hazo_admin 0.7.1 → 0.11.0

package/dist/issues/raise.d.ts

@@ -0,0 +1,44 @@
+import 'server-only';
+import type { IssueRecord } from './store.js';
+export type IssueSeverity = 'low' | 'medium' | 'high' | 'critical';
+export interface RaiseIssueInput {
+    /** Registered IssueTypeDef.typeKey. Required — raiseIssue throws if unknown. */
+    type: string;
+    /** Scope id. Present ⇒ scoped (local admin). Omitted/null ⇒ global (super admin). */
+    scope_id?: string | null;
+    severity?: IssueSeverity;
+    /** Raising package/app id, e.g. 'hazo_files'. */
+    source?: string;
+    subject_user_id?: string | null;
+    recipient_scope_id?: string;
+    /** Overrides the typed-def descriptor when supplied. */
+    title?: string;
+    summary?: string;
+    payload?: Record<string, unknown>;
+    /** Auto-derived from source/type/title when omitted. */
+    dedupe_key?: string;
+}
+export interface RaiseIssueOptions {
+    /**
+     * Best-effort notify enqueue override. When omitted, raiseIssue lazily loads
+     * hazo_jobs/server and submits an ADMIN_ISSUE_NOTIFY_JOB_TYPE job itself.
+     * Tests and test-apps inject this to observe/enqueue deterministically.
+     */
+    enqueueNotify?: (payload: {
+        issueId: string;
+    }) => Promise<void> | void;
+    /** SQL dialect for the fallback hazo_jobs client. */
+    dialect?: 'pg' | 'sqlite';
+}
+/**
+ * The single documented ingest protocol for raising an issue into the admin
+ * Kanban. Trusted-by-construction (server-side caller already holds a connect
+ * adapter). Validates the type is registered, derives title/summary/dedupe_key,
+ * persists via the store, and — only when the issue is newly created — best-effort
+ * enqueues the notify job.
+ */
+export declare function raiseIssue(connect: any, input: RaiseIssueInput, opts?: RaiseIssueOptions): Promise<{
+    issue: IssueRecord;
+    isNew: boolean;
+}>;
+//# sourceMappingURL=raise.d.ts.map

package/dist/issues/raise.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raise.d.ts","sourceRoot":"","sources":["../../src/issues/raise.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAGrB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAO9C,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAEnE,MAAM,WAAW,eAAe;IAC9B,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACvE,qDAAqD;IACrD,OAAO,CAAC,EAAE,IAAI,GAAG,QAAQ,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,GAAG,EACZ,KAAK,EAAE,eAAe,EACtB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,CAmEjD"}

package/dist/issues/raise.js

@@ -0,0 +1,77 @@
+import 'server-only';
+import { createLogger } from 'hazo_core';
+import { createIssueStoreFromConnect } from './store.js';
+import { getIssueType } from './registry.js';
+import { GLOBAL_ISSUE_SCOPE_ID } from './recipients.js';
+import { ADMIN_ISSUE_NOTIFY_JOB_TYPE } from './notify_handler.js';
+const log = createLogger('hazo_admin:issues:raise');
+/**
+ * The single documented ingest protocol for raising an issue into the admin
+ * Kanban. Trusted-by-construction (server-side caller already holds a connect
+ * adapter). Validates the type is registered, derives title/summary/dedupe_key,
+ * persists via the store, and — only when the issue is newly created — best-effort
+ * enqueues the notify job.
+ */
+export async function raiseIssue(connect, input, opts = {}) {
+    const typeDef = getIssueType(input.type);
+    if (!typeDef) {
+        throw new Error(`hazo_admin:raiseIssue — unknown issue type '${input.type}'. Register it via registerIssueType() first.`);
+    }
+    const payload = input.payload ?? {};
+    let title = input.title;
+    let summary = input.summary;
+    if ((!title || !summary) && typeof typeDef.buildDescriptor === 'function') {
+        try {
+            const d = typeDef.buildDescriptor(payload);
+            title = title ?? d.title;
+            summary = summary ?? d.summary;
+        }
+        catch (err) {
+            log.debug('raiseIssue: buildDescriptor threw', { type: input.type, error: err?.message });
+        }
+    }
+    title = title ?? input.type;
+    summary = summary ?? '';
+    const source = input.source ?? null;
+    const scopeId = input.scope_id ?? GLOBAL_ISSUE_SCOPE_ID;
+    const dedupe_key = input.dedupe_key ?? `${source ?? 'unknown'}:${input.type}:${title}`;
+    const store = await createIssueStoreFromConnect(connect);
+    const result = await store.createOrBumpIssue({
+        scope_id: scopeId,
+        type: input.type,
+        severity: input.severity ?? 'medium',
+        source: source ?? undefined,
+        subject_user_id: input.subject_user_id ?? null,
+        recipient_scope_id: input.recipient_scope_id,
+        title,
+        summary,
+        payload,
+        dedupe_key,
+    });
+    // Only a brand-new issue notifies — dedupe bumps do not re-notify.
+    if (result.isNew) {
+        try {
+            if (opts.enqueueNotify) {
+                await opts.enqueueNotify({ issueId: result.issue.id });
+            }
+            else {
+                const jobsMod = (await import('hazo_jobs/server').catch(() => null));
+                if (jobsMod?.createJobsClient && typeof connect?.raw === 'function') {
+                    const client = jobsMod.createJobsClient({
+                        connect: { adapter: connect },
+                        dialect: opts.dialect ?? 'pg',
+                    });
+                    await client.submit({
+                        description: `Notify admins of raised issue ${result.issue.id}`,
+                        type: ADMIN_ISSUE_NOTIFY_JOB_TYPE,
+                        payload: { issueId: result.issue.id },
+                    });
+                }
+            }
+        }
+        catch (err) {
+            log.debug('raiseIssue: notify enqueue skipped (best-effort)', { error: err?.message });
+        }
+    }
+    return result;
+}

package/dist/issues/recipients.d.ts

@@ -0,0 +1,20 @@
+import 'server-only';
+/** Permission that identifies a super/global admin (matches hazo_auth). */
+export declare const GLOBAL_ADMIN_PERMISSION = "hazo_org_global_admin";
+/** Permission that identifies a scope-local admin able to triage issues. */
+export declare const SCOPE_ADMIN_PERMISSION = "admin_issue_triage";
+/** Sentinel scope_id stored for issues raised without a scope (global/super-admin issues). */
+export declare const GLOBAL_ISSUE_SCOPE_ID = "global";
+/**
+ * Resolve local admins of a given scope (recipients for a scoped issue).
+ * Defaults to the `admin_issue_triage` permission.
+ */
+export declare function resolveScopeAdmins(connect: any, scope_id: string, permission?: string): Promise<string[]>;
+/**
+ * Resolve global/super admins (recipients for a global issue, no scope).
+ * find_roles_with_permission is scope-bound, so global admins (who may hold the
+ * permission at any scope) are resolved via a direct join when the adapter
+ * exposes raw(). Best-effort: [] otherwise.
+ */
+export declare function resolveGlobalAdmins(connect: any): Promise<string[]>;
+//# sourceMappingURL=recipients.d.ts.map

package/dist/issues/recipients.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipients.d.ts","sourceRoot":"","sources":["../../src/issues/recipients.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAErB,2EAA2E;AAC3E,eAAO,MAAM,uBAAuB,0BAA0B,CAAC;AAE/D,4EAA4E;AAC5E,eAAO,MAAM,sBAAsB,uBAAuB,CAAC;AAE3D,8FAA8F;AAC9F,eAAO,MAAM,qBAAqB,WAAW,CAAC;AA2B9C;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,GAAG,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,GAAE,MAA+B,GAC1C,OAAO,CAAC,MAAM,EAAE,CAAC,CAGnB;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAgBzE"}

package/dist/issues/recipients.js

@@ -0,0 +1,61 @@
+import 'server-only';
+/** Permission that identifies a super/global admin (matches hazo_auth). */
+export const GLOBAL_ADMIN_PERMISSION = 'hazo_org_global_admin';
+/** Permission that identifies a scope-local admin able to triage issues. */
+export const SCOPE_ADMIN_PERMISSION = 'admin_issue_triage';
+/** Sentinel scope_id stored for issues raised without a scope (global/super-admin issues). */
+export const GLOBAL_ISSUE_SCOPE_ID = 'global';
+/**
+ * User ids holding `permission` within a specific scope.
+ * Intersects find_roles_with_permission (roles that grant the permission in the
+ * scope) with get_users_by_scope (users assigned to the scope) on role_id.
+ * Best-effort: returns [] if hazo_auth is absent or anything throws.
+ */
+async function usersWithPermissionInScope(connect, scope_id, permission) {
+    const authLib = await import('hazo_auth/server-lib').catch(() => null);
+    if (!authLib?.find_roles_with_permission || !authLib?.get_users_by_scope)
+        return [];
+    const roles = await authLib.find_roles_with_permission(connect, scope_id, permission).catch(() => []);
+    if (!Array.isArray(roles) || roles.length === 0)
+        return [];
+    const roleIds = new Set(roles.map((r) => r.id));
+    const res = await authLib.get_users_by_scope(connect, scope_id).catch(() => null);
+    const scopes = res?.scopes ?? [];
+    const userIds = scopes
+        .filter((s) => roleIds.has(s.role_id))
+        .map((s) => s.user_id)
+        .filter(Boolean);
+    return [...new Set(userIds)];
+}
+/**
+ * Resolve local admins of a given scope (recipients for a scoped issue).
+ * Defaults to the `admin_issue_triage` permission.
+ */
+export async function resolveScopeAdmins(connect, scope_id, permission = SCOPE_ADMIN_PERMISSION) {
+    if (!scope_id)
+        return [];
+    return usersWithPermissionInScope(connect, scope_id, permission);
+}
+/**
+ * Resolve global/super admins (recipients for a global issue, no scope).
+ * find_roles_with_permission is scope-bound, so global admins (who may hold the
+ * permission at any scope) are resolved via a direct join when the adapter
+ * exposes raw(). Best-effort: [] otherwise.
+ */
+export async function resolveGlobalAdmins(connect) {
+    if (typeof connect?.raw !== 'function')
+        return [];
+    try {
+        const rows = await connect.raw(`SELECT DISTINCT us.user_id
+         FROM hazo_user_scopes us
+         JOIN hazo_role_permissions rp ON rp.role_id = us.role_id
+         JOIN hazo_permissions p ON p.id = rp.permission_id
+        WHERE p.permission_name = $1`, [GLOBAL_ADMIN_PERMISSION]);
+        if (!Array.isArray(rows))
+            return [];
+        return [...new Set(rows.map((r) => r.user_id).filter(Boolean))];
+    }
+    catch {
+        return [];
+    }
+}

package/dist/issues/registry.client.d.ts

@@ -2,6 +2,7 @@ import type React from 'react';
 export interface IssueCardData {
     id: string;
     type: string;
+    severity: string;
     status: string;
     subject_user_id: string;
     assigned_to: string | null;

package/dist/issues/registry.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.client.d.ts","sourceRoot":"","sources":["../../src/issues/registry.client.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAG/B,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAClF;AAED,MAAM,MAAM,iBAAiB,GAAG,KAAK,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC;AAI5E,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAE5F;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEnF;AAED,wBAAgB,sBAAsB,IAAI,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAEhG;AAED,wBAAgB,gBAAgB,CAAC,EAAE,KAAK,EAAE,EAAE,sBAAsB,qBAWjE"}
+{"version":3,"file":"registry.client.d.ts","sourceRoot":"","sources":["../../src/issues/registry.client.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAI/B,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAClF;AAED,MAAM,MAAM,iBAAiB,GAAG,KAAK,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC;AAI5E,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAE5F;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEnF;AAED,wBAAgB,sBAAsB,IAAI,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAEhG;AAED,wBAAgB,gBAAgB,CAAC,EAAE,KAAK,EAAE,EAAE,sBAAsB,qBAmDjE"}

package/dist/issues/registry.client.js

@@ -1,5 +1,6 @@
 'use client';
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { cx, severityMeta, relativeTime } from '../components/issues_panel/ui_helpers.js';
 const registry = new Map();
 export function registerIssueCardRenderer(typeKey, renderer) {
     registry.set(typeKey, renderer);
@@ -11,5 +12,7 @@ export function listIssueCardRenderers() {
     return Array.from(registry.entries()).map(([typeKey, renderer]) => ({ typeKey, renderer }));
 }
 export function DefaultIssueCard({ issue }) {
-    return (_jsxs("div", { className: "text-sm space-y-1", children: [_jsx("div", { className: "font-medium text-gray-800", children: issue.title }), _jsx("div", { className: "text-gray-500 text-xs", children: issue.summary }), issue.occurrence_count > 1 && (_jsxs("div", { className: "text-xs text-amber-600", children: ["Occurred ", issue.occurrence_count, "\u00D7"] })), _jsx("div", { className: "text-xs text-gray-400", children: issue.type })] }));
+    const sev = severityMeta(issue.severity);
+    const when = relativeTime(issue.last_seen_at);
+    return (_jsxs("div", { className: cx('relative pl-3', 'before:absolute before:left-0 before:top-0.5 before:bottom-0.5 before:w-1 before:rounded-full', sev.rail), children: [_jsx("h4", { className: "text-[13px] font-semibold leading-snug text-slate-800 line-clamp-2", children: issue.title }), issue.summary && (_jsx("p", { className: "mt-1 text-xs leading-relaxed text-slate-500 line-clamp-2", children: issue.summary })), _jsxs("div", { className: "mt-2.5 flex flex-wrap items-center gap-1.5", children: [_jsxs("span", { className: cx('inline-flex items-center gap-1 rounded-full px-2 py-0.5 text-[10px] font-semibold', sev.badge), children: [_jsx("span", { className: cx('h-1.5 w-1.5 rounded-full', sev.dot) }), sev.label] }), _jsx("span", { className: "inline-flex items-center rounded-full bg-slate-100 px-2 py-0.5 text-[10px] font-medium text-slate-600 ring-1 ring-inset ring-slate-200/70", children: issue.type }), issue.occurrence_count > 1 && (_jsxs("span", { title: `Seen ${issue.occurrence_count} times`, className: "inline-flex items-center rounded-full bg-amber-50 px-1.5 py-0.5 text-[10px] font-semibold text-amber-700 ring-1 ring-inset ring-amber-100", children: ["\u00D7", issue.occurrence_count] })), when && (_jsx("span", { className: "ml-auto text-[10px] tabular-nums text-slate-400", children: when }))] })] }));
 }

package/dist/issues/registry.d.ts

@@ -35,9 +35,9 @@ export interface IssueTypeDef {
         title: string;
         summary: string;
     };
-    resolveRecipients(issue: IssueRecord, ctx: IssueActionCtx): Promise<RecipientResult>;
-    actions: IssueActionDef[];
-    buildResolutionNotice(issue: IssueRecord, actionKey: string, result: IssueActionResult): NotifyPayload;
+    resolveRecipients?(issue: IssueRecord, ctx: IssueActionCtx): Promise<RecipientResult>;
+    actions?: IssueActionDef[];
+    buildResolutionNotice?(issue: IssueRecord, actionKey: string, result: IssueActionResult): NotifyPayload;
 }
 export declare function registerIssueType(def: IssueTypeDef): void;
 export declare function getIssueType(typeKey: string): IssueTypeDef | undefined;

package/dist/issues/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/issues/registry.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,YAAY,EAAE,WAAW,EAAE,CAAC;AAE5B,MAAM,WAAW,cAAc;IAC7B,sEAAsE;IACtE,cAAc,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB,EAAE,MAAM,CAAC;IAC3B,GAAG,CACD,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACtF,iBAAiB,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACrF,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,qBAAqB,CACnB,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,iBAAiB,GACxB,aAAa,CAAC;CAClB;AAID,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAEzD;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAEtE;AAED,wBAAgB,cAAc,IAAI,YAAY,EAAE,CAE/C"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/issues/registry.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,YAAY,EAAE,WAAW,EAAE,CAAC;AAE5B,MAAM,WAAW,cAAc;IAC7B,sEAAsE;IACtE,cAAc,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB,EAAE,MAAM,CAAC;IAC3B,GAAG,CACD,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACtF,iBAAiB,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACtF,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAC3B,qBAAqB,CAAC,CACpB,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,iBAAiB,GACxB,aAAa,CAAC;CAClB;AAID,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAEzD;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAEtE;AAED,wBAAgB,cAAc,IAAI,YAAY,EAAE,CAE/C"}

package/dist/issues/store.d.ts

@@ -3,10 +3,12 @@ export interface IssueRecord {
     id: string;
     scope_id: string;
     type: string;
-    status: 'new' | 'wip' | 'closed' | 'archived';
-    subject_user_id: string;
+    severity: 'low' | 'medium' | 'high' | 'critical';
+    status: 'new' | 'wip' | 'on_hold' | 'closed' | 'archived';
+    subject_user_id: string | null;
     assigned_to: string | null;
     recipient_scope_id: string | null;
+    source: string | null;
     title: string;
     summary: string;
     payload: Record<string, unknown>;
@@ -25,12 +27,14 @@ export interface IssueRecord {
 export interface CreateIssueInput {
     scope_id: string;
     type: string;
-    subject_user_id: string;
+    severity?: 'low' | 'medium' | 'high' | 'critical';
+    subject_user_id?: string | null;
     recipient_scope_id?: string;
+    source?: string;
     title: string;
     summary: string;
     payload: Record<string, unknown>;
-    dedupe_key: string;
+    dedupe_key?: string;
 }
 export interface IssueStore {
     createOrBumpIssue(input: CreateIssueInput): Promise<{
@@ -47,8 +51,9 @@ export interface IssueStore {
         offset?: number;
     }): Promise<IssueRecord[]>;
     getIssue(id: string): Promise<IssueRecord | null>;
-    transitionStatus(id: string, status: 'wip' | 'closed', actorUserId: string): Promise<IssueRecord>;
+    transitionStatus(id: string, status: IssueRecord['status'], actorUserId: string): Promise<IssueRecord>;
     setAssignee(id: string, userId: string | null): Promise<IssueRecord>;
+    setType(id: string, type: string): Promise<IssueRecord>;
     resolveIssue(id: string, opts: {
         resolution: 'granted' | 'denied';
         role_id?: string;

package/dist/issues/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/issues/store.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAOrB,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC9C,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;IACxC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,WAAW,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC5F,UAAU,CAAC,IAAI,EAAE;QACf,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,MAAM,CAAC,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAClD,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,QAAQ,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClG,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QAC7B,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAC;QACjC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzB,sBAAsB,CAAC,UAAU,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC3D;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,WAAW,CA0BvE;AAyBD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,GAAG,GAAG,UAAU,CAgQzD;AAED;;;;;;;;GAQG;AACH,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAwNnF"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/issues/store.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAOrB,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACjD,MAAM,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC1D,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;IACxC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,WAAW,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC5F,UAAU,CAAC,IAAI,EAAE;QACf,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,MAAM,CAAC,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAClD,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACvG,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACxD,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QAC7B,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAC;QACjC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzB,sBAAsB,CAAC,UAAU,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC3D;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,WAAW,CA4BvE;AAqBD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,GAAG,GAAG,UAAU,CAmRzD;AAED;;;;;;;;GAQG;AACH,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAwOnF"}

package/dist/issues/store.js

@@ -7,10 +7,12 @@ export function toIssueRecord(raw) {
         id: raw.id,
         scope_id: raw.scope_id,
         type: raw.type,
+        severity: raw.severity ?? 'medium',
         status: raw.status,
-        subject_user_id: raw.subject_user_id,
+        subject_user_id: raw.subject_user_id ?? null,
         assigned_to: raw.assigned_to ?? null,
         recipient_scope_id: raw.recipient_scope_id ?? null,
+        source: raw.source ?? null,
         title: raw.title,
         summary: raw.summary,
         payload: typeof raw.payload === 'string'
@@ -30,21 +32,17 @@ export function toIssueRecord(raw) {
     };
 }
 /**
- * Legal status transitions:
- *   new  → wip
- *   new  → closed   (direct close)
- *   wip  → closed
- *   any  → archived (only via archiveClosedOlderThan)
+ * Every known status may transition to any other known status. Admins move
+ * cards freely across the board — including reopening a closed issue (closed →
+ * new/wip) and parking one (→ on_hold). Only an unknown target status is
+ * rejected. `archived` is normally reached via archiveClosedOlderThan, but a
+ * manual move is permitted too.
+ *
+ * Side effect: a → wip that lands on an unassigned issue auto-assigns the actor.
  */
-const ALLOWED_TRANSITIONS = {
-    new: ['wip', 'closed'],
-    wip: ['closed'],
-    closed: [],
-    archived: [],
-};
+const KNOWN_STATUSES = new Set(['new', 'wip', 'on_hold', 'closed', 'archived']);
 function assertTransition(from, to) {
-    const allowed = ALLOWED_TRANSITIONS[from] ?? [];
-    if (!allowed.includes(to)) {
+    if (!KNOWN_STATUSES.has(to)) {
         throw new Error(`hazo_admin:issues — illegal status transition: ${from} → ${to}`);
     }
 }
@@ -56,9 +54,13 @@ export function createIssueStore(adapter) {
         return adapter.raw(sql, params);
     }
     async function createOrBumpIssue(input) {
-        log.debug('createOrBumpIssue', { dedupe_key: input.dedupe_key });
+        const dedupe_key = input.dedupe_key;
+        if (!dedupe_key) {
+            throw new Error('hazo_admin:issues — dedupe_key required at store layer');
+        }
+        log.debug('createOrBumpIssue', { dedupe_key });
         // Check for an existing open issue with this dedupe_key.
-        const existing = await raw(`SELECT * FROM ${TABLE} WHERE dedupe_key = $1 AND status NOT IN ('closed', 'archived') LIMIT 1`, [input.dedupe_key]);
+        const existing = await raw(`SELECT * FROM ${TABLE} WHERE dedupe_key = $1 AND status NOT IN ('closed', 'archived') LIMIT 1`, [dedupe_key]);
         if (existing && existing.length > 0) {
             const ts = now();
             const bumped = await raw(`UPDATE ${TABLE}
@@ -74,27 +76,29 @@ export function createIssueStore(adapter) {
         const id = crypto.randomUUID();
         const payloadStr = JSON.stringify(input.payload);
         const inserted = await raw(`INSERT INTO ${TABLE} (
-        id, scope_id, type, status, subject_user_id, assigned_to,
-        recipient_scope_id, title, summary, payload, dedupe_key,
+        id, scope_id, type, severity, status, subject_user_id, assigned_to,
+        recipient_scope_id, source, title, summary, payload, dedupe_key,
         occurrence_count, first_seen_at, last_seen_at,
         resolution, resolution_role_id, resolution_reason,
         resolved_by, resolved_at, created_at, updated_at
       ) VALUES (
-        $1, $2, $3, 'new', $4, NULL,
-        $5, $6, $7, $8, $9,
-        1, $10, $11,
+        $1, $2, $3, $4, 'new', $5, NULL,
+        $6, $7, $8, $9, $10, $11,
+        1, $12, $13,
         NULL, NULL, NULL,
-        NULL, NULL, $12, $13
+        NULL, NULL, $14, $15
       ) RETURNING *`, [
             id,
             input.scope_id,
             input.type,
-            input.subject_user_id,
+            input.severity ?? 'medium',
+            input.subject_user_id ?? null,
             input.recipient_scope_id ?? null,
+            input.source ?? null,
             input.title,
             input.summary,
             payloadStr,
-            input.dedupe_key,
+            dedupe_key,
             ts,
             ts,
             ts,
@@ -179,6 +183,15 @@ export function createIssueStore(adapter) {
             throw new Error(`hazo_admin:issues — issue ${id} not found`);
         return toIssueRecord(row);
     }
+    // Dedupe-safe: the partial unique index is on dedupe_key only; changing type never touches it.
+    async function setType(id, type) {
+        const ts = now();
+        const updated = await raw(`UPDATE ${TABLE} SET type = $1, updated_at = $2 WHERE id = $3 RETURNING *`, [type, ts, id]);
+        const row = updated && updated.length > 0 ? updated[0] : null;
+        if (!row)
+            throw new Error(`hazo_admin:issues — issue ${id} not found`);
+        return toIssueRecord(row);
+    }
     async function resolveIssue(id, opts) {
         const ts = now();
         const updated = await raw(`UPDATE ${TABLE}
@@ -221,6 +234,7 @@ export function createIssueStore(adapter) {
         getIssue,
         transitionStatus,
         setAssignee,
+        setType,
         resolveIssue,
         archiveClosedOlderThan,
     };
@@ -248,12 +262,16 @@ export async function createIssueStoreFromConnect(adapter) {
         return new Date().toISOString();
     }
     async function createOrBumpIssue(input) {
-        log.debug('createIssueStoreFromConnect:createOrBumpIssue', { dedupe_key: input.dedupe_key });
+        const dedupe_key = input.dedupe_key;
+        if (!dedupe_key) {
+            throw new Error('hazo_admin:issues — dedupe_key required at store layer');
+        }
+        log.debug('createIssueStoreFromConnect:createOrBumpIssue', { dedupe_key });
         // Atomically bump an existing open issue via claimRows.
         const bumped = await adapter.claimRows({
             table: TABLE,
             where: {
-                dedupe_key: input.dedupe_key,
+                dedupe_key,
                 status: { in: ['new', 'wip'] },
             },
             set: {
@@ -271,14 +289,16 @@ export async function createIssueStoreFromConnect(adapter) {
         const inserted = await crud.insert({
             scope_id: input.scope_id,
             type: input.type,
+            severity: input.severity ?? 'medium',
             status: 'new',
-            subject_user_id: input.subject_user_id,
+            subject_user_id: input.subject_user_id ?? null,
             assigned_to: null,
             recipient_scope_id: input.recipient_scope_id ?? null,
+            source: input.source ?? null,
             title: input.title,
             summary: input.summary,
             payload: input.payload,
-            dedupe_key: input.dedupe_key,
+            dedupe_key,
             occurrence_count: 1,
             first_seen_at: ts,
             last_seen_at: ts,
@@ -353,6 +373,15 @@ export async function createIssueStoreFromConnect(adapter) {
             throw new Error(`hazo_admin:issues — issue ${id} not found`);
         return toIssueRecord(row);
     }
+    // Dedupe-safe: the partial unique index is on dedupe_key only; changing type never touches it.
+    async function setType(id, type) {
+        const ts = now();
+        const updated = await crud.updateById(id, { type, updated_at: ts });
+        const row = Array.isArray(updated) ? updated[0] : updated;
+        if (!row)
+            throw new Error(`hazo_admin:issues — issue ${id} not found`);
+        return toIssueRecord(row);
+    }
     async function resolveIssue(id, opts) {
         const ts = now();
         const updated = await crud.updateById(id, {
@@ -395,6 +424,7 @@ export async function createIssueStoreFromConnect(adapter) {
         getIssue,
         transitionStatus,
         setAssignee,
+        setType,
         resolveIssue,
         archiveClosedOlderThan,
     };

package/dist/issues/type_catalog.d.ts

@@ -0,0 +1,48 @@
+import 'server-only';
+export interface IssueTypeCatalogRecord {
+    type_key: string;
+    label: string;
+    color: string | null;
+    description: string | null;
+    scope_id: string | null;
+    sort_order: number;
+    created_at: string;
+    updated_at: string;
+}
+export interface CreateIssueTypeInput {
+    type_key: string;
+    label: string;
+    color?: string | null;
+    description?: string | null;
+    scope_id?: string | null;
+    sort_order?: number;
+}
+export interface UpdateIssueTypeInput {
+    label?: string;
+    color?: string | null;
+    description?: string | null;
+    sort_order?: number;
+}
+export interface IssueTypeCatalogStore {
+    listTypes(opts: {
+        scopeIds?: string[];
+        isGlobalAdmin?: boolean;
+    }): Promise<IssueTypeCatalogRecord[]>;
+    getType(type_key: string): Promise<IssueTypeCatalogRecord | null>;
+    createType(input: CreateIssueTypeInput): Promise<IssueTypeCatalogRecord>;
+    updateType(type_key: string, patch: UpdateIssueTypeInput): Promise<IssueTypeCatalogRecord>;
+    deleteType(type_key: string): Promise<void>;
+}
+export declare function toIssueTypeCatalogRecord(raw: Record<string, unknown>): IssueTypeCatalogRecord;
+export declare function createIssueTypeCatalogStore(adapter: any): IssueTypeCatalogStore;
+/**
+ * PostgREST-native implementation of IssueTypeCatalogStore.
+ * Uses createCrudService so no raw SQL is issued.
+ * Falls back to createIssueTypeCatalogStore when the adapter exposes a raw()
+ * method (i.e. it is a direct-DB adapter that already handles SQL).
+ *
+ * Returns a Promise because it lazily imports hazo_connect/server on the
+ * CRUD path (avoiding loading the full hazo_connect stack for raw adapters).
+ */
+export declare function createIssueTypeCatalogStoreFromConnect(adapter: any): Promise<IssueTypeCatalogStore>;
+//# sourceMappingURL=type_catalog.d.ts.map

package/dist/issues/type_catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"type_catalog.d.ts","sourceRoot":"","sources":["../../src/issues/type_catalog.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAOrB,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,IAAI,EAAE;QACd,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAClE,UAAU,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACzE,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC3F,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,sBAAsB,CAW7F;AAwBD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,GAAG,GAAG,qBAAqB,CAuG/E;AAED;;;;;;;;GAQG;AACH,wBAAsB,sCAAsC,CAC1D,OAAO,EAAE,GAAG,GACX,OAAO,CAAC,qBAAqB,CAAC,CAyFhC"}