Add/Edit Bookmark Dialog by F3l1x1vo · Pull Request #278 · stackabletech/cockpit

F3l1x1vo · 2026-07-31T07:26:49Z

This PR adds a bookmark modal for adding and editing bookmarks. Currently, they are saved in localStorage (not a database like we hoped. The database is a v1 feature of the S3 Storage Browser and not yet available on the parent branch). Migrating these bookmarks to the database is an issue for later (#277).

The bookmarks are currently shown in a section on the dashboard but we will change the display of these as well (#271)

Closes #270

This reverts commit 740391c.

…ale images

* Add OPA client for admin rights checking - New OPA client module (src/lib/server/opa.ts) using plain fetch - Separate handleOpaAdmin middleware hook (fail-closed) - Admin status exposed to client via event.locals.isAdmin and $page.data - Prometheus metrics: opa_request_duration_seconds + opa_request_total - Helm chart for OPA 1.16.2 (dev/opa/) - Sample Rego policy with admin email domain check - Dev setup: alice is admin (alice@admin.example.com) - Configurable via STACKABLE_COCKPIT_OPA_ENABLED/URL/TIMEOUT env vars * Replace custom OPA fetch client with @open-policy-agent/opa SDK Uses OPAClient.evaluate() with fromResult callback instead of raw fetch. Same external interface (checkAdmin), same error handling (fail-closed). * fix YAML format * fix YAML format * fix YAML format * fix: handle bare boolean responses from OPA admin check The fromResult callback expected { admin: true } but OPA may return a bare boolean. Now handles both formats. * chore: remove merge artifact feature flags Remove unused archivePreviewMaxBytes and commented-out env vars (INFINITE_SCROLL, CUT_COPY, PASTE, RENAME, MOVE) that have no corresponding code. --------- Co-authored-by: F3l1x1vo <fli@ordix.de>

* #270 add bookmark dialog * add edit bookmarks dialog * fix cancel editing bookmark * fix darkmode for icons, cursor pointer over boxes * update product icons to use colored versions where possible * scaled icons down to 64x64 * Revert "scaled icons down to 64x64" This reverts commit 740391c. * revert image downscale, use svelte enhanced image component to downscale images * #271 overhaul dashboard layout design * fix unit test * Add OPA client for admin rights checking (#276) * Add OPA client for admin rights checking - New OPA client module (src/lib/server/opa.ts) using plain fetch - Separate handleOpaAdmin middleware hook (fail-closed) - Admin status exposed to client via event.locals.isAdmin and $page.data - Prometheus metrics: opa_request_duration_seconds + opa_request_total - Helm chart for OPA 1.16.2 (dev/opa/) - Sample Rego policy with admin email domain check - Dev setup: alice is admin (alice@admin.example.com) - Configurable via STACKABLE_COCKPIT_OPA_ENABLED/URL/TIMEOUT env vars * Replace custom OPA fetch client with @open-policy-agent/opa SDK Uses OPAClient.evaluate() with fromResult callback instead of raw fetch. Same external interface (checkAdmin), same error handling (fail-closed). * fix YAML format * fix YAML format * fix YAML format * fix: handle bare boolean responses from OPA admin check The fromResult callback expected { admin: true } but OPA may return a bare boolean. Now handles both formats. * chore: remove merge artifact feature flags Remove unused archivePreviewMaxBytes and commented-out env vars (INFINITE_SCROLL, CUT_COPY, PASTE, RENAME, MOVE) that have no corresponding code. --------- Co-authored-by: F3l1x1vo <fli@ordix.de> * chore: dedupe packages * #270 add admin check to pinning, add OPA tests * fix unit test * #270 show pin for all only to admins * fix unit test * pull from feat/app-bookmark-dialog * pull from feat/app-bookmark-dialog --------- Co-authored-by: dklOrdix <dkl@ordix.de>

… as tools inside the cockpit (#283) * #270 add bookmark dialog * add edit bookmarks dialog * fix cancel editing bookmark * fix darkmode for icons, cursor pointer over boxes * update product icons to use colored versions where possible * scaled icons down to 64x64 * Revert "scaled icons down to 64x64" This reverts commit 740391c. * revert image downscale, use svelte enhanced image component to downscale images * #275 allow users to pin bookmarks * #275 #280 add bookmarks to sidebar navigation, show external apps in cockpit * fix unit test * Add OPA client for admin rights checking (#276) * Add OPA client for admin rights checking - New OPA client module (src/lib/server/opa.ts) using plain fetch - Separate handleOpaAdmin middleware hook (fail-closed) - Admin status exposed to client via event.locals.isAdmin and $page.data - Prometheus metrics: opa_request_duration_seconds + opa_request_total - Helm chart for OPA 1.16.2 (dev/opa/) - Sample Rego policy with admin email domain check - Dev setup: alice is admin (alice@admin.example.com) - Configurable via STACKABLE_COCKPIT_OPA_ENABLED/URL/TIMEOUT env vars * Replace custom OPA fetch client with @open-policy-agent/opa SDK Uses OPAClient.evaluate() with fromResult callback instead of raw fetch. Same external interface (checkAdmin), same error handling (fail-closed). * fix YAML format * fix YAML format * fix YAML format * fix: handle bare boolean responses from OPA admin check The fromResult callback expected { admin: true } but OPA may return a bare boolean. Now handles both formats. * chore: remove merge artifact feature flags Remove unused archivePreviewMaxBytes and commented-out env vars (INFINITE_SCROLL, CUT_COPY, PASTE, RENAME, MOVE) that have no corresponding code. --------- Co-authored-by: F3l1x1vo <fli@ordix.de> * fix unit test * Add OPA client for admin rights checking (#276) * Add OPA client for admin rights checking - New OPA client module (src/lib/server/opa.ts) using plain fetch - Separate handleOpaAdmin middleware hook (fail-closed) - Admin status exposed to client via event.locals.isAdmin and $page.data - Prometheus metrics: opa_request_duration_seconds + opa_request_total - Helm chart for OPA 1.16.2 (dev/opa/) - Sample Rego policy with admin email domain check - Dev setup: alice is admin (alice@admin.example.com) - Configurable via STACKABLE_COCKPIT_OPA_ENABLED/URL/TIMEOUT env vars * Replace custom OPA fetch client with @open-policy-agent/opa SDK Uses OPAClient.evaluate() with fromResult callback instead of raw fetch. Same external interface (checkAdmin), same error handling (fail-closed). * fix YAML format * fix YAML format * fix YAML format * fix: handle bare boolean responses from OPA admin check The fromResult callback expected { admin: true } but OPA may return a bare boolean. Now handles both formats. * chore: remove merge artifact feature flags Remove unused archivePreviewMaxBytes and commented-out env vars (INFINITE_SCROLL, CUT_COPY, PASTE, RENAME, MOVE) that have no corresponding code. --------- Co-authored-by: F3l1x1vo <fli@ordix.de> * fix auth port, implement open in new tab option, fix custom link resolve * #270 add admin check to pinning, add OPA tests * fix unit test * #270 show pin for all only to admins * fix unit test * pull from feat/app-bookmark-dialog --------- Co-authored-by: dklOrdix <dkl@ordix.de>

# Conflicts: # TECH_DEBT.md # src/lib/server/auth.ts

stackable-cla · 2026-09-10T12:00:09Z

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
0 out of 2 committers have signed the CLA.

❌ F3l1x1vo
❌ dklOrdix
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

Bohreromir

Unless I do miss something the whole PinForEveryone does not work as its only stored in LocalStorage. Opa could then be removed too.

I havent yet read the whole thing, but I think this is enough for the meantime.

Feel free to ask for any clarifications.

Bohreromir · 2026-09-11T07:49:16Z

+  {#if product.logo}
+    <enhanced:img
+      src={product.logo}
+      alt=""


please add an alt

Bohreromir · 2026-09-11T07:50:03Z

 export default defineConfig({
  plugins: [
    tailwindcss(),
+    enhancedImages(),


Should we use enhanced img for the already existing imgs too?

Bohreromir · 2026-09-11T07:52:47Z

 # Feature flags
 # STACKABLE_COCKPIT_COMPLETION_ENABLED=false    # Disable SQL editor code completion (default: true)
 # STACKABLE_COCKPIT_STORAGE_BROWSER_ENABLED=true  # Enable S3/HDFS file browser (default: false)
-# PUBLIC_STACKABLE_COCKPIT_UPLOAD_CONCURRENCY=3  # Maximum number of concurrent file uploads (default: 3)


did you mean to remove this?

Bohreromir · 2026-09-11T07:54:21Z

+# OPA (Open Policy Agent) — admin rights checking
+# STACKABLE_COCKPIT_OPA_ENABLED=true           # Enable OPA admin checks (default: false)


Small contradiciton here. i guess most users would copy the .env.example to craft there own. If they do, the default is true while comment says false

Bohreromir · 2026-09-11T08:02:31Z

+        if (typeof bookmark.id === 'string' && isValidBookmarkId(bookmark.id)) {
+          return bookmarkWithoutOpenIn;
+        }
+        migrated = true;


Whats being migrated here? Bookmarks do not exist outside of this PR as far as i know

Bohreromir · 2026-09-11T08:23:16Z

+    addModalOpen = true;
+  }
+
+  function getProduct(productId: string) {


this fn exists twice and could be a shared helper in products.ts

Bohreromir · 2026-09-11T08:23:49Z

+    }
+  }
+
+  function handleLogoError(e: Event) {


Also repeated

Bohreromir · 2026-09-11T08:28:31Z

+      productId: selectedProduct.id,
+      name: name.trim(),
+      environment: environment.trim(),
+      url: url.trim(),


We should use zod here to verify data, as it stands everything can be inserted as an url, even javascript

Bohreromir · 2026-09-11T08:33:23Z

+    if (!section || !parent || !child) return;
+
+    const compute = () => {
+      const sectionRect = section.getBoundingClientRect();


this will break the animation if the user resize his window

Bohreromir · 2026-09-11T08:35:55Z

+    }
+  }
+
+  $effect(() => {


i think this could be removed by directly calling initForm in handleDeleteCancel

F3l1x1vo requested a review from dklOrdix July 31, 2026 07:26

F3l1x1vo self-assigned this Jul 31, 2026

F3l1x1vo changed the base branch from feat/iframe-modularization to main July 31, 2026 08:11

F3l1x1vo force-pushed the feat/app-bookmark-dialog branch from c622e28 to fbfa6e6 Compare July 31, 2026 08:17

F3l1x1vo and others added 14 commits September 2, 2026 07:23

#270 add bookmark dialog

e0fe691

add edit bookmarks dialog

80b1716

fix cancel editing bookmark

b866c48

fix darkmode for icons, cursor pointer over boxes

a663c17

update product icons to use colored versions where possible

52340e1

scaled icons down to 64x64

1f9f85e

Revert "scaled icons down to 64x64"

d93d2fe

This reverts commit 740391c.

revert image downscale, use svelte enhanced image component to downsc…

3684df3

…ale images

fix unit test

72426d6

#270 add admin check to pinning, add OPA tests

1ccbb04

fix unit test

a0e5f1c

#270 show pin for all only to admins

33bc633

fix unit test

7a7d76c

F3l1x1vo force-pushed the feat/app-bookmark-dialog branch from 286a34a to 7a7d76c Compare September 2, 2026 05:23

F3l1x1vo and others added 3 commits September 2, 2026 07:47

fix styling

dd9a256

F3l1x1vo mentioned this pull request Sep 3, 2026

Feat/iframe modularization #273

Closed

Merge remote-tracking branch 'origin/main' into feat/app-bookmark-dialog

a008a2b

# Conflicts: # TECH_DEBT.md # src/lib/server/auth.ts

#293 remove support for embedded external services

d022e4d

Bohreromir self-requested a review September 11, 2026 07:41

Bohreromir requested changes Sep 11, 2026

View reviewed changes

Navigation Menu

Uh oh!

Uh oh!

Add/Edit Bookmark Dialog - #278

Add/Edit Bookmark Dialog#278
F3l1x1vo wants to merge 19 commits into
mainfrom
feat/app-bookmark-dialog

F3l1x1vo commented Jul 31, 2026 •

edited

Loading

Uh oh!

stackable-cla Bot commented Sep 10, 2026

Uh oh!

Bohreromir left a comment

Uh oh!

Bohreromir Sep 11, 2026

Uh oh!

Bohreromir Sep 11, 2026

Uh oh!

Bohreromir Sep 11, 2026

Uh oh!

Bohreromir Sep 11, 2026

Uh oh!

Bohreromir Sep 11, 2026

Uh oh!

Bohreromir Sep 11, 2026

Uh oh!

Bohreromir Sep 11, 2026

Uh oh!

Bohreromir Sep 11, 2026

Uh oh!

Bohreromir Sep 11, 2026

Uh oh!

Bohreromir Sep 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

		# OPA (Open Policy Agent) — admin rights checking
		# STACKABLE_COCKPIT_OPA_ENABLED=true # Enable OPA admin checks (default: false)

Uh oh!

Uh oh!

Conversation

F3l1x1vo commented Jul 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

stackable-cla Bot commented Sep 10, 2026

Uh oh!

Bohreromir left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

F3l1x1vo commented Jul 31, 2026 •

edited

Loading