Anso 9aaa8573c0 fix(mesh): gate Trigger 2 re-bootstrap on actual api_token change (#1076) ...

The PUT /api/nodes/:id handler closed and re-dialed the mesh callback
bridge on every save that included api_token in the body, even when the
token was unchanged. The frontend always sends the full formData on
Save, so renames and compose_dir edits against a mesh-enabled proxy
remote produced a wasted closeBridge + ensureBridge round-trip and a
spurious manager_rejected entry in the activity log.

Gate the re-bootstrap on a real value diff against the persisted token.
Adds an existing-node lookup (returns 404 on missing id, which the
handler previously lacked) so the comparison has the pre-update value.
Reorders the guards so resource-not-found beats payload validation.

Adds one integration test for the same-token path; the existing three
trigger-2 cases continue to assert close + ensure firing on a real
rotation, no-token-in-payload, and mesh-disabled.

2026-05-17 01:48:02 -04:00

..

helpers

feat(api-tokens): switch to sen_sk_ prefixed opaque keys (#1062)

2026-05-15 18:21:28 -04:00

agents-routes.test.ts

refactor(backend): add route tests then extract settings, scheduled-tasks, agents (phase 4b) (#737)

2026-04-23 21:22:39 -04:00

alerts-api.test.ts

fix(notification-routing): harden with security fixes, validation, and test coverage (#573)

2026-04-13 22:17:03 -04:00

api-token-format.test.ts

feat(api-tokens): switch to sen_sk_ prefixed opaque keys (#1062)

2026-05-15 18:21:28 -04:00

api-tokens.test.ts

feat(api-tokens): switch to sen_sk_ prefixed opaque keys (#1062)

2026-05-15 18:21:28 -04:00

audit-anomaly-service.test.ts

feat(audit-log): signal rail, day-banded stream, anomaly detection (#682)

2026-04-18 18:24:27 -04:00

audit-log.test.ts

feat(stacks): per-service start/stop/restart lifecycle actions (#778)

2026-04-25 17:26:04 -04:00

auth.test.ts

fix(licensing): rename variant values to skipper/admiral and store resolved type (#379)

2026-04-05 18:45:57 -04:00

auto-heal-routes.test.ts

feat(api-tokens): switch to sen_sk_ prefixed opaque keys (#1062)

2026-05-15 18:21:28 -04:00

AutoHealService.evaluate.test.ts

fix: harden auto-heal policies (#1042)

2026-05-14 10:20:57 -04:00

AutoHealService.test.ts

fix: harden auto-heal policies (#1042)

2026-05-14 10:20:57 -04:00

binary-detection.test.ts

feat(files): per-stack file explorer (#780)

2026-04-26 13:05:19 -04:00

blueprint-analyzer.test.ts

feat(blueprints): backend foundation for fleet-wide compose templates (#860)

2026-05-01 18:57:44 -04:00

blueprints-route-validation.test.ts

fix: harden blueprint deployment guardrails (#1027)

2026-05-12 15:49:19 -04:00

blueprints-withdraw-route.test.ts

feat(blueprints): capture compose snapshot before stateful eviction (#957)

2026-05-06 21:58:45 -04:00

blueprints.test.ts

fix: harden blueprint deployment guardrails (#1027)

2026-05-12 15:49:19 -04:00

cache-endpoints.test.ts

perf: unify caching behind a single CacheService and enable HTTP compression (#468)

2026-04-10 10:05:05 -04:00

cache-service.test.ts

perf: unify caching behind a single CacheService and enable HTTP compression (#468)

2026-04-10 10:05:05 -04:00

capability-mesh-callback-bootstrap.test.ts

feat(mesh): symmetric WS dial for proxy-mode mesh peers (#1066)

2026-05-16 14:58:19 -04:00

capability-registry-pilot.test.ts

fix(fleet): show capabilities, version, metrics, and stacks for pilot-agent nodes (#1044)

2026-05-14 10:21:08 -04:00

cloud-backup-routes.test.ts

feat(cloud-backup): mirror fleet snapshots to S3-compatible storage (#782)

2026-04-26 15:42:21 -04:00

cloud-backup-service.test.ts

feat(cloud-backup): mirror fleet snapshots to S3-compatible storage (#782)

2026-04-26 15:42:21 -04:00

compose-images.test.ts

fix: harden deploy enforcement paths (#1030)

2026-05-12 19:30:49 -04:00

compose-service.test.ts

fix: harden stack management operations (#1046)

2026-05-14 10:21:18 -04:00

container-lifecycle-classifier.test.ts

fix(docker-events): harden crash detection against edge cases (#591)

2026-04-14 14:37:28 -04:00

convert.test.ts

feat: docker run to compose converter (#623)

2026-04-15 20:23:12 -04:00

database-cascade.test.ts

fix(scheduler): harden auto-update policies with cascade deletes, error reporting, and UI fixes (#545)

2026-04-13 09:49:11 -04:00

database-fleet-sync-cascade.test.ts

fix(fleet-sync): hygiene pass on receiver behavior and cleanup (#972)

2026-05-07 13:41:10 -04:00

database-matching-policy.test.ts

fix(fleet-sync): version the wire protocol and serialize per-node pushes (#967)

2026-05-07 12:53:13 -04:00

database-metrics.test.ts

fix(backend): batch-insert stress test metrics to avoid per-insert fsync timeout (#911)

2026-05-04 13:36:01 -04:00

database-policies-for-ui.test.ts

feat(fleet-sync): hide other replicas' identity-scoped policies on a replica (#973)

2026-05-07 13:48:11 -04:00

database-policy-delete.test.ts

fix(security): clear cached policy evaluations when a scan policy is deleted (#758)

2026-04-24 22:28:25 -04:00

database-replicated-policies.test.ts

fix(fleet-sync): clear stale policy_evaluation on replica sync swap (#971)

2026-05-07 13:26:00 -04:00

database-scan-cache.test.ts

feat(security): secret and misconfiguration scanning (#651)

2026-04-17 07:57:08 -04:00

database-scan-list.test.ts

fix(security): server-driven pagination for scan history (#661)

2026-04-17 14:06:23 -04:00

DatabaseService.autoHeal.test.ts

fix: harden auto-heal policies (#1042)

2026-05-14 10:20:57 -04:00

distributed-license.test.ts

fix(licensing): rename variant values to skipper/admiral and store resolved type (#379)

2026-04-05 18:45:57 -04:00

docker-controller.test.ts

feat(mesh): replace host-mode with shared sencho_mesh Docker network (#1009)

2026-05-09 00:11:09 -04:00

docker-event-manager.test.ts

fix(notifications): replace polling with Docker event stream for container lifecycle detection (#588)

2026-04-14 13:47:48 -04:00

docker-event-service.test.ts

feat(notifications): add structured category enum to dispatcher and history (#774)

2026-04-25 13:55:07 -04:00

exec.test.ts

fix(container-exec): harden with security fixes, validation, and test coverage (#577)

2026-04-14 08:23:05 -04:00

filesystem-backup.test.ts

fix: harden atomic deployment rollback (#1029)

2026-05-12 15:58:30 -04:00

filesystem-stack-paths.test.ts

feat(files): per-stack file explorer (#780)

2026-04-26 13:05:19 -04:00

filesystem.test.ts

fix: run as root by default to eliminate stack-folder permission failures (#501)

2026-04-10 21:35:31 -04:00

fleet-actions.test.ts

feat(fleet): add Fleet Actions tab for cross-node bulk operations (#963)

2026-05-07 05:41:53 -04:00

fleet-pilot-agent-parity.test.ts

fix(fleet): show capabilities, version, metrics, and stacks for pilot-agent nodes (#1044)

2026-05-14 10:21:08 -04:00

fleet-sync-retry-service.test.ts

feat(fleet-sync): retry failed pushes and backfill on add-node (#970)

2026-05-07 13:16:24 -04:00

fleet-sync-routes.test.ts

Audit-hardening pass for fleet-replicated CVE suppressions (#976)

2026-05-07 16:18:19 -04:00

fleet-sync-service.test.ts

fix(fleet-sync): hygiene pass on receiver behavior and cleanup (#972)

2026-05-07 13:41:10 -04:00

fleet.test.ts

fix(fleet): drop tier gate from stack and container list endpoints (#1012)

2026-05-09 01:55:56 -04:00

git-source-http.test.ts

feat(git-sources): harden create-from-git with LFS + submodule warnings (#609)

2026-04-15 11:31:29 -04:00

git-source-routes.test.ts

fix: harden git source webhooks (#1033)

2026-05-13 03:02:21 -04:00

git-source-service.test.ts

fix: harden git source webhooks (#1033)

2026-05-13 03:02:21 -04:00

health.test.ts

feat(meta): gate deferred Fleet tabs behind SENCHO_EXPERIMENTAL flag (#886)

2026-05-02 18:01:06 -04:00

host-console.test.ts

fix(host-console): harden with security fixes, validation, and test coverage (#580)

2026-04-14 10:06:59 -04:00

hub-only-guard.test.ts

feat(nodes): hide hub-only views when active node is remote (#1007)

2026-05-08 22:54:58 -04:00

image-ref.test.ts

fix(security): harden Trivy scan lifecycle, logging, and docs (#639)

2026-04-16 20:32:38 -04:00

image-update-service.test.ts

fix: suppress ERROR logging for missing .env files in image update scan (#936)

2026-05-06 11:21:37 -04:00

image-updates-routes.test.ts

feat(auto-update): show pending image updates fleet-wide on the Auto-Updates page (#770)

2026-04-25 08:21:50 -04:00

json-parser-bypass.test.ts

fix(backend): restore remote proxy mount order before local routers (#747)

2026-04-24 10:20:08 -04:00

labels-bulk-actions.test.ts

fix: harden stack label permissions (#1036)

2026-05-13 11:56:22 -04:00

labels-community-tier.test.ts

fix: harden stack label permissions (#1036)

2026-05-13 11:56:22 -04:00

labels.test.ts

fix(labels): harden stack labels with nodeId filtering, concurrency guard, and test coverage (#552)

2026-04-13 12:49:03 -04:00

license-service-id-validation.test.ts

fix(license): reject activation when LS response is missing instance.id (#867)

2026-05-02 00:39:41 -04:00

license-service.test.ts

feat(license): replace local auto-trial with Lemon Squeezy hosted trial flow (#755)

2026-04-24 16:26:36 -04:00

log-parsing.test.ts

fix(logs): harden global logs with shared parsing, SSE fixes, and level filter (#539)

2026-04-12 21:19:08 -04:00

mesh-bootstrap-integration.test.ts

feat(mesh): symmetric WS dial for proxy-mode mesh peers (#1066)

2026-05-16 14:58:19 -04:00

mesh-central-registry.test.ts

feat(mesh): symmetric WS dial for proxy-mode mesh peers (#1066)

2026-05-16 14:58:19 -04:00

mesh-compose-override.test.ts

feat(mesh): replace host-mode with shared sencho_mesh Docker network (#1009)

2026-05-09 00:11:09 -04:00

mesh-diagnostic-local.test.ts

fix(mesh): treat local-node aliases as always reachable in diagnostics (#994)

2026-05-08 11:38:35 -04:00

mesh-forwarder.test.ts

feat(mesh): collapse sidecar into Sencho process via in-process forwarder (#1000)

2026-05-08 15:51:39 -04:00

mesh-inspect-remote.test.ts

fix(mesh): inspect remote stacks via HTTP proxy not Dockerode (#992)

2026-05-08 11:12:29 -04:00

mesh-instance-id-change-integration.test.ts

feat(mesh): symmetric WS dial for proxy-mode mesh peers (#1066)

2026-05-16 14:58:19 -04:00

mesh-list-stacks-remote.test.ts

fix(mesh): enumerate stacks on remote pilot nodes for opt-in sheet (#1025)

2026-05-10 04:01:39 -04:00

mesh-proxy-tunnel-dial.test.ts

feat(mesh): route mesh traffic over Distributed API remotes (#1048)

2026-05-14 20:51:42 -04:00

mesh-proxy-tunnel-dialer-handshake.test.ts

feat(mesh): symmetric WS dial for proxy-mode mesh peers (#1066)

2026-05-16 14:58:19 -04:00

mesh-proxy-tunnel-dialer-reasons.test.ts

feat(mesh): symmetric WS dial for proxy-mode mesh peers (#1066)

2026-05-16 14:58:19 -04:00

mesh-proxy-tunnel-first-frame.test.ts

fix(mesh): persist rotated handshake when peer bridge owns reverse-dialer slot (#1073)

2026-05-16 22:32:35 -04:00

mesh-proxy-tunnel-from-peer.test.ts

feat(mesh): symmetric WS dial for proxy-mode mesh peers (#1066)

2026-05-16 14:58:19 -04:00

mesh-proxy-tunnel-handler.test.ts

fix(mesh): persist proxy-tunnel self-id across bridge teardown (#1060)

2026-05-15 14:33:57 -04:00

mesh-proxy-tunnel-live.test.ts

feat(mesh): route mesh traffic over Distributed API remotes (#1048)

2026-05-14 20:51:42 -04:00

mesh-service-proactive-bootstrap-fanout.test.ts

feat(mesh): symmetric WS dial for proxy-mode mesh peers (#1066)

2026-05-16 14:58:19 -04:00

mesh-service.test.ts

fix(mesh): skip peer-side recovery in openCrossNode on central instances (#1068)

2026-05-16 18:28:16 -04:00

mesh-startup-primary-url-warning.test.ts

feat(mesh): symmetric WS dial for proxy-mode mesh peers (#1066)

2026-05-16 14:58:19 -04:00

mesh-tcp-stream-switchboard.test.ts

feat(mesh): route mesh traffic over Distributed API remotes (#1048)

2026-05-14 20:51:42 -04:00

mesh-token-rotation-integration.test.ts

fix(mesh): gate Trigger 2 re-bootstrap on actual api_token change (#1076)

2026-05-17 01:48:02 -04:00

mesh-version-skew-integration.test.ts

feat(mesh): symmetric WS dial for proxy-mode mesh peers (#1066)

2026-05-16 14:58:19 -04:00

metrics-routes.test.ts

refactor(backend): add tests then extract metrics and image-updates routers (phase 4b follow-up) (#738)

2026-04-23 21:49:58 -04:00

mfa.test.ts

chore(deps): bump the all-npm-backend group across 1 directory with 10 updates (#783)

2026-04-26 16:24:03 -04:00

misconfig-ack-filter.test.ts

Audit-hardening pass for secret and misconfiguration scanning (#977)

2026-05-07 19:23:11 -04:00

misconfig-ack-routes.test.ts

Audit-hardening pass for secret and misconfiguration scanning (#977)

2026-05-07 19:23:11 -04:00

monitor-service.test.ts

perf(monitor): parallelize per-container stats fetch in evaluation cycle (#1045)

2026-05-14 10:20:49 -04:00

network-topology.test.ts

fix(network-topology): harden with edge-case fixes, logging, and test coverage (#583)

2026-04-14 10:59:11 -04:00

node-labels.test.ts

feat(blueprints): backend foundation for fleet-wide compose templates (#860)

2026-05-01 18:57:44 -04:00

node-registry-fetch-meta.test.ts

fix(fleet): show capabilities, version, metrics, and stacks for pilot-agent nodes (#1044)

2026-05-14 10:21:08 -04:00

nodes.test.ts

feat: change default listen port from 3000 to 1852 (#756)

2026-04-24 22:23:31 -04:00

notification-routes-api.test.ts

feat(notifications): match routing rules by labels and categories (#776)

2026-04-25 14:58:50 -04:00

notification-routing.test.ts

feat(stack): per-stack activity timeline with actor attribution (#852)

2026-04-30 19:53:23 -04:00

peer-to-central-mesh-session-dialer.test.ts

fix(mesh): peer-initiated callback bridge installs reverse dialer (#1071)

2026-05-16 20:11:31 -04:00

pilot-agent-bootstrap-secret.test.ts

fix(pilot): generate auth_jwt_secret on pilot-agent boot (#997)

2026-05-08 11:59:02 -04:00

pilot-agent-fs-errors.test.ts

fix(pilot): stop silently swallowing fs errors in agent token helpers (#985)

2026-05-08 03:48:35 -04:00

pilot-agent-loopback-auth.test.ts

fix(pilot): inject loopback auth on agent-side HTTP/WS forwarding (#990)

2026-05-08 10:00:15 -04:00

pilot-agent-mesh-resolve.test.ts

feat(mesh): route mesh traffic over Distributed API remotes (#1048)

2026-05-14 20:51:42 -04:00

pilot-agent-proxy.test.ts

fix(proxy): route pilot-agent HTTP via PilotTunnelBridge loopback (#989)

2026-05-08 09:03:22 -04:00

pilot-agent-reverse-stream.test.ts

feat(mesh): route mesh traffic over Distributed API remotes (#1048)

2026-05-14 20:51:42 -04:00

pilot-bridge-limits.test.ts

fix(pilot): harden outbound reverse-tunnel against resource exhaustion (#979)

2026-05-07 21:28:35 -04:00

pilot-bridge-reverse.test.ts

feat(mesh): bidirectional routing via tcp_open_reverse and central relay (#1003)

2026-05-08 16:21:34 -04:00

pilot-enrollment-replay.test.ts

refactor(pilot): narrow Mesh handle, prune dead code, add replay-route test (#982)

2026-05-07 23:45:16 -04:00

pilot-enrollment.test.ts

fix(pilot): harden outbound reverse-tunnel against resource exhaustion (#979)

2026-05-07 21:28:35 -04:00

pilot-manager-cap.test.ts

fix(pilot): harden outbound reverse-tunnel against resource exhaustion (#979)

2026-05-07 21:28:35 -04:00

pilot-mode-regression-integration.test.ts

feat(mesh): symmetric WS dial for proxy-mode mesh peers (#1066)

2026-05-16 14:58:19 -04:00

pilot-protocol-tcp.test.ts

feat(mesh): bidirectional routing via tcp_open_reverse and central relay (#1003)

2026-05-08 16:21:34 -04:00

pilot-protocol.test.ts

feat: pilot agent outbound-mode for remote nodes (#667)

2026-04-17 20:31:43 -04:00

pilot-tunnel-bridge-reverse-route-events.test.ts

feat(mesh): symmetric WS dial for proxy-mode mesh peers (#1066)

2026-05-16 14:58:19 -04:00

pilot-tunnel-disconnect.test.ts

test(pilot): in-process simulation of mid-tunnel disconnects (#987)

2026-05-08 09:02:59 -04:00

pilot-tunnel-integration.test.ts

test(pilot): in-process integration test and Playwright E2E (#983)

2026-05-07 23:51:52 -04:00

pilot-tunnel-manager-ensure.test.ts

fix(mesh): name actual bridge kind in proxy-bridge rejection (#1075)

2026-05-17 01:16:21 -04:00

pilot-tunnel-manager-replace.test.ts

feat(mesh): symmetric WS dial for proxy-mode mesh peers (#1066)

2026-05-16 14:58:19 -04:00

policy-enforcement.test.ts

fix: harden deploy enforcement paths (#1030)

2026-05-12 19:30:49 -04:00

proxy-mount-order.test.ts

fix(backend): restore remote proxy mount order before local routers (#747)

2026-04-24 10:20:08 -04:00

rate-limiting.test.ts

fix(api): add tiered rate limiting to prevent polling lockouts (#460)

2026-04-09 17:56:58 -04:00

registry-service.test.ts

feat(registries): harden Private Registry Credentials feature (#597)

2026-04-14 17:58:57 -04:00

remote-console-session.test.ts

feat(api-tokens): switch to sen_sk_ prefixed opaque keys (#1062)

2026-05-15 18:21:28 -04:00

safe-log.test.ts

fix: harden deploy enforcement paths (#1030)

2026-05-12 19:30:49 -04:00

sarif-exporter.test.ts

fix: harden vulnerability scan scheduling (#1035)

2026-05-13 09:40:45 -04:00

scan-compare.test.ts

feat: open security basics, manual fleet ops, and basic fleet management to Community (#930)

2026-05-05 12:54:26 -04:00

scheduled-tasks-routes.test.ts

fix(schedules): align Schedules surface with backend tier gate for Skipper admins (#1047)

2026-05-14 10:31:20 -04:00

scheduler-policy.test.ts

feat(notifications): add structured category enum to dispatcher and history (#774)

2026-04-25 13:55:07 -04:00

scheduler-service.test.ts

fix: harden vulnerability scan scheduling (#1035)

2026-05-13 09:40:45 -04:00

secrets.test.ts

feat(fleet): Fleet Secrets tab with env-var bundles (v1 MVP) (#965)

2026-05-07 06:03:39 -04:00

settings-routes.test.ts

refactor(backend): add route tests then extract settings, scheduled-tasks, agents (phase 4b) (#737)

2026-04-23 21:22:39 -04:00

severity.test.ts

fix(security): harden Trivy scan lifecycle, logging, and docs (#639)

2026-04-16 20:32:38 -04:00

sso.test.ts

feat(api-tokens): switch to sen_sk_ prefixed opaque keys (#1062)

2026-05-15 18:21:28 -04:00

stack-auto-update-settings.test.ts

feat(auto-update): per-stack auto-update enable/disable toggle (#771)

2026-04-25 10:50:21 -04:00

stack-files-routes.test.ts

fix: harden stack file explorer operations (#1028)

2026-05-12 15:49:51 -04:00

stack-management.test.ts

fix(stacks): harden stack management with security, validation, and logging (#520)

2026-04-12 05:43:15 -04:00

stack-service-actions.test.ts

feat(stacks): per-service start/stop/restart lifecycle actions (#778)

2026-04-25 17:26:04 -04:00

stacks-failure-notifications.test.ts

fix: harden stack management operations (#1046)

2026-05-14 10:21:18 -04:00

stacks-from-git-skip-scan.test.ts

fix: harden vulnerability scan scheduling (#1035)

2026-05-13 09:40:45 -04:00

suppression-filter.test.ts

Audit-hardening pass for fleet-replicated CVE suppressions (#976)

2026-05-07 16:18:19 -04:00

suppression-routes.test.ts

Audit-hardening pass for fleet-replicated CVE suppressions (#976)

2026-05-07 16:18:19 -04:00

system-pilot-tunnels-central-callback.test.ts

feat(mesh): symmetric WS dial for proxy-mode mesh peers (#1066)

2026-05-16 14:58:19 -04:00

template-service.test.ts

feat: change default listen port from 3000 to 1852 (#756)

2026-04-24 22:23:31 -04:00

templates-deploy-rbac.test.ts

fix(templates): align App Store deploy gate with stack:create permission (#986)

2026-05-08 03:50:03 -04:00

topology-community-tier.test.ts

feat: drop stack labels and network topology to Community tier (#995)

2026-05-08 15:24:25 -04:00

trivy-scan-compose-stack.test.ts

Audit-hardening pass for secret and misconfiguration scanning (#977)

2026-05-07 19:23:11 -04:00

trivy-secret-misconfig.test.ts

feat(security): secret and misconfiguration scanning (#651)

2026-04-17 07:57:08 -04:00

trivy-service.test.ts

fix(security): harden Trivy scan lifecycle, logging, and docs (#639)

2026-04-16 20:32:38 -04:00

trivy-tmp-cleanup.test.ts

Audit-hardening pass for secret and misconfiguration scanning (#977)

2026-05-07 19:23:11 -04:00

update-preview-service.test.ts

fix(auto-update): label same-tag rebuilds as 'Rebuild available' instead of '10.11 -> 10.11' (#766)

2026-04-24 23:37:32 -04:00

upgrade-order.test.ts

feat(api-tokens): switch to sen_sk_ prefixed opaque keys (#1062)

2026-05-15 18:21:28 -04:00

users-rbac.test.ts

feat(api-tokens): switch to sen_sk_ prefixed opaque keys (#1062)

2026-05-15 18:21:28 -04:00

validation.test.ts

feat: change default listen port from 3000 to 1852 (#756)

2026-04-24 22:23:31 -04:00

volume-browser-service.test.ts

feat(volumes): add read-only volume browser (#926)

2026-05-05 00:09:40 -04:00

vulnerability-db.test.ts

fix(security): harden Trivy scan lifecycle, logging, and docs (#639)

2026-04-16 20:32:38 -04:00

webhooks-git-source.test.ts

fix: harden git source webhooks (#1033)

2026-05-13 03:02:21 -04:00