ochenstarik-ui
|
79a5e8c071
|
feat: Manifest v2 and keyless signing
|
2026-08-10 12:06:53 +07:00 |
|
ochenstarik-ui
|
80b4797f2a
|
fix(enrollment): repair node enrollment path (#24)
* fix(enrollment): repair node enrollment path
Make trimmed Agent configuration fail closed, harden Control URL validation, add device-code and bootstrap delivery, and make alpha.7 Control updates migration- and recovery-safe.
* fix(enrollment): allow agent token cleanup
---------
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
|
2026-08-09 22:32:53 +07:00 |
|
ochenstarik-ui
|
d645812d29
|
test(helper): cover missing node row (#17)
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
|
2026-08-09 17:56:13 +07:00 |
|
ochenstarik-ui
|
00dadf27ce
|
feat(control): reconcile links from factual state (#16)
Add fact-first Link reconciliation, duplicate and orphan cleanup, generation-aware scheduling, retention, Desktop drift visibility, and strict helper contracts. Preserve exact B-3R batching and lock-safe finalization with Linux/native trimmed evidence.
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
|
2026-08-09 12:53:49 +07:00 |
|
ochenstarik-ui
|
b11c277ac7
|
feat(control): add background link reconciliation (#12)
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
|
2026-08-03 13:55:48 +07:00 |
|
ochenstarik-ui
|
89ef2fd9d3
|
feat(control): reconcile link policies (#11)
* feat(control): reconcile link policies
* test(control): align factual helper sequence
---------
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
|
2026-08-03 10:52:18 +07:00 |
|
ochenstarik-ui
|
ba14d29211
|
fix(security): close desktop and helper debts (#10)
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
|
2026-07-31 13:22:00 +07:00 |
|
ochenstarik-ui
|
93e0f8ddbd
|
fix(security): harden enrollment and provisioning helper (#7)
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
|
2026-07-31 02:32:47 +07:00 |
|
ochenstarik-ui
|
2d28b8d19c
|
Execute confirmed timezone provisioning safely (#6)
* Add standalone Linux bootstrap foundation
* Record bootstrap foundation progress
* Add single-code Node enrollment
* Validate bootstrap release payloads
* Add managed WireGuard mesh bootstrap
* Exercise repeated systemd installation in CI
* Expose systemd smoke failure diagnostics
* Fix bootstrap os-release variable collision
* Create policy helper directory during install
* Capture systemd smoke healthcheck errors
* Report Control listener diagnostics in CI
* Capture stalled Control process diagnostics
* Set service working directories
* Run protected CA healthcheck as root
* Add local Mesh emergency recovery
* Add multi-architecture Linux system matrix
* Add provisioning job control plane
* Stabilize Debian systemd smoke files
* Add node-scoped provisioning job channel
* Add provisioning progress state machine
* Reconcile expired provisioning jobs
* Add provisioning rollback workflow
* Add redacted provisioning event history
* Add restricted provisioning preflight helper
* Persist typed provisioning preflight facts
* Add preflight desired state drift detection
* Define strict base install schema catalog
* Add safe base install plan generation
* Add pre-confirmation base install plans
* Test base install plan API flow
* Authorize confirmed provisioning execution
* Execute confirmed timezone provisioning safely
* test: stabilize execution grant expiry boundary
---------
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
|
2026-07-30 21:40:30 +07:00 |
|
ochenstarik-ui
|
3851d87534
|
Add standalone Linux bootstrap foundation (#5)
* Add standalone Linux bootstrap foundation
* Record bootstrap foundation progress
* Add single-code Node enrollment
* Validate bootstrap release payloads
* Add managed WireGuard mesh bootstrap
* Exercise repeated systemd installation in CI
* Expose systemd smoke failure diagnostics
* Fix bootstrap os-release variable collision
* Create policy helper directory during install
* Capture systemd smoke healthcheck errors
* Report Control listener diagnostics in CI
* Capture stalled Control process diagnostics
* Set service working directories
* Run protected CA healthcheck as root
* Add local Mesh emergency recovery
* Add multi-architecture Linux system matrix
* Add provisioning job control plane
* Stabilize Debian systemd smoke files
* Add node-scoped provisioning job channel
* Add provisioning progress state machine
* Reconcile expired provisioning jobs
* Add provisioning rollback workflow
* Add redacted provisioning event history
* Add restricted provisioning preflight helper
* Persist typed provisioning preflight facts
* Add preflight desired state drift detection
* Define strict base install schema catalog
* Add safe base install plan generation
* Add pre-confirmation base install plans
* Test base install plan API flow
* Authorize confirmed provisioning execution
---------
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
|
2026-07-30 21:18:39 +07:00 |
|