Commit Graph
67 Commits
Author SHA1 Message Date
chick 961eb928c4 feat(api): add device identity guard and Prometheus metrics
- Persist device identity observations and expose fleet identity summaries.

- Block device control actions when identity verification fails.

- Add metrics collection and a Prometheus scrape endpoint.
2026-09-07 00:44:51 +08:00
chick 8406f14469 feat(contracts,automation): add multi-group scopes, SMS macros and operator registry
- Allow scheduled operations to resolve multiple device groups.

- Add reusable SMS time and random-value macros.

- Add China operator PLMN metadata shared by API and UI.
2026-09-07 00:44:33 +08:00
chick 8b7df8cb65 fix(instances): release the hub binding before forgetting a node
Deletion now follows the published contract: prepare returns the one-time
token and the console spends it on DELETE /api/v1/instances/:id with
If-Match, where the generic execute endpoint had been rejecting it as an
operation the safe transport cannot replay.

An online device is told to release its own binding first. A refusal keeps
the record and reports UNBIND_FAILED on the job item so the console can say
why the node is still there; a node that never answers a heartbeat is
forgotten locally.
2026-09-05 19:52:27 +08:00
chick a75badeb58 feat(web): rebuild the console around the fused control plane
Render the Hub feature set in the existing Animal Island styling: fleet
messages, notification centre, log centre, organisation panel, per-instance
device module panels and the settings backup, connection and maintenance
surfaces.
2026-09-05 18:53:04 +08:00
chick f9186bd851 feat(api): absorb the Hub control plane into the local instance model
Add central notification channels, rules, queue and delivery logs, fleet
organization groups and tags, device discovery, the device action catalog,
instance module reads, the log centre, connection settings and system
maintenance as native /api/v1 routes backed by the existing secret store,
audit trail and pinned upstream transport.
2026-09-05 18:53:04 +08:00
Codex 9bc0f27f12 fix: canonicalize browser navigation after commit 2026-07-30 22:35:37 +08:00
Codex 95abd09c39 style: format navigation tests 2026-07-30 22:21:29 +08:00
Codex 25502a52bb fix: flush proxied event stream headers 2026-07-30 22:11:48 +08:00
Codex 144e17c220 feat: navigate workspaces without page reloads 2026-07-30 22:10:59 +08:00
Codex 3a6652be0f fix: simplify top-level settings 2026-07-30 22:08:34 +08:00
Codex d60cff1dd8 feat(web): protect phone data and polish release UI 2026-07-30 20:16:50 +08:00
Codex 570edf6bb2 feat: rebuild warm operations workbench 2026-07-30 14:49:33 +08:00
chick bbd94b5672 feat(ui): simplify fleet cards by moving edit/delete into detail
Hide instance IDs and config/delete controls on overview cards; keep
service/system restart only, with edit still available from detail.
2026-07-22 00:20:32 +08:00
chick 3c7018a792 feat(ui): refine fleet search/filter toolbar with status chips
Adopt Portainer/Beszel-style fleet controls: prominent search, status
facet chips with counts, active filter chips, result count, and
primary-row sort/select. Keep advanced filters collapsed for secondary
facets. Tests and production dist rebuild for gateway 8788.
2026-07-21 23:31:08 +08:00
chick 7d0363d275 feat(ui): topbar settings, hide dev badge, premium fleet cards
Collapse the redundant left workspace nav (overview is already the home
surface) and move Settings into the top bar. Hide placeholder `dev`
version badges. Restyle fleet cards with softer elevation, status
summary chips, hover sheen, and reduced-motion-safe entrance motion.
2026-07-21 23:14:37 +08:00
chick 9ea8021cce feat(fleet): card-only UI with progressive load and restart ops
Drop the redundant advanced table so fleet stays resource-first cards.
Keep multi-select batch service/system restart via prepare→execute, card
restarts, overview system ops, and progressive fleet loading.
2026-07-21 22:56:55 +08:00
chick ebed4c1969 feat(auth): allow trusted remote bootstrap and add installer 2026-07-19 21:10:16 +08:00
chick 49ee4e6570 feat(web): redesign fleet cards and instance workspace 2026-07-19 18:54:26 +08:00
chick f2803896a8 feat(auth): protect aggregate console with password login 2026-07-19 17:13:43 +08:00
chick 75682b8134 feat(web): make instance detail the operations workbench 2026-07-19 14:05:06 +08:00
chick f7d69a0fa7 feat(web): prioritize SMS operations workspace 2026-07-19 10:30:52 +08:00
chick 0112e3320a feat(sms): add real instance message workflow 2026-07-19 02:12:57 +08:00
chick 38a26c2ce1 fix(transport): allow passwordless resource reads 2026-07-19 00:56:03 +08:00
chick 4e7bdea230 fix(resources): probe passwordless instances 2026-07-19 00:51:55 +08:00
chick 23f18963ef feat(fleet): show instance resource metrics 2026-07-19 00:22:23 +08:00
chick 2411801240 feat(web): make instance overview card-first 2026-07-18 23:23:41 +08:00
chick abfd07f8a3 feat(web): localize and redesign operations console 2026-07-18 22:22:41 +08:00
chick d575ab4d9d feat(gateway): allow secured LAN console access 2026-07-18 19:47:23 +08:00
chick e390069edb fix(cutover): use direct detached spawn 2026-07-18 18:36:26 +08:00
chick 0b775b29bc fix(cutover): terminate detached launcher parent 2026-07-18 18:32:42 +08:00
chick d323370a75 fix(cutover): close identity binding races 2026-07-18 18:13:53 +08:00
chick 63d167d720 fix(cutover): persist rollback completion state 2026-07-18 18:02:59 +08:00
chick bd8a3fed5b fix(cutover): detach listener file descriptors 2026-07-18 18:00:21 +08:00
chick 320e65587b fix(cutover): avoid detached child stdout inheritance 2026-07-18 17:58:45 +08:00
chick f326da705c fix(cutover): parse detached child pid safely 2026-07-18 17:56:03 +08:00
chick e4e2c32998 fix(cutover): track direct detached listener pid 2026-07-18 17:51:40 +08:00
chick 020879f7e6 fix(cutover): launch gateway without wrapper pid 2026-07-18 17:46:05 +08:00
chick f7d111588b fix(cutover): separate api health from gateway readiness 2026-07-18 17:40:08 +08:00
chick bad00b67e9 fix(cutover): support absolute legacy restart executable 2026-07-18 17:34:09 +08:00
chick 4a7e29cf06 feat(release): add reversible production cutover gates 2026-07-18 17:24:51 +08:00
chick 3718c91706 test(runtime): verify live same-origin canary 2026-07-18 15:45:57 +08:00
chick f89f393485 fix(runtime): make production commands executable 2026-07-18 15:12:48 +08:00
chick ae27b522ab feat(migration): add verified import and rollback workflow 2026-07-18 14:13:11 +08:00
chick 293c015f89 feat(runtime): add production control-plane foundation 2026-07-18 12:43:46 +08:00
chick 9451e1ee42 feat(runtime): add isolated same-origin canary gateway 2026-07-18 04:54:21 +08:00
chick cc8eb0f54b fix(web): contain jobs table on narrow screens 2026-07-18 03:53:25 +08:00
chick a884033352 test(quality): add concurrency and real browser gates 2026-07-18 03:20:42 +08:00
chick 88d41a7a18 feat(web): connect jobs and audit workspaces 2026-07-18 01:42:17 +08:00
chick 53d9229b45 feat(api): add redacted audit read endpoints 2026-07-18 00:44:23 +08:00
chick e45b011bb8 feat(api): add contract-safe jobs read endpoints 2026-07-18 00:23:45 +08:00