Hardens the plugin framework so sister-site adoption is safe. Loader rewrite (shopdb/plugins/loader.py): - Reads manifest.json directly. Dependency sort and version checks no longer instantiate plugin classes (avoids __init__ side effects). - Fail-loud policy: in dev/test (DEBUG or TESTING true), plugin errors re-raise. In production, errors log with full context and the plugin is excluded from registration. Framework keeps booting. - Contract-version range check via packaging.SpecifierSet. Plugin's manifest.core_version must include the framework's __contract_version__ or load fails per the policy above. - Manifest validation: required fields (name, version, description), name matches directory, JSON parseable. Exceptions (shopdb/exceptions.py): - PluginNotFoundError, PluginContractError, PluginVersionError, PluginDependencyError. Specific types replace generic Exception swallowing. Auto-register core blueprints (shopdb/__init__.py): - CORE_BLUEPRINT_NAMES tuple drives registration. Adding a core resource is one entry, not three lines (import + register call). - Replaces 27 hand-coded register_blueprint calls. - Asserts each blueprint is exported by shopdb.core.api at boot. Public API namespace (shopdb/api/__init__.py): - audit_log: thin wrapper over AuditLog.log() with stable signature. - resolve_asset_position: implements ADR-001 position resolution (asset > related > location). Asset.mapx/mapy and AssetRelationship.inheritsposition columns are part of the locked contract surface but not yet in models; helper degrades gracefully to location-only fallback until the migration lands. BasePlugin helpers (shopdb/plugins/base.py): - get_setting(key, default), set_setting(key, value, ...). Settings namespaced as plugin.<pluginname>.<key> so two plugins can use the same key without colliding. Manifest version compatibility (plugins/*/manifest.json): - Bumped core_version from ">=1.0.0" to ">=0.1.0,<1.0.0" so all bundled plugins satisfy the new range check. Contract version bump (shopdb/__init__.py): - 0.1.0 -> 0.2.0. Additive surface change (Setting helpers, shopdb.api namespace) per ADR-002 minor-bump rules. Tests (tests/test_plugin_loader.py, tests/test_api_namespace.py): - 13 loader tests: manifest validation failures, version range checks, plugin.py import errors, strict-vs-isolate behavior under TESTING vs production-like config, manifest-first dependency sort. - 8 api-namespace tests: audit_log roundtrip, resolve position fallback chain, plugin.get_setting/set_setting roundtrip with per-plugin namespacing. Test count: 66 -> 87 passing. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
8.8 KiB
Plugin Hooks Reference
This is the canonical reference for the shopdb-flask plugin contract. Plugin authors implement BasePlugin and override the hooks they care about. Hooks marked required must be implemented; hooks marked optional have sensible defaults and can be left alone.
The contract is locked in ADR-001 and versioned per ADR-002.
Contract version
The framework declares its contract version in shopdb/__init__.py:
__contract_version__ = '0.2.0'
Each plugin's manifest.json declares the range of contract versions it supports:
{
"name": "yourplugin",
"version": "1.0.0",
"core_version": ">=0.1.0,<1.0.0",
"dependencies": []
}
The plugin loader checks this at load time and refuses to load plugins outside the supported range.
Plugin metadata
Each plugin ships a manifest.json. The dataclass PluginMeta is constructed from it.
{
"name": "computers",
"version": "1.0.0",
"description": "Tracks shop-floor PCs and engineering workstations",
"author": "shopdb-flask",
"dependencies": [],
"core_version": ">=0.1.0,<1.0.0",
"api_prefix": "/api/computers"
}
| Field | Required | Notes |
|---|---|---|
name |
Yes | Lowercase concatenated, no underscores or dashes |
version |
Yes | Plugin's own semver |
description |
Yes | One sentence |
dependencies |
No | List of plugin names that must load first |
core_version |
Yes | Range of framework __contract_version__ this plugin supports |
api_prefix |
No | Defaults to /api/<name> |
Required hooks
meta -> PluginMeta
Returns the plugin's metadata. Convention is to construct from manifest.json:
from pathlib import Path
import json
from shopdb.plugins.base import BasePlugin, PluginMeta
class ComputersPlugin(BasePlugin):
def __init__(self):
manifestpath = Path(__file__).parent / 'manifest.json'
with open(manifestpath) as f:
self._manifest = json.load(f)
@property
def meta(self) -> PluginMeta:
return PluginMeta(
name=self._manifest['name'],
version=self._manifest['version'],
description=self._manifest['description'],
dependencies=self._manifest.get('dependencies', []),
core_version=self._manifest.get('core_version', '>=0.1.0'),
api_prefix=self._manifest.get('api_prefix'),
)
get_blueprint() -> Optional[Blueprint]
Returns a Flask Blueprint with the plugin's API routes, or None if the plugin has no HTTP routes. The loader registers the blueprint at the api_prefix from the manifest.
from flask import Blueprint
from .api import computers_bp
class ComputersPlugin(BasePlugin):
def get_blueprint(self):
return computers_bp
get_models() -> List[Type]
Returns the SQLAlchemy model classes the plugin defines. Used by the migration runner and admin tooling.
from .models import Computer, ComputerSoftware
class ComputersPlugin(BasePlugin):
def get_models(self):
return [Computer, ComputerSoftware]
Optional hooks
init_app(app, db) -> None
Custom initialization. Called by the loader after the blueprint is registered and models are known. Use for Marshmallow schema registration, Caching configuration, secondary blueprint registration, or anything else the plugin needs.
class PrintersPlugin(BasePlugin):
def init_app(self, app, db):
from .api import printers_legacy_bp
app.register_blueprint(printers_legacy_bp, url_prefix='/api/printers/legacy')
get_cli_commands() -> List
Returns a list of Click commands or command groups to register on the Flask CLI.
import click
@click.group()
def computers_cli():
pass
@computers_cli.command()
def reset_computers():
"""Reset all computer status flags."""
...
class ComputersPlugin(BasePlugin):
def get_cli_commands(self):
return [computers_cli]
get_services() -> Dict[str, Type]
Returns a dict of service-name to service-class. Other plugins can request services via the plugin manager.
from .services import ZabbixService
class PrintersPlugin(BasePlugin):
def get_services(self):
return {'zabbix': ZabbixService}
get_dashboard_widgets() -> List[Dict]
Returns dashboard widget definitions for the home page.
class NotificationsPlugin(BasePlugin):
def get_dashboard_widgets(self):
return [{
'name': 'recent_notifications',
'component': 'NotificationsWidget',
'endpoint': '/api/notifications/recent',
'size': 'medium',
'position': 1,
}]
get_navigation_items() -> List[Dict]
Returns navigation menu items.
class ComputersPlugin(BasePlugin):
def get_navigation_items(self):
return [{
'name': 'Computers',
'icon': 'desktop',
'route': '/computers',
'position': 10,
}]
get_searchable_fields() -> List[Dict]
Declares fields the plugin contributes to global search.
from .models import Computer
class ComputersPlugin(BasePlugin):
def get_searchable_fields(self):
return [{
'model': Computer,
'search_fields': ['hostname', 'serialnumber', 'currentuser'],
'result_type': 'computer',
'url_template': '/computers/{id}',
'title_field': 'hostname',
'subtitle_field': 'currentuser',
}]
get_collector_schema() -> Optional[Dict]
Declares the JSON Schema for an external collector pushing to /api/collector/<pluginname>. See ADR-006 for the contract.
class ComputersPlugin(BasePlugin):
def get_collector_schema(self):
return {
'identityfield': 'hostname',
'fields': {
'hostname': {'type': 'string', 'required': True},
'macaddress': {'type': 'string'},
'osname': {'type': 'string'},
'osversion': {'type': 'string'},
'currentuser': {'type': 'string'},
'ipaddress': {'type': 'string'},
}
}
If the hook returns None (the default), no collector endpoint is registered.
Lifecycle hooks
These run when the plugin's installation state changes. All optional.
| Hook | When | Use case |
|---|---|---|
on_install(app) |
First time the plugin is installed via flask plugin install |
Seed reference data, run plugin-specific migrations, register webhooks |
on_uninstall(app) |
When the plugin is removed via flask plugin uninstall |
Clean up reference data, deregister webhooks |
on_enable(app) |
When the plugin is enabled at runtime | Subscribe to events, warm caches |
on_disable(app) |
When the plugin is disabled at runtime | Unsubscribe, drain queues |
Helpers exposed to plugins
The framework provides helper APIs in shopdb.api (the public namespace).
Audit logging
from shopdb.api import audit_log
audit_log(
action='created',
entitytype='Computer',
entityid=computer.assetid,
entityname=computer.hostname,
changes={'before': {}, 'after': computer.to_dict()},
)
Plugin-scoped settings
class PrintersPlugin(BasePlugin):
def init_app(self, app, db):
zabbix_url = self.get_setting('zabbix_url')
if not zabbix_url:
self.set_setting('zabbix_url', 'http://zabbix.example.com')
Settings persist to the core Setting model and survive restarts.
Position resolution
from shopdb.api import resolve_asset_position
position = resolve_asset_position(asset)
# Returns dict: {'mapx': 234, 'mapy': 567, 'positionsource': 'self' | 'related' | 'location' | None}
See ADR-001 for the position resolution algorithm.
Removed hooks
The following hooks existed in early drafts and have been removed for v1:
| Hook | Reason |
|---|---|
get_event_handlers |
Event bus deferred indefinitely. No real use case yet. Add via new ADR if needed. |
Versioning your changes
When you change anything documented here, you must:
- Bump
__contract_version__per ADR-002: major for removals or signature changes, minor for additive optional hooks, patch for docs. - Update ADR-001 if the contract surface itself changed (or supersede with a new ADR).
- Add or update the test in
tests/test_plugin_contract.pythat asserts the new behavior.
The skill defining-asset-contract walks through the full checklist.