more audit work

src/Concelier/StellaOps.Concelier.WebService/Program.cs

@@ -104,6 +104,10 @@ builder.Host.ConfigureAppConfiguration((context, cfg) =>
 #pragma warning restore ASP0013
 
 var JsonOptions = CreateJsonOptions();
+builder.Services.ConfigureHttpJsonOptions(options =>
+{
+    options.SerializerOptions.Converters.Add(new JsonStringEnumConverter(JsonNamingPolicy.CamelCase));
+});
 
 builder.Configuration.AddStellaOpsDefaults(options =>
 {
@@ -155,6 +159,26 @@ if (builder.Environment.IsEnvironment("Testing"))
         }
 
         ConcelierOptionsPostConfigure.Apply(concelierOptions, contentRootPath);
+        concelierOptions.Authority ??= new ConcelierOptions.AuthorityOptions();
+        concelierOptions.Authority.RequiredScopes ??= new List<string>();
+        concelierOptions.Authority.ClientScopes ??= new List<string>();
+        if (concelierOptions.Authority.RequiredScopes.Count == 0)
+        {
+            concelierOptions.Authority.RequiredScopes.Add(StellaOpsScopes.ConcelierJobsTrigger);
+        }
+
+        if (concelierOptions.Authority.ClientScopes.Count == 0)
+        {
+            foreach (var scope in concelierOptions.Authority.RequiredScopes)
+            {
+                concelierOptions.Authority.ClientScopes.Add(scope);
+            }
+        }
+
+        if (concelierOptions.Authority.ClientScopes.Count == 0)
+        {
+            concelierOptions.Authority.ClientScopes.Add(StellaOpsScopes.ConcelierJobsTrigger);
+        }
         // Skip validation in Testing to allow factory-provided wiring.
     }
 else
@@ -473,6 +497,7 @@ builder.Services.RegisterPluginRoutines(builder.Configuration, pluginHostOptions
 builder.Services.AddEndpointsApiExplorer();
 
 var app = builder.Build();
+var swaggerEnabled = app.Configuration.GetValue<bool>("Swagger:Enabled");
 
 app.Logger.LogWarning("Authority enabled: {AuthorityEnabled}, test signing secret configured: {HasTestSecret}", authorityConfigured, !string.IsNullOrWhiteSpace(concelierOptions.Authority?.TestSigningSecret));
 
@@ -514,6 +539,7 @@ app.MapConcelierMirrorEndpoints(authorityConfigured, enforceAuthority);
 
 // Canonical advisory endpoints (Sprint 8200.0012.0003)
 app.MapCanonicalAdvisoryEndpoints();
+app.MapInterestScoreEndpoints();
 
 app.MapGet("/.well-known/openapi", ([FromServices] OpenApiDiscoveryDocumentProvider provider, HttpContext context) =>
 {
@@ -559,6 +585,53 @@ app.MapGet("/.well-known/openapi", ([FromServices] OpenApiDiscoveryDocumentProvi
     }
 }).WithName("GetConcelierOpenApiDocument");
 
+if (swaggerEnabled)
+{
+    app.MapGet("/swagger/v1/swagger.json", ([FromServices] OpenApiDiscoveryDocumentProvider provider, HttpContext context) =>
+    {
+        var (payload, etag) = provider.GetDocument();
+
+        if (context.Request.Headers.IfNoneMatch.Count > 0)
+        {
+            foreach (var candidate in context.Request.Headers.IfNoneMatch)
+            {
+                if (Matches(candidate, etag))
+                {
+                    context.Response.Headers.ETag = etag;
+                    context.Response.Headers.CacheControl = "public, max-age=300, immutable";
+                    return HttpResults.StatusCode(StatusCodes.Status304NotModified);
+                }
+            }
+        }
+
+        context.Response.Headers.ETag = etag;
+        context.Response.Headers.CacheControl = "public, max-age=300, immutable";
+        return HttpResults.Text(payload, "application/json");
+
+        static bool Matches(string? candidate, string expected)
+        {
+            if (string.IsNullOrWhiteSpace(candidate))
+            {
+                return false;
+            }
+
+            var trimmed = candidate.Trim();
+            if (string.Equals(trimmed, expected, StringComparison.Ordinal))
+            {
+                return true;
+            }
+
+            if (trimmed.StartsWith("W/", StringComparison.OrdinalIgnoreCase))
+            {
+                var weakValue = trimmed[2..].TrimStart();
+                return string.Equals(weakValue, expected, StringComparison.Ordinal);
+            }
+
+            return false;
+        }
+    }).WithName("GetConcelierSwaggerDocument");
+}
+
 var orchestratorGroup = app.MapGroup("/internal/orch");
 if (authorityConfigured)
 {