Changeset 0.25.0 (#160)

server/store/interfaces.go

@@ -47,6 +47,7 @@ type Stores struct {
 	CapOverrides   CapabilityOverrideStore
 	RoutingPolicies RoutingPolicyStore
 	Sessions        SessionStore
+	Surfaces        SurfaceRegistryStore   // v0.25.0: Surface lifecycle management
 }
 
 // =========================================

server/store/postgres/stores.go

@@ -40,5 +40,6 @@ func NewStores(db *sql.DB) store.Stores {
 		CapOverrides:   NewCapOverrideStore(db),
 		RoutingPolicies: NewRoutingPolicyStore(db),
 		Sessions:        NewSessionStore(),
+		Surfaces:        NewSurfaceRegistryStore(),
 	}
 }

server/store/postgres/surface_registry.go

@@ -0,0 +1,117 @@
+package postgres
+
+import (
+	"context"
+	"database/sql"
+	"encoding/json"
+
+	"git.gobha.me/xcaliber/chat-switchboard/store"
+)
+
+type SurfaceRegistryStore struct{}
+
+func NewSurfaceRegistryStore() *SurfaceRegistryStore { return &SurfaceRegistryStore{} }
+
+// Seed upserts a core surface. Called at startup by the page engine
+// to ensure core surfaces exist in the registry. Does NOT overwrite
+// the enabled state if the row already exists (admin toggle survives restart).
+func (s *SurfaceRegistryStore) Seed(ctx context.Context, id, title, source string, manifest map[string]any) error {
+	manifestJSON := ToJSON(manifest)
+	_, err := DB.ExecContext(ctx, `
+		INSERT INTO surface_registry (id, title, source, manifest, enabled, installed_at, updated_at)
+		VALUES ($1, $2, $3, $4, true, NOW(), NOW())
+		ON CONFLICT (id) DO UPDATE SET
+			title = $2,
+			manifest = $4,
+			source = $3,
+			updated_at = NOW()`,
+		// Note: ON CONFLICT does NOT update 'enabled' — preserves admin toggle
+		id, title, source, manifestJSON)
+	return err
+}
+
+func (s *SurfaceRegistryStore) List(ctx context.Context) ([]store.SurfaceRegistration, error) {
+	rows, err := DB.QueryContext(ctx,
+		`SELECT id, title, manifest, enabled, source, installed_at, updated_at
+		 FROM surface_registry ORDER BY source, title`)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+
+	var surfaces []store.SurfaceRegistration
+	for rows.Next() {
+		var sr store.SurfaceRegistration
+		var manifestJSON []byte
+		if err := rows.Scan(&sr.ID, &sr.Title, &manifestJSON, &sr.Enabled, &sr.Source, &sr.InstalledAt, &sr.UpdatedAt); err != nil {
+			continue
+		}
+		json.Unmarshal(manifestJSON, &sr.Manifest)
+		surfaces = append(surfaces, sr)
+	}
+	return surfaces, rows.Err()
+}
+
+func (s *SurfaceRegistryStore) Get(ctx context.Context, id string) (*store.SurfaceRegistration, error) {
+	var sr store.SurfaceRegistration
+	var manifestJSON []byte
+	err := DB.QueryRowContext(ctx,
+		`SELECT id, title, manifest, enabled, source, installed_at, updated_at
+		 FROM surface_registry WHERE id = $1`, id).
+		Scan(&sr.ID, &sr.Title, &manifestJSON, &sr.Enabled, &sr.Source, &sr.InstalledAt, &sr.UpdatedAt)
+	if err == sql.ErrNoRows {
+		return nil, nil
+	}
+	if err != nil {
+		return nil, err
+	}
+	json.Unmarshal(manifestJSON, &sr.Manifest)
+	return &sr, nil
+}
+
+func (s *SurfaceRegistryStore) SetEnabled(ctx context.Context, id string, enabled bool) error {
+	result, err := DB.ExecContext(ctx,
+		`UPDATE surface_registry SET enabled = $2, updated_at = NOW() WHERE id = $1`,
+		id, enabled)
+	if err != nil {
+		return err
+	}
+	affected, _ := result.RowsAffected()
+	if affected == 0 {
+		return sql.ErrNoRows
+	}
+	return nil
+}
+
+func (s *SurfaceRegistryStore) Delete(ctx context.Context, id string) error {
+	// Only allow deleting extension surfaces, not core
+	result, err := DB.ExecContext(ctx,
+		`DELETE FROM surface_registry WHERE id = $1 AND source = 'extension'`, id)
+	if err != nil {
+		return err
+	}
+	affected, _ := result.RowsAffected()
+	if affected == 0 {
+		return sql.ErrNoRows
+	}
+	return nil
+}
+
+func (s *SurfaceRegistryStore) ListEnabled(ctx context.Context) ([]string, error) {
+	rows, err := DB.QueryContext(ctx,
+		`SELECT id FROM surface_registry WHERE enabled = true ORDER BY title`)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+
+	var ids []string
+	for rows.Next() {
+		var id string
+		if err := rows.Scan(&id); err != nil {
+			continue
+		}
+		ids = append(ids, id)
+	}
+	return ids, rows.Err()
+}

server/store/surface_registry_iface.go

@@ -0,0 +1,36 @@
+package store
+
+import "context"
+
+// SurfaceRegistryStore — CRUD for the surface_registry table.
+// Core surfaces are seeded at startup. Extension surfaces are managed via admin API.
+type SurfaceRegistryStore interface {
+	// Seed upserts a core surface (called at startup by page engine).
+	Seed(ctx context.Context, id, title, source string, manifest map[string]any) error
+
+	// List returns all registered surfaces, ordered by title.
+	List(ctx context.Context) ([]SurfaceRegistration, error)
+
+	// Get returns a single surface by ID.
+	Get(ctx context.Context, id string) (*SurfaceRegistration, error)
+
+	// SetEnabled toggles a surface's enabled state.
+	SetEnabled(ctx context.Context, id string, enabled bool) error
+
+	// Delete removes an extension surface. Core surfaces cannot be deleted.
+	Delete(ctx context.Context, id string) error
+
+	// ListEnabled returns IDs of all enabled surfaces.
+	ListEnabled(ctx context.Context) ([]string, error)
+}
+
+// SurfaceRegistration is a row from surface_registry.
+type SurfaceRegistration struct {
+	ID          string         `json:"id" db:"id"`
+	Title       string         `json:"title" db:"title"`
+	Manifest    map[string]any `json:"manifest" db:"manifest"`
+	Enabled     bool           `json:"enabled" db:"enabled"`
+	Source      string         `json:"source" db:"source"`
+	InstalledAt string         `json:"installed_at" db:"installed_at"`
+	UpdatedAt   string         `json:"updated_at" db:"updated_at"`
+}