@checkstack/backend 0.10.1 → 0.10.2

package/CHANGELOG.md

@@ -1,5 +1,41 @@
 # @checkstack/backend
 
+## 0.10.2
+
+### Patch Changes
+
+- a06b899: Dead-code audit cleanup and a small platform of shared notification helpers.
+
+  **Removed (dead code)**
+
+  - `core/backend/src/plugin-manager/deregistration-guard.ts` deleted. The exported `assertCanDeregister()` was never called and was a less-complete version of the dependents+isUninstallable checks already done inline by `previewUninstallOriginator` / `uninstallOriginator` in `plugin-manager-orchestrator.ts`.
+  - `createMockQueueFactory` deprecated alias removed from `@checkstack/test-utils-backend`. Use `createMockQueueManager` directly.
+
+  **New shared helpers**
+
+  - `@checkstack/backend-api` now exports `requestTimeoutMs()` — a Zod field builder for outbound HTTP request timeouts (1s..60s, default 10s). Replaces hand-rolled `configNumber({}).min(1000).max(60_000).default(10_000)` in `integration-webhook-backend`, `integration-script-backend`, and `healthcheck-script-backend`'s inline collector.
+  - `@checkstack/notification-common` now exports `SubjectStatusSchema` / `SubjectStatus`, mirroring the existing `ImportanceSchema`.
+  - `@checkstack/notification-backend` now exports:
+    - `SUBJECT_STATUS_EMOJI` / `IMPORTANCE_EMOJI` — the shared status / importance emoji maps that Discord, Slack, Teams, Webex and Telegram previously each redefined inline.
+    - `postJson(opts)` — a timeout-bounded `fetch` wrapper that handles non-2xx logging and error mapping for webhook-style POSTs. Returns `{ ok: true, response } | { ok: false, error }`.
+
+  **Migrated to shared helpers**
+
+  - Discord, Slack, Gotify, Pushover notification backends now use `postJson`. Outer try/catch + per-plugin error mapping deleted (~140 LOC).
+  - Discord, Slack, Teams, Telegram, Webex notification backends now use `IMPORTANCE_EMOJI`. Discord, Slack, Teams use `SUBJECT_STATUS_EMOJI`.
+  - Teams, Webex, Backstage, Telegram kept their inline fetch/Bot logic: their error strings surface server response bodies to operators, or the transport isn't raw `fetch` (Telegram uses `grammy`'s `Bot`).
+
+  **API surface tightening**
+
+  - Per-plugin test-only re-exports in 6 notification backends (Pushover, Gotify, Backstage, Slack, Discord, Teams) and the `CertificateInfo` interface in `healthcheck-tls-backend/strategy.ts` are now JSDoc-tagged `@internal`. No behaviour change; signals that downstream consumers must not depend on them.
+
+- Updated dependencies [a06b899]
+- Updated dependencies [a06b899]
+  - @checkstack/backend-api@0.16.0
+  - @checkstack/cache-api@0.3.3
+  - @checkstack/queue-api@0.3.3
+  - @checkstack/signal-backend@0.2.7
+
 ## 0.10.1
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@checkstack/backend",
-  "version": "0.10.1",
+  "version": "0.10.2",
   "license": "Elastic-2.0",
   "checkstack": {
     "type": "backend"
@@ -16,12 +16,12 @@
   "dependencies": {
     "@checkstack/api-docs-common": "0.1.13",
     "@checkstack/auth-common": "0.7.0",
-    "@checkstack/backend-api": "0.15.2",
+    "@checkstack/backend-api": "0.15.3",
     "@checkstack/common": "0.10.0",
     "@checkstack/drizzle-helper": "0.0.5",
-    "@checkstack/cache-api": "0.3.1",
-    "@checkstack/queue-api": "0.3.1",
-    "@checkstack/signal-backend": "0.2.5",
+    "@checkstack/cache-api": "0.3.2",
+    "@checkstack/queue-api": "0.3.2",
+    "@checkstack/signal-backend": "0.2.6",
     "@checkstack/signal-common": "0.2.3",
     "@checkstack/pluginmanager-common": "0.2.2",
     "@hono/zod-validator": "^0.7.6",
@@ -46,7 +46,7 @@
     "@types/semver": "^7.5.0",
     "@checkstack/tsconfig": "0.0.7",
     "@checkstack/scripts": "0.3.2",
-    "@checkstack/test-utils-backend": "0.1.26",
+    "@checkstack/test-utils-backend": "0.1.27",
     "drizzle-kit": "^0.31.10"
   }
 }

package/src/plugin-manager/deregistration-guard.ts

@@ -1,41 +0,0 @@
-import { eq } from "drizzle-orm";
-import { SafeDatabase } from "@checkstack/backend-api";
-import { ORPCError } from "@orpc/server";
-import { plugins } from "../schema";
-
-/**
- * Validates that a plugin can be deregistered.
- * throws ORPCError if the plugin is not uninstallable or has dependents.
- */
-export async function assertCanDeregister({
-  pluginId,
-  db,
-}: {
-  pluginId: string;
-  db: SafeDatabase<Record<string, unknown>>;
-}): Promise<void> {
-  // 1. Check if plugin exists
-  const pluginRows = await db
-    .select()
-    .from(plugins)
-    .where(eq(plugins.name, pluginId));
-
-  if (pluginRows.length === 0) {
-    throw new ORPCError("NOT_FOUND", {
-      message: `Plugin "${pluginId}" not found`,
-    });
-  }
-
-  const plugin = pluginRows[0];
-
-  // 2. Check isUninstallable flag
-  if (!plugin.isUninstallable) {
-    throw new ORPCError("FORBIDDEN", {
-      message: `Plugin "${pluginId}" is a core platform component and cannot be uninstalled`,
-    });
-  }
-
-  // 3. TODO: Check for dependent plugins (consumers of this plugin's services)
-  // This would require tracking service dependencies at runtime
-  // For now, we skip this check and let the deregistration proceed
-}