agentV2.js

Go to the documentation of this file.

/**
 * @file agentV2.js
 * @description Agent v2 architecture with helper-based privilege separation. Distributes source code as ZIP
 * archives with embedded tenant bootstrap configuration. Requires AGENT_V2_SOURCE_PATH pointing to agent repository
 * with Node.js source files. Supports Windows service model, RDP configuration, IPC communication layer.
 * @module routes/agentV2
 */
 
/**
 * @apiDefine AgentV2Group Agent v2 (Helper Architecture)
 * Agent v2 source distribution with tenant bootstrap
 */
 
const express = require('express');
const jwt = require('jsonwebtoken');
const fs = require('fs');
const path = require('path');
const router = express.Router();
 
// Agent v2 Configuration with absolute paths
const AGENT_V2_VERSION = '2.0.0';
// Use the correct production path for the server
const AGENT_V2_SOURCE_PATH = '/opt/apps/IBG_HUB/rmm-psa-platform/agent';
 
/**
 * @api {get} /api/agent/v2/status Get Agent v2 Status
 * @apiName GetAgentV2Status
 * @apiGroup AgentV2Group
 * @apiDescription Returns agent v2 architecture status and component availability. Checks source path for
 * core files (ws.js, ipcServer.js, rdp-helper.js, hardwareInfo.js, updater.js). No authentication required.
 * @apiSuccess {string} version Agent version (e.g., "2.0.0")
 * @apiSuccess {boolean} available Agent availability
 * @apiSuccess {string[]} platforms Supported platforms (windows, linux, macos)
 * @apiSuccess {string[]} features Feature list (helper-based architecture, Windows service, RDP support, plugin system, IPC layer)
 * @apiSuccess {string} lastUpdated ISO 8601 timestamp
 * @apiSuccess {boolean} [sourceAvailable] Source files availability
 * @apiSuccess {object} [components] Component file existence map
 * @apiError 500 Status check failed
 * @apiExample {curl} Example:
 *   curl https://api.example.com/api/agent/v2/status
 * @apiExample {json} Success-Response (200):
 *   {
 *     "version": "2.0.0",
 *     "available": true,
 *     "platforms": ["windows", "linux", "macos"],
 *     "features": ["Helper-based architecture", "Windows service privilege separation"],
 *     "sourceAvailable": true,
 *     "components": {"lib/ws.js": true, "helpers/rdp-helper.js": true}
 *   }
 */
// =============================================
// Agent v2 Status and Version Info
// =============================================
router.get('/status', (req, res) => {
  try {
    console.log('[Agent v2] Status check');
    
    const status = {
      version: AGENT_V2_VERSION,
      available: true,
      platforms: ['windows', 'linux', 'macos'],
      features: [
        'Helper-based architecture',
        'Windows service privilege separation',
        'RDP configuration support',
        'Enhanced security model',
        'Plugin system with helpers',
        'IPC communication layer'
      ],
      lastUpdated: new Date().toISOString()
    };
    
    // Check if source files exist
    if (fs.existsSync(AGENT_V2_SOURCE_PATH)) {
      status.sourceAvailable = true;
      
      // Check for specific components - using actual files that exist
      const coreFiles = [
        'lib/ws.js',
        'lib/ipcServer.js',
        'helpers/rdp-helper.js',
        'lib/hardwareInfo.js',
        'lib/updater.js'
      ];
      
      status.components = {};
      for (const file of coreFiles) {
        const filePath = path.join(AGENT_V2_SOURCE_PATH, file);
        status.components[file] = fs.existsSync(filePath);
      }
    } else {
      status.sourceAvailable = false;
    }
    
    res.json(status);
    console.log('[Agent v2] Status response sent');
    
  } catch (err) {
    console.error('[Agent v2] Status check failed:', err);
    res.status(500).json({ error: 'Failed to get status' });
  }
});
 
/**
 * @api {get} /api/agent/v2/download/:platform Download Agent v2 Source
 * @apiName DownloadAgentV2Source
 * @apiGroup AgentV2Group
 * @apiDescription Generates ZIP archive containing agent v2 Node.js source code with embedded bootstrap configuration.
 * Excludes node_modules, .git, logs, and build artifacts. Injects tenant-specific JWT (365-day expiry) into
 * bootstrap.json for agent-to-server authentication. No auth required for download (open enrollment).
 * @apiParam {string} platform Platform identifier (windows, linux, macos)
 * @apiParam (Query) {UUID} tenantId Tenant UUID for bootstrap configuration
 * @apiSuccess (200) {Binary} zip ZIP archive with agent source + bootstrap.json
 * @apiError 400 Missing tenantId or unsupported platform
 * @apiError 404 Source files not found
 * @apiError 500 Archive creation failed
 * @apiExample {curl} Example:
 *   curl "https://api.example.com/api/agent/v2/download/windows?tenantId=550e8400-e29b-41d4-a716-446655440000" \
 *     -o agent-v2.zip
 * @apiExample {json} bootstrap.json (embedded in ZIP):
 *   {
 *     "tenantId": "550e8400-e29b-41d4-a716-446655440000",
 *     "jwt": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
 *     "backend": "https://everydaytech.au/api",
 *     "version": "2.0.0",
 *     "platform": "windows"
 *   }
 */
// =============================================
// Agent v2 Download (No auth required, generates agent config)
// =============================================
router.get('/download/:platform', async (req, res) => {
  const archiver = require('archiver');
  try {
    const { platform } = req.params;
    const { tenantId } = req.query;
    
    console.log('==============================');
    console.log(`[Agent v2] 🏁 /download/${platform} called`);
    console.log('[Agent v2] Platform:', platform);
    console.log('[Agent v2] TenantId:', tenantId);
    
    // Validate required parameters
    if (!tenantId) {
      console.log('[Agent v2] ❌ Missing tenantId');
      return res.status(400).json({ error: 'Missing tenantId parameter' });
    }
    
    // Supported platforms
    const supportedPlatforms = ['windows', 'linux', 'macos'];
    if (!supportedPlatforms.includes(platform)) {
      console.log('[Agent v2] ❌ Unsupported platform:', platform);
      return res.status(400).json({ error: 'Unsupported platform' });
    }
    
    // Generate agent authentication JWT (not for download auth, but for agent-to-server communication)
    const agentJWT = jwt.sign({ tenantId, version: 'v2' }, process.env.AGENT_SIGN_KEY, { expiresIn: '365d' });
    console.log('[Agent v2] ✅ Generated agent authentication JWT');
    
    // Check if source files exist
    if (!fs.existsSync(AGENT_V2_SOURCE_PATH)) {
      console.log('[Agent v2] ❌ Source path not found:', AGENT_V2_SOURCE_PATH);
      return res.status(404).json({ error: 'Agent v2 source files not found' });
    }
    
    // Set up response headers for ZIP download
    const filename = `agent-v2-${platform}-${AGENT_V2_VERSION}.zip`;
    res.setHeader('Content-Type', 'application/zip');
    res.setHeader('Content-Disposition', `attachment; filename="${filename}"`);
    
    // Create archive
    const archive = archiver('zip', {
      zlib: { level: 6 } // Compression level
    });
    
    archive.on('error', (err) => {
      console.error('[Agent v2] Archive error:', err);
      if (!res.headersSent) {
        res.status(500).json({ error: 'Archive creation failed' });
      }
    });
    
    archive.on('end', () => {
      console.log(`[Agent v2] ✅ Archive created: ${filename} (${archive.pointer()} bytes)`);
    });
    
    // Pipe archive to response
    archive.pipe(res);
    
    // Add source files to archive, excluding node_modules and other unnecessary files
    console.log('[Agent v2] Adding source files to archive...');
    archive.directory(AGENT_V2_SOURCE_PATH, 'agent-v2', (entry) => {
      // Exclude node_modules, dist, logs, and other build artifacts
      if (entry.name.includes('node_modules') || 
          entry.name.includes('.git') || 
          entry.name.includes('package-lock.json') ||
          entry.name.includes('.log') ||
          entry.name.includes('dist/') ||
          entry.name.includes('.tmp')) {
        return false;
      }
      return entry;
    });
    
    // Add bootstrap configuration file for agent authentication
    const bootstrapConfig = {
      tenantId: tenantId,
      jwt: agentJWT,
      backend: process.env.BACKEND_URL || 'https://everydaytech.au/api',
      version: AGENT_V2_VERSION,
      platform: platform
    };
    
    archive.append(JSON.stringify(bootstrapConfig, null, 2), { name: 'agent-v2/bootstrap.json' });
    console.log('[Agent v2] ✅ Added bootstrap configuration');
    
    // Finalize archive
    await archive.finalize();
    
    console.log('[Agent v2] Download completed');
    console.log('==============================');
    
  } catch (err) {
    console.error('[Agent v2] Download failed:', err);
    if (!res.headersSent) {
      res.status(500).json({ error: 'Failed to download agent' });
    }
    console.log('==============================');
  }
});
 
/**
 * @api {get} /api/agent/v2/download-token Get Download Token (DEPRECATED)
 * @apiName GetAgentV2DownloadToken
 * @apiGroup AgentV2Group
 * @apiDescription **DEPRECATED**: Legacy token-based download endpoint. Use direct download with tenantId query parameter instead.
 * Returns 400 error with migration instructions.
 * @apiError 400 Endpoint deprecated
 * @apiExample {curl} Example (deprecated):
 *   curl https://api.example.com/api/agent/v2/download-token?tenantId=550e8400-e29b-41d4-a716-446655440000
 * @apiExample {json} Error-Response (400):
 *   {
 *     "error": "This endpoint is deprecated. Use /download/{platform}?tenantId={tenantId} instead.",
 *     "migration": {
 *       "old": "/api/agent/v2/download-token?tenantId={tenantId}&os={platform}",
 *       "new": "/api/agent/v2/download/{platform}?tenantId={tenantId}"
 *     }
 *   }
 */
// =============================================
// Agent v2 Download Token (DEPRECATED - keeping for compatibility)
// =============================================
router.get('/download-token', async (req, res) => {
  console.log('[Agent v2] ⚠️  /download-token is deprecated, use direct download with tenantId');
  res.status(400).json({ 
    error: 'This endpoint is deprecated. Use /download/{platform}?tenantId={tenantId} instead.',
    migration: {
      old: '/api/agent/v2/download-token?tenantId={tenantId}&os={platform}',
      new: '/api/agent/v2/download/{platform}?tenantId={tenantId}'
    }
  });
});
 
module.exports = router;