@geraldmaron/construct 1.0.21 → 1.0.24

package/lib/intake/postgres-queue.mjs

@@ -1,240 +0,0 @@
-/**
- * lib/intake/postgres-queue.mjs — Postgres adapter for the IntakeQueue interface.
- *
- * Backs team and enterprise deployment modes. Implements the same six-method
- * contract as FilesystemIntakeQueue (enqueue, listPending, count, read,
- * markProcessed, markSkipped, reopen) plus a claim() method that uses
- * SELECT ... FOR UPDATE SKIP LOCKED so concurrent workers cannot grab the
- * same pending item.
- *
- * Triage fields (intake_type, rd_stage, primary_owner, recommended_action,
- * risk, requires_approval, confidence) are flattened into typed columns for
- * efficient filtering; the full packet — including suggestion / related /
- * excerpt / query — lives in payload jsonb so the on-disk and in-table
- * shapes round-trip without loss.
- */
-
-import path from 'node:path';
-import { shouldQuarantine } from './quarantine.mjs';
-
-function slugify(value) {
-  return String(value || 'untitled')
-    .toLowerCase()
-    .replace(/[^a-z0-9]+/g, '-')
-    .replace(/^-+|-+$/g, '')
-    .slice(0, 60) || 'untitled';
-}
-
-let counter = 0;
-function timestamp() {
-  // Milliseconds + a per-process counter to guarantee uniqueness even when
-  // two enqueues fire in the same millisecond (test loops, batched ingests).
-  counter = (counter + 1) % 1000;
-  const c = String(counter).padStart(3, '0');
-  return `${new Date().toISOString().replace(/[:.]/g, '-').slice(0, 23)}-${c}`;
-}
-
-function rowToEntry(row) {
-  if (!row) return null;
-  const payload = row.payload || {};
-  return {
-    id: row.id,
-    createdAt: row.created_at instanceof Date ? row.created_at.toISOString() : row.created_at,
-    status: row.status,
-    ...payload,
-    processedAt: row.processed_at instanceof Date ? row.processed_at.toISOString() : row.processed_at || undefined,
-    processedBy: row.processed_by || undefined,
-    notes: row.notes || undefined,
-    skippedAt: row.skipped_at instanceof Date ? row.skipped_at.toISOString() : row.skipped_at || undefined,
-    skippedBy: row.skipped_by || undefined,
-    reason: row.skip_reason || undefined,
-    claimedAt: row.claimed_at instanceof Date ? row.claimed_at.toISOString() : row.claimed_at || undefined,
-    claimedBy: row.claimed_by || undefined,
-  };
-}
-
-export class PostgresIntakeQueue {
-  constructor({ sql, project, tenantId = null } = {}) {
-    if (!sql) throw new Error('PostgresIntakeQueue: sql client is required');
-    if (!project) throw new Error('PostgresIntakeQueue: project is required');
-    this.sql = sql;
-    this.project = project;
-    this.tenantId = tenantId;
-  }
-
-  async enqueue(entry) {
-    if (!entry?.intake?.sourcePath) throw new Error('enqueue: entry.intake.sourcePath is required');
-
-    const ts = timestamp();
-    const slug = slugify(path.basename(entry.intake.sourcePath, path.extname(entry.intake.sourcePath)));
-    const id = `${ts}-${slug}`;
-    const triage = entry.triage || {};
-
-    // Quarantine routing: low-confidence packets land in status='quarantined'
-    // instead of 'pending' so worker claim() never picks them up. Human
-    // reroute via rerouteQuarantined() promotes to 'pending'.
-    const quarantineDecision = shouldQuarantine(triage);
-    const status = quarantineDecision.quarantine ? 'quarantined' : 'pending';
-    const augmentedEntry = quarantineDecision.quarantine
-      ? { ...entry, quarantineReason: quarantineDecision.reason }
-      : entry;
-
-    await this.sql`
-      INSERT INTO construct_intake_items (
-        id, project, tenant_id, status,
-        intake_type, rd_stage, primary_owner, recommended_action,
-        risk, requires_approval, confidence, payload
-      ) VALUES (
-        ${id}, ${this.project}, ${this.tenantId}, ${status},
-        ${triage.intakeType || null}, ${triage.rdStage || null},
-        ${triage.primaryOwner || null}, ${triage.recommendedAction || null},
-        ${triage.risk || null}, ${triage.requiresApproval || false},
-        ${typeof triage.confidence === 'number' ? triage.confidence : null},
-        ${this.sql.json(augmentedEntry)}
-      )
-    `;
-    return { id, route: quarantineDecision.quarantine ? 'quarantine' : 'pending', reason: quarantineDecision.reason };
-  }
-
-  async listQuarantine({ limit = 100 } = {}) {
-    const rows = await this.sql`
-      SELECT * FROM construct_intake_items
-      WHERE project = ${this.project}
-        AND (${this.tenantId}::text IS NULL OR tenant_id IS NOT DISTINCT FROM ${this.tenantId})
-        AND status = 'quarantined'
-      ORDER BY created_at ASC
-      LIMIT ${limit}
-    `;
-    return rows.map(rowToEntry);
-  }
-
-  async rerouteQuarantined(id, newType, { reroutedBy = 'unknown', reason = '' } = {}) {
-    const result = await this.sql`
-      UPDATE construct_intake_items
-      SET status = 'pending',
-          intake_type = ${newType},
-          payload = jsonb_set(
-            jsonb_set(payload, '{triage,originalIntakeType}', to_jsonb(intake_type::text)),
-            '{triage,intakeType}', to_jsonb(${newType}::text)
-          ),
-          updated_at = now(),
-          notes = ${`rerouted by ${reroutedBy}${reason ? `: ${reason}` : ''}`}
-      WHERE id = ${id}
-        AND project = ${this.project}
-        AND status = 'quarantined'
-      RETURNING id
-    `;
-    if (result.count === 0) throw new Error(`rerouteQuarantined: no quarantined entry ${id}`);
-    return { id, route: 'pending' };
-  }
-
-  async listPending({ limit = 100 } = {}) {
-    const rows = await this.sql`
-      SELECT * FROM construct_intake_items
-      WHERE project = ${this.project}
-        AND (${this.tenantId}::text IS NULL OR tenant_id IS NOT DISTINCT FROM ${this.tenantId})
-        AND status = 'pending'
-      ORDER BY created_at ASC
-      LIMIT ${limit}
-    `;
-    return rows.map(rowToEntry);
-  }
-
-  async count() {
-    const rows = await this.sql`
-      SELECT COUNT(*)::int AS n FROM construct_intake_items
-      WHERE project = ${this.project}
-        AND (${this.tenantId}::text IS NULL OR tenant_id IS NOT DISTINCT FROM ${this.tenantId})
-        AND status = 'pending'
-    `;
-    return rows[0]?.n ?? 0;
-  }
-
-  async read(id) {
-    const rows = await this.sql`
-      SELECT * FROM construct_intake_items
-      WHERE id = ${id}
-        AND project = ${this.project}
-        AND (${this.tenantId}::text IS NULL OR tenant_id IS NOT DISTINCT FROM ${this.tenantId})
-      LIMIT 1
-    `;
-    return rows[0] ? rowToEntry(rows[0]) : null;
-  }
-
-  async markProcessed(id, { processedBy = 'unknown', notes = '' } = {}) {
-    const result = await this.sql`
-      UPDATE construct_intake_items
-      SET status = 'processed', processed_at = now(), processed_by = ${processedBy},
-          notes = ${notes || null}, updated_at = now()
-      WHERE id = ${id}
-        AND project = ${this.project}
-        AND status IN ('pending', 'claimed')
-      RETURNING id
-    `;
-    if (result.count === 0) throw new Error(`markProcessed: no pending entry ${id}`);
-    return { id };
-  }
-
-  async markSkipped(id, { skippedBy = 'unknown', reason = '' } = {}) {
-    const result = await this.sql`
-      UPDATE construct_intake_items
-      SET status = 'skipped', skipped_at = now(), skipped_by = ${skippedBy},
-          skip_reason = ${reason || null}, updated_at = now()
-      WHERE id = ${id}
-        AND project = ${this.project}
-        AND status IN ('pending', 'claimed')
-      RETURNING id
-    `;
-    if (result.count === 0) throw new Error(`markSkipped: no pending entry ${id}`);
-    return { id };
-  }
-
-  async reopen(id) {
-    const result = await this.sql`
-      UPDATE construct_intake_items
-      SET status = 'pending',
-          processed_at = NULL, processed_by = NULL, notes = NULL,
-          skipped_at = NULL, skipped_by = NULL, skip_reason = NULL,
-          claimed_at = NULL, claimed_by = NULL,
-          updated_at = now()
-      WHERE id = ${id}
-        AND project = ${this.project}
-        AND status IN ('processed', 'skipped')
-      RETURNING id, (CASE WHEN processed_at IS NOT NULL THEN 'processed' ELSE 'skipped' END) AS from_status
-    `;
-    if (result.count === 0) throw new Error(`reopen: no processed or skipped entry ${id}`);
-    return { id, from: result[0]?.from_status || 'unknown' };
-  }
-
-  /**
-   * Atomically claim the next pending intake item for a worker.
-   * Uses SELECT ... FOR UPDATE SKIP LOCKED so concurrent workers across
-   * processes / containers cannot grab the same item. Returns the claimed
-   * entry (with status='claimed'), or null when the queue is empty.
-   */
-  async claim({ claimedBy }) {
-    if (!claimedBy) throw new Error('claim: claimedBy is required');
-    return await this.sql.begin(async (tx) => {
-      const rows = await tx`
-        SELECT * FROM construct_intake_items
-        WHERE project = ${this.project}
-          AND (${this.tenantId}::text IS NULL OR tenant_id IS NOT DISTINCT FROM ${this.tenantId})
-          AND status = 'pending'
-        ORDER BY created_at ASC
-        FOR UPDATE SKIP LOCKED
-        LIMIT 1
-      `;
-      const row = rows[0];
-      if (!row) return null;
-      await tx`
-        UPDATE construct_intake_items
-        SET status = 'claimed', claimed_at = now(), claimed_by = ${claimedBy}, updated_at = now()
-        WHERE id = ${row.id}
-      `;
-      row.status = 'claimed';
-      row.claimed_by = claimedBy;
-      row.claimed_at = new Date();
-      return rowToEntry(row);
-    });
-  }
-}

package/lib/server/static/index.html

@@ -1 +0,0 @@
-<!DOCTYPE html><html lang="en" data-theme="dark" data-density="comfortable" data-motion="normal" class="geist_478ec610-module__Maz4kG__variable geist_d633ac5f-module__BboVrW__variable jetbrains_mono_dc177b0e-module__78ed6G__variable"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/_next/static/media/70bc3e132a0a741e-s.p.3t6q91iet4nsy.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/caa3a2e1cccd8315-s.p.0wgildi0cnwt9.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="stylesheet" href="/_next/static/chunks/07baqf-hmk6oo.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/0i88v4ql6s7aw.js"/><script src="/_next/static/chunks/26rq-xwqn81a7.js" async=""></script><script src="/_next/static/chunks/1q2ld_2skrq5q.js" async=""></script><script src="/_next/static/chunks/41yml7ep3qrnx.js" async=""></script><script src="/_next/static/chunks/turbopack-1wenwimq-yd36.js" async=""></script><script src="/_next/static/chunks/39l2haooi0nh6.js" async=""></script><script src="/_next/static/chunks/1-8s9_t85wwr4.js" async=""></script><script src="/_next/static/chunks/0cangwgy_395t.js" async=""></script><meta name="next-size-adjust" content=""/><title>Construct — Dashboard</title><meta name="description" content="Local operations dashboard for Construct — approvals, health, knowledge, models, providers."/><script src="/_next/static/chunks/0cz1d0mv5g_q7.js" noModule=""></script></head><body><div hidden=""><!--$--><!--/$--></div><div class="shell"><header class="topbar"><a class="brand" href="/"><div class="mark"></div><div class="name">Construct<em>dashboard</em></div></a><div class="search-wrap"><label class="search"><svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2"><circle cx="11" cy="11" r="7"></circle><line x1="21" y1="21" x2="16.5" y2="16.5"></line></svg><input readOnly="" placeholder="Search dashboard…"/><span class="kbd">⌘K</span></label></div><div class="top-actions"><button class="icon-btn" title="Toggle theme" type="button"><svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><circle cx="12" cy="12" r="4"></circle><line x1="12" y1="2" x2="12" y2="5"></line><line x1="12" y1="19" x2="12" y2="22"></line><line x1="2" y1="12" x2="5" y2="12"></line><line x1="19" y1="12" x2="22" y2="12"></line><line x1="4.5" y1="4.5" x2="6.5" y2="6.5"></line><line x1="17.5" y1="17.5" x2="19.5" y2="19.5"></line><line x1="4.5" y1="19.5" x2="6.5" y2="17.5"></line><line x1="17.5" y1="6.5" x2="19.5" y2="4.5"></line></svg></button><button class="icon-btn" title="Toggle density" type="button"><svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><line x1="3" y1="7" x2="21" y2="7"></line><line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="17" x2="21" y2="17"></line></svg></button><a class="icon-btn outlined" href="https://github.com/geraldmaron/construct" target="_blank" rel="noreferrer"><svg viewBox="0 0 24 24" width="14" height="14" fill="currentColor"><path d="M12 .5C5.65.5.5 5.66.5 12.02c0 5.09 3.29 9.4 7.86 10.92.58.1.79-.25.79-.55v-2.13c-3.2.7-3.87-1.37-3.87-1.37-.52-1.32-1.27-1.67-1.27-1.67-1.04-.71.08-.7.08-.7 1.15.08 1.76 1.18 1.76 1.18 1.02 1.76 2.69 1.25 3.35.96.1-.74.4-1.25.73-1.54-2.55-.29-5.24-1.28-5.24-5.7 0-1.26.45-2.29 1.18-3.1-.12-.29-.51-1.46.11-3.04 0 0 .96-.31 3.16 1.18a10.9 10.9 0 0 1 5.74 0c2.2-1.49 3.16-1.18 3.16-1.18.62 1.58.23 2.75.12 3.04.74.81 1.18 1.84 1.18 3.1 0 4.43-2.69 5.41-5.25 5.69.41.36.78 1.05.78 2.13v3.16c0 .31.21.66.79.55A11.52 11.52 0 0 0 23.5 12.02C23.5 5.66 18.35.5 12 .5Z"></path></svg> <span style="font-size:11px">repo</span></a></div><div class="progress"></div></header><div class="body-grid"><aside class="sidebar"><div class="side-group"><div class="side-label">Overview</div><a class="side-link active" href="/"><span class="num">01</span><span>Home</span></a><a class="side-link" href="/doctor/"><span class="num">02</span><span>Doctor</span></a><a class="side-link" href="/resources/"><span class="num">03</span><span>Services</span></a></div><div class="side-group"><div class="side-label">Activity</div><a class="side-link" href="/audit/"><span class="num">01</span><span>Audit trail</span></a><a class="side-link" href="/snapshots/"><span class="num">02</span><span>Snapshots</span></a><a class="side-link" href="/performance/"><span class="num">03</span><span>Performance</span></a></div><div class="side-group"><div class="side-label">Work</div><a class="side-link" href="/approvals/"><span class="num">01</span><span>Approvals</span></a><a class="side-link" href="/workflow/"><span class="num">02</span><span>Workflow</span></a><a class="side-link" href="/beads/"><span class="num">03</span><span>Beads</span></a><a class="side-link" href="/artifacts/"><span class="num">04</span><span>Artifacts</span></a><a class="side-link" href="/intake/"><span class="num">05</span><span>Intake</span></a></div><div class="side-group"><div class="side-label">Specialists</div><a class="side-link" href="/agents/"><span class="num">01</span><span>Specialists</span></a><a class="side-link" href="/skills/"><span class="num">02</span><span>Skills</span></a><a class="side-link" href="/commands/"><span class="num">03</span><span>Slash commands</span></a><a class="side-link" href="/hooks/"><span class="num">04</span><span>Hooks</span></a><a class="side-link" href="/plugins/"><span class="num">05</span><span>Plugins</span></a></div><div class="side-group"><div class="side-label">Models &amp; Providers</div><a class="side-link" href="/models/"><span class="num">01</span><span>Models</span></a><a class="side-link" href="/providers/"><span class="num">02</span><span>Providers</span></a><a class="side-link" href="/mcp/"><span class="num">03</span><span>MCP servers</span></a></div><div class="side-group"><div class="side-label">Knowledge</div><a class="side-link" href="/knowledge/"><span class="num">01</span><span>Knowledge</span></a><a class="side-link" href="/editor/"><span class="num">02</span><span>Editor</span></a></div><div class="side-group"><div class="side-label">System</div><a class="side-link" href="/config/"><span class="num">01</span><span>Config</span></a><a class="side-link" href="/infrastructure/"><span class="num">02</span><span>Infrastructure</span></a></div><div class="side-foot">Local dashboard for Construct. Theme + density preferences persist.</div></aside><main class="main"><div class="page"><div class="eyebrow"><span class="dot"></span><span>overview · construct dashboard</span></div><h1 class="page-title">System state</h1><p class="page-lede">The runtime in one place. Approvals, services, model providers, knowledge corpus, and intake — each section deep-links to its dedicated surface.</p><div class="meta-strip"><span class="pill">mode: <!-- -->…</span><span>instance: <!-- -->…</span><span class="sep">·</span><span>embed: <!-- -->stopped</span></div><div class="body"><div class="hero-stats" style="margin-top:0;margin-bottom:24px"><div class="hero-stat"><span class="k">Services</span><span class="v">…</span><span style="display:block;font-size:11.5px;color:var(--muted);margin-top:4px">running</span></div><div class="hero-stat"><span class="k">Approvals</span><span class="v">…</span><span style="display:block;font-size:11.5px;color:var(--muted);margin-top:4px">pending</span></div><div class="hero-stat"><span class="k">Skills</span><span class="v">0</span><span style="display:block;font-size:11.5px;color:var(--muted);margin-top:4px">registered</span></div><div class="hero-stat"><span class="k">Commands</span><span class="v">0</span><span style="display:block;font-size:11.5px;color:var(--muted);margin-top:4px">slash</span></div></div><section class="section open"><button class="section-head" aria-expanded="true" type="button"><span class="chev"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 6 15 12 9 18"></polyline></svg></span><span style="display:flex;flex-direction:column;gap:6px"><span class="section-num">01</span><span class="section-title">Pending approvals</span></span><span class="section-aside"><span>empty</span></span></button><div class="tldr-row"><div class="tldr"><b>TL;DR</b>Items waiting on a human gate. High-risk mutations (work item creation, merge, doc publish, config changes) land here.</div></div><div class="section-body-wrap"><div class="section-body"><div class="section-body-inner"><div class="body"><div style="padding:24px;text-align:center;color:var(--muted);font-family:var(--mono);font-size:12px">Loading…</div></div></div></div></div></section><section class="section"><button class="section-head" aria-expanded="false" type="button"><span class="chev"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 6 15 12 9 18"></polyline></svg></span><span style="display:flex;flex-direction:column;gap:6px"><span class="section-num">02</span><span class="section-title">Services</span></span><span class="section-aside"><span>0/0 running</span></span></button><div class="tldr-row"><div class="tldr"><b>TL;DR</b>Local processes that back the runtime: Postgres, memory bridge, OpenCode bridge, dashboard, embed daemon.</div></div><div class="section-body-wrap"><div class="section-body"><div class="section-body-inner"><div class="body"><div style="padding:24px;text-align:center;color:var(--muted);font-family:var(--mono);font-size:12px">Loading…</div><p style="margin-top:12px"><a class="link" href="/resources/">Open services dashboard →</a></p></div></div></div></div></section><section class="section"><button class="section-head" aria-expanded="false" type="button"><span class="chev"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 6 15 12 9 18"></polyline></svg></span><span style="display:flex;flex-direction:column;gap:6px"><span class="section-num">03</span><span class="section-title">Credentials</span></span><span class="section-aside"><span>0 tracked</span></span></button><div class="tldr-row"><div class="tldr"><b>TL;DR</b>Provider API keys, billing posture, and 1Password references. Set them in /providers.</div></div><div class="section-body-wrap"><div class="section-body"><div class="section-body-inner"><div class="body"><p style="margin-top:12px"><a class="link" href="/providers/">Manage providers →</a></p></div></div></div></div></section><section class="section"><button class="section-head" aria-expanded="false" type="button"><span class="chev"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 6 15 12 9 18"></polyline></svg></span><span style="display:flex;flex-direction:column;gap:6px"><span class="section-num">04</span><span class="section-title">Quick links</span></span><span class="section-aside"></span></button><div class="tldr-row"><div class="tldr"><b>TL;DR</b>Deep links into every dashboard surface.</div></div><div class="section-body-wrap"><div class="section-body"><div class="section-body-inner"><div class="body"><div class="callout"><span class="clt-label">Where to next</span><div><p><a class="link" href="/doctor/">Doctor</a>,<!-- --> <a class="link" href="/knowledge/">Knowledge</a>,<!-- --> <a class="link" href="/intake/">Intake</a>,<!-- --> <a class="link" href="/workflow/">Workflow</a>,<!-- --> <a class="link" href="/agents/">Specialists</a>,<!-- --> <a class="link" href="/models/">Models</a>,<!-- --> <a class="link" href="/audit/">Audit</a>.</p></div></div></div></div></div></div></section></div></div><!--$--><!--/$--></main></div></div><script src="/_next/static/chunks/0i88v4ql6s7aw.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[95327,[\"/_next/static/chunks/39l2haooi0nh6.js\",\"/_next/static/chunks/1-8s9_t85wwr4.js\"],\"AppShellClient\"]\n3:I[39756,[\"/_next/static/chunks/39l2haooi0nh6.js\",\"/_next/static/chunks/1-8s9_t85wwr4.js\"],\"default\"]\n4:I[37457,[\"/_next/static/chunks/39l2haooi0nh6.js\",\"/_next/static/chunks/1-8s9_t85wwr4.js\"],\"default\"]\n5:I[47257,[\"/_next/static/chunks/39l2haooi0nh6.js\",\"/_next/static/chunks/1-8s9_t85wwr4.js\"],\"ClientPageRoot\"]\n6:I[62453,[\"/_next/static/chunks/39l2haooi0nh6.js\",\"/_next/static/chunks/1-8s9_t85wwr4.js\",\"/_next/static/chunks/0cangwgy_395t.js\"],\"default\"]\n9:I[97367,[\"/_next/static/chunks/39l2haooi0nh6.js\",\"/_next/static/chunks/1-8s9_t85wwr4.js\"],\"OutletBoundary\"]\na:\"$Sreact.suspense\"\nc:I[97367,[\"/_next/static/chunks/39l2haooi0nh6.js\",\"/_next/static/chunks/1-8s9_t85wwr4.js\"],\"ViewportBoundary\"]\ne:I[97367,[\"/_next/static/chunks/39l2haooi0nh6.js\",\"/_next/static/chunks/1-8s9_t85wwr4.js\"],\"MetadataBoundary\"]\n10:I[68027,[\"/_next/static/chunks/39l2haooi0nh6.js\",\"/_next/static/chunks/1-8s9_t85wwr4.js\"],\"default\",1]\n:HL[\"/_next/static/chunks/07baqf-hmk6oo.css\",\"style\"]\n:HL[\"/_next/static/media/70bc3e132a0a741e-s.p.3t6q91iet4nsy.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/media/caa3a2e1cccd8315-s.p.0wgildi0cnwt9.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"c\":[\"\",\"\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"__PAGE__\",{}]},\"$undefined\",\"$undefined\",16],[[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/chunks/07baqf-hmk6oo.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/39l2haooi0nh6.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-1\",{\"src\":\"/_next/static/chunks/1-8s9_t85wwr4.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"html\",null,{\"lang\":\"en\",\"data-theme\":\"dark\",\"data-density\":\"comfortable\",\"data-motion\":\"normal\",\"suppressHydrationWarning\":true,\"className\":\"geist_478ec610-module__Maz4kG__variable geist_d633ac5f-module__BboVrW__variable jetbrains_mono_dc177b0e-module__78ed6G__variable\",\"children\":[\"$\",\"body\",null,{\"children\":[\"$\",\"$L2\",null,{\"nav\":[{\"label\":\"Overview\",\"items\":[{\"id\":\"home\",\"title\":\"Home\",\"href\":\"/\"},{\"id\":\"doctor\",\"title\":\"Doctor\",\"href\":\"/doctor\"},{\"id\":\"resources\",\"title\":\"Services\",\"href\":\"/resources\"}]},{\"label\":\"Activity\",\"items\":[{\"id\":\"audit\",\"title\":\"Audit trail\",\"href\":\"/audit\"},{\"id\":\"snapshots\",\"title\":\"Snapshots\",\"href\":\"/snapshots\"},{\"id\":\"performance\",\"title\":\"Performance\",\"href\":\"/performance\"}]},{\"label\":\"Work\",\"items\":[{\"id\":\"approvals\",\"title\":\"Approvals\",\"href\":\"/approvals\"},{\"id\":\"workflow\",\"title\":\"Workflow\",\"href\":\"/workflow\"},{\"id\":\"beads\",\"title\":\"Beads\",\"href\":\"/beads\"},{\"id\":\"artifacts\",\"title\":\"Artifacts\",\"href\":\"/artifacts\"},{\"id\":\"intake\",\"title\":\"Intake\",\"href\":\"/intake\"}]},{\"label\":\"Specialists\",\"items\":[{\"id\":\"agents\",\"title\":\"Specialists\",\"href\":\"/agents\"},{\"id\":\"skills\",\"title\":\"Skills\",\"href\":\"/skills\"},{\"id\":\"commands\",\"title\":\"Slash commands\",\"href\":\"/commands\"},{\"id\":\"hooks\",\"title\":\"Hooks\",\"href\":\"/hooks\"},{\"id\":\"plugins\",\"title\":\"Plugins\",\"href\":\"/plugins\"}]},{\"label\":\"Models \u0026 Providers\",\"items\":[{\"id\":\"models\",\"title\":\"Models\",\"href\":\"/models\"},{\"id\":\"providers\",\"title\":\"Providers\",\"href\":\"/providers\"},{\"id\":\"mcp\",\"title\":\"MCP servers\",\"href\":\"/mcp\"}]},{\"label\":\"Knowledge\",\"items\":[{\"id\":\"knowledge\",\"title\":\"Knowledge\",\"href\":\"/knowledge\"},{\"id\":\"editor\",\"title\":\"Editor\",\"href\":\"/editor\"}]},{\"label\":\"System\",\"items\":[{\"id\":\"config\",\"title\":\"Config\",\"href\":\"/config\"},{\"id\":\"infrastructure\",\"title\":\"Infrastructure\",\"href\":\"/infrastructure\"}]}],\"children\":[\"$\",\"$L3\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L4\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":[[[\"$\",\"title\",null,{\"children\":\"404: This page could not be found.\"}],[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"padding\":\"0 23px 0 0\",\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\",\"lineHeight\":\"49px\"},\"children\":404}],[\"$\",\"div\",null,{\"style\":{\"display\":\"inline-block\"},\"children\":[\"$\",\"h2\",null,{\"style\":{\"fontSize\":14,\"fontWeight\":400,\"lineHeight\":\"49px\",\"margin\":0},\"children\":\"This page could not be found.\"}]}]]}]}]],[]],\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]}]}]}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[[\"$\",\"$L5\",null,{\"Component\":\"$6\",\"serverProvidedParams\":{\"searchParams\":{},\"params\":{},\"promises\":[\"$@7\",\"$@8\"]}}],[[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/0cangwgy_395t.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"$L9\",null,{\"children\":[\"$\",\"$a\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@b\"}]}]]}],{},null,false,null]},null,false,null],[\"$\",\"$1\",\"h\",{\"children\":[null,[\"$\",\"$Lc\",null,{\"children\":\"$Ld\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$Le\",null,{\"children\":[\"$\",\"$a\",null,{\"name\":\"Next.Metadata\",\"children\":\"$Lf\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}],false]],\"m\":\"$undefined\",\"G\":[\"$10\",[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/chunks/07baqf-hmk6oo.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}]]],\"S\":true,\"h\":null,\"s\":\"$undefined\",\"l\":\"$undefined\",\"p\":\"$undefined\",\"d\":\"$undefined\",\"b\":\"piZVVlR5yulp6NxkELzTZ\"}\n"])</script><script>self.__next_f.push([1,"7:{}\n8:\"$0:f:0:1:1:children:0:props:children:0:props:serverProvidedParams:params\"\n"])</script><script>self.__next_f.push([1,"d:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n"])</script><script>self.__next_f.push([1,"b:null\nf:[[\"$\",\"title\",\"0\",{\"children\":\"Construct — Dashboard\"}],[\"$\",\"meta\",\"1\",{\"name\":\"description\",\"content\":\"Local operations dashboard for Construct — approvals, health, knowledge, models, providers.\"}]]\n"])</script></body></html>

package/lib/services/local-postgres.mjs

@@ -1,15 +0,0 @@
-/**
- * lib/services/local-postgres.mjs — local Postgres helper exports.
- *
- * Compatibility wrappers live in telemetry-backend.mjs until downstream imports
- * move, but new service-management code should use this name.
- */
-export {
-  POSTGRES_LOCAL_PORT,
-  isRemoteTelemetry,
-  servicesComposePath,
-  pruneStashDir,
-  verifyPostgresHealth,
-  verifyTelemetryKeys,
-  startManagedServices,
-} from './telemetry-backend.mjs';

package/lib/storage/backup.mjs

@@ -1,347 +0,0 @@
-/**
- * lib/storage/backup.mjs — full Construct backup and restore.
- *
- * A backup archive is a gzip-compressed tar containing:
- *
- *   manifest.json          — version, timestamp, contents list, checksums
- *   postgres/              — pg_dump output (if Postgres is reachable)
- *   observations/          — ~/.cx/observations/*.json
- *   sessions/              — ~/.cx/sessions/*.json
- *   config.env             — ~/.construct/config.env (secrets stripped unless opts.includeSecrets)
- *   registry.json          — specialists/registry.json snapshot
- *
- * The manifest uses SHA-256 checksums over each included file so
- * `backup verify` can detect corruption without extracting.
- *
- * Restore is atomic: files are written to a temp directory first,
- * then moved into place in one pass. Postgres restore is the last step
- * because it is the hardest to roll back.
- */
-
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import crypto from 'node:crypto';
-import { execFileSync } from 'node:child_process';
-
-const HOME = os.homedir();
-const CX_DIR = path.join(HOME, '.cx');
-const CONSTRUCT_DIR = path.join(HOME, '.construct');
-const BACKUP_DIR = path.join(CONSTRUCT_DIR, 'backups');
-
-// Secret env var patterns to redact in config.env.
-const SECRET_KEYS = [
-  /TOKEN/i, /PASSWORD/i, /SECRET/i, /KEY/i, /CREDENTIAL/i,
-  /ANTHROPIC_API/i, /GITHUB_TOKEN/i, /SLACK_BOT/i, /SALESFORCE_ACCESS/i,
-  /JIRA_API/i, /LINEAR_API/i,
-];
-
-function isSecretKey(key) {
-  return SECRET_KEYS.some((re) => re.test(key));
-}
-
-function redactConfigEnv(content) {
-  return content.split('\n').map((line) => {
-    const trimmed = line.trim();
-    if (!trimmed || trimmed.startsWith('#')) return line;
-    const eq = trimmed.indexOf('=');
-    if (eq === -1) return line;
-    const key = trimmed.slice(0, eq).trim();
-    if (isSecretKey(key)) return `${key}=<redacted>`;
-    return line;
-  }).join('\n');
-}
-
-function sha256File(filePath) {
-  const hash = crypto.createHash('sha256');
-  hash.update(fs.readFileSync(filePath));
-  return hash.digest('hex');
-}
-
-function sha256Buffer(buf) {
-  return crypto.createHash('sha256').update(buf).digest('hex');
-}
-
-function archiveName() {
-  const ts = new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19);
-  return `construct-backup-${ts}.tar.gz`;
-}
-
-/**
- * Create a full backup archive.
- *
- * @param {object} [opts]
- * @param {boolean} [opts.includeSecrets] - include raw secret values in config.env
- * @param {string} [opts.registryPath] - path to specialists/registry.json
- * @param {string} [opts.destDir] - destination directory (default: ~/.construct/backups)
- * @returns {{ path: string, manifest: object }}
- */
-export async function createBackup({ includeSecrets = false, registryPath, destDir } = {}) {
-  const dest = destDir || BACKUP_DIR;
-  fs.mkdirSync(dest, { recursive: true });
-
-  const stageDir = fs.mkdtempSync(path.join(os.tmpdir(), 'construct-backup-'));
-  const files = [];
-  const checksums = {};
-
-  try {
-    // ── Observations ──────────────────────────────────────────────────────
-    const obsDir = path.join(CX_DIR, 'observations');
-    const stagObs = path.join(stageDir, 'observations');
-    if (fs.existsSync(obsDir)) {
-      fs.mkdirSync(stagObs, { recursive: true });
-      for (const f of fs.readdirSync(obsDir).filter((n) => n.endsWith('.json'))) {
-        const src = path.join(obsDir, f);
-        const dst = path.join(stagObs, f);
-        fs.copyFileSync(src, dst);
-        checksums[`observations/${f}`] = sha256File(dst);
-        files.push(`observations/${f}`);
-      }
-    }
-
-    // ── Sessions ──────────────────────────────────────────────────────────
-    const sessDir = path.join(CX_DIR, 'sessions');
-    const stagSess = path.join(stageDir, 'sessions');
-    if (fs.existsSync(sessDir)) {
-      fs.mkdirSync(stagSess, { recursive: true });
-      for (const f of fs.readdirSync(sessDir).filter((n) => n.endsWith('.json'))) {
-        const src = path.join(sessDir, f);
-        const dst = path.join(stagSess, f);
-        fs.copyFileSync(src, dst);
-        checksums[`sessions/${f}`] = sha256File(dst);
-        files.push(`sessions/${f}`);
-      }
-    }
-
-    // ── config.env ────────────────────────────────────────────────────────
-    const configEnv = path.join(CONSTRUCT_DIR, 'config.env');
-    if (fs.existsSync(configEnv)) {
-      let content = fs.readFileSync(configEnv, 'utf8');
-      if (!includeSecrets) content = redactConfigEnv(content);
-      const dst = path.join(stageDir, 'config.env');
-      fs.writeFileSync(dst, content);
-      checksums['config.env'] = sha256Buffer(Buffer.from(content));
-      files.push('config.env');
-    }
-
-    // ── Registry snapshot ─────────────────────────────────────────────────
-    const regPath = registryPath || path.join(process.cwd(), 'specialists', 'registry.json');
-    if (fs.existsSync(regPath)) {
-      const dst = path.join(stageDir, 'registry.json');
-      fs.copyFileSync(regPath, dst);
-      checksums['registry.json'] = sha256File(dst);
-      files.push('registry.json');
-    }
-
-    // ── Postgres dump ─────────────────────────────────────────────────────
-    const pgResult = tryPostgresDump(stageDir);
-    if (pgResult.success) {
-      checksums['postgres/dump.sql'] = sha256File(path.join(stageDir, 'postgres', 'dump.sql'));
-      files.push('postgres/dump.sql');
-    }
-
-    // ── Manifest ──────────────────────────────────────────────────────────
-    const manifest = {
-      version: 1,
-      createdAt: new Date().toISOString(),
-      includesSecrets: includeSecrets,
-      contents: files,
-      checksums,
-    };
-    fs.writeFileSync(path.join(stageDir, 'manifest.json'), JSON.stringify(manifest, null, 2));
-
-    // ── Pack to tar.gz ────────────────────────────────────────────────────
-    const outPath = path.join(dest, archiveName());
-    execFileSync('tar', ['-czf', outPath, '-C', stageDir, '.'], { stdio: 'pipe' });
-
-    return { path: outPath, manifest };
-  } finally {
-    fs.rmSync(stageDir, { recursive: true, force: true });
-  }
-}
-
-function tryPostgresDump(stageDir) {
-  const dumpDir = path.join(stageDir, 'postgres');
-  const dumpFile = path.join(dumpDir, 'dump.sql');
-
-  const dbUrl = process.env.DATABASE_URL || process.env.CONSTRUCT_DATABASE_URL;
-  if (!dbUrl) return { success: false, reason: 'no DATABASE_URL' };
-
-  try {
-    fs.mkdirSync(dumpDir, { recursive: true });
-    execFileSync('pg_dump', [dbUrl, '--no-password', '-f', dumpFile], {
-      stdio: ['ignore', 'pipe', 'pipe'],
-      timeout: 60_000,
-    });
-    return { success: true };
-  } catch (err) {
-    return { success: false, reason: err.message };
-  }
-}
-
-/**
- * Verify a backup archive by comparing stored checksums to actual file hashes.
- *
- * @param {string} archivePath
- * @returns {{ ok: boolean, errors: string[] }}
- */
-export async function verifyBackup(archivePath) {
-  const extractDir = fs.mkdtempSync(path.join(os.tmpdir(), 'construct-verify-'));
-  const errors = [];
-  try {
-    execFileSync('tar', ['-xzf', archivePath, '-C', extractDir], { stdio: 'pipe' });
-
-    const manifestPath = path.join(extractDir, 'manifest.json');
-    if (!fs.existsSync(manifestPath)) {
-      return { ok: false, errors: ['manifest.json missing'] };
-    }
-
-    const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));
-    for (const [rel, expected] of Object.entries(manifest.checksums || {})) {
-      const abs = path.join(extractDir, rel);
-      if (!fs.existsSync(abs)) {
-        errors.push(`missing: ${rel}`);
-        continue;
-      }
-      const actual = sha256File(abs);
-      if (actual !== expected) errors.push(`checksum mismatch: ${rel}`);
-    }
-
-    return { ok: errors.length === 0, errors };
-  } finally {
-    fs.rmSync(extractDir, { recursive: true, force: true });
-  }
-}
-
-/**
- * Restore a backup archive. Prompts for confirmation before writing.
- *
- * @param {string} archivePath
- * @param {object} [opts]
- * @param {boolean} [opts.yes] - skip confirmation prompt
- * @returns {{ ok: boolean, restored: string[], errors: string[] }}
- */
-export async function restoreBackup(archivePath, { yes = false } = {}) {
-  const verify = await verifyBackup(archivePath);
-  if (!verify.ok) {
-    return { ok: false, restored: [], errors: [`verification failed: ${verify.errors.join(', ')}`] };
-  }
-
-  const extractDir = fs.mkdtempSync(path.join(os.tmpdir(), 'construct-restore-'));
-  const restored = [];
-  const errors = [];
-
-  try {
-    execFileSync('tar', ['-xzf', archivePath, '-C', extractDir], { stdio: 'pipe' });
-
-    const manifest = JSON.parse(fs.readFileSync(path.join(extractDir, 'manifest.json'), 'utf8'));
-
-    // Restore observations
-    const stagObs = path.join(extractDir, 'observations');
-    if (fs.existsSync(stagObs)) {
-      const dest = path.join(CX_DIR, 'observations');
-      fs.mkdirSync(dest, { recursive: true });
-      for (const f of fs.readdirSync(stagObs)) {
-        fs.copyFileSync(path.join(stagObs, f), path.join(dest, f));
-        restored.push(`observations/${f}`);
-      }
-    }
-
-    // Restore sessions
-    const stagSess = path.join(extractDir, 'sessions');
-    if (fs.existsSync(stagSess)) {
-      const dest = path.join(CX_DIR, 'sessions');
-      fs.mkdirSync(dest, { recursive: true });
-      for (const f of fs.readdirSync(stagSess)) {
-        fs.copyFileSync(path.join(stagSess, f), path.join(dest, f));
-        restored.push(`sessions/${f}`);
-      }
-    }
-
-    // Restore config.env — only if it contained no redacted lines
-    const stagConfig = path.join(extractDir, 'config.env');
-    if (fs.existsSync(stagConfig)) {
-      const content = fs.readFileSync(stagConfig, 'utf8');
-      if (!content.includes('<redacted>')) {
-        fs.mkdirSync(CONSTRUCT_DIR, { recursive: true });
-        fs.writeFileSync(path.join(CONSTRUCT_DIR, 'config.env'), content, { mode: 0o600 });
-        restored.push('config.env');
-      } else {
-        errors.push('config.env has redacted secrets — restore credentials manually');
-      }
-    }
-
-    // Restore registry.json
-    const stagReg = path.join(extractDir, 'registry.json');
-    if (fs.existsSync(stagReg)) {
-      const dest = path.join(process.cwd(), 'specialists', 'registry.json');
-      fs.mkdirSync(path.dirname(dest), { recursive: true });
-      fs.copyFileSync(stagReg, dest);
-      restored.push('registry.json');
-    }
-
-    // Restore Postgres (last — hardest to undo)
-    const stagPg = path.join(extractDir, 'postgres', 'dump.sql');
-    if (fs.existsSync(stagPg)) {
-      const pgResult = tryPostgresRestore(stagPg);
-      if (pgResult.success) {
-        restored.push('postgres');
-      } else {
-        errors.push(`postgres restore failed: ${pgResult.reason}`);
-      }
-    }
-
-    return { ok: errors.length === 0, restored, errors };
-  } finally {
-    fs.rmSync(extractDir, { recursive: true, force: true });
-  }
-}
-
-function tryPostgresRestore(dumpFile) {
-  const dbUrl = process.env.DATABASE_URL || process.env.CONSTRUCT_DATABASE_URL;
-  if (!dbUrl) return { success: false, reason: 'no DATABASE_URL' };
-  try {
-    execFileSync('psql', [dbUrl, '-f', dumpFile], {
-      stdio: ['ignore', 'pipe', 'pipe'],
-      timeout: 120_000,
-    });
-    return { success: true };
-  } catch (err) {
-    return { success: false, reason: err.message };
-  }
-}
-
-/**
- * List backup archives in the default backup directory.
- */
-export function listBackups(dir = BACKUP_DIR) {
-  if (!fs.existsSync(dir)) return [];
-  return fs.readdirSync(dir)
-    .filter((f) => f.startsWith('construct-backup-') && f.endsWith('.tar.gz'))
-    .sort()
-    .reverse()
-    .map((f) => {
-      const fullPath = path.join(dir, f);
-      const stat = fs.statSync(fullPath);
-      return { name: f, path: fullPath, size: stat.size, mtime: stat.mtime };
-    });
-}
-
-// Keep the `keep` most recent backups in `dir`; unlink the rest. The return
-// value names each pruned file by archive basename. Per-file unlink errors
-// are swallowed so one locked archive can't abort the whole pass.
-export function pruneBackups({ keep = 10, dir = BACKUP_DIR } = {}) {
-  const list = listBackups(dir);
-  if (list.length <= keep) return { kept: list.length, removed: [] };
-  const toRemove = list.slice(keep);
-  const removed = [];
-  for (const b of toRemove) {
-    try {
-      fs.unlinkSync(b.path);
-      removed.push(b.name);
-    } catch {
-      /* best effort — leave file in place if it's locked or unreadable */
-    }
-  }
-  return { kept: keep, removed };
-}