Intelligence Gateway public 1.2.1

Public 1.2.1 makes real AI connections the starting point and adds clearer evidence-based assessment workflows.

• Removes the bundled mock provider and preset AI connection. Configure your backend and model or Copilot Studio Direct Line agent through the secure companion.
• Organizes setup into six numbered sections, simplifies connection status, and makes evidence, sharing and follow-ups expandable.
• Adds analysis presets, bounded sample statistics, supplied-query baseline comparisons, freshness warnings, frozen-evidence follow-ups and Markdown incident briefs.
• Fixes ambiguous freshness fingerprints and avoids reporting zero counter increase when there are no valid adjacent sample pairs.
• Preserves query analysis and explicit PNG/JPEG uploads. Public 1.2.1 removes dashboard and selected-panel capture; use shared query results or upload a saved image instead.

Requires Grafana 11.6+ and Intelligence Gateway Secure AI companion 1.1.0+; use security-fixed companion 1.1.2 or newer. Install only one panel edition per Grafana instance, restart Grafana after upgrading, and fully reload the browser. Existing dashboard settings remain supported.

Validation includes 84 unit tests, multi-version browser CI, latest Grafana API compatibility, and real LM Studio query, follow-up and image checks using synthetic evidence. Copilot Direct Line remains a preview; enterprise SSO and live tenant compatibility are not claimed.

Setup guide · Provider connections · Release verification and catalog handoff

GitHub release publication is separate from Grafana catalog submission and approval.

The signed archive passed strict Plugin Validator checks and provenance verification. Version 1.2.1 also resolves the direct-navigation-access warning found in the retained 1.2.0 draft; release verification now fails on validator warnings.

Intelligence Gateway panel 1.1.2

Grafana dashboard capture fixes

• Correctly traverse tall dashboards on Grafana 12.4.0 by selecting the actual document scroller.
• Report an error if scrolling stalls before the bottom instead of returning an incomplete capture.
• Preserve active capture when Grafana 12.2 virtualizes the AI panel during scrolling. Cancel on navigation or provider/model changes; discard unclaimed results after five seconds.
• Add regression coverage for every chart in an eight-chart dashboard, scroll restoration, cancellation, cleanup, and explicit image submission.

Requires Intelligence Gateway companion data source 1.1.0 or later. Install the panel package, restart Grafana, and reload the browser. Updating Current View Exporter alone does not update this capture feature.

The release workflow checks the exact archive, signed manifest, checksum, source-bound build provenance, and Grafana plugin validator. Grafana catalog approval is a separate portal review.

Verified release evidence

Community-signed by digitalrcs. The exact archive passed 55 Grafana validator analyzers with zero failures, including signature verification. GitHub provenance is bound to the release workflow, tag v1.1.2, and source commit 54eea10b15167d6917203295979fc9ba63b6f0ba. The validator emits an annotated-tag checkout warning and then checks out this correct commit; no analyzer fails. AI-assisted review was not separately configured.

• SHA1: d08123c4345a3e5bab42197cdc58e596f30dede8
• SHA256: cbd5a4bc59550bce8eba920e403a3bc4ac6e79f7a1e676e7c6cec59088540b2f
• CI: 93 unit tests plus browser tests on Grafana 11.6.16, 12.0.10, 12.2.10, 12.4.0, 12.4.14, 13.1.9, and 13.3.0 passed.
• Release verification workflow

The attached verification archive preserves checksums, signed manifest, provenance, validator output, and CI evidence. Existing npm low/moderate dependency findings remain; the capture patch does not claim a clean dependency audit.

1.1.1 - Community-signed release

Community-signed release

Intelligence Gateway panel 1.1.1 is publicly signed by DigitalRCS with Grafana's Community signature classification. Use it with the Community-signed secure data source in the same Grafana instance.

This release preserves the reviewed 1.1.0 plugin behavior and runtime dependencies. It adds the public signature and release checks that refuse an unsigned archive. Development-only Grafana test tooling and synchronization were corrected for current host versions; shipped JavaScript and source maps remained byte-for-byte identical before and after those test changes. Existing 1.1.0 downloads remain unchanged. Signing does not itself publish the plugin in Grafana's catalog.

Grafana submission values

Field	Value
Plugin ID	digitalrcs-intelligencegateway-panel
Version	1.1.1
Package	Signed plugin ZIP
Source	Immutable v1.1.1 source
SHA1	64f5022a7f44f06ff4063e1cf09d5b1c3efe2bce
SHA256	5feab68e70a0f7b2f4ef651b0dc734c64a5e79f5677fd2ffe4e83792c64a6f76
Source commit	9dbf59a86fdbbf6c3127a15ce6d35e751a7e50b1
OS and architecture	Single, frontend-only ZIP

Use Submit Update on the existing submission after updating the secure data source. Paste the SHA1 value, not the checksum-file URL. Use the packaged plugin ZIP, not GitHub's source-code ZIP.

Verification

The exact signed archive passed complete manifest file-hash coverage, SHA1/SHA256 checks, and GitHub provenance bound to this repository, release workflow, tag, and commit. Grafana Plugin Validator completed 55 analyzers with zero failed analyzer events, including signature and provenance validation. Release validation.

The release-candidate CI passed on Grafana 11.6.16, 12.0.10, 12.2.10, 12.4.14, 13.1.9, and 13.3.0. All 90 test cases eventually passed: 87 passed on their first attempt and three required one automatic retry after OFREP or console-404 diagnostics. Strict console checks were retained; the reports preserve these qualifications. Release-candidate CI. The post-merge CI also passed all six versions on the exact release commit.

Security assessment dated October 30, 2026: the full npm audit reports five moderate and seven low affected package entries, zero high, and zero critical. Production-only findings are four host-external React Router entries. Additional qs and deepmerge findings affect development tooling. These findings are not suppressed, and the dependency graph is not described as advisory-free. Keep the Grafana host patched.

The reviewer fixture uses synthetic data and a deterministic mock transport receipt, not genuine AI inference. A real assessment requires an approved provider configured in the companion data source. Credentials stay in the server-side secure data-source settings. See the reviewer walkthrough, wiki, and catalog README.

1.1.0 - Dashboard images and clearer AI setup

What's new

• Capture the rendered dashboard or selected panels, or upload multiple PNG/JPEG images. Review previews before explicitly sending them for assessment.
• Choose data-only, images-only without a source-panel query, or combined analysis. Credentials and provider policy remain in the required secure companion data source.
• Show the selected AI connection and model, with a prominent Mock connection — no AI analysis warning and Use your own AI setup checklist. The supplied mock returns a fixed receipt, not an assessment.
• Improve capture names, checkbox alignment and narrow-screen layout. Clear analysis removes results, errors, and pending images.
• Update setup/provider documentation, both Wikis, reviewer walkthroughs, dependency checks, and release provenance verification.

Upgrade and setup

Install both 1.1.0 plugins, secure data source first, then restart Grafana and fully reload the browser. Existing data-only settings remain supported. Image analysis is optional and requires administrator approval of a vision-capable model.

Create a separate real AI connection under Connections → Data sources. Select it under the panel's AI provider → Secure AI data source. The Queries → Dashboard selector is the separate connection for source-panel measurements; it is unnecessary for images-only use. No AI model, hosted service, or cloud credential is bundled.

Secure companion 1.1.0 · Reviewer and own-provider walkthrough · Image-analysis guide · Detailed changes and limits

Verified release evidence

• 84 unit tests, build, type checks, dependency checks, API compatibility, and browser checks passed.
• The 15-test browser suite passed across Grafana 11.6.16, 12.0.10, 12.2.10, 12.4.13, 13.1.8, and 13.2.4. Post-merge CI on the exact release commit passed all 90 test executions with zero failures or retries. One earlier PR run needed a retry for a Grafana 12.4 core feature-flag startup error; that evidence remains available. No plugin assertion was suppressed.
• Desktop and narrow-screen previews, mock notices, selected/dashboard capture, and images-only transport were visually checked with synthetic data.
• The exact ZIP passed Grafana's default full validator with no failed analyzers. Its only plugin warning is the expected unsigned status. Packaged assets, bundled third-party license, checksum and provenance were independently checked.
• Source commit: 03e3d5f3bb8dce901be1a55c5c3d29d8e4d4b40b.
• SHA1: da72dcadbfba3b81453b7bae63a208ac2c2d4a48.
• SHA256: 045ab00b3ce2b6b3a83dca1cd6832f8295dea04e9665ad478cef68c131fb86f5.

Release-commit CI · PR verification · Clean implementation matrix · Release validation · Version-matched Grafana submission fields

This is an unsigned Grafana review build, not a publicly signed or catalog-certified plugin. Build provenance is not a Grafana signature. Mock transport checks do not prove live image understanding. Provider/model combinations need separate validation; the companion's Copilot Studio Direct Line adapter remains preview without delegated enterprise SSO. Four documented moderate host-external npm Router entries remain; no high/critical npm findings were found in the release checks.

Grafana Intelligence Gateway v1.0.1

Grafana Intelligence Gateway 1.0.1

This maintenance release improves the catalog description and setup guidance for analyzing panel query data with local or hosted AI models.

• Rewrites the catalog README around practical use cases, the two data-source connections, and a concise setup guide.
• Adds the official DigitalRCS logo and a real LM Studio assessment of synthetic panel data; replaces outdated catalog screenshots.
• Updates the catalog description and documentation link.
• Includes the synthetic traffic-shift walkthrough and clear labeling of the deterministic mock provider.
• Updates Grafana E2E tooling for Grafana 13.2, patches affected transitive dependencies, and uses Node.js 22 for release builds.

The analysis behavior and secure companion data-source requirement are unchanged. Requires Grafana 11.6 or later. Restart Grafana after installing the updated plugin metadata.

Grafana submission

• Packaged plugin ZIP
• SHA1 checksum file
• Tagged source code
• Setup and testing guidance

The archive has verified GitHub build provenance. It is unsigned for Grafana review; an attestation is not a Grafana plugin signature or catalog approval.

Verification

• Release workflow: successful; built on Node.js 22 from commit 0b7df4fac1e69b0c158992665b7f3d2ef547f97e.
• Release preparation checks: build, type checks, lint, 15 unit tests, Grafana API compatibility, and end-to-end tests passed on Grafana 11.6.16, 12.0.10, 12.2.10, 12.4.11, 13.1.6, and 13.2.2. The released source tree matches the tested tree.
• The downloaded ZIP checksum, structure, catalog README, metadata, and image hashes were verified against the tagged source.
• Provenance verification is bound to this ZIP, refs/tags/v1.0.1, the source commit, and .github/workflows/release.yml.
• Authenticated Grafana Plugin Validator found the provenance attestation and reported no blocking issues. Its only warning is the expected unsigned status for initial review. The inapplicable Go security check was excluded for this frontend-only plugin; JavaScript dependency, source, metadata, link, React compatibility, and antivirus checks ran.

SHA1: 6abe63355112db775129a9bc86d860b7e7195e7d

SHA256: cfba8e2c7946c6a75cbc803095aa9d3b31f8b7324216901a94595c670f42e485

Dependency maintenance

Updated fast-uri to 3.1.8, js-yaml to 3.15.2/4.3.2, nanoid to 3.3.19, and qs to 6.16.0. The dependency audit reports zero high or critical findings. Four moderate audit entries remain in the Grafana-supplied React Router dependency chain; these dependencies are externalized rather than bundled by this panel.

Grafana Intelligence Gateway v1.0.0

Grafana Intelligence Gateway 1.0.0

Initial catalog-review release of the DigitalRCS Grafana Intelligence Gateway panel.

Highlights

• Turns Grafana DataFrames into focused AI-assisted assessments.
• Reuses another panel's query results through Grafana's supported Dashboard data source.
• Routes all provider traffic through the required DigitalRCS secure companion data source.
• Keeps credentials server-side in Grafana secureJsonData; no provider secret or endpoint is stored in panel/dashboard JSON.
• Supports secure model discovery, prompt templates, skills context, bounded data serialization, cancellation, Clear analysis, and actionable errors.
• Provides large-model controls: hard output cap up to 1,048,576 tokens, provider/model default mode, soft answer-length guidance, and configurable long response timeouts.
• Uses full-width numeric values above sliders so large limits remain readable in the Grafana settings sidebar.

Reviewer environment

The repository includes Docker provisioning, sample CSV data, an example dashboard, and a deterministic credential-free AI provider. Reviewers can test model discovery, analysis, clearing, and re-analysis without an external account or API key.

Security boundary

The required digitalrcs-intelligencegateway-datasource companion owns provider credentials, endpoint allowlisting, HTTPS policy, redirect blocking, body limits, timeouts, model policy, and token ceilings. The panel communicates only through Grafana's authenticated data-source resource API.

Compatibility and validation

• Declared Grafana compatibility: >=11.6.0.
• Type checking, linting, unit tests, production build, metadata validation, API compatibility, and multi-version Grafana E2E are included in CI.
• The tagged release workflow produces a correctly rooted ZIP and a GitHub build-provenance attestation.
• The first public-review archive is intentionally unsigned. Grafana assigns the public signature level after review.

See Grafana submission information and certification readiness for the exact release evidence and review instructions.

Release evidence

• Published v1.0.0 release
• Build provenance attestation
• SHA1: 351958ae1c638107c85bc7c875ae1fd40cb343fb
• SHA256: 736e9060dbd84626c31dd2bc9db3de44f8799399fd7ff2dfab6a24bfee8c8a90