@slaw-ai/server 2026.611.0

package/dist/routes/goals.js

@@ -0,0 +1,95 @@
+import { Router } from "express";
+import { createGoalSchema, updateGoalSchema } from "@slaw-ai/shared";
+import { validate } from "../middleware/validate.js";
+import { goalService, logActivity } from "../services/index.js";
+import { assertSquadAccess, getActorInfo } from "./authz.js";
+export function goalRoutes(db) {
+    const router = Router();
+    const svc = goalService(db);
+    router.get("/squads/:squadId/goals", async (req, res) => {
+        const squadId = req.params.squadId;
+        assertSquadAccess(req, squadId);
+        const result = await svc.list(squadId);
+        res.json(result);
+    });
+    router.get("/goals/:id", async (req, res) => {
+        const id = req.params.id;
+        const goal = await svc.getById(id);
+        if (!goal) {
+            res.status(404).json({ error: "Goal not found" });
+            return;
+        }
+        assertSquadAccess(req, goal.squadId);
+        res.json(goal);
+    });
+    router.post("/squads/:squadId/goals", validate(createGoalSchema), async (req, res) => {
+        const squadId = req.params.squadId;
+        assertSquadAccess(req, squadId);
+        const goal = await svc.create(squadId, req.body);
+        const actor = getActorInfo(req);
+        await logActivity(db, {
+            squadId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            action: "goal.created",
+            entityType: "goal",
+            entityId: goal.id,
+            details: { title: goal.title },
+        });
+        res.status(201).json(goal);
+    });
+    router.patch("/goals/:id", validate(updateGoalSchema), async (req, res) => {
+        const id = req.params.id;
+        const existing = await svc.getById(id);
+        if (!existing) {
+            res.status(404).json({ error: "Goal not found" });
+            return;
+        }
+        assertSquadAccess(req, existing.squadId);
+        const goal = await svc.update(id, req.body);
+        if (!goal) {
+            res.status(404).json({ error: "Goal not found" });
+            return;
+        }
+        const actor = getActorInfo(req);
+        await logActivity(db, {
+            squadId: goal.squadId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            action: "goal.updated",
+            entityType: "goal",
+            entityId: goal.id,
+            details: req.body,
+        });
+        res.json(goal);
+    });
+    router.delete("/goals/:id", async (req, res) => {
+        const id = req.params.id;
+        const existing = await svc.getById(id);
+        if (!existing) {
+            res.status(404).json({ error: "Goal not found" });
+            return;
+        }
+        assertSquadAccess(req, existing.squadId);
+        const goal = await svc.remove(id);
+        if (!goal) {
+            res.status(404).json({ error: "Goal not found" });
+            return;
+        }
+        const actor = getActorInfo(req);
+        await logActivity(db, {
+            squadId: goal.squadId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            action: "goal.deleted",
+            entityType: "goal",
+            entityId: goal.id,
+        });
+        res.json(goal);
+    });
+    return router;
+}
+//# sourceMappingURL=goals.js.map

package/dist/routes/goals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"goals.js","sourceRoot":"","sources":["../../src/routes/goals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE7D,MAAM,UAAU,UAAU,CAAC,EAAM;IAC/B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAE5B,MAAM,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAiB,CAAC;QAC7C,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1C,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACnF,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAiB,CAAC;QAC7C,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,WAAW,CAAC,EAAE,EAAE;YACpB,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,cAAc;YACtB,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,IAAI,CAAC,EAAE;YACjB,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;SAC/B,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,WAAW,CAAC,EAAE,EAAE;YACpB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,cAAc;YACtB,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,IAAI,CAAC,EAAE;YACjB,OAAO,EAAE,GAAG,CAAC,IAAI;SAClB,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,WAAW,CAAC,EAAE,EAAE;YACpB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,cAAc;YACtB,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,IAAI,CAAC,EAAE;SAClB,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/health.d.ts

@@ -0,0 +1,9 @@
+import type { Db } from "@slaw-ai/db";
+import type { DeploymentExposure, DeploymentMode } from "@slaw-ai/shared";
+export declare function healthRoutes(db?: Db, opts?: {
+    deploymentMode: DeploymentMode;
+    deploymentExposure: DeploymentExposure;
+    authReady: boolean;
+    squadDeletionEnabled: boolean;
+}): import("express-serve-static-core").Router;
+//# sourceMappingURL=health.d.ts.map

package/dist/routes/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/routes/health.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAGtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAyB1E,wBAAgB,YAAY,CAC1B,EAAE,CAAC,EAAE,EAAE,EACP,IAAI,GAAE;IACJ,cAAc,EAAE,cAAc,CAAC;IAC/B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,oBAAoB,EAAE,OAAO,CAAC;CAM/B,8CA6IF"}

package/dist/routes/health.js

@@ -0,0 +1,143 @@
+import { timingSafeEqual } from "node:crypto";
+import { Router } from "express";
+import { and, count, eq, gt, inArray, isNull, sql } from "drizzle-orm";
+import { heartbeatRuns, instanceUserRoles, invites } from "@slaw-ai/db";
+import { readPersistedDevServerStatus, toDevServerHealthStatus, writeDevServerRestartRequest } from "../dev-server-status.js";
+import { logger } from "../middleware/logger.js";
+import { instanceSettingsService } from "../services/instance-settings.js";
+import { serverVersion } from "../version.js";
+function shouldExposeFullHealthDetails(actorType, deploymentMode) {
+    if (deploymentMode !== "authenticated")
+        return true;
+    return actorType === "operator" || actorType === "agent";
+}
+function hasDevServerStatusToken(providedToken) {
+    const expectedToken = process.env.SLAW_DEV_SERVER_STATUS_TOKEN?.trim();
+    const token = providedToken?.trim();
+    if (!expectedToken || !token)
+        return false;
+    const expected = Buffer.from(expectedToken);
+    const provided = Buffer.from(token);
+    if (expected.length !== provided.length)
+        return false;
+    return timingSafeEqual(expected, provided);
+}
+export function healthRoutes(db, opts = {
+    deploymentMode: "local_trusted",
+    deploymentExposure: "private",
+    authReady: true,
+    squadDeletionEnabled: true,
+}) {
+    const router = Router();
+    router.post("/dev-server/restart", async (req, res) => {
+        const actorType = "actor" in req ? req.actor?.type : null;
+        if (opts.deploymentMode === "authenticated" && actorType !== "operator") {
+            res.status(403).json({ error: "operator_access_required" });
+            return;
+        }
+        const persistedDevServerStatus = readPersistedDevServerStatus();
+        if (!persistedDevServerStatus) {
+            res.status(404).json({ error: "dev_server_supervisor_unavailable" });
+            return;
+        }
+        const restartRequired = persistedDevServerStatus.dirty ||
+            persistedDevServerStatus.changedPathCount > 0 ||
+            persistedDevServerStatus.pendingMigrations.length > 0;
+        if (!restartRequired) {
+            res.status(409).json({ error: "restart_not_required" });
+            return;
+        }
+        const written = writeDevServerRestartRequest({
+            requestedAt: new Date().toISOString(),
+            reason: "manual_restart_now",
+        });
+        if (!written) {
+            res.status(404).json({ error: "dev_server_supervisor_unavailable" });
+            return;
+        }
+        res.status(202).json({ status: "restart_requested" });
+    });
+    router.get("/", async (req, res) => {
+        const actorType = "actor" in req ? req.actor?.type : null;
+        const exposeFullDetails = shouldExposeFullHealthDetails(actorType, opts.deploymentMode);
+        const exposeDevServerDetails = exposeFullDetails || hasDevServerStatusToken(req.get("x-slaw-dev-server-status-token"));
+        if (!db) {
+            res.json(exposeFullDetails
+                ? { status: "ok", version: serverVersion }
+                : { status: "ok", deploymentMode: opts.deploymentMode });
+            return;
+        }
+        try {
+            await db.execute(sql `SELECT 1`);
+        }
+        catch (error) {
+            logger.warn({ err: error }, "Health check database probe failed");
+            res.status(503).json({
+                status: "unhealthy",
+                version: serverVersion,
+                error: "database_unreachable"
+            });
+            return;
+        }
+        let bootstrapStatus = "ready";
+        let bootstrapInviteActive = false;
+        if (opts.deploymentMode === "authenticated") {
+            const roleCount = await db
+                .select({ count: count() })
+                .from(instanceUserRoles)
+                .where(sql `${instanceUserRoles.role} = 'instance_admin'`)
+                .then((rows) => Number(rows[0]?.count ?? 0));
+            bootstrapStatus = roleCount > 0 ? "ready" : "bootstrap_pending";
+            if (bootstrapStatus === "bootstrap_pending") {
+                const now = new Date();
+                const inviteCount = await db
+                    .select({ count: count() })
+                    .from(invites)
+                    .where(and(eq(invites.inviteType, "bootstrap_squad_lead"), isNull(invites.revokedAt), isNull(invites.acceptedAt), gt(invites.expiresAt, now)))
+                    .then((rows) => Number(rows[0]?.count ?? 0));
+                bootstrapInviteActive = inviteCount > 0;
+            }
+        }
+        const persistedDevServerStatus = readPersistedDevServerStatus();
+        let devServer;
+        if (exposeDevServerDetails && persistedDevServerStatus && typeof db.select === "function") {
+            const instanceSettings = instanceSettingsService(db);
+            const experimentalSettings = await instanceSettings.getExperimental();
+            const activeRunCount = await db
+                .select({ count: count() })
+                .from(heartbeatRuns)
+                .where(inArray(heartbeatRuns.status, ["queued", "running"]))
+                .then((rows) => Number(rows[0]?.count ?? 0));
+            devServer = toDevServerHealthStatus(persistedDevServerStatus, {
+                autoRestartEnabled: experimentalSettings.autoRestartDevServerWhenIdle ?? false,
+                activeRunCount,
+            });
+        }
+        if (!exposeFullDetails) {
+            res.json({
+                status: "ok",
+                deploymentMode: opts.deploymentMode,
+                deploymentExposure: opts.deploymentExposure,
+                bootstrapStatus,
+                bootstrapInviteActive,
+                ...(devServer ? { devServer } : {}),
+            });
+            return;
+        }
+        res.json({
+            status: "ok",
+            version: serverVersion,
+            deploymentMode: opts.deploymentMode,
+            deploymentExposure: opts.deploymentExposure,
+            authReady: opts.authReady,
+            bootstrapStatus,
+            bootstrapInviteActive,
+            features: {
+                squadDeletionEnabled: opts.squadDeletionEnabled,
+            },
+            ...(devServer ? { devServer } : {}),
+        });
+    });
+    return router;
+}
+//# sourceMappingURL=health.js.map

package/dist/routes/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/routes/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAC9H,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,SAAS,6BAA6B,CACpC,SAA2D,EAC3D,cAA8B;IAE9B,IAAI,cAAc,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,SAAS,KAAK,UAAU,IAAI,SAAS,KAAK,OAAO,CAAC;AAC3D,CAAC;AAED,SAAS,uBAAuB,CAAC,aAAiC;IAChE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,IAAI,EAAE,CAAC;IACvE,MAAM,KAAK,GAAG,aAAa,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAE3C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,EAAO,EACP,OAKI;IACF,cAAc,EAAE,eAAe;IAC/B,kBAAkB,EAAE,SAAS;IAC7B,SAAS,EAAE,IAAI;IACf,oBAAoB,EAAE,IAAI;CAC3B;IAED,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACpD,MAAM,SAAS,GAAG,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,IAAI,IAAI,CAAC,cAAc,KAAK,eAAe,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YACxE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,MAAM,wBAAwB,GAAG,4BAA4B,EAAE,CAAC;QAChE,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,MAAM,eAAe,GACnB,wBAAwB,CAAC,KAAK;YAC9B,wBAAwB,CAAC,gBAAgB,GAAG,CAAC;YAC7C,wBAAwB,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC;QACxD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,4BAA4B,CAAC;YAC3C,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,MAAM,EAAE,oBAAoB;SAC7B,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,SAAS,GAAG,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,MAAM,iBAAiB,GAAG,6BAA6B,CACrD,SAAS,EACT,IAAI,CAAC,cAAc,CACpB,CAAC;QACF,MAAM,sBAAsB,GAC1B,iBAAiB,IAAI,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,CAAC;QAE1F,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,GAAG,CAAC,IAAI,CACN,iBAAiB;gBACf,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE;gBAC1C,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAC1D,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,UAAU,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,oCAAoC,CAAC,CAAC;YAClE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE,aAAa;gBACtB,KAAK,EAAE,sBAAsB;aAC9B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,eAAe,GAAkC,OAAO,CAAC;QAC7D,IAAI,qBAAqB,GAAG,KAAK,CAAC;QAClC,IAAI,IAAI,CAAC,cAAc,KAAK,eAAe,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,MAAM,EAAE;iBACvB,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;iBAC1B,IAAI,CAAC,iBAAiB,CAAC;iBACvB,KAAK,CAAC,GAAG,CAAA,GAAG,iBAAiB,CAAC,IAAI,qBAAqB,CAAC;iBACxD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/C,eAAe,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC;YAEhE,IAAI,eAAe,KAAK,mBAAmB,EAAE,CAAC;gBAC5C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAG,MAAM,EAAE;qBACzB,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;qBAC1B,IAAI,CAAC,OAAO,CAAC;qBACb,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,sBAAsB,CAAC,EAC9C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EACzB,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAC1B,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAC3B,CACF;qBACA,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC/C,qBAAqB,GAAG,WAAW,GAAG,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,MAAM,wBAAwB,GAAG,4BAA4B,EAAE,CAAC;QAChE,IAAI,SAAiE,CAAC;QACtE,IAAI,sBAAsB,IAAI,wBAAwB,IAAI,OAAQ,EAA2B,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACpH,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,EAAE,CAAC,CAAC;YACrD,MAAM,oBAAoB,GAAG,MAAM,gBAAgB,CAAC,eAAe,EAAE,CAAC;YACtE,MAAM,cAAc,GAAG,MAAM,EAAE;iBAC5B,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;iBAC1B,IAAI,CAAC,aAAa,CAAC;iBACnB,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;iBAC3D,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;YAE/C,SAAS,GAAG,uBAAuB,CAAC,wBAAwB,EAAE;gBAC5D,kBAAkB,EAAE,oBAAoB,CAAC,4BAA4B,IAAI,KAAK;gBAC9E,cAAc;aACf,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,IAAI;gBACZ,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;gBAC3C,eAAe;gBACf,qBAAqB;gBACrB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,aAAa;YACtB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,eAAe;YACf,qBAAqB;YACrB,QAAQ,EAAE;gBACR,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;aAChD;YACD,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/inbox-dismissals.d.ts

@@ -0,0 +1,3 @@
+import type { Db } from "@slaw-ai/db";
+export declare function inboxDismissalRoutes(db: Db): import("express-serve-static-core").Router;
+//# sourceMappingURL=inbox-dismissals.d.ts.map

package/dist/routes/inbox-dismissals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox-dismissals.d.ts","sourceRoot":"","sources":["../../src/routes/inbox-dismissals.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAStC,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,EAAE,8CAyD1C"}

package/dist/routes/inbox-dismissals.js

@@ -0,0 +1,58 @@
+import { Router } from "express";
+import { z } from "zod";
+import { validate } from "../middleware/validate.js";
+import { assertSquadAccess, getActorInfo } from "./authz.js";
+import { inboxDismissalService, logActivity } from "../services/index.js";
+const inboxDismissalSchema = z.object({
+    itemKey: z.string().trim().min(1).regex(/^(approval|join|run):.+$/, "Unsupported inbox item key"),
+});
+export function inboxDismissalRoutes(db) {
+    const router = Router();
+    const svc = inboxDismissalService(db);
+    router.get("/squads/:squadId/inbox-dismissals", async (req, res) => {
+        const squadId = req.params.squadId;
+        assertSquadAccess(req, squadId);
+        if (req.actor.type !== "operator") {
+            res.status(403).json({ error: "Operator authentication required" });
+            return;
+        }
+        if (!req.actor.userId) {
+            res.status(403).json({ error: "Operator user context required" });
+            return;
+        }
+        const dismissals = await svc.list(squadId, req.actor.userId);
+        res.json(dismissals);
+    });
+    router.post("/squads/:squadId/inbox-dismissals", validate(inboxDismissalSchema), async (req, res) => {
+        const squadId = req.params.squadId;
+        assertSquadAccess(req, squadId);
+        if (req.actor.type !== "operator") {
+            res.status(403).json({ error: "Operator authentication required" });
+            return;
+        }
+        if (!req.actor.userId) {
+            res.status(403).json({ error: "Operator user context required" });
+            return;
+        }
+        const dismissal = await svc.dismiss(squadId, req.actor.userId, req.body.itemKey, new Date());
+        const actor = getActorInfo(req);
+        await logActivity(db, {
+            squadId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            runId: actor.runId,
+            action: "inbox.dismissed",
+            entityType: "squad",
+            entityId: squadId,
+            details: {
+                userId: req.actor.userId,
+                itemKey: dismissal.itemKey,
+                dismissedAt: dismissal.dismissedAt,
+            },
+        });
+        res.status(201).json(dismissal);
+    });
+    return router;
+}
+//# sourceMappingURL=inbox-dismissals.js.map

package/dist/routes/inbox-dismissals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox-dismissals.js","sourceRoot":"","sources":["../../src/routes/inbox-dismissals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAE1E,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,EAAE,4BAA4B,CAAC;CAClG,CAAC,CAAC;AAEH,MAAM,UAAU,oBAAoB,CAAC,EAAM;IACzC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAEtC,MAAM,CAAC,GAAG,CAAC,mCAAmC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAiB,CAAC;QAC7C,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAClC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CACT,mCAAmC,EACnC,QAAQ,CAAC,oBAAoB,CAAC,EAC9B,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAiB,CAAC;QAC7C,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAClC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7F,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,WAAW,CAAC,EAAE,EAAE;YACpB,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,iBAAiB;YACzB,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE;gBACP,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;gBACxB,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;aACnC;SACF,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/index.d.ts

@@ -0,0 +1,24 @@
+export { healthRoutes } from "./health.js";
+export { squadRoutes } from "./squads.js";
+export { squadSkillRoutes } from "./squad-skills.js";
+export { agentRoutes } from "./agents.js";
+export { projectRoutes } from "./projects.js";
+export { issueRoutes } from "./issues.js";
+export { issueTreeControlRoutes } from "./issue-tree-control.js";
+export { routineRoutes } from "./routines.js";
+export { goalRoutes } from "./goals.js";
+export { approvalRoutes } from "./approvals.js";
+export { secretRoutes } from "./secrets.js";
+export { costRoutes } from "./costs.js";
+export { activityRoutes } from "./activity.js";
+export { dashoperatorRoutes } from "./dashboard.js";
+export { sidebarBadgeRoutes } from "./sidebar-badges.js";
+export { sidebarPreferenceRoutes } from "./sidebar-preferences.js";
+export { resourceMembershipRoutes } from "./resource-memberships.js";
+export { inboxDismissalRoutes } from "./inbox-dismissals.js";
+export { llmRoutes } from "./llms.js";
+export { accessRoutes } from "./access.js";
+export { instanceSettingsRoutes } from "./instance-settings.js";
+export { instanceDatabaseBackupRoutes } from "./instance-database-backups.js";
+export { cloudUpstreamRoutes } from "./cloud-upstreams.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/routes/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/routes/index.js

@@ -0,0 +1,24 @@
+export { healthRoutes } from "./health.js";
+export { squadRoutes } from "./squads.js";
+export { squadSkillRoutes } from "./squad-skills.js";
+export { agentRoutes } from "./agents.js";
+export { projectRoutes } from "./projects.js";
+export { issueRoutes } from "./issues.js";
+export { issueTreeControlRoutes } from "./issue-tree-control.js";
+export { routineRoutes } from "./routines.js";
+export { goalRoutes } from "./goals.js";
+export { approvalRoutes } from "./approvals.js";
+export { secretRoutes } from "./secrets.js";
+export { costRoutes } from "./costs.js";
+export { activityRoutes } from "./activity.js";
+export { dashoperatorRoutes } from "./dashboard.js";
+export { sidebarBadgeRoutes } from "./sidebar-badges.js";
+export { sidebarPreferenceRoutes } from "./sidebar-preferences.js";
+export { resourceMembershipRoutes } from "./resource-memberships.js";
+export { inboxDismissalRoutes } from "./inbox-dismissals.js";
+export { llmRoutes } from "./llms.js";
+export { accessRoutes } from "./access.js";
+export { instanceSettingsRoutes } from "./instance-settings.js";
+export { instanceDatabaseBackupRoutes } from "./instance-database-backups.js";
+export { cloudUpstreamRoutes } from "./cloud-upstreams.js";
+//# sourceMappingURL=index.js.map

package/dist/routes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/routes/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/routes/instance-database-backups.d.ts

@@ -0,0 +1,15 @@
+import type { BackupRetentionPolicy, RunDatabaseBackupResult } from "@slaw-ai/db";
+export type InstanceDatabaseBackupTrigger = "manual" | "scheduled";
+export type InstanceDatabaseBackupRunResult = RunDatabaseBackupResult & {
+    trigger: InstanceDatabaseBackupTrigger;
+    backupDir: string;
+    retention: BackupRetentionPolicy;
+    startedAt: string;
+    finishedAt: string;
+    durationMs: number;
+};
+export type InstanceDatabaseBackupService = {
+    runManualBackup(): Promise<InstanceDatabaseBackupRunResult>;
+};
+export declare function instanceDatabaseBackupRoutes(service: InstanceDatabaseBackupService): import("express-serve-static-core").Router;
+//# sourceMappingURL=instance-database-backups.d.ts.map

package/dist/routes/instance-database-backups.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance-database-backups.d.ts","sourceRoot":"","sources":["../../src/routes/instance-database-backups.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAGlF,MAAM,MAAM,6BAA6B,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEnE,MAAM,MAAM,+BAA+B,GAAG,uBAAuB,GAAG;IACtE,OAAO,EAAE,6BAA6B,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,qBAAqB,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,eAAe,IAAI,OAAO,CAAC,+BAA+B,CAAC,CAAC;CAC7D,CAAC;AAEF,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,6BAA6B,8CAUlF"}

package/dist/routes/instance-database-backups.js

@@ -0,0 +1,12 @@
+import { Router } from "express";
+import { assertInstanceAdmin } from "./authz.js";
+export function instanceDatabaseBackupRoutes(service) {
+    const router = Router();
+    router.post("/instance/database-backups", async (req, res) => {
+        assertInstanceAdmin(req);
+        const result = await service.runManualBackup();
+        res.status(201).json(result);
+    });
+    return router;
+}
+//# sourceMappingURL=instance-database-backups.js.map

package/dist/routes/instance-database-backups.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance-database-backups.js","sourceRoot":"","sources":["../../src/routes/instance-database-backups.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAiBjD,MAAM,UAAU,4BAA4B,CAAC,OAAsC;IACjF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3D,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,eAAe,EAAE,CAAC;QAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/instance-settings.d.ts

@@ -0,0 +1,3 @@
+import type { Db } from "@slaw-ai/db";
+export declare function instanceSettingsRoutes(db: Db): import("express-serve-static-core").Router;
+//# sourceMappingURL=instance-settings.d.ts.map

package/dist/routes/instance-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance-settings.d.ts","sourceRoot":"","sources":["../../src/routes/instance-settings.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAqBtC,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,EAAE,8CAgI5C"}

package/dist/routes/instance-settings.js

@@ -0,0 +1,110 @@
+import { Router } from "express";
+import { issueGraphLivenessAutoRecoveryRequestSchema, patchInstanceExperimentalSettingsSchema, patchInstanceGeneralSettingsSchema, } from "@slaw-ai/shared";
+import { forbidden } from "../errors.js";
+import { validate } from "../middleware/validate.js";
+import { heartbeatService, instanceSettingsService, logActivity } from "../services/index.js";
+import { assertOperatorOrgAccess, getActorInfo } from "./authz.js";
+function assertCanManageInstanceSettings(req) {
+    if (req.actor.type !== "operator") {
+        throw forbidden("Operator access required");
+    }
+    if (req.actor.source === "local_implicit" || req.actor.isInstanceAdmin) {
+        return;
+    }
+    throw forbidden("Instance admin access required");
+}
+export function instanceSettingsRoutes(db) {
+    const router = Router();
+    const svc = instanceSettingsService(db);
+    const heartbeat = heartbeatService(db);
+    router.get("/instance/settings/general", async (req, res) => {
+        // General settings (e.g. keyboardShortcuts) are readable by any
+        // authenticated org member or instance admin. Only PATCH requires instance-admin.
+        assertOperatorOrgAccess(req);
+        res.json(await svc.getGeneral());
+    });
+    router.patch("/instance/settings/general", validate(patchInstanceGeneralSettingsSchema), async (req, res) => {
+        assertCanManageInstanceSettings(req);
+        const updated = await svc.updateGeneral(req.body);
+        const actor = getActorInfo(req);
+        const squadIds = await svc.listSquadIds();
+        await Promise.all(squadIds.map((squadId) => logActivity(db, {
+            squadId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            runId: actor.runId,
+            action: "instance.settings.general_updated",
+            entityType: "instance_settings",
+            entityId: updated.id,
+            details: {
+                general: updated.general,
+                changedKeys: Object.keys(req.body).sort(),
+            },
+        })));
+        res.json(updated.general);
+    });
+    router.get("/instance/settings/experimental", async (req, res) => {
+        // Experimental settings are readable by any authenticated org member
+        // or instance admin. Only PATCH requires instance-admin.
+        assertOperatorOrgAccess(req);
+        res.json(await svc.getExperimental());
+    });
+    router.patch("/instance/settings/experimental", validate(patchInstanceExperimentalSettingsSchema), async (req, res) => {
+        assertCanManageInstanceSettings(req);
+        const updated = await svc.updateExperimental(req.body);
+        const actor = getActorInfo(req);
+        const squadIds = await svc.listSquadIds();
+        await Promise.all(squadIds.map((squadId) => logActivity(db, {
+            squadId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            runId: actor.runId,
+            action: "instance.settings.experimental_updated",
+            entityType: "instance_settings",
+            entityId: updated.id,
+            details: {
+                experimental: updated.experimental,
+                changedKeys: Object.keys(req.body).sort(),
+            },
+        })));
+        res.json(updated.experimental);
+    });
+    router.post("/instance/settings/experimental/issue-graph-liveness-auto-recovery/preview", validate(issueGraphLivenessAutoRecoveryRequestSchema), async (req, res) => {
+        assertCanManageInstanceSettings(req);
+        res.json(await heartbeat.buildIssueGraphLivenessAutoRecoveryPreview({
+            lookbackHours: req.body.lookbackHours,
+        }));
+    });
+    router.post("/instance/settings/experimental/issue-graph-liveness-auto-recovery/run", validate(issueGraphLivenessAutoRecoveryRequestSchema), async (req, res) => {
+        assertCanManageInstanceSettings(req);
+        const actor = getActorInfo(req);
+        const result = await heartbeat.reconcileIssueGraphLiveness({
+            runId: actor.runId,
+            force: true,
+            lookbackHours: req.body.lookbackHours,
+        });
+        const squadIds = await svc.listSquadIds();
+        await Promise.all(squadIds.map((squadId) => logActivity(db, {
+            squadId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            runId: actor.runId,
+            action: "instance.settings.issue_graph_liveness_auto_recovery_run",
+            entityType: "instance_settings",
+            entityId: "default",
+            details: {
+                lookbackHours: result.lookbackHours,
+                escalationsCreated: result.escalationsCreated,
+                existingEscalations: result.existingEscalations,
+                skippedOutsideLookback: result.skippedOutsideLookback,
+                escalationIssueIds: result.escalationIssueIds,
+            },
+        })));
+        res.json(result);
+    });
+    return router;
+}
+//# sourceMappingURL=instance-settings.js.map

package/dist/routes/instance-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance-settings.js","sourceRoot":"","sources":["../../src/routes/instance-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAgB,MAAM,SAAS,CAAC;AAE/C,OAAO,EACL,2CAA2C,EAC3C,uCAAuC,EACvC,kCAAkC,GACnC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9F,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAEnE,SAAS,+BAA+B,CAAC,GAAY;IACnD,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,SAAS,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,gBAAgB,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QACvE,OAAO;IACT,CAAC;IACD,MAAM,SAAS,CAAC,gCAAgC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,EAAM;IAC3C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,uBAAuB,CAAC,EAAE,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAEvC,MAAM,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1D,gEAAgE;QAChE,kFAAkF;QAClF,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CACV,4BAA4B,EAC5B,QAAQ,CAAC,kCAAkC,CAAC,EAC5C,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,+BAA+B,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC;QAC1C,MAAM,OAAO,CAAC,GAAG,CACf,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACvB,WAAW,CAAC,EAAE,EAAE;YACd,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,mCAAmC;YAC3C,UAAU,EAAE,mBAAmB;YAC/B,QAAQ,EAAE,OAAO,CAAC,EAAE;YACpB,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;aAC1C;SACF,CAAC,CACH,CACF,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/D,qEAAqE;QACrE,yDAAyD;QACzD,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CACV,iCAAiC,EACjC,QAAQ,CAAC,uCAAuC,CAAC,EACjD,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,+BAA+B,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC;QAC1C,MAAM,OAAO,CAAC,GAAG,CACf,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACvB,WAAW,CAAC,EAAE,EAAE;YACd,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,wCAAwC;YAChD,UAAU,EAAE,mBAAmB;YAC/B,QAAQ,EAAE,OAAO,CAAC,EAAE;YACpB,OAAO,EAAE;gBACP,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;aAC1C;SACF,CAAC,CACH,CACF,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,4EAA4E,EAC5E,QAAQ,CAAC,2CAA2C,CAAC,EACrD,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,+BAA+B,CAAC,GAAG,CAAC,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,0CAA0C,CAAC;YAClE,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa;SACtC,CAAC,CAAC,CAAC;IACN,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,wEAAwE,EACxE,QAAQ,CAAC,2CAA2C,CAAC,EACrD,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,+BAA+B,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,2BAA2B,CAAC;YACzD,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,IAAI;YACX,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa;SACtC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC;QAC1C,MAAM,OAAO,CAAC,GAAG,CACf,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACvB,WAAW,CAAC,EAAE,EAAE;YACd,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,0DAA0D;YAClE,UAAU,EAAE,mBAAmB;YAC/B,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE;gBACP,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;gBAC7C,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;gBAC/C,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;gBACrD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;aAC9C;SACF,CAAC,CACH,CACF,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/issue-tree-control.d.ts

@@ -0,0 +1,3 @@
+import type { Db } from "@slaw-ai/db";
+export declare function issueTreeControlRoutes(db: Db): import("express-serve-static-core").Router;
+//# sourceMappingURL=issue-tree-control.d.ts.map

package/dist/routes/issue-tree-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue-tree-control.d.ts","sourceRoot":"","sources":["../../src/routes/issue-tree-control.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AA+BtC,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,EAAE,8CAuX5C"}