Skip to content

feat: Dashboard UX, Security Docs, Tool Plugin API (v1.2.0)#107

Merged
Shreyas582 merged 1 commit intomainfrom
v1.2.0-workflow-depth-and-plugins
Apr 5, 2026
Merged

feat: Dashboard UX, Security Docs, Tool Plugin API (v1.2.0)#107
Shreyas582 merged 1 commit intomainfrom
v1.2.0-workflow-depth-and-plugins

Conversation

@Shreyas582
Copy link
Copy Markdown
Owner

Summary

Implements three issues completing the v1.1.0 milestone and starting v1.2.0:

Dashboard UX Overhaul (#99)

  • 5-tab layout: Runs, Findings, Cases, Compare, Health
  • SVG donut severity charts per-run
  • Clickable evidence chains with toggle visibility
  • Run comparison diff view (new/resolved/changed findings)
  • JSON/CSV export for findings and per-run data
  • Real-time run progress spinner

Security Professional Documentation (#100)

  • 4 investigation playbooks (SSH keys, Windows triage, credential leak, persistence sweep)
  • MITRE ATT&CK mapping for all 8 built-in tools
  • Threat model: attack surface, trust boundaries, security controls
  • 2 anonymized sample investigation reports

Tool Plugin API (#102)

  • Plugin discovery from \ ool.toml\ manifests with subprocess JSON I/O
  • --tools-dir\ and --allowed-plugins\ CLI flags
  • Platform filtering, sandbox policy enforcement, timeout support
  • Plugin tools visible in --doctor\ and /api/v1/runtime/status\
  • Example plugin and full API documentation

Testing

  • 233 tests passing across all crates (0 failures)
  • \cargo check\ clean

Closes #99, closes #100, closes #102

…100, #102)

Dashboard UX (#99):
- 5-tab layout: Runs, Findings, Cases, Compare, Health
- SVG donut severity charts per-run
- Clickable evidence chains with toggle visibility
- Run comparison diff view (new/resolved/changed findings)
- JSON and CSV export for findings and per-run data
- Real-time run progress with spinner animation

Security professional documentation (#100):
- 4 investigation playbooks (SSH keys, Windows triage, credential leak, persistence sweep)
- MITRE ATT&CK mapping for all 8 built-in tools
- Threat model with attack surface, trust boundaries, and security controls
- 2 anonymized sample investigation reports

Tool plugin API (#102):
- Plugin discovery from tool.toml manifests with subprocess JSON I/O
- --tools-dir and --allowed-plugins CLI flags
- Platform filtering, sandbox policy enforcement, timeout support
- Plugin tools visible in --doctor output and /api/v1/runtime/status
- Example plugin in examples/tools/hello_world/
- Full plugin API documentation in docs/plugin-api.md

Closes #99, closes #100, closes #102
@Shreyas582 Shreyas582 merged commit 2097856 into main Apr 5, 2026
9 of 10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

1 participant