gtiandClaude Sonnet 5
8d6122c096
One universal Windows Agent package per version (agent_releases: version/ platform/architecture/sha256/status DRAFT|PUBLISHED|REVOKED; the binary lives on a local release-storage volume, never in PostgreSQL). An operator creates a pending installation (agent_enrollments) from Agents / Servidores -> + Nova instalação, then either downloads it directly or generates a one-time HTTPS link (short TTL, single use). Either path streams the package plus a freshly minted enrollment.json whose token is never written to storage in plaintext, only its SHA-256 hash. On the client host, gti-agent.ps1 install-auto verifies the bundle's SHA-256, refuses a non- HTTPS Hub, enrolls via POST /v1/agents/enroll (deleting the enrollment token immediately after, success or failure), writes an ACL-restricted .env with the newly issued permanent Agent token, and registers the Windows Service without starting it (Firebird stays unconfigured on purpose). Idempotent, replay-proof, rate-limited per IP, fully audited, never logs a secret. Migration 0022_agent_releases_enrollment (verified fresh-DB == upgrade-from-0021 by pg_dump diff). GTI_FISCAL_VERSION/AGENT_VERSION bumped to 1.1.0 as the single source of truth across code, packages, the release manifest and every published AgentRelease row. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
51 lines
2.9 KiB
HTML
51 lines
2.9 KiB
HTML
{% extends "base.html" %}
|
|
{% block title %}{{ enr.display_name }} | Instalação | GTI Fiscal{% endblock %}
|
|
{% block content %}
|
|
<div class="detail-head"><div><p class="eyebrow">DISTRIBUIÇÃO DO AGENT</p><h1>{{ enr.display_name }}</h1><p class="muted">{{ tenant.name if tenant else "Cliente não encontrado" }} · release {{ release.version if release else "?" }}</p></div><div><span class="badge">{{ enr.status }}</span></div></div>
|
|
|
|
{% if download_link %}
|
|
<section class="panel">
|
|
<h2>Link temporário gerado</h2>
|
|
<p class="muted">Mostrado uma única vez, uso único, expira em pouco tempo. Copie agora — ele não pode ser recuperado depois.</p>
|
|
<p><code style="word-break:break-all">{{ download_link }}</code></p>
|
|
</section>
|
|
{% endif %}
|
|
|
|
<section class="panel">
|
|
<h2>Detalhes</h2>
|
|
<table>
|
|
<tr><th>Cliente</th><td>{{ tenant.name if tenant else "-" }}</td></tr>
|
|
<tr><th>Nome</th><td>{{ enr.display_name }}</td></tr>
|
|
<tr><th>Hostname esperado</th><td>{{ enr.expected_hostname or "não informado" }}</td></tr>
|
|
<tr><th>Versão do Agent</th><td>{{ release.version if release else "-" }} ({{ release.platform if release else "" }}/{{ release.architecture if release else "" }})</td></tr>
|
|
<tr><th>Status</th><td><span class="badge">{{ enr.status }}</span>{% if enr.hostname_mismatch %} <span class="badge critical">hostname divergente</span>{% endif %}</td></tr>
|
|
<tr><th>Criada em</th><td>{{ enr.created_at }}</td></tr>
|
|
<tr><th>Baixada em</th><td>{{ enr.downloaded_at or "ainda não" }}</td></tr>
|
|
<tr><th>Hostname visto</th><td>{{ enr.hostname_seen or "-" }}</td></tr>
|
|
{% if installed_agent %}
|
|
<tr><th>Agent</th><td><a href="/agents/{{ installed_agent.id }}">#{{ installed_agent.id }}</a> · {{ "ativo" if installed_agent.enabled else "desativado" }} · último heartbeat: {{ installed_agent.last_seen_at or "nenhum ainda" }}</td></tr>
|
|
{% endif %}
|
|
</table>
|
|
</section>
|
|
|
|
<section class="panel">
|
|
<h2>Ações</h2>
|
|
{% if enr.status not in ("ENROLLED", "REVOKED") %}
|
|
<form method="post" action="/agents/pending/{{ enr.enrollment_uuid }}/link" style="display:inline">
|
|
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
|
|
<button type="submit">Gerar link temporário</button>
|
|
</form>
|
|
<a href="/agents/pending/{{ enr.enrollment_uuid }}/download" class="botao">Baixar Agent agora</a>
|
|
{% endif %}
|
|
{% if enr.status != "REVOKED" %}
|
|
<form method="post" action="/agents/pending/{{ enr.enrollment_uuid }}/revoke" style="display:inline" onsubmit="return confirm('Revogar esta instalação? Links e o Agent (se já ativo) deixam de funcionar.');">
|
|
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
|
|
<button type="submit" class="secondary">Revogar</button>
|
|
</form>
|
|
{% endif %}
|
|
{% if enr.status == "ENROLLED" and installed_agent %}
|
|
<a href="/agents/{{ installed_agent.id }}" class="secondary">Ver Agent</a>
|
|
{% endif %}
|
|
</section>
|
|
{% endblock %}
|