Stella Ops Console UI

The operator console for the Stella Ops release control plane: dashboards and workflows for scans, policies, VEX evidence, runtime posture, and administration.

Status: Implemented Source: src/Web/StellaOps.Web/ Owner: UI Guild

The Console is the Angular front end that presents real-time status and operator workflows across the platform. It integrates with Authority for scope-enforced, DPoP-protected calls and ships with deterministic, offline-capable builds.

Related: see ../web/for triage-specific UX documentation (Smart-Diff, Triage Canvas, Risk Dashboard).

Recent milestones

Recent UI delivery has focused on consolidating canonical navigation shells and retiring inline component mocks in favour of live backend bindings. Highlights:

• Assurance Packs shell for optional NIS2/CRA pack discovery under /assurance (NIS2 compatibility routes under /compliance/nis2/* remain valid).
• Canonical operations shells under Ops > Operations — execution operations, offline/air-gap operations, quota/health/AOC, and platform-ops consolidation — with legacy-alias cutovers and repaired deep links.
• Releases > Promotions cutover with release-context promotion wizard handoff.
• Security shells — Reachability witnessing, Watchlist management, and the Mission Control / Security / notifications leaves.
• Runtime mock cutover for policy simulation (history/compare/conflict/batch), policy conflicts, and graph explorer reads — these now resolve to backend APIs (/policy/simulations/**, /policy/conflicts/**, /policy/batch-evaluations/**, /api/graph/**); dev/test mock clients remain only behind explicit test wiring.

Per-feature verification dossiers live under ../../features/checked/web/; UI design proposals and restoration notes live in the subdirectories listed under Related resources. Detailed sprint history is tracked in docs/implplan/SPRINT_*.md.

Responsibilities

• Render real-time status for ingestion, scanning, policy, and exports via SSE.
• Provide policy editor, SBOM explorer, and advisory views with accessibility compliance.
• Integrate with Authority for fresh-auth and scope enforcement.
• Support offline bundles with deterministic build outputs.

Key components

• Angular 21 workspace under src/Web/StellaOps.Web.
• Signals-based state management with @ngrx/signals store.
• API client generator (core/api).

Integrations & dependencies

• Backend APIs (Scanner, Policy, Notify, Export Center, Attestor).
• Authority for DPoP-protected calls.
• Telemetry streams for observability dashboards.

Operational notes

• Auth smoke tests in operations/auth-smoke.md.
• Observability runbook + dashboard stub in operations/observability.md and operations/dashboards/console-ui-observability.json (offline import).
• Console architecture doc for layout and SSE fan-out.
• Operator guide: ../../UI_GUIDE.md. Accessibility: ./accessibility.md. Security: ../../security/.

Related resources

Reference & operations

• Console architecture — layout and SSE fan-out.
• Auth smoke tests
• Observability runbook
• Accessibility

UX dossiers & shell proposals

• Component preservation map
• Restoration topics
• Watchlist operations
• Reachability witnessing
• Platform-ops consolidation
• Offline operations
• Quota / health / AOC operations
• Execution operations
• Topology & trust administration
• Security operations leaves
• Platform-setup canonical route preservation
• Release-promotions cutover
• Triage explainability workspace
• Workflow visualization & replay
• Contextual actions patterns
• Assurance Packs shell

Backlog references

• DOCS-CONSOLE-23-001 … DOCS-CONSOLE-23-003 baseline (done).
• CONSOLE-OBS-52-001 tasks for observability updates.

Roadmap by epic

Standing objectives across all epics: maintain deterministic behaviour and offline parity across releases; keep documentation, telemetry, and runbooks aligned with the latest sprint outcomes; and verify Authority scopes before enabling uploads (see the access-control guidance carried in the Vulnerability Explorer sprint history).