# Topology And Trust Administration UI

## Module
Web

## Status
VERIFIED

## Description
Shipped the canonical `Setup > Topology` and `Setup > Trust & Signing` cutover so operators land on mounted setup shells instead of stale `settings`, `administration`, `admin`, or `platform/setup` routes. The topology shell now exposes the preserved setup pages directly, and the trust workspace replaces the live placeholder settings page.

Follow-up note: canonical `Ops > Platform Setup` leaf URLs are preserved by `docs/features/checked/web/platform-setup-canonical-route-preservation-ui.md`; the shared setup cutover no longer rewrites those canonical ops URLs into `setup/topology/*`.

## Implementation Details
- **Feature directories**:
  - `src/Web/StellaOps.Web/src/app/features/topology/`
  - `src/Web/StellaOps.Web/src/app/features/trust-admin/`
  - `src/Web.StellaOps.Web/src/app/features/platform/setup/`
  - `src/Web.StellaOps.Web/src/app/features/settings/`
- **Primary components**:
  - `topology-shell` (`src/Web.StellaOps.Web/src/app/features/topology/topology-shell.component.ts`)
  - `trust-admin` (`src/Web.StellaOps.Web/src/app/features/trust-admin/trust-admin.component.ts`)
  - `platform-setup-home` (`src/Web.StellaOps.Web/src/app/features/platform/setup/platform-setup-home.component.ts`)
- **Canonical routes**:
  - `/setup/topology/overview`
  - `/setup/topology/regions`
  - `/setup/topology/promotion-graph`
  - `/setup/topology/workflows`
  - `/setup/topology/gate-profiles`
  - `/setup/trust-signing`
  - `/setup/trust-signing/issuers`
  - `/setup/trust-signing/watchlist`
  - `/setup/trust-signing/analytics`
- **Legacy aliases**:
  - `/platform/setup/*`
  - `/settings/trust*`
  - `/administration/trust*`
  - `/admin/trust*`
  - `/admin/issuers`
- **Secondary entry points**:
  - `Ops > Platform Setup`
  - `Setup > Topology`
  - `Setup > Trust & Signing`
  - admin navigation bookmarks for trust and notifications

## E2E Test Plan
- **Setup**:
  - [x] Start the local Angular test server with `npm run serve:test`.
  - [x] Use a test session with setup and trust-read scopes.
- **Core verification**:
  - [x] Open `/settings/trust` and verify redirect into the canonical trust shell.
  - [x] Open the `Trusted Issuers` tab and verify issuer data renders.
  - [x] Open `/admin/trust` and verify bookmark compatibility into the same trust shell.
  - [x] Open `/ops/platform-setup`, use the setup quick-link handoff, and verify the preserved canonical platform-setup leaf renders.

## Verification
- Run:
  - `npm run test -- --watch=false --include src/tests/platform/platform-setup-routes.spec.ts --include src/tests/topology/topology-routes.spec.ts --include src/tests/topology/topology-shell.component.spec.ts --include src/tests/setup/setup-topology-trust-cutover.spec.ts --include src/tests/trust_admin/trust-scoring-dashboard-ui.behavior.spec.ts`
  - `npx playwright test --config playwright.config.ts tests/e2e/topology-trust-admin-cutover.spec.ts --workers=1`
  - `npm run build`
- Tier 0 (source): pass
- Tier 1 (build/tests): pass
- Tier 2 (behavior): pass
- Notes:
  - Angular targeted tests passed: `5` files, `20` tests.
  - Playwright passed: `1` topology/trust cutover scenario.
  - Production build passed; existing bundle-budget warnings remain unchanged from the baseline.
- Verified on (UTC): 2026-03-08T08:06:30Z