Waukesha, Wisconsin · what’s new
What’s new.
Living log of what shipped. Launch is the deadline and the gates — charge the walk Friday, September 25, 2026. This page is the diary. Harborline is the demo plant, not a customer.
Tuesday, September 22, 2026
this ship
Work tab: MSP client book and encrypted vault
MSP shops get Work → Book: client info, attach shop locations, PCs from PC Agent / LAN scan, and an encrypted password vault. Hardware add stays on Systems. Secrets are AES-GCM — not plaintext in lantern.json and not in the audit log.
- ●Rail label is Book. Cable Pro and Electric Pro stay on Jobs / Billing.
- ●Show reveals a password once on screen. Label only in the log. Password hashes untouched.
Sunday, September 20, 2026
this deploy
Linux NAS boxes report live on Computers
ES-ss1 and StorageServer (NASD598F6) were stuck Offline with empty stats because Computers only trusted the Windows EXE. Linux NAS now uses the same HTTPS-out ingest: lastSeen paints Online, and a NAS agent posts CPU, RAM, volumes, and SMART when smartctl exists.
- ●Download NAS agent on Computers or Account. On the NAS: sh lantern-nas-agent-*.sh --install. Cron every 15 minutes. Same company token as the Windows EXE.
- ●Hostnames ES-ss1 / es-ss1 and NASD598F6 / StorageServer merge to one row each. Online follows lastSeen, not a Windows heartbeat.
- ●Volumes keep Linux mount points (/volume1), not a fake C:. SMART is Unknown until smartctl answers. No inbound scan. No Windows WMI scrape of the NAS.
Saturday, September 19, 2026
this deploy
PC Agent posts SMART detail, Defender, and uptime
The 15-minute HTTPS-out inventory now includes reallocated sectors, last Windows Update install date, missing critical KBs, Defender state, and uptime. Host Health and the Computers chip already knew how to show those fields; they were Unknown until this package. Harborline demo rows stay compiled — no invented SMART.
- ●Package 2026.09.19.1 splices Get-LanternPcHealth into the push. Auto-update via /api/computers/agent/version, or re-download the EXE from Computers.
- ●Fast 5-minute check-ins stay quiet so a partial push does not wipe a full reading. A field Windows will not answer still reads Unknown.
- ●computers-tab and pc-health are checked off. Remote desktop is still not this phase. Password hashes untouched.
Thursday, September 17, 2026
this deploy
Computer Agent downloads as an EXE
Company admin Download agent saves lantern-pc-agent-*.exe with the Lantern mark. Double-click; Windows asks for administrator. Same scheduled task and HTTPS-out check-in. No unzip.
- ●GET /api/computers/agent returns a Windows EXE. The shop token is baked into a real company download. Harborline still has no token.
- ●The EXE uses the existing installer: %ProgramData%\Lantern\pc-agent, lantern-icon.ico from public/lantern-icon.png, tray, 15-minute task, POST /api/computers/agent.
- ●Did not replace public/lantern-icon.png. OG, rail, and plant lists unchanged.
this deploy
Computer Agent uses the Lantern mark
The Windows zip carries lantern-icon.ico (the live lantern-icon.png wrapped as ICO). Installer shortcuts, folder branding, and the tray use that mark. The PNG, OG, and rail are unchanged.
- ●Zip includes lantern-icon.ico built from public/lantern-icon.png. That PNG is not replaced.
- ●Install copies the ICO into %ProgramData%\Lantern\pc-agent, Start Menu / Desktop / Startup shortcuts, and the tray NotifyIcon.
- ●Same HTTPS-out check-in. No New ticket on the tray. SMART is still pc-health.
this deploy
Windows Computer Agent check-in
Company admin downloads a Windows zip from Plant → Computers or Account. A real shop PC POSTs HTTPS out to lantern.enlightenstudios.us. The row lands on Plant → Computers. Harborline demo rows stay compiled. SMART is not this card.
- ●Download: GET /api/computers/agent (company admin). One org token in the zip; Lantern stores the hash.
- ●Push: POST /api/computers/agent Bearer token. Hostname, OS, serial, last seen, building name if known.
- ●Harborline zip has no token. A new org/building works the same way. No fake SMART. No L3. No invented street.
Friday, September 18, 2026
this deploy
Computers tells you which PC needs a look
Host information has a Health block and the Computers list shows a small chip on any PC with a real warning — a drive saying predict-fail, low life or free space, a restart Windows is holding, updates past 45 days, Defender off, or a month of uptime. Fields the agent has not sent read Unknown instead of a guess.
- ●Open Computers, click a hostname: Health sits above Identity. Orange is watch, red is attention, grey Unknown means that PC has not posted the field yet.
- ●Never an invented SMART verdict. RMM CSV rows still read Not this card.
- ●Each warning files one report per PC and kind on the ops board (/admin/health) and clears as a repair on the next clean check-in — no duplicate spam.
- ●Still open: the Windows agent has to start posting reallocated sectors, last update date, missing critical KBs, Defender state, and uptime. PowerShell is staged for that package bump.
this deploy
PC Agent install no longer flashes a black PowerShell window
The 15-minute task and Startup shortcut still launched powershell.exe, so a black console with red WMI lines could pop even after 18.7’s hidden wscript wrapper. Package 2026.09.18.9 runs inventory through LanternPcHidden.exe (CREATE_NO_WINDOW). Re-download the EXE and run it once.
- ●Scheduled tasks stay Hidden=true / highest, and the task image is wscript → LanternPcHidden.exe, not powershell.exe. Tray Push and auto-update use the same host. QuickFix / temp / UniFi errors go to a log, not the console.
- ●Did not restyle Air or switches. Did not change UniFi tenant isolation. Password hashes untouched.
this deploy
PC Agent can read Ryzen CPU temp without ACPI
the operator test PC’s Ryzen 3700X had no ACPI thermal zone, so CPU stayed Unknown / no ACPI even when LibreHardwareMonitor or extra CIM sensors exist. Package 2026.09.18.8 asks those user-mode sources. No invented numbers.
- ●The 15-minute task and auto-update pick up 18.8. Refresh Computers after the next push. Hidden inventory window from 18.7 is still hidden.
- ●Did not restyle Air or switches. Did not Test-pull UniFi cloud. Password hashes untouched.
this deploy
PC Agent no longer pops a console over a game
The 15-minute inventory, tray Push, auto-update, UniFi LAN pull, and install PowerShell were flashing a window and stealing focus. Package 2026.09.18.7 runs those jobs fully hidden.
- ●Scheduled tasks use Hidden=true, SYSTEM where that was already the design, and a wscript helper so powershell.exe never paints a console. Auto-update via /api/computers/agent/version.
- ●Did not restyle Air or switches. Did not Test-pull UniFi cloud. Password hashes untouched.
this deploy
PC Agent install no longer prints red Windows Update sort errors
Install still POSTs inventory, but sorting installed KBs used DateTime.TryParse the wrong way and painted red Sort-Object lines. Package 2026.09.18.6 parses those dates safely. Push still works.
- ●The 15-minute task and auto-update pick up 18.6. the operator test PC already posted on 18.5 — refresh Computers. Exit the tray only if it is stuck on 18.5.
- ●Did not restyle the frozen Computers list. Password hashes untouched.
this deploy
CPU/GPU temp notes use a plain slash
the operator test PC’s host card showed Unknown · no ACPI and 74 C · AMD ADL because the agent posted a UTF-8 middle-dot that Windows-1252 turned into mojibake. The host page now prints Unknown / no ACPI and 74 C / AMD ADL from the notes already in the live store. GPU 74 C is still AMD ADL. CPU stays Unknown when there is no ACPI. No invented Ryzen numbers.
- ●Refresh Computers → the operator test PC. No new EXE required for the garbled dots to clear.
- ●New inventory notes use ASCII / so a later push cannot reintroduce ·. Password hashes untouched.
this deploy
Tray Push inventory no longer dies on a missing file
Right-click Push inventory showed a WinForms box: the system cannot find the file specified. The tray’s powershell.exe path used a JavaScript \v escape (vertical tab), so Start-Process never launched the script. Package 2026.09.18.5 finds powershell.exe and still POSTs inventory if nvidia-smi is missing.
- ●Download agent 2026.09.18.5 from Computers and run it so the tray button works tonight. The 15-minute scheduled task already calls powershell.exe -File and can still POST without a new EXE.
- ●Missing nvidia-smi / ADL does not abort the HTTPS-out inventory POST. Password hashes untouched.
this deploy
the operator test PC temps: real C or Unknown · no ACPI
the operator test PC was Online on 2026.09.18.3 but CPU/GPU temp stayed Unknown. Live store had the string Unknown from the last POST — ingest was fine. Package 2026.09.18.4 copies temps before the CPU name, finds nvidia-smi in Sysnative DriverStore, and tries AMD ADL. A Ryzen 3700X with no ACPI posts Unknown · no ACPI, not a blank Unknown.
- ●Re-download the PC Agent from Computers (package 2026.09.18.4) or wait for the six-hour auto-update, then tray → Push inventory. The 18.3 EXE cannot pick up this script.
- ●Did not invent Harborline sample temps on Cobus PCs. No WinRing0. Password hashes untouched.
this deploy
PC Online and temps: tokens and user-session sensors
Downloading the EXE had revoked every other PC token, so the operator test PC and the Win10 box posted 401 and went Offline. Those hashes are live again. Temps need package 2026.09.18.3 (Sysnative nvidia-smi, ACPI WMI, tray Fast push). Unknown only when Windows has no sensor.
- ●Refresh Computers. TORCH / the operator test PC / DESKTOP should come Online on the next check-in without a new EXE.
- ●Temps: re-download 2026.09.18.3 on each PC then tray Push inventory. Exit the extra tray icon.
- ●Did not invent Harborline numbers on a shop PC. UniFi LAN pull unchanged.
this deploy
PC Agent push no longer dies on 401
Download agent used to revoke every other PC token, so Push inventory showed a .NET 401 and never stored CPU temp. Multiple tokens stay live. Inventory POST is separate from UniFi. Temps stick on a good check-in.
- ●PCs that already popped the purple 401 box: Download agent once from Computers and run the installer (package 2026.09.18.3). That PC gets a working token; other PCs keep theirs.
- ●After that, tray → Push inventory is enough. CPU/GPU temps are not UniFi. Offline last-seen uses UTC vs local without painting a live PC dead.
- ●Did not restyle frozen Computers list, OG, or the rail. Password hashes untouched.
this deploy
One Windows tray after reboot
Two Lantern PC Agent icons in the Windows tray was two Startup shortcuts, not two UniFi. Install keeps the all-users StartUp shortcut and deletes the current-user Startup link. The tray takes a Global mutex and exits if one is already running.
- ●Re-download the PC Agent EXE from Computers (package 2026.09.18.2), or wait for the six-hour auto-update, then run install so the leftover user Startup .lnk is removed.
- ●Tonight: right-click one of the two tray icons → Exit. After the next reboot there should be one.
- ●Did not restyle frozen Computers list, OG, or the rail. Password hashes untouched.
Thursday, September 17, 2026
this deploy
Boarded: Work tab MSP clients + password vault
Need to do on Launch: MSP/network admins get a Work-tab client book (info, locations, computers from Lantern agents) and an encrypted password vault. After hardware add/sync. Not built tonight.
- ●msp-work-clients-vault — after typed plant, LAN scan, PC Agent, UniFi HTTPS-out.
- ●Vault is for servers, switches, modems, cameras, software. Shop seats only. No plaintext secrets in the log.
this deploy
Host page CPU/GPU temps, SMART, and NVMe life from the agent
The Lantern PC Agent now asks Windows WMI/CIM for CPU temp, GPU temp, SMART, and NVMe wear on the HTTPS-out push. Host information stays Unknown only when those classes have no value. Re-download the EXE from Computers.
- ●Inventory scheduled task runs as SYSTEM with WindowStyle Hidden and ExecutionPolicy Bypass so ACPI/SMART/Wear are not skipped.
- ●CPU: MSAcpi_ThermalZoneTemperature, Win32_TemperatureProbe, thermal-zone counters. GPU: nvidia-smi plus NVIDIA/AMD WMI. No kernel temp driver.
- ●SMART: FailurePredictStatus, StorageReliabilityCounter, PhysicalDisk HealthStatus, Win32_DiskDrive Status. NVMe life is 100 minus Wear. Harborline demo may still be sample.
- ●Same EXE Open ticket form: issue + Low/Medium/High + Submit. Did not restyle frozen Computers/Phones/Cameras lists, OG, lockup, or the Enlighten footer.
this deploy
Host page is cards, not a spec dump
Open a PC from Locations → Computers. The hostname stays the title. Status chips sit under it. Identity, Hardware, Disk, Network, Agent, and Updates are labeled cards. Missing fields stay Unknown.
- ●Removed the paragraph that listed every field under the hostname.
- ●Disk usage shows C: used / free / total with a meter when the agent posted volumes.
- ●Did not restyle the frozen Computers list, Phones, Cameras, OG, or the rail.
this deploy
Host page matches shop chrome; PC-agent cards checked
/computers/[id] uses PageFrame, Locations kicker, panel-card, and Outfit. Last check-in shows CPU/memory usage, ethernet, C: used/free/total, NVMe life, and CPU/GPU temps. Missing stays Unknown. Launch board cards for those workstreams are checked with honest 100 — not a flat 50.
- ●pc-host-page, pc-cpu-ram-nic, pc-disk-usage, pc-temps, pc-nvme-life, and pc-agent-autoupdate are done.
- ●Harborline demo IPs, C: volumes, and NVMe percents stay compiled. Usage, MAC, gateway, DNS, and temps stay Unknown until the EXE posts.
- ●Did not restyle frozen Computers/Phones/Cameras lists, OG, or the rail. Password hashes untouched.
this deploy
Host page shows NVMe/SSD percent life remaining
The PC agent reads SSD/NVMe wear from WMI and stores percent life remaining next to disk usage and SMART on Host information. Unknown when Wear is empty — not a guessed number.
- ●POST /api/computers/agent accepts lifeRemaining / wear. PowerShell uses Get-StorageReliabilityCounter Wear and Get-PhysicalDisk Wear.
- ●Harborline demo hosts have compiled percents. Print server stays Unknown (no Wear). CSV stays Not this card.
- ●Did not restyle the frozen Computers list, Phones, Cameras, OG, or the rail.
this deploy
Host page uses shop chrome; PC-agent cards get honest percents
/computers/[id] matches the rest of Lantern: PageFrame, Locations kicker, panel-card, Outfit. Launch board cards for auto-update, CPU/RAM, disk usage, and NVMe life now carry honest percents — not a flat 50.
- ●pc-host-page checked. Same last-check-in facts plus SMART and C: used / free / total.
- ●pc-agent-autoupdate 25% — public GET /api/computers/agent?version=1. EXE does not self-update yet.
- ●pc-cpu-ram-nic 40% — IP and CPU/RAM model on the host page. NIC adapter array still open.
- ●pc-disk-usage 75% — host C: numbers, Harborline demo volumes, Win32_LogicalDisk in the push.
- ●pc-nvme-life 15% — NVMe card says Unknown until Wear posts. No invented percent.
- ●Did not restyle frozen Computers/Phones/Cameras lists, OG, or the rail.
this deploy
Click a PC for inventory; agents auto-update
Hostname on Computers opens host detail: current settings, CPU, RAM, SMART, last check-in, and recently installed Windows KBs. A shop PC pulls a new Lantern agent HTTPS-out — no visit.
- ●POST /api/computers/agent stores CPU, RAM, manufacturer/model, and Win32_QuickFixEngineering KBs.
- ●GET /api/computers/agent/version is public. Bearer GET /api/computers/agent/update does not rotate the company token.
- ●Did not restyle the frozen Computers list beyond the hostname link. No remote desktop. Password hashes, OG, and the rail stayed.
this deploy
Host page adds CPU/GPU temps; launch cards stay In Progress
Open a PC from Locations → Computers. The host page lists last-check-in CPU and GPU temps when ACPI or nvidia-smi posted them. Unknown otherwise. No kernel temp driver. Auto-update, disk usage, and the host page stay Doing on the launch board.
- ●CPU temp is the ACPI thermal zone when Windows exposes it — not a claimed CPU-die reading.
- ●GPU temp is nvidia-smi when that tool is on the PC. Missing stays Unknown.
- ●pc-host-page, pc-agent-autoupdate, pc-disk-usage, and pc-temps are In Progress on /admin/launch.
- ●Did not restyle frozen Computers/Phones/Cameras lists, OG, or the rail. Password hashes untouched.
this deploy
Host page shows C: used, free, and total
The PC agent POSTs Win32_LogicalDisk Size and FreeSpace on the same HTTPS-out push as SMART. Host information lists C: used, C: free, and C: total next to SMART. CSV stays Unknown until the EXE checks in.
- ●Push-LanternPcInventory.ps1 reads DriveType=3 Size/FreeSpace. POST /api/computers/agent stores volumes.
- ●Harborline demo hosts have compiled C: numbers. Frozen Computers list columns did not move.
- ●Did not restyle Phones, Cameras, DeviceInventory, OG, or the rail.
this deploy
Host page shows last check-in CPU, memory, and NIC
Open a PC from Locations → Computers. The host page lists CPU usage, memory usage, ethernet link, IP, MAC, gateway, and DNS from the last HTTPS-out push. If the agent has not sent a field, it says Unknown. There is no live graph.
- ●/computers/[id] is the host page. Name on the Computers list opens it.
- ●The Windows agent POSTs usage and nic facts on the same 15-minute HTTPS-out push. CSV/RMM rows stay Unknown until the EXE checks in.
- ●Harborline demo IPs stay compiled. No fake live graphs. Password hashes untouched.
this deploy
RMM switch-in over HTTPS out
A shop box with NinjaOne, Datto RMM, or ConnectWise Automate keys POSTs device inventory to lantern.enlightenstudios.us. Lantern never inbound-scans their RMM. Missing keys push an honest stub.
- ●POST /api/computers/rmm with the PC agent or collector Bearer token. Same Computers list as Import CSV (Agent Offline until the EXE checks in).
- ●Ninja /v2/devices-detailed, Datto /v2/account/devices, Automate Computers. Account → Download RMM script. No policies. Frozen lists unchanged.
- ●Did not invent a first-building street. Remote desktop is still after launch.
this deploy
PC agent reports SMART and Windows Update
The Lantern PC Agent push now includes disk SMART and Windows Update. Those values land in the Disk and Updates columns already on Computers. CSV import still shows Not this card until the EXE checks in.
- ●POST /api/computers/agent accepts disk / windowsUpdate. PowerShell reads FailurePredictStatus, storage wear, pending updates, and reboot-required.
- ●Warnings use the frozen Computers table. Did not restyle Phones, Cameras, DeviceInventory, OG, or the rail.
- ●Harborline demo rows stay compiled. No fake first-building. Remote desktop is still after launch.
this deploy
Tray New ticket files a shop ticket
Right-click the Lantern PC Agent tray icon → New ticket. That POSTs HTTPS out and opens a shop ticket on the PC hostname. The Tickets column on Computers shows the open count.
- ●POST /api/computers/agent/ticket with the same org Bearer token as inventory.
- ●Reuses /tickets. Not the Enlighten operator board. Not remote desktop.
- ●Did not restyle the frozen Computers list chrome.
this deploy
Import CSV on Computers
Company admin and Enlighten get a second square-round orange Import CSV button next to Download agent. Hostname, site, OS, serial, and last seen from another RMM land on the Computers list. Harborline stays compiled. The old RMM agent is not installed.
- ●Top-right .btn-lantern Import CSV (nowrap) immediately next to Download agent. Same seats as the EXE.
- ●POST /api/computers/csv. Template GET /api/computers/csv?template=1. Sample /samples/computers-rmm.csv.
- ●CSV rows show Agent Offline until the Lantern EXE checks in. Did not restyle Phones, Cameras, OG, or the rail.
this deploy
Download agent on Computers
Company admin (and Enlighten) get a square-round orange Download agent button on Locations → Computers. Same GET as Account: lantern-pc-agent-<company>.exe. Harborline still has no token. Techs keep the muted note.
- ●Top-right .btn-lantern Download agent → /api/computers/agent (EXE, not zip).
- ●Visible for org_admin, client, and Enlighten admin. Field tech / employee / Harborline demo tech do not.
- ●Did not restyle DeviceInventory lists, OG, or the rail.
Wednesday, September 16, 2026
this deploy
Computers list and company-admin download
Plant → Computers is the approved dense list: hostname, user, last seen, disk, Windows Update, agent, tickets. Company admin downloads a Windows installer stub scoped to that shop. Harborline rows are demo. Agent binary is not fully shipped. Remote desktop stays after launch.
- ●Orange Download agent uses .btn-lantern. Filters are Site, OS, SMART, Updates, Agent plus search.
- ●computers-tab stays Doing (list + download). pc-health and tray tickets are next. pc-remote-control stays Need to do.
- ●No RDP column. Lantern never inbound-scans a customer PC. Did not invent a real customer.
this deploy
Computers is on the Plant menu
MSP and Advanced shops see Computers in the left rail. Honest empty list until the onboarding Windows agent pushes hostname and last seen. SMART, tray tickets, and remote desktop are later. No fake VNC. No inbound PC scan.
- ●Plant group: Monitor icon + Computers when expanded, icon-only when collapsed.
- ●computers-tab is Doing (menu live). Agent binary is not this slice.
- ●pc-health and pc-taskbar-ticket stay Need to do. pc-remote-control is after launch + pricing — not a fake in-browser desktop.
- ●Cable Pro hides the item. Opening /computers on that package says Computers is an MSP package.
this deploy
Need to do: Computers tab and the MSP PC agent
Four cards on the launch board. Not shipped. A small Windows agent on each PC would push HTTPS out to lantern.enlightenstudios.us — same shape as the switch collector. Lantern never inbound-scans a customer PC. No agent binary this week.
- ●computers-tab — Plant → Computers. Onboarding agent. Inventory: hostname, user, last seen.
- ●pc-health — SMART for HDD/SSD/NVMe and Windows Update warnings on Computers.
- ●pc-taskbar-ticket — Right-click the tray → New ticket. Reuses shop tickets. MSP wedge.
- ●pc-remote-control — not this phase. Relay, consent, MFA. Not RDP from Plesk. Not fake in-browser VNC.
Waukesha
The log stays current. The deadline stays on Launch.
Mike Cobus · Enlighten Studios. First day in this book is Tuesday, September 15, 2026. Every later ship adds a row here in the same commit.