@synth-deploy/server 1.0.6 → 1.2.0

package/src/api/partitions.ts

@@ -85,7 +85,7 @@ export function registerPartitionRoutes(
         // Log cascade deletion to Decision Diary
         debrief.record({
           partitionId: id,
-          deploymentId: null,
+          operationId: null,
           agent: "server",
           decisionType: "system",
           decision: `Cascade-deleted partition "${partition.name}" with ${linkedDeployments.length} deployment(s)`,

package/src/api/schemas.ts

@@ -211,6 +211,17 @@ export const UpdateSettingsSchema = z.object({
     description: z.string().optional(),
   })).optional(),
   llm: LlmProviderConfigSchema.partial().optional(),
+  approvalDefaults: z.object({
+    query: z.enum(["auto", "required"]).optional(),
+    investigate: z.enum(["auto", "required"]).optional(),
+    trigger: z.enum(["auto", "required"]).optional(),
+    deploy: z.enum(["auto", "required"]).optional(),
+    maintain: z.enum(["auto", "required"]).optional(),
+    composite: z.enum(["auto", "required"]).optional(),
+    environmentOverrides: z.record(
+      z.record(z.enum(["auto", "required"])).optional(),
+    ).optional(),
+  }).optional(),
 });
 
 // --- Artifacts (update) ---
@@ -232,6 +243,37 @@ export const CreateDeploymentSchema = z.object({
   version: z.string().optional(),
 });
 
+const ChildOperationInputSchema = z.discriminatedUnion("type", [
+  z.object({ type: z.literal("deploy"), artifactId: z.string().min(1), artifactVersionId: z.string().optional() }),
+  z.object({ type: z.literal("maintain"), intent: z.string().min(1) }),
+  z.object({ type: z.literal("query"), intent: z.string().min(1) }),
+  z.object({ type: z.literal("investigate"), intent: z.string().min(1), allowWrite: z.boolean().optional() }),
+  z.object({ type: z.literal("trigger"), condition: z.string().min(1), responseIntent: z.string().min(1) }),
+]);
+
+// --- Operations ---
+
+export const CreateOperationSchema = z.object({
+  artifactId: z.string().min(1).optional(),
+  environmentId: z.string().min(1).optional(),
+  partitionId: z.string().optional(),
+  envoyId: z.string().optional(),
+  version: z.string().optional(),
+  type: z.enum(["deploy", "maintain", "query", "investigate", "trigger", "composite"]).default("deploy"),
+  intent: z.string().optional(),
+  allowWrite: z.boolean().optional(),
+  /** Trigger-specific: condition expression (e.g. "disk_usage > 85") */
+  condition: z.string().optional(),
+  /** Trigger-specific: what to do when the condition fires */
+  responseIntent: z.string().optional(),
+  /** Parent operation that spawned this one (e.g. investigation → resolution) */
+  parentOperationId: z.string().optional(),
+  /** Override to require manual approval even when auto-approve would apply */
+  requireApproval: z.boolean().optional(),
+  /** Composite-specific: child operations to execute sequentially */
+  operations: z.array(ChildOperationInputSchema).optional(),
+});
+
 export const ApproveDeploymentSchema = z.object({
   approvedBy: z.string().min(1),
   modifications: z.string().optional(),
@@ -242,37 +284,33 @@ export const RejectDeploymentSchema = z.object({
 });
 
 export const ModifyDeploymentPlanSchema = z.object({
-  steps: z.array(z.object({
+  executionScript: z.string().min(1, "Execution script must not be empty"),
+  rollbackScript: z.string().optional(),
+  reason: z.string().min(1),
+});
+
+const ScriptedPlanSchema = z.object({
+  platform: z.enum(["bash", "powershell"]),
+  executionScript: z.string().min(1),
+  dryRunScript: z.string().nullable(),
+  rollbackScript: z.string().nullable(),
+  reasoning: z.string().min(1),
+  stepSummary: z.array(z.object({
     description: z.string().min(1),
-    action: z.string().min(1),
-    target: z.string().min(1),
     reversible: z.boolean(),
-    rollbackAction: z.string().optional(),
-  })).min(1, "Plan must contain at least one step"),
-  reason: z.string().min(1),
+  })),
+  diffFromCurrent: z.array(z.object({ key: z.string(), from: z.string(), to: z.string() })).optional(),
 });
 
 export const SubmitPlanSchema = z.object({
   plan: z.object({
-    steps: z.array(z.object({
-      description: z.string().min(1),
-      action: z.string().min(1),
-      target: z.string().min(1),
-      reversible: z.boolean(),
-      rollbackAction: z.string().optional(),
-    })).min(1),
+    scriptedPlan: ScriptedPlanSchema,
     reasoning: z.string().min(1),
     diffFromCurrent: z.array(z.object({ key: z.string(), from: z.string(), to: z.string() })).optional(),
     diffFromPreviousPlan: z.string().optional(),
   }),
   rollbackPlan: z.object({
-    steps: z.array(z.object({
-      description: z.string().min(1),
-      action: z.string().min(1),
-      target: z.string().min(1),
-      reversible: z.boolean(),
-      rollbackAction: z.string().optional(),
-    })),
+    scriptedPlan: ScriptedPlanSchema,
     reasoning: z.string().min(1),
   }),
 });
@@ -291,6 +329,7 @@ export const DebriefQuerySchema = z.object({
   limit: z.coerce.number().int().positive().optional(),
   partitionId: z.string().optional(),
   decisionType: z.string().optional(),
+  q: z.string().optional(),
 });
 
 // --- Progress Events (from envoy callback) ---
@@ -325,13 +364,6 @@ export const TelemetryQuerySchema = z.object({
   offset: z.coerce.number().int().nonnegative().optional(),
 });
 
-// --- Agent ---
-
-export const QueryRequestSchema = z.object({
-  query: z.string().min(1),
-  conversationId: z.string().optional(),
-});
-
 // --- Auth ---
 
 export const LoginSchema = z.object({

package/src/api/system.ts

@@ -156,6 +156,8 @@ export function registerSystemRoutes(
     const allEnvoys = envoyRegistry.list();
     const allDeployments = deployments.list();
     const allEnvironments = environments.list();
+    const getArtifactId = (op: (typeof allDeployments)[number]): string =>
+      op.input?.type === "deploy" ? (op.input as { type: "deploy"; artifactId: string }).artifactId : "";
     const allPartitions = partitions.list();
 
     // --- Stats ---
@@ -264,11 +266,11 @@ export function registerSystemRoutes(
               { time: nowTime(), event: "Signal raised" },
             ],
             relatedDeployments: recentToEnvoy.map((d) => {
-              const artName = allArtifacts.find((a) => a.id === d.artifactId)?.name ?? d.artifactId.slice(0, 8);
+              const artName = allArtifacts.find((a) => a.id === getArtifactId(d))?.name ?? getArtifactId(d).slice(0, 8);
               const envName = allEnvironments.find((e) => e.id === d.environmentId)?.name ?? "unknown";
               return {
                 artifact: artName,
-                version: d.version,
+                version: d.version ?? "",
                 target: envName,
                 status: d.status,
                 time: timeAgo(d.createdAt),
@@ -291,9 +293,9 @@ export function registerSystemRoutes(
     type FailureGroup = { artifactId: string; environmentId: string | undefined; failures: typeof recentFailures };
     const failureGroups = new Map<string, FailureGroup>();
     for (const dep of recentFailures) {
-      const key = `${dep.artifactId}::${dep.environmentId}`;
+      const key = `${getArtifactId(dep)}::${dep.environmentId}`;
       if (!failureGroups.has(key)) {
-        failureGroups.set(key, { artifactId: dep.artifactId, environmentId: dep.environmentId, failures: [] });
+        failureGroups.set(key, { artifactId: getArtifactId(dep), environmentId: dep.environmentId, failures: [] });
       }
       failureGroups.get(key)!.failures.push(dep);
     }
@@ -303,7 +305,7 @@ export function registerSystemRoutes(
 
       const hasRecovery = allDeployments.some(
         (d) =>
-          d.artifactId === group.artifactId &&
+          getArtifactId(d) === group.artifactId &&
           d.environmentId === group.environmentId &&
           d.status === "succeeded" &&
           new Date(d.createdAt).getTime() > new Date(group.failures[0].createdAt).getTime(),
@@ -320,7 +322,7 @@ export function registerSystemRoutes(
       const prevSuccessful = allDeployments
         .filter(
           (d) =>
-            d.artifactId === group.artifactId &&
+            getArtifactId(d) === group.artifactId &&
             d.environmentId === group.environmentId &&
             d.status === "succeeded",
         )
@@ -379,7 +381,7 @@ export function registerSystemRoutes(
           ],
           relatedDeployments: sorted.map((d) => ({
             artifact: artifactName,
-            version: d.version,
+            version: d.version ?? "",
             target: envName,
             status: d.status,
             time: timeAgo(d.createdAt),
@@ -397,7 +399,7 @@ export function registerSystemRoutes(
     type EnvLatest = { dep: (typeof succeededDeps)[0]; envName: string };
     const latestByTarget = new Map<string, EnvLatest>();
     for (const dep of succeededDeps) {
-      const key = `${dep.artifactId}::${dep.environmentId}`;
+      const key = `${getArtifactId(dep)}::${dep.environmentId}`;
       const existing = latestByTarget.get(key);
       if (!existing || new Date(dep.createdAt) > new Date(existing.dep.createdAt)) {
         const envName = allEnvironments.find((e) => e.id === dep.environmentId)?.name ?? "unknown";
@@ -408,13 +410,13 @@ export function registerSystemRoutes(
     for (const { dep, envName } of latestByTarget.values()) {
       if (new Date(dep.createdAt).getTime() > thirtyDaysAgo) continue; // Not stale yet
 
-      const artifactName = allArtifacts.find((a) => a.id === dep.artifactId)?.name ?? "unknown";
+      const artifactName = allArtifacts.find((a) => a.id === getArtifactId(dep))?.name ?? "unknown";
       const weeksAgo = Math.floor((now - new Date(dep.createdAt).getTime()) / (7 * 24 * 60 * 60 * 1000));
 
       // Check if newer versions of this artifact have been deployed to any other environment
       const newerElsewhere = succeededDeps.filter(
         (d) =>
-          d.artifactId === dep.artifactId &&
+          getArtifactId(d) === getArtifactId(dep) &&
           d.environmentId !== dep.environmentId &&
           new Date(d.createdAt).getTime() > new Date(dep.createdAt).getTime(),
       );
@@ -427,7 +429,7 @@ export function registerSystemRoutes(
         severity: "info",
         title: `Stale deployment: ${artifactName} in ${envName}`,
         detail: `v${dep.version} deployed ${weeksAgo}w ago. ${newerVersions.length} newer version${newerVersions.length > 1 ? "s" : ""} running elsewhere. May be intentional.`,
-        relatedEntity: { type: "artifact", id: dep.artifactId, name: artifactName },
+        relatedEntity: { type: "artifact", id: getArtifactId(dep), name: artifactName },
         investigation: {
           title: `Stale Deployment — ${artifactName} in ${envName}`,
           entity: `${artifactName} in ${envName}`,
@@ -461,10 +463,10 @@ export function registerSystemRoutes(
             { time: nowTime(), event: `Signal raised — ${weeksAgo}w without update, newer versions exist` },
           ],
           relatedDeployments: [
-            { artifact: artifactName, version: dep.version, target: envName, status: "succeeded", time: timeAgo(dep.createdAt) },
+            { artifact: artifactName, version: dep.version ?? "", target: envName, status: "succeeded", time: timeAgo(dep.createdAt) },
             ...newerElsewhere.slice(0, 3).map((d) => {
               const env = allEnvironments.find((e) => e.id === d.environmentId)?.name ?? "unknown";
-              return { artifact: artifactName, version: d.version, target: env, status: d.status, time: timeAgo(d.createdAt) };
+              return { artifact: artifactName, version: d.version ?? "", target: env, status: d.status, time: timeAgo(d.createdAt) };
             }),
           ],
         },
@@ -475,11 +477,11 @@ export function registerSystemRoutes(
     // pattern that suggests a missed or skipped promotion.
     const artifactEnvVersions = new Map<string, Map<string, { version: string; deployedAt: Date }>>();
     for (const { dep, envName } of latestByTarget.values()) {
-      if (!artifactEnvVersions.has(dep.artifactId)) {
-        artifactEnvVersions.set(dep.artifactId, new Map());
+      if (!artifactEnvVersions.has(getArtifactId(dep))) {
+        artifactEnvVersions.set(getArtifactId(dep), new Map());
       }
-      artifactEnvVersions.get(dep.artifactId)!.set(envName, {
-        version: dep.version,
+      artifactEnvVersions.get(getArtifactId(dep))!.set(envName, {
+        version: dep.version ?? "",
         deployedAt: new Date(dep.createdAt),
       });
     }
@@ -503,7 +505,7 @@ export function registerSystemRoutes(
 
       // Also require that the ahead env has more recent deployments of this artifact (not just same artifact)
       const aheadHasMultiple = succeededDeps.filter(
-        (d) => d.artifactId === artifactId &&
+        (d) => getArtifactId(d) === artifactId &&
           allEnvironments.find((e) => e.id === d.environmentId)?.name === aheadEnv,
       ).length >= 2;
       if (!aheadHasMultiple) continue;
@@ -620,10 +622,10 @@ export function registerSystemRoutes(
                 { time: nowTime(), event: "Signal raised" },
               ],
               relatedDeployments: recentToEnv.map((d) => {
-                const artName = allArtifacts.find((a) => a.id === d.artifactId)?.name ?? d.artifactId.slice(0, 8);
+                const artName = allArtifacts.find((a) => a.id === getArtifactId(d))?.name ?? getArtifactId(d).slice(0, 8);
                 return {
                   artifact: artName,
-                  version: d.version,
+                  version: d.version ?? "",
                   target: env.name,
                   status: d.status,
                   time: timeAgo(d.createdAt),
@@ -682,7 +684,7 @@ export function registerSystemRoutes(
       detail = infos[0].detail;
     } else if (activeDeployments.length > 0) {
       const d = activeDeployments[0];
-      const artName = allArtifacts.find((a) => a.id === d.artifactId)?.name ?? "A deployment";
+      const artName = allArtifacts.find((a) => a.id === getArtifactId(d))?.name ?? "A deployment";
       const envName = allEnvironments.find((e) => e.id === d.environmentId)?.name ?? "target";
       headline = "Deployment in progress.";
       detail = `${artName} is being deployed to ${envName}. All other environments are stable.`;

package/src/artifact-analyzer.ts

@@ -367,7 +367,7 @@ Produce a JSON analysis that incorporates all user corrections. Raise confidence
 
       this._debrief.record({
         partitionId: null,
-        deploymentId: null,
+        operationId: null,
         agent: "server",
         decisionType: "artifact-analysis",
         decision: `Re-analyzed "${artifact.name}" with ${artifact.annotations.length} user correction(s). Confidence: ${revised.confidence}.`,
@@ -406,7 +406,7 @@ Produce a JSON analysis that incorporates all user corrections. Raise confidence
 
     this._debrief.record({
       partitionId: null,
-      deploymentId: null,
+      operationId: null,
       agent: "server",
       decisionType: "artifact-analysis",
       decision: `Analyzed artifact "${artifact.name}" (${artifactType}) via ${method}. ` +

package/src/fleet/fleet-executor.ts

@@ -98,12 +98,12 @@ export class FleetExecutor {
 
       const client = this.createEnvoyClient(entry.url, entry.token);
       try {
-        const validation = await client.validatePlan(plan.steps);
+        const validation = await client.validatePlan(plan.scriptedPlan);
         results.push({
           envoyId,
           envoyName: entry.name,
           validated: validation.valid,
-          issues: validation.violations?.map((v) => v.reason),
+          issues: validation.violations,
         });
       } catch (err) {
         results.push({
@@ -197,7 +197,7 @@ export class FleetExecutor {
         const client = this.createEnvoyClient(entry.url, entry.token);
         try {
           await client.executeApprovedPlan({
-            deploymentId: fleetDeployment.id,
+            operationId: fleetDeployment.id,
             plan,
             rollbackPlan: rollbackPlan ?? plan,
             artifactType: "fleet",

package/src/graph/graph-executor.ts

@@ -243,10 +243,17 @@ export class GraphExecutor {
               : plan;
 
           const result: EnvoyDeployResult = await client.executeApprovedPlan({
-            deploymentId: node.deploymentId ?? node.id,
+            operationId: node.deploymentId ?? node.id,
             plan: enrichedPlan,
             rollbackPlan: {
-              steps: [],
+              scriptedPlan: {
+                platform: "bash",
+                executionScript: "# No rollback plan provided",
+                dryRunScript: null,
+                rollbackScript: null,
+                reasoning: "No rollback plan provided",
+                stepSummary: [],
+              },
               reasoning: "No rollback plan provided",
             },
             artifactType: "graph-node",
@@ -416,10 +423,17 @@ export class GraphExecutor {
 
       try {
         await client.executeApprovedPlan({
-          deploymentId: node.deploymentId ?? nodeId,
+          operationId: node.deploymentId ?? nodeId,
           plan,
           rollbackPlan: {
-            steps: [],
+            scriptedPlan: {
+              platform: "bash",
+              executionScript: "# Rollback of rollback not supported",
+              dryRunScript: null,
+              rollbackScript: null,
+              reasoning: "Rollback of rollback not supported",
+              stepSummary: [],
+            },
             reasoning: "Rollback of rollback not supported",
           },
           artifactType: "graph-node-rollback",