This website requires JavaScript.
f8f384f8d8
spec: add SPEC-019 private Backstage session (GUI private desktop for interactive uninstall)
feat/spec-019-backstage-uninstall
Howard Enos
2026-06-22 16:05:43 -07:00
ded99c5882
docs(review): three-way (Claude+Gemini+Grok) codebase review + remediation plan
main
Mike Swanson
2026-06-05 17:20:30 -07:00
72835fa1b5
Merge pull request 'SPEC-018 review fixes: agent_id persistence, managed fallback, HKEY typing' (#9 ) from fix/spec018-review-bugs into main
azcomputerguru
2026-06-03 16:30:25 -07:00
9eaabdd6a5
fix(agent): SPEC-018 review fixes — agent_id persistence, managed fallback, HKEY typing
fix/spec018-review-bugs
Mike Swanson
2026-06-03 16:27:27 -07:00
11af9dff8e
Merge pull request 'SPEC-018 Phase 1: managed agent as LocalSystem service host' (#7 ) from feat/spec-018-service-host into main
azcomputerguru
2026-06-02 14:25:06 -07:00
a0e0d5f1e7
fix(agent): SPEC-018 Phase 1 review fixes (cancellable session loop, panic guard, service-create retry)
Mike Swanson
2026-06-02 13:57:41 -07:00
7602b4346a
feat(agent): SPEC-018 Phase 1 managed-agent SYSTEM service host
Mike Swanson
2026-06-02 13:43:01 -07:00
55b9c97b28
fix(agent): point Phase B fail-fast guard at SPEC-018
Mike Swanson
2026-06-02 13:13:13 -07:00
94c07c2431
spec: add SPEC-018 managed-agent SYSTEM service host + session broker
Mike Swanson
2026-06-02 13:13:04 -07:00
4c49b73a71
spec: add SPEC-017 end-user (sub-user) remote access
Mike Swanson
2026-06-02 12:56:15 -07:00
367906bd54
fix(agent): SPEC-016 Phase B review fixes (re-image-stable machine_uid, ACL TOCTOU, load_cak error classes, PS timeout, fail-fast guard)
Mike Swanson
2026-06-02 12:54:18 -07:00
52477e4c4a
feat(agent): first-run enrollment client + run-mode wiring (SPEC-016 Phase B items 3,5)
Mike Swanson
2026-06-02 11:44:40 -07:00
87c6e17d4a
feat(agent): cak_ at-rest credential store (SPEC-016 Phase B item 4)
Mike Swanson
2026-06-02 11:44:23 -07:00
6a000d012f
feat(agent): extend config contract for enrollment (SPEC-016 Phase B item 2)
Mike Swanson
2026-06-02 11:44:09 -07:00
d0b8db070f
feat(agent): hardware-salt machine_uid (SPEC-016 Phase B item 1)
Mike Swanson
2026-06-02 11:43:56 -07:00
89c3718266
Merge pull request 'SPEC-016 Phase A: zero-touch enrollment backend + migration' (#5 ) from feat/spec-016-enrollment into main
azcomputerguru
2026-06-02 11:19:37 -07:00
4106fc4bc4
style(enroll): cargo fmt --all (satisfy CI fmt gate)
Mike Swanson
2026-06-02 10:48:51 -07:00
0f02f23765
fix(enroll): SPEC-016 Phase A review fixes (cross-site guard, timing oracle, TOCTOU)
Mike Swanson
2026-06-02 10:28:31 -07:00
59e40c8019
feat(enroll): SPEC-016 Phase A — enrollment backend + migration
Mike Swanson
2026-06-02 10:12:10 -07:00
c286a29b9d
spec: SPEC-016 resolve all 5 open questions (enrollment design decisions)
Mike Swanson
2026-06-02 09:54:19 -07:00
18429f6fe3
spec: add SPEC-016 zero-touch per-site agent enrollment
Mike Swanson
2026-06-02 09:13:59 -07:00
3b9e4068c9
docs(roadmap): mark release signing shipped; add signed beta channel as P1-NOW
Mike Swanson
2026-06-02 07:57:04 -07:00
87f229509b
ci(release): add signed beta/test release channel
Mike Swanson
2026-06-02 07:56:17 -07:00
40c7d860cc
spec(v2-session-core): add Task 9 — cak_ auto-enroll provisioning (TOFU) + shared-key retirement
Mike Swanson
2026-06-01 14:40:14 -07:00
0059b21db6
fix(server): revert migration 008 comment edit — modifying an applied sqlx migration breaks its checksum and crash-loops the server on startup; machines.rs ON CONFLICT fix retained
Mike Swanson
2026-06-01 10:05:38 -07:00
f950511e3e
fix(server): bind machine_uid upsert ON CONFLICT to the partial index (WHERE machine_uid IS NOT NULL)
Mike Swanson
2026-06-01 09:50:34 -07:00
16017456aa
docs: 2026-05-31 security re-audit (Phase-1 EXIT) + roadmap reconcile
Mike Swanson
2026-05-31 18:19:09 -07:00
e967cce1a1
chore: release v0.3.0 [skip ci]
v0.3.0
guruconnect-ci
2026-06-01 00:10:58 +00:00
16586c4a1b
chore: reconcile manifest versions to v0.2.2 baseline
Mike Swanson
2026-05-31 16:50:59 -07:00
96f9c0ab45
feat(dashboard): operator removal UI for stale machines/sessions (SPEC-004 Task 5)
Mike Swanson
2026-05-31 14:14:49 -07:00
5ee6675337
feat(server): operator removal of stale sessions/machines (SPEC-004 Task 5, server)
Mike Swanson
2026-05-31 13:52:36 -07:00
cef1928379
style(server): cargo fmt for SPEC-004 Task 2 + Task 4
Mike Swanson
2026-05-31 12:27:01 -07:00
4e80573cbd
feat(server): reap stale persistent sessions + same-machine supersede (SPEC-004 Task 4)
Mike Swanson
2026-05-31 12:21:15 -07:00
ffca7f0cee
feat(server): dedup machines on machine_uid (SPEC-004 Task 2)
Mike Swanson
2026-05-31 12:06:50 -07:00
97780304e7
fix(agent): make native H.264 viewer render live frames
Mike Swanson
2026-05-31 11:25:05 -07:00
afbf0d81b8
spec: add SPEC-015 Configurable Notification Overlay
azcomputerguru
2026-05-31 08:40:53 -07:00
b45c683a51
spec: add SPEC-014 Branding and White-Label Configuration
azcomputerguru
2026-05-31 08:12:37 -07:00
5637e4c1f9
spec: add SPEC-013 Windows Session Selection and Backstage Mode
azcomputerguru
2026-05-31 07:54:10 -07:00
b3e8f32734
feat(agent): derive + report deterministic machine_uid (SPEC-004 Task 1)
Mike Swanson
2026-05-30 21:23:11 -07:00
92bc522c3a
spec: add v2-stable-identity implementation plan (SPEC-004 breakdown)
Mike Swanson
2026-05-30 21:17:49 -07:00
df51d40094
feat(server): per-agent H.264 test override (h264-test tag) [Task 8 prep]
Mike Swanson
2026-05-30 20:16:59 -07:00
7be8f454e0
Merge remote security fixes with local specs
azcomputerguru
2026-05-30 19:21:42 -07:00
c98692e424
fix(server): revoke viewer tokens on logout + stop logging chat content
Mike Swanson
2026-05-30 19:20:15 -07:00
761bae5d01
spec: update SPEC-012 to include both Serial Console + PTY Shell modes
azcomputerguru
2026-05-30 19:02:27 -07:00
8119292bcd
fix(agent): close auto-update TLS bypass (MITM -> RCE) [HIGH]
Mike Swanson
2026-05-30 19:02:23 -07:00
9f44807230
audit: security pass re-audit (2026-05-30) — 3 CRITICALs verified CLOSED
Mike Swanson
2026-05-30 18:48:48 -07:00
a062a825ea
spec: add SPEC-012 Headless Linux Mode (Direct TTY Access)
azcomputerguru
2026-05-30 18:28:34 -07:00
b1862800a1
spec: add SPEC-011 Mobile Agent Support (iOS and Android)
azcomputerguru
2026-05-30 18:24:16 -07:00
442eecefc0
fix(server,agent): apply Tasks 3-5 review fixes (non-blocking)
Mike Swanson
2026-05-30 18:23:03 -07:00
5e2325507f
spec: add SPEC-010 Cross-Platform Agent Support (macOS and Linux)
azcomputerguru
2026-05-30 18:15:16 -07:00
c736a710a1
docs: record Tasks 3-5 code review (APPROVE-WITH-FIXES) in plan status
Mike Swanson
2026-05-30 18:14:02 -07:00
786d3e47af
docs: correct roadmap — v2 Phase 1 already landed, not a future sprint
Mike Swanson
2026-05-30 17:36:18 -07:00
03f62d413f
docs: annotate roadmap with v2-first direction + phase mapping
Mike Swanson
2026-05-30 17:26:47 -07:00
7ab87384a7
spec: add SPEC-009 feature-rich documented API
Mike Swanson
2026-05-30 16:35:57 -07:00
65eff5cf50
spec: add SPEC-008 valuable error messages
Mike Swanson
2026-05-30 16:30:07 -07:00
008d2bf30b
spec: add SPEC-007 managed-agent installer builder
Mike Swanson
2026-05-30 16:24:56 -07:00
0eb38520ed
spec: add SPEC-006 universal machine search
Mike Swanson
2026-05-30 16:21:10 -07:00
cdc182f0fb
spec: add SPEC-005 machines list view (dual indicators + rich rows)
Mike Swanson
2026-05-30 16:17:48 -07:00
f8bd4d1dab
spec: SPEC-004 add stable machine-derived identity as the primary fix
Mike Swanson
2026-05-30 16:11:38 -07:00
ee900c6395
spec: add SPEC-004 session lifecycle reaping + operator removal
Mike Swanson
2026-05-30 16:05:32 -07:00
abf499cb23
spec: add SPEC-003 full machine inventory in connection DB
Mike Swanson
2026-05-30 15:48:09 -07:00
abc55abb0b
fix(server): tolerate NULL connect_machines columns (tags decode bug)
Mike Swanson
2026-05-30 15:17:12 -07:00
96b4fd7721
feat(dashboard): GuruConnect v2 Users admin view
Mike Swanson
2026-05-30 14:18:40 -07:00
664f33d5ab
feat(dashboard): GuruConnect v2 Support Codes view
Mike Swanson
2026-05-30 13:59:18 -07:00
67f3722b3c
feat(server): serve dashboard SPA with deep-link fallback; remove v1 portal
Mike Swanson
2026-05-30 13:44:13 -07:00
6ecb937eb6
feat(dashboard): GuruConnect v2 Sessions view (pass 2)
Mike Swanson
2026-05-30 13:12:04 -07:00
43a9432b81
feat(dashboard): GuruConnect v2 operator console (pass 1)
Mike Swanson
2026-05-30 12:51:11 -07:00
f9bdecbfdb
feat(agent,server): v2 secure-session-core Task 7 - HW H.264 + negotiated raw fallback
Mike Swanson
2026-05-30 10:35:04 -07:00
bb73ba667f
feat(agent): v2 secure-session-core Task 6 - full key fidelity
Mike Swanson
2026-05-30 09:16:26 -07:00
d0de888dd1
style(agent): clear 77 pre-existing clippy -D warnings
Mike Swanson
2026-05-30 08:51:45 -07:00
fbf9e26f5a
style(server,agent): fmt + clippy fixes for Task 5 (CI green)
Mike Swanson
2026-05-30 07:59:29 -07:00
9082e11490
feat(server,agent): v2 secure-session-core Task 5 - attended consent
Mike Swanson
2026-05-30 07:44:09 -07:00
8cb0b5b16b
style(server): cargo fmt for trusted-proxy IP extractor (CI green)
Mike Swanson
2026-05-30 07:26:15 -07:00
5d5cd26572
fix(server): trusted-proxy client-IP extraction for rate-limit/audit keying
Mike Swanson
2026-05-30 07:15:45 -07:00
21189423f2
fix(server): clippy fixes for Task 4 (CI green)
Mike Swanson
2026-05-29 21:17:23 -07:00
bfcdbb5379
feat(server): v2 secure-session-core Task 4 - rate limit + single-use codes
Mike Swanson
2026-05-29 21:04:54 -07:00
8a0193577b
style(server): cargo fmt + clippy fixes for v2 keystone (CI green)
Mike Swanson
2026-05-29 20:19:26 -07:00
a453e7984e
feat(server): viewer-token view-only/control split - closes CRITICAL #1
Mike Swanson
2026-05-29 19:24:32 -07:00
0f258788f9
feat(server): v2 secure-session-core Task 3 - secure relay WS
Mike Swanson
2026-05-29 19:13:03 -07:00
41691bfb2c
feat(server): v2 secure-session-core Task 2 - auth rebuild
Mike Swanson
2026-05-29 18:57:12 -07:00
fef8111ff3
feat(server): v2 secure-session-core Task 1 - schema + per-agent keys
Mike Swanson
2026-05-29 18:33:26 -07:00
81e4b99a34
spec: add v2-secure-session-core shape spec
Mike Swanson
2026-05-29 18:15:37 -07:00
5c60a105c0
docs(spec): add SPEC-002 GuruConnect v2 modernization architecture
Mike Swanson
2026-05-29 18:08:23 -07:00
486debfc52
docs(audit): add inaugural gc-audit report 2026-05-29
Mike Swanson
2026-05-29 17:46:26 -07:00
ccc6ba9c02
ci: enforce clippy -D warnings and cargo audit as hard gates
Mike Swanson
2026-05-30 00:18:50 +00:00
6e7e7c0ccb
chore: release v0.2.2 [skip ci]
v0.2.2
guruconnect-ci
2026-05-29 18:41:21 +00:00
5727ccf39e
fix: drop broken jsign --info verify step in release
Mike Swanson
2026-05-29 11:26:52 -07:00
e80ffe4f9e
chore: release v0.2.1 [skip ci]
guruconnect-ci
2026-05-29 18:18:59 +00:00
e7f38ce2a0
fix: use jsign 7.1 for Azure Trusted Signing
Mike Swanson
2026-05-29 11:05:09 -07:00
520569937c
chore: release v0.2.0 [skip ci]
guruconnect-ci
2026-05-29 17:56:38 +00:00
4ddced1b9b
ci: fix native Windows agent build, audit, lockfile; drop redundant test.yml
Mike Swanson
2026-05-29 10:22:13 -07:00
39e9ac4b75
ci: add workflow_dispatch trigger to build-and-test
Mike Swanson
2026-05-29 09:48:08 -07:00
8a47332b39
ci: build Windows agent natively on Pluto runner (drop mingw cross-compile)
Mike Swanson
2026-05-29 09:32:12 -07:00
cd88facaf0
ci: make clippy informational (warn-only) until GC re-spec
Mike Swanson
2026-05-29 08:37:44 -07:00
b2f9cbc089
ci: force linux target for build-server clippy/test
Mike Swanson
2026-05-29 08:09:44 -07:00
1c5c1e78e7
style: cargo fmt --all — make codebase rustfmt-clean
Mike Swanson
2026-05-29 15:02:12 +00:00
f2e0456f8d
ci: gate release workflow to manual dispatch
Mike Swanson
2026-05-29 07:27:17 -07:00
60519be28a
feat: operational tooling — signing, versioning, changelog, roadmap (SPEC-001)
Mike Swanson
2026-05-29 07:19:29 -07:00
e3e95f8fa7
chore: sync repository to current working state
Mike Swanson
2026-05-29 06:15:29 -07:00
5b7cf5fb07
ci: add Gitea Actions workflows and deployment automation
Mike Swanson
2026-01-18 15:48:20 +00:00