Juan DenisandClaude Opus 5 b006f2e4da refactor(disk): route the reclaim sweep through run_checked ...

The raw subprocess census caught disk_reclaim_service as a 25th call
site against a ceiling of 24. The ceiling only goes down, and this is a
case where the shared door is genuinely the better call rather than a
box to tick.

_run's own `except OSError` turned a missing binary into an empty
result, which is exactly the sbin-PATH failure mode: a unit whose $PATH
omits sbin cannot exec a bare `journalctl`, and this sweep would have
reported "nothing to reclaim" on a host that had plenty to reclaim --
a false fact about the operator's disk rather than a visible error.

run_checked resolves argv[0] the way privileged_cmd does, and separates
"never ran" (returncode None) from "answered no". _run keeps its
(ok, stdout, stderr) shape, so callers and tests are unchanged; a
missing binary still degrades to a zero-sized candidate instead of
aborting the scan, but now the reason reaches stderr.

Census back to 24/24; all six ratchets pass.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-21 19:23:29 -04:00

..

dns

feat(cloudflare): restore Round 2 engine — DNSSEC, Origin CA, rules, activity (plan 42 ph2)

2026-07-09 05:02:54 -04:00

site_importers

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

yara_rules

feat(security): job-backed malware scans with a web-shell YARA pass

2026-07-03 15:21:23 -04:00

__init__.py

refactor(plugins): add WordPress bridge + flagship/multi-blueprint plumbing

2026-07-01 23:45:22 -04:00

advanced_ssl_service.py

fix(ssl): a failed certificate check no longer reports fine

2026-08-17 22:48:27 -04:00

agent_fleet_service.py

refactor(remote): close the dispatch_agent_command seam

2026-08-18 23:31:46 -04:00

agent_plugin_service.py

fix(plugins): make plugin/template features fail honestly, not silently (audit H2)

2026-06-12 18:35:35 -04:00

agent_registry.py

refactor(agent): transport-neutral handshake + state ingest doors (plan 77 A2)

2026-08-19 02:04:29 -04:00

ai_attachment_registry.py

feat(ai): add attachment resolver registry

2026-08-21 10:48:28 -04:00

ai_service.py

feat(ai): persist authorized attachment manifests

2026-08-21 10:53:56 -04:00

ai_tool_registry.py

feat(ai): add attachment resolver registry

2026-08-21 10:48:28 -04:00

ai_tools_builtin.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

anomaly_detection_service.py

Implement security features: key rotation, IP allowlist, anomaly detection

2026-01-22 18:11:22 -05:00

api_analytics_service.py

Add API keys, analytics, webhooks, and middleware

2026-03-04 01:53:46 -05:00

api_key_service.py

Add API keys, analytics, webhooks, and middleware

2026-03-04 01:53:46 -05:00

app_port_service.py

feat(manifest): appliance-tier typed L4 ports + plan-time blockers rail (plan 35 ph1)

2026-07-09 02:57:23 -04:00

application_restore.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

audit_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

auth_throttle_service.py

feat(auth): per-IP login brute-force throttle

2026-07-18 00:59:19 -04:00

backup_alert_service.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

backup_cost_service.py

feat(backups): backup protection backend — policy, scheduler, smart backups, API

2026-06-22 19:53:23 -04:00

backup_drill_service.py

fix(backups): a skipped restore drill no longer reads as proof

2026-08-17 21:03:06 -04:00

backup_kind_registry.py

security: hook seam lifecycle + registrant binding

2026-08-05 13:36:33 -04:00

backup_offsite_service.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

backup_policy_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

backup_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

backup_verify_service.py

fix(recovery): rebuild setup-health/reconcile + backup drill/verify services

2026-07-08 01:41:31 -04:00

bandwidth_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

bootstrap_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

bounce_service.py

feat(notifications): restore email-bounce webhook slice (plan 42 ph3)

2026-07-09 04:55:53 -04:00

build_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

buildpack_service.py

feat(manifest): network identity — fromServer, SERVER_PUBLIC_IP, shared net (plan 35 ph5)

2026-07-09 03:28:08 -04:00

cache_service.py

feat(cache): ttl_cached decorator on CacheService; two TTL dicts migrate (plan 77 F2)

2026-08-19 05:20:59 -04:00

capacity_service.py

refactor(utils): one byte formatter for prose, not three copies of it

2026-08-17 19:59:16 -04:00

cf_ops_change_service.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

chat_webhook_service.py

fix(notifications): redact transport errors before they reach the log

2026-08-13 14:36:24 -04:00

cli_api_client.py

harden: broaden insecure-secret detection, bind API to loopback, fix break-glass sub

2026-07-15 12:07:14 -04:00

cloudflare_ops_bridge.py

feat(extensions): Phase 5 — extract Cloudflare zone-ops into serverkit-cloudflare-ops

2026-07-02 01:04:03 -04:00

compose_env_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

configuration_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

connection_registry.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

connection_string.py

Introduce sk1 connection string format and GUI plugin

2026-05-05 14:03:31 -04:00

container_registry_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

container_scale_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

container_sleep_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

container_status_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

contribution_service.py

feat(sdk): a second widget surface — types users place, not just slots

2026-07-25 19:24:41 -04:00

cron_run_service.py

fix(recovery): restore models + migration chain 056-074, cron_run_service, rbac authz

2026-07-08 00:17:55 -04:00

cron_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

dashboard_service.py

feat(dashboard): a real editor, and widgets that say what they are

2026-07-25 21:14:50 -04:00

database_engine_extension_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

database_engine_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

database_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

db_admin_sso_service.py

refactor(docker): one runner behind the private wrappers

2026-08-18 11:30:02 -04:00

db_config_tuner_service.py

refactor(db-tuner): typed errors close the status-sniffing census at 0

2026-08-19 00:03:50 -04:00

db_exec.py

refactor(db): one SQL-exec dispatcher, and adopt the doors already built

2026-08-18 11:26:40 -04:00

db_process_service.py

refactor(db): one SQL-exec dispatcher, and adopt the doors already built

2026-08-18 11:26:40 -04:00

db_sync_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

ddns_service.py

refactor(ddns): typed errors replace the token-prose sniff

2026-08-18 23:55:17 -04:00

demo_deploy_service.py

feat(deployments): simulated demo deploys through the real console pipeline

2026-07-23 16:58:46 -04:00

deploy_kind_registry.py

feat(plugins): let plugins own deployment-shaped work

2026-07-25 12:46:59 -04:00

deploy_preflight_service.py

feat(deploy): prove a deploy can work before stopping the live one

2026-08-13 17:33:35 -04:00

deployment_job_service.py

refactor(deploy): DeploymentJob adopts RunLifecycleMixin (plan 77 D2)

2026-08-19 04:54:38 -04:00

deployment_runner.py

refactor(deploy): deployment_runner rides RunLifecycleMixin transitions (plan 77 D2)

2026-08-19 04:55:13 -04:00

deployment_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

discovery_service.py

Fleet monitor + security and agent hardening

2026-03-23 01:58:28 -04:00

disk_reclaim_service.py

refactor(disk): route the reclaim sweep through run_checked

2026-08-21 19:23:29 -04:00

dns_change_service.py

feat(dns): change log + admin notice on failure (Phase 2 backend)

2026-06-22 16:34:17 -04:00

dns_cutover_service.py

fix(dns-cutover): restore snapshot() staging + provider-named 501 (plan 42 D7/ph5)

2026-07-09 04:50:16 -04:00

dns_ownership_service.py

feat(dns): change log + admin notice on failure (Phase 2 backend)

2026-06-22 16:34:17 -04:00

dns_provider_service.py

feat(dns): change log + admin notice on failure (Phase 2 backend)

2026-06-22 16:34:17 -04:00

dns_zone_service.py

refactor(utils): rename run_command -> run_unprivileged

2026-08-17 20:07:39 -04:00

docker_service.py

refactor(docker): route docker_service through the shared doors

2026-08-18 13:45:25 -04:00

doctor_check_registry.py

feat(plugins): let extensions contribute doctor checks

2026-07-25 13:56:09 -04:00

doctor_service.py

feat(operations): adopt core run workflows

2026-08-21 10:40:42 -04:00

domain_attach_service.py

feat(ssl): remember one Let's Encrypt contact instead of asking every time

2026-08-13 16:22:33 -04:00

domain_restore.py

fix(recycle-bin): say when a restored domain comes back without HTTPS

2026-08-12 13:08:49 -04:00

drift_service.py

fix(doctor): couldn't-check is its own answer, never the negative

2026-08-17 22:48:10 -04:00

email_relay_service.py

refactor(unify): §6 Phase C6b — Postfix relay backed by EmailProviderConnection

2026-06-24 14:36:08 -04:00

env_reference_service.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

env_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

environment_docker_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

environment_domain_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

environment_health_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

environment_pipeline_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

error_log_service.py

feat(errors): record exceptions via service + admin API + client ingestion

2026-08-16 18:35:14 -04:00

event_service.py

refactor(webhooks): move subscription use cases behind service boundary

2026-08-18 02:56:33 -04:00

event_subscription_service.py

refactor(webhooks): move subscription use cases behind service boundary

2026-08-18 02:56:33 -04:00

extension_lifecycle.py

security: hook seam lifecycle + registrant binding

2026-08-05 13:36:33 -04:00

extension_migration.py

refactor(extensions): extract seven builtins to standalone repos

2026-07-20 01:16:16 -04:00

fail2ban_jail_service.py

refactor(nginx): one privileged-write door, one vhost lifecycle

2026-08-18 11:26:23 -04:00

file_integrity_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

file_service.py

refactor(files): file manager onto the typed-error contract (C reference)

2026-08-18 23:49:09 -04:00

firewall_service.py

fix(firewall): a failed status probe no longer fabricates inactive

2026-08-17 22:58:18 -04:00

fleet_doctor_service.py

refactor(remote): close the dispatch_agent_command seam

2026-08-18 23:31:46 -04:00

fleet_monitor_service.py

fix(metrics): unknown is not zero, and zero is not unknown

2026-08-17 22:40:12 -04:00

fleet_repair_service.py

refactor(remote): close the dispatch_agent_command seam

2026-08-18 23:31:46 -04:00

fleet_sweep.py

feat(agent): V2 capability pack — survey/doctor/fleet sweep+repair (plan 28)

2026-07-07 20:29:24 -04:00

git_deploy_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

git_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

gitea_api_service.py

Add git webhook and deployment management APIs

2026-01-21 21:31:57 -05:00

host_inventory_service.py

refactor(utils): one byte formatter for prose, not three copies of it

2026-08-17 19:59:16 -04:00

host_snapshot_service.py

feat(monitoring): detect host spec changes and inventory filesystems

2026-08-17 09:31:18 -04:00

htaccess_converter.py

feat(hosting): .htaccess to nginx converter

2026-07-03 15:22:05 -04:00

image_scanner_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

image_update_service.py

refactor(image-updates): typed errors replace the not-found prose sniff

2026-08-18 23:52:40 -04:00

install_profile_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

invitation_service.py

test(api): ratchet controller boundary debt

2026-08-18 03:11:37 -04:00

linked_panel_agent.py

fix(linked-panel): accept compose file path in project_path from remote runner

2026-07-22 00:48:13 -04:00

linked_panel_service.py

feat(servers): ServerKit-to-ServerKit peering — embedded agent mode

2026-07-22 00:35:33 -04:00

log_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

login_link_service.py

feat(auth): one-time login links and demo mode

2026-07-03 14:23:50 -04:00

malware_scan_service.py

refactor(security): malware-scan enqueue raises typed errors

2026-08-18 23:54:06 -04:00

managed_database_service.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

managed_db_user_service.py

refactor(crypto): EncryptedSecret adoption sweep + service-level crypto ratchet (plan 77 C1)

2026-08-19 01:49:42 -04:00

manifest_apply_service.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

manifest_persistence_service.py

feat(manifest): persist manifest + seed env + health-check gate (Phase 1)

2026-07-04 01:16:29 -04:00

manifest_preview_service.py

feat(manifest): fleet targeting, manifest-powered previews, CLI verbs (Phase 5 backend)

2026-07-04 01:46:34 -04:00

manifest_scaffold_service.py

feat(manifest): dockerfilePath — build services from a repo Dockerfile

2026-07-10 01:13:14 -04:00

manifest_spec_service.py

feat(manifest): dockerfilePath — build services from a repo Dockerfile

2026-07-10 01:13:14 -04:00

manifest_sync_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

member_action_service.py

feat(security): authz hardening round 2 (plan 29)

2026-07-07 20:29:24 -04:00

metadata_guard_service.py

feat(security): cloud-metadata egress guard for app containers

2026-07-03 14:23:11 -04:00

metrics_history_service.py

fix(metrics): unknown is not zero, and zero is not unknown

2026-08-17 22:40:12 -04:00

migration_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

module_service.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

monitor_service.py

feat(api): centralize typed errors and request correlation

2026-08-18 02:42:25 -04:00

monitoring_service.py

fix(monitoring): unknown load is not zero load; config via ConfigStore

2026-08-17 22:40:23 -04:00

nginx_advanced_service.py

fix(security): a webhook with no signature is as unauthenticated as a wrong one

2026-08-19 21:44:28 -04:00

nginx_service.py

refactor(nginx): one privileged-write door, one vhost lifecycle

2026-08-18 11:26:23 -04:00

nonce_service.py

Implement security features: key rotation, IP allowlist, anomaly detection

2026-01-22 18:11:22 -05:00

notification_service.py

refactor(services): one ConfigStore for the JSON-file config mechanics

2026-08-17 22:14:18 -04:00

openapi_service.py

feat(api): add typed endpoint contracts and envelopes

2026-08-18 02:47:57 -04:00

pairing_service.py

refactor(crypto): EncryptedSecret adoption sweep + service-level crypto ratchet (plan 77 C1)

2026-08-19 01:49:42 -04:00

passkey_service.py

feat(auth): WebAuthn / Passkey support

2026-06-19 01:33:45 -04:00

permission_service.py

Add invitations, email models, admin APIs

2026-03-04 02:34:49 -05:00

php_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

plugin_service.py

feat(extensions): enforce the SDK gate at install; localize the GUI builtin

2026-08-20 00:31:42 -04:00

postfix_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

preview_service.py

refactor(db): one SQL-exec dispatcher, and adopt the doors already built

2026-08-18 11:26:40 -04:00

private_url_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

process_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

project_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

proxy_stack_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

python_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

recycle_bin_service.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

registrar_service.py

refactor(crypto): EncryptedSecret adoption sweep + service-level crypto ratchet (plan 77 C1)

2026-08-19 01:49:42 -04:00

registry_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

remote_cloudflared_service.py

refactor(agents): centralize remote command dispatch

2026-08-18 03:05:32 -04:00

remote_command_dispatcher.py

refactor(agents): centralize remote command dispatch

2026-08-18 03:05:32 -04:00

remote_cron_service.py

refactor(agents): centralize remote command dispatch

2026-08-18 03:05:32 -04:00

remote_docker_service.py

refactor(agents): centralize remote command dispatch

2026-08-18 03:05:32 -04:00

remote_file_service.py

refactor(agents): centralize remote command dispatch

2026-08-18 03:05:32 -04:00

remote_packages_service.py

refactor(agents): centralize remote command dispatch

2026-08-18 03:05:32 -04:00

remote_runtimes_service.py

refactor(agents): centralize remote command dispatch

2026-08-18 03:05:32 -04:00

remote_systemd_service.py

refactor(agents): centralize remote command dispatch

2026-08-18 03:05:32 -04:00

repository_manifest_service.py

feat(templates): deploy templates as a backend repo-kind catalog entry

2026-07-10 02:38:46 -04:00

resource_grant_service.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

resource_tier_service.py

feat(cache): ttl_cached decorator on CacheService; two TTL dicts migrate (plan 77 F2)

2026-08-19 05:20:59 -04:00

run_log_service.py

fix(ratchets): reconcile plan-77 additions with the standing gates

2026-08-19 06:04:59 -04:00

saved_view_service.py

refactor(views): saved views onto the typed-error contract

2026-08-18 23:51:34 -04:00

search_provider_registry.py

feat(search): add resource picker contract

2026-08-21 09:20:54 -04:00

search_service.py

feat(search): add resource picker contract

2026-08-21 09:20:54 -04:00

secret_vault_service.py

refactor(secrets): vaults + webhook gateway onto the typed-error contract

2026-08-19 00:00:36 -04:00

security_feed_service.py

feat(security): daily GHSA feed check with admin notifications

2026-08-02 18:35:25 -04:00

security_policy_service.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

security_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

server_metrics_service.py

fix(metrics): unknown is not zero, and zero is not unknown

2026-08-17 22:40:12 -04:00

server_onboarding_service.py

feat: Phase 4 polish & fleet — onboarding completion, fleet proxy, shared-resource depth, docs

2026-06-23 20:04:04 -04:00

server_template_service.py

fix(plugins): make plugin/template features fail honestly, not silently (audit H2)

2026-06-12 18:35:35 -04:00

settings_service.py

feat(jobs): bound telemetry growth with a retention handler

2026-08-21 19:12:27 -04:00

setup_health_service.py

feat(install): put a default-deny firewall and fail2ban on a stock install

2026-08-13 16:33:47 -04:00

setup_reconcile_service.py

fix(domains): stop soft-delete tombstones leaking into every read path

2026-08-12 09:27:05 -04:00

shared_resource_service.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

signing_service.py

feat(extensions): ed25519 signing service + publisher key registry

2026-08-04 23:34:02 -04:00

site_base_domain_service.py

feat(sites): base-domain registry so sites can publish under multiple domains

2026-07-01 00:07:00 -04:00

site_domain_service.py

fix(domains): stop soft-delete tombstones leaking into every read path

2026-08-12 09:27:05 -04:00

site_import_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

sites_https_service.py

feat(sites): per-base wildcard HTTPS + base-domain registry API

2026-07-01 00:11:18 -04:00

source_connection_service.py

refactor(crypto): EncryptedSecret adoption sweep + service-level crypto ratchet (plan 77 C1)

2026-08-19 01:49:42 -04:00

speed_test_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

ssl_service.py

refactor(nginx): one privileged-write door, one vhost lifecycle

2026-08-18 11:26:23 -04:00

sso_service.py

refactor(crypto): fold the parallel Fernet stacks into utils/crypto (plan 77 C2)

2026-08-19 05:37:32 -04:00

storage_provider_service.py

refactor(backend): extract reusable format_bytes, admin_required, and validate_app_name

2026-06-21 02:11:47 -04:00

support_bundle_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

survey_service.py

refactor(remote): close the dispatch_agent_command seam

2026-08-18 23:31:46 -04:00

system_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

telemetry_service.py

refactor(security): one sensitive-keyword union for all four redaction sinks (plan 77 F3)

2026-08-19 02:10:22 -04:00

template_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

terminal_service.py

refactor(remote): close the dispatch_agent_command seam

2026-08-18 23:31:46 -04:00

test_sandbox_service.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

theme_registry_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

theme_service.py

feat(themes): backend model, API, and registry pipeline (plan 60 Phase 2-3)

2026-07-23 00:24:00 -04:00

theme_tokens.py

feat(themes): hardening — preview validation, registry caching, token wiring (plan 61)

2026-07-23 09:25:01 -04:00

totp_service.py

Add two-factor authentication (2FA) support

2026-01-18 01:03:56 -05:00

unit_compose_service.py

feat(manifest): multi-container units (plan 35 ph3)

2026-07-09 03:13:54 -04:00

unit_of_work.py

refactor(webhooks): move subscription use cases behind service boundary

2026-08-18 02:56:33 -04:00

upload_service.py

refactor(services): centralize slug generation on app.utils.slug

2026-06-20 22:43:38 -04:00

uptime_service.py

refactor(db): one SQL-exec dispatcher, and adopt the doors already built

2026-08-18 11:26:40 -04:00

volume_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

waf_service.py

refactor(nginx): one privileged-write door, one vhost lifecycle

2026-08-18 11:26:23 -04:00

webhook_gateway_service.py

fix(security): a webhook with no signature is as unauthenticated as a wrong one

2026-08-19 21:44:28 -04:00

webhook_service.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

wordpress_bridge.py

security: hook seam lifecycle + registrant binding

2026-08-05 13:36:33 -04:00

workspace_service.py

feat(workspaces): improve workspace switching and secrets/webhooks UI

2026-06-21 18:32:25 -04:00

yara_scan_service.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00