luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Expand TUI and package recovery planning

Browse source
This commit is contained in:
Luna 2026-07-09 05:51:59 -07:00
parent cab60cd633
commit 51d52b5229
No known key found for this signature in database
10 changed files with 511 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

16
README.md
View file

@ -224,8 +224,14 @@ enodia-sentinel tui
enodia-sentinel-tui
```
Keys: `1` status, `2` alerts, `3` incidents, `4` rules, `r` refresh, `/` filter,
`:` command mode, `Tab` complete command names, `q` quit.
The TUI mirrors the read-only management console for terminal operators:
status, recent alerts, incidents, posture findings, integrity/watchdog state,
incident timelines, event-rule metadata, event tail, and dry-run response-plan
previews.
Keys: `1` status, `2` alerts, `3` incidents, `4` timelines, `5` posture,
`6` integrity, `7` rules, `8` events, `9` response plans, `r` refresh, `/` filter, `:`
command mode, `Tab` complete command names, `q` quit.
Shell completion is generated without extra dependencies:
@ -344,8 +350,10 @@ sudo systemctl enable --now enodia-sentinel-web
CLI-generated response plans are saved for handoff/review under
`<log_dir>/response-plans/`, with a JSONL trail in
`<log_dir>/response-audit.log`. Dashboard plan previews stay read-only and do
not create artifacts. Plans also include read-only recovery checks for package
verification, rootcheck, persistence re-checks, and off-host watchdog visibility.
not create artifacts. Plans also include pacman package-restore guidance
(`pacman -Qo`, signed-cache verification, trusted reinstall, and FIM re-anchor)
plus read-only recovery checks for package verification, rootcheck, persistence
re-checks, and off-host watchdog visibility.
Alert snapshots include a best-effort enrichment block that annotates flagged
processes and paths with package ownership, executable hashes, parent chains,