> Source: https://docs.nometa.az/changelog/4-8

# SAMURAI 4.8

_Released July 13, 2026._

## Features

- **Cisco ACI:** Contract Flow page for the contract detail view
- **Cisco ACI:** heatmap contract items deep-link to filtered Contracts tab
- **Cisco ACI:** heatmap contract lists + URL-persisted drill state
- **Cisco ACI:** host detail sheet on ACI heatmap leaf tiles
- **Cisco ACI:** migrate ACI heatmap from Topology page to the APIC page
- **Cisco ACI:** move heatmap Logical/Physical toggle onto the breadcrumb row
- **Cisco ACI:** physical heatmap leaf detail sheet + URL state
- **Cisco ACI:** rebuild the Fabric tab to the Fabric View design
- **Cisco ACI:** show endpoint name (contName) on the ACI heatmap
- **Firewall:** rich collapsed change-card summary (FMC-parity chip flow)
- **Firewall:** shared change-card components, standardize SRX + FortiGate
- **Firewall:** shared FirewallNatFlow - standardize NAT row-expand on all vendors
- **Firewall:** shared FirewallResourceTab + FirewallChangesTab shells
- **Frontend:** catalog-driven platform + transport selection in device form
- **Cisco ISE:** apply v2 language to Policy Matrix where-used + cell sheets
- **Cisco ISE:** apply v2 language to SGT + SGACL detail sheets
- **Cisco ISE:** redesign Policy Matrix as a Segregation-style heatmap
- **Cisco ISE:** render parsed SGACL chips in the Policy Matrix sheet
- **Cisco ISE:** show SGT-bound subnets in the matrix sheet + tooltip
- **Junos:** connector - parsers with golden fixtures + exec-channel SSH runner
- **Junos:** fetcher + router branches + catalog row + vendor docs
- **Platform:** platform catalog + GET /api/devices/platforms
- **Platform:** VyOS platform constant + show-version detection
- **Policy Analyzer:** animate Access-flow contract cards + rename tab
- **Policy Analyzer:** apply v2 language to PolicyDetailSheet
- **Policy Analyzer:** contract columns as scrollable lists + thin scrollbar
- **Policy Analyzer:** implement Contract Detail Sheet designer mock
- **Policy Analyzer:** interactive segregation baseline builder
- **Policy Analyzer:** make Cisco ISE a first-class vendor
- **Policy Analyzer:** migrate Access-policy search into AdvancedFilterBar
- **Policy Analyzer:** migrate segregation zone-pair dialog to a sheet
- **Policy Analyzer:** redesign Access-flow sheets per EPG Detail Sheet v2
- **Policy Analyzer:** restore fuller segregation tooltip, label "Resolved filters"
- **Policy Analyzer:** rich hover tooltip on segregation matrix cells
- **Policy Analyzer:** segregation matrix tooltip shows only contracts
- **Policy Analyzer:** show governing policies in segregation dialog
- **Policy Analyzer:** show governing policies in the segregation tooltip
- **Policy:** deep-link provided/consumed items in access-flow sheets
- **Policy:** persist Access-flow selected EPG in the URL
- **Rbac:** gate all device audit-log tabs behind debug.access
- **Rbac:** gate Palo audit tab + Syslog + Compliance behind debug.access
- **Rbac:** hide export UI unless the user holds the export permission
- **Router/ftd:** anomaly callout + in-detail MAC/IP filter on endpoints chassis
- **Router/ftd:** heat-color endpoint chassis cards by endpoint count
- **Router:** default to the Interfaces tab, matching the switch page
- **Router:** rebuild the Interfaces chassis to the Router Interfaces design
- **Sidebar:** animate nested panel sections with the shared Collapse
- **Sidebar:** animate Overview & System sections via NavSection Collapse
- **Juniper SRX:** connector - Junos config-JSON flatteners + commit parser + FetchAll
- **Juniper SRX:** frontend panel + all device-type registries
- **Juniper SRX:** list/changes/timeline handlers on the canonical envelope
- **Juniper SRX:** NAT table Palo parity - match columns, translation split, kind badges
- **Juniper SRX:** official HPE element symbol as the device icon
- **Juniper SRX:** Palo-parity pass - export, richer datatables, timeline+attribution, object-aware filtering
- **Juniper SRX:** resolve objects, sets and custom applications inline in the policies table
- **Juniper SRX:** standard per-card attribution footers; banner only for ambiguous windows
- **Juniper SRX:** standardize firewall design - shared PolicyFlow card + SrxChangeDetail
- **Juniper SRX:** type registration + fetcher + comparer, conformance-green
- **Juniper SRX:** unified-policy fields, hit count, derived timestamps
- **Juniper SRX:** use HPE brand mark for the SRX icon
- **Switch:** animate the Virtual/logical collapse
- **Switch:** chassis faceplate for the Interfaces tab
- **Switch:** collapsible virtual section, show-down toggle, always-visible detail
- **Switch:** group the Interfaces chassis access bank by stack member
- **Switch:** rebuild Endpoints chassis to the Endpoint Heatmap design
- **Topology:** drag-to-pan + centre the hierarchical drawing
- **Topology:** drop band overlays, add wheel zoom + detail sheet
- **Topology:** group connected devices by connection type in the sheet
- **Topology:** hierarchical tiered network view
- **Topology:** per-row badge + collapsible animated connection groups
- **Topology:** remove the Datacenter tab from the mode toggle
- **UI:** fold popover family into the shared motion tokens
- **UI:** standardize all export dropdowns on shadcn DropdownMenu
- **UI:** standardize dialog/sheet animations behind shared motion tokens
- **Vyos:** fetcher with api/ssh/both transport dispatch + router branch
- **Vyos:** HTTPS API connector
- **Vyos:** interactive-shell SSH runner
- **Vyos:** output parsers + lab golden fixtures
- **Vyos:** transport validation + api-aware reachability probe

## Bug Fixes

- **Cisco ACI:** heatmap tab now fills the tab height
- **Changes:** FortiGate envelope unwrap + shared items fallback on global page
- **Deps:** bump excelize to v2.11.0 (CVE-2026-54063)
- **Firewall:** Palo collapsed card parity + FortiGate timeline diff + card animation
- **Firewall:** rich modified-card preview + items-fallback for empty re-diffs
- **Firewall:** standardize SRX Changes tab chrome to canonical
- **Firewall:** stepped reveal uses the canonical dashed button
- **Cisco FMC:** access-rule filters reach NetworkGroups - split resolved values
- **Cisco FMC:** standardize access-rule row-expand onto the shared flow card
- **FortiGate:** CIDR masks, any-keyword, compact services, house header
- **FortiGate:** IP-in-subnet search reaches address GROUPS
- **FortiGate:** service cell - one item per row, consistent text size
- **FortiGate:** standardize Policies tab - row-expand flow card + collapsible chip columns
- **Frontend:** router panel vendor derives from platform catalog
- **Objects Tabs:** contained-IP search reaches groups and sets
- **Palo Alto:** additive object resolution - name search restored
- **Policy Analyzer:** firewall graph nodes say "Access & services" not "Contracts"
- **Policy Analyzer:** frame the Access-flow focused view in a card
- **Policy Analyzer:** play close animation for Access-flow sheets
- **Policy Analyzer:** stop segregation dialog close from freezing the grid
- **Policy Analyzer:** use an inline search field in the Access-policy tab
- **Rbac:** stop Share dialog 403ing /api/users; scope list read to export.share
- **Rules:** align Detection Rules page with project design language
- **Security:** strip api_key from device PUT/GET responses
- **Settings:** flatten inner field-group boxes for consistent section bodies
- **Srx,fortigate:** NAT match normalization + address resolution + design parity
- **Juniper SRX:** filter bar review - plain hints, per-tab placeholders, NAT chip filtering
- **Juniper SRX:** FMC-style per-object resolution, term apps, address ranges
- **Juniper SRX:** hide Hits column by default - Palo parity
- **SSH:** terminal + forensics dial custom SSH ports via DeviceSSHAddr
- **Switch:** show full port labels + fix missing ports on the endpoint heatmap
- **Sync:** explicit :port on device address wins the reachability probe
- **Topology:** connect SD-WAN branch routers to hub/edge routers
- **Topology:** correlate Palo/FTD firewalls onto the map
- **Topology:** node click opens the detail sheet again
- **Topology:** zoom-in snap-back + show all devices, drop site chips
- **UI:** default tooltip rounded-full -> rounded-md
- **UI:** devices dialogs - wider add/edit, viewport-overflow scroll guard
- **UI:** keep a motion-free dialog dismiss fade under reduced-motion
- **UI:** standardize detail-sheet card corners to rounded-lg
- **Vyos:** strip volatile ARP neighbor state from the snapshot hash
- **Vyos:** url is an API endpoint on multi-transport platforms

## Performance Improvements

- **Cisco ISE:** memoize TrustSec matrix cells so drawer close doesn't re-render all
- **Shell:** memoize Sidebar/Topbar so shell dialogs don't re-render them