${escapeHtml(alert.id)}${alert.known_exploited ? "KNOWN EXPLOITED" : "INVESTIGATE"}
${escapeHtml(alert.summary)}
${alert.affected_endpoints} affected · ${escapeHtml(alert.status)}${escapeHtml(policy.domain)}
+ ${policy.enabled ? "ACTIVE" : "DISABLED"}${escapeHtml(policy.enforcement_mode).toUpperCase()}
${escapeHtml(policy.name)}
${escapeHtml(policy.description)}
+${policy.covered_endpoint_count}/${policy.total_endpoint_count}ENDPOINTS COVERED
${policy.online_endpoint_count}ONLINE
${coverage}%
+
${(policy.rules || []).map((rule) => `✓ ${escapeHtml(rule)}`).join("")}
+ ASSIGNED SECURITY GROUPS
${groups}
+ ${cves ? `MALICIOUS CVE INTELLIGENCE
${cves}View ${policy.covered_endpoint_count} covered endpoints
- ${endpoints}
No security groups discovered.
'; + const selectedGroup = $("#deploy-group").value; + $("#deploy-group").innerHTML = '' + groups.map((group) => ``).join(""); + if (groups.some((group) => group.name === selectedGroup)) $("#deploy-group").value = selectedGroup; + const endpoints = data.endpoints || []; + $("#endpoint-body").innerHTML = endpoints.length ? endpoints.map((item) => `${escapeHtml(item.ip_address)}${(item.security_groups || []).map((group) => `${escapeHtml(group)}`).join("")}
SECURITY GROUP
${group.endpoint_count}${escapeHtml(group.name)}
${group.online_count} online${group.managed_count} managed${group.policies.length} policies
+
+ - ${group.endpoints.map((endpoint) => `
- ${escapeHtml(endpoint.hostname)}${escapeHtml(endpoint.operating_system)} · ${escapeHtml(endpoint.ip_address)}${endpoint.agent_version ? `v${escapeHtml(endpoint.agent_version)}` : "UNMANAGED"} `).join("")}
No security groups or endpoints match this filter.
'; +} + +function openInventoryGroup(group) { + $("#inventory-search").value = group; + if (state.inventory) renderGroupInventory(state.inventory, group); + window.location.hash = "inventory"; + $("#inventory").scrollIntoView({ behavior: "smooth", block: "start" }); +} + +async function loadInventory() { + try { renderInventory(await api("/v1/endpoints")); } + catch (error) { if (state.token) toast(error.message); } +} + +function renderDeployments(deployments) { + state.deployments = deployments; + $("#deployment-list").innerHTML = deployments.length ? deployments.slice(0, 8).map((item) => { + const queued = (item.jobs || []).filter((job) => ["queued", "deferred"].includes(job.status)).length; + return `${escapeHtml(item.security_group || "selected endpoints")} · v${escapeHtml(item.version)}${formatTime(item.created_at)} · ${escapeHtml(item.requested_by)}
${item.execute ? escapeHtml(item.status).toUpperCase() : "DRY-RUN PLAN"}${item.matched_endpoints} targets${queued ? ` · ${queued} queued` : ""}No deployments have been planned.
'; +} + +async function loadDeployments() { + try { const data = await api("/v1/deployments?limit=20"); renderDeployments(data.deployments || []); } + catch (error) { if (state.token) toast(error.message); } +} + +async function runDiscovery() { + const button = $("#run-discovery"); + button.disabled = true; + button.textContent = "Discovering…"; + try { + const result = await api("/v1/discovery-sessions", { method: "POST", body: JSON.stringify({ requested_by: $("#deploy-requestor").value || "console-admin" }) }); + toast(`Discovery complete: ${result.endpoint_count} endpoints across ${result.security_group_count} groups.`); + await loadInventory(); + } catch (error) { toast(error.message); } + finally { button.disabled = false; button.textContent = "Run discovery session"; } +} + +async function submitDeployment(event) { + event.preventDefault(); + const execute = event.submitter?.value === "execute"; + const payload = { + security_group: $("#deploy-group").value, + version: $("#deploy-version").value, + execute, + requested_by: $("#deploy-requestor").value, + }; + event.submitter.disabled = true; + try { + const result = await api("/v1/deployments", { method: "POST", body: JSON.stringify(payload) }); + toast(execute ? `Deployment queued to ${result.matched_endpoints} endpoints.` : `Plan validated for ${result.matched_endpoints} endpoints.`); + await Promise.all([loadDeployments(), loadInventory()]); + } catch (error) { toast(error.message); } + finally { event.submitter.disabled = false; } +} + async function saveTrustControls(event) { event.preventDefault(); const submit = event.submitter; @@ -455,9 +637,30 @@ function bindEvents() { $$("[data-investigate]").forEach((button) => button.addEventListener("click", () => setAuditFilter(button.dataset.investigate))); $("#clear-audit-filter").addEventListener("click", () => setAuditFilter(null)); $("#refresh-audit").addEventListener("click", loadAudit); + $("#audit-previous").addEventListener("click", () => changeAuditPage(-1)); + $("#audit-next").addEventListener("click", () => changeAuditPage(1)); + $("#audit-page-size").addEventListener("change", (event) => { + state.auditPageSize = Number(event.target.value); + state.auditPage = 1; + renderAudit(getFilteredAuditEvents()); + }); $("#refresh-reviews").addEventListener("click", loadReviews); $("#policy-form").addEventListener("submit", savePolicy); + $("#security-policy-cards").addEventListener("click", (event) => { const group = event.target.closest("[data-inventory-group]"); if (group) openInventoryGroup(group.dataset.inventoryGroup); }); $("#trust-controls-form").addEventListener("submit", saveTrustControls); + $("#run-discovery").addEventListener("click", runDiscovery); + $("#deployment-form").addEventListener("submit", submitDeployment); + $("#refresh-deployments").addEventListener("click", loadDeployments); + $("#deploy-group").addEventListener("change", updateDeploymentCommand); + $("#deploy-version").addEventListener("input", updateDeploymentCommand); + $("#inventory-search").addEventListener("input", (event) => { if (state.inventory) renderGroupInventory(state.inventory, event.target.value); }); + $("#security-group-list").addEventListener("click", (event) => { + const selected = event.target.closest("[data-deploy-group]"); + if (!selected) return; + $("#deploy-group").value = selected.dataset.deployGroup; + updateDeploymentCommand(); + $("#deployment-form").scrollIntoView({ behavior: "smooth", block: "center" }); + }); $("#token-button").addEventListener("click", openTokenDialog); $("#token-form").addEventListener("submit", (event) => { if (event.submitter?.value === "cancel") return; @@ -474,7 +677,7 @@ function bindEvents() { sections.forEach((section) => observer.observe(section)); } -async function refreshAll() { await Promise.all([loadOverview(), loadReviews(), loadPolicy(), loadModelStatus(), loadTrustControls()]); } +async function refreshAll() { await Promise.all([loadOverview(), loadReviews(), loadPolicy(), loadSecurityPolicies(), loadModelStatus(), loadTrustControls(), loadInventory(), loadDeployments()]); } bindEvents(); $("#token-label").textContent = state.token ? "Token configured" : "Set API token"; diff --git a/src/intentgate/web/index.html b/src/intentgate/web/index.html index d1e5db4..9d35368 100644 --- a/src/intentgate/web/index.html +++ b/src/intentgate/web/index.html @@ -21,7 +21,9 @@ 04Audit Trail 05Policy 06Trust Controls - 07AI Advisor + 07Fleet Admin + 08Inventory + 09AI Advisor +
+
ACTION CENTERWhat needs attention now
+
+
+ PENDING REVIEWS0Make a human decision →
+ AI
@@ -85,6 +94,7 @@ AI-assisted. Behavior-aware. Zero trust.
OBSERVATIONBuilding a behavioral baseline.
TOP OUTLIERNot enough evidence yet
@@ -95,6 +105,7 @@
AI-assisted. Behavior-aware. Zero trust.
OBSERVATIONCollecting representative command families.
+