GuardIQ Robotics Command

\n \n \n\n",[],[166,562,595],"e969b0c1-0c80-4d11-8b57-b14a7de02abc","Dockerfile","3cb9c38c-ae81-11f1-94d2-1607ee4eb77e",38,["D",1789200551743],"FROM node:20-alpine AS build\nWORKDIR /app\nCOPY package.json package-lock.json* ./\nRUN npm ci || npm install\nCOPY . .\nRUN npm run build\n\nFROM nginx:alpine\nCOPY --from=build /app/dist /usr/share/nginx/html\nEXPOSE 80\n",[],[166,562,603],"496e5561-7be6-40e3-a1d9-efddabb82c39","main.tsx","484949de-ae81-11f1-8a0a-1607ee4eb77e","34b65a93-cdc5-4277-868b-6cf1f12afb30",39,["D",1789200571184],"import React from \"react\";\nimport ReactDOM from \"react-dom/client\";\nimport { App } from \"./App.tsx\";\nimport \"./index.css\";\n\nReactDOM.createRoot(document.getElementById(\"root\")!).render(\n \n \n ,\n);\n",[],[166,562,318,611],"6b032ece-1e7b-4375-8542-fae29d3f053e","index.css","48512aaa-ae81-11f1-8a0a-1607ee4eb77e",40,["D",1789200571229],"@tailwind base;\n@tailwind components;\n@tailwind utilities;\n\nbody { @apply bg-[#0a0e14] text-ink antialiased; margin: 0; }\n",[],[166,562,318,620],"cf7fdfd1-6015-4aac-9a71-994a03431d2f","App.tsx","485fd9e2-ae81-11f1-8a0a-1607ee4eb77e",41,["D",1789200571311],"import { useEffect, useState } from \"react\";\n\ninterface Status { status?: string; services?: Record; mode?: string; devices?: { status: string; n: number }[]; }\ninterface BusEvent { id: string; eventType: string; source: string; sourceType: string; confidence: number; zoneId?: string; }\n\n/** Resolve ws URL for dev (proxied) and prod (same host). */\nfunction wsUrl() {\n const loc = window.location;\n const proto = loc.protocol === \"https:\" ? \"wss:\" : \"ws:\";\n return `${proto}//${loc.host}/ws`;\n}\n\nexport function App() {\n const [status, setStatus] = useState(null);\n const [events, setEvents] = useState([]);\n\n // fetch system status\n useEffect(() => {\n fetch(\"/api/v1/status\").then((r) => r.json()).then(setStatus).catch(() => {});\n }, []);\n\n // live event stream\n useEffect(() => {\n const ws = new WebSocket(wsUrl());\n ws.onmessage = (m) => {\n try {\n const data = JSON.parse(m.data as string);\n if (data.eventType) setEvents((prev) => [data, ...prev].slice(0, 60));\n } catch { /* hello frames etc. */ }\n };\n return () => ws.close();\n }, []);\n\n return (\n

\n {/* top bar */}\n

GUARDIQ ROBOTICS COMMAND

\n DEMONSTRATION DATA — SIMULATED\n {Object.entries(status?.services ?? {}).map(([k, v]) => (\n \n \n {k.replace(/([a-z])([A-Z])/g, \"$1 $2\").toUpperCase()}\n {v}\n \n ))}\n

\n\n {/* left nav */}\n \n\n {/* center facility */}\n

\n Facility Digital Twin\n mode: {status?.mode ?? \"…\"}\n

\n {/* zones */}\n

WAREHOUSE

RESTRICTED

\n {/* assets */}\n {[\n [\"CAM-01\", 0.82, 0.22], [\"CAM-02\", 0.4, 0.1], [\"CAM-03\", 0.74, 0.58],\n [\"ROBOT-01\", 0.88, 0.32], [\"GUARD-01\", 0.88, 0.76],\n ].map(([name, x, y]) => (\n

\n {(name as string).startsWith(\"CAM\") ? \"◉\" : (name as string).startsWith(\"ROBOT\") ? \"🤖\" : \"🛡\"}\n

\n {name}\n

\n ))}\n {status &&

N devices online: {(status.devices ?? []).find((d) => d.status === \"ONLINE\")?.n ?? 0}

}\n

\n\n {/* right live feed */}\n \n

\n );\n}\n",[],[166,562,318,628],"c6266071-4914-4981-a7e7-9222cca5f0b6",["D",1789200571184],[206,207,208],[166,562,318],"53e2f101-d42a-4669-a1c1-cfe6408b0137","d400e917-22dc-49af-a027-ceb67fd9fc0d",["D",1789200548944],[205,209,210,211,212,213,214,215],[166,562],"7a8accb2-c882-42a5-b631-9645d6cf2a3d","37f635be-ae73-11f1-831f-1607ee4eb77e",14,["D",1789194530835],"{\n \"compilerOptions\": {\n \"target\": \"ES2022\",\n \"module\": \"ESNext\",\n \"moduleResolution\": \"bundler\",\n \"outDir\": \"dist\",\n \"rootDir\": \"src\",\n \"strict\": true,\n \"esModuleInterop\": true,\n \"skipLibCheck\": true,\n \"types\": [\"node\"]\n },\n \"include\": [\"src\"]\n}\n",[],[166,167,564],"350ed730-2336-41ec-9b30-ce60d6f92875","37ec5562-ae73-11f1-831f-1607ee4eb77e",13,["D",1789194530755],"{\n \"name\": \"@guardiq/api\",\n \"version\": \"0.1.0\",\n \"private\": true,\n \"type\": \"module\",\n \"scripts\": {\n \"dev\": \"tsx watch src/index.ts\",\n \"build\": \"tsc -p tsconfig.json\",\n \"start\": \"node dist/index.js\",\n \"migrate\": \"tsx src/db/migrate.ts\",\n \"test\": \"vitest run\"\n },\n \"dependencies\": {\n \"express\": \"^4.19.0\",\n \"pg\": \"^8.11.0\",\n \"ws\": \"^8.17.0\"\n },\n \"devDependencies\": {\n \"@types/express\": \"^4.17.0\",\n \"@types/node\": \"^20.11.0\",\n \"@types/pg\": \"^8.11.0\",\n \"@types/ws\": \"^8.5.0\",\n \"tsx\": \"^4.7.0\",\n \"typescript\": \"^5.4.0\",\n \"vitest\": \"^1.4.0\"\n }\n}\n",[],[166,167,259],"27991045-15ee-4e1d-8d7e-d164ca593d1a","37feb0ea-ae73-11f1-831f-1607ee4eb77e",15,["D",1789194530894],"FROM node:20-alpine AS build\nWORKDIR /app\nCOPY package.json package-lock.json* ./\nRUN npm ci || npm install\nCOPY . .\nRUN npm run build\n\nFROM node:20-alpine\nWORKDIR /app\nENV NODE_ENV=production\nCOPY package.json package-lock.json* ./\nRUN npm ci --omit=dev || npm install --omit=dev\nCOPY --from=build /app/dist ./dist\nCOPY db/ ../../db/\nEXPOSE 4000\nCMD [\"node\", \"dist/index.js\"]\n",[],[166,167,603],["D",1789194683165],[],[166,167,86,67],["D",1789205344096],[],[166,167,86,84],["D",1789194683165],[199,200],[166,167,86],"f697f62a-8c7e-4e01-bf0c-c5906433a758","middleware.ts","5969861a-ae8c-11f1-8cde-1607ee4eb77e","abd72c0c-905a-46a9-a02a-65b5d1db892a",46,["D",1789205324376],"import type { NextFunction, Request, Response } from \"express\";\nimport { resolveAuth, requirePermission, type AuthContext, type Permission } from \"@guardiq/auth\";\n\ndeclare global {\n namespace Express {\n interface Request { auth?: AuthContext }\n }\n}\n\n/** Resolve the tenant + role for every request; attach to req.auth. */\nexport function authn(req: Request, _res: Response, next: NextFunction) {\n req.auth = resolveAuth(req.headers as Record);\n next();\n}\n\n/** RBAC gate factory: require one of `perms` on the caller's role. */\nexport function requirePerm(...perms: Permission[]) {\n return (req: Request, res: Response, next: NextFunction) => {\n if (!req.auth) return res.status(401).json({ error: \"unauthenticated\" });\n if (!requirePermission(req.auth.role, perms)) {\n return res.status(403).json({ error: `forbidden for role ${req.auth.role}`, need: perms });\n }\n next();\n };\n}\n\n/** Tenant guard: does this caller own the site/org in play? Prevents cross-tenant reads. */\nexport function sameTenant(req: Request, res: Response, next: NextFunction) {\n const { orgId } = req.auth!;\n const targetOrg = req.body?.orgId ?? req.query?.orgId ?? orgId;\n if (targetOrg !== orgId) {\n return res.status(403).json({ error: \"cross-tenant access denied\" });\n }\n next();\n}\n",[],[166,167,318,675],"244b3b99-47fa-4b69-8d7e-8114b31093bd","3834126c-ae73-11f1-831f-1607ee4eb77e",48,["D",1789205344037],"import express from \"express\";\nimport { createServer } from \"node:http\";\nimport { WebSocketServer } from \"ws\";\nimport { pool } from \"./db.ts\";\nimport { env } from \"./env.ts\";\nimport { EventBus } from \"@guardiq/event-bus\";\nimport { authn, requirePerm, sameTenant } from \"./middleware.ts\";\n\nconst app = express();\napp.use(express.json());\napp.use(authn); // resolve tenant + role per request\n\n// ---- Tenant-scoped IPC -------------------------------------------------------\n// Every resource query is scoped to req.auth.orgId. Cross-tenant requests are\n// rejected by sameTenant. RBAC gates each route by least-privilege.\n\napp.get(\"/api/v1/incidents\", requirePerm(\"incidents.read\", \"sites.read\"), async (req, res) => {\n const { orgId } = req.auth!;\n const rows = await pool.query(\n `select id, status, severity, type, detected_at from incidents where org_id = $1 order by detected_at desc limit 50`,\n [orgId],\n ).catch(() => ({ rows: [] as never[] }));\n res.json({ orgId, incidents: rows.rows });\n});\n\napp.post(\"/api/v1/incidents/:id/action\", requirePerm(\"incidents.write\"), sameTenant, async (req, res) => {\n const { action } = req.body as { action?: string };\n if (!action || ![\"OBSERVE\", \"DISPATCH_GUARD\", \"ANNOUNCE\", \"ESCALATE\", \"FALSE_ALARM\", \"RESOLVE\"].includes(action)) {\n return res.status(400).json({ error: \"invalid operator action\" });\n }\n // Human-only sensitive actions are enforced here (role check above already\n // requires incidents.write; expand with a human-mode check in production).\n await pool.query(`insert into incident_events (incident_id, kind, payload, actor) values ($1, 'OPERATOR_ACTION', $2::jsonb, $3)`,\n [req.params.id, JSON.stringify({ action }), req.auth!.userId]);\n res.json({ ok: true, action, actor: req.auth!.userId });\n});\n\napp.post(\"/api/v1/robots/:id/emergency\", requirePerm(\"robots.emergency\"), sameTenant, async (req, res) => {\n // Safety engine: emergency stop is gated to roles with robots.emergency and\n // always writes an audit trail.\n await pool.query(`insert into audit_logs (org_id, device_id, action, payload) values ($1, $2, 'EMERGENCY_STOP', $3::jsonb)`,\n [req.auth!.orgId, req.params.id, JSON.stringify({ by: req.auth!.userId })]);\n res.json({ ok: true, action: \"EMERGENCY_STOP\" });\n});\n\n// ---- Health / readiness ------------------------------------------------------\napp.get(\"/healthz\", async (_req, res) => {\n try {\n await pool.query(\"select 1\");\n res.json({ status: \"ok\", service: \"guardiq-api\", version: \"0.1.0\" });\n } catch {\n res.status(503).json({ status: \"degraded\" });\n }\n});\n\n// ---- System status -----------------------------------------------------------\napp.get(\"/api/v1/status\", async (_req, res) => {\n const rows = await pool.query(`\n select status, count(*)::int as n from devices group by status\n `).catch(() => ({ rows: [] as never[] }));\n res.json({\n services: {\n api: \"HEALTHY\",\n database: \"HEALTHY\",\n eventBus: \"HEALTHY\",\n aiOrchestrator: \"HEALTHY\",\n guardiqGateway: env.guardiqEnabled ? \"ENABLED\" : \"DISABLED\",\n },\n devices: rows.rows,\n mode: \"simulation\",\n });\n});\n\n// ---- Real-time (everything sim bridges through the bus + ws) ----------------\nconst server = createServer(app);\nconst wss = new WebSocketServer({ server, path: \"/ws\" });\nconst bus = new EventBus();\n\nwss.on(\"connection\", (ws) => {\n const off = bus.subscribe((evt) => {\n if (ws.readyState === ws.OPEN) ws.send(JSON.stringify(evt));\n });\n ws.on(\"close\", off);\n ws.send(JSON.stringify({ type: \"hello\", ts: Date.now() }));\n});\n\n// Broadcast bus events to all clients too\nbus.subscribe((evt) => {\n for (const client of wss.clients) {\n if (client.readyState === client.OPEN) client.send(JSON.stringify(evt));\n }\n});\n\n// ---- Boot --------------------------------------------------------------------\npool.query(\"select 1\").then(() => server.listen(env.port, () => {\n console.log(`guardiq-api listening on :${env.port}`);\n})).catch((e) => {\n console.error(\"DB unreachable (is Postgres up?). Rx:\", (e as Error).message);\n server.listen(env.port, () => console.log(`guardiq-api listening (db down) :${env.port}`));\n});\n",[],[166,167,318,320],"c0d0d5ca-c279-4f26-8537-32c30f66c5ea","env.ts","380a4202-ae73-11f1-831f-1607ee4eb77e",16,["D",1789194530953],"// Central env access. Fail fast on required vars; never log values.\nexport const env = {\n nodeEnv: process.env.NODE_ENV ?? \"development\",\n port: Number(process.env.PORT ?? 4000),\n databaseUrl: process.env.DATABASE_URL ?? \"\",\n sessionSecret: process.env.SESSION_SECRET ?? \"dev-insecure-change-me\",\n guardiqEnabled: (process.env.GUARDIQ_GATEWAY_ENABLED ?? \"false\").toLowerCase() === \"true\",\n guardiqUrl: process.env.GUARDIQ_GATEWAY_URL ?? \"\",\n};\n",[],[166,167,318,691],"667268e3-19f3-479d-9d0e-500795bd1241","db.ts","382493d2-ae73-11f1-831f-1607ee4eb77e",17,["D",1789194531099],"import pg from \"pg\";\nimport { env } from \"./env.ts\";\n\nexport const pool = new pg.Pool({\n connectionString: env.databaseUrl,\n max: 10,\n});\n\nexport const query = (text: string, params: unknown[] = []) => pool.query(text, params);\n",[],[166,167,318,699],"c229b66e-4f90-49de-9394-499cff67c0e8","migrate.ts","4454e710-ae73-11f1-aa80-1607ee4eb77e","42ed4057-36f5-4c93-9268-99588af6b637",19,["D",1789194551591],"// Runs db/migrations/*.sql in order against DATABASE_URL.\n// For local dev; on Railway the db plugin / start script handles this too.\nimport { readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { pool } from \"./db.ts\";\n\nconst here = fileURLToPath(new URL(\".\", import.meta.url));\nconst dir = join(here, \"../../../db/migrations\");\n\nasync function main() {\n const files = (await readdirSafe(dir)).filter((f) => f.endsWith(\".sql\")).sort();\n for (const f of files) {\n const sql = await readFile(join(dir, f), \"utf8\");\n await pool.query(sql);\n console.log(\"migrated\", f);\n }\n process.exit(0);\n}\nasync function readdirSafe(d: string): Promise {\n try { return await (await import(\"node:fs/promises\")).readdir(d); } catch { return []; }\n}\nmain().catch((e) => { console.error(e); process.exit(1); });\n",[],[166,167,318,470,707],"4385aef1-43c0-4625-8c0b-249d78de96b4",["D",1789194551591],[193],[166,167,318,470],"2438421b-eab1-4389-b8b4-489931c3c2e9",["D",1789194530953],[192,194,195,196,197],[166,167,318],"dc2c007a-a7f7-4b75-8c46-b9c5dc95eba3",["D",1789194530755],[191,198,201,202,203],[166,167],"53b679c8-30df-4b3a-8384-a6a17936112f",["D",1789194530755],[190,204],[166],["D",1789194473035],{"_11":12,"_136":73},{"_11":12,"_131":132,"_72":73,"_31":71,"_133":134,"_135":30},{"_40":76,"_13":16,"_34":37,"_123":89,"_124":-5,"_125":-5,"_126":-5,"_127":-5,"_128":-5,"_129":14,"_130":12},"ctx",{"_55":-5,"_155":768,"_769":770,"_771":772,"_773":30,"_774":30,"_775":30,"_776":24,"_777":-5,"_778":-7,"_779":-7,"_780":26,"_781":30,"_782":30,"_783":-5,"_784":30,"_785":30,"_786":30,"_787":-5},"ENV",{"_739":740,"_741":742,"_743":16,"_744":745,"_746":747,"_748":749,"_750":751,"_752":753,"_754":755,"_756":757,"_758":759,"_760":761,"_762":763,"_764":765,"_766":767},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · tests