anti 32eeb0c813 refactor(orchestrator): collapse decnet-emailgen.service into orchestrator ...

Stage 5 of the realism migration. Email generation is no longer a
separate worker / systemd unit / CLI subcommand — the orchestrator's
single tick loop covers SSH traffic, file plants, and email drops.
Going from 21 services to 20.

Worker:
- _one_tick rolls between traffic / file / email (45/45/10 weights).
  The 10% email weight at a 60s orchestrator interval produces ~one
  email per 10 minutes, close to the pre-collapse 5-minute cadence.
- get_driver_for(action) (stage 4) handles SSH vs Email dispatch.
- Quiet branches fall through so a (decky-set, persona-pool,
  mail-decky) shape that silences one branch doesn't waste the tick.
- Periodic prune covers both orchestrator_events and
  orchestrator_emails tables.

Deletions:
- deploy/decnet-emailgen.service.j2
- decnet/orchestrator/emailgen/worker.py
- decnet/cli/emailgen.py
- tests/orchestrator/emailgen/test_worker_integration.py

Renames (history-preserving):
- decnet/web/router/emailgen/ -> decnet/web/router/realism/
- tests/api/emailgen/        -> tests/api/realism/
- tests/cli/test_emailgen_*  -> tests/cli/test_realism_*

Public surface changes (clean break, pre-v1):
- API URL /api/v1/emailgen/personas -> /api/v1/realism/personas
- CLI `decnet emailgen import-personas` -> `decnet realism
  import-personas`. `decnet emailgen run` is gone — the orchestrator
  covers it.
- gating.py: emailgen master-only group replaced by realism.
- decnet-orchestrator.service.j2: DECNET_REALISM_* env block added.
- decnet.target: decnet-emailgen.service entry removed.
- frontend: PersonaGeneration.tsx fetches /realism/personas.

2026-04-27 16:33:04 -04:00

..

api

refactor(orchestrator): collapse decnet-emailgen.service into orchestrator

2026-04-27 16:33:04 -04:00

asn

feat(profiler): write ASN + AS name onto attacker rows

2026-04-25 04:01:28 -04:00

bus

feat(bus): reserve identity.unmerged topic

2026-04-26 08:10:56 -04:00

canary

feat(canary): mysql_dump generator with phone-home replica payload

2026-04-27 13:52:55 -04:00

cli

refactor(orchestrator): collapse decnet-emailgen.service into orchestrator

2026-04-27 16:33:04 -04:00

clustering

test(clustering): full-bound passes through production campaign clusterer

2026-04-26 09:13:59 -04:00

collector

fix(collector): label-based fleet container discovery

2026-04-25 08:11:21 -04:00

config

refactor(tests): move flat tests/*.py into per-subsystem subfolders

2026-04-23 21:34:25 -04:00

core

feat(creds): Phase 1 — Authorization header + SNMP community capture

2026-04-25 07:04:10 -04:00

correlation

feat(creds): surface plaintext/b64 secret on reuse findings

2026-04-26 04:34:19 -04:00

db

feat(db): Campaign SQLModel + repo write/read methods

2026-04-26 08:54:28 -04:00

deploy

feat(deploy): emailgen systemd unit + bring orchestrator + emailgen into decnet.target

2026-04-26 22:49:16 -04:00

docker

test: fix templates paths, CLI gating, and stress-suite harness

2026-04-19 23:50:53 -04:00

factories

test(clustering): fixture 4 paused_campaign + active_days/time_window

2026-04-26 07:39:46 -04:00

fixtures/campaigns

test(clustering): full-bound passes through production campaign clusterer

2026-04-26 09:13:59 -04:00

fleet

feat(fleet): systemd unit + bus signal for fleet reconciler

2026-04-26 21:21:36 -04:00

geoip

feat(attackers): PTR record (reverse DNS) enrichment

2026-04-24 17:26:40 -04:00

intel

refactor(intel): re-key attacker_intel on attacker_uuid (closes DEBT-041)

2026-04-26 05:35:29 -04:00

live

test(live): align mqtt/postgres/mysql live tests with honeypot + loop realities

2026-04-23 22:06:55 -04:00

logging

refactor(tests): move flat tests/*.py into per-subsystem subfolders

2026-04-23 21:34:25 -04:00

mutator

refactor(tests): move flat tests/*.py into per-subsystem subfolders

2026-04-23 21:34:25 -04:00

orchestrator

refactor(orchestrator): collapse decnet-emailgen.service into orchestrator

2026-04-27 16:33:04 -04:00

perf

added: scripts/profile/view.sh — auto-pick newest artifact and open viewer

2026-04-17 13:20:05 -04:00

prober

feat(sniffer): ISN sequence classifier (reuses seq_class helper)

2026-04-26 20:30:24 -04:00

profiler

feat(profiler): backfill Credential.attacker_uuid on attacker upsert

2026-04-26 03:30:44 -04:00

realism

feat(realism): synthetic_files table + planner wiring + scheduler swap

2026-04-27 16:22:07 -04:00

service_testing

feat(templates): IMAP/POP3 servers read EML spool from emailgen

2026-04-26 22:21:01 -04:00

services

feat(creds): NTLMSSP Type 3 parser + DEBT-040 for SMB/RDP/NLA framers

2026-04-25 07:19:30 -04:00

sniffer

feat(sniffer): ISN sequence classifier (reuses seq_class helper)

2026-04-26 20:30:24 -04:00

stress

fix(stress): unblock Locust runs from login rate-limit self-DoS

2026-04-24 00:13:15 -04:00

swarm

feat(swarm): pin worker cert SHA-256 fingerprint per host

2026-04-25 03:01:15 -04:00

telemetry

refactor(tests): move flat tests/*.py into per-subsystem subfolders

2026-04-23 21:34:25 -04:00

topology

Revert "feat(mazenet): host resolution + cross-host bridge guard"

2026-04-25 03:26:19 -04:00

updater

feat(updater): sync systemd unit files and daemon-reload on update

2026-04-19 19:07:24 -04:00

vectorstore

feat(creds): cred-reuse foundation + vectorstore scaffold

2026-04-26 03:18:34 -04:00

web

feat(web): read-only campaigns API + SSE + frontend

2026-04-26 09:20:17 -04:00

webhook

fix(webhook/worker): self-heal when bus starts late or restarts

2026-04-24 16:39:38 -04:00

__init__.py

Add 20 honeypot services: email, DB, ICS, cloud, IoT, network protocols

2026-04-03 23:07:44 -03:00

conftest.py

feat(attackers): PTR record (reverse DNS) enrichment

2026-04-24 17:26:40 -04:00

mysql_spinup.sh

test: fix templates paths, CLI gating, and stress-suite harness

2026-04-19 23:50:53 -04:00