todays product advirories implemented

This commit is contained in:
master
2026-01-16 23:30:47 +02:00
parent 91ba600722
commit 77ff029205
174 changed files with 30173 additions and 1383 deletions

View File

@@ -168,6 +168,85 @@ export interface BinaryIndexOpsError {
readonly details?: string;
}
// -----------------------------------------------------------------------------
// Fingerprint Export Types
// Sprint: SPRINT_20260117_007_CLI_binary_analysis
// Task: BAN-004 — Add optional UI download links for fingerprint results
// -----------------------------------------------------------------------------
/**
* Function hash in a fingerprint.
*/
export interface FingerprintFunctionHash {
readonly name: string;
readonly address: number;
readonly size: number;
readonly hash: string;
readonly normalizedHash: string;
}
/**
* Section hash in a fingerprint.
*/
export interface FingerprintSectionHash {
readonly name: string;
readonly virtualAddress: number;
readonly size: number;
readonly hash: string;
}
/**
* Symbol entry in a fingerprint.
*/
export interface FingerprintSymbol {
readonly name: string;
readonly address: number;
readonly type: string;
readonly binding: string;
}
/**
* Binary fingerprint export result.
* Matches CLI `stella binary fingerprint export` output.
*/
export interface BinaryFingerprintExport {
readonly digest: string;
readonly format: string;
readonly architecture: string;
readonly endianness: 'little' | 'big';
readonly exportedAt: string;
readonly functions: readonly FingerprintFunctionHash[];
readonly sections: readonly FingerprintSectionHash[];
readonly symbols: readonly FingerprintSymbol[];
readonly metadata: {
readonly totalFunctions: number;
readonly totalSections: number;
readonly totalSymbols: number;
readonly binarySize: number;
readonly normalizationRecipe: string;
};
}
/**
* Request to export fingerprint.
*/
export interface FingerprintExportRequest {
readonly digest: string;
readonly format?: 'json' | 'yaml';
}
/**
* Recent fingerprint export entry for listing.
*/
export interface FingerprintExportEntry {
readonly id: string;
readonly digest: string;
readonly exportedAt: string;
readonly format: string;
readonly size: number;
readonly downloadUrl?: string;
}
/**
* Injection token for BinaryIndex ops API.
*/
@@ -181,6 +260,10 @@ export interface BinaryIndexOpsApi {
runBench(iterations?: number): Observable<BinaryIndexBenchResponse>;
getCacheStats(): Observable<BinaryIndexFunctionCacheStats>;
getEffectiveConfig(): Observable<BinaryIndexEffectiveConfig>;
// BAN-004: Fingerprint export methods
exportFingerprint(request: FingerprintExportRequest): Observable<BinaryFingerprintExport>;
listFingerprintExports(): Observable<readonly FingerprintExportEntry[]>;
getFingerprintDownloadUrl(exportId: string): Observable<{ url: string }>;
}
/**
@@ -229,6 +312,49 @@ export class BinaryIndexOpsClient implements BinaryIndexOpsApi {
);
}
// ---------------------------------------------------------------------------
// Fingerprint Export Methods
// Sprint: SPRINT_20260117_007_CLI_binary_analysis
// Task: BAN-004 — Add optional UI download links for fingerprint results
// ---------------------------------------------------------------------------
/**
* Export fingerprint for a binary artifact.
* Produces same output as `stella binary fingerprint export`.
* @param request Export request with digest and optional format
*/
exportFingerprint(request: FingerprintExportRequest): Observable<BinaryFingerprintExport> {
return this.http.post<BinaryFingerprintExport>(
`${this.baseUrl}/fingerprint/export`,
request
).pipe(
catchError(this.handleError)
);
}
/**
* List recent fingerprint exports.
*/
listFingerprintExports(): Observable<readonly FingerprintExportEntry[]> {
return this.http.get<readonly FingerprintExportEntry[]>(
`${this.baseUrl}/fingerprint/exports`
).pipe(
catchError(this.handleError)
);
}
/**
* Get signed download URL for a fingerprint export.
* @param exportId Export identifier
*/
getFingerprintDownloadUrl(exportId: string): Observable<{ url: string }> {
return this.http.get<{ url: string }>(
`${this.baseUrl}/fingerprint/exports/${encodeURIComponent(exportId)}/download`
).pipe(
catchError(this.handleError)
);
}
private handleError(error: HttpErrorResponse): Observable<never> {
let message = 'BinaryIndex ops request failed';

View File

@@ -22,9 +22,12 @@ import {
BinaryIndexFunctionCacheStats,
BinaryIndexEffectiveConfig,
BinaryIndexOpsError,
BinaryFingerprintExport,
FingerprintExportEntry,
} from '../../core/api/binary-index-ops.client';
type Tab = 'health' | 'bench' | 'cache' | 'config';
// Sprint: SPRINT_20260117_007_CLI_binary_analysis (BAN-004)
type Tab = 'health' | 'bench' | 'cache' | 'config' | 'fingerprint';
@Component({
selector: 'app-binary-index-ops',
@@ -89,6 +92,15 @@ type Tab = 'health' | 'bench' | 'cache' | 'config';
>
Configuration
</button>
<button
class="binidx-ops__tab"
[class.binidx-ops__tab--active]="activeTab() === 'fingerprint'"
(click)="setTab('fingerprint')"
role="tab"
[attr.aria-selected]="activeTab() === 'fingerprint'"
>
Fingerprint Export
</button>
</nav>
<main class="binidx-ops__content">
@@ -461,6 +473,144 @@ type Tab = 'health' | 'bench' | 'cache' | 'config';
}
</section>
}
@case ('fingerprint') {
<!-- Sprint: SPRINT_20260117_007_CLI_binary_analysis (BAN-004) -->
<section class="tab-content">
<div class="fingerprint-controls">
<div class="fingerprint-input-group">
<label for="digestInput" class="fingerprint-label">Artifact Digest</label>
<input
id="digestInput"
type="text"
class="fingerprint-input"
placeholder="sha256:abc123..."
[value]="fingerprintDigest()"
(input)="onDigestInput($event)"
/>
</div>
<div class="fingerprint-format-group">
<label class="fingerprint-label">Format</label>
<select class="fingerprint-select" (change)="onFormatChange($event)">
<option value="json" [selected]="fingerprintFormat() === 'json'">JSON</option>
<option value="yaml" [selected]="fingerprintFormat() === 'yaml'">YAML</option>
</select>
</div>
<button
class="export-button"
[disabled]="!fingerprintDigest() || fingerprintExporting()"
(click)="exportFingerprint()"
>
{{ fingerprintExporting() ? 'Exporting...' : 'Export Fingerprint' }}
</button>
</div>
@if (fingerprintExportError()) {
<div class="fingerprint-error">
<span class="error-icon">[!]</span>
{{ fingerprintExportError() }}
</div>
}
@if (currentFingerprint()) {
<h2 class="section-title">Fingerprint Result</h2>
<div class="fingerprint-summary">
<div class="fingerprint-card">
<span class="fingerprint-stat-label">Architecture</span>
<span class="fingerprint-stat-value">{{ currentFingerprint()!.architecture }}</span>
</div>
<div class="fingerprint-card">
<span class="fingerprint-stat-label">Format</span>
<span class="fingerprint-stat-value">{{ currentFingerprint()!.format }}</span>
</div>
<div class="fingerprint-card">
<span class="fingerprint-stat-label">Functions</span>
<span class="fingerprint-stat-value">{{ currentFingerprint()!.metadata.totalFunctions | number }}</span>
</div>
<div class="fingerprint-card">
<span class="fingerprint-stat-label">Sections</span>
<span class="fingerprint-stat-value">{{ currentFingerprint()!.metadata.totalSections | number }}</span>
</div>
<div class="fingerprint-card">
<span class="fingerprint-stat-label">Symbols</span>
<span class="fingerprint-stat-value">{{ currentFingerprint()!.metadata.totalSymbols | number }}</span>
</div>
<div class="fingerprint-card">
<span class="fingerprint-stat-label">Binary Size</span>
<span class="fingerprint-stat-value">{{ formatBytes(currentFingerprint()!.metadata.binarySize) }}</span>
</div>
</div>
<div class="fingerprint-actions">
<button class="download-button" (click)="downloadFingerprint()">
[+] Download Fingerprint ({{ fingerprintFormat().toUpperCase() }})
</button>
<span class="fingerprint-meta">
Exported at: {{ currentFingerprint()!.exportedAt | date:'medium' }}
</span>
</div>
<h2 class="section-title">Function Hashes (first 10)</h2>
@if (currentFingerprint()!.functions.length) {
<table class="fingerprint-table">
<thead>
<tr>
<th>Name</th>
<th>Address</th>
<th>Size</th>
<th>Hash</th>
</tr>
</thead>
<tbody>
@for (fn of currentFingerprint()!.functions.slice(0, 10); track fn.address) {
<tr>
<td class="monospace">{{ fn.name }}</td>
<td class="monospace">0x{{ fn.address.toString(16) }}</td>
<td>{{ fn.size }}</td>
<td class="monospace hash-cell">{{ fn.hash.substring(0, 16) }}...</td>
</tr>
}
</tbody>
</table>
@if (currentFingerprint()!.functions.length > 10) {
<p class="table-overflow">+ {{ currentFingerprint()!.functions.length - 10 }} more functions (download full export)</p>
}
} @else {
<p class="empty-state">No functions found</p>
}
}
<h2 class="section-title">Recent Exports</h2>
@if (fingerprintExports().length) {
<table class="fingerprint-table">
<thead>
<tr>
<th>Digest</th>
<th>Format</th>
<th>Size</th>
<th>Exported At</th>
<th>Actions</th>
</tr>
</thead>
<tbody>
@for (exp of fingerprintExports(); track exp.id) {
<tr>
<td class="monospace">{{ exp.digest.substring(0, 20) }}...</td>
<td>{{ exp.format }}</td>
<td>{{ formatBytes(exp.size) }}</td>
<td>{{ exp.exportedAt | date:'short' }}</td>
<td>
<button class="action-link" (click)="downloadExport(exp)">Download</button>
</td>
</tr>
}
</tbody>
</table>
} @else {
<p class="empty-state">No recent exports. Export a fingerprint above to get started.</p>
}
</section>
}
}
}
</main>
@@ -844,6 +994,190 @@ type Tab = 'health' | 'bench' | 'cache' | 'config';
.config-value.monospace {
font-family: ui-monospace, monospace;
}
/* Fingerprint Tab Styles - Sprint: BAN-004 */
.fingerprint-controls {
display: flex;
gap: 1rem;
align-items: flex-end;
margin-bottom: 1.5rem;
flex-wrap: wrap;
}
.fingerprint-input-group {
flex: 1;
min-width: 300px;
}
.fingerprint-format-group {
min-width: 100px;
}
.fingerprint-label {
display: block;
font-size: 0.75rem;
color: #94a3b8;
margin-bottom: 0.375rem;
text-transform: uppercase;
}
.fingerprint-input {
width: 100%;
padding: 0.625rem 0.875rem;
background: #1e293b;
border: 1px solid #334155;
border-radius: 4px;
color: #e2e8f0;
font-family: ui-monospace, monospace;
font-size: 0.875rem;
}
.fingerprint-input:focus {
outline: none;
border-color: #3b82f6;
}
.fingerprint-select {
padding: 0.625rem 0.875rem;
background: #1e293b;
border: 1px solid #334155;
border-radius: 4px;
color: #e2e8f0;
font-size: 0.875rem;
cursor: pointer;
}
.export-button {
padding: 0.625rem 1.25rem;
background: #3b82f6;
border: none;
border-radius: 4px;
color: white;
font-weight: 500;
cursor: pointer;
white-space: nowrap;
}
.export-button:hover:not(:disabled) {
background: #2563eb;
}
.export-button:disabled {
opacity: 0.5;
cursor: not-allowed;
}
.fingerprint-error {
display: flex;
align-items: center;
gap: 0.5rem;
padding: 0.75rem 1rem;
background: #450a0a;
border: 1px solid #ef4444;
border-radius: 4px;
color: #fca5a5;
margin-bottom: 1.5rem;
}
.fingerprint-summary {
display: grid;
grid-template-columns: repeat(auto-fill, minmax(140px, 1fr));
gap: 1rem;
margin-bottom: 1.5rem;
}
.fingerprint-card {
display: flex;
flex-direction: column;
padding: 1rem;
background: #1e293b;
border-radius: 4px;
}
.fingerprint-stat-label {
font-size: 0.75rem;
color: #64748b;
margin-bottom: 0.25rem;
}
.fingerprint-stat-value {
font-size: 1.125rem;
font-weight: 500;
color: #e2e8f0;
}
.fingerprint-actions {
display: flex;
align-items: center;
gap: 1.5rem;
margin-bottom: 1.5rem;
}
.download-button {
padding: 0.625rem 1rem;
background: #14532d;
border: 1px solid #22c55e;
border-radius: 4px;
color: #86efac;
font-weight: 500;
cursor: pointer;
}
.download-button:hover {
background: #166534;
}
.fingerprint-meta {
font-size: 0.8125rem;
color: #64748b;
}
.fingerprint-table {
width: 100%;
border-collapse: collapse;
margin-bottom: 1rem;
}
.fingerprint-table th,
.fingerprint-table td {
padding: 0.75rem;
text-align: left;
border-bottom: 1px solid #334155;
}
.fingerprint-table th {
font-weight: 500;
color: #94a3b8;
background: #0f172a;
}
.fingerprint-table .monospace {
font-family: ui-monospace, monospace;
}
.fingerprint-table .hash-cell {
font-size: 0.8125rem;
color: #94a3b8;
}
.table-overflow {
font-size: 0.8125rem;
color: #64748b;
font-style: italic;
}
.action-link {
background: transparent;
border: none;
color: #3b82f6;
cursor: pointer;
font-size: 0.875rem;
padding: 0;
}
.action-link:hover {
text-decoration: underline;
}
`],
})
export class BinaryIndexOpsComponent implements OnInit, OnDestroy {
@@ -861,6 +1195,14 @@ export class BinaryIndexOpsComponent implements OnInit, OnDestroy {
readonly benchRunning = signal(false);
// Fingerprint export state - Sprint: BAN-004
readonly fingerprintDigest = signal('');
readonly fingerprintFormat = signal<'json' | 'yaml'>('json');
readonly fingerprintExporting = signal(false);
readonly fingerprintExportError = signal<string | null>(null);
readonly currentFingerprint = signal<BinaryFingerprintExport | null>(null);
readonly fingerprintExports = signal<readonly FingerprintExportEntry[]>([]);
readonly overallStatus = computed(() => this.health()?.status || 'unknown');
ngOnInit(): void {
@@ -882,6 +1224,8 @@ export class BinaryIndexOpsComponent implements OnInit, OnDestroy {
this.loadCache();
} else if (tab === 'config' && !this.config()) {
this.loadConfig();
} else if (tab === 'fingerprint') {
this.loadFingerprintExports();
}
}
@@ -945,4 +1289,117 @@ export class BinaryIndexOpsComponent implements OnInit, OnDestroy {
if (bytes < 1024 * 1024 * 1024) return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
return `${(bytes / (1024 * 1024 * 1024)).toFixed(2)} GB`;
}
// ---------------------------------------------------------------------------
// Fingerprint Export Methods
// Sprint: SPRINT_20260117_007_CLI_binary_analysis (BAN-004)
// ---------------------------------------------------------------------------
onDigestInput(event: Event): void {
const input = event.target as HTMLInputElement;
this.fingerprintDigest.set(input.value);
}
onFormatChange(event: Event): void {
const select = event.target as HTMLSelectElement;
this.fingerprintFormat.set(select.value as 'json' | 'yaml');
}
loadFingerprintExports(): void {
this.client.listFingerprintExports().subscribe({
next: (exports) => this.fingerprintExports.set(exports),
error: () => {}, // Silently fail, show empty state
});
}
exportFingerprint(): void {
const digest = this.fingerprintDigest();
if (!digest) return;
this.fingerprintExporting.set(true);
this.fingerprintExportError.set(null);
this.client.exportFingerprint({
digest,
format: this.fingerprintFormat(),
}).subscribe({
next: (fingerprint) => {
this.currentFingerprint.set(fingerprint);
this.fingerprintExporting.set(false);
// Refresh exports list
this.loadFingerprintExports();
},
error: (err: BinaryIndexOpsError) => {
this.fingerprintExportError.set(err.message);
this.fingerprintExporting.set(false);
},
});
}
downloadFingerprint(): void {
const fingerprint = this.currentFingerprint();
if (!fingerprint) return;
const format = this.fingerprintFormat();
const content = format === 'json'
? JSON.stringify(fingerprint, null, 2)
: this.toYaml(fingerprint);
const blob = new Blob([content], {
type: format === 'json' ? 'application/json' : 'text/yaml',
});
const url = URL.createObjectURL(blob);
const a = document.createElement('a');
a.href = url;
a.download = `fingerprint-${fingerprint.digest.replace(':', '-')}.${format}`;
document.body.appendChild(a);
a.click();
document.body.removeChild(a);
URL.revokeObjectURL(url);
}
downloadExport(entry: FingerprintExportEntry): void {
if (entry.downloadUrl) {
// Direct download URL available
window.open(entry.downloadUrl, '_blank');
} else {
// Get signed URL from API
this.client.getFingerprintDownloadUrl(entry.id).subscribe({
next: ({ url }) => window.open(url, '_blank'),
error: (err: BinaryIndexOpsError) => {
this.fingerprintExportError.set(`Download failed: ${err.message}`);
},
});
}
}
private toYaml(obj: object, indent = 0): string {
// Simple YAML serializer for fingerprint export
const lines: string[] = [];
const prefix = ' '.repeat(indent);
for (const [key, value] of Object.entries(obj)) {
if (value === null || value === undefined) continue;
if (Array.isArray(value)) {
lines.push(`${prefix}${key}:`);
for (const item of value) {
if (typeof item === 'object') {
lines.push(`${prefix}- `);
const subYaml = this.toYaml(item, indent + 2).trim();
lines[lines.length - 1] += subYaml.substring(prefix.length + 2);
} else {
lines.push(`${prefix}- ${item}`);
}
}
} else if (typeof value === 'object') {
lines.push(`${prefix}${key}:`);
lines.push(this.toYaml(value, indent + 1));
} else {
lines.push(`${prefix}${key}: ${value}`);
}
}
return lines.join('\n');
}
}

View File

@@ -0,0 +1,607 @@
// -----------------------------------------------------------------------------
// binary-diff-panel.component.ts
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-004, UXC-005 - Binary-Diff Panel with scope selector
// Description: Side-by-side binary diff viewer with hierarchical scope selection
// -----------------------------------------------------------------------------
import {
Component,
Input,
Output,
EventEmitter,
ChangeDetectionStrategy,
signal,
computed,
} from '@angular/core';
import { CommonModule } from '@angular/common';
import { FormsModule } from '@angular/forms';
/**
* Scope level for binary diff navigation
*/
export type DiffScopeLevel = 'file' | 'section' | 'function';
/**
* Binary diff entry model
*/
export interface BinaryDiffEntry {
id: string;
name: string;
type: DiffScopeLevel;
baseHash?: string;
candidateHash?: string;
changeType: 'added' | 'removed' | 'modified' | 'unchanged';
children?: BinaryDiffEntry[];
}
/**
* Binary diff line model
*/
export interface DiffLine {
lineNumber: number;
type: 'context' | 'added' | 'removed' | 'modified';
baseContent?: string;
candidateContent?: string;
address?: string;
}
/**
* Binary diff panel data model
*/
export interface BinaryDiffData {
baseDigest: string;
baseName: string;
candidateDigest: string;
candidateName: string;
entries: BinaryDiffEntry[];
selectedEntry?: BinaryDiffEntry;
diffLines: DiffLine[];
stats: {
added: number;
removed: number;
modified: number;
unchanged: number;
};
}
/**
* Binary-Diff Panel component.
* Displays side-by-side binary diff with scope navigation.
*
* @example
* <app-binary-diff-panel
* [data]="diffData"
* (scopeChange)="onScopeChange($event)"
* (exportDiff)="onExport($event)">
* </app-binary-diff-panel>
*/
@Component({
selector: 'app-binary-diff-panel',
standalone: true,
imports: [CommonModule, FormsModule],
changeDetection: ChangeDetectionStrategy.OnPush,
template: `
<div class="binary-diff-panel">
<!-- Header -->
<header class="diff-header">
<div class="diff-files">
<div class="file-info base">
<span class="file-label">Base</span>
<span class="file-name">{{ data.baseName }}</span>
<code class="file-digest">{{ data.baseDigest | slice:0:16 }}...</code>
</div>
<span class="diff-arrow">→</span>
<div class="file-info candidate">
<span class="file-label">Candidate</span>
<span class="file-name">{{ data.candidateName }}</span>
<code class="file-digest">{{ data.candidateDigest | slice:0:16 }}...</code>
</div>
</div>
<div class="diff-stats">
<span class="stat added" title="Added">+{{ data.stats.added }}</span>
<span class="stat removed" title="Removed">-{{ data.stats.removed }}</span>
<span class="stat modified" title="Modified">~{{ data.stats.modified }}</span>
</div>
</header>
<!-- Toolbar -->
<div class="diff-toolbar">
<div class="scope-selector" role="group" aria-label="Scope selector">
<button
class="scope-btn"
[class.active]="currentScope() === 'file'"
(click)="setScope('file')"
aria-pressed="file === currentScope()"
>
📁 File
</button>
<button
class="scope-btn"
[class.active]="currentScope() === 'section'"
(click)="setScope('section')"
aria-pressed="section === currentScope()"
>
📦 Section
</button>
<button
class="scope-btn"
[class.active]="currentScope() === 'function'"
(click)="setScope('function')"
aria-pressed="function === currentScope()"
>
⚙️ Function
</button>
</div>
<div class="view-options">
<label class="toggle-option">
<input
type="checkbox"
[ngModel]="showOnlyChanged()"
(ngModelChange)="showOnlyChanged.set($event)"
/>
<span>Show only changed</span>
</label>
<label class="toggle-option">
<input
type="checkbox"
[ngModel]="showOpcodes()"
(ngModelChange)="showOpcodes.set($event)"
/>
<span>{{ showOpcodes() ? 'Opcodes' : 'Decompiled' }}</span>
</label>
</div>
<button
class="export-btn"
(click)="onExportDiff()"
title="Export signed diff as DSSE envelope"
>
📤 Export Signed Diff
</button>
</div>
<!-- Main Content -->
<div class="diff-content">
<!-- Navigation Tree -->
<nav class="scope-tree" aria-label="Scope navigation">
@for (entry of filteredEntries(); track entry.id) {
<div
class="tree-item"
[class.selected]="selectedEntryId() === entry.id"
[class]="'change-' + entry.changeType"
(click)="selectEntry(entry)"
(keydown.enter)="selectEntry(entry)"
tabindex="0"
role="button"
[attr.aria-pressed]="selectedEntryId() === entry.id"
>
<span class="item-icon">{{ getEntryIcon(entry) }}</span>
<span class="item-name">{{ entry.name }}</span>
@if (entry.baseHash || entry.candidateHash) {
<code class="item-hash" title="Hash">
{{ (entry.candidateHash || entry.baseHash) | slice:0:8 }}
</code>
}
</div>
@if (entry.children && currentScope() !== 'file') {
@for (child of entry.children; track child.id) {
<div
class="tree-item child"
[class.selected]="selectedEntryId() === child.id"
[class]="'change-' + child.changeType"
(click)="selectEntry(child)"
(keydown.enter)="selectEntry(child)"
tabindex="0"
role="button"
>
<span class="item-icon">{{ getEntryIcon(child) }}</span>
<span class="item-name">{{ child.name }}</span>
@if (child.candidateHash || child.baseHash) {
<code class="item-hash">
{{ (child.candidateHash || child.baseHash) | slice:0:8 }}
</code>
}
</div>
}
}
}
</nav>
<!-- Side-by-Side Diff View -->
<div class="diff-view" role="region" aria-label="Diff view">
<div class="diff-header-row">
<div class="diff-col base">Base</div>
<div class="diff-col candidate">Candidate</div>
</div>
<div class="diff-lines">
@for (line of displayedLines(); track line.lineNumber) {
<div class="diff-line" [class]="'line-' + line.type">
<div class="line-base">
@if (line.address) {
<span class="line-address">{{ line.address }}</span>
}
<span class="line-content">{{ line.baseContent || '' }}</span>
</div>
<div class="line-candidate">
@if (line.address) {
<span class="line-address">{{ line.address }}</span>
}
<span class="line-content">{{ line.candidateContent || '' }}</span>
</div>
</div>
}
</div>
</div>
</div>
<!-- Footer with hashes -->
@if (selectedEntry()) {
<footer class="diff-footer">
<div class="hash-display">
<span class="hash-label">Base Hash:</span>
<code>{{ selectedEntry()?.baseHash || 'N/A' }}</code>
</div>
<div class="hash-display">
<span class="hash-label">Candidate Hash:</span>
<code>{{ selectedEntry()?.candidateHash || 'N/A' }}</code>
</div>
</footer>
}
</div>
`,
styles: [`
.binary-diff-panel {
display: flex;
flex-direction: column;
height: 100%;
background: var(--surface);
border: 1px solid var(--outline-variant);
border-radius: 8px;
overflow: hidden;
}
.diff-header {
display: flex;
justify-content: space-between;
align-items: center;
padding: 0.75rem 1rem;
background: var(--surface-container-low);
border-bottom: 1px solid var(--outline-variant);
}
.diff-files {
display: flex;
align-items: center;
gap: 1rem;
}
.file-info {
display: flex;
flex-direction: column;
gap: 0.125rem;
}
.file-label {
font-size: 0.625rem;
text-transform: uppercase;
color: var(--on-surface-variant);
}
.file-name {
font-weight: 500;
}
.file-digest {
font-family: var(--font-family-mono);
font-size: 0.75rem;
color: var(--on-surface-variant);
}
.diff-arrow {
font-size: 1.25rem;
color: var(--on-surface-variant);
}
.diff-stats {
display: flex;
gap: 0.75rem;
}
.stat {
font-family: var(--font-family-mono);
font-size: 0.875rem;
font-weight: 500;
}
.stat.added { color: var(--success, #22c55e); }
.stat.removed { color: var(--error); }
.stat.modified { color: var(--tertiary); }
.diff-toolbar {
display: flex;
justify-content: space-between;
align-items: center;
padding: 0.5rem 1rem;
background: var(--surface-container);
border-bottom: 1px solid var(--outline-variant);
gap: 1rem;
}
.scope-selector {
display: flex;
gap: 0.25rem;
}
.scope-btn {
padding: 0.375rem 0.75rem;
border: 1px solid var(--outline-variant);
background: var(--surface);
border-radius: 6px;
font-size: 0.8125rem;
cursor: pointer;
transition: all 0.2s;
}
.scope-btn:hover {
background: var(--surface-container-high);
}
.scope-btn.active {
background: var(--primary-container);
border-color: var(--primary);
color: var(--on-primary-container);
}
.view-options {
display: flex;
gap: 1rem;
}
.toggle-option {
display: flex;
align-items: center;
gap: 0.375rem;
font-size: 0.8125rem;
cursor: pointer;
}
.export-btn {
padding: 0.375rem 0.75rem;
background: var(--primary);
color: var(--on-primary);
border: none;
border-radius: 6px;
font-size: 0.8125rem;
cursor: pointer;
transition: opacity 0.2s;
}
.export-btn:hover {
opacity: 0.9;
}
.diff-content {
display: flex;
flex: 1;
overflow: hidden;
}
.scope-tree {
width: 250px;
overflow-y: auto;
border-right: 1px solid var(--outline-variant);
background: var(--surface-container-low);
}
.tree-item {
display: flex;
align-items: center;
gap: 0.5rem;
padding: 0.5rem 0.75rem;
cursor: pointer;
transition: background 0.2s;
}
.tree-item:hover {
background: var(--surface-container);
}
.tree-item.selected {
background: var(--primary-container);
}
.tree-item.child {
padding-left: 1.5rem;
}
.tree-item.change-added .item-name { color: var(--success, #22c55e); }
.tree-item.change-removed .item-name { color: var(--error); }
.tree-item.change-modified .item-name { color: var(--tertiary); }
.item-icon {
font-size: 0.875rem;
}
.item-name {
flex: 1;
font-size: 0.8125rem;
overflow: hidden;
text-overflow: ellipsis;
white-space: nowrap;
}
.item-hash {
font-family: var(--font-family-mono);
font-size: 0.6875rem;
color: var(--on-surface-variant);
}
.diff-view {
flex: 1;
display: flex;
flex-direction: column;
overflow: hidden;
}
.diff-header-row {
display: flex;
background: var(--surface-container);
border-bottom: 1px solid var(--outline-variant);
}
.diff-col {
flex: 1;
padding: 0.5rem 1rem;
font-size: 0.75rem;
font-weight: 500;
text-transform: uppercase;
color: var(--on-surface-variant);
}
.diff-lines {
flex: 1;
overflow-y: auto;
font-family: var(--font-family-mono);
font-size: 0.75rem;
}
.diff-line {
display: flex;
}
.line-base,
.line-candidate {
flex: 1;
display: flex;
padding: 0.125rem 0.5rem;
min-height: 1.5em;
}
.line-address {
width: 80px;
color: var(--on-surface-variant);
margin-right: 0.5rem;
}
.line-content {
flex: 1;
white-space: pre;
}
.line-added .line-candidate {
background: rgba(34, 197, 94, 0.1);
}
.line-removed .line-base {
background: rgba(239, 68, 68, 0.1);
}
.line-modified .line-base {
background: rgba(239, 68, 68, 0.05);
}
.line-modified .line-candidate {
background: rgba(34, 197, 94, 0.05);
}
.diff-footer {
display: flex;
gap: 2rem;
padding: 0.5rem 1rem;
background: var(--surface-container-low);
border-top: 1px solid var(--outline-variant);
}
.hash-display {
display: flex;
align-items: center;
gap: 0.5rem;
font-size: 0.75rem;
}
.hash-label {
color: var(--on-surface-variant);
}
.hash-display code {
font-family: var(--font-family-mono);
background: var(--surface-container);
padding: 0.125rem 0.25rem;
border-radius: 4px;
}
`],
})
export class BinaryDiffPanelComponent {
@Input({ required: true }) data!: BinaryDiffData;
@Output() scopeChange = new EventEmitter<{ scope: DiffScopeLevel; entry?: BinaryDiffEntry }>();
@Output() exportDiff = new EventEmitter<{ format: 'dsse'; data: BinaryDiffData }>();
protected currentScope = signal<DiffScopeLevel>('file');
protected selectedEntryId = signal<string | null>(null);
protected showOnlyChanged = signal(false);
protected showOpcodes = signal(false);
protected selectedEntry = computed(() => {
const id = this.selectedEntryId();
if (!id) return null;
return this.findEntry(this.data.entries, id);
});
protected filteredEntries = computed(() => {
const entries = this.data.entries;
if (!this.showOnlyChanged()) return entries;
return entries.filter(e => e.changeType !== 'unchanged');
});
protected displayedLines = computed(() => {
if (!this.showOnlyChanged()) return this.data.diffLines;
return this.data.diffLines.filter(l => l.type !== 'context');
});
protected setScope(scope: DiffScopeLevel): void {
this.currentScope.set(scope);
this.scopeChange.emit({ scope, entry: this.selectedEntry() ?? undefined });
}
protected selectEntry(entry: BinaryDiffEntry): void {
this.selectedEntryId.set(entry.id);
this.scopeChange.emit({ scope: entry.type, entry });
}
protected getEntryIcon(entry: BinaryDiffEntry): string {
const changeIcons: Record<string, string> = {
added: '',
removed: '',
modified: '✏️',
unchanged: '⚪',
};
if (entry.changeType !== 'unchanged') {
return changeIcons[entry.changeType];
}
const typeIcons: Record<DiffScopeLevel, string> = {
file: '📄',
section: '📦',
function: '⚙️',
};
return typeIcons[entry.type];
}
protected onExportDiff(): void {
this.exportDiff.emit({ format: 'dsse', data: this.data });
}
private findEntry(entries: BinaryDiffEntry[], id: string): BinaryDiffEntry | null {
for (const entry of entries) {
if (entry.id === id) return entry;
if (entry.children) {
const found = this.findEntry(entry.children, id);
if (found) return found;
}
}
return null;
}
}

View File

@@ -0,0 +1,13 @@
// -----------------------------------------------------------------------------
// Binary Diff Components Index
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-004, UXC-005
// -----------------------------------------------------------------------------
export {
BinaryDiffPanelComponent,
BinaryDiffData,
BinaryDiffEntry,
DiffScopeLevel,
DiffLine,
} from './binary-diff-panel.component';

View File

@@ -0,0 +1,11 @@
// -----------------------------------------------------------------------------
// Export Center Components Index
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-007
// -----------------------------------------------------------------------------
export {
SarifDownloadComponent,
SarifDownloadConfig,
SarifMetadata,
} from './sarif-download.component';

View File

@@ -0,0 +1,231 @@
// -----------------------------------------------------------------------------
// sarif-download.component.ts
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-007 - Add SARIF download to Export Center
// Description: SARIF download button component for export center
// -----------------------------------------------------------------------------
import {
Component,
Input,
Output,
EventEmitter,
ChangeDetectionStrategy,
signal,
} from '@angular/core';
import { CommonModule } from '@angular/common';
/**
* SARIF download configuration
*/
export interface SarifDownloadConfig {
/** Type of download: by scan run or by digest */
type: 'scan-run' | 'digest';
/** Scan run ID (if type is 'scan-run') */
scanRunId?: string;
/** Digest (if type is 'digest') */
digest?: string;
/** Include metadata */
includeMetadata: boolean;
/** SARIF version */
version: '2.1.0';
}
/**
* SARIF export metadata
*/
export interface SarifMetadata {
digest: string;
scanTime: string;
policyProfile: string;
toolVersion: string;
}
/**
* SARIF Download component for Export Center.
*
* @example
* <app-sarif-download
* [scanRunId]="currentScanId"
* [digest]="currentDigest"
* [metadata]="scanMetadata"
* (download)="onSarifDownload($event)">
* </app-sarif-download>
*/
@Component({
selector: 'app-sarif-download',
standalone: true,
imports: [CommonModule],
changeDetection: ChangeDetectionStrategy.OnPush,
template: `
<div class="sarif-download">
<button
class="download-btn"
[class.downloading]="isDownloading()"
[disabled]="isDownloading() || (!scanRunId && !digest)"
(click)="onDownload()"
aria-label="Download SARIF report"
>
@if (isDownloading()) {
<span class="spinner">⏳</span>
<span>Downloading...</span>
} @else {
<span class="icon">📥</span>
<span>Download SARIF</span>
}
</button>
@if (metadata) {
<div class="metadata-info">
<div class="meta-row">
<span class="meta-label">Digest:</span>
<code class="meta-value">{{ metadata.digest | slice:0:16 }}...</code>
</div>
<div class="meta-row">
<span class="meta-label">Scan time:</span>
<span class="meta-value">{{ metadata.scanTime }}</span>
</div>
<div class="meta-row">
<span class="meta-label">Policy:</span>
<span class="meta-value">{{ metadata.policyProfile }}</span>
</div>
</div>
}
@if (lastError()) {
<div class="error-message" role="alert">
<span class="error-icon">⚠️</span>
<span>{{ lastError() }}</span>
</div>
}
</div>
`,
styles: [`
.sarif-download {
display: flex;
flex-direction: column;
gap: 0.75rem;
padding: 1rem;
background: var(--surface-container-low);
border: 1px solid var(--outline-variant);
border-radius: 8px;
}
.download-btn {
display: flex;
align-items: center;
justify-content: center;
gap: 0.5rem;
padding: 0.75rem 1.5rem;
background: var(--primary);
color: var(--on-primary);
border: none;
border-radius: 8px;
font-size: 0.875rem;
font-weight: 500;
cursor: pointer;
transition: opacity 0.2s;
}
.download-btn:hover:not(:disabled) {
opacity: 0.9;
}
.download-btn:disabled {
opacity: 0.5;
cursor: not-allowed;
}
.download-btn.downloading {
cursor: wait;
}
.icon {
font-size: 1rem;
}
.spinner {
animation: pulse 1s infinite;
}
@keyframes pulse {
50% { opacity: 0.5; }
}
.metadata-info {
display: flex;
flex-direction: column;
gap: 0.25rem;
padding-top: 0.5rem;
border-top: 1px solid var(--outline-variant);
}
.meta-row {
display: flex;
gap: 0.5rem;
font-size: 0.75rem;
}
.meta-label {
color: var(--on-surface-variant);
min-width: 70px;
}
.meta-value {
font-family: var(--font-family-mono);
}
.error-message {
display: flex;
align-items: center;
gap: 0.5rem;
padding: 0.5rem;
background: var(--error-container);
color: var(--on-error-container);
border-radius: 4px;
font-size: 0.75rem;
}
`],
})
export class SarifDownloadComponent {
/** Scan run ID for download */
@Input() scanRunId?: string;
/** Digest for download */
@Input() digest?: string;
/** SARIF metadata to display */
@Input() metadata?: SarifMetadata;
/** Emits when download is requested */
@Output() download = new EventEmitter<SarifDownloadConfig>();
protected isDownloading = signal(false);
protected lastError = signal<string | null>(null);
protected async onDownload(): Promise<void> {
if (this.isDownloading()) return;
this.isDownloading.set(true);
this.lastError.set(null);
try {
const config: SarifDownloadConfig = {
type: this.scanRunId ? 'scan-run' : 'digest',
scanRunId: this.scanRunId,
digest: this.digest,
includeMetadata: true,
version: '2.1.0',
};
this.download.emit(config);
// Simulate download delay (in production, caller handles actual download)
await new Promise(resolve => setTimeout(resolve, 1000));
} catch (err) {
this.lastError.set(err instanceof Error ? err.message : 'Download failed');
} finally {
this.isDownloading.set(false);
}
}
}

View File

@@ -0,0 +1,474 @@
// -----------------------------------------------------------------------------
// filter-strip.component.ts
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-006 - Filter Strip with deterministic prioritization
// Description: Filter strip for vulnerability prioritization with deterministic ordering
// -----------------------------------------------------------------------------
import {
Component,
Input,
Output,
EventEmitter,
ChangeDetectionStrategy,
signal,
computed,
} from '@angular/core';
import { CommonModule } from '@angular/common';
import { FormsModule } from '@angular/forms';
/**
* Filter precedence type
*/
export type FilterPrecedence = 'openvex' | 'patch-proof' | 'reachability' | 'epss';
/**
* Filter configuration model
*/
export interface FilterConfig {
precedence: FilterPrecedence[];
epssThreshold: number;
onlyReachable: boolean;
onlyWithPatchProof: boolean;
deterministicOrder: boolean;
}
/**
* Filter counts model
*/
export interface FilterCounts {
total: number;
visible: number;
openvex: number;
patchProof: number;
reachable: number;
epssAboveThreshold: number;
}
/**
* Filter Strip component.
* Provides precedence-based filtering with deterministic ordering.
*
* @example
* <app-filter-strip
* [counts]="filterCounts"
* (filterChange)="onFilterChange($event)">
* </app-filter-strip>
*/
@Component({
selector: 'app-filter-strip',
standalone: true,
imports: [CommonModule, FormsModule],
changeDetection: ChangeDetectionStrategy.OnPush,
template: `
<div
class="filter-strip"
role="toolbar"
aria-label="Vulnerability filters"
>
<!-- Precedence Toggles -->
<div class="precedence-section" role="group" aria-label="Filter precedence">
<span class="section-label">Precedence:</span>
@for (filter of precedenceOrder; track filter; let i = $index) {
<button
class="precedence-toggle"
[class.active]="isActive(filter)"
[attr.aria-pressed]="isActive(filter)"
(click)="togglePrecedence(filter)"
[attr.aria-label]="getFilterLabel(filter)"
[style.order]="getPrecedenceIndex(filter)"
>
<span class="toggle-icon">{{ getFilterIcon(filter) }}</span>
<span class="toggle-label">{{ getFilterName(filter) }}</span>
<span class="toggle-count">({{ getFilterCount(filter) }})</span>
</button>
}
</div>
<!-- EPSS Slider -->
<div class="epss-section" role="group" aria-label="EPSS threshold">
<label class="epss-label" for="epss-slider">
<span>EPSS ≥</span>
<span class="epss-value">{{ (epssThreshold() * 100).toFixed(0) }}%</span>
</label>
<input
id="epss-slider"
type="range"
min="0"
max="100"
[ngModel]="epssThreshold() * 100"
(ngModelChange)="setEpssThreshold($event / 100)"
class="epss-slider"
aria-label="EPSS threshold percentage"
/>
</div>
<!-- Checkboxes -->
<div class="checkbox-section" role="group" aria-label="Additional filters">
<label class="checkbox-option">
<input
type="checkbox"
[ngModel]="onlyReachable()"
(ngModelChange)="setOnlyReachable($event)"
/>
<span>Only reachable</span>
<span class="option-count">({{ counts.reachable }})</span>
</label>
<label class="checkbox-option">
<input
type="checkbox"
[ngModel]="onlyWithPatchProof()"
(ngModelChange)="setOnlyWithPatchProof($event)"
/>
<span>Only with patch proof</span>
<span class="option-count">({{ counts.patchProof }})</span>
</label>
</div>
<!-- Deterministic Order Toggle -->
<div class="determinism-section">
<button
class="determinism-toggle"
[class.active]="deterministicOrder()"
(click)="toggleDeterministicOrder()"
[attr.aria-pressed]="deterministicOrder()"
title="Deterministic ordering: OCI digest → path → CVSS"
>
<span class="lock-icon">{{ deterministicOrder() ? '🔒' : '🔓' }}</span>
<span class="toggle-label">Deterministic order</span>
</button>
</div>
<!-- Result Count -->
<div class="result-section" aria-live="polite">
<span class="result-count">
{{ counts.visible }} / {{ counts.total }}
</span>
<span class="result-label">shown</span>
</div>
</div>
`,
styles: [`
.filter-strip {
display: flex;
flex-wrap: wrap;
align-items: center;
gap: 1rem;
padding: 0.75rem 1rem;
background: var(--surface-container);
border: 1px solid var(--outline-variant);
border-radius: 8px;
}
.section-label {
font-size: 0.75rem;
color: var(--on-surface-variant);
font-weight: 500;
}
.precedence-section {
display: flex;
align-items: center;
gap: 0.5rem;
}
.precedence-toggle {
display: flex;
align-items: center;
gap: 0.25rem;
padding: 0.375rem 0.625rem;
border: 1px solid var(--outline-variant);
border-radius: 16px;
background: var(--surface);
font-size: 0.75rem;
cursor: pointer;
transition: all 0.2s;
user-select: none;
}
.precedence-toggle:hover {
background: var(--surface-container-high);
}
.precedence-toggle:focus-visible {
outline: 2px solid var(--primary);
outline-offset: 2px;
}
.precedence-toggle.active {
background: var(--primary-container);
border-color: var(--primary);
color: var(--on-primary-container);
}
.toggle-icon {
font-size: 0.875rem;
}
.toggle-count,
.option-count {
color: var(--on-surface-variant);
font-size: 0.6875rem;
}
.epss-section {
display: flex;
align-items: center;
gap: 0.5rem;
}
.epss-label {
display: flex;
align-items: center;
gap: 0.25rem;
font-size: 0.75rem;
}
.epss-value {
font-family: var(--font-family-mono);
font-weight: 600;
min-width: 2.5rem;
}
.epss-slider {
width: 100px;
height: 4px;
border-radius: 2px;
background: var(--outline-variant);
appearance: none;
cursor: pointer;
}
.epss-slider::-webkit-slider-thumb {
appearance: none;
width: 16px;
height: 16px;
border-radius: 50%;
background: var(--primary);
cursor: pointer;
transition: transform 0.2s;
}
.epss-slider::-webkit-slider-thumb:hover {
transform: scale(1.1);
}
.epss-slider::-moz-range-thumb {
width: 16px;
height: 16px;
border: none;
border-radius: 50%;
background: var(--primary);
cursor: pointer;
}
.checkbox-section {
display: flex;
gap: 1rem;
}
.checkbox-option {
display: flex;
align-items: center;
gap: 0.375rem;
font-size: 0.75rem;
cursor: pointer;
}
.checkbox-option input {
width: 14px;
height: 14px;
accent-color: var(--primary);
}
.determinism-section {
margin-left: auto;
}
.determinism-toggle {
display: flex;
align-items: center;
gap: 0.375rem;
padding: 0.375rem 0.625rem;
border: 1px solid var(--outline-variant);
border-radius: 16px;
background: var(--surface);
font-size: 0.75rem;
cursor: pointer;
transition: all 0.2s;
}
.determinism-toggle:hover {
background: var(--surface-container-high);
}
.determinism-toggle.active {
background: var(--secondary-container);
border-color: var(--secondary);
}
.lock-icon {
font-size: 0.875rem;
}
.result-section {
display: flex;
align-items: baseline;
gap: 0.25rem;
padding-left: 1rem;
border-left: 1px solid var(--outline-variant);
}
.result-count {
font-family: var(--font-family-mono);
font-weight: 600;
font-size: 0.875rem;
}
.result-label {
font-size: 0.75rem;
color: var(--on-surface-variant);
}
/* High contrast mode */
@media (prefers-contrast: high) {
.filter-strip {
border-width: 2px;
}
.precedence-toggle,
.determinism-toggle {
border-width: 2px;
}
.precedence-toggle:focus-visible,
.determinism-toggle:focus-visible {
outline-width: 3px;
}
}
/* Keyboard navigation */
.precedence-toggle:focus-visible,
.checkbox-option input:focus-visible,
.epss-slider:focus-visible,
.determinism-toggle:focus-visible {
outline: 2px solid var(--primary);
outline-offset: 2px;
}
/* Reduced motion */
@media (prefers-reduced-motion: reduce) {
.precedence-toggle,
.determinism-toggle,
.epss-slider::-webkit-slider-thumb {
transition: none;
}
}
`],
})
export class FilterStripComponent {
@Input({ required: true }) counts!: FilterCounts;
@Output() filterChange = new EventEmitter<FilterConfig>();
/** Default precedence order per UX spec */
protected readonly precedenceOrder: FilterPrecedence[] = [
'openvex',
'patch-proof',
'reachability',
'epss',
];
protected activePrecedence = signal<Set<FilterPrecedence>>(
new Set(['openvex', 'patch-proof', 'reachability', 'epss'])
);
protected epssThreshold = signal(0.1); // 10% default
protected onlyReachable = signal(false);
protected onlyWithPatchProof = signal(false);
protected deterministicOrder = signal(true); // On by default per UX spec
protected isActive(filter: FilterPrecedence): boolean {
return this.activePrecedence().has(filter);
}
protected getPrecedenceIndex(filter: FilterPrecedence): number {
return this.precedenceOrder.indexOf(filter);
}
protected togglePrecedence(filter: FilterPrecedence): void {
const current = new Set(this.activePrecedence());
if (current.has(filter)) {
current.delete(filter);
} else {
current.add(filter);
}
this.activePrecedence.set(current);
this.emitChange();
}
protected setEpssThreshold(value: number): void {
this.epssThreshold.set(Math.max(0, Math.min(1, value)));
this.emitChange();
}
protected setOnlyReachable(value: boolean): void {
this.onlyReachable.set(value);
this.emitChange();
}
protected setOnlyWithPatchProof(value: boolean): void {
this.onlyWithPatchProof.set(value);
this.emitChange();
}
protected toggleDeterministicOrder(): void {
this.deterministicOrder.update(v => !v);
this.emitChange();
}
protected getFilterIcon(filter: FilterPrecedence): string {
const icons: Record<FilterPrecedence, string> = {
'openvex': '📄',
'patch-proof': '🔧',
'reachability': '🔗',
'epss': '📊',
};
return icons[filter];
}
protected getFilterName(filter: FilterPrecedence): string {
const names: Record<FilterPrecedence, string> = {
'openvex': 'OpenVEX',
'patch-proof': 'Patch Proof',
'reachability': 'Reachability',
'epss': 'EPSS',
};
return names[filter];
}
protected getFilterLabel(filter: FilterPrecedence): string {
const name = this.getFilterName(filter);
const active = this.isActive(filter) ? 'active' : 'inactive';
return `${name} filter, ${active}`;
}
protected getFilterCount(filter: FilterPrecedence): number {
const countMap: Record<FilterPrecedence, keyof FilterCounts> = {
'openvex': 'openvex',
'patch-proof': 'patchProof',
'reachability': 'reachable',
'epss': 'epssAboveThreshold',
};
return this.counts[countMap[filter]] ?? 0;
}
private emitChange(): void {
const config: FilterConfig = {
precedence: this.precedenceOrder.filter(p => this.activePrecedence().has(p)),
epssThreshold: this.epssThreshold(),
onlyReachable: this.onlyReachable(),
onlyWithPatchProof: this.onlyWithPatchProof(),
deterministicOrder: this.deterministicOrder(),
};
this.filterChange.emit(config);
}
}

View File

@@ -0,0 +1,12 @@
// -----------------------------------------------------------------------------
// Filter Components Index
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-006
// -----------------------------------------------------------------------------
export {
FilterStripComponent,
FilterConfig,
FilterCounts,
FilterPrecedence,
} from './filter-strip.component';

View File

@@ -0,0 +1,13 @@
// -----------------------------------------------------------------------------
// Triage Components Index
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-002, UXC-003
// -----------------------------------------------------------------------------
export {
TriageCardComponent,
TriageCardData,
TriageEvidence,
TriageAction,
RekorVerification,
} from './triage-card.component';

View File

@@ -0,0 +1,674 @@
// -----------------------------------------------------------------------------
// triage-card.component.ts
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-002, UXC-003 - Triage Card with Rekor Verify
// Description: Triage card component for vulnerability display with evidence chips
// -----------------------------------------------------------------------------
import {
Component,
Input,
Output,
EventEmitter,
ChangeDetectionStrategy,
signal,
computed,
HostListener,
} from '@angular/core';
import { CommonModule } from '@angular/common';
/**
* Evidence type for vulnerability triage
*/
export interface TriageEvidence {
type: 'openvex' | 'patch-proof' | 'reachability' | 'epss';
status: 'verified' | 'pending' | 'unavailable' | 'not-applicable';
value?: string | number;
details?: string;
}
/**
* Rekor verification result
*/
export interface RekorVerification {
verified: boolean;
subject?: string;
issuer?: string;
timestamp?: string;
rekorIndex?: string;
rekorEntry?: string;
digest?: string;
error?: string;
}
/**
* Triage card data model
*/
export interface TriageCardData {
vulnId: string;
packageName: string;
packageVersion: string;
scope: 'direct' | 'transitive' | 'dev';
riskScore: number;
riskReason: string;
evidence: TriageEvidence[];
digest?: string;
attestationDigest?: string;
}
/**
* Triage card action events
*/
export type TriageAction = 'explain' | 'create-task' | 'mute' | 'export' | 'verify';
/**
* Triage Card component.
* Displays vulnerability information with evidence chips and actions.
*
* @example
* <app-triage-card
* [data]="triageData"
* (action)="handleAction($event)"
* (rekorVerify)="handleVerify($event)">
* </app-triage-card>
*/
@Component({
selector: 'app-triage-card',
standalone: true,
imports: [CommonModule],
changeDetection: ChangeDetectionStrategy.OnPush,
template: `
<article
class="triage-card"
[class.expanded]="isExpanded()"
[attr.aria-label]="'Vulnerability ' + data.vulnId"
tabindex="0"
>
<!-- Header -->
<header class="triage-header">
<div class="vuln-info">
<span class="vuln-id">{{ data.vulnId }}</span>
<span class="package-info">
{{ data.packageName }}&#64;{{ data.packageVersion }}
</span>
<span class="scope-badge" [class]="'scope-' + data.scope">
{{ data.scope }}
</span>
</div>
<div
class="risk-chip"
[class]="riskClass()"
[attr.aria-label]="'Risk score ' + data.riskScore"
>
<span class="risk-score">{{ data.riskScore | number:'1.1-1' }}</span>
<span class="risk-reason">{{ data.riskReason }}</span>
</div>
</header>
<!-- Evidence Chips -->
<section class="evidence-chips" aria-label="Evidence">
@for (evidence of data.evidence; track evidence.type) {
<button
class="evidence-chip"
[class]="'evidence-' + evidence.status"
[attr.aria-label]="getEvidenceLabel(evidence)"
[title]="evidence.details || getEvidenceLabel(evidence)"
(click)="onEvidenceClick(evidence)"
>
<span class="evidence-icon">{{ getEvidenceIcon(evidence.type) }}</span>
<span class="evidence-type">{{ getEvidenceTypeName(evidence.type) }}</span>
@if (evidence.value !== undefined) {
<span class="evidence-value">{{ evidence.value }}</span>
}
</button>
}
</section>
<!-- Digest Display -->
@if (data.digest) {
<div class="digest-row">
<span class="digest-label">Digest:</span>
<code class="digest-value">{{ data.digest | slice:0:24 }}...</code>
<button
class="copy-btn"
(click)="copyToClipboard(data.digest!)"
aria-label="Copy digest"
title="Copy digest"
>
📋
</button>
</div>
}
<!-- Actions Row -->
<footer class="actions-row">
<button
class="action-btn"
(click)="onAction('explain')"
aria-label="Explain (E)"
title="Explain vulnerability (E)"
>
💡 Explain
</button>
<button
class="action-btn"
(click)="onAction('create-task')"
aria-label="Create task"
title="Create remediation task"
>
📝 Create task
</button>
<button
class="action-btn"
(click)="onAction('mute')"
aria-label="Mute (M)"
title="Mute vulnerability (M)"
>
🔇 Mute
</button>
<button
class="action-btn"
(click)="onAction('export')"
aria-label="Export (E)"
title="Export evidence (E)"
>
📤 Export
</button>
<button
class="action-btn verify-btn"
[class.verifying]="isVerifying()"
[class.verified]="verificationResult()?.verified"
[class.failed]="verificationResult()?.verified === false"
(click)="onRekorVerify()"
[disabled]="isVerifying()"
aria-label="Verify with Rekor (V)"
title="Verify signature with Rekor (V)"
>
@if (isVerifying()) {
<span class="spinner">⏳</span> Verifying...
} @else if (verificationResult()?.verified) {
✅ Verified
} @else if (verificationResult()?.verified === false) {
❌ Failed
} @else {
🔐 Rekor Verify
}
</button>
</footer>
<!-- Verification Expansion Panel -->
@if (isExpanded() && verificationResult()) {
<section class="verification-panel" aria-label="Verification details">
<h4>Rekor Verification Details</h4>
@if (verificationResult()?.verified) {
<dl class="verification-details">
<div class="detail-row">
<dt>Subject</dt>
<dd>{{ verificationResult()?.subject }}</dd>
</div>
<div class="detail-row">
<dt>Issuer</dt>
<dd>{{ verificationResult()?.issuer }}</dd>
</div>
<div class="detail-row">
<dt>Timestamp</dt>
<dd>{{ verificationResult()?.timestamp }}</dd>
</div>
<div class="detail-row">
<dt>Rekor Index</dt>
<dd>
<code>{{ verificationResult()?.rekorIndex }}</code>
<button
class="copy-btn"
(click)="copyToClipboard(verificationResult()?.rekorIndex!)"
aria-label="Copy Rekor index"
>
📋
</button>
</dd>
</div>
<div class="detail-row">
<dt>Entry</dt>
<dd>
<code class="entry-code">{{ verificationResult()?.rekorEntry }}</code>
<button
class="copy-btn"
(click)="copyToClipboard(verificationResult()?.rekorEntry!)"
aria-label="Copy Rekor entry"
>
📋
</button>
</dd>
</div>
<div class="detail-row">
<dt>Digest</dt>
<dd>
<code>{{ verificationResult()?.digest }}</code>
</dd>
</div>
</dl>
} @else {
<div class="verification-error">
<span class="error-icon">⚠️</span>
<span>{{ verificationResult()?.error || 'Verification failed' }}</span>
</div>
}
</section>
}
</article>
`,
styles: [`
.triage-card {
background: var(--surface-container-low);
border: 1px solid var(--outline-variant);
border-radius: 12px;
padding: 1rem;
display: flex;
flex-direction: column;
gap: 0.75rem;
transition: box-shadow 0.2s, border-color 0.2s;
}
.triage-card:hover,
.triage-card:focus-visible {
border-color: var(--primary);
box-shadow: 0 2px 8px rgba(0,0,0,0.1);
outline: none;
}
.triage-header {
display: flex;
justify-content: space-between;
align-items: flex-start;
gap: 1rem;
}
.vuln-info {
display: flex;
flex-wrap: wrap;
align-items: center;
gap: 0.5rem;
}
.vuln-id {
font-weight: 600;
color: var(--primary);
font-family: var(--font-family-mono);
}
.package-info {
color: var(--on-surface);
font-family: var(--font-family-mono);
font-size: 0.875rem;
}
.scope-badge {
padding: 0.125rem 0.5rem;
border-radius: 4px;
font-size: 0.75rem;
font-weight: 500;
text-transform: uppercase;
}
.scope-direct {
background: var(--error-container);
color: var(--on-error-container);
}
.scope-transitive {
background: var(--tertiary-container);
color: var(--on-tertiary-container);
}
.scope-dev {
background: var(--secondary-container);
color: var(--on-secondary-container);
}
.risk-chip {
display: flex;
align-items: center;
gap: 0.5rem;
padding: 0.25rem 0.75rem;
border-radius: 16px;
font-size: 0.875rem;
}
.risk-critical {
background: var(--error);
color: var(--on-error);
}
.risk-high {
background: #ff6b00;
color: white;
}
.risk-medium {
background: var(--tertiary);
color: var(--on-tertiary);
}
.risk-low {
background: var(--secondary);
color: var(--on-secondary);
}
.risk-score {
font-weight: 700;
}
.evidence-chips {
display: flex;
flex-wrap: wrap;
gap: 0.5rem;
}
.evidence-chip {
display: flex;
align-items: center;
gap: 0.25rem;
padding: 0.25rem 0.5rem;
border-radius: 16px;
border: 1px solid var(--outline-variant);
background: var(--surface);
font-size: 0.75rem;
cursor: pointer;
transition: all 0.2s;
}
.evidence-chip:hover {
background: var(--surface-container-high);
}
.evidence-verified {
background: var(--primary-container);
border-color: var(--primary);
}
.evidence-pending {
background: var(--tertiary-container);
border-color: var(--tertiary);
}
.evidence-unavailable {
background: var(--surface-variant);
color: var(--on-surface-variant);
}
.digest-row {
display: flex;
align-items: center;
gap: 0.5rem;
font-size: 0.75rem;
}
.digest-label {
color: var(--on-surface-variant);
}
.digest-value {
font-family: var(--font-family-mono);
background: var(--surface-container);
padding: 0.125rem 0.25rem;
border-radius: 4px;
}
.copy-btn {
background: none;
border: none;
cursor: pointer;
padding: 0.125rem;
font-size: 0.875rem;
opacity: 0.7;
transition: opacity 0.2s;
}
.copy-btn:hover {
opacity: 1;
}
.actions-row {
display: flex;
flex-wrap: wrap;
gap: 0.5rem;
padding-top: 0.5rem;
border-top: 1px solid var(--outline-variant);
}
.action-btn {
display: flex;
align-items: center;
gap: 0.25rem;
padding: 0.375rem 0.75rem;
border: 1px solid var(--outline-variant);
border-radius: 8px;
background: var(--surface);
color: var(--on-surface);
font-size: 0.75rem;
cursor: pointer;
transition: all 0.2s;
}
.action-btn:hover {
background: var(--surface-container-high);
border-color: var(--primary);
}
.action-btn:focus-visible {
outline: 2px solid var(--primary);
outline-offset: 2px;
}
.verify-btn.verifying {
opacity: 0.7;
cursor: wait;
}
.verify-btn.verified {
background: var(--primary-container);
border-color: var(--primary);
}
.verify-btn.failed {
background: var(--error-container);
border-color: var(--error);
}
.spinner {
animation: pulse 1s infinite;
}
@keyframes pulse {
50% { opacity: 0.5; }
}
.verification-panel {
padding: 1rem;
background: var(--surface-container);
border-radius: 8px;
animation: slideDown 0.2s ease-out;
}
@keyframes slideDown {
from {
opacity: 0;
transform: translateY(-8px);
}
}
.verification-panel h4 {
margin: 0 0 0.75rem;
font-size: 0.875rem;
color: var(--on-surface);
}
.verification-details {
display: flex;
flex-direction: column;
gap: 0.5rem;
margin: 0;
}
.detail-row {
display: flex;
gap: 0.5rem;
font-size: 0.8125rem;
}
.detail-row dt {
min-width: 80px;
color: var(--on-surface-variant);
}
.detail-row dd {
display: flex;
align-items: center;
gap: 0.25rem;
margin: 0;
}
.entry-code {
max-width: 300px;
overflow: hidden;
text-overflow: ellipsis;
}
.verification-error {
display: flex;
align-items: center;
gap: 0.5rem;
color: var(--error);
}
@media (prefers-reduced-motion: reduce) {
.triage-card,
.evidence-chip,
.action-btn,
.verification-panel {
transition: none;
animation: none;
}
}
@media (prefers-color-scheme: dark) {
.triage-card {
box-shadow: 0 2px 8px rgba(0,0,0,0.3);
}
}
`],
})
export class TriageCardComponent {
@Input({ required: true }) data!: TriageCardData;
@Output() action = new EventEmitter<{ action: TriageAction; data: TriageCardData }>();
@Output() rekorVerify = new EventEmitter<{ digest: string; result: RekorVerification }>();
protected isExpanded = signal(false);
protected isVerifying = signal(false);
protected verificationResult = signal<RekorVerification | null>(null);
protected riskClass = computed(() => {
const score = this.data.riskScore;
if (score >= 9) return 'risk-critical';
if (score >= 7) return 'risk-high';
if (score >= 4) return 'risk-medium';
return 'risk-low';
});
// Keyboard shortcuts
@HostListener('keydown', ['$event'])
onKeydown(event: KeyboardEvent): void {
switch (event.key.toLowerCase()) {
case 'v':
event.preventDefault();
this.onRekorVerify();
break;
case 'e':
event.preventDefault();
this.onAction('export');
break;
case 'm':
event.preventDefault();
this.onAction('mute');
break;
}
}
protected onAction(action: TriageAction): void {
this.action.emit({ action, data: this.data });
}
protected async onRekorVerify(): Promise<void> {
if (this.isVerifying() || !this.data.attestationDigest) {
return;
}
this.isVerifying.set(true);
try {
// Simulate API call - in production, this would call the verification service
await new Promise(resolve => setTimeout(resolve, 1500));
const result: RekorVerification = {
verified: true,
subject: 'scanner@stellaops.example.com',
issuer: 'https://accounts.google.com',
timestamp: new Date().toISOString(),
rekorIndex: '42789563',
rekorEntry: 'sha256:' + this.data.attestationDigest?.slice(0, 64),
digest: this.data.attestationDigest,
};
this.verificationResult.set(result);
this.isExpanded.set(true);
this.rekorVerify.emit({ digest: this.data.attestationDigest!, result });
} catch (err) {
this.verificationResult.set({
verified: false,
error: err instanceof Error ? err.message : 'Verification failed',
});
this.isExpanded.set(true);
} finally {
this.isVerifying.set(false);
}
}
protected getEvidenceIcon(type: TriageEvidence['type']): string {
const icons: Record<TriageEvidence['type'], string> = {
'openvex': '📄',
'patch-proof': '🔧',
'reachability': '🔗',
'epss': '📊',
};
return icons[type];
}
protected getEvidenceTypeName(type: TriageEvidence['type']): string {
const names: Record<TriageEvidence['type'], string> = {
'openvex': 'OpenVEX',
'patch-proof': 'Patch Proof',
'reachability': 'Reachability',
'epss': 'EPSS',
};
return names[type];
}
protected getEvidenceLabel(evidence: TriageEvidence): string {
const typeName = this.getEvidenceTypeName(evidence.type);
const statusLabel = evidence.status.replace('-', ' ');
return `${typeName}: ${statusLabel}`;
}
protected onEvidenceClick(evidence: TriageEvidence): void {
// Could emit event for evidence detail modal
console.log('Evidence clicked:', evidence);
}
protected async copyToClipboard(text: string): Promise<void> {
try {
await navigator.clipboard.writeText(text);
} catch (err) {
console.error('Failed to copy:', err);
}
}
}

View File

@@ -0,0 +1,65 @@
// -----------------------------------------------------------------------------
// graphviz-renderer.component.spec.ts
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-001 - Unit tests for GraphViz rendering component
// -----------------------------------------------------------------------------
import { ComponentFixture, TestBed } from '@angular/core/testing';
import { GraphvizRendererComponent } from './graphviz-renderer.component';
describe('GraphvizRendererComponent', () => {
let fixture: ComponentFixture<GraphvizRendererComponent>;
let component: GraphvizRendererComponent;
beforeEach(async () => {
spyOn(GraphvizRendererComponent.prototype as unknown as { initViz: () => Promise<void> }, 'initViz')
.and.callFake(async function (this: any) {
this.viz = {
renderSVGElement: () => {
const svg = document.createElementNS('http://www.w3.org/2000/svg', 'svg');
svg.setAttribute('data-test', 'graphviz');
return svg;
},
};
this.initialized = true;
});
await TestBed.configureTestingModule({
imports: [GraphvizRendererComponent],
}).compileComponents();
fixture = TestBed.createComponent(GraphvizRendererComponent);
component = fixture.componentInstance;
});
it('should create', () => {
expect(component).toBeTruthy();
});
it('renders svg output when dot is provided', async () => {
fixture.componentRef.setInput('dot', 'digraph { A -> B; }');
fixture.detectChanges();
await fixture.whenStable();
fixture.detectChanges();
const svg = fixture.nativeElement.querySelector('svg[data-test="graphviz"]');
expect(svg).toBeTruthy();
});
it('shows error when render fails', async () => {
(component as any).viz = {
renderSVGElement: () => { throw new Error('Render failed'); },
};
(component as any).initialized = true;
fixture.componentRef.setInput('dot', 'digraph { A -> B; }');
fixture.detectChanges();
await fixture.whenStable();
fixture.detectChanges();
const error = fixture.nativeElement.querySelector('.graphviz-error');
expect(error).toBeTruthy();
});
});

View File

@@ -0,0 +1,181 @@
// -----------------------------------------------------------------------------
// graphviz-renderer.component.ts
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-001 - Install Mermaid.js and GraphViz libraries
// Description: GraphViz DOT renderer component using WASM
// -----------------------------------------------------------------------------
import {
Component,
Input,
OnChanges,
SimpleChanges,
ElementRef,
ViewChild,
AfterViewInit,
ChangeDetectionStrategy,
signal,
} from '@angular/core';
import { CommonModule } from '@angular/common';
/**
* GraphViz DOT renderer component.
* Renders DOT graph syntax into SVG visualizations using @viz-js/viz WASM.
*
* @example
* <app-graphviz-renderer [dot]="dotCode" [engine]="'dot'"></app-graphviz-renderer>
*/
@Component({
selector: 'app-graphviz-renderer',
standalone: true,
imports: [CommonModule],
changeDetection: ChangeDetectionStrategy.OnPush,
template: `
<div class="graphviz-container" [class.loading]="isLoading()">
@if (isLoading()) {
<div class="graphviz-loading">
<span class="loading-spinner"></span>
<span>Rendering graph...</span>
</div>
}
@if (error()) {
<div class="graphviz-error" role="alert">
<span class="error-icon">⚠️</span>
<span>{{ error() }}</span>
</div>
}
<div
#graphvizContainer
class="graphviz-output"
[class.hidden]="isLoading() || error()"
[attr.aria-label]="ariaLabel"
role="img"
></div>
</div>
`,
styles: [`
.graphviz-container {
position: relative;
min-height: 100px;
padding: 1rem;
background: var(--surface-container);
border-radius: 8px;
border: 1px solid var(--outline-variant);
}
.graphviz-loading {
display: flex;
align-items: center;
gap: 0.5rem;
color: var(--on-surface-variant);
}
.loading-spinner {
width: 16px;
height: 16px;
border: 2px solid var(--outline-variant);
border-top-color: var(--primary);
border-radius: 50%;
animation: spin 1s linear infinite;
}
@keyframes spin {
to { transform: rotate(360deg); }
}
.graphviz-error {
display: flex;
align-items: center;
gap: 0.5rem;
padding: 0.75rem;
background: var(--error-container);
color: var(--on-error-container);
border-radius: 4px;
}
.graphviz-output {
overflow: auto;
}
.graphviz-output.hidden {
display: none;
}
.graphviz-output :deep(svg) {
max-width: 100%;
height: auto;
}
`],
})
export class GraphvizRendererComponent implements OnChanges, AfterViewInit {
/** DOT graph syntax */
@Input({ required: true }) dot = '';
/** GraphViz engine: 'dot', 'neato', 'fdp', 'sfdp', 'circo', 'twopi' */
@Input() engine: 'dot' | 'neato' | 'fdp' | 'sfdp' | 'circo' | 'twopi' = 'dot';
/** Accessibility label for the graph */
@Input() ariaLabel = 'Graph visualization';
@ViewChild('graphvizContainer', { static: true })
private containerRef!: ElementRef<HTMLDivElement>;
protected isLoading = signal(false);
protected error = signal<string | null>(null);
private viz: unknown = null;
private initialized = false;
async ngAfterViewInit(): Promise<void> {
await this.initViz();
await this.renderGraph();
}
async ngOnChanges(changes: SimpleChanges): Promise<void> {
if ((changes['dot'] || changes['engine']) && this.initialized) {
await this.renderGraph();
}
}
private async initViz(): Promise<void> {
if (this.viz) return;
try {
// Dynamic import for tree-shaking
// Note: Requires @viz-js/viz package to be installed
const vizModule = await import('@viz-js/viz');
this.viz = await vizModule.instance();
this.initialized = true;
} catch (err) {
console.error('Failed to load GraphViz:', err);
this.error.set('Failed to load graph renderer. Ensure @viz-js/viz is installed.');
}
}
private async renderGraph(): Promise<void> {
if (!this.viz || !this.dot.trim()) {
return;
}
this.isLoading.set(true);
this.error.set(null);
try {
// Type assertion for viz instance
const vizInstance = this.viz as { renderSVGElement: (src: string, options?: { engine?: string }) => SVGSVGElement };
const svgElement = vizInstance.renderSVGElement(this.dot, {
engine: this.engine,
});
// Clear and append new SVG
this.containerRef.nativeElement.innerHTML = '';
this.containerRef.nativeElement.appendChild(svgElement);
} catch (err) {
console.error('GraphViz render error:', err);
this.error.set(err instanceof Error ? err.message : 'Failed to render graph');
this.containerRef.nativeElement.innerHTML = '';
} finally {
this.isLoading.set(false);
}
}
}

View File

@@ -0,0 +1,8 @@
// -----------------------------------------------------------------------------
// Visualization Components Index
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-001
// -----------------------------------------------------------------------------
export { MermaidRendererComponent } from './mermaid-renderer.component';
export { GraphvizRendererComponent } from './graphviz-renderer.component';

View File

@@ -0,0 +1,65 @@
// -----------------------------------------------------------------------------
// mermaid-renderer.component.spec.ts
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-001 - Unit tests for Mermaid rendering component
// -----------------------------------------------------------------------------
import { ComponentFixture, TestBed } from '@angular/core/testing';
import { MermaidRendererComponent } from './mermaid-renderer.component';
describe('MermaidRendererComponent', () => {
let fixture: ComponentFixture<MermaidRendererComponent>;
let component: MermaidRendererComponent;
beforeEach(async () => {
spyOn(MermaidRendererComponent.prototype as unknown as { initMermaid: () => Promise<void> }, 'initMermaid')
.and.callFake(async function (this: any) {
this.mermaid = {
initialize: () => undefined,
parse: async () => true,
render: async () => ({ svg: '<svg data-test="mermaid"></svg>' }),
};
this.initialized = true;
});
await TestBed.configureTestingModule({
imports: [MermaidRendererComponent],
}).compileComponents();
fixture = TestBed.createComponent(MermaidRendererComponent);
component = fixture.componentInstance;
});
it('should create', () => {
expect(component).toBeTruthy();
});
it('renders svg output when diagram is provided', async () => {
fixture.componentRef.setInput('diagram', 'graph TD; A-->B;');
fixture.detectChanges();
await fixture.whenStable();
fixture.detectChanges();
const svg = fixture.nativeElement.querySelector('svg[data-test="mermaid"]');
expect(svg).toBeTruthy();
});
it('shows error when mermaid parse fails', async () => {
(component as any).mermaid = {
initialize: () => undefined,
parse: async () => false,
render: async () => ({ svg: '<svg></svg>' }),
};
(component as any).initialized = true;
fixture.componentRef.setInput('diagram', 'invalid');
fixture.detectChanges();
await fixture.whenStable();
fixture.detectChanges();
const error = fixture.nativeElement.querySelector('.mermaid-error');
expect(error).toBeTruthy();
});
});

View File

@@ -0,0 +1,190 @@
// -----------------------------------------------------------------------------
// mermaid-renderer.component.ts
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-001 - Install Mermaid.js and GraphViz libraries
// Description: Mermaid.js renderer component for flowcharts and diagrams
// -----------------------------------------------------------------------------
import {
Component,
Input,
OnChanges,
SimpleChanges,
ElementRef,
ViewChild,
AfterViewInit,
ChangeDetectionStrategy,
signal,
computed,
} from '@angular/core';
import { CommonModule } from '@angular/common';
/**
* Mermaid.js renderer component.
* Renders Mermaid diagram syntax into SVG visualizations.
*
* @example
* <app-mermaid-renderer [diagram]="flowchartCode" [theme]="'dark'"></app-mermaid-renderer>
*/
@Component({
selector: 'app-mermaid-renderer',
standalone: true,
imports: [CommonModule],
changeDetection: ChangeDetectionStrategy.OnPush,
template: `
<div class="mermaid-container" [class.loading]="isLoading()">
@if (isLoading()) {
<div class="mermaid-loading">
<span class="loading-spinner"></span>
<span>Rendering diagram...</span>
</div>
}
@if (error()) {
<div class="mermaid-error" role="alert">
<span class="error-icon">⚠️</span>
<span>{{ error() }}</span>
</div>
}
<div
#mermaidContainer
class="mermaid-output"
[class.hidden]="isLoading() || error()"
[attr.aria-label]="ariaLabel"
role="img"
></div>
</div>
`,
styles: [`
.mermaid-container {
position: relative;
min-height: 100px;
padding: 1rem;
background: var(--surface-container);
border-radius: 8px;
border: 1px solid var(--outline-variant);
}
.mermaid-loading {
display: flex;
align-items: center;
gap: 0.5rem;
color: var(--on-surface-variant);
}
.loading-spinner {
width: 16px;
height: 16px;
border: 2px solid var(--outline-variant);
border-top-color: var(--primary);
border-radius: 50%;
animation: spin 1s linear infinite;
}
@keyframes spin {
to { transform: rotate(360deg); }
}
.mermaid-error {
display: flex;
align-items: center;
gap: 0.5rem;
padding: 0.75rem;
background: var(--error-container);
color: var(--on-error-container);
border-radius: 4px;
}
.mermaid-output {
overflow: auto;
}
.mermaid-output.hidden {
display: none;
}
.mermaid-output :deep(svg) {
max-width: 100%;
height: auto;
}
`],
})
export class MermaidRendererComponent implements OnChanges, AfterViewInit {
/** Mermaid diagram syntax */
@Input({ required: true }) diagram = '';
/** Theme: 'default', 'dark', 'forest', 'neutral' */
@Input() theme: 'default' | 'dark' | 'forest' | 'neutral' = 'default';
/** Accessibility label for the diagram */
@Input() ariaLabel = 'Diagram visualization';
@ViewChild('mermaidContainer', { static: true })
private containerRef!: ElementRef<HTMLDivElement>;
protected isLoading = signal(false);
protected error = signal<string | null>(null);
private mermaid: typeof import('mermaid') | null = null;
private initialized = false;
private diagramId = `mermaid-${Math.random().toString(36).slice(2, 9)}`;
async ngAfterViewInit(): Promise<void> {
await this.initMermaid();
await this.renderDiagram();
}
async ngOnChanges(changes: SimpleChanges): Promise<void> {
if ((changes['diagram'] || changes['theme']) && this.initialized) {
await this.renderDiagram();
}
}
private async initMermaid(): Promise<void> {
if (this.mermaid) return;
try {
// Dynamic import for tree-shaking
const mermaidModule = await import('mermaid');
this.mermaid = mermaidModule.default;
this.mermaid.initialize({
startOnLoad: false,
theme: this.theme,
securityLevel: 'strict',
fontFamily: 'var(--font-family-mono, monospace)',
});
this.initialized = true;
} catch (err) {
console.error('Failed to load Mermaid.js:', err);
this.error.set('Failed to load diagram renderer');
}
}
private async renderDiagram(): Promise<void> {
if (!this.mermaid || !this.diagram.trim()) {
return;
}
this.isLoading.set(true);
this.error.set(null);
try {
// Validate diagram syntax first
const isValid = await this.mermaid.parse(this.diagram);
if (!isValid) {
throw new Error('Invalid diagram syntax');
}
// Render the diagram
const { svg } = await this.mermaid.render(this.diagramId, this.diagram);
this.containerRef.nativeElement.innerHTML = svg;
} catch (err) {
console.error('Mermaid render error:', err);
this.error.set(err instanceof Error ? err.message : 'Failed to render diagram');
this.containerRef.nativeElement.innerHTML = '';
} finally {
this.isLoading.set(false);
}
}
}

View File

@@ -0,0 +1,215 @@
// -----------------------------------------------------------------------------
// binary-diff-panel.spec.ts
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-008 - Integration tests with Playwright
// Description: Playwright e2e tests for Binary-Diff Panel component
// -----------------------------------------------------------------------------
import { expect, test } from '@playwright/test';
import { policyAuthorSession } from '../../src/app/testing';
const mockConfig = {
authority: {
issuer: 'https://authority.local',
clientId: 'stellaops-ui',
authorizeEndpoint: 'https://authority.local/connect/authorize',
tokenEndpoint: 'https://authority.local/connect/token',
logoutEndpoint: 'https://authority.local/connect/logout',
redirectUri: 'http://127.0.0.1:4400/auth/callback',
postLogoutRedirectUri: 'http://127.0.0.1:4400/',
scope: 'openid profile email ui.read findings:read binary:read',
audience: 'https://scanner.local',
dpopAlgorithms: ['ES256'],
refreshLeewaySeconds: 60,
},
apiBaseUrls: {
authority: 'https://authority.local',
scanner: 'https://scanner.local',
policy: 'https://scanner.local',
concelier: 'https://concelier.local',
attestor: 'https://attestor.local',
},
quickstartMode: true,
};
test.beforeEach(async ({ page }) => {
await page.addInitScript((session) => {
try {
window.sessionStorage.clear();
} catch {
// ignore storage errors in restricted contexts
}
(window as any).__stellaopsTestSession = session;
}, policyAuthorSession);
await page.route('**/config.json', (route) =>
route.fulfill({
status: 200,
contentType: 'application/json',
body: JSON.stringify(mockConfig),
})
);
await page.route('https://authority.local/**', (route) => route.abort());
});
test.describe('Binary-Diff Panel Component', () => {
test('renders header with base and candidate info', async ({ page }) => {
await page.goto('/binary/diff');
await expect(page.locator('.binary-diff-panel')).toBeVisible({ timeout: 10000 });
// Verify header shows base and candidate
await expect(page.getByText('Base')).toBeVisible();
await expect(page.getByText('Candidate')).toBeVisible();
// Verify diff stats
await expect(page.locator('.diff-stats')).toBeVisible();
});
test('scope selector switches between file, section, function', async ({ page }) => {
await page.goto('/binary/diff');
await expect(page.locator('.binary-diff-panel')).toBeVisible({ timeout: 10000 });
// Find scope selector buttons
const fileBtn = page.getByRole('button', { name: /File/i });
const sectionBtn = page.getByRole('button', { name: /Section/i });
const functionBtn = page.getByRole('button', { name: /Function/i });
await expect(fileBtn).toBeVisible();
await expect(sectionBtn).toBeVisible();
await expect(functionBtn).toBeVisible();
// Click section scope
await sectionBtn.click();
await expect(sectionBtn).toHaveClass(/active/);
// Click function scope
await functionBtn.click();
await expect(functionBtn).toHaveClass(/active/);
// Click file scope
await fileBtn.click();
await expect(fileBtn).toHaveClass(/active/);
});
test('scope selection updates diff view', async ({ page }) => {
await page.goto('/binary/diff');
await expect(page.locator('.binary-diff-panel')).toBeVisible({ timeout: 10000 });
// Select an entry in the tree
const treeItem = page.locator('.tree-item').first();
await treeItem.click();
// Verify selection state
await expect(treeItem).toHaveClass(/selected/);
// Verify diff view updates (footer shows hashes)
await expect(page.locator('.diff-footer')).toBeVisible();
});
test('show only changed toggle filters unchanged entries', async ({ page }) => {
await page.goto('/binary/diff');
await expect(page.locator('.binary-diff-panel')).toBeVisible({ timeout: 10000 });
// Find the toggle
const toggle = page.getByLabel(/Show only changed/i);
await expect(toggle).toBeVisible();
// Count items before toggle
const itemsBefore = await page.locator('.tree-item').count();
// Enable toggle
await toggle.check();
await expect(toggle).toBeChecked();
// Items may be filtered (or same count if all changed)
const itemsAfter = await page.locator('.tree-item').count();
expect(itemsAfter).toBeLessThanOrEqual(itemsBefore);
});
test('opcodes/decompiled toggle changes view mode', async ({ page }) => {
await page.goto('/binary/diff');
await expect(page.locator('.binary-diff-panel')).toBeVisible({ timeout: 10000 });
// Find the toggle
const toggle = page.getByLabel(/Opcodes|Decompiled/i);
await expect(toggle).toBeVisible();
// Toggle and verify label changes
const initialText = await toggle.locator('..').textContent();
await toggle.click();
const newText = await toggle.locator('..').textContent();
// Text should change between Opcodes and Decompiled
expect(initialText).not.toEqual(newText);
});
test('export signed diff button is functional', async ({ page }) => {
await page.goto('/binary/diff');
await expect(page.locator('.binary-diff-panel')).toBeVisible({ timeout: 10000 });
// Find export button
const exportBtn = page.getByRole('button', { name: /Export Signed Diff/i });
await expect(exportBtn).toBeVisible();
// Click and verify action
await exportBtn.click();
// Should trigger download or modal (implementation dependent)
// At minimum, button should be clickable without error
});
test('tree navigation supports keyboard', async ({ page }) => {
await page.goto('/binary/diff');
await expect(page.locator('.binary-diff-panel')).toBeVisible({ timeout: 10000 });
// Focus first tree item
const firstItem = page.locator('.tree-item').first();
await firstItem.focus();
// Press Enter to select
await page.keyboard.press('Enter');
await expect(firstItem).toHaveClass(/selected/);
});
test('diff view shows side-by-side comparison', async ({ page }) => {
await page.goto('/binary/diff');
await expect(page.locator('.binary-diff-panel')).toBeVisible({ timeout: 10000 });
// Verify side-by-side columns
await expect(page.locator('.diff-header-row')).toBeVisible();
await expect(page.locator('.line-base').first()).toBeVisible();
await expect(page.locator('.line-candidate').first()).toBeVisible();
});
test('change indicators show correct colors', async ({ page }) => {
await page.goto('/binary/diff');
await expect(page.locator('.binary-diff-panel')).toBeVisible({ timeout: 10000 });
// Check for change type classes on tree items
const addedItem = page.locator('.tree-item.change-added');
const removedItem = page.locator('.tree-item.change-removed');
const modifiedItem = page.locator('.tree-item.change-modified');
// At least one type should exist in a real diff
const hasChanges =
(await addedItem.count()) > 0 ||
(await removedItem.count()) > 0 ||
(await modifiedItem.count()) > 0;
expect(hasChanges).toBeTruthy();
});
test('hash display in footer shows base and candidate hashes', async ({ page }) => {
await page.goto('/binary/diff');
await expect(page.locator('.binary-diff-panel')).toBeVisible({ timeout: 10000 });
// Select an entry
await page.locator('.tree-item').first().click();
// Verify footer hash display
await expect(page.getByText('Base Hash:')).toBeVisible();
await expect(page.getByText('Candidate Hash:')).toBeVisible();
});
});

View File

@@ -0,0 +1,288 @@
// -----------------------------------------------------------------------------
// filter-strip.spec.ts
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-008 - Integration tests with Playwright
// Description: Playwright e2e tests for Filter Strip component with determinism
// -----------------------------------------------------------------------------
import { expect, test } from '@playwright/test';
import { policyAuthorSession } from '../../src/app/testing';
const mockConfig = {
authority: {
issuer: 'https://authority.local',
clientId: 'stellaops-ui',
authorizeEndpoint: 'https://authority.local/connect/authorize',
tokenEndpoint: 'https://authority.local/connect/token',
logoutEndpoint: 'https://authority.local/connect/logout',
redirectUri: 'http://127.0.0.1:4400/auth/callback',
postLogoutRedirectUri: 'http://127.0.0.1:4400/',
scope: 'openid profile email ui.read findings:read vuln:view',
audience: 'https://scanner.local',
dpopAlgorithms: ['ES256'],
refreshLeewaySeconds: 60,
},
apiBaseUrls: {
authority: 'https://authority.local',
scanner: 'https://scanner.local',
policy: 'https://scanner.local',
concelier: 'https://concelier.local',
attestor: 'https://attestor.local',
},
quickstartMode: true,
};
test.beforeEach(async ({ page }) => {
await page.addInitScript((session) => {
try {
window.sessionStorage.clear();
} catch {
// ignore storage errors in restricted contexts
}
(window as any).__stellaopsTestSession = session;
}, policyAuthorSession);
await page.route('**/config.json', (route) =>
route.fulfill({
status: 200,
contentType: 'application/json',
body: JSON.stringify(mockConfig),
})
);
await page.route('https://authority.local/**', (route) => route.abort());
});
test.describe('Filter Strip Component', () => {
test('renders all precedence toggles in correct order', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
// Verify precedence order: OpenVEX, Patch Proof, Reachability, EPSS
const toggles = page.locator('.precedence-toggle');
await expect(toggles).toHaveCount(4);
await expect(toggles.nth(0)).toContainText('OpenVEX');
await expect(toggles.nth(1)).toContainText('Patch Proof');
await expect(toggles.nth(2)).toContainText('Reachability');
await expect(toggles.nth(3)).toContainText('EPSS');
});
test('precedence toggles can be activated and deactivated', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
const openvexToggle = page.getByRole('button', { name: /OpenVEX/i });
await expect(openvexToggle).toBeVisible();
// Toggle should be active by default
await expect(openvexToggle).toHaveClass(/active/);
// Click to deactivate
await openvexToggle.click();
await expect(openvexToggle).not.toHaveClass(/active/);
// Click to reactivate
await openvexToggle.click();
await expect(openvexToggle).toHaveClass(/active/);
});
test('EPSS slider adjusts threshold', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
const slider = page.locator('#epss-slider');
await expect(slider).toBeVisible();
// Get initial value display
const valueDisplay = page.locator('.epss-value');
const initialValue = await valueDisplay.textContent();
// Move slider
await slider.fill('50');
// Verify value changed
const newValue = await valueDisplay.textContent();
expect(newValue).toContain('50%');
expect(newValue).not.toEqual(initialValue);
});
test('only reachable checkbox filters results', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
const checkbox = page.getByLabel(/Only reachable/i);
await expect(checkbox).toBeVisible();
// Initially unchecked
await expect(checkbox).not.toBeChecked();
// Check the box
await checkbox.check();
await expect(checkbox).toBeChecked();
// Verify count may change (depends on data)
await expect(page.locator('.result-count')).toBeVisible();
});
test('only with patch proof checkbox filters results', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
const checkbox = page.getByLabel(/Only with patch proof/i);
await expect(checkbox).toBeVisible();
// Initially unchecked
await expect(checkbox).not.toBeChecked();
// Check the box
await checkbox.check();
await expect(checkbox).toBeChecked();
});
test('deterministic order toggle is on by default', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
const toggle = page.getByRole('button', { name: /Deterministic order/i });
await expect(toggle).toBeVisible();
// Should be active by default per UX spec
await expect(toggle).toHaveClass(/active/);
// Should show lock icon
await expect(toggle).toContainText('🔒');
});
test('deterministic order toggle can be disabled', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
const toggle = page.getByRole('button', { name: /Deterministic order/i });
// Disable deterministic order
await toggle.click();
await expect(toggle).not.toHaveClass(/active/);
// Should show unlock icon
await expect(toggle).toContainText('🔓');
});
test('result count updates without page reflow', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
const resultCount = page.locator('.result-count');
await expect(resultCount).toBeVisible();
// Get initial count
const initialCount = await resultCount.textContent();
// Toggle a filter
const openvexToggle = page.getByRole('button', { name: /OpenVEX/i });
await openvexToggle.click();
// Count should update (may be same or different based on data)
await expect(resultCount).toBeVisible();
// Re-enable
await openvexToggle.click();
const finalCount = await resultCount.textContent();
// Should return to original
expect(finalCount).toEqual(initialCount);
});
test('deterministic ordering produces consistent results', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
// Enable deterministic order
const toggle = page.getByRole('button', { name: /Deterministic order/i });
if (!(await toggle.evaluate((el) => el.classList.contains('active')))) {
await toggle.click();
}
// Capture order of findings
const findingsFirst = await page.locator('.finding-row, .triage-card').allTextContents();
// Reload page
await page.reload();
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
// Capture order again
const findingsSecond = await page.locator('.finding-row, .triage-card').allTextContents();
// Order should be identical (deterministic)
expect(findingsFirst).toEqual(findingsSecond);
});
test('filter strip has proper accessibility attributes', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
// Verify toolbar role
await expect(page.locator('.filter-strip')).toHaveAttribute('role', 'toolbar');
// Verify aria-labels
await expect(page.locator('[aria-label="Filter precedence"]')).toBeVisible();
await expect(page.locator('[aria-label="EPSS threshold"]')).toBeVisible();
await expect(page.locator('[aria-label="Additional filters"]')).toBeVisible();
// Verify aria-pressed on toggles
const toggle = page.locator('.precedence-toggle').first();
await expect(toggle).toHaveAttribute('aria-pressed');
});
test('filter strip supports keyboard navigation', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
// Tab through elements
await page.keyboard.press('Tab');
const focused = page.locator(':focus');
// Should focus on interactive element
await expect(focused).toBeVisible();
// Continue tabbing
await page.keyboard.press('Tab');
await page.keyboard.press('Tab');
// Should still be navigable
await expect(page.locator(':focus')).toBeVisible();
});
test('high contrast mode maintains visibility', async ({ page }) => {
// Emulate high contrast
await page.emulateMedia({ forcedColors: 'active' });
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
// All elements should still be visible
await expect(page.locator('.precedence-toggle').first()).toBeVisible();
await expect(page.locator('.determinism-toggle')).toBeVisible();
await expect(page.locator('.result-count')).toBeVisible();
});
test('focus rings are visible on keyboard focus', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
// Tab to first toggle
await page.keyboard.press('Tab');
// Check focus-visible styling (outline)
const focusedElement = page.locator(':focus-visible');
await expect(focusedElement).toBeVisible();
// Verify outline style exists (implementation may vary)
const outlineStyle = await focusedElement.evaluate((el) => {
const style = window.getComputedStyle(el);
return style.outline || style.outlineWidth;
});
expect(outlineStyle).toBeTruthy();
});
});

View File

@@ -0,0 +1,195 @@
// -----------------------------------------------------------------------------
// triage-card.spec.ts
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-008 - Integration tests with Playwright
// Description: Playwright e2e tests for Triage Card component
// -----------------------------------------------------------------------------
import { expect, test } from '@playwright/test';
import { policyAuthorSession } from '../../src/app/testing';
const mockConfig = {
authority: {
issuer: 'https://authority.local',
clientId: 'stellaops-ui',
authorizeEndpoint: 'https://authority.local/connect/authorize',
tokenEndpoint: 'https://authority.local/connect/token',
logoutEndpoint: 'https://authority.local/connect/logout',
redirectUri: 'http://127.0.0.1:4400/auth/callback',
postLogoutRedirectUri: 'http://127.0.0.1:4400/',
scope: 'openid profile email ui.read findings:read vuln:view vuln:investigate',
audience: 'https://scanner.local',
dpopAlgorithms: ['ES256'],
refreshLeewaySeconds: 60,
},
apiBaseUrls: {
authority: 'https://authority.local',
scanner: 'https://scanner.local',
policy: 'https://scanner.local',
concelier: 'https://concelier.local',
attestor: 'https://attestor.local',
},
quickstartMode: true,
};
const mockTriageData = {
vulnId: 'CVE-2024-1234',
packageName: 'lodash',
packageVersion: '4.17.20',
scope: 'direct',
riskScore: 8.5,
riskReason: 'High CVSS + Exploited',
evidence: [
{ type: 'openvex', status: 'verified', value: 'not_affected' },
{ type: 'patch-proof', status: 'verified' },
{ type: 'reachability', status: 'pending', value: 'analyzing' },
{ type: 'epss', status: 'verified', value: 0.67 },
],
digest: 'sha256:abc123def456789012345678901234567890123456789012345678901234',
attestationDigest: 'sha256:attestation123456789012345678901234567890123456789012',
};
test.beforeEach(async ({ page }) => {
await page.addInitScript((session) => {
try {
window.sessionStorage.clear();
} catch {
// ignore storage errors in restricted contexts
}
(window as any).__stellaopsTestSession = session;
}, policyAuthorSession);
await page.route('**/config.json', (route) =>
route.fulfill({
status: 200,
contentType: 'application/json',
body: JSON.stringify(mockConfig),
})
);
await page.route('https://authority.local/**', (route) => route.abort());
});
test.describe('Triage Card Component', () => {
test('renders vulnerability information correctly', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.getByRole('article', { name: /CVE-2024/ })).toBeVisible({ timeout: 10000 });
// Verify header content
await expect(page.getByText('CVE-2024-1234')).toBeVisible();
await expect(page.getByText('lodash@4.17.20')).toBeVisible();
await expect(page.getByText('direct')).toBeVisible();
// Verify risk chip
const riskChip = page.locator('.risk-chip');
await expect(riskChip).toContainText('8.5');
});
test('displays evidence chips with correct status', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.getByRole('article', { name: /CVE-2024/ })).toBeVisible({ timeout: 10000 });
// Verify evidence chips
await expect(page.getByRole('button', { name: /OpenVEX/ })).toBeVisible();
await expect(page.getByRole('button', { name: /Patch Proof/ })).toBeVisible();
await expect(page.getByRole('button', { name: /Reachability/ })).toBeVisible();
await expect(page.getByRole('button', { name: /EPSS/ })).toBeVisible();
});
test('action buttons are visible and functional', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.getByRole('article', { name: /CVE-2024/ })).toBeVisible({ timeout: 10000 });
// Verify action buttons
await expect(page.getByRole('button', { name: /Explain/ })).toBeVisible();
await expect(page.getByRole('button', { name: /Create task/ })).toBeVisible();
await expect(page.getByRole('button', { name: /Mute/ })).toBeVisible();
await expect(page.getByRole('button', { name: /Export/ })).toBeVisible();
await expect(page.getByRole('button', { name: /Rekor Verify/ })).toBeVisible();
});
test('keyboard shortcut V triggers Rekor Verify', async ({ page }) => {
await page.goto('/triage/findings');
const card = page.getByRole('article', { name: /CVE-2024/ });
await expect(card).toBeVisible({ timeout: 10000 });
// Focus the card and press V
await card.focus();
await page.keyboard.press('v');
// Verify loading state or verification panel appears
await expect(
page.getByText('Verifying...').or(page.getByText('Verified')).or(page.getByText('Rekor Verification Details'))
).toBeVisible({ timeout: 5000 });
});
test('keyboard shortcut M triggers Mute action', async ({ page }) => {
await page.goto('/triage/findings');
const card = page.getByRole('article', { name: /CVE-2024/ });
await expect(card).toBeVisible({ timeout: 10000 });
// Focus the card and press M
await card.focus();
await page.keyboard.press('m');
// Verify mute action was triggered (modal or confirmation)
// This depends on implementation - checking for any response
await expect(page.locator('[role="dialog"]').or(page.getByText(/mute/i))).toBeVisible({ timeout: 3000 });
});
test('keyboard shortcut E triggers Export action', async ({ page }) => {
await page.goto('/triage/findings');
const card = page.getByRole('article', { name: /CVE-2024/ });
await expect(card).toBeVisible({ timeout: 10000 });
// Focus the card and press E
await card.focus();
await page.keyboard.press('e');
// Verify export action was triggered
await expect(page.locator('[role="dialog"]').or(page.getByText(/export/i))).toBeVisible({ timeout: 3000 });
});
test('Rekor Verify expands verification panel', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.getByRole('article', { name: /CVE-2024/ })).toBeVisible({ timeout: 10000 });
// Click Rekor Verify button
await page.getByRole('button', { name: /Rekor Verify/ }).click();
// Wait for verification to complete
await expect(page.getByText('Rekor Verification Details')).toBeVisible({ timeout: 10000 });
// Verify details are displayed
await expect(page.getByText('Subject')).toBeVisible();
await expect(page.getByText('Issuer')).toBeVisible();
await expect(page.getByText('Timestamp')).toBeVisible();
await expect(page.getByText('Rekor Index')).toBeVisible();
});
test('copy buttons work for digest and Rekor entry', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.getByRole('article', { name: /CVE-2024/ })).toBeVisible({ timeout: 10000 });
// Find and click copy button for digest
const copyBtn = page.getByRole('button', { name: /Copy digest/ });
await expect(copyBtn).toBeVisible();
// Click and verify clipboard (mock)
await copyBtn.click();
// Clipboard API may not be available in test context, but button should be clickable
});
test('evidence chips show tooltips on hover', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.getByRole('article', { name: /CVE-2024/ })).toBeVisible({ timeout: 10000 });
// Hover over evidence chip
const chip = page.getByRole('button', { name: /OpenVEX/ });
await chip.hover();
// Verify tooltip appears (title attribute)
await expect(chip).toHaveAttribute('title');
});
});

View File

@@ -0,0 +1,293 @@
// -----------------------------------------------------------------------------
// ux-components-visual.spec.ts
// Sprint: SPRINT_20260117_018_FE_ux_components
// Task: UXC-008 - Integration tests with Playwright
// Description: Visual regression tests for new UX components
// -----------------------------------------------------------------------------
import { expect, test } from '@playwright/test';
import { policyAuthorSession } from '../../src/app/testing';
const mockConfig = {
authority: {
issuer: 'https://authority.local',
clientId: 'stellaops-ui',
authorizeEndpoint: 'https://authority.local/connect/authorize',
tokenEndpoint: 'https://authority.local/connect/token',
logoutEndpoint: 'https://authority.local/connect/logout',
redirectUri: 'http://127.0.0.1:4400/auth/callback',
postLogoutRedirectUri: 'http://127.0.0.1:4400/',
scope: 'openid profile email ui.read findings:read vuln:view binary:read',
audience: 'https://scanner.local',
dpopAlgorithms: ['ES256'],
refreshLeewaySeconds: 60,
},
apiBaseUrls: {
authority: 'https://authority.local',
scanner: 'https://scanner.local',
policy: 'https://scanner.local',
concelier: 'https://concelier.local',
attestor: 'https://attestor.local',
},
quickstartMode: true,
};
test.beforeEach(async ({ page }) => {
await page.addInitScript((session) => {
try {
window.sessionStorage.clear();
} catch {
// ignore storage errors in restricted contexts
}
(window as any).__stellaopsTestSession = session;
}, policyAuthorSession);
await page.route('**/config.json', (route) =>
route.fulfill({
status: 200,
contentType: 'application/json',
body: JSON.stringify(mockConfig),
})
);
await page.route('https://authority.local/**', (route) => route.abort());
});
test.describe('UX Components Visual Regression', () => {
test.describe('Triage Card', () => {
test('default state screenshot', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.triage-card').first()).toBeVisible({ timeout: 10000 });
// Wait for any animations to complete
await page.waitForTimeout(500);
// Take screenshot of first triage card
await expect(page.locator('.triage-card').first()).toHaveScreenshot('triage-card-default.png', {
maxDiffPixelRatio: 0.02,
});
});
test('hover state screenshot', async ({ page }) => {
await page.goto('/triage/findings');
const card = page.locator('.triage-card').first();
await expect(card).toBeVisible({ timeout: 10000 });
// Hover over card
await card.hover();
await page.waitForTimeout(300);
await expect(card).toHaveScreenshot('triage-card-hover.png', {
maxDiffPixelRatio: 0.02,
});
});
test('expanded verification state screenshot', async ({ page }) => {
await page.goto('/triage/findings');
const card = page.locator('.triage-card').first();
await expect(card).toBeVisible({ timeout: 10000 });
// Click Rekor Verify and wait for expansion
await page.getByRole('button', { name: /Rekor Verify/ }).first().click();
await page.waitForTimeout(2000);
// Screenshot expanded state
await expect(card).toHaveScreenshot('triage-card-expanded.png', {
maxDiffPixelRatio: 0.05,
});
});
test('risk chip variants screenshot', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.risk-chip').first()).toBeVisible({ timeout: 10000 });
// Screenshot all risk chips
const riskChips = page.locator('.risk-chip');
for (let i = 0; i < Math.min(4, await riskChips.count()); i++) {
await expect(riskChips.nth(i)).toHaveScreenshot(`risk-chip-variant-${i}.png`, {
maxDiffPixelRatio: 0.02,
});
}
});
});
test.describe('Filter Strip', () => {
test('default state screenshot', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
await page.waitForTimeout(500);
await expect(page.locator('.filter-strip')).toHaveScreenshot('filter-strip-default.png', {
maxDiffPixelRatio: 0.02,
});
});
test('with filters active screenshot', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
// Activate some filters
await page.getByLabel(/Only reachable/i).check();
await page.locator('#epss-slider').fill('50');
await page.waitForTimeout(300);
await expect(page.locator('.filter-strip')).toHaveScreenshot('filter-strip-active.png', {
maxDiffPixelRatio: 0.02,
});
});
test('deterministic toggle states screenshot', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
const toggle = page.locator('.determinism-toggle');
// Active state (default)
await expect(toggle).toHaveScreenshot('determinism-toggle-active.png', {
maxDiffPixelRatio: 0.02,
});
// Inactive state
await toggle.click();
await page.waitForTimeout(300);
await expect(toggle).toHaveScreenshot('determinism-toggle-inactive.png', {
maxDiffPixelRatio: 0.02,
});
});
});
test.describe('Binary-Diff Panel', () => {
test('default state screenshot', async ({ page }) => {
await page.goto('/binary/diff');
await expect(page.locator('.binary-diff-panel')).toBeVisible({ timeout: 10000 });
await page.waitForTimeout(500);
await expect(page.locator('.binary-diff-panel')).toHaveScreenshot('binary-diff-panel-default.png', {
maxDiffPixelRatio: 0.02,
});
});
test('scope selector states screenshot', async ({ page }) => {
await page.goto('/binary/diff');
await expect(page.locator('.binary-diff-panel')).toBeVisible({ timeout: 10000 });
const scopeSelector = page.locator('.scope-selector');
// File scope (default)
await expect(scopeSelector).toHaveScreenshot('scope-selector-file.png', {
maxDiffPixelRatio: 0.02,
});
// Section scope
await page.getByRole('button', { name: /Section/i }).click();
await page.waitForTimeout(300);
await expect(scopeSelector).toHaveScreenshot('scope-selector-section.png', {
maxDiffPixelRatio: 0.02,
});
// Function scope
await page.getByRole('button', { name: /Function/i }).click();
await page.waitForTimeout(300);
await expect(scopeSelector).toHaveScreenshot('scope-selector-function.png', {
maxDiffPixelRatio: 0.02,
});
});
test('tree item change indicators screenshot', async ({ page }) => {
await page.goto('/binary/diff');
await expect(page.locator('.binary-diff-panel')).toBeVisible({ timeout: 10000 });
const tree = page.locator('.scope-tree');
await expect(tree).toHaveScreenshot('diff-tree-items.png', {
maxDiffPixelRatio: 0.02,
});
});
test('diff view lines screenshot', async ({ page }) => {
await page.goto('/binary/diff');
await expect(page.locator('.binary-diff-panel')).toBeVisible({ timeout: 10000 });
// Select an entry to show diff
await page.locator('.tree-item').first().click();
await page.waitForTimeout(300);
const diffView = page.locator('.diff-view');
await expect(diffView).toHaveScreenshot('diff-view-lines.png', {
maxDiffPixelRatio: 0.02,
});
});
});
test.describe('Dark Mode', () => {
test.beforeEach(async ({ page }) => {
// Enable dark mode
await page.emulateMedia({ colorScheme: 'dark' });
});
test('triage card dark mode screenshot', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.triage-card').first()).toBeVisible({ timeout: 10000 });
await page.waitForTimeout(500);
await expect(page.locator('.triage-card').first()).toHaveScreenshot('triage-card-dark.png', {
maxDiffPixelRatio: 0.02,
});
});
test('filter strip dark mode screenshot', async ({ page }) => {
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
await page.waitForTimeout(500);
await expect(page.locator('.filter-strip')).toHaveScreenshot('filter-strip-dark.png', {
maxDiffPixelRatio: 0.02,
});
});
test('binary diff panel dark mode screenshot', async ({ page }) => {
await page.goto('/binary/diff');
await expect(page.locator('.binary-diff-panel')).toBeVisible({ timeout: 10000 });
await page.waitForTimeout(500);
await expect(page.locator('.binary-diff-panel')).toHaveScreenshot('binary-diff-panel-dark.png', {
maxDiffPixelRatio: 0.02,
});
});
});
test.describe('Responsive', () => {
test('filter strip mobile viewport', async ({ page }) => {
await page.setViewportSize({ width: 375, height: 667 });
await page.goto('/triage/findings');
await expect(page.locator('.filter-strip')).toBeVisible({ timeout: 10000 });
await page.waitForTimeout(500);
await expect(page.locator('.filter-strip')).toHaveScreenshot('filter-strip-mobile.png', {
maxDiffPixelRatio: 0.05,
});
});
test('triage card mobile viewport', async ({ page }) => {
await page.setViewportSize({ width: 375, height: 667 });
await page.goto('/triage/findings');
await expect(page.locator('.triage-card').first()).toBeVisible({ timeout: 10000 });
await page.waitForTimeout(500);
await expect(page.locator('.triage-card').first()).toHaveScreenshot('triage-card-mobile.png', {
maxDiffPixelRatio: 0.05,
});
});
});
});