bvandeusenandClaude Opus 5.5 eea29123f9 fix(settings): a plugin's password is sealed at rest, and a blank box keeps it (#5671) ...

The UniFi password sat in plugin.unifi in plain text: SECRET_KEYS covers
whole settings, and a plugin's settings are one dict. Saving the plugin's
settings page also wiped it, since the password box is never filled back
in and its blank value was stored.

- A plugin field whose name holds password, secret or token is a
  credential (is_plugin_secret). set_setting seals it inside the dict,
  every read opens it, startup seals any plaintext left from before, and
  the undecryptable-secrets banner names it as plugin.<name>.<field>.
- The settings page uses the same test for its password boxes, and a blank
  box keeps the saved value.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-12 07:06:31 -04:00

..

__init__.py

chore: rename project Roundtable → Steward

2026-04-25 16:20:14 -04:00

alerts.py

feat(email): the report, invites, resets and test sends go through the outbox; only it talks SMTP (#5508)

2026-10-09 16:05:01 -04:00

api_tokens.py

feat(api): personal API tokens and the AI access page

2026-10-06 07:15:23 -04:00

audit.py

feat(ansible): runs stay inside their source; controller-side vars are admin-only (#5034)

2026-10-06 10:57:34 -04:00

capabilities.py

feat(plugins): plugin capability registry + host_agent→Ansible deploy synergy

2026-06-16 11:28:29 -04:00

cleanup.py

feat(email): every email is a row in email_outbox until the server accepts it (#5506)

2026-10-09 15:53:53 -04:00

counter_rates.py

feat(prometheus): scrape any /metrics endpoint into Steward's metrics, with pages (#5668, #5669)

2026-10-12 07:04:01 -04:00

crypto.py

feat(crypto): name the failing setting in wrong-key decrypt log

2026-06-17 08:05:47 -04:00

formatting.py

feat(prometheus): scrape any /metrics endpoint into Steward's metrics, with pages (#5668, #5669)

2026-10-12 07:04:01 -04:00

health.py

feat(settings): Settings → System shows table sizes and what the last cleanup removed (#5469)

2026-10-09 14:29:55 -04:00

ids.py

fix(metrics): time-series rows get time-ordered ids, so an insert stops costing a disk read (#5149)

2026-10-06 18:58:41 -04:00

invites.py

feat(users): invite by email — a one-time link where the invitee makes their own account (milestone 496)

2026-10-08 16:54:44 -04:00

logging_setup.py

feat(platform): tini as PID 1, Hypercorn, a log-level setting, the image on CI's Python, an airgapped boot gate before push (#5159)

2026-10-06 21:29:21 -04:00

mail.py

feat(email): the report, invites, resets and test sends go through the outbox; only it talks SMTP (#5508)

2026-10-09 16:05:01 -04:00

metric_index.py

perf(metrics): a day of one metric reads from the index alone, built after boot (#5490)

2026-10-09 13:23:46 -04:00

metric_series.py

fix(metrics): seed the latest table in the background, not in the migration (#5208)

2026-10-06 23:19:38 -04:00

metrics_retention.py

perf(metrics): a latest-value table for "what is it now"; dashboard cells say loading, failed and as-of (#5208)

2026-10-06 23:06:34 -04:00

migration_runner.py

feat(plugins): fold first-party plugins in-tree; bundled + external roots

2026-06-01 08:37:24 -04:00

migrations.py

chore: rename project Roundtable → Steward

2026-04-25 16:20:14 -04:00

notifications.py

feat(email): the report, invites, resets and test sends go through the outbox; only it talks SMTP (#5508)

2026-10-09 16:05:01 -04:00

outbox.py

feat(dashboard): an Alerts widget beside the Overview; the Overview's overflow links to Alerts and Monitors (#5510)

2026-10-09 16:27:17 -04:00

paging.py

feat(ui): audit log, alert history and Ansible runs load as you scroll (#5211)

2026-10-07 00:10:53 -04:00

password_resets.py

feat(auth): reset a forgotten password from an emailed link (milestone 497)

2026-10-08 20:17:24 -04:00

plugin_manager.py

refactor(plugins): no plugin catalog; plugins ship in the image or are mounted (#5374)

2026-10-08 13:15:55 -04:00

prometheus.py

feat(core): one Prometheus text parser, with types; Traefik reads through it (#5667)

2026-10-12 06:55:24 -04:00

proxy.py

feat(auth): sessions end when they should; logins are throttled; Secure behind HTTPS (#5035)

2026-10-06 11:02:27 -04:00

renames.py

perf(metrics): a latest-value table for "what is it now"; dashboard cells say loading, failed and as-of (#5208)

2026-10-06 23:06:34 -04:00

reports.py

feat(email): the report, invites, resets and test sends go through the outbox; only it talks SMTP (#5508)

2026-10-09 16:05:01 -04:00

scheduler.py

fix(scheduler): a task marked not to run on startup waits an interval after boot (#5431)

2026-10-08 21:52:08 -04:00

self_monitor.py

feat(health): Steward records its own health and Settings → System shows it (#5467)

2026-10-09 14:02:50 -04:00

settings.py

fix(settings): a plugin's password is sealed at rest, and a blank box keeps it (#5671)

2026-10-12 07:06:31 -04:00

status.py

feat(docker): the service and container pages say each fact once (#5310)

2026-10-07 21:33:25 -04:00

time_range.py

fix(unifi): the Overview's history buckets on Postgres; devices name their state (#5207)

2026-10-08 17:28:19 -04:00

watch.py

fix(alerts): Steward's own outage no longer reads as every agent going silent (#5441)

2026-10-08 21:45:47 -04:00

widgets.py

feat(dashboard): an Alerts widget beside the Overview; the Overview's overflow links to Alerts and Monitors (#5510)

2026-10-09 16:27:17 -04:00