18a65078fc
feat: safe config parser without source (2.3.0-SAC)
...
Whitelist-based /etc/ssh-monitor.conf load; validate URLs/enums/CIDR; remove BACKUP_WEBHOOK_URL.
2026-07-08 12:57:36 +10:00
6511d34ca7
fix: suppress sudo Telegram during SAC agent update (2.2.3-SAC)
...
Whitelist SAC maintenance commands in ssh-monitor-perms and monitor_sudo; pre-commit uses working python on Windows.
2026-07-08 12:25:06 +10:00
0399a6d384
fix: manifest SHA256 from git blobs (CRLF/LF) — release 2.2.2-SAC
...
Manifest was hashed from Windows working tree while Linux checkout uses
git blobs; verify failed with sha256 mismatch. build-release-manifest.sh
now hashes :index/HEAD; .gitattributes enforces LF for agent scripts.
2026-07-08 12:00:51 +10:00
6df83f1838
feat: release 2.2.1-SAC — phase 2 manifest verify and quiet SAC updates
...
Pinned GIT_REF/verify, release manifest, no blind reset --hard; suppress
lifecycle and watchdog Telegram during updater; healthcheck via json.dumps.
2026-07-08 11:48:34 +10:00
PTah