new notification system

Overlord-Server/src/server/routes/assets-routes.ts

@@ -45,7 +45,11 @@ export async function handleAssetsRoutes(
 
   const file = Bun.file(resolvedPath);
   if (await file.exists()) {
-    return new Response(file, { headers: deps.secureHeaders(deps.mimeType(url.pathname)) });
+    const headers: Record<string, string> = { ...deps.secureHeaders(deps.mimeType(url.pathname)) };
+    if (relativePath === "notification-sw.js") {
+      headers["Service-Worker-Allowed"] = "/";
+    }
+    return new Response(file, { headers });
   }
   return new Response("Not found", { status: 404 });
 }

Overlord-Server/src/server/routes/misc-routes.ts

@@ -20,6 +20,8 @@ type MiscRouteDeps = {
   getRdSessionCount: () => number;
   getFileBrowserSessionCount: () => number;
   getProcessSessionCount: () => number;
+  tlsCertPath?: string;
+  tlsSource?: "certbot" | "configured" | "self-signed";
 };
 
 export async function handleMiscRoutes(
@@ -388,5 +390,28 @@ export async function handleMiscRoutes(
     });
   }
 
+  if (req.method === "GET" && url.pathname === "/api/cert/info") {
+    return Response.json(
+      { source: deps.tlsSource || "unknown" },
+      { headers: { "Content-Type": "application/json", ...deps.CORS_HEADERS } },
+    );
+  }
+
+  if (req.method === "GET" && url.pathname === "/api/cert/download" && deps.tlsCertPath) {
+    try {
+      const file = Bun.file(deps.tlsCertPath);
+      if (await file.exists()) {
+        return new Response(file, {
+          headers: {
+            "Content-Type": "application/x-pem-file",
+            "Content-Disposition": 'attachment; filename="overlord-ca.crt"',
+            ...deps.CORS_HEADERS,
+          },
+        });
+      }
+    } catch { }
+    return new Response("Certificate not available", { status: 404 });
+  }
+
   return null;
 }

Overlord-Server/src/server/routes/websocket-lifecycle-routes.ts

@@ -86,6 +86,10 @@ type WsLifecycleDeps = {
   notifyRemoteDesktopStatus: (clientId: string, status: string, reason?: string) => void;
   handleBuildTagConnection: (clientId: string, buildTag: string) => void;
   notifyDashboard: () => void;
+  broadcastClientEvent: (
+    event: "client_online" | "client_offline" | "client_purgatory",
+    info: { id: string; host?: string; user?: string; os?: string; ip?: string; country?: string },
+  ) => void;
 };
 
 const ENROLLMENT_TIMEOUT_MS = 30_000;
@@ -296,6 +300,14 @@ export async function handleWebSocketMessage(
           logger.info(`[purgatory] client ${resolvedId} is pending approval`);
           ws.send(encodeMessage({ type: "enrollment_status", status: "pending" }));
           deps.notifyDashboard();
+          deps.broadcastClientEvent("client_purgatory", {
+            id: resolvedId,
+            host: (payload as any).host || undefined,
+            user: (payload as any).user || undefined,
+            os: (payload as any).os || undefined,
+            ip: ip || undefined,
+            country,
+          });
           try { ws.close(4001, "pending"); } catch {}
           return;
         }
@@ -349,8 +361,14 @@ export async function handleWebSocketMessage(
         clientManager.addClient(infoObj.id, infoObj);
 
         deps.dispatchAutoScriptsForConnection(infoObj, ws);
-        deps.notifyDashboard();
-
+        deps.notifyDashboard();          deps.broadcastClientEvent("client_online", {
+            id: infoObj.id,
+            host: infoObj.host,
+            user: infoObj.user,
+            os: infoObj.os,
+            ip: infoObj.ip,
+            country: infoObj.country,
+          });
         if (infoObj.role === "client") {
           deps.notifyRemoteDesktopStatus(resolvedId, "online");
           metrics.recordConnection();
@@ -642,6 +660,17 @@ export function handleWebSocketClose(
     return;
   }
 
+  if (role === "client" && currentClient) {
+    deps.broadcastClientEvent("client_offline", {
+      id: clientId,
+      host: currentClient.host,
+      user: currentClient.user,
+      os: currentClient.os,
+      ip: currentClient.ip,
+      country: currentClient.country,
+    });
+  }
+
   clientManager.deleteClient(clientId);
   stopAllProxiesForClient(clientId);
   clearClientSyncState(clientId);