v4.9.60

4.9.60 — Service Port Relocate close-out (1.4.45)

Closes gaps vs published agent/service-port-relocate-client.md.

Fixes

• Read target_port from dashboard relocate_service params
• Golden on disk before mutate (C-REL-2); cleared on success
• Pre-check target free; reject privileged <1024 and other services’ classic ports (C-REL-6/7)
• Firewall rule AR-RELOCATE-<SVC>-<PORT>; removed on rollback (C-REL-5)
• Rollback ACK: status:"rollback", reason:"bind_verify_failed", target_port
• GUI: relocated / relocating badges + busy / port_available hints

FTP remains unsupported in GUI (allowed by contract).

v4.9.59 - Service Port Relocate sync + GUI (1.4.45)

4.9.59 — Service Port Relocate (contract 1.4.45)

Builds on 4.9.58 relocate_service with bidirectional sync + client GUI.

Command

• Flow: golden → firewall → config → restart → ≤10s verify → local rollback
• Success result: { status:"ok", service, old_port, new_port }
• Failure/rollback: command failed + status:"rollback" + reason
• Single in-flight relocate; forbid targets 53389 and 9XXXX

Defaults (4XXXX)

Service	Safe port
RDP	43389
MSSQL	41433
MYSQL	43306
SSH	40022
FTP	40021

GUI

• Services page Kolay Port Taşıma card
• Prefill: GET /api/premium/tunnel-status → relocate_state.<SVC>.saved_target_port || default_safe_port
• After local run: POST /api/agent/relocate-report (source:"gui") + open_ports refresh ≤5s

v4.9.57

4.9.57 — GUI loading honesty

Fixes misleading Off / “data failed” flashes while the Control Center is still refreshing.

Behavior

• Layer / NetGuard / ransomware toggles show an indeterminate loading state until STATUS is known
• Last known status is kept during background polls (no Off flash on every 2s tick)
• Soft “Durum güncelleniyor…” vs hard motor-unreachable banner
• Threat tables, Honeypot cards, and Settings switches wait for load before empty/fail copy

Installer

• Upload both asteria-client-installer.exe and cloud-client-installer.exe.

v4.9.56

4.9.56 — Threat Center action UX

Completes the GUI polish that was local-only during 4.9.55.

Threat Center

• Visible labeled row actions (Block / Unblock / Whitelist / Log off / Disable)
• Action columns no longer clipped — tables scroll horizontally when needed
• Accounts section open by default
• Unblock + whitelist from attacker / IP rows

Included from 4.9.55

• Remote console / Winlogon parity (contract 1.4.43)

Installer

• Upload both asteria-client-installer.exe and cloud-client-installer.exe.

v4.9.55

4.9.55 — Remote console parity (contract 1.4.43)

Closes client acceptance for dashboard Logon ekranı / physical-console UX.

Winlogon / console capture

• Omit session_id → resolve with WTSGetActiveConsoleSessionId (never hardcode SID 1)
• Winlogon Start never binds username
• Strict named WinSta0\Winlogon attach (no silent Default while claiming Winlogon)
• After logon, stream follows input desktop → Default without a second Start
• Sustained gdi+black on Winlogon path still fails honestly

CAD

• remote_send_sas targets the live stream / console session and attaches Winlogon before SendSAS

Health

• Logon / Lock pre_logon:true sibling row remains always present

Installer

• Upload both asteria-client-installer.exe and cloud-client-installer.exe (legacy ≤4.9.40 self-update fallback).

v4.9.54

4.9.54 — Firewall MMC parity + Network Adapter Admin

Ships contract 1.4.40–1.4.42 client close-out (since 4.9.51).

Network Adapter Admin (1.4.42)

• network_adapter_apply — enable / disable / set_ipv4 / set_dns / set_config
• Local watchdog (5–15s): bad apply → golden restore for that adapter (WATCHDOG_ROLLBACK)
• LAST_MGMT_ADAPTER, NO_GOLDEN / GOLDEN_UNHEALTHY; pauses auto_restore_network mid-apply
• Optional on_success=accept_surface

Firewall Windows MMC parity (1.4.41)

• list_firewall scope=all — full inbound/outbound + profiles + truncation/counts
• firewall_rule — enable / disable / delete / add (AR-MANUAL-*)
• firewall_set_profile — Domain/Private/Public/all

Firewall Management (1.4.40)

• Asteria inventory path (list_firewall / profile set) kept as degraded scope

Docs

• Future Linux/macOS agent plan: docs/LINUX_AGENT_PLAN.md

Installer

• Upload both asteria-client-installer.exe and cloud-client-installer.exe (legacy ≤4.9.40 self-update fallback).

v4.9.51

Asteria Client v4.9.51

GUI

• Sidebar foot: TR | EN (centered, larger) → Motor online | vX.Y.Z → Minimize to tray.

v4.9.50

Asteria Client v4.9.50

Fixes

• Sidebar: version is a bottom badge (logo lockup no longer crowded).
• Sidebar brand uses official logo_light.png lockup; sidebar sticks to viewport.
• Load ransomware_quarantine.json with utf-8-sig (PowerShell BOM safe).
• Lifecycle startup event reports real process mode instead of unknown.

v4.9.49

Asteria Client v4.9.49

Fixes

• Empty ransomware quarantine no longer stays locked forever after VSS with no attributed writer (auto-heal on load/start + post-contain disarm).
• Shadow-copy alerts emit once (no TR + empty-title duplicate).
• After sleep/wake, persistence health uses a 180s resume grace to avoid false agent_persistence_degraded cloud alerts.
• resilience_state.json migrates polluted version=test and sticky last_recovery_ok=false.
• Threat-intel intel_watch / intel_banner events include titles.

Notes

• Dual asteria-client.exe (Guardian service + Background daemon) remains intentional; only the daemon owns IPC :58632.

v4.9.48 — Stream progress + update brick recovery

4.9.48 — Stream progress + update brick recovery

Remote Desktop (contract 1.4.39)

• Agent emits stream_progress on RD WS: running → capture_start → capturing → ws/webrtc → live (or failed + error)
• Heartbeat ≤3s while starting; ≤4 events/s; no live for black-fill-only frames
• Also covers remote_session_prepare

Update brick recovery

• Orphan update_in_progress.lock now resumes Background tasks, clears stand-down, marks banner failed
• Auto-recover in ensure_daemon_running / heal / GUI ping
• GUI: Motoru kurtar on stalled update / motor unreachable

Install

asteria-client-installer.exe (+ legacy cloud-client-installer.exe alias).