Juan Denis 2f002c5963 fix(firewall): a failed status probe no longer fabricates inactive ...

The §D matrix pinned this live: in a capability-restricted environment
(unprivileged LXC — ufw exists, is on PATH, and fails on dropped
CAP_NET_ADMIN) ufw status exits non-zero, and _check_ufw returned
active=False with no error signal — "probe failed" indistinguishable
from "firewall off", the same dishonesty class as plan 74's "not
installed", one rung down the ladder.

active/running are now tri-state: rc=0 parses a determined answer;
non-zero with a dbus/not-running signature is a determined
not-running (verified on Rocky 9: rc=36); anything else is None +
error. Not-installed stays a determined False. any_active propagates
the None, and the firewall tab renders an amber Status Unknown
instead of collapsing it to Inactive.

2026-08-17 22:58:18 -04:00

..

api

fix(ssl): a failed certificate check no longer reports fine

2026-08-17 22:48:27 -04:00

data

fix(registry): mirror serverkit-localkit into the bundled index

2026-08-16 13:46:17 -04:00

jobs

feat(doctor): connect the fleet doctor that was already written

2026-08-13 17:27:59 -04:00

middleware

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

models

fix(metrics): unknown is not zero, and zero is not unknown

2026-08-17 22:40:12 -04:00

notifications

feat(monitoring): detect host spec changes and inventory filesystems

2026-08-17 09:31:18 -04:00

plugins

fix(services): close the rest of the bare-name sbin exec class

2026-08-17 09:37:59 -04:00

plugins_sdk

feat(extensions): observe permission use, and say which permissions we can't see

2026-08-13 17:44:11 -04:00

queue_bus

feat(telemetry): unified system event stream with correlation

2026-06-21 20:19:57 -04:00

services

fix(firewall): a failed status probe no longer fabricates inactive

2026-08-17 22:58:18 -04:00

utils

fix(doctor): couldn't-check is its own answer, never the negative

2026-08-17 22:48:10 -04:00

__init__.py

feat(monitoring): detect host spec changes and inventory filesystems

2026-08-17 09:31:18 -04:00

agent_gateway.py

Add review rules and proxy/auth docs

2026-07-18 01:23:47 -04:00

cron_runner.py

feat(cron): completion — run history, project scope, cwd/run-as (plan 34)

2026-07-07 20:29:29 -04:00

paths.py

feat(wordpress): global plugin library for operator-owned plugins

2026-07-01 01:08:42 -04:00

sockets.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00