61 Commits

Include renames

Author	SHA1	Message	Date
mrhid6	accf7493e9	feat: Updated login bg	2026-07-24 11:02:44 +01:00
mrhid6	f0547317f7	feat: Updated login screen text	2026-07-24 10:52:25 +01:00
mrhid6	a6030ef62f	feat: Updated logo	2026-07-24 10:31:11 +01:00
mrhid6	f002eab1f6	fix: Fixed compile error	2026-07-24 10:01:06 +01:00
mrhid6	e798365be2	feat: Removed comments	2026-07-24 09:56:54 +01:00
mrhid6	1a6cf03c03	feat: Removed comments	2026-07-24 09:51:30 +01:00
mrhid6	aa31cd8a10	fix: validate roles, guard last owner, scope bootstrap status ... Security review of e70b2f0. The UI gating was correctly backed by RequireRole everywhere; these are the missing validation gaps behind it. - UpdateUserRole and createOrgUser accepted any role string verbatim, so an admin could self-promote to owner, create an owner outright, or set a junk role that silently stripped a user's access. Roles are now whitelisted, only an owner may grant or remove the owner role, and an actor cannot change their own. - Neither demote nor delete guarded the last owner, so an org could reach zero owners. Both now refuse when no owner would remain, returning 409. Self-delete rejected. - CountUsers counted across all orgs, so a locked-out org could never re-bootstrap once another tenant existed, and the unauthenticated bootstrap-status endpoint reported instance-wide state. It now answers per-org on an org host, falling back to global only on the apex. - HandleMe repeats the middleware's host/org check; it sits outside the middleware so it can still return its own 401. - Post-bootstrap now sends the new owner to their org host's login page. The session cookie is deliberately scoped to the exact host, so the old redirect landed them unauthenticated. - AuthProvider renders an error state instead of mounting the shell with a null user when /auth/me fails for a reason other than 401. - api.ts unwraps {"error": ...} so these messages render as text.	2026-07-22 10:26:21 +01:00
mrhid6	e70b2f0e67	feat(web): login, first-run setup, org settings; org-aware AuthProvider ... - Route group (app) holds AuthProvider + Sidebar, so /login and /setup render without app chrome and never mount the provider. - AuthProvider drops the removed auth_enabled flag and exposes {user, org, isAdmin}. - New login page (password + SSO), first-run setup page, and org settings page with a members table and the OIDC provider form. - Settings page and the Organization nav entry are gated on role, since /api/settings now 403s for members. - GET /api/org/oidc gains client_secret_set so the UI can show whether a secret is stored; the secret itself is still never serialized, and an empty submitted value still means "keep the stored one". - Fix logout: the sidebar linked to /auth/logout with a GET, but the route is POST-only, so logout was 404ing.	2026-07-22 10:17:12 +01:00
mrhid6	0464c540b2	feat: edit monitors + notification channels; HTTP monitor insecure-TLS option	2026-07-21 14:55:41 +01:00
mrhid6	f28ab1a741	feat(web): redesign settings page, drop legacy webhook/email alerting UI	2026-07-21 14:40:36 +01:00
mrhid6	df6f8b6f62	feat(web): notification channel settings UI	2026-07-21 14:24:38 +01:00
mrhid6	57151826ae	feat(web): monitors list/detail/form UI	2026-07-21 14:16:08 +01:00
mrhid6	ca2c05db14	feat(web): inventory panel on server detail	2026-07-21 14:08:36 +01:00
mrhid6	ec201a23a2	fix: Fixed draft workflow status	2026-07-21 12:09:19 +01:00
mrhid6	d9a33b0672	fix(web): stop autosave loop by ignoring volatile server-echo fields	2026-07-21 12:01:57 +01:00
mrhid6	2b7ef98dff	fix(web): move autosave hooks above early return (React #310)	2026-07-21 11:55:20 +01:00
mrhid6	3a0116248e	fix(web): guard autosave against in-flight lost-update race	2026-07-21 11:50:53 +01:00
mrhid6	e4c3fc24d3	feat(web): standalone Steps management page	2026-07-21 11:43:42 +01:00
mrhid6	e46d0edbf2	feat(web): replace builder step sidebar with Add-step modal	2026-07-21 11:41:37 +01:00
mrhid6	d0442291f5	feat(web): workflow builder autosave with last-saved status	2026-07-21 11:27:55 +01:00
mrhid6	7c4a676742	fix: inline step secrets + inline input/output display + import body limit	2026-07-21 10:40:45 +01:00
mrhid6	fbda26a188	feat(web): ad-hoc inline steps + import-to-inline in workflow editor	2026-07-21 10:34:51 +01:00
mrhid6	90ce7af769	feat(web): step export/import, sync defaults, auto outputs, default badge	2026-07-21 10:31:28 +01:00
mrhid6	b543cd1b3d	feat(web): api client for step import/export/inline/defaults	2026-07-21 10:28:41 +01:00
mrhid6	bea545e873	feat: More verbose logging on workflow logs	2026-07-20 17:35:58 +01:00
mrhid6	82d7dde5f8	fix: Fixed style on workflow run	2026-07-20 16:44:53 +01:00
mrhid6	397016ad68	feat: Updated workflow runs page	2026-07-20 16:00:41 +01:00
mrhid6	39348c9491	feat(web): live SSE log tail and log retention setting	2026-07-20 15:18:36 +01:00
mrhid6	dcc901b0d2	feat(web): workflow runs list page and navigation links	2026-07-20 14:52:13 +01:00
mrhid6	99bf093f00	feat(web): rebuild workflow builder — mockup styling, drag-and-drop, inputs inspector	2026-07-20 14:48:29 +01:00
mrhid6	b0a2de8ca1	fix: Fixed workflow style topbar	2026-07-20 13:55:17 +01:00
mrhid6	e9ac7be8c3	feat: updates to workflow page	2026-07-20 13:35:35 +01:00
mrhid6	e35e8fc839	feat(web): workflow run detail page with live logs	2026-07-20 11:53:30 +01:00
mrhid6	2cd9bc1c89	feat(web): three-pane workflow builder	2026-07-20 11:50:00 +01:00
mrhid6	39980581b1	feat(web): workflows list page and sidebar link	2026-07-20 11:46:44 +01:00
mrhid6	c3c58581cc	fix: Fixed scale and mouse handler	2026-07-20 09:49:20 +01:00
mrhid6	963fa9c877	fix: Fixed mouse position on console	2026-07-20 09:36:57 +01:00
mrhid6	a02747d02e	fix: Fixed console resolution	2026-07-20 09:30:44 +01:00
mrhid6	d31486ae1b	fix: Fixed agent windows version	2026-07-17 15:38:00 +01:00
mrhid6	2b4611f7ac	feat: added windows install script to ui	2026-07-17 14:40:00 +01:00
mrhid6	fdbd591c73	fix: Fixed console height	2026-07-17 13:49:47 +01:00
mrhid6	1989d6cd98	fix: Fixed console width	2026-07-17 13:46:12 +01:00
mrhid6	763eafa4f8	fix: Fixed guac connection	2026-07-17 13:40:54 +01:00
mrhid6	a9d602d021	feat: harden console sessions + complete protocol support ... - single-use session tokens (atomic ConsumeSessionToken) + user-bound tunnel (actor must match session opener) - wire VNC end-to-end (stash/consume password, connect+tunnel, frontend password field) - passphrase-protected SSH keys: passphrase_enc on Key model, capture on upload, decrypt + pass to guacd	2026-07-17 12:19:07 +01:00
mrhid6	1ad5b5d6db	fix: send ssh username to guacd (default root) for console SSH	2026-07-17 11:54:33 +01:00
mrhid6	0962745bbc	feat: web console page with protocol + key selection	2026-07-17 11:45:10 +01:00
domrichardson	73a06227ba	fix: Fixed endpoint	2026-07-03 11:56:49 +01:00
domrichardson	7c30d26878	feat: Updated secret group yaml view	2026-07-03 11:33:20 +01:00
domrichardson	19596ff2a3	feat: Secret management	2026-07-03 10:37:43 +01:00
domrichardson	c3c16083f7	feat: Audit and settings	2026-06-25 11:30:26 +01:00