap credentials out of copied commands
2026-10-01 09:22:15 +01:00
router_misc_additional_test.go
Extract chart and resource query services
2026-08-21 18:36:21 +01:00
router_mock_platforms_test.go
Clear all errcheck and gofmt violations so make lint gates on real findings
2026-06-09 21:42:21 +01:00
router_proxy_auth_admin_routes_test.go
…
router_proxy_auth_security_test.go
…
router_public_paths_inventory_test.go
Separate agent remediation runtime
2026-08-29 23:48:28 +01:00
router_rate_limit_security_test.go
…
router_recovery_test.go
…
router_resource_wiring_test.go
Remove AI Discovery
2026-10-11 22:20:25 +01:00
router_routes_additional_test.go
Remove AI Discovery
2026-10-11 22:20:25 +01:00
router_routes_ai_execute_stream_test.go
…
router_routes_ai_execute_test.go
Fix API auth failure handling
2026-04-26 17:26:16 +01:00
router_routes_ai_helpers_test.go
…
router_routes_ai_models_test.go
…
router_routes_ai_relay.go
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
router_routes_ai_test_connection_test.go
Update stale test-connection assertion to the Provider & Models rename
2026-07-10 12:45:27 +01:00
router_routes_ai_test_provider_test.go
Move Patrol run Assistant handoffs server-side
2026-05-07 21:58:06 +01:00
router_routes_auth_security_branchcov0722pm_test.go
Cover SSO conversion, TrueNAS app mapping and config store round-trips
2026-07-22 16:18:00 +01:00
router_routes_auth_security_sso_runtime_test.go
…
router_routes_auth_security.go
fix(api): publish SSO config changes as immutable snapshots
2026-10-17 00:24:06 +01:00
router_routes_cloud_test.go
…
router_routes_cloud.go
Retire self-hosted trial activation callback
2026-04-28 16:36:09 +01:00
router_routes_debug_test.go
Fix API auth failure handling
2026-04-26 17:26:16 +01:00
router_routes_debug.go
…
router_routes_licensing_reporting_runtime_test.go
…
router_routes_licensing.go
Replace the two non-discriminating audit telemetry fields and guard the class
2026-08-05 17:33:57 +01:00
router_routes_monitoring.go
Remove AI Discovery
2026-10-11 22:20:25 +01:00
router_routes_registration.go
Merge current main into release highlights
2026-10-15 11:50:26 +01:00
router_set_monitor_agents_test.go
Preserve resource URLs across runtime identity changes
2026-07-23 22:33:07 +01:00
router_state_test.go
Preserve observed Docker storage evidence
2026-09-06 12:45:40 +01:00
router_test.go
fix(api): validate request-derived command origins
2026-08-08 09:42:21 +01:00
router_version_tenant_metrics_test.go
Use agent update target for stale notices
2026-06-03 14:42:43 +01:00
router_webhook_cidr_reload_test.go
Stabilize API test log capture
2026-08-31 19:47:01 +01:00
router_wrappers_additional_test.go
Retire disconnected incident recording and preserve archives
2026-09-06 17:42:24 +01:00
router.go
fix(api): publish SSO config changes as immutable snapshots
2026-10-17 00:24:06 +01:00
runtime_branding_test.go
feat(branding): customize application identity
2026-07-30 16:25:36 +01:00
runtime_branding.go
feat(branding): customize application identity
2026-07-30 16:25:36 +01:00
runtime_display_test.go
Show the real monitoring cadence to non-admin sessions
2026-08-12 09:20:01 +01:00
runtime_display.go
Show the real monitoring cadence to non-admin sessions
2026-08-12 09:20:01 +01:00
runtime_inventory_sources_test.go
Stop mock-mode callers that read identity rebuilding the estate view
2026-10-10 12:37:42 +01:00
runtime_inventory_sources.go
Make platform telemetry presentation evidence-aware
2026-08-14 00:18:23 +01:00
saml_handlers_additional_test.go
Fix SSO session display labels
2026-07-07 16:35:07 +01:00
saml_handlers_more_test.go
Bind SAML logins to the browser that started them
2026-10-07 23:02:13 +01:00
saml_handlers_success_test.go
Audit SSO entitlement and provider settings
2026-05-03 13:19:51 +01:00
saml_handlers.go
fix(api): publish SSO config changes as immutable snapshots
2026-10-17 00:24:06 +01:00
saml_runtime_license_gating_test.go
Refuse GET and HEAD on discovery settings and SAML logout
2026-10-07 19:31:50 +01:00
saml_service_additional_test.go
Bind SAML logins to the browser that started them
2026-10-07 23:02:13 +01:00
saml_service_test.go
Bind SAML logins to the browser that started them
2026-10-07 23:02:13 +01:00
saml_service.go
Bind SAML logins to the browser that started them
2026-10-07 23:02:13 +01:00
security_additional_coverage_test.go
Harden remaining CodeQL security boundaries
2026-07-09 19:46:40 +01:00
security_first_run_reset_test.go
fix(auth): synchronise local admin permissions during setup
2026-09-10 06:52:38 +01:00
security_first_run_reset.go
fix(auth): synchronise local admin permissions during setup
2026-09-10 06:52:38 +01:00
security_regenerate_token_scope_test.go
Stop token callers widening or bypassing their scopes
2026-10-11 15:57:35 +01:00
security_regression_test.go
Let a paid community install switch to the Pro runtime
2026-10-14 18:20:02 +01:00
security_request_body_test.go
Bound security request decoding
2026-08-31 01:43:55 +01:00
security_request_body.go
Bound security request decoding
2026-08-31 01:43:55 +01:00
security_setup_admin_sync_test.go
fix(auth): synchronise local admin permissions during setup
2026-09-10 06:52:38 +01:00
security_setup_fix_additional_test.go
Require instance-wide authority to rotate credentials by token
2026-10-11 18:10:20 +01:00
security_setup_fix_test.go
Persist first-run auth for systemd installs
2026-08-11 16:38:21 +01:00
security_setup_fix.go
Require an instance admin to replace instance credentials
2026-10-17 00:16:58 +01:00
security_setup_settings_preservation_test.go
Remove AI Discovery
2026-10-11 22:20:25 +01:00
security_status_additional_test.go
Harden first-run security boundaries
2026-07-10 01:28:33 +01:00
security_status_capabilities.go
Offer org owners the settings their own org's routes serve
2026-09-23 22:11:03 +01:00
security_status_capability_enforcement_test.go
Enforce explicit SSO administrator grants
2026-08-31 00:43:42 +01:00
security_test.go
test(api): isolate CSRF middleware fixtures
2026-09-17 12:35:20 +01:00
security_token_org_containment_test.go
Keep token management inside the caller's organizations
2026-10-11 17:56:38 +01:00
security_tokens_handlers_test.go
Allow existing API tokens to be renamed
2026-08-11 16:38:21 +01:00
security_tokens_lifecycle_test.go
Make action runner rotation activation-safe
2026-08-30 18:00:33 +01:00
security_tokens_owner_binding_test.go
Bind owner identity across token minting
2026-05-04 00:50:14 +01:00
security_tokens_rotate_test.go
…
security_tokens_test.go
…
security_tokens_update_test.go
Allow in-place API token scope edits (#1629)
2026-07-30 12:06:19 +01:00
security_tokens.go
Keep the token list handler in the shape its source pin expects
2026-10-11 19:15:10 +01:00
security.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
session_oidc_test.go
Fix SSO session display labels
2026-07-07 16:35:07 +01:00
session_store_test.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
session_store.go
fix(rbac): make SSO user access manageable
2026-08-09 13:36:07 +01:00
setup_and_adapters_branchcov0723am_test.go
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
slo_bench_test.go
Remove the summary chart routes no client calls
2026-10-07 23:14:49 +01:00
slo.go
Remove the summary chart routes no client calls
2026-10-07 23:14:49 +01:00
sso_admin_license_gating_test.go
Make self-hosted SSO Community-tier
2026-05-03 12:48:01 +01:00
sso_handlers_crud_test.go
Allow clearing SSO provider restriction fields from Settings
2026-07-07 22:04:46 +01:00
sso_handlers_test.go
…
sso_outbound_test.go
Harden remaining CodeQL security boundaries
2026-07-09 19:46:40 +01:00
sso_outbound.go
Harden remaining CodeQL security boundaries
2026-07-09 19:46:40 +01:00
state_provider_branchcov0723am_test.go
Cover telemetry classifiers, lifecycle records and install snapshot counts
2026-07-23 07:15:13 +01:00
state_provider.go
…
state_summary.go
feat: add fleet health home
2026-09-01 01:02:17 +01:00
stripe_webhook_handlers_additional_test.go
Remove monitored-system volume caps
2026-05-05 12:59:59 +01:00
stripe_webhook_handlers_test.go
fix(api): validate hosted magic-link URL before token mint
2026-08-08 12:07:40 +01:00
subscription_entitlements.go
Preserve resource URLs across runtime identity changes
2026-07-23 22:33:07 +01:00
subscription_state_handlers.go
…
subscription_state_reconciler_test.go
…
subscription_state_reconciler.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
system_settings_guest_docker_test.go
Give the Docker-in-LXC opt-in an admin Settings toggle
2026-08-20 14:27:12 +01:00
system_settings_handlers_test.go
Clear temperature SSH failure backoff on system-settings save (#1638)
2026-07-28 13:28:55 +01:00
system_settings_ssh_test.go
…
system_settings_telemetry_test.go
Initialize persistent auth in origin lifecycle fixture
2026-10-06 11:05:34 +01:00
system_settings_temperature_test.go
Fix API auth failure handling
2026-04-26 17:26:16 +01:00
system_settings_utils_test.go
…
system_settings_validate_test.go
Remove dead autoUpdateCheckInterval and autoUpdateTime settings
2026-07-28 11:13:37 +01:00
system_settings.go
Honour origin trust clears and unify webhook placeholder resolution
2026-10-06 10:40:18 +01:00
telemetry_audit_reads_test.go
Replace the two non-discriminating audit telemetry fields and guard the class
2026-08-05 17:33:57 +01:00
telemetry_audit_reads.go
Replace the two non-discriminating audit telemetry fields and guard the class
2026-08-05 17:33:57 +01:00
telemetry_history_reads_test.go
Count successful history reads beyond seven days
2026-10-16 19:21:03 +01:00
telemetry_history_reads.go
Count successful history reads beyond seven days
2026-10-16 19:21:03 +01:00
telemetry_licensed_features_test.go
Replace the two non-discriminating audit telemetry fields and guard the class
2026-08-05 17:33:57 +01:00
telemetry_licensed_features.go
Replace the two non-discriminating audit telemetry fields and guard the class
2026-08-05 17:33:57 +01:00
telemetry_pulse_intelligence_patrol_test.go
Add schema v17 Patrol provider, cost, autonomy, and outcome telemetry
2026-09-02 11:09:25 +01:00
telemetry_pulse_intelligence_test.go
feat(patrol): reconcile actionable findings on activation
2026-08-27 19:44:02 +01:00
telemetry_pulse_intelligence.go
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
telemetry_workload_history_test.go
Add workload history discovery lens
2026-08-30 13:49:58 +01:00
telemetry_workload_history.go
Add workload history discovery lens
2026-08-30 13:49:58 +01:00
tenant_legacy_token_test.go
…
tenant_org_binding_test.go
…
tenant_org_cookie_test.go
…
tenant_org_header_precedence_test.go
…
tenant_org_ids_binding_test.go
…
tenant_token_over_user_test.go
…
tenant_user_membership_test.go
Use strict org principals for runtime access
2026-05-04 23:16:15 +01:00
test_helpers_mt_test.go
…
test_log_capture_test.go
Stabilize API test log capture
2026-08-31 19:47:01 +01:00
test_remediation_engine_test.go
…
test_store_reset_helpers_test.go
…
trial_handlers_test.go
Retire self-hosted trial activation callback
2026-04-28 16:36:09 +01:00
truenas_app_action_provider.go
…
truenas_app_config_provider.go
…
truenas_app_providers_branchcov0722pm_test.go
Cover SSO conversion, TrueNAS app mapping and config store round-trips
2026-07-22 16:18:00 +01:00
truenas_app_read_provider.go
…
truenas_disk_history_integration_test.go
Use the stored timestamp contract in the connected History fixture
2026-10-05 20:19:42 +01:00
truenas_guidance_test.go
Distinguish Pulse service errors from failed TrueNAS polling
2026-10-06 06:30:24 +01:00
truenas_handlers_test.go
Keep platform polling independent of organisation metadata
2026-10-04 09:45:21 +01:00
truenas_handlers.go
Separate TrueNAS probes from runtime poll and readiness evidence
2026-10-03 23:58:11 +01:00
truenas_poll_evidence_test.go
Separate TrueNAS probes from runtime poll and readiness evidence
2026-10-03 23:58:11 +01:00
types_additional_test.go
Remove the summary chart routes no client calls
2026-10-07 23:14:49 +01:00
types.go
Remove the summary chart routes no client calls
2026-10-07 23:14:49 +01:00
unified_agent_config_binding_router_test.go
Diagnostics: handle blank-name instances; add report-token router test
2026-06-04 11:49:17 +01:00
unified_agent_config_scope_test.go
…
unified_agent_download_test.go
Prepare v6.0.0 release candidate
2026-06-04 14:07:14 +01:00
unified_agent_handlers_additional_test.go
Fix Proxmox physical disk inventory continuity
2026-07-23 22:05:09 +01:00
unified_agent_handlers_test.go
Audit agent config fetches only when they carry new information
2026-09-24 10:42:33 +01:00
unified_agent_lookup_test.go
Allow legacy report-only agent tokens to fetch their own config (#1254)
2026-06-04 08:39:31 +01:00
unified_agent_more_test.go
Separate agent remediation runtime
2026-08-29 23:48:28 +01:00
unified_agent_offline_preflight_test.go
test(agent): exercise offline FreeBSD preflight through local downloads
2026-09-22 18:42:51 +01:00
unified_agent_test.go
Serve signed Windows agents from canonical assets
2026-09-01 16:16:56 +01:00
unified_agent_upgrade_test.go
…
unified_agent_zip_branchcov0723am_test.go
Keep the real ZIP extraction limit without expensive fixture compression
2026-10-11 15:24:18 +01:00
unified_agent.go
Serve signed Windows agents from canonical assets
2026-09-01 16:16:56 +01:00
update_detection_test.go
…
update_detection.go
Harden unified agent update preflight
2026-06-02 23:54:48 +01:00
update_readiness_test.go
Extract configuration API runtime package
2026-08-21 14:56:07 +01:00
update_readiness.go
Keep integration-monitored machines out of Agent Doctor and surface workload-only agents
2026-07-21 21:24:15 +01:00
updates_test.go
Merge current main into release highlights
2026-10-15 11:50:26 +01:00
updates.go
Merge current main into release highlights
2026-10-15 11:50:26 +01:00
user_limit_enforcement.go
…
user_limit_isolation_test.go
…
vmware_handlers_test.go
test(vmware): align API probe expectations
2026-09-13 10:59:02 +01:00
vmware_handlers.go
Fix VMware connection test degradation handling
2026-07-23 22:06:57 +01:00
websocket_isolation_test.go
Remove 198 unreachable Go functions
2026-06-03 12:29:37 +01:00
websocket_origin_security_test.go
…

README.md

Internal API Package

This directory contains the API server implementation for Pulse.

Important Note About frontend-modern/

The frontend-modern/ subdirectory that appears here is:

  • AUTO-GENERATED during builds
  • NOT the source code - just a build artifact
  • IN .gitignore - never committed
  • REQUIRED BY GO - The embed directive needs it here

Frontend Development Location

👉 Edit frontend files at: ${PULSE_REPOS_DIR}/pulse/frontend-modern/src/

Why This Structure?

Go's //go:embed directive has limitations:

  1. Cannot use ../ paths to access parent directories
  2. Cannot follow symbolic links
  3. Must embed files within the Go module

This is a known Go limitation and our structure works around it.

Reference in New Issue View Git Blame Copy Permalink