# UI Map

*Every page in the Aegis React UI, grouped by sidebar location, with the backing service for each.*

## Sidebar structure

The UI sidebar has three groups, in left-to-right order of how often operators use them:

* **Primary nav** (5 items) — the daily-driver pages.
* **Operations dropdown** (11–12 items) — power-user surfaces.
* **Settings hub** — 17 sub-pages reachable from the Settings page.

The full sidebar source is at `ui/src/components/Layout/Sidebar.jsx`.

## Primary nav (5 pages)

| Page            | Sidebar path       | Hint | Backend services        | Page                                                  |
| --------------- | ------------------ | ---- | ----------------------- | ----------------------------------------------------- |
| Flight Recorder | `/flight-recorder` | G F  | flight\_recorder, audit | [Flight Recorder](/ui/primary-nav/flight-recorder.md) |
| Policies        | `/policy-builder`  | G P  | policy, audit           | [Policies](/ui/primary-nav/policies.md)               |
| Audit Trail     | `/audit-logs`      | G A  | audit, identity         | [Audit Trail](/ui/primary-nav/audit-trail.md)         |
| Incidents       | `/incidents`       | G I  | api, audit              | [Incidents](/ui/primary-nav/incidents.md)             |
| Settings        | `/settings`        | G S  | — (nav only)            | [Settings Hub](/ui/primary-nav/settings-hub.md)       |

## Operations dropdown (12 pages)

| Page           | Sidebar path      | Hint | Backend services              | Page                                               |
| -------------- | ----------------- | ---- | ----------------------------- | -------------------------------------------------- |
| Agents         | `/agents`         | —    | registry                      | [Agents](/ui/operations/agents.md)                 |
| Identity Graph | `/identity-graph` | G G  | identity\_graph               | [Identity Graph](/ui/operations/identity-graph.md) |
| Autonomy       | `/autonomy`       | —    | autonomy                      | [Autonomy](/ui/operations/autonomy.md)             |
| Forensics      | `/forensics`      | —    | forensics                     | [Forensics](/ui/operations/forensics.md)           |
| Playground     | `/playground`     | —    | gateway + decision + registry | [Playground](/ui/operations/playground.md)         |
| Live Feed      | `/live-feed`      | G L  | gateway (SSE) + audit         | [Live Feed](/ui/operations/live-feed.md)           |
| Playbooks      | `/playbooks`      | —    | autonomy                      | [Playbooks](/ui/operations/playbooks.md)           |
| Auto Response  | `/auto-response`  | —    | api + autonomy                | [Auto Response](/ui/operations/auto-response.md)   |
| Compliance     | `/compliance`     | —    | audit + api                   | [Compliance](/ui/operations/compliance.md)         |
| Open Source    | `/open-source`    | —    | (static)                      | [Open Source](/ui/operations/open-source.md)       |
| Attack Sim     | `/attack-sim`     | —    | gateway + decision            | [Attack Sim](/ui/operations/attack-sim.md)         |
| Kill Switch    | `/kill-switch`    | —    | decision                      | [Kill Switch](/ui/operations/kill-switch.md)       |

Kill Switch is shown only to users with `canViewKillSwitch` (ADMIN or SECURITY).

## Settings sub-pages (17 pages)

Grouped by the four sections of the Settings hub.

### Access Control (4)

| Page              | Path        | Service             | Page                                                               |
| ----------------- | ----------- | ------------------- | ------------------------------------------------------------------ |
| RBAC Manager      | `/rbac`     | registry + identity | [RBAC](/ui/settings-sub-pages/rbac.md)                             |
| User Management   | `/users`    | identity            | [User Management](/ui/settings-sub-pages/user-management.md)       |
| Security Ops      | `/security` | audit + api         | [Security Dashboard](/ui/settings-sub-pages/security-dashboard.md) |
| SSO Configuration | `/sso`      | identity            | [SSO Settings](/ui/settings-sub-pages/sso-settings.md)             |

### Operations (5)

| Page             | Path                | Service                    | Page                                                           |
| ---------------- | ------------------- | -------------------------- | -------------------------------------------------------------- |
| System Health    | `/system-health`    | gateway                    | [System Health](/ui/settings-sub-pages/system-health.md)       |
| Observability    | `/observability`    | audit + decision + insight | [Observability](/ui/settings-sub-pages/observability.md)       |
| Admin Console    | `/admin`            | api + identity             | [Admin Console](/ui/settings-sub-pages/admin-console.md)       |
| Policy Analytics | `/policy-analytics` | audit                      | [Policy Analytics](/ui/settings-sub-pages/policy-analytics.md) |
| Quota Management | `/quota`            | identity                   | [Quota Management](/ui/settings-sub-pages/quota-management.md) |

### Developer (7)

| Page                | Path                 | Service            | Page                                                             |
| ------------------- | -------------------- | ------------------ | ---------------------------------------------------------------- |
| Developer Panel     | `/developer`         | api                | [Developer Panel](/ui/settings-sub-pages/developer-panel.md)     |
| Policy Simulation   | `/policy-sim`        | policy             | [Policy Sim](/ui/settings-sub-pages/policy-sim.md)               |
| Playbooks           | `/playbooks`         | autonomy           | (covered in [Operations](/ui/operations/playbooks.md))           |
| Webhook Settings    | `/webhook-settings`  | api                | [Webhook Settings](/ui/settings-sub-pages/webhook-settings.md)   |
| SIEM Integration    | `/siem`              | api                | [SIEM Settings](/ui/settings-sub-pages/siem-settings.md)         |
| Threat Intelligence | `/threat-intel`      | api + intelligence | [Threat Intelligence](/ui/settings-sub-pages/threat-intel.md)    |
| Scheduled Reports   | `/scheduled-reports` | api                | [Scheduled Reports](/ui/settings-sub-pages/scheduled-reports.md) |

### Account (2)

| Page                  | Path       | Service                  | Page                                                 |
| --------------------- | ---------- | ------------------------ | ---------------------------------------------------- |
| Usage & Billing       | `/billing` | usage + audit + identity | [Billing](/ui/settings-sub-pages/billing.md)         |
| Risk Engine (preview) | `/risk`    | audit + learning         | [Risk Engine](/ui/settings-sub-pages/risk-engine.md) |

## Footer items

The sidebar footer holds two pages that are not in any of the three groups:

| Page          | Path             | Service  | Notes                           |
| ------------- | ---------------- | -------- | ------------------------------- |
| Notifications | `/notifications` | api      | Reached via the bell icon       |
| (no page)     | logout button    | identity | Reached via the Sign Out button |

## Sidebar paths that are also API paths

Several sidebar paths collide with API paths because the platform's REST routes use the same noun (`/agents`, `/incidents`, etc.). The nginx config disambiguates via the `Sec-Fetch-Mode` header — browser navigation serves the SPA shell; XHR / fetch hits the gateway. See [Deployment Topology](/architecture/deployment-topology.md) for the nginx contract.

## Reading order

A new operator should read in this order:

1. [Audit Trail](/ui/primary-nav/audit-trail.md) — the durable record they will live in.
2. [Flight Recorder](/ui/primary-nav/flight-recorder.md) — per-execution detail when something goes wrong.
3. [Incidents](/ui/primary-nav/incidents.md) — the working surface during an incident.
4. [Playground](/ui/operations/playground.md) — to safely test rules and attacks.
5. [Identity Graph](/ui/operations/identity-graph.md) — blast-radius queries during triage.
6. [Forensics](/ui/operations/forensics.md) — deeper investigation.
7. [Kill Switch](/ui/operations/kill-switch.md) — emergency lever (read before you ever press it).
8. [Settings Hub](/ui/primary-nav/settings-hub.md) — the navigation entry to the 17 Settings sub-pages.

## Cross-references

* The full sidebar source: `ui/src/components/Layout/Sidebar.jsx`.
* The router config: `ui/src/App.jsx`.
* The shared `useAgents` hook for per-agent scoping: `ui/src/hooks/useAgents.js`.
* The shared `useSSE` hook for Live Feed reconnection: `ui/src/hooks/useSSE.js`.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.aegisagent.in/ui/_index.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.