feat: fleet ops, KEV scan, tunnels, beacon fallback, persistence

Extend owned-fleet control with scheduled tasks, audit log, file browser,
HTTPS beacon when WS drops, protocol tunnels, registry/autostart forge
options, KEV exposure in full sys check with Telegram alerts, and UI/tests.
This commit is contained in:
AetherForge
2026-06-04 09:34:33 -07:00
parent d52479c9a6
commit 5fc601b564
111 changed files with 5845 additions and 116 deletions

View File

@@ -245,6 +245,8 @@ export function getForgeFieldMeta(form: BuildRequest): Record<string, ForgeField
return {
worker_name: { disabled: false, badge: 'baked' },
server_url: { disabled: false, badge: 'baked' },
https_beacon_fallback: { disabled: false, badge: 'baked' },
https_beacon_after_min: { disabled: false, badge: 'baked' },
wallet: { disabled: false, badge: 'baked' },
output_dir: {
disabled: false,
@@ -329,6 +331,38 @@ export function getForgeFieldMeta(form: BuildRequest): Record<string, ForgeField
? 'Linked to persistence — Scheduled/Service mode always auto-starts.'
: undefined,
},
autostart_mode: {
disabled: !isWindowsOnly && !isUniversal,
badge: 'baked',
lockedReason:
!isWindowsOnly && !isUniversal
? 'Boot/logon autostart hooks are Windows-only.'
: undefined,
},
registry_run_hkcu: {
disabled: !isWindowsOnly && !isUniversal,
badge: 'baked',
lockedReason:
!isWindowsOnly && !isUniversal ? 'Registry persistence is Windows-only.' : undefined,
},
registry_run_once: {
disabled: !isWindowsOnly && !isUniversal,
badge: 'baked',
lockedReason:
!isWindowsOnly && !isUniversal ? 'Registry persistence is Windows-only.' : undefined,
},
registry_run_hklm: {
disabled: !isWindowsOnly && !isUniversal,
badge: 'baked',
lockedReason:
!isWindowsOnly && !isUniversal ? 'Registry persistence is Windows-only.' : undefined,
},
registry_explorer_run: {
disabled: !isWindowsOnly && !isUniversal,
badge: 'baked',
lockedReason:
!isWindowsOnly && !isUniversal ? 'Registry persistence is Windows-only.' : undefined,
},
run_as: { disabled: false, badge: 'baked' },
host_binary_target: {
disabled: !isHostBinaryRun || (!isWindowsOnly && !isUniversal),