Juan DenisandClaude Opus 4.8 98d05eecdf fix(recovery): gpu core-slim move + cross-service doctor/schedule wiring ...

Cluster G of plan 38 (plan 32) + integration glue.

- gpu: complete the core-slim move — remove core app.api.gpu +
  app.services.gpu_service (+ its blueprint registration), rebuild the probe in
  the serverkit-gpu builtin extension (nvidia-smi parser, Linux-guarded)
- __init__: register dns_cutover + setup_health blueprints
- doctor_service: add fleet DNS-vs-IP checks, backup-proof checks
  (backup_drill_stale/backup_unverified), and the setup-health section into run()
- builtin_handlers: seed the host-doctor sweep + weekly setup-health nag
- test_jobs: schedule count 15 -> 17 for the two restored schedules

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-08 01:41:54 -04:00

..

fixtures/runtime-extension

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

conftest.py

feat(marketplace): default the registry to the public serverkit-extensions index

2026-07-03 03:57:23 -04:00

test_agent_features_honest.py

fix(plugins): make plugin/template features fail honestly, not silently (audit H2)

2026-06-12 18:35:35 -04:00

test_agent_poll_e2e.py

test(agent): end-to-end test for the panel<->agent command loop

2026-06-12 17:31:26 -04:00

test_agent_poll_ratelimit.py

fix(agent): rate-limit the poll /connect auth path

2026-05-31 14:46:47 -04:00

test_agent_registry_security.py

fix(agent): fail-closed agent registration + surface stuck-command errors

2026-05-31 16:08:13 -04:00

test_agent_update_authz.py

fix(servers): require developer role for agent self-update (audit H3)

2026-06-12 17:33:29 -04:00

test_ai_assistant.py

feat(ai): add core AI assistant primitive powered by Prompture

2026-06-01 02:39:05 -04:00

test_api_authz_hardening.py

feat(security): authz hardening round 2 (plan 29)

2026-07-07 20:29:24 -04:00

test_api_scopes.py

feat: Phase 1 foundation — status aggregator, API scopes, onboarding, template magic vars

2026-06-23 18:23:47 -04:00

test_app_resource_limits.py

feat(apps): first-class per-app CPU/memory limits

2026-07-03 14:23:39 -04:00

test_app_volumes.py

docs: adopt numbered filenames for docs/plans and update references

2026-07-01 20:49:41 -04:00

test_app_wordpress_surface.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

test_attach_domain.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

test_audit_log.py

Add audit fallback, builtin extensions, and ports

2026-05-03 15:57:02 -04:00

test_authz_structural_sweep.py

feat(security): authz hardening round 2 (plan 29)

2026-07-07 20:29:24 -04:00

test_available_servers.py

feat(servers): store the agent's self-reported footprint dirs

2026-07-02 22:36:34 -04:00

test_backup_alerts.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

test_backup_crypto.py

feat(backups): client-side encryption (opt-in, reuses the Fernet key)

2026-06-19 13:22:43 -04:00

test_backup_db_files_executors.py

refactor(unify): §8 Phase B2 — database + files executors in policy service

2026-06-24 14:19:32 -04:00

test_backup_drill_cadence.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

test_backup_drill.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

test_backup_generic_api.py

refactor(unify): §8 Phase B5 — generic backup-policy CRUD for every target

2026-06-24 14:27:08 -04:00

test_backup_global_api.py

refactor(unify): §8 Phase B3 — global backup policy/run listing API

2026-06-24 14:20:43 -04:00

test_backup_protection.py

feat(backups): backup protection backend — policy, scheduler, smart backups, API

2026-06-22 19:53:23 -04:00

test_backup_target_types.py

refactor(unify): §8 Phase B1 — generalize BackupPolicy to all target types

2026-06-24 14:16:45 -04:00

test_backup_verify.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

test_bandwidth.py

feat(hosting): per-domain bandwidth accounting

2026-07-03 15:21:48 -04:00

test_buildpacks.py

feat: Phase 2 developer experience — build packs, config snapshots, catalog certification

2026-06-23 18:49:04 -04:00

test_cli_api.py

feat(cli): API-backed operator verbs and diagnostic support bundle

2026-07-03 15:21:22 -04:00

test_cli_manifest.py

feat(manifest): fleet targeting, manifest-powered previews, CLI verbs (Phase 5 backend)

2026-07-04 01:46:34 -04:00

test_cloudflare_extraction.py

feat(extensions): Phase 5 — extract Cloudflare zone-ops into serverkit-cloudflare-ops

2026-07-02 01:04:03 -04:00

test_cloudflare_zone_settings.py

feat(extensions): Phase 5 — extract Cloudflare zone-ops into serverkit-cloudflare-ops

2026-07-02 01:04:03 -04:00

test_compose_env_overlay.py

feat: per-service targeting for the compose env overlay

2026-06-23 23:19:41 -04:00

test_config_checkpoint_alias.py

refactor(unify): §8 Phase B4 — surface DeploymentSnapshot as "Config Checkpoint"

2026-06-24 14:24:13 -04:00

test_config_snapshots.py

feat: UX hardening for the new organization/proxy/snapshot surfaces

2026-06-23 21:15:16 -04:00

test_connection_string.py

Introduce sk1 connection string format and GUI plugin

2026-05-05 14:03:31 -04:00

test_container_registry.py

docs: adopt numbered filenames for docs/plans and update references

2026-07-01 20:49:41 -04:00

test_container_scale.py

feat(docker): horizontal auto-scaling (CPU thresholds, min/max, cooldown)

2026-06-19 10:13:50 -04:00

test_container_sleep.py

feat(docker): container auto-sleep (policy, manual sleep/wake, idle sweep)

2026-06-19 09:54:40 -04:00

test_container_status.py

feat: Phase 1 foundation — status aggregator, API scopes, onboarding, template magic vars

2026-06-23 18:23:47 -04:00

test_cron_rbac.py

feat(security): authz hardening round 2 (plan 29)

2026-07-07 20:29:24 -04:00

test_cron_runs.py

feat(cron): completion — run history, project scope, cwd/run-as (plan 34)

2026-07-07 20:29:29 -04:00

test_crowdsec_extension.py

feat(extensions): CrowdSec integration extension

2026-07-03 15:21:36 -04:00

test_db_admin_sso.py

feat(databases): managed DB users and one-click Adminer SSO

2026-07-03 14:24:15 -04:00

test_db_config_tuner.py

feat(databases): curated engine config tuner

2026-07-03 14:24:03 -04:00

test_db_explorer_honesty.py

fix(databases): distinguish a connection failure from an empty database

2026-06-15 00:01:41 -04:00

test_db_processes.py

feat(databases): live processlist with kill in the explorer

2026-07-03 14:24:02 -04:00

test_ddns.py

feat(dns): dynamic DNS — token-authenticated A/AAAA updates

2026-06-19 03:12:07 -04:00

test_demo_mode.py

feat(auth): one-time login links and demo mode

2026-07-03 14:23:50 -04:00

test_deployments_unified.py

refactor(unify): §3 — canonical DeploymentJob links + unified /deployments surface

2026-06-24 14:52:04 -04:00

test_dns_caa.py

feat(dns): ownership ledger + never-touch-foreign guard + zone mirror (Phase 1)

2026-06-22 16:24:53 -04:00

test_dns_change_log.py

feat(dns): change log + admin notice on failure (Phase 2 backend)

2026-06-22 16:34:17 -04:00

test_dns_cloudflare_client.py

feat(dns): unify Cloudflare credentials behind one connection + shared client

2026-06-22 16:12:31 -04:00

test_dns_credential_resolution.py

feat(dns): unify Cloudflare credentials behind one connection + shared client

2026-06-22 16:12:31 -04:00

test_dns_cutover_api.py

fix(recovery): rebuild DNS cutover service+API and SSH site importer

2026-07-08 01:41:22 -04:00

test_dns_cutover.py

fix(recovery): rebuild DNS cutover service+API and SSH site importer

2026-07-08 01:41:22 -04:00

test_dns_give_subdomain.py

fix(sites): route every managed app type on give-subdomain, not just docker

2026-06-30 23:31:57 -04:00

test_dns_ownership.py

feat(dns): ownership ledger + never-touch-foreign guard + zone mirror (Phase 1)

2026-06-22 16:24:53 -04:00

test_dns_portfolio.py

feat(domains): unify domains & DNS into one surface + admin-only Connections

2026-06-23 00:34:55 -04:00

test_dns_providers_core.py

fix(dns): move DNS provider routes back to core

2026-07-03 23:18:08 -04:00

test_dns_server_extension.py

feat(extensions): authoritative DNS server extension

2026-07-03 15:22:07 -04:00

test_dns_subdomain_modes.py

feat(dns): per-base-domain subdomain modes — wildcard vs per-site (Phase 3)

2026-06-22 16:40:35 -04:00

test_docker_protection.py

Protect ServerKit containers from lifecycle actions

2026-06-24 01:43:29 -04:00

test_doctor_dns.py

feat(agent): V2 capability pack — survey/doctor/fleet sweep+repair (plan 28)

2026-07-07 20:29:24 -04:00

test_domain_and_encryption.py

feat: canonical domain + encryption key bootstrap

2026-06-19 01:34:02 -04:00

test_domain_attach_service.py

feat(manifest): apply engine — resolve/plan/apply + core domain attach (Phase 2)

2026-07-04 01:28:16 -04:00

test_drift_doctor.py

feat(ops): config drift detection, per-resource repair and doctor sweep

2026-07-03 15:21:09 -04:00

test_effective_env.py

feat: inject shared variables into the deploy env (under local precedence)

2026-06-23 21:33:53 -04:00

test_email_extraction.py

fix(dns): move DNS provider routes back to core

2026-07-03 23:18:08 -04:00

test_email_provider_usage_flags.py

refactor(unify): §6 Phase C6a — email provider usage flags

2026-06-24 14:32:41 -04:00

test_email_relay_unified.py

refactor(unify): §6 Phase C6b — Postfix relay backed by EmailProviderConnection

2026-06-24 14:36:08 -04:00

test_enhancements_integration.py

feat: Phase 4 polish & fleet — onboarding completion, fleet proxy, shared-resource depth, docs

2026-06-23 20:04:04 -04:00

test_extension_migration.py

feat(extensions): Phase 1 — seed marketplace (GPU + Workflow), module toggles

2026-07-01 21:34:54 -04:00

test_extension_platform.py

feat(extensions): Phase 3 — platform primitives (models, jobs, sockets, perms)

2026-07-01 22:11:09 -04:00

test_fail2ban_jail_service.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

test_file_integrity.py

feat(security): scoped file-integrity monitoring

2026-07-03 15:21:34 -04:00

test_fleet_doctor.py

fix(recovery): rebuild agent-fleet survey + fleet doctor/repair services

2026-07-08 01:41:13 -04:00

test_fleet_proxy.py

feat: UX hardening for the new organization/proxy/snapshot surfaces

2026-06-23 21:15:16 -04:00

test_fleet_repair.py

fix(recovery): rebuild agent-fleet survey + fleet doctor/repair services

2026-07-08 01:41:13 -04:00

test_git_webhook_authz.py

feat(security): authz hardening round 2 (plan 29)

2026-07-07 20:29:24 -04:00

test_gpu_extension.py

feat(extensions): runtime-frontend hardening + GPU core-slim (plan 32)

2026-07-07 20:29:28 -04:00

test_health_staging.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

test_htaccess_converter.py

feat(hosting): .htaccess to nginx converter

2026-07-03 15:22:05 -04:00

test_image_update.py

feat(docker): one-click apply for image updates

2026-06-19 09:37:30 -04:00

test_ingress_plane.py

feat: make the ingress-plane boundary explicit (host Nginx vs proxy stack)

2026-06-23 20:57:40 -04:00

test_jobs.py

fix(recovery): gpu core-slim move + cross-service doctor/schedule wiring

2026-07-08 01:41:54 -04:00

test_login_links.py

feat(auth): one-time login links and demo mode

2026-07-03 14:23:50 -04:00

test_malware_scan_job.py

feat(security): job-backed malware scans with a web-shell YARA pass

2026-07-03 15:21:23 -04:00

test_managed_database.py

docs: adopt numbered filenames for docs/plans and update references

2026-07-01 20:49:41 -04:00

test_managed_db_users.py

feat(databases): managed DB users and one-click Adminer SSO

2026-07-03 14:24:15 -04:00

test_manifest_apply.py

feat(manifest): fromSecret/fromService/generate reference binders (Phase 3)

2026-07-04 01:34:54 -04:00

test_manifest_drift.py

feat(manifest): push re-sync, drift check family, events (Phase 4)

2026-07-04 01:39:53 -04:00

test_manifest_persistence.py

feat(manifest): persist manifest + seed env + health-check gate (Phase 1)

2026-07-04 01:16:29 -04:00

test_manifest_reach.py

feat(manifest): fleet targeting, manifest-powered previews, CLI verbs (Phase 5 backend)

2026-07-04 01:46:34 -04:00

test_manifest_references.py

feat(manifest): fromSecret/fromService/generate reference binders (Phase 3)

2026-07-04 01:34:54 -04:00

test_manifest_spec.py

feat(manifest): v1 serverkit.yaml spec, normalizer, scaffold (Phase 0)

2026-07-04 01:11:50 -04:00

test_manifest_sync.py

feat(manifest): push re-sync, drift check family, events (Phase 4)

2026-07-04 01:39:53 -04:00

test_member_actions.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

test_metadata_guard.py

feat(security): cloud-metadata egress guard for app containers

2026-07-03 14:23:11 -04:00

test_micro_cache.py

feat(hosting): per-site nginx micro-cache toggle

2026-07-03 15:21:50 -04:00

test_module_toggles.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

test_nginx_remote_upstream.py

feat(remote-access): NAT-traversing WireGuard tunnels to expose private services

2026-06-15 23:20:00 -04:00

test_no_background_threads.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

test_notification_bus.py

feat(notifications): queue-backed Notification Bus + email system

2026-06-21 19:57:02 -04:00

test_notification_chat_connections.py

feat(notifications): polish — digests, prefs, deep-links (plans 24/33)

2026-07-07 20:29:29 -04:00

test_notification_deep_links.py

feat(notifications): polish — digests, prefs, deep-links (plans 24/33)

2026-07-07 20:29:29 -04:00

test_notification_digest.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

test_observability_namespace.py

refactor(unify): §4 — one Observability namespace + tab group

2026-06-24 14:58:55 -04:00

test_pairing_authz.py

fix(pairing): require developer role for claim/lookup (audit L1)

2026-06-12 18:35:43 -04:00

test_pairing_pop.py

fix(pairing): verify Ed25519 proof-of-possession on pairing poll

2026-05-31 16:08:32 -04:00

test_panel_version.py

feat(files): Stack quick link follows the real install dir

2026-07-02 22:19:14 -04:00

test_per_app_read_scoping.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

test_plugins_pipeline.py

fix(plugins): stamp source_type='registry' on registry installs

2026-07-03 04:12:58 -04:00

test_previews.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

test_projects.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

test_provider_secret_encryption.py

Fix wildcard HTTPS reading encrypted DNS creds raw + add encryption tests

2026-06-15 19:55:57 -04:00

test_proxy_stack.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

test_queue_bus_webhooks.py

feat(queue-bus): introduce ServerKit Queue Bus under Operations

2026-06-20 22:25:06 -04:00

test_queue_bus.py

feat(queue-bus): auto-generate slugs and resolve duplicates

2026-06-20 22:38:38 -04:00

test_registry.py

fix(plugins): stamp source_type='registry' on registry installs

2026-07-03 04:12:58 -04:00

test_remote_cron_update.py

feat(cron): completion — run history, project scope, cwd/run-as (plan 34)

2026-07-07 20:29:29 -04:00

test_repository_manifest_service.py

Add repository manifest detection and templates

2026-05-03 07:07:57 -04:00

test_resource_grants.py

feat(workspaces): make python.py grant-aware — every app blueprint now covered (#33)

2026-06-05 23:08:44 -04:00

test_security_clamav.py

Add ClamAV start action and UI posture fixes

2026-06-21 01:54:51 -04:00

test_security_headers.py

feat(security): gate panel HSTS on installer SSL mode (keep HTTPS optional)

2026-06-19 16:52:40 -04:00

test_security_policy.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

test_server_onboarding.py

feat: Phase 4 polish & fleet — onboarding completion, fleet proxy, shared-resource depth, docs

2026-06-23 20:04:04 -04:00

test_server_permissions.py

feat(security): authz hardening round 2 (plan 29)

2026-07-07 20:29:24 -04:00

test_server_time_timezone.py

fix(system): report IANA timezone_id; guard chart formatting against bad zones

2026-07-01 22:55:11 -04:00

test_serverkit_installer.py

feat(installer): Phase 5 — additive Python bootstrap foundation

2026-06-25 01:06:44 -04:00

test_serverkit_mail_extension.py

fix(mail): pin Stalwart engine against live 0.16.11 (WSL+Docker)

2026-07-04 00:48:01 -04:00

test_serverkit_mail_preflight_dns.py

test(mail): proving suite for serverkit-mail + changelog

2026-07-04 00:27:41 -04:00

test_servers_api_pairing.py

Introduce sk1 connection string format and GUI plugin

2026-05-05 14:03:31 -04:00

test_service_templates.py

test(services): catalog proving test for the template roadmap

2026-06-23 17:31:28 -04:00

test_services_alias.py

refactor(unify): §1 — single Services detail surface; /apps→/services

2026-06-24 14:06:05 -04:00

test_setup_health.py

feat(onboarding): setup health, preflight + reconcile (plan 22)

2026-07-07 20:29:23 -04:00

test_setup_nag.py

feat(onboarding): setup health, preflight + reconcile (plan 22)

2026-07-07 20:29:23 -04:00

test_setup_preflight.py

feat(onboarding): setup health, preflight + reconcile (plan 22)

2026-07-07 20:29:23 -04:00

test_setup_reconcile.py

feat(onboarding): setup health, preflight + reconcile (plan 22)

2026-07-07 20:29:23 -04:00

test_shared_resources.py

feat: Phase 4 polish & fleet — onboarding completion, fleet proxy, shared-resource depth, docs

2026-06-23 20:04:04 -04:00

test_site_base_domains.py

feat(services): pick a base domain when giving an app a subdomain

2026-07-01 00:31:22 -04:00

test_site_import.py

feat(imports): panel-migration pipeline with cPanel, DirectAdmin and Hestia importers

2026-07-03 14:24:29 -04:00

test_site_importers_extra.py

feat(imports): panel-migration pipeline with cPanel, DirectAdmin and Hestia importers

2026-07-03 14:24:29 -04:00

test_site_routing.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

test_sites_https.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

test_sites_publishing_gaps.py

feat(sites): warn when the site base domain overlaps the panel domain

2026-06-30 23:48:28 -04:00

test_speed_test.py

feat(monitoring): on-demand server speed test card

2026-07-03 14:23:29 -04:00

test_ssh_import_wiring.py

feat(adoption): DNS cutover+verify, snapshots, SSH import (plan 31)

2026-07-07 20:29:26 -04:00

test_ssl_unified_surface.py

refactor(unify): §5 — single SSL surface (basic + advanced)

2026-06-24 14:40:08 -04:00

test_support_bundle.py

feat(cli): API-backed operator verbs and diagnostic support bundle

2026-07-03 15:21:22 -04:00

test_survey_service.py

feat(agent): V2 capability pack — survey/doctor/fleet sweep+repair (plan 28)

2026-07-07 20:29:24 -04:00

test_telemetry.py

Truncate large telemetry payloads & UI robustness fixes

2026-06-22 01:45:15 -04:00

test_template_catalog_validation.py

feat: Phase 2 developer experience — build packs, config snapshots, catalog certification

2026-06-23 18:49:04 -04:00

test_template_magic_vars.py

feat: Phase 1 foundation — status aggregator, API scopes, onboarding, template magic vars

2026-06-23 18:23:47 -04:00

test_tunnel_netutil.py

feat(remote-access): per-edge port allocation + blocked-UDP diagnostic (Phase 4)

2026-06-15 23:28:12 -04:00

test_tunnel_reconcile.py

feat(remote-access): NAT-traversing WireGuard tunnels to expose private services

2026-06-15 23:20:00 -04:00

test_url_swap.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

test_utils_system_integration.py

Move EXPECTED_MANAGER check into pytest test

2026-02-10 16:03:19 -05:00

test_utils_system.py

Silence Bandit and mock sudo/posix in tests

2026-03-04 02:54:14 -05:00

test_waf.py

feat(security): per-app WAF (ModSecurity v3 + OWASP CRS)

2026-06-19 14:02:24 -04:00

test_wordpress_extraction.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

test_workspace_scope.py

feat(workspace): scope domains/databases + reconcile workspace roles (#33)

2026-06-15 21:00:57 -04:00

test_wp_import_zip.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

test_wp_php_errors.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

test_wp_php_limits.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

test_wp_pipelines_alias.py

refactor(unify): §2 — rename WordPress "Projects" → "Pipelines"

2026-06-24 14:09:35 -04:00

test_wp_plugin_library.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

test_wp_reports.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

test_wp_ssh_import.py

feat(wordpress): pull-import a live site over SSH

2026-07-03 14:24:31 -04:00

test_yara_scan.py

feat(security): job-backed malware scans with a web-shell YARA pass

2026-07-03 15:21:23 -04:00