Anso a826cd398d fix: allow chmod on protected stack files (#1772) ...

* fix: allow chmod on protected stack files

Identity protection still blocks delete, rename, and copy-onto-reserved-name for compose and .env at the stack root. Permission changes are ordinary edits and must succeed from the explorer.

* fix: gate chmod on compose files during stack ops

Chmod on compose filenames and .blueprint.json now follows the same
stack-op lock as content writes and uploads. Document allowed blueprint
chmod and that content saves reset mode bits.

2026-08-05 09:22:36 -04:00

..

healthcheck

fix(compose-doctor): resolve effective healthcheck coverage (#1713)

2026-07-28 14:26:00 -04:00

network

fix(networking): ignore verified Mesh attachments in drift (#1729)

2026-07-29 12:55:30 -04:00

preflight

fix(compose-doctor): resolve effective healthcheck coverage (#1713)

2026-07-28 14:26:00 -04:00

storage

feat: per-stack storage inventory and portability guardrails (#1399)

2026-06-20 15:06:26 -04:00

updateGuard

feat: add node-scoped opt-out for image update detection (#1715)

2026-07-28 10:10:04 -04:00

AuditAnomalyService.ts

fix(audit-log): neutralize CSV export injection, clamp pagination, bound anomaly history (#1259)

2026-05-31 16:36:07 -04:00

AutoHealService.ts

feat: add service-scoped Compose update and restore (#1648)

2026-07-19 02:42:29 -04:00

BlueprintAnalyzer.ts

fix: harden blueprint deployment guardrails (#1027)

2026-05-12 15:49:19 -04:00

blueprintApproval.ts

feat(blueprints): require confirmed rollout preview before reconcile (#1649)

2026-07-19 15:30:26 -04:00

blueprintPreviewProjection.ts

fix(blueprints): fail closed on marker ownership for apply and withdraw (#1694)

2026-07-24 15:57:18 -04:00

BlueprintReconciler.ts

fix(blueprints): gate confirmed apply on live intent fingerprint (#1663)

2026-07-21 20:31:13 -04:00

BlueprintService.ts

feat(rbac): make stack-scoped grants node-specific (#1727)

2026-07-29 09:42:14 -04:00

CacheService.ts

fix: reconcile sticky update indicators with Anatomy preview (#1698)

2026-07-25 15:42:19 -04:00

CapabilityRegistry.ts

fix: condition --volumes in downStack() on the removeVolumes option (#1764)

2026-08-04 13:04:21 -04:00

CloudBackupService.ts

fix(fleet): isolate corrupt snapshot file decrypt failures (#1650)

2026-07-19 20:08:31 -04:00

ComposeDiscoveryService.ts

feat: first-boot compose discovery and adopt-first sidebar (#1600)

2026-07-10 08:42:52 -04:00

ComposeDoctorService.ts

fix(compose-doctor): resolve effective healthcheck coverage (#1713)

2026-07-28 14:26:00 -04:00

composeProjectContext.ts

fix: keep running containers until stack pull/build succeeds (#1657)

2026-07-21 12:18:01 -04:00

ComposeService.ts

fix: condition --volumes in downStack() on the removeVolumes option (#1764)

2026-08-04 13:04:21 -04:00

ContainerLifecycleClassifier.ts

fix(docker-events): harden crash detection against edge cases (#591)

2026-04-14 14:37:28 -04:00

CryptoService.ts

fix(error-handling): surface silent errors across the codebase (#326)

2026-04-01 21:56:41 -04:00

CveIntelService.ts

feat(security): action-posture Security dashboard with exploit intel and triage (#1424)

2026-06-23 17:42:11 -04:00

DatabaseService.ts

feat: add ntfy notification channel (#1761)

2026-08-03 19:29:41 -04:00

DependencyGraphService.ts

feat(fleet): add read-only dependency map tab (#1324)

2026-06-06 11:18:36 -04:00

DeployedStackDeletionService.ts

fix: condition --volumes in downStack() on the removeVolumes option (#1764)

2026-08-04 13:04:21 -04:00

DiagnosticsService.ts

feat: add ON/OFF toggle for host threshold alerts (#1456)

2026-06-25 16:05:16 -04:00

DockerController.ts

fix(resources): attribute free images to managed prune by repository family (#1769)

2026-08-04 16:38:37 -04:00

DockerEventManager.ts

feat: auto-heal policies for unhealthy containers (#671)

2026-04-17 22:45:06 -04:00

DockerEventService.ts

fix: dedupe healthcheck alerts and share crash rate limits (#1690)

2026-07-23 23:14:25 -04:00

DriftDetectionService.ts

fix(networking): ignore verified Mesh attachments in drift (#1729)

2026-07-29 12:55:30 -04:00

DriftLedgerService.ts

feat: add service-scoped Compose update and restore (#1648)

2026-07-19 02:42:29 -04:00

effectiveAnatomy.ts

docs: caveat interpolated secrets in structural Compose fields (#1425)

2026-06-23 16:58:26 -04:00

effectiveServiceModel.ts

fix(compose-doctor): resolve effective healthcheck coverage (#1713)

2026-07-28 14:26:00 -04:00

EnvInventoryService.ts

fix: stop Doctor exposing hash fragments as unset variables (#1558)

2026-07-05 03:50:40 -04:00

EnvironmentCheckService.ts

feat: block self-stack lifecycle ops with UI and preflight guardrails (#1569)

2026-07-06 02:08:16 -04:00

FileExplorerMetricsService.ts

feat(files): copy & duplicate, bulk actions, disk-backed uploads, and an accessible file tree (#1409)

2026-06-22 19:33:06 -04:00

FileRootGateway.ts

feat(files): copy & duplicate, bulk actions, disk-backed uploads, and an accessible file tree (#1409)

2026-06-22 19:33:06 -04:00

FileSystemService.ts

fix: allow chmod on protected stack files (#1772)

2026-08-05 09:22:36 -04:00

fleetSyncConstants.ts

Audit-hardening pass for secret and misconfiguration scanning (#977)

2026-05-07 19:23:11 -04:00

FleetSyncRetryService.ts

feat(fleet-sync): retry failed pushes and backfill on add-node (#970)

2026-05-07 13:16:24 -04:00

FleetSyncService.ts

feat(security): gate deploys on exploitation risk, not just severity (#1432)

2026-06-24 20:05:17 -04:00

FleetUpdateTrackerService.ts

feat(fleet): reapply Compose configuration without a version update (#1716)

2026-07-28 14:26:46 -04:00

GitSourceService.ts

feat: add service-scoped Compose update and restore (#1648)

2026-07-19 02:42:29 -04:00

GlobalLogsMetrics.ts

fix(observability): gate global logs to admins, scope to managed containers, harden SSE (#1254)

2026-05-29 21:09:20 -04:00

HardenedEntitlementService.ts

feat: add Admiral Hardened Build channel and business assurance surfaces (#1629)

2026-07-14 10:47:54 -04:00

hardenedEntitlementTypes.ts

feat: add Admiral Hardened Build channel and business assurance surfaces (#1629)

2026-07-14 10:47:54 -04:00

HealthGateService.ts

fix: recognize clean one-shot completions in health gate and drift (#1691)

2026-07-24 09:41:21 -04:00

HostTerminalService.ts

feat: graduate Host Console to Community admins (#1669)

2026-07-23 12:59:53 -04:00

ImageOperationService.ts

feat(fleet): reapply Compose configuration without a version update (#1716)

2026-07-28 14:26:46 -04:00

imageUpdateDetect.ts

fix: reconcile sticky update indicators with Anatomy preview (#1698)

2026-07-25 15:42:19 -04:00

ImageUpdateService.ts

fix(rbac): permission-gate alerts, auto-heal, and image updates (#1743)

2026-08-01 21:07:21 -04:00

LabelInventoryService.ts

feat: add Docker label audit across Fleet and Stack views (#1531)

2026-07-03 18:26:09 -04:00

license-headers.ts

feat(rbac): make stack-scoped grants node-specific (#1727)

2026-07-29 09:42:14 -04:00

license-normalize.ts

feat(pricing): collapse to two tiers (#1309)

2026-06-04 17:45:53 -04:00

license-types.ts

feat(pricing): collapse to two tiers (#1309)

2026-06-04 17:45:53 -04:00

LicenseService.ts

feat: add Admiral Hardened Build channel and business assurance surfaces (#1629)

2026-07-14 10:47:54 -04:00

LogFormatter.ts

feat: show container name in structured log output (#1452)

2026-06-25 14:13:38 -04:00

MeshComposeOverride.ts

feat(mesh): replace host-mode with shared sencho_mesh Docker network (#1009)

2026-05-09 00:11:09 -04:00

MeshForwarder.ts

fix(mesh): address audit follow-ups (early-data, recompose, admiral gate, error codes, docs) (#1126)

2026-05-20 12:53:29 -04:00

MeshProxyTunnelDialer.ts

feat(pricing): collapse to two tiers (#1309)

2026-06-04 17:45:53 -04:00

MeshService.ts

fix(networking): ignore verified Mesh attachments in drift (#1729)

2026-07-29 12:55:30 -04:00

MfaService.ts

fix(mfa): enforce single-use backup codes under concurrent verification (#1262)

2026-05-31 20:28:48 -04:00

MonitorService.ts

feat: account for VM memory ballooning in host memory reporting (#1750)

2026-08-02 20:48:38 -04:00

NodeLabelService.ts

feat(blueprints): backend foundation for fleet-wide compose templates (#860)

2026-05-01 18:57:44 -04:00

NodeRegistry.ts

fix(fleet): show capabilities, version, metrics, and stacks for pilot-agent nodes (#1044)

2026-05-14 10:21:08 -04:00

NotificationService.ts

feat: add ntfy notification channel (#1761)

2026-08-03 19:29:41 -04:00

OpenVexExporter.ts

feat(security): action-posture Security dashboard with exploit intel and triage (#1424)

2026-06-23 17:42:11 -04:00

PilotMetrics.ts

fix(mesh): route peer→central traffic over the existing forward WS (#1094)

2026-05-17 22:00:31 -04:00

PilotTunnelBridge.ts

fix(mesh): close error-listener race in pilot tunnel reverse-dial connect (#1754)

2026-08-02 21:08:07 -04:00

PilotTunnelManager.ts

fix(pilot): post-merge audit followups (WS via getProxyTarget, closeTunnel lifecycle, mesh source buffer, docs) (#1128)

2026-05-21 01:00:47 -04:00

policy-packs.ts

feat: add dedicated Security page and policy-pack foundation (#1362)

2026-06-12 10:41:39 -04:00

PolicyEnforcement.ts

fix: unlock Community deploy policy hard-blocking (#1643)

2026-07-16 15:24:05 -04:00

prunePlan.ts

fix(resources): attribute free images to managed prune by repository family (#1769)

2026-08-04 16:38:37 -04:00

recoveryHeldImages.ts

feat(recovery): make rollback-recovery image lifecycle visible and controllable (#1753)

2026-08-02 21:55:22 -04:00

registry-api.ts

fix(image-updates): normalize docker.io host aliases to the registry API host (#1706)

2026-07-26 01:56:12 -04:00

RegistryService.ts

feat: add Admiral Hardened Build channel and business assurance surfaces (#1629)

2026-07-14 10:47:54 -04:00

SarifExporter.ts

fix: harden vulnerability scan scheduling (#1035)

2026-05-13 09:40:45 -04:00

scheduledActionRegistry.ts

feat: add target-aware RBAC authorization to Scheduled Operations (#1745)

2026-08-02 01:15:37 -04:00

SchedulerService.ts

feat: add target-aware RBAC authorization to Scheduled Operations (#1745)

2026-08-02 01:15:37 -04:00

SecretsService.ts

fix(fleet-secrets): restrict bundle management to admin hub sessions (#1274)

2026-06-01 19:47:06 -04:00

securityPosture.ts

fix: differentiate security action links and add suppression editing (#1500)

2026-06-28 06:17:47 -04:00

SelfIdentityService.ts

feat(onboarding): add first-run environment checker (#1290)

2026-06-02 21:40:38 -04:00

SelfUpdateService.ts

feat(fleet): reapply Compose configuration without a version update (#1716)

2026-07-28 14:26:46 -04:00

ServiceUpdateRecoveryService.ts

feat(recovery): make rollback-recovery image lifecycle visible and controllable (#1753)

2026-08-02 21:55:22 -04:00

SSOService.ts

feat(pricing): collapse to two tiers (#1309)

2026-06-04 17:45:53 -04:00

StackActivityMetricsService.ts

feat(stack-activity): in-process metrics, structured diagnostic logs, docs (#1229)

2026-05-25 21:25:59 -04:00

StackFileRootsService.ts

fix: contain file-explorer binds that reach dangling symlinked managed paths (#1490)

2026-06-27 14:32:50 -04:00

StackOpLockService.ts

fix: keep running containers until stack pull/build succeeds (#1657)

2026-07-21 12:18:01 -04:00

StackOpMetricsService.ts

feat: add service-scoped Compose update and restore (#1648)

2026-07-19 02:42:29 -04:00

StackUpdateOrchestrator.ts

fix: keep running containers until stack pull/build succeeds (#1657)

2026-07-21 12:18:01 -04:00

StackUpdateRecoveryService.ts

feat(recovery): make rollback-recovery image lifecycle visible and controllable (#1753)

2026-08-02 21:55:22 -04:00

SuppressionRetractionRetryService.ts

fix(notifications): version mute replica retractions for soft-cleanup restore (#1703)

2026-07-25 23:47:37 -04:00

TemplateService.ts

fix: parse LSIO volume :ro suffixes for App Store deploys (#1557)

2026-07-05 03:11:21 -04:00

TrivyInstaller.ts

feat: pre-deploy scan visibility and pinned scanner version (#1378)

2026-06-16 00:42:33 -04:00

TrivyService.ts

fix: copy the full finding set when reusing a cached scan for the deploy gate (#1476)

2026-06-26 18:58:54 -04:00

UpdateGuardService.ts

fix(compose-doctor): resolve effective healthcheck coverage (#1713)

2026-07-28 14:26:00 -04:00

UpdatePreviewService.ts

feat: add node-scoped opt-out for image update detection (#1715)

2026-07-28 10:10:04 -04:00

VolumeBrowserService.ts

feat(files): copy & duplicate, bulk actions, disk-backed uploads, and an accessible file tree (#1409)

2026-06-22 19:33:06 -04:00

WebhookService.ts

fix: keep running containers until stack pull/build succeeds (#1657)

2026-07-21 12:18:01 -04:00