Repository navigation

Release v2.5.0-bv2 - #14

Merged

Che4ter merged 197 commits into

bv-mainfrom

release/2.5.0-bv2

Jul 14, 2026

Merged

Release v2.5.0-bv2#14
Che4ter merged 197 commits into
bv-mainfrom
release/2.5.0-bv2

Commits on May 22, 2026
- Fixed order of authentication methods for timeline filter endpoint.
  fatpeppapig
  committed
  eb13c94
Commits on Jun 8, 2026
- Merge pull request #1080 from fatpeppapig/timeline-filters
  whikernel
  authored
  9c017a1
Commits on Jun 11, 2026
- [ADD] Milkdown WYSIWYG note editor with size-aware Word export
  
  gru3zi
  and
  claude
  committed
  fc8eea8
- [ADD] Milkdown WYSIWYG editor toggle for the case summary
  
  gru3zi
  and
  claude
  committed
  0745225
- [ADD] Syntax-highlight code in DOCX export; [FIX] v2 API custom-attribute flattening
  
  gru3zi
  and
  claude
  committed
  df6d117
- [FIX] DOCX export: render markdown tables full-width and not broken by empty cells
  
  gru3zi
  and
  claude
  committed
  35ed5d0
- [ADD] Case notes: true split-pane editor (CodeMirror source ⇄ Milkdown WYSIWYG), remove ACE
  
  gru3zi
  and
  claude
  committed
  e887e40
- [FIX] Split editor: independent per-pane scrolling + no source-pane jump on edit
  
  gru3zi
  and
  claude
  committed
  1ee221a
- [IMP] DOCX export: use Pygments 'xcode' style for code highlighting
  
  gru3zi
  and
  claude
  committed
  d0e1744
- [ADD] Editor: Kusto/KQL syntax highlighting + full language list in code blocks
  
  gru3zi
  and
  claude
  committed
  b7b96af
- [ADD] Case summary: split-pane editor; make the split editor reusable (Phase 1.5)
  
  gru3zi
  and
  claude
  committed
  1da9108
- [FIX] Summary editor: harden save/close + fetch error handling (CodeRabbit)
  
  gru3zi
  and
  claude
  committed
  2a9773a
- [IMP] DOCX export: faint light-grey code-block background + subtle border
  
  gru3zi
  and
  claude
  committed
  cc3f413
- [ADD] Phase 2a-A: pycrdt-websocket Yjs collab server + auth + infra
  
  gru3zi
  and
  claude
  committed
  9bdd308
- [ADD] Phase 2a-B: client Yjs collab wiring for notes (live co-editing)
  
  gru3zi
  and
  claude
  committed
  b3e445d
- [ADD] Phase 2a-C: collab note persistence + coalesced revisions (+ seeding/persist fixes)
  
  gru3zi
  and
  claude
  committed
  025c313
- [ADD] Phase 2b-1: real-time collaboration for the case summary editor
  
  gru3zi
  and
  claude
  committed
  51a1f35
- [ADD] Phase 2b-2: collaboration presence/cursor UX (notes + summary)
  
  gru3zi
  and
  claude
  committed
  5192ac7
- [FIX] Split editor: restore full-height notes pane + source editable when solo
  
  gru3zi
  and
  claude
  committed
  88d1ecb
- [FIX] Collab: joining client registers existing peers promptly (source lock ~2s, was ~9s)
  
  gru3zi
  and
  claude
  committed
  31ba013
- [IMP] Collab header: quiet solo presence + remove redundant save icon
  
  gru3zi
  and
  claude
  committed
  7da482a
- [FIX] Split editor: restore independent per-pane scrolling (bounded full-height)
  
  gru3zi
  and
  claude
  committed
  42c8093
- [FIX] Split editor: source pane no longer jumps to top when typing in WYSIWYG
  
  gru3zi
  and
  claude
  committed
  083edb3
- [IMP] Summary editor: drop the redundant Save button (auto-save + close-flush)
  
  gru3zi
  and
  claude
  committed
  c812e9f
Commits on Jun 12, 2026
Commits on Jun 16, 2026
- [FIX] Implement various bugfixes from code review
  Che4ter
  committed
  6d50a65
- Merge pull request #10 from baseVISION/feat/milkdown-split-editor
  Che4ter
  authored
  2027971
Commits on Jun 18, 2026
- [ADD] Kubernetes: collab server deployment, ingress routing and helm values
  
  Che4ter
  and
  claude
  committed
  aabe345
- [FIX] Security: harden collab server against CSWSH, authz bypass and spoofing
  
  Che4ter
  and
  claude
  committed
  bc6f071
- [ADD] Ignore .serena/ directory
  
  Che4ter
  and
  claude
  committed
  9221355
Commits on Jun 22, 2026
- [ADD] Datastore and my profile support v2
  whitekernel
  committed
  df0d245
- [ADD] Added missing files
  whitekernel
  committed
  15620ad
Commits on Jun 23, 2026
- [ADD] Added search on all case elements
  whitekernel
  committed
  3b645f8
- [IMP] Improved global search
  whitekernel
  committed
  33ed252
- [ADD] v2 activities endpoint with paging, scope and filters
  whitekernel
  committed
  127817c
- [IMP] Deduplicate activities within a one-minute bucket
  whitekernel
  committed
  17fbbcc
- [ADD] v2 endpoints for Dim (Celery) tasks listing and detail
  whitekernel
  committed
  d919a62
- [ADD] v2 endpoints for case close and reopen
  whitekernel
  committed
  650245d
- [FIX] Detach alert-shared IoCs before deleting a case
  whitekernel
  committed
  a09128c
- [IMP] Independent open/close date bounds for case filters
  whitekernel
  committed
  5bea50e
Commits on Jun 24, 2026
- [ADD] v2 endpoints for managing modules and their hooks
  whitekernel
  committed
  a66ec94
- [ADD] v2 endpoints for customer contacts CRUD and embed contacts in customer detail
  whitekernel
  committed
  113053d
- [FIX] Paginated v2 envelope returns the next page number instead of a boolean
  whitekernel
  committed
  0581e02
- [ADD] Search query parameter on the v2 customers listing endpoint
  whitekernel
  committed
  b018489
- [ADD] v2 endpoints for the Case Objects taxonomy family backed by a shared CRUD class
  whitekernel
  committed
  41a7c53
- [ADD] v2 CRUD endpoints for case templates accepting plain JSON bodies
  whitekernel
  committed
  454855b
- [ADD] v2 endpoint exposing the introspected case template schema for interactive editors
  whitekernel
  committed
  68d64af
- [ADD] v2 endpoints for report templates including render-against-case with user case-access gating
  whitekernel
  committed
  bfbafd8
- [ADD] v2 endpoint to replace a report template's file in place via multipart PUT
  whitekernel
  committed
  0c8314d
- [ADD] v2 access-control endpoints covering users, groups, members, case-access, customers, audit, MFA reset and API-key rotation
  whitekernel
  committed
  d560ee6
- [ADD] v2 read-only endpoints for severities, TLP, alert statuses + resolutions, analysis statuses, event categories and task statuses
  whitekernel
  committed
  8cbda59
- [ADD] v2 server settings endpoints with versions block, partial-update PUT and POST backup, deprecating the legacy /manage/settings routes
  whitekernel
  committed
  33a98ff
Commits on Jun 25, 2026
- [UPD] Updated dash and activities
  whitekernel
  committed
  4f8b626
- [FIX] Fixed GHSA-g588-5gmf-p5cx by excluding MFA secrets and webauthn credentials from user schemas and marking sensitive fields load-only
  whitekernel
  committed
  6bcff7b
- [FIX] Fixed GHSA-w78h-mx7h-qm3h by allowlisting writable fields on user, profile and taxonomy admin endpoints
  whitekernel
  committed
  a749b40
- [FIX] Fixed GHSA-vjc3-7jwv-j9qf by tightening the post-login next-url allowlist
  whitekernel
  committed
  9abd933
- [FIX] Fixed GHSA-qhqj-8qw6-wp8v by confining datastore file ops to DATASTORE_PATH and allowlisting writable upload fields
  whitekernel
  committed
  30ee619
- [FIX] Fixed GHSA-8hwq-v6vm-9grr by blocking alert re-attribution and requiring POST on logout
  whitekernel
  committed
  7b8cd9f
- [FIX] Sanitised HTML custom attributes via bleach and forced unsafe datastore downloads as attachments
  whitekernel
  committed
  2a111d3
- [FIX] Moved no-cache headers into the server block and added long-lived caching for /static
  whitekernel
  committed
  9c148a3
- [DEL] Removed GraphQL surface and dependencies — GHSA-3mxh-x92q-9r25
  whitekernel
  committed
  f83151c
- [UPD] Bumped iris-webhooks to 1.0.9 and hardened docker base images with apt upgrade
  whitekernel
  committed
  bf90172
- [FIX] Fixed access control ordering so group access overrides customer access on cases
  whitekernel
  committed
  8ef6657
- [ADD] Added 'neq' and 'not_like' operators to the filter condition builder
  whitekernel
  committed
  b73472a
- [FIX] Tagged alert comment edits as 'alerts' instead of 'events' so activity attribution is right
  whitekernel
  committed
  200adff
- [FIX] Hardened MFA flow with session-bound user, server-side secret, lockout and allowlisted DS file_tags
  whitekernel
  committed
  20dafb4
- [ADD] Added statistics_read and custom_dashboards_{read,write,share} permission bits
  whitekernel
  committed
  aeb77ba
- [UPD] Folded statistics_read into custom_dashboards_read so Statistics ships as a seeded dashboard
  whitekernel
  committed
  d8b8b04
- [ADD] Added /api/v2/dashboard/kpis with the compact KPI block for the home tile
  whitekernel
  committed
  b08635b
- [ADD] Added CustomDashboard and CustomDashboardWidget models with migration seeding the Statistics system dashboard
  whitekernel
  committed
  9f55272
- [ADD] Added custom dashboard query engine schema and named-aggregation registry for MTTD MTTR false-positive escalation and sliding-window metrics
  whitekernel
  committed
  05351e1
- [ADD] Added /api/v2/custom-dashboards endpoints for CRUD render schema and presets with system-dashboard guard
  whitekernel
  committed
  b1b6fb2
- [ADD] Added pytest suite for custom-dashboards CRUD render system-guard and ownership scoping
  whitekernel
  committed
  fb8c1c0
- [FIX] Imported ac_current_user_has_permission from blueprints.access_controls where develop actually defines it
  whitekernel
  committed
  4f7fc62
- [FIX] Deferred get_user import in business.access_controls to break circular import with manage_users_db
  whitekernel
  committed
  33e343e
- [FIX] Reconciled pre-existing custom_dashboard table by adding missing is_system column and relaxing owner_id NOT NULL before seeding
  whitekernel
  committed
  db3b4a7
- [FIX] Accept is_system and filters_schema in CustomDashboardSchema and ignore unknown widget/section keys so the seed Statistics dashboard renders
  whitekernel
  committed
  f5545dc
- [FIX] Dropped duplicate group-column field from seed Statistics widgets so charts render one dataset with category x-axis instead of one dataset per category
  whitekernel
  committed
  a6c56af
- [IMP] Returned rendered widgets grouped by section so the view page can preserve section titles dividers and ordering
  whitekernel
  committed
  1de0da7
- [FIX] Skipped duplicate-label projection in the query engine so widgets that name the same column in fields and group_by render one column not two
  whitekernel
  committed
  02b26d2
Commits on Jun 26, 2026
Commits on Jun 27, 2026
- [ADD] Enforce MFA verification on token-authenticated endpoints with brute-force throttle, re-enrollment guard, refresh propagation and integration tests
  whitekernel
  committed
  d39de57
- [ADD] user followed cases + multiple named timelines per case
  whitekernel
  committed
  217c179
- [ADD] war room foundation: models, ACL, REST CRUD + case attachment + members
  whitekernel
  committed
  7dde6a9
- [ADD] war room chat/tasks/notes/timelines/graph/sitreps/datastore REST + business
  whitekernel
  committed
  68b6e85
- [FIX] emit war-room activity events from REST mutations (attach/detach/members/tasks/notes)
  whitekernel
  committed
  664ba34
- [ADD] war room chat activity_type column + inference; classify case activity for fine-grained stream filtering
  whitekernel
  committed
  0d0d12a
- [ADD] live-merge UserActivity into war-room stream; drop chat-side activity_type column dependency
  whitekernel
  committed
  f2b07da
Commits on Jun 28, 2026
- [REM] war room graph board (models, REST, business, migration drop)
  whitekernel
  committed
  70bd342
- [ADD] war room: customer name on case attachments, creator/closer attribution on tasks
  whitekernel
  committed
  c723b23
- [ADD] more war-room slash commands (/decision /assign /detach /state /priority /summary /whoami /help)
  whitekernel
  committed
  b9660f6
- [FIX] war-room stream: explicit error on unknown / failing slash commands (no more silent fall-through to literal /text storage)
  whitekernel
  committed
  d36b2e3
- [ADD] war-room cases enrich (owner/dates/state/tasks) + /people endpoint; surface generic slash-error refs
  whitekernel
  committed
  5073102
- [REM] /whoami slash command (low signal)
  whitekernel
  committed
  ff68fc5
- [FIX] add PATCH to CORS Access-Control-Allow-Methods (war-room update + every v2 PATCH endpoint was blocked by preflight)
  whitekernel
  committed
  04da4ef
- [ADD] war-room timeline event PATCH + category column + drag-between-timelines support
  whitekernel
  committed
  ba73209
- [ADD] war-room Stream threads — parent_message_id + thread_title columns + follower table + /thread slash + reply/follow/retitle endpoints (gated on pre-migration DBs)
  whitekernel
  committed
  5b50a4f
- [FIX] war-room threads support probe — use fresh engine connection, don't pin negative result so a freshly-applied migration is picked up without restart
  whitekernel
  committed
  5c5d203
Commits on Jun 29, 2026
- [ADD] /api/v2/cases/{id}/access/me endpoint + allow read_only access on notes_directories.search (was full_access only — broke read-only users' notes view)
  whitekernel
  committed
  3d8eaef
- [IMP] bump postgres image to 18-alpine + add pg12→pg18 migration script and 3.0.0 upgrade notes
  whitekernel
  committed
  a110918
- [IMP] threads-support probe queries the column directly on a fresh connection — search_path / inspector-cache issues were giving spurious negatives; distinguish UndefinedColumn (42703) from other D…
  whitekernel
  committed
  0e94185
- [FIX] /me/followed-cases — use CaseSchemaForAPIV2 so dashboard tile gets case_name + case_customer
  whitekernel
  committed
  2192458
- [REM] evtx2splunk + iris_evtx module — drop the two wheels, evtxdump_binaries, requirements entries, and the Dockerfile chmod step
  whitekernel
  committed
  a29703a
- [FIX] PG18 PGDATA path — pin to /var/lib/postgresql/data/pgdata in compose and upgrade script (image refuses mountpoint-as-PGDATA)
  whitekernel
  committed
  7778e11
- [ADD] pass VITE_ALLOWED_HOSTS + make ORIGIN overridable in frontend service
  whitekernel
  committed
  f0b0d40
Commits on Jul 1, 2026
- [FIX] api_auth — return 401 instead of 500 when token/session references a missing user
  
  whitekernel
  and
  claude
  committed
  5807a91
- [ADD] search — case summaries as a new searchable type in /search
  whitekernel
  committed
  92d7082
- [FIX] cases overview — Tags filter was silently dropped; wire it via EXISTS(CaseTags JOIN Tags)
  whitekernel
  committed
  04a082d
- [FIX] post_init — only seed default group permissions on first creation; admin edits no longer reset on worker boot
  whitekernel
  committed
  a8b0aba
- [FIX] AuthorizationGroupSchema — respect partial PATCH; don't wipe group_permissions when the key is absent
  whitekernel
  committed
  0fa2f58
- [IMP] war-room sitreps — publish is a state marker only; edit and delete stay allowed after publish
  whitekernel
  committed
  c8b441f
- [ADD] war-room chat — /decision, /pin, /note as thread replies; trace-log endpoint; server-side search on /chat
  whitekernel
  committed
  e440917
Commits on Jul 2, 2026
- [FIX] alembic env — restore context.begin_transaction() so migrations actually commit
  whitekernel
  committed
  f0e69a2
- [ADD] war-room archive — archived_at/by columns, list filter, archive/unarchive endpoints, open-first sort
  whitekernel
  committed
  480a2b5
- [ADD] per-user preferences — user.preferences JSONB + /users/me/preferences/<key> endpoints
  whitekernel
  committed
  8394a7a
- [ADD] OIDC session→JWT exchange endpoint + provider discovery fallback + single-use session flag
  whitekernel
  committed
  2e81d73
- [ADD] nginx cert autodetect + reload polling, CA-bundle drop-in dir, IRIS_HOSTNAME single-source-of-truth, certbot deploy-hook
  whitekernel
  committed
  133f46a
- [ADD] docker-compose.new-ui overlay + frontend Dockerfile for the SvelteKit UI service
  whitekernel
  committed
  f24da09
- [ADD] notification core — notification/notification_setting tables + service + hook listeners + /api/v2/notifications endpoints + /notifications SocketIO namespace + /users/mentionable directory fo…
  whitekernel
  committed
  a13c96d
- [ADD] incidents + investigation flows (self-conditioned, alert/incident/both target, deploy-to-existing) + incident-rules with nested AND/OR conditions, back-fill, JSONB path support (alert_context…
  whitekernel
  committed
  070ca03
- [FIX] enforce customer-scope authorisation on incident-rules + investigation-flows (getters/list/create/update/deploy/backfill), server-owned rule_created_by/flow_created_by attribution, public pro…
  whitekernel
  committed
  6580548
- [IMP] incidents: comments, audit trail, incident_id alert filter, incident-statuses endpoint, escalate crash fix
  whitekernel
  committed
  b898d8e
- [ADD] mail: inbound ingest + outbound send with rules engine and secrets manager
  whitekernel
  committed
  aaf8ca0
- [FIX] pg12-to-pg18 upgrade: preserve hyphens in compose project name and detect stopped iriswebapp_db container
  whitekernel
  committed
  ff58138
Commits on Jul 3, 2026
- [IMP] activity log: cover war rooms + case timelines + admin modules, add war_room_id scoping and /_diag notifications endpoint
  whitekernel
  committed
  49455df
- [FIX] compose: disable adapter-node BODY_SIZE_LIMIT so multi-MB avatar and multi-GB datastore uploads aren't truncated
  whitekernel
  committed
  86a0589
- [FIX] notifications: drop /_diag endpoint and remove UserActivity.war_room relationship that broke gunicorn boot (WarRoom unresolvable at mapper-config time)
  whitekernel
  committed
  2422741
- [ADD] on_postload hooks for war room and incidents
  whitekernel
  committed
  662252f
Commits on Jul 7, 2026
- Merge remote-tracking branch 'upstream/develop' into sync/upstream-2026-07
  Che4ter
  committed
  683c9e4
- [IMP] incidents: escalate/merge to case, propagate status to alerts, expose source-incident on cases
  whitekernel
  committed
  3527099
- [ADD] incidents: correlation graph endpoint, unlink alert/incident from case, business helpers
  whitekernel
  committed
  883b790
- [ADD] collab: server-side Yjs relay, per-doc rooms, socket JWT-in-auth fallback
  whitekernel
  committed
  f1d8483
- Fix alembic multi-head merge, WarRoom mapper crash, and CSP worker-src gap
  Che4ter
  committed
  103a296
- Merge remote-tracking branch 'upstream/develop' into sync/upstream-2026-07
  Che4ter
  committed
  bdcdd63
- Fix war room deletion 500 by setting FK to SET NULL on delete
  Che4ter
  committed
  222c3c5
- Remove duplicate code blocks left over from the upstream merge
  Che4ter
  committed
  f5e6ff5
- [FIX] nginx: grant CAP_NET_BIND_SERVICE so non-root www-data can bind port 443
  
  Che4ter
  and
  claude
  committed
  82a1b57
- [FIX] Clean up remaining merge artifacts caught by ruff
  
  Che4ter
  and
  claude
  committed
  871f920
- [FIX] reports: use f-strings instead of .format() calls
  Che4ter
  committed
  cc7f652
- [FIX] collab: GFM tables in seeder + auto re-seed via seeder_version bump
  whitekernel
  committed
  0b4c80a
- [FIX] collab: unflatten single-line GFM pipe tables from legacy imports
  whitekernel
  committed
  519048a
- [FIX] nginx: don't crash at startup when the collab upstream is absent
  Che4ter
  committed
  875d0b6
- Merge pull request #11 from baseVISION/sync/upstream-2026-07
  Che4ter
  authored
  ce0895d
- [IMP] rename Incident -> AlertCluster, IncidentRule -> ClusterRule across models, migrations, business, REST, schemas, hooks, celery tasks, tests
  whitekernel
  committed
  3cf41a9
Commits on Jul 8, 2026
Commits on Jul 9, 2026
Commits on Jul 13, 2026
Commits on Jul 14, 2026
- [FIX] add missing alembic merge-heads migration + ignore .claude/
  Che4ter
  committed
  a61da26
- Merge pull request #15 from baseVISION/sync/upstream-2026-07-13
  Che4ter
  authored
  99c8983

Commits

Commits on May 22, 2026

Commits on Jun 8, 2026

Commits on Jun 11, 2026

Commits on Jun 12, 2026

Commits on Jun 16, 2026

Commits on Jun 18, 2026

Commits on Jun 22, 2026

Commits on Jun 23, 2026

Commits on Jun 24, 2026

Commits on Jun 25, 2026

Commits on Jun 26, 2026

Commits on Jun 27, 2026

Commits on Jun 28, 2026

Commits on Jun 29, 2026

Commits on Jul 1, 2026