@checkstack/dashboard-frontend 0.5.1 → 0.6.1

package/CHANGELOG.md

@@ -1,5 +1,199 @@
 # @checkstack/dashboard-frontend
 
+## 0.6.1
+
+### Patch Changes
+
+- 50e5f5f: Runtime plugin system: install + uninstall plugins from npm, GitHub releases
+  (including private GitHub Enterprise instances), or tarball uploads at
+  runtime, with multi-package bundles, dependency-derived compatibility checks,
+  multi-instance coordination via a Postgres artifact store, and
+  single-coordinator destructive cleanup.
+
+  Highlights:
+
+  - New `PluginSource` discriminated union and `PluginInstaller` /
+    `PluginInstallerRegistry` interfaces in `@checkstack/backend-api`. The
+    GitHub variant accepts an optional `apiBaseUrl` so deployments backed by
+    GitHub Enterprise can install from `https://ghe.example.com/api/v3`
+    instead of `api.github.com`.
+  - New `installPackageMetadataSchema` (Zod) in `@checkstack/common` validates
+    every plugin's `package.json` at install time. Required fields: `name`,
+    `version`, `description`, `author`, `license`, `checkstack.type`,
+    `checkstack.pluginId`. Optional: `checkstack.bundle`,
+    `checkstack.usageInstructions`, `checkstack.allowInstallScripts`.
+  - New `pluginManagerContract` in `@checkstack/pluginmanager-common` with
+    `list`, `previewInstall`, `install`, `previewUninstall`, `uninstall`, and
+    `events` procedures.
+  - New `@checkstack/pluginmanager-frontend` admin UI: installed-plugins list
+    with per-row uninstall (typed-confirmation modal, schema/configs/cascade
+    toggles), install page with NPM / Tarball Upload / GitHub Release tabs
+    (Catalog tab disabled — coming soon), and an events page surfacing the
+    install/uninstall audit log.
+  - New `bunx @checkstack/scripts plugin-pack` CLI for plugin authors —
+    per-package mode produces an npm-shaped tarball; `--bundle` mode produces
+    an outer tarball containing every sibling declared in
+    `package.json#checkstack.bundle`. Published to npm so external authors
+    can `bunx` it directly without a workspace checkout.
+  - Compatibility derived from `package.json#dependencies` ranges
+    (`semver.satisfies` against the platform's loaded `@checkstack/*`
+    versions) — no separate `compatibility` field.
+  - Multi-instance: originator persists artifacts + `plugins` rows + broadcasts
+    install/uninstall; receiving instances do in-process register/unregister
+    only. Destructive ops (drop schema, delete plugin_configs, delete
+    artifacts, delete `plugins` rows) run exactly once on the originator.
+  - Fresh-instance bootstrap: `loadPlugins()` hydrates any
+    `is_uninstallable=true` plugin missing from `node_modules` from the
+    artifact store before normal Phase 1 register.
+  - New schema: `plugin_artifacts` (tarball storage), `plugin_install_events`
+    (audit/error log). `plugins` extended with `version`, `metadata`,
+    `source`, `bundle_id`, `is_primary`. Local plugin sync now writes
+    `version` from each plugin's `package.json` so the admin UI shows real
+    versions instead of `—`.
+  - Tarball-upload endpoint (`POST /api/pluginmanager/upload-tarball`) for
+    the install UI; access-gated by `pluginmanager.plugin.manage`.
+  - Plugin Manager menu link added to the user menu (main grid, alongside
+    Profile / Notification Settings / etc.).
+
+  Cross-cutting changes:
+
+  - Backend request/response logging now flows through `rootLogger` (winston)
+    instead of `hono/logger`. 5xx responses include the response body inline
+    so swallowed early-return errors are visible in the log.
+  - The `/api/:pluginId/*` dispatcher now logs which core service is missing
+    or which `pluginId` had no metadata when it 500s.
+  - New `registerCorePluginMetadata` on `PluginManager` for core routers
+    (like the plugin manager itself) that need their metadata visible to the
+    RPC dispatcher without going through the full plugin lifecycle.
+  - ESLint: `unicorn/no-null` is now disabled globally. Drizzle distinguishes
+    between `null` (writes a real SQL NULL) and `undefined` (skip the column
+    on insert), so treating them as interchangeable produced latent bugs at
+    the persistence boundary. The bulk of the patch-bumped packages above
+    reflect lint-fix touches that landed when this rule was relaxed.
+  - Workspace-wide license normalization to `Elastic-2.0` (matches
+    `LICENSE.md`). Every `package.json` in the workspace now declares the
+    same SPDX identifier; the patch bumps capture this.
+
+  Plugin packages (every `plugins/*`): added a `pack` npm script
+  (`bunx @checkstack/scripts plugin-pack`), mirrored each plugin's
+  `pluginId` from `plugin-metadata.ts` into `package.json#checkstack.pluginId`
+  so install-time validation passes, stubbed any missing required metadata
+  fields (`description`, `author`, `license`), and added
+  `checkstack.bundle` to multi-package plugin primaries (telegram, rcon, ssh,
+  jira, queue-bullmq, queue-memory, cache-memory).
+
+  Breaking changes:
+
+  - The legacy single-method `PluginInstaller` interface (`install(packageName)`)
+    is removed. Callers must use `coreServices.pluginInstallerRegistry`.
+  - The old `pluginAdminContract` and `createPluginAdminRouter` are removed.
+    Replaced by `pluginManagerContract` in `@checkstack/pluginmanager-common`
+    and `createPluginManagerRouter` in `core/backend`.
+  - `@checkstack/test-utils-backend` no longer exports
+    `createMockPluginInstaller` / `MockPluginInstaller` (the legacy interface
+    it shimmed is gone).
+
+  Note: bumps are limited to `minor` (for packages with new public API
+  surface) and `patch` (for downstream consumers, license normalization,
+  and lint fixes). No `major` bumps despite the `PluginInstaller` removal —
+  the legacy interface had no third-party consumers in the wild before this
+  runtime plugin system landed, and the contract surface is the same shape
+  modulo the rename.
+
+- Updated dependencies [50e5f5f]
+  - @checkstack/catalog-common@2.0.1
+  - @checkstack/catalog-frontend@0.9.1
+  - @checkstack/command-common@0.2.10
+  - @checkstack/common@0.8.0
+  - @checkstack/maintenance-common@1.0.1
+  - @checkstack/notification-frontend@0.3.1
+  - @checkstack/signal-frontend@0.1.1
+  - @checkstack/ui@1.7.1
+  - @checkstack/anomaly-common@1.0.1
+  - @checkstack/auth-frontend@0.5.33
+  - @checkstack/command-frontend@0.2.34
+  - @checkstack/frontend-api@0.4.2
+  - @checkstack/healthcheck-common@1.0.1
+  - @checkstack/incident-common@1.0.1
+  - @checkstack/notification-common@1.0.1
+  - @checkstack/queue-frontend@0.3.3
+
+## 0.6.0
+
+### Minor Changes
+
+- 32d52c6: feat: unified notification-subscription manager dialog driven by spec registry
+
+  Replaces the bell-toggle UX (which only managed a single legacy
+  catalog group) with a modal that lists every notification type
+  registered against a target — system or group — and exposes both
+  per-type toggles and a bulk "Subscribe to all / Unsubscribe from all"
+  action. Both surfaces (system detail page header bell, dashboard group
+  header bell) now open the same `NotificationSubscriptionsManager`
+  component.
+
+  **Key change vs. the prior slot-based approach**: rows are now driven
+  by `notificationClient.listSubscriptionSpecs` — the backend's spec
+  registry is the single source of truth. Previously, a row only
+  appeared if a frontend plugin had remembered to register a
+  `createNotificationSubscriptionExtension`; this caused silent drift
+  (healthcheck and dependency registered backend specs without frontend
+  extensions, so the dialog counted them but never rendered rows). Now,
+  every spec the platform knows about renders a row using the spec's
+  `display` metadata (title, description, iconName resolved via
+  `DynamicIcon`).
+
+  **Sub-controls registry** (`@checkstack/notification-frontend`):
+  plugins that want sub-granularity (anomaly's per-field mute list,
+  future severity / channel filters) call
+  `registerSubscriptionSubControls(spec, Component)` at module load —
+  the manager looks the component up by `specId` when expanding a row.
+
+  **Removed (no compat)**:
+
+  - `createNotificationSubscriptionExtension` (replaced by the
+    spec-driven manager + the SubControls registry)
+  - `target.slot` field on `NotificationTarget` and the
+    `NotificationTargetInput.slot` parameter on
+    `defineNotificationTarget`
+  - `SystemNotificationSubscriptionsSlot` and
+    `GroupNotificationSubscriptionsSlot` from `@checkstack/catalog-common`
+  - `SystemNotificationsCard` from the system detail page's main column
+  - `SubscribeButton` wiring on dashboard group cards and the system
+    detail page header
+
+  **Migrated frontends**: anomaly (now registers `AnomalyFieldMuteList`
+  via the SubControls registry), incident, maintenance — all dropped
+  their `createNotificationSubscriptionExtension` calls. healthcheck and
+  dependency now show up automatically via the spec registry — no
+  frontend changes needed for them to render.
+
+  The trigger button reflects aggregate state — filled bell when at
+  least one spec is subscribed for the resource, ghost bell when none.
+
+### Patch Changes
+
+- Updated dependencies [32d52c6]
+- Updated dependencies [32d52c6]
+- Updated dependencies [32d52c6]
+- Updated dependencies [32d52c6]
+- Updated dependencies [32d52c6]
+- Updated dependencies [32d52c6]
+- Updated dependencies [32d52c6]
+  - @checkstack/anomaly-common@1.0.0
+  - @checkstack/notification-common@1.0.0
+  - @checkstack/notification-frontend@0.3.0
+  - @checkstack/catalog-common@2.0.0
+  - @checkstack/catalog-frontend@0.9.0
+  - @checkstack/incident-common@1.0.0
+  - @checkstack/maintenance-common@1.0.0
+  - @checkstack/healthcheck-common@1.0.0
+  - @checkstack/frontend-api@0.4.1
+  - @checkstack/auth-frontend@0.5.32
+  - @checkstack/ui@1.7.0
+  - @checkstack/command-frontend@0.2.33
+  - @checkstack/queue-frontend@0.3.2
+
 ## 0.5.1
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@checkstack/dashboard-frontend",
-  "version": "0.5.1",
+  "version": "0.6.1",
+  "license": "Elastic-2.0",
   "type": "module",
   "main": "src/index.tsx",
   "checkstack": {
@@ -8,26 +9,27 @@
   },
   "scripts": {
     "test": "bun test",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "tsgo -b",
     "lint": "bun run lint:code",
     "lint:code": "eslint . --max-warnings 0"
   },
   "dependencies": {
-    "@checkstack/anomaly-common": "0.2.0",
-    "@checkstack/auth-frontend": "0.5.30",
-    "@checkstack/catalog-common": "1.5.2",
-    "@checkstack/catalog-frontend": "0.8.6",
+    "@checkstack/anomaly-common": "1.0.0",
+    "@checkstack/auth-frontend": "0.5.32",
+    "@checkstack/catalog-common": "2.0.0",
+    "@checkstack/catalog-frontend": "0.9.0",
     "@checkstack/command-common": "0.2.9",
-    "@checkstack/command-frontend": "0.2.31",
+    "@checkstack/command-frontend": "0.2.33",
     "@checkstack/common": "0.7.0",
-    "@checkstack/frontend-api": "0.3.11",
-    "@checkstack/healthcheck-common": "0.12.0",
-    "@checkstack/incident-common": "0.4.9",
-    "@checkstack/maintenance-common": "0.4.11",
-    "@checkstack/notification-common": "0.2.9",
-    "@checkstack/queue-frontend": "0.3.0",
-    "@checkstack/signal-frontend": "0.0.16",
-    "@checkstack/ui": "1.6.0",
+    "@checkstack/frontend-api": "0.4.1",
+    "@checkstack/healthcheck-common": "1.0.0",
+    "@checkstack/incident-common": "1.0.0",
+    "@checkstack/maintenance-common": "1.0.0",
+    "@checkstack/notification-common": "1.0.0",
+    "@checkstack/notification-frontend": "0.3.0",
+    "@checkstack/queue-frontend": "0.3.2",
+    "@checkstack/signal-frontend": "0.1.0",
+    "@checkstack/ui": "1.7.0",
     "date-fns": "^4.1.0",
     "lucide-react": "^0.344.0",
     "react": "^18.2.0",
@@ -36,7 +38,7 @@
   "devDependencies": {
     "typescript": "^5.0.0",
     "@types/react": "^18.2.0",
-    "@checkstack/tsconfig": "0.0.5",
+    "@checkstack/tsconfig": "0.0.6",
     "@checkstack/scripts": "0.1.2"
   }
 }

package/src/Dashboard.tsx

@@ -11,12 +11,10 @@ import {
   SystemStateBadgesSlot,
   System,
   Group,
+  catalogGroupTarget,
 } from "@checkstack/catalog-common";
 import { resolveRoute } from "@checkstack/common";
-import {
-  NotificationApi,
-  type EnrichedSubscription,
-} from "@checkstack/notification-common";
+import { NotificationSubscriptionsManager } from "@checkstack/notification-frontend";
 import { IncidentApi } from "@checkstack/incident-common";
 import { MaintenanceApi } from "@checkstack/maintenance-common";
 import { AnomalyApi } from "@checkstack/anomaly-common";
@@ -31,8 +29,6 @@ import {
   StatusCard,
   EmptyState,
   LoadingSpinner,
-  SubscribeButton,
-  useToast,
   AnimatedCounter,
   TerminalFeed,
   type TerminalEntry,
@@ -56,15 +52,12 @@ import { IncidentOverviewSheet } from "./components/IncidentOverviewSheet";
 import { MaintenanceOverviewSheet } from "./components/MaintenanceOverviewSheet";
 import { AnomalyOverviewSheet } from "./components/AnomalyOverviewSheet";
 
-const CATALOG_PLUGIN_ID = "catalog";
 const MAX_TERMINAL_ENTRIES = 8;
 
 interface GroupWithSystems extends Group {
   systems: System[];
 }
 
-const getGroupId = (groupId: string) => `${CATALOG_PLUGIN_ID}.group.${groupId}`;
-
 const statusToVariant = (
   status: string,
 ): "default" | "success" | "warning" | "error" => {
@@ -87,24 +80,17 @@ const statusToVariant = (
 export const Dashboard: React.FC = () => {
   const { isLowPower } = usePerformance();
   const catalogClient = usePluginClient(CatalogApi);
-  const notificationClient = usePluginClient(NotificationApi);
   const incidentClient = usePluginClient(IncidentApi);
   const maintenanceClient = usePluginClient(MaintenanceApi);
   const anomalyClient = usePluginClient(AnomalyApi);
 
   const navigate = useNavigate();
-  const toast = useToast();
   const authApi = useApi(authApiRef);
   const { data: session } = authApi.useSession();
 
   // Terminal feed entries from real healthcheck signals
   const [terminalEntries, setTerminalEntries] = useState<TerminalEntry[]>([]);
 
-  // Track per-group loading state for subscribe buttons
-  const [subscriptionLoading, setSubscriptionLoading] = useState<
-    Record<string, boolean>
-  >({});
-
   const [isIncidentSheetOpen, setIncidentSheetOpen] = useState(false);
   const [isMaintenanceSheetOpen, setMaintenanceSheetOpen] = useState(false);
   const [isAnomalySheetOpen, setAnomalySheetOpen] = useState(false);
@@ -158,13 +144,6 @@ export const Dashboard: React.FC = () => {
       { staleTime: 30_000 },
     );
 
-  // Fetch subscriptions (only when logged in)
-  const { data: subscriptions = [], refetch: refetchSubscriptions } =
-    notificationClient.getSubscriptions.useQuery(
-      {},
-      { enabled: !!session, staleTime: 60_000 },
-    );
-
   // Combined loading state
   const loading =
     entitiesLoading ||
@@ -172,30 +151,6 @@ export const Dashboard: React.FC = () => {
     maintenancesLoading ||
     anomaliesLoading;
 
-  // -------------------------------------------------------------------------
-  // MUTATIONS
-  // -------------------------------------------------------------------------
-
-  const subscribeMutation = notificationClient.subscribe.useMutation({
-    onSuccess: () => {
-      toast.success("Subscribed to group notifications");
-      void refetchSubscriptions();
-    },
-    onError: (error: Error) => {
-      toast.error(error.message || "Failed to subscribe");
-    },
-  });
-
-  const unsubscribeMutation = notificationClient.unsubscribe.useMutation({
-    onSuccess: () => {
-      toast.success("Unsubscribed from group notifications");
-      void refetchSubscriptions();
-    },
-    onError: (error: Error) => {
-      toast.error(error.message || "Failed to unsubscribe");
-    },
-  });
-
   // -------------------------------------------------------------------------
   // COMPUTED DATA
   // -------------------------------------------------------------------------
@@ -248,39 +203,6 @@ export const Dashboard: React.FC = () => {
     navigate(resolveRoute(catalogRoutes.routes.systemDetail, { systemId }));
   };
 
-  const isSubscribed = (groupId: string) => {
-    const fullId = getGroupId(groupId);
-    return subscriptions.some(
-      (s: EnrichedSubscription) => s.groupId === fullId,
-    );
-  };
-
-  const handleSubscribe = (groupId: string) => {
-    const fullId = getGroupId(groupId);
-    setSubscriptionLoading((prev) => ({ ...prev, [groupId]: true }));
-    subscribeMutation.mutate(
-      { groupId: fullId },
-      {
-        onSettled: () => {
-          setSubscriptionLoading((prev) => ({ ...prev, [groupId]: false }));
-        },
-      },
-    );
-  };
-
-  const handleUnsubscribe = (groupId: string) => {
-    const fullId = getGroupId(groupId);
-    setSubscriptionLoading((prev) => ({ ...prev, [groupId]: true }));
-    unsubscribeMutation.mutate(
-      { groupId: fullId },
-      {
-        onSettled: () => {
-          setSubscriptionLoading((prev) => ({ ...prev, [groupId]: false }));
-        },
-      },
-    );
-  };
-
   // -------------------------------------------------------------------------
   // RENDER
   // -------------------------------------------------------------------------
@@ -324,11 +246,12 @@ export const Dashboard: React.FC = () => {
                     {group.systems.length === 1 ? "system" : "systems"}
                   </span>
                   {session && (
-                    <SubscribeButton
-                      isSubscribed={isSubscribed(group.id)}
-                      onSubscribe={() => handleSubscribe(group.id)}
-                      onUnsubscribe={() => handleUnsubscribe(group.id)}
-                      loading={subscriptionLoading[group.id] || false}
+                    <NotificationSubscriptionsManager
+                      target={catalogGroupTarget}
+                      resource={{
+                        groupId: group.id,
+                        groupName: group.name,
+                      }}
                     />
                   )}
                 </div>

package/tsconfig.json

@@ -2,5 +2,55 @@
   "extends": "@checkstack/tsconfig/frontend.json",
   "include": [
     "src"
+  ],
+  "references": [
+    {
+      "path": "../anomaly-common"
+    },
+    {
+      "path": "../auth-frontend"
+    },
+    {
+      "path": "../catalog-common"
+    },
+    {
+      "path": "../catalog-frontend"
+    },
+    {
+      "path": "../command-common"
+    },
+    {
+      "path": "../command-frontend"
+    },
+    {
+      "path": "../common"
+    },
+    {
+      "path": "../frontend-api"
+    },
+    {
+      "path": "../healthcheck-common"
+    },
+    {
+      "path": "../incident-common"
+    },
+    {
+      "path": "../maintenance-common"
+    },
+    {
+      "path": "../notification-common"
+    },
+    {
+      "path": "../notification-frontend"
+    },
+    {
+      "path": "../queue-frontend"
+    },
+    {
+      "path": "../signal-frontend"
+    },
+    {
+      "path": "../ui"
+    }
   ]
-}
+}