The dashboard front door for onboarding — a dedicated multi-step flow at /onboard (new Onboard sidebar entry), wired to the #131 target endpoints.
Flow (pages/onboarding.rs)
Target type — card grid of the 9 families (web / backend / desktop / Android / iOS / bare-metal firmware / RTOS firmware / Yocto / PLC) + a name.
Artifacts — a type-aware "add a row" form (git repo, source archive, firmware image, mobile package, container image, live URL, PLC project, plaintext), with a removable list.
Review — summary of the target + artifacts.
Done — creates the target, runs kind-based detection, and renders the applicable-scans matrix (each scan badged default-on / blocked, with its rationale).
Server functions (infrastructure/onboarding.rs)
fetch_targets / create_target / detect_target / fetch_applicable_scans, proxying to /api/v1/targets via the existing agent_client (bearer-token forwarding).
Notes
Compiles clean under both--features web and --features server; cargo fmt --all --check + clippy -D warnings pass. I couldn't visually run the UI here, so a quick visual pass on the running dashboard is worth doing.
Follow-ups: interactive scan-selection toggling and the DAST-auth / pentest-scope sub-config (screen 3 of the original plan), and a "launch scan" action — which needs the unified pipeline (#133) so the wizard's finish can trigger a real scan.
The dashboard front door for onboarding — a dedicated multi-step flow at **`/onboard`** (new **Onboard** sidebar entry), wired to the #131 target endpoints.
## Flow (`pages/onboarding.rs`)
1. **Target type** — card grid of the 9 families (web / backend / desktop / Android / iOS / bare-metal firmware / RTOS firmware / Yocto / PLC) + a name.
2. **Artifacts** — a type-aware "add a row" form (git repo, source archive, firmware image, mobile package, container image, live URL, PLC project, plaintext), with a removable list.
3. **Review** — summary of the target + artifacts.
4. **Done** — creates the target, runs kind-based **detection**, and renders the **applicable-scans matrix** (each scan badged default-on / blocked, with its rationale).
## Server functions (`infrastructure/onboarding.rs`)
`fetch_targets` / `create_target` / `detect_target` / `fetch_applicable_scans`, proxying to `/api/v1/targets` via the existing `agent_client` (bearer-token forwarding).
## Notes
- Compiles clean under **both** `--features web` and `--features server`; `cargo fmt --all --check` + `clippy -D warnings` pass. I couldn't visually run the UI here, so a quick visual pass on the running dashboard is worth doing.
- **Follow-ups:** interactive scan-selection toggling and the DAST-auth / pentest-scope sub-config (screen 3 of the original plan), and a **"launch scan"** action — which needs the unified pipeline (#133) so the wizard's finish can trigger a real scan.
Closes #123, #124, #125. Refs #126, #127, #118.
sharang
added this to the Onboarding v1 milestone 2026-07-12 20:35:00 +00:00
A dedicated multi-step onboarding flow at /onboard (new "Onboard" sidebar entry),
wired to the #131 target endpoints:
- Step 1 — target type: card grid of the 9 families + name.
- Step 2 — artifacts: type-aware add-a-row form (git/live-url/firmware/mobile/
container/PLC/archive/text) with a removable list.
- Step 3 — review: summary of type + artifacts.
- Step 4 — done: creates the target, runs kind-based detection, and shows the
applicable-scans matrix (default-on / blocked with rationale).
Server fns in infrastructure/onboarding.rs proxy to /api/v1/targets (create,
detect, applicable-scans). Compiles clean under both --features web and
--features server; fmt + clippy -D warnings pass.
Full scan-selection toggling and a "launch scan" action are follow-ups (launch
needs the unified pipeline, #133).
Closes#123, #124, #125. Refs #126, #127, #118.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
The dashboard front door for onboarding — a dedicated multi-step flow at
/onboard(new Onboard sidebar entry), wired to the #131 target endpoints.Flow (
pages/onboarding.rs)Server functions (
infrastructure/onboarding.rs)fetch_targets/create_target/detect_target/fetch_applicable_scans, proxying to/api/v1/targetsvia the existingagent_client(bearer-token forwarding).Notes
--features weband--features server;cargo fmt --all --check+clippy -D warningspass. I couldn't visually run the UI here, so a quick visual pass on the running dashboard is worth doing.Closes #123, #124, #125. Refs #126, #127, #118.