[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_450":451,"_452":453},"routes/_app.x.$handle.$name",{"_107":106,"_38":57,"_116":97,"_33":117,"_13":14,"_118":-5,"_11":119,"_120":121,"_122":123,"_124":125,"_126":127,"_27":-5,"_128":-5,"_129":-5,"_130":31,"_131":132,"_133":31,"_134":-5,"_135":-5,"_136":137},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_55":56,"_38":57,"_44":58,"_59":-5,"_60":31,"_61":62,"_63":62,"_64":65,"_66":-5,"_19":67,"_68":-5,"_69":31,"_70":-5,"_71":-5,"_72":73,"_74":75,"_76":-5,"_77":-5,"_78":-5,"_79":-5,"_80":81,"_82":81,"_83":84,"_85":84,"_86":84,"_87":81,"_88":81,"_89":90,"_91":92,"_93":94,"_95":31},"version",21,"changes",[25,26],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","0f16f7af-6700-4f48-b084-628e2d1a20c8","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_27":49,"_29":-7,"_30":31,"_32":31,"_33":50,"_35":50},{"_27":28,"_29":-7,"_30":31,"_32":31,"_33":34,"_35":34},"file",{"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":14,"_47":48,"_30":31},"previous","deleted",false,"deletedHere","path","packages/hal/src/index.ts","latestPath","fileId","4469bd34-ae73-11f1-aa80-1607ee4eb77e","name","index.ts","fileType","script","content","// Hardware Abstraction Layer — the contract every robot vendor adapter obeys.\n//\n// Business logic NEVER imports a vendor SDK. It talks to RobotProvider, and a\n// factory maps device.provider -> adapter. Adding a vendor = new adapter, not a\n// rewrite. (Spot / Unitree / Agility / Figure / Apptronik / 1X adapters are\n// future work — none are wired here.)\n\nexport type RobotState =\n | \"IDLE\" | \"PATROL\" | \"INVESTIGATE\" | \"OBSERVE\" | \"ESCORT\"\n | \"RETURN_TO_DOCK\" | \"CHARGING\" | \"OFFLINE\" | \"FAULT\" | \"EMERGENCY_STOP\";\n\nexport type MissionType =\n | \"PATROL_ZONE\" | \"INVESTIGATE_EVENT\" | \"OBSERVE_LOCATION\"\n | \"CHECK_PERIMETER\" | \"VERIFY_DOOR\" | \"RETURN_TO_DOCK\";\n\nexport type MissionStatus =\n | \"CREATED\" | \"QUEUED\" | \"ASSIGNED\" | \"EN_ROUTE\" | \"ON_SCENE\"\n | \"COMPLETED\" | \"FAILED\" | \"CANCELLED\";\n\nexport interface Position { x: number; y: number; }\n\nexport interface Telemetry {\n position: Position;\n heading: number; // degrees\n speed: number; // m/s\n battery: number; // percent\n connection: \"ONLINE\" | \"OFFLINE\" | \"DEGRADED\";\n mission: string | null;\n camera: \"STREAMING\" | \"IDLE\" | \"OFF\";\n temperature: number; // C\n signalStrength: number; // percent\n lastHeartbeat: number; // epoch ms\n}\n\nexport interface Mission {\n id: string;\n type: MissionType;\n status: MissionStatus;\n waypoints: Position[];\n createdAt: number;\n}\n\nexport interface RobotProvider {\n readonly vendor: string;\n connect(): Promise;\n disconnect(): Promise;\n getTelemetry(): Promise;\n sendMission(m: Mission): Promise;\n cancelMission(m: Mission): Promise;\n returnToDock(): Promise;\n emergencyStop(): Promise;\n}\n\n/** Registry: provider id -> adapter constructor. Simulator is first. */\nexport type ProviderFactory = (deviceId: string, opts?: Record) => RobotProvider;\nexport function makeRegistry(map: Record) {\n return {\n get(id: string, deviceId: string): RobotProvider {\n const f = map[id];\n if (!f) throw new Error(`unknown provider adapter: \"${id}\"`);\n return f(deviceId);\n },\n };\n}\n","createdAt",["D",1789194551726],"branchVersion","branchId","2fec3878-26a7-4bae-a15d-ace775b2d642",{"_36":51,"_38":52,"_40":53,"_42":-5,"_44":54,"_46":14,"_47":48,"_30":31},"packages/hal/src","10762c49-4fac-4d93-bec9-57cd8548a17a","src","directory",["D",1789194551726],"id","db1b462e-d75b-4e72-ad79-c2a3a45673c8","guardiq-platform",["D",1789194473035],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","GuardIQ platform — staging repo + Obsidian context vault","imageUrl","87827f52-809f-4c8c-82fd-cce5c85d6470","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a09439-0fa1-765a-b133-877a1dbbdae8","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_107":106,"_115":111},"org",{"_107":106,"_108":109,"_110":111,"_19":67,"_112":113,"_114":31},"branch",{"_13":96,"_38":97,"_55":48,"_98":56,"_99":-5,"_100":-5,"_101":-5,"_102":-5,"_103":-5,"_104":57,"_105":106},"isOwned",49,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","brandonschoelkoph","handle","displayName","Brandon Schoelkoph","avatar","https://lh3.googleusercontent.com/a/ACg8ocL_nGI6cWAuFF3QdGYr09skIboOCarbJkURw78yoFABEesnKSS2=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_55":56,"_38":57,"_44":446,"_59":-5,"_60":31,"_61":62,"_63":62,"_64":65,"_66":-5,"_19":67,"_68":-5,"_69":31,"_70":-5,"_71":-5,"_72":73,"_74":75,"_76":-5,"_77":-5,"_78":-5,"_79":-5,"_80":81,"_82":81,"_83":84,"_85":84,"_86":84,"_87":81,"_88":81,"_89":447,"_91":448,"_93":449,"_95":31},"tree",[211,222,231,235,237,242,243,244],"files",[211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244],"counts",{"_201":73,"_202":192,"_203":73,"_204":205,"_206":207},"contents",[138,139,140,141,142,143,144,145],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_55":195,"_38":196,"_36":197,"_149":-5,"_47":48,"_46":198,"_151":152,"_44":199,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_33":200},{"_55":189,"_38":190,"_36":191,"_149":-5,"_47":48,"_46":192,"_151":152,"_44":193,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_33":194},{"_55":183,"_38":184,"_36":185,"_149":-5,"_47":48,"_46":186,"_151":152,"_44":187,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_33":188},{"_55":177,"_38":178,"_36":179,"_149":-5,"_47":48,"_46":180,"_151":152,"_44":181,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_33":182},{"_55":171,"_38":172,"_36":173,"_149":-5,"_47":48,"_46":174,"_151":152,"_44":175,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_33":176},{"_55":164,"_38":165,"_36":166,"_149":-5,"_47":48,"_46":167,"_151":152,"_44":168,"_13":73,"_40":27,"_42":169,"_30":31,"_155":-5,"_33":170},{"_55":157,"_38":158,"_36":159,"_149":-5,"_47":48,"_46":160,"_151":152,"_44":161,"_13":73,"_40":27,"_42":162,"_30":31,"_155":-5,"_33":163},{"_55":146,"_38":147,"_36":148,"_149":-5,"_47":48,"_46":150,"_151":152,"_44":153,"_13":73,"_40":27,"_42":154,"_30":31,"_155":-5,"_33":156},"93d53b45-c58a-49b6-bb83-f72d5490691c","README.md","2eef1922-ae73-11f1-9c96-1607ee4eb77e","parentId",7,"latest",true,["D",1789194515688],"# GuardIQ Robotics Command — Platform (Railway)\n\nThe production multi-tenant security-orchestration platform. This repo deploys\nto **Railway** (PostgreSQL + Node/TypeScript + WebSockets). The investor demo\nlives separately in the `guardiq-command` Val Town val.\n\n> **Status: scaffold.** Repo structure, schema, and build pipeline exist. The\n> domain modules (HAL, event bus, orchestrator agents, RBAC, incident\n> workflow) are being developed in phases. Everything is a simulator — no real\n> hardware or GuardIQ connection is claimed.\n\n## Layout\n\n```\napps/\n api/ Node + TypeScript backend (HTTP + WebSockets)\n web/ React + Vite + Tailwind frontend\ndb/ SQL migrations + seeded demo data\npackages/ shared libs (types, HAL abstractions, event bus)\ncontext/ Obsidian knowledge vault (open in Obsidian)\ninfra/ Dockerfiles, railway.toml\n```\n\n## Run locally\n\n```bash\n# needs: docker compose (or local Postgres), node 20+\nexport DATABASE_URL=postgres://guard:guard@localhost:5432/guardiq\n\ndocker compose up -d db # start Postgres\ncd apps/api && npm i && npm run migrate && npm run dev\n\ncd apps/web && npm i && npm run dev # separate terminal\n```\n\n## Deploy to Railway (first time)\n\n1. Push this repo to GitHub.\n2. Railway → **New Project → Deploy from GitHub →** select the repo.\n3. Railway auto-detects `infra/railway.toml` (services: `api`, `web`, `db`).\n4. For the `db` service, Railway Proves managed Postgres; set the `api` env\n `DATABASE_URL` to its connection string.\n5. `db` plugin runs `db/*.sql` on start (or run `npm run migrate` in api).\n6. Railway gives each service a **.up.railway.app** URL.\n\nSee `context/notes/300-deployment.md` for the full walkthrough.\n\n## Roadmap (phases)\n\nPhase 0 standalone simulator → 1 investor demo → 2 camera → 3 trailer →\n4 ground robot → 5 GuardIQ gateway → 6 multi-site → 7 humanoid → 8 autonomous ops.\n","label",[147],"fd102bde-2927-448e-811c-c5ca51103d8d",".gitignore","2ef8530c-ae73-11f1-9c96-1607ee4eb77e",8,["D",1789194515756],"node_modules/\ndist/\nbuild/\n.env\n.env.*\n!.env.example\n*.local\n.DS_Store\ncoverage/\n.obsidian/workspace.json\n.obsidian/cache\n",[158],"805e5694-6cb0-4059-a561-ec8a6a0cce41",".env.example","2f012036-ae73-11f1-9c96-1607ee4eb77e",9,["D",1789194515811],"# GuardIQ Platform — environment template\n# Never commit real secrets. Railways, Railway variables override these.\n\nNODE_ENV=development\nPORT=4000\nDATABASE_URL=postgres://guard:guard@localhost:5432/guardiq\n\n# Auth\nSESSION_SECRET=change-me\n# Comma-separated issuer list allowed by JWT verification:\nAUTH_ISSUER=https://guardiq.up.railway.app\n\n# Optional live integrations (leave blank to stay isolated/simulated)\nCONTEXT7_API_KEY=\nEXA_API_KEY=\nGUARDIQ_GATEWAY_URL=\nGUARDIQ_GATEWAY_ENABLED=false\n",[165],"028adbb5-ba8a-440a-8a44-edceb9e88b5a","packages","172cd9d8-1b2f-4a0d-a388-a4396a20e24a",20,["D",1789194551656],[172],"b97e2c5e-4650-4495-b03a-76e0295c7b90","infra","b44ebea9-7bdb-4190-bb47-6c2b0effdb48",10,["D",1789194515912],[178],"e715ac57-9e7a-4cc4-a3a0-e2cdfdb591b4","db","f7a4fc25-cb73-4cef-bd2e-2a7dd82112e8",11,["D",1789194516022],[184],"003621d4-5290-44d2-b97b-9fd787159ebe","context","8d6cb79e-d3f2-4c3d-b66d-cf6c88ce820c",1,["D",1789194490537],[190],"53b679c8-30df-4b3a-8384-a6a17936112f","apps","d400e917-22dc-49af-a027-ceb67fd9fc0d",13,["D",1789194530755],[196],"pulls","branches","forks","envVars",{"_208":73,"_210":73},"connections",{"_208":73,"_209":73},"count","unfilledCount","emptyCount",{"_55":195,"_38":196,"_36":197,"_149":-5,"_47":48,"_46":198,"_151":152,"_44":443,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_246":444,"_33":445},{"_55":439,"_38":383,"_36":377,"_149":197,"_47":48,"_46":198,"_151":152,"_44":440,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_246":441,"_33":442},{"_55":435,"_38":52,"_36":400,"_149":377,"_47":48,"_46":409,"_151":152,"_44":436,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_246":437,"_33":438},{"_55":431,"_38":184,"_36":425,"_149":400,"_47":48,"_46":426,"_151":152,"_44":432,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_246":433,"_33":434},{"_55":422,"_38":423,"_36":424,"_149":425,"_47":48,"_46":426,"_151":152,"_44":427,"_13":73,"_40":41,"_42":428,"_30":31,"_155":-5,"_246":429,"_33":430},{"_55":414,"_38":415,"_36":416,"_149":400,"_47":48,"_46":417,"_151":152,"_44":418,"_13":73,"_40":41,"_42":419,"_30":31,"_155":-5,"_246":420,"_33":421},{"_55":406,"_38":407,"_36":408,"_149":400,"_47":48,"_46":409,"_151":152,"_44":410,"_13":73,"_40":41,"_42":411,"_30":31,"_155":-5,"_246":412,"_33":413},{"_55":398,"_38":39,"_36":399,"_149":400,"_47":48,"_46":401,"_151":31,"_44":402,"_13":73,"_40":41,"_42":403,"_30":31,"_155":-5,"_246":404,"_33":405},{"_55":390,"_38":391,"_36":392,"_149":377,"_47":48,"_46":393,"_151":152,"_44":394,"_13":73,"_40":27,"_42":395,"_30":31,"_155":-5,"_246":396,"_33":397},{"_55":384,"_38":256,"_36":385,"_149":377,"_47":48,"_46":198,"_151":152,"_44":386,"_13":73,"_40":27,"_42":387,"_30":31,"_155":-5,"_246":388,"_33":389},{"_55":374,"_38":375,"_36":376,"_149":377,"_47":48,"_46":378,"_151":152,"_44":379,"_13":73,"_40":27,"_42":380,"_30":31,"_155":-5,"_246":381,"_33":382},{"_55":189,"_38":190,"_36":191,"_149":-5,"_47":48,"_46":192,"_151":152,"_44":371,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_246":372,"_33":373},{"_55":367,"_38":350,"_36":344,"_149":191,"_47":48,"_46":345,"_151":152,"_44":368,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_246":369,"_33":370},{"_55":359,"_38":360,"_36":361,"_149":344,"_47":48,"_46":362,"_151":152,"_44":363,"_13":73,"_40":27,"_42":364,"_30":31,"_155":-5,"_246":365,"_33":366},{"_55":351,"_38":352,"_36":353,"_149":344,"_47":48,"_46":354,"_151":152,"_44":355,"_13":73,"_40":27,"_42":356,"_30":31,"_155":-5,"_246":357,"_33":358},{"_55":341,"_38":342,"_36":343,"_149":344,"_47":48,"_46":345,"_151":152,"_44":346,"_13":73,"_40":27,"_42":347,"_30":31,"_155":-5,"_246":348,"_33":349},{"_55":337,"_38":328,"_36":322,"_149":191,"_47":48,"_46":332,"_151":152,"_44":338,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_246":339,"_33":340},{"_55":329,"_38":330,"_36":331,"_149":322,"_47":48,"_46":332,"_151":152,"_44":333,"_13":73,"_40":27,"_42":334,"_30":31,"_155":-5,"_246":335,"_33":336},{"_55":319,"_38":320,"_36":321,"_149":322,"_47":48,"_46":323,"_151":152,"_44":324,"_13":73,"_40":27,"_42":325,"_30":31,"_155":-5,"_246":326,"_33":327},{"_55":313,"_38":147,"_36":314,"_149":191,"_47":48,"_46":192,"_151":152,"_44":315,"_13":73,"_40":27,"_42":316,"_30":31,"_155":-5,"_246":317,"_33":318},{"_55":183,"_38":184,"_36":185,"_149":-5,"_47":48,"_46":186,"_151":152,"_44":310,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_246":311,"_33":312},{"_55":306,"_38":305,"_36":300,"_149":185,"_47":48,"_46":186,"_151":152,"_44":307,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_246":308,"_33":309},{"_55":297,"_38":298,"_36":299,"_149":300,"_47":48,"_46":186,"_151":152,"_44":301,"_13":73,"_40":27,"_42":302,"_30":31,"_155":-5,"_246":303,"_33":304},{"_55":289,"_38":290,"_36":291,"_149":185,"_47":48,"_46":292,"_151":152,"_44":293,"_13":73,"_40":27,"_42":294,"_30":31,"_155":-5,"_246":295,"_33":296},{"_55":177,"_38":178,"_36":179,"_149":-5,"_47":48,"_46":180,"_151":152,"_44":286,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_246":287,"_33":288},{"_55":279,"_38":280,"_36":281,"_149":179,"_47":48,"_46":180,"_151":152,"_44":282,"_13":73,"_40":27,"_42":283,"_30":31,"_155":-5,"_246":284,"_33":285},{"_55":171,"_38":172,"_36":173,"_149":-5,"_47":48,"_46":174,"_151":152,"_44":276,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_246":277,"_33":278},{"_55":272,"_38":263,"_36":258,"_149":173,"_47":48,"_46":174,"_151":152,"_44":273,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_246":274,"_33":275},{"_55":268,"_38":52,"_36":51,"_149":258,"_47":48,"_46":14,"_151":152,"_44":269,"_13":73,"_40":53,"_42":-5,"_30":31,"_155":-5,"_246":270,"_33":271},{"_55":264,"_38":39,"_36":37,"_149":51,"_47":48,"_46":14,"_151":152,"_44":265,"_13":73,"_40":41,"_42":43,"_30":31,"_155":-5,"_246":266,"_33":267},{"_55":255,"_38":256,"_36":257,"_149":258,"_47":48,"_46":174,"_151":152,"_44":259,"_13":73,"_40":27,"_42":260,"_30":31,"_155":-5,"_246":261,"_33":262},{"_55":164,"_38":165,"_36":166,"_149":-5,"_47":48,"_46":167,"_151":152,"_44":252,"_13":73,"_40":27,"_42":169,"_30":31,"_155":-5,"_246":253,"_33":254},{"_55":157,"_38":158,"_36":159,"_149":-5,"_47":48,"_46":160,"_151":152,"_44":249,"_13":73,"_40":27,"_42":162,"_30":31,"_155":-5,"_246":250,"_33":251},{"_55":146,"_38":147,"_36":148,"_149":-5,"_47":48,"_46":150,"_151":152,"_44":245,"_13":73,"_40":27,"_42":154,"_30":31,"_155":-5,"_246":247,"_33":248},["D",1789194515688],"children",[],[147],["D",1789194515756],[],[158],["D",1789194515811],[],[165],"d4509522-5909-476c-bb02-d82774fd1e79","package.json","445f164a-ae73-11f1-aa80-1607ee4eb77e","4a24480b-c677-4a91-b753-776ac6ef4f0a",["D",1789194551656],"{\n \"name\": \"@guardiq/hal\",\n \"version\": \"0.1.0\",\n \"private\": true,\n \"type\": \"module\",\n \"main\": \"src/index.ts\",\n \"exports\": { \".\": \"./src/index.ts\", \"./simulator\": \"./src/simulator.ts\" }\n}\n",[],[172,263,256],"hal","6a287759-e320-47f4-96c3-01b37d48c202",["D",1789194551726],[],[172,263,52,39],"bdddaabe-a9f2-494f-ae1d-ef588d28e409",["D",1789194551726],[240],[172,263,52],"9428b440-2c0d-417d-8106-78f489b95b56",["D",1789194551656],[239,241],[172,263],["D",1789194551656],[238],[172],"190ce375-4808-4221-ae49-604807876e69","railway.toml","2f179186-ae73-11f1-9c96-1607ee4eb77e",["D",1789194515912],"# Railway deployment config — auto-detected when deploying this repo\n# Docs: https://docs.railway.com/\n\n[build]\nbuilder = \"nixpacks\"\n\n[deploy]\nhealthcheckPath = \"/healthz\"\nhealthcheckTimeout = 120\n\n# Services are defined in infra/*.Dockerfile and referenced below.\n# Railway deploys each as its own service; environments wired in the dashboard.\n\n[[service]]\nname = \"api\"\nroot = \"apps/api\"\nbuild = \"Dockerfile\"\nport = 4000\n\n[[service]]\nname = \"web\"\nroot = \"apps/web\"\nbuild = \"Dockerfile\"\nport = 80\n\n# Managed Postgres is added via the Railway dashboard (\"Add plugin → Database\").\n# Set api.DATABASE_URL to its connection string in the env editor.\n",[],[178,280],["D",1789194515912],[236],[178],"254b0129-3ba4-4733-b46f-b9f3c063ea1a","seed.sql","2f2b6986-ae73-11f1-9c96-1607ee4eb77e",12,["D",1789194516087],"-- Demonstration seed data. Clearly demo — never real customers.\n\ninsert into organizations (name, handle, tier)\nselect 'ISNTX', 'isntx', 'pro' where not exists (select 1 from organizations where handle='isntx');\n\ninsert into users (email, name) select 'operator@isntx.test','Operator' where not exists (select 1 from users where email='operator@isntx.test');\ninsert into memberships (org_id,user_id,role)\nselect o.id,u.id,'COMMANDER' from organizations o, users u\nwhere o.handle='isntx' and u.email='operator@isntx.test'\non conflict do nothing;\n\ninsert into sites (org_id,name)\nselect o.id,'Construction Site 1' from organizations o where o.handle='isntx'\non conflict do nothing;\n",[],[184,290],"fb108a22-b552-4211-814f-78a8995ca2d8","001_init.sql","2f217b92-ae73-11f1-9c96-1607ee4eb77e","6ff21aa1-b77d-4fe6-9a9e-b967860eb2df",["D",1789194516022],"-- GuardIQ Platform — initial schema (phase 1)\n-- Multi-tenant from day one. Tenant isolation = every row is scoped to an org_id.\n\n-- Organizations / tenants\ncreate table if not exists organizations (\n id uuid primary key default gen_random_uuid(),\n name text not null,\n handle text unique not null,\n tier text not null default 'free', -- free | pro | business\n created_at timestamptz not null default now()\n);\n\ncreate table if not exists users (\n id uuid primary key default gen_random_uuid(),\n email text unique not null,\n name text not null default '',\n password_hash text, -- set when local auth used; null if SSO\n provider text not null default 'local', -- local | google | etc.\n created_at timestamptz not null default now()\n);\n\ncreate table if not exists memberships (\n id uuid primary key default gen_random_uuid(),\n org_id uuid not null references organizations(id) on delete cascade,\n user_id uuid not null references users(id) on delete cascade,\n role text not null default 'CLIENT_VIEWER', -- SUPER_ADMIN|ORG_ADMIN|COMMANDER|OPERATOR|SUPERVISOR|GUARD|CLIENT_VIEWER|TECHNICIAN\n unique (org_id, user_id)\n);\n\n-- Sites / geography\ncreate table if not exists sites (\n id uuid primary key default gen_random_uuid(),\n org_id uuid not null references organizations(id) on delete cascade,\n name text not null,\n address text,\n timezone text not null default 'UTC',\n created_at timestamptz not null default now()\n);\n\ncreate table if not exists zones (\n id uuid primary key default gen_random_uuid(),\n site_id uuid not null references sites(id) on delete cascade,\n name text not null,\n kind text not null default 'zone', -- zone | restricted | building | road | gate | door\n polygon jsonb -- future GIS\n);\n\n-- Assigned humans (guards)\ncreate table if not exists guards (\n id uuid primary key default gen_random_uuid(),\n site_id uuid not null references sites(id) on delete cascade,\n name text not null,\n status text not null default 'AVAILABLE', -- AVAILABLE|BUSY|OFF_DUTY|OFFLINE\n current_pos jsonb,\n updated_at timestamptz not null default now()\n);\n\n-- Device registry (robots, cameras, sensors, trailers, drones, humanoids)\ncreate table if not exists devices (\n id uuid primary key default gen_random_uuid(),\n org_id uuid not null references organizations(id) on delete cascade,\n site_id uuid not null references sites(id) on delete cascade,\n type text not null, -- ROBOT|HUMANOID|DRONE|CAMERA|TRAILER|SENSOR|ACCESS_CONTROL|EDGE_COMPUTER\n provider text not null default 'simulator',-- HAL adapter id: simulator | spot | unitree | trailiqu | guardiq\n name text not null,\n manufacturer text,\n model text,\n serial text,\n firmware text,\n status text not null default 'OFFLINE', -- ONLINE|OFFLINE|DEGRADED\n capabilities jsonb not null default '[]',\n modal_data jsonb, -- position, battery, heading...\n last_seen timestamptz,\n created_at timestamptz not null default now()\n);\n\n-- Events (event bus persistence)\ncreate table if not exists events (\n id uuid primary key default gen_random_uuid(),\n org_id uuid not null references organizations(id) on delete cascade,\n event_type text not null, -- PERSON_DETECTED | MOTION_DETECTED | etc.\n source_type text not null, -- CAMERA|ROBOT|SENSOR|GUARD|SYSTEM\n source_id uuid references devices(id),\n site_id uuid references sites(id),\n zone_id uuid references zones(id),\n confidence real,\n payload jsonb not null default '{}',\n dedupe_key text, -- for dedup\n created_at timestamptz not null default now()\n);\ncreate index if not exists events_dedupe_idx on events(dedupe_key);\n\n-- Incidents\ncreate table if not exists incidents (\n id uuid primary key default gen_random_uuid(),\n org_id uuid not null references organizations(id) on delete cascade,\n site_id uuid not null references sites(id) on delete cascade,\n type text not null,\n severity int not null default 0, -- 0-100 risk score\n confidence real,\n status text not null default 'NEW', -- NEW|ANALYZING|INVESTIGATING|VERIFIED|ESCALATED|RESPONDING|RESOLVED|FALSE_ALARM\n location jsonb,\n evidence jsonb not null default '[]',\n operator_id uuid references users(id),\n operator_action text,\n resolution text,\n detected_at timestamptz default now(),\n verified_at timestamptz,\n resolved_at timestamptz,\n created_at timestamptz not null default now()\n);\n\ncreate table if not exists incident_events (\n id uuid primary key default gen_random_uuid(),\n incident_id uuid not null references incidents(id) on delete cascade,\n kind text not null, -- SUBTYPE|STATUS_CHANGE|ASSET_ASSIGNED|OPERATOR_ACTION|AUDIT\n payload jsonb not null default '{}',\n actor text,\n created_at timestamptz not null default now()\n);\n\n-- Missions\ncreate table if not exists missions (\n id uuid primary key default gen_random_uuid(),\n org_id uuid not null references organizations(id) on delete cascade,\n site_id uuid not null references sites(id) on delete cascade,\n incident_id uuid references incidents(id),\n device_id uuid references devices(id),\n type text not null, -- PATROL_ZONE|INVESTIGATE_EVENT|OBSERVE_LOCATION|CHECK_PERIMETER|VERIFY_DOOR|RETURN_TO_DOCK\n status text not null default 'CREATED', -- CREATED|QUEUED|ASSIGNED|EN_ROUTE|ON_SCENE|COMPLETED|FAILED|CANCELLED\n waypoints jsonb not null default '[]',\n started_at timestamptz,\n completed_at timestamptz,\n created_at timestamptz not null default now()\n);\n\n-- Telemetry history\ncreate table if not exists telemetry (\n id bigserial primary key,\n device_id uuid not null references devices(id) on delete cascade,\n t timestamptz not null default now(),\n p jsonb not null -- position, battery, heading, temp...\n);\ncreate index if not exists telemetry_device_idx on telemetry(device_id, t desc);\n\n-- Reports\ncreate table if not exists reports (\n id uuid primary key default gen_random_uuid(),\n org_id uuid not null references organizations(id) on delete cascade,\n incident_id uuid references incidents(id),\n format text not null default 'json', -- json|csv|pdf(marker)\n content jsonb not null default '{}',\n created_at timestamptz not null default now()\n);\n\n-- Integrations (GuardIQ gateway is DISABLED by default)\ncreate table if not exists integrations (\n id uuid primary key default gen_random_uuid(),\n org_id uuid not null references organizations(id) on delete cascade,\n name text not null,\n kind text not null, -- GUARDIQ|WEBHOOK\n config jsonb not null default '{}',\n enabled boolean not null default false,\n created_at timestamptz not null default now()\n);\n\n-- Audit log (every sensitive action)\ncreate table if not exists audit_logs (\n id uuid primary key default gen_random_uuid(),\n org_id uuid references organizations(id),\n site_id uuid references sites(id),\n user_id uuid references users(id),\n device_id uuid references devices(id),\n action text not null,\n payload jsonb not null default '{}',\n correlation_id uuid,\n created_at timestamptz not null default now()\n);\n",[],[184,305,298],"migrations","0f3cc7b9-bb90-47cd-87ab-6e25b62bfaa0",["D",1789194516022],[233],[184,305],["D",1789194516022],[232,234],[184],"47b4c205-1b2c-4afd-bdae-7cbdd9a620af","1ff0f9ea-ae73-11f1-9541-1607ee4eb77e",["D",1789194490537],"# Context Vault — GuardIQ\n\nOpen this folder with **Obsidian** (`Open folder as vault`). It's the persistent\nknowledge base that makes each new build faster: specs, decisions, snippets and\ntraps are human- and AI-searchable via `[[links]]` and `#tags`, and re-used\nacross every project you build on top of this workflow.\n\n## How to use this harness\n\n1. **New idea / project** → copy `_templates/spec.md`.\n2. **Important call you make** → write an ADR (architectural decision record)\n from `_templates/adr.md`. Decisions become a log, not folklore.\n3. **Working code you want again** → save it as a snippet in `_templates/snippet.md`.\n4. **Research step (before coding anything new)**:\n - **Context7** → pull *current* docs for the library (`context7.com`).\n - **Exa** → search for current approaches / competitive patterns (`exa.ai`).\n - Drop 2–3 bullet findings into a `#linked-notes` note before opening an editor.\n5. Tags live in the frontmatter (`tags: [...]`) so Obsidian and other tools\n (these vals) can parse them uniformly.\n\n## Graph\n\n`[[000-...]]` links everything to everything. Useful graph-wide notes start at\n`000-` (decisions), `100-` (architecture), `200-` (templates).\n\n_All content here describes a demo/simulator. Nothing here claims real hardware\nor real customer integrations._\n",[],[190,147],"7b329923-aefb-4baa-8c40-4a5d04f8240d","201-agent-layers.md","2026127e-ae73-11f1-9541-1607ee4eb77e","ff5836aa-4dab-44bc-8c38-ad4af3e62a73",6,["D",1789194490867],"---\ntype: note\ntitle: 201 — Agent / Orchestrator breakdown\nstatus: draft\ntags: [agent, orchestrator, architecture]\nlinks: [\"101-architecture\"]\n---\n\n# Agent layer (interfaces + events, no recursion)\n\nThe `Supervisor` validates automated recommendations before anything sensitive.\n\n| Agent | Job |\n|---|---|\n| Perception | collect + correlate sensor data |\n| Risk | severity + confidence |\n| Mission | choose response resources |\n| Fleet | track robot availability / assignment |\n| Incident | maintain incident state machine |\n| Report | produce incident reports |\n| Maintenance | flag degraded equipment |\n| Supervisor | gate automated recommendations |\n\nAll communication is **event-driven** (via the bus in `packages/event-bus`),\nnever uncontrolled recursive calls.\n\nSee also: [[103-events]], [[104-safety]].\n",[],[190,328,320],"notes","c39dc573-902a-47c2-bc93-ede9ca07219a","000-decision-record.md","201aa70e-ae73-11f1-9541-1607ee4eb77e",5,["D",1789194490813],"---\ntype: decision\ntitle: ADR-001 — Phase 0/1 is a standalone simulator\nstatus: accepted\ntags: [adr, architecture, phase-0]\nlinks: [\"000-workflow\", \"101-architecture\"]\n---\n\n# ADR-001: Phase 0/1 is a standalone simulator\n\n## Context\nThe full system targets PG + Node + WebSockets (Railway). But we needed a fast,\nshareable, investor-facing proof of the orchestration concept first.\n\n## Decision\n**Val Town val `guardiq-command`** hosts a self-contained single-page Command\nCenter. All robots/cameras/events are simulated client-side. No live hardware,\nno GuardIQ connection. Demo data clearly labeled.\n\n## Consequences\n- ✅ Instant shareable link, zero infra, no login.\n- ✅ The orchestrator *story* (detect → analyze → mission → verify → human →\n resolve → report) is fully demonstrated.\n- ⚠️ No persistence server-side; KPIs live in browser `localStorage`.\n- ⚠️ Not the real product — that is `guardiq-platform` (this repo) on Railway.\n\n## Status\naccepted. Superseded by ADR-002 as the real platform begins.\n\n## Next step\n[[ADR-002]] — cross-platform architecture on Railway.\n",[],[190,328,330],"462fb919-9691-4c43-828d-5adf50362843",["D",1789194490813],[228,229],[190,328],"02d65aad-6659-447d-aa14-538827cf78f6","spec.md","1ff9f69e-ae73-11f1-9541-1607ee4eb77e","516fabbd-f180-4a4a-b031-5556b48e176b",2,["D",1789194490598],"---\ntype: spec\ntitle: Project\nstatus: draft\ntags: [spec, template]\n---\n\n# {{Project}}\n\n## Problem\n## Goal / Non-goals\n## Users & scenarios\n## Stack (verify with Context7 before committing)\n## Data model sketch\n## Interfaces / API surfaces\n## Risks / Question marks\n## Query plan\n- [ ] Exa: competitive / current-approach search\n- [ ] Context7: platform & library docs\n- [ ] Draft architecture (ADR)\n",[],[190,350,342],"_templates","d8d2058a-ddd7-4537-af3f-e6d8cc0438cd","snippet.md","2011e722-ae73-11f1-9541-1607ee4eb77e",4,["D",1789194490735],"---\ntype: snippet\ntitle: Snippet\ntags: [snippet, template]\n---\n\n# {{Snippet name}}\n\n## When to reach for this\n## Code\n```ts\n// ...\n```\n## Why it works / gotchas\n## Source project\n[[...]]\n",[],[190,350,352],"eb6f9725-0a22-455c-87b8-77c0e1d5f5f0","adr.md","20031a26-ae73-11f1-9541-1607ee4eb77e",3,["D",1789194490650],"---\ntype: adr\ntitle: ADR-000\nstatus: accepted\ntags: [adr, template]\n---\n\n# ADR-000: \n\n## Context\nWhy does this decision need to be made? What constraints?\n\n## Decision\nWhat we chose, and the shape of it.\n\n## Consequences\n- Good: ...\n- Trade-offs: ...\n- (Links: [[...]] to related notes)\n\n## Status\naccepted / proposed / superseded-by\n",[],[190,350,360],"8cda65fa-7386-415f-863f-291a31a088af",["D",1789194490598],[224,225,226],[190,350],["D",1789194490537],[223,227,230],[190],"7a8accb2-c882-42a5-b631-9645d6cf2a3d","tsconfig.json","37f635be-ae73-11f1-831f-1607ee4eb77e","0bf13641-5a6d-40ef-8222-2de8ecd8a295",14,["D",1789194530835],"{\n \"compilerOptions\": {\n \"target\": \"ES2022\",\n \"module\": \"ESNext\",\n \"moduleResolution\": \"bundler\",\n \"outDir\": \"dist\",\n \"rootDir\": \"src\",\n \"strict\": true,\n \"esModuleInterop\": true,\n \"skipLibCheck\": true,\n \"types\": [\"node\"]\n },\n \"include\": [\"src\"]\n}\n",[],[196,383,375],"api","350ed730-2336-41ec-9b30-ce60d6f92875","37ec5562-ae73-11f1-831f-1607ee4eb77e",["D",1789194530755],"{\n \"name\": \"@guardiq/api\",\n \"version\": \"0.1.0\",\n \"private\": true,\n \"type\": \"module\",\n \"scripts\": {\n \"dev\": \"tsx watch src/index.ts\",\n \"build\": \"tsc -p tsconfig.json\",\n \"start\": \"node dist/index.js\",\n \"migrate\": \"tsx src/db/migrate.ts\",\n \"test\": \"vitest run\"\n },\n \"dependencies\": {\n \"express\": \"^4.19.0\",\n \"pg\": \"^8.11.0\",\n \"ws\": \"^8.17.0\"\n },\n \"devDependencies\": {\n \"@types/express\": \"^4.17.0\",\n \"@types/node\": \"^20.11.0\",\n \"@types/pg\": \"^8.11.0\",\n \"@types/ws\": \"^8.5.0\",\n \"tsx\": \"^4.7.0\",\n \"typescript\": \"^5.4.0\",\n \"vitest\": \"^1.4.0\"\n }\n}\n",[],[196,383,256],"27991045-15ee-4e1d-8d7e-d164ca593d1a","Dockerfile","37feb0ea-ae73-11f1-831f-1607ee4eb77e",15,["D",1789194530894],"FROM node:20-alpine AS build\nWORKDIR /app\nCOPY package.json package-lock.json* ./\nRUN npm ci || npm install\nCOPY . .\nRUN npm run build\n\nFROM node:20-alpine\nWORKDIR /app\nENV NODE_ENV=production\nCOPY package.json package-lock.json* ./\nRUN npm ci --omit=dev || npm install --omit=dev\nCOPY --from=build /app/dist ./dist\nCOPY db/ ../../db/\nEXPOSE 4000\nCMD [\"node\", \"dist/index.js\"]\n",[],[196,383,391],"f9d71d4f-f1cf-4fe9-94e0-c6eea4131792","3834126c-ae73-11f1-831f-1607ee4eb77e","abd72c0c-905a-46a9-a02a-65b5d1db892a",18,["D",1789194531231],"import express from \"express\";\nimport { createServer } from \"node:http\";\nimport { WebSocketServer } from \"ws\";\nimport { pool } from \"./db.ts\";\nimport { env } from \"./env.ts\";\nimport { EventBus } from \"@guardiq/event-bus\";\n\nconst app = express();\napp.use(express.json());\n\n// ---- Health / readiness ------------------------------------------------------\napp.get(\"/healthz\", async (_req, res) => {\n try {\n await pool.query(\"select 1\");\n res.json({ status: \"ok\", service: \"guardiq-api\", version: \"0.1.0\" });\n } catch {\n res.status(503).json({ status: \"degraded\" });\n }\n});\n\n// ---- System status -----------------------------------------------------------\napp.get(\"/api/v1/status\", async (_req, res) => {\n const rows = await pool.query(`\n select status, count(*)::int as n from devices group by status\n `).catch(() => ({ rows: [] as never[] }));\n res.json({\n services: {\n api: \"HEALTHY\",\n database: \"HEALTHY\",\n eventBus: \"HEALTHY\",\n aiOrchestrator: \"HEALTHY\",\n guardiqGateway: env.guardiqEnabled ? \"ENABLED\" : \"DISABLED\",\n },\n devices: rows.rows,\n mode: \"simulation\",\n });\n});\n\n// ---- Real-time (everything sim bridges through the bus + ws) ----------------\nconst server = createServer(app);\nconst wss = new WebSocketServer({ server, path: \"/ws\" });\nconst bus = new EventBus();\n\nwss.on(\"connection\", (ws) => {\n const off = bus.subscribe((evt) => {\n if (ws.readyState === ws.OPEN) ws.send(JSON.stringify(evt));\n });\n ws.on(\"close\", off);\n ws.send(JSON.stringify({ type: \"hello\", ts: Date.now() }));\n});\n\n// Broadcast bus events to all clients too\nbus.subscribe((evt) => {\n for (const client of wss.clients) {\n if (client.readyState === client.OPEN) client.send(JSON.stringify(evt));\n }\n});\n\n// ---- Boot --------------------------------------------------------------------\npool.query(\"select 1\").then(() => server.listen(env.port, () => {\n console.log(`guardiq-api listening on :${env.port}`);\n})).catch((e) => {\n console.error(\"DB unreachable (is Postgres up?). Rx:\", (e as Error).message);\n server.listen(env.port, () => console.log(`guardiq-api listening (db down) :${env.port}`));\n});\n",[],[196,383,52,39],"c0d0d5ca-c279-4f26-8537-32c30f66c5ea","env.ts","380a4202-ae73-11f1-831f-1607ee4eb77e",16,["D",1789194530953],"// Central env access. Fail fast on required vars; never log values.\nexport const env = {\n nodeEnv: process.env.NODE_ENV ?? \"development\",\n port: Number(process.env.PORT ?? 4000),\n databaseUrl: process.env.DATABASE_URL ?? \"\",\n sessionSecret: process.env.SESSION_SECRET ?? \"dev-insecure-change-me\",\n guardiqEnabled: (process.env.GUARDIQ_GATEWAY_ENABLED ?? \"false\").toLowerCase() === \"true\",\n guardiqUrl: process.env.GUARDIQ_GATEWAY_URL ?? \"\",\n};\n",[],[196,383,52,407],"667268e3-19f3-479d-9d0e-500795bd1241","db.ts","382493d2-ae73-11f1-831f-1607ee4eb77e",17,["D",1789194531099],"import pg from \"pg\";\nimport { env } from \"./env.ts\";\n\nexport const pool = new pg.Pool({\n connectionString: env.databaseUrl,\n max: 10,\n});\n\nexport const query = (text: string, params: unknown[] = []) => pool.query(text, params);\n",[],[196,383,52,415],"c229b66e-4f90-49de-9394-499cff67c0e8","migrate.ts","4454e710-ae73-11f1-aa80-1607ee4eb77e","42ed4057-36f5-4c93-9268-99588af6b637",19,["D",1789194551591],"// Runs db/migrations/*.sql in order against DATABASE_URL.\n// For local dev; on Railway the db plugin / start script handles this too.\nimport { readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { pool } from \"./db.ts\";\n\nconst here = fileURLToPath(new URL(\".\", import.meta.url));\nconst dir = join(here, \"../../../db/migrations\");\n\nasync function main() {\n const files = (await readdirSafe(dir)).filter((f) => f.endsWith(\".sql\")).sort();\n for (const f of files) {\n const sql = await readFile(join(dir, f), \"utf8\");\n await pool.query(sql);\n console.log(\"migrated\", f);\n }\n process.exit(0);\n}\nasync function readdirSafe(d: string): Promise {\n try { return await (await import(\"node:fs/promises\")).readdir(d); } catch { return []; }\n}\nmain().catch((e) => { console.error(e); process.exit(1); });\n",[],[196,383,52,184,423],"4385aef1-43c0-4625-8c0b-249d78de96b4",["D",1789194551591],[215],[196,383,52,184],"2438421b-eab1-4389-b8b4-489931c3c2e9",["D",1789194530953],[214,216,217,218],[196,383,52],"dc2c007a-a7f7-4b75-8c46-b9c5dc95eba3",["D",1789194530755],[213,219,220,221],[196,383],["D",1789194530755],[212],[196],["D",1789194473035],{"_107":106,"_115":111},{"_107":106,"_108":109,"_110":111,"_19":67,"_112":113,"_114":31},{"_13":96,"_38":97,"_55":48,"_98":56,"_99":-5,"_100":-5,"_101":-5,"_102":-5,"_103":-5,"_104":57,"_105":106},"ctx",{"_89":-5,"_135":483,"_484":485,"_486":487,"_488":31,"_489":31,"_490":31,"_491":152,"_492":-5,"_493":-7,"_494":-7,"_495":73,"_496":31,"_497":31,"_498":-5,"_499":31,"_500":31,"_501":31,"_502":-5},"ENV",{"_454":455,"_456":457,"_458":97,"_459":460,"_461":462,"_463":464,"_465":466,"_467":468,"_469":470,"_471":472,"_473":474,"_475":476,"_477":478,"_479":480,"_481":482},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v21