Commit Graph

914 Commits

Author SHA1 Message Date
Oliver Kieselbach cc42a22fcb vulnerability matching improvements, including confidence levels and data freshness indicators. These changes enhance the accuracy and transparency of vulnerability reporting in the Autopilot Monitor application. 2026-04-02 22:55:28 +02:00
Oliver Kieselbach b2871b9a9d added more tests 2026-04-02 22:43:44 +02:00
Oliver Kieselbach 44e8ea6f9b added sigterm handler 2026-04-02 22:33:33 +02:00
Oliver Kieselbach 3cfb586da6 even better error handler with more granular details 2026-04-02 22:22:18 +02:00
Oliver Kieselbach be71e5a321 error handler hardened 2026-04-02 22:09:37 +02:00
Oliver Kieselbach d824dd64fd added structured error handler 2026-04-02 22:02:09 +02:00
Oliver Kieselbach 42d296b9af chagned stale vulnerabilityCache data handling 2026-04-02 21:40:42 +02:00
Oliver Kieselbach 743d7b3372 fixex for vulnerability matching (respect platform, wildcard matches with low confidance flag now, mismatched secure client, updated seed file) 2026-04-02 21:36:57 +02:00
Oliver Kieselbach 4298223d38 added Ops Alerts 2026-04-02 21:25:27 +02:00
Oliver Kieselbach 1e23f7e624 fix whiteglove eventtimeline rendering issue 2026-04-02 19:40:13 +02:00
Oliver Kieselbach 1dbe22795c Merge pull request #38 from okieselbach/claude/add-ops-monitoring-table-HkmIZ 2026-04-02 19:18:56 +02:00
Claude d80b138392 Merge remote-tracking branch 'origin/main' into claude/add-ops-monitoring-table-HkmIZ
# Conflicts:
#	src/Web/autopilot-monitor-web/tsconfig.tsbuildinfo
2026-04-02 17:17:56 +00:00
Oliver Kieselbach 1e4b33bb6b added agent changelog 2026-04-02 19:10:56 +02:00
Oliver Kieselbach 68669a3b79 fix phase timeline 2026-04-02 18:57:22 +02:00
Claude 62b3d18fcd Add MCP ops events tool, blob storage health check, fix endpoint policy
- Register global/ops-events GET endpoint in EndpointAccessPolicyCatalog
  as GlobalAdminOnly (critical fix: was fail-closed for all users)
- Add get_ops_events MCP tool for AI agent access to ops events
  with category filter and maxResults params
- Add blob storage health check in daily maintenance that verifies
  agent ZIP and bootstrap script availability via HEAD requests,
  records OpsEvent entries when missing or unreachable
- Add RecordBlobStorageMissing/Unreachable helpers to OpsEventService

https://claude.ai/code/session_01UCFrxsZ8QYjH7KEYmiGJ6c
2026-04-02 15:02:17 +00:00
Oliver Kieselbach aee031cef1 fix ui event timeline bug for whiteglove sessions 2026-04-02 16:56:10 +02:00
Claude 4c343c6e6a Update tsconfig.tsbuildinfo after TypeScript check
https://claude.ai/code/session_01UCFrxsZ8QYjH7KEYmiGJ6c
2026-04-02 13:23:40 +00:00
Claude 6f0052be20 Add OpsEvents table for vital infrastructure monitoring
Introduces a new OpsEvents Azure Table Storage table that records vital
infrastructure events (consent flows, maintenance runs, security blocks,
tenant offboarding) visible to Global Admins on the Ops dashboard.

Backend:
- IOpsEventRepository interface + TableOpsEventRepository (PartitionKey=Category)
- OpsEventService with typed helpers (fire-and-forget safe, never throws)
- GetOpsEventsFunction API endpoint (GET /api/global/ops-events)
- Maintenance cleanup with configurable retention (AdminConfig.OpsEventRetentionDays, default 90d)
- Integrated into: ConsentFunction, MaintenanceService, DeviceBlock, VersionBlock, TenantOffboard

Frontend:
- OpsEventsSection component with category filters, severity badges, detail modal
- Configurable retention days directly in the Ops page
- Updated admin/ops page with new events table above existing maintenance trigger

https://claude.ai/code/session_01UCFrxsZ8QYjH7KEYmiGJ6c
2026-04-02 13:23:07 +00:00
Oliver Kieselbach 4850c4856e orphan fix was to aggressiv 2026-04-02 13:01:36 +02:00
Oliver Kieselbach 9410cb7681 added logging for consent not working and unit test to prevent similar error in future 2026-04-02 01:31:47 +02:00
Oliver Kieselbach b62f9ee01b update architecture.md 2026-04-02 01:00:47 +02:00
Oliver Kieselbach d0122c136d final migration to tenant iolation middleware enforment 2026-04-02 00:27:21 +02:00
Oliver Kieselbach 021ac3d151 esp_resumed fix emit only for hybrid 2026-04-01 23:27:36 +02:00
Oliver Kieselbach 34773fba1f centralized tenant-isolation enforcement 2026-04-01 22:57:11 +02:00
Oliver Kieselbach f41f27e1a5 extended notifications with rule results 2026-04-01 20:28:57 +02:00
Oliver Kieselbach 686f9651a7 fix software report upsert 2026-04-01 18:40:22 +02:00
Oliver Kieselbach 601a1a8b36 added agent self update event 2026-04-01 18:11:21 +02:00
Oliver Kieselbach bdb77e025a fix agent version generation 2026-04-01 17:33:39 +02:00
Oliver Kieselbach 615f611b5c vul report support in whitglove 2026-04-01 16:14:22 +02:00
Oliver Kieselbach 16ea5749eb fix quick search 2026-04-01 15:58:12 +02:00
Oliver Kieselbach 9cee2ed9e9 fix cve correlation service and guid validation 2026-04-01 15:50:16 +02:00
Oliver Kieselbach cff85ab104 ux tuning 2026-04-01 14:29:33 +02:00
Oliver Kieselbach 1fda382488 fine tuning UX 2026-04-01 13:31:23 +02:00
Oliver Kieselbach 71f3e99326 fix quick search 2026-04-01 13:20:41 +02:00
Oliver Kieselbach a594a4ccd9 ux fine tuning 2026-04-01 13:05:50 +02:00
Oliver Kieselbach 1acab3a3c9 ux change no more analyze rule banner 2026-04-01 13:03:07 +02:00
Oliver Kieselbach 7789fec75d ux fix for quick search 2026-04-01 12:56:40 +02:00
Oliver Kieselbach 734061031b better OIDC config cache scaling 2026-04-01 12:52:15 +02:00
Oliver Kieselbach f8e9cb2a70 added tip of the day 2026-04-01 12:34:13 +02:00
Oliver Kieselbach 2aeaf575bc fixes persistence of important completion states, crash loop for hello, and race condition for device info 2026-04-01 12:32:59 +02:00
Oliver Kieselbach 17d72b9b3f fix bootstrap rate limit, fix download timeout 2026-04-01 12:04:17 +02:00
Oliver Kieselbach 53e6692cad enhanced progress portal 2026-04-01 04:33:45 +02:00
Oliver Kieselbach 405916d582 progress portal bugfix 2026-04-01 04:27:17 +02:00
Oliver Kieselbach 3368bd94c7 chore and progress portal bugfix 2026-04-01 04:27:05 +02:00
Oliver Kieselbach a2d01a1a45 added proxied download for diag package 2026-04-01 03:56:23 +02:00
Oliver Kieselbach a01e8924f7 fixed test fail due to hardend config endpoint 2026-04-01 03:26:39 +02:00
Oliver Kieselbach c9f6122c34 fix webhook notification 2026-04-01 03:23:28 +02:00
Oliver Kieselbach 7dd9cd2f72 Fix cross-tenant vulnerability in test-notification endpoint 2026-04-01 03:05:20 +02:00
Oliver Kieselbach ba34fc984b hardened config endpoint 2026-04-01 03:00:19 +02:00
Oliver Kieselbach 5c45b47813 added odata sanitizer 2026-04-01 02:39:11 +02:00