BetterDesk/docs/enterprise/IMPLEMENTATION_PLAN.md

BetterDesk Console — Implementation Plan v3.0

Purpose: Living document for tracking development priorities, planned features, and community contributions.
Last updated: 2026-03-22
Status: Active development — contributions welcome!

---

How to Contribute

Add your ideas to the Ideas & Feature Requests section at the bottom. Format: - [ ] **Feature name** — Brief description (module: X, priority: High/Medium/Low)

---

Current State Overview

Platform Architecture

Component	Technology	Status
Go Server	Go, protobuf, Ed25519, SQLite/PostgreSQL	Production
Web Console	Node.js, Express, EJS, vanilla JS	Production
CDAP Gateway	WebSocket, Go server integrated	Production
BetterDesk Agent	Go binary, gopsutil, cross-platform	Production
Bridge SDKs	Python + Node.js CDAP SDKs	Released v1.0.0
ALL-IN-ONE Scripts	bash + PowerShell installers	v2.4.0
Docker	Single-container + multi-container	Production

Module Inventory (10 enterprise modules)

All modules have real backend logic — DB tables, REST endpoints, frontend JS.

Module	Route	View	JS	Backend Features
Dashboard	190	203	163	Go API proxy, server probing, bandwidth stats
Devices	400+	220+	400+	CRUD, folders, tags, kebab menu, responsive
Inventory	283	100	295	HW+SW inventory upload, telemetry, enrichment
Tickets	528	158	406	CRUD + comments + attachments + SLA timer
Network	339	184	305	ICMP ping, TCP, HTTP, polling loop, history
Activity	243	69	191	Session upload, summaries, top apps
Automation	483	292	368	Alert rules, commands, agent poll, SMTP
DataGuard	275	163	267	DLP policies, event ingestion, agent sync
Reports	193	115	290	7 report types, CSV export, saved reports
Registration	328	88	303	LAN discovery, approve/reject, token gen
Tenants	285	108	282	CRUD, device/user assignment, stats

Total enterprise code: ~8,900 LOC across routes, views, JS, and services.

---

Priority 1 — Critical Fixes & Polish

Items that affect daily usability. Should be resolved first.

1.1 Alert Engine periodicCheck() (Automation)

Status: Stub — empty function body
Impact: Alert rules exist in DB but never fire automatically
Fix: Implement periodic evaluation loop in alertRulesEngine.js:

• Timer-based check (configurable interval, default 60s)
• Query active rules → evaluate conditions against latest device data
• Trigger actions (email, webhook) when thresholds exceeded
• Respect cooldown periods per rule

Files: services/alertRulesEngine.js

1.2 Tenant Isolation Enforcement

Status: Tenants module is standalone CRUD — no cross-module filtering
Impact: Tickets, activity, inventory etc. don't respect tenant boundaries
Fix: Add tenant_id filtering middleware for multi-tenant deployments:

• Middleware reads operator's assigned tenant(s)
• All list queries add WHERE tenant_id IN (...) clause
• Device-level operations check tenant membership
• Admin bypasses all filters

Files: middleware/tenantFilter.js (new), all route files

1.3 Device Registration — Active Network Scanning

Status: Current registration is passive (device must initiate)
Impact: Admin cannot discover unregistered devices on the network
Planned features:

• Subnet scanner (ICMP sweep + ARP table)
• Port scanner for RustDesk ports (21116, 21117)
• Auto-detection of devices running BetterDesk agent
• Scheduled scans with configurable subnets
• Discovery results → pending registration queue
• Agent-based network neighbor discovery

Files: services/lanDiscovery.js (extend), routes/registration.routes.js

1.4 File Transfer Route Exposure

Status: fileTransferService.js exists (287 LOC) but no HTTP routes
Impact: Feature is backend-only, not accessible from panel
Fix: Create routes/fileTransfer.routes.js endpoints + UI integration

---

Priority 2 — Feature Completion

Modules that work but need additional features for production use.

2.1 Activity Module Enhancement

Current: Basic table rendering (view is only 69 LOC)
Planned:

• Daily/weekly/monthly activity charts (Chart.js)
• Application usage breakdown (pie/bar charts)
• Idle time vs. active time comparison
• Per-user productivity dashboard
• Activity export to CSV/PDF
• Session timeline visualization

2.2 Network Monitoring Improvements

Current: ICMP, TCP, HTTP checks with history
Planned:

• SNMP v2c/v3 device queries (basic OID polling)
• Network topology map visualization (D3.js)
• Bandwidth monitoring per device
• Alert integration (down → automation alert rule)
• DNS monitoring
• SSL certificate expiry checks

2.3 Report Engine Extensions

Current: 7 report types with CSV export
Planned:

• PDF generation (pdfmake or puppeteer)
• Scheduled report generation (node-cron)
• Email delivery of reports
• Custom report builder (drag & drop fields)
• Compliance report templates (GDPR, SOC2)
• Dashboard export as report

2.4 Ticket System Enhancements

Current: Full CRUD with SLA, comments, attachments
Planned:

• Email-to-ticket integration (IMAP polling)
• Ticket templates (pre-filled forms)
• Auto-assignment rules (round-robin, skill-based)
• Knowledge base / FAQ module
• SLA breach notifications
• Customer portal (external-facing ticket submission)

2.5 Remote Desktop Improvements

Current: Web remote client (Beta), web-based RDP via RustDesk protocol
Planned:

• Multi-monitor selection in web client
• File transfer during remote session
• Chat during remote session
• Session recording (WebM export)
• Connection quality indicator (latency, FPS)
• Keyboard shortcut passthrough (Ctrl+Alt+Del, etc.)

---

Priority 3 — New Capabilities

Larger features requiring new infrastructure.

3.1 Software Deployment

Description: Push software installations from panel to devices
Components:

• Package repository (local file store)
• Deployment tasks with targets (device/group/tag)
• Agent-side: download + silent install + report result
• Rollback capability
• Deployment history and success rate

Files (new):

routes/deployment.routes.js
views/deployment.ejs
public/js/deployment.js
public/css/deployment.css
services/deploymentService.js

3.2 Patch Management

Description: Track and deploy OS/software patches
Components:

• Agent reports installed patches and pending updates
• Admin approves/schedules patch deployment
• Patch compliance dashboard
• Exclusion rules (skip certain patches)

3.3 Asset Lifecycle Management

Description: Track devices from procurement to disposal
Components:

• Asset status workflow (Ordered → Received → Deployed → Retired)
• Purchase tracking (cost, vendor, warranty dates)
• Warranty expiry alerts
• Location tracking (building/floor/room)
• QR code / barcode label generation
• Assignment history (who had this device when)

3.4 User Self-Service Portal

Description: End-users can submit tickets and view their devices
Components:

• Separate login page (no admin access)
• Submit tickets with screenshots
• View ticket status and history
• View assigned devices
• Password reset request
• Knowledge base search

3.5 Compliance & Audit Dashboard

Description: Centralized compliance monitoring
Components:

• Device compliance score (encryption, OS updates, antivirus)
• Policy violation alerts
• Audit log search and export
• Compliance report scheduling
• GDPR data subject access request workflow

---

Priority 4 — Architecture & Scaling

Infrastructure improvements for larger deployments.

4.1 Real-Time WebSocket Push

Status: Currently using polling for status updates
Goal: Push device status, alerts, ticket updates via WebSocket
Components:

• Server-Sent Events or WebSocket endpoint
• Event bus integration (Go server events/ package)
• Client-side reconnection handling
• Per-module event channels

4.2 Plugin / Extension System

Description: Allow custom modules without modifying core
Components:

• Plugin manifest format (JSON)
• Route registration API
• View slot system (inject UI into sidebar, device detail, etc.)
• Event hook system (on device register, on ticket create, etc.)
• Plugin marketplace (future)

4.3 Multi-Instance / HA

Description: Support multiple console instances behind load balancer
Components:

• Session store in PostgreSQL/Redis (not file)
• Shared file storage (S3-compatible)
• PostgreSQL LISTEN/NOTIFY for cross-instance events (already in Go server)
• Health check endpoint for load balancer
• Sticky sessions or stateless auth

4.4 Mobile App / PWA

Description: Mobile-friendly management interface
Components:

• Progressive Web App (service worker + manifest)
• Push notifications (Web Push API)
• Responsive dashboard optimized for mobile
• Quick actions (approve registration, ack alert)

---

Technical Debt & Cleanup

Items that don't add features but improve code quality.

Item	Description	Priority
Unit tests for HTTP API	No test coverage on Node.js routes	High
Integration tests for PostgreSQL	Requires live PostgreSQL instance	Medium
CSS variable consolidation	Some modules still use hardcoded colors	Low
View template DRY	Several views duplicate stat-card/modal HTML	Low
Activity view expansion	Only 69 LOC — needs charts and detail views	Medium
Error handling audit	Some routes lack proper try/catch	Medium
API documentation	OpenAPI/Swagger spec for REST endpoints	Low
Accessibility audit	WCAG 2.1 compliance check for web panel	Low

---

Deployment Checklist (per release)

1. All changes committed to git
2. npm audit --omit=dev reports 0 vulnerabilities
3. Go server compiles without warnings
4. ALL-IN-ONE scripts updated (if new env vars or features)
5. i18n keys added to EN + PL + ZH
6. Cache version bumps on deploy (server restart)
7. Docker images rebuild if Dockerfile changed
8. CHANGELOG.md updated

---

Ideas & Feature Requests

Add your ideas below. Format:
- [ ] **Feature name** — Description (module: X, priority: High/Medium/Low)

---

Version History

Date	Change
2026-03-22	Initial plan created from ENTERPRISE_ROADMAP.md audit

---

See also: ENTERPRISE_ROADMAP.md for the original feature specification and technology stack decisions.