Vantage/vantage-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • eb6f47c8ed fix(monitors): document 403 and 404 on monitor update and delete; regenerate openapi main mrhid6 2026-09-17 09:25:11 +00:00
  • ffc6853142 fix(web): metric monitor edit keeps for_sec 0 and allows 0 minutes mrhid6 2026-09-17 09:25:02 +00:00
  • 42766968e3 fix(monitors): keep reboot_required_since on a transient inventory read error mrhid6 2026-09-17 09:24:42 +00:00
  • cffa7e84b2 fix(monitors): index heartbeat token hash mrhid6 2026-09-17 09:24:42 +00:00
  • 2701b32b5f fix(monitors): 400/404 on bad updates, clamp for_sec, reset heartbeat state on re-enable mrhid6 2026-09-17 09:24:16 +00:00
  • 753ba09e6e fix(mcp): filter list_incidents by the token's visible servers mrhid6 2026-09-17 09:23:14 +00:00
  • 7c2c5d95e3 fix(web): hand the new heartbeat token over in sessionStorage, not the URL mrhid6 2026-09-17 09:23:03 +00:00
  • 13e7160405 fix(monitors): rate limit heartbeats per token and kind; test limiter key and fail body cap mrhid6 2026-09-17 09:22:50 +00:00
  • 2afdc267f8 fix(monitors): keep a down server down while its breach lasts after for_sec is raised mrhid6 2026-09-17 09:22:50 +00:00
  • 8908b435a0 docs(monitors): document heartbeat and metric monitors; add heartbeat e2e mrhid6 2026-09-17 09:16:53 +00:00
  • 4158696388 feat(web): metric monitor rule builder and per-server state table mrhid6 2026-09-17 09:11:23 +00:00
  • 3cb8463dc7 feat(api): metric monitor per-server states and server-scoped incidents mrhid6 2026-09-17 09:02:35 +00:00
  • 2017c95a7a feat(monitors): sweep metric monitors per server with incidents per breach mrhid6 2026-09-17 08:59:24 +00:00
  • 4068349afe feat(monitors): validate metric monitors and confine selectors to token scope mrhid6 2026-09-17 08:56:15 +00:00
  • f01375470e fix(monitors): ignore partitions reporting more used than total mrhid6 2026-09-17 08:52:21 +00:00
  • 12136d1c17 feat(monitors): metric rule evaluators and per-server state decisions mrhid6 2026-09-17 08:40:06 +00:00
  • 1a1f6998a4 feat(inventory): record when a reboot became required mrhid6 2026-09-17 08:37:41 +00:00
  • 42358f57cb feat(web): heartbeat monitor form, ping URL panel and token rotation mrhid6 2026-09-17 08:33:29 +00:00
  • 17ed0192c1 feat(monitors): public heartbeat ping endpoints, header token, log masking and sweeper mrhid6 2026-09-17 08:27:34 +00:00
  • 839d716a47 fix(monitors): guard heartbeat sweep against a concurrent ping mrhid6 2026-09-17 08:24:13 +00:00
  • 09888825a8 feat(monitors): heartbeat token, ping recording and overdue verdict mrhid6 2026-09-17 08:20:16 +00:00
  • 590c369d36 fix(notify): include server name in monitor alert email mrhid6 2026-09-17 08:16:10 +00:00
  • 64dbad1d20 refactor(monitors): extract applyTransition and add passive monitor model fields mrhid6 2026-09-17 08:14:24 +00:00
  • aaad7db09d docs(plan): accept heartbeat token in X-Vantage-Token header and mask URL tokens in logs mrhid6 2026-09-17 07:53:37 +00:00
  • fab9d11c7e docs(plan): fix task cross-references and error sentinel placement mrhid6 2026-09-17 07:48:36 +00:00
  • 73da464701 docs(plan): metric alerts and heartbeat monitors implementation plan mrhid6 2026-09-17 07:48:25 +00:00
  • d59da68701 docs(spec): metric alerts and heartbeat monitors design mrhid6 2026-09-17 07:40:49 +00:00
  • 189bce55ba feat(runs): mask encoded and multi-line secrets in run logs mrhid6 2026-09-17 07:33:20 +00:00
  • 217e2dc5a9 feat(auth): prefer rather than require passkey user verification mrhid6 2026-09-16 15:20:31 +00:00
  • 934501f4ec fix(auth): store passkey backup flags so synced passkeys verify mrhid6 2026-09-16 15:03:54 +00:00
  • b1193c59e3 fix(auth): log why a passkey ceremony was refused mrhid6 2026-09-16 14:51:55 +00:00
  • 069e7e7c61 fix(api): declare MFA routes session-only so the server boots mrhid6 2026-09-16 14:40:29 +00:00
  • 19383abaf8 fix(auth): final-review MFA fixes F1 F2 F3 F5 F7 and drop Ticket.Attempts mrhid6 2026-09-16 14:26:42 +00:00
  • dcdfd3ce52 test(mfa): fix step-up test to assert the fresh-session path mrhid6 2026-09-16 14:20:42 +00:00
  • 142b99e408 test(mfa): end-to-end coverage, OpenAPI and documentation mrhid6 2026-09-16 14:18:39 +00:00
  • 14e9db606a fix(mfa): wire up webauthn step-up routes mrhid6 2026-09-16 09:44:41 +00:00
  • 3e341b17ec feat(web): step-up modal and MFA settings controls mrhid6 2026-09-16 09:33:50 +00:00
  • 32fd11cde7 feat(web): account security page and MFA enrolment wizard mrhid6 2026-09-16 09:26:54 +00:00
  • 26825841fa feat(web): MFA and passkey sign-in on the login page mrhid6 2026-09-16 09:22:18 +00:00
  • d8597ee3ae feat(mfa): require_mfa policy, sign-in rate limit and MFA column mrhid6 2026-09-16 09:14:16 +00:00
  • f87626cf17 feat(mfa): account MFA management, passkey registration and step-up mrhid6 2026-09-16 09:08:24 +00:00
  • bd0639acfa fix(mfa): refuse rather than panic when RequireStepUp sees no session mrhid6 2026-09-16 09:03:22 +00:00
  • e2ff0dace9 feat(mfa): step-up re-authentication on sensitive actions mrhid6 2026-09-16 09:01:19 +00:00
  • d54d8971b2 feat(mfa): passwordless passkey sign-in mrhid6 2026-09-16 08:58:26 +00:00
  • 14a1cdb2b0 feat(mfa): passkey verification as a second factor mrhid6 2026-09-16 08:48:39 +00:00
  • 1445af11ab fix(mfa): mint session before deleting ticket, collapse dead invalid_code branch mrhid6 2026-09-16 08:43:53 +00:00
  • 3fa469c303 feat(mfa): forced TOTP enrolment at sign-in mrhid6 2026-09-16 08:41:56 +00:00
  • 2d75832ceb feat(mfa): second-factor sign-in with TOTP and recovery codes mrhid6 2026-09-16 08:39:48 +00:00
  • dfcfd1d3e2 fix(mfa): make ticket attempt count atomic via Redis INCR mrhid6 2026-09-16 08:37:07 +00:00
  • 9c60adc836 feat(mfa): pending-login ticket store mrhid6 2026-09-16 08:34:57 +00:00
  • 330c326fb5 fix(mfa): key TOTP replay guard on time step, not the code mrhid6 2026-09-16 08:33:02 +00:00
  • 25541345a8 feat(mfa): TOTP secrets, recovery codes and factor lookup mrhid6 2026-09-16 08:30:55 +00:00
  • b78a9b3832 feat(mfa): user_mfa and webauthn_credentials collections mrhid6 2026-09-16 08:27:54 +00:00
  • 9aee0a61aa chore(server): bump vantage-shared to v0.7.0 for require_mfa mrhid6 2026-09-16 08:22:08 +00:00
  • 0aabb664e2 docs: implementation plan for MFA on local sign-in mrhid6 2026-09-16 08:15:46 +00:00
  • e0468aa7b9 docs: design for MFA on local sign-in (TOTP, passkeys, step-up) mrhid6 2026-09-15 15:48:59 +00:00
  • fbcf436ef6 feat: show Ubuntu phased updates apart and leave them out of pending counts mrhid6 2026-09-15 14:55:30 +00:00
  • 0e464c4bb8 fix(web): wrap long patch output lines instead of widening the run table mrhid6 2026-09-15 14:27:42 +00:00
  • fc10575b08 fix: require a 2 minute boot time change before counting a patch reboot mrhid6 2026-09-15 14:09:34 +00:00
  • 3f2d20868e fix(patching): final review fixes mrhid6 2026-09-15 13:49:28 +00:00
  • 3ecea7c39f feat(web): show patch policy coverage on servers and open the run after Apply updates mrhid6 2026-09-15 13:23:19 +00:00
  • 68c613fd40 feat(web): patch run detail page with per-server output mrhid6 2026-09-15 12:24:17 +00:00
  • 70c239021d feat(web): patching page with policies, windows and runs mrhid6 2026-09-15 11:19:01 +00:00
  • 3a7618f82f feat(web): maintenance window and patch policy editors mrhid6 2026-09-15 10:59:06 +00:00
  • 7809419202 fix(web): anchor patch agent version regex to mirror server parseVersion mrhid6 2026-09-15 09:43:56 +00:00
  • 59e7ef63fe feat(web): patching API client, status vocabulary and navigation mrhid6 2026-09-15 09:41:07 +00:00
  • b5bbf28c63 feat: patching REST API, patching scope, run IDs from apply-updates and MCP mrhid6 2026-09-15 09:31:51 +00:00
  • 17c9f813fc fix: patchsched hasActiveRun must not treat a real DB error as no active run mrhid6 2026-09-15 09:19:51 +00:00
  • 139658864b feat: patch scheduler loop; record patch results and verify reboots from the agent stream mrhid6 2026-09-15 09:17:27 +00:00
  • 1bb2ba7f2b fix: patch run dispatch - per-server contexts, cancel race, result command guard mrhid6 2026-09-15 09:09:12 +00:00
  • fef886c93b feat: patch run service - dispatch, results, reboot verification, cancel, alerts, retention mrhid6 2026-09-15 09:04:23 +00:00
  • 3a1614066e feat: maintenance window and patch policy services mrhid6 2026-09-15 08:50:36 +00:00
  • c0e26d0493 feat: patchsched fire/skip decision and window arithmetic mrhid6 2026-09-15 08:44:52 +00:00
  • b60daf0461 feat: patchrun - pure state machine for patch runs mrhid6 2026-09-15 08:39:21 +00:00
  • 8f1ea6d5a0 feat: patch models, scoped collections and indexes; pin vantage-shared v0.5.0 mrhid6 2026-09-15 08:27:04 +00:00
  • e63e773cda docs: implementation plan for scheduled patching; align spec audit names, alert payload and run source mrhid6 2026-09-14 15:32:47 +00:00
  • 48116bf737 docs: design for maintenance windows and scheduled patching mrhid6 2026-09-14 14:41:24 +00:00
  • 2b4b630ae0 chore: pin vantage-shared v0.3.3 mrhid6 2026-09-11 11:02:10 +00:00
  • ad0f583d41 chore: pin vantage-shared v0.3.2 mrhid6 2026-09-11 09:58:51 +00:00
  • 5ca705c88c feat: login page says a locked instance is suspended instead of drawing the form mrhid6 2026-09-11 09:05:44 +00:00
  • 2d96cb4224 chore: pin vantage-shared v0.3.0 mrhid6 2026-09-11 08:36:27 +00:00
  • d2672fc022 docs: HQ dispute lock and purge contract mrhid6 2026-09-10 13:25:47 +00:00
  • ec22696402 feat: purge instances whose HQ dispute failed; Free reaper skips locked instances mrhid6 2026-09-10 13:25:33 +00:00
  • 913d3da386 feat: refuse instances Vantage HQ has locked under a dispute mrhid6 2026-09-10 13:24:47 +00:00
  • 8bd0d790dd fix: Fixed modal overflow issue mrhid6 2026-09-10 12:51:37 +00:00
  • 3e4db573bc chore: Updated go deps mrhid6 2026-09-10 12:08:53 +00:00
  • 5925717ca8 fix: Fixed env variable mrhid6 2026-09-10 11:19:53 +00:00
  • f3e7357735 fix: Fixed license page scrollbar overflow mrhid6 2026-09-10 09:25:24 +00:00
  • 6ee203f5e9 chore: replace em dashes with hyphens, add no-em-dash rule to CLAUDE.md mrhid6 2026-09-10 09:18:55 +00:00
  • b36a696d0e feat: Added nginx container to docker compose file mrhid6 2026-09-10 08:43:25 +00:00
  • 1538ae9bd1 fix: Fixed docker compose images mrhid6 2026-09-10 08:16:21 +00:00
  • 5377a1e585 fix: bind scope tests to real code, close time-of-write gap, fail closed mrhid6 2026-09-09 11:56:15 +00:00
  • 2e3d2a33f9 fix: close privilege escalation via workflow TargetTags on REST create/update mrhid6 2026-09-09 11:45:39 +00:00
  • 52ac966cba fix(api): allow serverScopedRoutes entries for routes outside /api group mrhid6 2026-09-09 11:32:52 +00:00
  • bfe58c4cd2 fix: Fixed serverscope for secret eso endpoint mrhid6 2026-09-09 08:57:21 +00:00
  • 9d7c4b72aa fix: Fixed openapi doc mrhid6 2026-09-09 08:46:25 +00:00
  • a2351c75dd feat:runscope test mrhid6 2026-09-09 08:43:55 +00:00
  • 3695bc9e1a feat(mcp): declare an input schema and a server-data flag for every tool mrhid6 2026-09-09 08:41:16 +00:00
  • 9bcec168b9 refactor(api): require every /api route to declare its server-scope status mrhid6 2026-09-09 08:38:53 +00:00
  • d95f299562 feat(tokens): refuse minting mcp scopes without the MCP licence feature mrhid6 2026-09-09 08:36:26 +00:00