0.5.2 - When all is darkest

New Features

• Added runtime API documentation endpoints: Swagger UI at /api/docs/, Redoc at /api/redoc/, and the OpenAPI schema at /api/schema/, including JWT and API key authentication schemes and business-domain tags.
• Dashboard overview data is now computed by a dedicated background worker and stored in Redis. Runtime Settings supports 5, 15, 30, or 60-minute refresh intervals, while the frontend refreshes accordingly and warns when cached data is stale.
• Added a floating table help affordance explaining how to scroll wide tables horizontally with Shift + mouse wheel.

Improvements

• Added Dashboard aggregation indexes for Alert, Case, Enrichment, Knowledge, and Playbook data to reduce scheduled summary query cost on large datasets.
• Dashboard API requests now read precomputed snapshots instead of running the full aggregation synchronously; responses include generation time, refresh time, age, and staleness metadata.
• Upgraded frontend dependencies to Ant Design 6.5.1, @ant-design/icons 6.3.2, React Router 7.18.1, ESLint 10.7.0, and typescript-eslint 8.64.0.

Fixes

• Added strict allow-list validation for Splunk index names to prevent SPL injection through the index parameter; invalid SIEM requests now return 400.
• Agent API responses no longer expose SIEM integration exception details; full errors remain available in server logs.
• Installed libmagic in the production backend image, fixing file type detection when the system library was unavailable in the container.

Deployment and Release Engineering

• Added the asp-worker-dashboard-cache Compose service to continuously refresh every Dashboard time-window cache.
• API documentation assets are bundled with the backend image and do not depend on an external CDN at runtime.
• Upgraded CI, Docker, Release, and CodeQL workflow dependencies to actions/checkout 7, actions/setup-node 7, pnpm/action-setup 6, astral-sh/setup-uv 7, and github/codeql-action 4.
• Compose release packages and quick-start documentation now default to 0.5.2 image tags.

Upgrade Notes

If you already deployed 0.5.1, back up first, then update image versions in .env:

ASP_BACKEND_IMAGE=ghcr.io/funnywolf/agentic-soc-platform/asp-backend:0.5.2
ASP_FRONTEND_IMAGE=ghcr.io/funnywolf/agentic-soc-platform/asp-frontend:0.5.2

Run the upgrade:

./scripts/upgrade.sh

This release includes database migrations that add Dashboard aggregation indexes and the dashboard_refresh_interval_seconds runtime setting. Creating indexes may take longer on large datasets, so plan a maintenance window.

If you maintain a customized Compose file, merge the new asp-worker-dashboard-cache service. After upgrading, the Dashboard temporarily returns 503 until the worker produces its first cached snapshot; the default refresh interval is 300 seconds.

To use the CLI:

pipx install asp-cli==0.5.2

If asp-cli is already installed, upgrade to the latest version:

pipx upgrade asp-cli

You can also force-install a specific version:

pipx install asp-cli==0.5.2 --force

Developer Notes

The Dashboard overview data path has moved from request-time computation to background snapshot generation followed by request-time reads. The dedicated worker refreshes each time window and uses Redis locks to prevent duplicate work across instances; cache metadata in the API response lets the frontend distinguish healthy snapshots, stale data, and the initial not-yet-generated state.