Commit Graph

  • cd98648a67 Add elevation for dangerous ssh flags grpc-acl Theodor S. Midtlien 2026-07-24 21:26:47 +02:00
  • 0bb73b3730 Add warning log for tcp json socket Theodor S. Midtlien 2026-07-24 19:39:58 +02:00
  • 2243d1c3bb Read reverse proxy restrictions in Postgres pgx path reverse-proxy-allow-match-or Viktor Liu 2026-07-24 19:00:33 +02:00
  • 40cdfda878 Add allow_match any/all mode to reverse proxy access restrictions Viktor Liu 2026-07-24 18:18:40 +02:00
  • 8f9e5f4bc0 track resources in compactgroups components-impl-drop-indexes-use-xids-no-resource-policy-map Dmitri Dolguikh 2026-07-24 17:40:56 +02:00
  • cd983c50ea Reject out-of-range listen_port and split service meta scan fix-pgx-service-column-parity Viktor Liu 2026-07-24 16:26:03 +02:00
  • 828df028f3 Guard Postgres service/target column lists against gorm drift Viktor Liu 2026-07-24 15:58:38 +02:00
  • 982794d46e Split getServices into scanService and getServiceTargets helpers Viktor Liu 2026-07-24 15:53:29 +02:00
  • 9a5691fec8 Read reverse-proxy service restrictions and target options in Postgres path Viktor Liu 2026-07-24 15:45:26 +02:00
  • 5e07a0c27b Add migration for legacy profile ownership Theodor S. Midtlien 2026-07-24 15:31:57 +02:00
  • 1e5b0a5c89 [client] Make Test_ConnectPeers deterministic under Docker/eBPF kernel / Darwin CI (#6884) main Riccardo Manfrin 2026-07-24 15:23:22 +02:00
  • 7ed3737cda revert component types revert/component-types pascal 2026-07-24 15:16:55 +02:00
  • ec3d627a69 reduce hashing on relevant groups calc fix/nmap-relevant-groups pascal 2026-07-24 15:06:24 +02:00
  • 0137876618 Clean up comments Theodor S. Midtlien 2026-07-24 14:57:21 +02:00
  • f9f7995ebe [proxy] emit cost-audit logs unconditionally at warn severity claude/model-cost-calculation-bug-9hic1n Maycon Santos 2026-07-24 12:25:52 +00:00
  • f22b25a091 ci: temporarily run agent-network e2e on push to this branch agent-network-per-policy-model-allowlist mlsmaycon 2026-07-24 11:57:44 +00:00
  • b65ec8b68a [client] Restores lost backup.Reset from #4935 (#6883) Riccardo Manfrin 2026-07-24 13:53:53 +02:00
  • b7e4f153c0 agentnetwork: scope model allowlist per policy/group and provider mlsmaycon 2026-07-24 11:42:33 +00:00
  • dd79f9db4a Merge branch 'main' into fix/ios-common-tunnel-notifier fix/ios-common-tunnel-notifier Zoltan Papp 2026-07-24 13:14:14 +02:00
  • e13bcdbd44 [client] Fetch FreeBSD port files from GitHub mirror instead of cgit (#6880) Zoltan Papp 2026-07-24 13:10:53 +02:00
  • 1107c488a3 [client] Make tunnel notifier Close wait for queued events to drain Zoltán Papp 2026-07-24 12:26:27 +02:00
  • 53bd8aae73 [client] Keep tray quit state across an aborted Windows session end fix/ui-windows-endsession-shutdown Zoltán Papp 2026-07-24 11:21:42 +02:00
  • 57f9cbe5ff Add migration from legacy tcp to named pipes Theodor S. Midtlien 2026-07-24 10:58:29 +02:00
  • 8d9c8b7799 [client] Exit GUI immediately on Windows session end Zoltán Papp 2026-07-24 10:39:12 +02:00
  • 18f1df4d5a Merge branch 'main' into force-routing-peer-dns-reverse-proxy force-routing-peer-dns-reverse-proxy Viktor Liu 2026-07-24 15:26:28 +09:00
  • cf0c9ca857 [e2e] audit persisted costs with raw SQL against the management store Maycon Santos 2026-07-24 06:15:23 +00:00
  • 8480429e42 [proxy] emit cost-audit logs at warn level Maycon Santos 2026-07-24 05:01:43 +00:00
  • 154084276d [proxy] debug-log every stage of the LLM cost calculation Maycon Santos 2026-07-24 04:59:53 +00:00
  • e814f12995 [e2e] allow zero input_tokens on cache-heavy providers in cost validation Maycon Santos 2026-07-24 02:59:22 +00:00
  • cc577bba32 Bump the aws-sdk group across 1 directory with 4 updates dependabot/go_modules/aws-sdk-8f849ebaed dependabot[bot] 2026-07-24 02:49:54 +00:00
  • eefedb631f Bump the actions group across 1 directory with 14 updates dependabot/github_actions/actions-a940c7c866 dependabot[bot] 2026-07-24 02:48:00 +00:00
  • 2750a0fe1e Bump the otel group across 1 directory with 5 updates dependabot/go_modules/otel-e34c790afd dependabot[bot] 2026-07-24 02:44:31 +00:00
  • 9581bb9c78 Bump the gorm group across 1 directory with 4 updates dependabot/go_modules/gorm-2271c8195b dependabot[bot] 2026-07-24 02:44:28 +00:00
  • d5ef4b1a05 Bump the pion group across 1 directory with 2 updates dependabot/go_modules/pion-5f703e1eca dependabot[bot] 2026-07-24 02:44:26 +00:00
  • 924dcaaf3a Bump the testcontainers group across 1 directory with 3 updates dependabot/go_modules/testcontainers-de325c0dd6 dependabot[bot] 2026-07-24 02:44:26 +00:00
  • cc3c4cedd3 Bump golang.zx2c4.com/wireguard/windows dependabot/go_modules/wireguard-dbd6b95108 dependabot[bot] 2026-07-24 02:44:20 +00:00
  • d2ca48ae19 [e2e] log per-provider billing detail in the cost validation Maycon Santos 2026-07-24 02:07:43 +00:00
  • 3fac269506 [proxy, e2e] validate LLM cost calculation across providers and bill Converse cache tokens Maycon Santos 2026-07-24 01:45:06 +00:00
  • f60ac9e746 Wire up json socket as a named pipe with metdata exchange to daemon Theodor S. Midtlien 2026-07-23 20:27:06 +02:00
  • 2f84aa3d20 Remove PID from Identity Theodor S. Midtlien 2026-07-23 19:37:37 +02:00
  • 4de39a80f8 Clean up windows impersonation/SDDL and some comments Theodor S. Midtlien 2026-07-23 18:11:51 +02:00
  • 46568f7af8 [client] Reconcile routed allowed IPs when a lazy connection goes idle (#6863) Riccardo Manfrin 2026-07-23 18:40:54 +02:00
  • 7e44f7f918 Only force DNS resolution for domain-type resources Viktor Liu 2026-07-23 18:06:41 +02:00
  • 753d80f280 Force routing-peer DNS resolution for reverse-proxy domain targets Viktor Liu 2026-07-23 17:57:10 +02:00
  • 5d9ef0123f Add impersonateNamedPipeClient Theodor S. Midtlien 2026-07-23 16:00:45 +02:00
  • 3358138ccc [client] Fix flaky Test_ConnectPeers busy-loop handshake wait (#6871) v0.75.0 Riccardo Manfrin 2026-07-23 15:48:16 +02:00
  • 48a1782b8b [client] Serialize iOS tunnel reconfiguration callbacks with a shared notifier Zoltán Papp 2026-07-23 15:14:00 +02:00
  • 6d15d0729a [client] Clear stale UDP checksum in eBPF XDP proxy after port rewrite (#6861) Viktor Liu 2026-07-23 21:37:52 +09:00
  • 27afbd7952 WIP: acl interceptor and named pipe ui Theodor S. Midtlien 2026-07-23 14:13:58 +02:00
  • 0936918d24 [management, proxy] add Kimi (Moonshot AI) provider to Agent Network (#6853) Maycon Santos 2026-07-23 20:32:32 +09:00
  • d4a4418969 [misc] Simplify enterprise bootstrap (#6869) Bethuel Mmbaga 2026-07-23 12:41:13 +03:00
  • 31ed241a1a [management] component types (#6866) Pascal Fischer 2026-07-23 11:37:09 +02:00
  • 8ee350835b fix rebuildinf of resource-to-policy map Dmitri Dolguikh 2026-07-23 11:09:08 +02:00
  • c48347c51e [e2e] guardrail blocks the unselected model for path-routed providers e2e-guardrail-blocks-unselected-model Maycon Santos 2026-07-23 05:01:40 +00:00
  • 12c44701d7 [e2e] guardrail blocks the unselected model for path-routed providers Maycon Santos 2026-07-23 05:01:40 +00:00
  • 178e6a8530 [misc] Probe the agent-network endpoint with a GET instead of getent (#6867) Maycon Santos 2026-07-23 15:30:40 +09:00
  • b8cf088be3 [client] Create the WireGuard peer before the peer becomes routable fix/lazyconn-cold-start-allowed-ips Zoltan Papp 2026-07-22 22:59:57 +02:00
  • 96963b6751 [proxy] fix proxy multistage build (#6864) Maycon Santos 2026-07-23 04:24:44 +09:00
  • 16b65729ae [proxy] full-chain regression test: Vertex model allowlist is enforced vertex-guardrails-model-access-e2e Maycon Santos 2026-07-22 08:06:35 +00:00
  • 1b7d23ee9f [e2e] cover unversioned Vertex models, versioned config ids, and count-tokens Maycon Santos 2026-07-22 07:32:40 +00:00
  • a69fe9ba8c [proxy] normalize Vertex model ids in routing, guardrail, and token counting Maycon Santos 2026-07-22 07:32:26 +00:00
  • 6725b02cbb Merge branch 'main' into add-atomic-cache-ops add-atomic-cache-ops bcmmbaga 2026-07-22 20:20:14 +03:00
  • da19dcf480 prevent concurrent JWT reuse bcmmbaga 2026-07-22 20:08:48 +03:00
  • 6426d6f03f add atomic SetNX cache operation bcmmbaga 2026-07-22 20:03:03 +03:00
  • 9770814f39 [client] warm lazy connections from the DNS resolver (#6854) Maycon Santos 2026-07-23 01:47:48 +09:00
  • b0c1ed31b8 [infrastructure] Add unified admin CLI for self-hosted helpers (#6507) Nicolas Frati 2026-07-22 18:47:19 +02:00
  • 8435682ac8 [client, management] offload client config generation to the client (#6711) dmitri-netbird 2026-07-22 18:20:27 +02:00
  • 34f1b67400 have all group flag no proto pascal 2026-07-22 16:40:13 +02:00
  • 210c6f4c7a Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.87.3 to 1.106.0 dependabot/go_modules/github.com/aws/aws-sdk-go-v2/service/s3-1.106.0 dependabot[bot] 2026-07-22 14:04:09 +00:00
  • ed682fad87 [client] Run pnpm install with --ignore-scripts in frontend CI (#6859) Zoltan Papp 2026-07-22 16:01:33 +02:00
  • a12a3e4603 [client] Keep session deadline visible across reconnects (#6847) Zoltan Papp 2026-07-22 15:22:16 +02:00
  • 66a65de9da fix tests Dmitri Dolguikh 2026-07-22 11:49:19 +02:00
  • 85f61d0c57 [relay] Unit test ForeignRelaysStore and FallbackOpener refactor/relay-foreign-cache Zoltán Papp 2026-07-22 11:46:07 +02:00
  • dc89b471fa [client] checks/enforce MDM disableAutostart on every GUI launch, not just fresh installs (#6782) Riccardo Manfrin 2026-07-22 11:34:13 +02:00
  • fdabe10612 [infrastructure] trigger release tests for stable and RC releases ci/trigger-release-tests jnfrati 2026-07-22 10:49:53 +02:00
  • e82127b397 remove unused agentversions parameter Dmitri Dolguikh 2026-07-22 09:33:57 +02:00
  • d820aaa8fc [client] Address review comments on DNS lazy-connection warm-up claude/netbird-pr-6767-comments-c0qkci mlsmaycon 2026-07-22 05:22:28 +00:00
  • fbccc6087d Keep lazy connections enabled in the agent-network e2e harness feature/kimi-3-agent-networks-dns-warmup Claude 2026-07-22 04:51:57 +00:00
  • baf60e35b2 Merge remote-tracking branch 'origin/feat/kimi-3-agent-networks' into feature/kimi-3-agent-networks-dns-warmup Claude 2026-07-22 04:51:16 +00:00
  • 11b7709af2 Revert "[ci] Temporarily run agent-network e2e on push to this branch" feature/dns-lazy-conn-warmup Claude 2026-07-22 04:47:34 +00:00
  • 142e6f7e72 [ci] Re-run agent-network e2e Claude 2026-07-22 04:35:27 +00:00
  • e4f66aac72 [ci] Temporarily run agent-network e2e on push to this branch Claude 2026-07-22 04:21:52 +00:00
  • ea4500e6b2 Drop kimi-k2-thinking from the catalog; remove temporary e2e trigger Claude 2026-07-22 04:16:01 +00:00
  • a4d0f242b4 [client] Address review comments on DNS lazy-connection warm-up Claude 2026-07-22 03:22:22 +00:00
  • 7825036fae Merge branch 'main' into feature/dns-lazy-conn-warmup Maycon Santos 2026-07-22 11:47:33 +09:00
  • 969dd04615 do not send resource policies map over the wire Dmitri Dolguikh 2026-07-21 19:27:16 +02:00
  • f44040feb0 WIP daemon-ipc-acl Theodor S. Midtlien 2026-07-21 17:15:15 +02:00
  • abd250c48b [client] Add CI check for translation key parity feature/ui-translation-key-parity-check Eduard Gert 2026-07-21 16:44:40 +02:00
  • 0e520ee9f5 [client] Copy trustedproxy package into Docker build context (#6851) Zoltan Papp 2026-07-21 16:21:49 +02:00
  • db80f9361c revert route.PeerID to route.Peer in getPeersGroupsPoliciesRoutes() Dmitri Dolguikh 2026-07-21 15:50:17 +02:00
  • 8a46353ae2 Add tests refactor/relay-foreign-cache-tests Theodor S. Midtlien 2026-07-21 15:40:39 +02:00
  • 9620890b65 [client] Always connect on profile selection except in manage profiles (#6838) Zoltan Papp 2026-07-21 15:28:11 +02:00
  • e80de242cb Run a single live Kimi scenario: kimi-k3 over the Anthropic shape Claude 2026-07-21 13:02:03 +00:00
  • 69c35e31b4 [client] Fix browser dialog not closing on renew session flow (#6745) Eduard Gert 2026-07-21 15:01:31 +02:00
  • b3b70fe581 Use kimi-latest for the OpenAI-shape Kimi e2e case Claude 2026-07-21 12:37:28 +00:00
  • 014dcd4698 Pair each Kimi wire shape with a model its endpoint serves Claude 2026-07-21 12:14:15 +00:00
  • 4d88973bb2 Use the full Bedrock inference-profile id in the e2e matrix Claude 2026-07-21 11:49:42 +00:00
  • 1af45da3a4 Re-run agent-network e2e after Kimi account top-up Claude 2026-07-21 11:41:35 +00:00
  • b6cd8944b1 [client] Fix nil context panic in iOS dynamic route resolver (#6848) Zoltan Papp 2026-07-21 13:37:29 +02:00
  • 6fc05efa6c [client] Disconnect daemon on GUI quit via async Down (#6796) Zoltan Papp 2026-07-21 13:34:30 +02:00