Control Center V2 (1/6): foundation pane, capabilities, retire activity-log migration prompt

[Paul Lizer (paullizer)]

Summary

• Added a V2 Control Center route and permission-filtered section rail, with the shared role/settings capability map exposed through bootstrap; only users with a Control Center capability see the account-menu entry.
• Retired the classic page's automatic activity-log migration status check and prompt. Added an on-demand Data health section; manual backfills now skip existing per-user activity records and use stable IDs.
• Added shared management-pane primitives, tests, a feature guide/fix documentation, regenerated the docs inventory, and bumped the application version to 0.261.278.

Linked issue

No associated issue.

Release Notes & Latest Features

• New Feature
• Bug Fix
• UI Enhancement
• Breaking Change
• Internal only

Is this visible to end users?

• Yes
• No

Is this admin-facing (Admin Settings, governance, deployment, config)?

• Yes
• No

Should this become a Latest Feature card?

• Yes
• No
• Already added

Screenshot needed for the card?

• Yes
• No
• Attached

Version bump

• application/single_app/config.py VERSION third segment bumped, or not needed because this is docs-only
• deployers/version.txt bumped, or not needed because deployers/ was not changed

Testing / validation

• npm --prefix application/v2_ui run build — passed (TypeScript check and Vite build).
• python -m pytest ui_tests\test_v2_control_center_data_health.py -q — passed, 3 tests.
• python functional_tests\test_v2_control_center_foundation.py — passed, 6/6.
• $env:PYTHONIOENCODING='utf-8'; python functional_tests\test_control_center_access_logic.py — passed, 6 access checks and 3 frontend checks.
• python functional_tests\test_v2_admin_section_shell.py — passed, 5/5. python functional_tests\test_v2_api_security.py — passed, 5/5.
• Route policy coverage: python functional_tests\route_tests\test_route_blueprint_policy_inventory.py (12/12), python functional_tests\route_tests\test_route_unauthenticated_policy_contract.py (7/7), and python functional_tests\route_tests\test_route_policy_test_coverage.py (2/2) — passed.
• python functional_tests\test_docs_app_surface_coverage.py — passed, 7/7. python functional_tests\test_docs_site_quality.py — passed, 6/6.
• python -m py_compile application\single_app\functions_authentication.py application\single_app\functions_activity_logging.py application\single_app\route_backend_control_center.py application\single_app\route_backend_users.py application\single_app\route_backend_v2.py functional_tests\test_v2_control_center_foundation.py ui_tests\test_v2_control_center_data_health.py and git diff --check — passed.
• python functional_tests\test_v2_admin_settings_rail_collapse.py — 3/4 checks passed; its existing source assertion for disabled={delegationDirty} fails against the unchanged AdminSettingsPage.tsx. This is unrelated to the Control Center changes.

Documentation

• Release notes updated, or not needed
• Feature documentation updated, or not needed
• Fix documentation updated, or not needed

Security checklist

• New Flask routes include @swagger_route(security=get_auth_security()) (no new Flask routes were added)
• Settings sent to non-admin frontends use sanitize_settings_for_user() (bootstrap exposes only capability booleans)
• Browser JavaScript is served from local SimpleChat static assets only; no CDN-hosted JS
• No secrets, keys, connection strings, or local-only artifacts are included