75 Commits

Include renames

Author	SHA1	Message	Date
me0nline	8f8a605c98	fix(licensing): support bootstrap and activated JSON .lic imports, lock auto-update when unlicensed, and add upload confirmation warning	2026-10-04 01:06:19 +02:00
me0nline	9b80007a86	fix(packaging): package src module tree into standalone executables and fix ISPP syntax	2026-10-04 00:28:59 +02:00
me0nline	ea2ff1c4a9	feat(ui,docs): add auto_update feature flag integration, UI card, and documentation	2026-10-03 23:11:17 +02:00
me0nline	2ecb356516	fix(updates): skip redownloading cached packages and disable background updater in CI	2026-10-03 21:54:33 +02:00
me0nline	3e7870c278	fix(hub): offload upstream update check to thread executor and increase test timeout	2026-10-03 21:45:46 +02:00
me0nline	e41c304208	Add /api/license/csr endpoint and support master_root_ca in LicenseImportRequest	2026-10-03 20:32:20 +02:00
me0nline	57f3dd896f	Bootstrap sys.path in root proxy files and add PYTHONPATH to CI workflow	2026-10-03 20:26:26 +02:00
me0nline	303744a3f8	Remove licensing repository dependency and standalone submodule proxy from tests and CI	2026-10-03 20:22:07 +02:00
me0nline	d9bc8df002	Update runner Dockerfile, workflows, and resolve CI test dependencies	2026-10-03 20:08:30 +02:00
me0nline	8b12186b43	Implement automated Fleet Hub upstream client package caching and background update distribution	2026-10-02 23:21:11 +02:00
me0nline	df9f5d191b	Organize codebase into hub, clients, and common packages with backward compatibility and comprehensive unit test suites	2026-10-02 23:14:55 +02:00
me0nline	9ebfadbe89	Optimize server startup speed, client update caching, and HTTP 304 conditional downloads	2026-10-02 22:43:18 +02:00
me0nline	fe9d43cab6	Harden endpoint authorization, filename sanitization, and updater imports	2026-10-02 22:31:17 +02:00
me0nline	f0c4a82fc3	Harden PKI license verification, database seat reconciliation, and binary packaging	2026-10-02 22:24:21 +02:00
me0nline	2c08f9fc15	Add server update alerting and fleet client auto-update system (synchronized release lockstep)	2026-10-02 22:08:51 +02:00
me0nline	f2a9e43619	Refactor Server.py into modular domain classes (models, auth, storage, queue, licensing, PKI, UI)	2026-10-02 21:57:29 +02:00
me0nline	909dc640e3	Fix Gitea issues #1 and #2, add firewall automation, forwarder telemetry, and dynamic key rotation	2026-10-02 21:39:51 +02:00
me0nline	2d33b14d60	feat(ui): display licensed feature capabilities in Sub-CA & Licensing tab	2026-09-30 17:48:01 +02:00
me0nline	2b0b680188	fix(security): ensure encryption at rest and buffering are never auto-enabled upon licensing without explicit admin configuration	2026-09-30 17:43:30 +02:00
me0nline	f0bf90e033	fix(config): safe config file path resolution and isolation	2026-09-30 17:39:48 +02:00
me0nline	22072a0b88	feat(ui): remove item counts from dashboard tab text	2026-09-30 17:37:24 +02:00
me0nline	730f0ba7ca	feat(ui,api): clean DB tab header, gray out enterprise features when unlicensed, enforce strict license gating on API	2026-09-30 17:33:50 +02:00
me0nline	b7c27ee3a1	feat(ui): reorder DB Engine tab (cache mode on top, encryption in middle, DB engine switcher below)	2026-09-30 17:28:53 +02:00
me0nline	fa662da476	feat(db): complete SQL management UI, cache modes, PostgreSQL params, and OpenPGP data encryption at rest	2026-09-30 17:17:57 +02:00
me0nline	6cb9631958	fix(ingest): process socket log payloads synchronously and return verified promotion counts to client	2026-09-30 16:56:40 +02:00
me0nline	78e62b31d2	feat(storage): implement in-memory ingestion queue, PostgreSQL enterprise backend, and gated DB WebUI tab	2026-09-30 16:28:48 +02:00
me0nline	2a04244db3	feat(security): implement persistent session secret and DB-backed sliding-window rate limiting	2026-09-30 15:55:17 +02:00
me0nline	a8cd2cd83c	Add TOTP 2FA to Server Fleet Hub and limit verified telemetry stream to latest 50 events	2026-09-27 18:48:40 +02:00
me0nline	a70ce9162d	brand asset library, wiki branding guide, and v0.3.3 release	2026-09-27 17:17:57 +02:00
me0nline	a8d59b2f14	windows installer fixes	2026-09-27 17:00:17 +02:00
me0nline	b79022bc41	windows installer fixes	2026-09-27 16:07:18 +02:00
me0nline	72e3527c79	windows installer fixes	2026-09-27 15:06:32 +02:00
me0nline	4a40b4d395	windows installer fixes	2026-09-27 15:00:26 +02:00
me0nline	399cf469c5	windows installer fixes	2026-09-26 22:30:43 +02:00
me0nline	2e256baf4a	windows installer fixes	2026-09-26 22:00:50 +02:00
me0nline	157229a84e	windows installer fixes	2026-09-26 21:21:36 +02:00
me0nline	8287af3129	windows installer fixes	2026-09-26 21:07:34 +02:00
me0nline	37f959e402	feat(licensing): add WebUI license import modal, remove lic step from setup, default unlicensed to 0 seats	2026-09-26 20:50:57 +02:00
me0nline	b40966ac4c	fix(database, installer): enable WAL mode, grant ProgramData permissions in NSIS, and fallback to LocalAppData when read-only	2026-09-26 20:21:14 +02:00
me0nline	48bb279601	fix(server, client): auto-resolve db, cert, state and config paths to ProgramData when running in read-only directories	2026-09-26 19:56:37 +02:00
me0nline	d025689193	refactor(quality): clean up unused imports, variables, and redundant f-strings	2026-09-26 13:43:01 +02:00
me0nline	93d9f0e463	feat(security): apply html.escape sanitization across WebUI table rendering	2026-09-26 13:00:07 +02:00
me0nline	a34934959d	fix(warnings): align OpenPGP compression preferences and suppress cryptography deprecations in CI	2026-09-25 23:54:28 +02:00
me0nline	e04082d4b8	feat(security): implement IP rate limiting and secure session cookies on Hub	2026-09-25 23:50:15 +02:00
me0nline	ad022cc447	sec: enforce admin authorization across all management endpoints and randomize session secret	2026-09-25 23:39:37 +02:00
me0nline	668f6e66cd	chore(release): bump version to v3.0.0 and prepare unified release	2026-09-25 23:05:54 +02:00
me0nline	6ac2c89aac	Sync active seat usage with upstream authority and streamline WebUI dashboard	2026-09-25 23:02:14 +02:00
me0nline	4396052ed3	feat(licensing): report active seat quota and usage to upstream license authority	2026-09-25 22:53:26 +02:00
me0nline	c2fed0379c	feat(webui): streamline hub UI by removing CSR/lic export/import options and license management header title	2026-09-25 22:47:35 +02:00
me0nline	e01421ea8c	fix(client): resolve hermes_host 0.0.0.0 bind addresses to dialable server host during auto-enrollment	2026-09-25 22:44:20 +02:00