@urateam/dashboard 0.1.2 → 0.1.5

package/dist/routes/coordination.js

@@ -2,18 +2,20 @@ import { Hono } from "hono";
 import { getActiveWork } from "@urateam/core";
 import { layout } from "../views/layout.js";
 import { coordinationView } from "../views/coordination.js";
+import { requirePermission } from "../middleware/rbac.js";
 export function createCoordinationRouter(db, basePath = "") {
     const router = new Hono();
-    router.get("/coordination", async (c) => {
+    router.get("/coordination", requirePermission("coordination.view"), async (c) => {
         const entries = await getActiveWork(db);
         const content = coordinationView(entries);
         if (c.req.header("HX-Request")) {
             return c.html(content);
         }
-        return c.html(layout("Coordination", content, basePath));
+        const user = c.get("user");
+        return c.html(layout("Coordination", content, basePath, { userEmail: user?.email }));
     });
     // HTMX partial: active coordination feed (polled every 10s)
-    router.get("/coordination/feed", async (c) => {
+    router.get("/coordination/feed", requirePermission("coordination.view"), async (c) => {
         const entries = await getActiveWork(db);
         return c.html(coordinationView(entries));
     });

package/dist/routes/coordination.js.map

@@ -1 +1 @@
-{"version":3,"file":"coordination.js","sourceRoot":"","sources":["../../src/routes/coordination.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,MAAM,UAAU,wBAAwB,CAAC,EAAM,EAAE,QAAQ,GAAG,EAAE;IAC5D,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAE1B,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAS,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAE1C,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAS,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"coordination.js","sourceRoot":"","sources":["../../src/routes/coordination.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,MAAM,UAAU,wBAAwB,CAAC,EAAM,EAAE,QAAQ,GAAG,EAAE;IAC5D,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAE1B,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,iBAAiB,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9E,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAS,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAE1C,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAe,CAAmC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAS,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/cost.d.ts

@@ -0,0 +1,10 @@
+import { Hono } from "hono";
+import type { Db, CostsConfig, PipelineConfig } from "@urateam/core";
+export interface CostRouterDeps {
+    db: Db;
+    costs?: CostsConfig;
+    pipelineConfigs?: Record<string, PipelineConfig>;
+    basePath?: string;
+}
+export declare function createCostRouter(deps: CostRouterDeps): Hono;
+//# sourceMappingURL=cost.d.ts.map

package/dist/routes/cost.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost.d.ts","sourceRoot":"","sources":["../../src/routes/cost.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKrE,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,EAAE,CAAC;IACP,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AA4BD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAuF3D"}

package/dist/routes/cost.js

@@ -0,0 +1,104 @@
+import { Hono } from "hono";
+import { isFeatureLicensed, aggregateHybrid, snapToUtcDayStart, streamCostCsv } from "@urateam/core";
+import { layout } from "../views/layout.js";
+import { renderCostPage } from "../views/cost.js";
+function parseWindow(url) {
+    const preset = url.searchParams.get("window") ?? "30d";
+    const now = new Date();
+    let from;
+    // Half-open interval [from, to) — add 1s to "now" so runs completing at the
+    // current second are still included in the window. SQLite stores timestamps
+    // as epoch seconds (integer), so a 1ms buffer would still floor to the same
+    // second and exclude runs that completed within the current second.
+    let to = new Date(now.getTime() + 1000);
+    if (preset === "custom") {
+        const fromStr = url.searchParams.get("from");
+        const toStr = url.searchParams.get("to");
+        from = fromStr ? new Date(fromStr) : new Date(now.getTime() - 30 * 86_400_000);
+        to = toStr ? new Date(toStr) : new Date(now.getTime() + 1000);
+        if (isNaN(from.getTime()))
+            from = new Date(now.getTime() - 30 * 86_400_000);
+        if (isNaN(to.getTime()))
+            to = now;
+    }
+    else {
+        // For preset windows: snap `from` to UTC day start so `aggregateHybrid`
+        // can read pre-computed rollup rows without boundary slicing. The window
+        // effectively becomes "last N complete UTC days + today-so-far".
+        const days = preset === "7d" ? 7 : preset === "90d" ? 90 : preset === "365d" ? 365 : 30;
+        from = new Date(snapToUtcDayStart(now).getTime() - days * 86_400_000);
+    }
+    return { from, to, preset };
+}
+export function createCostRouter(deps) {
+    const router = new Hono();
+    const basePath = deps.basePath ?? "";
+    const costs = deps.costs ?? {
+        modelPricing: {},
+        hourlyEngRate: 50,
+        timeSavedPerPrDefault: 4,
+    };
+    const pipelineConfigs = deps.pipelineConfigs ?? {};
+    // Gate every cost route behind the license feature flag.
+    router.use("/cost", async (c, next) => {
+        if (!isFeatureLicensed("cost-roi"))
+            return c.notFound();
+        await next();
+    });
+    router.use("/cost/*", async (c, next) => {
+        if (!isFeatureLicensed("cost-roi"))
+            return c.notFound();
+        await next();
+    });
+    router.get("/cost", async (c) => {
+        const url = new URL(c.req.url);
+        const filters = parseWindow(url);
+        const result = await aggregateHybrid(deps.db, { from: filters.from, to: filters.to }, { costs, pipelineConfigs }, 
+        // Rollup-backed reads only for preset windows (where `from` is snapped
+        // to UTC midnight). Custom ranges go through live aggregation.
+        { enableRollups: filters.preset !== "custom" });
+        const content = renderCostPage({ result, filters, costs, basePath });
+        if (c.req.header("HX-Request"))
+            return c.html(content);
+        const user = c.get("user");
+        return c.html(layout("Cost & ROI", content, basePath, { userEmail: user?.email }));
+    });
+    router.get("/cost/page", async (c) => {
+        const url = new URL(c.req.url);
+        const filters = parseWindow(url);
+        const result = await aggregateHybrid(deps.db, { from: filters.from, to: filters.to }, { costs, pipelineConfigs }, { enableRollups: filters.preset !== "custom" });
+        return c.html(renderCostPage({ result, filters, costs, basePath, partial: true }));
+    });
+    router.get("/cost/export.csv", async (c) => {
+        const url = new URL(c.req.url);
+        const { from, to } = parseWindow(url);
+        const iter = streamCostCsv(deps.db, { from, to }, { costs, pipelineConfigs })[Symbol.asyncIterator]();
+        const encoder = new TextEncoder();
+        const stream = new ReadableStream({
+            async pull(controller) {
+                const { value, done } = await iter.next();
+                if (done) {
+                    controller.close();
+                    return;
+                }
+                controller.enqueue(encoder.encode(value));
+            },
+            async cancel() {
+                if (typeof iter.return === "function")
+                    await iter.return();
+            },
+        });
+        const fromStr = from.toISOString().slice(0, 10);
+        const toStr = to.toISOString().slice(0, 10);
+        return new Response(stream, {
+            status: 200,
+            headers: {
+                "Content-Type": "text/csv; charset=utf-8",
+                "Content-Disposition": `attachment; filename="cost-${fromStr}-${toStr}.csv"`,
+                "Cache-Control": "no-store",
+            },
+        });
+    });
+    return router;
+}
+//# sourceMappingURL=cost.js.map

package/dist/routes/cost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost.js","sourceRoot":"","sources":["../../src/routes/cost.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACrG,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AASlD,SAAS,WAAW,CAAC,GAAQ;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,IAAI,IAAU,CAAC;IACf,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,oEAAoE;IACpE,IAAI,EAAE,GAAS,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC;QAC/E,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9D,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAAE,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC;QAC5E,IAAI,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;YAAE,EAAE,GAAG,GAAG,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,wEAAwE;QACxE,yEAAyE;QACzE,iEAAiE;QACjE,MAAM,IAAI,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,IAAI,GAAG,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,UAAU,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAoB;IACnD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI;QAC1B,YAAY,EAAE,EAAE;QAChB,aAAa,EAAE,EAAE;QACjB,qBAAqB,EAAE,CAAC;KACzB,CAAC;IACF,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC;IAEnD,yDAAyD;IACzD,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACpC,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC;YAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACtC,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC;YAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,IAAI,CAAC,EAAS,EACd,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EACtC,EAAE,KAAK,EAAE,eAAe,EAAE;QAC1B,uEAAuE;QACvE,+DAA+D;QAC/D,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAC/C,CAAC;QACF,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAe,CAAmC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,IAAI,CAAC,EAAS,EACd,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EACtC,EAAE,KAAK,EAAE,eAAe,EAAE,EAC1B,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAC/C,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAEtC,MAAM,IAAI,GAAG,aAAa,CACxB,IAAI,CAAC,EAAS,EACd,EAAE,IAAI,EAAE,EAAE,EAAE,EACZ,EAAE,KAAK,EAAE,eAAe,EAAE,CAC3B,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAE1B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAa;YAC5C,KAAK,CAAC,IAAI,CAAC,UAAU;gBACnB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC1C,IAAI,IAAI,EAAE,CAAC;oBACT,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5C,CAAC;YACD,KAAK,CAAC,MAAM;gBACV,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,UAAU;oBAAE,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7D,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5C,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;YAC1B,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,yBAAyB;gBACzC,qBAAqB,EAAE,8BAA8B,OAAO,IAAI,KAAK,OAAO;gBAC5E,eAAe,EAAE,UAAU;aAC5B;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/routes/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAOxC,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,SAAK,GAAG,IAAI,CAiC9D"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/routes/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAQxC,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,SAAK,GAAG,IAAI,CAkC9D"}

package/dist/routes/errors.js

@@ -3,10 +3,11 @@ import { sql } from "drizzle-orm";
 import { stageRuns } from "@urateam/core";
 import { layout } from "../views/layout.js";
 import { errorsView } from "../views/errors.js";
+import { requirePermission } from "../middleware/rbac.js";
 export function createErrorsRouter(db, basePath = "") {
     const router = new Hono();
     const d = db;
-    router.get("/errors", async (c) => {
+    router.get("/errors", requirePermission("errors.view"), async (c) => {
         const stageFailures = await d
             .select({
             stage: stageRuns.stage,
@@ -29,7 +30,8 @@ export function createErrorsRouter(db, basePath = "") {
             .orderBy(sql `"count" DESC`)
             .limit(50);
         const content = errorsView(stageFailures, errorPatterns);
-        return c.html(layout("Errors", content, basePath));
+        const user = c.get("user");
+        return c.html(layout("Errors", content, basePath, { userEmail: user?.email }));
     });
     return router;
 }

package/dist/routes/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/routes/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIhD,MAAM,UAAU,kBAAkB,CAAC,EAAM,EAAE,QAAQ,GAAG,EAAE;IACtD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAG,EAAW,CAAC;IAEtB,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,aAAa,GAAG,MAAM,CAAC;aAC1B,MAAM,CAAC;YACN,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,SAAS,EAAE,GAAG,CAAQ,UAAU,CAAC,EAAE,CAAC,WAAW,CAAC;YAChD,UAAU,EAAE,GAAG,CAAQ,iBAAiB,SAAS,CAAC,MAAM,gCAAgC,CAAC,EAAE,CAAC,YAAY,CAAC;YACzG,WAAW,EAAE,GAAG,CAAQ,4BAA4B,SAAS,CAAC,MAAM,iEAAiE,CAAC,EAAE,CAAC,aAAa,CAAC;SACxJ,CAAC;aACD,IAAI,CAAC,SAAS,CAAC;aACf,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;aACxB,OAAO,CAAC,GAAG,CAAA,oBAAoB,CAAC,CAAC;QAEpC,MAAM,aAAa,GAAG,MAAM,CAAC;aAC1B,MAAM,CAAC;YACN,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,YAAY,EAAE,GAAG,CAAQ,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC;YACvE,KAAK,EAAE,GAAG,CAAQ,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC;SACzC,CAAC;aACD,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CAAC,GAAG,CAAA,GAAG,SAAS,CAAC,MAAM,mBAAmB,SAAS,CAAC,YAAY,cAAc,CAAC;aACpF,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,YAAY,CAAC;aAChD,OAAO,CAAC,GAAG,CAAA,cAAc,CAAC;aAC1B,KAAK,CAAC,EAAE,CAAC,CAAC;QAEb,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/routes/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAI1D,MAAM,UAAU,kBAAkB,CAAC,EAAM,EAAE,QAAQ,GAAG,EAAE;IACtD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAG,EAAW,CAAC;IAEtB,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClE,MAAM,aAAa,GAAG,MAAM,CAAC;aAC1B,MAAM,CAAC;YACN,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,SAAS,EAAE,GAAG,CAAQ,UAAU,CAAC,EAAE,CAAC,WAAW,CAAC;YAChD,UAAU,EAAE,GAAG,CAAQ,iBAAiB,SAAS,CAAC,MAAM,gCAAgC,CAAC,EAAE,CAAC,YAAY,CAAC;YACzG,WAAW,EAAE,GAAG,CAAQ,4BAA4B,SAAS,CAAC,MAAM,iEAAiE,CAAC,EAAE,CAAC,aAAa,CAAC;SACxJ,CAAC;aACD,IAAI,CAAC,SAAS,CAAC;aACf,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;aACxB,OAAO,CAAC,GAAG,CAAA,oBAAoB,CAAC,CAAC;QAEpC,MAAM,aAAa,GAAG,MAAM,CAAC;aAC1B,MAAM,CAAC;YACN,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,YAAY,EAAE,GAAG,CAAQ,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC;YACvE,KAAK,EAAE,GAAG,CAAQ,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC;SACzC,CAAC;aACD,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CAAC,GAAG,CAAA,GAAG,SAAS,CAAC,MAAM,mBAAmB,SAAS,CAAC,YAAY,cAAc,CAAC;aACpF,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,YAAY,CAAC;aAChD,OAAO,CAAC,GAAG,CAAA,cAAc,CAAC;aAC1B,KAAK,CAAC,EAAE,CAAC,CAAC;QAEb,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAe,CAAmC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/runs.d.ts

@@ -1,4 +1,12 @@
 import { Hono } from "hono";
 import type { Db } from "@urateam/core";
-export declare function createRunsRouter(db: Db, basePath?: string): Hono;
+export interface RunsRouterDeps {
+    db: Db;
+    runner?: {
+        resume: (runOrIssueId: string) => Promise<void>;
+        start: (...args: any[]) => Promise<void>;
+    };
+    basePath?: string;
+}
+export declare function createRunsRouter(dbOrDeps: Db | RunsRouterDeps, basePath?: string): Hono;
 //# sourceMappingURL=runs.d.ts.map

package/dist/routes/runs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runs.d.ts","sourceRoot":"","sources":["../../src/routes/runs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAQxC,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,SAAK,GAAG,IAAI,CAgF5D"}
+{"version":3,"file":"runs.d.ts","sourceRoot":"","sources":["../../src/routes/runs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAkBxC,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,EAAE,CAAC;IACP,MAAM,CAAC,EAAE;QACP,MAAM,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC1C,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,EAAE,GAAG,cAAc,EAC7B,QAAQ,SAAK,GACZ,IAAI,CAuKN"}

package/dist/routes/runs.js

@@ -1,13 +1,30 @@
 import { Hono } from "hono";
 import { desc, eq, inArray, count } from "drizzle-orm";
-import { pipelineRuns, stageRuns, agentLogs } from "@urateam/core";
+import { pipelineRuns, stageRuns, agentLogs, logAuditEvent, dashboardRetryRunEvent, isFeatureLicensed, canAccess, } from "@urateam/core";
 import { layout } from "../views/layout.js";
 import { runFeedView } from "../views/run-feed.js";
 import { runDetailView } from "../views/run-detail.js";
-export function createRunsRouter(db, basePath = "") {
+import { requirePermission } from "../middleware/rbac.js";
+export function createRunsRouter(dbOrDeps, basePath = "") {
+    // Backwards-compatible: accept either (db, basePath) or a deps object.
+    let db;
+    let runner;
+    let effectiveBasePath;
+    if (dbOrDeps &&
+        typeof dbOrDeps === "object" &&
+        "db" in dbOrDeps) {
+        const deps = dbOrDeps;
+        db = deps.db;
+        runner = deps.runner;
+        effectiveBasePath = deps.basePath ?? "";
+    }
+    else {
+        db = dbOrDeps;
+        effectiveBasePath = basePath;
+    }
     const router = new Hono();
     const d = db;
-    router.get("/", async (c) => {
+    router.get("/", requirePermission("runs.view"), async (c) => {
         const runs = await d
             .select()
             .from(pipelineRuns)
@@ -17,10 +34,11 @@ export function createRunsRouter(db, basePath = "") {
         if (c.req.header("HX-Request")) {
             return c.html(content);
         }
-        return c.html(layout("Pipeline Runs", content, basePath));
+        const user = c.get("user");
+        return c.html(layout("Pipeline Runs", content, effectiveBasePath, { userEmail: user?.email }));
     });
     // HTMX partial: feed of latest pipeline runs (polled every 5s)
-    router.get("/runs/feed", async (c) => {
+    router.get("/runs/feed", requirePermission("runs.view"), async (c) => {
         const runs = await d
             .select()
             .from(pipelineRuns)
@@ -28,17 +46,18 @@ export function createRunsRouter(db, basePath = "") {
             .limit(50);
         return c.html(runFeedView(runs));
     });
-    router.get("/runs/:id", async (c) => {
+    router.get("/runs/:id", requirePermission("runs.view"), async (c) => {
         const id = c.req.param("id");
         const page = Math.max(1, parseInt(c.req.query("page") || "1", 10));
         const logsPerPage = 50;
+        const user = c.get("user");
         const [run] = await d
             .select()
             .from(pipelineRuns)
             .where(eq(pipelineRuns.id, id))
             .limit(1);
         if (!run) {
-            return c.html(layout("Not Found", "<p>Run not found</p>", basePath), 404);
+            return c.html(layout("Not Found", "<p>Run not found</p>", effectiveBasePath, { userEmail: user?.email }), 404);
         }
         const stages = await d
             .select()
@@ -64,8 +83,62 @@ export function createRunsRouter(db, basePath = "") {
                 .limit(logsPerPage)
                 .offset(offset);
         }
-        const content = runDetailView(run, stages, logs, page, totalLogs);
-        return c.html(layout(`Run ${id}`, content, basePath));
+        const canRetry = isFeatureLicensed("rbac")
+            ? canAccess((user?.role ?? "viewer"), "runs.retry")
+            : true;
+        const content = runDetailView(run, stages, logs, page, totalLogs, canRetry);
+        return c.html(layout(`Run ${id}`, content, effectiveBasePath, { userEmail: user?.email }));
+    });
+    router.post("/runs/:id/retry", async (c, next) => {
+        // Per spec §10: retry endpoint returns 404 when RBAC is unlicensed.
+        // Without this gate the endpoint would be wide-open in unlicensed
+        // deployments because requirePermission is a no-op then.
+        if (!isFeatureLicensed("rbac"))
+            return c.notFound();
+        return next();
+    }, requirePermission("runs.retry"), async (c) => {
+        const id = c.req.param("id");
+        const rows = await d
+            .select()
+            .from(pipelineRuns)
+            .where(eq(pipelineRuns.id, id))
+            .limit(1);
+        if (rows.length === 0) {
+            return c.text("Run not found", 404);
+        }
+        const run = rows[0];
+        if (run.status !== "failed" && run.status !== "retriable") {
+            return c.text(`Cannot retry a run in status ${run.status}`, 409);
+        }
+        if (!runner) {
+            return c.text("Runner not configured", 500);
+        }
+        try {
+            if (run.resumePayload) {
+                await runner.resume(id);
+            }
+            else {
+                await runner.start({
+                    issueId: run.issueId,
+                    issueTitle: run.issueTitle,
+                    repoUrl: run.repoUrl,
+                });
+            }
+        }
+        catch (err) {
+            return c.text(`Retry failed: ${err.message}`, 500);
+        }
+        const user = c.get("user");
+        if (user) {
+            void logAuditEvent(db, dashboardRetryRunEvent({
+                runId: id,
+                issueId: run.issueId,
+                previousStatus: run.status,
+                actorUserId: user.id,
+                actorEmail: user.email,
+            }));
+        }
+        return c.redirect(`${effectiveBasePath}/runs/${id}`, 302);
     });
     return router;
 }

package/dist/routes/runs.js.map

@@ -1 +1 @@
-{"version":3,"file":"runs.js","sourceRoot":"","sources":["../../src/routes/runs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAe,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,aAAa,EAA+C,MAAM,wBAAwB,CAAC;AAIpG,MAAM,UAAU,gBAAgB,CAAC,EAAM,EAAE,QAAQ,GAAG,EAAE;IACpD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAG,EAAW,CAAC;IAEtB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,MAAM,CAAC;aACjB,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;aACrC,KAAK,CAAC,EAAE,CAAa,CAAC;QAEzB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAElC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC;aACjB,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;aACrC,KAAK,CAAC,EAAE,CAAa,CAAC;QAEzB,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG,EAAE,CAAC;QAEvB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;aAClB,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aAC9B,KAAK,CAAC,CAAC,CAA4B,CAAC;QAEvC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,sBAAsB,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC;aACnB,MAAM,EAAE;aACR,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;aACtC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAgB,CAAC;QAE/C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAEzC,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,IAAI,GAAe,EAAE,CAAC;QAE1B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC;iBAC1B,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;iBACxB,IAAI,CAAC,SAAS,CAAC;iBACf,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;iBAC9C,KAAK,CAAC,CAAC,CAAoC,CAAC;YAC/C,SAAS,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC,CAAC;YAElC,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC;YACxC,IAAI,GAAG,MAAM,CAAC;iBACX,MAAM,EAAE;iBACR,IAAI,CAAC,SAAS,CAAC;iBACf,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;iBAC9C,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;iBAC5B,KAAK,CAAC,WAAW,CAAC;iBAClB,MAAM,CAAC,MAAM,CAAe,CAAC;QAClC,CAAC;QAED,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAClE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"runs.js","sourceRoot":"","sources":["../../src/routes/runs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,EACL,YAAY,EACZ,SAAS,EACT,SAAS,EACT,aAAa,EACb,sBAAsB,EACtB,iBAAiB,EACjB,SAAS,GAEV,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAe,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,aAAa,EAA+C,MAAM,wBAAwB,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAa1D,MAAM,UAAU,gBAAgB,CAC9B,QAA6B,EAC7B,QAAQ,GAAG,EAAE;IAEb,uEAAuE;IACvE,IAAI,EAAM,CAAC;IACX,IAAI,MAAgC,CAAC;IACrC,IAAI,iBAAyB,CAAC;IAC9B,IACE,QAAQ;QACR,OAAO,QAAQ,KAAK,QAAQ;QAC5B,IAAI,IAAK,QAAgB,EACzB,CAAC;QACD,MAAM,IAAI,GAAG,QAA0B,CAAC;QACxC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACrB,iBAAiB,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,EAAE,GAAG,QAAc,CAAC;QACpB,iBAAiB,GAAG,QAAQ,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAG,EAAW,CAAC;IAEtB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,iBAAiB,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAC;aACjB,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;aACrC,KAAK,CAAC,EAAE,CAAa,CAAC;QAEzB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAElC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAe,CAAmC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,iBAAiB,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnE,MAAM,IAAI,GAAG,MAAM,CAAC;aACjB,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;aACrC,KAAK,CAAC,EAAE,CAAa,CAAC;QAEzB,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,iBAAiB,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAe,CAErB,CAAC;QAEd,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;aAClB,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aAC9B,KAAK,CAAC,CAAC,CAA4B,CAAC;QAEvC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QACjH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC;aACnB,MAAM,EAAE;aACR,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;aACtC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAgB,CAAC;QAE/C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAEzC,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,IAAI,GAAe,EAAE,CAAC;QAE1B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC;iBAC1B,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;iBACxB,IAAI,CAAC,SAAS,CAAC;iBACf,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;iBAC9C,KAAK,CAAC,CAAC,CAAoC,CAAC;YAC/C,SAAS,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC,CAAC;YAElC,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC;YACxC,IAAI,GAAG,MAAM,CAAC;iBACX,MAAM,EAAE;iBACR,IAAI,CAAC,SAAS,CAAC;iBACf,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;iBAC9C,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;iBAC5B,KAAK,CAAC,WAAW,CAAC;iBAClB,MAAM,CAAC,MAAM,CAAe,CAAC;QAClC,CAAC;QAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC;YACxC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,QAAQ,CAAS,EAAE,YAAY,CAAC;YAC3D,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5E,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAChB,oEAAoE;QACpE,kEAAkE;QAClE,yDAAyD;QACzD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,EACD,iBAAiB,CAAC,YAAY,CAAC,EAC/B,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC;aACjB,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aAC9B,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAQ,CAAC;QAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,gCAAgC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,CAAC,KAAK,CAAC;oBACjB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAkB,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAe,CAErB,CAAC;QACd,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,aAAa,CAChB,EAAS,EACT,sBAAsB,CAAC;gBACrB,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,cAAc,EAAE,GAAG,CAAC,MAAM;gBAC1B,WAAW,EAAE,IAAI,CAAC,EAAE;gBACpB,UAAU,EAAE,IAAI,CAAC,KAAK;aACvB,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,iBAAiB,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/tokens.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/routes/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAOxC,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,SAAK,GAAG,IAAI,CA8C9D"}
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/routes/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAQxC,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,SAAK,GAAG,IAAI,CA+C9D"}

package/dist/routes/tokens.js

@@ -3,13 +3,14 @@ import { sql } from "drizzle-orm";
 import { sqlDateGroup, sqlDaysAgoFilter, stageRuns, pipelineRuns } from "@urateam/core";
 import { layout } from "../views/layout.js";
 import { tokensView } from "../views/tokens.js";
+import { requirePermission } from "../middleware/rbac.js";
 export function createTokensRouter(db, basePath = "") {
     const router = new Hono();
     const d = db;
     // Driver-agnostic SQL helpers — no isPostgres() branching needed in application code
     const dateExpr = sqlDateGroup(db, stageRuns.startedAt);
     const thirtyDaysAgo = sqlDaysAgoFilter(db, stageRuns.startedAt, 30);
-    router.get("/tokens", async (c) => {
+    router.get("/tokens", requirePermission("tokens.view"), async (c) => {
         const daily = await d
             .select({
             date: dateExpr.as("date"),
@@ -40,7 +41,8 @@ export function createTokensRouter(db, basePath = "") {
             .groupBy(stageRuns.stage)
             .orderBy(sql `(COALESCE(SUM(${stageRuns.inputTokens}), 0) + COALESCE(SUM(${stageRuns.outputTokens}), 0)) DESC`);
         const content = tokensView(daily, byPipeline, byStage);
-        return c.html(layout("Token Usage", content, basePath));
+        const user = c.get("user");
+        return c.html(layout("Token Usage", content, basePath, { userEmail: user?.email }));
     });
     return router;
 }

package/dist/routes/tokens.js.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/routes/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACxF,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIhD,MAAM,UAAU,kBAAkB,CAAC,EAAM,EAAE,QAAQ,GAAG,EAAE;IACtD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAG,EAAW,CAAC;IAEtB,qFAAqF;IACrF,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,gBAAgB,CAAC,EAAE,EAAE,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAEpE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC;aAClB,MAAM,CAAC;YACN,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC;YACzB,WAAW,EAAE,GAAG,CAAQ,gBAAgB,SAAS,CAAC,WAAW,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC;YACtF,YAAY,EAAE,GAAG,CAAQ,gBAAgB,SAAS,CAAC,YAAY,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC;SAC1F,CAAC;aACD,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CAAC,aAAa,CAAC;aACpB,OAAO,CAAC,QAAQ,CAAC;aACjB,OAAO,CAAC,GAAG,CAAA,WAAW,CAAC,CAAC;QAE3B,MAAM,UAAU,GAAG,MAAM,CAAC;aACvB,MAAM,CAAC;YACN,GAAG,EAAE,YAAY,CAAC,WAAW;YAC7B,WAAW,EAAE,GAAG,CAAQ,gBAAgB,SAAS,CAAC,WAAW,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC;YACtF,YAAY,EAAE,GAAG,CAAQ,gBAAgB,SAAS,CAAC,YAAY,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC;SAC1F,CAAC;aACD,IAAI,CAAC,SAAS,CAAC;aACf,SAAS,CAAC,YAAY,EAAE,GAAG,CAAA,GAAG,SAAS,CAAC,aAAa,MAAM,YAAY,CAAC,EAAE,EAAE,CAAC;aAC7E,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC;aACjC,OAAO,CAAC,GAAG,CAAA,iBAAiB,SAAS,CAAC,WAAW,wBAAwB,SAAS,CAAC,YAAY,aAAa,CAAC,CAAC;QAEjH,MAAM,OAAO,GAAG,MAAM,CAAC;aACpB,MAAM,CAAC;YACN,GAAG,EAAE,SAAS,CAAC,KAAK;YACpB,WAAW,EAAE,GAAG,CAAQ,gBAAgB,SAAS,CAAC,WAAW,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC;YACtF,YAAY,EAAE,GAAG,CAAQ,gBAAgB,SAAS,CAAC,YAAY,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC;SAC1F,CAAC;aACD,IAAI,CAAC,SAAS,CAAC;aACf,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;aACxB,OAAO,CAAC,GAAG,CAAA,iBAAiB,SAAS,CAAC,WAAW,wBAAwB,SAAS,CAAC,YAAY,aAAa,CAAC,CAAC;QAEjH,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/routes/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACxF,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAI1D,MAAM,UAAU,kBAAkB,CAAC,EAAM,EAAE,QAAQ,GAAG,EAAE;IACtD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAG,EAAW,CAAC;IAEtB,qFAAqF;IACrF,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,gBAAgB,CAAC,EAAE,EAAE,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAEpE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClE,MAAM,KAAK,GAAG,MAAM,CAAC;aAClB,MAAM,CAAC;YACN,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC;YACzB,WAAW,EAAE,GAAG,CAAQ,gBAAgB,SAAS,CAAC,WAAW,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC;YACtF,YAAY,EAAE,GAAG,CAAQ,gBAAgB,SAAS,CAAC,YAAY,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC;SAC1F,CAAC;aACD,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CAAC,aAAa,CAAC;aACpB,OAAO,CAAC,QAAQ,CAAC;aACjB,OAAO,CAAC,GAAG,CAAA,WAAW,CAAC,CAAC;QAE3B,MAAM,UAAU,GAAG,MAAM,CAAC;aACvB,MAAM,CAAC;YACN,GAAG,EAAE,YAAY,CAAC,WAAW;YAC7B,WAAW,EAAE,GAAG,CAAQ,gBAAgB,SAAS,CAAC,WAAW,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC;YACtF,YAAY,EAAE,GAAG,CAAQ,gBAAgB,SAAS,CAAC,YAAY,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC;SAC1F,CAAC;aACD,IAAI,CAAC,SAAS,CAAC;aACf,SAAS,CAAC,YAAY,EAAE,GAAG,CAAA,GAAG,SAAS,CAAC,aAAa,MAAM,YAAY,CAAC,EAAE,EAAE,CAAC;aAC7E,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC;aACjC,OAAO,CAAC,GAAG,CAAA,iBAAiB,SAAS,CAAC,WAAW,wBAAwB,SAAS,CAAC,YAAY,aAAa,CAAC,CAAC;QAEjH,MAAM,OAAO,GAAG,MAAM,CAAC;aACpB,MAAM,CAAC;YACN,GAAG,EAAE,SAAS,CAAC,KAAK;YACpB,WAAW,EAAE,GAAG,CAAQ,gBAAgB,SAAS,CAAC,WAAW,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC;YACtF,YAAY,EAAE,GAAG,CAAQ,gBAAgB,SAAS,CAAC,YAAY,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC;SAC1F,CAAC;aACD,IAAI,CAAC,SAAS,CAAC;aACf,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;aACxB,OAAO,CAAC,GAAG,CAAA,iBAAiB,SAAS,CAAC,WAAW,wBAAwB,SAAS,CAAC,YAAY,aAAa,CAAC,CAAC;QAEjH,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAe,CAAmC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/users.d.ts

@@ -0,0 +1,8 @@
+import { Hono } from "hono";
+import type { Db } from "@urateam/core";
+export interface UsersRouterDeps {
+    db: Db;
+    basePath: string;
+}
+export declare function createUsersRouter(deps: UsersRouterDeps): Hono;
+//# sourceMappingURL=users.d.ts.map

package/dist/routes/users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/routes/users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,EAAE,EAAQ,MAAM,eAAe,CAAC;AAkB9C,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,EAAE,CAAC;IACP,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAmE7D"}

package/dist/routes/users.js

@@ -0,0 +1,64 @@
+import { Hono } from "hono";
+import { listUsers, setUserRole, SelfDemoteError, LastAdminError, isFeatureLicensed, } from "@urateam/core";
+import { requirePermission } from "../middleware/rbac.js";
+import { renderUsersPage } from "../views/users.js";
+const VALID_ROLES = ["admin", "operator", "viewer"];
+function parseRole(v) {
+    return typeof v === "string" && VALID_ROLES.includes(v)
+        ? v
+        : null;
+}
+export function createUsersRouter(deps) {
+    const app = new Hono();
+    // Feature gate — when RBAC is unlicensed, /users returns 404
+    app.use("/users", async (c, next) => {
+        if (!isFeatureLicensed("rbac"))
+            return c.notFound();
+        await next();
+    });
+    app.use("/users/*", async (c, next) => {
+        if (!isFeatureLicensed("rbac"))
+            return c.notFound();
+        await next();
+    });
+    app.get("/users", requirePermission("users.view"), async (c) => {
+        const user = c.get("user");
+        const users = await listUsers(deps.db);
+        return c.html(renderUsersPage({
+            users,
+            currentUserId: user?.id ?? "",
+            basePath: deps.basePath,
+            userEmail: user?.email,
+            userRole: user?.role,
+        }));
+    });
+    app.post("/users/:id/role", requirePermission("users.manage"), async (c) => {
+        const targetId = c.req.param("id");
+        const form = await c.req.parseBody();
+        const newRole = parseRole(form.role);
+        if (!newRole)
+            return c.text("Invalid role", 400);
+        const user = c.get("user");
+        if (!user)
+            return c.text("Unauthorized", 401);
+        try {
+            await setUserRole(deps.db, {
+                userId: targetId,
+                newRole: newRole,
+                actorUserId: user.id,
+            });
+        }
+        catch (err) {
+            if (err instanceof SelfDemoteError) {
+                return c.text("Cannot demote yourself", 400);
+            }
+            if (err instanceof LastAdminError) {
+                return c.text("Cannot demote the last remaining admin", 400);
+            }
+            return c.text(`Role update failed: ${err.message}`, 500);
+        }
+        return c.redirect(`${deps.basePath}/users`, 302);
+    });
+    return app;
+}
+//# sourceMappingURL=users.js.map

package/dist/routes/users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/routes/users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EACL,SAAS,EACT,WAAW,EACX,eAAe,EACf,cAAc,EACd,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,WAAW,GAAoB,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAU,CAAC;AAC9E,SAAS,SAAS,CAAC,CAAU;IAC3B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAK,WAAiC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAE,CAAU;QACb,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAOD,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,6DAA6D;IAC7D,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAClC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACpC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7D,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAe,CAErB,CAAC;QACd,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,EAAS,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC,IAAI,CACX,eAAe,CAAC;YACd,KAAK;YACL,aAAa,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,EAAE,KAAK;YACtB,QAAQ,EAAE,IAAI,EAAE,IAAI;SACrB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CACN,iBAAiB,EACjB,iBAAiB,CAAC,cAAc,CAAC,EACjC,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAEjD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAe,CAErB,CAAC;QACd,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAE9C,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,IAAI,CAAC,EAAS,EAAE;gBAChC,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,OAAO;gBAChB,WAAW,EAAE,IAAI,CAAC,EAAE;aACrB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;gBACnC,OAAO,CAAC,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;gBAClC,OAAO,CAAC,CAAC,IAAI,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,uBAAwB,GAAa,CAAC,OAAO,EAAE,EAC/C,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,QAAQ,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC,CACF,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/server.d.ts

@@ -1,13 +1,25 @@
 import { Hono } from "hono";
-import type { Db, PipelineConfig, RepoConfig } from "@urateam/core";
+import type { Db, PipelineConfig, RepoConfig, SsoConfig, WorkosClient, CostsConfig } from "@urateam/core";
 export interface DashboardConfig {
     db: Db;
     pipelineConfigs: Record<string, PipelineConfig>;
     repoConfigs: Record<string, RepoConfig>;
+    /** Optional costs config for the Cost & ROI dashboard (enterprise). */
+    costs?: CostsConfig;
     auth?: {
         username: string;
         password: string;
     };
+    /**
+     * Optional SSO configuration. When the `sso` feature is licensed AND
+     * `sso.enabled === true`, the dashboard mounts the WorkOS auth router
+     * and the session-validating SSO middleware in place of basic auth.
+     * Callers must also pass `workos` (a `WorkosClient` instance) — typically
+     * obtained from `getDefaultWorkosClient(sso.workosApiKey)`. This keeps
+     * `createDashboard` synchronous and lets tests inject a stub client.
+     */
+    sso?: SsoConfig;
+    workos?: WorkosClient;
     /**
      * Root path prefix for all dashboard navigation links (e.g. `"/ateam"`).
      * No trailing slash. Falls back to the `DASHBOARD_BASE_PATH` environment

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,KAAK,EAAE,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AASpE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,EAAE,CAAC;IACP,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAChD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxC,IAAI,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CA+H7D"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAM5B,OAAO,KAAK,EACV,EAAE,EACF,cAAc,EACd,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACZ,MAAM,eAAe,CAAC;AAcvB,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,EAAE,CAAC;IACP,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAChD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxC,uEAAuE;IACvE,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C;;;;;;;OAOG;IACH,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAgM7D"}