popilot 0.6.0 → 0.8.0

package/scaffold/pm-api/src/routes/v2-meetings.ts

@@ -0,0 +1,324 @@
+import { Hono } from 'hono'
+import type { AppEnv } from '../types.js'
+import { query, execute } from '../db/adapter.js'
+import { queryOrThrow, executeOrThrow } from '../utils/db.js'
+
+const app = new Hono<AppEnv>()
+
+// GET / - meeting minutes list
+app.get('/', async (c) => {
+  const { rows } = await queryOrThrow(
+    'SELECT id, title, date, participants, created_by, created_at FROM meetings ORDER BY date DESC LIMIT 50',
+  )
+  return c.json({ meetings: rows })
+})
+
+// GET /:id - meeting detail
+app.get('/:id', async (c) => {
+  const id = Number(c.req.param('id'))
+  const { rows } = await queryOrThrow('SELECT * FROM meetings WHERE id = ?', [id])
+  if (!rows.length) return c.json({ error: 'Meeting not found' }, 404)
+  return c.json({ meeting: rows[0] })
+})
+
+// POST / - create meeting
+app.post('/', async (c) => {
+  const body = await c.req.json<{
+    title: string; date: string; rawTranscript?: string
+    summary?: string; agenda?: string; decisions?: string
+    actionItems?: string; participants?: string
+  }>()
+  const createdBy = c.get('userName')
+
+  const { rowsAffected } = await executeOrThrow(
+    `INSERT INTO meetings (title, date, raw_transcript, summary, agenda, decisions, action_items, participants, created_by)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+    [body.title, body.date, body.rawTranscript ?? null, body.summary ?? null,
+     body.agenda ?? null, body.decisions ?? null, body.actionItems ?? null,
+     body.participants ?? null, createdBy],
+  )
+  return c.json({ ok: true }, 201)
+})
+
+// PATCH /:id - update meeting
+app.patch('/:id', async (c) => {
+  const id = Number(c.req.param('id'))
+  const body = await c.req.json<Record<string, unknown>>()
+  const fieldMap: Record<string, string> = {
+    title: 'title', date: 'date', rawTranscript: 'raw_transcript',
+    summary: 'summary', agenda: 'agenda', decisions: 'decisions',
+    actionItems: 'action_items', participants: 'participants',
+  }
+  const sets: string[] = []
+  const args: (string | null)[] = []
+  for (const [key, col] of Object.entries(fieldMap)) {
+    if (body[key] !== undefined) { sets.push(`${col} = ?`); args.push(body[key] as string ?? null) }
+  }
+  if (!sets.length) return c.json({ ok: true })
+  sets.push('updated_at = CURRENT_TIMESTAMP')
+  args.push(String(id))
+  await execute(`UPDATE meetings SET ${sets.join(', ')} WHERE id = ?`, args)
+  return c.json({ ok: true })
+})
+
+// POST /:id/create-tasks - create tasks from action items
+app.post('/:id/create-tasks', async (c) => {
+  const id = Number(c.req.param('id'))
+  const meeting = await query<{ action_items: string | null }>(
+    'SELECT action_items FROM meetings WHERE id = ?', [id],
+  )
+  if (!meeting.rows.length) return c.json({ error: 'Meeting not found' }, 404)
+
+  const actionItems = meeting.rows[0].action_items
+  if (!actionItems) return c.json({ error: 'No action items' }, 400)
+
+  // Split by lines and create stories
+  const items = actionItems.split('\n').map(s => s.trim()).filter(Boolean)
+  let created = 0
+  for (const item of items) {
+    await execute(
+      'INSERT INTO pm_stories (title, description, status, priority) VALUES (?, ?, ?, ?)',
+      [`[Meeting] ${item.slice(0, 60)}`, `Created from meeting #${id}.\n\n${item}`, 'backlog', 'medium'],
+    )
+    created++
+  }
+
+  return c.json({ ok: true, created })
+})
+
+// POST /:id/transcribe — audio file -> STT (Whisper)
+app.post('/:id/transcribe', async (c) => {
+  const id = Number(c.req.param('id'))
+
+  // Get STT key from settings
+  const settingsResult = await query(
+    "SELECT key, value FROM settings WHERE key IN ('llm_api_key', 'llm_provider', 'stt_api_key')",
+  )
+  const sMap: Record<string, string> = {}
+  for (const r of (settingsResult.rows ?? []) as Array<{ key: string; value: string }>) {
+    sMap[r.key] = r.value
+  }
+  const sttKey = sMap.stt_api_key
+  const llmKey = sMap.llm_api_key
+  const provider = sMap.llm_provider || 'openai'
+
+  let apiKey: string | undefined
+  if (sttKey) {
+    apiKey = sttKey
+  } else if (provider === 'openai' && llmKey) {
+    apiKey = llmKey
+  }
+
+  if (!apiKey) {
+    return c.json({
+      error: 'STT requires OpenAI Whisper. Set stt_api_key or OpenAI API key in /admin settings.'
+    }, 400)
+  }
+
+  // Parse multipart/form-data
+  const formData = await c.req.formData()
+  const file = formData.get('file') as File | null
+  if (!file) return c.json({ error: 'Audio file required' }, 400)
+
+  // File size validation (25MB)
+  if (file.size > 25 * 1024 * 1024) {
+    return c.json({ error: 'File size exceeds 25MB' }, 413)
+  }
+
+  // Format validation
+  const ext = file.name.split('.').pop()?.toLowerCase()
+  if (!['mp3', 'wav', 'm4a', 'webm', 'ogg'].includes(ext || '')) {
+    return c.json({ error: 'Unsupported format. Supported: mp3, wav, m4a, webm, ogg' }, 400)
+  }
+
+  // Whisper API call
+  const whisperForm = new FormData()
+  whisperForm.append('file', file)
+  whisperForm.append('model', 'whisper-1')
+  whisperForm.append('response_format', 'text')
+
+  const whisperRes = await fetch('https://api.openai.com/v1/audio/transcriptions', {
+    method: 'POST',
+    headers: { 'Authorization': `Bearer ${apiKey}` },
+    body: whisperForm,
+  })
+
+  if (!whisperRes.ok) {
+    const errText = await whisperRes.text()
+    return c.json({ error: `Whisper API failed: ${errText.slice(0, 200)}` }, 500)
+  }
+
+  const transcript = await whisperRes.text()
+
+  // Save to DB
+  await execute(
+    'UPDATE meetings SET raw_transcript = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?',
+    [transcript, id],
+  )
+
+  return c.json({ ok: true, transcript })
+})
+
+// POST /:id/transcribe-chunk — segment STT (for live recording)
+app.post('/:id/transcribe-chunk', async (c) => {
+  const id = Number(c.req.param('id'))
+
+  const settingsResult = await query(
+    "SELECT key, value FROM settings WHERE key IN ('llm_api_key', 'llm_provider', 'stt_api_key')",
+  )
+  const sMap: Record<string, string> = {}
+  for (const r of (settingsResult.rows ?? []) as Array<{ key: string; value: string }>) sMap[r.key] = r.value
+
+  const sttKey = sMap.stt_api_key
+  const provider = sMap.llm_provider || 'openai'
+  const apiKey = sttKey || (provider === 'openai' ? sMap.llm_api_key : undefined)
+  if (!apiKey) return c.json({ error: 'STT API key required' }, 400)
+
+  const formData = await c.req.formData()
+  const file = formData.get('file') as File | null
+  if (!file) return c.json({ error: 'Audio file required' }, 400)
+
+  const whisperForm = new FormData()
+  whisperForm.append('file', file, 'chunk.webm')
+  whisperForm.append('model', 'whisper-1')
+  whisperForm.append('response_format', 'text')
+
+  const res = await fetch('https://api.openai.com/v1/audio/transcriptions', {
+    method: 'POST',
+    headers: { 'Authorization': `Bearer ${apiKey}` },
+    body: whisperForm,
+  })
+
+  if (!res.ok) return c.json({ error: 'Whisper failed' }, 500)
+  const text = await res.text()
+
+  // Append to existing transcript
+  const existing = await query('SELECT raw_transcript FROM meetings WHERE id = ?', [id])
+  const prev = (existing.rows?.[0] as any)?.raw_transcript || ''
+  await execute(
+    'UPDATE meetings SET raw_transcript = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?',
+    [prev + ' ' + text, id],
+  )
+
+  return c.json({ ok: true, text })
+})
+
+// POST /:id/structurize — BYOM transcript structuring
+app.post('/:id/structurize', async (c) => {
+  const id = Number(c.req.param('id'))
+  const body = await c.req.json<{ apiKey?: string; model?: string; provider?: string }>()
+
+  // Get API key, model, provider from settings
+  const settingsResult = await query<{ key: string; value: string }>(
+    "SELECT key, value FROM settings WHERE key IN ('llm_api_key', 'llm_model', 'llm_provider', 'gemini_client_email', 'gemini_private_key')",
+  )
+  const sMap: Record<string, string> = {}
+  for (const r of settingsResult.rows) sMap[r.key] = r.value
+
+  const apiKey = body.apiKey ?? sMap.llm_api_key
+  if (!apiKey) return c.json({ error: 'API key not configured. Set it in /admin settings.' }, 400)
+
+  const meeting = await query<{ raw_transcript: string | null }>(
+    'SELECT raw_transcript FROM meetings WHERE id = ?', [id],
+  )
+  if (!meeting.rows.length) return c.json({ error: 'Meeting not found' }, 404)
+  if (!meeting.rows[0].raw_transcript) return c.json({ error: 'No transcript available' }, 400)
+
+  const transcript = meeting.rows[0].raw_transcript
+  const provider = body.provider ?? sMap.llm_provider ?? (apiKey.startsWith('sk-ant') ? 'anthropic' : apiKey.startsWith('AI') ? 'gemini' : 'openai')
+  const model = body.model ?? sMap.llm_model ?? (provider === 'openai' ? 'gpt-4o-mini' : provider === 'gemini' ? 'gemini-2.0-flash' : 'claude-sonnet-4-20250514')
+
+  const systemPrompt = `You are an expert at structuring meeting transcripts.
+Analyze the transcript below and return JSON:
+{
+  "summary": "One-line summary",
+  "agenda": "Agenda items (newline separated)",
+  "decisions": "Decisions made (newline separated)",
+  "action_items": "Action items (newline separated, include assignee per line)"
+}
+Return only JSON.`
+
+  try {
+    let result: { summary: string; agenda: string; decisions: string; action_items: string }
+
+    if (provider === 'openai') {
+      const res = await fetch('https://api.openai.com/v1/chat/completions', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${apiKey}` },
+        body: JSON.stringify({
+          model,
+          messages: [
+            { role: 'system', content: systemPrompt },
+            { role: 'user', content: transcript },
+          ],
+          response_format: { type: 'json_object' },
+        }),
+      })
+      const data = await res.json() as { choices?: Array<{ message?: { content?: string } }> }
+      result = JSON.parse(data.choices?.[0]?.message?.content ?? '{}')
+    } else {
+      const res = await fetch('https://api.anthropic.com/v1/messages', {
+        method: 'POST',
+        headers: {
+          'Content-Type': 'application/json',
+          'x-api-key': apiKey,
+          'anthropic-version': '2023-06-01',
+        },
+        body: JSON.stringify({
+          model,
+          max_tokens: 4096,
+          system: systemPrompt,
+          messages: [{ role: 'user', content: transcript }],
+        }),
+      })
+      const data = await res.json() as { content?: Array<{ text?: string }> }
+      const text = data.content?.[0]?.text ?? '{}'
+      const jsonMatch = text.match(/\{[\s\S]*\}/)
+      result = JSON.parse(jsonMatch?.[0] ?? '{}')
+    }
+    if (provider === 'gemini') {
+      const geminiModel = model || 'gemini-2.0-flash'
+
+      let geminiUrl: string
+      let geminiHeaders: Record<string, string> = { 'Content-Type': 'application/json' }
+
+      const geminiClientEmail = sMap.gemini_client_email
+      const geminiPrivateKey = sMap.gemini_private_key
+
+      if (geminiClientEmail && geminiPrivateKey) {
+        const { getGeminiAccessToken } = await import('../utils/gemini-auth.js')
+        const accessToken = await getGeminiAccessToken(geminiClientEmail, geminiPrivateKey)
+        geminiUrl = `https://generativelanguage.googleapis.com/v1beta/models/${geminiModel}:generateContent`
+        geminiHeaders['Authorization'] = `Bearer ${accessToken}`
+      } else {
+        geminiUrl = `https://generativelanguage.googleapis.com/v1beta/models/${geminiModel}:generateContent?key=${apiKey}`
+      }
+
+      const res = await fetch(geminiUrl, {
+          method: 'POST',
+          headers: geminiHeaders,
+          body: JSON.stringify({
+            contents: [{ parts: [{ text: `${systemPrompt}\n\n${transcript}` }] }],
+            generationConfig: { responseMimeType: 'application/json' },
+          }),
+        },
+      )
+      const data = await res.json() as { candidates?: Array<{ content?: { parts?: Array<{ text?: string }> } }> }
+      const geminiText = data.candidates?.[0]?.content?.parts?.[0]?.text ?? '{}'
+      const jsonMatch = geminiText.match(/\{[\s\S]*\}/)
+      result = JSON.parse(jsonMatch?.[0] ?? '{}')
+    }
+
+    // Update DB
+    await execute(
+      'UPDATE meetings SET summary = ?, agenda = ?, decisions = ?, action_items = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?',
+      [result.summary ?? null, result.agenda ?? null, result.decisions ?? null, result.action_items ?? null, id],
+    )
+
+    return c.json({ ok: true, result })
+  } catch (e) {
+    return c.json({ error: `LLM call failed: ${String(e)}` }, 500)
+  }
+})
+
+export default app

package/scaffold/pm-api/src/routes/v2-memos.ts

@@ -0,0 +1,257 @@
+import { Hono } from 'hono'
+import type { AppEnv } from '../types.js'
+import { query, execute } from '../db/adapter.js'
+import { queryOrThrow, executeOrThrow } from '../utils/db.js'
+
+const app = new Hono<AppEnv>()
+
+// GET /all — global memo inbox
+app.get('/all', async (c) => {
+  const user = c.req.query('user')
+  const status = c.req.query('status')
+  const keyword = c.req.query('keyword')
+  const author = c.req.query('author')
+  const dateFrom = c.req.query('dateFrom')
+  const dateTo = c.req.query('dateTo')
+  const limit = Number(c.req.query('limit') ?? '50')
+
+  const conditions: string[] = []
+  const params: (string | number)[] = []
+
+  if (user) {
+    conditions.push('assigned_to = ?')
+    params.push(user)
+  }
+  if (status) {
+    conditions.push('status = ?')
+    params.push(status)
+  }
+  if (keyword) {
+    conditions.push('(content LIKE ? OR title LIKE ? OR created_by LIKE ?)')
+    params.push(`%${keyword}%`, `%${keyword}%`, `%${keyword}%`)
+  }
+  if (author) {
+    conditions.push('created_by = ?')
+    params.push(author)
+  }
+  if (dateFrom) {
+    conditions.push('created_at >= ?')
+    params.push(dateFrom)
+  }
+  if (dateTo) {
+    conditions.push('created_at <= ?')
+    params.push(dateTo + 'T23:59:59')
+  }
+  const memoType = c.req.query('memo_type')
+  if (memoType) {
+    conditions.push('memo_type = ?')
+    params.push(memoType)
+  }
+
+  const where = conditions.length ? `WHERE ${conditions.join(' AND ')}` : ''
+  const offset = Number(c.req.query('offset') ?? '0')
+
+  // total count
+  const countParams = [...params]
+  const countResult = await query(
+    `SELECT COUNT(*) as total FROM memos_v2 ${where}`,
+    countParams,
+  )
+  const total = (countResult.rows?.[0] as { total: number })?.total || 0
+
+  params.push(limit, offset)
+  const { rows } = await queryOrThrow(
+    `SELECT * FROM memos_v2 ${where} ORDER BY created_at DESC LIMIT ? OFFSET ?`,
+    params,
+  )
+  return c.json({ memos: rows, total, limit, offset })
+})
+
+// GET /unread-count
+app.get('/unread-count', async (c) => {
+  const user = c.req.query('user')
+  if (!user) return c.json({ error: 'user query param required' }, 400)
+
+  const { rows } = await queryOrThrow<{ count: number }>(
+    `SELECT COUNT(*) as count FROM memos_v2
+     WHERE assigned_to = ? AND status = 'open'
+       AND created_at > COALESCE(
+         (SELECT last_memo_seen FROM user_activity WHERE user_name = ?),
+         '2000-01-01'
+       )`,
+    [user, user],
+  )
+  return c.json({ count: rows[0]?.count ?? 0 })
+})
+
+// ── Replies (static routes BEFORE dynamic /:pageId) ──
+
+// GET /replies
+app.get('/replies', async (c) => {
+  const memoIds = c.req.query('memoIds')
+  if (!memoIds) return c.json({ error: 'memoIds query param required' }, 400)
+
+  const ids = memoIds.split(',').map(Number)
+  const placeholders = ids.map(() => '?').join(', ')
+  const { rows } = await queryOrThrow(
+    `SELECT * FROM memo_replies WHERE memo_id IN (${placeholders}) ORDER BY created_at ASC`,
+    ids,
+  )
+  return c.json({ replies: rows })
+})
+
+// POST /replies
+app.post('/replies', async (c) => {
+  const body = await c.req.json<{
+    memoId: number; content: string; createdBy?: string; reviewType?: string
+  }>()
+  const createdBy = c.get('userName') || body.createdBy || 'unknown'
+  const reviewType = body.reviewType || 'comment'
+  const { rowsAffected } = await executeOrThrow(
+    'INSERT INTO memo_replies (memo_id, content, created_by, review_type) VALUES (?, ?, ?, ?)',
+    [body.memoId, body.content, createdBy, reviewType],
+  )
+
+  // Activity log
+  const { logActivity } = await import('../utils/activity.js')
+  await logActivity(createdBy, 'memo_reply', 'memo', body.memoId, body.content?.slice(0, 50) || '')
+
+  // Notify all conversation participants (excluding self)
+  const [memoResult, repliesResult] = await Promise.all([
+    query('SELECT created_by, assigned_to FROM memos_v2 WHERE id = ?', [body.memoId]),
+    query('SELECT DISTINCT created_by FROM memo_replies WHERE memo_id = ?', [body.memoId]),
+  ])
+
+  const participants = new Set<string>()
+  if (memoResult.rows?.length) {
+    const memo = memoResult.rows[0] as { created_by: string; assigned_to: string | null }
+    participants.add(memo.created_by)
+    if (memo.assigned_to) {
+      for (const a of memo.assigned_to.split(',').map(s => s.trim()).filter(Boolean)) {
+        participants.add(a)
+      }
+    }
+  }
+  if (repliesResult.rows?.length) {
+    for (const r of repliesResult.rows as Array<{ created_by: string }>) {
+      participants.add(r.created_by)
+    }
+  }
+  // @mention parsing
+  const membersResult = await query<{ display_name: string }>('SELECT display_name FROM members WHERE is_active = 1')
+  const memberNames = (membersResult.rows ?? []).map(r => r.display_name)
+  for (const name of memberNames) {
+    if (body.content.includes(`@${name}`)) {
+      participants.add(name)
+    }
+  }
+
+  participants.delete(createdBy) // Exclude self
+
+  if (participants.size > 0) {
+    const { notifyByName } = await import('../utils/agent-notify.js')
+    const preview = body.content.length > 50 ? body.content.slice(0, 50) + '...' : body.content
+    for (const p of participants) {
+      await notifyByName(p, `Reply: ${createdBy}`, `Memo #${body.memoId} reply\n${preview}`)
+    }
+  }
+
+  return c.json({ ok: true }, 201)
+})
+
+// DELETE /replies/:id
+app.delete('/replies/:id', async (c) => {
+  const id = Number(c.req.param('id'))
+  const userName = c.get('userName')
+  const { rowsAffected } = await executeOrThrow(
+    'DELETE FROM memo_replies WHERE id = ? AND created_by = ?',
+    [id, userName],
+  )
+  return c.json({ ok: true })
+})
+
+// ── Memos (dynamic /:pageId must come after static routes) ──
+
+// GET /by-id/:id — single memo lookup (for deep links)
+app.get('/by-id/:id', async (c) => {
+  const id = Number(c.req.param('id'))
+  const { rows } = await queryOrThrow('SELECT * FROM memos_v2 WHERE id = ?', [id])
+  return c.json({ memos: rows })
+})
+
+app.get('/:pageId', async (c) => {
+  const pageId = c.req.param('pageId')
+  const { rows } = await queryOrThrow(
+    'SELECT * FROM memos_v2 WHERE page_id = ? ORDER BY created_at DESC',
+    [pageId],
+  )
+  return c.json({ memos: rows })
+})
+
+// POST /
+app.post('/', async (c) => {
+  const body = await c.req.json<{
+    pageId: string; content: string; memoType: string
+    createdBy?: string; assignedTo?: string
+  }>()
+  const createdBy = c.get('userName') || body.createdBy || 'unknown'
+  // [D-XX] tag parsing -> related_decisions
+  const decisionMatches = body.content.match(/\[D-\d+\]/g)
+  const relatedDecisions = decisionMatches ? JSON.stringify([...new Set(decisionMatches.map((m: string) => m.slice(1, -1)))]) : null
+  const title = (body as any).title ?? null
+  const supersedesId = (body as any).supersedesId ?? null
+  const reviewRequired = (body as any).reviewRequired ? 1 : 0
+
+  const { rowsAffected } = await executeOrThrow(
+    'INSERT INTO memos_v2 (page_id, content, memo_type, created_by, assigned_to, related_decisions, title, supersedes_id, review_required) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)',
+    [body.pageId, body.content, body.memoType, createdBy, body.assignedTo ?? null, relatedDecisions, title, supersedesId, reviewRequired],
+  )
+
+  // Notify recipients via webhook
+  if (body.assignedTo) {
+    const { notifyRecipients } = await import('../utils/agent-notify.js')
+    const recipients = body.assignedTo.split(',').map((s: string) => s.trim()).filter(Boolean)
+    const preview = body.content.length > 50 ? body.content.slice(0, 50) + '...' : body.content
+    await notifyRecipients(recipients, `New memo: ${createdBy}`, `${preview}\n\n${body.memoType}`)
+  }
+
+  // Activity log
+  const { logActivity } = await import('../utils/activity.js')
+  await logActivity(createdBy, 'memo_created', 'memo', 'new', body.content?.slice(0, 50) || '')
+
+  return c.json({ ok: true }, 201)
+})
+
+// PATCH /:id/resolve
+app.patch('/:id/resolve', async (c) => {
+  const id = Number(c.req.param('id'))
+  const userName = c.get('userName')
+  const { rowsAffected } = await executeOrThrow(
+    `UPDATE memos_v2 SET status = 'resolved', resolved_by = ?, resolved_at = CURRENT_TIMESTAMP, updated_at = CURRENT_TIMESTAMP WHERE id = ?`,
+    [userName, id],
+  )
+  return c.json({ ok: true })
+})
+
+// PATCH /:id/reopen
+app.patch('/:id/reopen', async (c) => {
+  const id = Number(c.req.param('id'))
+  const { rowsAffected } = await executeOrThrow(
+    `UPDATE memos_v2 SET status = 'open', resolved_by = NULL, resolved_at = NULL, updated_at = CURRENT_TIMESTAMP WHERE id = ?`,
+    [id],
+  )
+  return c.json({ ok: true })
+})
+
+// DELETE /:id
+app.delete('/:id', async (c) => {
+  const id = Number(c.req.param('id'))
+  const userName = c.get('userName')
+  const { rowsAffected } = await executeOrThrow(
+    'DELETE FROM memos_v2 WHERE id = ? AND created_by = ?',
+    [id, userName],
+  )
+  return c.json({ ok: true })
+})
+
+export default app