naiba
eb48a178f8
ci: use latest compatible Go patch
2026-09-02 13:45:05 +00:00
naiba
f2e8d03667
ci: pin Go 1.26.6
2026-09-02 13:35:11 +00:00
naiba
d6d5b9804d
chore(frontend-templates): update frontend versions
2026-09-02 13:30:46 +00:00
naiba
19daf4ad3c
fix(alert): prevent persisted rule crash loops
2026-09-02 13:30:46 +00:00
naiba
8f1147c800
chore(deps): update direct dependencies
2026-09-02 13:30:46 +00:00
naiba
fffbe68650
docs: add AxisNow sponsor
2026-09-01 08:16:45 +00:00
naiba
b523961cee
docs: add sponsors to README
2026-08-31 07:05:06 +00:00
naiba
e88650281b
ci(release): support registries without attestations
2026-08-15 05:37:12 +00:00
naiba
a4f8eaf0ff
chore(frontend-templates): update frontend versions
2026-08-15 05:20:28 +00:00
naiba
38824dbc11
fix(security): restrict service monitors to probe tasks
2026-08-15 05:00:28 +00:00
naiba
c3c165c146
fix(terminal): bound websocket input frames
2026-08-12 02:27:12 +00:00
naiba
71d43c6a6e
chore(frontend-templates): update template versions
2026-08-11 14:23:41 +00:00
naiba
d1fcde8e9e
fix(security): block IPv6 transition ranges for webhooks
2026-08-11 14:23:14 +00:00
naiba
99e19c551a
chore(i18n): reconnect Hosted Weblate history
2026-08-08 08:53:18 +00:00
naiba
eba91d2883
chore: update frontend
2026-08-03 20:17:37 +08:00
naiba
a9d14a0dfa
chore(frontend-templates): add Nezha-Pixel template
2026-08-01 20:21:57 +08:00
naiba
f9e7cfa54b
chore(frontend): update bundled template versions
2026-08-01 20:21:57 +08:00
naiba
4776dc9ec6
chore(deps): update direct Go dependencies
2026-08-01 20:21:56 +08:00
naiba
6c5317ba93
fix(security): correct stream quota advisory reference
2026-08-01 20:21:56 +08:00
naiba and naiba/CloudCode
5d7e8b58af
chore(frontend): update bundled template versions
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-21 13:11:43 +00:00
naiba and naiba/CloudCode
c893aa5786
fix(service): serialize reports with service lifecycle
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-21 13:11:05 +00:00
naiba and naiba/CloudCode
77c298fa80
chore(deps): bump libdns-tencentcloud
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-21 02:42:47 +00:00
naiba and naiba/CloudCode
479fcac11c
test(agentcompat): wire FD diagnostics into stress
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 22:11:21 +00:00
naiba and naiba/CloudCode
11eb339540
test(agentcompat): exercise real FD lifecycle diagnostics
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 22:10:29 +00:00
naiba and naiba/CloudCode
b204e3dda4
test(agentcompat): verify FD diagnostic collection
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 22:09:39 +00:00
naiba and naiba/CloudCode
970d2ae672
test(agentcompat): model FD diagnostic lifecycles
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 22:08:01 +00:00
naiba and naiba/CloudCode
1e67f4017a
test(agentcompat): preserve default sampler evidence
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 22:07:09 +00:00
naiba and naiba/CloudCode
e78af86164
test(agentcompat): capture FD observations in process samples
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 22:06:19 +00:00
naiba and naiba/CloudCode
8b352484d8
test(agentcompat): preserve existing CRLF workflow data
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 17:32:49 +00:00
naiba and naiba/CloudCode
926f2ca632
chore(agentcompat): document intentional scanner findings
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 17:07:04 +00:00
naiba and naiba/CloudCode
0332b1e212
fix(agentcompat): root workflow file reads
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 17:06:40 +00:00
naiba and naiba/CloudCode
24c7a898cf
test(agentcompat): cover CRLF workflow mutations
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 17:06:14 +00:00
naiba and naiba/CloudCode
153dfeb569
fix(agentcompat): retain transfer sentinel handles
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 17:05:52 +00:00
naiba and naiba/CloudCode
393f49aa59
fix(agentcompat): retain reconnect sentinel handles
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 17:05:29 +00:00
naiba and naiba/CloudCode
20930aaf9f
fix(agentcompat): root filesystem guard reads
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 17:05:10 +00:00
naiba and naiba/CloudCode
23763c8210
fix(agentcompat): secure legacy file manager boundaries
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 17:04:52 +00:00
naiba and naiba/CloudCode
029d458f50
fix(agentcompat): root scenario config reads
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 17:04:34 +00:00
naiba and naiba/CloudCode
e157304475
fix(agentcompat): root workspace log creation
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 17:04:16 +00:00
naiba and naiba/CloudCode
9bc3068d14
fix(agentcompat): resolve trusted Go executable
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 17:03:55 +00:00
naiba and naiba/CloudCode
e20197fdcc
fix(agentcompat): root proc resource reads
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 17:03:37 +00:00
naiba and naiba/CloudCode
57f9564ce1
fix(agentcompat): decode inotify events safely
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 17:03:20 +00:00
naiba and naiba/CloudCode
b92ab9a60f
fix(agentcompat): snapshot evidence through rooted handles
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 17:02:58 +00:00
naiba and naiba/CloudCode
454c577968
fix(agentcompat): secure credentialed agent workspaces
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 17:02:37 +00:00
naiba and naiba/CloudCode
c7799854b9
fix(agentcompat): validate supervised executable paths
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 17:02:21 +00:00
naiba and naiba/CloudCode
8a0382478b
test(agentcompat): lock Agent stress preparation
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 14:16:31 +00:00
naiba and naiba/CloudCode
396a0fcb21
ci: prepare dashboard inputs for stress
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 14:16:00 +00:00
naiba and naiba/CloudCode
620bebbf8e
test(agentcompat): find repository root across platforms
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 14:15:31 +00:00
naiba and naiba/CloudCode
589b06b63d
test(agentcompat): probe credential execution support
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 14:15:10 +00:00
naiba and naiba/CloudCode
dcab0d2245
fix(agentcompat): classify Windows absolute paths
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 14:14:37 +00:00
naiba and naiba/CloudCode
866ddddef1
test(agentcompat): make dedicated fixtures platform-native
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 14:13:41 +00:00
naiba and naiba/CloudCode
3bdbfd2593
test(agentcompat): use native validation paths
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 14:13:41 +00:00
naiba and naiba/CloudCode
ccfee605bf
test(agentcompat): use native evidence metadata paths
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 14:13:08 +00:00
naiba and naiba/CloudCode
a60924b6c7
test(agentcompat): use native contract paths
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 14:12:38 +00:00
naiba and naiba/CloudCode
56671d5509
test(agentcompat): define Windows evidence mode semantics
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 14:11:44 +00:00
naiba and naiba/CloudCode
1c881ed6d2
test(agentcompat): isolate Unix evidence mode checks
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 14:11:16 +00:00
naiba and naiba/CloudCode
ffbb8bed09
fix(agentcompat): validate evidence modes by platform
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 14:10:40 +00:00
naiba and naiba/CloudCode
381eee0cec
fix(agentcompat): constrain command harness to Linux
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 14:09:20 +00:00
naiba and naiba/CloudCode
5d7fef6408
test(agentcompat): isolate stress resource sampling
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 08:04:17 +00:00
naiba and naiba/CloudCode
a7cf600bd7
test(agentcompat): configure connection count sampling
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 08:02:45 +00:00
naiba and naiba/CloudCode
02ccdf038c
test(agentcompat): expose connection count fixture option
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 08:02:19 +00:00
naiba and naiba/CloudCode
d96b34b0d4
ci: require agentcompat stress validation
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:55:20 +00:00
naiba and naiba/CloudCode
d501f23473
test(agentcompat): add exact stress scenario
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:54:03 +00:00
naiba and naiba/CloudCode
64daa6e9ae
test(agentcompat): add scenario CLI wiring
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:52:28 +00:00
naiba and naiba/CloudCode
9af3720bf0
test(agentcompat): add integration scenarios
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:51:20 +00:00
naiba and naiba/CloudCode
b3b3d92895
test(agentcompat): add evidence validation
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:50:03 +00:00
naiba and naiba/CloudCode
1c3e926819
test(agentcompat): add protocol clients
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:48:15 +00:00
naiba and naiba/CloudCode
8a0e84b214
test(agentcompat): add dashboard runtime harness
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:46:55 +00:00
naiba and naiba/CloudCode
2a3245c412
test(agentcompat): add agent runtime harness
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:45:05 +00:00
naiba and naiba/CloudCode
3a9e0c7887
test(agentcompat): add process supervision harness
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:43:28 +00:00
naiba and naiba/CloudCode
0543995ec3
test(agentcompat): harden deterministic fixtures
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:42:03 +00:00
naiba and naiba/CloudCode
fcf58b0b4b
test(agentcompat): define integration contracts
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:39:48 +00:00
naiba and naiba/CloudCode
391f622c75
test(agentcompat): cover SQLite hold arbitration
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:37:59 +00:00
naiba and naiba/CloudCode
52c766d27c
test(rpc): cover reentrant state observers
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:36:50 +00:00
naiba and naiba/CloudCode
aee586baad
feat(agentcompat): add dashboard listener hooks
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:33:38 +00:00
naiba and naiba/CloudCode
3f6de265a0
fix(mcp): harden dashboard dispatch lifecycle
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:32:16 +00:00
naiba and naiba/CloudCode
2640b86d3a
feat(agentcompat): expose dashboard capability routes
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:30:50 +00:00
naiba and naiba/CloudCode
0c6eb416a5
feat(agentcompat): add SQLite hold scoped attribution
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:29:21 +00:00
naiba and naiba/CloudCode
26e92da33b
feat(agentcompat): add scoped IO stream capabilities
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:27:33 +00:00
naiba and naiba/CloudCode
c756ef9385
fix(rpc): make IO stream lifecycle race-safe
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:26:19 +00:00
naiba and naiba/CloudCode
8b47ff141f
feat(agentcompat): add shared runtime contracts
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-20 04:25:03 +00:00
naiba and naiba/CloudCode
a416e3bf29
test(compat): complete NAT fixture shutdown
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-14 06:13:57 +00:00
naiba and naiba/CloudCode
be9af6fcb3
test(compat): harden fixture containment cleanup
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-14 06:12:00 +00:00
naiba and naiba/CloudCode
92a1cc76be
test(compat): add deterministic local fixtures
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-14 05:49:15 +00:00
naiba and naiba/CloudCode
b01ff45ef4
chore(frontend-templates): bump user-dist v2.4.1 and aobobo-dist v1.4.6
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-12 06:27:58 +00:00
naiba and naiba/CloudCode
1477138dad
chore(frontend-templates): bump admin-dist v2.2.5, user-dist v2.3.2 and aobobo-dist v1.4.5
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-07-04 11:08:03 +00:00
naiba and naiba/CloudCode
fd31e5f1b0
chore(frontend-templates): add aobobo template
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-06-28 01:09:23 +00:00
naiba and naiba/CloudCode
e1045ffd30
fix(api): redact profile password hash
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-06-28 01:09:23 +00:00
naiba
6aab2e4919
Merge pull request #1213 from nezhahq/dependabot/github_actions/github-actions-02325a8da5
...
chore(deps): bump the github-actions group with 2 updates
2026-06-27 11:30:04 +08:00
naiba and naiba/CloudCode
d750fa035d
chore(frontend-templates): bump user-dist v2.3.1
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-06-20 11:01:54 +00:00
naiba
d556c3216f
chore(frontend-templates): bump user-dist v2.3.0 and nazhua-dist v1.1.0
2026-06-20 00:40:38 +00:00
naiba
8cd2da79b8
chore(frontend-templates): bump admin-dist v2.2.4
2026-06-20 00:39:47 +00:00
naiba
874a47c32c
Merge pull request #1211 from hamster1963/fix-service
...
Filter service stats based on user permissions
2026-06-20 08:25:15 +08:00
naiba
3d74cd9431
fix(alert): retain Duration samples for offline rules so they fire
...
RetentionWindow() trimmed offline-rule samples to 1, but Check's offline
branch reads points[len-Duration:] and needs Duration samples. The window
never filled, boundCheck always returned "passed", and offline alerts never
fired a notification — while other alert types worked. Offline rules now
retain Duration samples (cycle rules still keep 1, matching their last-sample
lookback).
Fixes the prior over-correction in RetentionWindow; corrects the test that
had pinned the buggy offline=1 value, and adds offline + combined-rule
regression tests driving the real trim loop.
2026-06-08 00:57:14 +00:00
naiba
576e6773c0
fix(release): bump user-dist to v2.1.2 (v2.1.1 never released upstream)
...
The v2.2.2 Release workflow failed: fetch-frontends.sh fetched user-dist
from hamster1963/nezha-dash-v2 at v2.1.1, but upstream went v2.1.0 -> v2.1.2
and never tagged v2.1.1, so the dist.zip download 404'd and unzip aborted the
build. Point at the existing v2.1.2 asset.
2026-06-07 16:23:24 +00:00
naiba
b12b1709d9
test(alert): pin sample-slice memory-boundedness invariant
...
Add TestCheckStatus_SampleMemoryBounded asserting that, across 100k ticks,
the per-(alert,server) sample slice length and capacity stay bounded by the
rule's retention window and never grow with elapsed time.
2026-06-07 16:14:31 +00:00
naiba
e756b4540c
fix(alert): keep sample history by rule-defined retention window
...
Trim alert samples using AlertRule.RetentionWindow() (max rule duration)
instead of Check()'s verdict max, which is 0 while a rule's window is still
filling. The old max<=0 trim wiped history every tick, so Duration>=2 general
rules never accumulated enough samples and never fired a notification.
Add model + end-to-end singleton regression tests covering sample
accumulation, the retention-window contract, and the actual notify path.
2026-06-07 16:11:43 +00:00
naiba
66de244c2e
feat(oauth2): add dashboard_host setting for callback URL
...
Decouple OAuth2 callback host from agent install host. When dashboard_host
is empty, the request Host is passed through; otherwise non-reserved hosts
are pinned to dashboard_host. Added to reserved-host allowlist for NAT.
2026-06-06 05:03:12 +00:00
naiba
c595728609
chore(frontend-templates): bump admin-dist v2.2.2 and user-dist v2.1.1
2026-06-06 04:55:31 +00:00
naiba
6e9510d26a
chore(frontend-templates): bump admin-dist v2.2.0
2026-06-05 02:42:58 +00:00
naiba
5fd91c44b0
test(rpc): cover both-key-styles present in agent auth metadata
...
After #1197/#244 a new agent emits both hyphenated and underscore credential
metadata, so a new dashboard receives both at once. Add tests for the everyday
both-present case and pin that the hyphenated key takes precedence over the
underscore alias that Caddy v2.11.4 strips.
2026-06-05 02:42:58 +00:00