Platform Evolution
Assessment run-2026-07-27-1 · 213 of 213 repos assessed
Repos / tc-diagnostics-portal

tc-diagnostics-portal

Support-facing diagnostics portal: an Angular 20 SPA plus a .NET 10 API boundary that gives support staff one place to investigate EventStore events, exceptions, provider transaction (PTR) logs and booking errors across environments.

100 · greenlowlooseOn-premZDD: no excuseweb-ui

Health score

100

0 to 100 across seven weighted factors; nothing is hidden. Green is 75 and above, amber 50 to 74, red below 50. How scoring works.


Runtime currency / 25
25
Runs on supported modern .NET
Legacy transport / 15
15
No legacy WCF or SOAP surface
Test posture / 15
15
Good test coverage
Security hygiene / 15
15
No credentials found in source
Dangerous coupling / 15
15
No dangerous coupling detected
Activity / 10
10
Actively maintained
Deployment hygiene / 5
5
CI in place
Health over time
2026-07-24 (run-2026-07-24-1): 1002026-07-27 (run-2026-07-27-1): 100
No change since 2026-07-24 (100 to 100).

Facts

Languagescsharp, typescript
FrameworksASP.NET Core 10, Angular 20
Runtimes.NET 10, nodejs
Tests / CIgood / CI in place
Last commit2026-05-27
OwnerOwner unknown (mapping to be curated)
DomainPlatform services (system generated; curate in repo-owners.json to override)
Product areaShared platform
HostedOn-prem Deployed to our own machines
  • Release "\tools\tc-diagnostics-portal": QA: deployment-group phase (agents on our own machines)
  • Release "\tools\tc-diagnostics-portal": Preproduction: deployment-group phase (agents on our own machines)
  • Release "\tools\tc-diagnostics-portal": Production: deployment-group phase (agents on our own machines)
  • Release "\tools\tc-diagnostics-portal": Training: deployment-group phase (agents on our own machines)
  • Release "\tools\tc-diagnostics-portal": LiveProviderQA: deployment-group phase (agents on our own machines)
Releases2 release pipeline(s): \tools\tc-diagnostics-portal; \tools\tc-diagnostics-portal-api
Integrationrest, jwt
SourceOpen in Azure DevOps

Risk flags

No risk flags recorded.

Each flag links to its glossary definition.

Dependencies in context

Laying out the graph…
greenamberreddata store (square, dashed link)Node size follows fan-in. Click any node to open it.

Entanglement

loose No binding mechanisms apply: this system needs no untangling work.

    Migration playbooks

    Generated from this repo's assessment data: what is feasible, what blocks it, and the steps in order. Ratings: green means actionable now, amber means sequence other work first, red means blocked, grey means not applicable.

    ZDD adoption

    No excuse

    Nothing technical is holding this repo on the three-week release. It either already deploys without downtime (AWS) or is a modern, well-tested service the automated stealth path can carry today. Modern runtime, good tests, no hosted legacy transport: the automated stealth path can carry it today.

    Dependencies and gotchas
    • 31 system(s) depend on this repo; during a rolling deploy they will talk to old and new versions at once, so responses must stay compatible
    Steps
    1. Adopt the four-stage discipline from the ZDD engineering standard: pre-deployment compatibility, deployment, feature activation behind a flag, post-release cleanup.
    2. Make every change dual-version safe: backwards-compatible APIs (new major version for breaking wire changes), expand and contract for any schema change, and consumers tolerant of unknown fields.
    3. Externalise any remaining session state so users can move between nodes mid-session without disruption.
    4. Wrap behaviour changes in feature flags so code deploys dark and release becomes a business decision, not a deployment event.
    5. Route deployments through the Workflow Engine's automated drain, deploy, health-check, return cycle (the path proven by the first automated production run in mid-2026).
    6. Verify with area-scoped regression rather than the whole-platform cycle, and watch error rates after rollout with automated rollback on alert.

    SQL Server exit

    Not applicable

    No SQL Server dependency is recorded for this repo. Nothing to migrate.

    Containerisation

    Ready to containerise

    Modern runtime, no hosted legacy transport: this service can follow the estate's proven container path (Dockerfile, shared pipeline template, ECS via Terraform).

    Steps
    1. Add a Dockerfile and make the app read all configuration from environment variables and the secrets manager, never from machine-local files.
    2. Log to stdout and expose a health check endpoint so ECS can supervise it.
    3. Adopt the shared ci.yml pipeline template with the container parameters (awsRegion, containerAfterBuild, ecsTerraformRepo), which is exactly how the estate's existing AWS services deploy.
    4. Define the service in the Terraform repo, deploy to a non-production environment, then shift traffic and disarm the deployment-group release pipeline.

    Recommended actions

    No specific actions for this repo. It either needs only normal maintenance, or its work is covered by an estate-level action. See the full programme.

    Assessment notes

    tc-diagnostics-portal

    Purpose

    Consolidates operational investigation workflows behind one UI and one API. The SPA never calls diagnostic systems directly: the API validates Entra tokens and per-user assignment, resolves the downstream target through ConnectionBroker (EventStore, Exceptions, ProviderTransactionLogging, Provider, Quote, DynamicMargin), propagates correlation headers and returns normalised contracts. Shared api/search endpoints cover people, teams, destinations, places, providers and quote-to-folder lookups.

    Tech stack

    API: C# on .NET 10 (single DiagnosticsPortal.Api project) with JWT bearer validation against Microsoft Entra, TC.ConnectionBroker (Api + Wcf), TC.Cognito.Auth.Client and TC.UserAccount.ServiceClient. UI: Angular 20 with MSAL (@azure/msal-angular), Bootstrap 5, Karma/Jasmine specs. Both ship as Docker images (docker-compose for local dev) and are hosted on the dockerdev/docker.travelcounsellors.com platform per the allowed-origins list.

    Deployment

    Included as prod_application with 2 releases. Path-filtered YAML pipelines azure-pipelines-backend.yml and azure-pipelines-frontend.yml on the shared templates repo; included.json lists four build pipelines (diagnostics-portal and older support-portal backend/frontend pairs) and release pipelines \tools\tc-diagnostics-portal and \tools\tc-diagnostics-portal-api. Environment-aware config for QA, liveproviderqa, staging, training and live.

    Dependencies

    Internal: TC.ConnectionBroker.* (tc-connectionbroker) for downstream target resolution, the Exceptions diagnostic API (tc-exceptions) as a queried downstream, TC.UserAccount.ServiceClient (backoffice-useraccount-service) for people lookups; TC.Cognito.Auth.Client maps to no included repo. Other brokered targets (EventStore, PTR, Provider, Quote, DynamicMargin) reach further estate services by config. External: Microsoft Entra ID for SSO.

    Data stores

    None of its own — it is a read-only aggregation layer over other systems' diagnostic data.

    Integration points

    REST throughout (SPA to API, API to brokered downstream APIs) with Entra JWT authentication end to end.

    Code health

    Well tested for its size: API integration/unit tests (authorization handler, executors, contract tests via a test factory) and Angular Karma specs. Unusually good documentation — a solution wiki plus per-module query contracts and ops runbooks. Active (last commit 2026-05-27). The npm lint script is stubbed out (echo lint skipped).

    Modernisation risks

    Low — .NET 10, Angular 20, Docker-packaged, documented and tested; this is a model repo for the estate. Residual notes: the older tc-support-portal-* build pipelines suggest a predecessor app whose pipelines may need retiring, and access control depends entirely on correct Entra assignment configuration since the portal can reach sensitive diagnostic data across environments.