@lightupai/polaris 0.0.77 → 0.0.78

package/src/web/app.ts

@@ -21,7 +21,20 @@ import {
   type Sql,
 } from "../service/db";
 import { layout, nav } from "./layout";
-import { renderSetupView, renderActiveView, renderProfileView, renderErrorView } from "./views";
+import {
+  renderSetupView,
+  renderActiveView,
+  renderProfileView,
+  renderErrorView,
+  renderTranscriptView,
+  renderSearchView,
+  renderDecisionsView,
+  renderProjectSettingsView,
+  type TranscriptEvent,
+  type SearchResult,
+  type ProjectMemberView,
+} from "./views";
+import { AnnotationKind, type Annotation } from "../types";
 import { renderLandingPage } from "./pages";
 import { createSystemChannel, postSystemEvent } from "../slack/system";
 import {
@@ -137,6 +150,9 @@ setInterval(() => {
 export function createApp(sql: Sql) {
   const app = new Hono();
 
+  // Polaris API service (same convention as slack/bridge.ts)
+  const apiUrl = process.env.POLARIS_API_URL ?? "http://localhost:4321";
+
   // Start hourly signup rollup
   startSignupRollup(sql);
 
@@ -343,13 +359,14 @@ export function createApp(sql: Sql) {
     const projects = (await listProjects(sql, payload.org_id)).filter((p) => p.name !== "_system");
     const allSessions = (await listSessions(sql, payload.org_id)).filter((s) => s.project !== "_system");
     const promptCounts = await getSessionPromptCounts(sql, payload.org_id);
+    const participantId = payload.participant_id;
 
     function buildSessionFixture(s: typeof allSessions[0]): import("./fixtures").SessionFixture {
       return {
         name: s.name,
         project: s.project,
         driver: s.driver ?? "",
-        role: (s.driver === payload.participant_id ? "driver" : "advisor") as "driver" | "advisor",
+        role: (s.driver === participantId ? "driver" : "advisor") as "driver" | "advisor",
         description: "",
         participants: s.driver ? [{ id: s.driver, role: "driver" as const }] : [],
         eventCount: promptCounts.get(`${s.project}/${s.name}`) ?? 0,
@@ -409,11 +426,365 @@ export function createApp(sql: Sql) {
       slackConnected: !!org.slack_team_id,
       cliInstalled: false,
       hasConnectedSession: false,
+      totalPrompts: 0,
     };
 
     return layout(renderProfileView(ctx, payload.participant_id), "Polaris - Profile");
   });
 
+  // --- Session transcript ---
+
+  app.get("/sessions/:proj/:sess", async (c) => {
+    const token = c.req.query("token");
+    if (!token) return c.redirect("/login");
+
+    const payload = await verifyToken(token);
+    if (!payload) return c.redirect("/login");
+
+    const org = await getOrg(sql, payload.org_id);
+    if (!org) return c.redirect("/login");
+
+    const proj = c.req.param("proj");
+    const sess = c.req.param("sess");
+    const before = c.req.query("before");
+
+    const eventsUrl = new URL(`${apiUrl}/projects/${encodeURIComponent(proj)}/sessions/${encodeURIComponent(sess)}/events`);
+    eventsUrl.searchParams.set("limit", "200");
+    if (before) eventsUrl.searchParams.set("before", before);
+
+    let events: TranscriptEvent[];
+    let nextCursor: string | null;
+    try {
+      const res = await fetch(eventsUrl, { headers: { Authorization: `Bearer ${token}` } });
+      if (!res.ok) {
+        const message = res.status === 404 ? "Session not found." : `Failed to load transcript (${res.status}).`;
+        return layout(renderErrorView(message, "Back to dashboard", `/dashboard?token=${token}`));
+      }
+      const data = (await res.json()) as { events: TranscriptEvent[]; nextCursor: string | null };
+      events = data.events ?? [];
+      nextCursor = data.nextCursor ?? null;
+    } catch {
+      return layout(renderErrorView("Could not reach the Polaris API.", "Back to dashboard", `/dashboard?token=${token}`));
+    }
+
+    // Annotations are progressive enhancement — render the transcript even if they fail to load.
+    let annotations: Annotation[] = [];
+    try {
+      const annRes = await fetch(
+        `${apiUrl}/projects/${encodeURIComponent(proj)}/sessions/${encodeURIComponent(sess)}/annotations`,
+        { headers: { Authorization: `Bearer ${token}` } }
+      );
+      if (annRes.ok) {
+        annotations = ((await annRes.json()) as { annotations: Annotation[] }).annotations ?? [];
+      }
+    } catch { /* transcript still renders without annotations */ }
+
+    const ctx = { token, userName: payload.name, orgName: org.name, email: payload.email };
+    const title = `Polaris - ${proj}/${sess}`.replace(/[<>&"]/g, "");
+    return layout(renderTranscriptView(ctx, proj, sess, events, nextCursor, before, annotations), title);
+  });
+
+  // Proxies to the API inject endpoint; the API derives the sender from the bearer token.
+  app.post("/sessions/:proj/:sess/inject", async (c) => {
+    const token = c.req.query("token");
+    if (!token) return c.redirect("/login");
+
+    const payload = await verifyToken(token);
+    if (!payload) return c.redirect("/login");
+
+    const proj = c.req.param("proj");
+    const sess = c.req.param("sess");
+    const transcriptUrl = `/sessions/${encodeURIComponent(proj)}/${encodeURIComponent(sess)}?token=${token}`;
+
+    const body = await c.req.parseBody();
+    const content = typeof body.content === "string" ? body.content.trim() : "";
+    if (!content) return c.redirect(transcriptUrl);
+
+    try {
+      const res = await fetch(`${apiUrl}/projects/${encodeURIComponent(proj)}/sessions/${encodeURIComponent(sess)}/inject`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}` },
+        body: JSON.stringify({ content }),
+      });
+      if (!res.ok) {
+        return layout(renderErrorView(`Inject failed (${res.status}).`, "Back to transcript", transcriptUrl));
+      }
+    } catch {
+      return layout(renderErrorView("Could not reach the Polaris API.", "Back to transcript", transcriptUrl));
+    }
+
+    return c.redirect(transcriptUrl);
+  });
+
+  // --- Annotations (star / tag / decision curation) ---
+  // Proxies to the API annotations endpoints; the API derives the participant from the bearer token.
+
+  app.post("/sessions/:proj/:sess/annotations", async (c) => {
+    const token = c.req.query("token");
+    if (!token) return c.redirect("/login");
+
+    const payload = await verifyToken(token);
+    if (!payload) return c.redirect("/login");
+
+    const proj = c.req.param("proj");
+    const sess = c.req.param("sess");
+    const transcriptUrl = `/sessions/${encodeURIComponent(proj)}/${encodeURIComponent(sess)}?token=${token}`;
+
+    const body = await c.req.parseBody();
+    const kind = typeof body.kind === "string" ? body.kind : "";
+    if (!AnnotationKind.safeParse(kind).success) return c.redirect(transcriptUrl);
+    const eventId = typeof body.event_id === "string" && body.event_id ? body.event_id : undefined;
+    const value = typeof body.value === "string" && body.value.trim() ? body.value.trim() : undefined;
+
+    try {
+      const res = await fetch(`${apiUrl}/projects/${encodeURIComponent(proj)}/sessions/${encodeURIComponent(sess)}/annotations`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}` },
+        body: JSON.stringify({ event_id: eventId, kind, value }),
+      });
+      if (!res.ok) {
+        return layout(renderErrorView(`Annotation failed (${res.status}).`, "Back to transcript", transcriptUrl));
+      }
+    } catch {
+      return layout(renderErrorView("Could not reach the Polaris API.", "Back to transcript", transcriptUrl));
+    }
+
+    return c.redirect(transcriptUrl);
+  });
+
+  app.post("/sessions/:proj/:sess/annotations/:id/delete", async (c) => {
+    const token = c.req.query("token");
+    if (!token) return c.redirect("/login");
+
+    const payload = await verifyToken(token);
+    if (!payload) return c.redirect("/login");
+
+    const proj = c.req.param("proj");
+    const sess = c.req.param("sess");
+    const id = c.req.param("id");
+    const transcriptUrl = `/sessions/${encodeURIComponent(proj)}/${encodeURIComponent(sess)}?token=${token}`;
+
+    try {
+      const res = await fetch(`${apiUrl}/annotations/${encodeURIComponent(id)}`, {
+        method: "DELETE",
+        headers: { Authorization: `Bearer ${token}` },
+      });
+      if (!res.ok) {
+        return layout(renderErrorView(`Failed to remove annotation (${res.status}).`, "Back to transcript", transcriptUrl));
+      }
+    } catch {
+      return layout(renderErrorView("Could not reach the Polaris API.", "Back to transcript", transcriptUrl));
+    }
+
+    return c.redirect(transcriptUrl);
+  });
+
+  // --- Decisions (org-wide curation feed) ---
+
+  app.get("/decisions", async (c) => {
+    const token = c.req.query("token");
+    if (!token) return c.redirect("/login");
+
+    const payload = await verifyToken(token);
+    if (!payload) return c.redirect("/login");
+
+    const org = await getOrg(sql, payload.org_id);
+    if (!org) return c.redirect("/login");
+
+    const project = (c.req.query("project") ?? "").trim();
+
+    let decisions: Annotation[] | null = null;
+    let decisionsError: string | undefined;
+    const decisionsUrl = new URL(`${apiUrl}/decisions`);
+    if (project) decisionsUrl.searchParams.set("project", project);
+    decisionsUrl.searchParams.set("limit", "100");
+    try {
+      const res = await fetch(decisionsUrl, { headers: { Authorization: `Bearer ${token}` } });
+      if (res.ok) {
+        decisions = ((await res.json()) as { decisions: Annotation[] }).decisions ?? [];
+      } else {
+        decisionsError = `Failed to load decisions (${res.status}).`;
+      }
+    } catch {
+      decisionsError = "Could not reach the Polaris API.";
+    }
+
+    const ctx = { token, userName: payload.name, orgName: org.name, email: payload.email };
+    return layout(renderDecisionsView(ctx, project, decisions, decisionsError), "Polaris - Decisions");
+  });
+
+  // --- Project settings (visibility + members) ---
+
+  app.get("/projects/:proj/settings", async (c) => {
+    const token = c.req.query("token");
+    if (!token) return c.redirect("/login");
+
+    const payload = await verifyToken(token);
+    if (!payload) return c.redirect("/login");
+
+    const org = await getOrg(sql, payload.org_id);
+    if (!org) return c.redirect("/login");
+
+    const proj = c.req.param("proj");
+    const projects = await listProjects(sql, payload.org_id);
+    const project = projects.find((p) => p.name === proj);
+    if (!project) {
+      return layout(renderErrorView("Project not found.", "Back to dashboard", `/dashboard?token=${token}`));
+    }
+
+    let members: ProjectMemberView[] = [];
+    let membersError: string | undefined;
+    try {
+      const res = await fetch(`${apiUrl}/projects/${encodeURIComponent(proj)}/members`, {
+        headers: { Authorization: `Bearer ${token}` },
+      });
+      if (res.ok) {
+        const data = (await res.json()) as ProjectMemberView[] | { members?: ProjectMemberView[] };
+        members = Array.isArray(data) ? data : data.members ?? [];
+      } else {
+        membersError = `Failed to load members (${res.status}).`;
+      }
+    } catch {
+      membersError = "Could not reach the Polaris API.";
+    }
+
+    const ctx = { token, userName: payload.name, orgName: org.name, email: payload.email };
+    const title = `Polaris - ${proj} settings`.replace(/[<>&"]/g, "");
+    return layout(renderProjectSettingsView(ctx, proj, project.visibility ?? "org", members, membersError), title);
+  });
+
+  app.post("/projects/:proj/visibility", async (c) => {
+    const token = c.req.query("token");
+    if (!token) return c.redirect("/login");
+
+    const payload = await verifyToken(token);
+    if (!payload) return c.redirect("/login");
+
+    const proj = c.req.param("proj");
+    const settingsUrl = `/projects/${encodeURIComponent(proj)}/settings?token=${token}`;
+
+    const body = await c.req.parseBody();
+    const visibility = typeof body.visibility === "string" ? body.visibility : "";
+    if (visibility !== "org" && visibility !== "members") return c.redirect(settingsUrl);
+
+    try {
+      const res = await fetch(`${apiUrl}/projects/${encodeURIComponent(proj)}/visibility`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}` },
+        body: JSON.stringify({ visibility }),
+      });
+      if (!res.ok) {
+        return layout(renderErrorView(`Failed to update visibility (${res.status}).`, "Back to settings", settingsUrl));
+      }
+    } catch {
+      return layout(renderErrorView("Could not reach the Polaris API.", "Back to settings", settingsUrl));
+    }
+
+    return c.redirect(settingsUrl);
+  });
+
+  app.post("/projects/:proj/members", async (c) => {
+    const token = c.req.query("token");
+    if (!token) return c.redirect("/login");
+
+    const payload = await verifyToken(token);
+    if (!payload) return c.redirect("/login");
+
+    const proj = c.req.param("proj");
+    const settingsUrl = `/projects/${encodeURIComponent(proj)}/settings?token=${token}`;
+
+    const body = await c.req.parseBody();
+    const participantId = typeof body.participant_id === "string" ? body.participant_id.trim() : "";
+    if (!participantId) return c.redirect(settingsUrl);
+    const role = typeof body.role === "string" && body.role.trim() ? body.role.trim() : undefined;
+
+    try {
+      const res = await fetch(`${apiUrl}/projects/${encodeURIComponent(proj)}/members`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}` },
+        body: JSON.stringify({ participant_id: participantId, role }),
+      });
+      if (!res.ok) {
+        return layout(renderErrorView(`Failed to add member (${res.status}).`, "Back to settings", settingsUrl));
+      }
+    } catch {
+      return layout(renderErrorView("Could not reach the Polaris API.", "Back to settings", settingsUrl));
+    }
+
+    return c.redirect(settingsUrl);
+  });
+
+  app.post("/projects/:proj/members/:pid/delete", async (c) => {
+    const token = c.req.query("token");
+    if (!token) return c.redirect("/login");
+
+    const payload = await verifyToken(token);
+    if (!payload) return c.redirect("/login");
+
+    const proj = c.req.param("proj");
+    const pid = c.req.param("pid");
+    const settingsUrl = `/projects/${encodeURIComponent(proj)}/settings?token=${token}`;
+
+    try {
+      const res = await fetch(`${apiUrl}/projects/${encodeURIComponent(proj)}/members/${encodeURIComponent(pid)}`, {
+        method: "DELETE",
+        headers: { Authorization: `Bearer ${token}` },
+      });
+      if (!res.ok) {
+        return layout(renderErrorView(`Failed to remove member (${res.status}).`, "Back to settings", settingsUrl));
+      }
+    } catch {
+      return layout(renderErrorView("Could not reach the Polaris API.", "Back to settings", settingsUrl));
+    }
+
+    return c.redirect(settingsUrl);
+  });
+
+  // --- Search ---
+
+  app.get("/search", async (c) => {
+    const token = c.req.query("token");
+    if (!token) return c.redirect("/login");
+
+    const payload = await verifyToken(token);
+    if (!payload) return c.redirect("/login");
+
+    const org = await getOrg(sql, payload.org_id);
+    if (!org) return c.redirect("/login");
+
+    const query = {
+      q: (c.req.query("q") ?? "").trim(),
+      project: c.req.query("project") ?? "",
+      sender: c.req.query("sender") ?? "",
+      source: c.req.query("source") ?? "",
+      tag: (c.req.query("tag") ?? "").trim(),
+    };
+
+    let results: SearchResult[] | null = null;
+    let searchError: string | undefined;
+    if (query.q) {
+      const searchUrl = new URL(`${apiUrl}/search`);
+      searchUrl.searchParams.set("q", query.q);
+      if (query.project) searchUrl.searchParams.set("project", query.project);
+      if (query.sender) searchUrl.searchParams.set("sender", query.sender);
+      if (query.source) searchUrl.searchParams.set("source", query.source);
+      if (query.tag) searchUrl.searchParams.set("tag", query.tag);
+      try {
+        const res = await fetch(searchUrl, { headers: { Authorization: `Bearer ${token}` } });
+        if (res.ok) {
+          results = ((await res.json()) as { results: SearchResult[] }).results ?? [];
+        } else {
+          searchError = `Search failed (${res.status}).`;
+        }
+      } catch {
+        searchError = "Could not reach the Polaris API.";
+      }
+    }
+
+    const ctx = { token, userName: payload.name, orgName: org.name, email: payload.email };
+    return layout(renderSearchView(ctx, query, results, searchError), "Polaris - Search");
+  });
+
   // --- Preview (dev only — all view states on one page) ---
 
   app.get("/preview", (c) => {

package/src/web/layout.ts

@@ -86,7 +86,9 @@ document.addEventListener('click', function(e) {
 
 export function nav(token?: string, opts?: NavOpts): string {
   const right = token
-    ? `<div class="relative group">
+    ? `<a href="/decisions?token=${token}" class="text-sm font-medium text-gray-600 hover:text-gray-900">Decisions</a>
+       <a href="/search?token=${token}" class="text-sm font-medium text-gray-600 hover:text-gray-900">Search</a>
+       <div class="relative group">
          <button class="flex items-center gap-2 px-2 py-1.5 rounded-lg hover:bg-gray-100 transition">
            <div class="w-7 h-7 rounded-full bg-polaris-600 flex items-center justify-center text-white text-xs font-bold">${(opts?.userName ?? "U").charAt(0).toUpperCase()}</div>
            <div class="text-left">
@@ -102,6 +104,8 @@ export function nav(token?: string, opts?: NavOpts): string {
              <p class="text-[10px] text-gray-400">${opts?.orgName ?? ""}</p>
            </div>
            <a href="/dashboard?token=${token}" class="block px-3 py-2 text-sm text-gray-700 hover:bg-gray-50">Dashboard</a>
+           <a href="/decisions?token=${token}" class="block px-3 py-2 text-sm text-gray-700 hover:bg-gray-50">Decisions</a>
+           <a href="/search?token=${token}" class="block px-3 py-2 text-sm text-gray-700 hover:bg-gray-50">Search</a>
            <a href="/profile?token=${token}" class="block px-3 py-2 text-sm text-gray-700 hover:bg-gray-50">Profile</a>
            <div class="border-t border-gray-100"></div>
            <a href="/" class="block px-3 py-2 text-sm text-gray-700 hover:bg-gray-50">Log out</a>