Oliver Kieselbach
149f447281
Codex-review finding: after the previous hotfix the retryable Running→Queued rollback ran AFTER leaseHolder.DisposeAsync(), i.e. AFTER the maintenance lease was released. That opened a window of "Running + free lease + stale heartbeat" in which the watchdog could legitimately flip the job to Failed; the rollback then re-read the fresh row, took the latest ETag, and unconditionally re-set Queued — silently undoing the watchdog's decision. Fix: * Move the retryable rollback INSIDE the leased section, right next to the success-CAS that produces the Completed terminal state. Both paths now run while the lease is still held + being renewed, so the watchdog cannot race. * Defence-in-depth: re-read the row before writing Queued and only do the state transition if the row is still Running. If a parallel actor (in theory: another worker that somehow stole the lease, or the watchdog acting on a transient probe) shifted the state, the rollback skips + logs instead of clobbering. Belt-and-braces — under a held lease the predicate should always be true. * Outer-block retry-handling shrinks to "log + rethrow"; the throw is what drives the visibility-timeout retry of the queue message. Tests: 1952/1952 still green. The race fix is structural (ordering relative to lease release), not test-locked; the existing in-memory fakes don't model lease semantics so a regression would have to be caught in a future watchdog race-condition test. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Autopilot Monitor
Advanced monitoring and troubleshooting solution for Windows Autopilot deployments. Gain full visibility into every enrollment session with a detailed event timeline, fleet health dashboards, and session reporting. Define custom analysis rules to automatically detect issues and gather rules to collect targeted evidence. Retrieve diagnostics packages on demand, configure agent settings like auto-reboot behavior and automatic timezone adjustment — all managed centrally from the web dashboard.
Private Preview
Autopilot Monitor is currently running as a Private Preview. Visit autopilotmonitor.com to request access and learn more.
Overview
Autopilot Monitor provides real-time tracking, intelligent diagnostics, and automated troubleshooting for Windows Autopilot enrollment processes. It consists of:
- Bootstrap Script — PowerShell script deployed via Intune that starts monitoring early in the enrollment process
- Monitoring Agent — Lightweight .NET application that collects telemetry and evidence during enrollment
- Backend API — Azure Functions-based ingestion and processing pipeline
- Web Dashboard — Next.js application for real-time monitoring and fleet analytics
Architecture
For detailed information about the system architecture, components, and data flow, see Architecture Documentation.
Documentation
Full documentation is available at autopilotmonitor.com/docs
License
This project uses a split licensing model:
- MIT License — Agent (
src/Agent/) and Shared library (src/Shared/) — unrestricted use on end-user devices - AGPL-3.0 — Backend (
src/Backend/), Web Dashboard (src/Web/), and MCP Server (src/McpServer/) — server-side components remain open source
See LICENSE for full details.