feat: add self-enrolling Windows Agent package

backend/app/frontend/agent_management_view.py

@@ -86,6 +86,11 @@ def agent_management_content(can_manage_agents: bool) -> str:
             <p id="agentEnrollmentExpires" class="freshness"></p>
 
             <div class="agent-form-actions">
+                <button id="agentEnrollmentDownload"
+                    class="command-button"
+                    type="button">
+                    Download Windows package
+                </button>
                 <button id="agentEnrollmentCopy"
                     class="quiet-button"
                     type="button">
@@ -103,9 +108,10 @@ def agent_management_content(can_manage_agents: bool) -> str:
                 aria-live="polite"></p>
 
             <p class="panel-copy">
-                The self-enrolling Windows installer is the next deployment
-                milestone. For now this verifies the complete secure
-                enrollment workflow.
+                The Windows package contains the short-lived enrollment
+                credential and generic MinerOps Agent runtime. Transfer it
+                only to the intended Agent computer and delete the ZIP after
+                successful installation.
             </p>
         </section>
     </section>

backend/app/frontend/static/agent-management.js

@@ -29,6 +29,7 @@
         "agentEnrollmentResult",
         "agentEnrollmentToken",
         "agentEnrollmentExpires",
+        "agentEnrollmentDownload",
         "agentEnrollmentCopy",
         "agentEnrollmentDismiss",
         "agentEnrollmentCopyStatus"
@@ -359,6 +360,75 @@
         }
     }
 
+    async function downloadWindowsPackage() {
+        const token = el.agentEnrollmentToken.textContent;
+
+        if (!token) {
+            el.agentEnrollmentCopyStatus.textContent =
+                "No enrollment token is available to download.";
+            return;
+        }
+
+        el.agentEnrollmentDownload.disabled = true;
+        el.agentEnrollmentCopyStatus.textContent =
+            "Building Windows Agent package...";
+
+        try {
+            const response = await fetch(
+                "/api/agent-enrollments/windows-package",
+                {
+                    method: "POST",
+                    credentials: "same-origin",
+                    cache: "no-store",
+                    headers: {
+                        "Accept": "application/zip",
+                        "Content-Type": "application/json"
+                    },
+                    body: JSON.stringify({
+                        token: token
+                    })
+                }
+            );
+
+            if (!response.ok) {
+                const payload = await response.json().catch(function () {
+                    return {};
+                });
+
+                throw new Error(
+                    payload && payload.detail
+                        ? String(payload.detail)
+                        : "Package request failed with status " +
+                            response.status + "."
+                );
+            }
+
+            const blob = await response.blob();
+            const downloadUrl = window.URL.createObjectURL(blob);
+            const link = document.createElement("a");
+
+            link.href = downloadUrl;
+            link.download = "MinerOpsAgent-Windows.zip";
+
+            document.body.appendChild(link);
+            link.click();
+            link.remove();
+
+            window.URL.revokeObjectURL(downloadUrl);
+
+            dismissToken();
+
+            el.agentCreateStatus.textContent =
+                "Windows Agent package downloaded. " +
+                "The on-screen token has been cleared.";
+        } catch (error) {
+            el.agentEnrollmentCopyStatus.textContent =
+                error.message || "Windows package could not be downloaded.";
+        } finally {
+            el.agentEnrollmentDownload.disabled = false;
+        }
+    }
+
     async function copyToken() {
         const token = el.agentEnrollmentToken.textContent;
 
@@ -399,6 +469,13 @@
         el.agentCreateForm.addEventListener("submit", createEnrollment);
     }
 
+    if (el.agentEnrollmentDownload) {
+        el.agentEnrollmentDownload.addEventListener(
+            "click",
+            downloadWindowsPackage
+        );
+    }
+
     if (el.agentEnrollmentCopy) {
         el.agentEnrollmentCopy.addEventListener("click", copyToken);
     }