wcz-layout/skills/start/steps/03-apm-setup.md

# APM Setup

Register the app in **Application Portfolio Management** (https://apm.wistron.com/). Later steps (WiCOP) need its `EA ID`.

## Rules

- Be autonomous: fill every value below yourself. Ask only where marked **Ask**, through **AskUserQuestion**, with your proposed answer as the first (recommended) option.
- Never click the final `Confirm` in `Send Approval` without the user's explicit `Submit`.
- Pages and edit forms load slowly (5–15 s). Poll instead of reporting a blank page; the same goes for sign-in.
- **Signed-in user** = the name in APM's top bar.
- **Team** (fixed, never ask): signed-in user first, then the rest of Radim Staworowski, Martin Husar, Dalibor Homola, Patrik Lorenc, Tien Thanh Tran, Sebastian Ondruska in this order.

## Ask up front (one AskUserQuestion)

1. **Business logic**: what the app does, unless chat context or an attached doc already covers it. You need it for the description, BCM domain, approval and cover domain.
2. **Is Internal Closed Network**: `Yes` (internal OA only) / `No`.
3. **User Identities** (multi-select): `IDL`, `DL`, `Non-Wistron Employee`.

## UI mechanics

- `Create` → dismiss the notice with `OK`. Tab 1 opens in edit mode. Every other section opens with its pencil and saves with its ✓. After a save, check for the `Update successful` toast.
- Dropdown option refs change every time a dropdown opens. Open it, find the option, then click.
- Person fields: type the full name, click the suggestion, and verify the row (job number, name, email).
- A ✓ that stays disabled means a required field is unset. After a failed save, change any dropdown and change it back to re-enable the ✓.

## Tab 1 — Application Information

| Field                                                  | Value                                                                                                       |
| ------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------- |
| Name, English Abbreviation, English Name, Chinese Name | App name in Title Case (from context, otherwise `package.json` `name`)                                      |
| BCM Domain                                             | Derive it from the business logic, using APM's `BCM` link in the left panel if unclear. **Ask** to confirm. |
| Application Description                                | Write 1–2 sentences from the business logic yourself.                                                       |
| Initial On-line Date                                   | End of the current month                                                                                    |
| Service Level                                          | `SC3`                                                                                                       |
| HealthCheck                                            | Skip                                                                                                        |
| Application Owner, Developer, Maintainer               | **Team**, in order, in each list                                                                            |

Saving creates the record. Note the `EA ID`.

## Tab 2 — Application Status

- Hosting Type: `Private Cloud (Kubernetes)`, not the Cloud Operating Model variant.
- Cloud Maturity Feasibility: `expected plan`.
- Cloud Maturity Plan Date: **end of the quarter** that contains the on-line date, e.g. 2026-10-31 → 2026-12-31.
- Leave the other fields, Database, Programming Language and Lifecycle empty.

## Tab 3 — Application Use Status

- useSite: `Specific Sites` → `WCZ`.
- useBg: `Specific BG` → `BG5` if the app name contains `SMS` or `WSCZ` (ignore case), otherwise `BG2`.
- Login Validation: Closed Network and User Identities from the up-front answers. Authentication Methods: `MS Entra ID`.

## Tab 4 — Application Complexity

Skip.

## Tab 5 — Information Security

- SAMM `No`, DSOMM `Yes`, Execution Progress `0` (view mode shows `--`), Internet Facing `No`.
- Implementation Completion Date: same as the Tab 2 plan date.
- Division Lead: signed-in user.
- Data Sensitivity `No`, CI/CD Implemented `Yes`.
- WiCOP Resource: click `Check` (expect `No`). CMDB/ITSM: type `N/A`, click `Check` (expect `No`).

## Tab 6 — Approval Status Inquiry

Propose the values from the business logic and **Ask** to confirm them in one question. For reference, SMS External Transfer used:

- Approval `Yes`.
- Purpose `Other (Remark)`, remark `material transfer out of the production area`.
- HR/Finance `Other (Remark)`, remark `-`.
- CEO/Chairman `Yes`, BG/BU Head `Yes`.
- Engine `Other (Remark)`, remark `-`.
- Approval remarks `-`.
- Portal APP `No integrations`.

Quirks, which cause a silent HTTP 500 or a disabled ✓:

- Every remark must be **≤ ~45 characters**.
- Put `-` in every remark field that has no real value.
- Select BG/BU Head explicitly. The `No` shown by default is not a value.

## Tab 7 — Covering Enterprise Domain

1. Click pencil → `+`. Pick L0 to match the BCM domain, browse L1 → L2 → L3, and choose the path that fits the business logic.
2. **Ask** to confirm the path. For reference, SMS External Transfer used `8 Administrative` → `8.3 Security management` → `8.3.2 Security administration` → `8.3.2.1 Controlled entry and exit of goods`.
3. Click `Confirm` in the dialog, then the tab's ✓.

Skip tabs 8–10.

## Send Approval

1. Click `Send Approval`. In the `Approval Content` dialog, check the values against what you entered. Black means new, red means changed.
2. If anything is wrong, click `Cancel` and fix it.
3. **Ask**: "Submit the APM approval?" with the options `Submit` / `Not yet`. Click `Confirm` only on `Submit`.

Done when APM accepts the submission or the user saves the record for later. Report the `EA ID`.