3207 Commits

Author SHA1 Message Date
miloschwartz
2f013335f9 make user lookup deterministic in blueprints by sorting 2026-09-01 15:36:39 -04:00
Owen
780d767a65 Merge branch 'main' into dev 2026-08-31 17:07:56 -04:00
Owen Schwartz
d6d923e972 Merge pull request #3628 from aithal007/perf/add-fk-indexes
perf: add secondary FK indexes to core OSS schemas
2026-08-31 17:05:04 -04:00
Parikshith
41139f2fd0 perf: add secondary FK indexes to core OSS schemas
Add 13 secondary indexes across 10 tables in the SQLite schema and
5 missing indexes to the PostgreSQL schema.

All list endpoints (listSites, listResources, listClients, listRoles,
listTargets, listUserOrgs) filter and join on these FK columns. In the
SQLite schema, no secondary indexes existed at all on these foreign keys,
forcing full sequential scans on every paginated request and session lookup.

SQLite changes (13 new indexes):
  - sites.orgId
  - resources.orgId
  - targets.resourceId, targets.siteId
  - newt.siteId
  - clients.orgId, clients.userId
  - labels.orgId
  - olms.userId
  - session.userId
  - userOrgs.userId, userOrgs.orgId
  - roles.orgId

PG changes (5 new indexes, rest already present):
  - labels.orgId
  - session.userId
  - userOrgs.userId, userOrgs.orgId
  - roles.orgId
  - olms.userId
2026-08-31 17:04:01 -04:00
Owen Schwartz
ebcdeab414 Merge pull request #3597 from shleeable/patch-11
Fix: License.check can fail silently
2026-08-31 17:02:53 -04:00
Owen
2cc7d03ace Update to fall back but still use cache 2026-08-31 17:02:03 -04:00
Owen Schwartz
c36cf698c1 Merge pull request #3627 from fosrl/feat/ip-filtering
feat: Add IP column filtering to tables
2026-08-31 16:59:34 -04:00
Shlee
34671c6b13 Update license.ts 2026-08-31 16:57:36 -04:00
Owen Schwartz
8dfc95347f Merge pull request #3655 from moverq1337/fix/access-token-delete-root-key
Fix access token deletion for root API keys
2026-08-31 16:54:18 -04:00
miloschwartz
39722d30af resolve security-key login only for a unique internal user 2026-08-31 14:39:36 -04:00
miloschwartz
8aef14cf9f harden initial server-admin setup against duplicate users and races 2026-08-31 12:36:42 -04:00
miloschwartz
dd0a5a359a check for namespace domain before blocking org check 2026-08-31 10:59:50 -04:00
moverq1337
1650ece0c3 Fix root API key access in verifyApiKeyAccessTokenAccess 2026-08-28 22:45:31 +03:00
Owen Schwartz
bc56a2bed0 Merge pull request #3647 from argueta-xyz/country-is-not-rule-via-blueprint
Allow COUNTRY_IS_NOT rules to be created via Blueprints
2026-08-28 10:52:24 -04:00
Owen
872e0f9ae1 Merge branch 'main' into dev 2026-08-28 09:54:46 -04:00
Alejandro Argueta
7cda28d685 Update RuleSchema to allow COUNTRY_IS_NOT rules to be created via blueprints as well. 2026-08-27 14:18:48 -07:00
Owen
60bc74c4df Add AI provider and usage metrics to telemetry data collection 2026-08-27 16:54:04 -04:00
Milo Schwartz
7a95e543d8 Merge pull request #3645 from fosrl/dev
Dev
2026-08-27 14:53:42 -04:00
miloschwartz
a47a68d8e1 update badger version 2026-08-27 11:40:46 -04:00
Owen Schwartz
ed0d6fb6b9 Merge pull request #3644 from fosrl/dev
1.22.0-s.2
2026-08-26 11:30:38 -04:00
Owen
a02d16fd58 Handle compression of ai session logs 2026-08-26 11:28:14 -04:00
Owen
331fee24d4 Make the default session storage 0 2026-08-26 11:02:39 -04:00
Owen Schwartz
5bdb12dafe Merge pull request #3643 from fosrl/dev
1.22.0-s.1
2026-08-26 10:53:37 -04:00
Owen
e57826d6e0 Session logs and usage logs should use seconds not ms 2026-08-26 10:50:16 -04:00
miloschwartz
3d4e143c1f normalize key in rate limiters 2026-08-26 10:25:29 -04:00
miloschwartz
10a25c184d fix get /site-resource/:siteResourceId always returning 400 2026-08-26 10:03:39 -04:00
miloschwartz
906099d1e1 fix org domain access check so unmapped domains are rejected 2026-08-26 09:55:40 -04:00
miloschwartz
9a5824900d strip encrypted ssh key from org response 2026-08-26 09:39:05 -04:00
Owen Schwartz
f3474dac98 Merge pull request #3641 from fosrl/dev
1.22.0
2026-08-25 17:19:46 -04:00
Owen
72d2c79793 Add migration for streaming table 2026-08-25 10:42:56 -04:00
Owen
23764feb4f Move the messaging out of the transaction 2026-08-25 09:27:02 -04:00
Fred KISSIE
d00b9478a2 Merge branch 'dev' into feat/ip-filtering 2026-08-24 22:06:55 +02:00
Fred KISSIE
4ddf36ebcc 💄 some last UI fixes 2026-08-24 20:39:30 +02:00
miloschwartz
2051e5df37 fix syntax 2026-08-24 14:32:52 -04:00
Owen
5b782a842c Fix #2937 2026-08-24 11:42:35 -04:00
Owen
8ae42e1852 Fix list users not respecting policy
Fixes #3632
2026-08-24 11:18:09 -04:00
Owen
9b0e049a21 Scope exit node creation to orgs 2026-08-24 10:44:54 -04:00
Fred KISSIE
28b32fe6f7 🏷️ fix types 2026-08-21 23:26:18 +02:00
Fred KISSIE
adfb6003d9 Merge branch 'dev' into feat/ip-filtering 2026-08-21 23:24:09 +02:00
Owen
19ce236262 Support AI session log streaming 2026-08-21 17:22:00 -04:00
Fred KISSIE
6a5ecab013 Implement IP filtering for admin access logs 2026-08-21 22:49:45 +02:00
Owen
eca1c9044c Rename siteResourceId to resourceId 2026-08-21 15:24:20 -04:00
Owen
4229ef9173 Change log to warn 2026-08-21 14:03:36 -04:00
Owen
d5ea0ecbc1 Include user in the request logs 2026-08-21 13:50:56 -04:00
Owen
59f286299e Move the request log to be public 2026-08-21 13:41:45 -04:00
Owen
442cefda84 Dont allow clients to connect to remote nodes quite yet 2026-08-21 12:25:14 -04:00
Owen
e3e1508e8a Handle warning and no routing to remote exit nodes for ai providers 2026-08-21 12:09:22 -04:00
Owen
2e87927b83 Remove unused use_subdomain 2026-08-21 10:21:21 -04:00
Fred KISSIE
65e4fe91b9 🚧 wip: add ip is column filter 2026-08-20 23:59:31 +02:00
Owen
e65a79cc48 Rename to v1_models and use with openai as well 2026-08-20 16:01:07 -04:00