kitos 4dea19cae9 feat(users): passwordless user creation via emailed set-password link, display full name instead of username ...

Admins now create users with a name + email (no password) and role;
a Send Email action (per-user, also reusable for resets) issues a
one-time token and POSTs it to an admin-configurable webhook URL —
intended for a Power Automate flow that delivers the actual email.
The old admin-sets-the-password flow is kept server-side
(LegacyUserCreateWithPassword) but no longer wired into the UI.

Every user-facing surface (top bar, sidebar, user management, audit
log, assignee pickers, dispute notifications) now shows full_name
instead of username, falling back to username when unset.

Also fixes long attack_procedure/expected_detection/suggested_text
text overflowing its container in the template review panels and
Red/Blue team fields (missing break-words on whitespace-pre-wrap
blocks).

2026-07-17 16:58:25 +02:00

..

7cec59461d53_add_evidences_table.py

feat: Phase 1 - Data models and migrations (T-004 to T-009)

2026-02-06 12:26:26 +01:00

14c6f07b47cb_add_tests_table.py

feat: Phase 1 - Data models and migrations (T-004 to T-009)

2026-02-06 12:26:26 +01:00

4671fccfa705_add_users_table.py

feat: Phase 1 - Data models and migrations (T-004 to T-009)

2026-02-06 12:26:26 +01:00

476930a8d86e_add_techniques_table.py

feat: Phase 1 - Data models and migrations (T-004 to T-009)

2026-02-06 12:26:26 +01:00

a1412d1ef337_add_audit_logs_table.py

feat: Phase 1 - Data models and migrations (T-004 to T-009)

2026-02-06 12:26:26 +01:00

b001_add_new_test_states.py

feat(phase-11): implement Red/Blue business logic services (T-106, T-107, T-108)

2026-02-09 09:58:54 +01:00

b002_add_evidence_team_notes.py

feat(phase-11): implement Red/Blue business logic services (T-106, T-107, T-108)

2026-02-09 09:58:54 +01:00

b003_add_dual_validation_fields.py

feat(phase-11): implement Red/Blue business logic services (T-106, T-107, T-108)

2026-02-09 09:58:54 +01:00

b004_add_test_templates_table.py

feat(phase-11): implement Red/Blue business logic services (T-106, T-107, T-108)

2026-02-09 09:58:54 +01:00

b005_add_v2_indexes.py

feat(phase-11): implement Red/Blue business logic services (T-106, T-107, T-108)

2026-02-09 09:58:54 +01:00

b006_add_notifications_table.py

feat(phase-18): add in-app notification system (T-128, T-129)

2026-02-09 13:52:04 +01:00

b007_add_remediation_fields.py

feat(phase-19): add remediation fields and reports system (T-130, T-131)

2026-02-09 13:58:35 +01:00

b008_add_data_sources_table.py

feat(phase-21): add V3 demo seed, DataSource and DetectionRule models (T-200, T-201, T-202)

2026-02-09 16:06:44 +01:00

b009_add_detection_rules_table.py

feat(phase-21): add V3 demo seed, DataSource and DetectionRule models (T-200, T-201, T-202)

2026-02-09 16:06:44 +01:00

b010_add_threat_actors_tables.py

feat(phase-23): add Threat Actor profiles with MITRE CTI import, API, heatmap and gap analysis (T-208 to T-212)

2026-02-09 16:27:38 +01:00

b011_add_defensive_techniques_tables.py

feat(phase-24): integrate MITRE D3FEND defensive techniques with ATT&CK mapping (T-213, T-214)

2026-02-09 16:38:59 +01:00

b012_add_detection_rule_associations.py

feat(phase-25): add detection rule associations, checklist UI and evaluation workflow (T-215, T-216)

2026-02-09 16:44:35 +01:00

b013_add_campaigns_tables.py

feat(phase-26): add Campaign models, endpoints, service with kill chain timeline UI (T-217 to T-220)

2026-02-09 16:52:52 +01:00

b014_add_compliance_tables.py

feat(phase-29): add compliance framework mapping, reports and UI (T-227 to T-229)

2026-02-09 18:41:24 +01:00

b015_add_coverage_snapshots.py

feat(phase-30): add coverage snapshots, temporal comparison and auto re-testing (T-230 to T-232)

2026-02-10 08:34:29 +01:00

b016_add_retest_fields.py

feat(phase-30): add coverage snapshots, temporal comparison and auto re-testing (T-230 to T-232)

2026-02-10 08:34:29 +01:00

b017_add_campaign_scheduling.py

feat(phase-31): add campaign scheduling and recurring automation (T-233 to T-234)

2026-02-10 08:38:00 +01:00

b018_add_performance_indexes.py

feat(phase-33): final polish V3 - navigation, performance, and documentation (T-238 to T-240)

2026-02-10 09:21:35 +01:00

b019_add_composite_indexes.py

feat(phase-34): resolve blocking tech debt — Redis, domain exceptions, indexes, CI

2026-02-17 15:43:05 +01:00

b020_add_jira_links_and_worklogs.py

fix(phase-35): use pure SQL for jira_links migration

2026-02-17 16:33:42 +01:00

b021_add_phase_timing_fields.py

feat(phase-37): timer pause/resume + professional reporting engine

2026-02-17 17:20:45 +01:00

b022_add_osint_items.py

feat(phase-38): automatic intelligence — OSINT enrichment + stale coverage detection

2026-02-17 17:47:47 +01:00

b023_add_must_change_password.py

feat(phase-39): role-based access control overhaul + forced password change

2026-02-18 10:37:02 +01:00

b024_add_critical_test_audit_indexes.py

perf(indexes): add critical indexes for Test and AuditLog models (P0)

2026-02-18 12:12:54 +01:00

b025_add_unique_test_detection_result.py

db: enforce unique constraint on test_detection_results

2026-02-18 13:20:28 +01:00

b026_add_technique_query_indexes.py

feat(infra): add repository implementations, mappers, FastAPI wiring, and technique indexes

2026-02-18 19:10:50 +01:00

b027_add_scoring_config.py

refactor(scoring): persist weights in DB table, replace mutable Settings with scoring_config_service

2026-02-19 17:46:02 +01:00

b028_phase0_campaign_tests_composite_index.py

feat(db): add Phase 0 composite indexes migration [FASE-0.3]

2026-05-18 13:19:20 +02:00

b029_phase3_audit_and_classification.py

feat(compliance): data classification fields and retention policies job [FASE-3.5]

2026-05-18 14:17:29 +02:00

b030_phase5_scoring_and_snapshots.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

b031_phase6_webhooks.py

feat(phases): implement webhooks (6.1), email (7.1), user preferences (7.2)

2026-05-19 13:40:45 +02:00

b032_phase7_user_prefs.py

feat(phases): implement webhooks (6.1), email (7.1), user preferences (7.2)

2026-05-19 13:40:45 +02:00

b033_system_configs.py

feat(settings): Settings page with email, webhooks, notifications, profile [FASE-8]

2026-05-19 15:10:31 +02:00

b034_detection_lifecycle.py

feat(dlm): Phase 8 — Detection Lifecycle Management [FASE-8]

2026-05-19 15:45:16 +02:00

b035_ownership_queue.py

fix(migration): rewrite b035 with raw SQL to avoid SQLAlchemy DDL hook

2026-05-19 16:54:32 +02:00

b036_attack_paths.py

feat(attack-paths): Phase 10 — Attack Paths & Advanced Purple Team [FASE-10]

2026-05-20 13:11:01 +02:00

b037_knowledge.py

feat(knowledge): Phase 11 — Knowledge Management (Playbooks + Lessons Learned) [FASE-11]

2026-05-20 13:39:05 +02:00

b038_risk_intelligence.py

feat(risk): Phase 12 — Risk Intelligence [FASE-12]

2026-05-20 15:31:38 +02:00

b039_executive_dashboard.py

feat(dashboard): Phase 13 — Executive Dashboard

2026-05-20 16:20:21 +02:00

b040_enterprise_readiness.py

feat(enterprise): Phase 14 — API Key Management + SSO/SAML 2.0

2026-05-20 16:43:57 +02:00

b041_operational_alerts.py

feat(alerts): Phase 13 — Operational Alert Engine

2026-05-21 15:25:55 +02:00

b042_jira_user_token.py

fix(jira): correct down_revision id in b042 migration

2026-05-26 15:59:23 +02:00

b043_jira_email.py

feat(jira): add editable jira_email field per user

2026-05-26 16:40:46 +02:00

b044_tempo_user_token.py

feat(tempo): per-user Tempo API token — same pattern as Jira token

2026-05-27 10:46:38 +02:00

b045_blue_work_started_at.py

feat(tempo): blue team Tempo time from pick-up, not queue entry

2026-05-27 11:50:15 +02:00

b046_add_disputed_test_state.py

feat(tests): disputed state + fix timestamps on reopen

2026-06-03 12:21:47 +02:00

b047_campaign_start_date.py

feat(campaigns): campaign start date — scheduled activation, Jira start_date

2026-06-03 16:57:06 +02:00

b048_evaluation_imports.py

feat(evaluations): ATT&CK Evaluations importer for CrowdStrike Falcon [FASE-6.1]

2026-06-05 15:57:03 +02:00

b049_add_technique_external_references.py

feat(techniques): add external_references storage and display MITRE sources with links

2026-06-18 16:26:11 +02:00

b050_add_operator_assignees.py

feat(tests): operator assignment — two queues for techs, assign endpoint for leads

2026-06-19 09:07:39 +02:00

b051_add_test_hold_fields.py

feat(tests): on-hold button with reason modal, Jira comment + On Hold transition

2026-06-19 09:53:05 +02:00

b052_add_containment_result.py

feat(tests): containment_result field on blue team evaluation

2026-06-24 12:35:19 +02:00

b053_add_execution_detection_times.py

feat(tests): execution start/end times on red team, detection/containment times on blue team

2026-06-24 13:09:13 +02:00

b054_add_campaign_approval_fields.py

feat(campaigns): migration for campaign approval fields

2026-07-04 12:02:08 +02:00

b055_add_campaign_modification_requests.py

feat(campaigns): migration for campaign_modification_requests table

2026-07-04 12:02:08 +02:00

b056_mod_request_test_id_set_null.py

fix(campaigns): preserve modification-request audit row after test deletion

2026-07-04 12:02:09 +02:00

b057_add_test_review_states.py

feat(tests): migration for red_review/blue_review states and review columns

2026-07-06 10:40:39 +02:00

b058_attack_success_three_state.py

fix(migration): cast CASE expression to enum type in b058 UPDATE statement

2026-07-06 17:01:25 +02:00

b059_data_classification_scheme.py

feat(classification): org data classification scheme, tactic-based initial default, operator edit rights

2026-07-07 11:16:35 +02:00

b060_data_classification_matches_jira.py

fix(jira): correct Data Sensitivity field ID and replicate Jira's real classification scheme

2026-07-09 16:33:41 +02:00

b061_test_round_history.py

feat(tests): archive round history on reopen, stop pausing from setting Jira On Hold

2026-07-13 12:08:45 +02:00

b062_detect_procedure_and_suggestions.py

feat(tests): add Blue detect_procedure field mapped from template suggestion

2026-07-14 14:58:29 +02:00

b063_merge_detect_suggested_into_expected.py

refactor(tests): merge detect_suggested_procedure into expected_detection

2026-07-15 10:29:13 +02:00

b064_template_suggestions.py

feat(test-catalog): add template creation and lead-approval workflow

2026-07-16 12:08:23 +02:00

b065_full_name_and_password_setup_tokens.py

feat(users): passwordless user creation via emailed set-password link, display full name instead of username

2026-07-17 16:58:25 +02:00

ef21f4a670ed_add_intel_items_table.py

feat: Phase 1 - Data models and migrations (T-004 to T-009)

2026-02-06 12:26:26 +01:00

f03e5712c21c_init.py

feat: Phase 0 - Infrastructure and scaffolding (T-001 to T-003)

2026-02-06 11:28:30 +01:00