shankar0123 596d86a206 feat(M48): continuous TLS health monitoring — endpoint state machine, shared tlsprobe, 8 API endpoints, GUI ...

Adds continuous TLS endpoint health monitoring that closes the deploy→verify→monitor loop.
After M25 verifies a deployment succeeded once, M48 continuously confirms it stays healthy.

Key components:
- Shared `internal/tlsprobe/` package extracted from network scanner for reuse
- Health status state machine: healthy → degraded (2 failures) → down (5 failures),
  plus cert_mismatch when served fingerprint differs from expected
- 8th scheduler loop (60s tick, per-endpoint configurable intervals)
- PostgreSQL migration 000011: endpoint_health_checks + endpoint_health_history tables
- 8 REST API endpoints (CRUD, history, acknowledge, summary)
- Health Monitor GUI page with summary bar, status table, create modal, auto-refresh
- 38 new tests (5 tlsprobe + 11 domain + 10 service + 8 handler + 4 frontend)
- All coverage thresholds maintained (service 68%, handler 83%, domain 87%, middleware 63%)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-15 21:45:45 -04:00

..

adversarial_est_test.go

fix: return 409 on duplicate issuer name, improve error handling and onboarding defaults

2026-04-12 19:18:32 -04:00

adversarial_path_test.go

fix: return 409 on duplicate issuer name, improve error handling and onboarding defaults

2026-04-12 19:18:32 -04:00

adversarial_query_test.go

fix: return 409 on duplicate issuer name, improve error handling and onboarding defaults

2026-04-12 19:18:32 -04:00

agent_group_handler_test.go

fix: resolve test compilation and runtime failures across codebase

2026-03-27 22:53:46 -04:00

agent_groups.go

fix(quality): TICKET-012 propagate request context instead of context.Background()

2026-03-27 21:35:22 -04:00

agent_handler_test.go

fix: resolve test compilation and runtime failures across codebase

2026-03-27 22:53:46 -04:00

agents.go

fix: end-to-end certificate lifecycle bugs + integration test environment

2026-04-02 17:02:20 -04:00

audit_handler_test.go

test: comprehensive test gap closure across 24 packages

2026-04-09 23:09:40 -04:00

audit.go

Initial scaffold: certificate control plane v0.1.0

2026-03-14 08:22:17 -04:00

certificate_handler_test.go

fix: resolve NULL csr_pem scan errors and QA smoke test failures

2026-03-30 00:51:18 -04:00

certificates.go

feat: add issuer catalog page with type discovery + fix cert creation defaults (M33)

2026-03-30 18:58:23 -04:00

digest_handler_test.go

feat(m28+m29+m30): ACME ARI, email digest, and Helm chart

2026-03-28 21:18:35 -04:00

digest.go

feat(m28+m29+m30): ACME ARI, email digest, and Helm chart

2026-03-28 21:18:35 -04:00

discovery_handler_test.go

test + docs: close 12 test gaps (~250 new tests) and expand testing guide to 34 parts

2026-03-28 17:57:25 -04:00

discovery.go

feat: M18b Filesystem Certificate Discovery — agent scanning, server dedup, triage API

2026-03-24 00:25:00 -04:00

est_handler_test.go

feat(M51): add SCEP server (RFC 8894) for MDM and network device enrollment

2026-04-15 16:47:18 -04:00

est.go

feat(M51): add SCEP server (RFC 8894) for MDM and network device enrollment

2026-04-15 16:47:18 -04:00

export_handler_test.go

test + docs: close 12 test gaps (~250 new tests) and expand testing guide to 34 parts

2026-03-28 17:57:25 -04:00

export.go

fix: resolve NULL csr_pem scan errors and QA smoke test failures

2026-03-30 00:51:18 -04:00

health_check_handler_test.go

feat(M48): continuous TLS health monitoring — endpoint state machine, shared tlsprobe, 8 API endpoints, GUI

2026-04-15 21:45:45 -04:00

health_check.go

feat(M48): continuous TLS health monitoring — endpoint state machine, shared tlsprobe, 8 API endpoints, GUI

2026-04-15 21:45:45 -04:00

health_test.go

test: comprehensive test gap closure across 24 packages

2026-04-09 23:09:40 -04:00

health.go

Implement M7: auth middleware, rate limiting, CORS, and GUI login flow

2026-03-15 11:58:13 -04:00

issuer_handler_test.go

fix: return 409 on duplicate issuer name, improve error handling and onboarding defaults

2026-04-12 19:18:32 -04:00

issuers.go

fix: return 409 on duplicate issuer name, improve error handling and onboarding defaults

2026-04-12 19:18:32 -04:00

job_handler_test.go

feat: M11b — ownership tracking, agent groups, interactive renewal approval

2026-03-20 21:02:35 -04:00

jobs.go

fix: tolerate empty body on job rejection endpoint

2026-03-23 17:39:16 -04:00

metrics.go

feat: add network certificate discovery (M21) and Prometheus metrics (M22)

2026-03-24 23:37:47 -04:00

network_scan_handler_test.go

fix: Docker Compose missing migrations, network scan []int crash, demo seed data

2026-03-27 18:33:50 -04:00

network_scan.go

feat: add network certificate discovery (M21) and Prometheus metrics (M22)

2026-03-24 23:37:47 -04:00

notification_handler_test.go

Implement M9: test hardening with handler tests, negative paths, CI coverage gates

2026-03-15 14:06:48 -04:00

notifications.go

Initial scaffold: certificate control plane v0.1.0

2026-03-14 08:22:17 -04:00

owner_handler_test.go

feat: M15a — certificate revocation API, CRL endpoint, and revocation notifications

2026-03-22 10:59:18 -04:00

owners.go

fix: handle 204 No Content in fetchJSON, add FK-aware delete errors, v2 screenshots

2026-03-25 05:03:50 -04:00

policies.go

Implement M5: hardening, input validation, and Vite+React+TS dashboard

2026-03-15 01:19:19 -04:00

policy_handler_test.go

Implement M9: test hardening with handler tests, negative paths, CI coverage gates

2026-03-15 14:06:48 -04:00

profile_handler_test.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

profiles.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

response_test.go

test: comprehensive test gap closure across 24 packages

2026-04-09 23:09:40 -04:00

response.go

fix(ci): resolve 185 golangci-lint v2 issues — fix unused, tune config

2026-03-27 23:18:04 -04:00

scep_handler_test.go

feat(M51): add SCEP server (RFC 8894) for MDM and network device enrollment

2026-04-15 16:47:18 -04:00

scep.go

feat(M51): add SCEP server (RFC 8894) for MDM and network device enrollment

2026-04-15 16:47:18 -04:00

stats_handler_test.go

test + docs: close 12 test gaps (~250 new tests) and expand testing guide to 34 parts

2026-03-28 17:57:25 -04:00

stats.go

feat: M14 — Observability (dashboard charts, agent fleet, stats API, metrics, structured logging, rollback)

2026-03-22 19:46:13 -04:00

target_handler_test.go

feat(M35): dynamic target configuration with encrypted config, test connection, and GUI updates

2026-04-04 01:09:53 -04:00

targets.go

feat(M35): dynamic target configuration with encrypted config, test connection, and GUI updates

2026-04-04 01:09:53 -04:00

team_handler_test.go

feat: M15a — certificate revocation API, CRL endpoint, and revocation notifications

2026-03-22 10:59:18 -04:00

teams.go

Implement M5: hardening, input validation, and Vite+React+TS dashboard

2026-03-15 01:19:19 -04:00

test_utils.go

Implement M4: comprehensive test coverage with 120 tests

2026-03-15 00:25:01 -04:00

validation_test.go

fix: resolve 8 staticcheck lint errors in test files

2026-04-09 23:27:57 -04:00

validation.go

feat: S/MIME certificate support in integration tests + test env docs

2026-04-02 18:32:57 -04:00

verification_handler_test.go

test + docs: close 12 test gaps (~250 new tests) and expand testing guide to 34 parts

2026-03-28 17:57:25 -04:00

verification.go

fix: use context.Context instead of interface{} in VerificationService interface

2026-03-27 21:13:48 -04:00