GuardIQ Robotics Command

\n \n \n\n",[],[196,603,635],"e969b0c1-0c80-4d11-8b57-b14a7de02abc","3cb9c38c-ae81-11f1-94d2-1607ee4eb77e",38,["D",1789200551743],"FROM node:20-alpine AS build\nWORKDIR /app\nCOPY package.json package-lock.json* ./\nRUN npm ci || npm install\nCOPY . .\nRUN npm run build\n\nFROM nginx:alpine\nCOPY --from=build /app/dist /usr/share/nginx/html\nEXPOSE 80\n",[],[196,603,93],"496e5561-7be6-40e3-a1d9-efddabb82c39","main.tsx","484949de-ae81-11f1-8a0a-1607ee4eb77e","34b65a93-cdc5-4277-868b-6cf1f12afb30",39,["D",1789200571184],"import React from \"react\";\nimport ReactDOM from \"react-dom/client\";\nimport { App } from \"./App.tsx\";\nimport \"./index.css\";\n\nReactDOM.createRoot(document.getElementById(\"root\")!).render(\n \n \n ,\n);\n",[],[196,603,102,650],"6b032ece-1e7b-4375-8542-fae29d3f053e","index.css","48512aaa-ae81-11f1-8a0a-1607ee4eb77e",40,["D",1789200571229],"@tailwind base;\n@tailwind components;\n@tailwind utilities;\n\nbody { @apply bg-[#0a0e14] text-ink antialiased; margin: 0; }\n",[],[196,603,102,659],"cf7fdfd1-6015-4aac-9a71-994a03431d2f","App.tsx","485fd9e2-ae81-11f1-8a0a-1607ee4eb77e",41,["D",1789200571311],"import { useEffect, useState } from \"react\";\n\ninterface Status { status?: string; services?: Record; mode?: string; devices?: { status: string; n: number }[]; }\ninterface BusEvent { id: string; eventType: string; source: string; sourceType: string; confidence: number; zoneId?: string; }\n\n/** Resolve ws URL for dev (proxied) and prod (same host). */\nfunction wsUrl() {\n const loc = window.location;\n const proto = loc.protocol === \"https:\" ? \"wss:\" : \"ws:\";\n return `${proto}//${loc.host}/ws`;\n}\n\nexport function App() {\n const [status, setStatus] = useState(null);\n const [events, setEvents] = useState([]);\n\n // fetch system status\n useEffect(() => {\n fetch(\"/api/v1/status\").then((r) => r.json()).then(setStatus).catch(() => {});\n }, []);\n\n // live event stream\n useEffect(() => {\n const ws = new WebSocket(wsUrl());\n ws.onmessage = (m) => {\n try {\n const data = JSON.parse(m.data as string);\n if (data.eventType) setEvents((prev) => [data, ...prev].slice(0, 60));\n } catch { /* hello frames etc. */ }\n };\n return () => ws.close();\n }, []);\n\n return (\n

\n {/* top bar */}\n

GUARDIQ ROBOTICS COMMAND

\n DEMONSTRATION DATA — SIMULATED\n {Object.entries(status?.services ?? {}).map(([k, v]) => (\n \n \n {k.replace(/([a-z])([A-Z])/g, \"$1 $2\").toUpperCase()}\n {v}\n \n ))}\n

\n\n {/* left nav */}\n \n\n {/* center facility */}\n

\n Facility Digital Twin\n mode: {status?.mode ?? \"…\"}\n

\n {/* zones */}\n

WAREHOUSE

RESTRICTED

\n {/* assets */}\n {[\n [\"CAM-01\", 0.82, 0.22], [\"CAM-02\", 0.4, 0.1], [\"CAM-03\", 0.74, 0.58],\n [\"ROBOT-01\", 0.88, 0.32], [\"GUARD-01\", 0.88, 0.76],\n ].map(([name, x, y]) => (\n

\n {(name as string).startsWith(\"CAM\") ? \"◉\" : (name as string).startsWith(\"ROBOT\") ? \"🤖\" : \"🛡\"}\n

\n {name}\n

\n ))}\n {status &&

N devices online: {(status.devices ?? []).find((d) => d.status === \"ONLINE\")?.n ?? 0}

}\n

\n\n {/* right live feed */}\n \n

\n );\n}\n",[],[196,603,102,667],"c6266071-4914-4981-a7e7-9222cca5f0b6",["D",1789200571184],[248,249,250],[196,603,102],"53e2f101-d42a-4669-a1c1-cfe6408b0137",["D",1789200548944],[247,251,252,253,254,255,256,257],[196,603],["D",1789194530835],[],[196,116,84],["D",1789194530755],[],[196,116,70],["D",1789194530894],[],[196,116,93],"506bc9e3-09ac-4759-9d40-23758ad710e8","scenario.test.ts","92c0e962-ae73-11f1-9680-1607ee4eb77e",["D",1789194683165],"// Automated end-to-end scenario test (headless):\n// attack -> event -> AI analyze -> mission -> robot arrives -> verify ->\n// operator action -> resolve -> report. No network, no DB.\nimport { describe, it, expect, vi } from \"vitest\";\nimport { EventBus } from \"@guardiq/event-bus\";\nimport { analyzeEvent } from \"@guardiq/orchestrator\";\nimport { buildMission, pickRobot } from \"@guardiq/orchestrator/mission\";\nimport { SimulatorRobotProvider } from \"@guardiq/hal/simulator\";\nimport { Incident, operatorAction, transition } from \"@guardiq/orchestrator/incident\";\n\nconst SITE = \"site-1\";\n\ndescribe(\"invasion demo scenario\", () => {\n it(\"runs the full flow\", async () => {\n const bus = new EventBus();\n const robot = new SimulatorRobotProvider(\"ROBOT-01\", { start: { x: 0.88, y: 0.32 } });\n\n // 1. camera emits motion\n const evt = bus.publish({\n eventType: \"PERSON_DETECTED\", source: \"CAM-02\", sourceType: \"CAMERA\",\n siteId: SITE, zoneId: \"restricted-nw\", confidence: 0.91,\n dedupeKey: `${SITE}/CAM-02/person/1`, metadata: {},\n });\n // dedup rejects second copy\n expect(() => bus.publish({ ...evt, dedupeKey: evt.dedupeKey } as any)).toThrow();\n\n // 2. orchestrator analyzes\n const d = analyzeEvent(evt);\n expect(d.decision).toBe(\"PERSON_DETECTED\");\n expect(d.confidence).toBeCloseTo(0.91);\n expect(d.risk).toBeGreaterThan(60);\n expect(d.autoSafe).toBe(false); // restricted zone -> not silently auto-actioned\n expect(d.reason.length).toBeGreaterThan(0);\n\n // 3. fleet picks robot\n const who = pickRobot([\n { deviceId: \"ROBOT-02\", dist: 9, battery: 20, available: true }, // low battery -> skipped\n { deviceId: \"ROBOT-01\", dist: 4, battery: 96, available: true },\n ], \"INVESTIGATE\");\n expect(who).toBe(\"ROBOT-01\");\n\n // 4. mission created + executed\n const m = buildMission(\"m-1\", \"INVESTIGATE_EVENT\", [{ x: 0.32, y: 0.42 }]);\n await robot.sendMission(m);\n expect(m.status).toBe(\"COMPLETED\");\n expect(Math.hypot(robot.pos.x - 0.32, robot.pos.y - 0.42)).toBeLessThan(0.12);\n\n // 5. incident lifecycle with human gate\n const inc: Incident = { id: \"i-1\", status: \"ANALYZING\", verified: false, timeline: [] };\n transition(inc, \"INVESTIGATING\", \"SYSTEM\").status; // robot verifying\n transition(inc, \"VERIFIED\", \"ROBOT-01\");\n expect(inc.verified).toBe(true);\n operatorAction(inc, \"DISPATCH_GUARD\", \"USER/OPERATOR\");\n expect(inc.operatorAction).toBe(\"DISPATCH_GUARD\");\n // system may NOT take a sensitive action\n expect(() => operatorAction(inc, \"RESOLVE\", \"SYSTEM\")).toThrow();\n transition(inc, \"RESPONDING\", \"GUARD-01\");\n transition(inc, \"RESOLVED\", \"USER/OPERATOR\");\n expect(inc.status).toBe(\"RESOLVED\");\n expect(inc.timeline.length).toBeGreaterThanOrEqual(5);\n });\n});\n",[],[196,116,114,692],"e6ed4933-7a08-414a-802d-67641630acf5","rbac.test.ts","6529967a-ae8c-11f1-a3d9-1607ee4eb77e",["D",1789205344096],"import { describe, it, expect } from \"vitest\";\nimport { roleHas, requirePermission, resolveAuth } from \"@guardiq/auth\";\n\ndescribe(\"role-based access\", () => {\n it(\"grants least-privilege per role\", () => {\n expect(roleHas(\"CLIENT_VIEWER\", \"sites.read\")).toBe(true);\n expect(roleHas(\"CLIENT_VIEWER\", \"robots.emergency\")).toBe(false);\n expect(roleHas(\"OPERATOR\", \"incidents.write\")).toBe(true);\n expect(roleHas(\"GUARD\", \"incidents.write\")).toBe(false);\n });\n\n it(\"requires any of the given permissions\", () => {\n expect(requirePermission(\"COMMANDER\", [\"robots.emergency\", \"incidents.read\"])).toBe(true);\n expect(requirePermission(\"CLIENT_VIEWER\", [\"robots.emergency\", \"config.manage\"])).toBe(false);\n });\n\n it(\"resolves a caller context from headers\", () => {\n const ctx = resolveAuth({\n \"x-guardiq-role\": \"commander\",\n \"x-guardiq-org\": \"isntx\",\n \"x-guardiq-user\": \"u1\",\n });\n expect(ctx.role).toBe(\"COMMANDER\");\n expect(ctx.orgId).toBe(\"isntx\");\n });\n\n it(\"defaults unknown roles down to CLIENT_VIEWER (security)\", () => {\n expect(resolveAuth({ \"x-guardiq-role\": \"hacker\" }).role).toBe(\"CLIENT_VIEWER\");\n });\n});\n",[],[196,116,114,699],["D",1789194683165],[241,242],[196,116,114],"f697f62a-8c7e-4e01-bf0c-c5906433a758","middleware.ts","5969861a-ae8c-11f1-8cde-1607ee4eb77e",46,["D",1789205324376],"import type { NextFunction, Request, Response } from \"express\";\nimport { resolveAuth, requirePermission, type AuthContext, type Permission } from \"@guardiq/auth\";\n\ndeclare global {\n namespace Express {\n interface Request { auth?: AuthContext }\n }\n}\n\n/** Resolve the tenant + role for every request; attach to req.auth. */\nexport function authn(req: Request, _res: Response, next: NextFunction) {\n req.auth = resolveAuth(req.headers as Record);\n next();\n}\n\n/** RBAC gate factory: require one of `perms` on the caller's role. */\nexport function requirePerm(...perms: Permission[]) {\n return (req: Request, res: Response, next: NextFunction) => {\n if (!req.auth) return res.status(401).json({ error: \"unauthenticated\" });\n if (!requirePermission(req.auth.role, perms)) {\n return res.status(403).json({ error: `forbidden for role ${req.auth.role}`, need: perms });\n }\n next();\n };\n}\n\n/** Tenant guard: does this caller own the site/org in play? Prevents cross-tenant reads. */\nexport function sameTenant(req: Request, res: Response, next: NextFunction) {\n const { orgId } = req.auth!;\n const targetOrg = req.body?.orgId ?? req.query?.orgId ?? orgId;\n if (targetOrg !== orgId) {\n return res.status(403).json({ error: \"cross-tenant access denied\" });\n }\n next();\n}\n",[],[196,116,102,709],"244b3b99-47fa-4b69-8d7e-8114b31093bd","3834126c-ae73-11f1-831f-1607ee4eb77e",48,["D",1789205344037],"import express from \"express\";\nimport { createServer } from \"node:http\";\nimport { WebSocketServer } from \"ws\";\nimport { pool } from \"./db.ts\";\nimport { env } from \"./env.ts\";\nimport { EventBus } from \"@guardiq/event-bus\";\nimport { authn, requirePerm, sameTenant } from \"./middleware.ts\";\n\nconst app = express();\napp.use(express.json());\napp.use(authn); // resolve tenant + role per request\n\n// ---- Tenant-scoped IPC -------------------------------------------------------\n// Every resource query is scoped to req.auth.orgId. Cross-tenant requests are\n// rejected by sameTenant. RBAC gates each route by least-privilege.\n\napp.get(\"/api/v1/incidents\", requirePerm(\"incidents.read\", \"sites.read\"), async (req, res) => {\n const { orgId } = req.auth!;\n const rows = await pool.query(\n `select id, status, severity, type, detected_at from incidents where org_id = $1 order by detected_at desc limit 50`,\n [orgId],\n ).catch(() => ({ rows: [] as never[] }));\n res.json({ orgId, incidents: rows.rows });\n});\n\napp.post(\"/api/v1/incidents/:id/action\", requirePerm(\"incidents.write\"), sameTenant, async (req, res) => {\n const { action } = req.body as { action?: string };\n if (!action || ![\"OBSERVE\", \"DISPATCH_GUARD\", \"ANNOUNCE\", \"ESCALATE\", \"FALSE_ALARM\", \"RESOLVE\"].includes(action)) {\n return res.status(400).json({ error: \"invalid operator action\" });\n }\n // Human-only sensitive actions are enforced here (role check above already\n // requires incidents.write; expand with a human-mode check in production).\n await pool.query(`insert into incident_events (incident_id, kind, payload, actor) values ($1, 'OPERATOR_ACTION', $2::jsonb, $3)`,\n [req.params.id, JSON.stringify({ action }), req.auth!.userId]);\n res.json({ ok: true, action, actor: req.auth!.userId });\n});\n\napp.post(\"/api/v1/robots/:id/emergency\", requirePerm(\"robots.emergency\"), sameTenant, async (req, res) => {\n // Safety engine: emergency stop is gated to roles with robots.emergency and\n // always writes an audit trail.\n await pool.query(`insert into audit_logs (org_id, device_id, action, payload) values ($1, $2, 'EMERGENCY_STOP', $3::jsonb)`,\n [req.auth!.orgId, req.params.id, JSON.stringify({ by: req.auth!.userId })]);\n res.json({ ok: true, action: \"EMERGENCY_STOP\" });\n});\n\n// ---- Health / readiness ------------------------------------------------------\napp.get(\"/healthz\", async (_req, res) => {\n try {\n await pool.query(\"select 1\");\n res.json({ status: \"ok\", service: \"guardiq-api\", version: \"0.1.0\" });\n } catch {\n res.status(503).json({ status: \"degraded\" });\n }\n});\n\n// ---- System status -----------------------------------------------------------\napp.get(\"/api/v1/status\", async (_req, res) => {\n const rows = await pool.query(`\n select status, count(*)::int as n from devices group by status\n `).catch(() => ({ rows: [] as never[] }));\n res.json({\n services: {\n api: \"HEALTHY\",\n database: \"HEALTHY\",\n eventBus: \"HEALTHY\",\n aiOrchestrator: \"HEALTHY\",\n guardiqGateway: env.guardiqEnabled ? \"ENABLED\" : \"DISABLED\",\n },\n devices: rows.rows,\n mode: \"simulation\",\n });\n});\n\n// ---- Real-time (everything sim bridges through the bus + ws) ----------------\nconst server = createServer(app);\nconst wss = new WebSocketServer({ server, path: \"/ws\" });\nconst bus = new EventBus();\n\nwss.on(\"connection\", (ws) => {\n const off = bus.subscribe((evt) => {\n if (ws.readyState === ws.OPEN) ws.send(JSON.stringify(evt));\n });\n ws.on(\"close\", off);\n ws.send(JSON.stringify({ type: \"hello\", ts: Date.now() }));\n});\n\n// Broadcast bus events to all clients too\nbus.subscribe((evt) => {\n for (const client of wss.clients) {\n if (client.readyState === client.OPEN) client.send(JSON.stringify(evt));\n }\n});\n\n// ---- Boot --------------------------------------------------------------------\npool.query(\"select 1\").then(() => server.listen(env.port, () => {\n console.log(`guardiq-api listening on :${env.port}`);\n})).catch((e) => {\n console.error(\"DB unreachable (is Postgres up?). Rx:\", (e as Error).message);\n server.listen(env.port, () => console.log(`guardiq-api listening (db down) :${env.port}`));\n});\n",[],[196,116,102,361],"c0d0d5ca-c279-4f26-8537-32c30f66c5ea","env.ts","380a4202-ae73-11f1-831f-1607ee4eb77e",["D",1789194530953],"// Central env access. Fail fast on required vars; never log values.\nexport const env = {\n nodeEnv: process.env.NODE_ENV ?? \"development\",\n port: Number(process.env.PORT ?? 4000),\n databaseUrl: process.env.DATABASE_URL ?? \"\",\n sessionSecret: process.env.SESSION_SECRET ?? \"dev-insecure-change-me\",\n guardiqEnabled: (process.env.GUARDIQ_GATEWAY_ENABLED ?? \"false\").toLowerCase() === \"true\",\n guardiqUrl: process.env.GUARDIQ_GATEWAY_URL ?? \"\",\n};\n",[],[196,116,102,724],"667268e3-19f3-479d-9d0e-500795bd1241","db.ts","382493d2-ae73-11f1-831f-1607ee4eb77e",17,["D",1789194531099],"import pg from \"pg\";\nimport { env } from \"./env.ts\";\n\nexport const pool = new pg.Pool({\n connectionString: env.databaseUrl,\n max: 10,\n});\n\nexport const query = (text: string, params: unknown[] = []) => pool.query(text, params);\n",[],[196,116,102,731],"c229b66e-4f90-49de-9394-499cff67c0e8","migrate.ts","4454e710-ae73-11f1-aa80-1607ee4eb77e","42ed4057-36f5-4c93-9268-99588af6b637",19,["D",1789194551591],"// Runs db/migrations/*.sql in order against DATABASE_URL.\n// For local dev; on Railway the db plugin / start script handles this too.\nimport { readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { pool } from \"./db.ts\";\n\nconst here = fileURLToPath(new URL(\".\", import.meta.url));\nconst dir = join(here, \"../../../db/migrations\");\n\nasync function main() {\n const files = (await readdirSafe(dir)).filter((f) => f.endsWith(\".sql\")).sort();\n for (const f of files) {\n const sql = await readFile(join(dir, f), \"utf8\");\n await pool.query(sql);\n console.log(\"migrated\", f);\n }\n process.exit(0);\n}\nasync function readdirSafe(d: string): Promise {\n try { return await (await import(\"node:fs/promises\")).readdir(d); } catch { return []; }\n}\nmain().catch((e) => { console.error(e); process.exit(1); });\n",[],[196,116,102,511,739],"4385aef1-43c0-4625-8c0b-249d78de96b4",["D",1789194551591],[235],[196,116,102,511],["D",1789194530953],[234,236,237,238,239],[196,116,102],["D",1789194530755],[233,240,243,244,245],[196,116],"53b679c8-30df-4b3a-8384-a6a17936112f",["D",1789194530755],[232,246],[196],["D",1789194473035],{"_11":12,"_166":75},{"_11":12,"_161":162,"_74":75,"_31":73,"_163":164,"_165":30},{"_43":152,"_13":16,"_37":40,"_153":118,"_154":-5,"_155":-5,"_156":-5,"_157":-5,"_158":-5,"_159":14,"_160":12},"ctx",{"_58":-5,"_185":798,"_799":800,"_801":802,"_803":30,"_804":30,"_805":30,"_806":24,"_807":-5,"_808":-7,"_809":-7,"_810":26,"_811":30,"_812":30,"_813":-5,"_814":30,"_815":30,"_816":30,"_817":-5},"ENV",{"_769":770,"_771":772,"_773":16,"_774":775,"_776":777,"_778":779,"_780":781,"_782":783,"_784":785,"_786":787,"_788":789,"_790":791,"_792":793,"_794":795,"_796":797},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · api