Release LoadGen FrontEnd: 1.0.0.11895

LoadGen FrontEnd

• Service Levels module (LG058 / LG059) — major new operator surface for service-level objectives and SLO/SLA tracking, gated by the LG058 license. The Service Levels area now hosts a multi-page operator section (Dashboard, Health, Violations, Objectives, Operations, Status Pages, Access Control) alongside a separate Configuration → Service Levels admin section (Services, Objectives, Mappings, Policies, Scheduler, Storage), matching the layout convention used by Uptime / Monitoring / Insight / SessionSight.

• Dashboard — readiness snapshot, service coverage, mapped-objective coverage, source mix, objective-type mix, setup-gap call-outs.

• Health — per-service rolling-window health with active snapshots and per-objective compliance / counts / latest bucket state; new Evaluate now action materializes snapshots on demand.

• Violations — contiguous breach and NoData ranges with objective / source, reason, bucket span, compliance, Good / Effective counts.

• Objectives — read-only list with drill-down to per-objective Summary / History / Budget / Violations tabs.

• Operations — recalculation jobs (live progress polling, with conflicts surfaced as an informational toast), exports with Download action, retention / rollup compaction, alert rules and alert-event log.

• Status Pages — public LG059 status page definitions.

• Access Control — new ACL CRUD (allow / deny multi-line, mask-sensitive-fields toggle, optional tenant ID).

• Scheduler — enable / pause, interval, lookback window, max services per run, force all-services evaluation; blocks scheduler actions until a Service Levels datasource is selected.

• Storage — datasource selection, test, schema provisioning (PostgreSQL managed default with connectionString / schema / commandTimeoutSeconds; SqlServer bring-your-own).

• Policies — business-hours policies plus maintenance / incident exclusions.

• Objective source selectors — source-specific inputs for Uptime check IDs, Monitoring profile / datasource / measurement, and LoadTesting datasource metadata, while preserving the existing count-based objective flow.

• Tenant scoping plumbing — Service Levels calls are now tenant-scoped when the session carries a tenant ID, ready for a future tenant-selector UI.

• [#8598] Closed the OIDC Single Sign-On feature end-to-end after the upstream Save fix landed (see [#8647] below). Operators can now create, edit, and delete OIDC providers from Settings → SSO Providers, the configured providers appear as one-click buttons on the Login screen, and identity-provider group claims (e.g. loadgen-admins) map through to LoadGen roles (e.g. Admin) on first sign-in.
• [#8647] Fixed the Save button on the Settings → SSO Providers → New / Edit page silently doing nothing. The page now sends the provider configuration in the shape the server expects, so creating and updating OIDC providers actually persists — unblocking end-to-end SSO setup.
• [#8698] Added a dedicated Add comment action on each row of the Operations → LoadGen Tickets table. Operators can append free-text comments and optional screenshots to an existing DevOps work item without changing its status — previously the only options on a tracked ticket were a local-only Edit note or Mark as fixed / Mark as not fixed, which had the right comment plumbing but the wrong side-effect on ticket state.
• [#8662] Added a per-row Delete action (red trash icon, two-step confirm) on Infrastructure → Appliance → Backups → Available Backups. Operators on space-constrained appliances can now remove individual backup archives from the GUI instead of SSHing in to free disk space.
• [#8696] Made the Disk mini-gauge in the appliance page banner and the Disk Usage progress bar in the System tab's Resource Usage card clickable — both now jump to the existing Disk tab where the per-path breakdown and Clean Up Disk action live, closing the gap where high-disk-usage operators had no in-UI path to the cleanup action.
• [#8677] Added a first-time-setup guidance banner to Infrastructure → Licensing when no license is bound and trial mode is inactive. The banner spells out the required order — Load Available Licenses → Activate Selected → automatic refresh — so first-time operators no longer click the prominent Refresh from Cloud button at the top and hit the cryptic "No supported LoadGen license found" error. Auto-hides once a license is bound.
• [#8653] Mark as not fixed (and Mark as fixed / Add comment) now bundle the same recent-logs + backend-exceptions + system-info payload that the Create support ticket flow already ships. Default-ON for Mark as not fixed (the engineer picking up a kicked-back ticket needs fresh telemetry), default-OFF for Mark as fixed and Add comment so the happy paths stay fast. Bundle collection is lazy on first toggle, capped at 12 screenshots and 60 MB; falls back gracefully to comment-only on collection failure.
• [#8688] Server-side pagination on Operations → LoadGen Tickets. The previous Reload path pulled a wide-scope universe (up to 10 000 rows) and sliced it client-side; each page navigation now issues a single round-trip for the visible page. New Page X of Y indicator alongside Showing N–M of T; Next is gated by the upstream's exact end-of-list signal. Reload all tickets keeps its existing flat-view semantics (capped at 200 rows, with the cap surfaced in the toast).
• [#8689] Fixed the Update Timezone button on Infrastructure → Appliance → System hanging below the timezone dropdown instead of aligning next to it.
• [#8683] The header Times in: \ chip now scrolls directly to the Timezone configuration card instead of landing the operator at the top of the long System page with the relevant section out of viewport.
• [#8672] Sidebar search now matches section / group headers, not just link items. Typing "uptime mo" now surfaces the Uptime Monitoring section and all its child links, instead of returning no results.
• [#8699] Renamed the Roles section in the My Profile modal to Groups (with matching empty-state copy and an updated help text) so it's clear the chips are auth-time group memberships (e.g. Admin, Ops), distinct from the per-user RBAC role (GlobalAdmin, InfrastructureAdmin) shown on the Security → Permissions → Users tab.
• [#8680] Fixed the Regenerate Security Tokens modal's failure messages rendering in the page background behind the still-open dialog. Validation rejections, API failures, and exception fallbacks now show inline inside the modal so users can correct and retry without dismissing it.
• [#8679] Fixed the Regenerate Security Tokens modal failing with "At least one token must be provided" when all fields were left empty despite the Leave empty to auto-generate placeholder. Empty Analysis Master Secret / Appliance Agent Token fields are now auto-filled with cryptographically generated tokens client-side before the API call, honouring the placeholder contract.
• [#8691] Fixed the Session Expiring Soon popup appearing only seconds before logout for active users. A new 3-minute critical-expiry window now renders the warning regardless of recent activity so operators see at least ~2 minutes of visible warning before the session ends. Outside the critical window, the existing don't-nag-active-users suppression still applies.
• [#8640] Fixed Mark as fixed / Mark as not fixed appearing to do nothing for some synced rows on Operations → LoadGen Tickets. Background status refresh no longer disables user-initiated action buttons; legacy synced rows that cannot be correlated upstream are now visibly disabled with a tooltip instead of pretending to be actionable.
• [#8673] Fixed the Resolved status-filter chip on Operations → LoadGen Tickets still displaying rows whose live DevOps state had flipped to Closed after the background fan-out. The filter is now re-applied to each refreshed row; rows that fall outside the active filter are removed and the row count decremented in place.
• [#8649] Fixed Refresh my tickets on Operations → LoadGen Tickets dropping rows for regular reporters — the table collapsed to roughly the first page (about 50 rows) and only Refresh list followed by a full browser refresh would restore the catalog total. Refresh now merges against the full filtered catalog (paginated up to 10 000 rows) so the reporter union no longer loses page-2+ rows.
• [#8670] Fixed the reporter email in the Create Support Ticket modal showing the stale value after the operator updated it via My Profile. The Support modal now reloads the saved value on every open instead of only at first mount.
• [#8671] Fixed the Installed CA Bundles list on Infrastructure → Appliance → CA Trust staying empty after a successful upload. Root cause was a JSON contract mismatch with the API, now corrected, and the table populates correctly.
• [#8663] Fixed saving an existing Web / Core load profile from the wizard's Review step erroring with "400 Bad Request" when the profile still referenced web users that had since been deleted. Stale user assignments are now dropped automatically; remaining validation failures surface the backend's structured message in the wizard banner instead of the raw exception string.
• [#8606] Fixed the Status action on the Core Agents page giving no feedback and rendering all agents as Online regardless of actual reachability. The status check now distinguishes Online / Initializing / Offline / Unavailable, renders a distinct blue pulsing Initializing badge for transient states, and the top-bar Refresh + batch Check Status actions now show a toast summarising the result.
• [#8661] Renamed the blue "Current" info box on System → Backups to Currently saved schedule (read-only) with an appended caption explaining that the form above it is the canonical edit surface — closing the confusion where operators read the box as an unmanageable second schedule.
• [#8659] The Services → Configure Monitoring Domains reference in the HTTPS Setup Wizard Step 3 hint is now a clickable hyperlink to the Services tab (opens in a new tab so unsaved wizard values survive), instead of plain text the operator had to navigate to manually.
• [#8468] Simplified wizard Step 3 for PowerShell uptime checks — the stale Managed script (existing) — optional dropdown is removed; operators paste / upload / edit a script in the inline editor and the wizard creates-or-updates a managed-script row on save. Existing scripts opened for edit load their body into the editor automatically. Note: the Test Request symptom from this ticket is being tracked separately and ships with a future API update.
• [#8629] Fixed SessionSight Session Replay rendering as plain unstyled HTML for self-recordings. Replay now resolves the recording's stylesheets so the session renders with real styles, and shows an honest fallback banner inside the viewer when no stylesheets could load — so operators get a clear explanation instead of a silently-unstyled page.
• [#8627] Fixed Debug → Download archive and Download single file opening a blank tab without delivering the file after the previous round's helper was deployed. Browsers and reverse proxies now re-fetch the latest helper instead of serving the pre-fix cached copy.
• [#8658] Fixed errors from Add / Remove in the Manage Hosts Entries modal rendering on the page background behind the still-open dialog. The modal now shows a red inline error block inside its own body, so operators see the validation or API failure without dismissing the modal.
• [#8652] Fixed Test Connection and Send Test Email on Add Mail Account failing with SMTP 535 authentication failed even with valid credentials. The configured password is now passed through to the test correctly, so the test endpoints authenticate against the real password.
• [#8614] Fixed the Add Mail Account dialog showing "Please correct the highlighted fields below" with no fields actually highlighted. Root cause was the API returning a 400 keyed on a field the dialog has no input for — the outgoing payload now includes the required field, and the validation banner enumerates every server-side field error as a list so future contract drift surfaces directly instead of being silently swallowed.
• [#8613] Internal code hygiene completing the Test Connection / Send Test Email rework on Mail Account configuration. No behaviour change.
• Fixed a startup crash in the Frontend container, introduced with the notification-bell rollout, that left the container restarting in a loop on some builds.
• Security hardening — clears the CVE-2026-42899 ASP.NET Core HIGH finding, and an image with fixable HIGH/CRITICAL CVEs can no longer be released.
• Fixed the LG058 Service Levels form fields rendering with a browser-default outline instead of the Tailwind-Forms styling used by every other page, and the Objectives sidebar entries rendering without an icon — both follow-ups to the Service Levels module split.