Commit Graph

7 Commits

Author SHA1 Message Date
PapaTramp b0abf99d1b feat: suppress sac-fail.count on shutdown (2.3.2-SAC)
Phase 4.2: SAC_SUPPRESS_FAIL_COUNT during lifecycle shutdown so restart during SAC deploy does not trip Telegram fallback. Add docs/sac-ingest.ru.md for SAC_TIMEOUT_SEC guidance, smoke test, and release manifest.
2026-07-08 14:12:25 +10:00
PapaTramp 05733d7402 fix: WHITELIST_IPS validation and CSV load (2.3.1-SAC)
Parse whitelist from config via peek; validate IPv4 octets with BASH_REMATCH and 10# arithmetic.
2026-07-08 13:03:40 +10:00
PapaTramp 18a65078fc feat: safe config parser without source (2.3.0-SAC)
Whitelist-based /etc/ssh-monitor.conf load; validate URLs/enums/CIDR; remove BACKUP_WEBHOOK_URL.
2026-07-08 12:57:36 +10:00
PapaTramp 6511d34ca7 fix: suppress sudo Telegram during SAC agent update (2.2.3-SAC)
Whitelist SAC maintenance commands in ssh-monitor-perms and monitor_sudo; pre-commit uses working python on Windows.
2026-07-08 12:25:06 +10:00
PapaTramp 6df83f1838 feat: release 2.2.1-SAC — phase 2 manifest verify and quiet SAC updates
Pinned GIT_REF/verify, release manifest, no blind reset --hard; suppress
lifecycle and watchdog Telegram during updater; healthcheck via json.dumps.
2026-07-08 11:48:34 +10:00
PapaTramp 275d305d62 feat: watchdog Telegram shows server name (2.1.9-SAC)
Add shared server label helpers in ssh-monitor-perms.sh; roadmap marks
phase 1 done and phase 2.2.0 as next release.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-08 11:28:57 +10:00
PapaTramp 2048162057 feat: release 2.1.8-SAC — security phase 1 and SAC-first update hardening
Updater applies chmod/chown on config, spool and state paths on every run.
SAC is the primary update path; optional cron uses the same behavior.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-08 09:44:24 +10:00