Commit Graph

  • 7f5210f2a3 Give ADR-020 the docmeta block every page carries gh-wj cproudlock 2026-09-20 15:15:52 -04:00
  • 0ded9207ab Give ADR-020 the docmeta block every page carries gh-main cproudlock 2026-09-20 15:15:52 -04:00
  • 77eb594268 Make the server authoritative for what endpoints watch and launch wilm benjamin.baker 2026-09-20 15:04:29 -04:00
  • 21e658ce5f Remove the Swagger try-it page cproudlock 2026-09-20 14:57:37 -04:00
  • 581baafee0 Remove the Swagger try-it page cproudlock 2026-09-20 14:57:37 -04:00
  • 316e79db53 Correct the CI claims and the agent tooling's honesty about itself cproudlock 2026-09-20 14:49:30 -04:00
  • a97346ed81 Correct the CI claims and the agent tooling's honesty about itself cproudlock 2026-09-20 14:49:30 -04:00
  • 5bd9af2163 Regenerate the API contract for this site's route set cproudlock 2026-09-20 14:26:10 -04:00
  • 1e42356aca Make the API usable by an agent, and stop the contract going stale cproudlock 2026-09-20 12:59:49 -04:00
  • 790ed4ec66 Separate shipped policies from site policies in the list benjamin.baker 2026-09-20 13:23:23 -04:00
  • 3c91e7c314 Resolve Git Bash explicitly, and skip on a missing privilege or tool benjamin.baker 2026-09-20 13:23:11 -04:00
  • 0288587522 Check the installed packages against the lockfiles benjamin.baker 2026-09-20 13:22:55 -04:00
  • 762d1b7210 Make the API usable by an agent, and stop the contract going stale cproudlock 2026-09-20 12:59:49 -04:00
  • 39aaa5d0cb Ship the API docs the container never had, and theme them like the product cproudlock 2026-09-20 09:06:59 -04:00
  • be78e45320 Rework the first-run setup wizard around what a site cannot run without cproudlock 2026-09-20 09:06:29 -04:00
  • 9b7da9f2d2 Make a plugin toggle take effect without a manual restart cproudlock 2026-09-20 09:06:03 -04:00
  • 6c00b10618 Ship the API docs the container never had, and theme them like the product cproudlock 2026-09-20 09:06:59 -04:00
  • 32d3f4b29d Rework the first-run setup wizard around what a site cannot run without cproudlock 2026-09-20 09:06:29 -04:00
  • 9d6342b3ab Make a plugin toggle take effect without a manual restart cproudlock 2026-09-20 09:06:03 -04:00
  • 0eed80f3b9 Create endpointlogcollections in the chain that owns it cproudlock 2026-09-19 17:42:04 -04:00
  • e685852c2e Create endpointlogcollections in the chain that owns it cproudlock 2026-09-19 17:42:04 -04:00
  • 8d6e5db347 Merge remote-tracking branch 'origin/wj' into wilm benjamin.baker 2026-09-19 14:40:46 -04:00
  • 32f4ccdd48 Bound the Dell warranty sync per run benjamin.baker 2026-09-19 14:21:41 -04:00
  • bd6e736798 Say on the front page that a site runs containers cproudlock 2026-09-19 12:41:52 -04:00
  • b108b985ea Let the API docs follow the system theme cproudlock 2026-09-19 12:36:16 -04:00
  • be1eb9b366 Let the API docs follow the system theme cproudlock 2026-09-19 12:36:15 -04:00
  • c4d8542888 Serve a spec that knows where the instance is mounted cproudlock 2026-09-19 12:30:47 -04:00
  • 76f085e224 Serve a spec that knows where the instance is mounted cproudlock 2026-09-19 12:30:46 -04:00
  • 70f10c6fa0 Stop the README offering a feature this image cannot provide cproudlock 2026-09-19 12:20:47 -04:00
  • bf6b353b52 Put the security scanners back on the default branch cproudlock 2026-09-19 12:13:06 -04:00
  • ecdbe53ef6 Merge GitHub main into the lean product branch cproudlock 2026-09-19 11:41:48 -04:00
  • 534f179ee6 Make main the lean product a site receives cproudlock 2026-09-19 11:24:40 -04:00
  • f9d6b57f0f Move the documentation to the line that ships, and correct it against the code cproudlock 2026-09-19 09:10:15 -04:00
  • 530f6a60f8 Release the database connection across Dell warranty lookups benjamin.baker 2026-09-19 08:54:59 -04:00
  • 68567d9a27 Add a try-it API page, and stop the docs page reaching for the internet cproudlock 2026-09-18 20:18:23 -04:00
  • 5aa748cab5 Publish examples and query parameters, and stop the harvest leaking secrets cproudlock 2026-09-18 20:18:06 -04:00
  • e00d86827b Merge remote-tracking branch 'origin/wj' into wilm benjamin.baker 2026-09-18 17:25:24 -04:00
  • 2ff7b7e906 Let Corporate Tools push the Report IP tool without granting script run benjamin.baker 2026-09-16 18:25:48 -04:00
  • f16b463736 Stop a settings test depending on which tests ran before it cproudlock 2026-09-18 13:58:43 -04:00
  • 69a7997dc4 Build the plugin set a real site runs, and write down what shipped cproudlock 2026-09-18 13:31:25 -04:00
  • 8fc6df8f0a Describe the API this branch actually serves cproudlock 2026-09-18 13:31:11 -04:00
  • 85f69038d8 Check the things the gates were reporting green without checking cproudlock 2026-09-18 13:30:58 -04:00
  • 2f98188feb Let a site close the legacy collector routes, once it can afford to cproudlock 2026-09-18 13:30:40 -04:00
  • 7ac1ee3077 Refuse a kiosk caller wearing an address that belongs to the path cproudlock 2026-09-18 13:30:24 -04:00
  • 987f5c0d0f Stop the one-line install handing a standard user a way in cproudlock 2026-09-18 13:30:08 -04:00
  • 3f80425f30 Make an admin's refusal stick, and let a revoke actually deny cproudlock 2026-09-18 13:29:51 -04:00
  • fe4f44f855 Lock the shared fleet key away from the people standing at the bay cproudlock 2026-09-18 13:29:36 -04:00
  • 35d4fcd41c Report whether a returned drive was wiped and scanned cproudlock 2026-09-16 15:41:13 -04:00
  • 0f56653345 Say when a kiosk screen is not set up, and hand out the setup link cproudlock 2026-09-16 15:26:44 -04:00
  • da91a29155 Admit kiosk callers by network position, not only by device token cproudlock 2026-09-16 14:33:22 -04:00
  • 158ee0507e Move the agent and tray to 1.20.1 and 1.7.1 cproudlock 2026-09-16 10:10:29 -04:00
  • 1a6ac67cab Say what a plugin settings tab can actually do, and catch a declaration that cannot work cproudlock 2026-09-16 09:57:51 -04:00
  • 066a19052b Act on the wj architectural review: races, limits, pool and contract gaps cproudlock 2026-09-16 08:57:04 -04:00
  • 2557d1967d Make the one-line install survive Defender, and approval leave a PC that works cproudlock 2026-09-15 20:46:04 -04:00
  • ca57b7f728 Install an agent on a one-off PC from a single command cproudlock 2026-09-15 19:33:00 -04:00
  • 408cf08628 Stop the USB settings page from replacing the kiosk token with "true" cproudlock 2026-09-15 16:02:51 -04:00
  • 3d9fe793b2 Keep every server pin in the upgrade script, and stop promising enrollment to an enrolled PC cproudlock 2026-09-15 15:52:54 -04:00
  • 8f10c09a76 Always pin the server, let the registry own pins, and survive a revoke mid-upgrade cproudlock 2026-09-15 15:22:25 -04:00
  • 1c2ba677c3 Let key-less PCs ask to enroll, and let an admin retry a trust-blocked PC cproudlock 2026-09-15 15:01:57 -04:00
  • 22d06abb70 Show per-PC credentials across the admin interface cproudlock 2026-09-15 14:09:08 -04:00
  • 70d5531b4d Make rollback, first upgrades and pin changes work as tested on Windows cproudlock 2026-09-15 13:37:37 -04:00
  • 8eee6f19d8 Move the security audit and scan reports out of the product tree cproudlock 2026-09-15 12:25:39 -04:00
  • 1164cfb287 Add the enrollment page, move scripts to per-PC credentials, and document the rollout cproudlock 2026-09-15 12:04:12 -04:00
  • 35c17d2ea2 Authenticate the agent with its own credential, pin the server, and take secrets out of the tray cproudlock 2026-09-15 12:04:03 -04:00
  • 7480e4fe3a Give each endpoint its own credential and fix the review findings on the server cproudlock 2026-09-15 12:03:53 -04:00
  • f484be8a33 Make fleet alerts readable, deliberate to acknowledge and remembered cproudlock 2026-09-15 11:28:52 -04:00
  • 1cf30843f3 Harden the agent's command execution and restore server certificate checks cproudlock 2026-09-15 11:28:52 -04:00
  • 1ed0c4d215 HOTFIX: Remove hot-path logging and unnecessary flush from collector Proudlock 2026-09-15 10:29:10 -04:00
  • affe455c55 HOTFIX: Remove row-level locks from collector check-in path Proudlock 2026-09-15 10:12:30 -04:00
  • 5cd5332397 Add agent fingerprinting, client certificate auth, and security audit documentation Proudlock 2026-09-15 09:18:12 -04:00
  • 1a7bb9bd34 Fix code block still showing white text in dark mode (!important) Proudlock 2026-09-14 15:48:52 -04:00
  • 812d1ee4d1 Fix dark mode color contrast on server cert settings page Proudlock 2026-09-14 15:47:59 -04:00
  • b7e454b5ef Fix blank screen on server cert settings page (missing authentication) Proudlock 2026-09-14 15:43:44 -04:00
  • 87582d0851 Fix endpoints plugin load failure (audit_log decorator incorrect usage) Proudlock 2026-09-14 15:36:48 -04:00
  • 967589e585 Fix agent build errors for .NET 8 (File.GetAccessControl moved to FileInfo) Proudlock 2026-09-14 15:31:11 -04:00
  • ca90969eb4 Fix fleet alerts sent immediately instead of respecting scheduled starttime Proudlock 2026-09-14 15:21:51 -04:00
  • d11ba5c5d6 Add server certificate management UI (Settings > Endpoints > Server Certificate) Proudlock 2026-09-14 15:07:54 -04:00
  • fd6240772e Add server certificate management documentation and regeneration scripts Proudlock 2026-09-14 14:47:37 -04:00
  • bb301c6d84 Add periodic certificate expiry monitoring for long-running agents Proudlock 2026-09-14 14:33:36 -04:00
  • 8d87921dee Fix syntax error in certificate renewal endpoint Proudlock 2026-09-14 14:20:36 -04:00
  • 702eeb3e52 Fix CRITICAL and HIGH security vulnerabilities in certificate renewal Proudlock 2026-09-14 14:18:35 -04:00
  • 65f26b1576 Implement automatic certificate renewal (Option 2 - agent self-renewal) Proudlock 2026-09-14 14:07:27 -04:00
  • 18e5fdc000 Fix critical security vulnerabilities in client certificate authentication Proudlock 2026-09-14 13:58:02 -04:00
  • d5d2cea3e4 Fix frequent re-login issue caused by stale JWT tokens Proudlock 2026-09-12 11:30:17 -04:00
  • 64ab1c5299 Add Code 39 barcode format to barcode generator tool Proudlock 2026-09-12 10:29:13 -04:00
  • 2ac2e6d33d Fix plugin contract violation and installer defaults mismatch Proudlock 2026-09-11 17:28:29 -04:00
  • f1ff46e764 Fix plugin settings route endpoint and enable parallel test execution Proudlock 2026-09-11 17:22:18 -04:00
  • a186ba1136 Add plugins.get_plugin_settings_routes to PUBLIC_ENDPOINTS Proudlock 2026-09-11 17:06:59 -04:00
  • 3d041da233 Add wiki page drafts for Q3 2026 work Proudlock 2026-09-11 17:04:39 -04:00
  • d59d0c3194 Add /api/plugins/settings-routes to OpenAPI spec Proudlock 2026-09-11 16:56:28 -04:00
  • fe09d2745e Implement plugin dynamic settings routes architecture Proudlock 2026-09-11 16:49:10 -04:00
  • 4943e182c3 Optimize check-naming-and-style.sh for 5x faster execution Proudlock 2026-09-11 16:47:13 -04:00
  • a03fd3de4f Fix CI failures: remove unicode and fix lean build Proudlock 2026-09-11 16:42:19 -04:00
  • 1e8c6a513a Remove .claude personal config from repository and add to gitignore Proudlock 2026-09-11 16:32:11 -04:00
  • ce27cb5eef Add 9 comprehensive automation skills and enforce tool usage Proudlock 2026-09-11 16:19:21 -04:00
  • bd48814021 Reorganize repository structure and clean up documentation Proudlock 2026-09-11 15:45:05 -04:00
  • 0b252db7d2 Apply migrate service pattern to docker-compose.prebuilt.yml Proudlock 2026-09-11 12:43:02 -04:00
  • c750b2ddc6 Merge remote-tracking branch 'origin/wilm' into wj Proudlock 2026-09-11 12:30:51 -04:00
  • c5b60024ed Add timezone localization support to endpoints plugin Proudlock 2026-09-11 12:22:31 -04:00
  • fb34b24d1c Fix fleet alert acknowledgements path to use ProgramData/ShopDB Proudlock 2026-09-11 11:20:15 -04:00