@checkstack/catalog-frontend 0.5.14 → 0.6.1

package/CHANGELOG.md

@@ -1,5 +1,38 @@
 # @checkstack/catalog-frontend
 
+## 0.6.1
+
+### Patch Changes
+
+- Updated dependencies [86bab6a]
+  - @checkstack/gitops-frontend@0.2.1
+
+## 0.6.0
+
+### Minor Changes
+
+- 6c40b5b: Generalized provenance system and GitOps frontend plugin
+
+  **Breaking**: `EntityKindDefinition.reconcile()` now returns `{ entityId: string }` instead of `void`. Plugins must return the plugin-specific entity ID (e.g., catalog system UUID) so the engine can store it in provenance.
+
+  - Added `entityId` column to the provenance table (non-nullable)
+  - Reconciler engine passes `existingEntityId` to plugins for updates
+  - `getProvenance` now supports lookup by `entityId` in addition to `entityName`
+  - Added provider CRUD endpoints: `createProvider`, `updateProvider`, `deleteProvider`
+  - Created `gitops-frontend` plugin with provider management, secret management, and sync status dashboard
+  - Removed `gitops_entity_name` metadata markers from catalog entities
+  - Removed `findSystemByGitOpsName`, `deleteSystemByGitOpsName` (and Group equivalents) from EntityService
+  - Added provenance-based UI locking in catalog-frontend: edit/delete/drag disabled for GitOps-managed systems and groups
+
+### Patch Changes
+
+- Updated dependencies [6c40b5b]
+- Updated dependencies [6c40b5b]
+- Updated dependencies [4b0934d]
+  - @checkstack/gitops-frontend@0.2.0
+  - @checkstack/ui@1.3.6
+  - @checkstack/auth-frontend@0.5.25
+
 ## 0.5.14
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@checkstack/catalog-frontend",
-  "version": "0.5.14",
+  "version": "0.6.1",
   "type": "module",
   "main": "src/index.tsx",
   "checkstack": {
@@ -13,12 +13,13 @@
   },
   "dependencies": {
     "@checkstack/auth-common": "0.6.1",
-    "@checkstack/auth-frontend": "0.5.18",
+    "@checkstack/auth-frontend": "0.5.25",
     "@checkstack/catalog-common": "1.3.1",
     "@checkstack/common": "0.6.5",
     "@checkstack/frontend-api": "0.3.9",
+    "@checkstack/gitops-frontend": "0.2.0",
     "@checkstack/notification-common": "0.2.8",
-    "@checkstack/ui": "1.2.1",
+    "@checkstack/ui": "1.3.6",
     "@dnd-kit/core": "^6.3.1",
     "@dnd-kit/utilities": "^3.2.2",
     "lucide-react": "^0.344.0",

package/src/components/DraggableSystem.tsx

@@ -1,9 +1,10 @@
 import { useState } from "react";
 import { useDraggable } from "@dnd-kit/core";
-import { GripVertical, Edit, Trash2, FolderPlus } from "lucide-react";
+import { GripVertical, Edit, Trash2, FolderPlus, GitBranch } from "lucide-react";
 import { Button } from "@checkstack/ui";
 import { ExtensionSlot } from "@checkstack/frontend-api";
 import { CatalogSystemActionsSlot } from "@checkstack/catalog-common";
+import { useProvenanceLock } from "@checkstack/gitops-frontend";
 import type { Group, System } from "../api";
 
 interface DraggableSystemProps {
@@ -38,8 +39,14 @@ export const DraggableSystem = ({
 }: DraggableSystemProps) => {
   const [isPickerOpen, setIsPickerOpen] = useState(false);
 
+  const { isLocked } = useProvenanceLock({
+    kind: "System",
+    entityId: system.id,
+  });
+
   const { attributes, listeners, setNodeRef } = useDraggable({
     id: system.id,
+    disabled: isLocked,
   });
 
   const availableGroups = groups.filter((g) => !assignedGroupIds.includes(g.id));
@@ -55,10 +62,18 @@ export const DraggableSystem = ({
         <div
           {...listeners}
           {...attributes}
-          className="flex-shrink-0 mt-0.5 cursor-grab active:cursor-grabbing text-muted-foreground/40 hover:text-muted-foreground touch-none"
-          aria-label={`Drag ${system.name}`}
+          className={`flex-shrink-0 mt-0.5 text-muted-foreground/40 touch-none ${
+            isLocked
+              ? "cursor-not-allowed opacity-30"
+              : "cursor-grab active:cursor-grabbing hover:text-muted-foreground"
+          }`}
+          aria-label={isLocked ? `${system.name} is managed by GitOps` : `Drag ${system.name}`}
         >
-          <GripVertical className="w-4 h-4" />
+          {isLocked ? (
+            <GitBranch className="w-4 h-4 text-primary" />
+          ) : (
+            <GripVertical className="w-4 h-4" />
+          )}
         </div>
 
         {/* Name + description — gets all remaining width, never truncated */}
@@ -142,6 +157,8 @@ export const DraggableSystem = ({
             size="sm"
             className="h-7 w-7 p-0"
             onClick={() => onEdit(system)}
+            disabled={isLocked}
+            title={isLocked ? "Managed by GitOps" : undefined}
             aria-label={`Edit ${system.name}`}
           >
             <Edit className="w-3.5 h-3.5" />
@@ -152,6 +169,8 @@ export const DraggableSystem = ({
             size="sm"
             className="text-destructive hover:text-destructive/90 hover:bg-destructive/10 h-7 w-7 p-0"
             onClick={() => onDelete(system.id)}
+            disabled={isLocked}
+            title={isLocked ? "Managed by GitOps" : undefined}
             aria-label={`Delete ${system.name}`}
           >
             <Trash2 className="w-3.5 h-3.5" />

package/src/components/DroppableGroup.tsx

@@ -1,6 +1,7 @@
 import { useDroppable } from "@dnd-kit/core";
 import { EditableText, Button } from "@checkstack/ui";
-import { Trash2 } from "lucide-react";
+import { Trash2, GitBranch } from "lucide-react";
+import { useProvenanceLock } from "@checkstack/gitops-frontend";
 import type { Group, System } from "../api";
 
 interface DroppableGroupProps {
@@ -35,6 +36,11 @@ export const DroppableGroup = ({
 }: DroppableGroupProps) => {
   const { setNodeRef } = useDroppable({ id: group.id });
 
+  const { isLocked } = useProvenanceLock({
+    kind: "Group",
+    entityId: group.id,
+  });
+
   const groupSystems = (group.systemIds ?? [])
     .map((sysId) => systems.find((s) => s.id === sysId))
     .filter((sys): sys is System => !!sys);
@@ -56,18 +62,28 @@ export const DroppableGroup = ({
     >
       {/* Group header */}
       <div className="flex items-center justify-between">
-        <div className="flex-1">
-          <EditableText
-            value={group.name}
-            onSave={(newName) => onUpdateGroupName(group.id, newName)}
-            className="font-medium text-foreground"
-          />
-          <p className="text-xs text-muted-foreground font-mono">{group.id}</p>
+        <div className="flex items-center gap-2 flex-1">
+          {isLocked && (
+            <span title="Managed by GitOps">
+              <GitBranch className="w-4 h-4 text-primary shrink-0" />
+            </span>
+          )}
+          <div className="flex-1">
+            <EditableText
+              value={group.name}
+              onSave={(newName) => onUpdateGroupName(group.id, newName)}
+              className="font-medium text-foreground"
+              disabled={isLocked}
+            />
+            <p className="text-xs text-muted-foreground font-mono">{group.id}</p>
+          </div>
         </div>
         <Button
           variant="ghost"
           className="text-destructive hover:text-destructive/90 hover:bg-destructive/10 h-8 w-8 p-0"
           onClick={() => onDeleteGroup(group.id)}
+          disabled={isLocked}
+          title={isLocked ? "Managed by GitOps" : undefined}
           aria-label={`Delete group ${group.name}`}
         >
           <Trash2 className="w-4 h-4" />