Block a user
AGNT-05: Push deep-trace commands to agents via SSE
Implemented: AgentCommandController supports DEEP_TRACE command type via SSE push.
Move ClickHouse credentials to K8s Secret
Priority increased: ClickHouse is now exposed externally via NodePort (30123/30900) with plaintext credentials (cameleer/cameleer_dev) in the StatefulSet env vars. Moving to K8s Secrets should…
Add K8s liveness/readiness probes for server and ClickHouse
Note: ClickHouse is now exposed externally via NodePort (30123 HTTP, 30900 native). Liveness/readiness probes are even more important now that the server depends on ClickHouse being ready before…
Add K8s liveness/readiness probes for server and ClickHouse
Persist JWT signing key across server restarts
Move ClickHouse credentials to K8s Secret
SECU-02: JWT refresh flow via POST /api/v1/agents/{id}/refresh
Implemented in Phase 4. POST /api/v1/agents/{id}/refresh validates refresh token type claim, checks agent exists, and issues new access token. Stateless refresh tokens (signed JWT with…