7 Commits

Include renames

Author	SHA1	Message	Date
Kristoffer Dalby	010a5564c5	all: rephrase prose to fit codebase voice ... Reword comments, one doc paragraph, and one test failure message so the prose reads naturally. No behaviour change.	2026-04-29 16:22:19 +01:00
Kristoffer Dalby	157e3a30fc	AGENTS.md: trim to behavioural guidance, drop deprecated sub-agent ... Procedural content moves to cmd/hi/README.md and integration/README.md. Stale references (poll.go:420, mapper/tail.go, notifier/, quality-control-enforcer, validateAndNormalizeTags) are corrected or removed.	2026-04-10 12:30:07 +01:00
Kristoffer Dalby	d227b3a135	docs: update integration testing docs for concurrent execution ... Update documentation to reflect the new concurrent test execution capabilities and add guidance on run ID isolation. AGENTS.md: - Add examples for running multiple tests concurrently - Document run ID format and container naming conventions - Update "Critical Notes" to explain isolation mechanisms .claude/agents/headscale-integration-tester.md: - Add "Concurrent Execution and Run ID Isolation" section - Document forbidden and safe operations for cleanup - Add "Agent Session Isolation Rules" for multi-agent environments - Add 6th core responsibility about concurrent execution awareness - Add ISOLATION PRINCIPLE to critical principles - Update pre-test cleanup documentation	2026-01-09 12:34:16 +01:00
Kristoffer Dalby	5655ef86d7	AGENTS: golangci-lint from main, no "full matrix" ... Signed-off-by: Kristoffer Dalby <kristoffer@dalby.cc>	2025-12-17 09:32:05 +01:00
Kristoffer Dalby	22ee2bfc9c	tags: process tags on registration, simplify policy (#2931) ... This PR investigates, adds tests and aims to correctly implement Tailscale's model for how Tags should be accepted, assigned and used to identify nodes in the Tailscale access and ownership model. When evaluating in Headscale's policy, Tags are now only checked against a nodes "tags" list, which defines the source of truth for all tags for a given node. This simplifies the code for dealing with tags greatly, and should help us have less access bugs related to nodes belonging to tags or users. A node can either be owned by a user, or a tag. Next, to ensure the tags list on the node is correctly implemented, we first add tests for every registration scenario and combination of user, pre auth key and pre auth key with tags with the same registration expectation as observed by trying them all with the Tailscale control server. This should ensure that we implement the correct behaviour and that it does not change or break over time. Lastly, the missing parts of the auth has been added, or changed in the cases where it was wrong. This has in large parts allowed us to delete and simplify a lot of code. Now, tags can only be changed when a node authenticates or if set via the CLI/API. Tags can only be fully overwritten/replaced and any use of either auth or CLI will replace the current set if different. A user owned device can be converted to a tagged device, but it cannot be changed back. A tagged device can never remove the last tag either, it has to have a minimum of one.	2025-12-08 18:51:07 +01:00
Kristoffer Dalby	eb788cd007	make tags first class node owner (#2885) ... This PR changes tags to be something that exists on nodes in addition to users, to being its own thing. It is part of moving our tags support towards the correct tailscale compatible implementation. There are probably rough edges in this PR, but the intention is to get it in, and then start fixing bugs from 0.28.0 milestone (long standing tags issue) to discover what works and what doesnt. Updates #2417 Closes #2619	2025-12-02 12:01:25 +01:00
Kristoffer Dalby	6d24afba1c	add pre-commit hooks, move claude to agents. (#2877)	2025-11-11 20:35:23 +01:00