@marble-sh/backstage-plugin-grafana-backend 1.0.2 → 1.2.0

package/CHANGELOG.md

@@ -1,5 +1,62 @@
 # @marble-sh/backstage-plugin-grafana-backend
 
+## 1.2.0
+
+### Minor Changes
+
+- a31b91d: Added: the dashboards tab now renders real graphs and the alerts tab a live
+  detail table. The backend gained read-only panel routes
+  (`GET …/dashboards/:uid/panels` and `GET …/panels/:panelId/data?from&to`)
+  that read a dashboard's model, resolve its template variables' current
+  values, query the panel targets through Grafana's `/api/ds/query`, and
+  return normalized time series — gated by the new `grafana.allowPanelQueries`
+  flag and cached per `grafana.panelDataCacheTtl` (default 30s). The frontend
+  draws `timeseries`/`graph` panels as charts and `stat`/`gauge`/`singlestat`
+  panels as value tiles, per-dashboard and lazily, with a time-range picker
+  and refresh. Alerts are enriched with rule uid (deep links), health,
+  active-since, active instance count, dashboard/panel links, and the
+  `summary` annotation. `GrafanaClient`/`GrafanaService` gained _optional_
+  `getPanels`/`getPanelData` members, so existing custom implementations
+  remain compatible.
+
+### Patch Changes
+
+- Updated dependencies [a31b91d]
+  - @marble-sh/backstage-plugin-grafana-common@1.2.0
+  - @marble-sh/backstage-plugin-grafana-node@1.2.0
+
+## 1.1.0
+
+### Minor Changes
+
+- 476051b: Catalog discovery no longer leaves the `defaultOwner` relation dangling, and
+  every discovered dashboard `Resource` now shows exactly its own dashboard.
+
+  - The entity provider creates a placeholder `Group` (`spec.type: virtual`) for
+    `defaultOwner` while no other catalog source defines that ref; a definition
+    from any other source (e.g. a hand-written catalog-info.yaml) always takes
+    precedence. Disable with `grafana.catalog.emitOwnerGroup: false` — also the
+    handover switch for replacing an existing placeholder with your own
+    definition (see the module README).
+  - New `grafana/dashboard-uid` annotation (exact, case-sensitive uid match),
+    supported end-to-end: `getDashboardUid` in `-common`, `DashboardFilter.uid`
+    in `-node`, a `uid` query parameter on the backend dashboard routes,
+    `ListDashboardsRequest.uid` + `DashboardsCard` support in the frontend, and
+    emitted by catalog discovery on every dashboard `Resource`.
+
+### Patch Changes
+
+- d091ba9: Reject a non-numeric Grafana Cloud `stackId` at config-read time with an
+  error that explains the numeric-id-vs-slug distinction and how to look the id
+  up, instead of silently deriving an invalid App Platform namespace that fails
+  every refresh with 403 "invalid namespace". Documented the numeric requirement
+  and both lookup methods (Cloud portal URL, `GET /api/frontend/settings`) in
+  the backend README and the config schema.
+- Updated dependencies [476051b]
+- Updated dependencies [d091ba9]
+  - @marble-sh/backstage-plugin-grafana-common@1.1.0
+  - @marble-sh/backstage-plugin-grafana-node@1.1.0
+
 ## 1.0.2
 
 ### Patch Changes

package/README.md

@@ -18,7 +18,14 @@ credentials stay in the backend.
   `apis.dashboards: legacy-search` — from the classic `/api/search` endpoint
   for older Grafana versions. Folder titles and links are resolved for both.
 - Reads alert rules and their live state from the stable Grafana-managed
-  Prometheus rules API (`/api/prometheus/grafana/api/v1/rules`).
+  Prometheus rules API (`/api/prometheus/grafana/api/v1/rules`), including
+  rule uid (for deep links), health, active-since time, active instance
+  count, dashboard/panel links, and the `summary` annotation.
+- Serves **panel listings and live panel data**: reads a dashboard's model,
+  substitutes its template variables' current values, queries the panel's
+  targets through `POST /api/ds/query`, and returns plain normalized time
+  series — so the frontend can draw real graphs without ever talking to
+  Grafana. See [ADR 0006](../../docs/adr/0006-panel-graphs-via-backend-query-proxy.md).
 - Works with both **Grafana Cloud** and **self-hosted** Grafana, using a
   service-account token.
 - Supports **multiple instances**, each addressable by name.
@@ -61,9 +68,12 @@ grafana:
   store: cache
   cacheTtl: { minutes: 15 }
 
-  # Behavior flags (both default to true; see "Behavior flags" below).
+  # Behavior flags (all default to true; see "Behavior flags" below).
   allowOnDemandRefresh: true
   fetchOnDemand: true
+  allowPanelQueries: true
+  # How long live panel data is cached (see "Behavior flags" below).
+  panelDataCacheTtl: { seconds: 30 }
 
   # Optional background refresh. Omit to fetch lazily on request instead.
   schedule:
@@ -95,7 +105,7 @@ grafana:
 | `token`          | yes      | Service-account token used as a Bearer token. Read-only (Viewer) permissions are enough. Marked secret. |
 | `title`          | no       | Human-readable title. Defaults to `name`.                                                               |
 | `namespace`      | no       | App Platform namespace. Defaults to `default` (self-hosted) or `stacks-<stackId>` (cloud).              |
-| `stackId`        | no       | Grafana Cloud stack id, used to derive the namespace.                                                   |
+| `stackId`        | no       | **Numeric** Grafana Cloud stack id (not the stack slug), used to derive the namespace (see below).      |
 | `apis`           | no       | Override or disable the API used per data type (see below).                                             |
 | `resolveFolders` | no       | `false` skips the `/api/folders` folder lookup (see below). Defaults to `true`.                         |
 
@@ -131,8 +141,8 @@ Every state, per data type:
 
 ### Behavior flags
 
-Two top-level flags control when the backend talks to Grafana. Both default to
-`true`; each can be set independently.
+Three top-level flags control when the backend talks to Grafana. All default
+to `true`; each can be set independently.
 
 - **`allowOnDemandRefresh`** — may API callers force live reads?
 
@@ -144,19 +154,29 @@ Two top-level flags control when the backend talks to Grafana. Both default to
     routes respond `403 NotAllowedError`. The scheduled refresh is unaffected.
 
 - **`fetchOnDemand`** — does a store miss trigger a live read?
+
   - `true` (default): a miss fetches from Grafana on the spot and stores the
     snapshot.
   - `false`: a miss returns empty results and stores nothing; data appears
     once any refresh runs.
 
+- **`allowPanelQueries`** — are the panel routes served?
+  - `true` (default): `GET …/dashboards/:uid/panels` and
+    `GET …/panels/:panelId/data` read live from Grafana (the dashboard model
+    plus the `/api/ds/query` datasource API), briefly cached per
+    `grafana.panelDataCacheTtl` (default 30 seconds) to absorb bursts.
+  - `false`: both routes respond `403`. Panel data cannot come from the
+    snapshot store, so deployments that need strictly schedule-only Grafana
+    traffic should set this alongside the other two flags.
+
 All four combinations:
 
-| `allowOnDemandRefresh` | `fetchOnDemand` | Resulting behavior                                                                                                                   |
-| ---------------------- | --------------- | ------------------------------------------------------------------------------------------------------------------------------------ |
-| `true`                 | `true`          | (Default.) Misses fetch lazily; users may force refreshes.                                                                           |
-| `true`                 | `false`         | Misses return empty, but an explicit `?refresh=true` or `POST …/refresh` still reads live and fills the store.                       |
-| `false`                | `true`          | Users cannot force refreshes, but a cold store still fills itself lazily on first read.                                              |
-| `false`                | `false`         | Grafana is contacted **only** by the schedule (configure one, or the API serves empty forever). Fully deterministic Grafana traffic. |
+| `allowOnDemandRefresh` | `fetchOnDemand` | Resulting behavior                                                                                                                                                               |
+| ---------------------- | --------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `true`                 | `true`          | (Default.) Misses fetch lazily; users may force refreshes.                                                                                                                       |
+| `true`                 | `false`         | Misses return empty, but an explicit `?refresh=true` or `POST …/refresh` still reads live and fills the store.                                                                   |
+| `false`                | `true`          | Users cannot force refreshes, but a cold store still fills itself lazily on first read.                                                                                          |
+| `false`                | `false`         | Grafana is contacted **only** by the schedule (configure one, or the API serves empty forever). With `allowPanelQueries: false` as well, Grafana traffic is fully deterministic. |
 
 ### Deriving the namespace
 
@@ -166,31 +186,53 @@ Grafana's App Platform APIs are namespaced:
 - Self-hosted, other organizations → `org-<id>` (set `namespace` explicitly)
 - Grafana Cloud → `stacks-<stackId>` (set `stackId`, or `namespace` directly)
 
+`stackId` is the **numeric** stack id, not the stack slug — for a stack at
+`myorg.grafana.net`, `myorg` is the slug, not the id. A non-numeric `stackId`
+is rejected at startup. Two ways to find the id:
+
+- In the Grafana Cloud portal, open the stack; the URL is
+  `grafana.com/orgs/<org>/stacks/<id>`.
+- Ask the instance itself, using the same service-account token this plugin
+  uses:
+
+  ```bash
+  curl -s -H "Authorization: Bearer $TOKEN" \
+    https://<slug>.grafana.net/api/frontend/settings | jq -r .namespace
+  # → "stacks-1216502"  — the number is the stackId
+  ```
+
 ## REST API
 
 All routes are mounted under `/api/grafana` and (except `/health`) require a
 valid Backstage credential.
 
-| Method | Path                          | Description                                                |
-| ------ | ----------------------------- | ---------------------------------------------------------- |
-| GET    | `/health`                     | Health check (unauthenticated).                            |
-| GET    | `/instances`                  | List configured instances.                                 |
-| GET    | `/instances/:name/dashboards` | Dashboards for one instance.                               |
-| GET    | `/instances/:name/alerts`     | Alerts for one instance.                                   |
-| POST   | `/instances/:name/refresh`    | Force a refresh of one instance.                           |
-| GET    | `/dashboards`                 | Dashboards across all instances (or `?instance=` for one). |
-| GET    | `/alerts`                     | Alerts across all instances (or `?instance=` for one).     |
-| POST   | `/refresh`                    | Force a refresh of all instances.                          |
+| Method | Path                                                    | Description                                                |
+| ------ | ------------------------------------------------------- | ---------------------------------------------------------- |
+| GET    | `/health`                                               | Health check (unauthenticated).                            |
+| GET    | `/instances`                                            | List configured instances.                                 |
+| GET    | `/instances/:name/dashboards`                           | Dashboards for one instance.                               |
+| GET    | `/instances/:name/dashboards/:uid/panels`               | The panels of one dashboard (live read).                   |
+| GET    | `/instances/:name/dashboards/:uid/panels/:panelId/data` | Normalized time series for one panel (live query).         |
+| GET    | `/instances/:name/alerts`                               | Alerts for one instance.                                   |
+| POST   | `/instances/:name/refresh`                              | Force a refresh of one instance.                           |
+| GET    | `/dashboards`                                           | Dashboards across all instances (or `?instance=` for one). |
+| GET    | `/alerts`                                               | Alerts across all instances (or `?instance=` for one).     |
+| POST   | `/refresh`                                              | Force a refresh of all instances.                          |
 
 ### Query parameters
 
 - `tag` — repeatable; only dashboards carrying **all** given tags are returned.
 - `query` — comma-separated, case-insensitive title substrings; dashboards
   matching **any** value are returned.
+- `uid` — only the dashboard with exactly this uid (case-sensitive) is
+  returned; combines with the other filters.
 - `labelSelector` — `key=value,key2=value2`; only alerts matching **all** pairs.
 - `instance` — (on `/dashboards` and `/alerts`) restrict to a single instance.
 - `refresh` — `true` or `1` (or the bare flag) to bypass the store and read
   live from Grafana.
+- `from` / `to` — (on the panel data route) the query range, as Grafana time
+  expressions: `now`, `now-<n><s|m|h|d|w>`, or epoch milliseconds. Default
+  `now-6h` … `now`.
 
 Example:
 
@@ -211,6 +253,15 @@ Each request resolves to a per-instance snapshot (all dashboards + all alerts):
 Because filtering happens after retrieval, a single cached snapshot serves many
 entities with different selectors, keeping Grafana API traffic low.
 
+Panel listings and panel data are different: they are inherently live (a graph
+of a stale range is wrong, not cached), so they bypass the snapshot store
+entirely. Instead they are kept in the cache service for a short
+`panelDataCacheTtl` (default 30 seconds) keyed by instance, dashboard, panel,
+and range — enough to absorb a dashboard opening (which queries every panel at
+once) and several viewers of the same entity, without making graphs stale. The
+Grafana-side dashboard-model read is additionally deduplicated in the client,
+so one burst reads the model once.
+
 ## Local development
 
 ```sh

package/config.schema.json

@@ -51,6 +51,40 @@
           "type": "boolean",
           "description": "Whether a store miss triggers a live read from Grafana.\n\n - `true` (default): when no snapshot is stored for an instance, the    backend fetches from Grafana on the spot and stores the result.  - `false`: store misses return empty results without contacting    Grafana. Data appears once a refresh runs — the schedule, the    `POST …/refresh` routes, or a `refresh=true` read (the latter two    only if `allowOnDemandRefresh` permits them). With both flags    `false`, Grafana is contacted exclusively by the schedule."
         },
+        "allowPanelQueries": {
+          "type": "boolean",
+          "description": "Whether the panel routes are served.\n\n - `true` (default): `GET …/dashboards/:uid/panels` and    `GET …/panels/:panelId/data` read live from Grafana (the dashboard    model and the datasource query API), briefly cached per    `panelDataCacheTtl`.  - `false`: both routes respond `403`. Set this together with    `allowOnDemandRefresh: false` and `fetchOnDemand: false` when    Grafana traffic must be strictly schedule-only — panel data cannot    be served from the snapshot store."
+        },
+        "panelDataCacheTtl": {
+          "type": "object",
+          "properties": {
+            "years": {
+              "type": "number"
+            },
+            "months": {
+              "type": "number"
+            },
+            "weeks": {
+              "type": "number"
+            },
+            "days": {
+              "type": "number"
+            },
+            "hours": {
+              "type": "number"
+            },
+            "minutes": {
+              "type": "number"
+            },
+            "seconds": {
+              "type": "number"
+            },
+            "milliseconds": {
+              "type": "number"
+            }
+          },
+          "description": "Time-to-live for cached panel listings and panel data. Short by design: it exists to absorb bursts (opening a dashboard queries every panel at once), not to make graphs stale. Defaults to 30 seconds."
+        },
         "schedule": {
           "type": "object",
           "properties": {

package/dist/grafana/config.cjs.js

@@ -5,6 +5,7 @@ var errors = require('@backstage/errors');
 var backstagePluginGrafanaNode = require('@marble-sh/backstage-plugin-grafana-node');
 
 const DEFAULT_CACHE_TTL = { minutes: 15 };
+const DEFAULT_PANEL_DATA_CACHE_TTL = { seconds: 30 };
 function readGrafanaConfig(rootConfig) {
   const instances = backstagePluginGrafanaNode.readGrafanaInstances(rootConfig);
   const config = rootConfig.getOptionalConfig("grafana");
@@ -21,7 +22,9 @@ function readGrafanaConfig(rootConfig) {
     cacheTtl: config?.getOptional("cacheTtl") ?? DEFAULT_CACHE_TTL,
     schedule: scheduleConfig ? backendPluginApi.readSchedulerServiceTaskScheduleDefinitionFromConfig(scheduleConfig) : void 0,
     allowOnDemandRefresh: config?.getOptionalBoolean("allowOnDemandRefresh") ?? true,
-    fetchOnDemand: config?.getOptionalBoolean("fetchOnDemand") ?? true
+    fetchOnDemand: config?.getOptionalBoolean("fetchOnDemand") ?? true,
+    allowPanelQueries: config?.getOptionalBoolean("allowPanelQueries") ?? true,
+    panelDataCacheTtl: config?.getOptional("panelDataCacheTtl") ?? DEFAULT_PANEL_DATA_CACHE_TTL
   };
 }
 

package/dist/grafana/config.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.cjs.js","sources":["../../src/grafana/config.ts"],"sourcesContent":["/*\n * Copyright 2026 Cassidy Marble\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Config } from '@backstage/config';\nimport {\n  readSchedulerServiceTaskScheduleDefinitionFromConfig,\n  SchedulerServiceTaskScheduleDefinition,\n} from '@backstage/backend-plugin-api';\nimport { InputError } from '@backstage/errors';\nimport { HumanDuration } from '@backstage/types';\nimport {\n  GrafanaInstanceConfig,\n  readGrafanaInstances,\n} from '@marble-sh/backstage-plugin-grafana-node';\n\nexport type {\n  GrafanaInstanceConfig,\n  GrafanaInstanceApis,\n} from '@marble-sh/backstage-plugin-grafana-node';\n\n/**\n * Where fetched data is stored between refreshes.\n *\n * @public\n */\nexport type GrafanaStoreKind = 'cache' | 'database';\n\n/**\n * The fully-resolved backend configuration.\n *\n * @public\n */\nexport type GrafanaBackendConfig = {\n  instances: GrafanaInstanceConfig[];\n  store: GrafanaStoreKind;\n  cacheTtl: HumanDuration;\n  schedule?: SchedulerServiceTaskScheduleDefinition;\n  /** Whether callers may force live reads (`?refresh=true`, `POST /refresh`). */\n  allowOnDemandRefresh: boolean;\n  /** Whether a store miss triggers a live Grafana read. */\n  fetchOnDemand: boolean;\n};\n\nconst DEFAULT_CACHE_TTL: HumanDuration = { minutes: 15 };\n\n/**\n * Reads and validates the `grafana` section of the app configuration into a\n * fully-resolved {@link GrafanaBackendConfig}.\n *\n * @public\n */\nexport function readGrafanaConfig(rootConfig: Config): GrafanaBackendConfig {\n  const instances = readGrafanaInstances(rootConfig);\n  const config = rootConfig.getOptionalConfig('grafana');\n\n  const store =\n    (config?.getOptionalString('store') as GrafanaStoreKind | undefined) ??\n    'cache';\n  if (store !== 'cache' && store !== 'database') {\n    throw new InputError(\n      `Invalid grafana.store '${store}', expected 'cache' or 'database'`,\n    );\n  }\n\n  const scheduleConfig = config?.getOptionalConfig('schedule');\n\n  return {\n    instances,\n    store,\n    cacheTtl:\n      (config?.getOptional('cacheTtl') as HumanDuration | undefined) ??\n      DEFAULT_CACHE_TTL,\n    schedule: scheduleConfig\n      ? readSchedulerServiceTaskScheduleDefinitionFromConfig(scheduleConfig)\n      : undefined,\n    allowOnDemandRefresh:\n      config?.getOptionalBoolean('allowOnDemandRefresh') ?? true,\n    fetchOnDemand: config?.getOptionalBoolean('fetchOnDemand') ?? true,\n  };\n}\n"],"names":["readGrafanaInstances","InputError","readSchedulerServiceTaskScheduleDefinitionFromConfig"],"mappings":";;;;;;AAwDA,MAAM,iBAAA,GAAmC,EAAE,OAAA,EAAS,EAAA,EAAG;AAQhD,SAAS,kBAAkB,UAAA,EAA0C;AAC1E,EAAA,MAAM,SAAA,GAAYA,gDAAqB,UAAU,CAAA;AACjD,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,iBAAA,CAAkB,SAAS,CAAA;AAErD,EAAA,MAAM,KAAA,GACH,MAAA,EAAQ,iBAAA,CAAkB,OAAO,CAAA,IAClC,OAAA;AACF,EAAA,IAAI,KAAA,KAAU,OAAA,IAAW,KAAA,KAAU,UAAA,EAAY;AAC7C,IAAA,MAAM,IAAIC,iBAAA;AAAA,MACR,0BAA0B,KAAK,CAAA,iCAAA;AAAA,KACjC;AAAA,EACF;AAEA,EAAA,MAAM,cAAA,GAAiB,MAAA,EAAQ,iBAAA,CAAkB,UAAU,CAAA;AAE3D,EAAA,OAAO;AAAA,IACL,SAAA;AAAA,IACA,KAAA;AAAA,IACA,QAAA,EACG,MAAA,EAAQ,WAAA,CAAY,UAAU,CAAA,IAC/B,iBAAA;AAAA,IACF,QAAA,EAAU,cAAA,GACNC,qEAAA,CAAqD,cAAc,CAAA,GACnE,MAAA;AAAA,IACJ,oBAAA,EACE,MAAA,EAAQ,kBAAA,CAAmB,sBAAsB,CAAA,IAAK,IAAA;AAAA,IACxD,aAAA,EAAe,MAAA,EAAQ,kBAAA,CAAmB,eAAe,CAAA,IAAK;AAAA,GAChE;AACF;;"}
+{"version":3,"file":"config.cjs.js","sources":["../../src/grafana/config.ts"],"sourcesContent":["/*\n * Copyright 2026 Cassidy Marble\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Config } from '@backstage/config';\nimport {\n  readSchedulerServiceTaskScheduleDefinitionFromConfig,\n  SchedulerServiceTaskScheduleDefinition,\n} from '@backstage/backend-plugin-api';\nimport { InputError } from '@backstage/errors';\nimport { HumanDuration } from '@backstage/types';\nimport {\n  GrafanaInstanceConfig,\n  readGrafanaInstances,\n} from '@marble-sh/backstage-plugin-grafana-node';\n\nexport type {\n  GrafanaInstanceConfig,\n  GrafanaInstanceApis,\n} from '@marble-sh/backstage-plugin-grafana-node';\n\n/**\n * Where fetched data is stored between refreshes.\n *\n * @public\n */\nexport type GrafanaStoreKind = 'cache' | 'database';\n\n/**\n * The fully-resolved backend configuration.\n *\n * @public\n */\nexport type GrafanaBackendConfig = {\n  instances: GrafanaInstanceConfig[];\n  store: GrafanaStoreKind;\n  cacheTtl: HumanDuration;\n  schedule?: SchedulerServiceTaskScheduleDefinition;\n  /** Whether callers may force live reads (`?refresh=true`, `POST /refresh`). */\n  allowOnDemandRefresh: boolean;\n  /** Whether a store miss triggers a live Grafana read. */\n  fetchOnDemand: boolean;\n  /** Whether the panel routes (live dashboard/datasource queries) are served. */\n  allowPanelQueries: boolean;\n  /** Time-to-live for cached panel listings and panel data. */\n  panelDataCacheTtl: HumanDuration;\n};\n\nconst DEFAULT_CACHE_TTL: HumanDuration = { minutes: 15 };\nconst DEFAULT_PANEL_DATA_CACHE_TTL: HumanDuration = { seconds: 30 };\n\n/**\n * Reads and validates the `grafana` section of the app configuration into a\n * fully-resolved {@link GrafanaBackendConfig}.\n *\n * @public\n */\nexport function readGrafanaConfig(rootConfig: Config): GrafanaBackendConfig {\n  const instances = readGrafanaInstances(rootConfig);\n  const config = rootConfig.getOptionalConfig('grafana');\n\n  const store =\n    (config?.getOptionalString('store') as GrafanaStoreKind | undefined) ??\n    'cache';\n  if (store !== 'cache' && store !== 'database') {\n    throw new InputError(\n      `Invalid grafana.store '${store}', expected 'cache' or 'database'`,\n    );\n  }\n\n  const scheduleConfig = config?.getOptionalConfig('schedule');\n\n  return {\n    instances,\n    store,\n    cacheTtl:\n      (config?.getOptional('cacheTtl') as HumanDuration | undefined) ??\n      DEFAULT_CACHE_TTL,\n    schedule: scheduleConfig\n      ? readSchedulerServiceTaskScheduleDefinitionFromConfig(scheduleConfig)\n      : undefined,\n    allowOnDemandRefresh:\n      config?.getOptionalBoolean('allowOnDemandRefresh') ?? true,\n    fetchOnDemand: config?.getOptionalBoolean('fetchOnDemand') ?? true,\n    allowPanelQueries: config?.getOptionalBoolean('allowPanelQueries') ?? true,\n    panelDataCacheTtl:\n      (config?.getOptional('panelDataCacheTtl') as HumanDuration | undefined) ??\n      DEFAULT_PANEL_DATA_CACHE_TTL,\n  };\n}\n"],"names":["readGrafanaInstances","InputError","readSchedulerServiceTaskScheduleDefinitionFromConfig"],"mappings":";;;;;;AA4DA,MAAM,iBAAA,GAAmC,EAAE,OAAA,EAAS,EAAA,EAAG;AACvD,MAAM,4BAAA,GAA8C,EAAE,OAAA,EAAS,EAAA,EAAG;AAQ3D,SAAS,kBAAkB,UAAA,EAA0C;AAC1E,EAAA,MAAM,SAAA,GAAYA,gDAAqB,UAAU,CAAA;AACjD,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,iBAAA,CAAkB,SAAS,CAAA;AAErD,EAAA,MAAM,KAAA,GACH,MAAA,EAAQ,iBAAA,CAAkB,OAAO,CAAA,IAClC,OAAA;AACF,EAAA,IAAI,KAAA,KAAU,OAAA,IAAW,KAAA,KAAU,UAAA,EAAY;AAC7C,IAAA,MAAM,IAAIC,iBAAA;AAAA,MACR,0BAA0B,KAAK,CAAA,iCAAA;AAAA,KACjC;AAAA,EACF;AAEA,EAAA,MAAM,cAAA,GAAiB,MAAA,EAAQ,iBAAA,CAAkB,UAAU,CAAA;AAE3D,EAAA,OAAO;AAAA,IACL,SAAA;AAAA,IACA,KAAA;AAAA,IACA,QAAA,EACG,MAAA,EAAQ,WAAA,CAAY,UAAU,CAAA,IAC/B,iBAAA;AAAA,IACF,QAAA,EAAU,cAAA,GACNC,qEAAA,CAAqD,cAAc,CAAA,GACnE,MAAA;AAAA,IACJ,oBAAA,EACE,MAAA,EAAQ,kBAAA,CAAmB,sBAAsB,CAAA,IAAK,IAAA;AAAA,IACxD,aAAA,EAAe,MAAA,EAAQ,kBAAA,CAAmB,eAAe,CAAA,IAAK,IAAA;AAAA,IAC9D,iBAAA,EAAmB,MAAA,EAAQ,kBAAA,CAAmB,mBAAmB,CAAA,IAAK,IAAA;AAAA,IACtE,iBAAA,EACG,MAAA,EAAQ,WAAA,CAAY,mBAAmB,CAAA,IACxC;AAAA,GACJ;AACF;;"}

package/dist/index.d.ts

@@ -1,10 +1,10 @@
 import * as _backstage_backend_plugin_api from '@backstage/backend-plugin-api';
-import { LoggerService, SchedulerServiceTaskScheduleDefinition, CacheService, DatabaseService } from '@backstage/backend-plugin-api';
-import { GrafanaDashboard, GrafanaAlert, GrafanaInstanceInfo } from '@marble-sh/backstage-plugin-grafana-common';
+import { LoggerService, CacheService, SchedulerServiceTaskScheduleDefinition, DatabaseService } from '@backstage/backend-plugin-api';
+import { HumanDuration } from '@backstage/types';
+import { GrafanaDashboard, GrafanaAlert, GrafanaInstanceInfo, GrafanaPanel, GrafanaPanelData } from '@marble-sh/backstage-plugin-grafana-common';
 import { GrafanaInstanceConfig, GrafanaClient } from '@marble-sh/backstage-plugin-grafana-node';
 export { FetchApi, GrafanaClient, GrafanaHttpClient, GrafanaInstanceApis, GrafanaInstanceConfig, ListAlertsOptions, ListDashboardsOptions } from '@marble-sh/backstage-plugin-grafana-node';
 import { Config } from '@backstage/config';
-import { HumanDuration } from '@backstage/types';
 import { Knex } from 'knex';
 import express from 'express';
 
@@ -65,6 +65,8 @@ type GetDashboardsOptions = {
     tags?: string[];
     /** Comma-separated title substrings; dashboards matching any are returned. */
     query?: string;
+    /** Only return the dashboard with exactly this uid (case-sensitive). */
+    uid?: string;
     /** Force a live fetch, bypassing the store. */
     refresh?: boolean;
 };
@@ -81,10 +83,41 @@ type GetAlertsOptions = {
     /** Force a live fetch, bypassing the store. */
     refresh?: boolean;
 };
+/**
+ * Options for listing the panels of a dashboard through the service.
+ *
+ * @public
+ */
+type GetPanelsOptions = {
+    /** The instance to read from. */
+    instanceName: string;
+    /** The uid of the dashboard whose panels are listed. */
+    dashboardUid: string;
+};
+/**
+ * Options for querying the data of a single panel through the service.
+ *
+ * @public
+ */
+type GetPanelDataOptions = {
+    /** The instance to read from. */
+    instanceName: string;
+    /** The uid of the dashboard containing the panel. */
+    dashboardUid: string;
+    /** The id of the panel to query. */
+    panelId: number;
+    /** Range start: `now`, `now-<n><s|m|h|d|w>`, or epoch ms. Defaults to `now-6h`. */
+    from?: string;
+    /** Range end, same forms as `from`. Defaults to `now`. */
+    to?: string;
+};
 /**
  * Reads dashboards and alerts from the configured Grafana instances, backed by a
  * {@link GrafanaStore} for caching and periodic refresh.
  *
+ * The panel methods are optional so that custom implementations that predate
+ * them stay valid; the router responds 404 when they are absent.
+ *
  * @public
  */
 interface GrafanaService {
@@ -96,6 +129,10 @@ interface GrafanaService {
     getAlerts(options: GetAlertsOptions): Promise<GrafanaAlert[]>;
     /** Refreshes a single instance, or all instances when no name is given. */
     refresh(instanceName?: string): Promise<void>;
+    /** Returns the panels of a single dashboard, live from Grafana. */
+    getPanels?(options: GetPanelsOptions): Promise<GrafanaPanel[]>;
+    /** Returns the queried data of a single panel, live from Grafana. */
+    getPanelData?(options: GetPanelDataOptions): Promise<GrafanaPanelData>;
 }
 /**
  * The default {@link GrafanaService} implementation.
@@ -107,6 +144,8 @@ declare class DefaultGrafanaService implements GrafanaService {
     private readonly store;
     private readonly logger;
     private readonly fetchOnDemand;
+    private readonly cache?;
+    private readonly panelCacheTtlMs;
     constructor(options: {
         instances: GrafanaInstance[];
         store: GrafanaStore;
@@ -118,6 +157,14 @@ declare class DefaultGrafanaService implements GrafanaService {
          * schedule, the refresh endpoints, or a `refresh: true` read option).
          */
         fetchOnDemand?: boolean;
+        /**
+         * When given, panel listings and panel data are cached here for
+         * `panelDataCacheTtl` to absorb bursts (a dashboard opening queries every
+         * panel at once). Without it, every panel request reads live.
+         */
+        cache?: CacheService;
+        /** Time-to-live for cached panel data (default 30 seconds). */
+        panelDataCacheTtl?: HumanDuration;
     });
     /** {@inheritDoc GrafanaService.getInstances} */
     getInstances(): GrafanaInstanceInfo[];
@@ -127,6 +174,11 @@ declare class DefaultGrafanaService implements GrafanaService {
     getAlerts(options: GetAlertsOptions): Promise<GrafanaAlert[]>;
     /** {@inheritDoc GrafanaService.refresh} */
     refresh(instanceName?: string): Promise<void>;
+    /** {@inheritDoc GrafanaService.getPanels} */
+    getPanels(options: GetPanelsOptions): Promise<GrafanaPanel[]>;
+    /** {@inheritDoc GrafanaService.getPanelData} */
+    getPanelData(options: GetPanelDataOptions): Promise<GrafanaPanelData>;
+    private withPanelCache;
     private resolveNames;
     private mustGet;
     private snapshotFor;
@@ -153,6 +205,10 @@ type GrafanaBackendConfig = {
     allowOnDemandRefresh: boolean;
     /** Whether a store miss triggers a live Grafana read. */
     fetchOnDemand: boolean;
+    /** Whether the panel routes (live dashboard/datasource queries) are served. */
+    allowPanelQueries: boolean;
+    /** Time-to-live for cached panel listings and panel data. */
+    panelDataCacheTtl: HumanDuration;
 };
 /**
  * Reads and validates the `grafana` section of the app configuration into a
@@ -224,7 +280,13 @@ declare function createRouter(options: {
      * routes respond 403.
      */
     allowOnDemandRefresh?: boolean;
+    /**
+     * Whether the panel routes are served (default `true`). Panel listings and
+     * panel data always read live from Grafana, so `false` disables them (403)
+     * for deployments that want schedule-only Grafana traffic.
+     */
+    allowPanelQueries?: boolean;
 }): Promise<express.Router>;
 
 export { CacheGrafanaStore, DatabaseGrafanaStore, DefaultGrafanaService, createRouter, grafanaPlugin as default, readGrafanaConfig };
-export type { GetAlertsOptions, GetDashboardsOptions, GrafanaBackendConfig, GrafanaInstance, GrafanaService, GrafanaSnapshot, GrafanaStore, GrafanaStoreKind };
+export type { GetAlertsOptions, GetDashboardsOptions, GetPanelDataOptions, GetPanelsOptions, GrafanaBackendConfig, GrafanaInstance, GrafanaService, GrafanaSnapshot, GrafanaStore, GrafanaStoreKind };

package/dist/plugin.cjs.js

@@ -38,12 +38,15 @@ const grafanaPlugin = backendPluginApi.createBackendPlugin({
           instances,
           store,
           logger,
-          fetchOnDemand: grafanaConfig.fetchOnDemand
+          fetchOnDemand: grafanaConfig.fetchOnDemand,
+          cache,
+          panelDataCacheTtl: grafanaConfig.panelDataCacheTtl
         });
         httpRouter.use(
           await router.createRouter({
             grafanaService,
-            allowOnDemandRefresh: grafanaConfig.allowOnDemandRefresh
+            allowOnDemandRefresh: grafanaConfig.allowOnDemandRefresh,
+            allowPanelQueries: grafanaConfig.allowPanelQueries
           })
         );
         httpRouter.addAuthPolicy({ path: "/health", allow: "unauthenticated" });

package/dist/plugin.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.cjs.js","sources":["../src/plugin.ts"],"sourcesContent":["/*\n * Copyright 2026 Cassidy Marble\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  coreServices,\n  createBackendPlugin,\n} from '@backstage/backend-plugin-api';\nimport { readGrafanaConfig } from './grafana/config';\nimport { GrafanaHttpClient } from '@marble-sh/backstage-plugin-grafana-node';\nimport { CacheGrafanaStore } from './store/CacheGrafanaStore';\nimport { DatabaseGrafanaStore } from './store/DatabaseGrafanaStore';\nimport { GrafanaStore } from './store/GrafanaStore';\nimport {\n  DefaultGrafanaService,\n  GrafanaInstance,\n} from './service/GrafanaService';\nimport { createRouter } from './service/router';\n\n/**\n * The Grafana backend plugin.\n *\n * Reads dashboards and alerts from the configured Grafana instances, caches\n * them (in the cache or the database), optionally refreshes them on a schedule,\n * and exposes a read-only REST API under `/api/grafana`.\n *\n * @public\n */\nexport const grafanaPlugin = createBackendPlugin({\n  pluginId: 'grafana',\n  register(env) {\n    env.registerInit({\n      deps: {\n        logger: coreServices.logger,\n        config: coreServices.rootConfig,\n        httpRouter: coreServices.httpRouter,\n        cache: coreServices.cache,\n        database: coreServices.database,\n        scheduler: coreServices.scheduler,\n      },\n      async init({ logger, config, httpRouter, cache, database, scheduler }) {\n        const grafanaConfig = readGrafanaConfig(config);\n\n        if (grafanaConfig.instances.length === 0) {\n          logger.warn(\n            'No Grafana instances are configured under `grafana.instances`; the grafana plugin will return empty results',\n          );\n        }\n\n        const store: GrafanaStore =\n          grafanaConfig.store === 'database'\n            ? await DatabaseGrafanaStore.create({ database })\n            : new CacheGrafanaStore({ cache, ttl: grafanaConfig.cacheTtl });\n\n        const instances: GrafanaInstance[] = grafanaConfig.instances.map(\n          instance => ({\n            config: instance,\n            client: new GrafanaHttpClient({ instance }),\n          }),\n        );\n\n        const grafanaService = new DefaultGrafanaService({\n          instances,\n          store,\n          logger,\n          fetchOnDemand: grafanaConfig.fetchOnDemand,\n        });\n\n        httpRouter.use(\n          await createRouter({\n            grafanaService,\n            allowOnDemandRefresh: grafanaConfig.allowOnDemandRefresh,\n          }),\n        );\n        httpRouter.addAuthPolicy({ path: '/health', allow: 'unauthenticated' });\n\n        if (grafanaConfig.schedule) {\n          await scheduler.scheduleTask({\n            id: 'grafana-refresh',\n            ...grafanaConfig.schedule,\n            fn: async () => {\n              await grafanaService.refresh();\n            },\n          });\n          logger.info('Scheduled periodic Grafana refresh');\n        }\n      },\n    });\n  },\n});\n"],"names":["createBackendPlugin","coreServices","config","readGrafanaConfig","DatabaseGrafanaStore","CacheGrafanaStore","GrafanaHttpClient","DefaultGrafanaService","createRouter"],"mappings":";;;;;;;;;;AAwCO,MAAM,gBAAgBA,oCAAA,CAAoB;AAAA,EAC/C,QAAA,EAAU,SAAA;AAAA,EACV,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,CAAI,YAAA,CAAa;AAAA,MACf,IAAA,EAAM;AAAA,QACJ,QAAQC,6BAAA,CAAa,MAAA;AAAA,QACrB,QAAQA,6BAAA,CAAa,UAAA;AAAA,QACrB,YAAYA,6BAAA,CAAa,UAAA;AAAA,QACzB,OAAOA,6BAAA,CAAa,KAAA;AAAA,QACpB,UAAUA,6BAAA,CAAa,QAAA;AAAA,QACvB,WAAWA,6BAAA,CAAa;AAAA,OAC1B;AAAA,MACA,MAAM,KAAK,EAAE,MAAA,UAAQC,UAAQ,UAAA,EAAY,KAAA,EAAO,QAAA,EAAU,SAAA,EAAU,EAAG;AACrE,QAAA,MAAM,aAAA,GAAgBC,yBAAkBD,QAAM,CAAA;AAE9C,QAAA,IAAI,aAAA,CAAc,SAAA,CAAU,MAAA,KAAW,CAAA,EAAG;AACxC,UAAA,MAAA,CAAO,IAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AAEA,QAAA,MAAM,QACJ,aAAA,CAAc,KAAA,KAAU,aACpB,MAAME,yCAAA,CAAqB,OAAO,EAAE,QAAA,EAAU,CAAA,GAC9C,IAAIC,mCAAA,CAAkB,EAAE,OAAO,GAAA,EAAK,aAAA,CAAc,UAAU,CAAA;AAElE,QAAA,MAAM,SAAA,GAA+B,cAAc,SAAA,CAAU,GAAA;AAAA,UAC3D,CAAA,QAAA,MAAa;AAAA,YACX,MAAA,EAAQ,QAAA;AAAA,YACR,MAAA,EAAQ,IAAIC,4CAAA,CAAkB,EAAE,UAAU;AAAA,WAC5C;AAAA,SACF;AAEA,QAAA,MAAM,cAAA,GAAiB,IAAIC,oCAAA,CAAsB;AAAA,UAC/C,SAAA;AAAA,UACA,KAAA;AAAA,UACA,MAAA;AAAA,UACA,eAAe,aAAA,CAAc;AAAA,SAC9B,CAAA;AAED,QAAA,UAAA,CAAW,GAAA;AAAA,UACT,MAAMC,mBAAA,CAAa;AAAA,YACjB,cAAA;AAAA,YACA,sBAAsB,aAAA,CAAc;AAAA,WACrC;AAAA,SACH;AACA,QAAA,UAAA,CAAW,cAAc,EAAE,IAAA,EAAM,SAAA,EAAW,KAAA,EAAO,mBAAmB,CAAA;AAEtE,QAAA,IAAI,cAAc,QAAA,EAAU;AAC1B,UAAA,MAAM,UAAU,YAAA,CAAa;AAAA,YAC3B,EAAA,EAAI,iBAAA;AAAA,YACJ,GAAG,aAAA,CAAc,QAAA;AAAA,YACjB,IAAI,YAAY;AACd,cAAA,MAAM,eAAe,OAAA,EAAQ;AAAA,YAC/B;AAAA,WACD,CAAA;AACD,UAAA,MAAA,CAAO,KAAK,oCAAoC,CAAA;AAAA,QAClD;AAAA,MACF;AAAA,KACD,CAAA;AAAA,EACH;AACF,CAAC;;"}
+{"version":3,"file":"plugin.cjs.js","sources":["../src/plugin.ts"],"sourcesContent":["/*\n * Copyright 2026 Cassidy Marble\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  coreServices,\n  createBackendPlugin,\n} from '@backstage/backend-plugin-api';\nimport { readGrafanaConfig } from './grafana/config';\nimport { GrafanaHttpClient } from '@marble-sh/backstage-plugin-grafana-node';\nimport { CacheGrafanaStore } from './store/CacheGrafanaStore';\nimport { DatabaseGrafanaStore } from './store/DatabaseGrafanaStore';\nimport { GrafanaStore } from './store/GrafanaStore';\nimport {\n  DefaultGrafanaService,\n  GrafanaInstance,\n} from './service/GrafanaService';\nimport { createRouter } from './service/router';\n\n/**\n * The Grafana backend plugin.\n *\n * Reads dashboards and alerts from the configured Grafana instances, caches\n * them (in the cache or the database), optionally refreshes them on a schedule,\n * and exposes a read-only REST API under `/api/grafana`.\n *\n * @public\n */\nexport const grafanaPlugin = createBackendPlugin({\n  pluginId: 'grafana',\n  register(env) {\n    env.registerInit({\n      deps: {\n        logger: coreServices.logger,\n        config: coreServices.rootConfig,\n        httpRouter: coreServices.httpRouter,\n        cache: coreServices.cache,\n        database: coreServices.database,\n        scheduler: coreServices.scheduler,\n      },\n      async init({ logger, config, httpRouter, cache, database, scheduler }) {\n        const grafanaConfig = readGrafanaConfig(config);\n\n        if (grafanaConfig.instances.length === 0) {\n          logger.warn(\n            'No Grafana instances are configured under `grafana.instances`; the grafana plugin will return empty results',\n          );\n        }\n\n        const store: GrafanaStore =\n          grafanaConfig.store === 'database'\n            ? await DatabaseGrafanaStore.create({ database })\n            : new CacheGrafanaStore({ cache, ttl: grafanaConfig.cacheTtl });\n\n        const instances: GrafanaInstance[] = grafanaConfig.instances.map(\n          instance => ({\n            config: instance,\n            client: new GrafanaHttpClient({ instance }),\n          }),\n        );\n\n        const grafanaService = new DefaultGrafanaService({\n          instances,\n          store,\n          logger,\n          fetchOnDemand: grafanaConfig.fetchOnDemand,\n          cache,\n          panelDataCacheTtl: grafanaConfig.panelDataCacheTtl,\n        });\n\n        httpRouter.use(\n          await createRouter({\n            grafanaService,\n            allowOnDemandRefresh: grafanaConfig.allowOnDemandRefresh,\n            allowPanelQueries: grafanaConfig.allowPanelQueries,\n          }),\n        );\n        httpRouter.addAuthPolicy({ path: '/health', allow: 'unauthenticated' });\n\n        if (grafanaConfig.schedule) {\n          await scheduler.scheduleTask({\n            id: 'grafana-refresh',\n            ...grafanaConfig.schedule,\n            fn: async () => {\n              await grafanaService.refresh();\n            },\n          });\n          logger.info('Scheduled periodic Grafana refresh');\n        }\n      },\n    });\n  },\n});\n"],"names":["createBackendPlugin","coreServices","config","readGrafanaConfig","DatabaseGrafanaStore","CacheGrafanaStore","GrafanaHttpClient","DefaultGrafanaService","createRouter"],"mappings":";;;;;;;;;;AAwCO,MAAM,gBAAgBA,oCAAA,CAAoB;AAAA,EAC/C,QAAA,EAAU,SAAA;AAAA,EACV,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,CAAI,YAAA,CAAa;AAAA,MACf,IAAA,EAAM;AAAA,QACJ,QAAQC,6BAAA,CAAa,MAAA;AAAA,QACrB,QAAQA,6BAAA,CAAa,UAAA;AAAA,QACrB,YAAYA,6BAAA,CAAa,UAAA;AAAA,QACzB,OAAOA,6BAAA,CAAa,KAAA;AAAA,QACpB,UAAUA,6BAAA,CAAa,QAAA;AAAA,QACvB,WAAWA,6BAAA,CAAa;AAAA,OAC1B;AAAA,MACA,MAAM,KAAK,EAAE,MAAA,UAAQC,UAAQ,UAAA,EAAY,KAAA,EAAO,QAAA,EAAU,SAAA,EAAU,EAAG;AACrE,QAAA,MAAM,aAAA,GAAgBC,yBAAkBD,QAAM,CAAA;AAE9C,QAAA,IAAI,aAAA,CAAc,SAAA,CAAU,MAAA,KAAW,CAAA,EAAG;AACxC,UAAA,MAAA,CAAO,IAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AAEA,QAAA,MAAM,QACJ,aAAA,CAAc,KAAA,KAAU,aACpB,MAAME,yCAAA,CAAqB,OAAO,EAAE,QAAA,EAAU,CAAA,GAC9C,IAAIC,mCAAA,CAAkB,EAAE,OAAO,GAAA,EAAK,aAAA,CAAc,UAAU,CAAA;AAElE,QAAA,MAAM,SAAA,GAA+B,cAAc,SAAA,CAAU,GAAA;AAAA,UAC3D,CAAA,QAAA,MAAa;AAAA,YACX,MAAA,EAAQ,QAAA;AAAA,YACR,MAAA,EAAQ,IAAIC,4CAAA,CAAkB,EAAE,UAAU;AAAA,WAC5C;AAAA,SACF;AAEA,QAAA,MAAM,cAAA,GAAiB,IAAIC,oCAAA,CAAsB;AAAA,UAC/C,SAAA;AAAA,UACA,KAAA;AAAA,UACA,MAAA;AAAA,UACA,eAAe,aAAA,CAAc,aAAA;AAAA,UAC7B,KAAA;AAAA,UACA,mBAAmB,aAAA,CAAc;AAAA,SAClC,CAAA;AAED,QAAA,UAAA,CAAW,GAAA;AAAA,UACT,MAAMC,mBAAA,CAAa;AAAA,YACjB,cAAA;AAAA,YACA,sBAAsB,aAAA,CAAc,oBAAA;AAAA,YACpC,mBAAmB,aAAA,CAAc;AAAA,WAClC;AAAA,SACH;AACA,QAAA,UAAA,CAAW,cAAc,EAAE,IAAA,EAAM,SAAA,EAAW,KAAA,EAAO,mBAAmB,CAAA;AAEtE,QAAA,IAAI,cAAc,QAAA,EAAU;AAC1B,UAAA,MAAM,UAAU,YAAA,CAAa;AAAA,YAC3B,EAAA,EAAI,iBAAA;AAAA,YACJ,GAAG,aAAA,CAAc,QAAA;AAAA,YACjB,IAAI,YAAY;AACd,cAAA,MAAM,eAAe,OAAA,EAAQ;AAAA,YAC/B;AAAA,WACD,CAAA;AACD,UAAA,MAAA,CAAO,KAAK,oCAAoC,CAAA;AAAA,QAClD;AAAA,MACF;AAAA,KACD,CAAA;AAAA,EACH;AACF,CAAC;;"}

package/dist/service/GrafanaService.cjs.js

@@ -1,6 +1,7 @@
 'use strict';
 
 var errors = require('@backstage/errors');
+var types = require('@backstage/types');
 var backstagePluginGrafanaNode = require('@marble-sh/backstage-plugin-grafana-node');
 
 class DefaultGrafanaService {
@@ -8,6 +9,8 @@ class DefaultGrafanaService {
   store;
   logger;
   fetchOnDemand;
+  cache;
+  panelCacheTtlMs;
   constructor(options) {
     this.instances = new Map(
       options.instances.map((instance) => [instance.config.name, instance])
@@ -15,6 +18,10 @@ class DefaultGrafanaService {
     this.store = options.store;
     this.logger = options.logger;
     this.fetchOnDemand = options.fetchOnDemand ?? true;
+    this.cache = options.cache;
+    this.panelCacheTtlMs = types.durationToMilliseconds(
+      options.panelDataCacheTtl ?? { seconds: 30 }
+    );
   }
   /** {@inheritDoc GrafanaService.getInstances} */
   getInstances() {
@@ -33,7 +40,8 @@ class DefaultGrafanaService {
       result.push(
         ...backstagePluginGrafanaNode.filterDashboards(snapshot.dashboards, {
           tags: options.tags,
-          query: options.query
+          query: options.query,
+          uid: options.uid
         })
       );
     }
@@ -70,6 +78,49 @@ class DefaultGrafanaService {
       }
     }
   }
+  /** {@inheritDoc GrafanaService.getPanels} */
+  async getPanels(options) {
+    const { client } = this.mustGet(options.instanceName);
+    if (!client.getPanels) {
+      throw new errors.NotFoundError(
+        `The Grafana client for instance '${options.instanceName}' does not support panel queries`
+      );
+    }
+    return this.withPanelCache(
+      `panels:v1:${options.instanceName}:${options.dashboardUid}`,
+      () => client.getPanels(options.dashboardUid)
+    );
+  }
+  /** {@inheritDoc GrafanaService.getPanelData} */
+  async getPanelData(options) {
+    const { client } = this.mustGet(options.instanceName);
+    if (!client.getPanelData) {
+      throw new errors.NotFoundError(
+        `The Grafana client for instance '${options.instanceName}' does not support panel queries`
+      );
+    }
+    const from = options.from ?? "now-6h";
+    const to = options.to ?? "now";
+    return this.withPanelCache(
+      `panel-data:v1:${options.instanceName}:${options.dashboardUid}:${options.panelId}:${from}:${to}`,
+      () => client.getPanelData(options.dashboardUid, options.panelId, {
+        from,
+        to
+      })
+    );
+  }
+  async withPanelCache(key, fn) {
+    if (!this.cache) {
+      return fn();
+    }
+    const cached = await this.cache.get(key);
+    if (cached !== void 0) {
+      return cached;
+    }
+    const value = await fn();
+    await this.cache.set(key, value, { ttl: this.panelCacheTtlMs });
+    return value;
+  }
   resolveNames(instanceName) {
     if (instanceName) {
       this.mustGet(instanceName);

package/dist/service/GrafanaService.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"GrafanaService.cjs.js","sources":["../../src/service/GrafanaService.ts"],"sourcesContent":["/*\n * Copyright 2026 Cassidy Marble\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { LoggerService } from '@backstage/backend-plugin-api';\nimport { NotFoundError } from '@backstage/errors';\nimport {\n  GrafanaAlert,\n  GrafanaDashboard,\n  GrafanaInstanceInfo,\n} from '@marble-sh/backstage-plugin-grafana-common';\nimport {\n  filterAlerts,\n  filterDashboards,\n  GrafanaClient,\n  GrafanaInstanceConfig,\n} from '@marble-sh/backstage-plugin-grafana-node';\nimport { GrafanaSnapshot, GrafanaStore } from '../store/GrafanaStore';\n\n/**\n * A configured instance together with the client used to read from it.\n *\n * @public\n */\nexport type GrafanaInstance = {\n  config: GrafanaInstanceConfig;\n  client: GrafanaClient;\n};\n\n/**\n * Options for reading dashboards through the service.\n *\n * @public\n */\nexport type GetDashboardsOptions = {\n  /** Restrict to a single instance. When omitted, all instances are queried. */\n  instanceName?: string;\n  /** Only return dashboards carrying all of these tags. */\n  tags?: string[];\n  /** Comma-separated title substrings; dashboards matching any are returned. */\n  query?: string;\n  /** Force a live fetch, bypassing the store. */\n  refresh?: boolean;\n};\n\n/**\n * Options for reading alerts through the service.\n *\n * @public\n */\nexport type GetAlertsOptions = {\n  /** Restrict to a single instance. When omitted, all instances are queried. */\n  instanceName?: string;\n  /** Only return alerts whose labels match all of these `key=value` pairs. */\n  labelSelector?: Record<string, string>;\n  /** Force a live fetch, bypassing the store. */\n  refresh?: boolean;\n};\n\n/**\n * Reads dashboards and alerts from the configured Grafana instances, backed by a\n * {@link GrafanaStore} for caching and periodic refresh.\n *\n * @public\n */\nexport interface GrafanaService {\n  /** Returns the configured Grafana instances. */\n  getInstances(): GrafanaInstanceInfo[];\n  /** Returns dashboards for one or all instances, honoring the store and filters. */\n  getDashboards(options: GetDashboardsOptions): Promise<GrafanaDashboard[]>;\n  /** Returns alerts for one or all instances, honoring the store and filters. */\n  getAlerts(options: GetAlertsOptions): Promise<GrafanaAlert[]>;\n  /** Refreshes a single instance, or all instances when no name is given. */\n  refresh(instanceName?: string): Promise<void>;\n}\n\n/**\n * The default {@link GrafanaService} implementation.\n *\n * @public\n */\nexport class DefaultGrafanaService implements GrafanaService {\n  private readonly instances: Map<string, GrafanaInstance>;\n  private readonly store: GrafanaStore;\n  private readonly logger: LoggerService;\n  private readonly fetchOnDemand: boolean;\n\n  constructor(options: {\n    instances: GrafanaInstance[];\n    store: GrafanaStore;\n    logger: LoggerService;\n    /**\n     * Whether a store miss triggers a live Grafana read (default `true`).\n     * When `false`, misses resolve to an empty snapshot and Grafana is only\n     * contacted by explicit {@link DefaultGrafanaService.refresh} calls (the\n     * schedule, the refresh endpoints, or a `refresh: true` read option).\n     */\n    fetchOnDemand?: boolean;\n  }) {\n    this.instances = new Map(\n      options.instances.map(instance => [instance.config.name, instance]),\n    );\n    this.store = options.store;\n    this.logger = options.logger;\n    this.fetchOnDemand = options.fetchOnDemand ?? true;\n  }\n\n  /** {@inheritDoc GrafanaService.getInstances} */\n  getInstances(): GrafanaInstanceInfo[] {\n    return [...this.instances.values()].map(({ config }) => ({\n      name: config.name,\n      title: config.title,\n      url: config.baseUrl,\n    }));\n  }\n\n  /** {@inheritDoc GrafanaService.getDashboards} */\n  async getDashboards(\n    options: GetDashboardsOptions,\n  ): Promise<GrafanaDashboard[]> {\n    const names = this.resolveNames(options.instanceName);\n    const result: GrafanaDashboard[] = [];\n    for (const name of names) {\n      const snapshot = await this.snapshotFor(name, options.refresh);\n      result.push(\n        ...filterDashboards(snapshot.dashboards, {\n          tags: options.tags,\n          query: options.query,\n        }),\n      );\n    }\n    return result;\n  }\n\n  /** {@inheritDoc GrafanaService.getAlerts} */\n  async getAlerts(options: GetAlertsOptions): Promise<GrafanaAlert[]> {\n    const names = this.resolveNames(options.instanceName);\n    const result: GrafanaAlert[] = [];\n    for (const name of names) {\n      const snapshot = await this.snapshotFor(name, options.refresh);\n      result.push(\n        ...filterAlerts(snapshot.alerts, {\n          labelSelector: options.labelSelector,\n        }),\n      );\n    }\n    return result;\n  }\n\n  /** {@inheritDoc GrafanaService.refresh} */\n  async refresh(instanceName?: string): Promise<void> {\n    if (instanceName) {\n      await this.refreshInstance(instanceName);\n      return;\n    }\n    for (const name of this.instances.keys()) {\n      try {\n        await this.refreshInstance(name);\n      } catch (error) {\n        this.logger.warn(\n          `Failed to refresh Grafana instance '${name}'`,\n          error as Error,\n        );\n      }\n    }\n  }\n\n  private resolveNames(instanceName?: string): string[] {\n    if (instanceName) {\n      this.mustGet(instanceName);\n      return [instanceName];\n    }\n    return [...this.instances.keys()];\n  }\n\n  private mustGet(instanceName: string): GrafanaInstance {\n    const instance = this.instances.get(instanceName);\n    if (!instance) {\n      throw new NotFoundError(\n        `No Grafana instance configured with name '${instanceName}'`,\n      );\n    }\n    return instance;\n  }\n\n  private async snapshotFor(\n    instanceName: string,\n    refresh?: boolean,\n  ): Promise<Pick<GrafanaSnapshot, 'dashboards' | 'alerts'>> {\n    if (!refresh) {\n      const cached = await this.store.get(instanceName);\n      if (cached) {\n        return cached;\n      }\n      if (!this.fetchOnDemand) {\n        // Serve the miss as empty rather than reaching for Grafana; nothing\n        // is stored, so results fill in as soon as a refresh runs.\n        return { dashboards: [], alerts: [] };\n      }\n    }\n    return this.refreshInstance(instanceName);\n  }\n\n  private async refreshInstance(\n    instanceName: string,\n  ): Promise<GrafanaSnapshot> {\n    const { client } = this.mustGet(instanceName);\n    const [dashboards, alerts] = await Promise.all([\n      client.listDashboards(),\n      client.listAlerts(),\n    ]);\n    const snapshot: GrafanaSnapshot = {\n      dashboards,\n      alerts,\n      fetchedAt: new Date().toISOString(),\n    };\n    await this.store.set(instanceName, snapshot);\n    this.logger.debug(\n      `Refreshed Grafana instance '${instanceName}': ${dashboards.length} dashboards, ${alerts.length} alerts`,\n    );\n    return snapshot;\n  }\n}\n"],"names":["filterDashboards","filterAlerts","NotFoundError"],"mappings":";;;;;AA6FO,MAAM,qBAAA,CAAgD;AAAA,EAC1C,SAAA;AAAA,EACA,KAAA;AAAA,EACA,MAAA;AAAA,EACA,aAAA;AAAA,EAEjB,YAAY,OAAA,EAWT;AACD,IAAA,IAAA,CAAK,YAAY,IAAI,GAAA;AAAA,MACnB,OAAA,CAAQ,UAAU,GAAA,CAAI,CAAA,QAAA,KAAY,CAAC,QAAA,CAAS,MAAA,CAAO,IAAA,EAAM,QAAQ,CAAC;AAAA,KACpE;AACA,IAAA,IAAA,CAAK,QAAQ,OAAA,CAAQ,KAAA;AACrB,IAAA,IAAA,CAAK,SAAS,OAAA,CAAQ,MAAA;AACtB,IAAA,IAAA,CAAK,aAAA,GAAgB,QAAQ,aAAA,IAAiB,IAAA;AAAA,EAChD;AAAA;AAAA,EAGA,YAAA,GAAsC;AACpC,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,SAAA,CAAU,MAAA,EAAQ,CAAA,CAAE,GAAA,CAAI,CAAC,EAAE,MAAA,EAAO,MAAO;AAAA,MACvD,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,KAAK,MAAA,CAAO;AAAA,KACd,CAAE,CAAA;AAAA,EACJ;AAAA;AAAA,EAGA,MAAM,cACJ,OAAA,EAC6B;AAC7B,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,YAAA,CAAa,OAAA,CAAQ,YAAY,CAAA;AACpD,IAAA,MAAM,SAA6B,EAAC;AACpC,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,MAAM,WAAW,MAAM,IAAA,CAAK,WAAA,CAAY,IAAA,EAAM,QAAQ,OAAO,CAAA;AAC7D,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,GAAGA,2CAAA,CAAiB,QAAA,CAAS,UAAA,EAAY;AAAA,UACvC,MAAM,OAAA,CAAQ,IAAA;AAAA,UACd,OAAO,OAAA,CAAQ;AAAA,SAChB;AAAA,OACH;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,UAAU,OAAA,EAAoD;AAClE,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,YAAA,CAAa,OAAA,CAAQ,YAAY,CAAA;AACpD,IAAA,MAAM,SAAyB,EAAC;AAChC,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,MAAM,WAAW,MAAM,IAAA,CAAK,WAAA,CAAY,IAAA,EAAM,QAAQ,OAAO,CAAA;AAC7D,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,GAAGC,uCAAA,CAAa,QAAA,CAAS,MAAA,EAAQ;AAAA,UAC/B,eAAe,OAAA,CAAQ;AAAA,SACxB;AAAA,OACH;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,QAAQ,YAAA,EAAsC;AAClD,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,MAAM,IAAA,CAAK,gBAAgB,YAAY,CAAA;AACvC,MAAA;AAAA,IACF;AACA,IAAA,KAAA,MAAW,IAAA,IAAQ,IAAA,CAAK,SAAA,CAAU,IAAA,EAAK,EAAG;AACxC,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,gBAAgB,IAAI,CAAA;AAAA,MACjC,SAAS,KAAA,EAAO;AACd,QAAA,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,UACV,uCAAuC,IAAI,CAAA,CAAA,CAAA;AAAA,UAC3C;AAAA,SACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,aAAa,YAAA,EAAiC;AACpD,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,IAAA,CAAK,QAAQ,YAAY,CAAA;AACzB,MAAA,OAAO,CAAC,YAAY,CAAA;AAAA,IACtB;AACA,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA;AAAA,EAClC;AAAA,EAEQ,QAAQ,YAAA,EAAuC;AACrD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,YAAY,CAAA;AAChD,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAIC,oBAAA;AAAA,QACR,6CAA6C,YAAY,CAAA,CAAA;AAAA,OAC3D;AAAA,IACF;AACA,IAAA,OAAO,QAAA;AAAA,EACT;AAAA,EAEA,MAAc,WAAA,CACZ,YAAA,EACA,OAAA,EACyD;AACzD,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,KAAA,CAAM,IAAI,YAAY,CAAA;AAChD,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,OAAO,MAAA;AAAA,MACT;AACA,MAAA,IAAI,CAAC,KAAK,aAAA,EAAe;AAGvB,QAAA,OAAO,EAAE,UAAA,EAAY,EAAC,EAAG,MAAA,EAAQ,EAAC,EAAE;AAAA,MACtC;AAAA,IACF;AACA,IAAA,OAAO,IAAA,CAAK,gBAAgB,YAAY,CAAA;AAAA,EAC1C;AAAA,EAEA,MAAc,gBACZ,YAAA,EAC0B;AAC1B,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,IAAA,CAAK,QAAQ,YAAY,CAAA;AAC5C,IAAA,MAAM,CAAC,UAAA,EAAY,MAAM,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,MAC7C,OAAO,cAAA,EAAe;AAAA,MACtB,OAAO,UAAA;AAAW,KACnB,CAAA;AACD,IAAA,MAAM,QAAA,GAA4B;AAAA,MAChC,UAAA;AAAA,MACA,MAAA;AAAA,MACA,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,KACpC;AACA,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,YAAA,EAAc,QAAQ,CAAA;AAC3C,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,MACV,+BAA+B,YAAY,CAAA,GAAA,EAAM,WAAW,MAAM,CAAA,aAAA,EAAgB,OAAO,MAAM,CAAA,OAAA;AAAA,KACjG;AACA,IAAA,OAAO,QAAA;AAAA,EACT;AACF;;"}
+{"version":3,"file":"GrafanaService.cjs.js","sources":["../../src/service/GrafanaService.ts"],"sourcesContent":["/*\n * Copyright 2026 Cassidy Marble\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { CacheService, LoggerService } from '@backstage/backend-plugin-api';\nimport { NotFoundError } from '@backstage/errors';\nimport { HumanDuration, durationToMilliseconds } from '@backstage/types';\nimport {\n  GrafanaAlert,\n  GrafanaDashboard,\n  GrafanaInstanceInfo,\n  GrafanaPanel,\n  GrafanaPanelData,\n} from '@marble-sh/backstage-plugin-grafana-common';\nimport {\n  filterAlerts,\n  filterDashboards,\n  GrafanaClient,\n  GrafanaInstanceConfig,\n} from '@marble-sh/backstage-plugin-grafana-node';\nimport { GrafanaSnapshot, GrafanaStore } from '../store/GrafanaStore';\n\n/**\n * A configured instance together with the client used to read from it.\n *\n * @public\n */\nexport type GrafanaInstance = {\n  config: GrafanaInstanceConfig;\n  client: GrafanaClient;\n};\n\n/**\n * Options for reading dashboards through the service.\n *\n * @public\n */\nexport type GetDashboardsOptions = {\n  /** Restrict to a single instance. When omitted, all instances are queried. */\n  instanceName?: string;\n  /** Only return dashboards carrying all of these tags. */\n  tags?: string[];\n  /** Comma-separated title substrings; dashboards matching any are returned. */\n  query?: string;\n  /** Only return the dashboard with exactly this uid (case-sensitive). */\n  uid?: string;\n  /** Force a live fetch, bypassing the store. */\n  refresh?: boolean;\n};\n\n/**\n * Options for reading alerts through the service.\n *\n * @public\n */\nexport type GetAlertsOptions = {\n  /** Restrict to a single instance. When omitted, all instances are queried. */\n  instanceName?: string;\n  /** Only return alerts whose labels match all of these `key=value` pairs. */\n  labelSelector?: Record<string, string>;\n  /** Force a live fetch, bypassing the store. */\n  refresh?: boolean;\n};\n\n/**\n * Options for listing the panels of a dashboard through the service.\n *\n * @public\n */\nexport type GetPanelsOptions = {\n  /** The instance to read from. */\n  instanceName: string;\n  /** The uid of the dashboard whose panels are listed. */\n  dashboardUid: string;\n};\n\n/**\n * Options for querying the data of a single panel through the service.\n *\n * @public\n */\nexport type GetPanelDataOptions = {\n  /** The instance to read from. */\n  instanceName: string;\n  /** The uid of the dashboard containing the panel. */\n  dashboardUid: string;\n  /** The id of the panel to query. */\n  panelId: number;\n  /** Range start: `now`, `now-<n><s|m|h|d|w>`, or epoch ms. Defaults to `now-6h`. */\n  from?: string;\n  /** Range end, same forms as `from`. Defaults to `now`. */\n  to?: string;\n};\n\n/**\n * Reads dashboards and alerts from the configured Grafana instances, backed by a\n * {@link GrafanaStore} for caching and periodic refresh.\n *\n * The panel methods are optional so that custom implementations that predate\n * them stay valid; the router responds 404 when they are absent.\n *\n * @public\n */\nexport interface GrafanaService {\n  /** Returns the configured Grafana instances. */\n  getInstances(): GrafanaInstanceInfo[];\n  /** Returns dashboards for one or all instances, honoring the store and filters. */\n  getDashboards(options: GetDashboardsOptions): Promise<GrafanaDashboard[]>;\n  /** Returns alerts for one or all instances, honoring the store and filters. */\n  getAlerts(options: GetAlertsOptions): Promise<GrafanaAlert[]>;\n  /** Refreshes a single instance, or all instances when no name is given. */\n  refresh(instanceName?: string): Promise<void>;\n  /** Returns the panels of a single dashboard, live from Grafana. */\n  getPanels?(options: GetPanelsOptions): Promise<GrafanaPanel[]>;\n  /** Returns the queried data of a single panel, live from Grafana. */\n  getPanelData?(options: GetPanelDataOptions): Promise<GrafanaPanelData>;\n}\n\n/**\n * The default {@link GrafanaService} implementation.\n *\n * @public\n */\nexport class DefaultGrafanaService implements GrafanaService {\n  private readonly instances: Map<string, GrafanaInstance>;\n  private readonly store: GrafanaStore;\n  private readonly logger: LoggerService;\n  private readonly fetchOnDemand: boolean;\n  private readonly cache?: CacheService;\n  private readonly panelCacheTtlMs: number;\n\n  constructor(options: {\n    instances: GrafanaInstance[];\n    store: GrafanaStore;\n    logger: LoggerService;\n    /**\n     * Whether a store miss triggers a live Grafana read (default `true`).\n     * When `false`, misses resolve to an empty snapshot and Grafana is only\n     * contacted by explicit {@link DefaultGrafanaService.refresh} calls (the\n     * schedule, the refresh endpoints, or a `refresh: true` read option).\n     */\n    fetchOnDemand?: boolean;\n    /**\n     * When given, panel listings and panel data are cached here for\n     * `panelDataCacheTtl` to absorb bursts (a dashboard opening queries every\n     * panel at once). Without it, every panel request reads live.\n     */\n    cache?: CacheService;\n    /** Time-to-live for cached panel data (default 30 seconds). */\n    panelDataCacheTtl?: HumanDuration;\n  }) {\n    this.instances = new Map(\n      options.instances.map(instance => [instance.config.name, instance]),\n    );\n    this.store = options.store;\n    this.logger = options.logger;\n    this.fetchOnDemand = options.fetchOnDemand ?? true;\n    this.cache = options.cache;\n    this.panelCacheTtlMs = durationToMilliseconds(\n      options.panelDataCacheTtl ?? { seconds: 30 },\n    );\n  }\n\n  /** {@inheritDoc GrafanaService.getInstances} */\n  getInstances(): GrafanaInstanceInfo[] {\n    return [...this.instances.values()].map(({ config }) => ({\n      name: config.name,\n      title: config.title,\n      url: config.baseUrl,\n    }));\n  }\n\n  /** {@inheritDoc GrafanaService.getDashboards} */\n  async getDashboards(\n    options: GetDashboardsOptions,\n  ): Promise<GrafanaDashboard[]> {\n    const names = this.resolveNames(options.instanceName);\n    const result: GrafanaDashboard[] = [];\n    for (const name of names) {\n      const snapshot = await this.snapshotFor(name, options.refresh);\n      result.push(\n        ...filterDashboards(snapshot.dashboards, {\n          tags: options.tags,\n          query: options.query,\n          uid: options.uid,\n        }),\n      );\n    }\n    return result;\n  }\n\n  /** {@inheritDoc GrafanaService.getAlerts} */\n  async getAlerts(options: GetAlertsOptions): Promise<GrafanaAlert[]> {\n    const names = this.resolveNames(options.instanceName);\n    const result: GrafanaAlert[] = [];\n    for (const name of names) {\n      const snapshot = await this.snapshotFor(name, options.refresh);\n      result.push(\n        ...filterAlerts(snapshot.alerts, {\n          labelSelector: options.labelSelector,\n        }),\n      );\n    }\n    return result;\n  }\n\n  /** {@inheritDoc GrafanaService.refresh} */\n  async refresh(instanceName?: string): Promise<void> {\n    if (instanceName) {\n      await this.refreshInstance(instanceName);\n      return;\n    }\n    for (const name of this.instances.keys()) {\n      try {\n        await this.refreshInstance(name);\n      } catch (error) {\n        this.logger.warn(\n          `Failed to refresh Grafana instance '${name}'`,\n          error as Error,\n        );\n      }\n    }\n  }\n\n  /** {@inheritDoc GrafanaService.getPanels} */\n  async getPanels(options: GetPanelsOptions): Promise<GrafanaPanel[]> {\n    const { client } = this.mustGet(options.instanceName);\n    if (!client.getPanels) {\n      throw new NotFoundError(\n        `The Grafana client for instance '${options.instanceName}' does not support panel queries`,\n      );\n    }\n    return this.withPanelCache(\n      `panels:v1:${options.instanceName}:${options.dashboardUid}`,\n      () => client.getPanels!(options.dashboardUid),\n    );\n  }\n\n  /** {@inheritDoc GrafanaService.getPanelData} */\n  async getPanelData(options: GetPanelDataOptions): Promise<GrafanaPanelData> {\n    const { client } = this.mustGet(options.instanceName);\n    if (!client.getPanelData) {\n      throw new NotFoundError(\n        `The Grafana client for instance '${options.instanceName}' does not support panel queries`,\n      );\n    }\n    const from = options.from ?? 'now-6h';\n    const to = options.to ?? 'now';\n    return this.withPanelCache(\n      `panel-data:v1:${options.instanceName}:${options.dashboardUid}:${options.panelId}:${from}:${to}`,\n      () =>\n        client.getPanelData!(options.dashboardUid, options.panelId, {\n          from,\n          to,\n        }),\n    );\n  }\n\n  private async withPanelCache<T>(\n    key: string,\n    fn: () => Promise<T>,\n  ): Promise<T> {\n    if (!this.cache) {\n      return fn();\n    }\n    const cached = await this.cache.get(key);\n    if (cached !== undefined) {\n      return cached as T;\n    }\n    const value = await fn();\n    await this.cache.set(key, value as never, { ttl: this.panelCacheTtlMs });\n    return value;\n  }\n\n  private resolveNames(instanceName?: string): string[] {\n    if (instanceName) {\n      this.mustGet(instanceName);\n      return [instanceName];\n    }\n    return [...this.instances.keys()];\n  }\n\n  private mustGet(instanceName: string): GrafanaInstance {\n    const instance = this.instances.get(instanceName);\n    if (!instance) {\n      throw new NotFoundError(\n        `No Grafana instance configured with name '${instanceName}'`,\n      );\n    }\n    return instance;\n  }\n\n  private async snapshotFor(\n    instanceName: string,\n    refresh?: boolean,\n  ): Promise<Pick<GrafanaSnapshot, 'dashboards' | 'alerts'>> {\n    if (!refresh) {\n      const cached = await this.store.get(instanceName);\n      if (cached) {\n        return cached;\n      }\n      if (!this.fetchOnDemand) {\n        // Serve the miss as empty rather than reaching for Grafana; nothing\n        // is stored, so results fill in as soon as a refresh runs.\n        return { dashboards: [], alerts: [] };\n      }\n    }\n    return this.refreshInstance(instanceName);\n  }\n\n  private async refreshInstance(\n    instanceName: string,\n  ): Promise<GrafanaSnapshot> {\n    const { client } = this.mustGet(instanceName);\n    const [dashboards, alerts] = await Promise.all([\n      client.listDashboards(),\n      client.listAlerts(),\n    ]);\n    const snapshot: GrafanaSnapshot = {\n      dashboards,\n      alerts,\n      fetchedAt: new Date().toISOString(),\n    };\n    await this.store.set(instanceName, snapshot);\n    this.logger.debug(\n      `Refreshed Grafana instance '${instanceName}': ${dashboards.length} dashboards, ${alerts.length} alerts`,\n    );\n    return snapshot;\n  }\n}\n"],"names":["durationToMilliseconds","filterDashboards","filterAlerts","NotFoundError"],"mappings":";;;;;;AAuIO,MAAM,qBAAA,CAAgD;AAAA,EAC1C,SAAA;AAAA,EACA,KAAA;AAAA,EACA,MAAA;AAAA,EACA,aAAA;AAAA,EACA,KAAA;AAAA,EACA,eAAA;AAAA,EAEjB,YAAY,OAAA,EAmBT;AACD,IAAA,IAAA,CAAK,YAAY,IAAI,GAAA;AAAA,MACnB,OAAA,CAAQ,UAAU,GAAA,CAAI,CAAA,QAAA,KAAY,CAAC,QAAA,CAAS,MAAA,CAAO,IAAA,EAAM,QAAQ,CAAC;AAAA,KACpE;AACA,IAAA,IAAA,CAAK,QAAQ,OAAA,CAAQ,KAAA;AACrB,IAAA,IAAA,CAAK,SAAS,OAAA,CAAQ,MAAA;AACtB,IAAA,IAAA,CAAK,aAAA,GAAgB,QAAQ,aAAA,IAAiB,IAAA;AAC9C,IAAA,IAAA,CAAK,QAAQ,OAAA,CAAQ,KAAA;AACrB,IAAA,IAAA,CAAK,eAAA,GAAkBA,4BAAA;AAAA,MACrB,OAAA,CAAQ,iBAAA,IAAqB,EAAE,OAAA,EAAS,EAAA;AAAG,KAC7C;AAAA,EACF;AAAA;AAAA,EAGA,YAAA,GAAsC;AACpC,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,SAAA,CAAU,MAAA,EAAQ,CAAA,CAAE,GAAA,CAAI,CAAC,EAAE,MAAA,EAAO,MAAO;AAAA,MACvD,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,KAAK,MAAA,CAAO;AAAA,KACd,CAAE,CAAA;AAAA,EACJ;AAAA;AAAA,EAGA,MAAM,cACJ,OAAA,EAC6B;AAC7B,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,YAAA,CAAa,OAAA,CAAQ,YAAY,CAAA;AACpD,IAAA,MAAM,SAA6B,EAAC;AACpC,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,MAAM,WAAW,MAAM,IAAA,CAAK,WAAA,CAAY,IAAA,EAAM,QAAQ,OAAO,CAAA;AAC7D,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,GAAGC,2CAAA,CAAiB,QAAA,CAAS,UAAA,EAAY;AAAA,UACvC,MAAM,OAAA,CAAQ,IAAA;AAAA,UACd,OAAO,OAAA,CAAQ,KAAA;AAAA,UACf,KAAK,OAAA,CAAQ;AAAA,SACd;AAAA,OACH;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,UAAU,OAAA,EAAoD;AAClE,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,YAAA,CAAa,OAAA,CAAQ,YAAY,CAAA;AACpD,IAAA,MAAM,SAAyB,EAAC;AAChC,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,MAAM,WAAW,MAAM,IAAA,CAAK,WAAA,CAAY,IAAA,EAAM,QAAQ,OAAO,CAAA;AAC7D,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,GAAGC,uCAAA,CAAa,QAAA,CAAS,MAAA,EAAQ;AAAA,UAC/B,eAAe,OAAA,CAAQ;AAAA,SACxB;AAAA,OACH;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,QAAQ,YAAA,EAAsC;AAClD,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,MAAM,IAAA,CAAK,gBAAgB,YAAY,CAAA;AACvC,MAAA;AAAA,IACF;AACA,IAAA,KAAA,MAAW,IAAA,IAAQ,IAAA,CAAK,SAAA,CAAU,IAAA,EAAK,EAAG;AACxC,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,gBAAgB,IAAI,CAAA;AAAA,MACjC,SAAS,KAAA,EAAO;AACd,QAAA,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,UACV,uCAAuC,IAAI,CAAA,CAAA,CAAA;AAAA,UAC3C;AAAA,SACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,UAAU,OAAA,EAAoD;AAClE,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,IAAA,CAAK,OAAA,CAAQ,QAAQ,YAAY,CAAA;AACpD,IAAA,IAAI,CAAC,OAAO,SAAA,EAAW;AACrB,MAAA,MAAM,IAAIC,oBAAA;AAAA,QACR,CAAA,iCAAA,EAAoC,QAAQ,YAAY,CAAA,gCAAA;AAAA,OAC1D;AAAA,IACF;AACA,IAAA,OAAO,IAAA,CAAK,cAAA;AAAA,MACV,CAAA,UAAA,EAAa,OAAA,CAAQ,YAAY,CAAA,CAAA,EAAI,QAAQ,YAAY,CAAA,CAAA;AAAA,MACzD,MAAM,MAAA,CAAO,SAAA,CAAW,OAAA,CAAQ,YAAY;AAAA,KAC9C;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,aAAa,OAAA,EAAyD;AAC1E,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,IAAA,CAAK,OAAA,CAAQ,QAAQ,YAAY,CAAA;AACpD,IAAA,IAAI,CAAC,OAAO,YAAA,EAAc;AACxB,MAAA,MAAM,IAAIA,oBAAA;AAAA,QACR,CAAA,iCAAA,EAAoC,QAAQ,YAAY,CAAA,gCAAA;AAAA,OAC1D;AAAA,IACF;AACA,IAAA,MAAM,IAAA,GAAO,QAAQ,IAAA,IAAQ,QAAA;AAC7B,IAAA,MAAM,EAAA,GAAK,QAAQ,EAAA,IAAM,KAAA;AACzB,IAAA,OAAO,IAAA,CAAK,cAAA;AAAA,MACV,CAAA,cAAA,EAAiB,OAAA,CAAQ,YAAY,CAAA,CAAA,EAAI,OAAA,CAAQ,YAAY,CAAA,CAAA,EAAI,OAAA,CAAQ,OAAO,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AAAA,MAC9F,MACE,MAAA,CAAO,YAAA,CAAc,OAAA,CAAQ,YAAA,EAAc,QAAQ,OAAA,EAAS;AAAA,QAC1D,IAAA;AAAA,QACA;AAAA,OACD;AAAA,KACL;AAAA,EACF;AAAA,EAEA,MAAc,cAAA,CACZ,GAAA,EACA,EAAA,EACY;AACZ,IAAA,IAAI,CAAC,KAAK,KAAA,EAAO;AACf,MAAA,OAAO,EAAA,EAAG;AAAA,IACZ;AACA,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,KAAA,CAAM,IAAI,GAAG,CAAA;AACvC,IAAA,IAAI,WAAW,MAAA,EAAW;AACxB,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,MAAM,KAAA,GAAQ,MAAM,EAAA,EAAG;AACvB,IAAA,MAAM,IAAA,CAAK,MAAM,GAAA,CAAI,GAAA,EAAK,OAAgB,EAAE,GAAA,EAAK,IAAA,CAAK,eAAA,EAAiB,CAAA;AACvE,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEQ,aAAa,YAAA,EAAiC;AACpD,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,IAAA,CAAK,QAAQ,YAAY,CAAA;AACzB,MAAA,OAAO,CAAC,YAAY,CAAA;AAAA,IACtB;AACA,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA;AAAA,EAClC;AAAA,EAEQ,QAAQ,YAAA,EAAuC;AACrD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,YAAY,CAAA;AAChD,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAIA,oBAAA;AAAA,QACR,6CAA6C,YAAY,CAAA,CAAA;AAAA,OAC3D;AAAA,IACF;AACA,IAAA,OAAO,QAAA;AAAA,EACT;AAAA,EAEA,MAAc,WAAA,CACZ,YAAA,EACA,OAAA,EACyD;AACzD,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,KAAA,CAAM,IAAI,YAAY,CAAA;AAChD,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,OAAO,MAAA;AAAA,MACT;AACA,MAAA,IAAI,CAAC,KAAK,aAAA,EAAe;AAGvB,QAAA,OAAO,EAAE,UAAA,EAAY,EAAC,EAAG,MAAA,EAAQ,EAAC,EAAE;AAAA,MACtC;AAAA,IACF;AACA,IAAA,OAAO,IAAA,CAAK,gBAAgB,YAAY,CAAA;AAAA,EAC1C;AAAA,EAEA,MAAc,gBACZ,YAAA,EAC0B;AAC1B,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,IAAA,CAAK,QAAQ,YAAY,CAAA;AAC5C,IAAA,MAAM,CAAC,UAAA,EAAY,MAAM,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,MAC7C,OAAO,cAAA,EAAe;AAAA,MACtB,OAAO,UAAA;AAAW,KACnB,CAAA;AACD,IAAA,MAAM,QAAA,GAA4B;AAAA,MAChC,UAAA;AAAA,MACA,MAAA;AAAA,MACA,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,KACpC;AACA,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,YAAA,EAAc,QAAQ,CAAA;AAC3C,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,MACV,+BAA+B,YAAY,CAAA,GAAA,EAAM,WAAW,MAAM,CAAA,aAAA,EAAgB,OAAO,MAAM,CAAA,OAAA;AAAA,KACjG;AACA,IAAA,OAAO,QAAA;AAAA,EACT;AACF;;"}

package/dist/service/router.cjs.js

@@ -21,6 +21,7 @@ const toBoolean = (value) => value !== void 0 && ["true", "1", ""].includes(Stri
 async function createRouter(options) {
   const { grafanaService } = options;
   const allowOnDemandRefresh = options.allowOnDemandRefresh ?? true;
+  const allowPanelQueries = options.allowPanelQueries ?? true;
   const router = Router__default.default();
   router.use(express__default.default.json());
   const toRefresh = (value) => allowOnDemandRefresh && toBoolean(value);
@@ -31,6 +32,13 @@ async function createRouter(options) {
       );
     }
   };
+  const assertPanelQueriesAllowed = () => {
+    if (!allowPanelQueries) {
+      throw new errors.NotAllowedError(
+        "Panel queries are disabled by configuration (grafana.allowPanelQueries)"
+      );
+    }
+  };
   router.get("/health", (_req, res) => {
     res.json({ status: "ok" });
   });
@@ -42,6 +50,7 @@ async function createRouter(options) {
       instanceName: req.params.name,
       tags: toArray(req.query.tag),
       query: toString(req.query.query),
+      uid: toString(req.query.uid),
       refresh: toRefresh(req.query.refresh)
     });
     res.json({ items });
@@ -54,6 +63,43 @@ async function createRouter(options) {
     });
     res.json({ items });
   });
+  router.get("/instances/:name/dashboards/:uid/panels", async (req, res) => {
+    assertPanelQueriesAllowed();
+    if (!grafanaService.getPanels) {
+      throw new errors.NotFoundError(
+        "Panel queries are not supported by the configured Grafana service"
+      );
+    }
+    const items = await grafanaService.getPanels({
+      instanceName: req.params.name,
+      dashboardUid: req.params.uid
+    });
+    res.json({ items });
+  });
+  router.get(
+    "/instances/:name/dashboards/:uid/panels/:panelId/data",
+    async (req, res) => {
+      assertPanelQueriesAllowed();
+      if (!grafanaService.getPanelData) {
+        throw new errors.NotFoundError(
+          "Panel queries are not supported by the configured Grafana service"
+        );
+      }
+      if (!/^\d+$/.test(req.params.panelId)) {
+        throw new errors.InputError(
+          `Invalid panel id '${req.params.panelId}', expected an integer`
+        );
+      }
+      const data = await grafanaService.getPanelData({
+        instanceName: req.params.name,
+        dashboardUid: req.params.uid,
+        panelId: Number(req.params.panelId),
+        from: toString(req.query.from),
+        to: toString(req.query.to)
+      });
+      res.json(data);
+    }
+  );
   router.post("/instances/:name/refresh", async (req, res) => {
     assertRefreshAllowed();
     await grafanaService.refresh(req.params.name);
@@ -64,6 +110,7 @@ async function createRouter(options) {
       instanceName: toString(req.query.instance),
       tags: toArray(req.query.tag),
       query: toString(req.query.query),
+      uid: toString(req.query.uid),
       refresh: toRefresh(req.query.refresh)
     });
     res.json({ items });

package/dist/service/router.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"router.cjs.js","sources":["../../src/service/router.ts"],"sourcesContent":["/*\n * Copyright 2026 Cassidy Marble\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport express from 'express';\nimport Router from 'express-promise-router';\nimport { NotAllowedError } from '@backstage/errors';\nimport { parseLabelSelector } from '@marble-sh/backstage-plugin-grafana-node';\nimport { GrafanaService } from './GrafanaService';\n\nconst toArray = (value: unknown): string[] | undefined => {\n  if (value === undefined) {\n    return undefined;\n  }\n  return Array.isArray(value) ? value.map(String) : [String(value)];\n};\n\nconst toString = (value: unknown): string | undefined =>\n  value === undefined ? undefined : String(value);\n\n// Accepts ?refresh=true, ?refresh=1, and the bare ?refresh flag.\nconst toBoolean = (value: unknown): boolean =>\n  value !== undefined && ['true', '1', ''].includes(String(value));\n\n/**\n * Creates the Express router that exposes the read-only Grafana REST API.\n *\n * All routes are relative to the plugin base path (`/api/grafana`).\n *\n * @public\n */\nexport async function createRouter(options: {\n  grafanaService: GrafanaService;\n  /**\n   * Whether callers may force live Grafana reads (default `true`). When\n   * `false`, `refresh` query parameters are ignored and the `POST …/refresh`\n   * routes respond 403.\n   */\n  allowOnDemandRefresh?: boolean;\n}): Promise<express.Router> {\n  const { grafanaService } = options;\n  const allowOnDemandRefresh = options.allowOnDemandRefresh ?? true;\n  const router = Router();\n  router.use(express.json());\n\n  const toRefresh = (value: unknown): boolean =>\n    allowOnDemandRefresh && toBoolean(value);\n\n  const assertRefreshAllowed = () => {\n    if (!allowOnDemandRefresh) {\n      throw new NotAllowedError(\n        'On-demand refresh is disabled by configuration (grafana.allowOnDemandRefresh)',\n      );\n    }\n  };\n\n  router.get('/health', (_req, res) => {\n    res.json({ status: 'ok' });\n  });\n\n  router.get('/instances', (_req, res) => {\n    res.json({ items: grafanaService.getInstances() });\n  });\n\n  router.get('/instances/:name/dashboards', async (req, res) => {\n    const items = await grafanaService.getDashboards({\n      instanceName: req.params.name,\n      tags: toArray(req.query.tag),\n      query: toString(req.query.query),\n      refresh: toRefresh(req.query.refresh),\n    });\n    res.json({ items });\n  });\n\n  router.get('/instances/:name/alerts', async (req, res) => {\n    const items = await grafanaService.getAlerts({\n      instanceName: req.params.name,\n      labelSelector: parseLabelSelector(toString(req.query.labelSelector)),\n      refresh: toRefresh(req.query.refresh),\n    });\n    res.json({ items });\n  });\n\n  router.post('/instances/:name/refresh', async (req, res) => {\n    assertRefreshAllowed();\n    await grafanaService.refresh(req.params.name);\n    res.json({ status: 'ok' });\n  });\n\n  router.get('/dashboards', async (req, res) => {\n    const items = await grafanaService.getDashboards({\n      instanceName: toString(req.query.instance),\n      tags: toArray(req.query.tag),\n      query: toString(req.query.query),\n      refresh: toRefresh(req.query.refresh),\n    });\n    res.json({ items });\n  });\n\n  router.get('/alerts', async (req, res) => {\n    const items = await grafanaService.getAlerts({\n      instanceName: toString(req.query.instance),\n      labelSelector: parseLabelSelector(toString(req.query.labelSelector)),\n      refresh: toRefresh(req.query.refresh),\n    });\n    res.json({ items });\n  });\n\n  router.post('/refresh', async (_req, res) => {\n    assertRefreshAllowed();\n    await grafanaService.refresh();\n    res.json({ status: 'ok' });\n  });\n\n  return router;\n}\n"],"names":["Router","express","NotAllowedError","parseLabelSelector"],"mappings":";;;;;;;;;;;;AAsBA,MAAM,OAAA,GAAU,CAAC,KAAA,KAAyC;AACxD,EAAA,IAAI,UAAU,MAAA,EAAW;AACvB,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,GAAA,CAAI,MAAM,CAAA,GAAI,CAAC,MAAA,CAAO,KAAK,CAAC,CAAA;AAClE,CAAA;AAEA,MAAM,WAAW,CAAC,KAAA,KAChB,UAAU,MAAA,GAAY,MAAA,GAAY,OAAO,KAAK,CAAA;AAGhD,MAAM,SAAA,GAAY,CAAC,KAAA,KACjB,KAAA,KAAU,MAAA,IAAa,CAAC,MAAA,EAAQ,GAAA,EAAK,EAAE,CAAA,CAAE,QAAA,CAAS,MAAA,CAAO,KAAK,CAAC,CAAA;AASjE,eAAsB,aAAa,OAAA,EAQP;AAC1B,EAAA,MAAM,EAAE,gBAAe,GAAI,OAAA;AAC3B,EAAA,MAAM,oBAAA,GAAuB,QAAQ,oBAAA,IAAwB,IAAA;AAC7D,EAAA,MAAM,SAASA,uBAAA,EAAO;AACtB,EAAA,MAAA,CAAO,GAAA,CAAIC,wBAAA,CAAQ,IAAA,EAAM,CAAA;AAEzB,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KACjB,oBAAA,IAAwB,UAAU,KAAK,CAAA;AAEzC,EAAA,MAAM,uBAAuB,MAAM;AACjC,IAAA,IAAI,CAAC,oBAAA,EAAsB;AACzB,MAAA,MAAM,IAAIC,sBAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AAAA,EACF,CAAA;AAEA,EAAA,MAAA,CAAO,GAAA,CAAI,SAAA,EAAW,CAAC,IAAA,EAAM,GAAA,KAAQ;AACnC,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,MAAA,EAAQ,IAAA,EAAM,CAAA;AAAA,EAC3B,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA,CAAI,YAAA,EAAc,CAAC,IAAA,EAAM,GAAA,KAAQ;AACtC,IAAA,GAAA,CAAI,KAAK,EAAE,KAAA,EAAO,cAAA,CAAe,YAAA,IAAgB,CAAA;AAAA,EACnD,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA,CAAI,6BAAA,EAA+B,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC5D,IAAA,MAAM,KAAA,GAAQ,MAAM,cAAA,CAAe,aAAA,CAAc;AAAA,MAC/C,YAAA,EAAc,IAAI,MAAA,CAAO,IAAA;AAAA,MACzB,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA;AAAA,MAC3B,KAAA,EAAO,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,KAAK,CAAA;AAAA,MAC/B,OAAA,EAAS,SAAA,CAAU,GAAA,CAAI,KAAA,CAAM,OAAO;AAAA,KACrC,CAAA;AACD,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA;AAAA,EACpB,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA,CAAI,yBAAA,EAA2B,OAAO,GAAA,EAAK,GAAA,KAAQ;AACxD,IAAA,MAAM,KAAA,GAAQ,MAAM,cAAA,CAAe,SAAA,CAAU;AAAA,MAC3C,YAAA,EAAc,IAAI,MAAA,CAAO,IAAA;AAAA,MACzB,eAAeC,6CAAA,CAAmB,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,aAAa,CAAC,CAAA;AAAA,MACnE,OAAA,EAAS,SAAA,CAAU,GAAA,CAAI,KAAA,CAAM,OAAO;AAAA,KACrC,CAAA;AACD,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA;AAAA,EACpB,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,IAAA,CAAK,0BAAA,EAA4B,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC1D,IAAA,oBAAA,EAAqB;AACrB,IAAA,MAAM,cAAA,CAAe,OAAA,CAAQ,GAAA,CAAI,MAAA,CAAO,IAAI,CAAA;AAC5C,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,MAAA,EAAQ,IAAA,EAAM,CAAA;AAAA,EAC3B,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA,CAAI,aAAA,EAAe,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC5C,IAAA,MAAM,KAAA,GAAQ,MAAM,cAAA,CAAe,aAAA,CAAc;AAAA,MAC/C,YAAA,EAAc,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,QAAQ,CAAA;AAAA,MACzC,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA;AAAA,MAC3B,KAAA,EAAO,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,KAAK,CAAA;AAAA,MAC/B,OAAA,EAAS,SAAA,CAAU,GAAA,CAAI,KAAA,CAAM,OAAO;AAAA,KACrC,CAAA;AACD,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA;AAAA,EACpB,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA,CAAI,SAAA,EAAW,OAAO,GAAA,EAAK,GAAA,KAAQ;AACxC,IAAA,MAAM,KAAA,GAAQ,MAAM,cAAA,CAAe,SAAA,CAAU;AAAA,MAC3C,YAAA,EAAc,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,QAAQ,CAAA;AAAA,MACzC,eAAeA,6CAAA,CAAmB,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,aAAa,CAAC,CAAA;AAAA,MACnE,OAAA,EAAS,SAAA,CAAU,GAAA,CAAI,KAAA,CAAM,OAAO;AAAA,KACrC,CAAA;AACD,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA;AAAA,EACpB,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,IAAA,CAAK,UAAA,EAAY,OAAO,IAAA,EAAM,GAAA,KAAQ;AAC3C,IAAA,oBAAA,EAAqB;AACrB,IAAA,MAAM,eAAe,OAAA,EAAQ;AAC7B,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,MAAA,EAAQ,IAAA,EAAM,CAAA;AAAA,EAC3B,CAAC,CAAA;AAED,EAAA,OAAO,MAAA;AACT;;"}
+{"version":3,"file":"router.cjs.js","sources":["../../src/service/router.ts"],"sourcesContent":["/*\n * Copyright 2026 Cassidy Marble\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport express from 'express';\nimport Router from 'express-promise-router';\nimport { InputError, NotAllowedError, NotFoundError } from '@backstage/errors';\nimport { parseLabelSelector } from '@marble-sh/backstage-plugin-grafana-node';\nimport { GrafanaService } from './GrafanaService';\n\nconst toArray = (value: unknown): string[] | undefined => {\n  if (value === undefined) {\n    return undefined;\n  }\n  return Array.isArray(value) ? value.map(String) : [String(value)];\n};\n\nconst toString = (value: unknown): string | undefined =>\n  value === undefined ? undefined : String(value);\n\n// Accepts ?refresh=true, ?refresh=1, and the bare ?refresh flag.\nconst toBoolean = (value: unknown): boolean =>\n  value !== undefined && ['true', '1', ''].includes(String(value));\n\n/**\n * Creates the Express router that exposes the read-only Grafana REST API.\n *\n * All routes are relative to the plugin base path (`/api/grafana`).\n *\n * @public\n */\nexport async function createRouter(options: {\n  grafanaService: GrafanaService;\n  /**\n   * Whether callers may force live Grafana reads (default `true`). When\n   * `false`, `refresh` query parameters are ignored and the `POST …/refresh`\n   * routes respond 403.\n   */\n  allowOnDemandRefresh?: boolean;\n  /**\n   * Whether the panel routes are served (default `true`). Panel listings and\n   * panel data always read live from Grafana, so `false` disables them (403)\n   * for deployments that want schedule-only Grafana traffic.\n   */\n  allowPanelQueries?: boolean;\n}): Promise<express.Router> {\n  const { grafanaService } = options;\n  const allowOnDemandRefresh = options.allowOnDemandRefresh ?? true;\n  const allowPanelQueries = options.allowPanelQueries ?? true;\n  const router = Router();\n  router.use(express.json());\n\n  const toRefresh = (value: unknown): boolean =>\n    allowOnDemandRefresh && toBoolean(value);\n\n  const assertRefreshAllowed = () => {\n    if (!allowOnDemandRefresh) {\n      throw new NotAllowedError(\n        'On-demand refresh is disabled by configuration (grafana.allowOnDemandRefresh)',\n      );\n    }\n  };\n\n  const assertPanelQueriesAllowed = () => {\n    if (!allowPanelQueries) {\n      throw new NotAllowedError(\n        'Panel queries are disabled by configuration (grafana.allowPanelQueries)',\n      );\n    }\n  };\n\n  router.get('/health', (_req, res) => {\n    res.json({ status: 'ok' });\n  });\n\n  router.get('/instances', (_req, res) => {\n    res.json({ items: grafanaService.getInstances() });\n  });\n\n  router.get('/instances/:name/dashboards', async (req, res) => {\n    const items = await grafanaService.getDashboards({\n      instanceName: req.params.name,\n      tags: toArray(req.query.tag),\n      query: toString(req.query.query),\n      uid: toString(req.query.uid),\n      refresh: toRefresh(req.query.refresh),\n    });\n    res.json({ items });\n  });\n\n  router.get('/instances/:name/alerts', async (req, res) => {\n    const items = await grafanaService.getAlerts({\n      instanceName: req.params.name,\n      labelSelector: parseLabelSelector(toString(req.query.labelSelector)),\n      refresh: toRefresh(req.query.refresh),\n    });\n    res.json({ items });\n  });\n\n  router.get('/instances/:name/dashboards/:uid/panels', async (req, res) => {\n    assertPanelQueriesAllowed();\n    if (!grafanaService.getPanels) {\n      throw new NotFoundError(\n        'Panel queries are not supported by the configured Grafana service',\n      );\n    }\n    const items = await grafanaService.getPanels({\n      instanceName: req.params.name,\n      dashboardUid: req.params.uid,\n    });\n    res.json({ items });\n  });\n\n  router.get(\n    '/instances/:name/dashboards/:uid/panels/:panelId/data',\n    async (req, res) => {\n      assertPanelQueriesAllowed();\n      if (!grafanaService.getPanelData) {\n        throw new NotFoundError(\n          'Panel queries are not supported by the configured Grafana service',\n        );\n      }\n      if (!/^\\d+$/.test(req.params.panelId)) {\n        throw new InputError(\n          `Invalid panel id '${req.params.panelId}', expected an integer`,\n        );\n      }\n      const data = await grafanaService.getPanelData({\n        instanceName: req.params.name,\n        dashboardUid: req.params.uid,\n        panelId: Number(req.params.panelId),\n        from: toString(req.query.from),\n        to: toString(req.query.to),\n      });\n      res.json(data);\n    },\n  );\n\n  router.post('/instances/:name/refresh', async (req, res) => {\n    assertRefreshAllowed();\n    await grafanaService.refresh(req.params.name);\n    res.json({ status: 'ok' });\n  });\n\n  router.get('/dashboards', async (req, res) => {\n    const items = await grafanaService.getDashboards({\n      instanceName: toString(req.query.instance),\n      tags: toArray(req.query.tag),\n      query: toString(req.query.query),\n      uid: toString(req.query.uid),\n      refresh: toRefresh(req.query.refresh),\n    });\n    res.json({ items });\n  });\n\n  router.get('/alerts', async (req, res) => {\n    const items = await grafanaService.getAlerts({\n      instanceName: toString(req.query.instance),\n      labelSelector: parseLabelSelector(toString(req.query.labelSelector)),\n      refresh: toRefresh(req.query.refresh),\n    });\n    res.json({ items });\n  });\n\n  router.post('/refresh', async (_req, res) => {\n    assertRefreshAllowed();\n    await grafanaService.refresh();\n    res.json({ status: 'ok' });\n  });\n\n  return router;\n}\n"],"names":["Router","express","NotAllowedError","parseLabelSelector","NotFoundError","InputError"],"mappings":";;;;;;;;;;;;AAsBA,MAAM,OAAA,GAAU,CAAC,KAAA,KAAyC;AACxD,EAAA,IAAI,UAAU,MAAA,EAAW;AACvB,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,GAAA,CAAI,MAAM,CAAA,GAAI,CAAC,MAAA,CAAO,KAAK,CAAC,CAAA;AAClE,CAAA;AAEA,MAAM,WAAW,CAAC,KAAA,KAChB,UAAU,MAAA,GAAY,MAAA,GAAY,OAAO,KAAK,CAAA;AAGhD,MAAM,SAAA,GAAY,CAAC,KAAA,KACjB,KAAA,KAAU,MAAA,IAAa,CAAC,MAAA,EAAQ,GAAA,EAAK,EAAE,CAAA,CAAE,QAAA,CAAS,MAAA,CAAO,KAAK,CAAC,CAAA;AASjE,eAAsB,aAAa,OAAA,EAcP;AAC1B,EAAA,MAAM,EAAE,gBAAe,GAAI,OAAA;AAC3B,EAAA,MAAM,oBAAA,GAAuB,QAAQ,oBAAA,IAAwB,IAAA;AAC7D,EAAA,MAAM,iBAAA,GAAoB,QAAQ,iBAAA,IAAqB,IAAA;AACvD,EAAA,MAAM,SAASA,uBAAA,EAAO;AACtB,EAAA,MAAA,CAAO,GAAA,CAAIC,wBAAA,CAAQ,IAAA,EAAM,CAAA;AAEzB,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KACjB,oBAAA,IAAwB,UAAU,KAAK,CAAA;AAEzC,EAAA,MAAM,uBAAuB,MAAM;AACjC,IAAA,IAAI,CAAC,oBAAA,EAAsB;AACzB,MAAA,MAAM,IAAIC,sBAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AAAA,EACF,CAAA;AAEA,EAAA,MAAM,4BAA4B,MAAM;AACtC,IAAA,IAAI,CAAC,iBAAA,EAAmB;AACtB,MAAA,MAAM,IAAIA,sBAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AAAA,EACF,CAAA;AAEA,EAAA,MAAA,CAAO,GAAA,CAAI,SAAA,EAAW,CAAC,IAAA,EAAM,GAAA,KAAQ;AACnC,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,MAAA,EAAQ,IAAA,EAAM,CAAA;AAAA,EAC3B,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA,CAAI,YAAA,EAAc,CAAC,IAAA,EAAM,GAAA,KAAQ;AACtC,IAAA,GAAA,CAAI,KAAK,EAAE,KAAA,EAAO,cAAA,CAAe,YAAA,IAAgB,CAAA;AAAA,EACnD,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA,CAAI,6BAAA,EAA+B,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC5D,IAAA,MAAM,KAAA,GAAQ,MAAM,cAAA,CAAe,aAAA,CAAc;AAAA,MAC/C,YAAA,EAAc,IAAI,MAAA,CAAO,IAAA;AAAA,MACzB,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA;AAAA,MAC3B,KAAA,EAAO,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,KAAK,CAAA;AAAA,MAC/B,GAAA,EAAK,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA;AAAA,MAC3B,OAAA,EAAS,SAAA,CAAU,GAAA,CAAI,KAAA,CAAM,OAAO;AAAA,KACrC,CAAA;AACD,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA;AAAA,EACpB,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA,CAAI,yBAAA,EAA2B,OAAO,GAAA,EAAK,GAAA,KAAQ;AACxD,IAAA,MAAM,KAAA,GAAQ,MAAM,cAAA,CAAe,SAAA,CAAU;AAAA,MAC3C,YAAA,EAAc,IAAI,MAAA,CAAO,IAAA;AAAA,MACzB,eAAeC,6CAAA,CAAmB,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,aAAa,CAAC,CAAA;AAAA,MACnE,OAAA,EAAS,SAAA,CAAU,GAAA,CAAI,KAAA,CAAM,OAAO;AAAA,KACrC,CAAA;AACD,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA;AAAA,EACpB,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA,CAAI,yCAAA,EAA2C,OAAO,GAAA,EAAK,GAAA,KAAQ;AACxE,IAAA,yBAAA,EAA0B;AAC1B,IAAA,IAAI,CAAC,eAAe,SAAA,EAAW;AAC7B,MAAA,MAAM,IAAIC,oBAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AACA,IAAA,MAAM,KAAA,GAAQ,MAAM,cAAA,CAAe,SAAA,CAAU;AAAA,MAC3C,YAAA,EAAc,IAAI,MAAA,CAAO,IAAA;AAAA,MACzB,YAAA,EAAc,IAAI,MAAA,CAAO;AAAA,KAC1B,CAAA;AACD,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA;AAAA,EACpB,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA;AAAA,IACL,uDAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,yBAAA,EAA0B;AAC1B,MAAA,IAAI,CAAC,eAAe,YAAA,EAAc;AAChC,QAAA,MAAM,IAAIA,oBAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,IAAI,CAAC,OAAA,CAAQ,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,EAAG;AACrC,QAAA,MAAM,IAAIC,iBAAA;AAAA,UACR,CAAA,kBAAA,EAAqB,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA,sBAAA;AAAA,SACzC;AAAA,MACF;AACA,MAAA,MAAM,IAAA,GAAO,MAAM,cAAA,CAAe,YAAA,CAAa;AAAA,QAC7C,YAAA,EAAc,IAAI,MAAA,CAAO,IAAA;AAAA,QACzB,YAAA,EAAc,IAAI,MAAA,CAAO,GAAA;AAAA,QACzB,OAAA,EAAS,MAAA,CAAO,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA;AAAA,QAClC,IAAA,EAAM,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA;AAAA,QAC7B,EAAA,EAAI,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,EAAE;AAAA,OAC1B,CAAA;AACD,MAAA,GAAA,CAAI,KAAK,IAAI,CAAA;AAAA,IACf;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,IAAA,CAAK,0BAAA,EAA4B,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC1D,IAAA,oBAAA,EAAqB;AACrB,IAAA,MAAM,cAAA,CAAe,OAAA,CAAQ,GAAA,CAAI,MAAA,CAAO,IAAI,CAAA;AAC5C,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,MAAA,EAAQ,IAAA,EAAM,CAAA;AAAA,EAC3B,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA,CAAI,aAAA,EAAe,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC5C,IAAA,MAAM,KAAA,GAAQ,MAAM,cAAA,CAAe,aAAA,CAAc;AAAA,MAC/C,YAAA,EAAc,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,QAAQ,CAAA;AAAA,MACzC,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA;AAAA,MAC3B,KAAA,EAAO,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,KAAK,CAAA;AAAA,MAC/B,GAAA,EAAK,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA;AAAA,MAC3B,OAAA,EAAS,SAAA,CAAU,GAAA,CAAI,KAAA,CAAM,OAAO;AAAA,KACrC,CAAA;AACD,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA;AAAA,EACpB,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA,CAAI,SAAA,EAAW,OAAO,GAAA,EAAK,GAAA,KAAQ;AACxC,IAAA,MAAM,KAAA,GAAQ,MAAM,cAAA,CAAe,SAAA,CAAU;AAAA,MAC3C,YAAA,EAAc,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,QAAQ,CAAA;AAAA,MACzC,eAAeF,6CAAA,CAAmB,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,aAAa,CAAC,CAAA;AAAA,MACnE,OAAA,EAAS,SAAA,CAAU,GAAA,CAAI,KAAA,CAAM,OAAO;AAAA,KACrC,CAAA;AACD,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA;AAAA,EACpB,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,IAAA,CAAK,UAAA,EAAY,OAAO,IAAA,EAAM,GAAA,KAAQ;AAC3C,IAAA,oBAAA,EAAqB;AACrB,IAAA,MAAM,eAAe,OAAA,EAAQ;AAC7B,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,MAAA,EAAQ,IAAA,EAAM,CAAA;AAAA,EAC3B,CAAC,CAAA;AAED,EAAA,OAAO,MAAA;AACT;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@marble-sh/backstage-plugin-grafana-backend",
-  "version": "1.0.2",
+  "version": "1.2.0",
   "description": "Backend for the Grafana Backstage plugin: reads dashboards and alerts from Grafana, caches them, and exposes a read-only REST API",
   "main": "./dist/index.cjs.js",
   "types": "./dist/index.d.ts",
@@ -37,8 +37,8 @@
     "@backstage/config": "^1.3.8",
     "@backstage/errors": "^1.3.1",
     "@backstage/types": "^1.2.2",
-    "@marble-sh/backstage-plugin-grafana-common": "^1.0.2",
-    "@marble-sh/backstage-plugin-grafana-node": "^1.0.2",
+    "@marble-sh/backstage-plugin-grafana-common": "^1.2.0",
+    "@marble-sh/backstage-plugin-grafana-node": "^1.2.0",
     "express": "^4.17.1",
     "express-promise-router": "^4.1.0",
     "knex": "^3.0.0"