Juan Denis ff3c928917 feat(test): passive cgroup-v2 runtime baselines for full installs ...

Full VM installs and Test Sandbox full mode now record a short
post-install runtime observation (60s settle + 120s sampling) with an
explicit measured/unavailable/failed/interrupted status that never
rewrites install success. Adds the standalone scripts/measure-runtime.py
sampler, the measure-installed-runtime.py harness wrapper, E2E report
rendering, results-API summaries, CI coverage and METRICS.md accounting
boundaries.

2026-09-19 04:52:24 -04:00

..

connection_providers

feat(connections): add provider SDK contract

2026-08-28 00:48:36 -04:00

dns

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

site_importers

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

__init__.py

refactor(plugins): add WordPress bridge + flagship/multi-blueprint plumbing

2026-07-01 23:45:22 -04:00

advanced_ssl_service.py

fix(security): harden nginx write path and certbot issuance trust bugs

2026-08-27 23:54:01 -04:00

agent_fleet_service.py

refactor(remote): close the dispatch_agent_command seam

2026-08-18 23:31:46 -04:00

agent_plugin_service.py

fix(plugins): make plugin/template features fail honestly, not silently (audit H2)

2026-06-12 18:35:35 -04:00

agent_registry.py

Make fleet monitoring actually monitor

2026-09-06 21:04:17 -04:00

ai_attachment_registry.py

fix(ai): raise a typed error for a malformed attachment manifest

2026-08-21 20:14:34 -04:00

ai_connections.py

feat(ai): connect task routing, guarded fallback, and scoped run accounting

2026-09-08 04:09:27 -04:00

ai_management.py

feat(ai): connect task routing, guarded fallback, and scoped run accounting

2026-09-08 04:09:27 -04:00

ai_runtime.py

feat(ai): connect task routing, guarded fallback, and scoped run accounting

2026-09-08 04:09:27 -04:00

ai_service.py

feat(ai): connect task routing, guarded fallback, and scoped run accounting

2026-09-08 04:09:27 -04:00

ai_tool_registry.py

fix(ai): enforce resource access and bounded protected chat

2026-09-05 04:29:45 -04:00

ai_tools_builtin.py

fix(ai): enforce resource access and bounded protected chat

2026-09-05 04:29:45 -04:00

ai_usage.py

fix(ai): normalize usage quota scope IDs [skip version]

2026-09-08 09:34:35 -04:00

anomaly_detection_service.py

Implement security features: key rotation, IP allowlist, anomaly detection

2026-01-22 18:11:22 -05:00

api_analytics_service.py

Add API keys, analytics, webhooks, and middleware

2026-03-04 01:53:46 -05:00

api_key_service.py

Add API keys, analytics, webhooks, and middleware

2026-03-04 01:53:46 -05:00

app_port_service.py

feat(manifest): appliance-tier typed L4 ports + plan-time blockers rail (plan 35 ph1)

2026-07-09 02:57:23 -04:00

application_lifecycle_service.py

refactor: share backend lifecycle and fleet metrics operations

2026-09-05 05:06:41 -04:00

application_restore.py

fix: purge reclaims every ServerKit-managed app directory, not just uploads

2026-08-31 22:45:45 -04:00

audit_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

auth_throttle_service.py

feat(auth): per-IP login brute-force throttle

2026-07-18 00:59:19 -04:00

backup_alert_service.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

backup_cost_service.py

feat(backups): backup protection backend — policy, scheduler, smart backups, API

2026-06-22 19:53:23 -04:00

backup_drill_service.py

fix(backups): a skipped restore drill no longer reads as proof

2026-08-17 21:03:06 -04:00

backup_kind_registry.py

security: hook seam lifecycle + registrant binding

2026-08-05 13:36:33 -04:00

backup_offsite_service.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

backup_policy_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

backup_schedule_service.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

backup_service.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

backup_verify_service.py

fix(recovery): rebuild setup-health/reconcile + backup drill/verify services

2026-07-08 01:41:31 -04:00

bandwidth_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

bootstrap_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

bounce_service.py

feat(notifications): restore email-bounce webhook slice (plan 42 ph3)

2026-07-09 04:55:53 -04:00

build_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

buildpack_service.py

fix(buildpack): stop browser-driver postinstalls from filling the build disk

2026-09-01 00:05:21 -04:00

cache_service.py

feat(cache): ttl_cached decorator on CacheService; two TTL dicts migrate (plan 77 F2)

2026-08-19 05:20:59 -04:00

capacity_service.py

fix(capacity): an attached volume rescues a disk-shortfall verdict

2026-08-28 21:50:19 -04:00

cf_ops_change_service.py

refactor: share backend lifecycle and fleet metrics operations

2026-09-05 05:06:41 -04:00

chat_webhook_service.py

fix(notifications): redact transport errors before they reach the log

2026-08-13 14:36:24 -04:00

cli_api_client.py

harden: broaden insecure-secret detection, bind API to loopback, fix break-glass sub

2026-07-15 12:07:14 -04:00

cloudflare_ops_bridge.py

cutover(cloudflare-ops): the last in-place flagship leaves the tree (plan 52 Phase 2)

2026-08-29 14:51:17 -04:00

compose_env_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

configuration_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

connect_client.py

feat(connect): apply the managed presentation profile (plan 25)

2026-09-13 03:50:02 -04:00

connect_commands.py

feat(connect): apply the managed presentation profile (plan 25)

2026-09-13 03:50:02 -04:00

connect_format.py

refactor: share backend lifecycle and fleet metrics operations

2026-09-05 05:06:41 -04:00

connect_inventory.py

fix(connect): enforce consent and recover bounded log delivery [skip version]

2026-09-10 22:05:21 -04:00

connect_keys.py

feat(connect): open commands sealed to this server's own key

2026-09-02 17:00:00 -04:00

connect_logs.py

fix(connect): enforce consent and recover bounded log delivery [skip version]

2026-09-10 22:05:21 -04:00

connect_managed_profile.py

feat(connect): apply the managed presentation profile (plan 25)

2026-09-13 03:50:02 -04:00

connect_metrics.py

fix(connect): surface silent metrics collection failures

2026-09-11 19:08:37 -04:00

connect_policy.py

refactor: share backend lifecycle and fleet metrics operations

2026-09-05 05:06:41 -04:00

connect_storage.py

refactor: share backend lifecycle and fleet metrics operations

2026-09-05 05:06:41 -04:00

connect_updates.py

feat(connect): keep the connect client current from the signed feed

2026-09-02 12:03:11 -04:00

connection_provider_sdk.py

feat(connections): add provider SDK contract

2026-08-28 00:48:36 -04:00

connection_registry.py

feat(connections): add provider SDK contract

2026-08-28 00:48:36 -04:00

connection_string.py

Introduce sk1 connection string format and GUI plugin

2026-05-05 14:03:31 -04:00

container_registry_service.py

feat(connections): add provider SDK contract

2026-08-28 00:48:36 -04:00

container_scale_service.py

fix(scale): roll back on any set_policy commit failure

2026-08-29 04:06:07 -04:00

container_sleep_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

container_status_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

contribution_service.py

feat: add declarative walkthrough contribution contract

2026-08-31 23:14:29 -04:00

cron_run_service.py

fix(recovery): restore models + migration chain 056-074, cron_run_service, rbac authz

2026-07-08 00:17:55 -04:00

cron_service.py

fix(cron): match job lines exactly

2026-08-27 20:30:17 -04:00

dashboard_service.py

feat(dashboard): a real editor, and widgets that say what they are

2026-07-25 21:14:50 -04:00

database_engine_extension_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

database_engine_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

database_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

db_admin_sso_service.py

refactor(docker): one runner behind the private wrappers

2026-08-18 11:30:02 -04:00

db_config_tuner_service.py

refactor(db-tuner): typed errors close the status-sniffing census at 0

2026-08-19 00:03:50 -04:00

db_exec.py

refactor(db): one SQL-exec dispatcher, and adopt the doors already built

2026-08-18 11:26:40 -04:00

db_process_service.py

refactor(db): one SQL-exec dispatcher, and adopt the doors already built

2026-08-18 11:26:40 -04:00

db_sync_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

ddns_service.py

refactor(ddns): typed errors replace the token-prose sniff

2026-08-18 23:55:17 -04:00

demo_deploy_service.py

fix(demo-deploy): guard repo params; time-box the distro integration job

2026-09-05 00:25:18 -04:00

deploy_kind_registry.py

feat(plugins): let plugins own deployment-shaped work

2026-07-25 12:46:59 -04:00

deploy_preflight_service.py

feat(deploy): prove a deploy can work before stopping the live one

2026-08-13 17:33:35 -04:00

deployment_job_service.py

fix(apps): name-clash errors point at the Recycle Bin for tombstones

2026-08-30 03:20:34 -04:00

deployment_runner.py

refactor(deploy): deployment_runner rides RunLifecycleMixin transitions (plan 77 D2)

2026-08-19 04:55:13 -04:00

deployment_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

discovery_service.py

Fleet monitor + security and agent hardening

2026-03-23 01:58:28 -04:00

disk_reclaim_service.py

feat(disk): reclaim space from the panel

2026-08-21 23:05:40 -04:00

dns_change_service.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

dns_cutover_service.py

fix(dns-cutover): restore snapshot() staging + provider-named 501 (plan 42 D7/ph5)

2026-07-09 04:50:16 -04:00

dns_ownership_service.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

dns_provider_service.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

dns_zone_service.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

docker_service.py

refactor(docker): route docker_service through the shared doors

2026-08-18 13:45:25 -04:00

doctor_check_registry.py

feat(plugins): let extensions contribute doctor checks

2026-07-25 13:56:09 -04:00

doctor_service.py

feat(operations): adopt core run workflows

2026-08-21 10:40:42 -04:00

domain_attach_service.py

feat(ssl): remember one Let's Encrypt contact instead of asking every time

2026-08-13 16:22:33 -04:00

domain_restore.py

fix(recycle-bin): say when a restored domain comes back without HTTPS

2026-08-12 13:08:49 -04:00

drift_service.py

fix(waf): keep the include through drift detection and repair

2026-08-27 04:51:38 -04:00

email_relay_service.py

refactor(unify): §6 Phase C6b — Postfix relay backed by EmailProviderConnection

2026-06-24 14:36:08 -04:00

env_reference_service.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

env_service.py

fix(env-vars): make .env export/import lossless and injection-safe

2026-08-27 04:05:05 -04:00

environment_docker_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

environment_domain_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

environment_health_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

environment_pipeline_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

error_log_service.py

feat(errors): record exceptions via service + admin API + client ingestion

2026-08-16 18:35:14 -04:00

event_service.py

refactor(webhooks): move subscription use cases behind service boundary

2026-08-18 02:56:33 -04:00

event_subscription_service.py

refactor(webhooks): move subscription use cases behind service boundary

2026-08-18 02:56:33 -04:00

extension_lifecycle.py

security: hook seam lifecycle + registrant binding

2026-08-05 13:36:33 -04:00

extension_migration.py

cutover(git): serverkit-git leaves the tree (plan 52 Phase 6)

2026-08-29 14:53:27 -04:00

fail2ban_jail_service.py

refactor(security): jail service owns fail2ban status probing (plan 47 Ph3c inversion)

2026-08-29 13:36:08 -04:00

file_integrity_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

file_service.py

refactor(files): file manager onto the typed-error contract (C reference)

2026-08-18 23:49:09 -04:00

firewall_service.py

fix(firewall): share one ufw parser between the listing and the guard

2026-08-27 04:08:12 -04:00

fleet_doctor_service.py

refactor(remote): close the dispatch_agent_command seam

2026-08-18 23:31:46 -04:00

fleet_monitor_service.py

Make fleet monitoring actually monitor

2026-09-06 21:04:17 -04:00

fleet_repair_service.py

refactor(remote): close the dispatch_agent_command seam

2026-08-18 23:31:46 -04:00

fleet_sweep.py

feat(agent): V2 capability pack — survey/doctor/fleet sweep+repair (plan 28)

2026-07-07 20:29:24 -04:00

git_deploy_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

git_service.py

feat(git)!: split the Gitea self-host half into the serverkit-git extension (plan 52 Phase 6)

2026-08-29 14:30:07 -04:00

host_inventory_service.py

refactor(utils): one byte formatter for prose, not three copies of it

2026-08-17 19:59:16 -04:00

host_snapshot_service.py

feat(monitoring): detect host spec changes and inventory filesystems

2026-08-17 09:31:18 -04:00

htaccess_converter.py

feat(hosting): .htaccess to nginx converter

2026-07-03 15:22:05 -04:00

image_update_service.py

refactor(image-updates): typed errors replace the not-found prose sniff

2026-08-18 23:52:40 -04:00

install_profile_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

invitation_service.py

test(api): ratchet controller boundary debt

2026-08-18 03:11:37 -04:00

linked_panel_agent.py

fix(linked-panel): accept compose file path in project_path from remote runner

2026-07-22 00:48:13 -04:00

linked_panel_service.py

feat(servers): ServerKit-to-ServerKit peering — embedded agent mode

2026-07-22 00:35:33 -04:00

log_service.py

fix(logs): keep panel-internal roots out of the log viewer

2026-09-18 01:05:13 -04:00

login_link_service.py

feat(auth): one-time login links and demo mode

2026-07-03 14:23:50 -04:00

managed_database_service.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

managed_db_user_service.py

refactor(crypto): EncryptedSecret adoption sweep + service-level crypto ratchet (plan 77 C1)

2026-08-19 01:49:42 -04:00

manifest_apply_service.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

manifest_persistence_service.py

feat(manifest): persist manifest + seed env + health-check gate (Phase 1)

2026-07-04 01:16:29 -04:00

manifest_preview_service.py

feat(manifest): fleet targeting, manifest-powered previews, CLI verbs (Phase 5 backend)

2026-07-04 01:46:34 -04:00

manifest_scaffold_service.py

feat(manifest): dockerfilePath — build services from a repo Dockerfile

2026-07-10 01:13:14 -04:00

manifest_spec_service.py

feat: add resumable recipe execution foundation

2026-08-21 21:47:24 -04:00

manifest_sync_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

member_action_service.py

feat(security): authz hardening round 2 (plan 29)

2026-07-07 20:29:24 -04:00

metadata_guard_service.py

feat(security): cloud-metadata egress guard for app containers

2026-07-03 14:23:11 -04:00

metrics_history_service.py

fix(metrics): unknown is not zero, and zero is not unknown

2026-08-17 22:40:12 -04:00

migration_service.py

fix(auth): backfill users.auth_version so upgrades keep logins working

2026-09-05 16:27:35 -04:00

module_service.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

monitor_service.py

feat(api): centralize typed errors and request correlation

2026-08-18 02:42:25 -04:00

monitoring_service.py

fix(monitoring): unknown load is not zero load; config via ConfigStore

2026-08-17 22:40:23 -04:00

nginx_advanced_service.py

fix(security): harden nginx write path and certbot issuance trust bugs

2026-08-27 23:54:01 -04:00

nginx_service.py

fix(security): harden nginx write path and certbot issuance trust bugs

2026-08-27 23:54:01 -04:00

nonce_service.py

Implement security features: key rotation, IP allowlist, anomaly detection

2026-01-22 18:11:22 -05:00

notification_service.py

fix(notifications): escape interpolated values in Telegram alerts

2026-08-31 00:07:47 -04:00

openapi_service.py

feat(api): add typed endpoint contracts and envelopes

2026-08-18 02:47:57 -04:00

pairing_service.py

refactor(crypto): EncryptedSecret adoption sweep + service-level crypto ratchet (plan 77 C1)

2026-08-19 01:49:42 -04:00

panel_update_service.py

feat(panel): one-click self-update from the About tab

2026-08-31 08:09:52 -04:00

passkey_service.py

fix(auth): enforce MFA, scoped keys, and revocable sessions

2026-09-05 04:29:16 -04:00

permission_service.py

Add invitations, email models, admin APIs

2026-03-04 02:34:49 -05:00

php_service.py

fix(php): guard pool paths and stop fabricating unreadable pool configs

2026-08-27 04:56:12 -04:00

plugin_service.py

fix(plugins): hot-load extension blueprints on a live app (#144)

2026-09-18 01:28:59 -04:00

postfix_service.py

fix(postfix): match virtual-map entries by address token, not substring

2026-08-27 04:10:14 -04:00

preview_service.py

refactor(db): one SQL-exec dispatcher, and adopt the doors already built

2026-08-18 11:26:40 -04:00

private_url_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

process_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

project_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

proxy_stack_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

python_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

recipe_execution_service.py

fix(recipes): restore CI boundary contracts

2026-08-22 14:49:11 -04:00

recipe_registry_service.py

feat(recipes): serverkit-recipes registry catalog with one-call installs

2026-08-22 14:20:55 -04:00

recycle_bin_service.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

registrar_service.py

refactor(crypto): EncryptedSecret adoption sweep + service-level crypto ratchet (plan 77 C1)

2026-08-19 01:49:42 -04:00

registry_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

remote_cloudflared_service.py

refactor(agents): centralize remote command dispatch

2026-08-18 03:05:32 -04:00

remote_command_dispatcher.py

refactor(agents): centralize remote command dispatch

2026-08-18 03:05:32 -04:00

remote_cron_service.py

refactor(agents): centralize remote command dispatch

2026-08-18 03:05:32 -04:00

remote_docker_service.py

refactor(agents): centralize remote command dispatch

2026-08-18 03:05:32 -04:00

remote_file_service.py

refactor(agents): centralize remote command dispatch

2026-08-18 03:05:32 -04:00

remote_packages_service.py

refactor(agents): centralize remote command dispatch

2026-08-18 03:05:32 -04:00

remote_runtimes_service.py

refactor(agents): centralize remote command dispatch

2026-08-18 03:05:32 -04:00

remote_systemd_service.py

refactor(agents): centralize remote command dispatch

2026-08-18 03:05:32 -04:00

repository_application_service.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

repository_manifest_service.py

feat(templates): deploy templates as a backend repo-kind catalog entry

2026-07-10 02:38:46 -04:00

resource_grant_service.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

resource_tier_service.py

refactor: share backend lifecycle and fleet metrics operations

2026-09-05 05:06:41 -04:00

restore_point_adapter_cron.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

restore_point_adapter_dns.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

restore_point_adapter_env.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

restore_point_adapter_firewall.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

restore_point_adapter_nginx.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

restore_point_adapters.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

restore_point_service.py

feat(restore-points): add authorized lifecycle API

2026-08-23 17:00:50 -04:00

run_access.py

fix(sockets): authorize subscriptions and revalidate event delivery

2026-09-05 04:29:44 -04:00

run_log_service.py

fix(ratchets): reconcile plan-77 additions with the standing gates

2026-08-19 06:04:59 -04:00

saved_view_service.py

refactor(views): saved views onto the typed-error contract

2026-08-18 23:51:34 -04:00

search_provider_registry.py

feat(search): add resource picker contract

2026-08-21 09:20:54 -04:00

search_service.py

feat(search): add resource picker contract

2026-08-21 09:20:54 -04:00

secret_vault_service.py

fix(crypto): keep recipe handoff secrets behind the vault one door

2026-08-21 23:05:48 -04:00

security_feed_service.py

feat(security): daily GHSA feed check with admin notifications

2026-08-02 18:35:25 -04:00

security_policy_service.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

security_service.py

feat(security)!: extract the install-gated security suite to extensions (plan 47 Ph3b-5 / plan 55 Ph3)

2026-08-29 13:53:04 -04:00

server_metrics_service.py

Make fleet monitoring actually monitor

2026-09-06 21:04:17 -04:00

server_onboarding_service.py

feat: Phase 4 polish & fleet — onboarding completion, fleet proxy, shared-resource depth, docs

2026-06-23 20:04:04 -04:00

server_template_service.py

fix(plugins): make plugin/template features fail honestly, not silently (audit H2)

2026-06-12 18:35:35 -04:00

server_timeline_service.py

feat(servers): add merged restore timeline

2026-08-23 17:16:29 -04:00

settings_service.py

feat(restore-points): add generic checkpoint core

2026-08-23 16:07:09 -04:00

setup_health_service.py

refactor(security): jail service owns fail2ban status probing (plan 47 Ph3c inversion)

2026-08-29 13:36:08 -04:00

setup_reconcile_service.py

fix(domains): stop soft-delete tombstones leaking into every read path

2026-08-12 09:27:05 -04:00

shared_resource_service.py

refactor: share backend lifecycle and fleet metrics operations

2026-09-05 05:06:41 -04:00

signing_service.py

feat(extensions): ed25519 signing service + publisher key registry

2026-08-04 23:34:02 -04:00

site_base_domain_service.py

feat(sites): base-domain registry so sites can publish under multiple domains

2026-07-01 00:07:00 -04:00

site_domain_service.py

feat(wordpress): shared-state contract and login rate limiting at the edge

2026-08-27 22:35:54 -04:00

site_import_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

sites_https_service.py

feat(sites): per-base wildcard HTTPS + base-domain registry API

2026-07-01 00:11:18 -04:00

source_connection_service.py

fix(bitbucket): send redirect_uri on the authorize hop

2026-09-07 06:12:48 -04:00

speed_test_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

ssl_service.py

refactor(nginx): one privileged-write door, one vhost lifecycle

2026-08-18 11:26:23 -04:00

sso_service.py

refactor(crypto): fold the parallel Fernet stacks into utils/crypto (plan 77 C2)

2026-08-19 05:37:32 -04:00

storage_provider_service.py

refactor(backend): extract reusable format_bytes, admin_required, and validate_app_name

2026-06-21 02:11:47 -04:00

support_bundle_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

survey_service.py

refactor(remote): close the dispatch_agent_command seam

2026-08-18 23:31:46 -04:00

system_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

telemetry_service.py

refactor(security): one sensitive-keyword union for all four redaction sinks (plan 77 F3)

2026-08-19 02:10:22 -04:00

template_service.py

fix(templates): the deploy drawer's domain promise now sticks

2026-08-28 21:59:26 -04:00

terminal_service.py

refactor(remote): close the dispatch_agent_command seam

2026-08-18 23:31:46 -04:00

test_sandbox_service.py

feat(test): passive cgroup-v2 runtime baselines for full installs

2026-09-19 04:52:24 -04:00

theme_registry_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

theme_service.py

feat(themes): backend model, API, and registry pipeline (plan 60 Phase 2-3)

2026-07-23 00:24:00 -04:00

theme_tokens.py

feat(themes): hardening — preview validation, registry caching, token wiring (plan 61)

2026-07-23 09:25:01 -04:00

totp_service.py

Add two-factor authentication (2FA) support

2026-01-18 01:03:56 -05:00

unit_compose_service.py

feat(manifest): multi-container units (plan 35 ph3)

2026-07-09 03:13:54 -04:00

unit_of_work.py

refactor(webhooks): move subscription use cases behind service boundary

2026-08-18 02:56:33 -04:00

upload_service.py

refactor(services): centralize slug generation on app.utils.slug

2026-06-20 22:43:38 -04:00

uptime_service.py

refactor(db): one SQL-exec dispatcher, and adopt the doors already built

2026-08-18 11:26:40 -04:00

volume_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

waf_service.py

feat(security)!: extract the install-gated security suite to extensions (plan 47 Ph3b-5 / plan 55 Ph3)

2026-08-29 13:53:04 -04:00

walkthrough_definition_service.py

fix(walkthroughs): accept the step-level shorthand in extension manifests

2026-09-01 00:46:35 -04:00

walkthrough_service.py

feat: add guided operator walkthroughs

2026-08-21 22:04:09 -04:00

webhook_gateway_service.py

fix(security): a webhook with no signature is as unauthenticated as a wrong one

2026-08-19 21:44:28 -04:00

webhook_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

wordpress_bridge.py

security: hook seam lifecycle + registrant binding

2026-08-05 13:36:33 -04:00

workspace_service.py

fix(models): close all 26 dangling-on-delete FKs + orphan sweep migration

2026-08-31 20:25:29 -04:00