Returns None if days_elapsed < 3 or no traffic_limit set.

Drain any frames the server pushes right after the SystemInfo handshake. Returns once the inbound stream is quiet for `quiet_ms`.

Helper: enroll a pending server so it becomes online (has_token=true, no outstanding enrollment). Returns the agent token returned by register.

Persist one batch of cached agent reports and update traffic accounting. This is the per-tick body of [`run`], extracted so it can be unit-tested. It

Effective capabilities == the agent's reported capabilities. Kept as a named accessor so call sites read intent clearly even though there is no longer

Single entry point dispatched from the agent reporter loop.

Helper: insert a server with a specific `expired_at` value.

First-connect pushes that a default agent must tolerate and ignore. These (ping/network/IP-quality sync + firewall blocklist messages) are unrelated t

Load (or start empty). Corrupt / unknown-version / missing → empty (fail-safe: no temporary grants).

Lookup an IP address and return a display string like "AS15169 Google LLC". Returns None for private/loopback IPs or unknown IPs.

Pure mapping from a bollard `Volume` model to our `DockerVolume` DTO. Extracted so the transformation can be unit-tested without a live daemon.

Record/update/clear an agent's last reported external IP. Called from the agent WS handler on `SystemInfo` and `IpChanged`.

Connect to one of `addrs` (already SSRF-validated) and report reachability. Split out so tests can exercise the connect logic directly against a valid

Push a `BlocklistAdd` to every covered, online, capability-allowed agent whose negotiated protocol is high enough to understand firewall messages.

Increment the blocked counter for an IP so it shows up in the next emitted PortScan evidence. Called from the firewall log stream.

Guard: checks both capability bit (CAP_DOCKER) and runtime feature ("docker").

Check if a rule's cover_type/server_ids covers a specific server (pure, no DB).

Run `count` probe attempts for the given target and aggregate results. - ICMP: uses `probe_icmp_batch` (single `ping -c N` invocation). - TCP/HTTP: r

Performs the work of a single `run` iteration: sweep timed-out upgrade jobs and drop expired terminal history. Extracted so it can be unit-tested dete

Spawn a one-shot HTTP/1.1 server on 127.0.0.1 that replies to a single request with a body of `body_len` bytes (all `b'x'`). Returns the bound address

Build a [`ProbeResult`] representing a target that the SSRF guard refused to probe. Keeps the guard's message so the operator sees why it was blocked.

Read forwarded agent frames until the set of `expected` `type`s has all been observed (deduped) or `budget` elapses. Ignorable first-connect pushes ar

Performs the work of a single aggregator tick: roll up raw records into hourly summaries, hourly network probe summaries, daily traffic, and daily upt

Register + connect a mock agent, consume the welcome frame, complete the SystemInfo handshake with the given capability bitmask, and drain the first-c

Build correlation ID: {task_id}:{run_id}:{server_id}:{attempt}

Clamp the public metrics range before it reaches the DB. Rejects an inverted range and caps the span so an unauthenticated caller cannot force an ove

Clean up Docker viewer tracking, features, and broadcast availability change. Docker caches (containers, stats, info) and log sessions are intentiona

Create an admin API key and return the raw `serverbee_...` value.

由 release base + 版本号推导 (binary_url, checksums_url)。 base 必须 https://。version 不带前导 v。

Drain any first-connect noise the agent has already queued, so a later assertion about a freshly-pushed command is not confused by it.

High-level operations the manager calls. Implemented as free functions taking `&dyn NftExecutor` so tests can swap.

Performs the per-tick work of the alert evaluator: evaluate all enabled alert rules once and log any error. Extracted from the `run` loop so it can be

Finalize an upload: rename .sb-part to the target path.

Fixed reference instant so timeout/retention cutoffs are deterministic.