ochenstarik/server-monitor-manager
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases 17 Packages Wiki Activity Actions
134 commits 8 branches 20 tags 2.6 MiB
Commit graph

47 commits

Author SHA1 Message Date
Ochenstarik
989d66e998 feat(control): add operator web console for nodes, links, and enrollment code generation 2026-08-18 02:00:41 +07:00
Ochenstarik
55a19e9eea refactor(control): remove duplicate /nodes route for enrollment code 2026-08-18 00:35:38 +07:00
Ochenstarik
93eb507f7a fix(control): implement IDisposable on NodeEnrollmentService and register event payload in SmmJsonContext 2026-08-18 00:03:37 +07:00
Ochenstarik
aa8da317cf feat(control): add operator endpoint for node enrollment code 2026-08-17 23:55:29 +07:00
Ochenstarik
e1359b1b5f fix(release): publish keyless signing certificate 
Close the producer/consumer certificate contract and advance the immutable correction release to alpha.14.
 2026-08-13 14:29:16 +07:00
ochenstarik-ui
d21c0c5d22 fix(security): Add version mismatch check, MSIX cleanup on hash failure, TraceSource diagnostics, csproj fix 
- UpdateService: manifest version must match release tag_name (prevents cross-version attacks)
- UpdateService: corrupted MSIX deleted immediately on hash mismatch
- UpdateService: TraceSource logging for all verification steps
- UpdateService: Trust anchor constants with docs/release-policy.md reference
- Bootstrap: docs/release-policy.md reference next to identity constants
- Test csproj: add UpdateService.cs Compile Include (tests won't compile without this)
 2026-08-10 20:12:18 +07:00
ochenstarik-ui
4f583c9a03 feat(security): Finalize Queue B signed delivery requirements 2026-08-10 19:58:58 +07:00
ochenstarik-ui
ef137bcf7a fix(bootstrap): verify compatible component versions during updates 
- Fixed archive hash extraction from manifest using archive basename
- Added version compatibility checks for Control/Agent/helper in update_role
- Expanded UpdateService tests to 4 unit tests
- Verified against alpha.8 manifest
 2026-08-10 18:12:22 +07:00
ochenstarik-ui
c30a1fc56e feat(cert): refine certificate renewal endpoints, remove TEST_EVIDENCE.md, and add 401 rejection unit test 2026-08-10 12:01:44 +07:00
ochenstarik-ui
25a93f7b35 feat: client certificate lifecycle management, auto-renewal, and CA rotation guide 2026-08-10 12:01:43 +07:00
dependabot[bot]
df4dfd177a
Bump SQLitePCLRaw.bundle_e_sqlite3 from 2.1.12 to 3.0.5 (#23) 
* Bump SQLitePCLRaw.bundle_e_sqlite3 from 2.1.12 to 3.0.5

---
updated-dependencies:
- dependency-name: SQLitePCLRaw.bundle_e_sqlite3
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* build: update Control.Tests lockfile for SQLite 3.0.5

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: ochenstarik-ui <ochenstarik@gmail.com>
 2026-08-10 00:54:27 +07:00
ochenstarik-ui
80b4797f2a
fix(enrollment): repair node enrollment path (#24) 
* fix(enrollment): repair node enrollment path

Make trimmed Agent configuration fail closed, harden Control URL validation, add device-code and bootstrap delivery, and make alpha.7 Control updates migration- and recovery-safe.

* fix(enrollment): allow agent token cleanup

---------

Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-08-09 22:32:53 +07:00
ochenstarik-ui
1b798e7ee8
Merge pull request #15 from ochenstarik-ui/antigravity/reproducible-builds 
feat: reproducible builds — central package versions and lock files
 2026-08-09 19:08:08 +07:00
ochenstarik-ui
ec78537656 feat: reproducible builds — central package versions and lock files 2026-08-09 18:13:34 +07:00
ochenstarik-ui
00dadf27ce
feat(control): reconcile links from factual state (#16) 
Add fact-first Link reconciliation, duplicate and orphan cleanup, generation-aware scheduling, retention, Desktop drift visibility, and strict helper contracts. Preserve exact B-3R batching and lock-safe finalization with Linux/native trimmed evidence.

Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-08-09 12:53:49 +07:00
ochenstarik-ui
b11c277ac7
feat(control): add background link reconciliation (#12) 
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-08-03 13:55:48 +07:00
ochenstarik-ui
89ef2fd9d3
feat(control): reconcile link policies (#11) 
* feat(control): reconcile link policies

* test(control): align factual helper sequence

---------

Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-08-03 10:52:18 +07:00
ochenstarik-ui
ba14d29211
fix(security): close desktop and helper debts (#10) 
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-07-31 13:22:00 +07:00
ochenstarik-ui
c320b7df9c
chore(release): bump MSIX version to 1.0.0.6 (#9) 
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-07-31 02:43:04 +07:00
ochenstarik-ui
c13501e529
fix(security): pin SSH trust and protect session keys (#8) 
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-07-31 02:36:52 +07:00
ochenstarik-ui
93e0f8ddbd
fix(security): harden enrollment and provisioning helper (#7) 
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-07-31 02:32:47 +07:00
ochenstarik-ui
2d28b8d19c
Execute confirmed timezone provisioning safely (#6) 
* Add standalone Linux bootstrap foundation

* Record bootstrap foundation progress

* Add single-code Node enrollment

* Validate bootstrap release payloads

* Add managed WireGuard mesh bootstrap

* Exercise repeated systemd installation in CI

* Expose systemd smoke failure diagnostics

* Fix bootstrap os-release variable collision

* Create policy helper directory during install

* Capture systemd smoke healthcheck errors

* Report Control listener diagnostics in CI

* Capture stalled Control process diagnostics

* Set service working directories

* Run protected CA healthcheck as root

* Add local Mesh emergency recovery

* Add multi-architecture Linux system matrix

* Add provisioning job control plane

* Stabilize Debian systemd smoke files

* Add node-scoped provisioning job channel

* Add provisioning progress state machine

* Reconcile expired provisioning jobs

* Add provisioning rollback workflow

* Add redacted provisioning event history

* Add restricted provisioning preflight helper

* Persist typed provisioning preflight facts

* Add preflight desired state drift detection

* Define strict base install schema catalog

* Add safe base install plan generation

* Add pre-confirmation base install plans

* Test base install plan API flow

* Authorize confirmed provisioning execution

* Execute confirmed timezone provisioning safely

* test: stabilize execution grant expiry boundary

---------

Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-07-30 21:40:30 +07:00
ochenstarik-ui
3851d87534
Add standalone Linux bootstrap foundation (#5) 
* Add standalone Linux bootstrap foundation

* Record bootstrap foundation progress

* Add single-code Node enrollment

* Validate bootstrap release payloads

* Add managed WireGuard mesh bootstrap

* Exercise repeated systemd installation in CI

* Expose systemd smoke failure diagnostics

* Fix bootstrap os-release variable collision

* Create policy helper directory during install

* Capture systemd smoke healthcheck errors

* Report Control listener diagnostics in CI

* Capture stalled Control process diagnostics

* Set service working directories

* Run protected CA healthcheck as root

* Add local Mesh emergency recovery

* Add multi-architecture Linux system matrix

* Add provisioning job control plane

* Stabilize Debian systemd smoke files

* Add node-scoped provisioning job channel

* Add provisioning progress state machine

* Reconcile expired provisioning jobs

* Add provisioning rollback workflow

* Add redacted provisioning event history

* Add restricted provisioning preflight helper

* Persist typed provisioning preflight facts

* Add preflight desired state drift detection

* Define strict base install schema catalog

* Add safe base install plan generation

* Add pre-confirmation base install plans

* Test base install plan API flow

* Authorize confirmed provisioning execution

---------

Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-07-30 21:18:39 +07:00
ochenstarik-ui
266900115c
Harden Link lifecycle and Control operations 
* Harden link lifecycle and control operations

* Complete three-server acceptance lifecycle

---------

Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-07-19 12:25:10 +07:00
Ochenstarik
1f02310d45 Prepare alpha 5 installer release 2026-07-17 09:42:32 +07:00
Ochenstarik
a8978c085e Add dedicated desktop management pages 2026-07-17 08:51:21 +07:00
Ochenstarik
f34f902f3b Add source-scoped automation identity 2026-07-17 08:15:35 +07:00
Ochenstarik
c252701623 Make diagnostics JSON trim safe 2026-07-17 01:04:26 +07:00
Ochenstarik
160a5c683d Export redacted desktop diagnostics 2026-07-17 00:56:29 +07:00
Ochenstarik
2fe570afd8 Test kill switch helper failures 2026-07-17 00:38:54 +07:00
Ochenstarik
7cffd04d2f Enforce disabled links after reconnect 2026-07-17 00:27:42 +07:00
Ochenstarik
d63554c629 Add certificate re-enrollment lifecycle 2026-07-16 23:59:52 +07:00
Ochenstarik
9efd8324eb Buffer offline agent metrics 2026-07-16 23:07:36 +07:00
Ochenstarik
1e5e44a6ad Move Links to SQLite control plane 2026-07-16 21:59:20 +07:00
Ochenstarik
46a1c393c7 Add persistent mTLS control layer 2026-07-16 20:35:05 +07:00
Ochenstarik
7bd7c950a6 Protect monitoring key and add SSH terminal 2026-07-16 19:57:31 +07:00
Ochenstarik
0b642cf9a3 Persist and chart short metrics history 2026-07-16 19:46:37 +07:00
Ochenstarik
594b9aaced Show health warnings and refresh automatically 2026-07-16 19:23:47 +07:00
Ochenstarik
210acb7bbc Make Windows navigation functional 2026-07-16 19:17:12 +07:00
Ochenstarik
46f00afb7d Add server profile editing and deletion 2026-07-16 19:13:44 +07:00
Ochenstarik
b19e3e8b31 Confirm applied Link state in Windows client 2026-07-16 19:02:05 +07:00
Ochenstarik
231ba69754 Add restricted Link policy controls 2026-07-16 18:43:51 +07:00
Ochenstarik
2708a0a786 Replace Hermes with generic AI agent 2026-07-15 23:42:29 +07:00
Ochenstarik
1f0eaedaf1 Add directed server mesh controls 2026-07-15 23:36:40 +07:00
Ochenstarik
d7e8a3bada Optimize icon for small sizes 2026-07-15 14:02:42 +07:00
Ochenstarik
c4dd49aedb Add application icon assets 2026-07-15 13:57:20 +07:00
Ochenstarik
e8db9f46aa Add Windows SSH monitoring MVP 2026-07-15 13:27:27 +07:00