@spinnaker/core 2026.1.0 → 2026.2.0

package/dist/notification/selector/types/index.d.ts

@@ -1,4 +1,3 @@
-export * from './bearychat/BearychatNotificationType';
 export * from './email/EmailNotificationType';
 export * from './googlechat/GooglechatNotificationType';
 export * from './microsoftteams/MicrosoftTeamsNotificationType';

package/package.json

@@ -5,7 +5,7 @@
     "url": "https://github.com/spinnaker/spinnaker.git"
   },
   "license": "Apache-2.0",
-  "version": "2026.1.0",
+  "version": "2026.2.0",
   "module": "dist/index.js",
   "typings": "dist/index.d.ts",
   "publishConfig": {
@@ -24,6 +24,7 @@
   "dependencies": {
     "@apollo/client": "^3.6.9",
     "@fortawesome/fontawesome-free": "5.5.0",
+    "@spinnaker/kayenta": "workspace:^2.6.0",
     "@spinnaker/mocks": "1.0.7",
     "@spinnaker/presentation": "^0.3.1",
     "@spinnaker/styleguide": "2.0.0",
@@ -33,9 +34,10 @@
     "@uirouter/react-hybrid": "1.0.2",
     "@uirouter/rx": "0.6.5",
     "@uirouter/visualizer": "7.2.1",
-    "angular": "1.8.0",
-    "angular-messages": "1.8.0",
-    "angular-sanitize": "1.8.0",
+    "ajv": "^6.14.0",
+    "angular": "1.8.3",
+    "angular-messages": "1.8.3",
+    "angular-sanitize": "1.8.3",
     "angular-spinner": "1.0.1",
     "angular-ui-bootstrap": "2.5.0",
     "angular-ui-sortable": "0.17.1",
@@ -51,7 +53,7 @@
     "commonmark": "0.28.1",
     "date-fns": "2.21.1",
     "diff-match-patch": "1.0.4",
-    "dompurify": "^2.3.10",
+    "dompurify": "^3.0.0",
     "enzyme": "3.11.0",
     "formik": "1.5.1",
     "human-readable-ids": "1.0.4",
@@ -72,6 +74,7 @@
     "react-day-picker": "7.3.2",
     "react-dom": "16.14.0",
     "react-ga": "2.4.1",
+    "react-redux": "^5.1.2",
     "react-select": "1.2.1",
     "react-sortable-hoc": "0.6.8",
     "react-spring": "8.0.27",
@@ -83,6 +86,8 @@
     "react-virtualized-select": "3.1.3",
     "react2angular": "3.2.1",
     "recoil": "0.7.2",
+    "redux-actions": "^2.6.5",
+    "reselect": "^3.0.1",
     "rxjs": "6.6.7",
     "select2": "^3.5.1",
     "select2-bootstrap-css": "1.4.6",
@@ -102,7 +107,7 @@
     "@types/angular-mocks": "1.5.10",
     "@types/angular-ui-bootstrap": "0.13.41",
     "@types/classnames": "2.2.0",
-    "@types/clipboard": "1.5.33",
+    "@types/clipboard": "1.5.36",
     "@types/commonmark": "0.27.0",
     "@types/dompurify": "^2.3.3",
     "@types/enzyme": "3.10.3",
@@ -128,5 +133,5 @@
     "shx": "0.3.3",
     "typescript": "5.0.4"
   },
-  "gitHead": "b43289872672de89234911de45d1cba0dd18373f"
+  "gitHead": "a9155eb5c4e40b9db5aa9741af28fc2412f7c7d8"
 }

package/rollup.config.js

@@ -30,9 +30,25 @@ const fixTSPathRewrite = () => {
   };
 };
 
+// @rollup/plugin-node-resolve v15 defaults to ['.mjs', '.js', '.json', '.node'] with no .ts/.tsx.
+// This plugin fills the gap: when a bare relative directory import can't be resolved, try
+// appending /index.ts and /index.tsx so that TypeScript barrel files are found.
+const tsDirResolvePlugin = {
+  name: 'ts-dir-resolve',
+  resolveId(source, importer) {
+    if (!importer || !source.startsWith('.')) return null;
+    const dir = path.resolve(path.dirname(importer), source);
+    for (const candidate of [`${dir}/index.ts`, `${dir}/index.tsx`, `${dir}.ts`, `${dir}.tsx`]) {
+      if (fs.existsSync(candidate)) return candidate;
+    }
+    return null;
+  },
+};
+
 export default {
   ...baseRollupConfig,
   plugins: [
+    tsDirResolvePlugin,
     ...baseRollupConfig.plugins,
     // `core` has some custom type declarations for `promise` and `svg` that needs to be bundled together in the
     // distribution. These custom type declarations are not automatically copied over by typescript, so needs to be

package/src/apitoken/ApiTokenService.spec.ts

@@ -0,0 +1,199 @@
+// Copyright 2026 DoorDash, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//   http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+import { mockHttpClient } from '../api/mock/jasmine';
+import type { IApiTokenServiceAccount, IApiToken, ICreateApiTokenRequest } from './ApiTokenService';
+import { ApiTokenService } from './ApiTokenService';
+
+const TOKEN_FIXTURE: IApiToken = {
+  id: 'tok-uuid-1',
+  name: 'ci-deploy',
+  principalType: 'USER',
+  principalId: 'alice@doordash.com',
+  createdByUserId: 'alice@doordash.com',
+  expiresAt: new Date(Date.now() + 30 * 86400 * 1000).toISOString(),
+};
+
+const SA_TOKEN_FIXTURE: IApiToken = {
+  id: 'tok-uuid-2',
+  name: 'ci-bot-token',
+  principalType: 'SERVICE_ACCOUNT',
+  principalId: 'ci-pipeline-bot',
+  createdByUserId: 'admin@doordash.com',
+  expiresAt: undefined,
+};
+
+const SA_FIXTURE: IApiTokenServiceAccount = {
+  name: 'ci-pipeline-bot',
+  memberOf: ['deploy-team'],
+};
+
+describe('ApiTokenService', () => {
+  describe('listTokens()', () => {
+    it('GETs /auth/apiTokens and returns the token array', async () => {
+      const http = mockHttpClient();
+      http.expectGET(/\/auth\/apiTokens$/).respond(200, [TOKEN_FIXTURE]);
+
+      let result: IApiToken[] | undefined;
+      ApiTokenService.listTokens().then((tokens) => {
+        result = tokens;
+      });
+
+      await http.flush();
+      expect(result).toEqual([TOKEN_FIXTURE]);
+    });
+
+    it('returns an empty array when there are no tokens', async () => {
+      const http = mockHttpClient();
+      http.expectGET(/\/auth\/apiTokens$/).respond(200, []);
+
+      let result: IApiToken[] | undefined;
+      ApiTokenService.listTokens().then((tokens) => {
+        result = tokens;
+      });
+
+      await http.flush();
+      expect(result).toEqual([]);
+    });
+
+    it('includes tokens with null expiresAt (non-expiring SA tokens)', async () => {
+      const http = mockHttpClient();
+      http.expectGET(/\/auth\/apiTokens$/).respond(200, [SA_TOKEN_FIXTURE]);
+
+      let result: IApiToken[] | undefined;
+      ApiTokenService.listTokens().then((tokens) => {
+        result = tokens;
+      });
+
+      await http.flush();
+      expect(result![0].expiresAt).toBeUndefined();
+    });
+  });
+
+  describe('createToken()', () => {
+    it('POSTs to /auth/apiTokens with the request body', async () => {
+      const http = mockHttpClient();
+      const created = { ...TOKEN_FIXTURE, token: 'spk_abc123' };
+      http.expectPOST(/\/auth\/apiTokens$/).respond(201, created);
+
+      const request: ICreateApiTokenRequest = {
+        name: 'ci-deploy',
+        principalType: 'USER',
+      };
+
+      let result: (IApiToken & { token: string }) | undefined;
+      ApiTokenService.createToken(request).then((token) => {
+        result = token;
+      });
+
+      await http.flush();
+      expect(result).toEqual(created);
+      expect(result!.token).toBe('spk_abc123');
+    });
+
+    it('includes principalId and expiresAt when provided', async () => {
+      const http = mockHttpClient();
+      const expiry = new Date(Date.now() + 7 * 86400 * 1000).toISOString();
+      const created = { ...SA_TOKEN_FIXTURE, token: 'spk_xyz789', expiresAt: expiry };
+      http.expectPOST(/\/auth\/apiTokens$/).respond(201, created);
+
+      const request: ICreateApiTokenRequest = {
+        name: 'ci-bot-token',
+        principalType: 'SERVICE_ACCOUNT',
+        principalId: 'ci-pipeline-bot',
+        expiresAt: expiry,
+      };
+
+      let result: (IApiToken & { token: string }) | undefined;
+      ApiTokenService.createToken(request).then((token) => {
+        result = token;
+      });
+
+      await http.flush();
+      expect(result!.expiresAt).toBe(expiry);
+    });
+
+    it('handles creation of a non-expiring SA token (no expiresAt in request)', async () => {
+      const http = mockHttpClient();
+      const created = { ...SA_TOKEN_FIXTURE, token: 'spk_never' };
+      http.expectPOST(/\/auth\/apiTokens$/).respond(201, created);
+
+      const request: ICreateApiTokenRequest = {
+        name: 'ci-bot-token',
+        principalType: 'SERVICE_ACCOUNT',
+        principalId: 'ci-pipeline-bot',
+      };
+
+      let result: (IApiToken & { token: string }) | undefined;
+      ApiTokenService.createToken(request).then((token) => {
+        result = token;
+      });
+
+      await http.flush();
+      expect(result!.expiresAt).toBeUndefined();
+    });
+  });
+
+  describe('revokeToken()', () => {
+    it('DELETEs /auth/apiTokens/{id}', async () => {
+      const http = mockHttpClient();
+      http.expectDELETE(/\/auth\/apiTokens\/tok-uuid-1$/).respond(204, null);
+
+      let resolved = false;
+      ApiTokenService.revokeToken('tok-uuid-1').then(() => {
+        resolved = true;
+      });
+
+      await http.flush();
+      expect(resolved).toBe(true);
+    });
+
+    it('passes the correct token id in the path', async () => {
+      const http = mockHttpClient();
+      const customId = 'some-other-uuid-789';
+      http.expectDELETE(new RegExp(`\\/auth\\/apiTokens\\/${customId}$`)).respond(204, null);
+
+      ApiTokenService.revokeToken(customId);
+      await http.flush();
+    });
+  });
+
+  describe('listApiTokenServiceAccounts()', () => {
+    it('GETs /auth/apiTokens/serviceAccounts', async () => {
+      const http = mockHttpClient();
+      http.expectGET(/\/auth\/apiTokens\/serviceAccounts$/).respond(200, [SA_FIXTURE]);
+
+      let result: IApiTokenServiceAccount[] | undefined;
+      ApiTokenService.listApiTokenServiceAccounts().then((accounts) => {
+        result = accounts;
+      });
+
+      await http.flush();
+      expect(result).toEqual([SA_FIXTURE]);
+    });
+
+    it('returns an empty array when no API token service accounts are configured', async () => {
+      const http = mockHttpClient();
+      http.expectGET(/\/auth\/apiTokens\/serviceAccounts$/).respond(200, []);
+
+      let result: IApiTokenServiceAccount[] | undefined;
+      ApiTokenService.listApiTokenServiceAccounts().then((accounts) => {
+        result = accounts;
+      });
+
+      await http.flush();
+      expect(result).toEqual([]);
+    });
+  });
+});

package/src/apitoken/ApiTokenService.ts

@@ -0,0 +1,65 @@
+// Copyright 2026 DoorDash, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//   http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+import { REST } from '../api/ApiService';
+
+export interface IApiToken {
+  id: string;
+  name: string;
+  principalType: 'USER' | 'SERVICE_ACCOUNT';
+  principalId: string;
+  createdByUserId: string;
+  /** Absent for non-expiring service account tokens. */
+  expiresAt?: string | null;
+  lastUsedAt?: string;
+  createdAt?: number;
+  lastModified?: number;
+  /** Only present immediately after creation. Never stored or returned again. */
+  token?: string;
+}
+
+export interface ICreateApiTokenRequest {
+  name: string;
+  principalType: 'USER' | 'SERVICE_ACCOUNT';
+  principalId?: string;
+  expiresAt?: string;
+}
+
+export interface IApiTokenServiceAccount {
+  name: string;
+  memberOf?: string[];
+}
+
+export const ApiTokenService = {
+  listTokens(): PromiseLike<IApiToken[]> {
+    return REST('/auth/apiTokens').get();
+  },
+
+  createToken(request: ICreateApiTokenRequest): PromiseLike<IApiToken & { token: string }> {
+    return REST('/auth/apiTokens').post(request);
+  },
+
+  revokeToken(id: string): PromiseLike<void> {
+    return REST('/auth/apiTokens').path(id).delete();
+  },
+
+  listApiTokenServiceAccounts(): PromiseLike<IApiTokenServiceAccount[]> {
+    return REST('/auth/apiTokens/serviceAccounts').get();
+  },
+
+  /** Admin-only: returns all USER tokens across all principals. */
+  listAllUserTokens(): PromiseLike<IApiToken[]> {
+    return REST('/auth/apiTokens/admin/users').get();
+  },
+};

package/src/apitoken/ApiTokensPage.less

@@ -0,0 +1,81 @@
+// Copyright 2026 DoorDash, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//   http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+.ApiTokensPage {
+  padding-top: 32px;
+  max-width: 1100px;
+
+  .ApiTokensPage-section + .ApiTokensPage-section {
+    margin-top: 40px;
+  }
+
+  .ApiTokensPage-section-header {
+    margin-bottom: 16px;
+
+    h3 {
+      margin: 0;
+      flex: 1;
+    }
+  }
+
+  .ApiTokensPage-admin-badge {
+    font-size: 12px;
+  }
+
+  .ApiTokensPage-actions-column {
+    width: 220px;
+    min-width: 220px;
+  }
+
+  .ApiTokensPage-empty {
+    padding: 40px 0;
+    color: #888;
+
+    .ApiTokensPage-empty-icon {
+      font-size: 36px;
+      margin-bottom: 12px;
+      display: block;
+    }
+
+    .ApiTokensPage-empty-title {
+      font-size: 16px;
+      margin-bottom: 4px;
+    }
+
+    .ApiTokensPage-empty-body {
+      font-size: 13px;
+    }
+  }
+
+  .ApiTokensPage-status {
+    padding-top: 80px;
+
+    .ApiTokensPage-status-icon {
+      font-size: 36px;
+    }
+
+    .ApiTokensPage-status-title {
+      margin-top: 12px;
+      font-size: 16px;
+    }
+
+    .ApiTokensPage-status-subtitle {
+      margin-top: 12px;
+    }
+  }
+
+  .ApiTokensPage-inline-loader {
+    padding: 24px 0;
+  }
+}