Anso 78a742fb44 fix: enforce the signed-in user's role on cross-node proxied requests (#1505) ...

Proxied requests authenticated to a remote node previously ran as admin
regardless of the originating user's role, so a non-admin using the UI
against a remote node could reach admin-only handlers there.

The forwarding primary now asserts the user's role on a trusted header
that the remote honors only for node_proxy/pilot_tunnel bearers (the same
trust model as the license tier header), and the gateway overwrites the
header on every proxied request so a client cannot smuggle it. An absent
header keeps admin for direct instance-to-instance and background service
calls; an unrecognized role fails closed to read-only.

2026-06-28 16:32:50 -04:00

..

network

feat(security): surface Compose internet-reachability exposure in posture (#1442)

2026-06-24 23:22:13 -04:00

preflight

feat(security): surface Compose internet-reachability exposure in posture (#1442)

2026-06-24 23:22:13 -04:00

storage

feat: per-stack storage inventory and portability guardrails (#1399)

2026-06-20 15:06:26 -04:00

updateGuard

fix: harden deploy/update concurrency and node-targeting safety (#1390)

2026-06-18 13:38:19 -04:00

AuditAnomalyService.ts

fix(audit-log): neutralize CSV export injection, clamp pagination, bound anomaly history (#1259)

2026-05-31 16:36:07 -04:00

AutoHealService.ts

feat(pricing): collapse to two tiers (#1309)

2026-06-04 17:45:53 -04:00

BlueprintAnalyzer.ts

fix: harden blueprint deployment guardrails (#1027)

2026-05-12 15:49:19 -04:00

BlueprintReconciler.ts

fix(stack-activity): per-stack history integrity, attribution, sanitization (#1228)

2026-05-25 21:09:00 -04:00

BlueprintService.ts

fix: name matched risk inputs in policy block messages (#1471)

2026-06-26 15:34:24 -04:00

CacheService.ts

perf: unify caching behind a single CacheService and enable HTTP compression (#468)

2026-04-10 10:05:05 -04:00

CapabilityRegistry.ts

feat: add per-stack project env file selection for Docker Compose (#1457)

2026-06-25 18:03:05 -04:00

CloudBackupService.ts

feat(snapshots): preserve stack dossiers with fleet snapshots (#1339)

2026-06-08 08:44:59 -04:00

ComposeDoctorService.ts

fix(preflight): suppress node-state checks when the Docker snapshot is unavailable (#1423)

2026-06-24 19:48:34 -04:00

ComposeService.ts

feat: show container name in structured log output (#1452)

2026-06-25 14:13:38 -04:00

ContainerLifecycleClassifier.ts

fix(docker-events): harden crash detection against edge cases (#591)

2026-04-14 14:37:28 -04:00

CryptoService.ts

fix(error-handling): surface silent errors across the codebase (#326)

2026-04-01 21:56:41 -04:00

CveIntelService.ts

feat(security): action-posture Security dashboard with exploit intel and triage (#1424)

2026-06-23 17:42:11 -04:00

DatabaseService.ts

fix: enforce the signed-in user's role on cross-node proxied requests (#1505)

2026-06-28 16:32:50 -04:00

DependencyGraphService.ts

feat(fleet): add read-only dependency map tab (#1324)

2026-06-06 11:18:36 -04:00

DiagnosticsService.ts

feat: add ON/OFF toggle for host threshold alerts (#1456)

2026-06-25 16:05:16 -04:00

DockerController.ts

feat(sidebar): surface partial status for multi-container stacks (#1426)

2026-06-24 19:57:49 -04:00

DockerEventManager.ts

feat: auto-heal policies for unhealthy containers (#671)

2026-04-17 22:45:06 -04:00

DockerEventService.ts

feat(auto-heal): restart crashed containers and harden the heal loop (#1258)

2026-05-31 16:00:38 -04:00

DriftDetectionService.ts

feat: Compose Network Inspector and exposure intent guard (#1360)

2026-06-12 02:15:11 -04:00

DriftLedgerService.ts

fix(drift): reconcile the drift ledger on deploy and timestamp its history (#1405)

2026-06-21 18:20:57 -04:00

effectiveAnatomy.ts

docs: caveat interpolated secrets in structural Compose fields (#1425)

2026-06-23 16:58:26 -04:00

EnvInventoryService.ts

feat(stacks): per-stack environment inventory and secret-safe guardrails (#1397)

2026-06-20 11:58:42 -04:00

EnvironmentCheckService.ts

feat(onboarding): add first-run environment checker (#1290)

2026-06-02 21:40:38 -04:00

FileExplorerMetricsService.ts

feat(files): copy & duplicate, bulk actions, disk-backed uploads, and an accessible file tree (#1409)

2026-06-22 19:33:06 -04:00

FileRootGateway.ts

feat(files): copy & duplicate, bulk actions, disk-backed uploads, and an accessible file tree (#1409)

2026-06-22 19:33:06 -04:00

FileSystemService.ts

fix: reject atomic restore when a checksummed backup file is missing (#1466)

2026-06-26 10:16:32 -04:00

fleetSyncConstants.ts

Audit-hardening pass for secret and misconfiguration scanning (#977)

2026-05-07 19:23:11 -04:00

FleetSyncRetryService.ts

feat(fleet-sync): retry failed pushes and backfill on add-node (#970)

2026-05-07 13:16:24 -04:00

FleetSyncService.ts

feat(security): gate deploys on exploitation risk, not just severity (#1432)

2026-06-24 20:05:17 -04:00

FleetUpdateTrackerService.ts

fix(fleet): gate node update actions to admins and harden update tracking (#1272)

2026-06-01 17:27:25 -04:00

GitSourceService.ts

feat(stacks): browse and edit mounted volume files in the explorer (#1403)

2026-06-21 18:16:20 -04:00

GlobalLogsMetrics.ts

fix(observability): gate global logs to admins, scope to managed containers, harden SSE (#1254)

2026-05-29 21:09:20 -04:00

HealthGateService.ts

feat: health-gated updates and rollback readiness (#1354)

2026-06-11 00:26:26 -04:00

HostTerminalService.ts

fix(host-console): audit session lifecycle and harden path, resize, and route gating (#1263)

2026-05-31 20:29:30 -04:00

ImageUpdateService.ts

fix: schedule the first image-update check on the cron cadence after a restart (#1491)

2026-06-27 22:38:31 -04:00

license-headers.ts

fix: enforce the signed-in user's role on cross-node proxied requests (#1505)

2026-06-28 16:32:50 -04:00

license-normalize.ts

feat(pricing): collapse to two tiers (#1309)

2026-06-04 17:45:53 -04:00

license-types.ts

feat(pricing): collapse to two tiers (#1309)

2026-06-04 17:45:53 -04:00

LicenseService.ts

feat(pricing): collapse to two tiers (#1309)

2026-06-04 17:45:53 -04:00

LogFormatter.ts

feat: show container name in structured log output (#1452)

2026-06-25 14:13:38 -04:00

MeshComposeOverride.ts

feat(mesh): replace host-mode with shared sencho_mesh Docker network (#1009)

2026-05-09 00:11:09 -04:00

MeshForwarder.ts

fix(mesh): address audit follow-ups (early-data, recompose, admiral gate, error codes, docs) (#1126)

2026-05-20 12:53:29 -04:00

MeshProxyTunnelDialer.ts

feat(pricing): collapse to two tiers (#1309)

2026-06-04 17:45:53 -04:00

MeshService.ts

fix: harden deploy/update concurrency and node-targeting safety (#1390)

2026-06-18 13:38:19 -04:00

MfaService.ts

fix(mfa): enforce single-use backup codes under concurrent verification (#1262)

2026-05-31 20:28:48 -04:00

MonitorService.ts

feat: purge scan data for deleted images and stacks (#1467)

2026-06-26 11:59:37 -04:00

NodeLabelService.ts

feat(blueprints): backend foundation for fleet-wide compose templates (#860)

2026-05-01 18:57:44 -04:00

NodeRegistry.ts

fix(fleet): show capabilities, version, metrics, and stacks for pilot-agent nodes (#1044)

2026-05-14 10:21:08 -04:00

NotificationService.ts

feat: add node update alerts with changelog tab and skip-version handling (#1463)

2026-06-26 00:07:51 -04:00

OpenVexExporter.ts

feat(security): action-posture Security dashboard with exploit intel and triage (#1424)

2026-06-23 17:42:11 -04:00

PilotMetrics.ts

fix(mesh): route peer→central traffic over the existing forward WS (#1094)

2026-05-17 22:00:31 -04:00

PilotTunnelBridge.ts

fix(mesh): address audit follow-ups (early-data, recompose, admiral gate, error codes, docs) (#1126)

2026-05-20 12:53:29 -04:00

PilotTunnelManager.ts

fix(pilot): post-merge audit followups (WS via getProxyTarget, closeTunnel lifecycle, mesh source buffer, docs) (#1128)

2026-05-21 01:00:47 -04:00

policy-packs.ts

feat: add dedicated Security page and policy-pack foundation (#1362)

2026-06-12 10:41:39 -04:00

PolicyEnforcement.ts

fix: explain why a failed pre-deploy scan blocks a deploy (#1477)

2026-06-26 19:13:47 -04:00

registry-api.ts

fix: request registry tokens with the target repository scope (#1478)

2026-06-26 21:06:40 -04:00

RegistryService.ts

perf(backend): mark AWS SDK clients as optional dependencies (#821)

2026-04-28 02:08:39 -04:00

SarifExporter.ts

fix: harden vulnerability scan scheduling (#1035)

2026-05-13 09:40:45 -04:00

scheduledActionRegistry.ts

feat(scheduler): consistent action targeting in Scheduled Operations (#1431)

2026-06-24 21:02:15 -04:00

SchedulerService.ts

fix: name matched risk inputs in policy scan banner and alerts (#1473)

2026-06-26 16:43:26 -04:00

SecretsService.ts

fix(fleet-secrets): restrict bundle management to admin hub sessions (#1274)

2026-06-01 19:47:06 -04:00

securityPosture.ts

fix: differentiate security action links and add suppression editing (#1500)

2026-06-28 06:17:47 -04:00

SelfIdentityService.ts

feat(onboarding): add first-run environment checker (#1290)

2026-06-02 21:40:38 -04:00

SelfUpdateService.ts

refactor(self-update): isolate helper run-args builder and lock argv path safety (#1419)

2026-06-23 10:01:09 -04:00

SSOService.ts

feat(pricing): collapse to two tiers (#1309)

2026-06-04 17:45:53 -04:00

StackActivityMetricsService.ts

feat(stack-activity): in-process metrics, structured diagnostic logs, docs (#1229)

2026-05-25 21:25:59 -04:00

StackFileRootsService.ts

fix: contain file-explorer binds that reach dangling symlinked managed paths (#1490)

2026-06-27 14:32:50 -04:00

StackOpLockService.ts

fix: harden deploy/update concurrency and node-targeting safety (#1390)

2026-06-18 13:38:19 -04:00

StackOpMetricsService.ts

feat(stacks): in-process per-(nodeId, action) metrics + admin endpoint (#1196)

2026-05-24 16:07:54 -04:00

TemplateService.ts

fix(app-store): harden template deploy, registry fetch, and catalogue refresh (#1250)

2026-05-29 11:46:51 -04:00

TrivyInstaller.ts

feat: pre-deploy scan visibility and pinned scanner version (#1378)

2026-06-16 00:42:33 -04:00

TrivyService.ts

fix: copy the full finding set when reusing a cached scan for the deploy gate (#1476)

2026-06-26 18:58:54 -04:00

UpdateGuardService.ts

fix: harden deploy/update concurrency and node-targeting safety (#1390)

2026-06-18 13:38:19 -04:00

UpdatePreviewService.ts

fix: harden deploy/update concurrency and node-targeting safety (#1390)

2026-06-18 13:38:19 -04:00

VolumeBrowserService.ts

feat(files): copy & duplicate, bulk actions, disk-backed uploads, and an accessible file tree (#1409)

2026-06-22 19:33:06 -04:00

WebhookService.ts

fix: harden deploy/update concurrency and node-targeting safety (#1390)

2026-06-18 13:38:19 -04:00