nodebb-plugin-internalnotes 1.0.0 → 1.0.1

package/.github/workflows/draft-release.yml

@@ -0,0 +1,54 @@
+name: Draft release on tag
+
+on:
+  push:
+    tags:
+      - '*'
+
+jobs:
+  draft-release:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Get version from tag
+        id: version
+        run: |
+          TAG="${GITHUB_REF#refs/tags/}"
+          # Strip leading 'v' if present (e.g. v1.0.1 -> 1.0.1)
+          VERSION="${TAG#v}"
+          echo "tag=$TAG" >> "$GITHUB_OUTPUT"
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+
+      - name: Extract changelog for version
+        id: changelog
+        run: |
+          VERSION="${{ steps.version.outputs.version }}"
+          # Extract from "## [VERSION]" up to (but not including) the next "## ["
+          awk '
+            /^## \['"$VERSION"'\]/ { found=1; print; next }
+            found { if (/^## \[/) exit; print }
+          ' CHANGELOG.md > release_notes.md
+          echo "---"
+          cat release_notes.md
+          echo "---"
+          # Default body if section missing (e.g. typo in tag)
+          if [ ! -s release_notes.md ]; then
+            echo "Release ${{ steps.version.outputs.tag }}" > release_notes.md
+          fi
+
+      - name: Create draft release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ steps.version.outputs.tag }}
+          name: ${{ steps.version.outputs.tag }}
+          body_path: release_notes.md
+          draft: true
+          generate_release_notes: false
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

package/.github/workflows/publish-npm.yml

@@ -18,7 +18,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "24"
           registry-url: "https://registry.npmjs.org"
 
       - name: Install dependencies

package/CHANGELOG.md

@@ -0,0 +1,31 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+
+## [1.0.1] - 2025-02-23
+
+### Added
+
+- **Widget "Internal Notes & Assign Topic"** — Add the Internal Notes and Assign Topic buttons via **ACP > Appearance > Widgets** (e.g. to Global Sidebar) for themes that use a different layout. The widget only renders on topic pages.
+- **Right sidebar placement** — Internal Notes and Assign Topic buttons are now injected into the far-right sidebar (`component="sidebar/right"`) at the bottom. When the sidebar is collapsed they show as icon-only; when expanded, icon and label. This placement is only tested with the default theme [nodebb-theme-harmony v2.1.36](https://github.com/NodeBB/nodebb-theme-harmony/tree/v2.1.36).
+- **Translatable "Close"** — Notes panel close control uses a dedicated "Close" button with the new language key `close`.
+
+### Changed
+
+- **Button position** — Buttons no longer appear in the topic thread tools menu; they are shown in the right sidebar (or via the new widget). This matches the thin vertical sidebar used for notifications, search, drafts, and chat.
+- **Notes panel close** — Close control moved from a small header link to a visible "Close" button next to "Add Note" in the notes panel for clearer UX.
+- **Docs** — README simplified; detailed setup and technical info moved to DEVELOPMENT.md and TECHNICAL.md. NodeBB 3.x references removed from README.
+
+## [1.0.0] - (initial release)
+
+### Added
+
+- Internal staff notes on topics (add, view, delete)
+- Topic assignment (user or group) with notifications for assigned groups
+- "Assign to myself" quick action
+- Permission-based visibility (admin; optional global/category moderators)
+- Right sidebar placement for Internal Notes and Assign Topic buttons
+- Admin settings: allow global moderators, allow category moderators
+- Widget fallback for themes without right sidebar

package/DEVELOPMENT.md

@@ -0,0 +1,24 @@
+# Development
+
+## Local development setup
+
+```bash
+cd /path/to/nodebb
+npm link /path/to/nodebb-plugin-internalnotes
+./nodebb build
+./nodebb dev
+```
+
+## Standards and linting
+
+- The plugin follows [NodeBB plugin standards](https://docs.nodebb.org/development/plugins/); see [NODEBB_STANDARDS_AUDIT.md](NODEBB_STANDARDS_AUDIT.md) for a full audit.
+- Lint: `npm run lint` (ESLint).
+
+## Publishing to npm
+
+A GitHub Action (`.github/workflows/publish-npm.yml`) runs lint and publishes to [npm](https://www.npmjs.com/~brutalbirdie) when:
+
+- A **release** is published on GitHub, or
+- The workflow is run manually (**Actions → Lint and publish to npm → Run workflow**).
+
+**One-time setup:** In this repo, go to **Settings → Secrets and variables → Actions** and add a secret named `NPM_TOKEN` with an [npm access token](https://www.npmjs.com/settings/brutalbirdie/tokens) (Automation type is recommended). The workflow will only publish if `npm run lint` passes.

package/NODEBB_STANDARDS_AUDIT.md

@@ -1,6 +1,6 @@
 # NodeBB Plugin Standards Audit
 
-This document audits **nodebb-plugin-internalnotes** against [NodeBB upstream documentation](https://docs.nodebb.org/development/) and the [nodebb-plugin-quickstart](https://github.com/NodeBB/nodebb-plugin-quickstart) template. References: [development](https://docs.nodebb.org/development/), [quickstart](https://docs.nodebb.org/development/quickstart/), [plugins](https://docs.nodebb.org/development/plugins/), [plugin.json](https://docs.nodebb.org/development/plugins/plugin.json/), [hooks](https://docs.nodebb.org/development/plugins/hooks/), [statics](https://docs.nodebb.org/development/plugins/statics/), [libraries](https://docs.nodebb.org/development/plugins/libraries/), [i18n](https://docs.nodebb.org/development/i18n/), [style guide](https://docs.nodebb.org/development/style-guide/).
+This document audits **nodebb-plugin-internalnotes** against [NodeBB upstream documentation](https://docs.nodebb.org/development/) and the [nodebb-plugin-quickstart](https://github.com/NodeBB/nodebb-plugin-quickstart) template. References: [development](https://docs.nodebb.org/development/), [quickstart](https://docs.nodebb.org/development/quickstart/), [plugins](https://docs.nodebb.org/development/plugins/), [plugin.json](https://docs.nodebb.org/development/plugins/plugin.json/), [hooks](https://docs.nodebb.org/development/plugins/hooks/), [statics](https://docs.nodebb.org/development/plugins/statics/), [libraries](https://docs.nodebb.org/development/plugins/libraries/), [i18n](https://docs.nodebb.org/development/i18n/), [style guide](https://docs.nodebb.org/development/style-guide/), [widgets](https://docs.nodebb.org/development/widgets/).
 
 ---
 
@@ -102,6 +102,8 @@ This document audits **nodebb-plugin-internalnotes** against [NodeBB upstream do
 | **static:api.routes** | REST API routes (notes, assign, group search) | ✅ |
 | **filter:admin.header.build** | ACP nav item | ✅ |
 | **filter:navigation.available** | “Assigned” nav item | ✅ |
+| **filter:widgets.getWidgets** | Register "Internal Notes & Assign Topic" widget | ✅ |
+| **filter:widget.render:internalnotes_sidebar** | Render widget HTML (topic page, privileged only) | ✅ |
 | **filter:topic.get** | Add notes/assignee to single topic | ✅ |
 | **filter:topics.get** | Add notes/assignee to topic lists | ✅ |
 | **filter:topic.thread_tools** | Thread tools entries | ✅ |
@@ -111,7 +113,28 @@ This document audits **nodebb-plugin-internalnotes** against [NodeBB upstream do
 
 ---
 
-## 8. Static directories & security
+## 8. Widgets ([docs](https://docs.nodebb.org/development/widgets/))
+
+The plugin provides an optional **Internal Notes & Assign Topic** widget for themes that use a different layout (e.g. when the right sidebar component is not present). Audited against the [Writing Widgets](https://docs.nodebb.org/development/widgets/) documentation.
+
+| Requirement | Status | Notes |
+|-------------|--------|--------|
+| **Register widget** | ✅ | Listens to `filter:widgets.getWidgets` with method `defineWidgets`; pushes `{ widget, name, description, content }` into the array and returns it |
+| **Widget namespace** | ✅ | `widget: 'internalnotes_sidebar'` – unique namespace for the render hook |
+| **Render hook** | ✅ | Listens to `filter:widget.render:internalnotes_sidebar` with method `renderInternalNotesWidget`; hook name matches widget namespace |
+| **widget.html** | ✅ | Render method assigns HTML to `widget.html` (buttons for Notes and Assign Topic) |
+| **Async return** | ✅ | `renderInternalNotesWidget` is async and returns `widget` (documented pattern: callback or return widget) |
+| **widget.req** | ✅ | Used for `widget.req.uid` and `widget.req.path` (topic-page and privilege checks) |
+| **widget.area** | ✅ | Used for `widget.area.template` and `widget.area.url` when present (topic-page detection) |
+| **widget.data** | ⚪ | Not used; `content: ''` in registration (no admin form) – valid for a widget with no options |
+| **Nomenclature** | ✅ | Plugin is `nodebb-plugin-internalnotes` (main purpose is internal notes); widget-only packages would use `nodebb-widget-xyz` – correct here |
+| **Privilege / scope** | ✅ | Widget renders empty HTML for non–topic pages and for users without `canViewNotes`; no sensitive data exposed |
+
+**Verdict:** Compliant with the widget development docs. Widget is optional fallback; primary UI is thread tools and right-sidebar placement.
+
+---
+
+## 9. Static directories & security
 
 - No `staticDirs` – no public static assets. Sensitive data is not exposed via static routes.
 - API routes use `middleware.ensureLoggedIn` and custom `ensurePrivileged` (notes visibility).  
@@ -119,7 +142,7 @@ This document audits **nodebb-plugin-internalnotes** against [NodeBB upstream do
 
 ---
 
-## 9. Database
+## 10. Database
 
 - Uses NodeBB `database` API (`getObject`, `setObject`, `sortedSetAdd`, etc.).
 - Keys documented in README; no custom migrations yet (no `upgrades` in plugin.json).  
@@ -127,11 +150,11 @@ This document audits **nodebb-plugin-internalnotes** against [NodeBB upstream do
 
 ---
 
-## 10. Style guide
+## 11. Style guide
 
 - Core follows Airbnb JS + ESLint; third-party plugins are encouraged but not required to follow.
-- This plugin has `"lint": "eslint ."` in package.json but no local eslint config in the repo; lint may rely on global or NodeBB env.  
-**Verdict:** Optional; adding an `eslint.config.mjs` (or similar) would align with best practice.
+- This plugin has `"lint": "eslint ."` in package.json and a minimal `eslint.config.mjs`; run `npm install -D eslint` for local lint.  
+**Verdict:** Compliant.
 
 ---
 
@@ -146,6 +169,7 @@ This document audits **nodebb-plugin-internalnotes** against [NodeBB upstream do
 | Templates | ✅ Compliant |
 | i18n | ✅ Compliant |
 | Hooks | ✅ Compliant |
+| Widgets | ✅ Compliant ([widgets](https://docs.nodebb.org/development/widgets/)) |
 | Security | ✅ Compliant |
 | Database | ✅ Compliant |
 | Style / lint | ✅ eslint.config.mjs added (optional; run `npm install -D eslint` for lint) |

package/README.md

@@ -1,8 +1,11 @@
+[![Lint and publish to npm](https://github.com/BrutalBirdie/nodebb-plugin-internalnotes/actions/workflows/publish-npm.yml/badge.svg)](https://github.com/BrutalBirdie/nodebb-plugin-internalnotes/actions/workflows/publish-npm.yml) [![Draft release on tag](https://github.com/BrutalBirdie/nodebb-plugin-internalnotes/actions/workflows/draft-release.yml/badge.svg)](https://github.com/BrutalBirdie/nodebb-plugin-internalnotes/actions/workflows/draft-release.yml)
+---
+
 # nodebb-plugin-internalnotes
 
 A NodeBB plugin that adds **internal staff notes** and **topic assignment** to forum topics. By default only administrators can see and manage notes and assignments; you can optionally allow global moderators and/or category moderators in the plugin settings. They are completely invisible to everyone else.
 
-**Version:** 1.0.0 · **NodeBB:** 4.x (tested on 4.8.1)
+**Version:** 1.0.1 · **NodeBB:** 4.x (tested on 4.8.1)
 
 ## Features
 
@@ -10,7 +13,7 @@ A NodeBB plugin that adds **internal staff notes** and **topic assignment** to f
 - **Topic Assignment (User or Group)** — Assign a topic to a specific user or an entire group. All members of an assigned group receive a notification.
 - **"Assign to myself"** — The first option in the assignment modal lets the current user instantly assign the topic to themselves.
 - **Permission-based visibility** — Notes, assignment badges, and the thread tool buttons are completely invisible to regular users. By default only admins can see them; you can enable global moderators and/or category moderators in the plugin settings. No DOM elements are rendered for unprivileged users.
-- **Thread Tools integration** — "Internal Notes" and "Assign Topic" options appear in the topic thread tools dropdown for privileged users only.
+- **Right sidebar placement** — On topic pages, "Internal Notes" and "Assign Topic" buttons are shown in the far-right sidebar (`component="sidebar/right"`). A widget is also available for themes that use a different layout.
 - **Admin settings page** — Configure who can access notes: allow global moderators and/or category moderators (ACP > Plugins > Internal Notes & Assignments).
 
 ## Installation
@@ -22,14 +25,7 @@ npm install nodebb-plugin-internalnotes
 
 Then activate the plugin from the **Admin Control Panel > Extend > Plugins**.
 
-### For development
-
-```bash
-cd /path/to/nodebb
-npm link /path/to/nodebb-plugin-internalnotes
-./nodebb build
-./nodebb dev
-```
+**Where the buttons appear:** On topic pages, the **Internal Notes** and **Assign Topic** buttons are automatically placed in the far-right sidebar (the thin vertical bar on the right edge of the page). No widget setup is required. If your theme does not have this component, you can add the **Internal Notes & Assign Topic** widget to the Global Sidebar in **ACP > Appearance > Widgets** as a fallback.
 
 ## Configuration
 
@@ -41,8 +37,7 @@ Navigate to **ACP > Plugins > Internal Notes & Assignments** to configure:
 ## Usage
 
 1. Navigate to any topic as a user who has access (admin, or global/category moderator if enabled in settings).
-2. Open the **Thread Tools** dropdown (the wrench icon).
-3. Click **Internal Notes** to open the notes side panel, or **Assign Topic** to assign the topic.
+2. In the **far-right sidebar** (the vertical bar on the right edge of the page), click **Internal Notes** to open the notes side panel, or **Assign Topic** to assign the topic.
 
 ### Notes panel
 
@@ -57,47 +52,16 @@ Navigate to **ACP > Plugins > Internal Notes & Assignments** to configure:
 - **User tab** — search and select any user by username
 - **Group tab** — search and select any group by name
 
-## Database Keys
-
-| Key | Type | Description |
-|-----|------|-------------|
-| `internalnote:<noteId>` | Hash | Individual note (noteId, tid, uid, content, timestamp) |
-| `internalnotes:tid:<tid>` | Sorted Set | Note IDs for a topic (score = timestamp) |
-| `topic:<tid>` → `assignee` | Object Field | UID (for user) or group name (for group) |
-| `topic:<tid>` → `assigneeType` | Object Field | `"user"` or `"group"` |
-| `global` → `nextInternalNoteId` | Object Field | Auto-incrementing note ID counter |
-
-## API Endpoints
-
-All endpoints require authentication and privileged access.
-
-| Method | Endpoint | Description |
-|--------|----------|-------------|
-| `GET` | `/api/v3/plugins/internalnotes/:tid` | Get all notes for a topic |
-| `POST` | `/api/v3/plugins/internalnotes/:tid` | Create a note (`{ content }`) |
-| `DELETE` | `/api/v3/plugins/internalnotes/:tid/:noteId` | Delete a note |
-| `GET` | `/api/v3/plugins/internalnotes/:tid/assign` | Get topic assignee |
-| `PUT` | `/api/v3/plugins/internalnotes/:tid/assign` | Assign topic (`{ type: "user"\|"group", id: uid\|groupName }`) |
-| `DELETE` | `/api/v3/plugins/internalnotes/:tid/assign` | Unassign topic |
-| `GET` | `/api/v3/plugins/internalnotes/groups/search?query=...` | Search groups by name |
-
 ## Compatibility
 
-NodeBB v3.x and v4.x (`nbbpm.compatibility`: `^3.0.0 || ^4.0.0`). Tested on NodeBB 4.8.1.
-
-## Development
-
-- The plugin follows [NodeBB plugin standards](https://docs.nodebb.org/development/plugins/); see [NODEBB_STANDARDS_AUDIT.md](NODEBB_STANDARDS_AUDIT.md) for a full audit.
-- Lint: `npm run lint` (ESLint).
-
-## Publishing to npm
+NodeBB v4.x. Tested on NodeBB 4.8.1.
 
-A GitHub Action (`.github/workflows/publish-npm.yml`) runs lint and publishes to [npm](https://www.npmjs.com/~brutalbirdie) when:
+The right-sidebar button placement (injection into `component="sidebar/right"`) is only tested with the default theme **nodebb-theme-harmony** [v2.1.36](https://github.com/NodeBB/nodebb-theme-harmony/tree/v2.1.36). Other themes may need the **Internal Notes & Assign Topic** widget in ACP > Appearance > Widgets.
 
-- A **release** is published on GitHub, or
-- The workflow is run manually (**Actions → Lint and publish to npm → Run workflow**).
+## For developers
 
-**One-time setup:** In this repo, go to **Settings → Secrets and variables → Actions** and add a secret named `NPM_TOKEN` with an [npm access token](https://www.npmjs.com/settings/brutalbirdie/tokens) (Automation type is recommended). The workflow will only publish if `npm run lint` passes.
+- **[DEVELOPMENT.md](DEVELOPMENT.md)** — Local setup, linting, and publishing to npm.
+- **[TECHNICAL.md](TECHNICAL.md)** — Database keys and API endpoints.
 
 ## License
 

package/TECHNICAL.md

@@ -0,0 +1,25 @@
+# Technical reference
+
+## Database keys
+
+| Key | Type | Description |
+|-----|------|-------------|
+| `internalnote:<noteId>` | Hash | Individual note (noteId, tid, uid, content, timestamp) |
+| `internalnotes:tid:<tid>` | Sorted Set | Note IDs for a topic (score = timestamp) |
+| `topic:<tid>` → `assignee` | Object Field | UID (for user) or group name (for group) |
+| `topic:<tid>` → `assigneeType` | Object Field | `"user"` or `"group"` |
+| `global` → `nextInternalNoteId` | Object Field | Auto-incrementing note ID counter |
+
+## API endpoints
+
+All endpoints require authentication and privileged access.
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| `GET` | `/api/v3/plugins/internalnotes/:tid` | Get all notes for a topic |
+| `POST` | `/api/v3/plugins/internalnotes/:tid` | Create a note (`{ content }`) |
+| `DELETE` | `/api/v3/plugins/internalnotes/:tid/:noteId` | Delete a note |
+| `GET` | `/api/v3/plugins/internalnotes/:tid/assign` | Get topic assignee |
+| `PUT` | `/api/v3/plugins/internalnotes/:tid/assign` | Assign topic (`{ type: "user"\|"group", id: uid\|groupName }`) |
+| `DELETE` | `/api/v3/plugins/internalnotes/:tid/assign` | Unassign topic |
+| `GET` | `/api/v3/plugins/internalnotes/groups/search?query=...` | Search groups by name |

package/languages/en-GB/internalnotes.json

@@ -3,6 +3,7 @@
     "panel-title": "Internal Notes",
     "placeholder": "Write an internal note…",
     "add-note": "Add Note",
+    "close": "Close",
     "delete-note": "Delete",
     "no-notes": "No internal notes yet.",
     "error-loading": "Could not load notes.",

package/library.js

@@ -111,6 +111,7 @@ plugin.addInternalNotesToTopic = async (data) => {
 	}
 	const allowed = await canViewNotes(data.uid);
 	data.topic.canViewInternalNotes = allowed;
+	data.canViewInternalNotes = allowed; // so client can read from ajaxify.data.canViewInternalNotes
 	if (allowed) {
 		data.topic.assignee = await getAssignee(data.topic.tid);
 		data.topic.internalNoteCount = await db.sortedSetCard(`internalnotes:tid:${data.topic.tid}`);
@@ -137,23 +138,6 @@ plugin.addInternalNotesToTopics = async (data) => {
 	return data;
 };
 
-plugin.addThreadTools = async (data) => {
-	const allowed = await canViewNotes(data.uid);
-	if (allowed) {
-		data.tools.push({
-			title: '[[internalnotes:thread-tool-notes]]',
-			class: 'toggle-internal-notes',
-			icon: 'fa-sticky-note',
-		});
-		data.tools.push({
-			title: '[[internalnotes:thread-tool-assign]]',
-			class: 'assign-topic-user',
-			icon: 'fa-user-plus',
-		});
-	}
-	return data;
-};
-
 plugin.purgeTopicNotes = async ({ topic }) => {
 	if (!topic || !topic.tid) {
 		return;
@@ -178,6 +162,61 @@ plugin.addNavigation = (menu) => {
 	return menu;
 };
 
+// --- Widget: Internal Notes & Assign Topic in sidebar (topic page only) ---
+
+plugin.defineWidgets = (widgets) => {
+	widgets.push({
+		widget: 'internalnotes_sidebar',
+		name: 'Internal Notes & Assign Topic',
+		description: 'Shows Internal Notes and Assign Topic buttons for privileged users on topic pages. Add this widget to the Global Sidebar (the right sidebar with notifications, search, drafts, chat).',
+		content: '', // no admin config
+	});
+	return widgets;
+};
+
+plugin.renderInternalNotesWidget = async (widget) => {
+	// Show only on topic pages. Widget can be in:
+	// - Topic template sidebar (template === 'topic'), or
+	// - Global Sidebar (template === 'global') — same right sidebar as notifications/search/drafts/chat
+	const templateName = (widget.templateData && widget.templateData.template && widget.templateData.template.name) ||
+		(widget.area && widget.area.template) || '';
+	const path = (widget.req && widget.req.path) ? widget.req.path : (widget.area && widget.area.url) || '';
+	const isTopicPage = String(templateName) === 'topic' ||
+		(String(templateName) === 'global' && /^\/topic\//.test(String(path)));
+	if (!isTopicPage) {
+		widget.html = '';
+		return widget;
+	}
+	const uid = widget.req && widget.req.uid ? widget.req.uid : 0;
+	const allowed = await canViewNotes(uid);
+	if (!allowed) {
+		widget.html = '';
+		return widget;
+	}
+	const translator = require.main.require('./src/translator');
+	const [notesLabel, assignLabel] = await Promise.all([
+		new Promise((resolve) => translator.translate('[[internalnotes:thread-tool-notes]]', resolve)),
+		new Promise((resolve) => translator.translate('[[internalnotes:thread-tool-assign]]', resolve)),
+	]);
+	const escapeHtml = (str) => {
+		if (str == null) return '';
+		const s = String(str);
+		return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
+	};
+	widget.html = `
+<div class="internal-notes-sidebar-actions mb-3">
+	<div class="btn-group-vertical w-100 d-flex flex-column gap-2" role="group">
+		<button type="button" class="btn btn-sm btn-outline-warning toggle-internal-notes w-100 text-start">
+			<i class="fa fa-sticky-note me-1"></i> ${escapeHtml(notesLabel)}
+		</button>
+		<button type="button" class="btn btn-sm btn-outline-primary assign-topic-user w-100 text-start">
+			<i class="fa fa-user-plus me-1"></i> ${escapeHtml(assignLabel)}
+		</button>
+	</div>
+</div>`;
+	return widget;
+};
+
 plugin.renderAssignedPage = async (req, res) => {
 	const page = Math.max(1, parseInt(req.query.page, 10) || 1);
 	const uid = req.uid;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodebb-plugin-internalnotes",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Add internal staff notes and assignees to topics in NodeBB. Notes are only visible to privileged users (moderators/admins).",
   "main": "library.js",
   "author": "BrutalBirdie",

package/plugin.json

@@ -19,6 +19,14 @@
             "hook": "filter:navigation.available",
             "method": "addNavigation"
         },
+        {
+            "hook": "filter:widgets.getWidgets",
+            "method": "defineWidgets"
+        },
+        {
+            "hook": "filter:widget.render:internalnotes_sidebar",
+            "method": "renderInternalNotesWidget"
+        },
         {
             "hook": "filter:topic.get",
             "method": "addInternalNotesToTopic"
@@ -27,10 +35,6 @@
             "hook": "filter:topics.get",
             "method": "addInternalNotesToTopics"
         },
-        {
-            "hook": "filter:topic.thread_tools",
-            "method": "addThreadTools"
-        },
         {
             "hook": "action:topic.purge",
             "method": "purgeTopicNotes"

package/public/lib/main.js

@@ -19,10 +19,11 @@
 			notesPanel.remove();
 		}
 
-		const [panelTitle, placeholder, addNote] = await Promise.all([
+		const [panelTitle, placeholder, addNote, closeLabel] = await Promise.all([
 			t('panel-title'),
 			t('placeholder'),
 			t('add-note'),
+			t('close'),
 		]);
 
 		const panel = document.createElement('div');
@@ -31,13 +32,15 @@
 		panel.innerHTML = `
 			<div class="internal-notes-header">
 				<h5><i class="fa fa-sticky-note"></i> ${escapeHtml(panelTitle)}</h5>
-				<button class="btn btn-sm btn-link internal-notes-close" title="Close"><i class="fa fa-times"></i></button>
 			</div>
 			<div class="internal-notes-assignee"></div>
 			<div class="internal-notes-list"></div>
 			<div class="internal-notes-form">
 				<textarea class="form-control internal-notes-input" rows="3" placeholder="${escapeHtml(placeholder)}"></textarea>
-				<button class="btn btn-primary btn-sm internal-notes-submit mt-2">${escapeHtml(addNote)}</button>
+				<div class="internal-notes-form-actions mt-2">
+					<button type="button" class="btn btn-primary btn-sm internal-notes-submit">${escapeHtml(addNote)}</button>
+					<button type="button" class="btn btn-secondary btn-sm internal-notes-close">${escapeHtml(closeLabel)}</button>
+				</div>
 			</div>
 		`;
 		document.body.appendChild(panel);
@@ -494,6 +497,83 @@
 		await loadAssignee(tid);
 	}
 
+	// --- Helpers for badge visibility (topic/list pages) ---
+
+	function canViewInternalNotesOnPage() {
+		return !!(ajaxify.data && (
+			ajaxify.data.canViewInternalNotes === true ||
+			(ajaxify.data.topic && ajaxify.data.topic.canViewInternalNotes === true)
+		));
+	}
+
+	// --- Buttons in component="sidebar/right" (collapsed = no "open" class = icon only; expanded = "open" = icon + text) ---
+
+	function isSidebarRightCollapsed(sidebarRight) {
+		if (!sidebarRight) return true;
+		// Expanded when this element or any ancestor has class "open"
+		const hasOpen = sidebarRight.classList.contains('open') ||
+			(sidebarRight.parentElement && sidebarRight.parentElement.classList.contains('open'));
+		return !hasOpen;
+	}
+
+	function updateSidebarRightCollapsedState(wrap) {
+		const sidebarRight = document.querySelector('[component="sidebar/right"]');
+		if (!sidebarRight || !wrap) return;
+		const collapsed = isSidebarRightCollapsed(sidebarRight);
+		wrap.classList.toggle('internal-notes-sidebar-actions--collapsed', collapsed);
+	}
+
+	async function renderSidebarRightButtons() {
+		const tid = getTid();
+		if (!tid || !canViewInternalNotesOnPage()) {
+			return;
+		}
+		const sidebarRight = document.querySelector('[component="sidebar/right"]');
+		if (!sidebarRight) {
+			return;
+		}
+		const existing = sidebarRight.querySelector('.internal-notes-sidebar-actions');
+		if (existing) {
+			if (existing._internalNotesResizeObserver) existing._internalNotesResizeObserver.disconnect();
+			if (existing._internalNotesMutationObserver) existing._internalNotesMutationObserver.disconnect();
+			existing.remove();
+		}
+		const [notesLabel, assignLabel] = await Promise.all([
+			t('thread-tool-notes'),
+			t('thread-tool-assign'),
+		]);
+		const wrap = document.createElement('div');
+		wrap.className = 'internal-notes-sidebar-actions';
+		wrap.innerHTML = `
+			<div class="internal-notes-sidebar-item" role="group">
+				<button type="button" class="toggle-internal-notes internal-notes-sidebar-btn" title="${escapeHtml(notesLabel)}">
+					<i class="fa fa-sticky-note" aria-hidden="true"></i>
+					<span class="internal-notes-sidebar-btn-text">${escapeHtml(notesLabel)}</span>
+				</button>
+				<button type="button" class="assign-topic-user internal-notes-sidebar-btn" title="${escapeHtml(assignLabel)}">
+					<i class="fa fa-user-plus" aria-hidden="true"></i>
+					<span class="internal-notes-sidebar-btn-text">${escapeHtml(assignLabel)}</span>
+				</button>
+			</div>
+		`;
+		// Append so we're last in DOM; with margin-top: auto we sit at bottom. If theme uses column-reverse, insert first so we render at bottom.
+		if (window.getComputedStyle(sidebarRight).flexDirection === 'column-reverse') {
+			sidebarRight.insertBefore(wrap, sidebarRight.firstChild);
+		} else {
+			sidebarRight.appendChild(wrap);
+		}
+
+		updateSidebarRightCollapsedState(wrap);
+		requestAnimationFrame(() => updateSidebarRightCollapsedState(wrap));
+		const ro = new ResizeObserver(() => updateSidebarRightCollapsedState(wrap));
+		ro.observe(sidebarRight);
+		wrap._internalNotesResizeObserver = ro;
+		const mo = new MutationObserver(() => updateSidebarRightCollapsedState(wrap));
+		mo.observe(document.body, { attributes: true, attributeFilter: ['class'] });
+		mo.observe(sidebarRight, { attributes: true, attributeFilter: ['class'] });
+		wrap._internalNotesMutationObserver = mo;
+	}
+
 	// --- Page lifecycle ---
 
 	hooks.on('action:ajaxify.end', () => {
@@ -503,6 +583,8 @@
 		}
 		// Run for both single-topic page and topic list pages (category, recent, etc.)
 		renderBadges();
+		// Topic page: inject Internal Notes & Assign Topic into the far-right sidebar (component="sidebar/right")
+		renderSidebarRightButtons();
 	});
 
 	function getTopicDataForTid(tid) {
@@ -538,7 +620,7 @@
 
 	async function renderBadges() {
 		const headers = document.querySelectorAll('[component="topic/header"]');
-		const isTopicPage = ajaxify.data.tid && ajaxify.data.canViewInternalNotes;
+		const isTopicPage = ajaxify.data.tid && canViewInternalNotesOnPage();
 		// If no headers found but we're on the topic page, use a single "virtual" pass with #content .topic-title
 		const headerList = headers.length ? Array.from(headers) : (isTopicPage ? [document.body] : []);
 

package/scss/internalnotes.scss

@@ -112,8 +112,89 @@
 		min-height: 60px;
 		font-size: 0.9rem;
 	}
+
+	.internal-notes-form-actions {
+		display: flex;
+		gap: 8px;
+		align-items: center;
+	}
+}
+
+// Internal Notes & Assign Topic in component="sidebar/right" — match theme (grey icons, at bottom)
+[component="sidebar/right"] .internal-notes-sidebar-actions {
+	margin-top: auto; /* push to bottom when parent is flex column */
+}
+.internal-notes-sidebar-actions {
+	display: flex;
+	flex-direction: column;
+	gap: 0;
+	padding: 0;
+	min-width: 0;
+
+	.internal-notes-sidebar-item {
+		display: flex;
+		flex-direction: column;
+		gap: 0;
+	}
+
+	.internal-notes-sidebar-btn {
+		display: flex;
+		align-items: center;
+		gap: 0.75rem;
+		width: 100%;
+		padding: 0.5rem 0.75rem;
+		border: none;
+		background: transparent;
+		color: inherit;
+		font-size: inherit;
+		text-align: left;
+		cursor: pointer;
+		border-radius: 0;
+		transition: background-color 0.15s ease;
+
+		&:hover {
+			background: var(--bs-tertiary-bg, rgba(0, 0, 0, 0.04));
+		}
+
+		&:focus {
+			outline: none;
+			box-shadow: inset 0 0 0 2px var(--bs-primary, #0d6efd);
+		}
+
+		// Match theme: same grey as other sidebar icons (no custom colors)
+		i {
+			flex-shrink: 0;
+			width: 1em;
+			text-align: center;
+			color: inherit;
+			opacity: inherit;
+		}
+	}
+
+	.internal-notes-sidebar-btn-text {
+		white-space: nowrap;
+		overflow: hidden;
+		text-overflow: ellipsis;
+	}
+
+	// Collapsed (no "open" on sidebar): icon-only — hide text
+	&.internal-notes-sidebar-actions--collapsed .internal-notes-sidebar-btn-text {
+		display: none !important;
+		visibility: hidden !important;
+		width: 0 !important;
+		height: 0 !important;
+		overflow: hidden !important;
+		position: absolute !important;
+		clip: rect(0, 0, 0, 0) !important;
+	}
+	&.internal-notes-sidebar-actions--collapsed .internal-notes-sidebar-btn {
+		justify-content: center;
+		padding: 0.5rem 0.75rem;
+		min-height: 2.5rem;
+	}
 }
 
+
 .internal-notes-badge,
 .assignee-badge {
 	font-size: 0.75rem;