Commit Graph

77 Commits

Author SHA1 Message Date
Sebastian f147ffc5c7 feat: introduce user management events
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-07 22:32:45 -04:00
Sebastian b14bd302a3 fix(security): emit authentication success events
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-06 00:08:58 -04:00
Sebastian 5b3e8f6588 fix(events): close deferred scope after listener failure
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-06 00:02:15 -04:00
Sebastian 84eb0e2c21 refactor(security): replace generic event with severity enum
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 23:59:49 -04:00
Sebastian 3f9c2500d9 refactor(security): type firewall policy events
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 23:56:28 -04:00
Sebastian 2494cef02f refactor(security): type firewall rule lifecycle events
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 23:51:40 -04:00
Sebastian a5be782c51 refactor(security): add typed authentication-success event
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 23:42:24 -04:00
Sebastian f4df769b3c refactor(security): add typed suspicious-activity event
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 23:38:59 -04:00
Sebastian 688afbe5a1 refactor(security): add typed rate-limit event
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 23:36:44 -04:00
Sebastian 7c2a8dfbd3 refactor(security): add typed access-denied event
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 23:34:05 -04:00
Sebastian e223ae7543 refactor(security): add typed brute-force detection event
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 23:31:13 -04:00
Sebastian a8e29d0305 feat(security): emit authentication failures for firewall handling
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 23:26:01 -04:00
Sebastian a363a1a4bc refactor: use consistant naming
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 23:17:04 -04:00
Sebastian 5c65c8592c feat: Introduce typed authentication failure event
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 22:50:38 -04:00
Sebastian 52afd35d6f feat: make event state constructor-only and immutable
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 22:46:33 -04:00
Sebastian ba4deccea9 feat: Remove unused event serialization
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 22:21:04 -04:00
Sebastian 2012d67be7 fix: Enforce security event severity defaults
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 22:17:04 -04:00
Sebastian 649fa47c68 feat: Move security events into core
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 22:14:22 -04:00
Sebastian a73ca3abd6 feat: Move event runtime implementation into core
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 22:09:53 -04:00
Sebastian 01ed0f3080 feat: Introduce event listener registration contract
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 22:04:26 -04:00
Sebastian fb39aa57fd feat(firewall): add audited configuration management
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-03 22:44:34 -04:00
Sebastian d5ca89e160 feat(firewall): add audited rule lifecycle management
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-03 22:35:45 -04:00
Sebastian b06c18d38e feat(firewall): add safeguarded rule creation
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-03 22:27:20 -04:00
Sebastian 6700ff145d feat(firewall): add operational status reads
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-03 22:22:07 -04:00
Sebastian d919b70a2e feat(firewall): add scoped log administration reads
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-03 22:17:13 -04:00
Sebastian 74696bbeb3 feat(firewall): add scoped rule administration reads
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-03 22:05:00 -04:00
Sebastian 4ee91a7918 feat(firewall): complete operational reliability phase
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-30 23:39:37 -04:00
Sebastian 90d847ffae perf(firewall): use BSON dates and add query indexes
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-30 23:13:37 -04:00
Sebastian ad6443bff3 fix(firewall): serialize automatic brute-force blocking
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-30 23:05:32 -04:00
Sebastian a5c10e9b9b fix(firewall): account for authentication failures exactly once
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-30 23:01:38 -04:00
Sebastian 7aa8a27b1b feat(firewall): audit rule lifecycle changes
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-30 22:57:25 -04:00
Sebastian 5ada4c0c45 fix(firewall): register missing security audit events
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-30 22:50:42 -04:00
Sebastian 12037da367 feat(firewall): complete rule-match audit context
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-30 22:46:27 -04:00
Sebastian abc5bfcccc fix(firewall): enforce system rules independently of tenant context
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-30 22:41:27 -04:00
Sebastian da81f1ddf1 refactor(firewall): separate enforcement from rule management
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-30 22:35:24 -04:00
Sebastian 266b364c93 fix(firewall): preserve tenant ownership for automatic blocks
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-30 22:11:27 -04:00
Sebastian 3b9a5cd5ab feat(firewall): validate rules and add typed configuration
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-30 21:54:23 -04:00
Sebastian 63d91ca7fa feat(firewall): add tenant and system rule scopes
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-30 21:38:19 -04:00
Sebastian eb99eb5a2e refactor: unified kernal logic clean up
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-27 08:54:37 -04:00
Sebastian 65c1b5fb75 refactor(kernel): unify HTTP and CLI application lifecycle
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-27 00:48:11 -04:00
Sebastian 98826143a8 fix: sub menu spacing
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-26 20:32:46 -04:00
Sebastian e47d0ed619 feat: improve menu section selector
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-26 18:20:40 -04:00
Sebastian b58f6e9479 fix: empty object
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-25 21:28:00 -04:00
Sebastian a723051d11 feat: console role management
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-24 21:58:16 -04:00
Sebastian e81b848a02 feat: console authentication control
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-22 23:44:35 -04:00
Sebastian 44e4e91e34 feat: user management console commands
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-20 06:58:44 -04:00
Sebastian 05dd82a0c5 refactor: move module commands to subfolder
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-19 22:39:28 -04:00
Sebastian 934fb24217 feat: tenant management console commands
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-19 22:38:43 -04:00
Sebastian 49e9291214 fix: authenticate via code
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-18 21:28:14 -04:00
Sebastian 584edce5d6 fix: convert request parameters to variables
Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-18 21:27:12 -04:00