Software Management. Interaction with Fleet

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/DispatchResponse.java

@@ -3,16 +3,6 @@
 import lombok.Builder;
 import lombok.Data;
 
-/**
- * Result of a fire-and-forget RMM dispatch over core NATS — running a command,
- * cancelling an in-flight execution, or running a saved script. Carries the
- * server-minted {@code executionId} the dashboard uses to correlate the agent's
- * asynchronous result.
- *
- * <p>Shared by all dispatch mutations ({@code runCommand}, {@code cancelExecution},
- * {@code runScript}): they are structurally identical, so a single type avoids
- * three duplicate one-field DTOs.
- */
 @Data
 @Builder
 public class DispatchResponse {

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/software/CreateSoftwareBundleInput.java

@@ -0,0 +1,24 @@
+package com.openframe.api.dto.rmm.software;
+
+import com.openframe.data.document.rmm.software.SoftwareAction;
+import jakarta.validation.Valid;
+import jakarta.validation.constraints.NotEmpty;
+import jakarta.validation.constraints.NotNull;
+import jakarta.validation.constraints.Pattern;
+import lombok.Data;
+
+import java.util.List;
+
+@Data
+public class CreateSoftwareBundleInput {
+
+    @NotNull(message = "action must not be null")
+    private SoftwareAction action;
+
+    @NotEmpty(message = "machineIds must not be empty")
+    private List<@Pattern(regexp = "^[A-Za-z0-9_-]+$",
+            message = "each machineId must be a single subject-safe token (A-Za-z0-9_-)") String> machineIds;
+
+    @Valid
+    private List<SoftwarePackageInput> packages;
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/software/SoftwareBundleResponse.java

@@ -0,0 +1,26 @@
+package com.openframe.api.dto.rmm.software;
+
+import com.openframe.data.document.rmm.software.SoftwareAction;
+import com.openframe.data.document.rmm.software.SoftwareBundlePackage;
+import com.openframe.data.document.rmm.software.SoftwareBundleStatus;
+import lombok.Builder;
+import lombok.Data;
+
+import java.time.Instant;
+import java.util.List;
+
+@Data
+@Builder
+public class SoftwareBundleResponse {
+
+    private String id;
+    private SoftwareAction action;
+    private SoftwareBundleStatus status;
+    private List<String> machineIds;
+    private List<SoftwareBundlePackage> packages;
+    private String createdBy;
+    private Instant createdAt;
+    private Instant updatedAt;
+    private Instant completedAt;
+    private List<String> executionIds;
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/software/SoftwareCveSeverity.java

@@ -0,0 +1,9 @@
+package com.openframe.api.dto.rmm.software;
+
+public enum SoftwareCveSeverity {
+    CRITICAL,
+    HIGH,
+    MEDIUM,
+    LOW,
+    NONE
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/software/SoftwareFilterInput.java

@@ -0,0 +1,17 @@
+package com.openframe.api.dto.rmm.software;
+
+import lombok.Data;
+
+import java.util.List;
+
+@Data
+public class SoftwareFilterInput {
+
+    private List<SoftwareSource> sources;
+
+    private List<SoftwareVersionStatus> versionStatuses;
+
+    private SoftwareCveSeverity minSeverity;
+
+    private List<String> deviceTagIds;
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/software/SoftwareFilterOption.java

@@ -0,0 +1,13 @@
+package com.openframe.api.dto.rmm.software;
+
+import lombok.Builder;
+import lombok.Data;
+
+@Data
+@Builder
+public class SoftwareFilterOption {
+
+    private String value;
+    private String label;
+    private int count;
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/software/SoftwareFilters.java

@@ -0,0 +1,23 @@
+package com.openframe.api.dto.rmm.software;
+
+import lombok.Builder;
+import lombok.Data;
+
+import java.util.List;
+
+@Data
+@Builder
+public class SoftwareFilters {
+
+    private List<SoftwareFilterOption> sources;
+    private List<SoftwareFilterOption> versionStatuses;
+    private List<SoftwareFilterOption> severities;
+
+    public static SoftwareFilters empty() {
+        return SoftwareFilters.builder()
+                .sources(List.of())
+                .versionStatuses(List.of())
+                .severities(List.of())
+                .build();
+    }
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/software/SoftwareOnDeviceResponse.java

@@ -0,0 +1,14 @@
+package com.openframe.api.dto.rmm.software;
+
+import com.openframe.data.document.device.Machine;
+import lombok.Builder;
+import lombok.Data;
+
+@Data
+@Builder
+public class SoftwareOnDeviceResponse {
+
+    private Machine device;
+    private String softwareVersion;
+    private SoftwareOnDeviceStatus status;
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/software/SoftwareOnDeviceStatus.java

@@ -0,0 +1,9 @@
+package com.openframe.api.dto.rmm.software;
+
+public enum SoftwareOnDeviceStatus {
+    UP_TO_DATE,
+    OUTDATED,
+    SCHEDULED_UPDATE,
+    UNINSTALLING,
+    SCHEDULED_UNINSTALL
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/software/SoftwareResponse.java

@@ -0,0 +1,24 @@
+package com.openframe.api.dto.rmm.software;
+
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class SoftwareResponse {
+    private String id;
+    private String name;
+    private String publisher;
+    private SoftwareSource source;
+    private String currentVersion;
+    private String latestVersion;
+    private SoftwareVersionStatus versionStatus;
+    private Integer olderVersionsCount;
+    private Integer devicesCount;
+    private SoftwareVulnerabilitySummaryResponse vulnerabilitySummary;
+    private Boolean cpeMatched;
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/software/SoftwareScheduleResponse.java

@@ -1,5 +1,6 @@
 package com.openframe.api.dto.rmm.software;
 
+import com.openframe.data.document.rmm.schedule.ScheduleDeviceCriteria;
 import com.openframe.data.document.rmm.schedule.ScheduleDeviceSelectionMode;
 import com.openframe.data.document.rmm.schedule.ScheduleOfflineBehavior;
 import com.openframe.data.document.rmm.schedule.ScheduleScriptTrigger;
@@ -23,6 +24,7 @@ public class SoftwareScheduleResponse {
     private SoftwareAction action;
     private List<SoftwareSchedulePackage> packages;
     private ScheduleDeviceSelectionMode selectionMode;
+    private ScheduleDeviceCriteria deviceCriteria;
     private ScheduleScriptTrigger trigger;
     private ScheduleTimeReference timeReference;
     private ScheduleOfflineBehavior offlineBehavior;

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/software/SoftwareSource.java

@@ -0,0 +1,8 @@
+package com.openframe.api.dto.rmm.software;
+
+public enum SoftwareSource {
+    WINGET,
+    CHOCOLATEY,
+    BREW,
+    UNMANAGED
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/software/SoftwareVersionStatus.java

@@ -0,0 +1,7 @@
+package com.openframe.api.dto.rmm.software;
+
+public enum SoftwareVersionStatus {
+    UP_TO_DATE,
+    OUTDATED,
+    UNKNOWN
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/software/SoftwareVulnerabilityResponse.java

@@ -0,0 +1,20 @@
+package com.openframe.api.dto.rmm.software;
+
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+import java.time.Instant;
+
+@Data
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class SoftwareVulnerabilityResponse {
+    private String cveId;
+    private SoftwareCveSeverity severity;
+    private Double cvssScore;
+    private String affectedVersion;
+    private Instant publishedAt;
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/software/SoftwareVulnerabilitySummaryResponse.java

@@ -0,0 +1,15 @@
+package com.openframe.api.dto.rmm.software;
+
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class SoftwareVulnerabilitySummaryResponse {
+    private SoftwareCveSeverity highestSeverity;
+    private int cveCount;
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/software/UpdateSoftwareBundleInput.java

@@ -0,0 +1,23 @@
+package com.openframe.api.dto.rmm.software;
+
+import jakarta.validation.Valid;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotEmpty;
+import jakarta.validation.constraints.Pattern;
+import lombok.Data;
+
+import java.util.List;
+
+@Data
+public class UpdateSoftwareBundleInput {
+
+    @NotBlank(message = "id must not be blank")
+    private String id;
+
+    @NotEmpty(message = "machineIds must not be empty")
+    private List<@Pattern(regexp = "^[A-Za-z0-9_-]+$",
+            message = "each machineId must be a single subject-safe token (A-Za-z0-9_-)") String> machineIds;
+
+    @Valid
+    private List<SoftwarePackageInput> packages;
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/vulnerability/AffectedSoftwareResponse.java

@@ -0,0 +1,26 @@
+package com.openframe.api.dto.rmm.vulnerability;
+
+import com.openframe.api.dto.rmm.software.SoftwareSource;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class AffectedSoftwareResponse {
+
+    private String id;
+
+    private String name;
+
+    private SoftwareSource source;
+
+    private String version;
+
+    private Integer devicesCount;
+
+    private String resolvedInVersion;
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/vulnerability/VulnerabilityFilterInput.java

@@ -0,0 +1,12 @@
+package com.openframe.api.dto.rmm.vulnerability;
+
+import com.openframe.api.dto.rmm.software.SoftwareCveSeverity;
+import lombok.Data;
+
+@Data
+public class VulnerabilityFilterInput {
+
+    private SoftwareCveSeverity minSeverity;
+
+    private Boolean exploited;
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/rmm/vulnerability/VulnerabilityResponse.java

@@ -0,0 +1,39 @@
+package com.openframe.api.dto.rmm.vulnerability;
+
+import com.openframe.api.dto.rmm.software.SoftwareCveSeverity;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+import java.time.Instant;
+import java.util.List;
+
+@Data
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class VulnerabilityResponse {
+
+    private String cveId;
+
+    private SoftwareCveSeverity severity;
+
+    private Double cvssScore;
+
+    private Double epssProbability;
+
+    private Boolean cisaKnownExploit;
+
+    private Instant publishedAt;
+
+    private String detailsLink;
+
+    private Integer devicesCount;
+
+    private String description;
+
+    private String resolvedInVersion;
+
+    private List<AffectedSoftwareResponse> affectedSoftware;
+}

openframe-api-lib/src/main/java/com/openframe/api/dto/shared/PageResult.java

@@ -0,0 +1,10 @@
+package com.openframe.api.dto.shared;
+
+import java.util.List;
+
+public record PageResult<T>(List<T> items, boolean hasNext, boolean hasPrevious, int filteredCount, int page) {
+
+    public static <T> PageResult<T> empty(int page) {
+        return new PageResult<>(List.of(), false, false, 0, page);
+    }
+}