hazo_admin 0.3.2 → 0.5.0

package/dist/index.client.d.ts

@@ -1,3 +1,5 @@
+export { registerIssueCardRenderer, getIssueCardRenderer, listIssueCardRenderers, DefaultIssueCard, } from './issues/registry.client.js';
+export type { IssueCardData, IssueCardRenderer, IssueCardRendererProps, } from './issues/registry.client.js';
 export declare const HAZO_ADMIN_PERMISSIONS: {
     readonly ADMIN_SYSTEM: "admin_system";
     readonly ENV_MIGRATE: "env.migrate";
@@ -10,6 +12,8 @@ export declare const HAZO_ADMIN_PERMISSIONS: {
     readonly FEEDBACK_REVIEW: "admin.feedback.review";
     readonly METRICS_VIEW: "metrics.view";
     readonly METRICS_MANAGE: "metrics.manage";
+    readonly ADMIN_ISSUE_TRIAGE: "admin_issue_triage";
+    readonly ADMIN_USER_SCOPE_ASSIGNMENT: "admin_user_scope_assignment";
 };
 export type HazoAdminPermissionKey = keyof typeof HAZO_ADMIN_PERMISSIONS;
 export type HazoAdminPermission = (typeof HAZO_ADMIN_PERMISSIONS)[HazoAdminPermissionKey];

package/dist/index.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.client.d.ts","sourceRoot":"","sources":["../src/index.client.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,sBAAsB;;;;;;;;;;;;CAYzB,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAAG,MAAM,OAAO,sBAAsB,CAAC;AACzE,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"index.client.d.ts","sourceRoot":"","sources":["../src/index.client.ts"],"names":[],"mappings":"AACA,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,aAAa,EACb,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AAErC,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;CAczB,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAAG,MAAM,OAAO,sBAAsB,CAAC;AACzE,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,sBAAsB,CAAC,CAAC"}

package/dist/index.client.js

@@ -1,3 +1,5 @@
+// Client-side issue card renderer registry
+export { registerIssueCardRenderer, getIssueCardRenderer, listIssueCardRenderers, DefaultIssueCard, } from './issues/registry.client.js';
 export const HAZO_ADMIN_PERMISSIONS = {
     ADMIN_SYSTEM: 'admin_system',
     ENV_MIGRATE: 'env.migrate',
@@ -10,4 +12,6 @@ export const HAZO_ADMIN_PERMISSIONS = {
     FEEDBACK_REVIEW: 'admin.feedback.review',
     METRICS_VIEW: 'metrics.view',
     METRICS_MANAGE: 'metrics.manage',
+    ADMIN_ISSUE_TRIAGE: 'admin_issue_triage',
+    ADMIN_USER_SCOPE_ASSIGNMENT: 'admin_user_scope_assignment',
 };

package/dist/index.d.ts

@@ -1,4 +1,6 @@
 export { adminGate, withAdminGate } from './lib/admin_gate.server.js';
 export type { AdminGateResult } from './lib/admin_gate.server.js';
 export { HAZO_ADMIN_PERMISSIONS } from './index.client.js';
+export { createIssueStore, registerIssueType, getIssueType, listIssueTypes, loadIssueRoutingConfig, getRecipientStrategy, issueArchiveJobHandler, registerIssueArchiveJob, ADMIN_ISSUE_ARCHIVE_JOB_TYPE, } from './issues/index.js';
+export type { IssueRecord, IssueStore, CreateIssueInput, IssueTypeDef, IssueActionDef, IssueActionCtx, IssueActionResult, RecipientResult, NotifyPayload, IssueRoutingConfig, RecipientStrategy, } from './issues/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACtE,YAAY,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACtE,YAAY,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC"}

package/dist/index.js

@@ -1,2 +1,3 @@
 export { adminGate, withAdminGate } from './lib/admin_gate.server.js';
 export { HAZO_ADMIN_PERMISSIONS } from './index.client.js';
+export { createIssueStore, registerIssueType, getIssueType, listIssueTypes, loadIssueRoutingConfig, getRecipientStrategy, issueArchiveJobHandler, registerIssueArchiveJob, ADMIN_ISSUE_ARCHIVE_JOB_TYPE, } from './issues/index.js';

package/dist/issues/archive_handler.d.ts

@@ -0,0 +1,29 @@
+import 'server-only';
+export declare const ADMIN_ISSUE_ARCHIVE_JOB_TYPE: "admin.issue_archive";
+/**
+ * Job handler for admin.issue_archive jobs.
+ *
+ * Payload: { cutoffMonths?: number }  — defaults to 3 months.
+ *
+ * Moves all closed issues whose resolved_at is older than cutoffMonths months
+ * to status=archived.
+ */
+export declare function issueArchiveJobHandler(job: {
+    id: string;
+    payload: unknown;
+}, ctx: {
+    log: (...args: any[]) => void;
+}, opts: {
+    getHazoConnect: () => Promise<any> | any;
+}): Promise<{
+    archivedCount: number;
+}>;
+/**
+ * Register the admin.issue_archive job type with a hazo_jobs worker.
+ */
+export declare function registerIssueArchiveJob(worker: {
+    register: (type: string, handler: (job: any, ctx: any) => Promise<unknown>) => void;
+}, opts: {
+    getHazoConnect: () => Promise<any> | any;
+}): void;
+//# sourceMappingURL=archive_handler.d.ts.map

package/dist/issues/archive_handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive_handler.d.ts","sourceRoot":"","sources":["../../src/issues/archive_handler.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAGrB,eAAO,MAAM,4BAA4B,EAAG,qBAA8B,CAAC;AAE3E;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,EACrC,GAAG,EAAE;IAAE,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAA;CAAE,EACtC,IAAI,EAAE;IAAE,cAAc,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;CAAE,GACjD,OAAO,CAAC;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC,CA0BpC;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE;IACN,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;CACrF,EACD,IAAI,EAAE;IAAE,cAAc,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;CAAE,GACjD,IAAI,CAMN"}

package/dist/issues/archive_handler.js

@@ -0,0 +1,35 @@
+import 'server-only';
+import { createIssueStore } from './store.js';
+export const ADMIN_ISSUE_ARCHIVE_JOB_TYPE = 'admin.issue_archive';
+/**
+ * Job handler for admin.issue_archive jobs.
+ *
+ * Payload: { cutoffMonths?: number }  — defaults to 3 months.
+ *
+ * Moves all closed issues whose resolved_at is older than cutoffMonths months
+ * to status=archived.
+ */
+export async function issueArchiveJobHandler(job, ctx, opts) {
+    ctx.log(`[admin.issue_archive] starting job ${job.id}`);
+    const raw = job.payload;
+    const payload = typeof raw === 'string'
+        ? JSON.parse(raw)
+        : raw && typeof raw === 'object'
+            ? raw
+            : {};
+    const cutoffMonths = typeof payload.cutoffMonths === 'number' ? payload.cutoffMonths : 3;
+    const cutoffDate = new Date();
+    cutoffDate.setMonth(cutoffDate.getMonth() - cutoffMonths);
+    ctx.log(`[admin.issue_archive] archiving issues closed before ${cutoffDate.toISOString()}`);
+    const connect = await opts.getHazoConnect();
+    const store = createIssueStore(connect);
+    const archivedCount = await store.archiveClosedOlderThan(cutoffDate);
+    ctx.log(`[admin.issue_archive] archived ${archivedCount} issue(s)`);
+    return { archivedCount };
+}
+/**
+ * Register the admin.issue_archive job type with a hazo_jobs worker.
+ */
+export function registerIssueArchiveJob(worker, opts) {
+    worker.register(ADMIN_ISSUE_ARCHIVE_JOB_TYPE, (job, ctx) => issueArchiveJobHandler(job, ctx, opts));
+}

package/dist/issues/index.d.ts

@@ -0,0 +1,8 @@
+export { createIssueStore } from './store.js';
+export type { IssueRecord, IssueStore, CreateIssueInput } from './store.js';
+export { registerIssueType, getIssueType, listIssueTypes } from './registry.js';
+export type { IssueTypeDef, IssueActionDef, IssueActionCtx, IssueActionResult, RecipientResult, NotifyPayload, } from './registry.js';
+export { loadIssueRoutingConfig, getRecipientStrategy } from './routing.js';
+export type { IssueRoutingConfig, RecipientStrategy } from './routing.js';
+export { issueArchiveJobHandler, registerIssueArchiveJob, ADMIN_ISSUE_ARCHIVE_JOB_TYPE, } from './archive_handler.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/issues/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/issues/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAChF,YAAY,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAC5E,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,sBAAsB,CAAC"}

package/dist/issues/index.js

@@ -0,0 +1,4 @@
+export { createIssueStore } from './store.js';
+export { registerIssueType, getIssueType, listIssueTypes } from './registry.js';
+export { loadIssueRoutingConfig, getRecipientStrategy } from './routing.js';
+export { issueArchiveJobHandler, registerIssueArchiveJob, ADMIN_ISSUE_ARCHIVE_JOB_TYPE, } from './archive_handler.js';

package/dist/issues/registry.client.d.ts

@@ -0,0 +1,32 @@
+import type React from 'react';
+export interface IssueCardData {
+    id: string;
+    type: string;
+    status: string;
+    subject_user_id: string;
+    assigned_to: string | null;
+    title: string;
+    summary: string;
+    payload: Record<string, unknown>;
+    occurrence_count: number;
+    first_seen_at: string;
+    last_seen_at: string;
+    resolution: string | null;
+    resolution_reason: string | null;
+    resolved_by: string | null;
+    resolved_at: string | null;
+}
+export interface IssueCardRendererProps {
+    issue: IssueCardData;
+    basePath: string;
+    onAction?: (actionKey: string, params: Record<string, unknown>) => Promise<void>;
+}
+export type IssueCardRenderer = React.ComponentType<IssueCardRendererProps>;
+export declare function registerIssueCardRenderer(typeKey: string, renderer: IssueCardRenderer): void;
+export declare function getIssueCardRenderer(typeKey: string): IssueCardRenderer | undefined;
+export declare function listIssueCardRenderers(): Array<{
+    typeKey: string;
+    renderer: IssueCardRenderer;
+}>;
+export declare function DefaultIssueCard({ issue }: IssueCardRendererProps): React.JSX.Element;
+//# sourceMappingURL=registry.client.d.ts.map

package/dist/issues/registry.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.client.d.ts","sourceRoot":"","sources":["../../src/issues/registry.client.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAG/B,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAClF;AAED,MAAM,MAAM,iBAAiB,GAAG,KAAK,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC;AAI5E,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAE5F;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEnF;AAED,wBAAgB,sBAAsB,IAAI,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAEhG;AAED,wBAAgB,gBAAgB,CAAC,EAAE,KAAK,EAAE,EAAE,sBAAsB,qBAWjE"}

package/dist/issues/registry.client.js

@@ -0,0 +1,15 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+const registry = new Map();
+export function registerIssueCardRenderer(typeKey, renderer) {
+    registry.set(typeKey, renderer);
+}
+export function getIssueCardRenderer(typeKey) {
+    return registry.get(typeKey);
+}
+export function listIssueCardRenderers() {
+    return Array.from(registry.entries()).map(([typeKey, renderer]) => ({ typeKey, renderer }));
+}
+export function DefaultIssueCard({ issue }) {
+    return (_jsxs("div", { className: "text-sm space-y-1", children: [_jsx("div", { className: "font-medium text-gray-800", children: issue.title }), _jsx("div", { className: "text-gray-500 text-xs", children: issue.summary }), issue.occurrence_count > 1 && (_jsxs("div", { className: "text-xs text-amber-600", children: ["Occurred ", issue.occurrence_count, "\u00D7"] })), _jsx("div", { className: "text-xs text-gray-400", children: issue.type })] }));
+}

package/dist/issues/registry.d.ts

@@ -0,0 +1,45 @@
+import 'server-only';
+import type { IssueRecord } from './store.js';
+export type { IssueRecord };
+export interface IssueActionCtx {
+    /** Injected by the API handler — provides access to hazo services. */
+    getHazoConnect: () => Promise<any> | any;
+    actorUserId: string;
+    actorPermissions: string[];
+}
+export interface IssueActionResult {
+    success: boolean;
+    message?: string;
+    data?: Record<string, unknown>;
+}
+export interface RecipientResult {
+    user_ids: string[];
+    scope_id: string;
+}
+export interface NotifyPayload {
+    subject: string;
+    body: string;
+    deep_link?: string;
+    payload?: Record<string, unknown>;
+}
+export interface IssueActionDef {
+    key: string;
+    label: string;
+    requiredPermission: string;
+    run(issue: IssueRecord, params: Record<string, unknown>, ctx: IssueActionCtx): Promise<IssueActionResult>;
+}
+export interface IssueTypeDef {
+    typeKey: string;
+    label: string;
+    buildDescriptor(payload: Record<string, unknown>): {
+        title: string;
+        summary: string;
+    };
+    resolveRecipients(issue: IssueRecord, ctx: IssueActionCtx): Promise<RecipientResult>;
+    actions: IssueActionDef[];
+    buildResolutionNotice(issue: IssueRecord, actionKey: string, result: IssueActionResult): NotifyPayload;
+}
+export declare function registerIssueType(def: IssueTypeDef): void;
+export declare function getIssueType(typeKey: string): IssueTypeDef | undefined;
+export declare function listIssueTypes(): IssueTypeDef[];
+//# sourceMappingURL=registry.d.ts.map

package/dist/issues/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/issues/registry.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,YAAY,EAAE,WAAW,EAAE,CAAC;AAE5B,MAAM,WAAW,cAAc;IAC7B,sEAAsE;IACtE,cAAc,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB,EAAE,MAAM,CAAC;IAC3B,GAAG,CACD,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACtF,iBAAiB,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACrF,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,qBAAqB,CACnB,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,iBAAiB,GACxB,aAAa,CAAC;CAClB;AAID,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAEzD;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAEtE;AAED,wBAAgB,cAAc,IAAI,YAAY,EAAE,CAE/C"}

package/dist/issues/registry.js

@@ -0,0 +1,11 @@
+import 'server-only';
+const registry = new Map();
+export function registerIssueType(def) {
+    registry.set(def.typeKey, def);
+}
+export function getIssueType(typeKey) {
+    return registry.get(typeKey);
+}
+export function listIssueTypes() {
+    return Array.from(registry.values());
+}

package/dist/issues/routing.d.ts

@@ -0,0 +1,17 @@
+import 'server-only';
+export type RecipientStrategy = 'nearest_scope_admin';
+export interface IssueRoutingConfig {
+    [typeKey: string]: RecipientStrategy;
+}
+/**
+ * Loads routing config from hazo_admin_config.ini [issue_routing] section.
+ * Falls back to { auth_permission: 'nearest_scope_admin' } if hazo_config is not installed
+ * or the section is absent.
+ */
+export declare function loadIssueRoutingConfig(): IssueRoutingConfig;
+/**
+ * Given an issue type key, look up the routing strategy from the loaded config.
+ * Returns null if no strategy is configured for this type.
+ */
+export declare function getRecipientStrategy(typeKey: string): RecipientStrategy | null;
+//# sourceMappingURL=routing.d.ts.map

package/dist/issues/routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routing.d.ts","sourceRoot":"","sources":["../../src/issues/routing.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAErB,MAAM,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEtD,MAAM,WAAW,kBAAkB;IACjC,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAAC;CACtC;AAQD;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,kBAAkB,CA2B3D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAG9E"}

package/dist/issues/routing.js

@@ -0,0 +1,43 @@
+import 'server-only';
+const DEFAULT_ROUTING = {
+    auth_permission: 'nearest_scope_admin',
+};
+let _cachedConfig = null;
+/**
+ * Loads routing config from hazo_admin_config.ini [issue_routing] section.
+ * Falls back to { auth_permission: 'nearest_scope_admin' } if hazo_config is not installed
+ * or the section is absent.
+ */
+export function loadIssueRoutingConfig() {
+    if (_cachedConfig !== null)
+        return _cachedConfig;
+    try {
+        // Lazy import — hazo_config is an optional peer dep.
+        // Use require-style dynamic import via a variable to avoid static analysis bundling it.
+        // eslint-disable-next-line @typescript-eslint/no-var-requires
+        const hazoConfigMod = require('hazo_config');
+        const config = new hazoConfigMod.HazoConfig('hazo_admin_config.ini');
+        const result = { ...DEFAULT_ROUTING };
+        // hazo_config doesn't expose a section-dump API, so we read known keys.
+        // Consumers can extend by overriding loadIssueRoutingConfig entirely.
+        const authPerm = config.get('issue_routing', 'auth_permission');
+        if (authPerm && (authPerm === 'nearest_scope_admin')) {
+            result.auth_permission = authPerm;
+        }
+        _cachedConfig = result;
+        return result;
+    }
+    catch {
+        // hazo_config not installed or config file not found — use defaults.
+        _cachedConfig = { ...DEFAULT_ROUTING };
+        return _cachedConfig;
+    }
+}
+/**
+ * Given an issue type key, look up the routing strategy from the loaded config.
+ * Returns null if no strategy is configured for this type.
+ */
+export function getRecipientStrategy(typeKey) {
+    const config = loadIssueRoutingConfig();
+    return config[typeKey] ?? null;
+}

package/dist/issues/store.d.ts

@@ -0,0 +1,61 @@
+import 'server-only';
+export interface IssueRecord {
+    id: string;
+    scope_id: string;
+    type: string;
+    status: 'new' | 'wip' | 'closed' | 'archived';
+    subject_user_id: string;
+    assigned_to: string | null;
+    recipient_scope_id: string | null;
+    title: string;
+    summary: string;
+    payload: Record<string, unknown>;
+    dedupe_key: string;
+    occurrence_count: number;
+    first_seen_at: string;
+    last_seen_at: string;
+    resolution: 'granted' | 'denied' | null;
+    resolution_role_id: string | null;
+    resolution_reason: string | null;
+    resolved_by: string | null;
+    resolved_at: string | null;
+    created_at: string;
+    updated_at: string;
+}
+export interface CreateIssueInput {
+    scope_id: string;
+    type: string;
+    subject_user_id: string;
+    recipient_scope_id?: string;
+    title: string;
+    summary: string;
+    payload: Record<string, unknown>;
+    dedupe_key: string;
+}
+export interface IssueStore {
+    createOrBumpIssue(input: CreateIssueInput): Promise<{
+        issue: IssueRecord;
+        isNew: boolean;
+    }>;
+    listIssues(opts: {
+        adminScopeIds?: string[];
+        isGlobalAdmin?: boolean;
+        status?: IssueRecord['status'] | IssueRecord['status'][];
+        assignedTo?: string | null;
+        type?: string;
+        limit?: number;
+        offset?: number;
+    }): Promise<IssueRecord[]>;
+    getIssue(id: string): Promise<IssueRecord | null>;
+    transitionStatus(id: string, status: 'wip' | 'closed', actorUserId: string): Promise<IssueRecord>;
+    setAssignee(id: string, userId: string | null): Promise<IssueRecord>;
+    resolveIssue(id: string, opts: {
+        resolution: 'granted' | 'denied';
+        role_id?: string;
+        reason?: string;
+        resolved_by: string;
+    }): Promise<IssueRecord>;
+    archiveClosedOlderThan(cutoffDate: Date): Promise<number>;
+}
+export declare function createIssueStore(adapter: any): IssueStore;
+//# sourceMappingURL=store.d.ts.map

package/dist/issues/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/issues/store.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAOrB,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC9C,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;IACxC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,WAAW,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC5F,UAAU,CAAC,IAAI,EAAE;QACf,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,MAAM,CAAC,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAClD,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,QAAQ,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClG,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QAC7B,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAC;QACjC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzB,sBAAsB,CAAC,UAAU,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC3D;AAqDD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,GAAG,GAAG,UAAU,CAgQzD"}

package/dist/issues/store.js

@@ -0,0 +1,227 @@
+import 'server-only';
+import { createLogger } from 'hazo_core';
+const log = createLogger('hazo_admin:issues');
+const TABLE = 'hazo_admin_issues';
+function toIssueRecord(raw) {
+    return {
+        id: raw.id,
+        scope_id: raw.scope_id,
+        type: raw.type,
+        status: raw.status,
+        subject_user_id: raw.subject_user_id,
+        assigned_to: raw.assigned_to ?? null,
+        recipient_scope_id: raw.recipient_scope_id ?? null,
+        title: raw.title,
+        summary: raw.summary,
+        payload: typeof raw.payload === 'string'
+            ? JSON.parse(raw.payload)
+            : raw.payload ?? {},
+        dedupe_key: raw.dedupe_key,
+        occurrence_count: raw.occurrence_count,
+        first_seen_at: raw.first_seen_at,
+        last_seen_at: raw.last_seen_at,
+        resolution: raw.resolution ?? null,
+        resolution_role_id: raw.resolution_role_id ?? null,
+        resolution_reason: raw.resolution_reason ?? null,
+        resolved_by: raw.resolved_by ?? null,
+        resolved_at: raw.resolved_at ?? null,
+        created_at: raw.created_at,
+        updated_at: raw.updated_at,
+    };
+}
+/**
+ * Legal status transitions:
+ *   new  → wip
+ *   new  → closed   (direct close)
+ *   wip  → closed
+ *   any  → archived (only via archiveClosedOlderThan)
+ */
+const ALLOWED_TRANSITIONS = {
+    new: ['wip', 'closed'],
+    wip: ['closed'],
+    closed: [],
+    archived: [],
+};
+function assertTransition(from, to) {
+    const allowed = ALLOWED_TRANSITIONS[from] ?? [];
+    if (!allowed.includes(to)) {
+        throw new Error(`hazo_admin:issues — illegal status transition: ${from} → ${to}`);
+    }
+}
+export function createIssueStore(adapter) {
+    function now() {
+        return new Date().toISOString();
+    }
+    async function raw(sql, params = []) {
+        return adapter.raw(sql, params);
+    }
+    async function createOrBumpIssue(input) {
+        log.debug('createOrBumpIssue', { dedupe_key: input.dedupe_key });
+        // Check for an existing open issue with this dedupe_key.
+        const existing = await raw(`SELECT * FROM ${TABLE} WHERE dedupe_key = $1 AND status NOT IN ('closed', 'archived') LIMIT 1`, [input.dedupe_key]);
+        if (existing && existing.length > 0) {
+            const ts = now();
+            const bumped = await raw(`UPDATE ${TABLE}
+         SET occurrence_count = occurrence_count + 1,
+             last_seen_at = $1,
+             updated_at = $2
+         WHERE id = $3
+         RETURNING *`, [ts, ts, existing[0].id]);
+            const row = (bumped && bumped.length > 0 ? bumped[0] : existing[0]);
+            return { issue: toIssueRecord(row), isNew: false };
+        }
+        const ts = now();
+        const id = crypto.randomUUID();
+        const payloadStr = JSON.stringify(input.payload);
+        const inserted = await raw(`INSERT INTO ${TABLE} (
+        id, scope_id, type, status, subject_user_id, assigned_to,
+        recipient_scope_id, title, summary, payload, dedupe_key,
+        occurrence_count, first_seen_at, last_seen_at,
+        resolution, resolution_role_id, resolution_reason,
+        resolved_by, resolved_at, created_at, updated_at
+      ) VALUES (
+        $1, $2, $3, 'new', $4, NULL,
+        $5, $6, $7, $8, $9,
+        1, $10, $11,
+        NULL, NULL, NULL,
+        NULL, NULL, $12, $13
+      ) RETURNING *`, [
+            id,
+            input.scope_id,
+            input.type,
+            input.subject_user_id,
+            input.recipient_scope_id ?? null,
+            input.title,
+            input.summary,
+            payloadStr,
+            input.dedupe_key,
+            ts,
+            ts,
+            ts,
+            ts,
+        ]);
+        const row = (inserted && inserted.length > 0 ? inserted[0] : null);
+        if (!row) {
+            throw new Error('hazo_admin:issues — INSERT returned no row');
+        }
+        return { issue: toIssueRecord(row), isNew: true };
+    }
+    async function listIssues(opts) {
+        const { adminScopeIds, isGlobalAdmin = false, status, assignedTo, type, limit = 50, offset = 0, } = opts;
+        if (!isGlobalAdmin && (!adminScopeIds || adminScopeIds.length === 0)) {
+            return [];
+        }
+        const conditions = [];
+        const params = [];
+        let paramIdx = 1;
+        if (!isGlobalAdmin && adminScopeIds && adminScopeIds.length > 0) {
+            const placeholders = adminScopeIds.map(() => `$${paramIdx++}`).join(', ');
+            conditions.push(`scope_id IN (${placeholders})`);
+            params.push(...adminScopeIds);
+        }
+        if (status !== undefined) {
+            const statuses = Array.isArray(status) ? status : [status];
+            const placeholders = statuses.map(() => `$${paramIdx++}`).join(', ');
+            conditions.push(`status IN (${placeholders})`);
+            params.push(...statuses);
+        }
+        if (assignedTo !== undefined) {
+            if (assignedTo === null) {
+                conditions.push('assigned_to IS NULL');
+            }
+            else {
+                conditions.push(`assigned_to = $${paramIdx++}`);
+                params.push(assignedTo);
+            }
+        }
+        if (type !== undefined) {
+            conditions.push(`type = $${paramIdx++}`);
+            params.push(type);
+        }
+        const where = conditions.length > 0 ? `WHERE ${conditions.join(' AND ')}` : '';
+        params.push(limit);
+        params.push(offset);
+        const sql = `SELECT * FROM ${TABLE} ${where} ORDER BY last_seen_at DESC LIMIT $${paramIdx++} OFFSET $${paramIdx++}`;
+        const rows = await raw(sql, params);
+        return (rows ?? []).map(toIssueRecord);
+    }
+    async function getIssue(id) {
+        const rows = await raw(`SELECT * FROM ${TABLE} WHERE id = $1 LIMIT 1`, [id]);
+        if (!rows || rows.length === 0)
+            return null;
+        return toIssueRecord(rows[0]);
+    }
+    async function transitionStatus(id, status, actorUserId) {
+        const issue = await getIssue(id);
+        if (!issue)
+            throw new Error(`hazo_admin:issues — issue ${id} not found`);
+        assertTransition(issue.status, status);
+        const ts = now();
+        const patch = { status, updated_at: ts };
+        // On →wip: auto-assign to actor if not yet assigned.
+        if (status === 'wip' && issue.assigned_to === null) {
+            patch.assigned_to = actorUserId;
+        }
+        const setClauses = Object.keys(patch)
+            .map((k, i) => `${k} = $${i + 2}`)
+            .join(', ');
+        const updated = await raw(`UPDATE ${TABLE} SET ${setClauses} WHERE id = $1 RETURNING *`, [id, ...Object.values(patch)]);
+        const row = updated && updated.length > 0 ? updated[0] : null;
+        if (!row)
+            throw new Error(`hazo_admin:issues — UPDATE returned no row for ${id}`);
+        return toIssueRecord(row);
+    }
+    async function setAssignee(id, userId) {
+        const ts = now();
+        const updated = await raw(`UPDATE ${TABLE} SET assigned_to = $1, updated_at = $2 WHERE id = $3 RETURNING *`, [userId, ts, id]);
+        const row = updated && updated.length > 0 ? updated[0] : null;
+        if (!row)
+            throw new Error(`hazo_admin:issues — issue ${id} not found`);
+        return toIssueRecord(row);
+    }
+    async function resolveIssue(id, opts) {
+        const ts = now();
+        const updated = await raw(`UPDATE ${TABLE}
+       SET status = 'closed',
+           resolution = $1,
+           resolution_role_id = $2,
+           resolution_reason = $3,
+           resolved_by = $4,
+           resolved_at = $5,
+           updated_at = $6
+       WHERE id = $7
+       RETURNING *`, [
+            opts.resolution,
+            opts.role_id ?? null,
+            opts.reason ?? null,
+            opts.resolved_by,
+            ts,
+            ts,
+            id,
+        ]);
+        const row = updated && updated.length > 0 ? updated[0] : null;
+        if (!row)
+            throw new Error(`hazo_admin:issues — issue ${id} not found`);
+        return toIssueRecord(row);
+    }
+    async function archiveClosedOlderThan(cutoffDate) {
+        const cutoff = cutoffDate.toISOString();
+        log.debug('archiveClosedOlderThan', { cutoff });
+        const result = await raw(`UPDATE ${TABLE}
+       SET status = 'archived', updated_at = $1
+       WHERE status = 'closed' AND resolved_at < $2
+       RETURNING id`, [now(), cutoff]);
+        const count = result ? result.length : 0;
+        log.debug('archiveClosedOlderThan: archived', { count });
+        return count;
+    }
+    return {
+        createOrBumpIssue,
+        listIssues,
+        getIssue,
+        transitionStatus,
+        setAssignee,
+        resolveIssue,
+        archiveClosedOlderThan,
+    };
+}