* #270 add bookmark dialog * add edit bookmarks dialog * fix cancel editing bookmark * fix darkmode for icons, cursor pointer over boxes * update product icons to use colored versions where possible * scaled icons down to 64x64 * Revert "scaled icons down to 64x64" This reverts commit 740391c. * revert image downscale, use svelte enhanced image component to downscale images * fix unit test * Add OPA client for admin rights checking (#276) * Add OPA client for admin rights checking - New OPA client module (src/lib/server/opa.ts) using plain fetch - Separate handleOpaAdmin middleware hook (fail-closed) - Admin status exposed to client via event.locals.isAdmin and $page.data - Prometheus metrics: opa_request_duration_seconds + opa_request_total - Helm chart for OPA 1.16.2 (dev/opa/) - Sample Rego policy with admin email domain check - Dev setup: alice is admin (alice@admin.example.com) - Configurable via STACKABLE_COCKPIT_OPA_ENABLED/URL/TIMEOUT env vars * Replace custom OPA fetch client with @open-policy-agent/opa SDK Uses OPAClient.evaluate() with fromResult callback instead of raw fetch. Same external interface (checkAdmin), same error handling (fail-closed). * fix YAML format * fix YAML format * fix YAML format * fix: handle bare boolean responses from OPA admin check The fromResult callback expected { admin: true } but OPA may return a bare boolean. Now handles both formats. * chore: remove merge artifact feature flags Remove unused archivePreviewMaxBytes and commented-out env vars (INFINITE_SCROLL, CUT_COPY, PASTE, RENAME, MOVE) that have no corresponding code. --------- Co-authored-by: F3l1x1vo <fli@ordix.de> * #270 add admin check to pinning, add OPA tests * fix unit test * #270 show pin for all only to admins * fix unit test * #271 overhaul dashboard layout design (#281) * #270 add bookmark dialog * add edit bookmarks dialog * fix cancel editing bookmark * fix darkmode for icons, cursor pointer over boxes * update product icons to use colored versions where possible * scaled icons down to 64x64 * Revert "scaled icons down to 64x64" This reverts commit 740391c. * revert image downscale, use svelte enhanced image component to downscale images * #271 overhaul dashboard layout design * fix unit test * Add OPA client for admin rights checking (#276) * Add OPA client for admin rights checking - New OPA client module (src/lib/server/opa.ts) using plain fetch - Separate handleOpaAdmin middleware hook (fail-closed) - Admin status exposed to client via event.locals.isAdmin and $page.data - Prometheus metrics: opa_request_duration_seconds + opa_request_total - Helm chart for OPA 1.16.2 (dev/opa/) - Sample Rego policy with admin email domain check - Dev setup: alice is admin (alice@admin.example.com) - Configurable via STACKABLE_COCKPIT_OPA_ENABLED/URL/TIMEOUT env vars * Replace custom OPA fetch client with @open-policy-agent/opa SDK Uses OPAClient.evaluate() with fromResult callback instead of raw fetch. Same external interface (checkAdmin), same error handling (fail-closed). * fix YAML format * fix YAML format * fix YAML format * fix: handle bare boolean responses from OPA admin check The fromResult callback expected { admin: true } but OPA may return a bare boolean. Now handles both formats. * chore: remove merge artifact feature flags Remove unused archivePreviewMaxBytes and commented-out env vars (INFINITE_SCROLL, CUT_COPY, PASTE, RENAME, MOVE) that have no corresponding code. --------- Co-authored-by: F3l1x1vo <fli@ordix.de> * chore: dedupe packages * #270 add admin check to pinning, add OPA tests * fix unit test * #270 show pin for all only to admins * fix unit test * pull from feat/app-bookmark-dialog * pull from feat/app-bookmark-dialog --------- Co-authored-by: dklOrdix <dkl@ordix.de> * Add bookmarks to sidebar, add pinning of bookmarks, display bookmarks as tools inside the cockpit (#283) * #270 add bookmark dialog * add edit bookmarks dialog * fix cancel editing bookmark * fix darkmode for icons, cursor pointer over boxes * update product icons to use colored versions where possible * scaled icons down to 64x64 * Revert "scaled icons down to 64x64" This reverts commit 740391c. * revert image downscale, use svelte enhanced image component to downscale images * #275 allow users to pin bookmarks * #275 #280 add bookmarks to sidebar navigation, show external apps in cockpit * fix unit test * Add OPA client for admin rights checking (#276) * Add OPA client for admin rights checking - New OPA client module (src/lib/server/opa.ts) using plain fetch - Separate handleOpaAdmin middleware hook (fail-closed) - Admin status exposed to client via event.locals.isAdmin and $page.data - Prometheus metrics: opa_request_duration_seconds + opa_request_total - Helm chart for OPA 1.16.2 (dev/opa/) - Sample Rego policy with admin email domain check - Dev setup: alice is admin (alice@admin.example.com) - Configurable via STACKABLE_COCKPIT_OPA_ENABLED/URL/TIMEOUT env vars * Replace custom OPA fetch client with @open-policy-agent/opa SDK Uses OPAClient.evaluate() with fromResult callback instead of raw fetch. Same external interface (checkAdmin), same error handling (fail-closed). * fix YAML format * fix YAML format * fix YAML format * fix: handle bare boolean responses from OPA admin check The fromResult callback expected { admin: true } but OPA may return a bare boolean. Now handles both formats. * chore: remove merge artifact feature flags Remove unused archivePreviewMaxBytes and commented-out env vars (INFINITE_SCROLL, CUT_COPY, PASTE, RENAME, MOVE) that have no corresponding code. --------- Co-authored-by: F3l1x1vo <fli@ordix.de> * fix unit test * Add OPA client for admin rights checking (#276) * Add OPA client for admin rights checking - New OPA client module (src/lib/server/opa.ts) using plain fetch - Separate handleOpaAdmin middleware hook (fail-closed) - Admin status exposed to client via event.locals.isAdmin and $page.data - Prometheus metrics: opa_request_duration_seconds + opa_request_total - Helm chart for OPA 1.16.2 (dev/opa/) - Sample Rego policy with admin email domain check - Dev setup: alice is admin (alice@admin.example.com) - Configurable via STACKABLE_COCKPIT_OPA_ENABLED/URL/TIMEOUT env vars * Replace custom OPA fetch client with @open-policy-agent/opa SDK Uses OPAClient.evaluate() with fromResult callback instead of raw fetch. Same external interface (checkAdmin), same error handling (fail-closed). * fix YAML format * fix YAML format * fix YAML format * fix: handle bare boolean responses from OPA admin check The fromResult callback expected { admin: true } but OPA may return a bare boolean. Now handles both formats. * chore: remove merge artifact feature flags Remove unused archivePreviewMaxBytes and commented-out env vars (INFINITE_SCROLL, CUT_COPY, PASTE, RENAME, MOVE) that have no corresponding code. --------- Co-authored-by: F3l1x1vo <fli@ordix.de> * fix auth port, implement open in new tab option, fix custom link resolve * #270 add admin check to pinning, add OPA tests * fix unit test * #270 show pin for all only to admins * fix unit test * pull from feat/app-bookmark-dialog --------- Co-authored-by: dklOrdix <dkl@ordix.de> * fix styling * #293 remove support for embedded external services * #278 implement changes suggested in code review * #278 refactor comments * #278 fix unit tests * #278 open bookmarks from dashboard as well * #278 implement changes suggested in code review * #278 implement changes suggested in code review * merge main into feat/app-bookmark-dialog * fix: remove products without gui * #278 remove OPA and admin-only bookmark pinning Keep the bookmark PR focused on bookmarks. OPA admin checks (#274, #279) and the admin definition (#360) will come in a separate PR. - remove OPA client, admin hook, locals.isAdmin, OPA env vars and metrics - remove @open-policy-agent/opa dependency - remove dev/opa Helm chart and OPA deployment from dev/setup.sh - remove mock OPA server, admin e2e projects and admin OIDC profiles - remove "pin for everyone" from the bookmark modal and pinnedForEveryone from the bookmark schema; the modal keeps a single "Pin bookmark" checkbox - remove unused admin pin message keys * test(e2e): fix flaky storage paste tests Focusing the table with a click could hit a folder or ".." row, which navigates, and dblclick on a folder could open a second folder. Paste then went to the wrong prefix. Open folders with a single click, wait for the listing, and press shortcuts with focus on the body. * fix: changes from merge - NavigationProgress: use getPlatformSection/getToolsSection - bookmark e2e specs: use the shared auth fixtures - product logo backgrounds: bg-white -> bg-neutral-content (lint rule) - remove unused bookmark_pinned_section_title message key * fix(tests): scope link lookups to sidebar * fix(tests): typo * fix(storage): open exactly one folder on double-click The first click of a double-click on a folder navigates, so the second click and the dblclick landed on a row of the new listing and opened or selected it. The ".." row stays in place and went up two levels. The listing now only counts a double-click on the row its first click hit, and folder and ".." rows ignore the repeat click. E2E: share one openFolder/goUp/pasteHere in helpers.ts for the storage specs. They wait for the new listing, and pasteHere waits before pressing Ctrl+V so the paste targets the folder on screen. * fix: bookmark review findings - add ProductIcon component; logo fallback via component state - per-product badge text colour for WCAG AA contrast, guarded by a unit test - validate stored bookmarks per entry so one bad entry does not wipe all - show name/URL errors on submit and URL blur instead of a silently disabled button - prefill the default product name; refill it after the name is cleared - hide the duplicate dashboard icon link from assistive technology - guard localStorage writes; reuse action_close instead of button_close * fix(bookmarks): accept internal URLs such as IPs, NodePorts and single-label hosts * fix(i18n): align German dashboard heading with English * fix(a11y): label bookmark dialogs by their headings * fix(dashboard): truncate long bookmark names and hostnames * fix(sidebar): remove leftover hover-button classes from bookmark items * fix(a11y): avoid announcing the sidebar brand twice * fix(bookmarks): keep unsaved edits when cancelling deletion * fix(dashboard): show the bookmark environment once * fix(bookmarks): sync bookmark store across tabs Every write stores the whole list, so a tab with a stale list overwrote bookmarks saved in another tab. Reload the list on storage events. * refactor(storage): share localStorage helpers with the bookmark store Move loadFromStorage/persistToStorage to $lib/client so the dashboard bookmark store reuses them instead of duplicating them. * refactor(dashboard): use material-symbols icons instead of inline SVGs * refactor(i18n): use feature-prefixed bookmark keys and sentence case titles * fix(bookmarks): submit the bookmark dialog with Enter * chore: drop dev auth baseURL change from bookmark PR Unrelated to bookmarks; deriving the better-auth baseURL from the request host in dev is out of scope here. * fix(bookmarks): localise product default names and custom link label * fix(sidebar): use the visible label as the Tools toggle's accessible name * fix(bookmarks): name card buttons after their bookmark * fix(bookmarks): localise the URL placeholder and use an example host * refactor(bookmarks): share one hostname helper between dashboard and modal * chore: remove orphaned static Stackable logo * fix: only re-initialise the bookmark form when the dialog opens wasOpen no longer needs to be reactive, and the bookmark is read untracked, so the effect depends on open only. * refactor: drop redundant form resets and dead code in the bookmark modal The form is initialised on every open, so resetting it before closing is not needed. The preview guard was always true and getDefaultName() only wrapped selectedProduct.defaultName. * refactor: close the bookmark modal like the other modals Modal already applies the modal class, and the close button now sets open = false instead of relying on a method="dialog" form. --------- Co-authored-by: dklOrdix <dkl@ordix.de> Co-authored-by: Johannes Fleck <johannes.fleck@stackable.tech>

Define Admin definition #360

Description

Activity

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions