rcourtman 9bac3f421d Fix agent-token fallback to reject cross-org tokens and update security contract test ... Two test regressions introduced when agent-report tokens were allowed as fallback auth for /api/auto-register: 1. Org mismatch was not checked: a token belonging to org-a could authenticate a request whose context carried org-b. Add an explicit org consistency check before setting authenticated=true in the fallback path. 2. The security regression test assumed only setup tokens could authenticate auto-register. That contract has intentionally changed: agent-report tokens can now authenticate but are restricted to updating existing nodes (403 for new-node attempts). Update the test to assert the actual security boundary.		2026-04-18 23:10:50 +01:00
..
agentexec	Stabilize backend race tests for v6 RC publish	2026-04-11 22:46:34 +01:00
agenttls	feat: Pulse v6 release	2026-03-18 16:06:30 +00:00
agentupdate	Fix PVE token re-registration after agent reinstall	2026-04-18 21:44:42 +01:00
ai	Flush OpenAI SSE buffers on EOF	2026-04-15 17:37:51 +01:00
alerts	Resolve guest custom-rule alert paths	2026-04-15 17:25:07 +01:00
api	Fix agent-token fallback to reject cross-org tokens and update security contract test	2026-04-18 23:10:50 +01:00
bootstrap	feat: Pulse v6 release	2026-03-18 16:06:30 +00:00
cloudcp	Migrate Docker integrations to maintained Moby modules	2026-04-18 11:40:38 +01:00
config	Preserve standalone host continuity across restart	2026-04-15 16:23:42 +01:00
crypto	Fix non-root storage hardening for Helm startup	2026-04-16 21:26:02 +01:00
deploy	feat: Pulse v6 release	2026-03-18 16:06:30 +00:00
discovery	feat: Pulse v6 release	2026-03-18 16:06:30 +00:00
dockeragent	Migrate Docker integrations to maintained Moby modules	2026-04-18 11:40:38 +01:00
hostagent	Add periodic Proxmox registration health check loop	2026-04-18 22:25:18 +01:00
hosted	feat: Pulse v6 release	2026-03-18 16:06:30 +00:00
hostmetrics	feat: Pulse v6 release	2026-03-18 16:06:30 +00:00
kubernetesagent	feat: Pulse v6 release	2026-03-18 16:06:30 +00:00
license	Gate release mock fixtures behind demo entitlement	2026-04-10 12:33:57 +01:00
logging	Stabilize backend race tests for v6 RC publish	2026-04-11 22:46:34 +01:00
metrics	feat: Pulse v6 release	2026-03-18 16:06:30 +00:00
mock	Stabilize publish-path mock fixture proofs	2026-04-12 00:55:44 +01:00
mockmode	Gate release mock fixtures behind demo entitlement	2026-04-10 12:33:57 +01:00
mockmodel	Sharpen mock summary isolation and role shaping	2026-04-01 12:21:36 +01:00
mockruntime	Gate release mock fixtures behind demo entitlement	2026-04-10 12:33:57 +01:00
models	Unify settings infrastructure ledger	2026-04-18 14:54:53 +01:00
monitoring	Unify settings infrastructure ledger	2026-04-18 14:54:53 +01:00
notifications	Stabilize backend race tests for v6 RC publish	2026-04-11 22:46:34 +01:00
recovery	fix(recovery): preserve canonical pbs guest continuity	2026-03-29 11:38:35 +01:00
relay	Stabilize RC release backend race proofs	2026-04-11 23:18:44 +01:00
remoteconfig	feat: Pulse v6 release	2026-03-18 16:06:30 +00:00
repoctl	Reopen v6 release control as pre-RC hold	2026-04-04 22:47:37 +01:00
securityutil	Relax mounted storage-root hardening semantics	2026-04-16 21:37:11 +01:00
sensors	feat: Pulse v6 release	2026-03-18 16:06:30 +00:00
servicediscovery	Bound discovery AI response size	2026-04-15 14:51:50 +01:00
ssh/knownhosts	feat: Pulse v6 release	2026-03-18 16:06:30 +00:00
storagehealth	Port v5 NAS vendor identity and RAID normalization	2026-04-15 12:54:15 +01:00
system	feat: Pulse v6 release	2026-03-18 16:06:30 +00:00
telemetry	Canonicalize usage-data telemetry reporting	2026-04-14 11:05:10 +01:00
testutil	Stabilize rc1 mock mode and metrics history	2026-04-11 16:47:37 +01:00
truenas	Curate demo-facing mock data across platform views	2026-03-31 18:05:55 +01:00
unifiedresources	Prioritize Unraid parity-loss summaries	2026-04-15 16:33:04 +01:00
updates	Canonicalize usage-data telemetry reporting	2026-04-14 11:05:10 +01:00
utils	Canonicalize ago duration formatting	2026-03-19 03:07:56 +00:00
vmware	Curate demo-facing mock data across platform views	2026-03-31 18:05:55 +01:00
websocket	Fix same-host websocket proxy origin checks	2026-04-13 12:04:29 +01:00