7943cfb3af
Bundled pre-session doc + ops work: - docs/modules/**: sync across advisory-ai, airgap, cli, excititor, export-center, findings-ledger, notifier, notify, platform, router, sbom-service, ui, web (architectural + operational updates) - docs/features/**: updates to checked excititor vex pipeline, developer workspace, quick verify drawer - docs top-level: README, quickstart, API_CLI_REFERENCE, UI_GUIDE, code-of-conduct/TESTING_PRACTICES updates - docs/qa/feature-checks/: FLOW.md + excititor state update - docs/implplan/: remaining sprint updates + new Concelier source credentials sprint (SPRINT_20260422_003) - docs-archived/implplan/: 30 sprint archival moves (ElkSharp series, misc completed sprints) - devops/compose: .env + services compose + env example + router gateway config updates File-level granularity preserved. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Web
Status: Implemented
Source: src/Web/
Owner: UI Guild
Note: This folder documents triage-specific frontend features. For the comprehensive Web UI architecture, see
../ui/architecture.md.
Purpose
Web provides the Angular 21 single-page application (SPA) frontend for StellaOps. Delivers the user interface for vulnerability exploration, policy management, scan results, SBOM visualization, and administrative functions.
Components
Application:
StellaOps.Web- Angular 21 application with TypeScript, routing, and component library
Key Features:
- Dashboard and vulnerability overview
- Container scan results and SBOM explorer
- Policy editor and rule visualization
- VEX statement review and approval workflows
- Task pack execution monitoring
- Admin console for configuration and user management
- Unified Triage Experience - Smart-Diff Compare View, Triage Canvas, Risk Dashboard
- Risk Budget Visualization - Burn-up charts, heatmaps, exception ledger
Configuration
Angular configuration in angular.json and environment files.
Key settings:
- Backend API URL (
STELLAOPS_BACKEND_URL) - Authority OAuth/OIDC endpoints
- Feature flags for module visibility
- Telemetry and error reporting
Build and Development
# Install dependencies
cd src/Web/StellaOps.Web
npm install
# Development server
npm start
# Production build
npm run build
# Run tests
npm test
# Run E2E tests (Playwright)
npx playwright test
Dependencies
- Gateway (API access)
- Authority (authentication and authorization)
- All backend services (via Gateway routing)
Related Documentation
Triage Experience
- Unified Triage Specification - Consolidated triage requirements
- Smart-Diff UI Architecture - Compare view design
- Triage Component Catalog - Angular component documentation
- Competitive Triage Patterns - Industry comparison
Module Dependencies
- UI Module:
../ui/(shared UI components) - Gateway:
../gateway/(API access) - Authority:
../authority/(authentication) - VulnExplorer:
../vulnexplorer/(vulnerability data)
Implementation Sprints
Current Status
Angular 21 application implemented with routing, authentication, and integration with backend services. Supports vulnerability exploration, scan results, SBOM visualization, and policy management. Playwright E2E tests configured.