PapaTramp/security-alert-center
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
213 Commits 1 Branch 0 Tags
fd1be5e7e43ee9c03a9f6af15eb0aa90f04c6253
Commit Graph

140 Commits

Author SHA1 Message Date
PTah fd1be5e7e4 feat: manual host add from Hosts list via WinRM/SSH (0.4.5) 
Add host button probes Windows by hostname or Linux by IP, registers host in SAC and deploys agent in background.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-25 15:34:12 +10:00
PTah 5a7909bb55 fix: clear stale remote actions on sac-api startup (0.4.4) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-25 10:44:53 +10:00
PTah 86fd400f0b fix: reset stale remote agent updates after sac-api restart (0.4.3) 
Clear zombie running jobs on deploy and add admin API to cancel a stuck job.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-25 10:43:31 +10:00
PTah dd2ae51b43 feat: parallel agent upgrades with per-host log panels (0.4.2) 
Allow multiple remote update jobs at once; each upgrade gets its own
bottom-right log dock that auto-closes 30s after success.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-25 10:22:31 +10:00
PTah 719d5c5719 feat: login IP whitelist, blocks UI and fail2ban sync (0.4.1) 
Admin settings for web login whitelist, blocked IP list with unblock,
and optional fail2ban ignoreip sync for SSH jail.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-25 10:06:10 +10:00
PTah bda02f67eb ui: grey out other upgrade arrows while host update runs (0.4.0) 
Show inactive grey arrows on other hosts during a single remote agent update; bump SAC to 0.4.0.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 15:44:31 +10:00
PTah 9053ef0588 feat: one-click agent upgrade from hosts list (0.3.9) 
Add Omada-style git version arrow in the agent version column to trigger WinRM/SSH background updates, and soften host detail live refresh with debounced incremental event patches.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 15:32:09 +10:00
PTah 0601aafd2d fix: hide ????????? after session terminate (0.3.8) 
Persist session_terminated in event details, expose in API, and update Events/Dashboard UI.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 14:45:33 +10:00
PTah 8b3e43f30d fix: event terminate-session 500 on rdp.login.success (0.3.7) 
Use extract_event_actor_user instead of missing ORM field; map WinRM/SSH errors to HTTP 400.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 14:37:37 +10:00
PTah 407ef37004 fix: strict RDG 302/303 IP pairing keeps break button visible (0.3.6) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-23 16:30:16 +10:00
PTah 64b942447b fix: reconcile daily report active users count and list (0.3.5) 
Normalize empty-session placeholders; sync stats with report body after ingest.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-23 14:41:47 +10:00
PTah 8b52c5fe3c fix: show RDS break only on active or flap 302 events (0.3.4) 
Hide Obryv RDS on 303 and on 302 after normal session end; keep for open sessions and RDG flap.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 20:15:47 +10:00
PTah fbd213f323 chore: bump npm dompurify and vite for audit fixes (0.3.3) 
dompurify 3.4.11, vite 6.4.3 — npm audit reports 0 vulnerabilities.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 20:13:43 +10:00
PTah 1b96a3b2c7 fix: RDG event label and prefix type filter (0.3.2) 
Use event 302/303 instead of Win302 in RDG titles. Match event types by prefix in events list (e.g. rdg.connection).

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 20:07:22 +10:00
PTah 24ca87a47a feat: RDG 302/303 display path labels and RDS session break (0.3.1) 
Show RDS access via RDG-Comp or Haproxy-RDG-Comp, enable qwinsta/logoff on any RDG event with internal_ip.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 19:52:22 +10:00
PTah 4eb41608ea chore: release SAC 0.3.0 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 16:07:54 +10:00
PTah 6e3f0ede4d fix(backend): loginctl JSON parse and filter ephemeral SSH sessions (0.20.34) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 16:00:02 +10:00
PTah fe818e9946 feat(frontend): terminate session button on Overview recent events (0.20.33) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 15:44:49 +10:00
PTah 5e26834e16 feat(frontend): git agent versions plate on Hosts list (0.20.32) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 15:17:47 +10:00
PTah 54c1d96933 fix(backend): non-login SSH and strict loginctl parse, SSH retry (0.20.31) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 10:54:56 +10:00
PTah fc66b57e78 fix(frontend): match sessions panel height to agent config until loaded (0.20.30) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 10:31:38 +10:00
PTah ad2425b0ff fix(frontend): place host sessions panel beside agent config (0.20.29) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 10:22:20 +10:00
PTah d848d94604 feat: host session list/terminate and event session actions (0.20.28) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 10:13:42 +10:00
PTah ca0255e13b fix(frontend): live refresh Events list via SSE (0.20.27) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 09:11:19 +10:00
PTah d96d9d6333 fix(frontend): remove UTF-8 BOM from package.json — breaks vite build (0.20.26) 
PostCSS config load failed with SyntaxError at position 0 on Linux deploy.
 2026-06-21 20:50:13 +10:00
PTah 7397ec30cd fix(winrm): resolve System32 path for cmd test on minimal PATH (0.20.25) 
WinRM run_cmd(hostname) failed on hosts where System32 is not in PATH.
 2026-06-21 20:49:01 +10:00
PTah b3d28cd5d8 fix(frontend): auto-close WinRM update success panel after 30s (0.20.24) 
Remote action log dock closes on successful fallback; no duplicate inline message.
 2026-06-21 20:41:42 +10:00
PTah bf7c83c408 feat: hide event types from SAC UI via Settings checkbox (0.20.23) 
Per-type «Показывать в событиях» in severity settings; filters lists, dashboard, hosts, and problems.
 2026-06-21 20:13:40 +10:00
PTah 87ac1e09b0 fix: widen remote action log panel and wrap long WinRM output (0.20.22) 2026-06-21 11:30:37 +10:00
PTah 8adaf3bfd3 fix: WinRM update panel no longer blocks SAC navigation (0.20.21) 2026-06-21 11:07:28 +10:00
PTah 8a451a0c49 fix: alembic 022 down_revision must be 021 not 021_agent_git_release (0.20.20) 2026-06-21 11:04:07 +10:00
PTah 5635be1322 feat: background remote agent updates survive SAC navigation (0.20.19) 2026-06-21 11:01:26 +10:00
PTah f3a8952947 fix: friendly 502 handling, 2 uvicorn workers, file bundle cache (0.20.18) 2026-06-20 20:01:46 +10:00
PTah 4d9a9e7e2b fix: decode WinRM Cyrillic from CP866 and show deploy.log UTF-8 (0.20.17) 2026-06-20 19:58:54 +10:00
PTah 9484160045 fix: UTF-8 BOM in RDP bundle zip for Russian Windows PowerShell (0.20.16) 2026-06-20 19:54:12 +10:00
PTah 6acbfe22de fix: deliver RDP bundle via SAC HTTP zip download, not WinRM chunks (0.20.15) 2026-06-20 19:51:45 +10:00
PTah ca90f5c296 fix: SAC pushes RDP bundle from git via WinRM, no client git (0.20.14) 2026-06-20 19:49:20 +10:00
PTah 191fb4e2cf fix: WinRM RDP update only via git clone on client (0.20.13) 2026-06-20 19:46:22 +10:00
PTah 8c1a8fddb1 fix: WinRM RDP update via NETLOGON Deploy, git fallback (0.20.12) 2026-06-20 19:43:34 +10:00
PTah 05408e17c3 fix: WinRM RDP update via run_ps, strip CLIXML noise (0.20.11) 2026-06-20 19:41:05 +10:00
PTah d3517a5706 fix: WinRM RDP update PowerShell quoting via EncodedCommand (0.20.10) 
Broken -Command quotes caused ParserError on remote hosts; run deploy script through base64-encoded PowerShell.
 2026-06-20 19:35:57 +10:00
PTah 2c2f78eba9 fix: show host action log modal immediately on SSH/WinRM update (0.20.9) 
Open progress dialog when agent update starts so long-running remote scripts do not look frozen.
 2026-06-20 19:34:12 +10:00
PTah ec5ec62240 fix: enforce SAC git URL when updating ssh-monitor agents (0.20.8) 
Pass REPO_URL/GIT_BRANCH from agent settings over SSH, preflight git remotes on stale hosts, and stop using GitHub origin on routers.
 2026-06-20 19:28:14 +10:00
PTah 115289ef35 fix: show logoff actions in RDG qwinsta modal (0.20.7) 
Put session table before raw output, add manual session ID logoff, improve qwinsta line parsing.
 2026-06-20 19:20:52 +10:00
PTah fc9d630263 docs: refresh README; allow monitor JWT for RDG qwinsta/logoff (0.20.6) 
Update platform docs for current features; Seaca and web operators with
monitor role can trigger WinRM actions via SAC API.
 2026-06-20 19:02:58 +10:00
PTah 01d72d0f68 fix: show RDG flap badge on 302 and 303 events in SAC UI (0.20.5) 
Seaca surfaced flap via Problems; the web UI only flagged 303 in DB and had
no visible label. Resolve flap pairs at read time and show badge plus qwinsta
on both sides of 302→303.
 2026-06-20 17:27:41 +10:00
PTah a35e50ccd1 feat: qwinsta/logoff buttons on events list and detail (0.20.4) 
RDG flap actions were only on the dashboard; add shared composable and
modal so operators can reset stuck sessions from События and event detail.
 2026-06-20 17:24:16 +10:00
PTah 34a1670ea9 fix: nginx proxy timeout for long SSH/WinRM agent actions (0.20.3) 
Raise proxy_read_timeout to 960s for agent-update and related API paths so bootstrap git clone does not hit 504 from nginx.
 2026-06-20 17:12:31 +10:00
PTah c21043d845 feat: bootstrap ssh-monitor updater when missing on host (0.20.2) 
SAC now clones the ssh-monitor repo and installs update_ssh_monitor.sh before running the update when the remote updater script is absent.
 2026-06-20 17:01:06 +10:00
PTah 07b97bd111 fix: inline git test feedback and use form URLs (0.20.1) 
Show git check result next to the button, scroll into view, and test unsaved repo URLs from the form.
 2026-06-20 16:29:48 +10:00