mirror of https://github.com/okieselbach/AutopilotMonitor.git synced 2026-10-24 12:42:38 +00:00

T

Oliver Kieselbach a635ac3bc6 feat(health): operator-only cards and URLs follow the Global-Admin view; stacked URL rows

The server already strips SignalR Quota, Poison Queues and every endpoint URL
for non-Global-Admins, but the page mirrored the Global-Admin VIEW only for the
build blocks, so demo mode still showed the full operator report. The new
lib/healthCheckView.ts applies the same rule presentation-side (cards + URL
detail rows), and both card render paths share one HealthDetails component
that puts URL values on their own line under the label instead of wrapping
them right-aligned next to it.

The healthy agent-binaries message no longer advertises the legacy blob; that
account stays in the Global-Admin-only details.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

2026-09-02 03:57:10 +02:00

.claude

chore: move infra/ into a private submodule

2026-09-02 00:06:38 +02:00

.github

docs: README assets move to .github/assets, drop the architecture link

2026-09-02 00:02:40 +02:00

docs @ a3af579f8d

chore(mcp): keep X-MCP-Pretty out of the repo's own client config

2026-09-02 03:33:51 +02:00

infra @ 4845355ec7

chore: move infra/ into a private submodule

2026-09-02 00:06:38 +02:00

rules

chore(rules): IME pattern-pack hygiene against the IME decompiles (1.97.107.0 / 1.104.102.0 / 1.105.103.0) — no wording drift in any shipped pattern; the 11 disabled legacy patterns whose literals last existed in IME 1.50 (fleet minimum 1.97) are deleted instead of left as re-enable traps (IME-DETECTED-OLD, IME-SET-CURRENT-1/2/3, IME-SKIP-APPLICABILITY-NOTMET, IME-SKIP-DEPENDENCY-DETECT, IME-SKIP-DETECTED, IME-SKIP-UNINSTALL-NOTDETECTED-2, IME-UPDATE-NAME-1/2/3); IME-DO-TIMEOUT-1/2 match the exact source literal "DO downloading is not finished within timeout, jobId = …, fileId = …" instead of two lookaheads; IME-DO-TEL documented as emitter-less from 1.104 on and kept only for the 1.101/1.103 fleet share

2026-08-30 14:23:14 +02:00

scripts

feat(security): cert-to-device binding, stage 3 GA-gated shadow

2026-08-24 18:26:33 +02:00

src

feat(health): operator-only cards and URLs follow the Global-Admin view; stacked URL rows

2026-09-02 03:57:10 +02:00

tests/fixtures

feat(agent): RealmJoin self-update is observed and reported as realmjoin_autoupdate_detected — realmjoin_detected read the version once from RealmJoin.exe, but the tray AppUpdater often replaces the MSI-shipped binary on its first start minutes after detection (gktatooine 946ccbd6: 4.21.4 -> 4.21.18, whole deployment ran on the new build while the timeline and RealmJoinFacts kept 4.21.4); the updater's only registry write is HKLM\...\Uninstall\RealmJoin (DisplayVersion/InstallDate), so RealmJoinWatcher arms a RegNotifyChangeKeyValue watcher there once Detected fired (appearance-watch on the Uninstall parent until the tray creates the entry), re-reads the binary version after a 2 s debounce (DisplayVersion fallback while the file is locked, channel from baseline) and emits the Info event {previousVersion,newVersion,releaseChannel} plus the typed RealmJoinAutoUpdateDetected signal, whose reducer overrides RealmJoinFacts.ProductVersion/ReleaseChannel (WithVersionOverride) and touches neither gate, deadline nor LastActivityUtc; unreadable baseline at detection is seeded silently; portal device card prefers the updated version ("auto-updated from X"); event registered in Constants/resource-catalog/shared-manifests with replay fixture and watcher/adapter/reducer tests

2026-08-30 20:02:39 +02:00

.gitignore

chore: move infra/ into a private submodule

2026-09-02 00:06:38 +02:00

.gitmodules

chore: move infra/ into a private submodule

2026-09-02 00:06:38 +02:00

.mcp.json

chore(mcp): keep X-MCP-Pretty out of the repo's own client config

2026-09-02 03:33:51 +02:00

AutopilotMonitor.sln

chore: remove legacy V1 agent and its backend ingest path

2026-07-02 08:53:20 +02:00

Directory.Build.props

build: keep NuGet audit advisories as warnings in the warning freeze

2026-08-13 09:49:27 +02:00

global.json

chore(build): align local and CI builds on .NET 10 SDK

2026-07-18 15:59:23 +02:00

LICENSE

update license

2026-03-26 07:02:33 +01:00

README.md

update wording

2026-09-02 00:54:22 +02:00

README.md

Autopilot Monitor

Advanced monitoring and troubleshooting solution for Windows Autopilot deployments. Gain full visibility into every enrollment session with a detailed event timeline, fleet health dashboards, and session reporting. Define custom analysis rules to automatically detect issues and gather rules to collect targeted evidence. Retrieve diagnostics packages on demand, configure agent settings like auto-reboot behavior and automatic timezone adjustment — all managed centrally from the web dashboard.

Availability

Autopilot Monitor is publicly available — the Community plan is free. Sign in with your work account at autopilotmonitor.com; new organizations complete a short activation step after first sign-in.

Overview

Autopilot Monitor provides real-time tracking, intelligent diagnostics, and automated troubleshooting for Windows Autopilot enrollment processes. It consists of:

Bootstrap Script — PowerShell script deployed via Intune that starts monitoring early in the enrollment process
Monitoring Agent — Lightweight .NET application that collects telemetry and evidence during enrollment
Backend API — Azure Functions-based ingestion and processing pipeline
Web Dashboard — Next.js application for real-time monitoring and fleet analytics

Documentation

Full admin documentation is available at docs.autopilotmonitor.com

License

This project uses a split licensing model:

MIT License — Agent (src/Agent/) and Shared library (src/Shared/) — unrestricted use on end-user devices
AGPL-3.0 — Backend (src/Backend/), Web Dashboard (src/Web/), and MCP Server (src/McpServer/) — server-side components remain open source

See LICENSE for full details.

Description

Windows Autopilot & Intune enrollment monitoring: live session timelines, fleet health, diagnostics, and an MCP server for AI-assisted troubleshooting.

autopilot device-management device-provisioning endpoint-management enrollment intune mcp-server monitoring msintune oobe troubleshooting windows windows-autopilot

Readme AGPL-3.0 60 MiB