@tonyclaw/agent-inspector 3.0.44 → 3.0.46

package/docs/instance-control.openapi.yaml

@@ -0,0 +1,361 @@
+openapi: 3.1.0
+info:
+  title: Agent Inspector Named Instance Control API
+  version: 1.0.0
+  description: |
+    Local control-plane API for discovering and managing Windows named Agent Inspector instances.
+    Paths are relative to the selected backend control Base URL. Loopback clients are trusted by the
+    native ingress; direct non-loopback clients must send the configured control Bearer token.
+    Browser mutations also require same-origin CSRF proof. A reverse proxy whose upstream appears
+    as loopback must authenticate its own remote clients.
+servers:
+  - url: http://127.0.0.1:9527
+    description: Root-mounted controller example
+  - url: http://127.0.0.1:9530/inspector
+    description: Prefixed named-instance controller example
+tags:
+  - name: Instances
+paths:
+  /api/instances:
+    get:
+      tags: [Instances]
+      operationId: listNamedInstances
+      summary: List registered named instances and derived live state
+      responses:
+        "200":
+          description: Versioned instance list
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/InstanceList"
+        default:
+          $ref: "#/components/responses/InstanceError"
+  /api/instances/{name}:
+    parameters:
+      - $ref: "#/components/parameters/InstanceName"
+    get:
+      tags: [Instances]
+      operationId: getNamedInstance
+      summary: Read one named instance and its live state
+      responses:
+        "200":
+          description: Instance view
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/InstanceView"
+        default:
+          $ref: "#/components/responses/InstanceError"
+  /api/instances/{name}/connection:
+    parameters:
+      - $ref: "#/components/parameters/InstanceName"
+    get:
+      tags: [Instances]
+      operationId: getNamedInstanceConnection
+      summary: Read protocol-correct Coding Agent connection settings
+      responses:
+        "200":
+          description: Token-free connection descriptor
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/InstanceConnection"
+        default:
+          $ref: "#/components/responses/InstanceError"
+  /api/instances/{name}/start:
+    parameters:
+      - $ref: "#/components/parameters/InstanceName"
+    post:
+      tags: [Instances]
+      operationId: startNamedInstance
+      summary: Idempotently create, start, or reuse a named instance
+      requestBody:
+        required: false
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/InstanceStartRequest"
+      responses:
+        "200":
+          description: Existing instance started or reused
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/InstanceOperation"
+        "201":
+          description: New instance record created and started
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/InstanceOperation"
+        default:
+          $ref: "#/components/responses/InstanceError"
+  /api/instances/{name}/stop:
+    parameters:
+      - $ref: "#/components/parameters/InstanceName"
+    post:
+      tags: [Instances]
+      operationId: stopNamedInstance
+      summary: Gracefully stop a matching sibling instance
+      requestBody:
+        required: false
+        content:
+          application/json:
+            schema:
+              type: object
+              additionalProperties: false
+      responses:
+        "200":
+          description: Instance stopped or already stopped
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/InstanceOperation"
+        default:
+          $ref: "#/components/responses/InstanceError"
+  /api/instances/{name}/restart:
+    parameters:
+      - $ref: "#/components/parameters/InstanceName"
+    post:
+      tags: [Instances]
+      operationId: restartNamedInstance
+      summary: Validate configuration, gracefully stop, and relaunch a sibling instance
+      requestBody:
+        required: false
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/InstanceStartRequest"
+      responses:
+        "200":
+          description: Replacement launch reached readiness
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/InstanceOperation"
+        default:
+          $ref: "#/components/responses/InstanceError"
+components:
+  securitySchemes:
+    controlBearer:
+      type: http
+      scheme: bearer
+      description: Value of AGENT_INSPECTOR_CONTROL_TOKEN for direct non-loopback access.
+  parameters:
+    InstanceName:
+      name: name
+      in: path
+      required: true
+      schema:
+        type: string
+        pattern: "^[a-z0-9._-]{1,64}$"
+      example: review
+  responses:
+    InstanceError:
+      description: Versioned machine-readable lifecycle error
+      content:
+        application/json:
+          schema:
+            $ref: "#/components/schemas/InstanceError"
+  schemas:
+    InstanceUrls:
+      type: object
+      additionalProperties: false
+      required: [ui, api, health, proxy, openai, mcp]
+      properties:
+        ui: { type: string, format: uri, example: "http://127.0.0.1:9530/inspector" }
+        api: { type: string, format: uri, example: "http://127.0.0.1:9530/inspector/api" }
+        health:
+          { type: string, format: uri, example: "http://127.0.0.1:9530/inspector/api/health" }
+        proxy:
+          { type: string, format: uri, example: "http://127.0.0.1:9530/inspector/proxy" }
+        openai:
+          { type: string, format: uri, example: "http://127.0.0.1:9530/inspector/proxy/v1" }
+        mcp:
+          { type: string, format: uri, example: "http://127.0.0.1:9530/inspector/api/mcp" }
+    InstanceView:
+      type: object
+      additionalProperties: false
+      required:
+        - schemaVersion
+        - name
+        - instanceId
+        - state
+        - stateReason
+        - checkedAt
+        - createdAt
+        - updatedAt
+        - launch
+        - host
+        - publicPort
+        - upstreamPort
+        - basePath
+        - captureMode
+        - uiEnabled
+        - dataDir
+        - supervisorPid
+        - urls
+      properties:
+        schemaVersion: { const: 1 }
+        name: { type: string, example: review }
+        instanceId: { type: string, example: "d8805ce7-5ec7-41fb-a370-c56b57418839" }
+        state: { type: string, enum: [running, stopped, conflict] }
+        stateReason:
+          oneOf:
+            - { type: string, enum: [identity_mismatch, port_conflict] }
+            - { type: "null" }
+        checkedAt: { type: string, format: date-time }
+        createdAt: { type: string, format: date-time }
+        updatedAt: { type: string, format: date-time }
+        launch:
+          type: object
+          additionalProperties: false
+          required: [launchId, startedAt]
+          properties:
+            launchId: { type: string }
+            startedAt: { type: string, format: date-time }
+        host: { type: string, example: "127.0.0.1" }
+        publicPort: { type: integer, minimum: 1, maximum: 65535, example: 9530 }
+        upstreamPort: { type: integer, minimum: 1, maximum: 65535, example: 9532 }
+        basePath: { type: string, example: /inspector }
+        captureMode: { type: string, enum: [simple, full] }
+        uiEnabled:
+          type: boolean
+          description: Whether this instance serves the composed Web UI. Backend endpoints remain available when false.
+        dataDir: { type: string, example: "C:\\Users\\me\\AppData\\Local\\agent-inspector\\instances\\review\\data" }
+        supervisorPid:
+          oneOf:
+            - { type: integer, minimum: 1 }
+            - { type: "null" }
+        urls:
+          $ref: "#/components/schemas/InstanceUrls"
+    InstanceList:
+      type: object
+      additionalProperties: false
+      required: [schemaVersion, instances]
+      properties:
+        schemaVersion: { const: 1 }
+        instances:
+          type: array
+          items:
+            $ref: "#/components/schemas/InstanceView"
+    InstanceStartRequest:
+      type: object
+      additionalProperties: false
+      properties:
+        port: { type: integer, minimum: 1, maximum: 65535 }
+        basePath: { type: string, example: /inspector }
+        host: { type: string, example: "127.0.0.1" }
+        captureMode: { type: string, enum: [simple, full] }
+        uiEnabled:
+          type: boolean
+          description: Persist composed UI serving when true or backend-only mode when false.
+        dataDir: { type: string }
+    InstanceOperation:
+      type: object
+      additionalProperties: false
+      required: [schemaVersion, operation, outcome, instance]
+      properties:
+        schemaVersion: { const: 1 }
+        operation: { type: string, enum: [start, stop, restart] }
+        outcome:
+          type: string
+          enum: [created, started, already_running, stopped, already_stopped, restarted]
+        instance:
+          $ref: "#/components/schemas/InstanceView"
+    InstanceConnectionSurfaces:
+      type: object
+      additionalProperties: false
+      required: [ui, control, agent]
+      properties:
+        ui:
+          type: object
+          additionalProperties: false
+          required: [enabled, baseUrl]
+          properties:
+            enabled:
+              type: boolean
+              description: Whether this instance serves its composed Web UI.
+            baseUrl:
+              description: Composed UI Base URL, or null for a backend-only instance.
+              oneOf:
+                - { type: string, format: uri }
+                - { type: "null" }
+        control:
+          type: object
+          additionalProperties: false
+          required: [baseUrl]
+          properties:
+            baseUrl:
+              type: string
+              format: uri
+              description: Base URL for REST, mutation, upload/download, and SSE traffic.
+        agent:
+          type: object
+          additionalProperties: false
+          required: [baseUrl]
+          properties:
+            baseUrl:
+              type: string
+              format: uri
+              description: Base URL from which proxy and MCP client endpoints are derived.
+    InstanceConnection:
+      type: object
+      additionalProperties: false
+      required: [schemaVersion, uiEnabled, instance, surfaces, baseUrl, endpoints, environment, mcp, codex]
+      properties:
+        schemaVersion: { const: 1 }
+        uiEnabled:
+          type: boolean
+          description: Whether the instance currently serves its composed Web UI; proxy, REST, health, and MCP remain valid when false.
+        instance: { $ref: "#/components/schemas/InstanceView" }
+        surfaces: { $ref: "#/components/schemas/InstanceConnectionSurfaces" }
+        baseUrl:
+          type: string
+          format: uri
+          deprecated: true
+          description: Legacy backend Base URL; use surfaces.control.baseUrl or surfaces.agent.baseUrl.
+        endpoints:
+          allOf:
+            - { $ref: "#/components/schemas/InstanceUrls" }
+          deprecated: true
+          description: Legacy derived endpoint set retained for compatibility; use surfaces for Base URLs.
+        environment:
+          type: object
+          additionalProperties: false
+          required: [ANTHROPIC_BASE_URL, LLM_BASE_URL, OPENAI_BASE_URL, AGENT_INSPECTOR_MCP_URL]
+          properties:
+            ANTHROPIC_BASE_URL: { type: string, format: uri }
+            LLM_BASE_URL: { type: string, format: uri }
+            OPENAI_BASE_URL: { type: string, format: uri }
+            AGENT_INSPECTOR_MCP_URL: { type: string, format: uri }
+        mcp:
+          type: object
+          additionalProperties: false
+          required: [serverName, transport, url]
+          properties:
+            serverName: { type: string, example: agent-inspector-review }
+            transport: { const: streamable-http }
+            url: { type: string, format: uri }
+        codex:
+          type: object
+          additionalProperties: false
+          required: [providerName, baseUrl, wireApi]
+          properties:
+            providerName: { type: string, example: agent-inspector-review }
+            baseUrl: { type: string, format: uri }
+            wireApi: { const: responses }
+    InstanceError:
+      type: object
+      additionalProperties: false
+      required: [schemaVersion, error]
+      properties:
+        schemaVersion: { const: 1 }
+        error:
+          type: object
+          additionalProperties: false
+          required: [code, message, retryable]
+          properties:
+            code: { type: string }
+            message: { type: string }
+            retryable: { type: boolean }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tonyclaw/agent-inspector",
-  "version": "3.0.44",
+  "version": "3.0.46",
   "type": "module",
   "description": "Agent observability and knowledge capture layer for AI coding tools.",
   "license": "MIT",
@@ -44,28 +44,48 @@
     "!src/**/*.test.ts",
     "!src/**/*.stories.tsx",
     "!src/**/__fixtures__",
-    "!src/routeTree.gen.ts",
+    "!src/ui/routeTree.gen.ts",
+    "!src/backend/routeTree.gen.ts",
     "scripts/setup-windows-runtime.mjs",
     "scripts/setup-agent-skills.mjs",
     "scripts/generate-theme-scales.mjs",
+    "docs/instance-control.openapi.yaml",
     "styles",
     ".output",
     "!.output/*.exe"
   ],
   "scripts": {
-    "dev": "vite dev",
+    "dev": "node scripts/dev-decoupled.mjs",
+    "dev:ui": "vite dev --config vite.ui.config.ts",
+    "dev:backend": "node scripts/dev-backend.mjs",
     "test:smoke": "bun scripts/run-test-suite.mjs smoke",
     "test:fast": "bun scripts/run-test-suite.mjs smoke",
     "test:unit": "bun scripts/run-test-suite.mjs unit",
     "test:integration": "bun scripts/run-test-suite.mjs integration",
     "test:changed": "bun scripts/run-test-suite.mjs changed",
     "test:all": "bun scripts/run-test-suite.mjs all",
+    "test:compatibility-tooling": "node --test scripts/compatibility/*.test.mjs",
     "start": "node .output/cli.js",
-    "build": "vite build && bun build:workers && bun build:cli && bun build:mcp && bun check:bundle",
+    "start:backend": "node .output/cli.js --backend-only --no-open",
+    "preview:ui": "vite preview --config vite.ui.config.ts",
+    "clean:output": "node scripts/clean-output.mjs",
+    "build": "bun clean:output && bun build:backend && bun build:ui && bun smoke:ui-preview && bun build:workers && bun build:cli && bun build:mcp && bun check:bundle && bun check:boundaries",
+    "build:backend": "vite build --config vite.backend.config.ts",
+    "build:ui": "vite build --config vite.ui.config.ts",
     "build:workers": "npx esbuild src/proxy/logFinalizer.worker.ts src/proxy/sessionWorkerEntry.ts --bundle --platform=node --target=node22 --format=esm --outdir=.output/workers --external:better-sqlite3",
     "smoke:workers": "node scripts/smoke-production-workers.mjs",
     "smoke:packed-workers": "node scripts/smoke-packed-workers.mjs",
+    "smoke:instances": "node scripts/smoke-windows-instances.mjs",
+    "smoke:coding-agent-instances": "node scripts/smoke-coding-agent-instances.mjs",
+    "smoke:ui-preview": "node scripts/smoke-decoupled-ui-preview.mjs",
     "check:bundle": "node scripts/check-client-bundle.mjs",
+    "check:boundaries": "node scripts/check-runtime-boundaries.mjs",
+    "compatibility:bdd": "node scripts/lint-bdd-catalog.mjs",
+    "compatibility:compare": "node scripts/compatibility/cli.mjs compare",
+    "compatibility:drift": "node scripts/check-backend-compatibility.mjs",
+    "compatibility:fixtures": "bun scripts/validate-compatibility-fixtures.ts",
+    "compatibility:freeze": "node scripts/freeze-backend-baseline.mjs",
+    "compatibility:run": "node scripts/compatibility/cli.mjs run",
     "build:cli": "npx esbuild src/cli.ts --bundle --platform=node --target=node22 --format=esm --outfile=.output/cli.js",
     "build:mcp": "npx esbuild packages/agent-inspector-mcp/src/cli.ts --bundle --platform=node --target=node22 --format=esm --outfile=packages/agent-inspector-mcp/dist/cli.js",
     "themes:generate": "node scripts/generate-theme-scales.mjs",
@@ -80,7 +100,7 @@
     "extension:release": "node scripts/release-chrome-extension.mjs",
     "release": "node scripts/release.mjs",
     "knip": "knip",
-    "check": "bun scripts/run-static-checks.mjs --format",
+    "check": "bun scripts/run-static-checks.mjs --format && bun check:boundaries && bun compatibility:bdd",
     "prepare": "husky",
     "ladle": "ladle serve",
     "ladle:build": "ladle build"
@@ -119,6 +139,7 @@
     "@ladle/react": "^5.1.1",
     "@radix-ui/colors": "^3.0.0",
     "@tailwindcss/vite": "^4.3.2",
+    "@tanstack/router-plugin": "^1.168.20",
     "@types/bun": "^1.3.14",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",
@@ -126,6 +147,8 @@
     "@typescript-eslint/eslint-plugin": "^8.64.0",
     "@typescript-eslint/parser": "^8.64.0",
     "@vitejs/plugin-react": "^5.2.0",
+    "ajv": "8.20.0",
+    "ajv-formats": "3.0.1",
     "colorjs.io": "^0.7.0",
     "esbuild": "^0.28.1",
     "eslint": "^9.39.5",

package/scripts/generate-theme-scales.mjs

@@ -3,9 +3,9 @@ import { URL } from "node:url";
 import { olive, sand, slateDark } from "@radix-ui/colors";
 
 const themes = [
-  { selector: ":root,\n:root[data-theme=\"light\"]", scale: sand, source: "sand" },
-  { selector: ":root[data-theme=\"dark\"]", scale: slateDark, source: "slateDark" },
-  { selector: ":root[data-theme=\"eye-care\"]", scale: olive, source: "olive" },
+  { selector: ':root,\n:root[data-theme="light"]', scale: sand, source: "sand" },
+  { selector: ':root[data-theme="dark"]', scale: slateDark, source: "slateDark" },
+  { selector: ':root[data-theme="eye-care"]', scale: olive, source: "olive" },
 ];
 
 function renderTheme({ selector, scale, source }) {

package/src/{router.tsx → backend/router.tsx}

@@ -1,5 +1,5 @@
 import { createRouter } from "@tanstack/react-router";
-import { getRouterBasePath } from "./lib/basePath";
+import { getRouterBasePath } from "../lib/basePath";
 import { routeTree } from "./routeTree.gen";
 
 function defaultRouterBasePath(): string {
@@ -19,14 +19,8 @@ export function getRouter(basepath = defaultRouterBasePath()) {
 function attachServerSsrStoreCompatibility(
   router: Readonly<{ state: Readonly<{ matches: unknown }> }>,
 ): void {
-  // TanStack >= 1.168 refactored `state` from an own data property into a
-  // prototype getter backed by lazily-created `stores` (`this.stores.__store`).
-  // Installing a `stores` value here would shadow that lazy init
-  // (`if (!this.stores && this.latestLocation) { this.stores = … }`) and break
-  // `router.state`. When `state` is already a prototype accessor the new store
-  // architecture handles SSR natively and this shim is obsolete.
-  const stateDesc = Object.getOwnPropertyDescriptor(router, "state");
-  if (stateDesc === undefined) return;
+  const stateDescriptor = Object.getOwnPropertyDescriptor(router, "state");
+  if (stateDescriptor === undefined) return;
 
   const existingStores = Object.getOwnPropertyDescriptor(router, "stores");
   if (existingStores !== undefined) return;
@@ -40,9 +34,3 @@ function attachServerSsrStoreCompatibility(
     },
   });
 }
-
-declare module "@tanstack/react-router" {
-  interface Register {
-    router: ReturnType<typeof getRouter>;
-  }
-}

package/src/backend/routes/$.ts

@@ -0,0 +1,26 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+const BACKEND_NOT_FOUND_BODY = {
+  error: "not_found",
+  message: "Agent Inspector backend does not serve the web UI.",
+};
+
+export function backendNotFoundResponse(): Response {
+  return Response.json(BACKEND_NOT_FOUND_BODY, {
+    status: 404,
+    headers: { "cache-control": "no-store" },
+  });
+}
+
+export const Route = createFileRoute("/$")({
+  server: {
+    handlers: {
+      GET: backendNotFoundResponse,
+      POST: backendNotFoundResponse,
+      PUT: backendNotFoundResponse,
+      PATCH: backendNotFoundResponse,
+      DELETE: backendNotFoundResponse,
+      OPTIONS: backendNotFoundResponse,
+    },
+  },
+});

package/src/backend/routes/__root.ts

@@ -0,0 +1,4 @@
+import { createRootRoute } from "@tanstack/react-router";
+
+/** Backend-only root: all public behavior is provided by server route handlers. */
+export const Route = createRootRoute();

package/src/backend/routes/api/-instances.ts

@@ -0,0 +1,109 @@
+import { type z } from "zod";
+import type { InstanceLifecycleError, InstanceLifecycleResult } from "../../../cli/instance";
+import {
+  type InstancePublicErrorCode,
+  INSTANCE_API_SCHEMA_VERSION,
+  instanceErrorOutput,
+} from "../../../lib/instanceContract";
+import { readManagedInstanceLaunch } from "../../../lib/managedInstance";
+
+const NO_STORE_HEADERS = { "cache-control": "no-store" };
+
+type ParsedBody<T> = { ok: true; value: T } | { ok: false; response: Response };
+
+function errorStatus(code: InstancePublicErrorCode): number {
+  switch (code) {
+    case "argument_invalid":
+    case "data_dir_invalid":
+    case "name_invalid":
+    case "port_invalid":
+    case "record_invalid":
+      return 400;
+    case "instance_not_found":
+      return 404;
+    case "config_mismatch":
+    case "data_dir_conflict":
+    case "identity_mismatch":
+    case "port_conflict":
+    case "self_lifecycle_unsupported":
+      return 409;
+    case "lock_not_owned":
+    case "lock_timeout":
+      return 423;
+    case "launch_failed":
+    case "launch_unavailable":
+    case "port_exhausted":
+    case "registry_io":
+    case "restart_failed_degraded":
+    case "restart_failed_rolled_back":
+    case "shutdown_failed":
+      return 503;
+  }
+}
+
+export function instanceErrorResponse(error: InstanceLifecycleError): Response {
+  return Response.json(instanceErrorOutput(error), {
+    status: errorStatus(error.code),
+    headers: NO_STORE_HEADERS,
+  });
+}
+
+export function instanceResultResponse<T>(
+  result: InstanceLifecycleResult<T>,
+  successStatus = 200,
+): Response {
+  return result.kind === "error"
+    ? instanceErrorResponse(result.error)
+    : Response.json(result.value, { status: successStatus, headers: NO_STORE_HEADERS });
+}
+
+export async function parseInstanceBody<T extends z.ZodType>(
+  request: Request,
+  schema: T,
+): Promise<ParsedBody<z.output<T>>> {
+  let value: unknown;
+  try {
+    const text = await request.text();
+    value = text.trim().length === 0 ? {} : JSON.parse(text);
+  } catch {
+    return {
+      ok: false,
+      response: instanceErrorResponse({
+        code: "argument_invalid",
+        message: "Request body must be valid JSON.",
+        retryable: false,
+      }),
+    };
+  }
+  const parsed = schema.safeParse(value);
+  if (!parsed.success) {
+    return {
+      ok: false,
+      response: instanceErrorResponse({
+        code: "argument_invalid",
+        message: `Invalid instance request: ${parsed.error.issues[0]?.message ?? "invalid body"}`,
+        retryable: false,
+      }),
+    };
+  }
+  return { ok: true, value: parsed.data };
+}
+
+export function selfLifecycleError(rawName: string): InstanceLifecycleError | null {
+  const current = readManagedInstanceLaunch(process.env);
+  return current.kind === "managed" && current.launch.name.toLowerCase() === rawName.toLowerCase()
+    ? {
+        code: "self_lifecycle_unsupported",
+        message:
+          "A managed runtime cannot stop or restart itself through its own REST/MCP transport; use the CLI or a different controller instance.",
+        retryable: false,
+      }
+    : null;
+}
+
+export function instanceListResponse(instances: readonly unknown[]): Response {
+  return Response.json(
+    { schemaVersion: INSTANCE_API_SCHEMA_VERSION, instances },
+    { headers: NO_STORE_HEADERS },
+  );
+}

package/src/{routes → backend/routes}/api/alerts.summary.ts

@@ -1,7 +1,7 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { getInspectorAlertSummary } from "../../services/alerts";
-import { DEFAULT_ALERT_SCAN_LIMIT, MAX_ALERT_SCAN_LIMIT } from "../../proxy/alerts";
-import { parseBoundedIntegerParameter } from "../../lib/resourceLimits";
+import { getInspectorAlertSummary } from "../../../services/alerts";
+import { DEFAULT_ALERT_SCAN_LIMIT, MAX_ALERT_SCAN_LIMIT } from "../../../proxy/alerts";
+import { parseBoundedIntegerParameter } from "../../../lib/resourceLimits";
 
 export const Route = createFileRoute("/api/alerts/summary")({
   server: {

package/src/{routes → backend/routes}/api/alerts.ts

@@ -6,15 +6,15 @@ import {
   type AlertCategory,
   type AlertSeverity,
   type AlertSource,
-} from "../../lib/alertContract";
-import { listInspectorAlerts } from "../../services/alerts";
+} from "../../../lib/alertContract";
+import { listInspectorAlerts } from "../../../services/alerts";
 import {
   DEFAULT_ALERT_LIMIT,
   DEFAULT_ALERT_SCAN_LIMIT,
   MAX_ALERT_LIMIT,
   MAX_ALERT_SCAN_LIMIT,
-} from "../../proxy/alerts";
-import { parseBoundedIntegerParameter } from "../../lib/resourceLimits";
+} from "../../../proxy/alerts";
+import { parseBoundedIntegerParameter } from "../../../lib/resourceLimits";
 
 type ParsedFilters = {
   severity?: AlertSeverity;

package/src/{routes → backend/routes}/api/config.paths.ts

@@ -1,5 +1,5 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { store } from "../../proxy/providers";
+import { store } from "../../../proxy/providers";
 
 export const Route = createFileRoute("/api/config/paths")({
   server: {