- Shipped
- August 6, 2026 at 12:37 PM UTC
- Author
- Kamo
- Commit
- d9ca598
SecurityService owns the platform-admin surface — system configuration, DNS provisioning, commerce sync — but has no WebSocket endpoint, so every screen backed by it had no way to be told anything and refreshed on a timer instead: the closed-loan trainer tab every 4 seconds, DNS provisioning every 15, commerce sync logs and VOIP recording stats every 30. It publishes to core NATS; this puts those messages on STOMP, the same arrangement SupportStompRelayController and **************** already use. Subject to destination is mechanical — drop the leading "security." and swap dots for slashes, so security.dns.log.42 arrives on /topic/dns/log/42 — which means a new event type needs a publisher and a subscriber and nothing here. Prefixes are bound explicitly rather than as security.>: a catch-all would double-deliver security.theme.provision.*, which ThemeProvisionStompRelay already relays to the same topic shape.