Find agents that have not reported for `threshold_secs` seconds.

Walk every IP and expire stale window entries. Cheap; can be called periodically by the manager.

Build a `/api/ws/terminal/{server_id}` client request carrying an `x-api-key` header.

Unregister a terminal session.

Update the features list for a server.

Apply one round of trippy data to the cache. Drops the message if no placeholder exists (e.g., cache evicted or stale agent reply). Returns the snapsh

Validate `AlertRuleAction`s. At most one action per rule. `block_source_ip` is only allowed when every item in the rule is one of `ssh_brute_force_det

Like [`validate_url`] but allows any port, for the service-monitor checkers where operators legitimately monitor HTTP services on non-standard ports (

Returns warnings for misconfigured provider names. Should be called once at startup; results are intended for `tracing::warn!`.

OR of bits for caps with an active grant (`expires_at > now`) that are currently OFF in `base`. A grant can only turn ON an off bit.

Active grants as protocol DTOs (sorted by cap for stable output). Only grants that actually turn a cap ON — i.e. the cap is a known key and is OFF in

Sum per-device disk I/O rates into a single (read, write) pair for broadcast.

Return the brand assets directory path.

Bring up a mock agent advertising the `docker` runtime feature plus the given capability bitmask. The docker control/read gates require both the featu

Broadcast a `BlocklistChanged { kind: Created }` to subscribed browsers.

Build an `/api/ws/servers` (browser) client request carrying `x-api-key`.

Build an `/api/ws/servers` client request carrying the given `x-api-key`.

Build a single-file widget JS source with the given id baked into the JSDoc manifest and the body so we can confirm it round-trips.

Cancel a single download transfer.

Check WHOIS information for a domain. Config options: - `warning_days`: days before expiry to warn (default 30) - `critical_days`: days before expiry

Abort all background tasks (log sessions, event stream).

Remove pending requests that have exceeded their per-entry TTL.

Collect IP addresses from all network interfaces using sysinfo.

Connect a browser update WebSocket with an `x-api-key`, consume the initial `full_sync`, and return the live socket.

Create an API key as an already-authenticated admin and return the raw key.

返回当前构建对应的 release asset 文件名(与 release.yml 命名一致)。

Build a docker-logs WS client request carrying the given `x-api-key`.

Drain `auth.log` lines from a reader and forward attempts. Public for tests. The production tail loop calls this against a file-backed reader and re-

Drain lines from an arbitrary reader. Exposed for tests so we can feed canned conntrack output without invoking the subprocess.

Drain any frames the server pushes right after the SystemInfo handshake (ping/network/IP-quality sync + firewall blocklist reset/sync for a default ag

Read kernel journal JSON lines and forward extracted source IPs. Public for tests; the production path constructs the reader from `journalctl -k`'s s

Cursor encoded as `base64(rfc3339_created_at|id)`. Stable across calls and agnostic to the underlying schema.

The failure reason for a `Failed` transfer, so the UI can explain *why a transfer failed (e.g. a deny-pattern hit) instead of a bare "failed".

Extract Bearer token from Authorization header.

Extract the User-Agent from request headers.

Try each URL in order; return the first successful, validated response.

Hit the public-status surface with the given request builder, verify status 200 and absence of forbidden keys/substrings, and return the parsed JSON b