-
ac8e957859
fix(security): scope package search, run documents, workloads and vulnerability reads to the token's tags
mrhid6
2026-09-09 08:36:04 +00:00
-
6a48dd5d73
fix(security): scope workflow target and monitor runner validation to the caller's tags
mrhid6
2026-09-09 08:33:38 +00:00
-
5fcfb40084
fix(security): scope workflow run dispatch and MCP run logs to the token's tags
mrhid6
2026-09-09 08:32:32 +00:00
-
705085d3c7
feat: Fixed spacing
mrhid6
2026-09-09 08:16:06 +00:00
-
67520c677b
feat: show mcp feature row on the licence page
mrhid6
2026-09-09 08:09:46 +00:00
-
bb698eba8a
feat: let an agent create steps, workflows and monitors, inert until a human arms them
mrhid6
2026-09-09 08:07:26 +00:00
-
3bdbf33f90
fix: scope monitor runner and workflow targets to the caller's fleet
mrhid6
2026-09-09 08:03:26 +00:00
-
e06f9d5670
fix: scope the assignment count leaked by the key list
mrhid6
2026-09-09 07:54:42 +00:00
-
dc6e1b3c29
fix: widen server-scope boot check, filter out-of-scope key assignments
mrhid6
2026-09-09 07:50:52 +00:00
-
cbf929fe2d
fix: audit refused and failed mcp write calls, scope key assignment to token
mrhid6
2026-09-09 07:46:45 +00:00
-
b3651ab58c
feat: add mcp write tools with a fan-out guard
mrhid6
2026-09-09 07:28:48 +00:00
-
191a8e9074
fix(mcp): correct fleet online status, unsafe version filter, audit totals
mrhid6
2026-09-09 07:24:09 +00:00
-
ed79df4270
fix: restore the vantage-shared go.sum entries dropped by go mod tidy
mrhid6
2026-09-09 07:17:53 +00:00
-
7ec97ae8c2
feat: Removed go.mod replace
mrhid6
2026-09-08 15:10:05 +00:00
-
b96cd85e43
feat: go mod tidy
mrhid6
2026-09-08 15:00:54 +00:00
-
971bcece44
feat: Updated openapi doc
mrhid6
2026-09-08 14:51:43 +00:00
-
333d729026
feat: Updated go deps
mrhid6
2026-09-08 14:44:45 +00:00
-
8dd68e34c1
docs: mark the api keys redesign plan implemented
mrhid6
2026-09-08 14:14:57 +00:00
-
e5b9894384
feat: surface the mcp endpoint and its scopes on the api keys page
mrhid6
2026-09-08 14:14:44 +00:00
-
14b947f791
feat: add mcp read tools for fleet, health and workflow data
mrhid6
2026-09-08 14:12:44 +00:00
-
98233b620c
docs: fold the mcp task 12 token-form steps into the api keys redesign
mrhid6
2026-09-08 14:12:26 +00:00
-
2d6b5bd8a3
feat: restrict an api key to tagged servers from the create dialog
mrhid6
2026-09-08 14:12:10 +00:00
-
ac9cc57e7e
feat: rebuild the create key dialog around a scope matrix and a preview
mrhid6
2026-09-08 14:10:37 +00:00
-
a0641e8ecb
feat: summarise key posture above the ledger
mrhid6
2026-09-08 14:09:00 +00:00
-
67ac029354
feat: redesign the api key list as a ledger with lifetime bars
mrhid6
2026-09-08 14:07:56 +00:00
-
a0b5565a63
docs: explain why GET /api/mcp deliberately answers 405 in stateless mode
mrhid6
2026-09-08 14:07:54 +00:00
-
aedc388535
refactor: split the api keys panel into ledger, chips, lifetime and dialog
mrhid6
2026-09-08 14:06:02 +00:00
-
5e4c8afdd1
feat: model an api key's remaining lifetime as a single value
mrhid6
2026-09-08 14:03:49 +00:00
-
0166b17299
feat: serve the mcp endpoint behind the licence feature
mrhid6
2026-09-08 13:57:21 +00:00
-
674236bb76
feat: audit mcp tool calls and guard against fleet-wide fan-out
mrhid6
2026-09-08 13:50:28 +00:00
-
5943d98681
feat: add the mcp tool registry and its scope gates
mrhid6
2026-09-08 13:50:01 +00:00
-
7ea8e2fff0
fix: close out-of-scope server access in vulns, packages, run logs, and key revoke
mrhid6
2026-09-08 13:48:11 +00:00
-
f87986b4f7
feat: enforce token tag restrictions at the server resolution chokepoints
mrhid6
2026-09-08 13:43:38 +00:00
-
2481974b3a
feat: carry the token tag restriction on the session
mrhid6
2026-09-08 13:37:05 +00:00
-
f9df426e6c
feat: allow an API token to be restricted to servers by tag
mrhid6
2026-09-08 13:34:58 +00:00
-
e8e41f197a
build: temporarily replace vantage-shared with local checkout
mrhid6
2026-09-08 13:31:56 +00:00
-
1f2b56ea29
Revert "chore: pick up the mcp licence feature from vantage-shared"
mrhid6
2026-09-08 13:31:20 +00:00
-
8234bdf9f3
feat: add the mcp scope resource
mrhid6
2026-09-08 13:29:41 +00:00
-
a2fe478c82
chore: pick up the mcp licence feature from vantage-shared
mrhid6
2026-09-08 13:28:25 +00:00
-
a2eee958f0
docs: implementation plan for the mcp server, and creation tools in the spec
mrhid6
2026-09-08 13:24:03 +00:00
-
998e1c419d
docs: design spec for the MCP server feature
mrhid6
2026-09-08 13:12:57 +00:00
-
d92ca7591f
Rephrased secrets page
mrhid6
2026-09-08 10:25:01 +00:00
-
11a81e714f
chore: Bump chart
chart/v1.1.1
mrhid6
2026-09-08 09:22:30 +00:00
-
c946a23afc
fix: Fixed chart values
mrhid6
2026-09-08 09:21:38 +00:00
-
262795bf2e
fix: Fixed ci workflow
mrhid6
2026-09-08 09:19:11 +00:00
-
3164f5ca22
fix: Fixed ci workflow
mrhid6
2026-09-08 09:16:44 +00:00
-
574057811f
chore: remove go.work
mrhid6
2026-09-08 09:10:48 +00:00
-
e0cc3988fc
refactor: move vantagectl to vantage-ctl
mrhid6
2026-09-08 09:07:14 +00:00
-
44d9036440
refactor: move the agent and its installer to vantage-agent
mrhid6
2026-09-08 09:00:22 +00:00
-
1c6d9e8495
refactor: move proto/ to vantage-shared
mrhid6
2026-09-08 08:44:47 +00:00
-
f9dec9b230
refactor: move the public host out to vantage-site and vantage-docs
mrhid6
2026-09-08 08:41:11 +00:00
-
872699c38c
refactor: move Vantage HQ out to the vantage-admin repository
mrhid6
2026-09-08 08:13:55 +00:00
-
eb32d367c8
feat: Removed comments in workflow
mrhid6
2026-09-08 07:47:42 +00:00
-
a134f8443a
fix: download vantage-shared before asking the module cache where it is
mrhid6
2026-09-08 07:47:00 +00:00
-
ee1f9f3b32
refactor: consume vantage-shared as an external private module
mrhid6
2026-09-08 07:42:58 +00:00
-
5326639918
fix: declare grpc dependency in shared go.mod
mrhid6
2026-09-08 07:36:13 +00:00
-
3bf80a117b
refactor: rename shared module to gitea.hostxtra.co.uk/vantage/vantage-shared
mrhid6
2026-09-08 07:34:53 +00:00
-
189a8fa963
feat: Move grpc pbs to shared
mrhid6
2026-09-07 15:50:25 +00:00
-
7b13944c24
fix: Build the vantagectl image on its release tag, not on every push to main
mrhid6
2026-09-07 15:11:39 +00:00
-
e7384d334a
feat: Add vantagectl, the control plane backup and restore CLI
mrhid6
2026-09-07 14:52:13 +00:00
-
-
be299845ca
fix: document inspect and --confirm-db's actual behaviour
mrhid6
2026-09-07 14:45:37 +00:00
-
d83061786c
fix: validate manifest collection names and route archive accessors through safeJoin
mrhid6
2026-09-07 14:45:37 +00:00
-
b28a2263bb
fix: read KEY_ENCRYPTION_KEY in archive-only verify; never leave a partial archive
mrhid6
2026-09-07 14:45:36 +00:00
-
b6f45390c4
fix: correct verify's ciphertext field map against the models
mrhid6
2026-09-07 14:45:36 +00:00
-
2e4bc687d4
fix: replay index specs verbatim instead of reconstructing them
mrhid6
2026-09-07 14:45:36 +00:00
-
d328d3aaca
docs: Reconcile backups and backup-and-restore pages
mrhid6
2026-09-07 14:32:31 +00:00
-
89cc524f3f
docs: Document backup and restore
mrhid6
2026-09-07 14:29:03 +00:00
-
f0f2600bed
feat: Add an optional scheduled backup CronJob to the chart
mrhid6
2026-09-07 14:17:42 +00:00
-
884fd189fb
fix: Report the real reason verify falls back to archive-only checks
mrhid6
2026-09-07 14:11:58 +00:00
-
e08cc2f928
feat: Build and publish vantagectl
mrhid6
2026-09-07 14:09:00 +00:00
-
3ce963b0cd
feat: Add the vantagectl restore and verify subcommands
mrhid6
2026-09-07 14:04:25 +00:00
-
461a79277d
feat: Add the vantagectl backup and inspect subcommands
mrhid6
2026-09-07 13:57:04 +00:00
-
d9f7fa6993
feat: Add the vantagectl module and its cobra root
mrhid6
2026-09-07 13:45:20 +00:00
-
060fa64339
feat: Add backup verify with a live decrypt probe
mrhid6
2026-09-07 11:26:34 +00:00
-
30d83c4c32
feat: Add the backup restore
mrhid6
2026-09-07 11:23:27 +00:00
-
a918b1bdc1
feat: Add the backup dump
mrhid6
2026-09-07 11:16:38 +00:00
-
66b1a041ba
feat: Add the backup archive writer and reader
mrhid6
2026-09-07 11:10:17 +00:00
-
d55ed2b19a
feat: Add the backup archive manifest
mrhid6
2026-09-07 11:08:02 +00:00
-
8135c8d781
feat: Add key fingerprinting for backup archives
mrhid6
2026-09-07 11:03:48 +00:00
-
577b060b8a
feat: Extract AES-GCM into shared/cryptobox
mrhid6
2026-09-07 10:55:54 +00:00
-
1028a2e43a
docs: Add the backup-restore implementation plan
mrhid6
2026-09-07 10:30:56 +00:00
-
eba93a812e
docs: Correct Dockerfile location and specify the verify probe
mrhid6
2026-09-07 10:10:04 +00:00
-
83b7256b60
docs: Design for control plane backup and restore
mrhid6
2026-09-07 10:07:50 +00:00
-
-
9d17f539b5
fix: Fixed card header margin
mrhid6
2026-09-07 08:36:18 +00:00
-
28f746c7e2
feat: Compact vitals
mrhid6
2026-09-07 08:26:07 +00:00
-
9d218cb19f
feat: Reduce server vitials panel height
mrhid6
2026-09-07 08:14:47 +00:00
-
f9ef9c4929
fix: Fixed mobile scroll bar
mrhid6
2026-09-07 08:02:09 +00:00
-
049e005873
feat: Updated monitor chart
mrhid6
2026-08-25 15:02:04 +00:00
-
c440b59b93
feat: Updated affected components on status page incidents
mrhid6
2026-08-25 14:56:50 +00:00
-
3e4865884c
feat: Updated plans and catalogue pages
mrhid6
2026-08-25 14:35:47 +00:00
-
270d55e6a6
feat: Updated status page title
mrhid6
2026-08-25 14:11:21 +00:00
-
7a0a1953f6
fix: Fixed api url on web
mrhid6
2026-08-25 13:53:59 +00:00
-
3e4ccc9720
feat: Added more debug logging
mrhid6
2026-08-25 13:26:23 +00:00
-
e5947489e4
fix: Fixed status page published switch
mrhid6
2026-08-25 13:26:10 +00:00
-
0a7a10aeed
feat: Added status pages to license page
mrhid6
2026-08-25 13:10:28 +00:00
-
28b813ba64
feat: sell status pages as a per-instance licence feature
mrhid6
2026-08-25 09:25:05 +00:00
-
68160dc681
docs: correct the status page URL for self-hosted, trim to what ships
mrhid6
2026-08-25 09:05:06 +00:00
-
32e7420d89
fix: wire status page and incident delete, stop promising a name we do not publish
mrhid6
2026-08-25 09:05:06 +00:00
-
7e1d67dba4
fix: file live outages as active, refuse "operational" over zero components
mrhid6
2026-08-25 09:04:54 +00:00
-
da1dc90ac5
fix: resolve the public status page's tenant from a trusted X-Forwarded-Host
mrhid6
2026-08-25 09:04:47 +00:00