Changelog

0.3.4 — Modern Web UI

Master- und Agent-WebUI vollständig modernisiert, weiterhin ohne Framework oder Build-Schritt.
Responsive Sidebar-Navigation mit Mobile-Menü und Scroll-Tracking.
Dark-/Light-Theme mit lokaler Browser-Präferenz.
Neue Dashboard-Karten, Panel-Hierarchie, Status-Badges, moderne Formulare/Switches und Tabellen.
Live-Bereiche und Editoren bleiben weiterhin getrennt; automatische Refreshes überschreiben keine Eingaben.
Verbesserte Darstellung für Farms, Broker, Published Resources, Director, Alerts, Audit und lokale Agent-Ansichten.
Keine neue Runtime-Abhängigkeit: HTML/CSS/Vanilla-JavaScript bleiben direkt in den Go-Binaries eingebettet.

Fix: Master-WebUI definiert und aktualisiert agentCache, bevor die Farm-Mitglieder berechnet werden.
Behebt ReferenceError: agentCache is not defined in der Farm-/Broker-Ansicht.
Die Farm-Agent-Anzahl verwendet weiterhin dieselbe Membership-Logik wie der Broker (farm.agent_ids, agent.farm_ids, required_tags).

Fixed Farm member count in the Master WebUI. The table now uses the same membership rules as the broker: explicit farm.agent_ids, agent-side agent.farm_ids, and required_tags.
Farm member names are available as a tooltip on the member count.

Fixed Master live refresh replacing Farm, Resource and server-control forms every five seconds.
Split live server metrics from editable server-control fields.
Farm and Resource editors are mounted once; only their data tables and broker leases refresh.
Added explicit reset/reload actions instead of implicit form replacement.
Added Agent policy dirty-state protection and visible "Ungespeicherte Änderungen" state.
Added explicit Agent policy reload with confirmation before discarding unsaved edits.
Added Cache-Control: no-store, max-age=0 for the Web UI HTML and JavaScript.
Added browser-level regression verification covering a full live-refresh cycle.

Added logical Farms with explicit agent IDs, agent-side farm IDs and required-tag membership.
Added Published Resources for desktop and RemoteApp mappings.
Added health-aware broker with existing-session reconnect preference, leases and configurable global single-session behavior.
Added strict farm isolation and fail-closed unknown/disabled-farm handling.
Added online, drain, and maintenance server modes.
Added restart_when_drained workflow.
Added broker-specific API key and /api/v1/broker/resolve / /api/v1/broker/tokens APIs.
Added Guacamole 1.6 extension using token injection instead of database rewriting.

Added WTS logon/connect/last-input and client-address telemetry where available.
Added idle-time calculation and persistent disconnect timestamps.
Added Windows process inventory per user session and process termination command.
Added CPU, RAM and system-disk telemetry.
Added RDP-listener/profile-store health checks and composite health score.
Added indexed session history and observed logon/restore timing.
Added configurable threshold alerts and generic webhook notifications.
Extended Master UI with health, session/process control, logon telemetry, farms, resources, leases, alerts and policy rollback.

Added PostgreSQL production persistence and single-active-master advisory-lock protection.
Split append-only audit/session history into indexed tables while keeping small control-plane state in JSONB.
Added group-to-role RBAC.
Added policy versioning/rollback for global, farm and agent policies.
Added environment-secret overrides for database, enrollment, broker, OIDC and webhook credentials.
Added hardened Docker deployment example.
Added bounded agent telemetry/process heartbeat payloads.
Bound queued process-termination commands to the observed RDS session and revalidated PID/session ownership before termination.

Farm policies now also apply to centrally selected members (agent_ids / required tags), not only agents with explicit local farm_ids.
Broker never reuses an existing session from a different requested farm.
Drain hosts are reconnect-only; maintenance hosts are excluded from both reconnect and new placement.
Broker resources cannot silently fall through to a disabled/unknown farm.

Added selected-folder profile backup/restore with transactional snapshot activation and history retention.
Added backup-before-cleanup gating and retries.
Added disconnected-session timeout with native WTS logoff and the same backup/cleanup pipeline.
Added master queued session control and result audit.
Added Windows service session-change wakeups.
Added Prometheus metrics and profile/session operation documentation.

Initial Windows Agent / Linux Master MVP with WTS inventory, delayed profile cleanup, templates, PocketID/OIDC and master-agent heartbeats.