Commit Graph

605 Commits

Author SHA1 Message Date
master
ef4991cdd0 Archive completed Sprint 007 (mirror source completeness)
All 16 tasks DONE: catalog expansion 47→75 sources, 14 categories,
multi-value filters, mirror domain CRUD API, export scheduler, domain
builder wizard, mirror dashboard, catalog integration, RU/CIS promotion,
threat intel, mirror export update, and documentation.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-15 14:34:58 +02:00
master
254d8b9cfc Update documentation for 75-source catalog and mirror management
connectors.md: categorized index of all 75 sources across 14 categories
with descriptions, auth requirements, priorities, regions, and status.
FSTEC BDU, NKCKI, and Kaspersky ICS promoted from beta to stable.

architecture.md: updated source families (75 sources, 14 categories),
added mirror domain management API (12 endpoints) to REST APIs section.

mirrors.md: added MirrorExportScheduler docs, multi-value filter support
(sourceCategory/sourceTag shorthands), mirror config UI sections (wizard,
dashboard, catalog integration).

docker.md: added section 7 with mirror env var reference (11 vars),
domain config via env vars, filter shorthand documentation.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-15 14:34:49 +02:00
master
5291b6934c Archive completed Sprint 006 (first-time user remediation)
All 6 tasks DONE: journey matrix, P0 blank surfaces, identity self-serve,
trust workflows, naming/error-state consistency, and Playwright coverage.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-15 14:33:34 +02:00
master
2da76588d4 Close first-time user operator journey remediation
Promotions: replace empty-state stub with operator landing surface
showing pipeline stages, prerequisites, and onboarding guidance.

Operations: unify naming across sidebar, breadcrumb, title, and H1
from "Platform Ops" to "Operations".

Playwright: add promotions and operations landing journey checks to
the retained first-time-user remediation and aggregate audit suites.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-15 14:33:27 +02:00
master
e884b4bddd Repair first-time user reporting truthfulness journeys 2026-03-15 14:21:18 +02:00
master
b565e55942 Archive completed sprints 001-005 and update Sprint 007 task statuses
Archive 5 fully-done sprints to docs-archived/implplan/:
- 001: Setup/admin operator journey audit
- 002: Release confidence operator journey audit
- 003: Identity/trust operator journey audit
- 004: Integrations operator journey audit
- 005: Release create contract alignment

Update Sprint 007: mark TASK 1-10, 006b, 007a-c as DONE (all implemented
and committed). Only TASK-011 (documentation update) remains TODO.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-15 14:20:43 +02:00
master
ab14636f85 Repair first-time identity, trust, and integrations operator journeys
Identity/Trust: replace developer jargon with operator-facing language
on trust overview, trust admin summary, and trust analytics. Add context-
aware error handling (404/503 vs generic) for fresh-install guidance.
Add navigation cards for Watchlist and Analytics in trust overview grid.

Integrations: replace raw alert() calls in test-connection and health-
check actions with inline feedback banners using Angular signals. Add
dismissible error banner for delete failures on integration detail.

Supporting fixes: admin notifications, evidence audit, replay controls,
notify panel, sidebar, route ownership, offline-kit, reachability,
topology, and platform feeds components hardened with tests and
operator-facing empty states.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-15 13:35:56 +02:00
master
0c723b4e07 Add advisory source catalog UI, mirror wizard, and mirror dashboard
Source catalog component: browsable catalog of 75 advisory sources grouped
by 14 categories with search, filter, enable/disable toggles, batch
operations, health checks, and category descriptions.

Mirror domain builder: 3-step wizard (select sources → configure domain →
review & create) with category-level selection, auto-naming, format
choice, rate limits, signing options, and optional immediate generation.

Mirror dashboard: domain cards with staleness indicators, regenerate and
delete actions, consumer config panel, endpoint viewer, and empty-state
CTA leading to the wizard.

Catalog mirror header: mode badge, domain stats, and quick-access buttons
for mirror configuration integrated into the source catalog.

Supporting: source management API client (9 endpoints), mirror management
API client (12 endpoints), integration hub route wiring, onboarding hub
advisory section, security page health display fix, E2E Playwright tests.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-15 13:31:04 +02:00
master
27d27b1952 Align release create wizard with canonical bundle lifecycle
Wire orch:operate scope into console bootstrap so the browser token can
execute release-control actions. Replace the silent-redirect fallback
with the canonical createBundle → publishVersion → materialize flow and
surface truthful error messages on 403/409/503. Add focused Angular
tests and Playwright journey evidence for standard and hotfix paths.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-15 13:26:20 +02:00
master
08390f0ca4 Repair first-time identity and trust operator journeys 2026-03-15 12:33:56 +02:00
master
7bdfcd5055 Stabilize release confidence approval decision journey 2026-03-15 04:04:36 +02:00
master
4a5185121d Stabilize setup admin onboarding journeys 2026-03-15 03:38:48 +02:00
master
2661bfefa4 Close iteration 013 release confidence operator journey repairs 2026-03-15 02:16:29 +02:00
master
ac817a0597 Record clean scratch iteration 012 2026-03-14 22:24:12 +02:00
master
bd78523564 Widen scratch iteration 011 with fixture-backed integrations QA 2026-03-14 03:11:45 +02:00
master
3b1b7dad80 Record clean scratch iteration 010 2026-03-13 22:33:21 +02:00
master
bf4ff5bfd7 Close scratch iteration 009 grouped policy and VEX audit repairs 2026-03-13 19:25:48 +02:00
master
c9a30331ce Close scratch iteration 008 and enforce full surface audits 2026-03-13 11:00:12 +02:00
master
fe35801cc5 Close scratch iteration 007 and harden runner output contracts 2026-03-13 08:14:53 +02:00
master
27d0247058 Close scratch iteration 006 grouped readiness repairs 2026-03-13 02:27:03 +02:00
master
9c3d1f8d4a Stabilize scratch iteration 005 aggregate audit 2026-03-12 23:03:19 +02:00
master
317e55e623 Complete scratch iteration 004 setup and grouped route-action fixes 2026-03-12 19:28:42 +02:00
master
29b68f5bee Repair search result routing and advisory query ranking 2026-03-12 11:57:40 +02:00
master
6964a046a5 Close admin trust audit gaps and stabilize live sweeps 2026-03-12 10:14:00 +02:00
master
a00efb7ab2 Record clean scratch setup iteration 002 2026-03-11 22:12:27 +02:00
master
ebc70a3611 Make notifications action sweep wait for cold-load shell 2026-03-11 21:19:54 +02:00
master
66e67f1a97 Restore Doctor search after AdvisoryAI cold-start race 2026-03-11 21:19:42 +02:00
master
08006100a5 Repair scratch setup preflight for repo-local host processes 2026-03-11 21:19:25 +02:00
master
4a84f901ab Harden changed-surfaces registry-admin selector 2026-03-11 19:17:12 +02:00
master
8eec0a9dee Make registry-admin audit route self-identifying 2026-03-11 19:09:46 +02:00
master
6afd8f951e Harden canonical route sweep rechecks 2026-03-11 18:44:38 +02:00
master
f0b2ef3319 Align live evidence export with audit bundles 2026-03-11 18:21:47 +02:00
master
8cf132798d Repair setup admin branding and action routes 2026-03-11 17:05:49 +02:00
master
dc98d5a758 Throttle sidebar pending approvals badge refresh 2026-03-11 15:51:22 +02:00
master
9dd8592a2a Repair triage artifact scope and evidence contracts 2026-03-11 14:25:59 +02:00
master
4dc5db4efb Harden scratch-stack live QA sweeps 2026-03-11 12:07:00 +02:00
master
568a1df468 Fix watchlist draft hydration and update contracts 2026-03-11 10:56:31 +02:00
master
5c874c8f64 Make remote localization startup non-blocking 2026-03-11 10:07:30 +02:00
master
7a1c090f2e Harden live Playwright action sweeps for cold-loaded surfaces 2026-03-11 09:44:42 +02:00
master
ae09af4e65 Fix scratch setup image builder switch forwarding 2026-03-11 09:44:36 +02:00
master
3865b93091 Repair live jobs queues action handoffs 2026-03-10 20:46:55 +02:00
master
f727ec24fd Auto-rebuild AdvisoryAI knowledge corpus on startup 2026-03-10 20:18:12 +02:00
master
d93006a8fa Align release publisher scopes and preserve promotion submit context 2026-03-10 19:01:16 +02:00
master
f401a7182c Repair hotfix route and action flows 2026-03-10 18:06:14 +02:00
master
bb8327087d Harden live route ownership verification 2026-03-10 17:27:26 +02:00
master
6ef5ff5b43 Restructure navigation UX: sidebar groups, route aliases, and phase 3-6 polish
Sidebar (phases 1-4, committed in parent sprint):
- Dashboard childless; Releases gains Health child
- Operations moved to release-control group with 8 promoted children
- Evidence renamed to Audit; Logs/Bundles as canonical sub-items
- Setup Notifications removed (consolidated)

Route fixes and canonical restore (Sprint 030):
- releases.routes: /health loads EnvironmentPosturePageComponent;
  /environments and /environments/:environmentId kept as canonical Releases routes
- legacy-redirects: release-orchestrator/environments and
  release-control/environments both redirect to /releases/environments
- app.routes: release-control/{environments,regions} alias → /releases/environments
- route-surface-ownership spec updated to match canonical Releases paths
- live-route-surface-ownership-check expected paths aligned

Phase 3: Remove in-page "Create Hotfix" button from hotfixes-queue component;
  topbar action is the sole create affordance.

Phase 6 UX polish:
- security-reports-page: stub link-list → tabbed layout (Risk, VEX, Export)
- filter-bar: Search button + Enter key trigger; top-row / filter-row layout
- approvals-inbox: horizontal chip-style status filters replacing pill buttons

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-10 17:16:26 +02:00
master
8a1fb9bd9b OpenAPI query param discovery and header cleanup completion
Backend: ExtractParameters() now discovers query params from [AsParameters]
records and [FromQuery] attributes via handler method reflection. Gateway
OpenApiDocumentGenerator emits parameters arrays in the aggregated spec.
QueryParameterInfo added to EndpointSchemaInfo for HELLO payload transport.

Frontend: Remaining spec files and straggler services updated to canonical
X-Stella-Ops-* header names. Sprint 026 archived (tasks 01-06 DONE,
07-09 TODO for backend service rename pass).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-10 17:13:58 +02:00
master
8578065675 Fix notifications surface ownership and frontdoor contracts 2026-03-10 16:54:25 +02:00
master
e49236f630 Stabilize web context propagation and header constants 2026-03-10 16:37:59 +02:00
master
72746e2f7b Align route ownership and sidebar surface exposure 2026-03-10 15:32:34 +02:00