Tomas Dvorak 549790c611 refactor(db): port auth and security handlers to sqlc ...

- auth.sql: user lookups, counts, register/mirror inserts, profile update
- security.sql: access EXISTS, vulnerability list/metrics/status,
  framework list, latest scan/report, project-id guards
- NULL description/service_id rows stay filtered, matching the original
  scan-error-and-skip behavior
- auth_users probe and filtered audit-log queries stay raw: one is a
  Better Auth table outside the schema, the other is dynamically built
- TestSecurityLiveInvariants covers the access predicate, severity
  ordering, upsert conflict path, and latest-row lookups against live
  Postgres

Authored By: TDvorak <[email protected]>

2026-10-10 07:36:21 +02:00

..

assets

feat(nodes): SSH bootstrap + housekeeping — install script, bundled binaries, auto-prune (#50)

2026-10-09 12:41:26 +02:00

activity_test.go

feat: activity feed — enriched audit events + global/project timelines (#45)

2026-10-09 10:52:15 +02:00

activity.go

feat: activity feed — enriched audit events + global/project timelines (#45)

2026-10-09 10:52:15 +02:00

admin.go

feat(git): GitHub App manifest self-provisioning + app-level webhook (#44)

2026-10-09 10:43:12 +02:00

agents_helpers_test.go

small fix, don't worry about it

2026-04-10 12:02:36 +02:00

agents.go

feat(nodes): per-node default domain with auto service hostnames (#65)

2026-10-10 00:07:30 +02:00

apwhy_handlers.go

Consolidate backend: drop vendored APwhy, converge on goose + sqlc

2026-09-17 09:40:08 +02:00

artifacts.go

feat: build-on-node — git checkouts, remote image builds, image transport (#60)

2026-10-09 20:30:33 +02:00

audit_test.go

small fix, don't worry about it

2026-04-10 12:02:36 +02:00

audit.go

feat: activity feed — enriched audit events + global/project timelines (#45)

2026-10-09 10:52:15 +02:00

auth_proxy.go

feat: owner accounts and in-app platform settings

2026-09-21 18:05:22 +02:00

auth.go

refactor(db): port auth and security handlers to sqlc

2026-10-10 07:36:21 +02:00

backuptargets_test.go

feat(databases): S3-compatible backup targets — offsite archives + remote restore

2026-10-08 22:54:36 +02:00

backuptargets.go

feat(databases): backup import — upload .tar.gz as a restore point

2026-10-08 23:07:27 +02:00

banners.go

feat(banners): instance announcements — admin CRUD, top bar, CLI (#39)

2026-10-09 10:10:18 +02:00

build_test.go

small fix, don't worry about it

2026-04-10 12:02:36 +02:00

build.go

small fix, don't worry about it

2026-04-10 12:02:36 +02:00

context_user.go

feat: public platform, admin console, templates, landing docs

2026-09-22 19:58:59 +02:00

cron_test.go

refactor(db): port cron jobs to sqlc (#80)

2026-10-10 04:27:16 +02:00

cron.go

refactor(db): port cron jobs to sqlc (#80)

2026-10-10 04:27:16 +02:00

databases_test.go

fix: e2e QA hardening — honest runtime state, stable public ports, read-only anon UI (#12)

2026-10-04 09:01:28 +02:00

databases.go

feat(notifications): producers — backups, agent health, scans, upgrades (#49)

2026-10-09 12:12:21 +02:00

dbexternal_test.go

feat: external databases — register, probe, encrypted credentials

2026-10-08 22:09:42 +02:00

dbexternal.go

feat: external databases — register, probe, encrypted credentials

2026-10-08 22:09:42 +02:00

deployments_test.go

fix(deploy): don't split digest-pinned image refs (#72)

2026-10-10 02:17:36 +02:00

deployments.go

refactor(db): port deployments to sqlc (#78)

2026-10-10 04:01:40 +02:00

domains_test.go

refactor(db): port sleep/wake sweeper to sqlc (#81)

2026-10-10 05:11:34 +02:00

domains.go

refactor(db): port service clone/move ops to sqlc (#76)

2026-10-10 03:25:07 +02:00

environments.go

feat(environments): env CRUD, workspace switcher, CLI + MCP parity (#68)

2026-10-10 01:17:32 +02:00

errors.go

feat(api): error codes, idempotency keys, cursor pagination

2026-10-08 15:38:36 +02:00

exec.go

feat: public platform, admin console, templates, landing docs

2026-09-22 19:58:59 +02:00

feature_response.go

small fix, don't worry about it

2026-04-10 12:02:36 +02:00

gateway_proxy_test.go

feat(gateway): /g/:slug proxy data plane with key auth and rate limits (#66)

2026-10-10 00:29:57 +02:00

gateway_proxy.go

feat(gateway): /g/:slug proxy data plane with key auth and rate limits (#66)

2026-10-10 00:29:57 +02:00

git_receiver_test.go

feat(git): push webhook receiver + repo connect on service create

2026-09-17 10:30:36 +02:00

git_receiver.go

refactor(db): port git providers, repos, and webhook receiver to sqlc (#82)

2026-10-10 05:31:21 +02:00

git_test.go

refactor(db): port git providers, repos, and webhook receiver to sqlc (#82)

2026-10-10 05:31:21 +02:00

git.go

refactor(db): port git providers, repos, and webhook receiver to sqlc (#82)

2026-10-10 05:31:21 +02:00

gitcreds.go

feat: build-on-node — git checkouts, remote image builds, image transport (#60)

2026-10-09 20:30:33 +02:00

github_app.go

feat(git): GitHub App manifest self-provisioning + app-level webhook (#44)

2026-10-09 10:43:12 +02:00

ha.go

feat: public platform, admin console, templates, landing docs

2026-09-22 19:58:59 +02:00

ingress.go

feat(nodes): remote sleep/wake — idle detection + wake-page ingress

2026-10-09 18:43:33 +02:00

invites.go

feat(invites): team invite links — admin create/revoke, public accept (#42)

2026-10-09 10:35:12 +02:00

logs.go

feat: public platform, admin console, templates, landing docs

2026-09-22 19:58:59 +02:00

metrics.go

feat: public platform, admin console, templates, landing docs

2026-09-22 19:58:59 +02:00

noderunner.go

feat: build-on-node — git checkouts, remote image builds, image transport (#60)

2026-10-09 20:30:33 +02:00

notification_channels_test.go

feat(notifications): ntfy/Gotify push channels with live delivery (#69)

2026-10-10 01:39:09 +02:00

notification_channels.go

feat(notifications): ntfy/Gotify push channels with live delivery (#69)

2026-10-10 01:39:09 +02:00

notification_producers_test.go

feat(notifications): producers — backups, agent health, scans, upgrades (#49)

2026-10-09 12:12:21 +02:00

notification_producers.go

feat(nodes): SSH bootstrap + housekeeping — install script, bundled binaries, auto-prune (#50)

2026-10-09 12:41:26 +02:00

notifications.go

feat(notifications): ntfy/Gotify push channels with live delivery (#69)

2026-10-10 01:39:09 +02:00

operations.go

feat(ops): /operations endpoint + page — live jobs, queue depth, failures

2026-10-09 09:51:38 +02:00

pagination_test.go

feat(api): error codes, idempotency keys, cursor pagination

2026-10-08 15:38:36 +02:00

pagination.go

feat(api): error codes, idempotency keys, cursor pagination

2026-10-08 15:38:36 +02:00

params.go

Consolidate backend: drop vendored APwhy, converge on goose + sqlc

2026-09-17 09:40:08 +02:00

preview_environments_test.go

feat(preview): real preview environments — clone, deploy, TTL, promote (#67)

2026-10-10 00:54:07 +02:00

preview_environments.go

refactor(db): port deployments to sqlc (#78)

2026-10-10 04:01:40 +02:00

production_behavior_test.go

feat: public platform, admin console, templates, landing docs

2026-09-22 19:58:59 +02:00

projects.go

feat: activity feed — enriched audit events + global/project timelines (#45)

2026-10-09 10:52:15 +02:00

projectvars.go

feat(vars): project shared variables — ${{shared.KEY}} refs, CRUD, UI

2026-10-09 01:04:19 +02:00

proxmox.go

small fix, don't worry about it

2026-04-10 12:02:36 +02:00

registries.go

feat(services): clone/move ops + owner-scoped registry credentials (C4)

2026-10-08 17:21:27 +02:00

resources_test.go

feat(services): builder selection, resource reservations, static builder (C3)

2026-10-08 17:08:35 +02:00

routes.go

feat(setup): first-run wizard — admin, GitHub App, tunnel, done (#71)

2026-10-10 02:17:41 +02:00

runtime.go

refactor(db): port runtime ops to sqlc (#79)

2026-10-10 04:18:51 +02:00

scaling_test.go

feat: public platform, admin console, templates, landing docs

2026-09-22 19:58:59 +02:00

scaling.go

feat: public platform, admin console, templates, landing docs

2026-09-22 19:58:59 +02:00

security_test.go

refactor(db): port auth and security handlers to sqlc

2026-10-10 07:36:21 +02:00

security.go

refactor(db): port auth and security handlers to sqlc

2026-10-10 07:36:21 +02:00

service_ops.go

refactor(db): port service clone/move ops to sqlc (#76)

2026-10-10 03:25:07 +02:00

services_routing_test.go

feat(services): traefik routing overrides via allowlisted middleware labels (#64)

2026-10-09 23:47:25 +02:00

services.go

feat(services): traefik routing overrides via allowlisted middleware labels (#64)

2026-10-09 23:47:25 +02:00

settings.go

feat(branding): white-label — public /branding, admin write, shell theming (#41)

2026-10-09 10:22:58 +02:00

setup.go

feat(setup): first-run wizard — admin, GitHub App, tunnel, done (#71)

2026-10-10 02:17:41 +02:00

sleeper_test.go

feat(services): sleep mode — scale-to-zero on idle, wake on traffic

2026-10-09 00:22:28 +02:00

sleeper.go

refactor(db): port sleep/wake sweeper to sqlc (#81)

2026-10-10 05:11:34 +02:00

system.go

feat(deploy): per-service deploy queue, cancellable deployments, no-cache builds

2026-10-08 16:23:28 +02:00

templategraph_compose_test.go

feat(templates): git compose import, six stack seeds, empty-default vars (#63)

2026-10-09 23:25:34 +02:00

templategraph_test.go

feat(templates): catalog v2 — 5 new managed-DB stacks + seed validation test

2026-10-09 00:33:27 +02:00

templategraph.go

feat(templates): git compose import, six stack seeds, empty-default vars (#63)

2026-10-09 23:25:34 +02:00

templateregistry.go

feat(templates): remote template registry via CONTAINR_TEMPLATE_REGISTRY_URL (#52)

2026-10-09 12:46:35 +02:00

templates_test.go

feat(templates): git compose import, six stack seeds, empty-default vars (#63)

2026-10-09 23:25:34 +02:00

templates.go

feat(templates): git compose import, six stack seeds, empty-default vars (#63)

2026-10-09 23:25:34 +02:00

terminal.go

feat: interactive terminal — WS-bridged docker exec PTY (#46)

2026-10-09 11:13:34 +02:00

user_tokens.go

feat(api): error codes, idempotency keys, cursor pagination

2026-10-08 15:38:36 +02:00

variables.go

feat(services): builder selection, resource reservations, static builder (C3)

2026-10-08 17:08:35 +02:00

volumes.go

feat(services): volume mounts + admin volume inventory (C1)

2026-10-08 16:38:46 +02:00

webhooks_test.go

test: cron schedule + webhook URL + canvas layout coverage (#73)

2026-10-10 02:34:51 +02:00

webhooks.go

feat: outbound webhooks — signed event delivery + delivery log

2026-10-09 09:44:08 +02:00

websocket.go

small fix, don't worry about it

2026-04-10 12:02:36 +02:00