2 Commits

Author	SHA1	Message	Date
DevEnv nis2-agile	43a7180957	[DOCS] Help: HelpSystem.init su normative + companies (edit prima falliti) ... Nel commit 3e5b75b gli edit a normative.html e companies.html erano falliti (file-not-read / string-not-found): il pulsante '?' non partiva. Ora corretti. Verificato: tutte e 4 le pagine (whistleblowing/normative/companies/kb) hanno help.js + HelpSystem.init=1. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-05-31 16:42:08 +02:00
DevEnv nis2-agile	86e9bdded2	[FEAT] Services API, Webhook, Whistleblowing, Normative + integrazioni ... Sprint completo — prodotto presentation-ready: Services API (read-only, API Key + scope): - GET /api/services/status|compliance-summary|risks-feed|incidents-feed - GET /api/services/controls-status|assets-critical|suppliers-risk|policies-approved - GET /api/services/openapi (spec OpenAPI 3.0.3 JSON) Webhook Outbound (Stripe-like HMAC-SHA256): - CRUD api_keys + webhook_subscriptions (Settings → 2 nuovi tab) - WebhookService: retry 3x backoff (0s/5min/30min), delivery log - Trigger auto in IncidentController, RiskController, PolicyController - Delivery log, test ping, processRetry Nuovi moduli: - WhistleblowingController (Art.32 NIS2): anonimato garantito, timeline, token tracking - NormativeController: feed NIS2/ACN/DORA con ACK tracciato per audit Frontend: - whistleblowing.html: form submit anonimo/firmato + gestione CISO - normative.html: feed con presa visione documentata + progress bar ACK - public/docs/api.html: documentazione API dark theme (Swagger-like) - settings.html: tab API Keys + tab Webhook - integrations/: guide per lg231, SustainAI, AllRisk, SIEM (widget + codice) - Sidebar: Segnalazioni + Normative aggiunte a common.js DB: migration 007 (api_keys, webhook_subscriptions, webhook_deliveries), 008 (whistleblowing_reports + timeline), 009 (normative_updates + normative_ack + seed NIS2/ACN/DORA/ISO) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-07 13:20:24 +01:00