Juan Denis 45bc3c70bd Guard first admin with a setup code, fix Git deploys ...

A fresh panel no longer lets whoever reaches it first become admin:
registering the first account needs a one-time code the installer
prints (`serverkit setup-code` repeats it). SERVERKIT_ADMIN_EMAIL and
SERVERKIT_ADMIN_PASSWORD create the admin unattended instead.

Git apps now deploy what users expect: a repository with a compose
file deploys every service it declares, "Deploy latest" builds the
branch's newest commit, and push webhooks rebuild the containers.
Also fixes branch switching on single-branch clones, uploads of a
lone file, compose v1 port preflight, and CLI commands that ignored
their flags.

2026-09-24 00:50:02 -04:00

..

schemas

feat(search): add resource picker contract

2026-08-21 09:20:54 -04:00

__init__.py

Initial project structure and core API implementation

2026-01-17 04:22:12 -05:00

_query.py

refactor(list-queries): one PageQuery door for the page/per_page dialect (C3)

2026-08-19 00:10:09 -04:00

admin.py

refactor(admin): move the owned-apps delete guard behind the service door

2026-08-31 21:04:21 -04:00

advanced_ssl.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

agent_plugins.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

agent_poll.py

refactor(agent): transport-neutral handshake + state ingest doors (plan 77 A2)

2026-08-19 02:04:29 -04:00

ai.py

feat(ai): connect task routing, guarded fallback, and scoped run accounting

2026-09-08 04:09:27 -04:00

api_analytics.py

Add Services UI and service-detail pages

2026-03-07 12:15:02 -05:00

api_keys.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

app_volumes.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

apps.py

Guard first admin with a setup code, fix Git deploys

2026-09-24 00:50:02 -04:00

auth.py

Guard first admin with a setup code, fix Git deploys

2026-09-24 00:50:02 -04:00

backups.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

bandwidth.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

buildpacks.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

builds.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

connect.py

feat(connect): apply the managed presentation profile (plan 25)

2026-09-13 03:50:02 -04:00

connections.py

feat(connections): add provider SDK contract

2026-08-28 00:48:36 -04:00

container_status.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

contracts.py

feat(api): add typed endpoint contracts and envelopes

2026-08-18 02:47:57 -04:00

cron.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

dashboards.py

feat(dashboard): boards that survive the browser they were built in

2026-07-25 19:30:51 -04:00

database_engines.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

databases.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

db_tuner.py

refactor(crypto): EncryptedSecret adoption sweep + service-level crypto ratchet (plan 77 C1)

2026-08-19 01:49:42 -04:00

ddns.py

refactor(ddns): typed errors replace the token-prose sniff

2026-08-18 23:55:17 -04:00

deploy.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

deployment_jobs.py

feat(deploy-console): parameterised repo simulated deployment

2026-09-04 21:12:18 -04:00

deployments.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

dns_cutover.py

refactor(auth): one mid-route admin gate instead of three contracts

2026-08-18 18:22:01 -04:00

dns_providers.py

fix(dns): move DNS provider routes back to core

2026-07-03 23:18:08 -04:00

dns_zones.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

docker.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

docs.py

Add API keys, analytics, webhooks, and middleware

2026-03-04 01:53:46 -05:00

doctor.py

feat(operations): adopt core run workflows

2026-08-21 10:40:42 -04:00

domains.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

env_vars.py

fix(env-vars): let an explicit null clear a variable's description

2026-08-25 09:14:29 -04:00

environments.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

error_logs.py

refactor(list-queries): one PageQuery door for the page/per_page dialect (C3)

2026-08-19 00:10:09 -04:00

event_subscriptions.py

refactor(webhooks): move subscription use cases behind service boundary

2026-08-18 02:56:33 -04:00

files.py

refactor(files): file manager onto the typed-error contract (C reference)

2026-08-18 23:49:09 -04:00

firewall.py

feat(firewall): guard self-block and default-zone lockouts

2026-08-17 19:28:24 -04:00

fleet_doctor.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

fleet_monitor.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

fleet.py

Add agent capability probing and reporting

2026-05-01 00:37:48 -04:00

git.py

feat(git)!: split the Gitea self-host half into the serverkit-git extension (plan 52 Phase 6)

2026-08-29 14:30:07 -04:00

htaccess_tools.py

feat(hosting): .htaccess to nginx converter

2026-07-03 15:22:05 -04:00

image_updates.py

refactor(image-updates): typed errors replace the not-found prose sniff

2026-08-18 23:52:40 -04:00

invitations.py

test(api): ratchet controller boundary debt

2026-08-18 03:11:37 -04:00

jobs.py

feat(operations): expose authoritative run actions

2026-08-21 10:34:52 -04:00

linked_panel.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

logs.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

managed_db_users.py

feat(databases): managed DB users and one-click Adminer SSO

2026-07-03 14:24:15 -04:00

manifests.py

refactor(auth): one mid-route admin gate instead of three contracts

2026-08-18 18:22:01 -04:00

marketplace.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

metrics.py

fix(dashboard): avoid content blockers on metrics history requests (#133)

2026-09-04 22:20:22 -04:00

migrations.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

mobile.py

fix(metrics): unknown is not zero, and zero is not unknown

2026-08-17 22:40:12 -04:00

modules.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

monitoring.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

monitors.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

nginx_advanced.py

fix(security): harden nginx write path and certbot issuance trust bugs

2026-08-27 23:54:01 -04:00

nginx.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

notifications.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

pairing.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

performance.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

php.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

plugins.py

feat: add declarative walkthrough contribution contract

2026-08-31 23:14:29 -04:00

previews.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

private_urls.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

processes.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

projects.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

proxy.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

python.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

queue_bus.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

recipes.py

fix(recipes): restore CI boundary contracts

2026-08-22 14:49:11 -04:00

recycle_bin.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

registrars.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

responses.py

feat(api): add typed endpoint contracts and envelopes

2026-08-18 02:47:57 -04:00

restore_points.py

fix(restore-points): satisfy jwt-only and seed-factory ratchets

2026-08-25 02:52:59 -04:00

runs.py

fix(sockets): authorize subscriptions and revalidate event delivery

2026-09-05 04:29:44 -04:00

search.py

feat(search): add resource picker contract

2026-08-21 09:20:54 -04:00

secrets_webhooks.py

refactor(secrets): vaults + webhook gateway onto the typed-error contract

2026-08-19 00:00:36 -04:00

security.py

feat(security)!: extract the install-gated security suite to extensions (plan 47 Ph3b-5 / plan 55 Ph3)

2026-08-29 13:53:04 -04:00

server_templates.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

servers.py

refactor: share backend lifecycle and fleet metrics operations

2026-09-05 05:06:41 -04:00

setup_health.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

shared_resources.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

site_imports.py

feat(adoption): DNS cutover+verify, snapshots, SSH import (plan 31)

2026-07-07 20:29:26 -04:00

snapshots.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

source_connections.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

speed_test.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

ssl.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

sso.py

fix(auth): enforce MFA, scoped keys, and revocable sessions

2026-09-05 04:29:16 -04:00

support_bundle.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

survey.py

feat(agent): V2 capability pack — survey/doctor/fleet sweep+repair (plan 28)

2026-07-07 20:29:24 -04:00

system.py

fix(dashboard): avoid content blockers on metrics history requests (#133)

2026-09-04 22:20:22 -04:00

telemetry.py

refactor(list-queries): one PageQuery door for the page/per_page dialect (C3)

2026-08-19 00:10:09 -04:00

templates.py

fix(apps): name-clash errors point at the Recycle Bin for tombstones

2026-08-30 03:20:34 -04:00

test_sandbox.py

Add test sandbox and harden install scripts

2026-07-20 22:26:19 -04:00

themes.py

refactor(themes): registry install raises typed errors

2026-08-18 23:56:15 -04:00

two_factor.py

fix(auth): enforce MFA, scoped keys, and revocable sessions

2026-09-05 04:29:16 -04:00

uptime.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

views.py

refactor(views): saved views onto the typed-error contract

2026-08-18 23:51:34 -04:00

waf.py

refactor(auth): one mid-route admin gate instead of three contracts

2026-08-18 18:22:01 -04:00

walkthroughs.py

feat: add declarative walkthrough contribution contract

2026-08-31 23:14:29 -04:00

webhooks.py

fix(webhooks): record the crash the PR-webhook 200 was hiding

2026-08-19 00:05:33 -04:00

workspaces.py

fix(models): close all 26 dangling-on-delete FKs + orphan sweep migration

2026-08-31 20:25:29 -04:00