Juan Denis 7c6b0f3958 security: hook seam lifecycle + registrant binding ...

Audit remediation (extension seams):
- disable/uninstall tear down the extension's backup kinds, event
  types, and template providers (unregister_capabilities by slug);
  enable re-registers (idempotent)
- wordpress_bridge fails closed unless the extension row is ACTIVE;
  orphaned-site db snapshot route returns clean 503
- provider registrations bound to their registrant: cross-slug
  replace/hijack rejected for backup kinds, event types, template
  providers

2026-08-05 13:36:33 -04:00

..

__init__.py

Initial project structure and core API implementation

2026-01-17 04:22:12 -05:00

admin.py

feat(settings): manage the base-domain registry from Settings → Site

2026-07-01 00:27:30 -04:00

advanced_ssl.py

Add advanced SSL: wildcard, SAN, custom certs, health checks

2026-03-23 02:15:16 -04:00

agent_plugins.py

Add agent plugin system with full lifecycle management

2026-03-23 02:08:00 -04:00

agent_poll.py

Add review rules and proxy/auth docs

2026-07-18 01:23:47 -04:00

ai.py

feat(ai): add core AI assistant primitive powered by Prompture

2026-06-01 02:39:05 -04:00

api_analytics.py

Add Services UI and service-detail pages

2026-03-07 12:15:02 -05:00

api_keys.py

feat: Phase 1 foundation — status aggregator, API scopes, onboarding, template magic vars

2026-06-23 18:23:47 -04:00

app_volumes.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

apps.py

security: hook seam lifecycle + registrant binding

2026-08-05 13:36:33 -04:00

auth.py

feat(auth): per-IP login brute-force throttle

2026-07-18 00:59:19 -04:00

backups.py

feat(backups): dynamic target-provider registry

2026-08-05 01:18:11 -04:00

bandwidth.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

buildpacks.py

feat: Phase 2 developer experience — build packs, config snapshots, catalog certification

2026-06-23 18:49:04 -04:00

builds.py

feat(deploy): every deploy is a job — async deploy_app, retry endpoint, plan-in-GET

2026-07-22 16:37:08 -04:00

connections.py

feat(connections): authenticate private container registry pulls

2026-07-01 01:35:44 -04:00

container_status.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

cron.py

Add review rules and proxy/auth docs

2026-07-18 01:23:47 -04:00

dashboards.py

feat(dashboard): boards that survive the browser they were built in

2026-07-25 19:30:51 -04:00

database_engines.py

fix(databases): scope the extension listing to apps the caller can see

2026-07-26 00:19:46 -04:00

databases.py

fix(api): close IDOR/authz gaps across deployment jobs, vaults, queues, docker, databases

2026-08-04 08:53:27 -04:00

db_tuner.py

feat(databases): curated engine config tuner

2026-07-03 14:24:03 -04:00

ddns.py

feat(security): trust reverse-proxy client IP via one gated seam

2026-07-18 00:51:21 -04:00

deploy.py

fix(git): enforce app-level authorization on deployment read endpoints

2026-08-03 23:44:56 -04:00

deployment_jobs.py

fix(api): close IDOR/authz gaps across deployment jobs, vaults, queues, docker, databases

2026-08-04 08:53:27 -04:00

deployments.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

dns_cutover.py

fix(dns-cutover): restore snapshot() staging + provider-named 501 (plan 42 D7/ph5)

2026-07-09 04:50:16 -04:00

dns_providers.py

fix(dns): move DNS provider routes back to core

2026-07-03 23:18:08 -04:00

dns_zones.py

feat(domains): unify domains & DNS into one surface + admin-only Connections

2026-06-23 00:34:55 -04:00

docker.py

fix(api): close IDOR/authz gaps across deployment jobs, vaults, queues, docker, databases

2026-08-04 08:53:27 -04:00

docs.py

Add API keys, analytics, webhooks, and middleware

2026-03-04 01:53:46 -05:00

doctor.py

feat(ops): config drift detection, per-resource repair and doctor sweep

2026-07-03 15:21:09 -04:00

domains.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

env_vars.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

environments.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

event_subscriptions.py

Add API keys, analytics, webhooks, and middleware

2026-03-04 01:53:46 -05:00

files.py

fix(security): enforce files.read on reads; de-shell syslog unit filter

2026-07-26 15:40:14 -04:00

firewall.py

feat(security): cloud-metadata egress guard for app containers

2026-07-03 14:23:11 -04:00

fleet_monitor.py

Add auth checks, logging, DNS API & UI

2026-03-24 06:10:58 -04:00

fleet.py

Add agent capability probing and reporting

2026-05-01 00:37:48 -04:00

git.py

fix(git): enforce app-level authorization on deployment read endpoints

2026-08-03 23:44:56 -04:00

htaccess_tools.py

feat(hosting): .htaccess to nginx converter

2026-07-03 15:22:05 -04:00

image_updates.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

invitations.py

Add invitations, email models, admin APIs

2026-03-04 02:34:49 -05:00

jobs.py

feat(jobs): host-idiom Jobs page + server-side search/paging + job retention

2026-07-08 23:01:12 -04:00

linked_panel.py

feat(servers): ServerKit-to-ServerKit peering — embedded agent mode

2026-07-22 00:35:33 -04:00

logs.py

refactor(backend): extract reusable format_bytes, admin_required, and validate_app_name

2026-06-21 02:11:47 -04:00

managed_db_users.py

feat(databases): managed DB users and one-click Adminer SSO

2026-07-03 14:24:15 -04:00

manifests.py

feat(manifest): finish appliance volumes + one-shot bootstrap (plan 35 ph2)

2026-07-09 03:05:08 -04:00

marketplace.py

security: signature lifecycle, update-path consent gates, download hardening

2026-08-05 13:36:20 -04:00

metrics.py

Replace jwt_required with RBAC, use socket auth

2026-02-08 23:14:13 -05:00

migrations.py

Add SSO/OAuth and DB migration framework

2026-03-04 01:37:22 -05:00

mobile.py

Add auth checks, logging, DNS API & UI

2026-03-24 06:10:58 -04:00

modules.py

feat(extensions): Phase 1 — seed marketplace (GPU + Workflow), module toggles

2026-07-01 21:34:54 -04:00

monitoring.py

refactor(backend): extract reusable format_bytes, admin_required, and validate_app_name

2026-06-21 02:11:47 -04:00

monitors.py

fix(monitoring): give the TLS certificate read its own clock

2026-07-28 00:22:56 -04:00

nginx_advanced.py

Add Nginx advanced config: reverse proxy, load balancing, caching

2026-03-23 02:19:33 -04:00

nginx.py

refactor(backend): extract reusable format_bytes, admin_required, and validate_app_name

2026-06-21 02:11:47 -04:00

notifications.py

feat(notifications): restore email-bounce webhook slice (plan 42 ph3)

2026-07-09 04:55:53 -04:00

pairing.py

Add review rules and proxy/auth docs

2026-07-18 01:23:47 -04:00

performance.py

feat(jobs): unified background-job orchestration on the Queue Bus

2026-06-21 20:44:12 -04:00

php.py

refactor(backend): extract reusable format_bytes, admin_required, and validate_app_name

2026-06-21 02:11:47 -04:00

plugins.py

security: signature lifecycle, update-path consent gates, download hardening

2026-08-05 13:36:20 -04:00

previews.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

private_urls.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

processes.py

refactor(backend): extract reusable format_bytes, admin_required, and validate_app_name

2026-06-21 02:11:47 -04:00

projects.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

proxy.py

feat: make the ingress-plane boundary explicit (host Nginx vs proxy stack)

2026-06-23 20:57:40 -04:00

python.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

queue_bus.py

fix(api): close IDOR/authz gaps across deployment jobs, vaults, queues, docker, databases

2026-08-04 08:53:27 -04:00

registrars.py

Add registrars, GitLab, DO/Godaddy DNS and SMTP relay

2026-06-15 09:19:56 -04:00

search.py

feat(search): unified entity omnisearch endpoint for the palette

2026-07-11 00:26:40 -04:00

secrets_webhooks.py

fix(api): close IDOR/authz gaps across deployment jobs, vaults, queues, docker, databases

2026-08-04 08:53:27 -04:00

security.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

server_templates.py

Add server templates with config drift detection and compliance

2026-03-23 02:11:16 -04:00

servers.py

fix(recovery): restore agent scopes, DNS preflight, catalog events, thread guards

2026-07-08 02:06:01 -04:00

setup_health.py

feat(onboarding): setup health, preflight + reconcile (plan 22)

2026-07-07 20:29:23 -04:00

shared_resources.py

fix(api): close IDOR/authz gaps across deployment jobs, vaults, queues, docker, databases

2026-08-04 08:53:27 -04:00

site_imports.py

feat(adoption): DNS cutover+verify, snapshots, SSH import (plan 31)

2026-07-07 20:29:26 -04:00

snapshots.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

source_connections.py

feat(connections): one-click GitHub setup via the GitHub App manifest flow

2026-07-10 23:06:09 -04:00

speed_test.py

feat(monitoring): on-demand server speed test card

2026-07-03 14:23:29 -04:00

ssl.py

refactor(backend): extract reusable format_bytes, admin_required, and validate_app_name

2026-06-21 02:11:47 -04:00

sso.py

Add audit fallback, builtin extensions, and ports

2026-05-03 15:57:02 -04:00

support_bundle.py

feat(cli): API-backed operator verbs and diagnostic support bundle

2026-07-03 15:21:22 -04:00

survey.py

feat(agent): V2 capability pack — survey/doctor/fleet sweep+repair (plan 28)

2026-07-07 20:29:24 -04:00

system.py

feat(setup): capacity-aware install profiles and resource advisory

2026-07-31 14:56:37 -04:00

telemetry.py

feat(telemetry): unified system event stream with correlation

2026-06-21 20:19:57 -04:00

templates.py

feat(databases): engine extensions, without the silent failure

2026-07-25 23:44:34 -04:00

test_sandbox.py

Add test sandbox and harden install scripts

2026-07-20 22:26:19 -04:00

themes.py

feat(themes): backend model, API, and registry pipeline (plan 60 Phase 2-3)

2026-07-23 00:24:00 -04:00

two_factor.py

feat(auth): per-IP login brute-force throttle

2026-07-18 00:59:19 -04:00

uptime.py

Add server uptime tracking and visualization

2026-01-17 13:37:40 -05:00

waf.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

webhooks.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

workspaces.py

feat(workspace): scoping audit + per-scope matrix (plan 19)

2026-07-07 20:29:22 -04:00