Anso 79b86ddcd4 fix(security): harden authentication and outbound targets (#1877) ...

* fix(security): harden auth and outbound targets

* fix(security): prevent login lockout and honor trusted schemes

2026-09-01 16:52:12 -04:00

..

apiTokenAuth.ts

fix(api-tokens): harden rate limiting and surface list-load errors (#1292)

2026-06-03 08:18:16 -04:00

apiTokenFormat.ts

feat(api-tokens): switch to sen_sk_ prefixed opaque keys (#1062)

2026-05-15 18:21:28 -04:00

audit-summaries.ts

feat(recovery): make rollback-recovery image lifecycle visible and controllable (#1753)

2026-08-02 21:55:22 -04:00

authoredComposeArgs.ts

feat(git): classify managed-file changes before apply (#1832)

2026-08-14 09:53:31 -04:00

binaryDetect.ts

feat(files): per-stack file explorer (#780)

2026-04-26 13:05:19 -04:00

bulkPaths.ts

feat(files): copy & duplicate, bulk actions, disk-backed uploads, and an accessible file tree (#1409)

2026-06-22 19:33:06 -04:00

candidateComposeInvocation.ts

feat(git): classify managed-file changes before apply (#1832)

2026-08-14 09:53:31 -04:00

composePathMapping.ts

fix: enforce 1:1 compose path mapping for Pilot agent mounts (#1516)

2026-06-29 14:35:50 -04:00

csv.ts

fix(audit-log): neutralize CSV export injection, clamp pagination, bound anomaly history (#1259)

2026-05-31 16:36:07 -04:00

debug.ts

fix: harden stack label permissions (#1036)

2026-05-13 11:56:22 -04:00

dockerIgnoreMatch.ts

feat(git): complete-project materialization with a managed-project manifest (#1786)

2026-08-10 17:12:55 -04:00

ErrorParser.ts

feat: implement smart error parser and post-deploy health probe

2026-03-05 19:59:35 -05:00

errors.ts

refactor(backend): extract 8 low-blast-radius route groups into routers (phase 4a-1) (#734)

2026-04-23 20:24:37 -04:00

gitComposeFiles.ts

feat: ordered multi-file Compose for Git sources (#1380)

2026-06-17 13:24:55 -04:00

gitSourceHttp.ts

feat(git): SSH deploy keys with strict host-key verification (#1867)

2026-08-29 16:52:32 -04:00

hashing.ts

fix(deploy): verify atomic-deploy backup integrity before restore (#1422)

2026-06-24 19:46:59 -04:00

image-ref.ts

fix(security): harden Trivy scan lifecycle, logging, and docs (#639)

2026-04-16 20:32:38 -04:00

log-parsing.ts

fix(observability): gate global logs to admins, scope to managed containers, harden SSE (#1254)

2026-05-29 21:09:20 -04:00

managed-containers.ts

fix(observability): gate global logs to admins, scope to managed containers, harden SSE (#1254)

2026-05-29 21:09:20 -04:00

mapWithConcurrency.ts

feat: node-scoped Networking operator page (#1603)

2026-07-14 20:18:10 -04:00

misconfig-ack-filter.ts

feat: stack glob patterns and route severity levels (#1651)

2026-07-19 14:54:48 -04:00

notificationMessage.ts

fix(stack-activity): per-stack history integrity, attribution, sanitization (#1228)

2026-05-25 21:09:00 -04:00

oneShotCompletion.ts

fix: recognize clean one-shot completions in health gate and drift (#1691)

2026-07-24 09:41:21 -04:00

outboundTarget.ts

fix(security): harden authentication and outbound targets (#1877)

2026-09-01 16:52:12 -04:00

parseIntParam.ts

refactor(backend): hoist parseIntParam helper to utils (#798)

2026-04-27 00:39:28 -04:00

policy-risk.ts

fix: name matched risk inputs in policy block messages (#1471)

2026-06-26 15:34:24 -04:00

preflight-ack-filter.ts

feat: acknowledge Compose Doctor preflight findings per stack (#1560)

2026-07-05 04:12:03 -04:00

remoteTarget.ts

fix(fleet): route remaining fleet dispatches through getProxyTarget for pilot-agent nodes (#1152)

2026-05-22 00:30:51 -04:00

requestTiming.ts

feat: add developer-mode startup and stack hydration timing (#1619)

2026-07-14 17:24:25 -04:00

safeLog.ts

fix(webhooks): address Codex review of PR #1177 (#1181)

2026-05-23 16:03:48 -04:00

senchoRollbackHold.ts

fix(security): tie fixable CVE posture to image-update evidence (#1815)

2026-08-12 15:02:14 -04:00

severity.ts

refactor(backend): hoist severity Sets to utils/severity.ts (#795)

2026-04-27 00:05:12 -04:00

snapshot-capture.ts

fix(security): harden authentication and outbound targets (#1877)

2026-09-01 16:52:12 -04:00

spawnErrors.ts

fix(spawn): attribute ENOMEM and ENOENT-under-memory-pressure spawn failures to host OOM (#1111)

2026-05-19 07:27:12 -04:00

suppression-filter.ts

fix(security): tie fixable CVE posture to image-update evidence (#1815)

2026-08-12 15:02:14 -04:00

targetVersion.ts

fix: repin semver compose tags during fleet self-update (#1587)

2026-07-07 14:40:50 -04:00

validation.ts

fix(security): harden authentication and outbound targets (#1877)

2026-09-01 16:52:12 -04:00

version-check.ts

chore: gate self-update prompts on published registry images (#1519)

2026-06-29 16:29:56 -04:00

withTimeout.ts

fix(monitor): decouple janitor disk-usage check from 30s cycle (F-6) (#1164)

2026-05-23 00:04:05 -04:00

wsUrl.ts

feat(mesh): route mesh traffic over Distributed API remotes (#1048)

2026-05-14 20:51:42 -04:00