Add Redstor plugin - #138

…rification

- Consolidate duplicate Overview/Company dashboards and switch Backup/Restore
  Status tiles to stacked percentage bar charts, matching the real RedApp UI
- De-prefix source types (Redstor Company/Account -> Company/Account) per
  REVIEW.md, cascading through custom_types, index defs, streams, and scopes
- Encrypt the Private Key field and add a missing Client ID placeholder
- Add CODEOWNERS entry, reuse the existing "Usage" tag, add dashboard-level
  timeframe: none
- Verify every endpoint, param, and response field against Redstor's public
  RedAPI swagger spec; fix a dead checkbox default and map the now-documented
  Backup Status codes to a status color, and correct the docs accordingly

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

RedApp issues service account keys as JWK, not PEM, and the deployed
API requires Authorization: Bearer rather than the X-Api-Key scheme
documented in RedAPI's OpenAPI spec - confirmed against a live account.
Also renames the companyId config field to entityIdentifier and adds
the required apiVersion query arg.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Verified every data stream against a live Partner tenant for the first time,
which surfaced problems that checking field-by-field against the OpenAPI spec
had missed.

- Separate seats from backup accounts. Redstor bills per seat (one person),
  but /storage/accounts returns a row per workload, so a Microsoft 365 seat
  appears as both an Exchange and a OneDrive account. The test company had 856
  accounts against 363 seats, so the Accounts tile overstated seat usage 2.4x.
  Renamed the stream to Backup Accounts and documented the distinction
- Cut Company Account Backup Status from 3976 rows (4.2MB against a 6MB
  response cap) to 568 by returning the latest run per account, with a toggle
  for the full seven day history
- Index Products, Services and Editions so subscriptions and per-account status
  show names rather than numeric IDs. Editions are keyed on a composite
  product-edition key because Redstor reuses edition ID 5 across every product,
  and the key is built in a script since object lookups ignore computed columns
- Explain the Account Backup/Restore Errors 422 instead of surfacing it raw.
  The errors endpoint only recognises accounts with backup history, which
  excluded a third of the test company's accounts
- Correct the service ID mislabel. /backups/status/accounts and
  /restores/status/accounts return service IDs in a field named productId,
  which would have mis-resolved against Product objects
- Remove the companyId column, whose expression failed on every row and was
  being indexed into the graph as an error string
- Mask the Client ID field, and rewrite the README for a user audience rather
  than as a record of implementation decisions

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Edition IDs are globally unique and not scoped per product, so the
composite productId-editionId key was unnecessary. Index Edition
objects on editionId directly and drop the now-unneeded
productEditionKey construction from productEditions and
companySubscriptions.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

- Restore companyId on Account objects via a postRequestScript reading
  context.objects[0].rawId. The earlier attempt used {{object.rawId}} in a
  metadata valueExpression, which only resolves in request-building
  context (getArgs/endpointPath), not response shaping, so it failed on
  every row and was removed. This puts the property back the correct way.
- Hide Products, Product Services, Product Editions and Company
  Subscriptions from the tile picker - they're reference/enrichment
  streams, not ones users pick directly.
- Normalise data stream tags down to Account, Company and Usage.
- Rename Backup Accounts to Company Accounts for clarity, updating the
  matching OOB tile titles and README entry.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

- Rename Company Account Backup/Restore Status to Company Backups/Restores,
  and Company Backup/Restore Status to Company Backup/Restore Summary
- Fix Company Restores to flatten statusHistory per account instead of
  reading timestamp/status fields that were never populated
- Add Account Backups and Account Restores (single-account run history),
  scoped via companyId + accountId per RedAPI's public OpenAPI spec
- Retag streams with functional Backup/Restore tags instead of Account/
  Company; drop tags from Company Accounts and hidden reference streams
- Drop Company Backup/Restore Errors - RedAPI's /errors endpoints require
  accountId with no company-wide equivalent, so this isn't achievable as
  a single data stream

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

- Revert Company Backups to the flat passthrough it was at 699e383, keeping
  only the current name and tag. The per-row serviceName objectPropertyPath
  lookup and overallStatus expression were added after the version that
  performed, and the stream now times out while returning ~1/7th the rows the
  original did, so per-row work rather than row count is the likely cause
- Drop the post-request scripts from Company Restores and Account Restores.
  RedAPI returns OperationStatusByAccount for /restores/status/accounts, whose
  fields are flat - there is no statusHistory to flatten, so pathToData alone
  covers it and the scripts only ever hit their fallback branch
- Remove the includeHistory option from Company Restores, which never applied
- Remove the orphaned Backup/Restore Errors tiles from the Overview dashboard,
  left behind when those streams were deleted. squaredup validate does not
  catch dangling {{dataStreams.x}} references, so this shipped unnoticed

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

…om help

- Show the extraInfo field on Account Backup/Restore Errors as Error Message,
  and add a Service column resolving the id via a lookup in the JSON. That id
  arrives on a field RedAPI calls productId but which holds service ids, so it
  resolves against Service, not Product
- Remove API implementation detail from user-facing help text across the
  streams. Help renders as a tooltip in product, so upstream field names and
  notes about the vendor's API docs do not belong there. Four of these sat on
  hidden columns, where no one could ever have read them

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Returns per-product backup status split between the company's own
backups and its customer companies' rolled-up backups, for
comparison against the existing status-summary streams.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Tested against the live tenant but the endpoint's per-call cost
doesn't beat the existing companyBackupSummary/companyBackups
streams, so not carrying it forward.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

…rding

- Add missing tags to Company Accounts (Accounts) and Company
  Subscriptions (Usage).
- Un-hide Company Subscriptions - it backs a tile on the Overview
  dashboard, so it should be user-pickable too.
- Rewrite the README's Data streams section: explain when to use
  Company vs Account streams, drop streams that no longer exist or
  are hidden, fix the stale "Include full history" limitation.
- ui.json: fix help text to start with a verb, fix "Private Key"
  double-capitalisation (README updated to match).
- metadata.json: drop "RedAPI" from the description per REVIEW.md's
  guidance against API/implementation language.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Overview now shows the whole estate (Partner company plus every
customer rolled up) with no dashboard variable, backed by three new
data streams that wire up RedAPI's summary endpoints
(estateBackupSummary, estateRestoreSummary, estateConsumption) plus a
partnerSubscriptions stream for the Partner company's own
subscriptions. The per-account dashboard is renamed to "Account view"
for symmetry; its Account variable is unchanged.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Add rules relating Accounts to their Company and customer Companies to
their parent. Index companyId on Company objects so the rules can match.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

…PLUG-2655

Chain products -> productServices -> productEditions so the three
/products calls no longer run in parallel, in case RedAPI throttling
caused the intermittent 401s seen during indexing.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Replace classic visualisations on the Overview and Account View
dashboards with vizSpec tiles (scalar, bar and richTable), update their
layouts, and add a Company View dashboard scoped by the Company variable.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Use the revised Company View layout and drop the red styling from the
Overview Companies scalar.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>