From 8c542624eb13bfd32a21125989e16dea6b38f61f Mon Sep 17 00:00:00 2001
From: PTah <papatramp@gmail.com>
Date: Thu, 28 May 2026 11:49:23 +1000
Subject: [PATCH] =?UTF-8?q?feat:=20SERVER=5FDISPLAY=5FNAME=20=D0=B2=20SAC?=
 =?UTF-8?q?=20host.display=5Fname=20(sac-client=201.2.6-SAC)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 sac-client.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/sac-client.sh b/sac-client.sh
index ee1318f..5fdf083 100644
--- a/sac-client.sh
+++ b/sac-client.sh
@@ -1,5 +1,5 @@
 # SAC client for ssh-monitor (source from ssh-monitor)
-# SAC client release: 1.2.5-SAC — ingest HTTP 201/409/202
+# SAC client release: 1.2.6-SAC — host.display_name from SERVER_DISPLAY_NAME
 # shellcheck shell=bash
 
 sac_normalize_mode() {
@@ -228,6 +228,7 @@ sac_send_event() {
   SAC_DETAILS_JSON="$details_json" \
   SAC_AGENT_ID="$(sac_agent_instance_id)" \
   SAC_PRODUCT_VERSION="${SSH_MONITOR_VERSION:-unknown}" \
+  SAC_SERVER_DISPLAY_NAME="${SERVER_DISPLAY_NAME:-}" \
   python3 <<'PY'
 import json, os, socket, uuid
 from datetime import datetime, timezone
@@ -239,6 +240,7 @@ def details():
     return json.loads(raw)
 
 host = socket.gethostname()
+display = os.environ.get("SAC_SERVER_DISPLAY_NAME", "").strip()
 etype = os.environ["SAC_EVENT_TYPE"]
 if etype.startswith(("ssh.", "auth.", "rdp.")):
     category = "auth"
@@ -264,6 +266,7 @@ payload = {
     "host": {
         "hostname": host,
         "os_family": "linux",
+        **({"display_name": display} if display else {}),
     },
     "category": category,
     "type": os.environ["SAC_EVENT_TYPE"],