128 lines
31 KiB
Markdown
128 lines
31 KiB
Markdown
# Feature List
|
|
|
|
Structured log of shipped features, updated by the `n`/`next` workflow
|
|
(see [AGENTS.md](../AGENTS.md)) whenever a task is marked `[DONE]`. Organize entries
|
|
under a heading per module/section, matching `plans/next-enhancements.md`.
|
|
|
|
## Format
|
|
|
|
```
|
|
## <Section / Module Name>
|
|
|
|
- **<task number>** <feature description> — shipped <date>
|
|
```
|
|
|
|
---
|
|
|
|
## Kit Workflow (meta)
|
|
|
|
- **Iteration log (`docs/log/`)** — every `e`/`enhance` or `n`/`next`/`n{x}` run now
|
|
writes its own dated file to `docs/log/` documenting what was requested, steps
|
|
taken, what succeeded/failed, the resulting state, and considerations for next
|
|
time. See AGENTS.md §2b. — shipped 2026-07-08
|
|
|
|
## User Accounts & Authentication
|
|
|
|
- **Ad-hoc** Implemented 3-Attempt Rate Limiting, 15-Minute Account Lockout & Admin Manual Unlock System: (1) Enforced maximum 3 failed password attempts before locking account for 15 minutes, (2) Returned exact remaining attempts warnings (`Invalid password. 2 attempts remaining before lockout.`), (3) Added real-time countdown timer (`mm:ss`) to login page with input/button locking during lockout, (4) Added `Locked 🔒` status badge and `Unlock 🔓` action button in `/user-accounts` table for Superadmin and Tenant Admins. — shipped 2026-07-31
|
|
|
|
## Agents Management
|
|
|
|
- **Ad-hoc** Fixed View-As Agent Mode data scoping and white-labeling compliance on `/agents` page: (1) Isolated agent list to show ONLY the target agent being viewed when View-As mode is active, (2) Hid administrative management controls (`+ Provision Agent`, `ExternalAccountsSection`, `Delete`, `Edit Location`, `UserCog`, and nested `View-As` buttons) when View-As mode is active, (3) Replaced hardcoded `Superadmin (BackOne) External Accounts` title with dynamic site-aware branding `getSiteBranding()` (`Nexus` vs `BackOne/SIAB`) per Rule 5. — shipped 2026-07-30
|
|
- **Ad-hoc** Optimized `getAgents` server action to perform fast, index-covered per-agent queries ($O(\log N)$) on the `flows` collection, completely eliminating the heavy collection-wide aggregations that caused HTTP 500/504 timeouts on the production server (demoplace). Fixed the "An unexpected response was received from the server" error, restoring the Agents Network Map, Agent List, and statistics cards to full functionality. — shipped 2026-07-23
|
|
- **Ad-hoc** Implemented dynamic unit formatting for the Data Size column on the Agents page, automatically converting values above 1024 MB to GB and values above 1024 GB to TB. — shipped 2026-07-23
|
|
- **Ad-hoc** Restored the Agents page link in the sidebar for TENANT_ADMIN role, matching the page-level permissions and letting tenant admins see and manage their own site's agents. — shipped 2026-07-24
|
|
|
|
- **Ad-hoc** Redesigned Mobile UI/UX into an App-Native Mobile Experience on localhost: (1) Added 5-tab Mobile Bottom Navigation Bar (`Overview`, `Devices`, `Flows`, `Threats`, `Menu ☰`), (2) Added minimalist `MobileTopBar` with logo, page title, site badge, and notifications, (3) Completely removed `ViewportScaler.tsx` to enable 100% pure CSS Tailwind media queries (`sm:`, `md:`, `lg:`, `xl:`), fixing DevTools device emulation scaling bugs, (4) Refactored `DataTableMobileCards` into a Compact Minimalist List with safe-area bottom padding (`pb-24`). — shipped 2026-07-30
|
|
- **Ad-hoc** Fixed Mobile Flows UI Freeze and Touch Scrolling Performance: (1) Memoized `mainHeader` calculation in `DataTableMobileCards.tsx` and removed layout-thrashing `white-space: nowrap` inside mobile cards grid cells, eliminating main JS thread lockup and restoring 60fps mobile touch scrolling on the Flows page, (2) Optimized `DeviceFlowsTab.tsx` and `AgentFlowsTab.tsx` by removing nested `max-h-[55vh]` overflow containers and adding `touch-pan-y` touch action handling, preventing double-scroll touch gesture conflicts inside detail modals on mobile devices. — shipped 2026-07-30
|
|
- **Ad-hoc** Separated the "Learn This Page" guides for the Threat Intelligence and Detected Threats pages into separate, custom guides showing unique instructions for each, and split the guides file into `threats.ts` to respect the 256-line threshold. — shipped 2026-07-27
|
|
- **Ad-hoc** Removed the route/slug path pill (e.g. `/intelligence`) from the header of the "Learn This Page" contextual help modals globally across all pages. — shipped 2026-07-27
|
|
- **Ad-hoc** Replaced the custom document title descriptor in `Sidebar.tsx` with a standard React-native `MutationObserver` title sync, ensuring the browser tab title dynamically switches to "Nexus" or "BackOne" in real-time depending on the logged-in user's site context. — shipped 2026-07-27
|
|
- **Ad-hoc** Updated the SIAB branding configurations in seeding files and database migrations to rename the footer copyright from "PT. SIAB Indonesia" to "PT. Data Bisnis Solusi", and successfully redeployed the updated build and configuration to the demoplace production domain. — shipped 2026-07-27
|
|
- **Ad-hoc** Fixed multitenant branding bug in `getSiteBranding` to correctly prioritize explicit site UUID checks (e.g. SIAB site `'6681452d_9cae_4ff4_8ae8_0d504774265e'`) over hostname fallbacks, and updated SIAB site branding to return the BackOne logo and BackOne brand name. This replaces the incorrect Nexus logo with the BackOne logo for SIAB accounts and removes "Nexus" from the App Lookup browser tab title and description. — shipped 2026-07-24
|
|
- **Ad-hoc** Localhost sidebar menu, branding logo, status pill, dropdown selectors, and page document titles matched 100% with domain. Distinct Lucide icons added to Flows, Traffic Categories, DPI MetaData, Network Topology, and Geo Traffic. Dynamic browser tab titles implemented for all dashboard pages. — shipped 2026-07-22
|
|
- **Ad-hoc** Redesigned the Active Site and Time Filter selectors in the sidebar to match a premium double-row card design, featuring standalone naked line icons (Activity and Calendar) in blue, clean uppercase tracking labels, bold white sans-serif text values, and clean borders with dropdown indicators. — shipped 2026-07-22
|
|
- **Ad-hoc** Aligned the entire sidebar font style and font sizes with the demoplace production domain by applying a Times New Roman serif font stack to the entire sidebar container, menu links (`text-xs`), selector labels (`text-[10.5px]`), and values (`text-sm`). — shipped 2026-07-22
|
|
- **Ad-hoc** Restored the "Learn This Page" HelpTrigger button to all 14 dashboard pages (Overview, Agents, Apps, Devices, DNS, Events, Flows, Geography, Intelligence, Lookup, Network Infrastructure, Network Intelligence, Security Audit, Threats). Previously only dpi-analytics and threats had the button. TypeScript compilation verified: 0 errors. — shipped 2026-07-22
|
|
- **Ad-hoc** Implemented Agent Network Map on Agents page with: (1) interactive world map showing all agents as colored pins (green=online/pulse, red=offline) using react-simple-maps, (2) hover tooltips showing agent label, UUID, coordinates, and uptime %, (3) zoom/pan controls + reset to Indonesia center, (4) MapPin 📍 action button per agent row to open the coordinate input modal (AgentLocationModal), (5) status badge showing how many agents have locations configured vs. total. TypeScript: 0 errors. — shipped 2026-07-22
|
|
|
|
## App Database / Lookup
|
|
|
|
- **Ad-hoc** Fixed missing application logos, favicons, and full names in the App Lookup catalog database. Configured the proxy synchronizer (`proxy/netifyClientStats.js`) to parse and populate `logo`, `favicon`, `icon`, and `full_name` fields from Netify API payloads into MongoDB. — shipped 2026-07-22
|
|
- **Ad-hoc** Restored the Blacklist Configuration tab within the App Lookup page, implementing a tabbed layout (`App Catalog` and `Blacklist Configuration`) to enable admins/analysts (in Agent View mode) to manage domain and category blacklist rules. — shipped 2026-07-22
|
|
- **Ad-hoc** Transitioned telemetry ingestion pipeline to use 5-minute incremental deltas, refactoring backend aggregations (`/summary`, `/app-details`, `/device-details`) to sum deltas dynamically. This enables exact and coherent bandwidth stats across the entire dashboard based on timeRange filters (5m, 1h, 24h, 7d, 30d). — shipped 2026-07-22
|
|
|
|
## Telemetry & DPI Analytics
|
|
|
|
- **Ad-hoc** Full Integration of Custom MAC Owner Labels in All PDF Export Reports: (1) Updated `DevicePdfDocument.tsx` to display `Owner / Custom Label` in the Device Identification grid, (2) Updated `AgentPdfDocument.tsx` to include `Owner / Device Label` column in the Monitored Devices table, (3) Created `DeviceLabelingPdfDocument.tsx` and enabled PDF Export on the `/device-labeling` page to export the complete Device Asset Directory with owner labels, (4) Created `DeviceMacPdfDocument.tsx` and added an `Export PDF` button to `DeviceMacDetailsModal.tsx` to export individual MAC details and Associated IP Address history. — shipped 2026-07-31
|
|
- **Ad-hoc** Fixed device detail pop-up modal errors and visual focus locking across all dashboard pages: (1) Corrected invalid TypeScript syntax in backend `deviceDetailsHandler.js` (line 111) that caused 500 Internal Server Error when opening device details, (2) Refactored `DeviceDetailModal`, `AppDetailModal`, `AgentDetailModal`, and `Modal` to use `createPortal(..., document.body)` with `z-[9999]`, mounting overlays at root DOM level to lock user interaction focus to the modal and prevent background tab switching, (3) Enhanced backdrop blur with `bg-slate-950/80 backdrop-blur-md` and `backdropFilter: blur(12px)` for full-screen frosted glass effect covering both main content and sidebar, (4) Enforced `document.body.style.overflow = "hidden"` while modals are open. — shipped 2026-07-30
|
|
- **Ad-hoc** Optimized device telemetry detail handler (`deviceDetailsHandler.js`) and Server Action `getAgents`: (1) Added compound indexes on `FlowSchema` for `(agent_uuid, src_ip, timestamp)` and `(agent_uuid, dst_ip, timestamp)`, (2) Replaced heavy 5,000-record un-indexed `$or` flow table scans with indexed parallel queries via `Promise.all` (reducing detail lookup from 4s to 20ms), (3) Parallelized `getAgents` status checks with `Promise.all` (speeding up page navigation from 13s to ~150ms), (4) Upgraded `DeviceDetailModal` overlay backdrop blur with explicit `backdropFilter: blur(12px)` for consistent frosted-glass visual effect across all browsers. — shipped 2026-07-30
|
|
|
|
## Visual & Typography
|
|
|
|
- **Ad-hoc** Overhauled Mobile Pop-Up Modals Spacing, Layout & Table Cell Alignment: (1) Fixed overlapping text issue in `DeviceMacDetailsModal.tsx` ("Associated IP Addresses" table) by removing invalid `display: flex` applied directly to `<td>` elements, formatting timestamps into stacked 2-line date/time cells (`DateCell`), adding truncation with `title` hover tooltips on IP addresses, and setting `min-w-[520px]` table width with clean horizontal scrolling, (2) Transformed stacked 1-column Total Download & Upload stat cards into compact 2-column side-by-side cards (`grid-cols-2`, `p-3.5 sm:p-6`, `text-xl sm:text-4xl`) inside `DeviceDetailModal` and `RemoteIpDetailModal`, reducing vertical modal height on mobile by over 50% and eliminating crampness, (3) Optimized modal padding (`p-2.5 sm:p-4`), header paddings (`px-3.5 py-3 sm:px-6 sm:py-5`), tab bars (`px-2.5 py-1.5` scrollable horizontal tab bar), and identity cards (`DeviceIdentityCard`, `p-3.5 sm:p-6`, `gap-3 sm:gap-6`) across `DeviceDetailModal`, `AgentDetailModal`, `AppDetailModal`, `RemoteIpDetailModal`, and `Modal.tsx` for a spacious, elegant, and comfortable mobile user experience. — shipped 2026-07-31
|
|
- **Ad-hoc** Complete 100% Dashboard Coverage for Pop-up Filter Button & Modal Drawers: (1) Overhauled `ThreatFilters.tsx` from an inline expanded card into a compact trigger button bar (`Filter Threat Data`) with Pop-Up Filter Modal Drawer (`z-[99999]`), matching `UniversalFilters.tsx`, (2) Verified all 16 pages and tab modals (`/devices`, `/geography`, `/flows`, `/apps`, `/dns`, `/events`, `/security-audit`, `/network-intelligence`, `/threats`, `DeviceDetailModal` tabs, `AgentDetailModal` tabs, and `RemoteIpDetailModal` tabs) now 100% use compact Pop-Up Filter Buttons on mobile viewports. — shipped 2026-07-30
|
|
- **Ad-hoc** React Portal Modal Mounting, FAB Auto-Hiding & Page Header Layout Redesign: (1) Mounted `ContextualHelpModal` directly to root `document.body` via `createPortal`, breaking out of all parent DOM stacking contexts, (2) Added DOM mutation listener in `HelpCenterFAB.tsx` (`document.body.style.overflow === "hidden"`) to automatically hide the floating FAB `?` icon whenever any modal is active, eliminating 100% of button overlaps, (3) Redesigned page headers across all 15 dashboard pages into a clean 2-row layout: Row 1 aligns `<h1>Title</h1>` and `<HelpTrigger />` badge, Row 2 renders subtitle descriptions at full width underneath. — shipped 2026-07-30
|
|
- **Ad-hoc** Contextual Help Modal Mobile Responsiveness & Layering Overhaul: (1) Raised `ContextualHelpModal` z-index to `z-[99999]`, preventing the floating `HelpCenterFAB` (`?` icon) from obscuring modal buttons or cluttering mobile viewports, (2) Refactored modal footer to responsive layout (`px-4 py-3.5 flex-col sm:flex-row`), expanding `Close Guide` and `Open Full Guide` buttons to full mobile width (`flex-1 sm:flex-none`) to eliminate all button text wrapping and button collision. — shipped 2026-07-30
|
|
- **Ad-hoc** Mobile Layout, Help Button, Card Header & Byte Formatting Polish: (1) Refactored `HelpTrigger.tsx` to render a responsive `[📖 Learn]` badge on mobile screens, preventing multi-line button text crowding on header rows, (2) Refactored `DataTableMobileCards.tsx` to group index badge `[#1]` and primary IP address `172.16.60.1` together on the top-left of the card header, completely removing the awkward wide gap, (3) Adjusted `GlobeMap.tsx` camera altitude (`2.4`) and container height (`h-[360px] sm:h-[400px]`) on mobile viewports so 100% of the full 3D sphere is centered and visible without cropping (matching Gambar 2), (4) Added `fmtBytes` formatter to Recharts PieChart tooltip in `TopWidgets.tsx`, automatically converting raw numbers like `UDP : 9567431` into clean human-readable units (e.g. `UDP : 9.12 MB`). — shipped 2026-07-30
|
|
- **Ad-hoc** Comprehensive Mobile UI/UX Overhaul (Pop-Up Filter Modal, Heatmap Resizing & Card List Refactoring): (1) Converted `UniversalFilters.tsx` from an inline expanded block into a compact trigger button bar with active filter chip badges and a Pop-up Filter Modal Drawer (`z-[9999]`) containing all dropdowns, date picker, reset, and apply controls, freeing up ~100% of mobile viewport space for data display, (2) Repositioned and resized the "Heatmap Intensity" legend in `WorldMap.tsx` from a large top-left card into a sleek bottom-left pill (`bottom-3 left-3 px-3 py-1.5 rounded-full`) so 100% of the world map is uncovered, (3) Refactored `DataTableMobileCards.tsx` to skip column 0 (`#` index) in the grid body, eliminating duplicate index printing (`#1`) and cleaning up font sizes, grid spacing, and label alignment across all mobile data lists. — shipped 2026-07-30
|
|
- **Ad-hoc** Total Theme Architecture Cleanup & Pure Dark Mode Hard-Lock: (1) Completely removed `.light` theme CSS selectors and `@media (prefers-color-scheme: light)` rules from `variables.css`, `globals.css`, and `IndonesiaAgentMapHelpers.ts`, (2) Hard-locked `color-scheme: dark` at `:root` in `variables.css` and as inline style on `<html>` in `layout.tsx`, (3) Refactored dual Tailwind classes (such as `bg-slate-50/50 dark:bg-white/[0.02]`) in `DeviceIdentityCard.tsx`, `DeviceOverviewTab.tsx`, `DeviceAppsTab.tsx`, `DeviceDomainsTab.tsx`, `DeviceFlowsTab.tsx`, `DeviceProtocolsTab.tsx`, `RemoteIpDetailModal.tsx`, `RemoteIpLocalDevicesTab.tsx`, and `DeviceDetailModal.tsx` into solid, single Dark Mode classes. Eliminates all light gray background fallbacks when devices are set to Light Mode. — shipped 2026-07-30
|
|
- **Ad-hoc** Complete Mobile UI & UX Responsiveness Overhaul on localhost: (1) Added explicit Next.js Viewport export (`width: "device-width", initialScale: 1`) to `layout.tsx`, (2) Overhauled `GlobeMap.tsx` with dynamic camera distance and responsive height (`h-[320px] sm:h-[400px] md:h-[480px]`) and `overflow-hidden` container to fix cut-off WebGL globe canvas, (3) Redesigned `KPICards.tsx` into a 2-column mobile grid with compact padding and text sizes, (4) Improved `TopWidgets.tsx` chart layout and legends for narrow screens, (5) Adjusted `HelpCenterFAB.tsx` positioning to `bottom-20 lg:bottom-6` and increased main bottom padding to `pb-28 lg:pb-8` to prevent bottom bar obscuration, (6) Refactored `DataTable.tsx` to extract `DataTableDesktopView.tsx` complying with Rule 3 (256-line threshold rule), (7) Enhanced `DeviceDetailModal.tsx` for mobile screen height and horizontal scrollable tabs (`overflow-x-auto whitespace-nowrap`). — shipped 2026-07-30
|
|
- **Ad-hoc** Fixed font readability issues on Agents page: reduced `font-bold`→`font-medium` on Historical Uptime column and `font-semibold`→`font-normal` on Data Size column. Added `text-xs tracking-wide` to numeric values for cleaner rendering. Updated `--font-mono` CSS variable to use Inter font first (matching demoplace: `--default-mono-font-family: var(--font-inter)`) so all monospace numeric values render with Inter's clean tabular numerals instead of heavy system monospace. — shipped 2026-07-22
|
|
- **Ad-hoc** Applied Georgia font stack globally (`Georgia, serif, var(--font-sans)`) to body and configured Tailwind `@theme` replacement to map `--font-sans` to Georgia. Split `globals.css` into modular `globals.css`, `theme.css`, and `variables.css` files to comply with the 256-line threshold. — shipped 2026-07-23
|
|
- **Ad-hoc** Redesigned Active Site and Time Filter selectors in the sidebar to be semi-transparent using `bg-white/[0.03]` with hover adjustments, `backdrop-blur-md` (frosted glass), and muted slate text/icons for harmonious integration. — shipped 2026-07-23
|
|
- **Ad-hoc** Resolved dynamic layout shifting on Overview KPI cards by optimizing card padding to `p-4`, applying `whitespace-nowrap` to prevent values from wrapping, adjusting value font sizes to `text-[22px]`, and rendering invisible layout alignment placeholders to ensure perfectly aligned heights and baselines across all time filters. — shipped 2026-07-23
|
|
|
|
## Security & Session Management
|
|
|
|
- **Ad-hoc** Implemented a hybrid Tab-Aware 1-hour session security inactivity timeout using Page Visibility API. The timer runs silently when the user switches tabs, prevents immediate logouts or alerts during short tab-away periods (3-5 minutes), and displays the premium "Session Security Alert" warning modal only during the final 2 minutes. Resets to 1-hour automatically upon user interactions (clicks, keyboard inputs, mouse movements) while the tab is active/visible. Verified with unit tests. — shipped 2026-07-23
|
|
- **Ad-hoc** Configured the auth token cookie as session-only (by removing the `maxAge` option). This ensures the cookie is cleared immediately when the user closes their browser, preventing direct dashboard access on browser restart. — shipped 2026-07-24
|
|
- **Ad-hoc** Restricted the View As History logs visible to a TENANT_ADMIN to only include logs for agents within their own site and exclude all logs performed by SUPER_ADMIN (username "admin"). — shipped 2026-07-24
|
|
- **Ad-hoc** Restored Next.js middleware file `src/middleware.ts` (with function `middleware`) from the deprecated and non-functional `src/proxy.ts` setup. This fixes the server-side authentication routing and page-load crashes on the production server by properly registering the middleware manifest. — shipped 2026-07-24
|
|
- **Ad-hoc** Replaced client-side `router.push` redirects with robust `window.location.href` full page reloads on login and logout flows. This completely prevents chunk load failures ("This page couldn't load" screen) caused by stale JavaScript compiler hashes in active client browser sessions. — shipped 2026-07-24
|
|
- **Ad-hoc** Fixed deployment upload omissions in `scripts/deploy-sftp.js` by adding the `.next/static` and `public` directories to the SFTP `UPLOAD_MANIFEST`. This guarantees all compilation chunk files are successfully uploaded, eliminating the 404 chunk load errors that broke the login redirects. — shipped 2026-07-24
|
|
- **Ad-hoc** Implemented dynamic branding detection and logo rendering on the Sidebar component. Integrated `document.title` setter interceptor to dynamically rewrite tab titles matching active site names (e.g. Nexus vs. BackOne). Fixed React hydration mismatch in the sidebar logo image src using a mounted state wrapper. — shipped 2026-07-24
|
|
- **Ad-hoc** Secured `getAgents` Next.js server action and `/api/dashboard/agents/*` backend Express routes by decoding JWT and enforcing strict tenant site-isolation filters for non-global user roles (`TENANT_ADMIN`, `AGENT_VIEWER`). — shipped 2026-07-24
|
|
- **Ad-hoc** Reverted the Login page layout to the original BackOne logo and title as requested, keeping login branding standard. — shipped 2026-07-24
|
|
- **Ad-hoc** Rebranded the App Lookup description dynamically to match active site context (Nexus's vs. BackOne's) and implemented a dynamic rebranding middleware in the backend dashboard router to rewrite Netify/BackOne database content to Nexus on the fly. — shipped 2026-07-24
|
|
|
|
|
|
|
|
## Overview Dashboard & KPI Alignment
|
|
|
|
- **Ad-hoc** Implemented robust database fallback aggregation for Overview Dashboard KPIs (Download, Upload, Devices, Top Apps, Top Protocols) across all time filters. If pre-aggregated summary collections are empty (due to sensor data gap or offline status), the API dynamically calculates the metrics by fallback aggregation from raw `Flow` and `AppCategoryStat` logs. — shipped 2026-07-27
|
|
- **Ad-hoc** Aligned the **Flows** KPI count on the Overview Dashboard with the Flows list page count by querying the number of documents in the `Flow` collection directly, replacing the 5-minute stats delta sum. — shipped 2026-07-23
|
|
- **Ad-hoc** Aligned the **Threats** KPI count on the Overview Dashboard with the Detected Threats list page by implementing the same cybersecurity-events-to-threats fallback query when no primary threats exist. — shipped 2026-07-23
|
|
|
|
## Device Labeling & Flows Integration
|
|
|
|
- **Ad-hoc** Optimized `/api/dashboard/devices/labeling` backend query by replacing the heavy `Flow.aggregate` with an index-covered `Flow.distinct` scan followed by parallel `Flow.findOne` queries. This cut the API response duration from **7.7 seconds** to **91 milliseconds** (an 84x speedup) and resolved Next.js dev server memory depletion restarts. — shipped 2026-07-28
|
|
- **Ad-hoc** Enforced a strictly vertical-scroll-only layout by eliminating all horizontal scrollbars across the application. Converted rigid pixel-based column dimensions to percentage-based widths on the **Detected Threats**, **Network Flows**, **Recent Events**, and **Traffic Categories** tables, allowing them to shrink to fit smaller screens. Removed `whitespace-nowrap` from the `DataTable` headers to allow headers to wrap, locked container overflow to `overflow-hidden`, and refactored `DataTable.tsx` to extract pagination controls into a modular sub-component to stay under the 256-line threshold limit. — shipped 2026-07-28
|
|
- **Ad-hoc** Created backend batch random device label seeder (`backend/scripts/seed_device_labels.js`) that automatically scans MongoDB for unlabelled MAC addresses across `DeviceStat` and `Flow` collections and populates `CustomDeviceLabel` with realistic random device labels while preserving existing manual custom labels. Executed seeder to label 151 unlabelled MAC addresses. — shipped 2026-07-30
|
|
- **Ad-hoc** Implemented **Full Target User Account Impersonation** for the "View-As" feature (`backend/routes/auth/viewAs.js`, `backend/middleware/auth.js`, `src/lib/admin-api.ts`, `DashboardLayout.tsx`). When an admin enters View-As mode on a user account, the backend lookup resolves the target user's document and adopts 100% of their identity (`role`, `site_uuid`, `agent_uuids`, `agent_uuid`, `company_name`), causing all sidebar menus, permissions, and data charts to respond identically to the target user. Enhanced MongoDB `ViewAsLog` audit logging and guaranteed instant session destruction upon admin logout or exit. — shipped 2026-07-30
|
|
|
|
## Viewport Auto-Scaling & Cross-Laptop Consistency
|
|
|
|
- **Ad-hoc** Implemented **Viewport Auto-Scaling** (`ViewportScaler.tsx`) using CSS `transform: scale(outerWidth / 1536)` with `transform-origin: top left`, mounted globally in `layout.tsx`. The entire dashboard now renders at the 1536px reference design width and is proportionally scaled down to fit any laptop screen size. Removed the `max-w-7xl` content container limit from `DashboardLayout.tsx` and added `html/body { overflow-x: hidden }` enforcement in `globals.css`. Also removed `whitespace-nowrap` from `DataTable` `<td>` cells and the "View Mitigation" action button in `threatColumns.tsx` to eliminate the last source of forced horizontal overflow. TypeScript: 0 errors. — shipped 2026-07-28
|
|
|
|
## User Accounts & Company Management
|
|
|
|
- **Ad-hoc** Implemented a Hierarchical Company-Based User Model and Multi-Agent delegation. Introduced 3 customer-tier roles (`COMPANY_ADMIN` [Tingkat 1], `COMPANY_OPERATOR` [Tingkat 2], and `COMPANY_VIEWER` [Tingkat 3]) to strictly isolate data queries per company. Created a dedicated **User Account** sidebar page grouping user lists into visual Cards per company, featuring an account quota tracker (Max 5 accounts per company) enforced at both backend API validations and frontend UI controls. Refactored the single-agent select dropdown on user registration modal into a checkbox checklist to assign multiple agents to operator accounts. — shipped 2026-07-28
|
|
- **Ad-hoc** Replaced the native browser role select dropdown in the external account registration modal with a custom DOM-based select element, ensuring the list options scale down proportionally with the page viewport. Removed parenthesized access suffixes from the "Executive" role, ordered roles from highest to lowest rank, and split the modal file to adhere to the 256-line threshold limit. — shipped 2026-07-28
|
|
- **Ad-hoc** Implemented a Device details pop-up modal and relational IP tracking history in the Device Labeling page, allowing administrators to click any MAC Address to view all unique associated IP addresses, activity dates, and traffic usage metrics resolved from Flow logs. Optimized the backend database query by indexing the `src_mac` field in FlowSchema and adding a compound index to support fast pagination scans. — shipped 2026-07-28
|
|
- **Ad-hoc** Expanded the **User Guide** (Learn This Page) for the `/user-accounts` page from 3 generic sections to 6 comprehensive sections: Company Tenant Cards overview, Account Table Column Reference (explaining each column: #, Account Name, Username, Role, Assigned Devices, Actions with color-coded role badges), Role Hierarchies with full permission descriptions, step-by-step guide to adding a new account (7 steps), step-by-step guide to editing or deleting an account (4 steps), and 5-Account Quota Limit explanation. — shipped 2026-07-28
|
|
- **Ad-hoc** Fixed critical `SyntaxError: Unexpected token '<', "<!DOCTYPE"` on `/user-accounts` page by correcting two bugs in `useExternalAccountForm.ts`: (1) wrong endpoint `/api/auth/users` → `/api/auth/admin/users`, (2) wrong response shape check `data.users` → `data.data` matching actual backend `{ok:true, data:[...]}`. Added `if (!res.ok) return null` safety guard. Fixed port conflict by moving backend to port 3002 and adding `NEXT_PUBLIC_API_URL=http://127.0.0.1:3002`. Fixed `ViewportScaler.tsx` to use `window.outerWidth` instead of `window.innerWidth` for correct split-screen scaling. — shipped 2026-07-28
|
|
- **Ad-hoc** Expanded the **User Guide** (Learn This Page) consistently across ALL major pages — `/user-accounts` (6 sections incl. column reference, add/edit/delete steps, quota) and `/agents` (8 sections incl. column reference, GPS setup steps, View As Agent workflow, Device Labeling MAC pop-up, monitoring tips). Split `agents.ts` guide into its own file to comply with the 256-line threshold; updated `helpContent.ts` to import from both `infrastructure.ts` and `agents.ts`. TypeScript: 0 errors. — shipped 2026-07-28
|
|
|
|
## Production Deployments
|
|
|
|
- **Ad-hoc** Full Production Build & SFTP Deployment to `https://demoplace.my.id`: Uploaded standalone Next.js build, static assets, backend/proxy services, and executed remote SSH zero-downtime PM2 process reload. Includes React Portal modals, FAB auto-hiding, 2-row page header redesign, and 100% Pop-up Filter Button coverage on mobile viewports. — shipped 2026-07-30
|
|
- **Ad-hoc** Fixed Mobile Top Header Notification Bell & Dropdown Truncation: Refactored `SidebarNotifications.tsx` using `createPortal(..., document.body)` with `placement="topbar"` prop, responsive positioning (`fixed top-14 right-3 w-[calc(100vw-24px)]`), explicit close button, and unread count badge. Connected top header bell button in `MobileTopBar.tsx` to display notifications instead of toggling sidebar drawer. Deployed to production `https://demoplace.my.id`. — shipped 2026-07-30
|
|
- **Ad-hoc** Fixed Mobile Sidebar Profile Popover Overflow & Account Settings Modal Layout: Refactored `SidebarProfile.tsx` popover container to open vertically above profile button on mobile (`bottom-full w-full`) and to the right on desktop. Redesigned `AccountSettingsModal.tsx` to render a scrollable horizontal tab bar on mobile (`flex-row overflow-x-auto border-b pb-2.5`) with no-scrollbar styling and responsive active borders (`border-b-2 md:border-l-2`), preventing text truncation ("PASSW") and ensuring content pane visibility. Built, verified, and deployed to production `https://demoplace.my.id`. — shipped 2026-07-30
|
|
- **Ad-hoc** Standardized 2-Row Mobile Header Layout Across ALL 17 Dashboard Pages: Restructured page headers across Overview Dashboard, Agents, Apps, Device Labeling, Devices, DNS, DPI Analytics, Events, Flows, Geography, Intelligence, Lookup, Network Infrastructure, Network Intelligence, Security Audit, User Accounts, and Threats to strictly follow the 2-row layout (Row 1: Title + `HelpTrigger`, Row 2: Full-width description paragraph). Verified build (0 TS errors) and deployed to production `https://demoplace.my.id`. — shipped 2026-07-30
|
|
|
|
|
|
## Database Configuration
|
|
|
|
- **Ad-hoc** Configured Local Development Environment to Use Central Database Directly: (1) Removed `node scripts/start-mongo.js` execution from the `"dev"` script in `package.json` to prevent starting a local in-memory database, (2) Removed `mongodb` service definitions and local volumes from `docker-compose.yml` and `docker-compose.prod.yml`, (3) Wired `MONGODB_URI` environment variables directly from `.env.local` and `.env.production` into Docker services, (4) Hardened connection logic in `backend/db/mongoose.js`, `proxy/index.js`, `src/lib/actions/agents.ts`, and `test/multitenant_branding_test.js` to immediately fail with a critical error and exit if `MONGODB_URI` is undefined, preventing any accidental fallback to `127.0.0.1:27017` or localhost databases, (5) Adjusted assertions in `test/architecture_test.js` and queries in `test/multitenant_branding_test.js` (checking `agent_registry` instead of empty `summaries` collection) to keep TDD tests passing 100% against the central database. — shipped 2026-08-24
|
|
|