ahmido da18d3cb14 feat/042-inventory-dependencies-graph (#50) ... Dieses PR liefert den Inventory Dependencies Graph end-to-end: Abhängigkeiten (Edges) werden aus Inventory-Sync-Daten extrahiert, tenant-sicher gespeichert und in der Inventory Item Detailansicht angezeigt. Ziel: Admins können Prerequisites + Blast Radius (direct) schnell erkennen, ohne Snapshot/Restore anzufassen. ⸻ Was ist drin? Dependency Graph (Edges) • inventory_links Schema + Indizes + idempotentes Upsert (Unique Key) • Relationship Types (u.a.): • assigned_to_include, assigned_to_exclude • uses_assignment_filter • scoped_by_scope_tag • UI: Inventory Item → Dependencies Section • Direction Filter: All / Inbound / Outbound • Relationship Filter: All + spezifische Relationship Types • Missing-Badge + sicheres Tooltip (safe subset) Safety / Observability • Unknown/unsupported Shapes erzeugen keine Edges, sondern: • Warning in InventorySyncRun.error_context.warnings[] • optional info-log (ohne Secrets) • Limit-only Semantik (MVP): bis zu 50 Edges pro Richtung (max 100 bei “All”) • Blast Radius in MVP = direct only (kein depth>1 traversal) Name Resolution (lokal, ohne Entra Calls) • Resolver/DTO Layer für deterministische Labels (kein “Unknown” mehr) • Auflösung aus lokaler DB nur für Foundations, wenn vorhanden: • scope_tag → roleScopeTag • assignment_filter → assignmentFilter • aad_group bleibt bewusst external ref: “Group (external): …” (keine Graph/Entra Lookups im UI) • Zentraler FoundationTypeMap als Source-of-Truth (keine Hardcodings) ⸻ Out of Scope / Follow-up • Entra Group Name Resolution (braucht eigenes “Group Inventory” Modul + Permissions) • Foundations als Inventory Items / Coverage Tab (Scope Tags / Assignment Filters sichtbar & syncbar) → folgt als separater PR (Inventory Core/UI), damit 042 sauber “Edges-only” bleibt. ⸻ Tests / Verifikation • Targeted Pest Tests (Unit + Feature + UI smoke) für: • deterministische Edge-Erzeugung + idempotent upsert • tenant isolation (UI/Query) • warnings auf Run Record • resolver/name rendering + links (wo möglich) • pint --dirty ausgeführt ⸻ Manual QA (UI) 1. Inventory Sync Run mit include_dependencies=true starten 2. Inventory Item öffnen → Dependencies prüfen: • include/exclude + filter + scoped_by sichtbar (wenn vorhanden) • Relationship/Direction Filter funktionieren • keine “Unknown” Labels mehr, sondern deterministische Labels Co-authored-by: Ahmed Darrazi <ahmeddarrazi@adsmac.local> Reviewed-on: #50		2026-01-10 12:50:08 +00:00
..
001-rbac-onboarding	feat/004-assignments-scope-tags (#4)	2025-12-23 21:49:58 +00:00
002-filament-json	spec: add 002 filament json	2025-12-14 19:56:17 +01:00
003-settings-catalog-readable	dev-merges/c709b36 (#3)	2025-12-21 23:15:12 +00:00
004-assignments-scope-tags	feat/004-assignments-scope-tags (#4)	2025-12-23 21:49:58 +00:00
005-bulk-operations	feat/005-bulk-operations (#5)	2025-12-25 13:32:36 +00:00
006-sot-foundations-assignments	feat(006): foundations + assignment mapping and preview-only restore guard (#7)	2025-12-26 23:44:31 +00:00
007-device-config-compliance	feat(007): device config & compliance snapshot/restore improvements (#9)	2025-12-29 12:46:20 +00:00
008-apps-app-management	feat: add metadata-only mobile app coverage with scope tag restore (#10)	2025-12-29 14:01:37 +00:00
009-app-protection-policy	feat/009-app-protection-policy (#11)	2025-12-29 16:11:50 +00:00
010-admin-templates	feat(010): Administrative Templates – restore from PolicyVersion + version visibility (#13)	2025-12-30 01:50:05 +00:00
011-restore-run-wizard	feat/011-restore-run-wizard (#37)	2026-01-07 01:40:04 +00:00
012-windows-update-rings	feat/012-windows-update-rings (#18)	2026-01-01 10:44:17 +00:00
013-scripts-management	013-scripts-management (#19)	2026-01-01 22:02:30 +00:00
014-enrollment-autopilot	014-enrollment-autopilot (#20)	2026-01-02 11:59:21 +00:00
015-policy-picker-ux	015-policy-picker-ux (#21)	2026-01-02 13:59:15 +00:00
016-backup-version-reuse	feat: always capture policy when adding to backup (#22)	2026-01-02 14:33:29 +00:00
017-policy-types-mam-endpoint-security-baselines	feat/017-policy-types-mam-endpoint-security-baselines (#23)	2026-01-03 02:06:35 +00:00
018-driver-updates-wufb	feat/018-driver-updates-wufb (#27)	2026-01-04 00:38:54 +00:00
023-endpoint-security-restore	feat/018-driver-updates-wufb (#27)	2026-01-04 00:38:54 +00:00
024-terms-and-conditions	spec/024-additional-intune-types (#28)	2026-01-04 02:27:44 +00:00
025-policy-sets	spec/024-additional-intune-types (#28)	2026-01-04 02:27:44 +00:00
026-custom-compliance-scripts	spec/024-additional-intune-types (#28)	2026-01-04 02:27:44 +00:00
027-enrollment-config-subtypes	feat/027-enrollment-config-subtypes (#31)	2026-01-04 13:25:15 +00:00
028-device-categories	spec/024-additional-intune-types (#28)	2026-01-04 02:27:44 +00:00
029-wip-policies	spec/024-additional-intune-types (#28)	2026-01-04 02:27:44 +00:00
030-intune-rbac-backup	spec/024-additional-intune-types (#28)	2026-01-04 02:27:44 +00:00
031-tenant-portfolio-context-switch	feat/031-tenant-portfolio-context-switch (#32)	2026-01-04 21:28:08 +00:00
032-backup-scheduling-mvp	feat/032-backup-scheduling-mvp (#36)	2026-01-07 01:12:12 +00:00
039-inventory-program	spec: add inventory specs 039-044 (#42)	2026-01-07 14:01:07 +00:00
040-inventory-core	feat/040-inventory-core (#43)	2026-01-07 14:54:24 +00:00
041-inventory-ui	feat/041-inventory-ui (#44)	2026-01-07 17:10:57 +00:00
042-inventory-dependencies-graph	feat/042-inventory-dependencies-graph (#50)	2026-01-10 12:50:08 +00:00
043-cross-tenant-compare-and-promotion	spec: add inventory specs 039-044 (#42)	2026-01-07 14:01:07 +00:00
044-drift-mvp	spec: add inventory specs 039-044 (#42)	2026-01-07 14:01:07 +00:00
045-settingscatalog-classification	046-inventory-sync-button (#47)	2026-01-09 22:15:04 +00:00
046-inventory-sync-button	046-inventory-sync-button (#47)	2026-01-09 22:15:04 +00:00
900-policy-lifecycle	feat/005-bulk-operations (#5)	2025-12-25 13:32:36 +00:00
0800-future-features	046-inventory-sync-button (#47)	2026-01-09 22:15:04 +00:00
.gitkeep	chore(specs): add baseline specs folder	2025-12-14 19:42:35 +01:00