@imenam/mcp-organizer 1.0.3 → 1.0.7

package/dist/src/core/store.js

@@ -4,7 +4,7 @@ import { positionBetween } from "../../shared/logic/positions.js";
 import { newId } from "./ids.js";
 import { WatcherRegistry } from "./watchers.js";
 import { MAX_TASK_DEPTH, } from "../../shared/schemas/enums.schema.js";
-import { AccessLinkSchema, AgentActionSchema, AgentTokenSchema, AgentRequestSchema, AttachmentSchema, ChangeSchema, ChecklistItemSchema, CommentSchema, EntityVersionSchema, IdeaSchema, IdeaSnapshotSchema, InvitationSchema, MembershipSchema, NotificationSchema, SessionSchema, SpaceSchema, TagSchema, TaskSchema, TaskSnapshotSchema, TestCheckpointSchema, TestResultSchema, TestReviewSchema, UserSchema, UserSettingsSchema, } from "../../shared/schemas/entities.schema.js";
+import { AccessLinkSchema, AgentActionSchema, AgentTokenSchema, AgentRequestSchema, AttachmentSchema, ChangeSchema, ChecklistItemSchema, CommentSchema, EntityVersionSchema, IdeaSchema, IdeaSnapshotSchema, InvitationSchema, MembershipSchema, NotificationSchema, SessionSchema, SpaceSchema, TagSchema, TaskSchema, TaskSnapshotSchema, TestCheckpointSchema, TestResultSchema, TestReviewSchema, UserSchema, UserSettingsSchema, SpaceNotificationSettingsSchema, } from "../../shared/schemas/entities.schema.js";
 /** Valide `value` avec `schema` ; une donnée invalide est une erreur métier qui liste les champs fautifs. */
 function validate(schema, value, what) {
     const parsed = schema.safeParse(value);
@@ -24,9 +24,25 @@ function userFromRow(row) {
         displayName: row.display_name,
         passwordHash: row.password_hash,
         status: row.status,
+        isAdmin: bool(row.is_admin),
         createdAt: row.created_at,
     });
 }
+function spaceNotificationSettingsFromRow(row) {
+    return SpaceNotificationSettingsSchema.parse({
+        userId: row.user_id,
+        spaceId: row.space_id,
+        notifyAssignApp: bool(row.notify_assign_app),
+        notifyAssignEmail: bool(row.notify_assign_email),
+        notifyCommentApp: bool(row.notify_comment_app),
+        notifyCommentEmail: bool(row.notify_comment_email),
+    });
+}
+/** Les quatre préférences de notification d'un objet qui les porte. */
+function preferencesOf(source) {
+    const { notifyAssignApp, notifyAssignEmail, notifyCommentApp, notifyCommentEmail } = source;
+    return { notifyAssignApp, notifyAssignEmail, notifyCommentApp, notifyCommentEmail };
+}
 function settingsFromRow(row) {
     return UserSettingsSchema.parse({
         userId: row.user_id,
@@ -34,6 +50,7 @@ function settingsFromRow(row) {
         notifyAssignEmail: bool(row.notify_assign_email),
         notifyCommentApp: bool(row.notify_comment_app),
         notifyCommentEmail: bool(row.notify_comment_email),
+        assistantHistory: row.assistant_history,
     });
 }
 function sessionFromRow(row) {
@@ -63,6 +80,7 @@ function agentTokenFromRow(row) {
         lastUsedAt: row.last_used_at,
         expiresAt: row.expires_at,
         revokedAt: row.revoked_at,
+        isRunner: bool(row.is_runner),
     });
 }
 function invitationFromRow(row) {
@@ -86,6 +104,7 @@ function spaceFromRow(row) {
         ownerId: row.owner_id,
         keyPrefix: row.key_prefix,
         nextTaskNumber: row.next_task_number,
+        runnerAllowed: bool(row.runner_allowed),
         createdAt: row.created_at,
     });
 }
@@ -278,6 +297,7 @@ export class Store {
     activeMutation = null;
     emailListener = null;
     pendingRequestListeners = new Set();
+    runnerAllowedListeners = new Set();
     /** Présence des veilleurs de notifications, par jeton d'agent. */
     watchers = new WatcherRegistry();
     constructor(db) {
@@ -308,6 +328,22 @@ export class Store {
     countUsers() {
         return this.db.prepare("SELECT COUNT(*) AS n FROM users").get().n;
     }
+    /** Tous les comptes, du plus ancien au plus récent. */
+    listUsers() {
+        return this.db.prepare("SELECT * FROM users ORDER BY created_at, id").all().map(userFromRow);
+    }
+    countAdmins() {
+        return this.db.prepare("SELECT COUNT(*) AS n FROM users WHERE is_admin = 1").get().n;
+    }
+    /** Préférences de notification propres à un espace, ou null si l'utilisateur y suit celles de son compte. */
+    findSpaceNotificationSettings(userId, spaceId) {
+        const row = this.db.prepare("SELECT * FROM space_notification_settings WHERE user_id = ? AND space_id = ?").get(userId, spaceId);
+        return row ? spaceNotificationSettingsFromRow(row) : null;
+    }
+    /** Préférences de notification qui s'appliquent à un utilisateur dans un espace : celles de l'espace, sinon celles du compte. */
+    notificationPreferences(userId, spaceId) {
+        return preferencesOf(this.findSpaceNotificationSettings(userId, spaceId) ?? this.getUserSettings(userId));
+    }
     getUserSettings(userId) {
         const row = this.db.prepare("SELECT * FROM user_settings WHERE user_id = ?").get(userId);
         if (!row)
@@ -338,6 +374,11 @@ export class Store {
         return row ? agentTokenFromRow(row) : null;
     }
     /** Jetons qui couvrent un espace, tous propriétaires confondus, du plus récemment utilisé au moins récemment. */
+    /** Jeton du runner de l'espace, s'il a déjà servi. */
+    findRunnerToken(spaceId) {
+        const row = this.db.prepare("SELECT * FROM agent_tokens WHERE space_id = ? AND is_runner = 1 AND revoked_at IS NULL").get(spaceId);
+        return row ? agentTokenFromRow(row) : null;
+    }
     listAgentTokensOfSpace(spaceId) {
         const rows = this.db
             .prepare("SELECT * FROM agent_tokens WHERE space_id = ? ORDER BY last_used_at IS NULL, last_used_at DESC, created_at DESC, id DESC")
@@ -392,11 +433,16 @@ export class Store {
     /** Espaces dont l'utilisateur est membre : son espace personnel d'abord, puis les espaces communs par nom. */
     listSpacesOf(userId) {
         const rows = this.db
-            .prepare(`SELECT s.* FROM spaces s JOIN memberships m ON m.space_id = s.id
+            .prepare(`SELECT s.* FROM spaces s JOIN memberships m ON m.space_id = s.id
          WHERE m.user_id = ? ORDER BY s.kind = 'shared', s.name COLLATE NOCASE`)
             .all(userId);
         return rows.map(spaceFromRow);
     }
+    /** Tous les espaces : les espaces personnels d'abord, puis les espaces communs par nom. */
+    listAllSpaces() {
+        const rows = this.db.prepare("SELECT * FROM spaces ORDER BY kind = 'shared', name COLLATE NOCASE, id").all();
+        return rows.map(spaceFromRow);
+    }
     listMemberships(spaceId) {
         const rows = this.db.prepare("SELECT * FROM memberships WHERE space_id = ? ORDER BY joined_at, user_id").all(spaceId);
         return rows.map(membershipFromRow);
@@ -542,7 +588,7 @@ export class Store {
     /** Résultats saisis sur les points des tâches d'un espace. */
     listTestResultsInSpace(spaceId) {
         const rows = this.db
-            .prepare(`SELECT c.task_id, r.checkpoint_id, r.tester_id, r.result FROM test_results r
+            .prepare(`SELECT c.task_id, r.checkpoint_id, r.tester_id, r.result FROM test_results r
          JOIN test_checkpoints c ON c.id = r.checkpoint_id JOIN tasks t ON t.id = c.task_id WHERE t.space_id = ?`)
             .all(spaceId);
         return rows.map((row) => ({
@@ -587,7 +633,7 @@ export class Store {
     /** Pièces jointes d'une tâche et de toutes ses sous-tâches. */
     listAttachmentsInSubtree(taskId) {
         const rows = this.db
-            .prepare(`WITH RECURSIVE subtree(id) AS (SELECT ? UNION ALL SELECT t.id FROM tasks t JOIN subtree s ON t.parent_id = s.id)
+            .prepare(`WITH RECURSIVE subtree(id) AS (SELECT ? UNION ALL SELECT t.id FROM tasks t JOIN subtree s ON t.parent_id = s.id)
          SELECT a.* FROM attachments a JOIN subtree s ON a.task_id = s.id`)
             .all(taskId);
         return rows.map(attachmentFromRow);
@@ -617,7 +663,7 @@ export class Store {
     /** Demandes de promotion (`idea_promotion`) en attente ou en cours sur les idées d'un espace. */
     listOpenPromotionRequests(spaceId) {
         const rows = this.db
-            .prepare(`SELECT r.* FROM agent_requests r JOIN ideas i ON i.id = r.context_idea_id
+            .prepare(`SELECT r.* FROM agent_requests r JOIN ideas i ON i.id = r.context_idea_id
          WHERE i.space_id = ? AND r.kind = 'idea_promotion' AND r.status IN ('pending', 'processing') ORDER BY r.created_at, r.id`)
             .all(spaceId);
         return rows.map(requestFromRow);
@@ -650,6 +696,21 @@ export class Store {
             .all({ spaceId, status, limit });
         return rows.map(requestFromRow);
     }
+    /**
+     * Échanges clos (traités ou en échec) d'un auteur dans un espace, antérieurs à
+     * la demande `before`, du plus ancien au plus récent : les `limit` derniers.
+     */
+    listClosedRequestsOfAuthorBefore(spaceId, authorId, before, limit) {
+        if (limit === 0)
+            return [];
+        const rows = this.db
+            .prepare(`SELECT * FROM agent_requests
+         WHERE target_space_id = @spaceId AND author_id = @authorId AND status IN ('done', 'failed')
+           AND (created_at < @createdAt OR (created_at = @createdAt AND id < @id))
+         ORDER BY created_at DESC, id DESC LIMIT @limit`)
+            .all({ spaceId, authorId, createdAt: before.createdAt, id: before.id, limit });
+        return rows.map(requestFromRow).reverse();
+    }
     /** Demandes d'un espace, de la plus récente à la plus ancienne, au plus `limit`. */
     listAgentRequestsOfSpace(spaceId, limit) {
         const rows = this.db
@@ -712,9 +773,9 @@ export class Store {
      */
     listNotifications(userId, limit, offset) {
         const rows = this.db
-            .prepare(`SELECT n.* FROM notifications n JOIN tasks t ON t.id = n.task_id
-         JOIN memberships m ON m.space_id = t.space_id AND m.user_id = n.user_id
-         WHERE n.user_id = ? AND n.in_app = 1
+            .prepare(`SELECT n.* FROM notifications n JOIN tasks t ON t.id = n.task_id
+         JOIN memberships m ON m.space_id = t.space_id AND m.user_id = n.user_id
+         WHERE n.user_id = ? AND n.in_app = 1
          ORDER BY n.read_at IS NOT NULL, n.created_at DESC, n.id DESC LIMIT ? OFFSET ?`)
             .all(userId, limit, offset);
         return rows.map(notificationFromRow);
@@ -722,8 +783,8 @@ export class Store {
     /** Nombre de notifications non lues affichées dans l'application d'un utilisateur. */
     countUnreadNotifications(userId) {
         const row = this.db
-            .prepare(`SELECT COUNT(*) AS n FROM notifications n JOIN tasks t ON t.id = n.task_id
-         JOIN memberships m ON m.space_id = t.space_id AND m.user_id = n.user_id
+            .prepare(`SELECT COUNT(*) AS n FROM notifications n JOIN tasks t ON t.id = n.task_id
+         JOIN memberships m ON m.space_id = t.space_id AND m.user_id = n.user_id
          WHERE n.user_id = ? AND n.in_app = 1 AND n.read_at IS NULL`)
             .get(userId);
         return row.n;
@@ -752,8 +813,8 @@ export class Store {
      */
     listChangesForUser(userId, since, limit) {
         const rows = this.db
-            .prepare(`SELECT * FROM changes WHERE seq > ?
-           AND (user_id = ? OR space_id IN (SELECT space_id FROM memberships WHERE user_id = ?))
+            .prepare(`SELECT * FROM changes WHERE seq > ?
+           AND (user_id = ? OR space_id IN (SELECT space_id FROM memberships WHERE user_id = ?))
          ORDER BY seq LIMIT ?`)
             .all(since, userId, userId, limit);
         return rows.map(changeFromRow);
@@ -780,6 +841,11 @@ export class Store {
         this.pendingRequestListeners.add(listener);
         return () => this.pendingRequestListeners.delete(listener);
     }
+    /** Abonne `listener` aux espaces où le runner vient d'être autorisé, après la validation de la mutation. */
+    onRunnerAllowed(listener) {
+        this.runnerAllowedListeners.add(listener);
+        return () => this.runnerAllowedListeners.delete(listener);
+    }
     /**
      * Point unique d'écriture. `fn` reçoit une `Mutation` et s'exécute dans une
      * transaction exclusive ; à sa sortie, les invariants sont vérifiés sur l'état
@@ -791,6 +857,7 @@ export class Store {
             throw new Error("Store.mutate is not reentrant: use the Mutation passed to the running mutation.");
         let emails = [];
         let pending = [];
+        let allowed = [];
         const run = this.db.transaction(() => {
             const tx = new Mutation(this, actor);
             this.activeMutation = tx;
@@ -799,6 +866,7 @@ export class Store {
                 tx.finish();
                 emails = tx.emailNotificationIds;
                 pending = tx.pendingRequestIds;
+                allowed = tx.runnerAllowedSpaceIds;
                 return result;
             }
             finally {
@@ -815,6 +883,11 @@ export class Store {
                     listener(request);
             }
         }
+        for (const id of allowed) {
+            const space = this.getSpace(id);
+            for (const listener of [...this.runnerAllowedListeners])
+                listener(space);
+        }
         return result;
     }
 }
@@ -833,6 +906,8 @@ export class Mutation {
     emailNotificationIds = [];
     /** Demandes passées en attente par la mutation : créées, ou libérées. */
     pendingRequestIds = [];
+    /** Espaces où la mutation a autorisé le runner. */
+    runnerAllowedSpaceIds = [];
     /** Demande pour laquelle agit l'agent, lue au début de la mutation. */
     request;
     /** Jeton avec lequel agit l'agent. */
@@ -917,6 +992,7 @@ export class Mutation {
             displayName: input.displayName ?? null,
             passwordHash: input.passwordHash ?? null,
             status: input.status,
+            isAdmin: input.isAdmin ?? false,
             createdAt: this.now,
         }, "user");
         if (user.status !== "invited" && user.displayName === null) {
@@ -925,8 +1001,8 @@ export class Mutation {
         if (this.store.findUserByEmail(user.email))
             throw new InvariantError(`An account already exists for ${user.email}.`);
         this.db
-            .prepare("INSERT INTO users (id, email, display_name, password_hash, status, created_at) VALUES (?, ?, ?, ?, ?, ?)")
-            .run(user.id, user.email, user.displayName, user.passwordHash, user.status, user.createdAt);
+            .prepare("INSERT INTO users (id, email, display_name, password_hash, status, is_admin, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)")
+            .run(user.id, user.email, user.displayName, user.passwordHash, user.status, user.isAdmin ? 1 : 0, user.createdAt);
         this.db.prepare("INSERT INTO user_settings (user_id) VALUES (?)").run(user.id);
         this.touch("user", user.id, null, user.id);
         return user;
@@ -943,6 +1019,13 @@ export class Mutation {
         this.touch("user", id, null, id);
         return user;
     }
+    /** Accorde ou retire le rôle d'administrateur du site. */
+    setUserAdmin(id, isAdmin) {
+        const user = { ...this.store.getUser(id), isAdmin };
+        this.db.prepare("UPDATE users SET is_admin = ? WHERE id = ?").run(isAdmin ? 1 : 0, id);
+        this.touch("user", id, null, id);
+        return user;
+    }
     // --- Sessions et liens d'accès ---
     createSession(session) {
         const valid = validate(SessionSchema, session, "session");
@@ -1009,13 +1092,13 @@ export class Mutation {
     createAgentToken(input) {
         if (this.actor.type !== "user")
             throw new InvariantError("Only a user can create an agent token.");
-        const token = validate(AgentTokenSchema, { id: newId(), userId: this.actor.userId, ...input, createdAt: this.now, lastUsedAt: null, revokedAt: null }, "agent token");
+        const token = validate(AgentTokenSchema, { id: newId(), userId: this.actor.userId, ...input, isRunner: input.isRunner ?? false, createdAt: this.now, lastUsedAt: null, revokedAt: null }, "agent token");
         if (!this.store.isMember(token.spaceId, token.userId))
             throw new ForbiddenError("An agent token can only cover a space its owner is a member of.");
         this.db
-            .prepare(`INSERT INTO agent_tokens (id, user_id, space_id, name, prefix, token_hash, created_at, expires_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?)`)
-            .run(token.id, token.userId, token.spaceId, token.name, token.prefix, token.tokenHash, token.createdAt, token.expiresAt);
+            .prepare(`INSERT INTO agent_tokens (id, user_id, space_id, name, prefix, token_hash, created_at, expires_at, is_runner)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+            .run(token.id, token.userId, token.spaceId, token.name, token.prefix, token.tokenHash, token.createdAt, token.expiresAt, token.isRunner ? 1 : 0);
         this.touch("agent_token", token.id, null, token.userId);
         return token;
     }
@@ -1030,6 +1113,14 @@ export class Mutation {
         this.touch("agent_token", id, null, token.userId);
         return { ...token, revokedAt: this.now };
     }
+    /** Remplace la valeur d'un jeton du runner : l'ancienne valeur est aussitôt refusée. */
+    rotateRunnerToken(id, prefix, tokenHash) {
+        const token = this.store.findAgentToken(id);
+        if (!token || !token.isRunner)
+            throw new NotFoundError(`Runner token ${id} not found.`);
+        this.db.prepare("UPDATE agent_tokens SET prefix = ?, token_hash = ? WHERE id = ?").run(prefix, tokenHash, id);
+        return { ...token, prefix, tokenHash };
+    }
     /** Date du dernier usage d'un jeton ; le journal des changements n'en garde pas trace. */
     recordAgentTokenUse(id, at) {
         this.db.prepare("UPDATE agent_tokens SET last_used_at = ? WHERE id = ?").run(at, id);
@@ -1105,7 +1196,7 @@ export class Mutation {
     // --- Espaces et membres ---
     /** Crée un espace et en fait de son propriétaire le membre `owner`. */
     createSpace(input) {
-        const space = validate(SpaceSchema, { id: newId(), name: input.name, kind: input.kind, ownerId: input.ownerId, keyPrefix: input.keyPrefix, nextTaskNumber: 1, createdAt: this.now }, "space");
+        const space = validate(SpaceSchema, { id: newId(), name: input.name, kind: input.kind, ownerId: input.ownerId, keyPrefix: input.keyPrefix, nextTaskNumber: 1, runnerAllowed: false, createdAt: this.now }, "space");
         this.store.getUser(space.ownerId);
         if (space.kind === "personal" && this.store.findPersonalSpace(space.ownerId)) {
             throw new InvariantError(`User ${space.ownerId} already has a personal space.`);
@@ -1117,6 +1208,15 @@ export class Mutation {
         this.insertMembership(space.id, space.ownerId, "owner");
         return space;
     }
+    /** Autorise ou interdit le runner sur un espace. */
+    setSpaceRunnerAllowed(id, allowed) {
+        const space = { ...this.store.getSpace(id), runnerAllowed: allowed };
+        this.db.prepare("UPDATE spaces SET runner_allowed = ? WHERE id = ?").run(allowed ? 1 : 0, id);
+        if (allowed)
+            this.runnerAllowedSpaceIds.push(id);
+        this.touch("space", id, id, null);
+        return space;
+    }
     renameSpace(id, name) {
         const space = validate(SpaceSchema, { ...this.store.getSpace(id), name }, "space");
         this.db.prepare("UPDATE spaces SET name = ? WHERE id = ?").run(space.name, id);
@@ -1132,7 +1232,7 @@ export class Mutation {
             this.touch("membership", `${id}:${membership.userId}`, id, membership.userId);
         }
         this.db
-            .prepare(`DELETE FROM entity_versions WHERE (entity_type = 'task' AND entity_id IN (SELECT id FROM tasks WHERE space_id = ?))
+            .prepare(`DELETE FROM entity_versions WHERE (entity_type = 'task' AND entity_id IN (SELECT id FROM tasks WHERE space_id = ?))
          OR (entity_type = 'idea' AND entity_id IN (SELECT id FROM ideas WHERE space_id = ?))`)
             .run(id, id);
         this.db.prepare("DELETE FROM spaces WHERE id = ?").run(id);
@@ -1158,6 +1258,7 @@ export class Mutation {
         if (!this.store.findMembership(spaceId, userId))
             throw new NotFoundError(`User ${userId} is not a member of space ${spaceId}.`);
         this.db.prepare("DELETE FROM memberships WHERE space_id = ? AND user_id = ?").run(spaceId, userId);
+        this.db.prepare("DELETE FROM space_notification_settings WHERE space_id = ? AND user_id = ?").run(spaceId, userId);
         this.touch("membership", `${spaceId}:${userId}`, spaceId, userId);
         const tokenIds = this.db.prepare("SELECT id FROM agent_tokens WHERE space_id = ? AND user_id = ? AND revoked_at IS NULL").pluck().all(spaceId, userId);
         this.db.prepare("UPDATE agent_tokens SET revoked_at = ? WHERE space_id = ? AND user_id = ? AND revoked_at IS NULL").run(this.now, spaceId, userId);
@@ -1195,8 +1296,8 @@ export class Mutation {
             version: 1,
         }, "task");
         this.db
-            .prepare(`INSERT INTO tasks (id, space_id, number, parent_id, depth, type, title, description, status, priority, position,
-                            created_by, created_at, updated_at, version)
+            .prepare(`INSERT INTO tasks (id, space_id, number, parent_id, depth, type, title, description, status, priority, position,
+                            created_by, created_at, updated_at, version)
          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
             .run(task.id, task.spaceId, task.number, task.parentId, task.depth, task.type, task.title, task.description, task.status, task.priority, task.position, task.createdBy, task.createdAt, task.updatedAt, task.version);
         this.db.prepare("UPDATE spaces SET next_task_number = next_task_number + 1 WHERE id = ?").run(space.id);
@@ -1230,7 +1331,7 @@ export class Mutation {
         const testedTaskId = fields.testedTaskId !== undefined ? fields.testedTaskId : type === "standard" ? null : current.testedTaskId;
         const task = validate(TaskSchema, { ...current, ...fields, parentId, depth, status, position, testedTaskId, updatedAt: this.now }, "task");
         this.db
-            .prepare(`UPDATE tasks SET parent_id = ?, depth = ?, type = ?, title = ?, description = ?, status = ?, priority = ?,
+            .prepare(`UPDATE tasks SET parent_id = ?, depth = ?, type = ?, title = ?, description = ?, status = ?, priority = ?,
                           position = ?, tested_task_id = ?, updated_at = ? WHERE id = ?`)
             .run(task.parentId, task.depth, task.type, task.title, task.description, task.status, task.priority, task.position, task.testedTaskId, task.updatedAt, id);
         this.touch("task", id, task.spaceId, null);
@@ -1489,7 +1590,7 @@ export class Mutation {
             updatedAt: this.now,
         }, "test result");
         this.db
-            .prepare(`INSERT INTO test_results (checkpoint_id, tester_id, result, comment, updated_at) VALUES (?, ?, ?, ?, ?)
+            .prepare(`INSERT INTO test_results (checkpoint_id, tester_id, result, comment, updated_at) VALUES (?, ?, ?, ?, ?)
          ON CONFLICT (checkpoint_id, tester_id) DO UPDATE SET result = excluded.result, comment = excluded.comment, updated_at = excluded.updated_at`)
             .run(result.checkpointId, result.testerId, result.result, result.comment, result.updatedAt);
         this.touch("test_result", `${checkpointId}:${testerId}`, task.spaceId, null, task.id);
@@ -1652,7 +1753,7 @@ export class Mutation {
             createdAt: this.now,
         }, "idea");
         this.db
-            .prepare(`INSERT INTO ideas (id, space_id, author_id, text, origin, request_id, promoted_task_id, archived_at, created_at)
+            .prepare(`INSERT INTO ideas (id, space_id, author_id, text, origin, request_id, promoted_task_id, archived_at, created_at)
          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`)
             .run(idea.id, idea.spaceId, idea.authorId, idea.text, idea.origin, idea.requestId, idea.promotedTaskId, idea.archivedAt, idea.createdAt);
         this.touch("idea", idea.id, idea.spaceId, null);
@@ -1709,8 +1810,8 @@ export class Mutation {
         }, "request");
         this.store.getSpace(request.targetSpaceId);
         this.db
-            .prepare(`INSERT INTO agent_requests (id, author_id, target_space_id, kind, context_task_id, context_idea_id,
-                                     text, status, created_at, updated_at)
+            .prepare(`INSERT INTO agent_requests (id, author_id, target_space_id, kind, context_task_id, context_idea_id,
+                                     text, status, created_at, updated_at)
          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
             .run(request.id, request.authorId, request.targetSpaceId, request.kind, request.contextTaskId, request.contextIdeaId, request.text, request.status, request.createdAt, request.updatedAt);
         this.createdRequestIds.add(request.id);
@@ -1835,7 +1936,7 @@ export class Mutation {
             tokenId: token.id,
         }, "agent action");
         this.db
-            .prepare(`INSERT INTO agent_actions (id, request_id, seq, entity_type, entity_id, operation, before, after, summary, created_at, token_id)
+            .prepare(`INSERT INTO agent_actions (id, request_id, seq, entity_type, entity_id, operation, before, after, summary, created_at, token_id)
          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
             .run(action.id, action.requestId, action.seq, action.entityType, action.entityId, action.operation, action.before === null ? null : JSON.stringify(action.before), action.after === null ? null : JSON.stringify(action.after), action.summary, action.createdAt, action.tokenId);
         this.touch("agent_action", action.id, request.targetSpaceId, null, input.taskId);
@@ -1858,13 +1959,14 @@ export class Mutation {
         return this.actor.type === "user" && this.actor.userId === userId;
     }
     /**
-     * Notifie un utilisateur selon ses préférences : la notification apparaît
+     * Notifie un utilisateur selon ses préférences dans l'espace de la tâche
+     * (celles de l'espace, sinon celles du compte) : la notification apparaît
      * dans l'application si elle y est activée, et son identifiant est retenu
      * pour l'envoi de l'e-mail si celui-ci est activé. Rien n'est créé quand les
      * deux sont désactivés.
      */
     notify(type, userId, taskId, commentId) {
-        const settings = this.store.getUserSettings(userId);
+        const settings = this.store.notificationPreferences(userId, this.store.getTask(taskId).spaceId);
         const inApp = type === "assigned" ? settings.notifyAssignApp : settings.notifyCommentApp;
         const email = type === "assigned" ? settings.notifyAssignEmail : settings.notifyCommentEmail;
         if (!inApp && !email)
@@ -1885,7 +1987,7 @@ export class Mutation {
             emailError: null,
         }, "notification");
         this.db
-            .prepare(`INSERT INTO notifications (id, user_id, type, task_id, actor_type, actor_id, request_id, comment_id, in_app, created_at)
+            .prepare(`INSERT INTO notifications (id, user_id, type, task_id, actor_type, actor_id, request_id, comment_id, in_app, created_at)
          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
             .run(notification.id, notification.userId, notification.type, notification.taskId, notification.actorType, notification.actorId, notification.requestId, notification.commentId, inApp ? 1 : 0, notification.createdAt);
         if (inApp)
@@ -1927,12 +2029,33 @@ export class Mutation {
     updateUserSettings(userId, patch) {
         const settings = validate(UserSettingsSchema, { ...this.store.getUserSettings(userId), ...definedFields(patch) }, "settings");
         this.db
-            .prepare(`UPDATE user_settings SET notify_assign_app = ?, notify_assign_email = ?, notify_comment_app = ?, notify_comment_email = ?
-         WHERE user_id = ?`)
-            .run(settings.notifyAssignApp ? 1 : 0, settings.notifyAssignEmail ? 1 : 0, settings.notifyCommentApp ? 1 : 0, settings.notifyCommentEmail ? 1 : 0, userId);
+            .prepare(`UPDATE user_settings SET notify_assign_app = ?, notify_assign_email = ?, notify_comment_app = ?, notify_comment_email = ?,
+         assistant_history = ? WHERE user_id = ?`)
+            .run(settings.notifyAssignApp ? 1 : 0, settings.notifyAssignEmail ? 1 : 0, settings.notifyCommentApp ? 1 : 0, settings.notifyCommentEmail ? 1 : 0, settings.assistantHistory, userId);
         this.touch("user_settings", userId, null, userId);
         return settings;
     }
+    /**
+     * Fixe les préférences de notification d'un membre propres à un espace ;
+     * null les retire, et il y suit de nouveau celles de son compte.
+     */
+    setSpaceNotificationSettings(userId, spaceId, preferences) {
+        if (!this.store.findMembership(spaceId, userId))
+            throw new NotFoundError(`User ${userId} is not a member of space ${spaceId}.`);
+        this.touch("user_settings", userId, null, userId);
+        if (preferences === null) {
+            this.db.prepare("DELETE FROM space_notification_settings WHERE user_id = ? AND space_id = ?").run(userId, spaceId);
+            return null;
+        }
+        const settings = validate(SpaceNotificationSettingsSchema, { userId, spaceId, ...preferences }, "space notification settings");
+        this.db
+            .prepare(`INSERT INTO space_notification_settings (user_id, space_id, notify_assign_app, notify_assign_email, notify_comment_app, notify_comment_email)
+         VALUES (?, ?, ?, ?, ?, ?)
+         ON CONFLICT (user_id, space_id) DO UPDATE SET notify_assign_app = excluded.notify_assign_app, notify_assign_email = excluded.notify_assign_email,
+           notify_comment_app = excluded.notify_comment_app, notify_comment_email = excluded.notify_comment_email`)
+            .run(userId, spaceId, settings.notifyAssignApp ? 1 : 0, settings.notifyAssignEmail ? 1 : 0, settings.notifyCommentApp ? 1 : 0, settings.notifyCommentEmail ? 1 : 0);
+        return settings;
+    }
     // --- Fin de mutation ---
     /** Vérifie les invariants sur l'état final, puis écrit les versions et le journal. */
     finish() {
@@ -2009,8 +2132,8 @@ export class Mutation {
             }
         }
         const outsiders = this.db
-            .prepare(`SELECT t.number AS number, x.user_id AS user_id FROM task_assignees x JOIN tasks t ON t.id = x.task_id
-         WHERE t.space_id = ? AND NOT EXISTS (SELECT 1 FROM memberships m WHERE m.space_id = t.space_id AND m.user_id = x.user_id)
+            .prepare(`SELECT t.number AS number, x.user_id AS user_id FROM task_assignees x JOIN tasks t ON t.id = x.task_id
+         WHERE t.space_id = ? AND NOT EXISTS (SELECT 1 FROM memberships m WHERE m.space_id = t.space_id AND m.user_id = x.user_id)
          ORDER BY t.number LIMIT 1`)
             .get(space.id);
         if (outsiders) {
@@ -2082,7 +2205,7 @@ export class Mutation {
         const actorId = this.actingUserId;
         const requestId = this.request?.id ?? null;
         const tokenId = this.token?.id ?? null;
-        const insert = this.db.prepare(`INSERT INTO entity_versions (entity_type, entity_id, version, snapshot, actor_type, actor_id, request_id, created_at, token_id)
+        const insert = this.db.prepare(`INSERT INTO entity_versions (entity_type, entity_id, version, snapshot, actor_type, actor_id, request_id, created_at, token_id)
        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`);
         for (const entry of this.touched.values()) {
             if (!VERSIONED.has(entry.entityType))
@@ -2104,7 +2227,7 @@ export class Mutation {
     }
     /** Une ligne du journal par entité modifiée, avec l'auteur de la mutation. */
     writeChanges() {
-        const insert = this.db.prepare(`INSERT INTO changes (space_id, user_id, entity_type, entity_id, task_id, at, actor_type, actor_id, request_id)
+        const insert = this.db.prepare(`INSERT INTO changes (space_id, user_id, entity_type, entity_id, task_id, at, actor_type, actor_id, request_id)
        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`);
         const actorId = this.actingUserId;
         const requestId = this.request?.id ?? null;

package/dist/src/gui-api.d.ts

@@ -1,4 +1,5 @@
 import { type ApiRequestData, type ApiResponseData, type ApiErrorKind } from "../shared/schemas/gui-api.schema.js";
+import { type RunnerStatus } from "../shared/schemas/admin-api.schema.js";
 import type { AttachmentStorage } from "./core/attachments.js";
 import type { Mailer } from "./core/mail.js";
 import type { Store } from "./core/store.js";
@@ -26,6 +27,11 @@ export interface GuiApiContext {
     attachments: AttachmentStorage;
     /** Dictée vocale (API Groq). */
     transcriber: Transcriber;
+    /** Runner du site : son état, et le lancement d'une session ponctuelle (null quand il est désactivé). */
+    runner: {
+        status: RunnerStatus;
+        runNow: ((spaceId: string) => void) | null;
+    };
     /** Horloge, imposée par les tests. */
     now?: () => Date;
 }

package/dist/src/gui-api.js

@@ -6,8 +6,8 @@ import { acceptReceivedInvitation, createSharedSpace, declineReceivedInvitation,
 import { addChecklistItem, addComment, createTask, deleteAttachment, deleteChecklistItem, deleteComment, deleteTask, downloadAttachment, getBoard, getTaskDetail, listChanges, moveChecklistItem, moveTask, setAssignees, setTags, updateChecklistItem, updateComment, updateTask, uploadAttachment, } from "./core/tasks.js";
 import { addCheckpoint, deleteCheckpoint, moveCheckpoint, saveReviewDraft, setTestResult, submitReview, updateCheckpoint } from "./core/test-tasks.js";
 import { AddChecklistItemRequestSchema, CheckpointTextRequestSchema, CommentRequestSchema, CreateTaskRequestSchema, MoveAfterRequestSchema, MoveTaskRequestSchema, ReviewDraftRequestSchema, SetAssigneesRequestSchema, SetTagsRequestSchema, SetTestResultRequestSchema, SubmitReviewRequestSchema, TaskFiltersSchema, UpdateChecklistItemRequestSchema, UpdateTaskRequestSchema, UploadAttachmentRequestSchema, } from "../shared/schemas/tasks-api.schema.js";
-import { getSettings, listNotifications, markAllNotificationsRead, markNotificationRead, unreadCount, updateSettings } from "./core/notifications.js";
-import { NotificationListQuerySchema, UpdateSettingsRequestSchema } from "../shared/schemas/notifications-api.schema.js";
+import { getSettings, getSpaceNotificationSettings, listNotifications, markAllNotificationsRead, markNotificationRead, unreadCount, updateSettings, updateSpaceNotificationSettings } from "./core/notifications.js";
+import { NotificationListQuerySchema, UpdateSettingsRequestSchema, UpdateSpaceNotificationSettingsRequestSchema } from "../shared/schemas/notifications-api.schema.js";
 import { cancelRequest, createRequest, getRequest, listRequests, releaseRequest, undoAction, undoRequest, updateRequest } from "./core/requests.js";
 import { listTaskVersions, restoreTaskVersion } from "./core/task-history.js";
 import { CreateRequestSchema, UpdateRequestSchema } from "../shared/schemas/agent-api.schema.js";
@@ -15,6 +15,8 @@ import { createIdea, delegatePromotion, listIdeas, promoteIdea, setIdeaArchived
 import { CreateIdeaRequestSchema, PromoteIdeaRequestSchema, UpdateIdeaRequestSchema } from "../shared/schemas/ideas-api.schema.js";
 import { createAgentToken, listAgentTokens, revokeAgentToken } from "./core/agent-tokens.js";
 import { CreateTokenRequestSchema } from "../shared/schemas/tokens-api.schema.js";
+import { listAdminSpaces, processQueueNow, requireAdmin, setRunnerAllowed } from "./core/admin.js";
+import { SetRunnerAllowedRequestSchema } from "../shared/schemas/admin-api.schema.js";
 import { TranscriptionError } from "./core/transcription.js";
 import { MAX_TRANSCRIPTION_BYTES, TranscribeRequestSchema } from "../shared/schemas/transcription-api.schema.js";
 /** Erreur d'une requête de la GUI, avec la nature qui fixe son code HTTP. */
@@ -89,7 +91,7 @@ function parseBody(schema, body) {
     return parsed.data;
 }
 function publicUser(user) {
-    return { id: user.id, email: user.email, displayName: user.displayName, status: user.status };
+    return { id: user.id, email: user.email, displayName: user.displayName, status: user.status, isAdmin: user.isAdmin };
 }
 const ok = { ok: true };
 /** Taille lisible d'un nombre d'octets, en Mo. */
@@ -287,7 +289,7 @@ route("POST", "/ideas/:ideaId/promote", (ctx, { user, request, params }) => ({
 }));
 route("POST", "/ideas/:ideaId/delegate", (ctx, { user, params }) => ({ body: delegatePromotion(ctx.store, user.id, params.ideaId) }));
 // --- File de l'agent et historique -------------------------------------------------
-route("GET", "/spaces/:spaceId/requests", (ctx, { user, params }) => ({ body: listRequests(ctx.store, user.id, params.spaceId, now(ctx)) }));
+route("GET", "/spaces/:spaceId/requests", (ctx, { user, params }) => ({ body: listRequests(ctx.store, user.id, params.spaceId, ctx.runner.status.disabledReason, now(ctx)) }));
 route("POST", "/spaces/:spaceId/requests", (ctx, { user, request, params }) => ({
     body: createRequest(ctx.store, user.id, params.spaceId, parseBody(CreateRequestSchema, request.body)),
 }));
@@ -322,6 +324,12 @@ route("GET", "/settings", (ctx, { user }) => ({ body: getSettings(ctx.store, ctx
 route("PUT", "/settings", (ctx, { user, request }) => ({
     body: updateSettings(ctx.store, ctx, user.id, parseBody(UpdateSettingsRequestSchema, request.body)),
 }));
+route("GET", "/spaces/:spaceId/notification-settings", (ctx, { user, params }) => ({
+    body: getSpaceNotificationSettings(ctx.store, ctx, user.id, params.spaceId),
+}));
+route("PUT", "/spaces/:spaceId/notification-settings", (ctx, { user, request, params }) => ({
+    body: updateSpaceNotificationSettings(ctx.store, ctx, user.id, params.spaceId, parseBody(UpdateSpaceNotificationSettingsRequestSchema, request.body)),
+}));
 // --- Jetons d'agent ---------------------------------------------------------------
 route("GET", "/tokens", (ctx, { user }) => ({ body: listAgentTokens(ctx.store, user.id, now(ctx)) }));
 route("POST", "/tokens", (ctx, { user, request }) => {
@@ -331,6 +339,19 @@ route("POST", "/tokens", (ctx, { user, request }) => {
     return { body: createAgentToken(ctx.store, user.id, input, ctx.publicUrl, now(ctx)) };
 });
 route("POST", "/tokens/:tokenId/revoke", (ctx, { user, params }) => ({ body: revokeAgentToken(ctx.store, user.id, params.tokenId, now(ctx)) }));
+// --- Administration ----------------------------------------------------------------
+route("GET", "/admin/spaces", (ctx, { user }) => ({ body: listAdminSpaces(ctx.store, user.id, ctx.runner.status) }));
+route("POST", "/spaces/:spaceId/runner/run", (ctx, { user, params }) => {
+    requireAdmin(ctx.store, user.id);
+    const runNow = ctx.runner.runNow;
+    if (!runNow)
+        throw new ApiError("unavailable", `Runner désactivé : ${ctx.runner.status.disabledReason}`);
+    return { body: processQueueNow(ctx.store, user.id, params.spaceId, runNow) };
+});
+route("PUT", "/admin/spaces/:spaceId/runner", (ctx, { user, request, params }) => {
+    const input = parseBody(SetRunnerAllowedRequestSchema, request.body);
+    return { body: setRunnerAllowed(ctx.store, user.id, params.spaceId, input.allowed) };
+});
 // --- Dictée ------------------------------------------------------------------------
 route("POST", "/transcribe", async (ctx, { request }) => {
     const input = parseBody(TranscribeRequestSchema, request.body);

package/dist/src/index.js

@@ -12,6 +12,9 @@ Usage :
   mcp-organizer --server            Site web : interface, API et base de données, sur HOST:PORT.
   mcp-organizer --set-user [email] [--name="Prénom Nom"] [--non-interactive]
                                     Crée un compte ou remplace son mot de passe.
+  mcp-organizer --set-admin <email> [--revoke]
+                                    Accorde (ou retire) le rôle d'administrateur du site à un compte actif.
+                                    Le premier compte créé est administrateur d'office.
   mcp-organizer --setup [options]   Installe le site : .env, unité systemd, bloc nginx, premier compte
                                     (interactif, ou --non-interactive ; --setup --help pour les options).
   mcp-organizer --backup <fichier> [--force]
@@ -33,7 +36,7 @@ Le mode MCP exige ORGANIZER_URL (URL publique du site, en https hors de la machi
 et ORGANIZER_TOKEN (jeton d'agent), fournis par son environnement.
 Voir le README pour la liste complète des variables.`;
 /** Commandes qui ouvrent la base du site ; toute autre invocation démarre le mode MCP. */
-const SITE_COMMANDS = ["--server", "--set-user", "--setup", "--backup"];
+const SITE_COMMANDS = ["--server", "--set-user", "--set-admin", "--setup", "--backup"];
 async function main() {
     const argv = process.argv.slice(2);
     if (argv.includes("--setup") && (argv.includes("--help") || argv.includes("-h"))) {
@@ -87,6 +90,10 @@ async function main() {
         const [{ runSetUser }, { resolveDataDir }] = await Promise.all([import("./cli/set-user.js"), import("./core/data-dir.js")]);
         process.exit(await runSetUser(args, resolveDataDir(rootDir)));
     }
+    if (args.includes("--set-admin")) {
+        const [{ runSetAdmin }, { resolveDataDir }] = await Promise.all([import("./cli/set-admin.js"), import("./core/data-dir.js")]);
+        process.exit(await runSetAdmin(args, resolveDataDir(rootDir)));
+    }
     if (args.includes("--backup")) {
         const [{ runBackup }, { resolveDataDir }] = await Promise.all([import("./cli/backup.js"), import("./core/data-dir.js")]);
         process.exit(await runBackup(args, resolveDataDir(rootDir)));