PapaTramp/security-alert-center
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
130 Commits 1 Branch 0 Tags
5b2aeb01835d2a80e8ca0c69ebab673766cb95b7
Commit Graph

130 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
PapaTramp 5b2aeb0183 fix(frontend): убрать BOM из package.json — ломал vite build на SAC. 2026-06-13 16:36:34 +10:00
PapaTramp 3d36faa49d fix(mobile): повторный enroll и удаление устройств в UI (0.9.10). 
При повторной привязке Seaca переиспользуется запись device_uuid вместо INSERT.
Добавлены POST /devices/{id}/revoke и DELETE для полного удаления записи в настройках SAC.
 2026-06-13 16:36:07 +10:00
PapaTramp e022f2f213 docs: sac-api.kalinamall.ru и схема HAProxy для Seaca. 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-13 12:01:06 +10:00
PapaTramp f0bd31c544 fix(nginx): отклонять чужие Host на SAC (default_server 444) 
Только sac.kalinamall.ru; ext.kalinamall.ru и прочие имена на IP SAC не отдают UI. ssl_reject_handshake на :443.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-13 11:24:21 +10:00
PapaTramp 87549731c8 chore: note frontend version.ts in SAC version bump rule 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-11 10:35:18 +10:00
PapaTramp 7df718eed3 fix: 12h cooldown before reopening manually closed host_silence (0.9.9) 
Track resolved_by on problems; suppress scan/ingest recreate after manual
resolve; reopen same problem after cooldown; auto-close via heartbeat unchanged.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-11 10:33:55 +10:00
PapaTramp befaf86bf4 feat: readable report and host detail layout in web UI (0.9.8) 
Field grid for event/host cards, human-readable daily report labels,
and normalized plain-text report bodies.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-11 10:25:53 +10:00
PapaTramp fed21c536b fix: exclude resolved problems from new-in-24h metrics (0.9.7) 
Dashboard and created_within_hours list only show open/acknowledged problems
created in the last 24 hours; closed items appear under resolved only.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-11 10:24:12 +10:00
PapaTramp 3f671b9899 fix: FCM data-only push so Seaca controls sound (0.9.6) 
Send title and body in the data payload instead of notification block so
onMessageReceived always runs and the app can honour silent mode in background.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-11 10:03:28 +10:00
PapaTramp 3f7095ed03 fix: host_silence proactive notify when event is None 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-11 09:26:03 +10:00
PapaTramp 37bffe0e3f fix: SAC version from /health in sidebar and dashboard (0.9.4) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 17:38:54 +10:00
PapaTramp 0a414a0904 chore: sync frontend version label to 0.9.3 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 17:37:09 +10:00
PapaTramp e38bd8a52a fix: FCM must not break ingest; add requests dependency (0.9.3) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 17:30:32 +10:00
PapaTramp f9baf96d88 fix: test push errors, skip heartbeat notify, stale 5h (0.9.2) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 17:25:16 +10:00
PapaTramp 5e9f0f8110 fix: show copyable enrollment code after issue in Settings 
Исправлен v-if, скрывавший весь раздел при success; баннер с полным
кодом, копированием и sessionStorage до Скрыть. Версия 0.9.1.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 17:07:49 +10:00
PapaTramp e2b5fb7604 docs: Seaca mobile operator guide and FCM setup 
Документация для админа и runbook: коды регистрации, устройства,
настройка SAC_FCM на сервере.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 15:34:34 +10:00
PapaTramp 563b836acc feat: Seaca mobile API, enrollment, FCM push and admin UI (0.9.0) 
Adds mobile device registration by admin codes, refresh tokens, push channel
in notification policy, and Settings section for managing Seaca clients.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 13:19:14 +10:00
PapaTramp 86c602cf07 docs: add v0.6 Mobile (Seaca) to roadmap and README 
Links the new Android client repo and documents server-side mobile API work.
 2026-06-10 12:45:52 +10:00
PapaTramp 77e167b6e3 feat: add actor user column to events and dashboard tables 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 10:11:04 +10:00
PapaTramp f9d56621f6 feat: drill-down filters on overview and outdated agent version highlight 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 09:21:21 +10:00
PapaTramp e65daa8c3b chore: sync frontend version.ts with API 0.8.3 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 09:11:41 +10:00
PapaTramp aafb80fa31 feat: proactive host_silence scan for stale agent.heartbeat (0.8.3) 
Background scan every 5 min opens rule:host_silence and notifies without
waiting for the next ingest event. CLI job + optional systemd timer.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 09:07:32 +10:00
PapaTramp 2a0eb6e90c chore: exclude Cursor workspace file from git (local IDE only) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-05 14:41:03 +10:00
PapaTramp 459b2babd1 docs: split README (RU) and README_en (EN) for GitHub 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-05 14:38:53 +10:00
PapaTramp 95c5b9f25a fix(ui): table actions column layout and resolved label 
Move flex off td.actions to inner wrapper; show Закрыта for resolved problems. SAC 0.8.2.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-05 14:10:56 +10:00
PapaTramp 02200f1a80 docs: note Exchange WinRM strict mode in agent integration 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-05 11:07:46 +10:00
PapaTramp 502971367e feat(ui): live host row update via SSE without full reload 
On new ingest, patch visible host from GET /hosts/{id}; SAC 0.8.1.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-05 10:47:21 +10:00
PapaTramp d9893497ce fix(ui): full-row host click, agent version label on host card 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-05 10:20:32 +10:00
PapaTramp adfc69c656 fix(ui): host name nav styled like sidebar, plain hostname column 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-05 10:10:10 +10:00
PapaTramp 7699d8690a fix: visible host card links in Hosts table; bump SAC to 0.8.0 
Hostname and display name always link to /hosts/:id with sac-row-link styling.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-05 10:00:11 +10:00
PapaTramp 54337a5917 feat: host inventory (agent.inventory), host detail page, UI columns 
Store hardware/software snapshots on hosts; warn on hardware changes. Host card from Hosts list. Add agent version column to Events/Overview; rename Hosts table columns and sort by status.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-05 09:53:00 +10:00
PapaTramp 5d3cda2ab6 docs: expand README highlights (5140 admin share, agent versions) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-04 10:17:11 +10:00
PapaTramp 57793d24ba feat: SAC support smb.admin_share.access events from RDP agent 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-04 10:14:14 +10:00
PapaTramp d324e41eba docs: README highlights list monitored sources (SSH, RDP, WinRM, sudo) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 16:10:49 +10:00
PapaTramp 1580982d88 fix: rename README screenshots to bust stale CDN/browser cache 
Same user-provided PNGs (no blur); new filenames avoid serving old
Gaussian-blurred assets cached at dashboard.png / events.png paths.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 14:18:07 +10:00
PapaTramp d8ba864e48 docs: drop redundant note about blurred screenshots in README 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 14:14:33 +10:00
PapaTramp 7ab497b300 docs: restore original README screenshots without extra blur 
Use user-provided redacted images as-is for dashboard, events, and problems.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 14:13:47 +10:00
PapaTramp 2d39943020 docs: add sanitized UI screenshots to README (0.7.4) 
Dashboard, events, and problems screenshots with hostnames and IPs blurred.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 14:11:14 +10:00
PapaTramp 79185d9186 fix: show RD Gateway session duration in Telegram when present 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 10:07:51 +10:00
PapaTramp 47d08b54d2 chore: sync Cursor rules from CursorRules 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 09:31:57 +10:00
PapaTramp b565a259ea chore: add Cursor rule for mandatory agent script version bumps 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 09:29:23 +10:00
PapaTramp 0d4a50cd35 fix: dedupe daily report Telegram in dual mode and show host in summary fallback 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 09:15:21 +10:00
PapaTramp 3053058cdf feat: SAC 0.7.4 sidebar system stats block with UI toggle 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-02 09:15:15 +10:00
PapaTramp cf5a6f995c docs: update README with current SAC and agent status 
Reflect SAC 0.7.3 capabilities, security hardening highlights, and current RDP monitor integration state.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-01 13:25:16 +10:00
PapaTramp 141fc44099 feat: SAC 0.7.3 custom error pages 401/403/404/429 
Centered logo pages with event explanation and allowed actions; router
and apiFetch redirect to them on auth, permission, not-found, and rate-limit errors.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-01 11:06:21 +10:00
PapaTramp d3a337992c feat: SAC 0.7.2 security hardening (rate limit, JWT DB check, DOMPurify) 
Path traversal fix in SPA fallback, admin-only host delete, login rate limit
with 3 attempts and Telegram alert, JWT validated against active users in DB,
and DOMPurify for agent report HTML.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-01 11:04:14 +10:00
PapaTramp 06a8ed8614 feat: events date filter and preserve list page in URL (SAC 0.7.1) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-01 10:32:24 +10:00
PapaTramp de29270a25 feat: SAC 0.7.0 display_name columns and event severity overrides 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-01 10:21:43 +10:00
PapaTramp 8de5d14cfb feat: SAC 0.6.0 user edit UI, login to dashboard, daily report timer sync 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-01 09:55:12 +10:00
PapaTramp 56c469ddbd feat: multi-user UI login with admin and monitor roles 
Add sac_users table, JWT roles, settings/users API guarded for admin, Users page in UI, and sac_manage_user.py CLI.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-01 09:27:14 +10:00