ai-control-center 1.15.2

package/lib/web/routes/api.js

@@ -0,0 +1,499 @@
+/**
+ * REST API routes for the AI Control Center web dashboard.
+ */
+import { Router } from 'express';
+import { existsSync, readFileSync, readdirSync } from 'fs';
+import { join } from 'path';
+import * as actions from '../../shared/action-runner.js';
+import { searchSkills, filterByStage, getRegistry } from '../../hub/skill-registry.js';
+import { requirePermission, checkApiKey } from '../../utils/rbac.js';
+import { metricsRouter } from './metrics.js';
+import { createRateLimiter } from '../../utils/rate-limiter.js';
+
+export const apiRouter = Router();
+
+// RBAC middleware (opt-in — won't break existing unless configured)
+apiRouter.use((req, res, next) => {
+  try {
+    const apiKey = req.headers['x-api-key'];
+    if (apiKey) {
+      const role = checkApiKey(apiKey);
+      req.userRole = role;
+    }
+  } catch (e) { /* RBAC is optional */ }
+  next();
+});
+
+// ─── Project Info (name, color, icon for office visualizer) ──────────────────
+
+apiRouter.get('/info', async (req, res) => {
+  try {
+    const { getConfig } = await import('../../config.js');
+    const cfg = getConfig();
+    res.json({
+      name: cfg.name || 'Unknown Project',
+      color: cfg.color || '#4A90D9',
+      icon: cfg.icon || '',
+      description: cfg.description || '',
+    });
+  } catch {
+    res.json({ name: 'Unknown Project', color: '#4A90D9', icon: '' });
+  }
+});
+
+// ─── Status ───────────────────────────────────────────────────────────────────
+
+apiRouter.get('/status', (req, res) => {
+  res.json(actions.getStatusData());
+});
+
+// ─── Health Check ─────────────────────────────────────────────────────────────
+
+apiRouter.get('/health', async (req, res) => {
+  const data = await actions.getHealthData();
+  res.json(data);
+});
+
+// ─── Files ────────────────────────────────────────────────────────────────────
+
+apiRouter.get('/files/:subdir', (req, res) => {
+  const files = actions.listFiles(req.params.subdir);
+  res.json(files);
+});
+
+apiRouter.get('/files/:subdir/:name', (req, res) => {
+  const content = actions.readFile(req.params.subdir, req.params.name);
+  if (content === null) return res.status(404).json({ error: 'File not found' });
+  res.json({ name: req.params.name, content });
+});
+
+// ─── Review Data ──────────────────────────────────────────────────────────────
+
+apiRouter.get('/review/latest', (req, res) => {
+  const review = actions.getLatestReview();
+  if (!review) return res.json({ found: false });
+  res.json({ found: true, ...review });
+});
+
+// ─── Actions ──────────────────────────────────────────────────────────────────
+
+apiRouter.post('/feature', async (req, res) => {
+  const { description, mode = 'manual', type = 'feature' } = req.body;
+  const result = await actions.runNewFeature(description, mode, type);
+  res.json(result);
+});
+
+apiRouter.post('/approve', async (req, res) => {
+  const result = await actions.runApprove();
+  res.json(result);
+});
+
+apiRouter.post('/reject', async (req, res) => {
+  const { reason } = req.body;
+  const result = await actions.runReject(reason);
+  res.json(result);
+});
+
+apiRouter.post('/deploy', async (req, res) => {
+  const { testLevel = 'NoTestRun' } = req.body;
+  const result = await actions.runDeploy(testLevel);
+  res.json(result);
+});
+
+// ─── Cleanup ──────────────────────────────────────────────────────────────────
+
+apiRouter.post('/cleanup', async (req, res) => {
+  const result = await actions.runCleanup();
+  res.json(result);
+});
+
+// ─── Toggle Auto-Pilot ───────────────────────────────────────────────────────
+
+apiRouter.post('/autopilot', (req, res) => {
+  const result = actions.toggleAutoPilot();
+  res.json(result);
+});
+
+// ─── Reset / Abandon ─────────────────────────────────────────────────────────
+
+apiRouter.post('/reset', (req, res) => {
+  const result = actions.runReset();
+  res.json(result);
+});
+
+// ─── Ollama / Local AI ──────────────────────────────────────────────────────
+
+apiRouter.post('/ask', async (req, res) => {
+  const { question, context } = req.body;
+  if (!question) return res.status(400).json({ error: 'Question is required.' });
+  const result = await actions.askAI(question, context);
+  if (typeof result === 'string') {
+    res.json({ success: true, answer: result });
+  } else {
+    res.json({ success: false, error: result?.error || 'No response' });
+  }
+});
+
+apiRouter.get('/ai/status', async (req, res) => {
+  const status = await actions.getAIProviderStatus();
+  res.json(status);
+});
+
+// ─── Custom Queries ──────────────────────────────────────────────────────────
+
+apiRouter.get('/query/:name', async (req, res) => {
+  const result = await actions.runCustomQuery(req.params.name);
+  res.json(result);
+});
+
+// ─── Review (trigger) ────────────────────────────────────────────────────────
+
+apiRouter.post('/review', async (req, res) => {
+  const result = await actions.runReview();
+  res.json(result);
+});
+
+// ─── Fix (Copilot fix for review blockers) ──────────────────────────────────
+
+apiRouter.post('/fix', async (req, res) => {
+  const result = await actions.runFix();
+  res.json(result);
+});
+
+// ─── Implement (start/resume Copilot implementation) ────────────────────────
+
+apiRouter.post('/implement', async (req, res) => {
+  const result = await actions.runImplementation();
+  res.json(result);
+});
+
+// ─── P0: Cost Tracking ───────────────────────────────────────────────────────
+
+apiRouter.get('/costs', (req, res) => {
+  const data = actions.getCostsData();
+  res.json(data);
+});
+
+apiRouter.get('/costs/:featureId', (req, res) => {
+  const data = actions.getCostsData(req.params.featureId);
+  res.json(data);
+});
+
+// ─── P0: Audit Log ──────────────────────────────────────────────────────────
+
+apiRouter.get('/audit', (req, res) => {
+  const { event, limit } = req.query;
+  const filters = {};
+  if (event) filters.event = event;
+  if (limit) filters.limit = parseInt(limit);
+  const data = actions.getAuditData(filters);
+  res.json(data);
+});
+
+// ─── P0: Plugins ────────────────────────────────────────────────────────────
+
+apiRouter.get('/plugins', (req, res) => {
+  const data = actions.getPluginsData();
+  res.json(data);
+});
+
+// ─── Retry from Checkpoint ──────────────────────────────────────────────────
+
+apiRouter.post('/retry', async (req, res) => {
+  const { fresh = false } = req.body || {};
+  const result = await actions.retryFromCheckpoint(fresh);
+  res.json(result);
+});
+
+// ─── Dry Run ────────────────────────────────────────────────────────────────
+
+apiRouter.post('/dry-run', async (req, res) => {
+  const { description = 'Test feature (dry run)' } = req.body || {};
+  const result = await actions.runDryRun(description);
+  res.json(result);
+});
+
+// ─── Skill Registry ─────────────────────────────────────────────────────────
+
+apiRouter.get('/skills', (req, res) => {
+  try {
+    const { q, stage } = req.query;
+    let skills;
+    if (q) {
+      skills = searchSkills(q);
+    } else if (stage) {
+      skills = filterByStage(stage);
+    } else {
+      const registry = getRegistry();
+      skills = registry.skills || [];
+    }
+    res.json({ skills });
+  } catch (e) {
+    res.json({ skills: [], error: e.message });
+  }
+});
+
+// ─── Pipeline Replay ─────────────────────────────────────────────────────────
+
+apiRouter.get('/replay/:featureId', (req, res) => {
+  try {
+    const { featureId } = req.params;
+    const logsDir = join(process.cwd(), '.ai-workflow', 'logs');
+    const events = [];
+
+    if (existsSync(logsDir)) {
+      const files = readdirSync(logsDir)
+        .filter(f => f.endsWith('.log') || f.endsWith('.jsonl'))
+        .sort();
+
+      for (const file of files) {
+        try {
+          const content = readFileSync(join(logsDir, file), 'utf8');
+          const lines = content.split('\n').filter(Boolean);
+          for (const line of lines) {
+            try {
+              const entry = JSON.parse(line);
+              if (!featureId || entry.featureId === featureId || entry.feature === featureId) {
+                events.push({
+                  timestamp: new Date(entry.ts || entry.timestamp || 0).getTime(),
+                  stage: entry.stage || entry.type || '',
+                  agent: entry.agent || entry.ai || '',
+                  message: entry.message || entry.msg || '',
+                  type: entry.type || 'info',
+                  progress: entry.progress,
+                });
+              }
+            } catch {
+              const match = line.match(/^(\S+)\s+(\S+)\s+[·✓✗]\s+(.+)$/);
+              if (match) {
+                events.push({
+                  timestamp: new Date(match[1]).getTime() || Date.now(),
+                  stage: '',
+                  agent: match[2].toLowerCase(),
+                  message: match[3],
+                  type: 'info',
+                });
+              }
+            }
+          }
+        } catch { /* skip unreadable files */ }
+      }
+    }
+
+    const activityLog = join(process.cwd(), '.ai-workflow', 'activity.jsonl');
+    if (existsSync(activityLog)) {
+      try {
+        const content = readFileSync(activityLog, 'utf8');
+        for (const line of content.split('\n').filter(Boolean)) {
+          try {
+            const entry = JSON.parse(line);
+            if (!featureId || entry.featureId === featureId) {
+              events.push({
+                timestamp: new Date(entry.ts || 0).getTime(),
+                stage: entry.stage || '',
+                agent: entry.ai || entry.agent || '',
+                message: entry.message || '',
+                type: entry.type || 'info',
+              });
+            }
+          } catch { /* skip */ }
+        }
+      } catch { /* skip */ }
+    }
+
+    events.sort((a, b) => a.timestamp - b.timestamp);
+    res.json({ featureId, events, total: events.length });
+  } catch (e) {
+    res.json({ featureId: req.params.featureId, events: [], error: e.message });
+  }
+});
+
+// ─── Leaderboard ─────────────────────────────────────────────────────────────
+
+apiRouter.get('/leaderboard', async (req, res) => {
+  try {
+    const { getLeaderboard } = await import('../../utils/agent-leaderboard.js');
+    const entries = getLeaderboard();
+    res.json({ entries });
+  } catch (e) {
+    res.json({ entries: [], error: e.message });
+  }
+});
+
+// ─── Discussion Threads (V2) ─────────────────────────────────────────────────
+
+apiRouter.get('/threads', async (req, res) => {
+  try {
+    const { listThreads } = await import('../../roleplay/discussion-threads.js');
+    const { status, type, limit } = req.query;
+    res.json(listThreads({ status, type, limit: parseInt(limit) || 20 }));
+  } catch (e) {
+    res.json([]);
+  }
+});
+
+apiRouter.get('/threads/:id', async (req, res) => {
+  try {
+    const { getThread } = await import('../../roleplay/discussion-threads.js');
+    const thread = getThread(req.params.id);
+    if (!thread) return res.status(404).json({ error: 'Thread not found' });
+    res.json(thread);
+  } catch (e) {
+    res.status(404).json({ error: e.message });
+  }
+});
+
+apiRouter.post('/threads/:id/reply', async (req, res) => {
+  try {
+    const { postToThread } = await import('../../roleplay/discussion-threads.js');
+    const { from, content } = req.body;
+    if (!from || !content) return res.status(400).json({ error: 'from and content required' });
+    const thread = postToThread(req.params.id, { from, content });
+    res.json(thread);
+  } catch (e) {
+    res.status(400).json({ error: e.message });
+  }
+});
+
+apiRouter.post('/threads/:id/resolve', async (req, res) => {
+  try {
+    const { resolveThread } = await import('../../roleplay/discussion-threads.js');
+    const { by, resolution } = req.body;
+    const thread = resolveThread(req.params.id, { by: by || 'CEO', resolution });
+    res.json(thread);
+  } catch (e) {
+    res.status(400).json({ error: e.message });
+  }
+});
+
+// ─── Browser QA ──────────────────────────────────────────────────────────────
+
+apiRouter.post('/qa', async (req, res) => {
+  try {
+    const result = await actions.runBrowserQA();
+    res.json(result);
+  } catch (e) {
+    res.status(500).json({ error: e.message });
+  }
+});
+
+// ─── Suggestions ──────────────────────────────────────────────────────────────
+
+apiRouter.post('/suggest', async (req, res) => {
+  try {
+    const { runSuggestionAgent } = await import('../../agents/suggestion-agent.js');
+    const result = await runSuggestionAgent();
+    res.json(result);
+  } catch (e) {
+    res.status(500).json({ error: e.message });
+  }
+});
+
+// ─── Project Assignment ──────────────────────────────────────────────────────
+
+apiRouter.post('/assign', async (req, res) => {
+  try {
+    const { url, goal, credentials } = req.body;
+    const { assignProjectAction } = await import('../../actions/assign-project.js');
+    const result = await assignProjectAction({ url, goal, credentials });
+    res.json(result);
+  } catch (e) {
+    res.status(500).json({ error: e.message });
+  }
+});
+
+// ─── Suggestions (V2) ───────────────────────────────────────────────────────
+
+apiRouter.get('/suggestions', async (req, res) => {
+  try {
+    const { existsSync, readdirSync, readFileSync } = await import('fs');
+    const { resolve } = await import('path');
+    const { getWorkflowDir } = await import('../../utils/pipeline.js');
+
+    const dir = resolve(getWorkflowDir(), 'feature-suggestions');
+    if (!existsSync(dir)) return res.json([]);
+
+    const files = readdirSync(dir)
+      .filter(f => f.startsWith('SUGGEST-') && f.endsWith('.json'))
+      .sort()
+      .reverse()
+      .slice(0, 10);
+
+    const suggestions = files.map(f => {
+      try { return JSON.parse(readFileSync(resolve(dir, f), 'utf8')); }
+      catch { return null; }
+    }).filter(Boolean);
+
+    res.json(suggestions);
+  } catch (e) {
+    res.json([]);
+  }
+});
+
+apiRouter.post('/suggestions/:index/accept', async (req, res) => {
+  try {
+    const { index } = req.params;
+    const { existsSync, readdirSync, readFileSync } = await import('fs');
+    const { resolve } = await import('path');
+    const { getWorkflowDir } = await import('../../utils/pipeline.js');
+
+    const dir = resolve(getWorkflowDir(), 'feature-suggestions');
+    if (!existsSync(dir)) return res.status(404).json({ error: 'No suggestions found' });
+
+    const files = readdirSync(dir).filter(f => f.startsWith('SUGGEST-')).sort().reverse();
+    if (files.length === 0) return res.status(404).json({ error: 'No suggestions found' });
+
+    const data = JSON.parse(readFileSync(resolve(dir, files[0]), 'utf8'));
+    const suggestion = data.suggestions?.[parseInt(index)];
+    if (!suggestion) return res.status(404).json({ error: 'Suggestion index out of range' });
+
+    const result = await actions.runNewFeature(
+      `${suggestion.title}: ${suggestion.description || suggestion.why}`,
+      'auto',
+      'feature',
+    );
+
+    res.json({ success: true, featureId: result.featureId, suggestion });
+  } catch (e) {
+    res.status(500).json({ error: e.message });
+  }
+});
+
+// ─── V2 Health Check (enhanced) ─────────────────────────────────────────────
+
+apiRouter.get('/v2/health', async (req, res) => {
+  try {
+    const { getStatus } = await import('../../utils/pipeline.js');
+    const { isLocked } = await import('../../utils/pipeline-lock.js');
+    const { getCurrentRunCost } = await import('../../utils/security.js');
+
+    const status = getStatus();
+    const lock = isLocked();
+    const cost = getCurrentRunCost();
+
+    res.json({
+      status: 'running',
+      pipeline: {
+        stage: status.stage || 'idle',
+        featureId: status.featureId,
+        lastTransition: status.transitionedAt,
+        error: status.error,
+      },
+      lock: {
+        locked: lock.locked,
+        holder: lock.holder,
+      },
+      cost: {
+        currentRun: cost,
+      },
+      uptime: process.uptime(),
+      timestamp: new Date().toISOString(),
+    });
+  } catch (e) {
+    res.status(500).json({ error: e.message });
+  }
+});
+
+// ─── Metrics ────────────────────────────────────────────────────────────────
+
+apiRouter.use('/metrics', metricsRouter);

package/lib/web/routes/logs.js

@@ -0,0 +1,20 @@
+/**
+ * Log file API routes.
+ */
+import { Router } from 'express';
+import * as actions from '../../shared/action-runner.js';
+
+export const logsRouter = Router();
+
+// GET /api/logs — latest session log tail
+logsRouter.get('/', (req, res) => {
+  const lines = parseInt(req.query.lines) || 100;
+  const data = actions.getLogsData(lines);
+  res.json(data);
+});
+
+// GET /api/logs/sessions — list all session log files
+logsRouter.get('/sessions', (req, res) => {
+  const data = actions.getLogsData(0);
+  res.json({ sessions: data.sessions });
+});

package/lib/web/routes/metrics.js

@@ -0,0 +1,99 @@
+import { Router } from 'express';
+import { getStatus } from '../../utils/pipeline.js';
+import { getCostSummary } from '../../utils/cost-tracker.js';
+
+const METRIC_TYPES = {
+  aicc_pipeline_runs_total: { type: 'counter', help: 'Total pipeline runs' },
+  aicc_stage_duration_seconds: { type: 'gauge', help: 'Last observed stage duration in seconds' },
+  aicc_ai_calls_total: { type: 'counter', help: 'Total AI API calls' },
+  aicc_ai_errors_total: { type: 'counter', help: 'Total AI errors' },
+  aicc_tokens_used_total: { type: 'counter', help: 'Total tokens consumed' },
+  aicc_cost_dollars_total: { type: 'gauge', help: 'Total cost in dollars' },
+  aicc_circuit_breaker_state: { type: 'gauge', help: 'Circuit breaker state (0=closed, 1=open, 0.5=half_open)' },
+  aicc_pipeline_current_stage: { type: 'gauge', help: 'Current pipeline stage info' },
+};
+
+/** @type {Map<string, number>} key = "metric_name{label=value,...}" */
+const metrics = new Map();
+
+function labelsToString(labels) {
+  if (!labels || Object.keys(labels).length === 0) return '';
+  const parts = Object.entries(labels)
+    .map(([k, v]) => `${k}="${v}"`)
+    .join(',');
+  return `{${parts}}`;
+}
+
+function metricKey(name, labels) {
+  return `${name}${labelsToString(labels)}`;
+}
+
+export function recordMetric(name, labels, value) {
+  metrics.set(metricKey(name, labels), value);
+}
+
+export function incrementCounter(name, labels) {
+  const key = metricKey(name, labels);
+  metrics.set(key, (metrics.get(key) || 0) + 1);
+}
+
+export function resetMetrics() {
+  metrics.clear();
+}
+
+function injectLiveMetrics() {
+  try {
+    const status = getStatus();
+    if (status.stage) {
+      recordMetric('aicc_pipeline_current_stage', { stage: status.stage }, 1);
+    }
+  } catch { /* config may not be loaded */ }
+
+  try {
+    const costs = getCostSummary();
+    if (costs.byProvider) {
+      for (const [provider, data] of Object.entries(costs.byProvider)) {
+        recordMetric('aicc_cost_dollars_total', { provider }, data.cost || 0);
+        recordMetric('aicc_tokens_used_total', { provider, stage: 'all' }, (data.inputTokens || 0) + (data.outputTokens || 0));
+      }
+    }
+  } catch { /* cost tracker may not be available */ }
+}
+
+function formatMetrics() {
+  const lines = [];
+  const grouped = new Map();
+
+  for (const [key, value] of metrics) {
+    const name = key.includes('{') ? key.slice(0, key.indexOf('{')) : key;
+    if (!grouped.has(name)) grouped.set(name, []);
+    grouped.get(name).push({ key, value });
+  }
+
+  for (const [name, entries] of grouped) {
+    const meta = METRIC_TYPES[name];
+    if (meta) {
+      lines.push(`# HELP ${name} ${meta.help}`);
+      lines.push(`# TYPE ${name} ${meta.type}`);
+    }
+    for (const { key, value } of entries) {
+      lines.push(`${key} ${value}`);
+    }
+    lines.push('');
+  }
+
+  return lines.join('\n');
+}
+
+export const metricsRouter = Router();
+
+metricsRouter.get('/', (_req, res) => {
+  try {
+    injectLiveMetrics();
+    const body = formatMetrics();
+    res.set('Content-Type', 'text/plain; version=0.0.4');
+    res.send(body);
+  } catch (err) {
+    res.status(500).send(`# error generating metrics\n# ${err.message}\n`);
+  }
+});