@tonyclaw/agent-inspector 3.0.44 → 3.0.46

package/src/{routes → backend/routes}/api/config.ts

@@ -4,8 +4,8 @@ import {
   MAX_PROVIDER_TEST_TIMEOUT_SECONDS,
   MAX_SLOW_RESPONSE_THRESHOLD_SECONDS,
   TimeDisplayFormatSchema,
-} from "../../lib/runtimeConfig";
-import { getConfig, setConfig, RuntimeConfigSchema } from "../../proxy/config";
+} from "../../../lib/runtimeConfig";
+import { getConfig, setConfig, RuntimeConfigSchema } from "../../../proxy/config";
 
 // Partial schema for PATCH: at least one known field must be present.
 const RuntimeConfigPatchSchema = z
@@ -57,6 +57,15 @@ export const Route = createFileRoute("/api/config")({
         }
 
         const updated = setConfig(result.data);
+        if (updated === null) {
+          return Response.json(
+            { error: "Runtime configuration could not be persisted" },
+            {
+              status: 503,
+              headers: { "Cache-Control": "no-store" },
+            },
+          );
+        }
         return Response.json(updated satisfies z.infer<typeof RuntimeConfigSchema>);
       },
     },

package/src/{routes → backend/routes}/api/ecosystem.packages.$packageId.help.ts

@@ -1,5 +1,5 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { handleEcosystemPackageExecution } from "../../proxy/ecosystemExecutionRoute";
+import { handleEcosystemPackageExecution } from "../../../proxy/ecosystemExecutionRoute";
 
 export const Route = createFileRoute("/api/ecosystem/packages/$packageId/help")({
   server: {

package/src/{routes → backend/routes}/api/ecosystem.packages.$packageId.install.ts

@@ -1,5 +1,5 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { handleEcosystemPackageExecution } from "../../proxy/ecosystemExecutionRoute";
+import { handleEcosystemPackageExecution } from "../../../proxy/ecosystemExecutionRoute";
 
 export const Route = createFileRoute("/api/ecosystem/packages/$packageId/install")({
   server: {

package/src/{routes → backend/routes}/api/ecosystem.packages.$packageId.runner-presets.ts

@@ -1,5 +1,5 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { handleEcosystemPackageExecution } from "../../proxy/ecosystemExecutionRoute";
+import { handleEcosystemPackageExecution } from "../../../proxy/ecosystemExecutionRoute";
 
 export const Route = createFileRoute("/api/ecosystem/packages/$packageId/runner-presets")({
   server: {

package/src/{routes → backend/routes}/api/ecosystem.packages.$packageId.upgrade.ts

@@ -1,5 +1,5 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { handleEcosystemPackageExecution } from "../../proxy/ecosystemExecutionRoute";
+import { handleEcosystemPackageExecution } from "../../../proxy/ecosystemExecutionRoute";
 
 export const Route = createFileRoute("/api/ecosystem/packages/$packageId/upgrade")({
   server: {

package/src/{routes → backend/routes}/api/ecosystem.packages.ts

@@ -1,5 +1,9 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { LAB_RECIPES, listEcosystemPackages, RUNNER_PRESETS } from "../../proxy/ecosystemRegistry";
+import {
+  LAB_RECIPES,
+  listEcosystemPackages,
+  RUNNER_PRESETS,
+} from "../../../proxy/ecosystemRegistry";
 
 export const Route = createFileRoute("/api/ecosystem/packages")({
   server: {

package/src/{routes → backend/routes}/api/ecosystem.recipes.$recipeId.run.ts

@@ -1,5 +1,5 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { handleEcosystemRecipeExecution } from "../../proxy/ecosystemExecutionRoute";
+import { handleEcosystemRecipeExecution } from "../../../proxy/ecosystemExecutionRoute";
 
 export const Route = createFileRoute("/api/ecosystem/recipes/$recipeId/run")({
   server: {

package/src/{routes → backend/routes}/api/ecosystem.tasks.$taskId.ts

@@ -1,5 +1,5 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { getEcosystemTask } from "../../proxy/ecosystemTasks";
+import { getEcosystemTask } from "../../../proxy/ecosystemTasks";
 
 export const Route = createFileRoute("/api/ecosystem/tasks/$taskId")({
   server: {

package/src/{routes → backend/routes}/api/ecosystem.tasks.ts

@@ -1,5 +1,5 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { listEcosystemTasks } from "../../proxy/ecosystemTasks";
+import { listEcosystemTasks } from "../../../proxy/ecosystemTasks";
 
 export const Route = createFileRoute("/api/ecosystem/tasks")({
   server: {

package/src/{routes → backend/routes}/api/groups.$groupId.evidence.ts

@@ -1,6 +1,6 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { GroupEvidenceExportOptionsSchema } from "../../lib/groupContract";
-import { exportInspectorGroupEvidence, readInspectorGroupEvidence } from "../../services/groups";
+import { GroupEvidenceExportOptionsSchema } from "../../../lib/groupContract";
+import { exportInspectorGroupEvidence, readInspectorGroupEvidence } from "../../../services/groups";
 
 type JsonBodyResult = { ok: true; value: unknown } | { ok: false };
 

package/src/{routes → backend/routes}/api/groups.$groupId.sessions.ts

@@ -1,6 +1,6 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { AddInspectorGroupSessionInputSchema } from "../../lib/groupContract";
-import { addInspectorGroupSession, readInspectorGroupSessions } from "../../services/groups";
+import { AddInspectorGroupSessionInputSchema } from "../../../lib/groupContract";
+import { addInspectorGroupSession, readInspectorGroupSessions } from "../../../services/groups";
 
 type JsonBodyResult = { ok: true; value: unknown } | { ok: false };
 

package/src/{routes → backend/routes}/api/groups.$groupId.ts

@@ -1,10 +1,10 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { UpdateInspectorGroupInputSchema } from "../../lib/groupContract";
+import { UpdateInspectorGroupInputSchema } from "../../../lib/groupContract";
 import {
   deleteInspectorGroup,
   getInspectorGroup,
   updateInspectorGroup,
-} from "../../services/groups";
+} from "../../../services/groups";
 
 type JsonBodyResult = { ok: true; value: unknown } | { ok: false };
 type DeleteEvidenceFlagResult = { ok: true; value: boolean | undefined } | { ok: false };

package/src/{routes → backend/routes}/api/groups.ts

@@ -1,10 +1,10 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { CreateInspectorGroupInputSchema } from "../../lib/groupContract";
+import { CreateInspectorGroupInputSchema } from "../../../lib/groupContract";
 import {
   createInspectorGroup,
   deleteInspectorGroups,
   listInspectorGroups,
-} from "../../services/groups";
+} from "../../../services/groups";
 
 type JsonBodyResult = { ok: true; value: unknown } | { ok: false };
 type DeleteEvidenceFlagResult = { ok: true; value: boolean | undefined } | { ok: false };

package/src/{routes → backend/routes}/api/health.ts

@@ -1,7 +1,7 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { logger } from "../../proxy/logger";
-import { getRuntimeReadiness } from "../../proxy/runtimeHealth";
-import { installRuntimeShutdownSignalHandlers } from "../../proxy/runtimeShutdown";
+import { logger } from "../../../proxy/logger";
+import { getRuntimeReadiness } from "../../../proxy/runtimeHealth";
+import { installRuntimeShutdownSignalHandlers } from "../../../proxy/runtimeShutdown";
 
 // Trigger logger auto-initialization when this module loads
 installRuntimeShutdownSignalHandlers();

package/src/backend/routes/api/instances.$name.connection.ts

@@ -0,0 +1,12 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { getNamedInstanceConnection } from "../../../cli/instance";
+import { instanceResultResponse } from "./-instances";
+
+export const Route = createFileRoute("/api/instances/$name/connection")({
+  server: {
+    handlers: {
+      GET: async ({ params }: { params: { name: string } }) =>
+        instanceResultResponse(await getNamedInstanceConnection(params.name)),
+    },
+  },
+});

package/src/backend/routes/api/instances.$name.restart.ts

@@ -0,0 +1,23 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { restartNamedInstance } from "../../../cli/instance";
+import { InstanceStartRequestSchema } from "../../../lib/instanceContract";
+import {
+  instanceErrorResponse,
+  instanceResultResponse,
+  parseInstanceBody,
+  selfLifecycleError,
+} from "./-instances";
+
+export const Route = createFileRoute("/api/instances/$name/restart")({
+  server: {
+    handlers: {
+      POST: async ({ params, request }: { params: { name: string }; request: Request }) => {
+        const body = await parseInstanceBody(request, InstanceStartRequestSchema);
+        if (!body.ok) return body.response;
+        const selfError = selfLifecycleError(params.name);
+        if (selfError !== null) return instanceErrorResponse(selfError);
+        return instanceResultResponse(await restartNamedInstance(params.name, body.value));
+      },
+    },
+  },
+});

package/src/backend/routes/api/instances.$name.start.ts

@@ -0,0 +1,18 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { startNamedInstance } from "../../../cli/instance";
+import { InstanceStartRequestSchema } from "../../../lib/instanceContract";
+import { instanceResultResponse, parseInstanceBody } from "./-instances";
+
+export const Route = createFileRoute("/api/instances/$name/start")({
+  server: {
+    handlers: {
+      POST: async ({ params, request }: { params: { name: string }; request: Request }) => {
+        const body = await parseInstanceBody(request, InstanceStartRequestSchema);
+        if (!body.ok) return body.response;
+        const result = await startNamedInstance(params.name, body.value);
+        const status = result.kind === "success" && result.value.outcome === "created" ? 201 : 200;
+        return instanceResultResponse(result, status);
+      },
+    },
+  },
+});

package/src/backend/routes/api/instances.$name.stop.ts

@@ -0,0 +1,23 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { stopNamedInstance } from "../../../cli/instance";
+import { InstanceEmptyRequestSchema } from "../../../lib/instanceContract";
+import {
+  instanceErrorResponse,
+  instanceResultResponse,
+  parseInstanceBody,
+  selfLifecycleError,
+} from "./-instances";
+
+export const Route = createFileRoute("/api/instances/$name/stop")({
+  server: {
+    handlers: {
+      POST: async ({ params, request }: { params: { name: string }; request: Request }) => {
+        const body = await parseInstanceBody(request, InstanceEmptyRequestSchema);
+        if (!body.ok) return body.response;
+        const selfError = selfLifecycleError(params.name);
+        if (selfError !== null) return instanceErrorResponse(selfError);
+        return instanceResultResponse(await stopNamedInstance(params.name));
+      },
+    },
+  },
+});

package/src/backend/routes/api/instances.$name.ts

@@ -0,0 +1,12 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { getNamedInstance } from "../../../cli/instance";
+import { instanceResultResponse } from "./-instances";
+
+export const Route = createFileRoute("/api/instances/$name")({
+  server: {
+    handlers: {
+      GET: async ({ params }: { params: { name: string } }) =>
+        instanceResultResponse(await getNamedInstance(params.name)),
+    },
+  },
+});

package/src/backend/routes/api/instances.ts

@@ -0,0 +1,16 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { listNamedInstances } from "../../../cli/instance";
+import { instanceListResponse, instanceResultResponse } from "./-instances";
+
+export const Route = createFileRoute("/api/instances")({
+  server: {
+    handlers: {
+      GET: async () => {
+        const result = await listNamedInstances();
+        return result.kind === "error"
+          ? instanceResultResponse(result)
+          : instanceListResponse(result.value);
+      },
+    },
+  },
+});

package/src/{routes → backend/routes}/api/knowledge.candidates.$candidateId.promote.ts

@@ -3,8 +3,8 @@ import {
   getCandidate,
   markCandidateFailed,
   markCandidatePromoted,
-} from "../../knowledge/candidateStore";
-import { promoteToOpenClaw } from "../../knowledge/openclawClient";
+} from "../../../knowledge/candidateStore";
+import { promoteToOpenClaw } from "../../../knowledge/openclawClient";
 
 export const Route = createFileRoute("/api/knowledge/candidates/$candidateId/promote")({
   server: {

package/src/{routes → backend/routes}/api/knowledge.candidates.$candidateId.ts

@@ -1,7 +1,7 @@
 import { createFileRoute } from "@tanstack/react-router";
 import { z } from "zod";
-import { getCandidate, updateCandidateDraft } from "../../knowledge/candidateStore";
-import { KnowledgeCandidateSchema, KnowledgeCandidateTypeSchema } from "../../knowledge/types";
+import { getCandidate, updateCandidateDraft } from "../../../knowledge/candidateStore";
+import { KnowledgeCandidateSchema, KnowledgeCandidateTypeSchema } from "../../../knowledge/types";
 
 const CandidateUpdateSchema = z
   .object({

package/src/{routes → backend/routes}/api/knowledge.candidates.ts

@@ -1,5 +1,5 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { listCandidates } from "../../knowledge/candidateStore";
+import { listCandidates } from "../../../knowledge/candidateStore";
 
 export const Route = createFileRoute("/api/knowledge/candidates")({
   server: {

package/src/{routes → backend/routes}/api/knowledge.project-context.ts

@@ -1,6 +1,6 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { searchOpenClaw } from "../../knowledge/openclawClient";
-import { MAX_SEARCH_PROJECT_CHARS, resourceLimitResponse } from "../../lib/resourceLimits";
+import { searchOpenClaw } from "../../../knowledge/openclawClient";
+import { MAX_SEARCH_PROJECT_CHARS, resourceLimitResponse } from "../../../lib/resourceLimits";
 
 export const Route = createFileRoute("/api/knowledge/project-context")({
   server: {

package/src/{routes → backend/routes}/api/knowledge.search.ts

@@ -1,7 +1,7 @@
 import { createFileRoute } from "@tanstack/react-router";
 import { z } from "zod";
-import { searchOpenClaw } from "../../knowledge/openclawClient";
-import { MAX_SEARCH_QUERY_CHARS, resourceLimitResponse } from "../../lib/resourceLimits";
+import { searchOpenClaw } from "../../../knowledge/openclawClient";
+import { MAX_SEARCH_QUERY_CHARS, resourceLimitResponse } from "../../../lib/resourceLimits";
 
 const SearchBodySchema = z.object({
   query: z.string().min(1).max(MAX_SEARCH_QUERY_CHARS),

package/src/{routes → backend/routes}/api/knowledge.sessions.$sessionId.candidates.ts

@@ -1,7 +1,7 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { getFilteredLogs, getLogSessionId } from "../../proxy/store";
-import { distillSessionCandidates } from "../../knowledge/distiller";
-import { saveCandidates } from "../../knowledge/candidateStore";
+import { getFilteredLogs, getLogSessionId } from "../../../proxy/store";
+import { distillSessionCandidates } from "../../../knowledge/distiller";
+import { saveCandidates } from "../../../knowledge/candidateStore";
 
 function getCandidateScopeId(log: ReturnType<typeof getFilteredLogs>[number]): string {
   return getLogSessionId(log) ?? "default";

package/src/{routes → backend/routes}/api/logs.$id.body.ts

@@ -1,12 +1,12 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { LogBodyPartSchema } from "../../contracts";
+import { LogBodyPartSchema, parseLogId } from "../../../contracts";
 import {
   createLogBodyChunk,
   DEFAULT_LOG_BODY_CHUNK_BYTES,
   MAX_LOG_BODY_CHUNK_BYTES,
-} from "../../proxy/logBodyChunks";
-import { getLogById } from "../../proxy/store";
-import { parseBoundedIntegerParameter } from "../../lib/resourceLimits";
+} from "../../../proxy/logBodyChunks";
+import { getLogById } from "../../../proxy/store";
+import { parseBoundedIntegerParameter } from "../../../lib/resourceLimits";
 
 function parseIntegerParam(value: string | null, fallback: number): number {
   if (value === null) return fallback;
@@ -19,8 +19,8 @@ export const Route = createFileRoute("/api/logs/$id/body")({
   server: {
     handlers: {
       GET: async ({ params, request }: { params: { id: string }; request: Request }) => {
-        const id = Number(params.id);
-        if (!Number.isInteger(id) || id <= 0) {
+        const id = parseLogId(params.id);
+        if (id === null) {
           return Response.json({ error: "Invalid log ID" }, { status: 400 });
         }
 

package/src/{routes → backend/routes}/api/logs.$id.chunks.ts

@@ -1,13 +1,14 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { getLogById } from "../../proxy/store";
-import { readChunks } from "../../proxy/chunkStorage";
+import { parseLogId } from "../../../contracts";
+import { getLogById } from "../../../proxy/store";
+import { readChunks } from "../../../proxy/chunkStorage";
 
 export const Route = createFileRoute("/api/logs/$id/chunks")({
   server: {
     handlers: {
       GET: async ({ params }: { params: { id: string } }) => {
-        const id = Number(params.id);
-        if (isNaN(id)) {
+        const id = parseLogId(params.id);
+        if (id === null) {
           return Response.json({ error: "Invalid log ID" }, { status: 400 });
         }
 

package/src/{routes → backend/routes}/api/logs.$id.replay.ts

@@ -1,10 +1,11 @@
 import { createFileRoute } from "@tanstack/react-router";
 import { z } from "zod";
-import { addTestLogEntry, getLogById } from "../../proxy/store";
-import { findProviderByModel } from "../../proxy/providers";
-import { registry } from "../../proxy/formats";
-import { formatForPath } from "../../proxy/formats";
-import { extractModelFromBody } from "../../proxy/schemas";
+import { parseLogId } from "../../../contracts";
+import { addTestLogEntry, getLogById } from "../../../proxy/store";
+import { findProviderByModel } from "../../../proxy/providers";
+import { registry } from "../../../proxy/formats";
+import { formatForPath } from "../../../proxy/formats";
+import { extractModelFromBody } from "../../../proxy/schemas";
 import {
   PROXY_IDENTITY,
   PRESERVE_HEADERS,
@@ -13,16 +14,16 @@ import {
   HEADER_X_PROXY_IDENTITY,
   CONTENT_TYPE_EVENT_STREAM,
   STATUS_FORBIDDEN,
-} from "../../proxy/constants";
+} from "../../../proxy/constants";
 import {
   buildUpstreamUrl,
   describeApiRoute,
   injectProviderAuth,
   selectUpstreamBase,
   setUpstreamHost,
-} from "../../proxy/upstream";
-import { computeTokensPerSecond } from "../../proxy/streamTiming";
-import { safeFetch } from "../../lib/safeFetch";
+} from "../../../proxy/upstream";
+import { computeTokensPerSecond } from "../../../proxy/streamTiming";
+import { safeFetch } from "../../../lib/safeFetch";
 
 type ReplayRequest = {
   modifiedBody: string;
@@ -51,8 +52,8 @@ export const Route = createFileRoute("/api/logs/$id/replay")({
   server: {
     handlers: {
       POST: async ({ params, request }: { params: { id: string }; request: Request }) => {
-        const id = Number(params.id);
-        if (isNaN(id)) {
+        const id = parseLogId(params.id);
+        if (id === null) {
           return Response.json({ error: "Invalid log ID" }, { status: 400 });
         }
 

package/src/{routes → backend/routes}/api/logs.$id.ts

@@ -1,12 +1,13 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { getLogById } from "../../proxy/store";
+import { parseLogId } from "../../../contracts";
+import { getLogById } from "../../../proxy/store";
 
 export const Route = createFileRoute("/api/logs/$id")({
   server: {
     handlers: {
       GET: async ({ params }: { params: { id: string } }) => {
-        const id = Number(params.id);
-        if (isNaN(id)) {
+        const id = parseLogId(params.id);
+        if (id === null) {
           return Response.json({ error: "Invalid ID" }, { status: 400 });
         }
 

package/src/{routes → backend/routes}/api/logs.import.ts

@@ -1,7 +1,7 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { parseImportedLogFile, sessionNameFromImportFileName } from "../../proxy/logImporter";
-import { readBoundedLogImportUpload } from "../../proxy/logImportUpload";
-import { compactLogForList, importCapturedLogs } from "../../proxy/store";
+import { parseImportedLogFile, sessionNameFromImportFileName } from "../../../proxy/logImporter";
+import { readBoundedLogImportUpload } from "../../../proxy/logImportUpload";
+import { compactLogForList, importCapturedLogs } from "../../../proxy/store";
 
 export const Route = createFileRoute("/api/logs/import")({
   server: {

package/src/{routes → backend/routes}/api/logs.stream.ts

@@ -4,14 +4,14 @@ import {
   onLogUpdate,
   getLogSessionId,
   listLogsCursorPage,
-} from "../../proxy/store";
-import { type CapturedLog } from "../../contracts";
+} from "../../../proxy/store";
+import { parseLogId, type CapturedLog } from "../../../contracts";
 import {
   createCapacityLimiter,
   MAX_SSE_CLIENTS,
   resourceLimitResponse,
   type CapacityLimiter,
-} from "../../lib/resourceLimits";
+} from "../../../lib/resourceLimits";
 
 const INITIAL_STREAM_LOG_LIMIT = 100;
 const UPDATE_COALESCE_MS = 50;
@@ -23,9 +23,8 @@ export function streamIncludesBodies(url: URL): boolean {
 }
 
 export function parseLastEventLogId(value: string | null): number | undefined {
-  if (value === null || !/^\d+$/.test(value)) return undefined;
-  const parsed = Number(value);
-  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : undefined;
+  if (value === null) return undefined;
+  return parseLogId(value) ?? undefined;
 }
 
 function encodeSse(value: unknown, id?: number): Uint8Array {
@@ -37,6 +36,11 @@ export function createLogsStreamResponse(
   request: Request,
   clientLimiter: CapacityLimiter = sseClientLimiter,
 ): Response {
+  const lastEventIdHeader = request.headers.get("last-event-id");
+  const lastEventLogId = parseLastEventLogId(lastEventIdHeader);
+  if (lastEventIdHeader !== null && lastEventLogId === undefined) {
+    return Response.json({ error: "Invalid Last-Event-ID" }, { status: 400 });
+  }
   const lease = clientLimiter.tryAcquire();
   if (lease === null) {
     return resourceLimitResponse({
@@ -53,7 +57,6 @@ export function createLogsStreamResponse(
   const sessionId = url.searchParams.get("sessionId") ?? undefined;
   const model = url.searchParams.get("model") ?? undefined;
   const includeBodies = streamIncludesBodies(url);
-  const lastEventLogId = parseLastEventLogId(request.headers.get("last-event-id"));
 
   let controllerRef: ReadableStreamDefaultController<Uint8Array> | null = null;
   let cleanedUp = false;
@@ -150,6 +153,7 @@ export function createLogsStreamResponse(
       "Content-Type": "text/event-stream",
       "Cache-Control": "no-cache",
       Connection: "keep-alive",
+      "X-Accel-Buffering": "no",
     },
   });
 }

package/src/{routes → backend/routes}/api/logs.ts

@@ -1,5 +1,6 @@
 import { createFileRoute } from "@tanstack/react-router";
 import { z } from "zod";
+import { LogIdSchema, parseLogId } from "../../../contracts";
 import {
   clearPersistedLogStorage,
   clearPersistedLogsByIds,
@@ -7,24 +8,24 @@ import {
   getReplayLogsForSource,
   listLogsCursorPage,
   listLogsPage,
-} from "../../proxy/store";
+} from "../../../proxy/store";
 import {
   LOG_SEARCH_DEFAULT_LIMIT,
   LOG_SEARCH_DEFAULT_SCAN_LIMIT,
   LOG_SEARCH_MAX_LIMIT,
   LOG_SEARCH_MAX_SCAN_LIMIT,
   searchLogsPage,
-} from "../../proxy/logSearch";
+} from "../../../proxy/logSearch";
 import {
   MAX_REST_LOG_PAGE_SIZE,
   MAX_SEARCH_QUERY_CHARS,
   parseBoundedIntegerParameter,
   resourceLimitResponse,
-} from "../../lib/resourceLimits";
+} from "../../../lib/resourceLimits";
 
 export const DeleteLogsBodySchema = z
   .object({
-    ids: z.array(z.number().int().nonnegative()).optional(),
+    ids: z.array(LogIdSchema).optional(),
   })
   .optional();
 
@@ -36,14 +37,21 @@ function parseNonNegativeInt(value: string | null, fallback: number): number {
 }
 
 type OptionalPositiveIntResult = { ok: true; value: number | null } | { ok: false };
+type OptionalLogIdResult = { ok: true; value: number | null } | { ok: false };
 
 function parseOptionalPositiveInt(value: string | null): OptionalPositiveIntResult {
   if (value === null) return { ok: true, value: null };
   const parsed = Number(value);
-  if (!Number.isInteger(parsed) || parsed < 1) return { ok: false };
+  if (!Number.isSafeInteger(parsed) || parsed < 1) return { ok: false };
   return { ok: true, value: parsed };
 }
 
+function parseOptionalLogId(value: string | null): OptionalLogIdResult {
+  if (value === null) return { ok: true, value: null };
+  const parsed = parseLogId(value);
+  return parsed === null ? { ok: false } : { ok: true, value: parsed };
+}
+
 export const Route = createFileRoute("/api/logs")({
   server: {
     handlers: {
@@ -54,8 +62,8 @@ export const Route = createFileRoute("/api/logs")({
         }
         const replayOf = url.searchParams.get("replayOf");
         if (replayOf !== null) {
-          const id = Number(replayOf);
-          if (!Number.isInteger(id) || id <= 0) {
+          const id = parseLogId(replayOf);
+          if (id === null) {
             return Response.json({ error: "Invalid replayOf log ID" }, { status: 400 });
           }
           const logs = getReplayLogsForSource(id);
@@ -124,8 +132,8 @@ export const Route = createFileRoute("/api/logs")({
         const includeBodies = url.searchParams.get("compact") !== "1";
 
         if (url.searchParams.get("cursor") === "1" || url.searchParams.get("cursor") === "true") {
-          const beforeLogId = parseOptionalPositiveInt(url.searchParams.get("beforeLogId"));
-          const afterLogId = parseOptionalPositiveInt(url.searchParams.get("afterLogId"));
+          const beforeLogId = parseOptionalLogId(url.searchParams.get("beforeLogId"));
+          const afterLogId = parseOptionalLogId(url.searchParams.get("afterLogId"));
           if (!beforeLogId.ok || !afterLogId.ok) {
             return Response.json({ error: "Invalid cursor log ID" }, { status: 400 });
           }

package/src/{routes → backend/routes}/api/mcp.ts

@@ -1,5 +1,5 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { handleMcpRequest } from "../../mcp/server";
+import { handleMcpRequest } from "../../../mcp/server";
 
 /**
  * MCP HTTP Streamable transport endpoint. Mounted at `POST /api/mcp` on the

package/src/{routes → backend/routes}/api/models.ts

@@ -1,5 +1,5 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { getModels } from "../../proxy/store";
+import { getModels } from "../../../proxy/store";
 
 export const Route = createFileRoute("/api/models")({
   server: {

package/src/{routes → backend/routes}/api/pi-agent.ts

@@ -1,6 +1,6 @@
 import { createFileRoute } from "@tanstack/react-router";
-import { PiAgentRequestSchema } from "../../lib/piAgentContract";
-import { runPiAgent } from "../../services/piAgent";
+import { PiAgentRequestSchema } from "../../../lib/piAgentContract";
+import { runPiAgent } from "../../../services/piAgent";
 
 export const Route = createFileRoute("/api/pi-agent")({
   server: {