gsadmin/sencho
1
0
Fork 0
mirror of https://github.com/Studio-Saelix/sencho.git synced 2026-08-05 08:27:42 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,842 Commits 7 Branches 32 Tags
docs/tutorials-batch-1
Commit Graph

252 Commits

Author SHA1 Message Date
Anso 2e2b095b00 fix(proxy): forward scoped stack evidence for alerts, auto-heal, and node-wide image refresh (#1749) 
* fix(proxy): forward scoped stack evidence for alerts, auto-heal, and node-wide image refresh

Extend the remote proxy scoped-evidence mechanism beyond /stacks/*
routes. Three new gates in runGatedProxy:

- Alerts POST: reuse the already-buffered body from the existing
  isAlertCreateRoute block, extract stack_name, check hub-side
  scoped permission, and forward SCOPED_STACK_AUTH_EVIDENCE headers.
- Auto-heal POST: same pattern with new body buffering and encoding
  rejection (no pre-existing buffering exists for this route).
- Node-wide image refresh: elevate PROXY_ROLE_HEADER to node-admin
  when the user has a scoped node:manage grant on the target node,
  matching the Settings pre-auth gate pattern.

Also extend classifyStackApiPath to recognize
/image-updates/refresh/:stackName as a named-stack route (stack:deploy),
ready for when PR #1743 adds the per-stack refresh endpoint.

Explicitly excluded: ID-based routes (DELETE /alerts/:id,
PATCH/DELETE /auto-heal/policies/:id) where the hub cannot resolve
remote-owned IDs to stack names; GET routes where stack:read is
globally granted to every role; and POST /auto-update/execute where
multi-stack/wildcard targets need a different evidence format.

* chore(proxy): add RBAC diagnostic logging to scoped permission path

Add developer_mode-gated diagnostic logs to checkPermission to expose
which check is failing when a scoped user is denied: effective tier,
DB query parameters, and node-scoped assignment lookups.

* chore(rbac): log effective tier and license status when scoped checks are blocked

Add an always-visible console.warn in checkPermission when the
effective tier prevents scoped role-assignment lookups, logging
both the resolved tier and the raw license_status DB value. This
surfaces the failure reason in container logs without requiring
developer_mode, so QA can diagnose why scoped users are denied.

* chore(rbac): sanitize scoped-tier log values to satisfy CodeQL log-injection check
 2026-08-01 23:37:35 -04:00
dependabot[bot] 8deea8af7e chore(deps-dev): bump @playwright/test in the all-npm-root group (#1730) 
Bumps the all-npm-root group with 1 update: [@playwright/test](https://github.com/microsoft/playwright).


Updates `@playwright/test` from 1.61.1 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](https://github.com/microsoft/playwright/compare/v1.61.1...v1.62.0)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.62.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm-root
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-29 12:29:43 -04:00
sencho-quartermaster[bot] ac5254fced chore(main): release 0.96.0 (#1621) 2026-07-26 10:11:29 -04:00
dependabot[bot] 8d60d491e8 chore(deps-dev): bump fast-uri (#1682) 
Bumps the all-npm-root-security group with 1 update in the / directory: [fast-uri](https://github.com/fastify/fast-uri).


Updates `fast-uri` from 3.1.3 to 3.1.4
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.4
  dependency-type: indirect
  dependency-group: all-npm-root-security
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-22 20:55:22 -04:00
Anso 9b3f5c5a90 docs: relicense Sencho to AGPLv3 and reframe Community positioning (#1623) 
* docs: relicense Sencho to AGPLv3 and reframe Community positioning

Replace BSL with AGPLv3 for the public Community product, update contributor
and licensing copy for Community-focused contributions, and surface source
and license links in Settings About.

* docs: clarify CLA scope and Community contribution framing

* fix(ui): split About link constants and harden AboutSection test selectors
 2026-07-13 03:49:29 -04:00
sencho-quartermaster[bot] fb178871ad chore(main): release 0.95.0 (#1583) 
* chore(main): release 0.95.0

* chore: credit external contributors in changelog

---------

Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-07-11 22:19:04 -04:00
dependabot[bot] 35c9b0db9b chore(deps-dev): bump @commitlint/cli in the all-npm-root group (#1594) 
Bumps the all-npm-root group with 1 update: [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli).


Updates `@commitlint/cli` from 21.2.0 to 21.2.1
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.1/@commitlint/cli)

---
updated-dependencies:
- dependency-name: "@commitlint/cli"
  dependency-version: 21.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm-root
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-08 14:07:54 -04:00
sencho-quartermaster[bot] 0bc393529f chore(main): release 0.94.1 (#1577) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-07-06 05:24:00 -04:00
sencho-quartermaster[bot] abf530c3f6 chore(main): release 0.94.0 (#1551) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-07-06 04:28:19 -04:00
sencho-quartermaster[bot] bc111d28f3 chore(main): release 0.93.4 (#1548) 2026-07-01 23:12:33 -04:00
sencho-quartermaster[bot] 0adc2b5eb2 chore(main): release 0.93.3 (#1536) 2026-07-01 22:56:46 -04:00
dependabot[bot] d96359d989 chore(deps-dev): bump the all-npm-root group with 2 updates (#1541) 
Bumps the all-npm-root group with 2 updates: [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) and [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional).


Updates `@commitlint/cli` from 21.1.0 to 21.2.0
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.0/@commitlint/cli)

Updates `@commitlint/config-conventional` from 21.1.0 to 21.2.0
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.0/@commitlint/config-conventional)

---
updated-dependencies:
- dependency-name: "@commitlint/cli"
  dependency-version: 21.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm-root
- dependency-name: "@commitlint/config-conventional"
  dependency-version: 21.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm-root
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-01 12:44:31 -04:00
sencho-quartermaster[bot] af7b920b97 chore(main): release 0.93.2 (#1529) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-06-30 02:08:25 -04:00
sencho-quartermaster[bot] b7cfdb5086 chore(main): release 0.93.1 (#1517) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-06-29 21:55:16 -04:00
sencho-quartermaster[bot] dd202770ed chore(main): release 0.93.0 (#1400) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-06-29 01:28:41 -04:00
dependabot[bot] 2539709d74 chore(deps-dev): bump the all-npm-root group with 3 updates (#1438) 
Bumps the all-npm-root group with 3 updates: [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli), [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) and [@playwright/test](https://github.com/microsoft/playwright).


Updates `@commitlint/cli` from 21.0.2 to 21.1.0
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.1.0/@commitlint/cli)

Updates `@commitlint/config-conventional` from 21.0.2 to 21.1.0
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.1.0/@commitlint/config-conventional)

Updates `@playwright/test` from 1.61.0 to 1.61.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](https://github.com/microsoft/playwright/compare/v1.61.0...v1.61.1)

---
updated-dependencies:
- dependency-name: "@commitlint/cli"
  dependency-version: 21.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm-root
- dependency-name: "@commitlint/config-conventional"
  dependency-version: 21.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm-root
- dependency-name: "@playwright/test"
  dependency-version: 1.61.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm-root
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-24 16:15:04 -04:00
sencho-quartermaster[bot] ce9e1bca7e chore(main): release 0.92.0 (#1350) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-06-19 01:18:28 -04:00
dependabot[bot] 465890bcac chore(deps-dev): bump @playwright/test in the all-npm-root group (#1385) 
Bumps the all-npm-root group with 1 update: [@playwright/test](https://github.com/microsoft/playwright).


Updates `@playwright/test` from 1.60.0 to 1.61.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](https://github.com/microsoft/playwright/compare/v1.60.0...v1.61.0)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.61.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm-root
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-17 13:25:55 -04:00
sencho-quartermaster[bot] fd10c49ee4 chore(main): release 0.91.1 (#1344) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
Co-authored-by: Anso <dev@saelix.com>
 2026-06-09 21:08:13 -04:00
sencho-quartermaster[bot] 4a619e69f4 chore(main): release 0.91.0 (#1325) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
Co-authored-by: Anso <dev@saelix.com>
 2026-06-08 11:25:51 -04:00
sencho-quartermaster[bot] 7df5ffde54 chore(main): release 0.90.0 (#1317) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-06-05 23:03:29 -04:00
sencho-quartermaster[bot] 1f859d26d2 chore(main): release 0.89.0 (#1308) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
Co-authored-by: Anso <dev@saelix.com>
 2026-06-04 23:16:00 -04:00
dependabot[bot] e3a9cf922f chore(deps-dev): bump the all-npm-root group with 3 updates (#1305) 
Bumps the all-npm-root group with 3 updates: [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli), [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) and [otplib](https://github.com/yeojz/otplib/tree/HEAD/packages/otplib).


Updates `@commitlint/cli` from 21.0.1 to 21.0.2
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.0.2/@commitlint/cli)

Updates `@commitlint/config-conventional` from 21.0.1 to 21.0.2
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.0.2/@commitlint/config-conventional)

Updates `otplib` from 13.4.0 to 13.4.1
- [Release notes](https://github.com/yeojz/otplib/releases)
- [Commits](https://github.com/yeojz/otplib/commits/v13.4.1/packages/otplib)

---
updated-dependencies:
- dependency-name: "@commitlint/cli"
  dependency-version: 21.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm-root
- dependency-name: "@commitlint/config-conventional"
  dependency-version: 21.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm-root
- dependency-name: otplib
  dependency-version: 13.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm-root
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anso <dev@saelix.com>
 2026-06-04 16:24:06 -04:00
sencho-quartermaster[bot] cfadd76159 chore(main): release 0.88.2 (#1298) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-06-03 16:13:31 -04:00
sencho-quartermaster[bot] f007cf4e28 chore(main): release 0.88.1 (#1295) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
Co-authored-by: Anso <dev@saelix.com>
 2026-06-03 08:43:22 -04:00
sencho-quartermaster[bot] c65c193a59 chore(main): release 0.88.0 (#1275) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-06-02 22:15:56 -04:00
sencho-quartermaster[bot] 53be6a258e chore(main): release 0.87.0 (#1186) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-06-01 17:41:06 -04:00
sencho-quartermaster[bot] 249cfdcc87 chore(main): release 0.86.6 (#1180) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-23 16:17:15 -04:00
sencho-quartermaster[bot] 579e672e24 chore(main): release 0.86.5 (#1167) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-23 03:08:53 -04:00
sencho-quartermaster[bot] e9af5c0d5d chore(main): release 0.86.4 (#1165) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-23 00:17:49 -04:00
sencho-quartermaster[bot] da3e7adc30 chore(main): release 0.86.3 (#1163) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-22 21:11:38 -04:00
sencho-quartermaster[bot] 0fdcec41c7 chore(main): release 0.86.2 (#1160) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-22 16:32:20 -04:00
sencho-quartermaster[bot] c87dc7e747 chore(main): release 0.86.1 (#1157) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-22 13:43:39 -04:00
sencho-quartermaster[bot] 606bdb6b67 chore(main): release 0.86.0 (#1139) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-22 02:41:22 -04:00
sencho-quartermaster[bot] 0a3e76c0bb chore(main): release 0.85.0 (#1135) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-21 11:48:29 -04:00
sencho-quartermaster[bot] 620e28f352 chore(main): release 0.84.3 (#1132) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-21 01:04:21 -04:00
sencho-quartermaster[bot] 8fd02ef39b chore(main): release 0.84.2 (#1127) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-20 13:06:01 -04:00
sencho-quartermaster[bot] 6bd4645ea9 chore(main): release 0.84.1 (#1125) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-20 03:37:34 -04:00
sencho-quartermaster[bot] b4d92621d4 chore(main): release 0.84.0 (#1120) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-20 02:06:02 -04:00
sencho-quartermaster[bot] 9362c7215e chore(main): release 0.83.1 (#1118) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-19 19:50:34 -04:00
sencho-quartermaster[bot] 69bc955c3b chore(main): release 0.83.0 (#1114) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-19 19:13:57 -04:00
sencho-quartermaster[bot] 7f81f06bbd chore(main): release 0.82.1 (#1112) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-19 07:29:56 -04:00
sencho-quartermaster[bot] 5a2aed22fd chore(main): release 0.82.0 (#1109) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-19 00:14:46 -04:00
sencho-quartermaster[bot] 9f22f73cfb chore(main): release 0.81.15 (#1106) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-18 22:10:34 -04:00
sencho-quartermaster[bot] 1b33f2d064 chore(main): release 0.81.14 (#1103) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-18 17:39:24 -04:00
sencho-quartermaster[bot] 7dff6127e7 chore(main): release 0.81.13 (#1101) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-18 16:51:05 -04:00
sencho-quartermaster[bot] 7d2b8bee7a chore(main): release 0.81.12 (#1099) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-18 01:53:10 -04:00
sencho-quartermaster[bot] 77782ce1ff chore(main): release 0.81.11 (#1097) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-18 00:16:31 -04:00
sencho-quartermaster[bot] d9b4f71e0d chore(main): release 0.81.10 (#1095) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-17 22:05:24 -04:00
sencho-quartermaster[bot] 54c07d4930 chore(main): release 0.81.9 (#1093) 
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
 2026-05-17 20:15:09 -04:00