@checkstack/catalog-backend 1.0.1 → 1.1.0

package/CHANGELOG.md

@@ -1,5 +1,168 @@
 # @checkstack/catalog-backend
 
+## 1.1.0
+
+### Minor Changes
+
+- 1ef2e79: feat: hotlinks on incidents/maintenances and additional links on systems
+
+  Users with `manage` access on an incident, maintenance, or system can now
+  attach free-form URL "hotlinks" — Jira tickets, runbooks, dashboards, ticket
+  tools, etc. — alongside the existing fields.
+
+  - **Incidents** & **maintenances**: links live on the entity itself and are
+    surfaced both in the editor dialog and on the public detail page. Two new
+    RPC procedures per plugin (`addLink`, `removeLink`) gated behind the
+    existing `manage` access rule. Links are returned as part of
+    `getIncident` / `getMaintenance` and cache-invalidated on every link
+    mutation.
+  - **Systems**: a parallel `system_links` table with `getSystemLinks`,
+    `addSystemLink`, `removeSystemLink` procedures. Surfaced inside the
+    system editor (next to contacts) and on the read-only system detail
+    sidebar. Cache-scoped per-system so list endpoints remain hot.
+  - **Shared UI**: a `LinksEditor` component in `@checkstack/ui` does the
+    presentation; the three plugins each own their own RPC wiring.
+
+  Database changes ship as additive migrations (new `incident_links`,
+  `maintenance_links`, `system_links` tables, all FK-cascaded on parent
+  delete). No existing columns or rows are touched.
+
+  The system incident and maintenance history pages now sort by relevance:
+  active entries (non-`resolved` incidents, `scheduled` or `in_progress`
+  maintenances) appear at the top, with creation date descending as the
+  tiebreaker.
+
+### Patch Changes
+
+- Updated dependencies [42abfff]
+- Updated dependencies [f6f9a5c]
+- Updated dependencies [1ef2e79]
+- Updated dependencies [aa89bc5]
+  - @checkstack/common@0.9.0
+  - @checkstack/gitops-common@0.3.0
+  - @checkstack/gitops-backend@0.3.0
+  - @checkstack/catalog-common@2.1.0
+  - @checkstack/cache-api@0.3.0
+  - @checkstack/auth-backend@0.4.25
+  - @checkstack/auth-common@0.6.6
+  - @checkstack/backend-api@0.15.1
+  - @checkstack/command-backend@0.1.25
+  - @checkstack/notification-common@1.0.2
+  - @checkstack/cache-utils@0.2.5
+
+## 1.0.2
+
+### Patch Changes
+
+- 50e5f5f: Runtime plugin system: install + uninstall plugins from npm, GitHub releases
+  (including private GitHub Enterprise instances), or tarball uploads at
+  runtime, with multi-package bundles, dependency-derived compatibility checks,
+  multi-instance coordination via a Postgres artifact store, and
+  single-coordinator destructive cleanup.
+
+  Highlights:
+
+  - New `PluginSource` discriminated union and `PluginInstaller` /
+    `PluginInstallerRegistry` interfaces in `@checkstack/backend-api`. The
+    GitHub variant accepts an optional `apiBaseUrl` so deployments backed by
+    GitHub Enterprise can install from `https://ghe.example.com/api/v3`
+    instead of `api.github.com`.
+  - New `installPackageMetadataSchema` (Zod) in `@checkstack/common` validates
+    every plugin's `package.json` at install time. Required fields: `name`,
+    `version`, `description`, `author`, `license`, `checkstack.type`,
+    `checkstack.pluginId`. Optional: `checkstack.bundle`,
+    `checkstack.usageInstructions`, `checkstack.allowInstallScripts`.
+  - New `pluginManagerContract` in `@checkstack/pluginmanager-common` with
+    `list`, `previewInstall`, `install`, `previewUninstall`, `uninstall`, and
+    `events` procedures.
+  - New `@checkstack/pluginmanager-frontend` admin UI: installed-plugins list
+    with per-row uninstall (typed-confirmation modal, schema/configs/cascade
+    toggles), install page with NPM / Tarball Upload / GitHub Release tabs
+    (Catalog tab disabled — coming soon), and an events page surfacing the
+    install/uninstall audit log.
+  - New `bunx @checkstack/scripts plugin-pack` CLI for plugin authors —
+    per-package mode produces an npm-shaped tarball; `--bundle` mode produces
+    an outer tarball containing every sibling declared in
+    `package.json#checkstack.bundle`. Published to npm so external authors
+    can `bunx` it directly without a workspace checkout.
+  - Compatibility derived from `package.json#dependencies` ranges
+    (`semver.satisfies` against the platform's loaded `@checkstack/*`
+    versions) — no separate `compatibility` field.
+  - Multi-instance: originator persists artifacts + `plugins` rows + broadcasts
+    install/uninstall; receiving instances do in-process register/unregister
+    only. Destructive ops (drop schema, delete plugin_configs, delete
+    artifacts, delete `plugins` rows) run exactly once on the originator.
+  - Fresh-instance bootstrap: `loadPlugins()` hydrates any
+    `is_uninstallable=true` plugin missing from `node_modules` from the
+    artifact store before normal Phase 1 register.
+  - New schema: `plugin_artifacts` (tarball storage), `plugin_install_events`
+    (audit/error log). `plugins` extended with `version`, `metadata`,
+    `source`, `bundle_id`, `is_primary`. Local plugin sync now writes
+    `version` from each plugin's `package.json` so the admin UI shows real
+    versions instead of `—`.
+  - Tarball-upload endpoint (`POST /api/pluginmanager/upload-tarball`) for
+    the install UI; access-gated by `pluginmanager.plugin.manage`.
+  - Plugin Manager menu link added to the user menu (main grid, alongside
+    Profile / Notification Settings / etc.).
+
+  Cross-cutting changes:
+
+  - Backend request/response logging now flows through `rootLogger` (winston)
+    instead of `hono/logger`. 5xx responses include the response body inline
+    so swallowed early-return errors are visible in the log.
+  - The `/api/:pluginId/*` dispatcher now logs which core service is missing
+    or which `pluginId` had no metadata when it 500s.
+  - New `registerCorePluginMetadata` on `PluginManager` for core routers
+    (like the plugin manager itself) that need their metadata visible to the
+    RPC dispatcher without going through the full plugin lifecycle.
+  - ESLint: `unicorn/no-null` is now disabled globally. Drizzle distinguishes
+    between `null` (writes a real SQL NULL) and `undefined` (skip the column
+    on insert), so treating them as interchangeable produced latent bugs at
+    the persistence boundary. The bulk of the patch-bumped packages above
+    reflect lint-fix touches that landed when this rule was relaxed.
+  - Workspace-wide license normalization to `Elastic-2.0` (matches
+    `LICENSE.md`). Every `package.json` in the workspace now declares the
+    same SPDX identifier; the patch bumps capture this.
+
+  Plugin packages (every `plugins/*`): added a `pack` npm script
+  (`bunx @checkstack/scripts plugin-pack`), mirrored each plugin's
+  `pluginId` from `plugin-metadata.ts` into `package.json#checkstack.pluginId`
+  so install-time validation passes, stubbed any missing required metadata
+  fields (`description`, `author`, `license`), and added
+  `checkstack.bundle` to multi-package plugin primaries (telegram, rcon, ssh,
+  jira, queue-bullmq, queue-memory, cache-memory).
+
+  Breaking changes:
+
+  - The legacy single-method `PluginInstaller` interface (`install(packageName)`)
+    is removed. Callers must use `coreServices.pluginInstallerRegistry`.
+  - The old `pluginAdminContract` and `createPluginAdminRouter` are removed.
+    Replaced by `pluginManagerContract` in `@checkstack/pluginmanager-common`
+    and `createPluginManagerRouter` in `core/backend`.
+  - `@checkstack/test-utils-backend` no longer exports
+    `createMockPluginInstaller` / `MockPluginInstaller` (the legacy interface
+    it shimmed is gone).
+
+  Note: bumps are limited to `minor` (for packages with new public API
+  surface) and `patch` (for downstream consumers, license normalization,
+  and lint fixes). No `major` bumps despite the `PluginInstaller` removal —
+  the legacy interface had no third-party consumers in the wild before this
+  runtime plugin system landed, and the contract surface is the same shape
+  modulo the rename.
+
+- Updated dependencies [50e5f5f]
+  - @checkstack/auth-common@0.6.5
+  - @checkstack/backend-api@0.15.0
+  - @checkstack/catalog-common@2.0.1
+  - @checkstack/common@0.8.0
+  - @checkstack/gitops-backend@0.2.8
+  - @checkstack/gitops-common@0.2.2
+  - @checkstack/auth-backend@0.4.24
+  - @checkstack/cache-api@0.2.4
+  - @checkstack/cache-utils@0.2.4
+  - @checkstack/command-backend@0.1.24
+  - @checkstack/notification-common@1.0.1
+
 ## 1.0.1
 
 ### Patch Changes

package/drizzle/0002_harsh_carmella_unuscione.sql

@@ -0,0 +1,9 @@
+CREATE TABLE "system_links" (
+	"id" text PRIMARY KEY NOT NULL,
+	"system_id" text NOT NULL,
+	"label" text,
+	"url" text NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "system_links" ADD CONSTRAINT "system_links_system_id_systems_id_fk" FOREIGN KEY ("system_id") REFERENCES "systems"("id") ON DELETE cascade ON UPDATE no action;

package/drizzle/meta/0002_snapshot.json

@@ -0,0 +1,367 @@
+{
+  "id": "d0f3aff8-8024-4eec-9407-77c1991ecf62",
+  "prevId": "72cd2f27-3627-475c-96f6-778b75a35418",
+  "version": "7",
+  "dialect": "postgresql",
+  "tables": {
+    "public.groups": {
+      "name": "groups",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "metadata": {
+          "name": "metadata",
+          "type": "json",
+          "primaryKey": false,
+          "notNull": false,
+          "default": "'{}'::json"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.system_contacts": {
+      "name": "system_contacts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "system_id": {
+          "name": "system_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "type": {
+          "name": "type",
+          "type": "contact_type",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "system_contacts_system_id_systems_id_fk": {
+          "name": "system_contacts_system_id_systems_id_fk",
+          "tableFrom": "system_contacts",
+          "tableTo": "systems",
+          "columnsFrom": [
+            "system_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.system_links": {
+      "name": "system_links",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "system_id": {
+          "name": "system_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "system_links_system_id_systems_id_fk": {
+          "name": "system_links_system_id_systems_id_fk",
+          "tableFrom": "system_links",
+          "tableTo": "systems",
+          "columnsFrom": [
+            "system_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.systems": {
+      "name": "systems",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "metadata": {
+          "name": "metadata",
+          "type": "json",
+          "primaryKey": false,
+          "notNull": false,
+          "default": "'{}'::json"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.systems_groups": {
+      "name": "systems_groups",
+      "schema": "",
+      "columns": {
+        "system_id": {
+          "name": "system_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "group_id": {
+          "name": "group_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "systems_groups_system_id_systems_id_fk": {
+          "name": "systems_groups_system_id_systems_id_fk",
+          "tableFrom": "systems_groups",
+          "tableTo": "systems",
+          "columnsFrom": [
+            "system_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "systems_groups_group_id_groups_id_fk": {
+          "name": "systems_groups_group_id_groups_id_fk",
+          "tableFrom": "systems_groups",
+          "tableTo": "groups",
+          "columnsFrom": [
+            "group_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "systems_groups_system_id_group_id_pk": {
+          "name": "systems_groups_system_id_group_id_pk",
+          "columns": [
+            "system_id",
+            "group_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.views": {
+      "name": "views",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "configuration": {
+          "name": "configuration",
+          "type": "json",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'[]'::json"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    }
+  },
+  "enums": {
+    "public.contact_type": {
+      "name": "contact_type",
+      "schema": "public",
+      "values": [
+        "user",
+        "mailbox"
+      ]
+    }
+  },
+  "schemas": {},
+  "sequences": {},
+  "roles": {},
+  "policies": {},
+  "views": {},
+  "_meta": {
+    "columns": {},
+    "schemas": {},
+    "tables": {}
+  }
+}

package/drizzle/meta/_journal.json

@@ -15,6 +15,13 @@
       "when": 1769034170052,
       "tag": "0001_early_madrox",
       "breakpoints": true
+    },
+    {
+      "idx": 2,
+      "version": "7",
+      "when": 1777907813247,
+      "tag": "0002_harsh_carmella_unuscione",
+      "breakpoints": true
     }
   ]
 }

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@checkstack/catalog-backend",
-  "version": "1.0.1",
+  "version": "1.1.0",
+  "license": "Elastic-2.0",
   "type": "module",
   "main": "src/index.ts",
   "checkstack": {
@@ -13,27 +14,27 @@
     "lint:code": "eslint . --max-warnings 0"
   },
   "dependencies": {
-    "@checkstack/backend-api": "0.14.0",
-    "@checkstack/cache-api": "0.2.2",
-    "@checkstack/cache-utils": "0.2.2",
-    "@checkstack/auth-common": "0.6.4",
-    "@checkstack/catalog-common": "2.0.0",
-    "@checkstack/command-backend": "0.1.22",
-    "@checkstack/auth-backend": "0.4.22",
-    "@checkstack/gitops-backend": "0.2.6",
-    "@checkstack/gitops-common": "0.2.1",
-    "@checkstack/notification-common": "1.0.0",
+    "@checkstack/backend-api": "0.15.0",
+    "@checkstack/cache-api": "0.2.4",
+    "@checkstack/cache-utils": "0.2.4",
+    "@checkstack/auth-common": "0.6.5",
+    "@checkstack/catalog-common": "2.0.1",
+    "@checkstack/command-backend": "0.1.24",
+    "@checkstack/auth-backend": "0.4.24",
+    "@checkstack/gitops-backend": "0.2.8",
+    "@checkstack/gitops-common": "0.2.2",
+    "@checkstack/notification-common": "1.0.1",
     "@orpc/server": "^1.13.2",
     "drizzle-orm": "^0.45.0",
     "hono": "^4.12.14",
     "uuid": "^13.0.0",
     "zod": "^4.2.1",
-    "@checkstack/common": "0.7.0"
+    "@checkstack/common": "0.8.0"
   },
   "devDependencies": {
-    "@checkstack/drizzle-helper": "0.0.4",
-    "@checkstack/scripts": "0.1.2",
-    "@checkstack/tsconfig": "0.0.5",
+    "@checkstack/drizzle-helper": "0.0.5",
+    "@checkstack/scripts": "0.3.0",
+    "@checkstack/tsconfig": "0.0.7",
     "@types/bun": "^1.3.5",
     "@types/node": "^20.0.0",
     "@types/uuid": "^11.0.0",

package/src/cache.ts

@@ -16,6 +16,7 @@ const CATALOG_TTL_MS = 25_000;
 const ENTITY_PREFIX = "entity:";
 const VIEW_PREFIX = "view:";
 const CONTACTS_PREFIX = "contacts:";
+const LINKS_PREFIX = "links:";
 
 const ENTITIES_KEY = `${ENTITY_PREFIX}entities`;
 const SYSTEMS_KEY = `${ENTITY_PREFIX}systems`;
@@ -27,6 +28,7 @@ const groupsForSystemKey = (systemId: string): string =>
   `${ENTITY_PREFIX}groups-for-system:${systemId}`;
 const contactsKey = (systemId: string): string =>
   `${CONTACTS_PREFIX}${systemId}`;
+const linksKey = (systemId: string): string => `${LINKS_PREFIX}${systemId}`;
 
 export interface CatalogCache {
   /** Read-through caches for the dashboard hot paths. */
@@ -40,6 +42,7 @@ export interface CatalogCache {
   ) => Promise<T>;
   wrapViews: <T>(loader: () => Promise<T>) => Promise<T>;
   wrapContacts: <T>(systemId: string, loader: () => Promise<T>) => Promise<T>;
+  wrapLinks: <T>(systemId: string, loader: () => Promise<T>) => Promise<T>;
 
   /**
    * Drop the whole topology family (entities, systems, groups, per-system,
@@ -55,6 +58,9 @@ export interface CatalogCache {
   /** Drop one system's contact cache. */
   invalidateContacts: (systemId: string) => Promise<void>;
 
+  /** Drop one system's hotlink cache. */
+  invalidateLinks: (systemId: string) => Promise<void>;
+
   scope: CachedScope;
 }
 
@@ -84,10 +90,12 @@ export function createCatalogCache({
     wrapViews: (loader) => scope.wrap(VIEWS_KEY, loader),
     wrapContacts: (systemId, loader) =>
       scope.wrap(contactsKey(systemId), loader),
+    wrapLinks: (systemId, loader) => scope.wrap(linksKey(systemId), loader),
 
     invalidateTopology: () => scope.invalidatePrefix(ENTITY_PREFIX),
     invalidateViews: () => scope.invalidatePrefix(VIEW_PREFIX),
     invalidateContacts: (systemId) => scope.invalidate(contactsKey(systemId)),
+    invalidateLinks: (systemId) => scope.invalidate(linksKey(systemId)),
 
     scope,
   };

package/src/router.test.ts

@@ -12,9 +12,11 @@ const passthroughCache: CatalogCache = {
   wrapGroupsForSystem: (_systemId, loader) => loader(),
   wrapViews: (loader) => loader(),
   wrapContacts: (_systemId, loader) => loader(),
+  wrapLinks: (_systemId, loader) => loader(),
   invalidateTopology: async () => 0,
   invalidateViews: async () => 0,
   invalidateContacts: async () => {},
+  invalidateLinks: async () => {},
   scope: {} as CatalogCache["scope"],
 };
 

package/src/router.ts

@@ -180,7 +180,7 @@ export const createCatalogRouter = ({
       const system = await entityService.getSystem(input.systemId);
       if (!system) {
         // oRPC contract uses .nullable() which requires null
-        // eslint-disable-next-line unicorn/no-null
+         
         return null;
       }
       return system as typeof system & {
@@ -497,6 +497,33 @@ export const createCatalogRouter = ({
     },
   );
 
+  // System Links handlers (free-form URL hotlinks attached to a system)
+  const getSystemLinks = os.getSystemLinks.handler(async ({ input }) =>
+    cache.wrapLinks(input.systemId, async () =>
+      entityService.getLinksForSystem(input.systemId),
+    ),
+  );
+
+  const addSystemLink = os.addSystemLink.handler(async ({ input }) => {
+    await enforceNotGitOpsLocked("System", input.systemId);
+    const result = await entityService.addLink({
+      systemId: input.systemId,
+      label: input.label,
+      url: input.url,
+    });
+    await cache.invalidateLinks(input.systemId);
+    return result;
+  });
+
+  const removeSystemLink = os.removeSystemLink.handler(async ({ input }) => {
+    const removed = await entityService.removeLink(input);
+    if (removed) {
+      await enforceNotGitOpsLocked("System", removed.systemId);
+      await cache.invalidateLinks(removed.systemId);
+    }
+    return { success: !!removed };
+  });
+
   /**
    * Get the catalog group IDs that contain a specific system.
    * Used by the dependency plugin for batched notification deduplication.
@@ -526,6 +553,9 @@ export const createCatalogRouter = ({
     getSystemContacts,
     addSystemContact,
     removeSystemContact,
+    getSystemLinks,
+    addSystemLink,
+    removeSystemLink,
     createGroup,
     updateGroup,
     deleteGroup,

package/src/schema.ts

@@ -59,6 +59,20 @@ export const systemsGroups = pgTable(
   }),
 );
 
+/**
+ * Free-form hotlinks attached to a system — e.g. Jira board, dashboard URL,
+ * runbook. Sits alongside contacts but is purely URL-based, no user/email.
+ */
+export const systemLinks = pgTable("system_links", {
+  id: text("id").primaryKey(),
+  systemId: text("system_id")
+    .notNull()
+    .references(() => systems.id, { onDelete: "cascade" }),
+  label: text("label"),
+  url: text("url").notNull(),
+  createdAt: timestamp("created_at").defaultNow().notNull(),
+});
+
 export const views = pgTable("views", {
   id: text("id").primaryKey(),
   name: text("name").notNull(),

package/src/services/entity-service.ts

@@ -98,6 +98,30 @@ export class EntityService {
       .where(eq(schema.systemContacts.userId, userId));
   }
 
+  // System Links — free-form URLs attached to a system
+  async getLinksForSystem(systemId: string) {
+    return this.database
+      .select()
+      .from(schema.systemLinks)
+      .where(eq(schema.systemLinks.systemId, systemId));
+  }
+
+  async addLink(props: { systemId: string; label?: string; url: string }) {
+    const result = await this.database
+      .insert(schema.systemLinks)
+      .values({ id: uuidv4(), ...props })
+      .returning();
+    return result[0];
+  }
+
+  async removeLink(linkId: string) {
+    const result = await this.database
+      .delete(schema.systemLinks)
+      .where(eq(schema.systemLinks.id, linkId))
+      .returning();
+    return result[0];
+  }
+
   // Groups
   async getGroups() {
     // Fetch all groups