Fetch a single in-scope server's full detail. Out-of-scope IDs return `NotFound` — never `Forbidden` — to avoid confirming the existence of hidden or

Per-server time-series metrics. Reuses `RecordService::query_history` and normalizes both raw and hourly variants into `PublicMetricsPoint`.

Get the terminal output sender for a session.

Insert a monitor row so `execute_check` can write a record and update state.

Insert a raw record at an explicit time with explicit disk_io_json. Numeric metric columns are zeroed so tests can focus on the field under test.

First-connect pushes a default agent (which reports CAP_FIREWALL_BLOCK) must tolerate and ignore. These are unrelated to the file flow under test.

List all `block_list` rows that cover `server_id`, oldest first so the agent applies them in stable order.

Check if a filename matches a deny pattern. Patterns: - `*.ext` — file ends with `.ext` - `prefix*` — file starts with `prefix` - `exact` — exact mat

Bring a mock agent online for `register_agent`'s server: connect the WS, consume the welcome, finish the SystemInfo handshake reporting `caps`, then d

Helper: given a line like `"10 packets transmitted, 9 received, 10% packet loss"`, extract the token immediately before `suffix` (trimmed, last whites

Parse the registrar from WHOIS response text.

Patch a single column on the singleton.

Choose the first routable (non-loopback, non-private) address from a server's recorded `ipv4`/`ipv6` strings for GeoIP resolution, preferring IPv4. Re

Run `ping -c N` once and parse the summary statistics.

Push a `BlocklistRemove` to every covered, online, capability-allowed agent on a high-enough protocol version.

Tell an agent to drop every entry it currently holds and clear our `apply_state` map for that agent. Caller is responsible for verifying capability +

Send the complete set of covering block entries to a single agent. Caller is responsible for verifying capability + protocol version.

Audit a `BlocklistResetAck` from the agent. No `apply_state` mutation is needed because `push_reset_to` already cleared it locally.

Single attempt at registration. Used by both the bootstrap loop and the reporter's mid-session rebind path. Errors are categorized so callers can retr

Drop the cached report for a server. Call this only when the server row itself is gone (deletion), so the display cache doesn't outlive it. A plain di

Remove and drop the file handle for a transfer (closes the file).

Resolve a literal IP or hostname. `lookup_host` requires `host:port`, so we tack on a dummy port and take the first address.

Performs a single cleanup tick: prunes every retention-bound table and evicts idle file transfers. Extracted from `run` so it can be unit-tested witho

Long-running per-connection task: re-reads the grants file, updates the shared effective-caps cache, and emits `CapabilitiesChanged` on transitions. R

Run with an optional external agent-message stream attached (currently sourced from [`crate::security::SecurityManager`]).

Insert a server row with the given id and persisted capability mirror. The server is NOT registered with the agent_manager, so it is offline.

Seed one device token row with fixed timestamps. `device_tokens` has NOT NULL FKs to `users` and `mobile_sessions` (which itself FKs `users`), so the

Send a single agent frame as a JSON text message.

Spawn a one-shot server that replies with an arbitrary `status` code and a fixed `body`. Models the non-2xx / non-redirect responses `fetch()` reads t

Store an open file handle for a download transfer.

Evict IPs whose deques are empty or contain only entries older than the window. Prevents unbounded growth under "spray" attacks where each source IP a

Straight field mapping from the singleton entity to the public DTO.

Read a single text frame from the agent ws and parse it as JSON. Returns None on timeout.