steve 57a13f0759 http: POST /setup — set password, drop session, audit setup_completed ...

Replaces the 501 stub with the full handler: validates the token and
password, hashes and stores the password, deletes the setup token,
mints an 8-hour session cookie, appends a user.setup_completed audit
entry, and redirects to /. Adds TestSetupPostHappyPath covering the
full round-trip including normal-login verification after setup.

2026-05-05 10:57:24 +01:00

..

agent_assets.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

announce_test.go

tasks: tick P2 completion + Playwright sweep screenshots

2026-05-04 11:27:09 +01:00

announce.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

auth_test.go

lint: drive baseline to zero, drop only-new-issues gate

2026-05-03 16:15:17 +01:00

auth.go

http: session/login reject disabled users; mid-session disable kicks immediately

2026-05-05 10:57:24 +01:00

cancel_test.go

P3-X1: cancel-job feature

2026-05-04 15:11:49 +01:00

cancel.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

diff_test.go

P3-09 + P3-X3: snapshot diff + recent-restores line

2026-05-04 15:38:28 +01:00

diff.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

enrollment_test.go

P2-01: schedule schema + CRUD API

2026-05-02 11:12:58 +01:00

enrollment.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

hooks_resolve.go

agent+server: P2R-11 pre/post hook execution for backup jobs

2026-05-04 10:57:28 +01:00

host_bandwidth_push.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

host_bandwidth.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

host_credentials_test.go

server: populate audit UserID on credential mutations + slog prune push errors

2026-05-04 10:19:15 +01:00

host_credentials.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

hosts.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

job_download_test.go

P3 follow-up: log download (txt + ndjson) on the live job page

2026-05-04 17:12:45 +01:00

job_download.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

jobs.go

http: session/login reject disabled users; mid-session disable kicks immediately

2026-05-05 10:57:24 +01:00

maintenance_dispatch_test.go

server: fix stale RetentionPolicy comment + check Scan errors in maintenance test

2026-05-04 10:19:15 +01:00

maintenance_dispatch.go

feat(alerts): per-source-group dedup so two failing backups produce two alerts

2026-05-04 22:59:48 +01:00

middleware.go

phase 1: HTTP server + first-run bootstrap

2026-05-01 00:28:18 +01:00

p2r01_test.go

server: populate audit UserID on credential mutations + slog prune push errors

2026-05-04 10:19:15 +01:00

p2r01_ws_test.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

pending_drain_test.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

pending_drain.go

server: serialize DrainPending per host (avoid drain double-dispatch)

2026-05-04 10:19:15 +01:00

pending_ws_test.go

server: P2-18b pending WS + admin accept/reject

2026-05-04 11:07:32 +01:00

pending_ws.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

rbac_test.go

http: session/login reject disabled users; mid-session disable kicks immediately

2026-05-05 10:57:24 +01:00

rbac.go

http: requireRole middleware + 403 forbidden page

2026-05-05 10:57:24 +01:00

repo_maintenance.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

repo_ops_test.go

server: cover HTMX auth-redirect path in repo-ops tests

2026-05-04 10:19:15 +01:00

repo_ops.go

feat(alerts): per-source-group dedup so two failing backups produce two alerts

2026-05-04 22:59:48 +01:00

run_group_bandwidth_test.go

ui+server: per-job bandwidth override on Run-now

2026-05-04 10:41:13 +01:00

run_group.go

feat(alerts): per-source-group dedup so two failing backups produce two alerts

2026-05-04 22:59:48 +01:00

schedule_nextrun_test.go

ui+server: schedule next-run / last-run on dashboard + schedules tab

2026-05-04 10:44:31 +01:00

schedule_push.go

feat(alerts): per-source-group dedup so two failing backups produce two alerts

2026-05-04 22:59:48 +01:00

schedules.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

server.go

http: GET /setup landing page with expiry handling

2026-05-05 10:57:24 +01:00

setup_handler.go

http: POST /setup — set password, drop session, audit setup_completed

2026-05-05 10:57:24 +01:00

setup_test.go

http: POST /setup — set password, drop session, audit setup_completed

2026-05-05 10:57:24 +01:00

snapshots.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

source_groups.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

tree_cache.go

P3-X2: tree.list synchronous WS RPC + per-session cache

2026-05-04 15:19:22 +01:00

tree_rpc_test.go

P3-X2: tree.list synchronous WS RPC + per-session cache

2026-05-04 15:19:22 +01:00

ui_alerts_test.go

feat(alerts): per-source-group dedup so two failing backups produce two alerts

2026-05-04 22:59:48 +01:00

ui_alerts.go

feat(alerts): live-refresh the table every 15s while the tab is visible

2026-05-04 23:30:19 +01:00

ui_audit.go

feat(audit): clickable column headers with asc/desc sort

2026-05-05 08:15:22 +01:00

ui_handlers.go

http: session/login reject disabled users; mid-session disable kicks immediately

2026-05-05 10:57:24 +01:00

ui_notifications_test.go

http: /settings/notifications CRUD + test endpoint

2026-05-04 20:06:45 +01:00

ui_notifications.go

feat(ntfy): support HTTP Basic auth alongside access tokens

2026-05-04 22:25:42 +01:00

ui_repo_hooks.go

ui: P2R-12 hook editor — source-group form + host-default Repo section

2026-05-04 11:00:28 +01:00

ui_repo_reinit_test.go

ui: P2R-09 auto-init UX — init line in chrome + danger-zone re-init

2026-05-04 10:49:57 +01:00

ui_repo_reinit.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

ui_repo_test.go

ui: hx-swap none on Run-now + truthful save banner + tailwind rebuild

2026-05-04 10:19:15 +01:00

ui_repo.go

ui: F1 — populate OpenAlerts in baseView so nav badge updates everywhere

2026-05-04 20:19:09 +01:00

ui_restore_test.go

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

ui_restore.go

ui: F1 — populate OpenAlerts in baseView so nav badge updates everywhere

2026-05-04 20:19:09 +01:00

ui_schedules.go

ui: F1 — populate OpenAlerts in baseView so nav badge updates everywhere

2026-05-04 20:19:09 +01:00

ui_sources.go

ui: F1 — populate OpenAlerts in baseView so nav badge updates everywhere

2026-05-04 20:19:09 +01:00

users_test_helpers_test.go

http: test helpers — makeUser, loginAs

2026-05-05 10:57:24 +01:00