risk-graph: stacked layout, 5-col Sankey + client-side what-if - #5

Merged

velvetway merged 56 commits into

mainfrom

feat/risk-graph-viz

Aug 30, 2026

Commits on May 2, 2026

docs: spec for risk-graph visualization redesign

velvetway
and
claude
committed
2864ff7
docs: implementation plan for risk-graph visualization

velvetway
and
claude
committed
c1781c7
feat(domain): add AssetAggregate and AssetAttackPathsResponse types

velvetway
and
claude
committed
f1772c6
feat(risk): add ComputeAssetAggregate helper

velvetway
and
claude
committed
1bc93b5
test(risk): add zero-uncovered and empty-VL aggregate cases

velvetway
and
claude
committed
d5cd83b
feat(risk): add AssembleAssetAttackPaths bulk method

velvetway
and
claude
committed
130d00a
feat(api): GET /api/risk/asset/:id/attack-paths

velvetway
and
claude
committed
e3aaf98
feat(types): AssetAggregate and AssetAttackPathsResponse

velvetway
and
claude
committed
4efffb1
feat(frontend): pure riskFlow lib (Sankey builder + recomputeW)

velvetway
and
claude
committed
f8a6154
fix(frontend): clamp negative severity in riskFlow + tighten tests

velvetway
and
claude
committed
5c85a07
feat(frontend): AssetRiskHero component

velvetway
and
claude
committed
950c673
feat(frontend): ThreatList component

velvetway
and
claude
committed
1e95dfe
feat(frontend): PtsziBreakdown component

velvetway
and
claude
committed
b5e2dcb
feat(frontend): AttackFlowSankey component

velvetway
and
claude
committed
627c0d6
feat(frontend): ControlPopover component

velvetway
and
claude
committed
f886c6b
feat(frontend): WhatIfBar component

velvetway
and
claude
committed
0419c8e
feat(frontend): rewrite RiskGraphPage as stacked orchestrator

velvetway
and
claude
committed
a709246
chore(frontend): drop legacy RiskGraphSankey component

velvetway
and
claude
committed
fe3941a
fix(frontend): use Map.forEach for C-node iteration

velvetway
and
claude
committed
939935a
fix(frontend): post-review fixes for RiskGraphPage

velvetway
and
claude
committed
82683eb
docs(spec): note V1 N+1 in AssembleAssetAttackPaths, V2 bulk loader

velvetway
and
claude
committed
b4d7b0a
fix(frontend): add default case to ThreatList sort callback

velvetway
and
claude
committed
b8b0be8

Commits on May 4, 2026

fix(frontend): upgrade typescript to 5.1.6 to resolve CI build failure
velvetway
committed
a1c415e
fix(migrations): align seed data with schema and run migrations strictly in tests

velvetway
and
claude
committed
599a5f2
feat(frontend): add logout button to TopBar and drop legacy App.test

velvetway
and
claude
committed
24f4eec

Commits on May 5, 2026

docs(risk): rewrite risk-model.md strictly per PTSZI thesis

velvetway
and
claude
committed
f18b92e
refactor(risk): drop legacy 1-25 engine, keep only the PTSZI W-model

velvetway
and
claude
committed
2a8ea11
feat(db): migrate schema to PTSZI-only — drop legacy risk fields

velvetway
and
claude
committed
dfe3e6c
feat(frontend): purge legacy risk pages, rebuild views around the W formula

velvetway
and
claude
committed
990bbeb
feat(report): rebuild PDF reports around the PTSZI W formula

velvetway
and
claude
committed
3c3bd50
feat(db): add migration 030 — wipe legacy threat/vuln/control seeds

velvetway
and
claude
committed
95c15ce
docs(spec): plan for ФСТЭК / БДУ / Минцифры integration

velvetway
and
claude
committed
4f19f97
feat(import): add ФСТЭК threat catalogue importer (P2)

velvetway
and
claude
committed
71b3ebc
feat(bdu): add БДУ snapshot importer + read-only Go wrapper (P3)

velvetway
and
claude
committed
b251bc8
feat(import): add Минцифры catalogue importer (P4)

velvetway
and
claude
committed
f3e6b26
feat(risk): VL = 6 категорий из диплома; ST↔VL перевод на vl_categories (P5)

velvetway
and
claude
committed
6589df1
feat(asset-vuln): автодетекция CVE/БДУ при добавлении ПО на актив (P6)

velvetway
and
claude
committed
d39c894
feat(risk): applicability-фильтр пар (актив × угроза) (P7)

velvetway
and
claude
committed
8544aa9
feat(ui): asset detail page (ПО / уязвимости / контроли) (P8)

velvetway
and
claude
committed
64a883d
feat(ui): каталог угроз ФСТЭК c правкой applicability (P9)

velvetway
and
claude
committed
46fb5f8
docs: добавил excalidraw-схему архитектуры

velvetway
and
claude
committed
82979ad
fix(ui): кнопка «Открыть карточку» в drawer актива (P8 fix)

velvetway
and
claude
committed
5d48822
fix(ui): белый экран на AssetDetailPage — невалидные Chip tone

velvetway
and
claude
committed
1673abe
fix(frontend): не парсить не-JSON ответы (Fiber SendStatus body)

velvetway
and
claude
committed
11c06c6
fix(software): cast date columns to text для pgx scan в *string

velvetway
and
claude
committed
24d0ee5
feat(bdu): version-aware CVE matching (vendor + name + version)

velvetway
and
claude
committed
2757199
feat(import-minreestr): retry+backoff and safer page size

velvetway
and
claude
committed
5ec6d7e

Commits on May 6, 2026

feat(compliance): ОСЗ — оценка состояния защищённости активa

velvetway
and
claude
committed
004e337
feat(import-minreestr): map subcategoryid to software_categories

velvetway
and
claude
committed
a3104fd
feat(compliance): PDF-отчёт о состоянии защищённости

velvetway
and
claude
committed
426afa8
feat(reports): пакет орг.-тех. документации актива

velvetway
and
claude
committed
6a8ccad
docs(excalidraw): risk formula diagram + sans-serif font

velvetway
and
claude
committed
3253d7e
feat(organization): сводный уровень организации

velvetway
and
claude
committed
5f24566
feat: закрытие 4 пунктов из 7.png/8.png диплома

velvetway
and
claude
committed
6bbbfed
fix(reports): убрать визуальные квадратики и обрезание заголовков

velvetway
and
claude
committed
a5b20e8
test: покрытие импортёров, compliance, отчётов

velvetway
and
claude
committed
ae2a331