Shankar c17ea577e7 I-003: job timeout reaper closes AwaitingCSR/AwaitingApproval gap ...

Add 11th always-on scheduler loop that transitions jobs stuck in
AwaitingCSR (default 24h TTL) or AwaitingApproval (default 168h TTL)
to Failed. I-001's retry loop then auto-promotes eligible Failed jobs
back to Pending. No new status enum, no schema migration.

- JobRepository.ListTimedOutAwaitingJobs with per-status cutoff WHERE
- JobService.ReapTimedOutJobs mirrors RetryFailedJobs structure
- Scheduler jobTimeoutLoop with atomic.Bool idempotency guard, 2m
  per-tick context, WaitGroup shutdown drain
- Config: CERTCTL_JOB_TIMEOUT_INTERVAL (10m), CERTCTL_JOB_AWAITING_CSR_TIMEOUT
  (24h), CERTCTL_JOB_AWAITING_APPROVAL_TIMEOUT (168h)
- Audit event per transition: actor=system, actorType=System,
  action=job_timeout, details={old_status, new_status, timeout_reason,
  age_hours}
- 14 new tests: 3 config, 7 service, 4 scheduler

2026-04-19 01:37:18 +00:00

..

agent_group_test.go

fix: resolve test compilation and runtime failures across codebase

2026-03-27 22:53:46 -04:00

agent_group.go

fix(quality): TICKET-012 propagate request context instead of context.Background()

2026-03-27 21:35:22 -04:00

agent_test.go

fix(m2-pr-e): collapse AgentService.HeartbeatWithContext into Heartbeat

2026-04-18 01:25:20 +00:00

agent.go

fix(m2-pr-e): collapse AgentService.HeartbeatWithContext into Heartbeat

2026-04-18 01:25:20 +00:00

audit_test.go

Implement M4: comprehensive test coverage with 120 tests

2026-03-15 00:25:01 -04:00

audit.go

fix(m2-pr-d): thread ctx through Job/Notification/Audit services

2026-04-18 01:20:46 +00:00

bulk_revocation_test.go

feat(V2.2): bulk revocation — filter-based fleet-wide certificate revocation

2026-04-16 00:06:34 -04:00

bulk_revocation.go

feat(V2.2): bulk revocation — filter-based fleet-wide certificate revocation

2026-04-16 00:06:34 -04:00

ca_operations_test.go

Close M-004 (OCSP issuer binding) and M-005 (discovery actor propagation) coverage-gap findings

2026-04-18 22:20:25 +00:00

ca_operations.go

Close M-004 (OCSP issuer binding) and M-005 (discovery actor propagation) coverage-gap findings

2026-04-18 22:20:25 +00:00

certificate_nil_safety_test.go

fix(m-2): thread context through CertificateService cluster

2026-04-18 00:29:37 +00:00

certificate_test.go

fix(m-2): thread context through CertificateService cluster

2026-04-18 00:29:37 +00:00

certificate.go

fix(m-2): thread context through CertificateService cluster

2026-04-18 00:29:37 +00:00

cloud_discovery_test.go

feat(M50): cloud secret manager discovery — AWS SM, Azure KV, GCP SM

2026-04-15 23:01:00 -04:00

cloud_discovery.go

feat(M50): cloud secret manager discovery — AWS SM, Azure KV, GCP SM

2026-04-15 23:01:00 -04:00

concurrent_test.go

fix(m2-pr-e): collapse AgentService.HeartbeatWithContext into Heartbeat

2026-04-18 01:25:20 +00:00

config_helpers_test.go

test: comprehensive test gap closure across 24 packages

2026-04-09 23:09:40 -04:00

config_helpers.go

feat(M35): dynamic target configuration with encrypted config, test connection, and GUI updates

2026-04-04 01:09:53 -04:00

context_test.go

fix(m2-pr-e): collapse AgentService.HeartbeatWithContext into Heartbeat

2026-04-18 01:25:20 +00:00

crypto_validation_test.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

crypto_validation.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

csr_renewal_test.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

deployment_test.go

feat(M31): agent work routing — scope jobs to assigned agents

2026-03-30 14:10:42 -04:00

deployment.go

feat(M31): agent work routing — scope jobs to assigned agents

2026-03-30 14:10:42 -04:00

digest_test.go

feat(m28+m29+m30): ACME ARI, email digest, and Helm chart

2026-03-28 21:18:35 -04:00

digest.go

fix: staticcheck S1016 struct conversion + Helm with/else-if parse error

2026-03-28 21:25:25 -04:00

discovery_test.go

Close M-004 (OCSP issuer binding) and M-005 (discovery actor propagation) coverage-gap findings

2026-04-18 22:20:25 +00:00

discovery.go

Close M-004 (OCSP issuer binding) and M-005 (discovery actor propagation) coverage-gap findings

2026-04-18 22:20:25 +00:00

est_test.go

feat: add EST server (RFC 7030) for device certificate enrollment (M23)

2026-03-25 15:31:06 -04:00

est.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

export_test.go

feat(m27): certificate export (PEM/PKCS#12) and S/MIME EKU support

2026-03-28 16:16:19 -04:00

export.go

fix: resolve NULL csr_pem scan errors and QA smoke test failures

2026-03-30 00:51:18 -04:00

health_check_test.go

feat(M48): continuous TLS health monitoring — endpoint state machine, shared tlsprobe, 8 API endpoints, GUI

2026-04-15 21:45:45 -04:00

health_check.go

feat(M48): continuous TLS health monitoring — endpoint state machine, shared tlsprobe, 8 API endpoints, GUI

2026-04-15 21:45:45 -04:00

issuer_adapter_test.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

issuer_adapter.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

issuer_bootstrap_test.go

fix(crypto): per-ciphertext PBKDF2 salt + v2 versioned format with v1 fallback (M-8)

2026-04-17 05:36:29 +00:00

issuer_registry_test.go

fix(crypto): per-ciphertext PBKDF2 salt + v2 versioned format with v1 fallback (M-8)

2026-04-17 05:36:29 +00:00

issuer_registry.go

fix(crypto): per-ciphertext PBKDF2 salt + v2 versioned format with v1 fallback (M-8)

2026-04-17 05:36:29 +00:00

issuer_test.go

M-2 PR-B: Collapse IssuerService + TargetService to ctx-first signatures

2026-04-18 00:46:58 +00:00

issuer.go

M-2 PR-B: Collapse IssuerService + TargetService to ctx-first signatures

2026-04-18 00:46:58 +00:00

job_test.go

I-003: job timeout reaper closes AwaitingCSR/AwaitingApproval gap

2026-04-19 01:37:18 +00:00

job.go

I-003: job timeout reaper closes AwaitingCSR/AwaitingApproval gap

2026-04-19 01:37:18 +00:00

m11c_crypto_enforcement_test.go

security: require SCEP challenge password when SCEP enabled (fixes H-2)

2026-04-16 22:22:51 +00:00

network_scan_test.go

fix(m-9): aggregate per-endpoint scan errors in NetworkScanService

2026-04-18 02:34:14 +00:00

network_scan.go

fix(m-9): aggregate per-endpoint scan errors in NetworkScanService

2026-04-18 02:34:14 +00:00

notification_test.go

fix(m2-pr-d): thread ctx through Job/Notification/Audit services

2026-04-18 01:20:46 +00:00

notification.go

fix(m2-pr-d): thread ctx through Job/Notification/Audit services

2026-04-18 01:20:46 +00:00

owner_test.go

M-2 PR-C: Collapse Policy/Profile/Owner/Team services to ctx-first signatures

2026-04-18 01:10:06 +00:00

owner.go

M-2 PR-C: Collapse Policy/Profile/Owner/Team services to ctx-first signatures

2026-04-18 01:10:06 +00:00

policy_test.go

fix(policies): close the D-006 loop — TitleCase seed canonicals + severity-aware, config-consuming rule engine (D-008)

2026-04-18 14:55:56 +00:00

policy.go

fix(policies): close the D-006 loop — TitleCase seed canonicals + severity-aware, config-consuming rule engine (D-008)

2026-04-18 14:55:56 +00:00

profile_test.go

M-2 PR-C: Collapse Policy/Profile/Owner/Team services to ctx-first signatures

2026-04-18 01:10:06 +00:00

profile.go

M-2 PR-C: Collapse Policy/Profile/Owner/Team services to ctx-first signatures

2026-04-18 01:10:06 +00:00

renewal_test.go

docs: rewrite features.md, audit README + architecture against repo

2026-04-15 00:22:57 -04:00

renewal.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

revocation_svc_test.go

fix(m-2): thread context through CertificateService cluster

2026-04-18 00:29:37 +00:00

revocation_svc.go

fix(m-2): thread context through CertificateService cluster

2026-04-18 00:29:37 +00:00

revocation_test.go

fix(m-2): thread context through CertificateService cluster

2026-04-18 00:29:37 +00:00

scep_test.go

security: require SCEP challenge password when SCEP enabled (fixes H-2)

2026-04-16 22:22:51 +00:00

scep.go

security: require SCEP challenge password when SCEP enabled (fixes H-2)

2026-04-16 22:22:51 +00:00

shortlived_test.go

Close M-004 (OCSP issuer binding) and M-005 (discovery actor propagation) coverage-gap findings

2026-04-18 22:20:25 +00:00

stats_test.go

fix: resolve flaky TestGetJobStats_WithData timezone issue

2026-03-25 20:55:48 -04:00

stats.go

fix: normalize certificate status case in stats service

2026-03-24 12:17:24 -04:00

target_test.go

fix(gui,api): close C-001 + C-002 — ownership + agent FK contract

2026-04-18 16:01:40 +00:00

target.go

fix(gui,api): close C-001 + C-002 — ownership + agent FK contract

2026-04-18 16:01:40 +00:00

team_test.go

M-2 PR-C: Collapse Policy/Profile/Owner/Team services to ctx-first signatures

2026-04-18 01:10:06 +00:00

team.go

M-2 PR-C: Collapse Policy/Profile/Owner/Team services to ctx-first signatures

2026-04-18 01:10:06 +00:00

testutil_test.go

I-003: job timeout reaper closes AwaitingCSR/AwaitingApproval gap

2026-04-19 01:37:18 +00:00

verification_test.go

I-003: job timeout reaper closes AwaitingCSR/AwaitingApproval gap

2026-04-19 01:37:18 +00:00

verification.go

fix: remove unused time import in verification service

2026-03-27 21:11:16 -04:00