From c3cf437b8f42ca792f4c6810e91c78e2c07df21a Mon Sep 17 00:00:00 2001
From: Nicole Rappe <nicole.rappe@bunny-lab.io>
Date: Thu, 2 Oct 2025 04:01:05 -0600
Subject: [PATCH] Massive Progress with Ansible Integration

---
 .gitignore                                   |  3 +-
 Data/Agent/Roles/role_PlaybookExec_SYSTEM.py | 29 ++++++++++++++++----
 Data/Agent/agent.py                          |  3 +-
 3 files changed, 27 insertions(+), 8 deletions(-)

diff --git a/.gitignore b/.gitignore
index 8e8b89a..880a1e5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -25,4 +25,5 @@ agent_settings.json
 agent_settings_svc.json
 agent_settings_user.json
 users.json
-database.db
\ No newline at end of file
+database.db
+/Temp/
\ No newline at end of file
diff --git a/Data/Agent/Roles/role_PlaybookExec_SYSTEM.py b/Data/Agent/Roles/role_PlaybookExec_SYSTEM.py
index fef044a..518ed66 100644
--- a/Data/Agent/Roles/role_PlaybookExec_SYSTEM.py
+++ b/Data/Agent/Roles/role_PlaybookExec_SYSTEM.py
@@ -20,6 +20,17 @@ ROLE_CONTEXTS = ['system']
 
 def _project_root():
     try:
+        cur = os.path.abspath(os.path.dirname(__file__))
+        for _ in range(8):
+            if (
+                os.path.exists(os.path.join(cur, 'Borealis.ps1'))
+                or os.path.isdir(os.path.join(cur, '.git'))
+            ):
+                return cur
+            parent = os.path.dirname(cur)
+            if parent == cur:
+                break
+            cur = parent
         return os.path.abspath(os.path.join(os.path.dirname(__file__), '..', '..'))
     except Exception:
         return os.path.abspath(os.path.join(os.path.dirname(__file__), '..'))
@@ -244,8 +255,7 @@ class Role:
         os.makedirs(tmp_dir, exist_ok=True)
         ps_path = os.path.join(tmp_dir, f"ansible_bootstrap_{int(time.time())}.ps1")
         ensure_log = os.path.join(log_dir, f"ensure_winrm_{int(time.time())}.log")
-        ps_content = f"""
-$ErrorActionPreference='Continue'
+        ps_template = r"""$ErrorActionPreference='Continue'
 try {{
   Import-Module -Name '{mod}' -Force
   'Imported module: {mod}' | Out-File -FilePath '{ensure_log}' -Append -Encoding UTF8
@@ -255,20 +265,24 @@ try {{
   'Ensured WinRM HTTPS listener on 127.0.0.1:5986' | Out-File -FilePath '{ensure_log}' -Append -Encoding UTF8
   Ensure-BorealisServiceUser -UserName $user -PlaintextPassword $pw | Out-Null
   'Ensured service user: ' + $user | Out-File -FilePath '{ensure_log}' -Append -Encoding UTF8
-  # Fallback path if LocalAccounts cmdlets unavailable
   try {{
-    $ln = $user; if ($ln.StartsWith('.\\')) { $ln = $ln.Substring(2) }
+    $ln = $user
+    if ($ln.StartsWith('.\')) {{ $ln = $ln.Substring(2) }}
     $exists = Get-LocalUser -Name $ln -ErrorAction SilentlyContinue
     if (-not $exists) {{
       'Fallback: Using NET USER to create account' | Out-File -FilePath '{ensure_log}' -Append -Encoding UTF8
-      cmd /c "net user $ln `"$pw`" /ADD /Y" | Out-Null
+      cmd /c "net user $ln `"{password}`" /ADD /Y" | Out-Null
       cmd /c "net localgroup Administrators $ln /ADD" | Out-Null
     }}
   }} catch {{
     'Fallback path failed: ' + $_ | Out-File -FilePath '{ensure_log}' -Append -Encoding UTF8
   }}
   try {{ (Get-WSManInstance -ResourceURI winrm/config/listener -Enumerate) | Out-File -FilePath '{ensure_log}' -Append -Encoding UTF8 }} catch {{}}
-  try {{ $ln2=$user; if ($ln2.StartsWith('.\\')) { $ln2=$ln2.Substring(2) }; Get-LocalUser | Where-Object {{$_.Name -eq $ln2}} | Format-List * | Out-File -FilePath '{ensure_log}' -Append -Encoding UTF8 }} catch {{}}
+  try {{
+    $ln2 = $user
+    if ($ln2.StartsWith('.\')) {{ $ln2 = $ln2.Substring(2) }}
+    Get-LocalUser | Where-Object {{ $_.Name -eq $ln2 }} | Format-List * | Out-File -FilePath '{ensure_log}' -Append -Encoding UTF8
+  }} catch {{}}
   try {{ whoami | Out-File -FilePath '{ensure_log}' -Append -Encoding UTF8 }} catch {{}}
   exit 0
 }} catch {{
@@ -276,6 +290,9 @@ try {{
   exit 1
 }}
 """
+        safe_mod = mod.replace("'", "''")
+        safe_log = ensure_log.replace("'", "''")
+        ps_content = ps_template.format(mod=safe_mod, ensure_log=safe_log, username=username.replace("'", "''"), password=password.replace("'", "''"))
         try:
             with open(ps_path, 'w', encoding='utf-8') as fh:
                 fh.write(ps_content)
diff --git a/Data/Agent/agent.py b/Data/Agent/agent.py
index a195f43..62c4473 100644
--- a/Data/Agent/agent.py
+++ b/Data/Agent/agent.py
@@ -32,7 +32,8 @@ import socketio
 # Centralized logging helpers (Agent)
 def _agent_logs_root() -> str:
     try:
-        return os.path.abspath(os.path.join(os.path.dirname(__file__), '..', '..', 'Logs', 'Agent'))
+        root = _find_project_root()
+        return os.path.abspath(os.path.join(root, 'Logs', 'Agent'))
     except Exception:
         return os.path.abspath(os.path.join(os.path.dirname(__file__), 'Logs', 'Agent'))