Skip to content

chore: point server at leuffen-rmm-agent repo for releases - #33

Draft
Mischa323 wants to merge 5 commits into
mainfrom
claude/wizardly-curie-susp59
Draft

chore: point server at leuffen-rmm-agent repo for releases#33
Mischa323 wants to merge 5 commits into
mainfrom
claude/wizardly-curie-susp59

Conversation

@Mischa323

Copy link
Copy Markdown
Owner

Summary\n\n- GH_REPO default and RMM_MSI_URL now point to mischa323/leuffen-rmm-agent so the agent update button fetches releases from the dedicated agent repo\n- auto-version.yml trimmed to server-only: removed the agent/ path detection branch (agent now self-versions in its own repo)\n\n## What still needs to happen manually\n\n1. Push agent files to mischa323/leuffen-rmm-agent — all files from agent/, packaging/windows/agent.wxs, .github/workflows/windows-agent-msi.yml, and .github/workflows/auto-version.yml (agent-only version). See the handoff brief in the session for exact file contents.\n2. Add secrets to the agent repo: WINDOWS_CERT_PFX_BASE64 and WINDOWS_CERT_PASSWORD (code-signing cert, copy from this repo's settings).\n3. Trigger a release tag (v1.1.9) in the agent repo to publish the first MSI from there.\n4. After confirming the agent repo is live, delete agent/ and packaging/ from this repo and remove windows-agent-msi.yml."


Generated by Claude Code

claude added 5 commits June 19, 2026 08:31
…ing design confirmation)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SZSSJXmQSKF2KgTqSWSp2H
…ow permissions

- SSO callback now blocks any M365 user without a provisioned local account;
  shows a styled 'Access denied' page with a back-to-login link
- New access_groups / access_group_members / access_group_orgs / access_group_perms
  tables with full CRUD API (/api/access-groups/*)
- Deny overrides allow across all groups a user belongs to; conflict shown in UI
- Permission toggle cycles inherit → Deny → Allow (deny first per UX requirement)
- orgs_for_user and user_effective_role now include group-based org access
- auth.check_permission / auth.require_permission helpers for route-level checks
- Settings → Users & roles shows Access groups card with member + org management
- Permission buttons per org: greyed = inherit, red = deny, green = allow
- Bump to v1.4.0

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SZSSJXmQSKF2KgTqSWSp2H
Admins can generate time-limited download links (1/3/7/14/30 days) for
the Windows MSI installer that work without requiring a login session.
Links track use count and can be revoked. Shown in the Downloads tab UI.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SZSSJXmQSKF2KgTqSWSp2H
The /api/agent-release endpoint was returning the GitHub release name
which carries the server version tag. Now it explicitly includes the
canonical AGENT_VERSION constant, which the frontend prefers over the
release name/tag.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SZSSJXmQSKF2KgTqSWSp2H
…r-only

- GH_REPO default and RMM_MSI_URL now point to mischa323/leuffen-rmm-agent
  (agent releases will come from the dedicated repo going forward)
- auto-version.yml: removed agent/ path detection; server VERSION bump only
  (agent versioning now lives in mischa323/leuffen-rmm-agent)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants