anti 5e7d68fde3 refactor(db): split topology.py into a topology/ subpackage ...

Splits the 694-line topology.py into five submixin files plus a
composing TopologyMixin in topology/__init__.py:

  _core.py       (~225)  topologies CRUD + _assert_pending /
                         _check_and_bump_version concurrency guards
  lans.py        (~115)  LAN CRUD
  deckies.py     (~130)  topology decky CRUD + list_running_topology_deckies
  edges.py        (~80)  edge CRUD + status-event log
  mutations.py   (~165)  live reconciler queue (atomic claim + state writes)

Sibling submixins call self._assert_pending and
self._check_and_bump_version; MRO resolves them onto TopologyCoreMixin
through the composed SQLModelRepository class.

2026-04-28 15:16:42 -04:00

..

agent

fix(agent): pass --always-recreate-deps so service netns shares stay fresh

2026-04-27 22:55:48 -04:00

asn

feat(asn): IP→ASN enrichment via iptoasn.com bulk dump

2026-04-25 03:58:58 -04:00

bus

feat(bus): canary token bus topics (placed/triggered/revoked)

2026-04-27 12:43:23 -04:00

canary

chore: remove vulture-flagged dead code, add whitelist

2026-04-28 14:30:12 -04:00

cli

fix(web): proxy follows DECNET_API_HOST instead of hardcoding 127.0.0.1

2026-04-27 22:55:25 -04:00

clustering

feat(prober-cert): roll up fingerprints onto AttackerIdentity

2026-04-28 11:28:54 -04:00

collector

fix(collector,correlation): extract attacker IP from sshd/pam free-form prose

2026-04-27 23:16:42 -04:00

correlation

fix(collector,correlation): extract attacker IP from sshd/pam free-form prose

2026-04-27 23:16:42 -04:00

engine

feat(deploy): seed canary baseline at deploy time + tests

2026-04-27 13:19:08 -04:00

fleet

feat(fleet): systemd unit + bus signal for fleet reconciler

2026-04-26 21:21:36 -04:00

geoip

feat(attackers): PTR record (reverse DNS) enrichment

2026-04-24 17:26:40 -04:00

intel

refactor(intel): re-key attacker_intel on attacker_uuid (closes DEBT-041)

2026-04-26 05:35:29 -04:00

logging

refactor: strip DECNET tokens from container-visible surface

2026-04-17 22:57:53 -04:00

mutator

fix(topology/allocator): widen default subnet base to /12 for mass-scale

2026-04-24 18:57:55 -04:00

net

feat(net): stealth-egress httpx client factory

2026-04-26 04:59:34 -04:00

orchestrator

feat(realism): operator-tunable planner weights via realism_config

2026-04-27 18:00:08 -04:00

prober

feat(prober-cert): capture leaf TLS cert after successful JARM

2026-04-28 11:14:44 -04:00

profiler

feat(prober-cert): roll up fingerprints onto AttackerIdentity

2026-04-28 11:28:54 -04:00

realism

feat(realism): operator-tunable planner weights via realism_config

2026-04-27 18:00:08 -04:00

services

feat(creds): DEBT-040 Phase 3 — RDP NLA / CredSSP NTLMv2 capture

2026-04-25 07:42:52 -04:00

sniffer

feat(sniffer): ISN sequence classifier (reuses seq_class helper)

2026-04-26 20:30:24 -04:00

swarm

sec(env): refuse to start master API with footgun public-binding config

2026-04-27 21:15:15 -04:00

templates

fix(ssh-template): drop sshd/pam_unix native chatter at rsyslog

2026-04-27 23:26:53 -04:00

topology

Revert "feat(mazenet): host resolution + cross-host bridge guard"

2026-04-25 03:26:19 -04:00

updater

sec(updater): harden tarball extraction and verify sha256 before extract

2026-04-27 21:14:48 -04:00

vectorstore

feat(creds): cred-reuse foundation + vectorstore scaffold

2026-04-26 03:18:34 -04:00

web

refactor(db): split topology.py into a topology/ subpackage

2026-04-28 15:16:42 -04:00

webhook

fix(webhook/worker): self-heal when bus starts late or restarts

2026-04-24 16:39:38 -04:00

__init__.py

feat(env): run decnet.ini loader at package import; expose DECNET_MODE

2026-04-19 03:17:25 -04:00

archetypes.py

refactor(ssh): consolidate real_ssh into ssh, remove duplication

2026-04-11 19:51:41 -04:00

composer.py

fix(collector): label-based fleet container discovery

2026-04-25 08:11:21 -04:00

config_ini.py

fix(config-ini): strip inline # and ; comments from values

2026-04-27 22:55:58 -04:00

config.py

fix(logging): don't crash the process if the system log can't be opened

2026-04-24 01:00:42 -04:00

custom_service.py

Add per-service customization, stealth hardening, and BYOS support

2026-04-04 04:08:27 -03:00

distros.py

fix: stabilize tests with synchronous DB init and handle Bandit security findings

2026-04-09 01:33:15 -04:00

env.py

sec(env): refuse to start master API with footgun public-binding config

2026-04-27 21:15:15 -04:00

ini_loader.py

fix: align tests with model validation and API error reporting

2026-04-13 01:43:52 -04:00

models.py

feat(swarm): DeckyConfig.host_uuid + fix agent log/status field refs

2026-04-18 19:10:25 -04:00

network.py

fix(network): sweep orphan Docker bridges that squat on our subnet

2026-04-20 23:19:42 -04:00

os_fingerprint.py

feat(os_fingerprint): Phase 2 — add icmp_ratelimit + icmp_ratemask sysctls

2026-04-10 16:41:23 -04:00

privdrop.py

fix: chown log files to sudo-invoking user so non-root API can append

2026-04-17 13:39:09 -04:00

telemetry.py

fix: resolve all ruff and bandit lint/security issues

2026-04-16 01:04:57 -04:00