Pulse/scripts
courtmanr@gmail.com 9db25ba60e Fix doubled auto-update schedule and unfreeze sandboxed refreshes
Residual auto-update defects found while triaging #1643 and #1637
(the primary regression was fixed in 806cbe83d):

- The generated pulse-update.timer carried both OnCalendar=daily and
  OnCalendar=02:00, so with RandomizedDelaySec=4h every box attempted
  two updates per day (00:00-04:00 and 02:00-06:00 windows). Keep the
  single documented 02:00 schedule.
- The generated pulse-update.service sandbox (ProtectSystem=strict)
  excluded the helper and unit directories from ReadWritePaths, so the
  unattended path could never refresh /usr/local/bin/pulse-auto-update.sh
  or rewrite the units - updater fixes only reached boxes via manual
  installs. Grant the sandbox write access to both directories on
  purpose.
- Because the unattended path replaces the helper bash is currently
  executing, stage the new helper next to its destination and swap it
  in with an atomic rename only after repo configuration succeeds. A
  failed download or configure now leaves the previously working helper
  in place instead of rm -f'ing it out from under the enabled timer's
  ExecStart.
- Delete scripts/systemd/pulse-update.{service,timer}: orphaned
  reference copies that had drifted from the units install.sh actually
  generates and were referenced by nothing.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-28 11:13:37 +01:00
..
dev Fix settings security tab navigation 2025-10-11 23:29:47 +00:00
eval chore: add evaluation scripts, CI workflow and dev tooling 2026-01-30 19:00:48 +00:00
installtests Fix doubled auto-update schedule and unfreeze sandboxed refreshes 2026-07-28 11:13:37 +01:00
intelligence_lab Document RG-06 autonomy proof runner 2026-07-13 18:32:56 +01:00
lib backend and governance: MCP contract, agent capabilities, API, and release-control 2026-06-23 17:26:15 +01:00
lint-fixer feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
release_control Authorize v6.1.2 unsigned Windows release exception 2026-07-26 21:07:47 +01:00
tests Measure verified telemetry outcomes 2026-07-27 10:15:48 +01:00
.go-version Modernize Unified Agent lifecycle and platform support 2026-07-09 23:20:35 +01:00
audit-private-boundary.sh feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
backfill-release-assets.sh Add historical release asset backfill workflow 2026-04-22 17:25:58 +01:00
build-release.sh Allow RCs while Windows signing is pending 2026-07-10 23:12:12 +01:00
bundle.manifest feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
bundle.sh feat: add shared script library system and refactor docker-agent installer 2025-10-20 15:13:38 +00:00
check-bench-regression.sh feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
check-workflow-dispatch-inputs.py fix(release): restore release helper executable bits 2026-03-26 12:26:55 +00:00
check_telemetry_schema_parity.py Add privacy-safe telemetry lifecycle and outcome signals 2026-07-23 01:10:38 +01:00
clean-mock-alerts.sh Route mock alert cleanup through managed runtime 2026-03-24 15:49:29 +00:00
cleanup.sh feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
cloud-backup.sh feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
com.pulse.hot-dev.plist.template feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
conformance-smoke.sh feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
demo_public_browser_smoke.cjs Harden demo public browser smoke readiness 2026-04-12 17:07:50 +01:00
dev-check.sh Switch script-reference integrity test from rg to git grep for portable CI 2026-05-12 00:30:43 +01:00
dev-deploy-agent.sh Harden dev agent deploy SSH host verification 2026-04-22 11:41:50 +01:00
dev-launchd-setup.sh Prefer managed runtime controls in launchd helper 2026-03-24 16:01:14 +00:00
dev-launchd-wrapper.sh Supervise launchd dev runtime through hot-dev-bg 2026-03-24 15:39:55 +00:00
docker-build.sh security: complete Phase 1 sensor proxy hardening 2025-10-20 15:13:37 +00:00
ensure_test_assets.sh feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
exclusive-lock.mjs feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
generate-pulse-intelligence-docs.go backend and governance: MCP contract, agent capabilities, API, and release-control 2026-06-23 17:26:15 +01:00
generate-release-notes.sh Add in-app release highlights 2026-07-13 18:30:29 +01:00
generate-self-hosted-feature-catalog.go Format generated self-hosted feature catalog with prettier in the generator 2026-07-27 11:58:05 +01:00
generate-types.go feat(assistant): mid-turn steering of the running response 2026-07-12 23:01:40 +01:00
hot-dev-bg.sh backend and governance: MCP contract, agent capabilities, API, and release-control 2026-06-23 17:26:15 +01:00
hot-dev.sh Build canonical Patrol attention workbench 2026-07-19 15:11:01 +01:00
install-container-agent.sh Restore Docker agents to Hosts inventory 2026-07-23 22:06:56 +01:00
install-docker.sh Prepare v6.2.0-rc.1 release 2026-07-27 14:08:29 +01:00
install-go-toolchain.sh Modernize Unified Agent lifecycle and platform support 2026-07-09 23:20:35 +01:00
install-mcp.ps1 Stop install-mcp scripts from linking to GitHub blob/main docs 2026-05-11 23:58:45 +01:00
install-mcp.sh Stop install-mcp scripts from linking to GitHub blob/main docs 2026-05-11 23:58:45 +01:00
install.ps1 Align Windows agent state with the installer 2026-07-19 19:41:57 +01:00
install.sh Guard agent installs against tight disks and rotate appliance agent logs 2026-07-26 20:16:05 +01:00
package-helm-chart.sh release: prepare v4.25.0 2025-10-22 10:46:18 +00:00
patrol_e2e_matrix.sh feat(patrol): implement patrol findings, evaluation, and investigation logic 2026-01-31 16:23:08 +00:00
pulse-auto-update.sh Fix auto-update leaving service down after installer failure 2026-07-27 09:38:37 +01:00
release_asset_common.sh Fix release key helper module path 2026-05-04 09:44:41 +01:00
release_candidate_manifest.py Build releases once and promote verified candidates 2026-07-09 22:21:34 +01:00
release_ldflags.sh Require signed unified agent release assets 2026-04-22 02:00:29 +01:00
release_update_key.go Fix v6 demo release signing key deployment 2026-05-05 21:40:14 +01:00
remerge-parallel.sh Align v6 release branch governance 2026-03-19 10:18:45 +00:00
render_installers.go Fix RC3 backend release blockers 2026-05-01 21:36:28 +01:00
repo-boundary-paid-surface.allowlist feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
run_cloud_public_signup_smoke.sh Add Pulse Cloud public signup smoke 2026-04-23 23:09:10 +01:00
run_demo_public_browser_smoke.sh Add public browser smoke proof to demo workflows 2026-04-11 13:50:00 +01:00
run_hosted_staging_smoke.sh Auto-select hosted staging tenant 2026-04-15 12:23:57 +01:00
session-handoff.sh feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
standalone.manifest feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
sync-production-config.sh chore: update dev scripts and mock configuration 2026-01-22 22:32:45 +00:00
sync_chart_release_metadata.py fix(deploy): pin docs links to release refs 2026-03-28 21:32:11 +00:00
telemetry_adoption_report.py Measure verified telemetry outcomes 2026-07-27 10:15:48 +01:00
test-vm-disk.sh Update Proxmox guest agent permissions docs and tooling (refs #548) 2025-10-14 10:21:52 +00:00
toggle-mock.sh fix(mock): backfill the metrics store in mock mode so reports get real history 2026-06-10 21:25:02 +01:00
trigger-release-dry-run.sh Record v6.1.0 unsigned Windows exception 2026-07-22 15:37:48 +01:00
trigger-release.sh Record v6.1.0 unsigned Windows exception 2026-07-22 15:37:48 +01:00
trigger-stable-patch.sh Fix stable patch workflow dispatch input types 2026-07-23 13:31:31 +01:00
uninstall-sensor-proxy.sh Prepare v6.0.0 release candidate 2026-06-04 14:07:14 +01:00
validate-published-release.sh Publish signed release-packet SBOM assets 2026-04-22 16:49:29 +01:00
validate-release.sh Delete the unreachable adapter Execute/Rollback update path and the unused UpdateQueue 2026-07-10 01:14:40 +01:00