Anso 69b6ac1f3b fix: harden stack file explorer operations (#1028) ...

* fix: harden stack file explorer operations

* fix: update Docker toolchain to Go 1.26.3

* fix: repair Dockerfile tr argument split across lines

* fix: bump protobufjs to clear npm audit high-severity advisories

2026-05-12 15:49:51 -04:00

..

helpers

refactor(backend): collapse entitlement provider abstraction back to LicenseService (#889)

2026-05-02 23:45:44 -04:00

agents-routes.test.ts

refactor(backend): add route tests then extract settings, scheduled-tasks, agents (phase 4b) (#737)

2026-04-23 21:22:39 -04:00

alerts-api.test.ts

fix(notification-routing): harden with security fixes, validation, and test coverage (#573)

2026-04-13 22:17:03 -04:00

api-tokens.test.ts

fix(api-tokens): harden with security fixes, design compliance, and test coverage (#567)

2026-04-13 18:32:07 -04:00

audit-anomaly-service.test.ts

feat(audit-log): signal rail, day-banded stream, anomaly detection (#682)

2026-04-18 18:24:27 -04:00

audit-log.test.ts

feat(stacks): per-service start/stop/restart lifecycle actions (#778)

2026-04-25 17:26:04 -04:00

auth.test.ts

fix(licensing): rename variant values to skipper/admiral and store resolved type (#379)

2026-04-05 18:45:57 -04:00

AutoHealService.test.ts

feat: auto-heal policies for unhealthy containers (#671)

2026-04-17 22:45:06 -04:00

binary-detection.test.ts

feat(files): per-stack file explorer (#780)

2026-04-26 13:05:19 -04:00

blueprint-analyzer.test.ts

feat(blueprints): backend foundation for fleet-wide compose templates (#860)

2026-05-01 18:57:44 -04:00

blueprints-route-validation.test.ts

fix: harden blueprint deployment guardrails (#1027)

2026-05-12 15:49:19 -04:00

blueprints-withdraw-route.test.ts

feat(blueprints): capture compose snapshot before stateful eviction (#957)

2026-05-06 21:58:45 -04:00

blueprints.test.ts

fix: harden blueprint deployment guardrails (#1027)

2026-05-12 15:49:19 -04:00

cache-endpoints.test.ts

perf: unify caching behind a single CacheService and enable HTTP compression (#468)

2026-04-10 10:05:05 -04:00

cache-service.test.ts

perf: unify caching behind a single CacheService and enable HTTP compression (#468)

2026-04-10 10:05:05 -04:00

cloud-backup-routes.test.ts

feat(cloud-backup): mirror fleet snapshots to S3-compatible storage (#782)

2026-04-26 15:42:21 -04:00

cloud-backup-service.test.ts

feat(cloud-backup): mirror fleet snapshots to S3-compatible storage (#782)

2026-04-26 15:42:21 -04:00

compose-images.test.ts

feat(security): enforce scan policies as a pre-deploy gate (#719)

2026-04-21 00:14:11 -04:00

compose-service.test.ts

feat(registries): harden Private Registry Credentials feature (#597)

2026-04-14 17:58:57 -04:00

container-lifecycle-classifier.test.ts

fix(docker-events): harden crash detection against edge cases (#591)

2026-04-14 14:37:28 -04:00

convert.test.ts

feat: docker run to compose converter (#623)

2026-04-15 20:23:12 -04:00

database-cascade.test.ts

fix(scheduler): harden auto-update policies with cascade deletes, error reporting, and UI fixes (#545)

2026-04-13 09:49:11 -04:00

database-fleet-sync-cascade.test.ts

fix(fleet-sync): hygiene pass on receiver behavior and cleanup (#972)

2026-05-07 13:41:10 -04:00

database-matching-policy.test.ts

fix(fleet-sync): version the wire protocol and serialize per-node pushes (#967)

2026-05-07 12:53:13 -04:00

database-metrics.test.ts

fix(backend): batch-insert stress test metrics to avoid per-insert fsync timeout (#911)

2026-05-04 13:36:01 -04:00

database-policies-for-ui.test.ts

feat(fleet-sync): hide other replicas' identity-scoped policies on a replica (#973)

2026-05-07 13:48:11 -04:00

database-policy-delete.test.ts

fix(security): clear cached policy evaluations when a scan policy is deleted (#758)

2026-04-24 22:28:25 -04:00

database-replicated-policies.test.ts

fix(fleet-sync): clear stale policy_evaluation on replica sync swap (#971)

2026-05-07 13:26:00 -04:00

database-scan-cache.test.ts

feat(security): secret and misconfiguration scanning (#651)

2026-04-17 07:57:08 -04:00

database-scan-list.test.ts

fix(security): server-driven pagination for scan history (#661)

2026-04-17 14:06:23 -04:00

DatabaseService.autoHeal.test.ts

feat: auto-heal policies for unhealthy containers (#671)

2026-04-17 22:45:06 -04:00

distributed-license.test.ts

fix(licensing): rename variant values to skipper/admiral and store resolved type (#379)

2026-04-05 18:45:57 -04:00

docker-controller.test.ts

feat(mesh): replace host-mode with shared sencho_mesh Docker network (#1009)

2026-05-09 00:11:09 -04:00

docker-event-manager.test.ts

fix(notifications): replace polling with Docker event stream for container lifecycle detection (#588)

2026-04-14 13:47:48 -04:00

docker-event-service.test.ts

feat(notifications): add structured category enum to dispatcher and history (#774)

2026-04-25 13:55:07 -04:00

exec.test.ts

fix(container-exec): harden with security fixes, validation, and test coverage (#577)

2026-04-14 08:23:05 -04:00

filesystem-backup.test.ts

fix(compose): move atomic backup out of stack folder, silence stale stats 404s (#498)

2026-04-10 20:06:17 -04:00

filesystem-stack-paths.test.ts

feat(files): per-stack file explorer (#780)

2026-04-26 13:05:19 -04:00

filesystem.test.ts

fix: run as root by default to eliminate stack-folder permission failures (#501)

2026-04-10 21:35:31 -04:00

fleet-actions.test.ts

feat(fleet): add Fleet Actions tab for cross-node bulk operations (#963)

2026-05-07 05:41:53 -04:00

fleet-sync-retry-service.test.ts

feat(fleet-sync): retry failed pushes and backfill on add-node (#970)

2026-05-07 13:16:24 -04:00

fleet-sync-routes.test.ts

Audit-hardening pass for fleet-replicated CVE suppressions (#976)

2026-05-07 16:18:19 -04:00

fleet-sync-service.test.ts

fix(fleet-sync): hygiene pass on receiver behavior and cleanup (#972)

2026-05-07 13:41:10 -04:00

fleet.test.ts

fix(fleet): drop tier gate from stack and container list endpoints (#1012)

2026-05-09 01:55:56 -04:00

git-source-http.test.ts

feat(git-sources): harden create-from-git with LFS + submodule warnings (#609)

2026-04-15 11:31:29 -04:00

git-source-routes.test.ts

feat(git-sources): create a stack from a Git repository (#606)

2026-04-15 08:05:10 -04:00

git-source-service.test.ts

feat(git-sources): harden create-from-git with LFS + submodule warnings (#609)

2026-04-15 11:31:29 -04:00

health.test.ts

feat(meta): gate deferred Fleet tabs behind SENCHO_EXPERIMENTAL flag (#886)

2026-05-02 18:01:06 -04:00

host-console.test.ts

fix(host-console): harden with security fixes, validation, and test coverage (#580)

2026-04-14 10:06:59 -04:00

hub-only-guard.test.ts

feat(nodes): hide hub-only views when active node is remote (#1007)

2026-05-08 22:54:58 -04:00

image-ref.test.ts

fix(security): harden Trivy scan lifecycle, logging, and docs (#639)

2026-04-16 20:32:38 -04:00

image-update-service.test.ts

fix: suppress ERROR logging for missing .env files in image update scan (#936)

2026-05-06 11:21:37 -04:00

image-updates-routes.test.ts

feat(auto-update): show pending image updates fleet-wide on the Auto-Updates page (#770)

2026-04-25 08:21:50 -04:00

json-parser-bypass.test.ts

fix(backend): restore remote proxy mount order before local routers (#747)

2026-04-24 10:20:08 -04:00

labels-community-tier.test.ts

feat: drop stack labels and network topology to Community tier (#995)

2026-05-08 15:24:25 -04:00

labels.test.ts

fix(labels): harden stack labels with nodeId filtering, concurrency guard, and test coverage (#552)

2026-04-13 12:49:03 -04:00

license-service-id-validation.test.ts

fix(license): reject activation when LS response is missing instance.id (#867)

2026-05-02 00:39:41 -04:00

license-service.test.ts

feat(license): replace local auto-trial with Lemon Squeezy hosted trial flow (#755)

2026-04-24 16:26:36 -04:00

log-parsing.test.ts

fix(logs): harden global logs with shared parsing, SSE fixes, and level filter (#539)

2026-04-12 21:19:08 -04:00

mesh-compose-override.test.ts

feat(mesh): replace host-mode with shared sencho_mesh Docker network (#1009)

2026-05-09 00:11:09 -04:00

mesh-diagnostic-local.test.ts

fix(mesh): treat local-node aliases as always reachable in diagnostics (#994)

2026-05-08 11:38:35 -04:00

mesh-forwarder.test.ts

feat(mesh): collapse sidecar into Sencho process via in-process forwarder (#1000)

2026-05-08 15:51:39 -04:00

mesh-inspect-remote.test.ts

fix(mesh): inspect remote stacks via HTTP proxy not Dockerode (#992)

2026-05-08 11:12:29 -04:00

mesh-list-stacks-remote.test.ts

fix(mesh): enumerate stacks on remote pilot nodes for opt-in sheet (#1025)

2026-05-10 04:01:39 -04:00

mesh-service.test.ts

fix(mesh): fix pilot handleAccept dispatch by deriving self nodeId from enrollment token (#1023)

2026-05-10 03:09:53 -04:00

metrics-routes.test.ts

refactor(backend): add tests then extract metrics and image-updates routers (phase 4b follow-up) (#738)

2026-04-23 21:49:58 -04:00

mfa.test.ts

chore(deps): bump the all-npm-backend group across 1 directory with 10 updates (#783)

2026-04-26 16:24:03 -04:00

misconfig-ack-filter.test.ts

Audit-hardening pass for secret and misconfiguration scanning (#977)

2026-05-07 19:23:11 -04:00

misconfig-ack-routes.test.ts

Audit-hardening pass for secret and misconfiguration scanning (#977)

2026-05-07 19:23:11 -04:00

monitor-service.test.ts

feat(notifications): add structured category enum to dispatcher and history (#774)

2026-04-25 13:55:07 -04:00

network-topology.test.ts

fix(network-topology): harden with edge-case fixes, logging, and test coverage (#583)

2026-04-14 10:59:11 -04:00

node-labels.test.ts

feat(blueprints): backend foundation for fleet-wide compose templates (#860)

2026-05-01 18:57:44 -04:00

nodes.test.ts

feat: change default listen port from 3000 to 1852 (#756)

2026-04-24 22:23:31 -04:00

notification-routes-api.test.ts

feat(notifications): match routing rules by labels and categories (#776)

2026-04-25 14:58:50 -04:00

notification-routing.test.ts

feat(stack): per-stack activity timeline with actor attribution (#852)

2026-04-30 19:53:23 -04:00

pilot-agent-bootstrap-secret.test.ts

fix(pilot): generate auth_jwt_secret on pilot-agent boot (#997)

2026-05-08 11:59:02 -04:00

pilot-agent-fs-errors.test.ts

fix(pilot): stop silently swallowing fs errors in agent token helpers (#985)

2026-05-08 03:48:35 -04:00

pilot-agent-loopback-auth.test.ts

fix(pilot): inject loopback auth on agent-side HTTP/WS forwarding (#990)

2026-05-08 10:00:15 -04:00

pilot-agent-mesh-resolve.test.ts

fix(mesh): trust central for cross-node dial auth and regenerate overrides at boot (#1014)

2026-05-09 03:27:39 -04:00

pilot-agent-proxy.test.ts

fix(proxy): route pilot-agent HTTP via PilotTunnelBridge loopback (#989)

2026-05-08 09:03:22 -04:00

pilot-agent-reverse-stream.test.ts

feat(mesh): bidirectional routing via tcp_open_reverse and central relay (#1003)

2026-05-08 16:21:34 -04:00

pilot-bridge-limits.test.ts

fix(pilot): harden outbound reverse-tunnel against resource exhaustion (#979)

2026-05-07 21:28:35 -04:00

pilot-bridge-reverse.test.ts

feat(mesh): bidirectional routing via tcp_open_reverse and central relay (#1003)

2026-05-08 16:21:34 -04:00

pilot-enrollment-replay.test.ts

refactor(pilot): narrow Mesh handle, prune dead code, add replay-route test (#982)

2026-05-07 23:45:16 -04:00

pilot-enrollment.test.ts

fix(pilot): harden outbound reverse-tunnel against resource exhaustion (#979)

2026-05-07 21:28:35 -04:00

pilot-manager-cap.test.ts

fix(pilot): harden outbound reverse-tunnel against resource exhaustion (#979)

2026-05-07 21:28:35 -04:00

pilot-protocol-tcp.test.ts

feat(mesh): bidirectional routing via tcp_open_reverse and central relay (#1003)

2026-05-08 16:21:34 -04:00

pilot-protocol.test.ts

feat: pilot agent outbound-mode for remote nodes (#667)

2026-04-17 20:31:43 -04:00

pilot-tunnel-disconnect.test.ts

test(pilot): in-process simulation of mid-tunnel disconnects (#987)

2026-05-08 09:02:59 -04:00

pilot-tunnel-integration.test.ts

test(pilot): in-process integration test and Playwright E2E (#983)

2026-05-07 23:51:52 -04:00

policy-enforcement.test.ts

fix: harden blueprint deployment guardrails (#1027)

2026-05-12 15:49:19 -04:00

proxy-mount-order.test.ts

fix(backend): restore remote proxy mount order before local routers (#747)

2026-04-24 10:20:08 -04:00

rate-limiting.test.ts

fix(api): add tiered rate limiting to prevent polling lockouts (#460)

2026-04-09 17:56:58 -04:00

registry-service.test.ts

feat(registries): harden Private Registry Credentials feature (#597)

2026-04-14 17:58:57 -04:00

remote-console-session.test.ts

fix(backend): restore remote proxy mount order before local routers (#747)

2026-04-24 10:20:08 -04:00

sarif-exporter.test.ts

feat(security): enforce scan policies as a pre-deploy gate (#719)

2026-04-21 00:14:11 -04:00

scan-compare.test.ts

feat: open security basics, manual fleet ops, and basic fleet management to Community (#930)

2026-05-05 12:54:26 -04:00

scheduled-tasks-routes.test.ts

feat(scheduler): add auto_backup, auto_stop, auto_down, auto_start and delete_after_run one-shot mode (#777)

2026-04-25 16:11:13 -04:00

scheduler-policy.test.ts

feat(notifications): add structured category enum to dispatcher and history (#774)

2026-04-25 13:55:07 -04:00

scheduler-service.test.ts

feat: open security basics, manual fleet ops, and basic fleet management to Community (#930)

2026-05-05 12:54:26 -04:00

secrets.test.ts

feat(fleet): Fleet Secrets tab with env-var bundles (v1 MVP) (#965)

2026-05-07 06:03:39 -04:00

settings-routes.test.ts

refactor(backend): add route tests then extract settings, scheduled-tasks, agents (phase 4b) (#737)

2026-04-23 21:22:39 -04:00

severity.test.ts

fix(security): harden Trivy scan lifecycle, logging, and docs (#639)

2026-04-16 20:32:38 -04:00

sso.test.ts

feat(sso): split SSO providers by delivery model across tiers (#754)

2026-04-24 15:48:03 -04:00

stack-auto-update-settings.test.ts

feat(auto-update): per-stack auto-update enable/disable toggle (#771)

2026-04-25 10:50:21 -04:00

stack-files-routes.test.ts

fix: harden stack file explorer operations (#1028)

2026-05-12 15:49:51 -04:00

stack-management.test.ts

fix(stacks): harden stack management with security, validation, and logging (#520)

2026-04-12 05:43:15 -04:00

stack-service-actions.test.ts

feat(stacks): per-service start/stop/restart lifecycle actions (#778)

2026-04-25 17:26:04 -04:00

stacks-failure-notifications.test.ts

feat(deploy-logs): opt-in deploy progress modal with structured log rows (#779)

2026-04-26 00:43:54 -04:00

suppression-filter.test.ts

Audit-hardening pass for fleet-replicated CVE suppressions (#976)

2026-05-07 16:18:19 -04:00

suppression-routes.test.ts

Audit-hardening pass for fleet-replicated CVE suppressions (#976)

2026-05-07 16:18:19 -04:00

template-service.test.ts

feat: change default listen port from 3000 to 1852 (#756)

2026-04-24 22:23:31 -04:00

templates-deploy-rbac.test.ts

fix(templates): align App Store deploy gate with stack:create permission (#986)

2026-05-08 03:50:03 -04:00

topology-community-tier.test.ts

feat: drop stack labels and network topology to Community tier (#995)

2026-05-08 15:24:25 -04:00

trivy-scan-compose-stack.test.ts

Audit-hardening pass for secret and misconfiguration scanning (#977)

2026-05-07 19:23:11 -04:00

trivy-secret-misconfig.test.ts

feat(security): secret and misconfiguration scanning (#651)

2026-04-17 07:57:08 -04:00

trivy-service.test.ts

fix(security): harden Trivy scan lifecycle, logging, and docs (#639)

2026-04-16 20:32:38 -04:00

trivy-tmp-cleanup.test.ts

Audit-hardening pass for secret and misconfiguration scanning (#977)

2026-05-07 19:23:11 -04:00

update-preview-service.test.ts

fix(auto-update): label same-tag rebuilds as 'Rebuild available' instead of '10.11 -> 10.11' (#766)

2026-04-24 23:37:32 -04:00

upgrade-order.test.ts

fix(backend): restore remote proxy mount order before local routers (#747)

2026-04-24 10:20:08 -04:00

users-rbac.test.ts

feat: change default listen port from 3000 to 1852 (#756)

2026-04-24 22:23:31 -04:00

validation.test.ts

feat: change default listen port from 3000 to 1852 (#756)

2026-04-24 22:23:31 -04:00

volume-browser-service.test.ts

feat(volumes): add read-only volume browser (#926)

2026-05-05 00:09:40 -04:00

vulnerability-db.test.ts

fix(security): harden Trivy scan lifecycle, logging, and docs (#639)

2026-04-16 20:32:38 -04:00