rcourtman 2ebe65bbc5 security: add scope checks to AI Patrol and agent profile endpoints ...

- AI Patrol mutation endpoints (acknowledge, dismiss, suppress, snooze, resolve,
  findings/note, suppressions/*) now require ai:execute scope to prevent
  low-privilege tokens from blinding patrol by hiding/suppressing findings

- Agent profile admin endpoints (/api/admin/profiles/*) now require
  settings:write scope to prevent low-privilege tokens from modifying
  fleet-wide agent behavior

2026-02-03 19:29:56 +00:00

..

adapters

test: expand backend coverage

2026-01-25 21:08:44 +00:00

approval

security: fix AI OAuth scope bypass, approval replay attacks, and approval endpoint scope gating

2026-02-03 19:15:15 +00:00

baseline

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

chat

fix: address AI patrol concurrency and streaming issues

2026-02-03 14:39:00 +00:00

circuit

test: expand backend coverage

2026-01-25 21:08:44 +00:00

context

fix: Update runtime config when toggling Docker update actions setting

2026-01-03 11:14:17 +00:00

correlation

test: expand backend coverage

2026-01-25 21:08:44 +00:00

cost

fix(pro): add error tracking to cost store and fix race condition

2026-01-02 13:59:26 +00:00

eval

fix(test): remove flaky content type test in eval

2026-02-02 19:26:24 +00:00

finding

refactor(ai): extract shared Finding type to eliminate duplicate structs

2026-02-01 23:26:20 +00:00

forecast

test: expand backend coverage

2026-01-25 21:08:44 +00:00

investigation

Fix AI investigation context and UI settings

2026-02-03 16:24:56 +00:00

knowledge

Update AI core services and adapters

2026-01-28 16:51:53 +00:00

learning

test: expand backend coverage

2026-01-25 21:08:44 +00:00

memory

fix(ai): improve context store thread-safety and avoid recursive locking

2026-02-01 16:28:04 +00:00

patterns

Enhance devcontainer and CI workflows

2026-01-01 22:29:15 +00:00

providers

Revert "Detect incompatible models that don't support function calling"

2026-02-03 13:36:30 +00:00

proxmox

test: expand backend coverage

2026-01-25 21:08:44 +00:00

remediation

fix(patrol): improve stream subscriber safety and detect stuck runs

2026-02-01 18:07:51 +00:00

safety

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

tools

security: fix AI OAuth scope bypass, approval replay attacks, and approval endpoint scope gating

2026-02-03 19:15:15 +00:00

unified

fix: finding drawer actions (notes persist, acknowledge visual, discuss context)

2026-02-02 15:18:51 +00:00

alert_adapter_test.go

feat: add AI Intelligence system with investigation and forecasting

2026-01-24 22:41:43 +00:00

alert_adapter.go

feat: enhance AI patrol with streaming and improved findings

2026-01-22 22:30:35 +00:00

alert_provider_additional_test.go

test: expand backend coverage

2026-01-25 21:08:44 +00:00

alert_provider_test.go

fix: AI Commands toggle now updates immediately in UI. Related to #952

2025-12-29 13:56:29 +00:00

alert_provider.go

feat: enhance AI patrol with streaming and improved findings

2026-01-22 22:30:35 +00:00

alert_threshold_adapter_test.go

fix: Docker container update detection showing false positives

2025-12-29 13:49:04 +00:00

alert_threshold_adapter.go

refactor(ai): Remove over-engineered URL discovery service

2025-12-10 08:35:24 +00:00

alert_triggered_test.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

alert_triggered.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

baseline_adapter_test.go

fix: Docker container update detection showing false positives

2025-12-29 13:49:04 +00:00

baseline_adapter.go

Enhance devcontainer and CI workflows

2026-01-01 22:29:15 +00:00

baseline_exports.go

feat(ai): Wire baseline learning loop into router startup

2025-12-12 11:29:47 +00:00

config.go

AI Problem Solver implementation and various fixes

2025-12-06 23:46:08 +00:00

correlation_exports.go

feat(ai): Add multi-resource correlation detection (Phase 6)

2025-12-12 14:26:10 +00:00

cost_persistence_test.go

fix: Docker container update detection showing false positives

2025-12-29 13:49:04 +00:00

cost_persistence.go

feat(ai): Add enriched context with historical trends and predictions

2025-12-12 09:45:57 +00:00

coverage_increase_test.go

test(ai): update tests for license gate removals and DeepSeek cleanup

2026-02-01 18:08:02 +00:00

demo_test.go

feat: add AI Intelligence system with investigation and forecasting

2026-01-24 22:41:43 +00:00

demo.go

feat: add AI Intelligence system with investigation and forecasting

2026-01-24 22:41:43 +00:00

discovery_adapter_test.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

discovery_adapter.go

security: add scope checks to AI Patrol and agent profile endpoints

2026-02-03 19:29:56 +00:00

exports_test.go

test(ai): improve AI package test coverage from 59.7% to 69.5%

2025-12-19 21:53:06 +00:00

findings_additional_test.go

test: expand backend coverage

2026-01-25 21:08:44 +00:00

findings_clustering_test.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

findings_coverage_test.go

fix(patrol): address multiple issues in patrol service

2026-01-02 12:45:00 +00:00

findings_dedup_test.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

findings_investigation_test.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

findings_persistence_test.go

fix: AI Commands toggle now updates immediately in UI. Related to #952

2025-12-29 13:56:29 +00:00

findings_persistence.go

feat: add AI Intelligence system with investigation and forecasting

2026-01-24 22:41:43 +00:00

findings_test.go

feat(patrol): implement patrol findings, evaluation, and investigation logic

2026-01-31 16:23:08 +00:00

findings_timeout_test.go

feat(patrol): add timeout handling and shorter retry cooldown

2026-02-01 10:12:23 +00:00

findings_tools_adapter_test.go

refactor(ai): Rename findings adapter and add chat patrol alias

2026-01-19 19:20:49 +00:00

findings_tools_adapter.go

refactor(ai): Rename findings adapter and add chat patrol alias

2026-01-19 19:20:49 +00:00

findings.go

refactor(ai): extract shared Finding type to eliminate duplicate structs

2026-02-01 23:26:20 +00:00

incident_coordinator_test.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

incident_coordinator.go

feat: add AI Intelligence system with investigation and forecasting

2026-01-24 22:41:43 +00:00

intelligence_coverage_test.go

Improve internal package test coverage

2025-12-29 17:25:21 +00:00

intelligence_test.go

refactor: fix lint issues in internal/ai package

2026-01-02 19:53:01 +00:00

intelligence.go

feat: add AI Intelligence system with investigation and forecasting

2026-01-24 22:41:43 +00:00

investigation_adapter.go

refactor(ai): extract shared Finding type to eliminate duplicate structs

2026-02-01 23:26:20 +00:00

kubernetes_analysis_test.go

Enhance devcontainer and CI workflows

2026-01-01 22:29:15 +00:00

kubernetes_analysis.go

fix: Allow Host Agent thresholds to be set to 0 to disable alerting. Related to #864

2025-12-20 20:25:20 +00:00

memory_exports.go

feat(ai): Add operational memory (Phase 3) - change detection and remediation logging

2025-12-12 13:49:37 +00:00

metadata_provider_test.go

fix: Docker container update detection showing false positives

2025-12-29 13:49:04 +00:00

metadata_provider.go

fix: add missing HandleLicenseFeatures method and related changes

2025-12-19 22:59:52 +00:00

metrics_history_adapter_test.go

fix: Docker container update detection showing false positives

2025-12-29 13:49:04 +00:00

metrics_history_adapter.go

feat(ai): Add enriched context with historical trends and predictions

2025-12-12 09:45:57 +00:00

mock_test.go

Improve internal package test coverage

2025-12-29 17:25:21 +00:00

patrol_ai_additional_test.go

docs: add comprehensive deep-dive documentation for AI subsystems

2026-02-02 10:29:07 +00:00

patrol_ai_eval_additional_test.go

docs: add comprehensive deep-dive documentation for AI subsystems

2026-02-02 10:29:07 +00:00

patrol_ai_intelligence_test.go

test(ai): add patrol AI analysis and intelligence tests

2026-02-02 11:15:07 +00:00

patrol_ai_more_test.go

test(ai): add patrol AI analysis and intelligence tests

2026-02-02 11:15:07 +00:00

patrol_ai_test.go

fix(ai): filter DeepSeek DSML internal function-call format from responses

2026-02-01 18:07:41 +00:00

patrol_ai.go

fix(patrol): improve stream subscriber safety and detect stuck runs

2026-02-01 18:07:51 +00:00

patrol_alerts_review_test.go

test(ai): add patrol alert review, resource state, and scoped run tests

2026-02-02 11:15:19 +00:00

patrol_context_additional_test.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

patrol_coverage_test.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

patrol_e2e_integration_test.go

refactor(ai): extract shared Finding type to eliminate duplicate structs

2026-02-01 23:26:20 +00:00

patrol_findings_additional_test.go

docs: add comprehensive deep-dive documentation for AI subsystems

2026-02-02 10:29:07 +00:00

patrol_findings.go

refactor(ai): extract shared Finding type to eliminate duplicate structs

2026-02-01 23:26:20 +00:00

patrol_history_persistence_test.go

docs: add comprehensive deep-dive documentation for AI subsystems

2026-02-02 10:29:07 +00:00

patrol_history_persistence.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

patrol_init_additional_test.go

docs: add comprehensive deep-dive documentation for AI subsystems

2026-02-02 10:29:07 +00:00

patrol_init.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

patrol_integration_test.go

fix(patrol): improve service lifecycle, graceful shutdown, and concurrency

2026-02-01 16:27:25 +00:00

patrol_lifecycle_integration_test.go

fix(patrol): improve service lifecycle, graceful shutdown, and concurrency

2026-02-01 16:27:25 +00:00

patrol_metrics_additional_test.go

docs: add comprehensive deep-dive documentation for AI subsystems

2026-02-02 10:29:07 +00:00

patrol_metrics.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

patrol_reconcile_test.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

patrol_resource_state_test.go

test(ai): add patrol alert review, resource state, and scoped run tests

2026-02-02 11:15:19 +00:00

patrol_run_additional_test.go

docs: add comprehensive deep-dive documentation for AI subsystems

2026-02-02 10:29:07 +00:00

patrol_run_test.go

fix: address AI patrol concurrency and streaming issues

2026-02-03 14:39:00 +00:00

patrol_run.go

fix: address AI patrol concurrency and streaming issues

2026-02-03 14:39:00 +00:00

patrol_scoped_run_test.go

test(ai): add patrol alert review, resource state, and scoped run tests

2026-02-02 11:15:19 +00:00

patrol_signals_test.go

feat(patrol): implement patrol findings, evaluation, and investigation logic

2026-01-31 16:23:08 +00:00

patrol_signals.go

feat(patrol): implement patrol findings, evaluation, and investigation logic

2026-01-31 16:23:08 +00:00

patrol_test.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

patrol_thresholds_test.go

feat: add AI Intelligence system with investigation and forecasting

2026-01-24 22:41:43 +00:00

patrol_triggers_test.go

fix: address AI patrol concurrency and streaming issues

2026-02-03 14:39:00 +00:00

patrol_triggers.go

fix: address AI patrol concurrency and streaming issues

2026-02-03 14:39:00 +00:00

patrol.go

Fix: patrol interval not applied — omitempty caused preset to persist across reloads

2026-02-02 22:53:24 +00:00

pattern_exports.go

feat(ai): Add failure pattern detection for predictive intelligence (Phase 5)

2025-12-12 14:11:28 +00:00

resource_context_test.go

Improve internal package test coverage

2025-12-29 17:25:21 +00:00

resource_context.go

refactor: fix lint issues in internal/ai package

2026-01-02 19:53:01 +00:00

routing_test.go

Improve internal package test coverage

2025-12-29 17:25:21 +00:00

routing.go

Enhance devcontainer and CI workflows

2026-01-01 22:29:15 +00:00

sanitize_test.go

refactor(ai): Remove over-engineered URL discovery service

2025-12-10 08:35:24 +00:00

service_coverage_imp_test.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

service_extended_test.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

service_remediation_test.go

Enhance devcontainer and CI workflows

2026-01-01 22:29:15 +00:00

service_test.go

Enhance devcontainer and CI workflows

2026-01-01 22:29:15 +00:00

service_tools_test.go

security: fix multiple vulnerabilities (SAML, SSRF, Auth)

2026-02-03 18:39:15 +00:00

service.go

security: fix multiple vulnerabilities (SAML, SSRF, Auth)

2026-02-03 18:39:15 +00:00

target_host_test.go

Enhance devcontainer and CI workflows

2026-01-01 22:29:15 +00:00