justme
ad5efc62ff
agent: unify listening and dialing with directed mutual measurements
...
Replace Probe with Agent across node runtime, Fleet contracts, backend state, API and storage. Report incoming sessions and outgoing link health through each Agent uplink, and retain directed link controls and retry.
Update protocol fixtures and end-to-end coverage for the unified model; accept requested cancellation during the Fleet timeout test cleanup.
2026-10-21 11:55:36 +08:00
justme
b33e50696d
fix(api): never cache anchor=latest windows as immutable [CI]
ci/woodpecker/push/web-build Pipeline was successful
ci/woodpecker/push/verify Pipeline was successful
ci/woodpecker/push/dev-image Pipeline was successful
2026-10-19 11:29:34 +08:00
justme
0d532caf08
fix(nodes): locate agents behind a proxy and retry missing countries [CI]
ci/woodpecker/push/web-build Pipeline was successful
ci/woodpecker/push/verify Pipeline was successful
ci/woodpecker/push/dev-image Pipeline was successful
2026-10-18 00:06:39 +08:00
justme
97ab3cc740
feat(runtime): track node lifecycle and QUIC link state
2026-10-10 14:16:57 +08:00
justme
b964dc2bbc
feat(quic): replace probe UDP data plane with QUIC datagrams
2026-10-10 02:59:56 +08:00
justme
f22fdf8b68
feat: first-run claim wizard (no default admin, claim code from the backend log); owner list shows account and passkey; container install first [CI]
ci/woodpecker/push/main-amd64-build Pipeline was successful
2026-10-08 06:47:10 +08:00
justme
4106f831dc
feat!: drop the backend-side elevation windows; password and passkey sessions share capabilities, passkeys guard what nodes verify; the trust page lists added and removed passkeys [CI]
2026-10-08 04:57:28 +08:00
justme
a2f88a344b
feat!: genesis-pinned operator set, server identity with an encrypted control link, key-less join codes; release key continuity
...
ci/woodpecker/tag/gitea-release Pipeline is pending
ci/woodpecker/tag/linux-release Pipeline failed
ci/woodpecker/tag/windows-release Pipeline was canceled
Join codes need no passkey touch and carry only public values (genesis
fingerprint, owner credentials, installer hashes). Nodes pin the genesis and
owners at enrollment and only follow passkey-signed operator set versions.
The panel's server key is listed in the set; pinned nodes require its
signature and run the control link under AES-256-GCM. Password sessions carry
no capabilities. The updater adopts a next_key from a signed manifest.
Bump version to 0.2.0. [CI SKIP]
2026-10-08 03:21:44 +08:00
justme
fc2bbdcc6d
feat: operator trust root: passkey-signed operator set, signed join codes, nodes verify and pin the chain at enrollment [CI SKIP]
2026-10-07 23:19:59 +08:00
justme
a19e6548d3
feat: trust forwarded client addresses only from configured proxies (rate limit, audit, SSE) [CI]
...
Docs: access.md covers the missing node-side Backend identity and the hash-first install flow.
2026-10-07 22:51:44 +08:00
justme
ff45ad086e
feat!: sensitive actions need a fresh passkey touch (elevation windows), plus login page hint cleanup [CI]
2026-10-07 22:29:24 +08:00
justme
1379b8c7cb
feat: audit log of admin writes, sign-ins and key creation, with an audit tab [CI]
2026-10-07 22:17:52 +08:00
justme
359313a57b
feat: record who created join codes and who added each node [CI]
2026-10-07 22:12:15 +08:00
justme
6385c1b9a3
feat: sign in with a passkey (WebAuthn, ES256, discoverable credentials) and manage your passkeys [CI]
2026-10-07 21:57:19 +08:00
justme
ddb6608e32
feat!: capabilities replace API token scopes; every admin endpoint declares one, with a picker UI [CI]
2026-10-07 20:56:36 +08:00
justme
f03988d68b
feat: detect an agent's public IPv4 and IPv6 addresses automatically, manual values still win [CI]
ci/woodpecker/push/main-amd64-build Pipeline was successful
2026-10-07 18:12:17 +08:00
justme
a9f562441f
feat!: probes generate their own keys and enroll with a join token; node and peer keys are separate [CI]
ci/woodpecker/push/main-amd64-build Pipeline was successful
2026-10-07 16:57:34 +08:00
justme
84f9d211bc
backend: require confirmation for signed channel updates [CI]
ci/woodpecker/pr/verify Pipeline failed
ci/woodpecker/pr/web-build unknown status
2026-10-07 12:57:20 +08:00
justme
0eda0600cc
shared: add independent IPv4 and IPv6 collection [CI]
ci/woodpecker/pr/verify Pipeline was successful
ci/woodpecker/pr/web-build Pipeline was successful
2026-10-07 11:44:01 +08:00
justme
2e146d4da7
refactor!: rename the project from Monitor to MoShiro [CI]
...
ci/woodpecker/push/main-amd64-build Pipeline was successful
Namespaces, assemblies, solution, binaries, images, systemd units, config paths, environment variables, protocol methods and the Linux user are all renamed. Breaking: existing databases, node identities and installed units must be recreated.
2026-10-07 02:03:25 +08:00
justme