PapaTramp/security-alert-center
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
226 Commits 1 Branch 0 Tags
1639261cde79d41a3489f7a46be974b3e944a680
Commit Graph

90 Commits

Author SHA1 Message Date
PTah 1639261cde docs: backlog for ingest resilience during mass agent updates 
Operational and code TODOs from mass SSH-update incident; does not
block ssh-monitor phase 2.2.0.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-08 11:28:57 +10:00
PTah fa1bd41c92 fix: sac-deploy validate sac-api.env without bash source 
Preflight pydantic parse catches inline comments in env values; alembic
and stale remote_action reset use SAC_CONFIG_FILE. Document env format
and ssh_known_hosts in runbook.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-08 10:21:49 +10:00
PTah d7bbcc5337 docs: WinRM RDP update flow and SAC 0.20.18 deployment notes 
Обновлены README и руководства по fallback WinRM (git→zip→клиент), SAC_PUBLIC_URL и краткому 502 при деплое.
 2026-06-20 20:03:57 +10:00
PTah fc9d630263 docs: refresh README; allow monitor JWT for RDG qwinsta/logoff (0.20.6) 
Update platform docs for current features; Seaca and web operators with
monitor role can trigger WinRM actions via SAC API.
 2026-06-20 19:02:58 +10:00
PTah df4c93d243 chore: release 0.10.0 (agent control plane phase 1) 
Minor release: RDG flap, qwinsta/logoff queue, dashboard UI, agent poll API.
 2026-06-19 23:42:03 +10:00
PTah db95be39f3 docs: agent poll contract for RDP 2.0.39-SAC 2026-06-19 23:38:02 +10:00
PTah 2aec488226 feat: RDG session flap rule, qwinsta/logoff queue and dashboard UI (0.9.13) 
Detect 302→303 within 1–10s, Problem with 30s dedup, rdg_flap flag.
Agent command poll API, admin qwinsta/logoff from Overview. Migration 016.
 2026-06-19 23:34:01 +10:00
PTah b328d32f97 docs: agent control plane concept (v0.9.12) 
Утверждённая концепция v0.7: RDG flap, qwinsta/logoff, обновления
агентов и desired config. Только документация и bump версии — runtime
без изменений.
 2026-06-19 23:25:54 +10:00
PTah 308e075f35 merge: sync github roadmap with kalinamall 0.9.11 2026-06-19 22:34:14 +10:00
PapaTramp 63cc2954af Update roadmap.md 2026-06-19 14:18:58 +10:00
PapaTramp 45f45145f0 roadmap.md: small ToDo 2026-06-18 08:02:00 +10:00
PTah 8a97bbfb43 merge: sync local backlog with kalinamall production URLs 
Integrate diverged kalinamall/main; keep v0.7 agent-update docs and
kalinamall.ru paths in deploy/docs; mirror scripts remain removed.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-17 11:13:35 +10:00
PTah 2069e57f14 docs: backlog for agent version compliance and remote updates 
Add agent-update-backlog.md and roadmap v0.7 outline for SAC-driven
agent version tracking and remote update initiation.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-17 11:07:12 +10:00
PTah 6b288bfa49 chore(github): generic example.com in docs, remove mirror scripts 
Replace sac.kalinamall.ru with sac.example.com in public docs/deploy.
Remove Push-Mirror and Rewrite-GitHostUrls scripts from repo.
Simplify workspace-three-repos.md for GitHub-only workflow.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-16 11:57:02 +10:00
PTah 6bff073108 chore(docs): sync repository URLs for kalinamall mirror 2026-06-16 11:41:07 +10:00
PTah 36ccfc9471 chore(docs): GitHub URLs in README/docs, remove .cursor from repo 
Replace git.kalinamall.ru links with github.com/PTah in public docs.
Add Rewrite-GitHostUrls.ps1 and Push-Mirror.ps1 for kalinamall mirror pushes.
Add .cursor/ to .gitignore.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-16 11:37:20 +10:00
PTah e022f2f213 docs: sac-api.kalinamall.ru и схема HAProxy для Seaca. 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-13 12:01:06 +10:00
PTah f0bd31c544 fix(nginx): отклонять чужие Host на SAC (default_server 444) 
Только sac.kalinamall.ru; ext.kalinamall.ru и прочие имена на IP SAC не отдают UI. ssl_reject_handshake на :443.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-13 11:24:21 +10:00
PTah e2b5fb7604 docs: Seaca mobile operator guide and FCM setup 
Документация для админа и runbook: коды регистрации, устройства,
настройка SAC_FCM на сервере.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 15:34:34 +10:00
PTah 86c602cf07 docs: add v0.6 Mobile (Seaca) to roadmap and README 
Links the new Android client repo and documents server-side mobile API work.
 2026-06-10 12:45:52 +10:00
PTah aafb80fa31 feat: proactive host_silence scan for stale agent.heartbeat (0.8.3) 
Background scan every 5 min opens rule:host_silence and notifies without
waiting for the next ingest event. CLI job + optional systemd timer.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 09:07:32 +10:00
PTah 02200f1a80 docs: note Exchange WinRM strict mode in agent integration 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-05 11:07:46 +10:00
PTah 54337a5917 feat: host inventory (agent.inventory), host detail page, UI columns 
Store hardware/software snapshots on hosts; warn on hardware changes. Host card from Hosts list. Add agent version column to Events/Overview; rename Hosts table columns and sort by status.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-05 09:53:00 +10:00
PTah 57793d24ba feat: SAC support smb.admin_share.access events from RDP agent 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-04 10:14:14 +10:00
PTah 1580982d88 fix: rename README screenshots to bust stale CDN/browser cache 
Same user-provided PNGs (no blur); new filenames avoid serving old
Gaussian-blurred assets cached at dashboard.png / events.png paths.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 14:18:07 +10:00
PTah 7ab497b300 docs: restore original README screenshots without extra blur 
Use user-provided redacted images as-is for dashboard, events, and problems.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 14:13:47 +10:00
PTah 2d39943020 docs: add sanitized UI screenshots to README (0.7.4) 
Dashboard, events, and problems screenshots with hostnames and IPs blurred.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 14:11:14 +10:00
PTah de29270a25 feat: SAC 0.7.0 display_name columns and event severity overrides 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-01 10:21:43 +10:00
PTah 8de5d14cfb feat: SAC 0.6.0 user edit UI, login to dashboard, daily report timer sync 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-01 09:55:12 +10:00
PTah 56c469ddbd feat: multi-user UI login with admin and monitor roles 
Add sac_users table, JWT roles, settings/users API guarded for admin, Users page in UI, and sac_manage_user.py CLI.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-01 09:27:14 +10:00
PTah 799f8668e6 feat: Telegram templates for RDS shadow and WinRM session events 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-30 10:20:57 +10:00
PTah eba2f0d15c docs: agent daily report toggles and unified template versions 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 17:18:03 +10:00
PTah 7ebbb9a9d1 feat: unify SSH and Windows daily report layout in SAC and UI 
Agent-style report body for SAC aggregation; shared stats cards; RDP ban note in docs

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 17:03:29 +10:00
PTah 0baeacf808 docs: mark notification epic complete in work-plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 16:31:18 +10:00
PTah 42f31b3bb5 fix: dashboard and hosts count SSH and RDP daily reports 
analytics-a4: daily_reports_24h uses report.daily.*; sac-deploy enables timers
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 16:31:09 +10:00
PTah 415d863b3b feat: SAC daily reports from DB aggregation (notif-32) 
- Aggregate report.daily.ssh/rdp from 24h ingest; job and systemd timer

- notify_daily_report bypasses NOTIFY_MIN_SEVERITY; ingest routes agent reports

- HTML templates, env SAC_DAILY_REPORT_*, docs and tests (56 cases)

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 16:30:07 +10:00
PTah 4167687dec feat: notification cooldown dedup for events and problems (notif-31) 
Store last notify time by dedup_key/fingerprint, gate dispatch before
channels; config SAC_NOTIFY_*_COOLDOWN_SEC, migration 008.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 16:24:01 +10:00
PTah 1a70980920 feat: HTML Telegram templates for RDP/SSH events (notif-30) 
Agent-style messages from event details, parse_mode HTML, templates for
login/sudo/RDG and problems; unit tests.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 16:21:40 +10:00
PTah ebb450be92 feat: global notification policy severity to channels (notif-22) 
Singleton notification_policy table, NOTIFY_MIN_SEVERITY/CHANNELS env,
central dispatch gate, Settings policy UI, migration 007.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 16:19:26 +10:00
PTah 9b177c145b feat: SMTP email notification channel with UI and ingest 
Migration 006, email config DB/env, smtplib sender, settings API,
Settings UI section, and dispatch on event/problem ingest.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 16:12:55 +10:00
PTah 20fa7e2c27 feat: webhook notification channel with UI and ingest dispatch 
Add webhook config (DB/env), JSON POST on events/problems, settings API,
Settings UI section, and notify_dispatch for multi-channel ingest.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 16:09:40 +10:00
PTah f7b5fff04e docs: E2E checklist for SAC Telegram severity (notif-02) 
Add synthetic ingest curl steps, update prod next steps for migration 004.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 16:06:58 +10:00
PTah 79a78dc7c9 feat: Telegram settings in DB with UI edit and test send 
Store notification_channels (migration 004), effective config DB over env,
PUT/test API endpoints, Settings form, and pass db session into ingest notify.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 16:05:32 +10:00
PTah e0ba384705 feat: SAC Telegram settings view, notify_problem severity gate, exclusive docs 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 15:58:08 +10:00
PTah 117390cbca docs: add 2026-05-29 todo for SAC notifications and Settings UI 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 15:39:21 +10:00
PTah a42a63b8fa docs: add analytics backlog for deferred SAC development 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 15:17:08 +10:00
PTah 81cf9c46b3 feat: improve SAC UI layout, reports state, and hosts sorting 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 13:17:37 +10:00
PTah d4bf6e536c feat: host display_name в ingest, поиск хостов, UI и docs 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 11:49:10 +10:00
PTah 108e1756c4 feat: live последние события на Dashboard; retention, health, runbook 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 11:29:31 +10:00
PTah 9ed0670863 docs: RDP SAC 1.2.12 null+JSON fix 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 10:44:23 +10:00