RedFlag/.publication/paths.txt
Fimeg 765ec4188f publish: carry the Windows product into the projection
The tree adds the installer, service and test paths admitted by this source commit. Nothing else changes about what may cross.

Source-Sha: 3e4a3aa4ce092e9e3f51bc78daf3ddc14d9638f8

Policy-Sha: 3e4a3aa4ce092e9e3f51bc78daf3ddc14d9638f8

Tree-Digest: 89d6fce3828a0e0de0c8eeb41ee6750f4462217e2a04b5190297134d7f4a50c3
2026-09-09 12:47:34 -04:00

852 lines
36 KiB
Text

.gitea/allowed_signers
.gitea/workflows/ci.yml
.gitea/workflows/desktop-windows.yml
.gitea/workflows/msi-custody-proof.yml
.gitea/workflows/nightly.yml
.gitea/workflows/promote-release.yml
.gitea/workflows/release.yml
.gitignore
.gitleaksignore
.govulncheck-allow
.publication/EPOCH
.publication/commit-voice-allowlist.json
.publication/commit_voice.py
.publication/paths.txt
.publication/surface.json
.publication/surface_gate.py
.publication/test_commit_voice.py
.publication/test_surface_gate.py
AUTHOR.md
CHANGELOG.md
LICENSE
Makefile
OPERATIONS.md
PROVENANCE.md
RAF/OVERVIEW.md
RAF/README.md
RAF/components/01-server.md
RAF/components/02-agent.md
RAF/components/03-web.md
RAF/components/04-helper.md
RAF/components/05-desktop.md
RAF/core/01-ethos.md
RAF/core/02-architecture-decisions.md
RAF/flows/01-registration.md
RAF/flows/02-command-execution.md
RAF/flows/04-heartbeat.md
RAF/flows/05-capability-advertisement.md
RAF/flows/06-update-lifecycle.md
RAF/flows/07-process-scan.md
RAF/flows/08-wazuh-event-emitter.md
RAF/reference/01-file-mappings.md
RAF/reference/02-glossary.md
RAF/scanners/01-windows-updates.md
RAF/scanners/02-docker-scanner.md
RAF/scanners/03-apt-scanner.md
RAF/scanners/04-dnf-scanner.md
RAF/scanners/05-process-scanner.md
RAF/scanners/06-pacman-scanner.md
RAF/security/01-trust-boundaries.md
RAF/security/02-authentication-stack.md
RAF/security/03-refresh-tokens.md
RAF/security/04-machine-binding.md
RAF/security/05-supply-chain-gate.md
RAF/security/06-standalone-authority.md
RAF/testing/01-test-pyramid.md
RAF/verification/01-signing-pipeline.md
RAF/verification/02-agent-verification.md
RAF/verification/03-key-rotation.md
RAF/verification/04-replay-protection.md
README.md
SECURITY.md
Screenshots/7Zip-Updates-RedFlag-Dependency.png
Screenshots/RedFlag Agent List.png
Screenshots/RedFlag Default Dashboard.png
Screenshots/RedFlag Docker Dashboard.png
Screenshots/RedFlag Heartbeat System.png
Screenshots/RedFlag History Dashboard.png
Screenshots/RedFlag Linux Agent Details.png
Screenshots/RedFlag Live Operations - Failed Dashboard.png
Screenshots/RedFlag Updates Dashboard.png
Screenshots/RedFlag Windows Agent Details.png
Screenshots/Upstream-Version-Tracking.png
THIRD_PARTY_LICENSES.md
agent/NOTICE
agent/cmd/agent/cli.go
agent/cmd/agent/local_status.go
agent/cmd/agent/main.go
agent/cmd/ethos_emoji_test.go
agent/go.mod
agent/go.sum
agent/install.sh
agent/internal/acknowledgment/tracker.go
agent/internal/agent/backoff_test.go
agent/internal/agent/loop.go
agent/internal/cache/cache.go
agent/internal/cache/hash_cache.go
agent/internal/cache/local.go
agent/internal/cache/local_test.go
agent/internal/capability/keyid.go
agent/internal/capability/mutation_manifest.go
agent/internal/capability/mutation_manifest_test.go
agent/internal/capability/token.go
agent/internal/capability/token_test.go
agent/internal/circuitbreaker/circuitbreaker.go
agent/internal/circuitbreaker/circuitbreaker_test.go
agent/internal/client/client.go
agent/internal/client/inventory.go
agent/internal/client/machine_id_logging_test.go
agent/internal/common/agentfile.go
agent/internal/config/config.go
agent/internal/config/config_roundtrip_test.go
agent/internal/config/docker.go
agent/internal/config/kernel_enforcement.go
agent/internal/config/mode_test.go
agent/internal/config/subsystems.go
agent/internal/constants/paths.go
agent/internal/crypto/pubkey.go
agent/internal/crypto/pubkey_test.go
agent/internal/crypto/replay_test.go
agent/internal/crypto/verification.go
agent/internal/crypto/verification_test.go
agent/internal/desktop/manager.go
agent/internal/desktop/session_linux.go
agent/internal/desktop/session_other.go
agent/internal/desktop/session_windows.go
agent/internal/display/ethos_exempt_test.go
agent/internal/display/terminal.go
agent/internal/event/buffer.go
agent/internal/event/helpers.go
agent/internal/event/history_test.go
agent/internal/event/tee_logger.go
agent/internal/event/tee_logger_test.go
agent/internal/guardian/interval_guardian.go
agent/internal/handlers/agent_restart_other.go
agent/internal/handlers/agent_restart_windows.go
agent/internal/handlers/agent_update.go
agent/internal/handlers/commands.go
agent/internal/handlers/dispatch.go
agent/internal/handlers/dry_run.go
agent/internal/handlers/heartbeat.go
agent/internal/handlers/install.go
agent/internal/handlers/local_approve.go
agent/internal/handlers/local_approve_test.go
agent/internal/handlers/local_state.go
agent/internal/handlers/local_trigger.go
agent/internal/handlers/processes.go
agent/internal/handlers/reboot.go
agent/internal/handlers/scan.go
agent/internal/handlers/screenshot.go
agent/internal/handlers/upgrade_attestation.go
agent/internal/handlers/upgrade_attestation_test.go
agent/internal/handlers/upgrade_healthcheck.go
agent/internal/installer/apt.go
agent/internal/installer/artifact_hash.go
agent/internal/installer/artifact_hash_test.go
agent/internal/installer/discovery.go
agent/internal/installer/discovery_test.go
agent/internal/installer/dnf.go
agent/internal/installer/docker.go
agent/internal/installer/installer.go
agent/internal/installer/pacman_resolver.go
agent/internal/installer/pacman_resolver_linux.go
agent/internal/installer/pacman_resolver_linux_test.go
agent/internal/installer/pacman_resolver_other.go
agent/internal/installer/types.go
agent/internal/installer/windows.go
agent/internal/installer/winget.go
agent/internal/instancelock/lock.go
agent/internal/instancelock/lock_unix.go
agent/internal/instancelock/lock_windows.go
agent/internal/integrations/integrations.go
agent/internal/integrations/sunshine.go
agent/internal/kernel/ebpf_consumer.go
agent/internal/kernel/kernel.go
agent/internal/kernel/windows_wdac.go
agent/internal/localapi/approve_test.go
agent/internal/localapi/client.go
agent/internal/localapi/client_unix.go
agent/internal/localapi/client_unix_test.go
agent/internal/localapi/client_windows.go
agent/internal/localapi/listener_unix.go
agent/internal/localapi/listener_windows.go
agent/internal/localapi/server.go
agent/internal/localapi/server_test.go
agent/internal/localapi/trigger_test.go
agent/internal/logging/example_integration_test.go
agent/internal/logging/process_logger.go
agent/internal/logging/process_logger_test.go
agent/internal/logging/security_logger.go
agent/internal/logging/security_logger_test.go
agent/internal/migration/detection.go
agent/internal/migration/docker.go
agent/internal/migration/docker_executor.go
agent/internal/migration/ethos_emoji_test.go
agent/internal/migration/executor.go
agent/internal/migration/executor_config_v5_test.go
agent/internal/migration/pathutils/manager.go
agent/internal/migration/state.go
agent/internal/migration/validation/validator.go
agent/internal/models/storage_metrics.go
agent/internal/models/system_event.go
agent/internal/orchestrator/command_handler.go
agent/internal/orchestrator/docker_scanner.go
agent/internal/orchestrator/orchestrator.go
agent/internal/orchestrator/storage_scanner.go
agent/internal/orchestrator/system_scanner.go
agent/internal/polling_jitter_test.go
agent/internal/receipt/tracker.go
agent/internal/reconnect_stagger_test.go
agent/internal/recovery/panic.go
agent/internal/registration/service.go
agent/internal/scanner/apt.go
agent/internal/scanner/detect.go
agent/internal/scanner/dnf.go
agent/internal/scanner/dnf_test.go
agent/internal/scanner/pacman.go
agent/internal/scanner/pacman_test.go
agent/internal/scanner/windows.go
agent/internal/scanner/windows_ghost_test.go
agent/internal/scanner/windows_override.go
agent/internal/scanner/windows_service_parity_test.go
agent/internal/scanner/windows_wua.go
agent/internal/scanner/winget.go
agent/internal/scanner/winget_logging_test.go
agent/internal/scanner/winget_parser_test.go
agent/internal/scanner/winget_path_test.go
agent/internal/service/service_stub.go
agent/internal/service/windows.go
agent/internal/startup/event.go
agent/internal/supplychain/binary_update.go
agent/internal/supplychain/consumer.go
agent/internal/supplychain/consumer_test.go
agent/internal/supplychain/mint.go
agent/internal/supplychain/mutation.go
agent/internal/supplychain/osv.go
agent/internal/supplychain/osv_test.go
agent/internal/system/connections.go
agent/internal/system/connections_linux.go
agent/internal/system/connections_other.go
agent/internal/system/device.go
agent/internal/system/device_test.go
agent/internal/system/info.go
agent/internal/system/machine_id.go
agent/internal/system/machine_id_arm_test.go
agent/internal/system/machine_id_fallback_test.go
agent/internal/system/machine_id_format_test.go
agent/internal/system/machine_id_winpath_test.go
agent/internal/system/monitor.go
agent/internal/system/monitor_linux.go
agent/internal/system/monitor_other.go
agent/internal/system/monitor_test.go
agent/internal/system/process.go
agent/internal/system/process_capabilities.go
agent/internal/system/process_capabilities_test.go
agent/internal/system/process_darwin.go
agent/internal/system/process_detail.go
agent/internal/system/process_detail_linux.go
agent/internal/system/process_detail_other.go
agent/internal/system/process_linux.go
agent/internal/system/process_owner.go
agent/internal/system/process_owner_test.go
agent/internal/system/process_test.go
agent/internal/system/process_windows.go
agent/internal/system/services.go
agent/internal/system/services_linux.go
agent/internal/system/services_other.go
agent/internal/system/software.go
agent/internal/system/software_linux.go
agent/internal/system/software_other.go
agent/internal/system/windows.go
agent/internal/system/windows_cpu_parse.go
agent/internal/system/windows_cpu_parse_test.go
agent/internal/system/windows_stub.go
agent/internal/validator/interval_validator.go
agent/internal/version/version.go
agent/pkg/windowsupdate/enum.go
agent/pkg/windowsupdate/iautomaticupdates.go
agent/pkg/windowsupdate/iautomaticupdatessettings.go
agent/pkg/windowsupdate/icategory.go
agent/pkg/windowsupdate/idownloadjob.go
agent/pkg/windowsupdate/idownloadprogress.go
agent/pkg/windowsupdate/idownloadresult.go
agent/pkg/windowsupdate/iimageinformation.go
agent/pkg/windowsupdate/iinstallationbehavior.go
agent/pkg/windowsupdate/iinstallationjob.go
agent/pkg/windowsupdate/iinstallationprogress.go
agent/pkg/windowsupdate/iinstallationresult.go
agent/pkg/windowsupdate/isearchjob.go
agent/pkg/windowsupdate/isearchresult.go
agent/pkg/windowsupdate/istringcollection.go
agent/pkg/windowsupdate/isysteminformation.go
agent/pkg/windowsupdate/iupdate.go
agent/pkg/windowsupdate/iupdatecollection.go
agent/pkg/windowsupdate/iupdatedownloadcontent.go
agent/pkg/windowsupdate/iupdatedownloader.go
agent/pkg/windowsupdate/iupdatedownloadresult.go
agent/pkg/windowsupdate/iupdateexception.go
agent/pkg/windowsupdate/iupdatehistoryentry.go
agent/pkg/windowsupdate/iupdateidentity.go
agent/pkg/windowsupdate/iupdateinstallationresult.go
agent/pkg/windowsupdate/iupdateinstaller.go
agent/pkg/windowsupdate/iupdatesearcher.go
agent/pkg/windowsupdate/iupdateservice.go
agent/pkg/windowsupdate/iupdateservicemanager.go
agent/pkg/windowsupdate/iupdateserviceregistration.go
agent/pkg/windowsupdate/iupdatesession.go
agent/pkg/windowsupdate/iwebproxy.go
agent/pkg/windowsupdate/iwindowsdriverupdate.go
agent/pkg/windowsupdate/iwindowsupdateagentinfo.go
agent/pkg/windowsupdate/oleconv.go
agent/test-config/config.yaml
agent/uninstall.sh
config/.env.example
desktop/.qmlls.ini
desktop/Cargo.lock
desktop/Cargo.toml
desktop/README.md
desktop/build.rs
desktop/icons/icon.png
desktop/qml/AppButton.qml
desktop/qml/HistoryPanel.qml
desktop/qml/LineGraph.qml
desktop/qml/Main.qml
desktop/qml/MetricCard.qml
desktop/qml/NavItem.qml
desktop/qml/PageHeader.qml
desktop/qml/ScanPanel.qml
desktop/qml/Theme.qml
desktop/src/bridge/local_api.rs
desktop/src/bridge/machine.rs
desktop/src/bridge/mod.rs
desktop/src/main.rs
docker-compose.yml
helper/.cargo/config.toml
helper/.gitignore
helper/Cargo.lock
helper/Cargo.toml
helper/build.rs
helper/src/main.rs
helper/src/mutation_protocol.rs
installer/linux/build-deb.sh
installer/linux/debian/control.in
installer/linux/debian/postinst
installer/linux/debian/postrm
installer/linux/debian/preinst
installer/linux/debian/prerm
installer/linux/desktop/redflag-desktop.desktop
installer/linux/inspect-deb.sh
installer/linux/polkit/50-redflag-agent.rules
installer/linux/sudoers/redflag-agent
installer/linux/systemd/redflag-agent.service
installer/linux/test_maintainer_scripts.py
installer/windows/Product.wxs
installer/windows/ServerUI.wxs
installer/windows/build-desktop.ps1
installer/windows/build-msi.sh
installer/windows/config/redflag.env.example
installer/windows/msi_version.py
installer/windows/provision-msitools.sh
installer/windows/render-license.py
installer/windows/test-agent-verifier.ps1
installer/windows/test_build_inputs.py
installer/windows/testdata/run3181-hollow.msi
installer/windows/verify-msi-boundary.py
installer/windows/verify-msi.sh
protocol/README.md
protocol/testdata/mutation-golden.json
scripts/assemble-release-candidate.sh
scripts/bump-version.sh
scripts/check-public-history.sh
scripts/dep-scan.sh
scripts/fetch-desktop-windows.sh
scripts/fetch-release-candidate.sh
scripts/git-askpass-token.sh
scripts/govulncheck-gate.py
scripts/provision-standalone-authority.sh
scripts/public-history-allowlist.txt
scripts/release-contract.py
scripts/release.sh
scripts/stage-release-candidate.sh
scripts/test-release-contract.py
scripts/update-action-pins.sh
scripts/vendor/release-contract-core.py
server/.env.example
server/Dockerfile
server/cmd/server/http_lifecycle.go
server/cmd/server/http_lifecycle_test.go
server/cmd/server/main.go
server/cmd/server/service_other.go
server/cmd/server/service_windows.go
server/cmd/server/webui_test.go
server/cmd/server/wire.go
server/docker-entrypoint.sh
server/go.mod
server/go.sum
server/internal/api/handlers/agent_events.go
server/internal/api/handlers/agent_security_events.go
server/internal/api/handlers/agent_setup.go
server/internal/api/handlers/agent_tracked_software.go
server/internal/api/handlers/agent_unregister_test.go
server/internal/api/handlers/agent_updates.go
server/internal/api/handlers/agents.go
server/internal/api/handlers/auth.go
server/internal/api/handlers/auth_middleware_leak_test.go
server/internal/api/handlers/auth_verify_test.go
server/internal/api/handlers/build_orchestrator.go
server/internal/api/handlers/client_errors.go
server/internal/api/handlers/command_delivery_race_test.go
server/internal/api/handlers/docker.go
server/internal/api/handlers/docker_reports.go
server/internal/api/handlers/downloads.go
server/internal/api/handlers/downloads_auth_test.go
server/internal/api/handlers/downloads_checksum_test.go
server/internal/api/handlers/downloads_install_test.go
server/internal/api/handlers/downloads_security_test.go
server/internal/api/handlers/ethos_emoji_test.go
server/internal/api/handlers/ethos_logging_test.go
server/internal/api/handlers/ethos_setup_exempt_test.go
server/internal/api/handlers/events.go
server/internal/api/handlers/fleet_join.go
server/internal/api/handlers/global_events.go
server/internal/api/handlers/inventory.go
server/internal/api/handlers/maintenance_window_handler.go
server/internal/api/handlers/metrics.go
server/internal/api/handlers/osv_version_test.go
server/internal/api/handlers/processes.go
server/internal/api/handlers/rapid_mode_ratelimit_test.go
server/internal/api/handlers/rate_limits.go
server/internal/api/handlers/reconcile_integration_test.go
server/internal/api/handlers/reconcile_test.go
server/internal/api/handlers/registration_tokens.go
server/internal/api/handlers/registration_transaction_test.go
server/internal/api/handlers/retry_signing_test.go
server/internal/api/handlers/scanner_config.go
server/internal/api/handlers/security.go
server/internal/api/handlers/security_settings.go
server/internal/api/handlers/server_url.go
server/internal/api/handlers/settings.go
server/internal/api/handlers/setup.go
server/internal/api/handlers/setup_keys_test.go
server/internal/api/handlers/stats.go
server/internal/api/handlers/stats_n1_test.go
server/internal/api/handlers/storage_metrics.go
server/internal/api/handlers/subsystems.go
server/internal/api/handlers/system.go
server/internal/api/handlers/token_renewal_transaction_test.go
server/internal/api/handlers/updates.go
server/internal/api/handlers/upstream.go
server/internal/api/middleware/audit.go
server/internal/api/middleware/auth.go
server/internal/api/middleware/auth_secret_leak_test.go
server/internal/api/middleware/cors.go
server/internal/api/middleware/db_pool_shed.go
server/internal/api/middleware/db_pool_shed_test.go
server/internal/api/middleware/ethos_emoji_test.go
server/internal/api/middleware/machine_binding.go
server/internal/api/middleware/machine_id_recovery_test.go
server/internal/api/middleware/metrics_auth.go
server/internal/api/middleware/metrics_auth_test.go
server/internal/api/middleware/rate_limiter.go
server/internal/api/middleware/rate_limiter_grace_test.go
server/internal/api/middleware/require_admin.go
server/internal/api/middleware/require_admin_behavior_test.go
server/internal/api/middleware/require_admin_test.go
server/internal/api/middleware/scheduler_auth_test.go
server/internal/api/middleware/token_confusion_test.go
server/internal/capability/keyid.go
server/internal/capability/mutation_manifest.go
server/internal/capability/mutation_manifest_test.go
server/internal/capability/token.go
server/internal/capability/token_test.go
server/internal/circuitbreaker/circuitbreaker.go
server/internal/circuitbreaker/circuitbreaker_test.go
server/internal/command/factory.go
server/internal/command/validator.go
server/internal/common/agentfile.go
server/internal/config/config.go
server/internal/config/config_test.go
server/internal/crypto/aesgcm.go
server/internal/database/db.go
server/internal/database/db_test.go
server/internal/database/embedded_migrations_test.go
server/internal/database/migration_runner_test.go
server/internal/database/migrations/001_initial_schema.down.sql
server/internal/database/migrations/001_initial_schema.up.sql
server/internal/database/migrations/003_create_update_tables.up.sql
server/internal/database/migrations/004_fix_update_logs_foreign_key.up.sql
server/internal/database/migrations/005_add_pending_dependencies_status.up.sql
server/internal/database/migrations/006_add_missing_command_statuses.up.sql
server/internal/database/migrations/007_expand_status_column_length.up.sql
server/internal/database/migrations/008_create_refresh_tokens_table.up.sql
server/internal/database/migrations/009_add_agent_version_tracking.up.sql
server/internal/database/migrations/009b_add_retry_tracking.up.sql
server/internal/database/migrations/010_add_archived_failed_status.up.sql
server/internal/database/migrations/011_create_registration_tokens_table.up.sql
server/internal/database/migrations/012_add_token_seats.up.sql
server/internal/database/migrations/012b_create_admin_user.up.sql
server/internal/database/migrations/013_add_reboot_tracking.up.sql
server/internal/database/migrations/014_add_command_source.up.sql
server/internal/database/migrations/015_agent_subsystems.down.sql
server/internal/database/migrations/015_agent_subsystems.up.sql
server/internal/database/migrations/016_agent_update_packages.down.sql
server/internal/database/migrations/016_agent_update_packages.up.sql
server/internal/database/migrations/017_add_machine_id.down.sql
server/internal/database/migrations/017_add_machine_id.up.sql
server/internal/database/migrations/018_create_metrics_and_docker_tables.down.sql
server/internal/database/migrations/018_create_metrics_and_docker_tables.up.sql
server/internal/database/migrations/019_create_system_events_table.up.sql
server/internal/database/migrations/020_add_command_signatures.down.sql
server/internal/database/migrations/020_add_command_signatures.up.sql
server/internal/database/migrations/021_create_storage_metrics.up.sql
server/internal/database/migrations/022_add_subsystem_to_logs.down.sql
server/internal/database/migrations/022_add_subsystem_to_logs.up.sql
server/internal/database/migrations/023_client_error_logging.down.sql
server/internal/database/migrations/023_client_error_logging.up.sql
server/internal/database/migrations/023a_command_deduplication.down.sql
server/internal/database/migrations/023a_command_deduplication.up.sql
server/internal/database/migrations/024_disable_updates_subsystem.down.sql
server/internal/database/migrations/024_disable_updates_subsystem.up.sql
server/internal/database/migrations/025_add_key_id_signed_at.down.sql
server/internal/database/migrations/025_add_key_id_signed_at.up.sql
server/internal/database/migrations/025b_platform_scanner_subsystems.down.sql
server/internal/database/migrations/025b_platform_scanner_subsystems.up.sql
server/internal/database/migrations/026_add_expires_at.down.sql
server/internal/database/migrations/026_add_expires_at.up.sql
server/internal/database/migrations/027_create_scanner_config_table.down.sql
server/internal/database/migrations/027_create_scanner_config_table.up.sql
server/internal/database/migrations/028_add_stuck_commands_index.down.sql
server/internal/database/migrations/028_add_stuck_commands_index.up.sql
server/internal/database/migrations/029_add_command_retry_count.down.sql
server/internal/database/migrations/029_add_command_retry_count.up.sql
server/internal/database/migrations/030_add_operational_settings.down.sql
server/internal/database/migrations/030_add_operational_settings.up.sql
server/internal/database/migrations/031_create_maintenance_windows_table.down.sql
server/internal/database/migrations/031_create_maintenance_windows_table.up.sql
server/internal/database/migrations/032_add_commands_updated_at.up.sql
server/internal/database/migrations/033_add_received_command_state.down.sql
server/internal/database/migrations/033_add_received_command_state.up.sql
server/internal/database/migrations/034_add_security_settings_created_at.down.sql
server/internal/database/migrations/034_add_security_settings_created_at.up.sql
server/internal/database/migrations/035_create_upstream_sync.down.sql
server/internal/database/migrations/035_create_upstream_sync.up.sql
server/internal/database/migrations/036_create_token_seats_and_convert_timestamps.down.sql
server/internal/database/migrations/036_create_token_seats_and_convert_timestamps.up.sql
server/internal/database/migrations/037_dedupe_agent_update_packages.down.sql
server/internal/database/migrations/037_dedupe_agent_update_packages.up.sql
server/internal/database/migrations/038_add_policy_settings.down.sql
server/internal/database/migrations/038_add_policy_settings.up.sql
server/internal/database/migrations/039_create_agent_tracked_software.down.sql
server/internal/database/migrations/039_create_agent_tracked_software.up.sql
server/internal/database/migrations/040_add_expected_sha256.down.sql
server/internal/database/migrations/040_add_expected_sha256.up.sql
server/internal/database/migrations/041_update_version_history_status_constraint.down.sql
server/internal/database/migrations/041_update_version_history_status_constraint.up.sql
server/internal/database/migrations/042_create_capability_tokens.down.sql
server/internal/database/migrations/042_create_capability_tokens.up.sql
server/internal/database/migrations/043_create_package_versions.down.sql
server/internal/database/migrations/043_create_package_versions.up.sql
server/internal/database/migrations/044_add_polling_operational_settings.down.sql
server/internal/database/migrations/044_add_polling_operational_settings.up.sql
server/internal/database/migrations/045_add_refresh_token_rotation.down.sql
server/internal/database/migrations/045_add_refresh_token_rotation.up.sql
server/internal/database/migrations/046_hash_registration_tokens.down.sql
server/internal/database/migrations/046_hash_registration_tokens.up.sql
server/internal/database/migrations/047_rename_updated_to_installed.down.sql
server/internal/database/migrations/047_rename_updated_to_installed.up.sql
server/internal/database/migrations/048_add_update_log_result_values.down.sql
server/internal/database/migrations/048_add_update_log_result_values.up.sql
server/internal/database/migrations/049_add_registration_token_encrypted.down.sql
server/internal/database/migrations/049_add_registration_token_encrypted.up.sql
server/internal/database/migrations/050_version_soak_gate.down.sql
server/internal/database/migrations/050_version_soak_gate.up.sql
server/internal/database/migrations/051_tracked_software_discovery.down.sql
server/internal/database/migrations/051_tracked_software_discovery.up.sql
server/internal/database/migrations/052_docker_enrichment.down.sql
server/internal/database/migrations/052_docker_enrichment.up.sql
server/internal/database/migrations/053_retire_soak_override_scaffolding.down.sql
server/internal/database/migrations/053_retire_soak_override_scaffolding.up.sql
server/internal/database/migrations/054_add_observability_metrics_settings.down.sql
server/internal/database/migrations/054_add_observability_metrics_settings.up.sql
server/internal/database/migrations/055_create_process_tables.down.sql
server/internal/database/migrations/055_create_process_tables.up.sql
server/internal/database/migrations/056_create_agent_inventory.down.sql
server/internal/database/migrations/056_create_agent_inventory.up.sql
server/internal/database/migrations/057_add_totp_to_registration_tokens.down.sql
server/internal/database/migrations/057_add_totp_to_registration_tokens.up.sql
server/internal/database/migrations/058_totp_seed_encrypted.down.sql
server/internal/database/migrations/058_totp_seed_encrypted.up.sql
server/internal/database/migrations/059_tracked_software_prereleases.down.sql
server/internal/database/migrations/059_tracked_software_prereleases.up.sql
server/internal/database/migrations/060_drop_token_seats.down.sql
server/internal/database/migrations/060_drop_token_seats.up.sql
server/internal/database/migrations/061_agent_device_type.down.sql
server/internal/database/migrations/061_agent_device_type.up.sql
server/internal/database/migrations/062_widen_device_type_enum.down.sql
server/internal/database/migrations/062_widen_device_type_enum.up.sql
server/internal/database/migrations/idempotency_test.go
server/internal/database/migrations/index_audit_test.go
server/internal/database/migrations/migration018_test.go
server/internal/database/migrations/migration024_test.go
server/internal/database/queries/admin.go
server/internal/database/queries/agent_tracked_software.go
server/internal/database/queries/agent_updates.go
server/internal/database/queries/agents.go
server/internal/database/queries/capability_tokens.go
server/internal/database/queries/commands.go
server/internal/database/queries/commands_ttl_test.go
server/internal/database/queries/docker.go
server/internal/database/queries/ethos_logging_test.go
server/internal/database/queries/filter.go
server/internal/database/queries/inventory.go
server/internal/database/queries/maintenance_window.go
server/internal/database/queries/metrics.go
server/internal/database/queries/packages.go
server/internal/database/queries/processes.go
server/internal/database/queries/reconciliation.go
server/internal/database/queries/refresh_tokens.go
server/internal/database/queries/registration_tokens.go
server/internal/database/queries/registration_tokens_no_cascade_test.go
server/internal/database/queries/repology_aliases.go
server/internal/database/queries/retention.go
server/internal/database/queries/scanner_config.go
server/internal/database/queries/security_settings.go
server/internal/database/queries/signing_keys.go
server/internal/database/queries/storage_metrics.go
server/internal/database/queries/subsystems.go
server/internal/database/queries/updates.go
server/internal/database/queries/upstream.go
server/internal/database/refresh_token_cleanup_test.go
server/internal/database/stuck_command_retry_test.go
server/internal/httpx/httpx.go
server/internal/integrations/wazuh/emitter.go
server/internal/integrations/wazuh/emitter_test.go
server/internal/logging/example_integration.go
server/internal/logging/sanitize.go
server/internal/logging/security_logger.go
server/internal/models/agent.go
server/internal/models/agent_update.go
server/internal/models/command.go
server/internal/models/docker.go
server/internal/models/inventory.go
server/internal/models/maintenance_window_model.go
server/internal/models/metrics.go
server/internal/models/process.go
server/internal/models/reconcile_test.go
server/internal/models/security_event.go
server/internal/models/security_settings.go
server/internal/models/signing_key.go
server/internal/models/storage_metrics.go
server/internal/models/subsystem.go
server/internal/models/supply_chain_gate.go
server/internal/models/system_event.go
server/internal/models/tracked_software.go
server/internal/models/update.go
server/internal/models/update_state.go
server/internal/models/user.go
server/internal/observability/metrics.go
server/internal/observability/metrics_test.go
server/internal/orchestrator/interfaces.go
server/internal/orchestrator/orchestrator.go
server/internal/orchestrator/orchestrator_test.go
server/internal/orchestrator/policy.go
server/internal/orchestrator/timeouts.go
server/internal/orchestrator/workflow.go
server/internal/routeaudit/auditor.go
server/internal/routeaudit/auditor_test.go
server/internal/scheduler/queue.go
server/internal/scheduler/queue_test.go
server/internal/scheduler/scheduler.go
server/internal/scheduler/scheduler_test.go
server/internal/security/totp.go
server/internal/security/totp_test.go
server/internal/services/agent_builder.go
server/internal/services/build_orchestrator.go
server/internal/services/build_types.go
server/internal/services/capability_minter.go
server/internal/services/config_builder.go
server/internal/services/docker_secrets.go
server/internal/services/ethos_logging_test.go
server/internal/services/event_renderer.go
server/internal/services/install_template_integrity_test.go
server/internal/services/install_template_service.go
server/internal/services/notifier/notifier.go
server/internal/services/notifier/notifier_test.go
server/internal/services/notifier/ntfy.go
server/internal/services/notifier/smtp.go
server/internal/services/package_age.go
server/internal/services/package_age_test.go
server/internal/services/posture-build.json
server/internal/services/posture.go
server/internal/services/reconciler.go
server/internal/services/release_manifest.go
server/internal/services/retention.go
server/internal/services/secrets_manager.go
server/internal/services/security_settings_service.go
server/internal/services/security_settings_service_test.go
server/internal/services/signing.go
server/internal/services/signing_replay_test.go
server/internal/services/soak_gate.go
server/internal/services/supply_chain.go
server/internal/services/supply_chain_gate_config_test.go
server/internal/services/supply_chain_vuln_test.go
server/internal/services/system_event_logger.go
server/internal/services/templates/install/scripts/linux.sh.tmpl
server/internal/services/templates/install/scripts/windows.ps1.tmpl
server/internal/services/timeout.go
server/internal/services/timeout_config_test.go
server/internal/services/timezone.go
server/internal/services/update_nonce.go
server/internal/services/upstream/bitbucket_tags.go
server/internal/services/upstream/endoflife.go
server/internal/services/upstream/forgejo_releases.go
server/internal/services/upstream/forgejo_releases_test.go
server/internal/services/upstream/git_tags.go
server/internal/services/upstream/github_releases.go
server/internal/services/upstream/gitlab_releases.go
server/internal/services/upstream/repology.go
server/internal/services/upstream/repology_cache.go
server/internal/services/upstream/source.go
server/internal/services/upstream/syncer.go
server/internal/services/upstream/version.go
server/internal/services/upstream/version_test.go
server/internal/taskrunner/taskrunner.go
server/internal/taskrunner/taskrunner_test.go
server/internal/utils/version.go
server/internal/version/version.go
server/internal/version/versions.go
server/internal/version/versions_test.go
server/internal/webui/dist/.gitkeep
server/internal/webui/webui.go
web/.env.example
web/Dockerfile
web/index.html
web/nginx.conf
web/package-lock.json
web/package.json
web/postcss.config.js
web/public/favicon.svg
web/src/App.tsx
web/src/components/AdvisoryBanner.tsx
web/src/components/AgentHealth.tsx
web/src/components/AgentIntegrations.tsx
web/src/components/AgentSoftwareBindings.tsx
web/src/components/AgentStorage.tsx
web/src/components/AgentUpdate.tsx
web/src/components/AgentUpdatesEnhanced.tsx
web/src/components/AgentUpdatesModal.tsx
web/src/components/AttentionPanel.tsx
web/src/components/ChatTimeline.tsx
web/src/components/DependencyClosureTree.tsx
web/src/components/DeviceTypeIcon.tsx
web/src/components/ErrorBoundary.tsx
web/src/components/HistoryTimeline.tsx
web/src/components/Layout.tsx
web/src/components/ProcessDetailModal.tsx
web/src/components/ProcessesTab.tsx
web/src/components/RelayList.tsx
web/src/components/ServerStatusOverlay.tsx
web/src/components/ServerUpdateBanner.tsx
web/src/components/SetupCompletionChecker.tsx
web/src/components/StackDriftPanel.tsx
web/src/components/VulnerabilityList.tsx
web/src/components/WelcomeChecker.tsx
web/src/components/primitives/CommandCard.tsx
web/src/components/primitives/CommandStatusBadge.tsx
web/src/components/primitives/ConfirmDialog.test.tsx
web/src/components/primitives/ConfirmDialog.tsx
web/src/components/primitives/FilterBar.test.tsx
web/src/components/primitives/FilterBar.tsx
web/src/components/primitives/FilterCountButton.tsx
web/src/components/primitives/FilterDropdown.tsx
web/src/components/primitives/FilterPill.tsx
web/src/components/primitives/MetricItem.tsx
web/src/components/primitives/Modal.tsx
web/src/components/primitives/PageState.tsx
web/src/components/primitives/Pagination.tsx
web/src/components/primitives/ProcessTable.tsx
web/src/components/primitives/ScreenshotCard.tsx
web/src/components/primitives/SearchInput.tsx
web/src/components/primitives/SortableTable.tsx
web/src/components/primitives/StatCard.tsx
web/src/components/primitives/StateBadge.tsx
web/src/components/primitives/index.ts
web/src/components/primitives/statusColors.ts
web/src/components/security/SecurityCategorySection.tsx
web/src/components/security/SecurityEvents.tsx
web/src/components/security/SecuritySetting.tsx
web/src/components/security/SecurityStatusCard.tsx
web/src/components/security/SigningKeyRoster.tsx
web/src/hooks/useAdvisoryHealth.ts
web/src/hooks/useAgentBindings.ts
web/src/hooks/useAgentEvents.ts
web/src/hooks/useAgentPolling.ts
web/src/hooks/useAgentUpdate.ts
web/src/hooks/useAgents.ts
web/src/hooks/useColumnSort.tsx
web/src/hooks/useCommands.ts
web/src/hooks/useDebounce.ts
web/src/hooks/useDocker.ts
web/src/hooks/useFilterUrl.test.tsx
web/src/hooks/useFilterUrl.ts
web/src/hooks/useGlobalEvents.ts
web/src/hooks/useHeartbeat.ts
web/src/hooks/useMaintenanceWindows.ts
web/src/hooks/useMultimodalFilter.ts
web/src/hooks/useProcessExplorer.ts
web/src/hooks/useProcesses.ts
web/src/hooks/useQueryParser.ts
web/src/hooks/useRateLimits.ts
web/src/hooks/useRegistrationTokens.ts
web/src/hooks/useScanState.ts
web/src/hooks/useSecurity.ts
web/src/hooks/useSecuritySettings.ts
web/src/hooks/useServerStatus.ts
web/src/hooks/useSettings.ts
web/src/hooks/useStats.ts
web/src/hooks/useUpdates.ts
web/src/hooks/useUpstream.ts
web/src/index.css
web/src/lib/api.ts
web/src/lib/client-error-logger.ts
web/src/lib/client-logger.ts
web/src/lib/command-naming.ts
web/src/lib/polling.ts
web/src/lib/queryParser.ts
web/src/lib/store.ts
web/src/lib/utils.ts
web/src/lib/vulnerabilities.ts
web/src/main.tsx
web/src/pages/Agents.test.tsx
web/src/pages/Agents.tsx
web/src/pages/Dashboard.tsx
web/src/pages/Docker.tsx
web/src/pages/History.test.tsx
web/src/pages/History.tsx
web/src/pages/LiveOperations.test.tsx
web/src/pages/LiveOperations.tsx
web/src/pages/Login.tsx
web/src/pages/PackageDetail.tsx
web/src/pages/RateLimiting.tsx
web/src/pages/SecuritySettings.tsx
web/src/pages/Settings.tsx
web/src/pages/Setup.tsx
web/src/pages/Updates.test.tsx
web/src/pages/Updates.tsx
web/src/pages/settings/AgentPolling.tsx
web/src/pages/settings/AgentsEnrollment.tsx
web/src/pages/settings/General.tsx
web/src/pages/settings/MaintenanceWindows.tsx
web/src/pages/settings/ProcessExplorer.tsx
web/src/pages/settings/UpstreamTracking.tsx
web/src/test/setup.ts
web/src/types/index.ts
web/src/types/integrations.ts
web/src/types/process.ts
web/src/types/security.ts
web/src/vite-env.d.ts
web/tailwind.config.js
web/tsconfig.json
web/tsconfig.node.json
web/vite.config.ts
web/vitest.config.ts