90 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Echo	e3a27eb2ed	fix: add ALPN http/1.1 for WebSocket, polling fallback, and job-level WS events ... - ws_relay.rs: Add ALPN protocol http/1.1 to rustls ClientConfig to prevent HTTP/2 negotiation which breaks WebSocket upgrades (Sec-WebSocket-Accept mismatch) - ws_relay.rs: Add detailed TLS error chain logging for debugging connection failures - ws_relay.rs: Add HTTP polling fallback when WebSocket connection fails, using AgentClient to poll /api/v1/jobs/{id} every ws_relay_poll_interval_secs - config.rs: Add ws_relay_poll_interval_secs field (default: 10 seconds) - config.example.toml: Add ws_relay_poll_interval_secs documentation - jobs.rs: Fire pg_notify with event_type job on cancel - job_executor.rs: Fire pg_notify with event_type job when parent job transitions - ws_relay.rs: Add event_type field to NotifyPayload (host vs job events) - Frontend: Add event_type, succeeded_count, failed_count, host_count to JobWsEvent - Frontend: handleWsEvent distinguishes host vs job events for accurate status updates	2026-05-04 15:16:20 +00:00
Echo	177a608b97	fix: install rustls crypto provider in pm-worker main ... Worker was crashing on startup with: Could not automatically determine the process-level CryptoProvider Added rustls::crypto:💍:default_provider().install_default() to pm-worker main.rs, matching the pm-web initialization.	2026-05-03 16:54:19 +00:00
Echo	9627febe90	fix: add job-level WS events so jobs show completed status ... - Frontend: handleWsEvent now distinguishes host vs job events - Host events only update detail rows + optimistic counters - Job events (event_type=job) set authoritative status + counts - Backend ws_relay: NotifyPayload now includes event_type field - Host events: event_type=host - update_parent_job_status fires pg_notify with event_type=job - Backend job_executor: sync_job_status fires pg_notify with event_type=job - Backend jobs cancel endpoint fires pg_notify with event_type=job - Fixes jobs appearing stuck because host status was mapped to job status	2026-05-03 16:34:38 +00:00
Echo	1c03522835	fix: expand empty packages to all available patches + refresh_listener UPSERT ... BUG-15: Empty patch_selection sent to agent as-is, causing apply nothing instead of apply all available patches per SPEC. When packages is empty, now query host_patch_data and expand to full package list. BUG-16: refresh_listener used INSERT instead of UPSERT for host_patch_data, causing duplicate key constraint errors.	2026-04-30 02:13:20 +00:00
Echo	2a9c6e8ed3	fix: patch poller UPSERT and host_patch_data unique constraint ... BUG-14: Patch poller was INSERT-ing a new row every poll cycle instead of UPSERT-ing, creating 51 duplicate rows in host_patch_data for a single host. Changes: - patch_poller.rs: Changed INSERT to INSERT...ON CONFLICT (host_id) DO UPDATE so each host only has one row that gets updated on each poll - Migration 006: Added UNIQUE constraint on host_id, cleaned up 50 duplicate rows keeping only the latest polled_at per host The dashboard showing 174 pending patches and 0% compliance is expected behavior - the patch data was collected before the job ran and the poller runs every 30 minutes. The next poll cycle will refresh the data.	2026-04-30 01:11:23 +00:00
Echo	ec88a52be2	fix: handle agent completed/cancelled statuses in job executor ... The linux_patch_api agent returns "completed" as its terminal success status, but the worker only recognized "succeeded". This caused the worker to log "unexpected agent status — ignoring" every 60 seconds and never mark patch jobs as finished. Changes: - job_executor.rs: match "completed" alongside "succeeded" as terminal success status, mapping both to patch_job_hosts.status = succeeded - job_executor.rs: match "cancelled" as a terminal failure status, routing to handle_host_failure with appropriate error message - pm-agent-client types.rs: updated AgentJobStatus doc comment to list all valid agent statuses: queued, running, succeeded, completed, failed, cancelled	2026-04-30 00:53:12 +00:00
Echo	d843f9ff12	fix: add serde rename_all to all enums for correct JSON serialization ... All 6 enums in pm-core/src/models.rs had #[sqlx(rename_all)] for database mapping but were missing #[serde(rename_all)] for JSON. Backend expected PascalCase (Once, Daily, etc.) but frontend sent lowercase (once, daily, etc.), causing deserialization errors like: "unknown variant once, expected Once, Daily, Weekly, Monthly" Fixed enums: - HostHealthStatus: serde(rename_all = "lowercase") - UserRole: serde(rename_all = "lowercase") - AuthProvider: serde(rename_all = "snake_case") - JobStatus: serde(rename_all = "lowercase") - JobKind: serde(rename_all = "snake_case") - WindowRecurrence: serde(rename_all = "lowercase") Frontend types already matched - no frontend changes needed.	2026-04-29 01:45:47 +00:00
Echo	d4c9e73e1b	docs: add Navigation and Frontend Error Handling specs to SPEC.md ... - Added Navigation subsection under User Interface: - Layout structure: AppBar + 240px sidebar + main content - Menu groups: Overview, Fleet, Operations, Administration - RBAC visibility rules for admin-only items - Mobile responsive behavior (collapsible drawer) - User menu with avatar, role display, and sign out - Dark theme specification (Primary: #42A5F5, Secondary: #26C6DA) - Added Frontend Error Handling subsection: - Login error messages for network, rate limit, auth, MFA, server errors - Dismissible MUI Alert components (no blank error pages) - Auth token expiry handling via Zustand store (no hard redirects) - React Router RequireAuth guard behavior	2026-04-29 01:35:08 +00:00
Echo	eec976d093	fix: graceful login error handling and remove hard redirects ... - LoginPage.tsx: proper error handling for network errors, rate limiting (429), MFA required, account disabled, and server errors - LoginPage.tsx: dismissible error alerts with onClose - LoginPage.tsx: added 🐉 branding to login title - client.ts: removed window.location.href hard redirects on auth failure (now uses React state-based logout instead of full page reload) - client.ts: auth errors now propagate naturally through React Router	2026-04-29 01:27:58 +00:00
Echo	8ef118a515	feat: add AppLayout sidebar navigation with dark theme ... - Created AppLayout.tsx with MUI AppBar + permanent sidebar drawer - Grouped navigation: Overview, Fleet, Operations, Administration - RBAC visibility: admin-only items (Users, Certificates, Settings) - User menu with logout functionality - Mobile-responsive collapsible drawer - Active state indicator on current page - Switched theme from lightTheme to darkTheme in App.tsx - Wrapped authenticated routes in AppLayout with React Router Outlet - 404 redirect to dashboard instead of placeholder page	2026-04-29 01:22:07 +00:00
Echo	b552a13619	fix: CIDR suffix in agent URLs, agent client CIDR strip, and IP SAN fixes ... BUG-10: PostgreSQL inet type includes CIDR suffix (/32) when cast to text, causing malformed agent URLs like https://127.0.0.1/32:12443. Fixed by using host(ip_address)::text in all SQL queries across pm-worker and pm-web modules, and adding a Rust-side safety strip of CIDR notation in pm-agent-client. Files changed: - crates/pm-agent-client/src/client.rs: strip CIDR suffix from IP - crates/pm-worker/src/health_poller.rs: host(ip_address)::text - crates/pm-worker/src/patch_poller.rs: host(ip_address)::text - crates/pm-worker/src/refresh_listener.rs: host(ip_address)::text - crates/pm-worker/src/job_executor.rs: host(ip_address)::text (2 places) - crates/pm-worker/src/ws_relay.rs: host(h.ip_address)::text - crates/pm-web/src/routes/discovery.rs: host(ip_address)::text (2 places) - crates/pm-web/src/routes/hosts.rs: host(ip_address)::text (3 places) - docs/linux_patch_api_research.md: added research notes	2026-04-29 00:58:43 +00:00
Echo	9a8e9bfa38	fix: consistent microsecond-precision timestamp in audit hash chain	2026-04-28 23:39:33 +00:00
Echo	4f9b913f15	fix: add rustls ring feature and CryptoProvider for TLS support	2026-04-28 23:34:46 +00:00
Echo	a6b9c054b2	fix: missing fi closing JWT keys if-block in setup.sh	2026-04-28 23:29:04 +00:00
Echo	e18739f0ec	fix: missing SQL heredoc delimiter in setup.sh	2026-04-28 23:24:54 +00:00
Echo	83c97aa2b1	fix: resolve all startup bugs (BUG-6 through BUG-9) ... BUG-6: Add TLS support via axum-server + rustls - Added axum-server with tls-rustls feature to workspace and pm-web - pm-web now serves HTTPS when TLS certs exist, falls back to HTTP with warning - setup.sh generates self-signed ECDSA P-256 TLS cert with SANs - Config already had web_tls_cert_path/web_tls_key_path fields BUG-7: Fix audit chain integrity errors - Migration 005 now TRUNCATEs audit_log after adding prev_hash column - Existing rows had broken hash chains (inserted before prev_hash existed) BUG-8: Disable WatchdogSec in patch-manager-web.service - pm-web does not implement sd_notify, causing systemd to kill the service BUG-9: Disable WatchdogSec in patch-manager-worker.service - Same issue as BUG-8, worker does not implement sd_notify Previous fixes (BUG-1 through BUG-5) also included: - setup.sh: PostgreSQL 15+ schema GRANTs - Axum route syntax :param → {param} (19 routes) - DbUser struct role: String → UserRole enum mapping - UserRole/AuthProvider Display trait implementations - Seed admin password hash (Argon2id)	2026-04-28 23:01:03 +00:00
Echo	2e4a8768cf	Fix README.md config example - use JWT keys not session_key	2026-04-28 13:44:05 +00:00
Echo	ea4efca4ad	Revert README.md - Ubuntu 24.04 has postgresql-16 and libc6 2.39 in repos	2026-04-28 13:33:52 +00:00
Echo	b822eb083d	Fix README.md - PostgreSQL 16 requires official repo (not Ubuntu default)	2026-04-28 13:26:14 +00:00
Echo	3148689f78	Update README.md - add PostgreSQL official repo option for older Ubuntu	2026-04-28 13:16:07 +00:00
Echo	1ac0e2585b	Update README.md with complete deployment instructions	2026-04-28 12:30:28 +00:00
Echo	cbdb255a8d	Fix create-release.py - add missing --version argument	2026-04-27 23:38:43 +00:00
Echo	2ce7ad0348	Fix create-release.py - use env vars instead of CLI args	2026-04-27 23:16:53 +00:00
Echo	582416e686	Fix CI workflow - correct .deb path (project root, not target/package)	2026-04-27 23:01:39 +00:00
Echo	001c90f4d8	Fix build-package.sh - handle broken pipe from head command	2026-04-27 22:50:44 +00:00
Echo	32ca5e3a5d	Fix build-and-release - source cargo env before build-package.sh	2026-04-27 22:23:15 +00:00
Echo	44836cb365	Add eslint-disable eqeqeq for TypeScript nullish check pattern	2026-04-27 22:11:10 +00:00
Echo	04dac6fec0	Fix TypeScript type errors - use != null to exclude both null and undefined	2026-04-27 22:05:48 +00:00
Echo	f00853b5c0	Fix ESLint warnings with disable comments for legitimate cases	2026-04-27 21:59:50 +00:00
Echo	8c07d3e967	Fix ESLint error: remove unused catch parameter	2026-04-27 21:32:08 +00:00
Echo	ba12ad03ce	Update package-lock.json for eslint-plugin-react-hooks	2026-04-27 21:25:19 +00:00
Echo	2fd3eb89b4	Fix all frontend ESLint errors ... - Add eslint-plugin-react-hooks to package.json and config - Fix duplicate imports in HostsPage.tsx - Remove non-null assertion in main.tsx - Fix != to !== in HostDetailPage.tsx and MaintenanceWindowsPage.tsx - Fix unused variable in ReportsPage.tsx - Change console.debug to console.warn in useJobWebSocket.ts	2026-04-27 21:20:25 +00:00
Echo	adb88fc296	Fix ESLint config syntax	2026-04-27 20:43:44 +00:00
Echo	c7061569e4	Fix ESLint config - remove unconfigured React plugin rules	2026-04-27 20:24:03 +00:00
Echo	37fa3ba0e1	Update CI to use ubuntu-24.04 for all jobs	2026-04-27 20:18:47 +00:00
Echo	7035dfafdf	Use ubuntu-24.04 runner for frontend-lint (has Node.js 18 in repos)	2026-04-27 20:07:50 +00:00
Echo	71ddbe97d4	Fix YAML formatting in frontend-lint job	2026-04-27 20:07:15 +00:00
Echo	d6fa680f80	Fix Node.js 18 - use n version manager for sustainable installation	2026-04-27 20:03:00 +00:00
Echo	fea924f31e	Fix Node.js 18 - download binary directly from nodejs.org	2026-04-27 20:01:44 +00:00
Echo	2214d9d2c3	Fix Node.js 18 - use purge and remove conflicting files	2026-04-27 20:00:29 +00:00
Echo	65e7f8fab6	Fix Node.js 18 - also remove libnode72 package	2026-04-27 19:55:20 +00:00
Echo	8d4a428632	Fix Node.js 18 installation - remove conflicting packages first	2026-04-27 19:49:37 +00:00
Echo	9470c17fb2	Fix CI failures: clippy, tests, audit, and frontend lint ... - Rename clippy.toml field to single-char-binding-names-threshold - Add placeholder certificates for pm-agent-client doc tests - Add .cargo/audit.toml to handle upstream security advisories - Update CI to install Node.js 18 for frontend linting	2026-04-27 19:42:01 +00:00
Echo	8067ba9672	Fix checkout URL format to match linux_patch_api ... - Remove /api/v1/repos/ from archive URLs - Use direct repo path format: /echo/linux_patch_manager/archive/ - All 6 checkout steps updated	2026-04-27 17:58:45 +00:00
Echo	22f7d4c59c	Trigger CI test run after GITEATOKEN fix	2026-04-27 17:55:10 +00:00
Echo	8ccc703974	Fix Gitea CI configuration per troubleshooting guide ... - Quote YAML 'on' key to prevent boolean parsing - Fix GITEATOKEN case sensitivity (was GITEA_TOKEN) - Update Gitea URLs to https://gitea-lxc.moon-dragon.us - Fix release step token and URL parameters Fixes based on GITEA_CI_TROUBLESHOOTING_GUIDE.md	2026-04-27 16:18:14 +00:00
Echo	8a27b136b7	Revert "ci: adapt CI to ubuntu-22.04 runner with proven linux_patch_api patterns" ... This reverts commit f8bac85903.	2026-04-27 03:02:53 +00:00
Echo	f8bac85903	ci: adapt CI to ubuntu-22.04 runner with proven linux_patch_api patterns ... - Pin all jobs to ubuntu-22.04 runner - Use curl -sfL with secrets.GITEATOKEN for checkout - Switch checkout URL to https://gitea-lxc.moon-dragon.us - Install rustup with --default-toolchain stable --profile minimal - Add cargo bin to GITHUB_PATH instead of sourcing per-step - Enforce clippy -D warnings - Ignore RUSTSEC-2025-0134 in cargo audit - Pass GITEA_TOKEN via env for release step	2026-04-27 02:43:46 +00:00
Echo	bcb93c1d2d	ci: pin runner to ubuntu-22.04	2026-04-27 02:35:57 +00:00
Echo	9fd3e8c2f8	ci: Trigger CI test with ubuntu-latest containers and GITEA_TOKEN config	2026-04-24 17:26:56 +00:00