1196 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Joseph Doherty	c4f315ec90	fix(auth): OtOpcUa 1.2 review fixes — startup insecure-transport guard + Ldaps in prod overlays, test fidelity, 0.1.1 pin	2026-06-02 01:37:29 -04:00
Joseph Doherty	257caa7bd1	feat(auth): cut OtOpcUa over to ZB.MOM.WW.Auth.Ldap; preserve DevStubMode; route roles via IGroupRoleMapper (Task 1.2/1.4)	2026-06-02 00:55:10 -04:00
Joseph Doherty	6534875476	feat(auth): add IGroupRoleMapper<string> seam (Task 1.1)	2026-06-02 00:29:45 -04:00
Joseph Doherty	d2d7730830	build: add ZB.MOM.WW.Auth/Audit feed mapping + version pins ... Maps ZB.MOM.WW.Auth, ZB.MOM.WW.Auth.*, ZB.MOM.WW.Audit to the gitea feed and pins Auth.Abstractions/Ldap/AspNetCore + Audit at 0.1.0. No project references yet (added during Phase 1/2 adoption). OtOpcUa omits Auth.ApiKeys (OPC UA transport security).	2026-06-02 00:16:39 -04:00
Joseph Doherty	2844180865	fix: honor LdapOptions.Enabled at runtime; dedupe ILdapAuthService registration; +SearchBase test, doc fix	2026-06-01 23:03:12 -04:00
Joseph Doherty	d3ab2bfbaf	fix: bind OtOpcUa LdapOptions from real Security:Ldap section; gate validator on DevStubMode	2026-06-01 22:46:09 -04:00
Joseph Doherty	88e773af36	feat: validate OpcUa host options at startup (route through IOptions + ValidateOnStart)	2026-06-01 18:45:55 -04:00
Joseph Doherty	f35ebd7aaf	feat: add fail-fast LDAP options validation in OtOpcUa via ZB.MOM.WW.Configuration	2026-06-01 18:32:44 -04:00
Joseph Doherty	0cbb82e466	build: add ZB.MOM.WW.Configuration feed mapping + version pin	2026-06-01 18:10:28 -04:00
Joseph Doherty	7b6884031d	Merge feat/telemetry-followons: telemetry follow-ons for OtOpcUa ... Serilog.AspNetCore/Extensions.Hosting/Settings.Configuration aligned to 10.0.0; config-driven OTLP exporter opt-in (default Prometheus; also makes recorded spans exportable when OTLP is configured).	2026-06-01 17:17:23 -04:00
Joseph Doherty	7ff7a60ae0	feat(otopcua): config-driven OTLP exporter opt-in (default Prometheus)	2026-06-01 16:40:24 -04:00
Joseph Doherty	8faa2bf23d	build(otopcua): align Serilog.AspNetCore/Extensions.Hosting/Settings.Configuration to 10.0.0	2026-06-01 16:35:34 -04:00
Joseph Doherty	2099713ed8	Merge feat/adopt-zb-telemetry: adopt ZB.MOM.WW.Telemetry across OtOpcUa ... AddZbTelemetry (shared OTel Resource identity + standard instrumentation; kept meter ZB.MOM.WW.OtOpcUa + /metrics) and AddZbSerilog (shared enrichers + trace correlation; sinks moved to appsettings). Behaviour-preserving.	2026-06-01 16:05:34 -04:00
Joseph Doherty	c05ffc7b39	build(otopcua): add <clear/> to NuGet.config packageSources for supply-chain hygiene parity	2026-06-01 16:03:15 -04:00
Joseph Doherty	60017177cb	feat(otopcua): adopt AddZbSerilog (shared enrichers + trace correlation); sinks to config	2026-06-01 15:41:21 -04:00
Joseph Doherty	26bae36f8b	feat(otopcua): wire OTel via AddZbTelemetry (shared Resource + std instrumentation)	2026-06-01 15:33:28 -04:00
Joseph Doherty	368390ea9d	build(otopcua): reference ZB.MOM.WW.Telemetry packages from Gitea feed	2026-06-01 15:29:46 -04:00
Joseph Doherty	8f950722c6	Merge feat/adopt-zb-health: adopt ZB.MOM.WW.Health shared probes (OtOpcUaCompat policy, admin-leader, ProbeQuery)	2026-06-01 14:07:02 -04:00
Joseph Doherty	1d729fb0f8	feat: adopt shared ZB.MOM.WW.Health probes (preserve tiers + OtOpcUaCompat policy)	2026-06-01 13:36:28 -04:00
Joseph Doherty	0b99aceacb	build: reference ZB.MOM.WW.Health packages from the Gitea feed	2026-06-01 13:30:13 -04:00
Joseph Doherty	d57b42bcd6	chore: gitignore local credentials file and runtime PKI store ... sql_login.txt holds DB creds and the Host pki/ dir is the runtime OPC UA certificate store (private keys + issued/trusted certs); neither belongs in source control, and ignoring them prevents an accidental git add .	2026-05-31 10:27:59 -04:00
Joseph Doherty	5e87f7e16f	docs(alarms): record 2026-05-31 live re-confirmation of native alarm feed ... Independently re-ran the D.1 alarm-source smoke against the live gateway (10.100.0.48:5120) to back the native MxAccess alarm-event claim with a fresh empirical run, not just the original 2026-05-29 capture.	2026-05-31 10:12:47 -04:00
Joseph Doherty	695fa6408b	docs(alarms): record native alarms verified working; add D.1 smoke ... The 2026-04-30 alarm plan banners claimed worker-side native alarm subscription was blocked on a COM-bitness finding. That's stale: the mxaccessgw .NET client now has true MxAccess alarm-event support, and a live StreamAlarms check (+ new Skip-gated GatewayGalaxyAlarmFeedLiveTests through the lmxopcua consumer) confirms native alarms — operator comment, category, severity, timestamps — flow end-to-end. Reconcile both plan docs to reality and add docs/plans/alarms-d1-smoke-artifact.md as the D.1 alarm-source deliverable. Historian-write live smoke + full server->A&C round-trip remain (Windows parity rig only).	2026-05-31 09:59:01 -04:00
Joseph Doherty	61193629b6	fix(adminui): wire Test Connect probes + live panels on admin-only nodes ... Both bugs surfaced only on split-role deployments (the MAIN cluster's admin-only nodes), where the AdminUI runs without the driver role. - Test Connect returned "No probe registered" for every driver: the IDriverProbe set was registered only under the driver role, but the admin-operations singleton that consumes it is pinned to admin. Extract AddOtOpcUaDriverProbes() (idempotent via TryAddEnumerable) and call it in the hasAdmin path too. - Live driver-status/alerts/script-log panels showed "SignalR error: Connection refused": these Blazor Server components opened a HubConnection to their own hub via the browser's public URL, which server-side code can't reach behind Traefik (host :9200 -> container :9000). Read the in-process source directly instead -- DriverStatus via IDriverStatusSnapshotStore.SnapshotChanged, Alerts/ScriptLog via a new IInProcessBroadcaster<T>. Fleet status was unaffected (reads DB/ActorSystem). Adds unit tests for probe registration, the snapshot-store event, and the broadcaster.	2026-05-29 16:38:32 -04:00
Joseph Doherty	e3a27422a1	fix(adminui): Galaxy editor 500 — read DriverConfig case-insensitively + null-safe FromRecord ... GalaxyDriverPage deserialized DriverConfig with case-sensitive camelCase opts, but the persisted/seeded config is PascalCase (the runtime reads it case-insensitively). So all four nested option records read as null -> FromRecord NRE (HTTP 500) on edit, and the form would have shown defaults instead of the real config (risking a clobber on save). Fix: add PropertyNameCaseInsensitive=true (matches the runtime) so real values load, plus null-coalesce the nested records in FromRecord as defense-in-depth. Regression test asserts the seeded PascalCase config loads its real values.	2026-05-29 12:45:44 -04:00
Joseph Doherty	32d7fd7cc9	fix(galaxy): complete PR 7.2 rename — use canonical GalaxyMxGateway driver type ... The driver/factory/seed use 'GalaxyMxGateway' (legacy 'Galaxy' was retired), but the AdminUI editor router, GalaxyDriverPage, address picker, identity dropdown, the Galaxy browser/probe, and DraftValidator still keyed on 'Galaxy'. Result: the seeded GalaxyMxGateway driver couldn't be edited ('no editor registered'), UI-created Galaxy drivers wrote a type with no factory, and a SystemPlatform-bound GalaxyMxGateway driver failed publish validation. Align all stragglers to GalaxyMxGateway (+ failing-test-first DraftValidator coverage). ShouldStub's 'Galaxy' legacy safety-net left intact.	2026-05-29 12:31:55 -04:00
Joseph Doherty	de666b24c3	test: fix Galaxy-tag Phase7 test fixtures + S7 CLI enum; add MaterialiseGalaxyTags coverage ... Completes the test side of the in-progress Galaxy-tag workstream: - Phase7ApplierTests / Phase7ApplierHierarchyTests: supply the now-required Galaxy-tag args to Phase7Plan / Phase7CompositionResult. - Add genuine coverage for Phase7Applier.MaterialiseGalaxyTags (folder-per-distinct-path, variable-per-tag node-id derivation, folder dedupe) + added-Galaxy-tags-trigger-rebuild. - S7.Cli.Tests: use the project's S7CpuType (CLI option type) instead of S7.Net.CpuType. Whole solution now builds 0/0; OpcUaServer.Tests 52, S7.Cli.Tests 36 green.	2026-05-29 12:18:01 -04:00
Joseph Doherty	a4fb97aef8	chore(docker-dev): remap Traefik to host port 9200 ... Host :80 collides with the sister scadabridge-traefik dev stack; bind the OtOpcUa Traefik :80 entrypoint to host 9200 instead (admin UI now at http://localhost:9200). Dashboard already on 8089 to avoid the same clash.	2026-05-29 12:09:21 -04:00
Joseph Doherty	da4634d67e	fix(tests,cli): implement IOpcUaAddressSpaceSink.EnsureVariable in test fakes; fix CLI CS1587 ... Resolves the 12 reported build errors (7 CS0535 sink fakes + 5 CLI CS1587). Runtime.Tests green (74). NOTE: OpcUaServer.Tests still has pre-existing CS7036 errors from the in-progress Galaxy-tag workstream (Phase7Plan/Phase7CompositionResult new required params) — separate, test-only, not addressed here.	2026-05-29 10:19:32 -04:00
Joseph Doherty	869be660fd	fix(adminui): strip stale Phase C.2 / rebuild-plan roadmap notes from cluster list pages ... Removes the internal-roadmap deferral banners (the original request that seeded this work); kept the genuinely useful operator descriptions.	2026-05-29 10:12:15 -04:00
Joseph Doherty	a8916c3e08	docs(adminui): correct stale follow-up source comments (F15/F16/Phase4/TODO 3.3-3.4)	2026-05-29 10:00:58 -04:00
Joseph Doherty	79b2345834	fix(adminui): disable RoleGrants buttons during save (review)	2026-05-29 09:58:05 -04:00
Joseph Doherty	4df5b849ac	fix(security): let OperationCanceledException propagate from login role merge (review)	2026-05-29 09:56:09 -04:00
Joseph Doherty	a58151e99e	feat(adminui): editable DB-backed LDAP role map (global, FleetAdmin-gated)	2026-05-29 09:55:07 -04:00
Joseph Doherty	1fd093d95d	test(config): global LdapGroupRoleMapping CRUD	2026-05-29 09:52:47 -04:00
Joseph Doherty	f210f09caf	feat(security): merge DB-backed LDAP role grants into login claims	2026-05-29 09:51:22 -04:00
Joseph Doherty	042f3b6a65	feat(security): add FleetAdmin authorization policy	2026-05-29 09:48:31 -04:00
Joseph Doherty	bc40388914	chore(di): register ILdapGroupRoleMappingService	2026-05-29 09:47:10 -04:00
Joseph Doherty	b719194046	feat(security): RoleMapper.Merge — additive DB-backed role grants	2026-05-29 09:43:12 -04:00
Joseph Doherty	7570df76d3	feat(adminui): editable OpcUaClient endpoint URL list via CollectionEditor	2026-05-29 09:41:09 -04:00
Joseph Doherty	244949caa3	feat(adminui): editable S7 tag list via CollectionEditor	2026-05-29 09:37:12 -04:00
Joseph Doherty	a5a0d06dbe	feat(adminui): editable FOCAS device + tag lists via CollectionEditor	2026-05-29 09:33:53 -04:00
Joseph Doherty	6882761f4c	feat(adminui): editable TwinCAT device + tag lists via CollectionEditor	2026-05-29 09:29:57 -04:00
Joseph Doherty	15f3797f1e	feat(adminui): editable AbLegacy device + tag lists via CollectionEditor	2026-05-29 09:26:25 -04:00
Joseph Doherty	534d670b21	feat(adminui): editable AbCip device + tag lists via CollectionEditor	2026-05-29 09:22:51 -04:00
Joseph Doherty	b351a81c8f	fix(adminui): preserve un-edited Modbus tag fields across edit (review) ... Capture the original ModbusTagDefinition as _source in ModbusTagRow and rewrite ToDefinition() to use 'with {}', so StringByteOrder, ArrayCount, Deadband, UnitId, and CoalesceProhibited survive a load→edit→save cycle.	2026-05-29 09:18:36 -04:00
Joseph Doherty	f655efc570	feat(adminui): typed resilience override form replaces JSON textarea	2026-05-29 09:15:54 -04:00
Joseph Doherty	c4116e54c9	feat(adminui): editable Modbus tag list via CollectionEditor	2026-05-29 09:14:06 -04:00
Joseph Doherty	c3fec1426c	fix(adminui): case-insensitive resilience policy keys + malformed-json test (review)	2026-05-29 09:10:41 -04:00
Joseph Doherty	a2761e4b98	fix(adminui): key CollectionEditor rows by identity (code review)	2026-05-29 09:08:02 -04:00