What’s new.

Thursday, September 24, 2026

1. this ship

   Lens shows the floor plan behind the labels

   The desk label on Lens sits on the same floor drawing as Floors. The camera stays faded over that plan so you can still see the room. Tap where you are standing. No picture is saved.

   • ●Switch floors with the chips. Each floor uses its own drawing.
   • ●No picture is saved. The phone does not read the wall.
   • lens
   • floors

2. this ship

   Lens faces the nearest desk on the floor

   Open Lens and tap where you are standing. The phone turns toward the nearest pin on that floor and reads the cable number and the device. No picture is saved.

   • ●Place the jack on Floors first. One tap on Lens faces that pin.
   • ●Turn left, Turn right, or the compass moves which desk is in front of you. Tap the plan again when you walk to the next desk.
   • lens
   • floors

3. this ship

   Lens points at the desk on the floor plan

   Open Lens, tap where you are standing, tap the way you are facing, and point the phone. The cable number and the device come from the pins on that floor. No picture is saved.

   • ●Place the jack on Floors first. Lens reads that pin when it is in front of you.
   • ●Compass turn is on the phone. Turn left and Turn right work when the compass stays off. Closet remains a second button.
   • lens
   • floors

Wednesday, September 23, 2026

1. this ship

   UPS on the rail and in the MDF

   MSP / IT shops can type a rack UPS (charge, load watts, battery minutes) on /ups and on the closet rack. Harborline shows a sample Eaton 9PX. No vendor cloud scrape. Free seats stay off it.

   • ●UPS sits after Switches, before Air. Add a UPS on a live building. First real street still waits.
   • plant
   • ups

2. this ship

   Patch panel ports take cable IDs

   On Closets, type a cable ID on each patch-panel port. Matching Floors drops fill jack, device, IP, and MAC. Ports show that ID instead of 01-24.

   • ●Save cable IDs under the panel on the rack. Harborline stays compiled. Password hashes untouched.
   • closets
   • plant

3. this ship

   Closet racks move U order; Add a switch sits under the plates

   On Closets, drag a switch or patch panel (or tap Up / Down) to set where it sits on the rack. Add and delete patch panels on that same rack. On the plant rail, Closets sits immediately before Switches. The Switches list follows that rack’s U order (top first), and faceplates stay first — Add a switch is underneath on desktop and phone.

   • ●U order writes into the plant store. Merge-add. Harborline stays compiled. Not an Instant On or NICGIGA scrape.
   • ●Password hashes untouched. Frozen OG, rail lockup, and Computers/Phones/Cameras lists untouched.
   • closets
   • switches
   • plant

4. this ship

   MDF switch matches the Air faceplate

   The closet rack switch is the same last-pull SwitchFaceplate as Air: amber only on ports drawing PoE watts, green on a live link, hover or tap a jack for the same card. Manual 4/5/8/16/24/48 switches still take per-port PoE or PoE+.

   • ●Closet HardwareBay now overlays vendorPorts from the last UniFi/Meraki pull the same way Air does. One plant switch still pairs to one pull switch.
   • ●Tap a port to hold the sheet on a phone. Desktop hover is unchanged. Password hashes untouched.
   • closets
   • air
   • switches

Tuesday, September 22, 2026

1. this ship

   ISP gateway is typed or LAN-scan IP / MAC / name

   Systems records an ISP modem as hostname, IP, and MAC. There is no AT&T / Spectrum / Comcast / TDS partner API. LAN-scan hosts that look like a gateway can be filed. UniFi and LAN scan stay the live path.

   • ●DHCP lease is IP / MAC / name only — not cameras vs phones vs switches.
   • ●LAN-box HTTPS-out is later if ever. Password hashes untouched.
   • plant
   • isp

Monday, September 21, 2026

1. this ship

   Free testers can Lens-drop on their own building

   After confirm email, Lens opens House on the tester’s empty plant — Place device / Add device for cameras and PCs. Not Harborline, not Cobus, not Electric Pro breakers. Overlay ports wait until they type a closet. Floor clip on Floors is optional.

   • ●featuresForMode free already had lens:true. The blocker was empty plant (no closet) so Lens had nothing to snap to.
   • ●House drop point + snaps on the company plant. Floors Place device uses this plant’s cable IDs, not HL-2W-1414.
   • ●Jobs, Billing, Team, SOP, UniFi pull, and house breakers stay Cable Pro / Electric Pro. Password hashes untouched. Did not rewrite Walk/heatmap/APK.
   • lens
   • free
   • plant

2. this ship

   Free signup stays open — isolated from Enlighten’s network

   Anyone can still create a free account at /signup. That seat gets its own empty building. It never sees Enlighten, Cobus, Harborline, operator UniFi lastPull, shop Computers, or shop ARP.

   • ●Signup is not locked, not invites-only, and the Free package stays on.
   • ●Plant, buildings, and UniFi are scoped to the new org. Others / scan agent / Integrations stay off on Free. Floors, Air, Switches, Computers, and Lens stay on the user’s own site.
   • ●free-account-signup and free-launch-lockdown are checked off. Did not restamp UniFi AP 8-port or heatmap. Frozen lockup and rail except hiding leaky Others on Free.
   • packages
   • plant
   • auth

Sunday, September 20, 2026

1. this ship

   APs are not 8-port switches — NICGIGA 6-port is typed

   UniFi access points were landing under Switches because the controller JSON includes a virtual 8-port table on in-wall APs. Those are passthrough NICs. The two unmanaged NICGIGA 4×2.5G + 2 SFP boxes can be added as 6-port faceplates. Lantern cannot read their per-port state.

   • ●switch-ap-misclassify and unmanaged-switch-ports are checked off.
   • ●APs stay on Air. Physical ethernet (1–2, IW up to 5) can show as passthrough — not an 8-port chassis.
   • ●Add a switch includes NICGIGA NIC-AS2042. Unmanaged card says no SNMP / no scrape. If it hangs off the UniFi switch, that uplink is on the UniFi faceplate.
   • ●Instant On is never scraped from this site. Frozen OG, lockup, and rail untouched.
   • switch
   • unifi
   • plant

2. this deploy

   Linux NAS boxes report live on Computers

   ES-ss1 and StorageServer (NASD598F6) were stuck Offline with empty stats because Computers only trusted the Windows EXE. Linux NAS now uses the same HTTPS-out ingest: lastSeen paints Online, and a NAS agent posts CPU, RAM, volumes, and SMART when smartctl exists.

   • ●Download NAS agent on Computers or Account. On the NAS: sh lantern-nas-agent-*.sh --install. Cron every 15 minutes. Same company token as the Windows EXE.
   • ●Hostnames ES-ss1 / es-ss1 and NASD598F6 / StorageServer merge to one row each. Online follows lastSeen, not a Windows heartbeat.
   • ●Volumes keep Linux mount points (/volume1), not a fake C:. SMART is Unknown until smartctl answers. No inbound scan. No Windows WMI scrape of the NAS.
   • computers
   • nas
   • msp

3. this ship

   Omada Cloud Open API pull is live

   A shop pastes Omada Cloud client id + secret. Test pull hits TP-Link Omada Northbound. Local SDN posts JSON HTTPS-out. Password hashes untouched.

   • ●omada-controller-pull is checked off. HTTPS to *.tplinkcloud.com only. Not Plesk inbound.
   • omada
   • integrations
   • plant

4. this ship

   Juniper Mist cloud pull is live

   A shop pastes a Mist org API token on Account or Operator → Integrations. Test pull hits api.mist.com for APs, switches, and ports. Junos REST stays on the shop collector. Password hashes untouched.

   • ●juniper-controller-pull is checked off. HTTPS to api.mist.com only. Not a Plesk inbound scrape.
   • ●Same Set overlay as UniFi and Meraki. Harborline stays compiled.
   • mist
   • juniper
   • integrations
   • plant

5. this ship

   L2 consoles map HTTPS-out JSON

   Instant On, Insight, Cisco Business, and MikroTik map shop HTTPS-out JSON onto the same ingest snapshot as UniFi. Instant On is never scraped from Plesk. Other L2 uses generic collector JSON.

   • ●l2-controller-integrations is checked off. Empty Instant On pull from this website still refuses.
   • ●Integrations cards stay Needs key until a shop posts a snapshot. Harborline stays compiled.
   • integrations
   • collector
   • plant

6. this release

   Meraki dashboard pull is live

   A shop pastes a Meraki dashboard API key on Account or Operator → Integrations. Test pull hits api.meraki.com for devices, PoE, and ports, then Set uses the same overlay as UniFi. Harborline stays the compiled demo. Password hashes untouched.

   • ●HTTPS to api.meraki.com only. Not a shop container. Not Plesk inbound.
   • ●meraki-controller-pull is checked off. Same VendorIngestHost / Set path as UniFi.
   • meraki
   • integrations
   • plant

7. this ship

   LAN scan files shops with no controller

   The scan EXE files unmanaged switches, APs, cameras, printers, and PCs by OUI and hostname. Unknown stays Other until Move. Full nmap later. Not the PC Agent inventory EXE.

   • ●lan-scan-unmanaged is checked off. Instant On never. Harborline stays compiled.
   • lan-scan
   • plant

8. this ship

   Typed cameras, switches, and APs are the add path

   Add forms plus /systems are the product. Cobus house typing stays on Needs you / first-building. Harborline stays compiled. Does not wipe PCs.

   • ●plant-manual-add is checked off. No invented Cobus cameras or street.
   • plant
   • systems

9. this deploy

   Collector PoE and L2 land on Switches

   A shop collector push now paints used PoE ports, L2 (MAC, hostname, VLAN, neighbor), and watts onto Systems / scan / Switches. Watts stay Unknown unless the push sent a number. Harborline stays the compiled demo. Instant On is never scraped.

   • ●port.poe from POST /api/collector/ingest overlays the switch faceplate and the used-PoE count. A boolean is not a watt reading.
   • ●UniFi official pull still wins when both exist. Merge-add only. Password hashes untouched.
   • ●network-device-auto-add is checked off. Instant On never. Plesk never scrapes the house LAN.
   • collector
   • switches
   • poe
   • plant

Saturday, September 19, 2026

1. this deploy

   UniFi official API pull reads device detail, not list tags

   Test pull on Operator → Integrations now GETs each adopted device so switch ports, PoE state, and AP radios come from the official Network API device object. The list endpoint only returns capability tags. Classic Network 8.1.113 still uses the LAN PC Agent. Harborline stays compiled.

   • ●LIST interfaces: ["ports"] is not a port table. GET /devices/{id} expands interfaces.ports and interfaces.radios.
   • ●Guest clients stay off the File list. Default / WAN / console hosts stay off the plant.
   • ●unifi-controller-pull is checked off. Instant On never. PoE/L2 collector overlay stays on network-device-auto-add. Password hashes untouched.
   • unifi
   • integrations
   • plant

2. this deploy

   PC Agent posts SMART detail, Defender, and uptime

   The 15-minute HTTPS-out inventory now includes reallocated sectors, last Windows Update install date, missing critical KBs, Defender state, and uptime. Host Health and the Computers chip already knew how to show those fields; they were Unknown until this package. Harborline demo rows stay compiled — no invented SMART.

   • ●Package 2026.09.19.1 splices Get-LanternPcHealth into the push. Auto-update via /api/computers/agent/version, or re-download the EXE from Computers.
   • ●Fast 5-minute check-ins stay quiet so a partial push does not wipe a full reading. A field Windows will not answer still reads Unknown.
   • ●computers-tab and pc-health are checked off. Remote desktop is still not this phase. Password hashes untouched.
   • computers
   • msp
   • health
   • agent

Friday, September 18, 2026

1. this release

   Known cameras file as cameras, and you can name them

   LAN scan and a UniFi pull read Hikvision, Dahua, Axis, Uniview, Hanwha, Reolink, Amcrest, and UniFi Protect/UVC so those hosts land on Cameras instead of Other. Techs type a shop name (Lobby cam) on Move, Set, and the plant lists. Hostname and MAC stay the scan identity.

   • ●Hardcoded OUI + hostname/model map — no shop-editable vendor DB, no ONVIF, no LDAP bind, no switch scrape.
   • ●Find, Cameras, Air, Printers, and Computers show the shop name. Controller hostname stays hidden on UniFi Set.
   • ●Unknown MACs still sit on Others until you Move them or a pull names the model. UniFi official API overlay is not 100%.
   • plant
   • cameras
   • lan-scan

2. this deploy

   Set all files UniFi pull onto the plant lists

   Set all on Integrations now merge-adds the last UniFi pull onto Switches, Air, Cameras, and Computers using controller hostnames. WAN, Default, and public IPs stay off the plant. Unknown LAN-scan Others with the same MAC move out of Others.

   • ●One write. No invented SW-MDF. Private IPs only. Harborline stays the compiled demo.
   • ●PoE/L2 collector overlay is still open. Password hashes untouched.
   • unifi
   • integrations
   • plant

3. this deploy

   Air's switch card follows the amber rule too

   The switch on Air was painting every live port amber because a PoE switch reports PoE enabled on all of its copper ports. Amber now waits for watts, so the card shows the mix it should: powered ports amber, live ports with no draw green, empty ports black.

   • ●PoE enabled on a port is capability, not power. Only watts on a live port light the bolt.
   • ●Same fix on the switch page and the closet cabinet, since they share the plate.
   • switches
   • poe
   • unifi

4. this deploy

   The port lists follow the same amber rule as the plate

   The last orange accents around switch ports went neutral. Picking a port row on a switch highlights it in white now, and in a closet the PoE pill only lights up on a port that is actually pushing watts.

   • ●The selected port row on a switch is a neutral highlight instead of an orange one.
   • ●Closet port list: the PoE pill is amber only when that port is drawing watts, and the Active / PoE / All buttons no longer use the orange accent.
   • switches
   • closet
   • poe

5. this deploy

   The switch on the plant now matches the controller

   Switches and Air were reading two different copies of the same box — Air had the real 16-port PoE switch while the closet still showed the 24 ports someone typed before the controller was connected. There is one switch now, and it is the one the controller reports.

   • ●A switch the controller knows takes its real make and model, its port count, its PoE numbers, and its management address from the pull. 16 copper + 2 SFP instead of a typed 24.
   • ●The port list shows what is plugged into each port, from the controller: the AP, the PC, the camera, with its IP and MAC.
   • ●The closet, rack slot, and the name you gave the switch stay yours. So does any port you have already labelled or patched.
   • ●A shop with no controller is unchanged — your typed port count, your picked faceplate, and Unknown where nothing has reported.
   • ●Plant rows carry the private management address only. A public WAN address is dropped instead of filed on a switch.
   • switch
   • unifi
   • plant

6. this deploy

   A live SFP uplink is green, and amber now means PoE watts and nothing else

   SFP cages follow the same rule as copper: green when the link is up, plain black when it is not. Every other orange accent on the faceplate — the picked port ring, the hover card edge, the PoE chip when nothing is drawing — went neutral, so amber on a switch always means that port is pushing watts.

   • ●A live SFP uplink reads the same green as an active copper port. A dark cage is a cage with no link.
   • ●The PoE chip in the header only lights amber while the switch is actually handing out watts.
   • ●Clicking a port on the switch page rings it in white instead of orange. SFP still never shows a bolt or a watt figure.
   • switches
   • poe
   • unifi

7. this deploy

   Switches lists the plate, not just the name

   Open Switches and every chassis on the plant draws the same faceplate Air does — 16 copper plus its 2 SFP cages on a 16-port switch, with the PoE chip in the header. Tap a plate to open that switch.

   • ●Same shared plate as Air and the closet cabinet, so a port reads the same on every page.
   • ●The rows and their Floor / Status / Search filters are unchanged, under the plates.
   • ●A switch you typed in keeps the model you picked. One with no model and no port count gets no plate at all instead of the wrong SKU.
   • ●Watts and link speed still come only from your own last controller pull. No pull means Unknown, and the Harborline demo never borrows a real shop's numbers.
   • switch
   • plant

8. this deploy

   Switch ports read amber, green, or black at a glance

   A port is only amber when it is actually pushing PoE watts. A live port with no power now reads green, and a port with nothing plugged into it is a plain black jack instead of a lit one.

   • ●Amber bolt = up and drawing watts. Green jack = up, no PoE draw. Plain black jack = down.
   • ●PoE-capable ports still carry the bolt, but it stays neutral until watts are flowing, so amber never means anything else.
   • ●A down port no longer claims 0 W. It reads PoE port · no link. A real 0 W still shows only when the controller reported zero on a live port.
   • ●Same three colors on the Air card, the switch page, and the MDF cabinet, and they hold up on a phone.
   • switches
   • poe
   • unifi

Thursday, September 17, 2026

1. this deploy

   Computer Agent downloads as an EXE

   Company admin Download agent saves lantern-pc-agent-*.exe with the Lantern mark. Double-click; Windows asks for administrator. Same scheduled task and HTTPS-out check-in. No unzip.

   • ●GET /api/computers/agent returns a Windows EXE. The shop token is baked into a real company download. Harborline still has no token.
   • ●The EXE uses the existing installer: %ProgramData%\Lantern\pc-agent, lantern-icon.ico from public/lantern-icon.png, tray, 15-minute task, POST /api/computers/agent.
   • ●Did not replace public/lantern-icon.png. OG, rail, and plant lists unchanged.
   • computers
   • msp
   • launch

2. this deploy

   Computer Agent uses the Lantern mark

   The Windows zip carries lantern-icon.ico (the live lantern-icon.png wrapped as ICO). Installer shortcuts, folder branding, and the tray use that mark. The PNG, OG, and rail are unchanged.

   • ●Zip includes lantern-icon.ico built from public/lantern-icon.png. That PNG is not replaced.
   • ●Install copies the ICO into %ProgramData%\Lantern\pc-agent, Start Menu / Desktop / Startup shortcuts, and the tray NotifyIcon.
   • ●Same HTTPS-out check-in. No New ticket on the tray. SMART is still pc-health.
   • computers
   • msp
   • brand

3. this deploy

   Windows Computer Agent check-in

   Company admin downloads a Windows zip from Plant → Computers or Account. A real shop PC POSTs HTTPS out to lantern.enlightenstudios.us. The row lands on Plant → Computers. Harborline demo rows stay compiled. SMART is not this card.

   • ●Download: GET /api/computers/agent (company admin). One org token in the zip; Lantern stores the hash.
   • ●Push: POST /api/computers/agent Bearer token. Hostname, OS, serial, last seen, building name if known.
   • ●Harborline zip has no token. A new org/building works the same way. No fake SMART. No L3. No invented street.
   • computers
   • msp
   • launch

Friday, September 18, 2026

1. this deploy

   Computers tells you which PC needs a look

   Host information has a Health block and the Computers list shows a small chip on any PC with a real warning — a drive saying predict-fail, low life or free space, a restart Windows is holding, updates past 45 days, Defender off, or a month of uptime. Fields the agent has not sent read Unknown instead of a guess.

   • ●Open Computers, click a hostname: Health sits above Identity. Orange is watch, red is attention, grey Unknown means that PC has not posted the field yet.
   • ●Never an invented SMART verdict. RMM CSV rows still read Not this card.
   • ●Each warning files one report per PC and kind on the ops board (/admin/health) and clears as a repair on the next clean check-in — no duplicate spam.
   • ●Still open: the Windows agent has to start posting reallocated sectors, last update date, missing critical KBs, Defender state, and uptime. PowerShell is staged for that package bump.
   • computers
   • msp
   • health

2. this deploy

   Switch page lists every port: device, PoE, VLAN, spare

   Open a switch and the faceplate now has a real port table under it — port and alias, up or down, link speed, PoE watts and mode, VLAN, the device on the jack, and whether it is an uplink, a downlink switch, or an access port. Click a row to light that jack on the faceplate; click a jack to jump to the row. The header counts used vs spare and the PoE headroom left in the budget.

   • ●Devices come from the last controller pull — the port MAC is matched to that client for its hostname and IP. On a typed plant the jack, room, and drop the shop keyed show instead, marked Typed.
   • ●Anything the controller did not report reads Unknown. Lantern does not invent a watt, a speed, or a VLAN.
   • ●A switch with no controller can still be walked: pick the faceplate model on the switch page and type a device per port. The picked faceplate now sticks — typing a camera onto port 7 no longer repaints the chassis as a generic plate.
   • ●PoE bolt, per-port hover, and the lit-port animation are unchanged. Password hashes untouched.
   • switches
   • poe
   • unifi

3. this deploy

   A lightning bolt on every PoE port

   The switch faceplate now marks each PoE port with its own bolt, so you can glance at the plate and see which jacks can power a camera or an AP. Hover or tap a port for that port's watts. The big total that sat on top of the ports moved up to the header.

   • ●Bolt lit = that port is drawing power right now. Bolt dim = PoE port with nothing on it. No bolt = not a PoE port, and SFP cages never get one.
   • ●Hover or tap a port for up/down, that port's watts, link speed, and the device. If the controller sent no watts for a port it says watts unknown on this pull — 0 W only when the controller really said zero.
   • ●Total draw and budget now ride in a chip next to 16 copper + 2 SFP. The budget is the switch's published spec (150 W on a a UniFi PoE switch); if the controller reports a different number, the chip says so instead of printing it as the spec.
   • ●Ports are focusable, so the same facts come up on a phone. Password hashes untouched.
   • switches
   • unifi
   • poe

4. this release

   Every plant row says where it came from

   Devices, ports, and Find hits now carry a small chip: typed, CSV import, a pull off the shop box, a LAN scan, or a Fluke test — with the clock it landed. A pull that has aged out reads stale instead of pretending to be live.

   • ●Chips on Phones, Cameras, Air, Find results, and every closet chassis.
   • ●Filter a list or Find down to one source — typed, CSV, pull, scan, or Unknown.
   • ●A field nobody gave us reads Unknown. We do not guess a VLAN, PoE, speed, or a length.
   • ●Still no LDAP bind and no switch scrape. A pull is the shop box reporting in over HTTPS, never this site reaching into your gear.
   • plant
   • honesty

5. this deploy

   Integrations is Connected and Available, not one long scroll

   Operator → Integrations now opens on one compact UniFi row — Connected, controller, last pull clock — with an Edit button for the key and the local controller login. The pulled device list moved behind its own Devices and clients disclosure, so 30-plus rows no longer bury the settings.

   • ●Set all still sits at the top of that list, and every row still has Set. Nothing was renamed.
   • ●Vendor cards are uniform now: what each one pulls, what Lantern needs pasted, where the rows land. Meraki saves a dashboard key today and says Key saved — not Connected. Omada, Aruba, Mist, MikroTik, and Protect read Later until Lantern really pulls them.
   • ●Secrets are still write-only and never shown again. A demo company still cannot see the operator snapshot. Password hashes untouched.
   • unifi
   • integrations
   • admin

6. this deploy

   LAN scan helper no longer flashes a window

   The optional LAN scan helper (the Others-page download that inventories a shop LAN over ARP/ping) ran its background scan by launching powershell.exe directly, so a black console could flash and steal focus. Package 2026.09.18.2 runs the scan through a windowless host, the same way the PC Agent already does.

   • ●The scheduled task LanternLanScan is Hidden=true and its action is wscript → LanternPcHidden.exe (CREATE_NO_WINDOW), not powershell.exe. Scan diagnostics go to a log file, not the screen.
   • ●Re-download the LAN scan EXE and run it once. It deletes the old bare-powershell task and re-registers the hidden one. Password hashes untouched.
   • lan-scan
   • computers
   • agent

7. this release

   Tray tickets say what is wrong, and the shop board shows where they came from

   A ticket filed from the Lantern tray now carries the sentence the person at the PC typed, and it lands on Tickets with a from PC badge so a tech can tell it from one opened off a floor pin.

   • ●New ticket asks what is wrong before it sends. 500 characters, and the first words become the ticket title.
   • ●The tray ticket endpoint caps the body and limits one PC to 12 tickets an hour, so a stuck tray cannot flood the board.
   • ●Tickets keeps the same three columns. Only the badge is new.
   • ●The tray prompt itself turns on with the next PC agent version bump. Password hashes untouched.
   • computers
   • tickets

8. this release

   Putting a device on the plant is Set

   One word for the same job. Lens, Floors, Find, Team, Phones, and the how-tos all say Set a device now, so the button you press matches the sentence that told you to press it.

   • ●Lens: the button is Set this device (Setting… while it saves).
   • ●Floors, Find, Team, Phones, and the shop how-tos say set a PC, phone, or camera — not file.
   • ●Package ledes and invite copy: techs set equipment and drops.
   • ●Trouble tickets and the Enlighten board still say File. A ticket is filed; a device is set.
   • copy
   • lens
   • plant

9. this deploy

   Integrations uses Set all, not File all

   The UniFi devices list on Integrations now has Set all at the top. Each row is Set. Same plant write — just the control name.

   • ●Pending copy is Setting. Password hashes untouched.
   • unifi
   • integrations

10. this deploy

    Switch faceplates show PoE watts on a lightning bolt

    The a UniFi PoE switch (and other PoE catalog plates) now has a bolt in the middle of the copper ports for used / budget watts from the last pull. Hover a port for that drop’s watts, link speed, up or down, and the device name. The old “10 up / 18 / 150 W” line mixed port count with the budget — it now reads 10 up · 16 copper + 2 SFP.

    • ●Bolt sits on the 16-port copper bank. Hover it for the budget and which ports are drawing. Watts come from controller poe_power — nothing invented.
    • ●Click the card still opens /switches. Lit-port animation unchanged. Password hashes untouched.
    • switches
    • unifi
    • poe

11. this deploy

    Public changelog no longer lists the house LAN

    What’s new and the public launch board no longer print the operator UniFi controller address, in-wall AP model, or operator PC hostname. Harborline demo isolation is a separate tenant fix.

    • ●Public /changelog redacts those strings even when an older live log row still has them.
    • ●Public /launch no longer serializes launch-card notes (those held the controller fact). Password hashes untouched.
    • unifi
    • changelog
    • privacy

12. this deploy

    PC Agent install no longer flashes a black PowerShell window

    The 15-minute task and Startup shortcut still launched powershell.exe, so a black console with red WMI lines could pop even after 18.7’s hidden wscript wrapper. Package 2026.09.18.9 runs inventory through LanternPcHidden.exe (CREATE_NO_WINDOW). Re-download the EXE and run it once.

    • ●Scheduled tasks stay Hidden=true / highest, and the task image is wscript → LanternPcHidden.exe, not powershell.exe. Tray Push and auto-update use the same host. QuickFix / temp / UniFi errors go to a log, not the console.
    • ●Did not restyle Air or switches. Did not change UniFi tenant isolation. Password hashes untouched.
    • computers
    • msp
    • agent

13. this deploy

    Harborline demo does not show another shop’s APs

    UniFi last pull stays on the company that owns Integrations and the PC agent token. Harborline demo seats keep the Tacoma sample plant — not Cobus UniFi APs, switch faceplates, or controller cards.

    • ●Air / Switches / File all read that company’s snapshot only. A demo tenant cannot inherit the operator last pull.
    • ●Enlighten / Cobus still sees the house UniFi pull. Password hashes untouched.
    • unifi
    • plant
    • harborline

14. this deploy

    Air AP pages plus UniFi 16-port PoE faceplates

    Air is a compact AP list that opens radios, clients, airtime, IP, and MAC. The switch draws like a a UniFi PoE switch: clip-art, live ports, PoE, and the device on each port from the controller. Port/PoE counts come from the switch, not the first AP.

    • ●Manual add browses UniFi PoE SKUs and generic 8/16/24/48. faceplateId persists. UniFi LAN ingest maps model + port_table.
    • ●Did not Test-pull cloud or port-forward. Password hashes untouched.
    • unifi
    • air
    • switches

15. this deploy

    PC Agent can read Ryzen CPU temp without ACPI

    the operator test PC’s Ryzen 3700X had no ACPI thermal zone, so CPU stayed Unknown / no ACPI even when LibreHardwareMonitor or extra CIM sensors exist. Package 2026.09.18.8 asks those user-mode sources. No invented numbers.

    • ●The 15-minute task and auto-update pick up 18.8. Refresh Computers after the next push. Hidden inventory window from 18.7 is still hidden.
    • ●Did not restyle Air or switches. Did not Test-pull UniFi cloud. Password hashes untouched.
    • computers
    • msp
    • agent

16. this deploy

    PC Agent no longer pops a console over a game

    The 15-minute inventory, tray Push, auto-update, UniFi LAN pull, and install PowerShell were flashing a window and stealing focus. Package 2026.09.18.7 runs those jobs fully hidden.

    • ●Scheduled tasks use Hidden=true, SYSTEM where that was already the design, and a wscript helper so powershell.exe never paints a console. Auto-update via /api/computers/agent/version.
    • ●Did not restyle Air or switches. Did not Test-pull UniFi cloud. Password hashes untouched.
    • computers
    • msp
    • agent

17. this deploy

    Lens overlay follows this company’s plant

    Lens closet picker and HUD read catalogForRequest. Typed or walk-CSV jacks paint overlay even when the switch port is still spare. Harborline 214-A stays the demo walk. Empty plant tells you to type the MDF or load a CSV.

    • ●lens-org-plant — company plant overlay, not Harborline fiction on a real building. Collector MAC / VLAN / PoE / neighbor still show when the shop pushed them.
    • ●Add-device floor is the closet’s plant floor, not Harborline 1-or-2. Empty overlay HUD tells you to load a walk CSV.
    • ●A shop walk CSV on a real street is first-building. Password hashes untouched.
    • lens
    • plant
    • launch

18. this deploy

    Air shows every UniFi AP plus the switch ports

    The floor/Air page listed one AP and stuffed LAN-scan hostnames into SCAN LAN. The controller pull already had APs and a PoE switch. Air now cards each AP. Switch ports and PoE come from the switch, not an in-wall AP. Walk samples stay typed.

    • ●Ports 3 / PoE 0 was the first device in the JSON (an in-wall AP), not a PoE audit. Next LAN UniFi pull stores the switch port table.
    • ●SCAN LAN is a count plus Computers — not OTHER-* wrapping as jack labels. Password hashes untouched.
    • unifi
    • air
    • floors

19. this deploy

    PC Agent install no longer prints red Windows Update sort errors

    Install still POSTs inventory, but sorting installed KBs used DateTime.TryParse the wrong way and painted red Sort-Object lines. Package 2026.09.18.6 parses those dates safely. Push still works.

    • ●The 15-minute task and auto-update pick up 18.6. the operator test PC already posted on 18.5 — refresh Computers. Exit the tray only if it is stuck on 18.5.
    • ●Did not restyle the frozen Computers list. Password hashes untouched.
    • computers
    • msp
    • agent

20. this deploy

    CPU/GPU temp notes use a plain slash

    the operator test PC’s host card showed Unknown · no ACPI and 74 C · AMD ADL because the agent posted a UTF-8 middle-dot that Windows-1252 turned into mojibake. The host page now prints Unknown / no ACPI and 74 C / AMD ADL from the notes already in the live store. GPU 74 C is still AMD ADL. CPU stays Unknown when there is no ACPI. No invented Ryzen numbers.

    • ●Refresh Computers → the operator test PC. No new EXE required for the garbled dots to clear.
    • ●New inventory notes use ASCII / so a later push cannot reintroduce ·. Password hashes untouched.
    • computers
    • msp

21. this deploy

    Tray Push inventory no longer dies on a missing file

    Right-click Push inventory showed a WinForms box: the system cannot find the file specified. The tray’s powershell.exe path used a JavaScript \v escape (vertical tab), so Start-Process never launched the script. Package 2026.09.18.5 finds powershell.exe and still POSTs inventory if nvidia-smi is missing.

    • ●Download agent 2026.09.18.5 from Computers and run it so the tray button works tonight. The 15-minute scheduled task already calls powershell.exe -File and can still POST without a new EXE.
    • ●Missing nvidia-smi / ADL does not abort the HTTPS-out inventory POST. Password hashes untouched.
    • computers
    • msp
    • agent

22. this deploy

    the operator test PC temps: real C or Unknown · no ACPI

    the operator test PC was Online on 2026.09.18.3 but CPU/GPU temp stayed Unknown. Live store had the string Unknown from the last POST — ingest was fine. Package 2026.09.18.4 copies temps before the CPU name, finds nvidia-smi in Sysnative DriverStore, and tries AMD ADL. A Ryzen 3700X with no ACPI posts Unknown · no ACPI, not a blank Unknown.

    • ●Re-download the PC Agent from Computers (package 2026.09.18.4) or wait for the six-hour auto-update, then tray → Push inventory. The 18.3 EXE cannot pick up this script.
    • ●Did not invent Harborline sample temps on Cobus PCs. No WinRing0. Password hashes untouched.
    • computers
    • msp
    • agent

23. this deploy

    PC Online and temps: tokens and user-session sensors

    Downloading the EXE had revoked every other PC token, so the operator test PC and the Win10 box posted 401 and went Offline. Those hashes are live again. Temps need package 2026.09.18.3 (Sysnative nvidia-smi, ACPI WMI, tray Fast push). Unknown only when Windows has no sensor.

    • ●Refresh Computers. TORCH / the operator test PC / DESKTOP should come Online on the next check-in without a new EXE.
    • ●Temps: re-download 2026.09.18.3 on each PC then tray Push inventory. Exit the extra tray icon.
    • ●Did not invent Harborline numbers on a shop PC. UniFi LAN pull unchanged.
    • computers
    • msp
    • agent

24. this deploy

    PC Agent push no longer dies on 401

    Download agent used to revoke every other PC token, so Push inventory showed a .NET 401 and never stored CPU temp. Multiple tokens stay live. Inventory POST is separate from UniFi. Temps stick on a good check-in.

    • ●PCs that already popped the purple 401 box: Download agent once from Computers and run the installer (package 2026.09.18.3). That PC gets a working token; other PCs keep theirs.
    • ●After that, tray → Push inventory is enough. CPU/GPU temps are not UniFi. Offline last-seen uses UTC vs local without painting a live PC dead.
    • ●Did not restyle frozen Computers list, OG, or the rail. Password hashes untouched.
    • computers
    • msp
    • agent

25. this deploy

    One Windows tray after reboot

    Two Lantern PC Agent icons in the Windows tray was two Startup shortcuts, not two UniFi. Install keeps the all-users StartUp shortcut and deletes the current-user Startup link. The tray takes a Global mutex and exits if one is already running.

    • ●Re-download the PC Agent EXE from Computers (package 2026.09.18.2), or wait for the six-hour auto-update, then run install so the leftover user Startup .lnk is removed.
    • ●Tonight: right-click one of the two tray icons → Exit. After the next reboot there should be one.
    • ●Did not restyle frozen Computers list, OG, or the rail. Password hashes untouched.
    • computers
    • msp
    • agent

26. this deploy

    UniFi LAN pull rides the PC Agent

    Classic Network 8.1.113 cannot list adopted switches from api.ui.com. Save the local UniFi user on Integrations. A house PC Agent pulls HTTPS-out to the house UniFi controller and posts the File list.

    • ●Do not Test pull the cloud key again until the snapshot has devices.
    • ●Tray Push inventory, or wait ~15 minutes. Secret is never shown again. Do not email the UniFi password.
    • ●File still uses controller names. Not a house collector container. Not Harborline.
    • unifi
    • admin
    • computers

Thursday, September 17, 2026

1. this deploy

   UniFi File uses controller names, not the console WAN

   Test pull skips the Site Manager console host (example-domain.ui.com / public WAN). Adopted switches and APs keep controller names. Air overlay is the same for other vendor APIs.

   • ●File a UniFi switch as its hostname, not SW-MDF. Manufacturer is Ubiquiti plus the model.
   • ●example-domain.ui.com + 108.x WAN is the console host, not a plant device.
   • ●Air overlay is shared: UniFi live; Meraki, Omada, Aruba, Mist, MikroTik next on the same page.
   • unifi
   • admin
   • plant

2. this deploy

   Plesk is the website, not the house NAS

   lantern.enlightenstudios.us is Enlighten's webserver. ES-ss1 is the Cobus NAS on Computers (the house NAS). They are not the same box. UniFi stays the house UniFi controller.

   • ●Do not fold a Plesk hostname into ES-ss1. House NAS aliases are ES-ss1 only.
   • ●Public WAN IPs do not belong on the NAS row. UniFi stays the house UniFi controller.
   • ●UniFi is official Integration API. Password hashes untouched.
   • computers
   • plant
   • launch

3. this deploy

   Vendor APIs on Account — UniFi first

   Anyone on UniFi, Meraki, or Juniper should connect with an API key. Operator → Integrations (above Tools) is the Enlighten UniFi paste. Account also takes shop vendor keys. UniFi is Doing, not done until a real pull. Meraki and Juniper are Need to do.

   • ●unifi-controller-pull — official Integration API, key in Operator → Integrations. Classic the house UniFi controller is a LAN fact. Windows HTTPS-out if the key is LAN-only.
   • ●meraki-controller-pull — shop Meraki key, HTTPS to api.meraki.com. Same snapshot. After UniFi or parallel notes.
   • ●juniper-controller-pull — Mist or Junos REST after UniFi/Meraki. Not a duplicate of l3-vendor-adapters. Omada/L2 later.
   • unifi
   • meraki
   • juniper
   • launch
   • account

4. this deploy

   ES-ss1 NAS lives on Computers

   The ES-ss1 NAS is a computer on the Cobus plant. LAN-scan files NAS hostnames onto Computers, not Others. lantern.enlightenstudios.us is Enlighten's webserver — not the house NAS.

   • ●Hostname ES-ss1 / es-ss1 / ES-SS1 classify as a computer. Linux NAS is valid on this list.
   • ●Typed overlay on Cobus Household until scan/agent fills a private LAN IP. UniFi is the house UniFi controller — not the NAS IP.
   • ●Computers list is enough. UniFi stays official Integration API.
   • computers
   • plant
   • launch

5. this deploy

   UniFi pull lists devices and clients you can file

   The shop Network site (ES), not hidden Default / super rows. File each row, or File all with the suggested category, onto this location.

   • ●Pull keeps Enlighten Studios. /v1/sites/{id}/devices plus console proxy. Guest / visitor SSIDs skipped.
   • ●Saved key Test pull does not ask you to paste again. Secret is never shown again.
   • ●UniFi is not done until those rows land on the plant. Not Harborline. Do not email the key.
   • unifi
   • admin
   • plant

6. this deploy

   Integrations is on the operator rail, above Tools

   Sign in as mike@ → Integrations (above Tools). Paste the UniFi Network Integration API key and Test pull. Self-hosted Network 8.1.113 has no local key screen — mint at unifi.ui.com/api. Meraki, Protect, and other vendors wait on that page.

   • ●Rail + admin tabs: Integrations, one word, above Tools. UniFi form is live. Secret is never shown again.
   • ●Coming next on the same page: Meraki, Omada, Juniper, Protect, other cameras. PC Agent / LAN scan stay HTTPS-out from Computers.
   • ●lantern.enlightenstudios.us cannot reach the house UniFi controller. Test pull uses api.ui.com. UniFi is not done until switches and APs land.
   • unifi
   • admin
   • launch

7. this deploy

   UniFi log rows rewritten: official Integration API

   Same ids as the older live rows. Official UniFi Integration API key on Account. Plesk is the Enlighten backend on ES-ss1 (Computers), not the house UniFi controller. LAN fact stays the house UniFi controller. UniFi is not done until switches and APs land.

   • ●Paste the Integration API key (X-API-KEY) from the console or Site Manager → Integrations.
   • ●lantern.enlightenstudios.us cannot reach RFC1918. Site Manager / api.ui.com, or a Windows HTTPS-out agent if the key is LAN-only.
   • ●Did not restyle frozen OG, rail, or plant lists. Password hashes untouched.
   • unifi
   • changelog
   • launch

8. this deploy

   Admin APIs — paste a UniFi Integration key

   Enlighten admin only: /admin/integrations. Official UniFi Network Integration API (X-API-KEY). Test pull hits api.ui.com. RFC1918 house controller is documented. Plesk is the Enlighten backend, not the house. Password hashes untouched.

   • ●Sign in as mike@ → Admin → Integrations (above Tools). Paste the Integration API key. Optional controller URL defaults to the house UniFi controller.
   • ●Test pull shows device / PoE / port counts. The secret is never logged or shown again.
   • ●Lantern’s server cannot reach RFC1918. Local-only keys need a Windows HTTPS-out agent. Not a Harborline controller.
   • unifi
   • admin
   • launch

9. this deploy

   UniFi is official Integration API — shops do not run a collector

   Official UniFi Integration API. House controller the house UniFi controller. Paste the key in Operator → Integrations (above Tools). The website cannot reach RFC1918.

   • ●unifi-controller-pull stays Doing. Not a local cookie username. Instant On never.
   • ●Paste the UniFi Integration API key in Operator → Integrations (X-API-KEY).
   • ●Do not email the UniFi password.
   • unifi
   • launch

10. this deploy

    Printers rail, Others scan + Move, LAN-scan OUI

    Printers is under Computers at /computers/printers. Systems is off the rail (bookmark stays). Others can scan and Move a host into the right category. LAN scan OUI files printers vs PCs. UniFi overlay uses the official API key. Plesk is the backend, not the house. UniFi is not done.

    • ●Rail: Computers, Smart, Printers, Others. No wrapping slogans. Frozen Computers table unchanged.
    • ●Move on Others files printer/camera/AP/switch/smart/PC. Scan agent download is on Others.
    • ●OUI guess until UniFi overlay via official API key. Plesk is backend, not house. Do not email the UniFi password.
    • ●-1p1n712 IP: not a hyphen-hostname bug. 17.11 skips 169.254/multicast and picks the fastest Up NIC. Empty IP is wait-for-push (or old agent). Temps need 2026.09.17.11 — tray Push inventory posts now; waiting 15 min on an older EXE will not get temps. Did not bump the EXE.
    • plant
    • printers
    • computers
    • launch

11. this deploy

    UniFi controller is classic the house UniFi controller

    Mike’s UniFi is classic local API on the house LAN at the house UniFi controller — not UniFi OS on :443. Pull is the official Integration API key on Account. Plesk is the Enlighten backend, not the house. UniFi is not done.

    • ●unifi-controller-pull stays Doing. Done: HTTPS-out shape, no inbound, not fake-live, LAN IP, classic :8443.
    • ●Paste the official UniFi Integration API key (X-API-KEY). Not a ui.com cookie login. Instant On never.
    • ●lantern.enlightenstudios.us cannot reach RFC1918. Site Manager / api.ui.com, or a Windows HTTPS-out agent if the key is LAN-only. Do not email the UniFi password.
    • unifi
    • launch

12. this deploy

    Add your systems, Others rail, CPU/GPU temp EXE

    Pick Cobus next to LANTERN, then Systems to type switch, camera, and AP. Computers is PCs only. Smart and Others sit under Computers on the rail. Re-download PC Agent 2026.09.17.11 so CPU and GPU temps post — SSD life already works.

    • ●Locations → Systems. Harborline stays the compiled demo.
    • ●Computers stays agent PCs. Smart is TVs/hubs. Others is unclassified LAN-scan plus ARP.
    • ●PC Agent 2026.09.17.11: thermal-zone CIM (high-precision Kelvin) first, nvidia-smi in DriverStore. No kernel temp driver.
    • plant
    • computers
    • launch

13. this deploy

    Open ticket, In Progress names, IP on plant lists

    Tickets say Open ticket. Take it puts In Progress and the tech’s first and last name. Click the name to filter their tickets. Computers, Phones, Cameras, and Switches lists show IP. My Locations vs Customer Locations is on the board for later.

    • ●Take it stamps the worker. Park clears them. /tickets?worker= filters.
    • ●Computers IP column. Switches show management IP. Phones/Cameras already had IP.
    • ●operator-locations-split is Need to do — not tonight.
    • tickets
    • plant
    • launch

14. this deploy

    Vision primary IP is the 10G Up NIC

    The onboard 1G is unplugged. Primary IP is the fastest Up adapter (10 Gbps → a house NIC), not multicast and not a leftover on the stock NIC. Re-download 2026.09.17.10.

    • ●Both physical NICs still list. Down means unplugged.
    • ●Primary IP + MAC + gateway follow the fastest Up link.
    • computers
    • pc-agent

15. this deploy

    Host page lists every NIC, including Down 10G

    Computers host information posts every physical adapter. A down 10G card still shows as Down. Primary IP skips multicast 224.0.0.22. Re-download PC Agent 2026.09.17.9.

    • ●Get-NetAdapter -Physical — Up and Down. Speed, IP, MAC per NIC.
    • ●Host Network card lists each adapter. Down stays listed. Primary IP is the Up RFC1918 address.
    • ●UniFi is official Integration API. Shops do not run a collector on the house.
    • ●ISP modems (AT&T / Spectrum / Comcast / TDS) stay Need to do — DHCP lease is not a UniFi-class inventory.
    • computers
    • pc-agent

16. this deploy

    UniFi: what Mike needs to send

    Account is the official UniFi Integration API key. Controller LAN fact: the house UniFi controller. Plesk is the Enlighten backend, not the house. No inbound scrape.

    • ●Paste the Integration API key in Operator → Integrations (console or Site Manager → Integrations, X-API-KEY).
    • ●If the key only talks to the LAN controller, Windows HTTPS-out agent — same family as LAN Scan EXE.
    • ●Do not port-forward UniFi. Do not paste the password in email.
    • unifi
    • launch

17. this deploy

    PC Agent 2026.09.17.8 — real LAN IP, SSD life, temps

    Host IP ignores multicast 224.0.0.22. SSD life reads Wear from each PhysicalDisk. CPU temp also asks Windows thermal-zone counters. GPU still nvidia-smi when NVIDIA is installed. Intel iGPU stays Unknown. Re-download the EXE.

    • ●IPv4 skips 224/239 multicast, 169.254, and loopback. Prefers 192.168 / 10 / 172.16.
    • ●Get-PhysicalDisk | Get-StorageReliabilityCounter plus MSFT_StorageReliabilityCounter for NVMe/SSD life.
    • ●Get-Counter Thermal Zone Information for CPU when ACPI is empty. No kernel temp driver.
    • ●Account UniFi connect is the official Integration API key. Plesk is the Enlighten backend, not a house bind.
    • computers
    • pc-agent
    • unifi

18. this deploy

    Computers shows last LAN scan check-in

    Next to Download scan agent: last POST time, host count, and errors. The OK window only means install finished. Hidden task LanternLanScan every 30 minutes. Frozen Computers table columns unchanged.

    • ●Sign in → Computers. Line under Download scan agent: last check-in, hosts, last POST ok or error.
    • ●No Scan now button. Wait up to 30 minutes, or on that PC Task Scheduler → LanternLanScan → Run.
    • plant
    • computers

19. this deploy

    Wake-up ten — honest live vs blocked on Mike

    Typed Cobus add, PC Agent Bypass/Hidden SYSTEM, PoE on Add switch, smart devices, LAN-scan EXE, collapsed Checked cards are live. UniFi is the official Integration API key until switches and APs land. Home tier is a client flag, no Stripe. Harborline is not his house.

    • ●Live: camera / switch / AP merge-add, PoE used ports/watts, /computers/smart, Floor One video hold + plus floor, Launch collapse.
    • ●PC Agent EXE stays ExecutionPolicy Bypass + WindowStyle Hidden SYSTEM. LAN scan is a second EXE HTTPS-out (Get-NetNeighbor RFC1918).
    • ●UniFi: official Integration API. Controller fact the house UniFi controller. Shops do not run a collector on the house. Instant On never.
    • ●Home tier: Enlighten client checkbox only. No Stripe SKU. Mapping still Need to do.
    • plant
    • launch
    • computers
    • unifi

20. this deploy

    Cobus add, typed PoE, smart devices, collapsed Launch, scan ingest

    Typed Cobus add stays live. PC Agent inventory/ticket/sensors stay live (EXE untouched). Add switch takes PoE. Smart devices under Computers. Launch checked cards collapse. Scan ingest categorizes cameras/switches/air. UniFi NAS and Home tier are notes, not blocked on a paid check.

    • ●Add a switch: used PoE ports, watts, budget on the form and Switches list.
    • ●/computers/smart for TVs and hubs. Frozen Computers table unchanged.
    • ●Inventory EXE ARP (Hidden SYSTEM, Bypass) is the unmanaged path. Optional second LAN-scan EXE. HTTPS-out from a house PC.
    • ●Floors: Floor One + plus, video hold (no plate from clip yet).
    • ●Checked Launch cards collapse. UniFi NAS waits on Mike’s box/token. Home tier notes — not blocked on a paid check.
    • plant
    • launch
    • computers

21. this deploy

    LAN scan agent — WiFiman-lite on one PC

    Second Windows EXE on Computers: Download scan agent. ARP + ping + OUI files devices into Switches, Cameras, Air, Computers, and phones. Merge-add. Not PC Agent. Not UniFi. Home tier is after this path, not a paid shop check. No Stripe.

    • ●Sign in → Computers → Download scan agent (not Download agent). SmartScreen Run anyway, Yes on UAC.
    • ●Hidden task LanternLanScan every 30 minutes. POST https://lantern.enlightenstudios.us/api/lan-scan/agent
    • ●Unknown MAC stays Other / smart until typed. Does not wipe PC Agent rows.
    • plant
    • computers
    • launch

22. this deploy

    Host page CPU/GPU temps, SMART, and NVMe life from the agent

    The Lantern PC Agent now asks Windows WMI/CIM for CPU temp, GPU temp, SMART, and NVMe wear on the HTTPS-out push. Host information stays Unknown only when those classes have no value. Re-download the EXE from Computers.

    • ●Inventory scheduled task runs as SYSTEM with WindowStyle Hidden and ExecutionPolicy Bypass so ACPI/SMART/Wear are not skipped.
    • ●CPU: MSAcpi_ThermalZoneTemperature, Win32_TemperatureProbe, thermal-zone counters. GPU: nvidia-smi plus NVIDIA/AMD WMI. No kernel temp driver.
    • ●SMART: FailurePredictStatus, StorageReliabilityCounter, PhysicalDisk HealthStatus, Win32_DiskDrive Status. NVMe life is 100 minus Wear. Harborline demo may still be sample.
    • ●Same EXE Open ticket form: issue + Low/Medium/High + Submit. Did not restyle frozen Computers/Phones/Cameras lists, OG, lockup, or the Enlighten footer.
    • computers
    • msp
    • agent

23. this deploy

    Cobus typed add is live — camera, switch, AP

    On Cobus: Add a camera, Add a switch, Add an AP. Merge-add. Host page and Brand under Tools stay done. UniFi, other L2, unmanaged scan, PoE watts, floor video, Home tier, and Launch collapse stay Need to do.

    • ●plant-manual-add is done. Pick Cobus next to LANTERN. Does not wipe PCs.
    • ●Need to do: UniFi HTTPS-out, Instant On / other L2, unmanaged LAN scan, PoE watts, Floor One video, Home tier, collapse Checked cards.
    • ●Did not fake a home UniFi pull. Official Integration API key on Admin → APIs. House controller is the house UniFi controller.
    • plant
    • cameras
    • switches
    • launch

24. this deploy

    Add cameras, switches, and APs on Cobus; Switches sits above Air

    Pick Cobus next to LANTERN. Cameras, Switches, and Air have Add forms that merge onto the plant. Host page stays labeled cards. UniFi, LAN scan, video floors, and Home tier are Need to do — not fake-live.

    • ●Switches is on the IT rail above Air. Electric Pro stays uncluttered.
    • ●Add a camera / Add a switch / Add an AP merge-add. Does not wipe PCs already on the building.
    • ●Need to do: UniFi HTTPS-out, unmanaged LAN scan, PoE watts, video floor upload, Home tier.
    • plant
    • cameras
    • switches
    • launch

25. this deploy

    PC Agent installer runs when PowerShell is Restricted; inventory stays hidden

    Garage install failed with “running scripts is disabled on this system,” and the first EXE popped a PowerShell window on every 15-minute check-in. Re-download lantern-pc-agent-*.exe. Install is one visible console. After that, inventory and auto-update run hidden.

    • ●Installer stub: powershell.exe -NoProfile -Sta -ExecutionPolicy Bypass -File Install-LanternPcAgent.ps1
    • ●LanternPcAgentInventory (15 min) and LanternPcAgentUpdate (6h) use -WindowStyle Hidden.
    • ●No encoded command. Password hashes untouched.
    • computers
    • ops

26. this deploy

    Host page is cards, not a spec dump

    Open a PC from Locations → Computers. The hostname stays the title. Status chips sit under it. Identity, Hardware, Disk, Network, Agent, and Updates are labeled cards. Missing fields stay Unknown.

    • ●Removed the paragraph that listed every field under the hostname.
    • ●Disk usage shows C: used / free / total with a meter when the agent posted volumes.
    • ●Did not restyle the frozen Computers list, Phones, Cameras, OG, or the rail.
    • computers
    • msp

27. this deploy

    Host page matches shop chrome; PC-agent cards checked

    /computers/[id] uses PageFrame, Locations kicker, panel-card, and Outfit. Last check-in shows CPU/memory usage, ethernet, C: used/free/total, NVMe life, and CPU/GPU temps. Missing stays Unknown. Launch board cards for those workstreams are checked with honest 100 — not a flat 50.

    • ●pc-host-page, pc-cpu-ram-nic, pc-disk-usage, pc-temps, pc-nvme-life, and pc-agent-autoupdate are done.
    • ●Harborline demo IPs, C: volumes, and NVMe percents stay compiled. Usage, MAC, gateway, DNS, and temps stay Unknown until the EXE posts.
    • ●Did not restyle frozen Computers/Phones/Cameras lists, OG, or the rail. Password hashes untouched.
    • computers
    • msp
    • launch

28. this deploy

    Host page shows NVMe/SSD percent life remaining

    The PC agent reads SSD/NVMe wear from WMI and stores percent life remaining next to disk usage and SMART on Host information. Unknown when Wear is empty — not a guessed number.

    • ●POST /api/computers/agent accepts lifeRemaining / wear. PowerShell uses Get-StorageReliabilityCounter Wear and Get-PhysicalDisk Wear.
    • ●Harborline demo hosts have compiled percents. Print server stays Unknown (no Wear). CSV stays Not this card.
    • ●Did not restyle the frozen Computers list, Phones, Cameras, OG, or the rail.
    • computers
    • msp
    • agent

29. this deploy

    Host page uses shop chrome; PC-agent cards get honest percents

    /computers/[id] matches the rest of Lantern: PageFrame, Locations kicker, panel-card, Outfit. Launch board cards for auto-update, CPU/RAM, disk usage, and NVMe life now carry honest percents — not a flat 50.

    • ●pc-host-page checked. Same last-check-in facts plus SMART and C: used / free / total.
    • ●pc-agent-autoupdate 25% — public GET /api/computers/agent?version=1. EXE does not self-update yet.
    • ●pc-cpu-ram-nic 40% — IP and CPU/RAM model on the host page. NIC adapter array still open.
    • ●pc-disk-usage 75% — host C: numbers, Harborline demo volumes, Win32_LogicalDisk in the push.
    • ●pc-nvme-life 15% — NVMe card says Unknown until Wear posts. No invented percent.
    • ●Did not restyle frozen Computers/Phones/Cameras lists, OG, or the rail.
    • computers
    • msp
    • launch

30. this deploy

    Click a PC for inventory; agents auto-update

    Hostname on Computers opens host detail: current settings, CPU, RAM, SMART, last check-in, and recently installed Windows KBs. A shop PC pulls a new Lantern agent HTTPS-out — no visit.

    • ●POST /api/computers/agent stores CPU, RAM, manufacturer/model, and Win32_QuickFixEngineering KBs.
    • ●GET /api/computers/agent/version is public. Bearer GET /api/computers/agent/update does not rotate the company token.
    • ●Did not restyle the frozen Computers list beyond the hostname link. No remote desktop. Password hashes, OG, and the rail stayed.
    • computers
    • msp
    • agent

31. this deploy

    Host page adds CPU/GPU temps; launch cards stay In Progress

    Open a PC from Locations → Computers. The host page lists last-check-in CPU and GPU temps when ACPI or nvidia-smi posted them. Unknown otherwise. No kernel temp driver. Auto-update, disk usage, and the host page stay Doing on the launch board.

    • ●CPU temp is the ACPI thermal zone when Windows exposes it — not a claimed CPU-die reading.
    • ●GPU temp is nvidia-smi when that tool is on the PC. Missing stays Unknown.
    • ●pc-host-page, pc-agent-autoupdate, pc-disk-usage, and pc-temps are In Progress on /admin/launch.
    • ●Did not restyle frozen Computers/Phones/Cameras lists, OG, or the rail. Password hashes untouched.
    • computers
    • msp
    • launch

32. this deploy

    Host page shows C: used, free, and total

    The PC agent POSTs Win32_LogicalDisk Size and FreeSpace on the same HTTPS-out push as SMART. Host information lists C: used, C: free, and C: total next to SMART. CSV stays Unknown until the EXE checks in.

    • ●Push-LanternPcInventory.ps1 reads DriveType=3 Size/FreeSpace. POST /api/computers/agent stores volumes.
    • ●Harborline demo hosts have compiled C: numbers. Frozen Computers list columns did not move.
    • ●Did not restyle Phones, Cameras, DeviceInventory, OG, or the rail.
    • computers
    • msp
    • agent

33. this deploy

    Host page shows last check-in CPU, memory, and NIC

    Open a PC from Locations → Computers. The host page lists CPU usage, memory usage, ethernet link, IP, MAC, gateway, and DNS from the last HTTPS-out push. If the agent has not sent a field, it says Unknown. There is no live graph.

    • ●/computers/[id] is the host page. Name on the Computers list opens it.
    • ●The Windows agent POSTs usage and nic facts on the same 15-minute HTTPS-out push. CSV/RMM rows stay Unknown until the EXE checks in.
    • ●Harborline demo IPs stay compiled. No fake live graphs. Password hashes untouched.
    • computers
    • msp
    • agent

34. this deploy

    PC Agent install OK dialog is the install, not Harborline

    After Yes on UAC, the OK box says the agent is installed, writes ProgramData, a tray icon, and a 15-minute scheduled task, then refresh Locations → Computers. Harborline and the shop-token lecture are gone from that box.

    • ●Same MessageBox for every EXE. Installed. %ProgramData%\Lantern\pc-agent. Tray. Scheduled task. Refresh Computers.
    • ●Re-download after this deploy. The old stub still named Harborline demo has no token.
    • ●Did not restyle the rail, OG cards, or frozen plant lists. Password hashes untouched.
    • computers
    • ops

35. this deploy

    mike@ Download agent bakes the Enlighten token

    Sign in as mike@enlightenstudios.us after Cobus Household is on the operator login. Download agent writes lantern-pc-agent-*.exe with the Enlighten/Cobus shop token. The success dialog never mentions Harborline on that install. Refresh Locations → Computers — this PC should show hostname / last seen.

    • ●GET /api/computers/agent as Enlighten admin always uses org-enlighten and bakes lnrpc_. Harborline demo still has no token.
    • ●OK dialog is installed, ProgramData, tray, scheduled task, refresh Computers — not Harborline, not a token lecture.
    • ●Re-download after this deploy. The EXE that said Harborline demo has no token was the old stub dialog, not proof he was on Harborline.
    • computers
    • ops

36. this deploy

    Typed rooms can sit on Floors without a house PDF

    Need-to-do is blocked (first-building street, neighbor calls, remote desktop, held PDF polish). Account typed inventory and walk CSV take room_x / room_y / room_w / room_h so a company plant can pin rooms. floors-org-plant stays open until Michael’s house drawing is on the plant. No invented street.

    • ●Typed drop cells 10–13 and walk CSV columns room_x/y/w/h. Export round-trips those boxes plus faceplate.
    • ●Floors pins use that room box. Harborline Tacoma geometry is not copied onto a typed plant.
    • ●Did not check floors-org-plant or first-building. PDF clip still waits on a real drawing.
    • plant
    • floors
    • launch

37. this deploy

    PC Agent installer no longer looks like a dropper

    Windows Defender on the garage PC quarantined the unsigned EXE as Trojan:Win32/Sabsik.EN.D!ml (ML heuristic). That was a false positive on the old packed stub. Re-download lantern-pc-agent-*.exe from lantern.enlightenstudios.us. If the old file is still quarantined, Allow on device — do not turn Defender off.

    • ●Setup is a visible console installer. It writes Install-LanternPcAgent.ps1 and lantern-icon.ico into %ProgramData%\Lantern\pc-agent, then runs that script in a visible PowerShell window.
    • ●No ZIP self-extractor overlay, no EncodedCommand, no hidden powershell, no ShellExecute runas. UAC is requireAdministrator in the manifest. VERSIONINFO says Enlighten Studios / Lantern PC Agent Setup. No fake Authenticode.
    • ●HTTPS-out check-in unchanged. Did not replace lantern-icon.png, OG, or the rail. Password hashes untouched.
    • computers
    • ops

38. this deploy

    Typed wall plates work on a company plant, not only Harborline

    Account typed inventory now takes a ninth faceplate cell. Lens lookup of DESK-A on that plant lists Office plate ports and what is plugged in. Harborline 214-A still walks. Did not invent a Waukesha street.

    • ●Typed drops: jack, room, kind, hostname, ip, mac, vlan, switch_port, faceplate. Same CSV path as walk import.
    • ●lens-faceplate-proof reads THIS company’s plant. Not Harborline-only. Not MDF/IDF rack chrome.
    • ●Catalog aligned: electric-plant-import, lantern-launch-site, tier-licensing, ops-mobile-fields were already live. alacarte stays held. floors-org-plant waits on a house plant. first-building still Mike’s street.
    • lens
    • plant
    • launch

39. this deploy

    Lens shows the wall plate, not just the cable ID

    On Lens, look up a jack or cable ID. Harborline 214-A / HL-2W-1414 lists the wall faceplate, ports on that plate, and what is plugged in from the plant. Not the MDF/IDF rack. Not a live scrape.

    • ●Lookup accepts HL-2W-1414 or 214-A. Plate ports and plugged-in hostnames come from the plant record.
    • ●Honest first slice. Phone still points at the plate. Did not invent a Waukesha address.
    • lens
    • plant
    • cabling

40. this deploy

    RMM switch-in over HTTPS out

    A shop box with NinjaOne, Datto RMM, or ConnectWise Automate keys POSTs device inventory to lantern.enlightenstudios.us. Lantern never inbound-scans their RMM. Missing keys push an honest stub.

    • ●POST /api/computers/rmm with the PC agent or collector Bearer token. Same Computers list as Import CSV (Agent Offline until the EXE checks in).
    • ●Ninja /v2/devices-detailed, Datto /v2/account/devices, Automate Computers. Account → Download RMM script. No policies. Frozen lists unchanged.
    • ●Did not invent a first-building street. Remote desktop is still after launch.
    • computers
    • msp
    • rmm

41. this deploy

    PC agent reports SMART and Windows Update

    The Lantern PC Agent push now includes disk SMART and Windows Update. Those values land in the Disk and Updates columns already on Computers. CSV import still shows Not this card until the EXE checks in.

    • ●POST /api/computers/agent accepts disk / windowsUpdate. PowerShell reads FailurePredictStatus, storage wear, pending updates, and reboot-required.
    • ●Warnings use the frozen Computers table. Did not restyle Phones, Cameras, DeviceInventory, OG, or the rail.
    • ●Harborline demo rows stay compiled. No fake first-building. Remote desktop is still after launch.
    • computers
    • msp
    • agent

42. this deploy

    Tray New ticket files a shop ticket

    Right-click the Lantern PC Agent tray icon → New ticket. That POSTs HTTPS out and opens a shop ticket on the PC hostname. The Tickets column on Computers shows the open count.

    • ●POST /api/computers/agent/ticket with the same org Bearer token as inventory.
    • ●Reuses /tickets. Not the Enlighten operator board. Not remote desktop.
    • ●Did not restyle the frozen Computers list chrome.
    • computers
    • msp
    • tickets

43. this deploy

    Import CSV on Computers

    Company admin and Enlighten get a second square-round orange Import CSV button next to Download agent. Hostname, site, OS, serial, and last seen from another RMM land on the Computers list. Harborline stays compiled. The old RMM agent is not installed.

    • ●Top-right .btn-lantern Import CSV (nowrap) immediately next to Download agent. Same seats as the EXE.
    • ●POST /api/computers/csv. Template GET /api/computers/csv?template=1. Sample /samples/computers-rmm.csv.
    • ●CSV rows show Agent Offline until the Lantern EXE checks in. Did not restyle Phones, Cameras, OG, or the rail.
    • computers
    • msp
    • csv

44. this deploy

    PC Agent EXE asks Windows for administrator

    After SmartScreen Run anyway, double-clicking lantern-pc-agent-*.exe opens the UAC prompt instead of failing with “Run the .exe as Administrator.” Being the Windows Administrator is enough — re-download the EXE; the old file still has the bug.

    • ●Stub manifest stays requireAdministrator. If SmartScreen starts the process unelevated, the EXE relaunches itself with runas.
    • ●Install-LanternPcAgent.ps1 does the same Verb RunAs check before writing ProgramData. It does not fail only because the first process was not elevated yet.
    • ●Did not replace lantern-icon.png, OG, or the rail. Password hashes untouched.
    • computers
    • ops

45. this deploy

    PC Agent double-click install as Administrator

    Download agent EXE unpacks, writes ProgramData, a scheduled task, and the Lantern tray even if the first HTTPS push fails. SmartScreen: More info → Run anyway. Then Yes on UAC. No paid code-sign cert.

    • ●Hidden PowerShell is STA. Shortcuts, task, and first push cannot abort the install after files copy.
    • ●requireAdministrator manifest + Win10/11 compatibility. Unsigned PE is still a real GUI EXE.
    • ●Enlighten admin still has no Locations dropdown — names on /admin/locations. Company org_admin keeps the header switcher.
    • computers
    • ops

46. this deploy

    Download agent 500 is fixed

    GET /api/computers/agent no longer throws on the live standalone server. Michael can click Download agent and get lantern-pc-agent-*.exe. Harborline still has no token.

    • ●Root cause: webpack standalone has no import.meta.dirname; path.join(undefined) 500ed after sign-in.
    • ●Stub EXE and lantern-icon.png resolve from process.cwd() first. Unsigned GET stays 401.
    • ●Did not replace lantern-icon.png, OG, or the rail. Password hashes untouched.
    • computers
    • ops

47. this deploy

    Download agent on Computers

    Company admin (and Enlighten) get a square-round orange Download agent button on Locations → Computers. Same GET as Account: lantern-pc-agent-<company>.exe. Harborline still has no token. Techs keep the muted note.

    • ●Top-right .btn-lantern Download agent → /api/computers/agent (EXE, not zip).
    • ●Visible for org_admin, client, and Enlighten admin. Field tech / employee / Harborline demo tech do not.
    • ●Did not restyle DeviceInventory lists, OG, or the rail.
    • computers
    • msp

48. this deploy

    Company plant switches and cameras (typed or CSV)

    A non-demo shop can type an MDF and switch chassis or load a walk CSV. Plant → Switches, Cameras, Closets, and Lens read that file. Computers stay on the Windows agent. Instant On is never scraped. House street waits — no invented address.

    • ●plant-data-source — typed inventory is the company path. Michael has no L3. No Plesk scrape.
    • ●cameras-plant — cameras and floor pins come from the company plant, not Harborline-only.
    • ●closet-org-plant — Closets and Lens open the company’s MDF.
    • ●Computers stay HTTPS-out agent inventory. Frozen DeviceInventory lists, OG, and rail did not move.
    • plant
    • switches
    • cameras
    • launch

Wednesday, September 16, 2026

1. this deploy

   Shop collector POSTs without Sign in

   The shop box talks HTTPS out to lantern.enlightenstudios.us with an org token. POST /api/collector/ingest is not a login cookie. The route still returns 401 without a Bearer token. Production does not live-bind LDAP or scrape switches.

   • ●Middleware lets /api/collector/ingest through. Token check stays on the route.
   • ●plant-data-source stays Doing at 76%. Not done until a real switch pull.
   • collector
   • plant
   • launch

2. this deploy

   Phones, Cameras, and Air share one list: IP, MAC, VLAN, jack

   Same filterable table on Phones, Cameras, and Air. Floor dropdown with counts, green/red up-down, IP and MAC you can copy, VLAN, jack, and switch port. Search name, IP, or MAC. Heatmap on Air stays the walk.

   • ●plant-list-by-floor is done. Floor 1 (14) on the dropdown. Click a row for the circuit path.
   • ●IP and MAC are first-class columns so a tech on a ladder can copy them. Daisy-chained PC IP sits on the phone row.
   • plant
   • phones
   • cameras
   • air

3. this deploy

   Shop collector maps Meraki, UniFi, and Catalyst

   The shop box now speaks Meraki dashboard, UniFi classic on-site, and Catalyst RESTCONF with SNMP if RESTCONF is off. Same snapshot: port, status, VLAN, MAC, hostname, neighbor, PoE. Aruba / Juniper / MikroTik are stubs. Instant On is never scraped. Still need a real switch pull. plant-data-source stays Doing at 71%.

   • ●VENDOR=meraki|unifi|catalyst on the collector. HTTPS out to lantern.enlightenstudios.us. RFC1918 / management VRF only — no WAN sweep from Plesk.
   • ●Imported closets overlay MAC, hostname, VLAN, PoE, and neighbor. LDAP is MAC → plant directory. TDR stays typed.
   • ●Aruba Central, Juniper EX/QFX, and MikroTik are documented stubs. Omada later. No live DC bind. No Stripe.
   • closets
   • plant
   • collector
   • launch

4. this deploy

   Shop collector pushes switch ports into Lantern

   One token. HTTPS-out from a box that can see the switches, or a switch REST URL. Ports, MAC, hostname, VLAN, PoE, and LLDP neighbor POST to lantern.enlightenstudios.us. Harborline stays compiled. TDR is still typed — not from CAM. No live DC bind from this site.

   • ●POST /api/collector/ingest is org-scoped. Account issues the token. systemd unit lives in collector/.
   • ●Imported plants show collector MAC and hostname on Closets and the circuit. Typed inventory is the fallback.
   • ●Remaining: L3 port state and LDAP user from a shop box on a real switch. first-building stays on Mike’s street. No Stripe.
   • closets
   • plant
   • collector
   • launch

5. this deploy

   L3 / LDAP / TDR is back on Doing

   Checked off plant-data-source after chassis labels. That hid Layer 3 and LDAP/TDR from Need to do and Doing. Card is back at 45%. Remaining is real port state and TDR, not a caption.

   • ●plant-data-source is Doing again. Typed fallback, no-live-bind copy, and plant-file LEDs are the ticks.
   • ●Still open: Layer 3 port state, LDAP user + TDR on SW-1E / SW-2W. No live DC bind or switch scrape.
   • closets
   • plant
   • launch

6. this deploy

   Started Lens from this company’s plant

   Closet picker already reads the org snapshot. Empty plant tells you to load a walk CSV. Add device now uses that closet’s floor, not Harborline 1 or 2. Overlay HUD still a short switch-port list.

   • ●starting lens-org-plant / Lens closet picker + overlay from this company’s plant.
   • ●Harborline demo still walks. Overlay is not a live switch scrape. No Stripe.
   • lens
   • plant
   • launch

7. this deploy

   Port state from Layer 3 or LDAP-capable gear

   Closet LEDs still follow the plant file. Typed inventory is the fallback. Harborline SW-CORE is Layer 3; SW-1E and SW-2W are LDAP-capable. Copy never claims a live DC bind.

   • ●starting plant-data-source / Port state from Layer 3 / LDAP-capable gear, else typed inventory.
   • ●Each chassis names its source. Panels stay typed. No live LDAP bind or switch scrape.
   • closets
   • plant
   • launch

8. this deploy

   Walk CSV can carry phones, cameras, and hosts

   A live building’s walk file can list the phone, camera, or PC on each drop. /phones and /cameras read those rows. POST /api/plant/csv loads the file; GET exports it. Harborline stays the compiled demo.

   • ●starting plant-csv-endpoints / Walk CSV can carry phones, cameras, and hosts — imported Phones and Cameras lists were empty until Lens filed a drop.
   • ●Optional kind, hostname, MAC, IP, VLAN, extension, and a daisy-chained host. Shop CSV of closet / room / jack still works. Did not invent a first-building address.
   • plant
   • csv
   • launch

9. this deploy

   Phones, Cameras, and Air match the Computers list

   Same filterable table Mike approved on Computers: 10px filters, panel cards on a phone, dense table on a laptop. Green/red up-down, IP and MAC you can copy, VLAN, jack, and switch. Heatmap on Air stays the walk.

   • ●plant-list-by-floor is done. Floor dropdown with counts. Click a row for the circuit path.
   • ●Did not change the Computers layout. Agent download and remote-desktop rules stay.
   • plant
   • phones
   • cameras
   • air

10. this deploy

    Export the loaded plant as CSV

    After a walk CSV is on a real building, Account and the client record download that plant. Load the file back with Replace. Harborline stays the compiled demo.

    • ●starting plant-csv-roundtrip / Export the loaded plant as CSV — testers were retyping drops to prove import.
    • ●Export CSV sits next to Load CSV. Harborline cannot export over the demo plant. Next: Lens from this company’s plant.
    • plant
    • csv
    • launch

11. this deploy

    Collector overlay on imported closets, walk CSV roundtrip

    A shop collector push paints MAC, hostname, VLAN, PoE, and LLDP neighbor onto imported Closets and Lens. Walk CSV import/export carries phones, cameras, and hosts on a real building. Harborline stays the compiled demo. Layer 3 is not done until a real switch pull.

    • ●plant-data-source stays Doing at 76%. Remaining is port state and LDAP user from a shop box on a live switch. No live DC bind from lantern.enlightenstudios.us.
    • ●GET/POST /api/plant/csv roundtrips the loaded plant. Optional kind, hostname, MAC, IP. Did not invent a first-building address.
    • ●.btn-lantern uses --radius-control 10px. Phone/Camera chassis stay six ports wide. Computers lists stay.
    • plant
    • collector
    • csv
    • launch

12. this deploy

    Switches list from the plant file

    /switches lists chassis from this company’s plant. Home study Switches opens that list. Closets stay racks. The rail did not grow a new word. Not a live scrape.

    • ●switches-tab — floor, closet, live vs fault ports. Link from Closets. Plant nav freeze.
    • ●plant-data-source stays not done. Did not invent a first-building address.
    • plant
    • launch

13. this deploy

    Collector overlay, Lens plant, walk heat, shop guide

    Collector hosts land without a jack walk and without the switch already on the plant. Lens reads this company’s closets. Air heat is the typed walk. /guide how-tos match that.

    • ●l3-endpoints — no-walk overlay plus a collector switch that was not on the CSV yet.
    • ●lens-org-plant — Harborline still walks. Empty plant tells you to load a CSV. Real street is first-building.
    • ●wifi-heatmap — typed RSSI blooms. Real-street samples are first-building. Native dBm is wifi-phone-rssi.
    • ●ops-guide-plant — collector / Lens / Air copy restamped. Rail and OG freeze, so Harborline PNGs stayed.
    • collector
    • lens
    • air
    • guide
    • launch

14. this deploy

    Printed Harborline tester walk

    Signed-in testers print /walk: Find a drop, Floors pins, Air heat, Billing PDF, Lens snaps, then the walk CSV — plus a jack checklist grouped by floor. Harborline is the demo plant, not a customer.

    • ●Print this walk. 214-A / HL-2W-1414 / IDF-2W is the Harborline stop. Orange jacks, cyan cameras, amber electrical on Floors.
    • ●Jack table is basement / floor 1 / floor 2 from the plant file. Did not invent a Waukesha address. Next card is Find filtered to one floor.
    • plant
    • harborline
    • launch

Tuesday, September 15, 2026

1. this deploy

   Closet, Air, and heatmap are on the launch board

   MDF/IDF faceplates and port-to-circuit are checked. Remaining closet work is on /launch: company plant on Find/Lens, floors geometry, walk-sample heatmap, honest Air/Stats, server snaps. No live LDAP or switch scrape this phase.

   • ●Find home, Lens overlay, Phones, Air, and Stats read the company plant. Harborline keeps the Tacoma sample story.
   • ●Walk samples are the heatmap on a real building. Port legend no longer claims a live LDAP bind.
   • ●Still open: server Lens snaps, floors plate for an imported building, a real Waukesha plant file from Mike.
   • plant
   • closet
   • wifi

Wednesday, September 16, 2026

1. this deploy

   Aruba / Juniper / MikroTik map the same collector snapshot

   Shop collector JSON from Aruba Central / AOS-CX, Juniper EX, and MikroTik RouterOS maps into the same port push as Meraki, UniFi, and Catalyst. Live pull of those three stays a stub until a box on the LAN sees gear. Collector hosts still overlay when the jack walk is missing. Instant On is never scraped.

   • ●Aruba, Juniper, and MikroTik vendor JSON maps MAC, hostname, VLAN, PoE, and LLDP neighbor into POST /api/collector/ingest.
   • ●No-walk overlay: a collector client lands on the closet without a typed jack circuit. LDAP user is still MAC → plant directory, not a live DC bind.
   • ●Meraki / UniFi / Catalyst live pull unchanged. Real switch pull and first-building stay open. Did not restyle frozen OG, rail, or plant lists.
   • collector
   • l3
   • plant

Tuesday, September 15, 2026

1. this deploy

   Plant CSV loads into Find

   Enlighten can load a walk CSV on a client building. That company’s Find, closets, rooms, and circuits read the file. Harborline stays the compiled demo.

   • ●Columns: closet, panel, port, jack, room. Optional switch, cable ID, length. Sample at /samples/plant-walk.csv.
   • ●Upload lives on the client building record. Did not mark plant-csv done. First real building still needs Mike’s address and spreadsheet.
   • plant
   • import

Wednesday, September 16, 2026

1. this deploy

   A shop can load its own plant CSV

   Company admin loads a walk CSV on Account. Closet, jack, and room are enough. Find, Floors, and Closets read that file. Harborline stays the compiled demo.

   • ●Columns: closet, jack, room. Panel and port optional. Shop sample at /samples/plant-shop.csv. Full walk still at /samples/plant-walk.csv.
   • ●Enlighten can still load from the client building record. Replace needs a checkbox so a live plant is not wiped by accident.
   • ●First real building still needs Mike’s street and spreadsheet. Did not invent a Waukesha address.
   • plant
   • import

2. this deploy

   Closet Lens snaps stay on the server

   A Lens snap now lands on the company plant. The next tech on another phone sees it on the closet. Photos used to sit only on that device.

   • ●Open Lens, snap Rack A, then open that closet on another phone — the photo is there.
   • ●The JPEG lives with Fluke PDFs under data/uploads. lantern.json keeps the closet card, not the pixels.
   • ●Harborline demo seats share snaps. Electric panel snaps use the same store.
   • lens
   • closet

Tuesday, September 15, 2026

1. this deploy

   Floor hover, closet LDAP/TDR, and cameras

   Floors now show a hover card with jack, switch port, LDAP, and TDR length. Closet ports carry the same facts. Cameras have a section and cyan pins on the plan. Charge day is Friday, September 25.

   • ●Hover a room, jack, closet, camera, or AP on Floors or Air. Tap still opens the circuit.
   • ●Patched closet ports list LDAP and feet on hover. Plant record — not a live DC bind or switch scrape.
   • ●Cameras is on the IT rail. Harborline dock and warehouse samples show IP, MAC, VLAN, and the switch port.
   • plant
   • closet
   • cameras

2. 01:33 UTC

   IP phones on the same drop as the PC

   The closet hole: desk phone on the wall jack (PoE, VLAN 20), workstation daisy-chained through the phone. Search an extension. File a phone from Lens. Open /phones for every Harborline location.

   • ●Harborline phones are plant, not a separate directory. Extension search, Lens file, and a Phones tab for each location.
   • phones
   • plant

3. 00:47–01:22 UTC

   The field tool opens: login, Enlighten console, Harborline walk

   First stretch of the day. Lens stops covering the rack. Harborline becomes a signed-in demo tenant. Mike gets a real operator console. Clients lead with buildings so a phone can still reach Admin.

   • ●MDF/IDF picker and port overlay sit off the live camera until a closet is selected, so the rack stays visible.
   • ●Sign in exists. Harborline is the demo tenant. Accounts, billing, and buildings live in the store.
   • ●Admin Clients lists every location and building. Board is a kanban. Tools cover demo reset, export, operators, and audit.
   • ●The add-client form sits under the directory. The Admin chip stays in the header on a phone.
   • login
   • admin
   • plant