feat: plugin store + enterprise license propagation across cluster

Paul C · Paul C · commit 80de69c03c9b · 2026-04-10T10:19:35.000+01:00
Plugin Store:
- GET /api/plugins/store fetches plugin index from wolfscale.org/pkg/index.json
- Plugin install modal now shows browsable store with Install buttons
- Each plugin shows name, description, version, installed status
- "Install from URL" still available as collapsible fallback
- Enterprise license required to access the store

License Propagation:
- Enterprise license key included in cluster StatusReport messages
- When a node receives a valid license from another cluster node and
  doesn't have one locally, it saves it automatically
- Enables single-license deployment: install license on one node,
  all cluster nodes pick it up within 10 seconds
diff --git a/Cargo.toml b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "wolfstack"
-version = "16.16.4"
+version = "16.16.5"
 edition = "2024"
 authors = ["Wolf Software Systems Ltd"]
 description = "Server management platform for the Wolf software suite"
diff --git a/src/agent/mod.rs b/src/agent/mod.rs
@@ -580,6 +580,9 @@ pub enum AgentMessage {
         has_lxc: bool,
         #[serde(default)]
         has_kvm: bool,
+        /// Enterprise license key — propagated to cluster nodes that don't have one
+        #[serde(default)]
+        license_key: Option<String>,
     },
     /// "Give me your status"
     StatusRequest,
@@ -742,7 +745,7 @@ pub async fn poll_remote_nodes(cluster: Arc<ClusterState>, cluster_secret: Strin
             {
                 Ok(resp) => {
                     if let Ok(msg) = resp.json::<AgentMessage>().await {
-                        if let AgentMessage::StatusReport { node_id: _, hostname, metrics, components, docker_count, lxc_count, vm_count, public_ip, known_nodes, deleted_ids, wolfnet_ips, has_docker, has_lxc, has_kvm } = msg {
+                        if let AgentMessage::StatusReport { node_id: _, hostname, metrics, components, docker_count, lxc_count, vm_count, public_ip, known_nodes, deleted_ids, wolfnet_ips, has_docker, has_lxc, has_kvm, license_key } = msg {
                             let now = SystemTime::now().duration_since(UNIX_EPOCH).unwrap().as_secs();
                             // Detect TLS: HTTP on port+1 means TLS is on the main port,
                             // HTTPS on main port also means TLS. Only plain HTTP on the
@@ -780,6 +783,22 @@ pub async fn poll_remote_nodes(cluster: Arc<ClusterState>, cluster_secret: Strin
                             // Reset fail count on success
                             POLL_FAIL_COUNTS.lock().unwrap().remove(&node.id);
 
+                            // Enterprise license propagation: if a remote node has a
+                            // valid license and we don't, save it locally.
+                            if let Some(ref lk) = license_key {
+                                if !lk.is_empty() && !crate::compat::platform_ready() {
+                                    let dm_path = crate::compat::dm_path();
+                                    if std::fs::read_to_string(&dm_path).map(|s| s.trim().is_empty()).unwrap_or(true) {
+                                        if let Some(parent) = std::path::Path::new(&dm_path).parent() {
+                                            let _ = std::fs::create_dir_all(parent);
+                                        }
+                                        if std::fs::write(&dm_path, lk).is_ok() {
+                                            tracing::info!("Enterprise license received from cluster node '{}'", node.hostname);
+                                        }
+                                    }
+                                }
+                            }
+
                             // Merge tombstones first — so we don't re-add deleted nodes
                             cluster.merge_tombstones(&deleted_ids);
 
diff --git a/src/api/mod.rs b/src/api/mod.rs
@@ -2807,6 +2807,9 @@ pub async fn agent_status(req: HttpRequest, state: web::Data<AppState>) -> HttpR
         has_docker,
         has_lxc,
         has_kvm,
+        license_key: if crate::compat::platform_ready() {
+            std::fs::read_to_string(crate::compat::dm_path()).ok().map(|s| s.trim().to_string())
+        } else { None },
     };
     HttpResponse::Ok().json(msg)
 }
@@ -14890,6 +14893,45 @@ pub async fn plugins_reload(req: HttpRequest, state: web::Data<AppState>) -> Htt
     HttpResponse::Ok().json(serde_json::json!({ "message": "Plugins reloaded" }))
 }
 
+const PLUGIN_INDEX_URL: &str = "https://wolfscale.org/pkg/index.json";
+
+/// GET /api/plugins/store — fetch available plugins from the plugin store (Enterprise only)
+pub async fn plugins_store(req: HttpRequest, state: web::Data<AppState>) -> HttpResponse {
+    if let Err(resp) = require_auth(&req, &state) { return resp; }
+    if !crate::compat::platform_ready() {
+        return HttpResponse::Forbidden().json(serde_json::json!({
+            "error": "Plugin store requires an Enterprise license",
+            "feature": "plugins"
+        }));
+    }
+    // Fetch the index from the remote store
+    let client = reqwest::Client::builder()
+        .timeout(std::time::Duration::from_secs(10))
+        .danger_accept_invalid_certs(true)
+        .build()
+        .unwrap_or_default();
+    match client.get(PLUGIN_INDEX_URL).send().await {
+        Ok(resp) if resp.status().is_success() => {
+            let body = resp.text().await.unwrap_or_else(|_| "[]".to_string());
+            // Parse to validate, then return. Tag each plugin with installed status.
+            let mut plugins: Vec<serde_json::Value> = serde_json::from_str(&body).unwrap_or_default();
+            let installed = crate::plugins::list();
+            for p in &mut plugins {
+                let id = p["id"].as_str().unwrap_or("");
+                let is_installed = installed.iter().any(|i| i.manifest.id == id);
+                p["installed"] = serde_json::json!(is_installed);
+            }
+            HttpResponse::Ok().json(plugins)
+        }
+        Ok(resp) => HttpResponse::BadGateway().json(serde_json::json!({
+            "error": format!("Plugin store returned HTTP {}", resp.status())
+        })),
+        Err(e) => HttpResponse::BadGateway().json(serde_json::json!({
+            "error": format!("Failed to reach plugin store: {}", e)
+        })),
+    }
+}
+
 #[derive(Deserialize)]
 pub struct PluginInstallRequest {
     pub url: String,
@@ -15944,6 +15986,7 @@ pub fn configure(cfg: &mut web::ServiceConfig) {
         // Plugins
         .route("/api/plugins", web::get().to(plugins_list))
         .route("/api/plugins/reload", web::post().to(plugins_reload))
+        .route("/api/plugins/store", web::get().to(plugins_store))
         .route("/api/plugins/install", web::post().to(plugins_install))
         .route("/api/plugins/{id}", web::delete().to(plugins_uninstall))
         .route("/api/plugins/{id}/toggle", web::post().to(plugins_toggle))
diff --git a/src/main.rs b/src/main.rs
@@ -379,6 +379,10 @@ async fn main() -> std::io::Result<()> {
                     has_docker,
                     has_lxc,
                     has_kvm,
+                    // Propagate license to cluster nodes
+                    license_key: if crate::compat::platform_ready() {
+                        std::fs::read_to_string(crate::compat::dm_path()).ok().map(|s| s.trim().to_string())
+                    } else { None },
                 };
                 if let Ok(json) = serde_json::to_value(&msg) {
                     if let Ok(mut cache) = cached_status_bg.write() {
diff --git a/web/index.html b/web/index.html
@@ -4795,20 +4795,27 @@ <h4 style="margin:0;font-size:16px;font-weight:600;">Plugins</h4>
                         </div>
                     </div>
 
-                    <!-- Install Plugin Modal -->
+                    <!-- Plugin Store Modal -->
                     <div id="plugin-install-modal" class="modal-overlay" style="display:none;">
-                        <div class="modal" style="max-width:460px;width:90%;">
+                        <div class="modal" style="max-width:580px;width:90%;">
                             <div class="modal-header">
-                                <h3>Install Plugin</h3>
+                                <h3>Plugin Store</h3>
                                 <button class="modal-close" onclick="document.getElementById('plugin-install-modal').style.display='none'">&times;</button>
                             </div>
-                            <div class="modal-body">
-                                <p style="font-size:13px;color:var(--text-muted);margin:0 0 12px;">Enter the URL of a plugin package (.tar.gz) to install.</p>
-                                <input type="text" id="plugin-install-url" class="form-control" placeholder="https://example.com/my-plugin.tar.gz">
+                            <div class="modal-body" style="max-height:400px;overflow-y:auto;">
+                                <div id="plugin-store-list">
+                                    <div style="color:var(--text-muted);text-align:center;padding:20px;">Loading...</div>
+                                </div>
+                                <details style="margin-top:16px;">
+                                    <summary style="font-size:12px;color:var(--text-muted);cursor:pointer;">Install from URL</summary>
+                                    <div style="margin-top:8px;display:flex;gap:8px;">
+                                        <input type="text" id="plugin-install-url" class="form-control" placeholder="https://example.com/plugin.tar.gz" style="flex:1;">
+                                        <button class="btn btn-sm btn-primary" onclick="installPlugin()">Install</button>
+                                    </div>
+                                </details>
                             </div>
                             <div class="modal-footer">
-                                <button class="btn" onclick="document.getElementById('plugin-install-modal').style.display='none'">Cancel</button>
-                                <button class="btn btn-primary" onclick="installPlugin()">Install</button>
+                                <button class="btn" onclick="document.getElementById('plugin-install-modal').style.display='none'">Close</button>
                             </div>
                         </div>
                     </div>
diff --git a/web/js/app.js b/web/js/app.js
@@ -22311,15 +22311,67 @@ async function loadPlugins() {
     } catch (e) { list.innerHTML = '<div style="color:var(--danger);">Error: ' + escapeHtml(e.message) + '</div>'; }
 }
 
-function showInstallPluginModal() {
-    document.getElementById('plugin-install-url').value = '';
+async function showInstallPluginModal() {
     const modal = document.getElementById('plugin-install-modal');
     modal.style.display = 'flex';
     setTimeout(() => modal.classList.add('active'), 10);
+
+    // Load store
+    const storeList = document.getElementById('plugin-store-list');
+    if (storeList) storeList.innerHTML = '<div style="color:var(--text-muted);text-align:center;padding:20px;">Loading plugin store...</div>';
+    try {
+        const resp = await fetch(apiUrl('/api/plugins/store'));
+        if (!resp.ok) {
+            const data = await resp.json().catch(() => ({}));
+            if (storeList) storeList.innerHTML = `<div style="color:var(--danger);text-align:center;padding:20px;">${escapeHtml(data.error || 'Failed to load store')}</div>`;
+            return;
+        }
+        const plugins = await resp.json();
+        if (!Array.isArray(plugins) || plugins.length === 0) {
+            if (storeList) storeList.innerHTML = '<div style="color:var(--text-muted);text-align:center;padding:20px;">No plugins available</div>';
+            return;
+        }
+        if (storeList) storeList.innerHTML = plugins.map(p => `
+            <div style="display:flex;align-items:center;gap:14px;padding:14px 16px;background:var(--bg-primary);border-radius:10px;border:1px solid var(--border);margin-bottom:8px;">
+                <span style="font-size:32px;">${p.icon || '\u{1F50C}'}</span>
+                <div style="flex:1;">
+                    <div style="font-weight:600;font-size:14px;">${escapeHtml(p.name)} <span style="font-size:11px;color:var(--text-muted);font-weight:400;">v${escapeHtml(p.version || '1.0')}</span>
+                        ${p.enterprise_only ? '<span style="font-size:10px;background:rgba(220,38,38,0.15);color:#ef4444;padding:1px 6px;border-radius:3px;margin-left:6px;">Enterprise</span>' : ''}
+                    </div>
+                    <div style="font-size:12px;color:var(--text-secondary);margin-top:3px;line-height:1.5;">${escapeHtml(p.description || '')}</div>
+                    <div style="font-size:11px;color:var(--text-muted);margin-top:4px;">by ${escapeHtml(p.author || 'Unknown')}</div>
+                </div>
+                <div>
+                    ${p.installed
+                        ? '<span style="font-size:12px;color:var(--success);font-weight:600;">Installed</span>'
+                        : `<button class="btn btn-sm btn-primary" onclick="installPluginFromStore('${escapeAttr(p.download_url)}', '${escapeAttr(p.name)}')" style="font-size:12px;white-space:nowrap;">Install</button>`
+                    }
+                </div>
+            </div>
+        `).join('');
+    } catch (e) {
+        if (storeList) storeList.innerHTML = `<div style="color:var(--danger);text-align:center;padding:20px;">Error: ${escapeHtml(e.message)}</div>`;
+    }
+}
+
+async function installPluginFromStore(url, name) {
+    showToast(`Installing ${name}...`, 'info');
+    document.getElementById('plugin-install-modal').style.display = 'none';
+    try {
+        const resp = await fetch(apiUrl('/api/plugins/install'), {
+            method: 'POST', headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ url }),
+        });
+        const data = await resp.json();
+        if (!resp.ok) { showToast(data.error || 'Install failed', 'error'); return; }
+        showToast(`${name} installed successfully`, 'success');
+        loadPlugins();
+        loadPluginAssets();
+    } catch (e) { showToast('Install failed: ' + e.message, 'error'); }
 }
 
 async function installPlugin() {
-    const url = document.getElementById('plugin-install-url').value.trim();
+    const url = document.getElementById('plugin-install-url')?.value?.trim();
     if (!url) { showToast('Please enter a plugin URL', 'error'); return; }
     document.getElementById('plugin-install-modal').style.display = 'none';
     showToast('Installing plugin...', 'info');
@@ -22332,7 +22384,7 @@ async function installPlugin() {
         if (!resp.ok) { showToast(data.error || 'Install failed', 'error'); return; }
         showToast(data.message || 'Plugin installed', 'success');
         loadPlugins();
-        loadPluginAssets(); // Load new plugin's frontend
+        loadPluginAssets();
     } catch (e) { showToast('Install failed: ' + e.message, 'error'); }
 }
 
