Skip to content

Feat/web dashboard#33

Merged
evkir merged 4 commits into
mainfrom
feat/web-dashboard
Jun 18, 2026
Merged

Feat/web dashboard#33
evkir merged 4 commits into
mainfrom
feat/web-dashboard

Conversation

@evkir

@evkir evkir commented Jun 18, 2026

Copy link
Copy Markdown
Owner

No description provided.

evkir added 4 commits June 18, 2026 14:04
Migrate web backend from dead Flask stubs to FastAPI. Sessions are read
from disk (config.output_dir/session_<id>.json), the same artifacts the
CLI replay command consumes — no in-memory store to drift.

- /api/sessions: list session summaries, newest first
- /api/sessions/{id}: full session JSON
- /api/sessions/{id}/report: markdown report resolved via kb path,
  404 for dry-run sessions without a report (traversal-guarded)
- deps: fastapi, uvicorn
- 8 TestClient tests (CI now covers web, unlike old Flask)
Single-file dashboard served at /. No build step, no React — htmx and
alpinejs from CDN.

- session table (id, target, state badge, findings, created), newest first
- click a row: fetch markdown report + open SSE stream for live phases
- New scan button points to the CLI (scans run server-side via cyberai scan)
- dark GitHub-style theme, dry-run sessions show a no-report placeholder
Synthesized reflection for days 22-28: OOB exploitation, nuclei engine,
Web3 agent, MCP server, LLM-as-Judge, BB scope import, web dashboard.

Cross-cutting themes: contract-vs-reality verification, flag-gated novelty,
graceful degradation, standalone-vs-pipeline architecture. Process lessons
captured (anchors after ruff format, smoke hits happy-path, dead web code).
Week 4 complete: OOB + Web3 + MCP + judge + scope import + dashboard.
CHANGELOG section for 0.5.0 summarizes days 22-28.
@evkir evkir merged commit 2439d42 into main Jun 18, 2026
5 checks passed
@evkir evkir deleted the feat/web-dashboard branch June 18, 2026 11:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant