v2.0.0 — Atglance_2.0.0

New

Health: new states Failed (separate from Stopped), Done (one-shot jobs) and Starting; exit code 3 for monitoring; JSON output with a version number; a gentler watch. Console: login, logout, whoami, and check (formerly doctor, which checks console, token, clock, registration, systemd, journal and key expiry). System: system register (with a service account), status, deregister, reactivate, rotate-key, admin --force, system service-account set|remove. Config: config backup (single service or --all), list, pull, diff, restore (backs up first, restarts the service, rolls back on failure, refuses to restart SSH over SSH). Offline queue and sync: backups made while the console is down upload later; unchanged files are skipped, checked by sha256. Schedule: schedule enable adds a daily check and sync through cron, using a service account key, never a person's key. Admins: security events and security lockouts. 1.x import: happens automatically on the first console command; the host keeps its system id and key. Docs: man page and bash completion.

Checksum

Improved

Rows instead of service names; failed units unnamed missing units filtered out; failed units named --app ssh said "not found" (needed ssh.service) service ssh works "Latest backup" always - (read from a different folder than it saved to) one backup folder Uptimes like "144d" after a Pi clock jump uptime measured from boot, so clock jumps don't affect it Services that restarted long ago flagged as Restarting forever flagged only when the restarts are recent Journal read for every service even to show one read for the one service only, capped at 5000 entries Ports duplicated (IPv4 and IPv6) deduplicated --system-regenerate-hash never told the console, so the key didn't match rotate-key updates the console Upgrading 1.x hosts lost the :8002 port the 1.x URL rule is kept

Security fixes

Token file readable by other users (0644/0664) 0600 root, and looser files are refused Predictable temp file in /tmp written as root (overwrite risk) safe temp files Full system key printed by --config-save never printed System key sent in the URL, so access logs recorded it sent in a header (v1) --validate dumped email, date of birth and tracebacks short summary; -v without secrets Followed redirects with the key attached redirects refused Console messages printed raw tokens and keys hidden, control characters removed The console fixes (force actions for org admins only, organisation checks on uploads, masked keys in the web UI) are part of the console release, not the CLI.