Custom viz release

[livehybrid]

Custom viz release — develop → master

Brings the Splunk 10.x Dashboard Studio custom-visualization sideloading work (and supporting changes) from develop into master. Net change: 39 files, +2,721 / −46.

Headline feature — sideload custom visualizations from packaged Splunk apps

Render dashboards that use custom Dashboard Studio viz by pointing dashpub at the packaged Splunk app(s) that contain them — no per-viz React code, and the viz are never bundled into dashpub itself.

• cli/init.js — ingestCustomVizApps: scans mounted Splunk app folders (DASHPUB_CUSTOM_VIZ_PATH), copies each viz bundle to public/custom_viz/<type>/, and emits a host shim at src/custom_components/<type>/index.jsx.
• template/src/preset.js — auto-registers every custom viz at build time via import.meta.glob('./custom_components/*/index.{js,jsx}') (folder name = the dashboard "type").
• Two host flavours, auto-detected:
  • StudioAmdHost.jsx + lib/studioAmdLoader.js — AMD modules (official 10.x framework) rendered inline with dashpub's React.
  • StudioExtensionHost.jsx + lib/studioExtensionBridge.js — IIFE bundles talking to globalThis.DashboardExtensionAPI, hosted in a sandboxed iframe.
• New env vars: DASHPUB_CUSTOM_VIZ_PATH (mounted app folders) and DASHPUB_CUSTOM_DEPS (extra npm deps merged at init). .gitignore updated so sideloaded viz/assets aren't committed.

Sample apps + one-command demo

• examples/custom-viz/ — README.md, run-demo.sh, and a demo dashboard (demo/custom-viz-demo/) using a static ds.test source (no Splunk backend needed).
• Sample packaged viz: viz-airspace-radar (iframe / DashboardExtensionAPI) and viz-realtime-clock + digital_clock (AMD).

View Source (opt-in)

• ViewSourceModal.jsx, DashboardPage.jsx, server.js — a "View source" pill that opens the dashboard's Studio definition JSON, gated behind DASHPUB_VIEW_SOURCE (exposed via /api/config).

Other app changes

• Dashboard.jsx — per-dashboard theme (honours each dashboard's own theme, falling back to the global one).

Docs & tests

• docs/features/custom-visualizations.md (full guide), docs/features/index.md, README.md, docs/configuration.md, docs/locale-time-format-findings.md.
• template/tests/custom-viz/render.mjs — headless render test for both host types (npm run test:custom-viz).

---

Merge / conflict-resolution notes

• Conflicts were resolved by merging master into develop (5dfc4c469). The merge result is identical to develop (zero diff), with no hand-edited "evil-merge" hunks.
• This is the correct resolution: master's only unique commit (the squash-merged June Release #628) has a tree identical to develop@8f6c8d22, an ancestor of develop — i.e. master's content is an older snapshot already contained in develop. Nothing from master is lost.

CI note

• Docker builds (amd64 + arm64), multi-arch manifest, root lockfile (npm ci) and Trivy all pass.
• The 2 failing Playwright E2E tests are a transient CI-infra issue, not a code regression: they assert health.services.splunk.status is configured|connected in CI, but the CI Splunk backend returned error. The identical tree (a6b755c8) passed E2E ~3h earlier — a re-run should go green.