3cabf12f68
fix: SAC-first ssh-monitor update (UPDATE_VIA_SAC, bootstrap --deploy)
...
Pass UPDATE_VIA_SAC to the remote updater and run bootstrap with --deploy
so Linux hosts need only the SAC update button after initial config.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-08 09:44:24 +10:00
9bfc5e23f7
fix: harden push-github-snapshot.sh for macOS and secret scan
...
Strip BOM, skip self-sanitization, replace default DB password in mirror,
and simplify pre-push scan to private keys only.
2026-07-07 19:46:26 +10:00
9e43de6fc1
chore: release SAC 0.5.0
...
Bump version, document security hardening in README, add github snapshot
push script with URL/login/IP sanitization for public mirror.
2026-07-07 19:44:08 +10:00
80320ae698
fix: harden SAC security per audit (0.4.15)
...
Close audit findings: anti-spoof client IP for login rate limit, JWT/CORS
enforce on startup, SSH host-key verification and sudo via stdin, optional
WinRM HTTPS, SSE httpOnly cookie auth, ingest body limit, ILIKE escaping,
and HMAC API key hashing with legacy SHA-256 fallback.
2026-07-07 19:32:12 +10:00
939fe122c5
fix: WinRM RDP bundle staging in %TEMP% (0.4.14)
...
Move zip download and extract to user TEMP to avoid ProgramData access denied on DCs. Improve WinRM ERROR line parsing and add optional SAC_AGENT_BUNDLE_BASE_URL for LAN clients.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-06 12:11:54 +10:00
c72e510fb0
fix: defer daily report push и увеличить pool БД (0.4.12)
...
FCM/каналы для report.daily.* после commit ingest (BackgroundTasks);
SAC_DB_POOL_SIZE=15, SAC_DB_MAX_OVERFLOW=25 для штурма 09:00.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-06 12:00:37 +10:00
6c43b8637e
fix: dedupe host_silence problems under concurrent scans (0.4.11)
...
Treat acknowledged as active, dedupe by hostname, add PostgreSQL advisory lock and a unique index. Migration closes existing duplicate open problems.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-03 09:05:28 +10:00
3765d4d476
feat: RDP flap auto-disconnect and hide break button after reconnect (0.4.10)
...
Add optional auto logoff of stuck sessions on RDG flap and direct RDP failure. Hide the RDS break button on old flap 302 when the user later reconnects or the workstation session is closed.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-02 16:50:03 +10:00
10ae670962
fix: prevent duplicate host_silence problems per host (0.4.8)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-30 09:12:10 +10:00
daeb7e965d
fix: skip alerts for hidden event types, show them on host card (0.4.7)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-29 15:16:10 +10:00
606bf53019
feat: close workstation login on RDG 303 disconnect (0.4.6)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-26 08:16:06 +10:00
fd1be5e7e4
feat: manual host add from Hosts list via WinRM/SSH (0.4.5)
...
Add host button probes Windows by hostname or Linux by IP, registers host in SAC and deploys agent in background.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-25 15:34:12 +10:00
5a7909bb55
fix: clear stale remote actions on sac-api startup (0.4.4)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-25 10:44:53 +10:00
86fd400f0b
fix: reset stale remote agent updates after sac-api restart (0.4.3)
...
Clear zombie running jobs on deploy and add admin API to cancel a stuck job.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-25 10:43:31 +10:00
dd2ae51b43
feat: parallel agent upgrades with per-host log panels (0.4.2)
...
Allow multiple remote update jobs at once; each upgrade gets its own
bottom-right log dock that auto-closes 30s after success.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-25 10:22:31 +10:00
719d5c5719
feat: login IP whitelist, blocks UI and fail2ban sync (0.4.1)
...
Admin settings for web login whitelist, blocked IP list with unblock,
and optional fail2ban ignoreip sync for SSH jail.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-25 10:06:10 +10:00
bda02f67eb
ui: grey out other upgrade arrows while host update runs (0.4.0)
...
Show inactive grey arrows on other hosts during a single remote agent update; bump SAC to 0.4.0.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-24 15:44:31 +10:00
9053ef0588
feat: one-click agent upgrade from hosts list (0.3.9)
...
Add Omada-style git version arrow in the agent version column to trigger WinRM/SSH background updates, and soften host detail live refresh with debounced incremental event patches.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-24 15:32:09 +10:00
0601aafd2d
fix: hide ????????? after session terminate (0.3.8)
...
Persist session_terminated in event details, expose in API, and update Events/Dashboard UI.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-24 14:45:33 +10:00
8b3e43f30d
fix: event terminate-session 500 on rdp.login.success (0.3.7)
...
Use extract_event_actor_user instead of missing ORM field; map WinRM/SSH errors to HTTP 400.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-24 14:37:37 +10:00
6330f31162
docs: sync README version lines with APP_VERSION 0.3.6
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-24 14:14:43 +10:00
b47cbf03c5
ui: remove duplicate SAC version from overview page
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 16:35:45 +10:00
407ef37004
fix: strict RDG 302/303 IP pairing keeps break button visible (0.3.6)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 16:30:16 +10:00
64b942447b
fix: reconcile daily report active users count and list (0.3.5)
...
Normalize empty-session placeholders; sync stats with report body after ingest.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 14:41:47 +10:00
8b52c5fe3c
fix: show RDS break only on active or flap 302 events (0.3.4)
...
Hide Obryv RDS on 303 and on 302 after normal session end; keep for open sessions and RDG flap.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-22 20:15:47 +10:00
fbd213f323
chore: bump npm dompurify and vite for audit fixes (0.3.3)
...
dompurify 3.4.11, vite 6.4.3 — npm audit reports 0 vulnerabilities.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-22 20:13:43 +10:00
1b96a3b2c7
fix: RDG event label and prefix type filter (0.3.2)
...
Use event 302/303 instead of Win302 in RDG titles. Match event types by prefix in events list (e.g. rdg.connection).
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-22 20:07:22 +10:00
24ca87a47a
feat: RDG 302/303 display path labels and RDS session break (0.3.1)
...
Show RDS access via RDG-Comp or Haproxy-RDG-Comp, enable qwinsta/logoff on any RDG event with internal_ip.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-22 19:52:22 +10:00
4eb41608ea
chore: release SAC 0.3.0
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-22 16:07:54 +10:00
6e3f0ede4d
fix(backend): loginctl JSON parse and filter ephemeral SSH sessions (0.20.34)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-22 16:00:02 +10:00
fe818e9946
feat(frontend): terminate session button on Overview recent events (0.20.33)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-22 15:44:49 +10:00
5e26834e16
feat(frontend): git agent versions plate on Hosts list (0.20.32)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-22 15:17:47 +10:00
54c1d96933
fix(backend): non-login SSH and strict loginctl parse, SSH retry (0.20.31)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-22 10:54:56 +10:00
a51a585b14
fix(frontend): restore host config/sessions row column flex
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-22 10:31:48 +10:00
fc66b57e78
fix(frontend): match sessions panel height to agent config until loaded (0.20.30)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-22 10:31:38 +10:00
ad2425b0ff
fix(frontend): place host sessions panel beside agent config (0.20.29)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-22 10:22:20 +10:00
d848d94604
feat: host session list/terminate and event session actions (0.20.28)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-22 10:13:42 +10:00
ca0255e13b
fix(frontend): live refresh Events list via SSE (0.20.27)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-22 09:11:19 +10:00
d96d9d6333
fix(frontend): remove UTF-8 BOM from package.json — breaks vite build (0.20.26)
...
PostCSS config load failed with SyntaxError at position 0 on Linux deploy.
2026-06-21 20:50:13 +10:00
7397ec30cd
fix(winrm): resolve System32 path for cmd test on minimal PATH (0.20.25)
...
WinRM run_cmd(hostname) failed on hosts where System32 is not in PATH.
2026-06-21 20:49:01 +10:00
75eec35365
fix(frontend): auto-close WinRM update success panel after 30s (0.20.24)
2026-06-21 20:41:57 +10:00
b3d28cd5d8
fix(frontend): auto-close WinRM update success panel after 30s (0.20.24)
...
Remote action log dock closes on successful fallback; no duplicate inline message.
2026-06-21 20:41:42 +10:00
5bd1333928
fix(frontend): remove UTF-8 BOM from package.json — breaks vite build
...
PostCSS config load failed with SyntaxError at position 0 on Linux deploy.
2026-06-21 20:19:42 +10:00
bf7c83c408
feat: hide event types from SAC UI via Settings checkbox (0.20.23)
...
Per-type «Показывать в событиях» in severity settings; filters lists, dashboard, hosts, and problems.
2026-06-21 20:13:40 +10:00
87ac1e09b0
fix: widen remote action log panel and wrap long WinRM output (0.20.22)
2026-06-21 11:30:37 +10:00
8adaf3bfd3
fix: WinRM update panel no longer blocks SAC navigation (0.20.21)
2026-06-21 11:07:28 +10:00
8a451a0c49
fix: alembic 022 down_revision must be 021 not 021_agent_git_release (0.20.20)
2026-06-21 11:04:07 +10:00
5635be1322
feat: background remote agent updates survive SAC navigation (0.20.19)
2026-06-21 11:01:26 +10:00
d7bbcc5337
docs: WinRM RDP update flow and SAC 0.20.18 deployment notes
...
Обновлены README и руководства по fallback WinRM (git→zip→клиент), SAC_PUBLIC_URL и краткому 502 при деплое.
2026-06-20 20:03:57 +10:00
f3a8952947
fix: friendly 502 handling, 2 uvicorn workers, file bundle cache (0.20.18)
2026-06-20 20:01:46 +10:00
PTah