[Feature request] Chocolatey package for the agent

[P6g9YHK6]

Is your feature request related to a problem? Please describe.
updating the agent is a bit of a pain when someone wishes to have more granular control over the deployment of the updates
and "every 35 minutes check for updates" is not really a best practice even if it is advised by you guys

when modification are done to an infrastructure a planning of what happened and when help with troubleshooting and security

Describe the solution you'd like
An officialy supported chocolatey package to install and update the agent to allow people to set custom tasks and such to manage the agent
kinda obivous as chocolatey is the default way trmm propose to install software.

for exemple a deployement of the agent via choco could look like this:
choco install trmm-agent -params "-signed -signedtoken XXXX" --installarguments "--api https://api.exemple.com --client-id 4 --site-id 44 --agent-type server --auth XXXXXXX"

or

choco install trmm-agent-signed -params "-signedtoken XXXX" --installarguments "--api https://api.exemple.com --client-id 4 --site-id 44 --agent-type server --auth XXXXXXX"
choco install trmm-agent-unsigned --installarguments "--api https://api.exemple.com --client-id 4 --site-id 44 --agent-type server --auth XXXXXXX"

Describe alternatives you've considered
an updater script

<#
.SYNOPSIS
    Downloads and installs the latest or specified version of the Tactical RMM agent, with support for signed and unsigned downloads.

.DESCRIPTION
    This script retrieves the latest version of the Tactical RMM agent from GitHub or downloads a specified version based on the input environment variables. 
    It supports downloading a signed version using a provided token, or an unsigned version directly from GitHub. 
    If the specified version is set to "latest," the script fetches the most recent release information.
    Before downloading, it checks the locally installed version from the software list and skips the download if it matches the desired version.

.PARAMETER version
    Specifies the version to download. If set to "latest," the script retrieves the latest version available on GitHub. 
    This can be specified through the environment variable `version`.

.PARAMETER isSigned
    Boolean flag to determine if the signed version should be downloaded. 
    Set to true in the environment variable `issigned` to download the signed version; otherwise, the unsigned version is downloaded.

.PARAMETER signedDownloadToken
    The token used for authenticated signed downloads. This should be set in the environment variable `trmm_sign_download_token` 
    and is required if `isSigned` is set to true.

.EXEMPLE var
    trmm_sign_download_token={{global.trmm_sign_download_token}}
    version=latest
    version=2.7.0
    issigned=true
.NOTES
    Author: SAN
    Date: 29.10.24

.CHANGELOG
    - Initial version
    - Added support for environment variable input
    - Enhanced error handling and process execution
    - Added local version check to skip download if versions match
#>

# Variables
$version = $env:version                  # Specify a version manually, or leave as "latest" to get the latest version from GitHub
$isSigned = $env:issigned -eq 'true'     # Set to true to download the signed version
$signedDownloadToken = $env:trmm_sign_download_token  # Token used for signed downloads only

# Check for signed download token if isSigned is true
if ($isSigned -and -not $signedDownloadToken) {
    Write-Output "Error: Missing signed download token. Exiting..."
    exit 1
}

# Define GitHub API URL for the RMMAgent repository
$repoUrl = "https://api.github.com/repos/amidaware/rmmagent/releases/latest"

# Function to get the currently installed version of the Tactical RMM agent from the software list
function Get-InstalledVersion {
    $appName = "Tactical RMM Agent"  # Adjust if the application's display name differs
    $installedSoftware = Get-CimInstance -ClassName Win32_Product | Where-Object { $_.Name -like "*$appName*" }

    if ($installedSoftware) {
        return $installedSoftware.Version
    } else {
        # Check the uninstall registry key for a more complete list
        $uninstallKeys = @(
            "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*",
            "HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*"
        )
        
        foreach ($key in $uninstallKeys) {
            $installedSoftware = Get-ItemProperty $key | Where-Object { $_.DisplayName -like "*$appName*" }
            if ($installedSoftware) {
                return $installedSoftware.DisplayVersion
            }
        }

        return $null
    }
}

try {
    # Set up headers for GitHub API request
    $headers = @{
        "User-Agent" = "PowerShell Script"
    }

    # If version is set to "latest", fetch the latest release information from GitHub
    if ($version -eq "latest") {
        Write-Output "Fetching the latest version information from GitHub..."
        $response = Invoke-RestMethod -Uri $repoUrl -Headers $headers -Method Get -ErrorAction Stop
        $version = $response.tag_name.TrimStart('v')  # Remove 'v' prefix if exists
        Write-Output "Latest version found: $version"
    } else {
        Write-Output "Using specified version: $version"
    }

    # Check if the installed version matches the desired version
    $installedVersion = Get-InstalledVersion
    if ($installedVersion) {
        Write-Output "Installed version of 'Tactical RMM Agent': $installedVersion"
        if ($installedVersion -eq $version) {
            Write-Output "The installed version matches the desired version. No download required."
            exit 0
        } else {
            Write-Output "The installed version ($installedVersion) does not match the desired version ($version). Proceeding with download."
        }
    } else {
        Write-Output "'Tactical RMM Agent' is not installed on this system. Checking installed software..."
        # List all installed software for debugging
        $allInstalledSoftware = Get-CimInstance -ClassName Win32_Product
        Write-Output "Currently installed software (Win32_Product):"
        $allInstalledSoftware | ForEach-Object { Write-Output "- $($_.Name)" }

        # Check the uninstall registry key as well
        $uninstallKeys = @(
            "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*",
            "HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*"
        )
        Write-Output "Currently installed software (Registry):"
        foreach ($key in $uninstallKeys) {
            $allInstalledSoftware = Get-ItemProperty $key
            $allInstalledSoftware | ForEach-Object { Write-Output "- $($_.DisplayName)" }
        }
    }
    
    # Define the temp directory for downloading
    $tempDir = [System.IO.Path]::GetTempPath()
    $outputFile = Join-Path -Path $tempDir -ChildPath "tacticalagent-v$version.exe"

    # Determine the download URL based on the $isSigned variable
    if ($isSigned) {
        # Download the signed agent using the token
        $downloadUrl = "https://agents.tacticalrmm.com/api/v2/agents?version=$version&arch=amd64&token=$signedDownloadToken&plat=windows&api=api-rmm-managed-services.vtx.ch"
    } else {
        # Download the unsigned agent directly from GitHub releases
        $downloadUrl = "https://github.com/amidaware/rmmagent/releases/download/v$version/tacticalagent-v$version-windows-amd64.exe"
    }

    Write-Output "Downloading from: $downloadUrl"
    
    # Download the agent file
    try {
        Invoke-WebRequest -Uri $downloadUrl -OutFile $outputFile -ErrorAction Stop
        Write-Output "Download completed: $outputFile"
    } catch {
        Write-Output "Failed to download the agent. Error: $($_.Exception.Message)"
        exit 1
    }

    # Run the downloaded file in a new context (using cmd)
    $processStartInfo = New-Object System.Diagnostics.ProcessStartInfo
    $processStartInfo.FileName = $outputFile
    $processStartInfo.Arguments = "/VERYSILENT"
    $processStartInfo.UseShellExecute = $true  # Allows the executable to run independently
    $processStartInfo.CreateNoWindow = $true    # Prevents a new window from being created

    Write-Output "Starting installation..."

    # Start the process without attempting to cast the result
    try {
        [System.Diagnostics.Process]::Start($processStartInfo)
        Write-Output "Installation started. The process is running in the background."
    } catch {
        Write-Output "Failed to start the installation process. Error: $($_.Exception.Message)"
        exit 1
    }
} catch {
    # Handle unexpected errors with output
    Write-Output "An unexpected error occurred: $($_.Exception.Message)"
    exit 1
}