Juan Denis c7b6f145d1 Serve the panel through the Cloud relay tunnel ...

Until now the connect client refused every http and sio stream, so
Open panel in ServerKit Cloud showed a blank page. The client now
bridges them to the loopback listener, the panel serves its page
under the relay's /t/<device>/ prefix, and the SPA prefixes its
router, API and Socket.IO paths from it. The Cloud grant is checked
against Cloud's JWKS before signing in the panel user with the same
email; panel two-factor still applies.

2026-09-29 23:19:34 -04:00

..

schemas

feat(search): add resource picker contract

2026-08-21 09:20:54 -04:00

__init__.py

Initial project structure and core API implementation

2026-01-17 04:22:12 -05:00

_query.py

refactor(list-queries): one PageQuery door for the page/per_page dialect (C3)

2026-08-19 00:10:09 -04:00

admin.py

refactor(admin): move the owned-apps delete guard behind the service door

2026-08-31 21:04:21 -04:00

advanced_ssl.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

agent_plugins.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

agent_poll.py

refactor(agent): transport-neutral handshake + state ingest doors (plan 77 A2)

2026-08-19 02:04:29 -04:00

ai.py

feat(ai): connect task routing, guarded fallback, and scoped run accounting

2026-09-08 04:09:27 -04:00

api_analytics.py

Add Services UI and service-detail pages

2026-03-07 12:15:02 -05:00

api_keys.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

app_attachments.py

Let proxied sites long-cache fingerprinted assets

2026-09-27 22:45:53 -04:00

app_slots.py

Deploy compose apps through A/B slots

2026-09-28 22:26:44 -04:00

app_volumes.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

apps.py

Point compose app actions at the live slot project

2026-09-28 22:27:13 -04:00

auth.py

Serve the panel through the Cloud relay tunnel

2026-09-29 23:19:34 -04:00

backups.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

bandwidth.py

Gate request metrics the way the sweeps expect

2026-09-27 18:51:04 -04:00

buildpacks.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

builds.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

connect.py

feat(connect): apply the managed presentation profile (plan 25)

2026-09-13 03:50:02 -04:00

connections.py

feat(connections): add provider SDK contract

2026-08-28 00:48:36 -04:00

container_status.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

contracts.py

feat(api): add typed endpoint contracts and envelopes

2026-08-18 02:47:57 -04:00

cron.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

dashboards.py

feat(dashboard): boards that survive the browser they were built in

2026-07-25 19:30:51 -04:00

database_engines.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

databases.py

Show top queries and hit ratios per database

2026-09-27 21:30:07 -04:00

db_tuner.py

refactor(crypto): EncryptedSecret adoption sweep + service-level crypto ratchet (plan 77 C1)

2026-08-19 01:49:42 -04:00

ddns.py

refactor(ddns): typed errors replace the token-prose sniff

2026-08-18 23:55:17 -04:00

deploy.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

deployment_jobs.py

feat(deploy-console): parameterised repo simulated deployment

2026-09-04 21:12:18 -04:00

deployments.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

dns_cutover.py

refactor(auth): one mid-route admin gate instead of three contracts

2026-08-18 18:22:01 -04:00

dns_providers.py

fix(dns): move DNS provider routes back to core

2026-07-03 23:18:08 -04:00

dns_zones.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

docker.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

docs.py

Add API keys, analytics, webhooks, and middleware

2026-03-04 01:53:46 -05:00

doctor.py

feat(operations): adopt core run workflows

2026-08-21 10:40:42 -04:00

domains.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

env_vars.py

fix(env-vars): let an explicit null clear a variable's description

2026-08-25 09:14:29 -04:00

environments.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

error_logs.py

refactor(list-queries): one PageQuery door for the page/per_page dialect (C3)

2026-08-19 00:10:09 -04:00

event_subscriptions.py

refactor(webhooks): move subscription use cases behind service boundary

2026-08-18 02:56:33 -04:00

files.py

refactor(files): file manager onto the typed-error contract (C reference)

2026-08-18 23:49:09 -04:00

firewall.py

feat(firewall): guard self-block and default-zone lockouts

2026-08-17 19:28:24 -04:00

fleet_doctor.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

fleet_monitor.py

Let an installed Prometheus scrape the panel

2026-09-27 21:42:18 -04:00

fleet.py

Add agent capability probing and reporting

2026-05-01 00:37:48 -04:00

git.py

Deploy compose apps through A/B slots

2026-09-28 22:26:44 -04:00

htaccess_tools.py

feat(hosting): .htaccess to nginx converter

2026-07-03 15:22:05 -04:00

image_updates.py

refactor(image-updates): typed errors replace the not-found prose sniff

2026-08-18 23:52:40 -04:00

invitations.py

test(api): ratchet controller boundary debt

2026-08-18 03:11:37 -04:00

jobs.py

feat(operations): expose authoritative run actions

2026-08-21 10:34:52 -04:00

linked_panel.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

logs.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

managed_db_users.py

feat(databases): managed DB users and one-click Adminer SSO

2026-07-03 14:24:15 -04:00

manifests.py

refactor(auth): one mid-route admin gate instead of three contracts

2026-08-18 18:22:01 -04:00

marketplace.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

metrics.py

fix(dashboard): avoid content blockers on metrics history requests (#133)

2026-09-04 22:20:22 -04:00

migrations.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

mobile.py

fix(metrics): unknown is not zero, and zero is not unknown

2026-08-17 22:40:12 -04:00

modules.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

monitoring.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

monitors.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

nginx_advanced.py

Remove auto-scaling and the load-balancer builder

2026-09-28 09:03:34 -04:00

nginx.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

notifications.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

pairing.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

performance.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

php.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

plugins.py

feat: add declarative walkthrough contribution contract

2026-08-31 23:14:29 -04:00

previews.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

private_urls.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

processes.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

projects.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

proxy.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

python.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

queue_bus.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

recipes.py

fix(recipes): restore CI boundary contracts

2026-08-22 14:49:11 -04:00

recycle_bin.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

registrars.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

responses.py

feat(api): add typed endpoint contracts and envelopes

2026-08-18 02:47:57 -04:00

restore_points.py

fix(restore-points): satisfy jwt-only and seed-factory ratchets

2026-08-25 02:52:59 -04:00

runs.py

fix(sockets): authorize subscriptions and revalidate event delivery

2026-09-05 04:29:44 -04:00

search.py

feat(search): add resource picker contract

2026-08-21 09:20:54 -04:00

secrets_webhooks.py

refactor(secrets): vaults + webhook gateway onto the typed-error contract

2026-08-19 00:00:36 -04:00

security.py

feat(security)!: extract the install-gated security suite to extensions (plan 47 Ph3b-5 / plan 55 Ph3)

2026-08-29 13:53:04 -04:00

server_templates.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

servers.py

refactor: share backend lifecycle and fleet metrics operations

2026-09-05 05:06:41 -04:00

setup_health.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

shared_resources.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

site_imports.py

feat(adoption): DNS cutover+verify, snapshots, SSH import (plan 31)

2026-07-07 20:29:26 -04:00

snapshots.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

source_connections.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

speed_test.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

ssl.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

sso.py

fix(auth): enforce MFA, scoped keys, and revocable sessions

2026-09-05 04:29:16 -04:00

support_bundle.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

survey.py

feat(agent): V2 capability pack — survey/doctor/fleet sweep+repair (plan 28)

2026-07-07 20:29:24 -04:00

system.py

Add a storage overview endpoint

2026-09-27 16:33:53 -04:00

telemetry.py

refactor(list-queries): one PageQuery door for the page/per_page dialect (C3)

2026-08-19 00:10:09 -04:00

templates.py

fix(apps): name-clash errors point at the Recycle Bin for tombstones

2026-08-30 03:20:34 -04:00

test_sandbox.py

Add test sandbox and harden install scripts

2026-07-20 22:26:19 -04:00

themes.py

refactor(themes): registry install raises typed errors

2026-08-18 23:56:15 -04:00

two_factor.py

fix(auth): enforce MFA, scoped keys, and revocable sessions

2026-09-05 04:29:16 -04:00

uptime.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

views.py

refactor(views): saved views onto the typed-error contract

2026-08-18 23:51:34 -04:00

waf.py

refactor(auth): one mid-route admin gate instead of three contracts

2026-08-18 18:22:01 -04:00

walkthroughs.py

feat: add declarative walkthrough contribution contract

2026-08-31 23:14:29 -04:00

webhooks.py

fix(webhooks): record the crash the PR-webhook 200 was hiding

2026-08-19 00:05:33 -04:00

workspaces.py

fix(models): close all 26 dangling-on-delete FKs + orphan sweep migration

2026-08-31 20:25:29 -04:00