2048162057
feat: release 2.1.8-SAC — security phase 1 and SAC-first update hardening
...
Updater applies chmod/chown on config, spool and state paths on every run.
SAC is the primary update path; optional cron uses the same behavior.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-08 09:44:24 +10:00
9e756674d0
fix: daily report без локального Telegram при fallback SAC (2.1.6-SAC)
...
Суточные report.daily.* уходят только в SAC/spool; SAC_TIMEOUT_SEC=45;
приоритет report.* в sac_flush_spool, до 50 файлов за цикл.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-06 12:00:35 +10:00
c96e870542
feat: enrich SAC events with session_id, tty and source_ip (2.1.4-SAC)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-22 10:13:40 +10:00
79f5b664b2
feat: lifecycle notification_body and aligned host label 1.2.13-SAC
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-31 18:11:28 +10:00
cf4e3b2e90
feat: lifecycle telegram_via routing and lifecycle details 1.2.12-SAC
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-31 12:26:14 +10:00
eceac58a60
feat: include host.ipv4 in SAC payload and release 1.2.7-SAC
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 13:33:40 +10:00
3e1199e2ec
chore: align ssh monitor and SAC module version 1.2.6-SAC
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 13:01:51 +10:00
8c542624eb
feat: SERVER_DISPLAY_NAME в SAC host.display_name (sac-client 1.2.6-SAC)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 11:49:23 +10:00
f06fbae8ee
fix: update_ssh_monitor fetch+reset after kalinamall force-push
...
Release 1.2.5-SAC; prefer kalinamall remote; ff-only or hard reset.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 09:40:13 +10:00
fe2a38857b
chore: release 1.2.4-SAC — SAC ingest HTTP 201/409/202
...
Bump SSH_MONITOR_VERSION; sac-client release tag; updater logs sac-client ver.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 09:34:19 +10:00
0e83d8825d
fix: accept SAC ingest HTTP 201, 409, and legacy 202
2026-05-28 09:13:13 +10:00
d179b360f2
fix: heartbeat only to SAC, never Telegram/email
...
agent.heartbeat bypasses NOTIFY_CHAIN in all UseSAC modes; SAC ingest only.
Bump to 1.2.3-SAC.
2026-05-28 07:56:18 +10:00
a4ea24c3f1
feat: SAC fallback failure counter (2.3)
...
After SAC_FALLBACK_FAILURES consecutive POST errors, skip SAC until
/health recovers; persist count in SAC_FAIL_COUNT_FILE.
2026-05-27 13:36:19 +10:00
3a1c9655ca
feat: exclusive pilot — spool flush and verify script
...
Replay spool on each monitor loop; sac_post_payload refactor;
pilot-verify-exclusive.sh and --check-sac hints for exclusive mode.
2026-05-27 13:25:47 +10:00
1928e68088
fix: POST ingest to /api/v1/events when SAC_URL is host root
...
Health already used sac_base_url(); ingest used raw SAC_URL and got
HTTP 405 when config had only https://host without /api/v1/events.
2026-05-27 12:22:10 +10:00
18562af07a
feat: map security events to SAC typed payloads
2026-05-27 11:24:19 +10:00
52654e2735
feat: sudo и notify_send шлют события в SAC (dual)
2026-05-27 11:01:47 +10:00
dd971d80bc
feat: UseSAC sac-client.sh and --check-sac
2026-05-26 21:46:35 +10:00
PTah