GuardIQ Robotics Command

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_906":907,"_908":909},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_666":-5,"_20":667,"_22":668,"_669":670,"_671":672,"_26":673,"_24":674,"_675":-5,"_676":-5,"_677":54,"_678":679,"_680":54,"_681":-5,"_682":-5,"_683":684},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","brandonschoelkoph","name","guardiq-platform","branchName","main","version","path","packages/hal/src/simulator.ts","project",{"_33":611,"_13":14,"_46":612,"_613":-5,"_614":54,"_615":616,"_617":616,"_618":619,"_620":-5,"_621":622,"_623":-5,"_624":54,"_625":-5,"_626":-5,"_627":48,"_628":629,"_630":-5,"_631":-5,"_632":-5,"_633":-5,"_634":635,"_636":635,"_637":638,"_639":638,"_640":638,"_641":635,"_642":635,"_643":644,"_645":646,"_647":648,"_649":54},"tree",[60,61,62,63,64,65,66,67,68,69],"file",{"_33":34,"_13":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_18":56},"contents",[],"upstream","pull","ahead","behind","envVars","id","092dcc20-10b2-48ae-a8b4-fa6f0da414cb","simulator.ts","fileId","4472a584-ae73-11f1-aa80-1607ee4eb77e","parentId","10762c49-4fac-4d93-bec9-57cd8548a17a","branchId","2fec3878-26a7-4bae-a15d-ace775b2d642","branchVersion",22,"latest",true,"createdAt",["D",1789194551789],0,"fileType","script","content","import type { Mission, Position, RobotProvider, Telemetry } from \"./index.ts\";\n\n/** Pure in-process simulator — no network, no hardware. */\nexport class SimulatorRobotProvider implements RobotProvider {\n readonly vendor = \"simulator\";\n private connected = false;\n pos: Position = { x: 0.88, y: 0.32 };\n private mission: Mission | null = null;\n\n constructor(private deviceId: string, opts?: { start?: Position }) {\n if (opts?.start) this.pos = opts.start;\n }\n\n async connect() { this.connected = true; }\n async disconnect() { this.connected = false; }\n\n getTelemetry(): Promise {\n return Promise.resolve({\n position: this.pos,\n heading: 0,\n speed: 0,\n battery: 96,\n connection: this.connected ? \"ONLINE\" : \"OFFLINE\",\n mission: this.mission?.id ?? null,\n camera: \"STREAMING\",\n temperature: 41,\n signalStrength: 98,\n lastHeartbeat: Date.now(),\n });\n }\n\n async sendMission(m: Mission) {\n // Simulate: move toward waypoints then arrive.\n this.mission = m;\n m.status = \"ASSIGNED\";\n const end = m.waypoints[m.waypoints.length - 1] ?? { x: 0.5, y: 0.5 };\n const steps = 24;\n for (let i = 1; i <= steps; i++) {\n const a = i / steps;\n this.pos = {\n x: this.pos.x + (end.x - this.pos.x) * a,\n y: this.pos.y + (end.y - this.pos.y) * a,\n };\n await new Promise((r) => setTimeout(r, 120));\n }\n m.status = \"COMPLETED\";\n this.mission = null;\n }\n\n async cancelMission() { this.mission = null; }\n async returnToDock() { this.pos = { x: 0.9, y: 0.86 }; }\n async emergencyStop() { this.pos = this.pos; }\n}\n","deleted",false,"label",[57,58,59,35],"packages","hal","src",{"_33":391,"_13":392,"_36":393,"_38":-5,"_40":41,"_42":394,"_44":45,"_46":395,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":396,"_18":397},{"_33":318,"_13":319,"_36":320,"_38":-5,"_40":41,"_42":321,"_44":45,"_46":322,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":323,"_18":324},{"_33":287,"_13":288,"_36":289,"_38":-5,"_40":41,"_42":290,"_44":45,"_46":291,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":292,"_18":293},{"_33":272,"_13":273,"_36":274,"_38":-5,"_40":41,"_42":275,"_44":45,"_46":276,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":277,"_18":278},{"_33":111,"_13":57,"_36":112,"_38":-5,"_40":41,"_42":113,"_44":45,"_46":114,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":116,"_18":117},{"_33":103,"_13":104,"_36":105,"_38":-5,"_40":41,"_42":106,"_44":45,"_46":107,"_17":48,"_49":24,"_51":108,"_53":54,"_55":-5,"_76":109,"_18":110},{"_33":95,"_13":96,"_36":97,"_38":-5,"_40":41,"_42":98,"_44":45,"_46":99,"_17":48,"_49":24,"_51":100,"_53":54,"_55":-5,"_76":101,"_18":102},{"_33":87,"_13":88,"_36":89,"_38":-5,"_40":41,"_42":90,"_44":45,"_46":91,"_17":48,"_49":24,"_51":92,"_53":54,"_55":-5,"_76":93,"_18":94},{"_33":79,"_13":80,"_36":81,"_38":-5,"_40":41,"_42":82,"_44":45,"_46":83,"_17":48,"_49":24,"_51":84,"_53":54,"_55":-5,"_76":85,"_18":86},{"_33":70,"_13":71,"_36":72,"_38":-5,"_40":41,"_42":73,"_44":45,"_46":74,"_17":48,"_49":24,"_51":75,"_53":54,"_55":-5,"_76":77,"_18":78},"f7c6fbf9-57b7-4b39-910f-25299fe5dcf9","package.json","4841c258-ae73-11f1-8551-1607ee4eb77e",25,["D",1789194558144],"{\n \"name\": \"guardiq-platform\",\n \"version\": \"0.1.0\",\n \"private\": true,\n \"workspaces\": [\"apps/*\", \"packages/*\"],\n \"scripts\": {\n \"dev:api\": \"npm run dev --workspace @guardiq/api\",\n \"dev:web\": \"npm run dev --workspace @guardiq/web\",\n \"migrate\": \"npm run migrate --workspace @guardiq/api\",\n \"build\": \"npm run build --workspaces --if-present\",\n \"test\": \"npm run test --workspaces --if-present\"\n }\n}\n","children",[],[71],"42fc3168-7902-463f-a39c-dc0a3372cfb8","docker-compose.yml","4880214c-ae73-11f1-8551-1607ee4eb77e",26,["D",1789194558563],"# Local dev database. Production on Railway uses managed Postgres instead.\nservices:\n db:\n image: postgres:16\n environment:\n POSTGRES_USER: guard\n POSTGRES_PASSWORD: guard\n POSTGRES_DB: guardiq\n ports:\n - \"5432:5432\"\n volumes:\n - pgdata:/var/lib/postgresql/data\nvolumes:\n pgdata:\n",[],[80],"93d53b45-c58a-49b6-bb83-f72d5490691c","README.md","2eef1922-ae73-11f1-9c96-1607ee4eb77e",7,["D",1789194515688],"# GuardIQ Robotics Command — Platform (Railway)\n\nThe production multi-tenant security-orchestration platform. This repo deploys\nto **Railway** (PostgreSQL + Node/TypeScript + WebSockets). The investor demo\nlives separately in the `guardiq-command` Val Town val.\n\n> **Status: scaffold.** Repo structure, schema, and build pipeline exist. The\n> domain modules (HAL, event bus, orchestrator agents, RBAC, incident\n> workflow) are being developed in phases. Everything is a simulator — no real\n> hardware or GuardIQ connection is claimed.\n\n## Layout\n\n```\napps/\n api/ Node + TypeScript backend (HTTP + WebSockets)\n web/ React + Vite + Tailwind frontend\ndb/ SQL migrations + seeded demo data\npackages/ shared libs (types, HAL abstractions, event bus)\ncontext/ Obsidian knowledge vault (open in Obsidian)\ninfra/ Dockerfiles, railway.toml\n```\n\n## Run locally\n\n```bash\n# needs: docker compose (or local Postgres), node 20+\nexport DATABASE_URL=postgres://guard:guard@localhost:5432/guardiq\n\ndocker compose up -d db # start Postgres\ncd apps/api && npm i && npm run migrate && npm run dev\n\ncd apps/web && npm i && npm run dev # separate terminal\n```\n\n## Deploy to Railway (first time)\n\n1. Push this repo to GitHub.\n2. Railway → **New Project → Deploy from GitHub →** select the repo.\n3. Railway auto-detects `infra/railway.toml` (services: `api`, `web`, `db`).\n4. For the `db` service, Railway Proves managed Postgres; set the `api` env\n `DATABASE_URL` to its connection string.\n5. `db` plugin runs `db/*.sql` on start (or run `npm run migrate` in api).\n6. Railway gives each service a **.up.railway.app** URL.\n\nSee `context/notes/300-deployment.md` for the full walkthrough.\n\n## Roadmap (phases)\n\nPhase 0 standalone simulator → 1 investor demo → 2 camera → 3 trailer →\n4 ground robot → 5 GuardIQ gateway → 6 multi-site → 7 humanoid → 8 autonomous ops.\n",[],[88],"fd102bde-2927-448e-811c-c5ca51103d8d",".gitignore","2ef8530c-ae73-11f1-9c96-1607ee4eb77e",8,["D",1789194515756],"node_modules/\ndist/\nbuild/\n.env\n.env.*\n!.env.example\n*.local\n.DS_Store\ncoverage/\n.obsidian/workspace.json\n.obsidian/cache\n",[],[96],"805e5694-6cb0-4059-a561-ec8a6a0cce41",".env.example","2f012036-ae73-11f1-9c96-1607ee4eb77e",9,["D",1789194515811],"# GuardIQ Platform — environment template\n# Never commit real secrets. Railways, Railway variables override these.\n\nNODE_ENV=development\nPORT=4000\nDATABASE_URL=postgres://guard:guard@localhost:5432/guardiq\n\n# Auth\nSESSION_SECRET=change-me\n# Comma-separated issuer list allowed by JWT verification:\nAUTH_ISSUER=https://guardiq.up.railway.app\n\n# Optional live integrations (leave blank to stay isolated/simulated)\nCONTEXT7_API_KEY=\nEXA_API_KEY=\nGUARDIQ_GATEWAY_URL=\nGUARDIQ_GATEWAY_ENABLED=false\n",[],[104],"028adbb5-ba8a-440a-8a44-edceb9e88b5a","172cd9d8-1b2f-4a0d-a388-a4396a20e24a",20,["D",1789194551656],"directory",[118,119,120,121],[57],{"_33":226,"_13":227,"_36":228,"_38":112,"_40":41,"_42":229,"_44":45,"_46":230,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":231,"_18":232},{"_33":198,"_13":199,"_36":200,"_38":112,"_40":41,"_42":201,"_44":45,"_46":202,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":203,"_18":204},{"_33":169,"_13":58,"_36":170,"_38":112,"_40":41,"_42":113,"_44":45,"_46":171,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":172,"_18":173},{"_33":122,"_13":123,"_36":124,"_38":112,"_40":41,"_42":125,"_44":45,"_46":126,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":127,"_18":128},"31687d80-14cf-4b43-87e5-abe1a3595140","orchestrator","a3b0a955-8f65-4009-9529-26cec6522299",27,["D",1789194682779],[129,130],[57,123],{"_33":137,"_13":59,"_36":138,"_38":124,"_40":41,"_42":139,"_44":45,"_46":140,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":141,"_18":142},{"_33":131,"_13":71,"_36":132,"_38":124,"_40":41,"_42":125,"_44":45,"_46":133,"_17":48,"_49":24,"_51":134,"_53":54,"_55":-5,"_76":135,"_18":136},"ffada2bb-02c2-423f-b5ab-62c6c776bf0b","928645c8-ae73-11f1-9680-1607ee4eb77e",["D",1789194682779],"{\n \"name\": \"@guardiq/orchestrator\",\n \"version\": \"0.1.0\",\n \"private\": true,\n \"type\": \"module\",\n \"main\": \"src/index.ts\",\n \"exports\": { \".\": \"./src/index.ts\" }\n}\n",[],[57,123,71],"1d61ef93-d335-47e8-9dc0-5d61114596d0","0932d956-b4dd-4e56-960c-4ea47e81c92b",28,["D",1789194682845],[143,144,145],[57,123,59],{"_33":161,"_13":162,"_36":163,"_38":138,"_40":41,"_42":164,"_44":45,"_46":165,"_17":48,"_49":50,"_51":166,"_53":54,"_55":-5,"_76":167,"_18":168},{"_33":154,"_13":155,"_36":156,"_38":138,"_40":41,"_42":139,"_44":45,"_46":157,"_17":48,"_49":50,"_51":158,"_53":54,"_55":-5,"_76":159,"_18":160},{"_33":146,"_13":147,"_36":148,"_38":138,"_40":41,"_42":149,"_44":45,"_46":150,"_17":48,"_49":50,"_51":151,"_53":54,"_55":-5,"_76":152,"_18":153},"47343143-0088-4dcb-ae29-3694d3cff884","mission.ts","92b459fe-ae73-11f1-9680-1607ee4eb77e",30,["D",1789194683031],"import type { Mission } from \"@guardiq/hal\";\n\n/** Simple fleet-aware mission selector: nearest & healthy wins. */\nexport interface Candidate { deviceId: string; dist: number; battery: number; available: boolean; }\n\nexport function pickRobot(candidates: Candidate[], priority: \"INVESTIGATE\" | \"PATROL\" | \"RETURN\"): string | null {\n const pool = candidates.filter((c) => c.available && c.battery >= 30);\n if (pool.length === 0) return null;\n return pool.sort((a, b) => a.dist - b.dist || b.battery - a.battery)[0].deviceId;\n}\n\nexport function buildMission(id: string, type: Mission[\"type\"], waypoints: Mission[\"waypoints\"]): Mission {\n return { id, type, status: \"CREATED\", waypoints, createdAt: Date.now() };\n}\n",[],[57,123,59,147],"64da81a2-e5cd-4a91-ac10-7df351c3e424","index.ts","9290a1a8-ae73-11f1-9680-1607ee4eb77e",["D",1789194682845],"import type { GuardiqEvent } from \"@guardiq/event-bus\";\n\n/**\n * The AI Orchestrator's decision layer. Never a black box: every analysis\n * yields decision, confidence, reason, evidence, and a recommended action.\n * It only RECOMMENDS sensitive actions — a human must approve them.\n */\n\nexport interface AiDecision {\n decision: string; // e.g. \"PERSON_DETECTED\"\n confidence: number; // 0..1\n risk: number; // 0..100\n reason: string;\n evidence: string[];\n recommendedAction: string;\n autoSafe: boolean; // true = safe to do automatically (focus/track/observe)\n}\n\n/** Correlate a raw detection into an analyzed AI decision. */\nexport function analyzeEvent(evt: GuardiqEvent): AiDecision {\n const inRestricted = evt.zoneId?.startsWith(\"restricted\") ?? false;\n switch (evt.eventType) {\n case \"PERSON_DETECTED\":\n return rule(\n evt, inRestricted,\n \"PERSON_DETECTED\",\n inRestricted\n ? \"Person detected inside restricted zone outside expected conditions.\"\n : \"Person detected in a monitored zone.\",\n \"Dispatch nearest robot for remote verification.\",\n );\n case \"MOTION_DETECTED\":\n return rule(\n evt, inRestricted,\n \"INVESTIGATE\",\n inRestricted\n ? \"Motion detected in restricted zone; no authorized activity scheduled.\"\n : \"Motion detected; confidence insufficient for person classification.\",\n \"Focus nearby cameras; dispatch robot if a secondary sensor correlates.\",\n );\n case \"VEHICLE_DETECTED\":\n return rule(evt, inRestricted, \"VEHICLE_INTRUSION\",\n \"Vehicle detected in a pedestrian/non-vehicle zone.\", \"Verify plate + dispatch guard.\");\n default:\n return rule(evt, inRestricted, evt.eventType, \"Event received and correlated.\",\n \"Route to operator for disposition.\");\n }\n}\n\nfunction rule(\n evt: GuardiqEvent,\n restricted: boolean,\n decision: string,\n reason: string,\n rec: string,\n): AiDecision {\n const risk = Math.round(evt.confidence * (restricted ? 90 : 55));\n return {\n decision,\n confidence: evt.confidence,\n risk,\n reason,\n evidence: [`${evt.sourceType}:${evt.source}`, `confidence ${evt.confidence.toFixed(2)}`, `zone ${evt.zoneId ?? \"unknown\"}`],\n recommendedAction: rec,\n autoSafe: evt.eventType === \"MOTION_DETECTED\" && !restricted,\n };\n}\n",[],[57,123,59,155],"02712512-0eda-48eb-a32f-cb9c97b8003e","incident.ts","92995d34-ae73-11f1-9680-1607ee4eb77e",29,["D",1789194682901],"/**\n * Incident state machine with human-in-the-loop enforcement.\n *\n * AI may move incidents to INVESTIGATING on its own. Only a human with the\n * right role may perform: ESCALATE, DISPATCH_GUARD, ANNOUNCE, RESOLVE,\n * FALSE_ALARM, or any EMERGENCY_* action.\n */\n\nexport type IncidentStatus =\n | \"NEW\" | \"ANALYZING\" | \"INVESTIGATING\" | \"VERIFIED\"\n | \"ESCALATED\" | \"RESPONDING\" | \"RESOLVED\" | \"FALSE_ALARM\";\n\nexport type OperatorAction =\n | \"OBSERVE\" | \"DISPATCH_GUARD\" | \"ANNOUNCE\" | \"ESCALATE\"\n | \"FALSE_ALARM\" | \"RESOLVE\" | \"EMERGENCY_STOP\" | \"ABORT_MISSION\";\n\nexport interface Incident {\n id: string;\n status: IncidentStatus;\n verified: boolean;\n timeline: { at: string; kind: string; actor: string }[];\n operatorAction?: OperatorAction;\n resolution?: string;\n}\n\nconst ALLOWED: Record = {\n NEW: [\"ANALYZING\"],\n ANALYZING: [\"INVESTIGATING\", \"FALSE_ALARM\"],\n INVESTIGATING: [\"VERIFIED\", \"FALSE_ALARM\"],\n VERIFIED: [\"ESCALATED\", \"RESOLVED\", \"FALSE_ALARM\"],\n ESCALATED: [\"RESPONDING\", \"RESOLVED\", \"FALSE_ALARM\"],\n RESPONDING: [\"RESOLVED\"],\n RESOLVED: [],\n FALSE_ALARM: [],\n};\n\nexport function transition(inc: Incident, to: IncidentStatus, actor: string): Incident {\n if (!ALLOWED[inc.status].includes(to)) throw new Error(`${inc.status} -> ${to} not allowed`);\n if (to === \"VERIFIED\") inc.verified = true;\n inc.status = to;\n inc.timeline.push({ at: new Date().toISOString(), kind: `STATUS:${to}`, actor });\n return inc;\n}\n\nconst HUMAN_ACTIONS = new Set([\n \"DISPATCH_GUARD\", \"ANNOUNCE\", \"ESCALATE\", \"FALSE_ALARM\", \"RESOLVE\", \"EMERGENCY_STOP\", \"ABORT_MISSION\",\n]);\n\n/** Only a human may take sensitive actions. */\nexport function requireHumanAction(actor: string): boolean {\n return actor !== \"SYSTEM\"; // in practice, check the actor's role against a permission map\n}\n\nexport function operatorAction(inc: Incident, action: OperatorAction, actor: string): Incident {\n if (HUMAN_ACTIONS.has(action) && !requireHumanAction(actor)) {\n throw new Error(\"system cannot take sensitive operator action\");\n }\n inc.operatorAction = action;\n inc.timeline.push({ at: new Date().toISOString(), kind: `OPERATOR:${action}`, actor });\n return inc;\n}\n",[],[57,123,59,162],"9428b440-2c0d-417d-8106-78f489b95b56","4a24480b-c677-4a91-b753-776ac6ef4f0a",["D",1789194551656],[174,175],[57,58],{"_33":182,"_13":59,"_36":39,"_38":170,"_40":41,"_42":183,"_44":45,"_46":184,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":185,"_18":186},{"_33":176,"_13":71,"_36":177,"_38":170,"_40":41,"_42":113,"_44":45,"_46":178,"_17":48,"_49":24,"_51":179,"_53":54,"_55":-5,"_76":180,"_18":181},"d4509522-5909-476c-bb02-d82774fd1e79","445f164a-ae73-11f1-aa80-1607ee4eb77e",["D",1789194551656],"{\n \"name\": \"@guardiq/hal\",\n \"version\": \"0.1.0\",\n \"private\": true,\n \"type\": \"module\",\n \"main\": \"src/index.ts\",\n \"exports\": { \".\": \"./src/index.ts\", \"./simulator\": \"./src/simulator.ts\" }\n}\n",[],[57,58,71],"bdddaabe-a9f2-494f-ae1d-ef588d28e409",21,["D",1789194551726],[187,188],[57,58,59],{"_33":192,"_13":155,"_36":193,"_38":39,"_40":41,"_42":183,"_44":45,"_46":194,"_17":48,"_49":50,"_51":195,"_53":54,"_55":-5,"_76":196,"_18":197},{"_33":34,"_13":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":189,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_76":190,"_18":191},["D",1789194551789],[],[57,58,59,35],"6a287759-e320-47f4-96c3-01b37d48c202","4469bd34-ae73-11f1-aa80-1607ee4eb77e",["D",1789194551726],"// Hardware Abstraction Layer — the contract every robot vendor adapter obeys.\n//\n// Business logic NEVER imports a vendor SDK. It talks to RobotProvider, and a\n// factory maps device.provider -> adapter. Adding a vendor = new adapter, not a\n// rewrite. (Spot / Unitree / Agility / Figure / Apptronik / 1X adapters are\n// future work — none are wired here.)\n\nexport type RobotState =\n | \"IDLE\" | \"PATROL\" | \"INVESTIGATE\" | \"OBSERVE\" | \"ESCORT\"\n | \"RETURN_TO_DOCK\" | \"CHARGING\" | \"OFFLINE\" | \"FAULT\" | \"EMERGENCY_STOP\";\n\nexport type MissionType =\n | \"PATROL_ZONE\" | \"INVESTIGATE_EVENT\" | \"OBSERVE_LOCATION\"\n | \"CHECK_PERIMETER\" | \"VERIFY_DOOR\" | \"RETURN_TO_DOCK\";\n\nexport type MissionStatus =\n | \"CREATED\" | \"QUEUED\" | \"ASSIGNED\" | \"EN_ROUTE\" | \"ON_SCENE\"\n | \"COMPLETED\" | \"FAILED\" | \"CANCELLED\";\n\nexport interface Position { x: number; y: number; }\n\nexport interface Telemetry {\n position: Position;\n heading: number; // degrees\n speed: number; // m/s\n battery: number; // percent\n connection: \"ONLINE\" | \"OFFLINE\" | \"DEGRADED\";\n mission: string | null;\n camera: \"STREAMING\" | \"IDLE\" | \"OFF\";\n temperature: number; // C\n signalStrength: number; // percent\n lastHeartbeat: number; // epoch ms\n}\n\nexport interface Mission {\n id: string;\n type: MissionType;\n status: MissionStatus;\n waypoints: Position[];\n createdAt: number;\n}\n\nexport interface RobotProvider {\n readonly vendor: string;\n connect(): Promise;\n disconnect(): Promise;\n getTelemetry(): Promise;\n sendMission(m: Mission): Promise;\n cancelMission(m: Mission): Promise;\n returnToDock(): Promise;\n emergencyStop(): Promise;\n}\n\n/** Registry: provider id -> adapter constructor. Simulator is first. */\nexport type ProviderFactory = (deviceId: string, opts?: Record) => RobotProvider;\nexport function makeRegistry(map: Record) {\n return {\n get(id: string, deviceId: string): RobotProvider {\n const f = map[id];\n if (!f) throw new Error(`unknown provider adapter: \"${id}\"`);\n return f(deviceId);\n },\n };\n}\n",[],[57,58,59,155],"da5f91c3-0d43-4536-856b-e4e5a1d70da5","event-bus","5b5784b1-95d7-4b9b-b1d7-9f34b60ad064",23,["D",1789194551839],[205,206],[57,199],{"_33":213,"_13":59,"_36":214,"_38":200,"_40":41,"_42":215,"_44":45,"_46":216,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":217,"_18":218},{"_33":207,"_13":71,"_36":208,"_38":200,"_40":41,"_42":201,"_44":45,"_46":209,"_17":48,"_49":24,"_51":210,"_53":54,"_55":-5,"_76":211,"_18":212},"64eff733-e05f-4fbb-b2ec-39851f85dfb3","447b43ba-ae73-11f1-aa80-1607ee4eb77e",["D",1789194551839],"{\n \"name\": \"@guardiq/event-bus\",\n \"version\": \"0.1.0\",\n \"private\": true,\n \"type\": \"module\",\n \"main\": \"src/index.ts\",\n \"exports\": { \".\": \"./src/index.ts\" }\n}\n",[],[57,199,71],"56de72e7-c9a4-44a5-8df4-3504188cfe9b","6ba1f39c-3c55-4f90-ac62-f9aff25d95f1",24,["D",1789194551893],[219],[57,199,59],{"_33":220,"_13":155,"_36":221,"_38":214,"_40":41,"_42":215,"_44":45,"_46":222,"_17":48,"_49":50,"_51":223,"_53":54,"_55":-5,"_76":224,"_18":225},"8edcfde4-80e6-4dba-aaa2-9589b18147dc","4483b8ba-ae73-11f1-aa80-1607ee4eb77e",["D",1789194551893],"// Normalized, event-driven bus. Ingestion -> validation -> dedup -> correlation\n// -> routing. Agents/handlers subscribe; no uncontrolled recursive autonomy.\n\nexport interface GuardiqEvent {\n id: string;\n eventType: string; // PERSON_DETECTED | MOTION_DETECTED | ...\n source: string; // \"CAM-02\" | \"ROBOT-01\"\n sourceType: \"CAMERA\" | \"ROBOT\" | \"SENSOR\" | \"GUARD\" | \"SYSTEM\";\n siteId: string;\n zoneId?: string;\n timestamp: string;\n confidence: number;\n dedupeKey?: string;\n metadata: Record;\n}\n\nconst uid = () => crypto.randomUUID?.() ?? `${Date.now()}-${Math.random().toString(36).slice(2)}`;\n\nexport class EventBus {\n private subs = new Set<(e: GuardiqEvent) => void>();\n private seen = new Map(); // dedupeKey -> count\n\n subscribe(fn: (e: GuardiqEvent) => void) {\n this.subs.add(fn);\n return () => this.subs.delete(fn);\n }\n\n /** Validate + dedup, then route to subscribers. Returns event id. */\n publish(input: Omit): GuardiqEvent {\n this.validate(input);\n if (input.dedupeKey) {\n const n = this.seen.get(input.dedupeKey) ?? 0;\n if (n > 0) throw new Error(`duplicate event suppressed: ${input.dedupeKey}`);\n this.seen.set(input.dedupeKey, 1);\n setTimeout(() => this.seen.delete(input.dedupeKey), 300_000);\n }\n const e: GuardiqEvent = { ...input, id: uid(), timestamp: new Date().toISOString() };\n for (const fn of this.subs) {\n try { fn(e); } catch (err) { console.error(\"bus handler error\", err); }\n }\n return e;\n }\n\n private validate(e: Omit) {\n if (!e.eventType || typeof e.eventType !== \"string\") throw new Error(\"eventType required\");\n if (e.confidence < 0 || e.confidence > 1) throw new Error(\"confidence must be 0..1\");\n if ([\"CAMERA\", \"ROBOT\", \"SENSOR\", \"GUARD\", \"SYSTEM\"].indexOf(e.sourceType) < 0) {\n throw new Error(`bad sourceType: ${e.sourceType}`);\n }\n }\n}\n",[],[57,199,59,155],"f192ae52-09ee-4e04-9b8b-d1b0865a3928","auth","c47885c2-c1df-4f80-bd0e-e4795da0e9e3",42,["D",1789205324120],[233,234],[57,227],{"_33":241,"_13":59,"_36":242,"_38":228,"_40":41,"_42":243,"_44":45,"_46":244,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":245,"_18":246},{"_33":235,"_13":71,"_36":236,"_38":228,"_40":41,"_42":229,"_44":45,"_46":237,"_17":48,"_49":24,"_51":238,"_53":54,"_55":-5,"_76":239,"_18":240},"39e205c6-5a74-46c6-b8b3-e3c045632833","5942ac0c-ae8c-11f1-8cde-1607ee4eb77e",["D",1789205324120],"{\n \"name\": \"@guardiq/auth\",\n \"version\": \"0.1.0\",\n \"private\": true,\n \"type\": \"module\",\n \"main\": \"src/index.ts\",\n \"exports\": { \".\": \"./src/index.ts\" }\n}\n",[],[57,227,71],"c86935eb-91d8-4be1-97f7-1dd506719100","30b636c8-3ae3-4118-81c5-14466a7e8171",43,["D",1789205324183],[247,248,249],[57,227,59],{"_33":264,"_13":265,"_36":266,"_38":242,"_40":41,"_42":267,"_44":45,"_46":268,"_17":48,"_49":50,"_51":269,"_53":54,"_55":-5,"_76":270,"_18":271},{"_33":257,"_13":155,"_36":258,"_38":242,"_40":41,"_42":259,"_44":45,"_46":260,"_17":48,"_49":50,"_51":261,"_53":54,"_55":-5,"_76":262,"_18":263},{"_33":250,"_13":251,"_36":252,"_38":242,"_40":41,"_42":243,"_44":45,"_46":253,"_17":48,"_49":50,"_51":254,"_53":54,"_55":-5,"_76":255,"_18":256},"f9705bac-5326-4b6a-a48e-793af4320274","rbac.ts","594bb7b6-ae8c-11f1-8cde-1607ee4eb77e",["D",1789205324183],"/**\n * Role-based access control (§12). Least privilege: every role grants exactly\n * the permissions below. Check permissions at the route layer — never trust the\n * client to self-clamp.\n */\n\nexport type Role =\n | \"SUPER_ADMIN\" | \"ORG_ADMIN\" | \"COMMANDER\" | \"OPERATOR\"\n | \"SUPERVISOR\" | \"GUARD\" | \"CLIENT_VIEWER\" | \"TECHNICIAN\";\n\nexport type Permission =\n | \"sites.read\" | \"sites.write\"\n | \"robots.read\" | \"robots.write\" | \"robots.emergency\"\n | \"missions.read\" | \"missions.write\"\n | \"incidents.read\" | \"incidents.write\"\n | \"reports.read\" | \"reports.export\"\n | \"users.manage\"\n | \"integrations.manage\"\n | \"config.manage\"\n | \"audit.read\";\n\nexport const ROLE_PERMISSIONS: Record = {\n SUPER_ADMIN: [\"sites.read\", \"sites.write\", \"robots.read\", \"robots.write\", \"robots.emergency\", \"missions.read\", \"missions.write\", \"incidents.read\", \"incidents.write\", \"reports.read\", \"reports.export\", \"users.manage\", \"integrations.manage\", \"config.manage\", \"audit.read\"],\n ORG_ADMIN: [\"sites.read\", \"sites.write\", \"robots.read\", \"robots.write\", \"robots.emergency\", \"missions.read\", \"missions.write\", \"incidents.read\", \"incidents.write\", \"reports.read\", \"reports.export\", \"users.manage\", \"config.manage\", \"audit.read\"],\n COMMANDER: [\"sites.read\", \"sites.write\", \"robots.read\", \"robots.write\", \"robots.emergency\", \"missions.read\", \"missions.write\", \"incidents.read\", \"incidents.write\", \"reports.read\", \"reports.export\"],\n OPERATOR: [\"sites.read\", \"robots.read\", \"robots.write\", \"missions.read\", \"missions.write\", \"incidents.read\", \"incidents.write\", \"reports.read\"],\n SUPERVISOR: [\"sites.read\", \"robots.read\", \"missions.read\", \"incidents.read\", \"incidents.write\", \"reports.read\"],\n GUARD: [\"sites.read\", \"incidents.read\", \"missions.read\"],\n CLIENT_VIEWER: [\"sites.read\", \"incidents.read\", \"reports.read\"],\n TECHNICIAN: [\"sites.read\", \"robots.read\", \"robots.write\", \"config.manage\"],\n};\n\nexport function roleHas(role: Role, perm: Permission): boolean {\n return ROLE_PERMISSIONS[role]?.includes(perm) ?? false;\n}\n\n/** Require any of the given permissions for a role. */\nexport function requirePermission(role: Role, needed: Permission[]): boolean {\n return needed.some((p) => roleHas(role, p));\n}\n",[],[57,227,59,251],"c3dbbc1c-b9fc-473f-91d6-4116a74fc76b","595e5164-ae8c-11f1-8cde-1607ee4eb77e",45,["D",1789205324296],"export { roleHas, requirePermission, ROLE_PERMISSIONS, type Role, type Permission } from \"./rbac.ts\";\nexport { resolveAuth, type AuthContext } from \"./context.ts\";\n",[],[57,227,59,155],"4f04a14a-69f5-459c-ad4a-209ab0e58a15","context.ts","595387a2-ae8c-11f1-8cde-1607ee4eb77e",44,["D",1789205324236],"import type { Role } from \"./rbac.ts\";\n\n/**\n * Authenticated request context: which tenant (org/site) and role this caller\n * holds. In production, this is resolved from a verified session/JWT. In this\n * scaffold it's resolved from explicit dev headers so the platform runs without\n * a configured identity provider. Tenant isolation is enforced structurally:\n * every query must include the caller's org_id.\n */\nexport interface AuthContext {\n userId: string;\n role: Role;\n orgId: string;\n siteId: string | null;\n}\n\nconst VALID_ROLES: Role[] = [\n \"SUPER_ADMIN\", \"ORG_ADMIN\", \"COMMANDER\", \"OPERATOR\",\n \"SUPERVISOR\", \"GUARD\", \"CLIENT_VIEWER\", \"TECHNICIAN\",\n];\n\n/** Dev auth. Real impl verifies a JWT/session against users+memberships. */\nexport function resolveAuth(headers: Record): AuthContext {\n const h = (k: string) => (Array.isArray(headers[k]) ? headers[k][0] : headers[k]);\n const role = (h(\"x-guardiq-role\") || \"OPERATOR\").toUpperCase() as Role;\n return {\n userId: h(\"x-guardiq-user\") || \"dev-operator\",\n role: VALID_ROLES.includes(role as Role) ? role : \"CLIENT_VIEWER\",\n orgId: h(\"x-guardiq-org\") || \"dev-org\",\n siteId: h(\"x-guardiq-site\") || null,\n };\n}\n",[],[57,227,59,265],"b97e2c5e-4650-4495-b03a-76e0295c7b90","infra","b44ebea9-7bdb-4190-bb47-6c2b0effdb48",10,["D",1789194515912],[279],[273],{"_33":280,"_13":281,"_36":282,"_38":274,"_40":41,"_42":275,"_44":45,"_46":283,"_17":48,"_49":24,"_51":284,"_53":54,"_55":-5,"_76":285,"_18":286},"190ce375-4808-4221-ae49-604807876e69","railway.toml","2f179186-ae73-11f1-9c96-1607ee4eb77e",["D",1789194515912],"# Railway deployment config — auto-detected when deploying this repo\n# Docs: https://docs.railway.com/\n\n[build]\nbuilder = \"nixpacks\"\n\n[deploy]\nhealthcheckPath = \"/healthz\"\nhealthcheckTimeout = 120\n\n# Services are defined in infra/*.Dockerfile and referenced below.\n# Railway deploys each as its own service; environments wired in the dashboard.\n\n[[service]]\nname = \"api\"\nroot = \"apps/api\"\nbuild = \"Dockerfile\"\nport = 4000\n\n[[service]]\nname = \"web\"\nroot = \"apps/web\"\nbuild = \"Dockerfile\"\nport = 80\n\n# Managed Postgres is added via the Railway dashboard (\"Add plugin → Database\").\n# Set api.DATABASE_URL to its connection string in the env editor.\n",[],[273,281],"e715ac57-9e7a-4cc4-a3a0-e2cdfdb591b4","db","f7a4fc25-cb73-4cef-bd2e-2a7dd82112e8",11,["D",1789194516022],[294,295],[288],{"_33":304,"_13":305,"_36":306,"_38":289,"_40":41,"_42":290,"_44":45,"_46":307,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":308,"_18":309},{"_33":296,"_13":297,"_36":298,"_38":289,"_40":41,"_42":299,"_44":45,"_46":300,"_17":48,"_49":24,"_51":301,"_53":54,"_55":-5,"_76":302,"_18":303},"254b0129-3ba4-4733-b46f-b9f3c063ea1a","seed.sql","2f2b6986-ae73-11f1-9c96-1607ee4eb77e",12,["D",1789194516087],"-- Demonstration seed data. Clearly demo — never real customers.\n\ninsert into organizations (name, handle, tier)\nselect 'ISNTX', 'isntx', 'pro' where not exists (select 1 from organizations where handle='isntx');\n\ninsert into users (email, name) select 'operator@isntx.test','Operator' where not exists (select 1 from users where email='operator@isntx.test');\ninsert into memberships (org_id,user_id,role)\nselect o.id,u.id,'COMMANDER' from organizations o, users u\nwhere o.handle='isntx' and u.email='operator@isntx.test'\non conflict do nothing;\n\ninsert into sites (org_id,name)\nselect o.id,'Construction Site 1' from organizations o where o.handle='isntx'\non conflict do nothing;\n",[],[288,297],"0f3cc7b9-bb90-47cd-87ab-6e25b62bfaa0","migrations","6ff21aa1-b77d-4fe6-9a9e-b967860eb2df",["D",1789194516022],[310],[288,305],{"_33":311,"_13":312,"_36":313,"_38":306,"_40":41,"_42":290,"_44":45,"_46":314,"_17":48,"_49":24,"_51":315,"_53":54,"_55":-5,"_76":316,"_18":317},"fb108a22-b552-4211-814f-78a8995ca2d8","001_init.sql","2f217b92-ae73-11f1-9c96-1607ee4eb77e",["D",1789194516022],"-- GuardIQ Platform — initial schema (phase 1)\n-- Multi-tenant from day one. Tenant isolation = every row is scoped to an org_id.\n\n-- Organizations / tenants\ncreate table if not exists organizations (\n id uuid primary key default gen_random_uuid(),\n name text not null,\n handle text unique not null,\n tier text not null default 'free', -- free | pro | business\n created_at timestamptz not null default now()\n);\n\ncreate table if not exists users (\n id uuid primary key default gen_random_uuid(),\n email text unique not null,\n name text not null default '',\n password_hash text, -- set when local auth used; null if SSO\n provider text not null default 'local', -- local | google | etc.\n created_at timestamptz not null default now()\n);\n\ncreate table if not exists memberships (\n id uuid primary key default gen_random_uuid(),\n org_id uuid not null references organizations(id) on delete cascade,\n user_id uuid not null references users(id) on delete cascade,\n role text not null default 'CLIENT_VIEWER', -- SUPER_ADMIN|ORG_ADMIN|COMMANDER|OPERATOR|SUPERVISOR|GUARD|CLIENT_VIEWER|TECHNICIAN\n unique (org_id, user_id)\n);\n\n-- Sites / geography\ncreate table if not exists sites (\n id uuid primary key default gen_random_uuid(),\n org_id uuid not null references organizations(id) on delete cascade,\n name text not null,\n address text,\n timezone text not null default 'UTC',\n created_at timestamptz not null default now()\n);\n\ncreate table if not exists zones (\n id uuid primary key default gen_random_uuid(),\n site_id uuid not null references sites(id) on delete cascade,\n name text not null,\n kind text not null default 'zone', -- zone | restricted | building | road | gate | door\n polygon jsonb -- future GIS\n);\n\n-- Assigned humans (guards)\ncreate table if not exists guards (\n id uuid primary key default gen_random_uuid(),\n site_id uuid not null references sites(id) on delete cascade,\n name text not null,\n status text not null default 'AVAILABLE', -- AVAILABLE|BUSY|OFF_DUTY|OFFLINE\n current_pos jsonb,\n updated_at timestamptz not null default now()\n);\n\n-- Device registry (robots, cameras, sensors, trailers, drones, humanoids)\ncreate table if not exists devices (\n id uuid primary key default gen_random_uuid(),\n org_id uuid not null references organizations(id) on delete cascade,\n site_id uuid not null references sites(id) on delete cascade,\n type text not null, -- ROBOT|HUMANOID|DRONE|CAMERA|TRAILER|SENSOR|ACCESS_CONTROL|EDGE_COMPUTER\n provider text not null default 'simulator',-- HAL adapter id: simulator | spot | unitree | trailiqu | guardiq\n name text not null,\n manufacturer text,\n model text,\n serial text,\n firmware text,\n status text not null default 'OFFLINE', -- ONLINE|OFFLINE|DEGRADED\n capabilities jsonb not null default '[]',\n modal_data jsonb, -- position, battery, heading...\n last_seen timestamptz,\n created_at timestamptz not null default now()\n);\n\n-- Events (event bus persistence)\ncreate table if not exists events (\n id uuid primary key default gen_random_uuid(),\n org_id uuid not null references organizations(id) on delete cascade,\n event_type text not null, -- PERSON_DETECTED | MOTION_DETECTED | etc.\n source_type text not null, -- CAMERA|ROBOT|SENSOR|GUARD|SYSTEM\n source_id uuid references devices(id),\n site_id uuid references sites(id),\n zone_id uuid references zones(id),\n confidence real,\n payload jsonb not null default '{}',\n dedupe_key text, -- for dedup\n created_at timestamptz not null default now()\n);\ncreate index if not exists events_dedupe_idx on events(dedupe_key);\n\n-- Incidents\ncreate table if not exists incidents (\n id uuid primary key default gen_random_uuid(),\n org_id uuid not null references organizations(id) on delete cascade,\n site_id uuid not null references sites(id) on delete cascade,\n type text not null,\n severity int not null default 0, -- 0-100 risk score\n confidence real,\n status text not null default 'NEW', -- NEW|ANALYZING|INVESTIGATING|VERIFIED|ESCALATED|RESPONDING|RESOLVED|FALSE_ALARM\n location jsonb,\n evidence jsonb not null default '[]',\n operator_id uuid references users(id),\n operator_action text,\n resolution text,\n detected_at timestamptz default now(),\n verified_at timestamptz,\n resolved_at timestamptz,\n created_at timestamptz not null default now()\n);\n\ncreate table if not exists incident_events (\n id uuid primary key default gen_random_uuid(),\n incident_id uuid not null references incidents(id) on delete cascade,\n kind text not null, -- SUBTYPE|STATUS_CHANGE|ASSET_ASSIGNED|OPERATOR_ACTION|AUDIT\n payload jsonb not null default '{}',\n actor text,\n created_at timestamptz not null default now()\n);\n\n-- Missions\ncreate table if not exists missions (\n id uuid primary key default gen_random_uuid(),\n org_id uuid not null references organizations(id) on delete cascade,\n site_id uuid not null references sites(id) on delete cascade,\n incident_id uuid references incidents(id),\n device_id uuid references devices(id),\n type text not null, -- PATROL_ZONE|INVESTIGATE_EVENT|OBSERVE_LOCATION|CHECK_PERIMETER|VERIFY_DOOR|RETURN_TO_DOCK\n status text not null default 'CREATED', -- CREATED|QUEUED|ASSIGNED|EN_ROUTE|ON_SCENE|COMPLETED|FAILED|CANCELLED\n waypoints jsonb not null default '[]',\n started_at timestamptz,\n completed_at timestamptz,\n created_at timestamptz not null default now()\n);\n\n-- Telemetry history\ncreate table if not exists telemetry (\n id bigserial primary key,\n device_id uuid not null references devices(id) on delete cascade,\n t timestamptz not null default now(),\n p jsonb not null -- position, battery, heading, temp...\n);\ncreate index if not exists telemetry_device_idx on telemetry(device_id, t desc);\n\n-- Reports\ncreate table if not exists reports (\n id uuid primary key default gen_random_uuid(),\n org_id uuid not null references organizations(id) on delete cascade,\n incident_id uuid references incidents(id),\n format text not null default 'json', -- json|csv|pdf(marker)\n content jsonb not null default '{}',\n created_at timestamptz not null default now()\n);\n\n-- Integrations (GuardIQ gateway is DISABLED by default)\ncreate table if not exists integrations (\n id uuid primary key default gen_random_uuid(),\n org_id uuid not null references organizations(id) on delete cascade,\n name text not null,\n kind text not null, -- GUARDIQ|WEBHOOK\n config jsonb not null default '{}',\n enabled boolean not null default false,\n created_at timestamptz not null default now()\n);\n\n-- Audit log (every sensitive action)\ncreate table if not exists audit_logs (\n id uuid primary key default gen_random_uuid(),\n org_id uuid references organizations(id),\n site_id uuid references sites(id),\n user_id uuid references users(id),\n device_id uuid references devices(id),\n action text not null,\n payload jsonb not null default '{}',\n correlation_id uuid,\n created_at timestamptz not null default now()\n);\n",[],[288,305,312],"003621d4-5290-44d2-b97b-9fd787159ebe","context","8d6cb79e-d3f2-4c3d-b66d-cf6c88ce820c",1,["D",1789194490537],[325,326,327],[319],{"_33":358,"_13":359,"_36":360,"_38":320,"_40":41,"_42":361,"_44":45,"_46":362,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":363,"_18":364},{"_33":334,"_13":335,"_36":336,"_38":320,"_40":41,"_42":337,"_44":45,"_46":338,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":339,"_18":340},{"_33":328,"_13":88,"_36":329,"_38":320,"_40":41,"_42":321,"_44":45,"_46":330,"_17":48,"_49":24,"_51":331,"_53":54,"_55":-5,"_76":332,"_18":333},"47b4c205-1b2c-4afd-bdae-7cbdd9a620af","1ff0f9ea-ae73-11f1-9541-1607ee4eb77e",["D",1789194490537],"# Context Vault — GuardIQ\n\nOpen this folder with **Obsidian** (`Open folder as vault`). It's the persistent\nknowledge base that makes each new build faster: specs, decisions, snippets and\ntraps are human- and AI-searchable via `[[links]]` and `#tags`, and re-used\nacross every project you build on top of this workflow.\n\n## How to use this harness\n\n1. **New idea / project** → copy `_templates/spec.md`.\n2. **Important call you make** → write an ADR (architectural decision record)\n from `_templates/adr.md`. Decisions become a log, not folklore.\n3. **Working code you want again** → save it as a snippet in `_templates/snippet.md`.\n4. **Research step (before coding anything new)**:\n - **Context7** → pull *current* docs for the library (`context7.com`).\n - **Exa** → search for current approaches / competitive patterns (`exa.ai`).\n - Drop 2–3 bullet findings into a `#linked-notes` note before opening an editor.\n5. Tags live in the frontmatter (`tags: [...]`) so Obsidian and other tools\n (these vals) can parse them uniformly.\n\n## Graph\n\n`[[000-...]]` links everything to everything. Useful graph-wide notes start at\n`000-` (decisions), `100-` (architecture), `200-` (templates).\n\n_All content here describes a demo/simulator. Nothing here claims real hardware\nor real customer integrations._\n",[],[319,88],"462fb919-9691-4c43-828d-5adf50362843","notes","ff5836aa-4dab-44bc-8c38-ad4af3e62a73",5,["D",1789194490813],[341,342],[319,335],{"_33":351,"_13":352,"_36":353,"_38":336,"_40":41,"_42":337,"_44":45,"_46":354,"_17":48,"_49":24,"_51":355,"_53":54,"_55":-5,"_76":356,"_18":357},{"_33":343,"_13":344,"_36":345,"_38":336,"_40":41,"_42":346,"_44":45,"_46":347,"_17":48,"_49":24,"_51":348,"_53":54,"_55":-5,"_76":349,"_18":350},"7b329923-aefb-4baa-8c40-4a5d04f8240d","201-agent-layers.md","2026127e-ae73-11f1-9541-1607ee4eb77e",6,["D",1789194490867],"---\ntype: note\ntitle: 201 — Agent / Orchestrator breakdown\nstatus: draft\ntags: [agent, orchestrator, architecture]\nlinks: [\"101-architecture\"]\n---\n\n# Agent layer (interfaces + events, no recursion)\n\nThe `Supervisor` validates automated recommendations before anything sensitive.\n\n| Agent | Job |\n|---|---|\n| Perception | collect + correlate sensor data |\n| Risk | severity + confidence |\n| Mission | choose response resources |\n| Fleet | track robot availability / assignment |\n| Incident | maintain incident state machine |\n| Report | produce incident reports |\n| Maintenance | flag degraded equipment |\n| Supervisor | gate automated recommendations |\n\nAll communication is **event-driven** (via the bus in `packages/event-bus`),\nnever uncontrolled recursive calls.\n\nSee also: [[103-events]], [[104-safety]].\n",[],[319,335,344],"c39dc573-902a-47c2-bc93-ede9ca07219a","000-decision-record.md","201aa70e-ae73-11f1-9541-1607ee4eb77e",["D",1789194490813],"---\ntype: decision\ntitle: ADR-001 — Phase 0/1 is a standalone simulator\nstatus: accepted\ntags: [adr, architecture, phase-0]\nlinks: [\"000-workflow\", \"101-architecture\"]\n---\n\n# ADR-001: Phase 0/1 is a standalone simulator\n\n## Context\nThe full system targets PG + Node + WebSockets (Railway). But we needed a fast,\nshareable, investor-facing proof of the orchestration concept first.\n\n## Decision\n**Val Town val `guardiq-command`** hosts a self-contained single-page Command\nCenter. All robots/cameras/events are simulated client-side. No live hardware,\nno GuardIQ connection. Demo data clearly labeled.\n\n## Consequences\n- ✅ Instant shareable link, zero infra, no login.\n- ✅ The orchestrator *story* (detect → analyze → mission → verify → human →\n resolve → report) is fully demonstrated.\n- ⚠️ No persistence server-side; KPIs live in browser `localStorage`.\n- ⚠️ Not the real product — that is `guardiq-platform` (this repo) on Railway.\n\n## Status\naccepted. Superseded by ADR-002 as the real platform begins.\n\n## Next step\n[[ADR-002]] — cross-platform architecture on Railway.\n",[],[319,335,352],"8cda65fa-7386-415f-863f-291a31a088af","_templates","516fabbd-f180-4a4a-b031-5556b48e176b",2,["D",1789194490598],[365,366,367],[319,359],{"_33":383,"_13":384,"_36":385,"_38":360,"_40":41,"_42":386,"_44":45,"_46":387,"_17":48,"_49":24,"_51":388,"_53":54,"_55":-5,"_76":389,"_18":390},{"_33":375,"_13":376,"_36":377,"_38":360,"_40":41,"_42":378,"_44":45,"_46":379,"_17":48,"_49":24,"_51":380,"_53":54,"_55":-5,"_76":381,"_18":382},{"_33":368,"_13":369,"_36":370,"_38":360,"_40":41,"_42":361,"_44":45,"_46":371,"_17":48,"_49":24,"_51":372,"_53":54,"_55":-5,"_76":373,"_18":374},"02d65aad-6659-447d-aa14-538827cf78f6","spec.md","1ff9f69e-ae73-11f1-9541-1607ee4eb77e",["D",1789194490598],"---\ntype: spec\ntitle: Project\nstatus: draft\ntags: [spec, template]\n---\n\n# {{Project}}\n\n## Problem\n## Goal / Non-goals\n## Users & scenarios\n## Stack (verify with Context7 before committing)\n## Data model sketch\n## Interfaces / API surfaces\n## Risks / Question marks\n## Query plan\n- [ ] Exa: competitive / current-approach search\n- [ ] Context7: platform & library docs\n- [ ] Draft architecture (ADR)\n",[],[319,359,369],"d8d2058a-ddd7-4537-af3f-e6d8cc0438cd","snippet.md","2011e722-ae73-11f1-9541-1607ee4eb77e",4,["D",1789194490735],"---\ntype: snippet\ntitle: Snippet\ntags: [snippet, template]\n---\n\n# {{Snippet name}}\n\n## When to reach for this\n## Code\n```ts\n// ...\n```\n## Why it works / gotchas\n## Source project\n[[...]]\n",[],[319,359,376],"eb6f9725-0a22-455c-87b8-77c0e1d5f5f0","adr.md","20031a26-ae73-11f1-9541-1607ee4eb77e",3,["D",1789194490650],"---\ntype: adr\ntitle: ADR-000\nstatus: accepted\ntags: [adr, template]\n---\n\n# ADR-000: \n\n## Context\nWhy does this decision need to be made? What constraints?\n\n## Decision\nWhat we chose, and the shape of it.\n\n## Consequences\n- Good: ...\n- Trade-offs: ...\n- (Links: [[...]] to related notes)\n\n## Status\naccepted / proposed / superseded-by\n",[],[319,359,384],"53b679c8-30df-4b3a-8384-a6a17936112f","apps","d400e917-22dc-49af-a027-ceb67fd9fc0d",13,["D",1789194530755],[398,399],[392],{"_33":501,"_13":502,"_36":503,"_38":393,"_40":41,"_42":394,"_44":45,"_46":504,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":505,"_18":506},{"_33":400,"_13":401,"_36":402,"_38":393,"_40":41,"_42":403,"_44":45,"_46":404,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":405,"_18":406},"53e2f101-d42a-4669-a1c1-cfe6408b0137","web","c395899b-787d-4276-8ca1-1f7479743109",32,["D",1789200548944],[407,408,409,410,411,412,413,414],[392,401],{"_33":469,"_13":59,"_36":470,"_38":402,"_40":41,"_42":471,"_44":45,"_46":472,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":473,"_18":474},{"_33":461,"_13":462,"_36":463,"_38":402,"_40":41,"_42":464,"_44":45,"_46":465,"_17":48,"_49":24,"_51":466,"_53":54,"_55":-5,"_76":467,"_18":468},{"_33":453,"_13":454,"_36":455,"_38":402,"_40":41,"_42":456,"_44":45,"_46":457,"_17":48,"_49":24,"_51":458,"_53":54,"_55":-5,"_76":459,"_18":460},{"_33":447,"_13":71,"_36":448,"_38":402,"_40":41,"_42":403,"_44":45,"_46":449,"_17":48,"_49":24,"_51":450,"_53":54,"_55":-5,"_76":451,"_18":452},{"_33":439,"_13":440,"_36":441,"_38":402,"_40":41,"_42":442,"_44":45,"_46":443,"_17":48,"_49":50,"_51":444,"_53":54,"_55":-5,"_76":445,"_18":446},{"_33":431,"_13":432,"_36":433,"_38":402,"_40":41,"_42":434,"_44":45,"_46":435,"_17":48,"_49":50,"_51":436,"_53":54,"_55":-5,"_76":437,"_18":438},{"_33":423,"_13":424,"_36":425,"_38":402,"_40":41,"_42":426,"_44":45,"_46":427,"_17":48,"_49":24,"_51":428,"_53":54,"_55":-5,"_76":429,"_18":430},{"_33":415,"_13":416,"_36":417,"_38":402,"_40":41,"_42":418,"_44":45,"_46":419,"_17":48,"_49":50,"_51":420,"_53":54,"_55":-5,"_76":421,"_18":422},"b1e7fcdc-86bf-4a71-a931-bf839b63fa93","vite.config.ts","3b1f2684-ae81-11f1-94d2-1607ee4eb77e",33,["D",1789200549063],"import { defineConfig } from \"vite\";\nimport react from \"@vitejs/plugin-react\";\n\nexport default defineConfig({\n plugins: [react()],\n server: {\n port: 5173,\n proxy: {\n // dev: forward API + websocket to the backend\n \"/api\": \"http://localhost:4000\",\n \"/healthz\": \"http://localhost:4000\",\n \"/ws\": { target: \"ws://localhost:4000\", ws: true },\n },\n },\n});\n",[],[392,401,416],"ba9f5439-0c9d-4435-9ed3-598c5fd7bc18","tsconfig.json","3ba5d22e-ae81-11f1-94d2-1607ee4eb77e",34,["D",1789200549689],"{\n \"compilerOptions\": {\n \"target\": \"ES2022\",\n \"lib\": [\"ES2022\", \"DOM\", \"DOM.Iterable\"],\n \"module\": \"ESNext\",\n \"moduleResolution\": \"bundler\",\n \"jsx\": \"react-jsx\",\n \"strict\": true,\n \"noEmit\": true,\n \"skipLibCheck\": true,\n \"isolatedModules\": true,\n \"useDefineForClassFields\": true\n },\n \"include\": [\"src\", \"vite.config.ts\"]\n}\n",[],[392,401,424],"e551404a-1f37-4888-943a-c20a4066011d","tailwind.config.js","3c1a7b42-ae81-11f1-94d2-1607ee4eb77e",36,["D",1789200550735],"/** @type {import('tailwindcss').Config} */\nexport default {\n content: [\"./index.html\", \"./src/**/*.{ts,tsx}\"],\n theme: {\n extend: {\n colors: {\n panel: \"#11161f\",\n panel2: \"#0d1117\",\n line: \"#1f2733\",\n ink: \"#dbe4ee\",\n muted: \"#7d8ba1\",\n accent: \"#3aa0ff\",\n good: \"#27c77b\",\n warn: \"#f5a623\",\n bad: \"#ff5d5d\",\n },\n },\n },\n plugins: [],\n};\n",[],[392,401,432],"de2dff04-f390-48d1-a1a7-efc52cb9a224","postcss.config.js","3c91fad2-ae81-11f1-94d2-1607ee4eb77e",37,["D",1789200551529],"export default {\n plugins: { tailwindcss: {}, autoprefixer: {} },\n};\n",[],[392,401,440],"e97b86f1-92bf-4c4e-8a48-b113d724735b","3b0d6340-ae81-11f1-94d2-1607ee4eb77e",["D",1789200548944],"{\n \"name\": \"@guardiq/web\",\n \"version\": \"0.1.0\",\n \"private\": true,\n \"type\": \"module\",\n \"scripts\": {\n \"dev\": \"vite\",\n \"build\": \"tsc -b && vite build\",\n \"preview\": \"vite preview\",\n \"test\": \"vitest run\"\n },\n \"dependencies\": {\n \"react\": \"^18.3.0\",\n \"react-dom\": \"^18.3.0\"\n },\n \"devDependencies\": {\n \"@vitejs/plugin-react\": \"^4.2.0\",\n \"@types/react\": \"^18.2.0\",\n \"@types/react-dom\": \"^18.2.0\",\n \"autoprefixer\": \"^10.4.0\",\n \"postcss\": \"^8.4.0\",\n \"tailwindcss\": \"^3.4.0\",\n \"typescript\": \"^5.4.0\",\n \"vite\": \"^5.2.0\",\n \"vitest\": \"^1.4.0\"\n }\n}\n",[],[392,401,71],"a4f392e2-9c52-477f-aa86-61e910e3ceb8","index.html","3bf213be-ae81-11f1-94d2-1607ee4eb77e",35,["D",1789200550349],"\n\n \n \n \n GuardIQ Robotics Command\n \n \n

\n \n \n\n",[],[392,401,454],"e969b0c1-0c80-4d11-8b57-b14a7de02abc","Dockerfile","3cb9c38c-ae81-11f1-94d2-1607ee4eb77e",38,["D",1789200551743],"FROM node:20-alpine AS build\nWORKDIR /app\nCOPY package.json package-lock.json* ./\nRUN npm ci || npm install\nCOPY . .\nRUN npm run build\n\nFROM nginx:alpine\nCOPY --from=build /app/dist /usr/share/nginx/html\nEXPOSE 80\n",[],[392,401,462],"c6266071-4914-4981-a7e7-9222cca5f0b6","34b65a93-cdc5-4277-868b-6cf1f12afb30",39,["D",1789200571184],[475,476,477],[392,401,59],{"_33":493,"_13":494,"_36":495,"_38":470,"_40":41,"_42":496,"_44":45,"_46":497,"_17":48,"_49":50,"_51":498,"_53":54,"_55":-5,"_76":499,"_18":500},{"_33":485,"_13":486,"_36":487,"_38":470,"_40":41,"_42":488,"_44":45,"_46":489,"_17":48,"_49":24,"_51":490,"_53":54,"_55":-5,"_76":491,"_18":492},{"_33":478,"_13":479,"_36":480,"_38":470,"_40":41,"_42":471,"_44":45,"_46":481,"_17":48,"_49":50,"_51":482,"_53":54,"_55":-5,"_76":483,"_18":484},"496e5561-7be6-40e3-a1d9-efddabb82c39","main.tsx","484949de-ae81-11f1-8a0a-1607ee4eb77e",["D",1789200571184],"import React from \"react\";\nimport ReactDOM from \"react-dom/client\";\nimport { App } from \"./App.tsx\";\nimport \"./index.css\";\n\nReactDOM.createRoot(document.getElementById(\"root\")!).render(\n \n \n ,\n);\n",[],[392,401,59,479],"6b032ece-1e7b-4375-8542-fae29d3f053e","index.css","48512aaa-ae81-11f1-8a0a-1607ee4eb77e",40,["D",1789200571229],"@tailwind base;\n@tailwind components;\n@tailwind utilities;\n\nbody { @apply bg-[#0a0e14] text-ink antialiased; margin: 0; }\n",[],[392,401,59,486],"cf7fdfd1-6015-4aac-9a71-994a03431d2f","App.tsx","485fd9e2-ae81-11f1-8a0a-1607ee4eb77e",41,["D",1789200571311],"import { useEffect, useState } from \"react\";\n\ninterface Status { status?: string; services?: Record; mode?: string; devices?: { status: string; n: number }[]; }\ninterface BusEvent { id: string; eventType: string; source: string; sourceType: string; confidence: number; zoneId?: string; }\n\n/** Resolve ws URL for dev (proxied) and prod (same host). */\nfunction wsUrl() {\n const loc = window.location;\n const proto = loc.protocol === \"https:\" ? \"wss:\" : \"ws:\";\n return `${proto}//${loc.host}/ws`;\n}\n\nexport function App() {\n const [status, setStatus] = useState(null);\n const [events, setEvents] = useState([]);\n\n // fetch system status\n useEffect(() => {\n fetch(\"/api/v1/status\").then((r) => r.json()).then(setStatus).catch(() => {});\n }, []);\n\n // live event stream\n useEffect(() => {\n const ws = new WebSocket(wsUrl());\n ws.onmessage = (m) => {\n try {\n const data = JSON.parse(m.data as string);\n if (data.eventType) setEvents((prev) => [data, ...prev].slice(0, 60));\n } catch { /* hello frames etc. */ }\n };\n return () => ws.close();\n }, []);\n\n return (\n

\n {/* top bar */}\n

GUARDIQ ROBOTICS COMMAND

\n DEMONSTRATION DATA — SIMULATED\n {Object.entries(status?.services ?? {}).map(([k, v]) => (\n \n \n {k.replace(/([a-z])([A-Z])/g, \"$1 $2\").toUpperCase()}\n {v}\n \n ))}\n

\n\n {/* left nav */}\n \n\n {/* center facility */}\n

\n Facility Digital Twin\n mode: {status?.mode ?? \"…\"}\n

\n {/* zones */}\n

WAREHOUSE

RESTRICTED

\n {/* assets */}\n {[\n [\"CAM-01\", 0.82, 0.22], [\"CAM-02\", 0.4, 0.1], [\"CAM-03\", 0.74, 0.58],\n [\"ROBOT-01\", 0.88, 0.32], [\"GUARD-01\", 0.88, 0.76],\n ].map(([name, x, y]) => (\n

\n {(name as string).startsWith(\"CAM\") ? \"◉\" : (name as string).startsWith(\"ROBOT\") ? \"🤖\" : \"🛡\"}\n

\n {name}\n

\n ))}\n {status &&

N devices online: {(status.devices ?? []).find((d) => d.status === \"ONLINE\")?.n ?? 0}

}\n

\n\n {/* right live feed */}\n \n

\n );\n}\n",[],[392,401,59,494],"dc2c007a-a7f7-4b75-8c46-b9c5dc95eba3","api","0bf13641-5a6d-40ef-8222-2de8ecd8a295",["D",1789194530755],[507,508,509,510,511],[392,502],{"_33":556,"_13":59,"_36":557,"_38":503,"_40":41,"_42":558,"_44":45,"_46":559,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":560,"_18":561},{"_33":532,"_13":533,"_36":534,"_38":503,"_40":41,"_42":535,"_44":45,"_46":536,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":537,"_18":538},{"_33":525,"_13":462,"_36":526,"_38":503,"_40":41,"_42":527,"_44":45,"_46":528,"_17":48,"_49":24,"_51":529,"_53":54,"_55":-5,"_76":530,"_18":531},{"_33":519,"_13":71,"_36":520,"_38":503,"_40":41,"_42":394,"_44":45,"_46":521,"_17":48,"_49":24,"_51":522,"_53":54,"_55":-5,"_76":523,"_18":524},{"_33":512,"_13":424,"_36":513,"_38":503,"_40":41,"_42":514,"_44":45,"_46":515,"_17":48,"_49":24,"_51":516,"_53":54,"_55":-5,"_76":517,"_18":518},"7a8accb2-c882-42a5-b631-9645d6cf2a3d","37f635be-ae73-11f1-831f-1607ee4eb77e",14,["D",1789194530835],"{\n \"compilerOptions\": {\n \"target\": \"ES2022\",\n \"module\": \"ESNext\",\n \"moduleResolution\": \"bundler\",\n \"outDir\": \"dist\",\n \"rootDir\": \"src\",\n \"strict\": true,\n \"esModuleInterop\": true,\n \"skipLibCheck\": true,\n \"types\": [\"node\"]\n },\n \"include\": [\"src\"]\n}\n",[],[392,502,424],"350ed730-2336-41ec-9b30-ce60d6f92875","37ec5562-ae73-11f1-831f-1607ee4eb77e",["D",1789194530755],"{\n \"name\": \"@guardiq/api\",\n \"version\": \"0.1.0\",\n \"private\": true,\n \"type\": \"module\",\n \"scripts\": {\n \"dev\": \"tsx watch src/index.ts\",\n \"build\": \"tsc -p tsconfig.json\",\n \"start\": \"node dist/index.js\",\n \"migrate\": \"tsx src/db/migrate.ts\",\n \"test\": \"vitest run\"\n },\n \"dependencies\": {\n \"express\": \"^4.19.0\",\n \"pg\": \"^8.11.0\",\n \"ws\": \"^8.17.0\"\n },\n \"devDependencies\": {\n \"@types/express\": \"^4.17.0\",\n \"@types/node\": \"^20.11.0\",\n \"@types/pg\": \"^8.11.0\",\n \"@types/ws\": \"^8.5.0\",\n \"tsx\": \"^4.7.0\",\n \"typescript\": \"^5.4.0\",\n \"vitest\": \"^1.4.0\"\n }\n}\n",[],[392,502,71],"27991045-15ee-4e1d-8d7e-d164ca593d1a","37feb0ea-ae73-11f1-831f-1607ee4eb77e",15,["D",1789194530894],"FROM node:20-alpine AS build\nWORKDIR /app\nCOPY package.json package-lock.json* ./\nRUN npm ci || npm install\nCOPY . .\nRUN npm run build\n\nFROM node:20-alpine\nWORKDIR /app\nENV NODE_ENV=production\nCOPY package.json package-lock.json* ./\nRUN npm ci --omit=dev || npm install --omit=dev\nCOPY --from=build /app/dist ./dist\nCOPY db/ ../../db/\nEXPOSE 4000\nCMD [\"node\", \"dist/index.js\"]\n",[],[392,502,462],"1fb9df6a-c3fd-4eef-a9ee-7530f446374c","tests","e4ef4224-4cf1-4624-a240-c7af6f545438",31,["D",1789194683165],[539,540],[392,502,533],{"_33":548,"_13":549,"_36":550,"_38":534,"_40":41,"_42":551,"_44":45,"_46":552,"_17":48,"_49":50,"_51":553,"_53":54,"_55":-5,"_76":554,"_18":555},{"_33":541,"_13":542,"_36":543,"_38":534,"_40":41,"_42":535,"_44":45,"_46":544,"_17":48,"_49":50,"_51":545,"_53":54,"_55":-5,"_76":546,"_18":547},"506bc9e3-09ac-4759-9d40-23758ad710e8","scenario.test.ts","92c0e962-ae73-11f1-9680-1607ee4eb77e",["D",1789194683165],"// Automated end-to-end scenario test (headless):\n// attack -> event -> AI analyze -> mission -> robot arrives -> verify ->\n// operator action -> resolve -> report. No network, no DB.\nimport { describe, it, expect, vi } from \"vitest\";\nimport { EventBus } from \"@guardiq/event-bus\";\nimport { analyzeEvent } from \"@guardiq/orchestrator\";\nimport { buildMission, pickRobot } from \"@guardiq/orchestrator/mission\";\nimport { SimulatorRobotProvider } from \"@guardiq/hal/simulator\";\nimport { Incident, operatorAction, transition } from \"@guardiq/orchestrator/incident\";\n\nconst SITE = \"site-1\";\n\ndescribe(\"invasion demo scenario\", () => {\n it(\"runs the full flow\", async () => {\n const bus = new EventBus();\n const robot = new SimulatorRobotProvider(\"ROBOT-01\", { start: { x: 0.88, y: 0.32 } });\n\n // 1. camera emits motion\n const evt = bus.publish({\n eventType: \"PERSON_DETECTED\", source: \"CAM-02\", sourceType: \"CAMERA\",\n siteId: SITE, zoneId: \"restricted-nw\", confidence: 0.91,\n dedupeKey: `${SITE}/CAM-02/person/1`, metadata: {},\n });\n // dedup rejects second copy\n expect(() => bus.publish({ ...evt, dedupeKey: evt.dedupeKey } as any)).toThrow();\n\n // 2. orchestrator analyzes\n const d = analyzeEvent(evt);\n expect(d.decision).toBe(\"PERSON_DETECTED\");\n expect(d.confidence).toBeCloseTo(0.91);\n expect(d.risk).toBeGreaterThan(60);\n expect(d.autoSafe).toBe(false); // restricted zone -> not silently auto-actioned\n expect(d.reason.length).toBeGreaterThan(0);\n\n // 3. fleet picks robot\n const who = pickRobot([\n { deviceId: \"ROBOT-02\", dist: 9, battery: 20, available: true }, // low battery -> skipped\n { deviceId: \"ROBOT-01\", dist: 4, battery: 96, available: true },\n ], \"INVESTIGATE\");\n expect(who).toBe(\"ROBOT-01\");\n\n // 4. mission created + executed\n const m = buildMission(\"m-1\", \"INVESTIGATE_EVENT\", [{ x: 0.32, y: 0.42 }]);\n await robot.sendMission(m);\n expect(m.status).toBe(\"COMPLETED\");\n expect(Math.hypot(robot.pos.x - 0.32, robot.pos.y - 0.42)).toBeLessThan(0.12);\n\n // 5. incident lifecycle with human gate\n const inc: Incident = { id: \"i-1\", status: \"ANALYZING\", verified: false, timeline: [] };\n transition(inc, \"INVESTIGATING\", \"SYSTEM\").status; // robot verifying\n transition(inc, \"VERIFIED\", \"ROBOT-01\");\n expect(inc.verified).toBe(true);\n operatorAction(inc, \"DISPATCH_GUARD\", \"USER/OPERATOR\");\n expect(inc.operatorAction).toBe(\"DISPATCH_GUARD\");\n // system may NOT take a sensitive action\n expect(() => operatorAction(inc, \"RESOLVE\", \"SYSTEM\")).toThrow();\n transition(inc, \"RESPONDING\", \"GUARD-01\");\n transition(inc, \"RESOLVED\", \"USER/OPERATOR\");\n expect(inc.status).toBe(\"RESOLVED\");\n expect(inc.timeline.length).toBeGreaterThanOrEqual(5);\n });\n});\n",[],[392,502,533,542],"e6ed4933-7a08-414a-802d-67641630acf5","rbac.test.ts","6529967a-ae8c-11f1-a3d9-1607ee4eb77e",49,["D",1789205344096],"import { describe, it, expect } from \"vitest\";\nimport { roleHas, requirePermission, resolveAuth } from \"@guardiq/auth\";\n\ndescribe(\"role-based access\", () => {\n it(\"grants least-privilege per role\", () => {\n expect(roleHas(\"CLIENT_VIEWER\", \"sites.read\")).toBe(true);\n expect(roleHas(\"CLIENT_VIEWER\", \"robots.emergency\")).toBe(false);\n expect(roleHas(\"OPERATOR\", \"incidents.write\")).toBe(true);\n expect(roleHas(\"GUARD\", \"incidents.write\")).toBe(false);\n });\n\n it(\"requires any of the given permissions\", () => {\n expect(requirePermission(\"COMMANDER\", [\"robots.emergency\", \"incidents.read\"])).toBe(true);\n expect(requirePermission(\"CLIENT_VIEWER\", [\"robots.emergency\", \"config.manage\"])).toBe(false);\n });\n\n it(\"resolves a caller context from headers\", () => {\n const ctx = resolveAuth({\n \"x-guardiq-role\": \"commander\",\n \"x-guardiq-org\": \"isntx\",\n \"x-guardiq-user\": \"u1\",\n });\n expect(ctx.role).toBe(\"COMMANDER\");\n expect(ctx.orgId).toBe(\"isntx\");\n });\n\n it(\"defaults unknown roles down to CLIENT_VIEWER (security)\", () => {\n expect(resolveAuth({ \"x-guardiq-role\": \"hacker\" }).role).toBe(\"CLIENT_VIEWER\");\n });\n});\n",[],[392,502,533,549],"2438421b-eab1-4389-b8b4-489931c3c2e9","abd72c0c-905a-46a9-a02a-65b5d1db892a",16,["D",1789194530953],[562,563,564,565,566],[392,502,59],{"_33":597,"_13":288,"_36":598,"_38":557,"_40":41,"_42":599,"_44":45,"_46":600,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":601,"_18":602},{"_33":589,"_13":590,"_36":591,"_38":557,"_40":41,"_42":592,"_44":45,"_46":593,"_17":48,"_49":50,"_51":594,"_53":54,"_55":-5,"_76":595,"_18":596},{"_33":582,"_13":583,"_36":584,"_38":557,"_40":41,"_42":558,"_44":45,"_46":585,"_17":48,"_49":50,"_51":586,"_53":54,"_55":-5,"_76":587,"_18":588},{"_33":575,"_13":155,"_36":576,"_38":557,"_40":41,"_42":577,"_44":45,"_46":578,"_17":361,"_49":50,"_51":579,"_53":54,"_55":-5,"_76":580,"_18":581},{"_33":567,"_13":568,"_36":569,"_38":557,"_40":41,"_42":570,"_44":45,"_46":571,"_17":48,"_49":50,"_51":572,"_53":54,"_55":-5,"_76":573,"_18":574},"f697f62a-8c7e-4e01-bf0c-c5906433a758","middleware.ts","5969861a-ae8c-11f1-8cde-1607ee4eb77e",46,["D",1789205324376],"import type { NextFunction, Request, Response } from \"express\";\nimport { resolveAuth, requirePermission, type AuthContext, type Permission } from \"@guardiq/auth\";\n\ndeclare global {\n namespace Express {\n interface Request { auth?: AuthContext }\n }\n}\n\n/** Resolve the tenant + role for every request; attach to req.auth. */\nexport function authn(req: Request, _res: Response, next: NextFunction) {\n req.auth = resolveAuth(req.headers as Record);\n next();\n}\n\n/** RBAC gate factory: require one of `perms` on the caller's role. */\nexport function requirePerm(...perms: Permission[]) {\n return (req: Request, res: Response, next: NextFunction) => {\n if (!req.auth) return res.status(401).json({ error: \"unauthenticated\" });\n if (!requirePermission(req.auth.role, perms)) {\n return res.status(403).json({ error: `forbidden for role ${req.auth.role}`, need: perms });\n }\n next();\n };\n}\n\n/** Tenant guard: does this caller own the site/org in play? Prevents cross-tenant reads. */\nexport function sameTenant(req: Request, res: Response, next: NextFunction) {\n const { orgId } = req.auth!;\n const targetOrg = req.body?.orgId ?? req.query?.orgId ?? orgId;\n if (targetOrg !== orgId) {\n return res.status(403).json({ error: \"cross-tenant access denied\" });\n }\n next();\n}\n",[],[392,502,59,568],"244b3b99-47fa-4b69-8d7e-8114b31093bd","3834126c-ae73-11f1-831f-1607ee4eb77e",48,["D",1789205344037],"import express from \"express\";\nimport { createServer } from \"node:http\";\nimport { WebSocketServer } from \"ws\";\nimport { pool } from \"./db.ts\";\nimport { env } from \"./env.ts\";\nimport { EventBus } from \"@guardiq/event-bus\";\nimport { authn, requirePerm, sameTenant } from \"./middleware.ts\";\n\nconst app = express();\napp.use(express.json());\napp.use(authn); // resolve tenant + role per request\n\n// ---- Tenant-scoped IPC -------------------------------------------------------\n// Every resource query is scoped to req.auth.orgId. Cross-tenant requests are\n// rejected by sameTenant. RBAC gates each route by least-privilege.\n\napp.get(\"/api/v1/incidents\", requirePerm(\"incidents.read\", \"sites.read\"), async (req, res) => {\n const { orgId } = req.auth!;\n const rows = await pool.query(\n `select id, status, severity, type, detected_at from incidents where org_id = $1 order by detected_at desc limit 50`,\n [orgId],\n ).catch(() => ({ rows: [] as never[] }));\n res.json({ orgId, incidents: rows.rows });\n});\n\napp.post(\"/api/v1/incidents/:id/action\", requirePerm(\"incidents.write\"), sameTenant, async (req, res) => {\n const { action } = req.body as { action?: string };\n if (!action || ![\"OBSERVE\", \"DISPATCH_GUARD\", \"ANNOUNCE\", \"ESCALATE\", \"FALSE_ALARM\", \"RESOLVE\"].includes(action)) {\n return res.status(400).json({ error: \"invalid operator action\" });\n }\n // Human-only sensitive actions are enforced here (role check above already\n // requires incidents.write; expand with a human-mode check in production).\n await pool.query(`insert into incident_events (incident_id, kind, payload, actor) values ($1, 'OPERATOR_ACTION', $2::jsonb, $3)`,\n [req.params.id, JSON.stringify({ action }), req.auth!.userId]);\n res.json({ ok: true, action, actor: req.auth!.userId });\n});\n\napp.post(\"/api/v1/robots/:id/emergency\", requirePerm(\"robots.emergency\"), sameTenant, async (req, res) => {\n // Safety engine: emergency stop is gated to roles with robots.emergency and\n // always writes an audit trail.\n await pool.query(`insert into audit_logs (org_id, device_id, action, payload) values ($1, $2, 'EMERGENCY_STOP', $3::jsonb)`,\n [req.auth!.orgId, req.params.id, JSON.stringify({ by: req.auth!.userId })]);\n res.json({ ok: true, action: \"EMERGENCY_STOP\" });\n});\n\n// ---- Health / readiness ------------------------------------------------------\napp.get(\"/healthz\", async (_req, res) => {\n try {\n await pool.query(\"select 1\");\n res.json({ status: \"ok\", service: \"guardiq-api\", version: \"0.1.0\" });\n } catch {\n res.status(503).json({ status: \"degraded\" });\n }\n});\n\n// ---- System status -----------------------------------------------------------\napp.get(\"/api/v1/status\", async (_req, res) => {\n const rows = await pool.query(`\n select status, count(*)::int as n from devices group by status\n `).catch(() => ({ rows: [] as never[] }));\n res.json({\n services: {\n api: \"HEALTHY\",\n database: \"HEALTHY\",\n eventBus: \"HEALTHY\",\n aiOrchestrator: \"HEALTHY\",\n guardiqGateway: env.guardiqEnabled ? \"ENABLED\" : \"DISABLED\",\n },\n devices: rows.rows,\n mode: \"simulation\",\n });\n});\n\n// ---- Real-time (everything sim bridges through the bus + ws) ----------------\nconst server = createServer(app);\nconst wss = new WebSocketServer({ server, path: \"/ws\" });\nconst bus = new EventBus();\n\nwss.on(\"connection\", (ws) => {\n const off = bus.subscribe((evt) => {\n if (ws.readyState === ws.OPEN) ws.send(JSON.stringify(evt));\n });\n ws.on(\"close\", off);\n ws.send(JSON.stringify({ type: \"hello\", ts: Date.now() }));\n});\n\n// Broadcast bus events to all clients too\nbus.subscribe((evt) => {\n for (const client of wss.clients) {\n if (client.readyState === client.OPEN) client.send(JSON.stringify(evt));\n }\n});\n\n// ---- Boot --------------------------------------------------------------------\npool.query(\"select 1\").then(() => server.listen(env.port, () => {\n console.log(`guardiq-api listening on :${env.port}`);\n})).catch((e) => {\n console.error(\"DB unreachable (is Postgres up?). Rx:\", (e as Error).message);\n server.listen(env.port, () => console.log(`guardiq-api listening (db down) :${env.port}`));\n});\n",[],[392,502,59,155],"c0d0d5ca-c279-4f26-8537-32c30f66c5ea","env.ts","380a4202-ae73-11f1-831f-1607ee4eb77e",["D",1789194530953],"// Central env access. Fail fast on required vars; never log values.\nexport const env = {\n nodeEnv: process.env.NODE_ENV ?? \"development\",\n port: Number(process.env.PORT ?? 4000),\n databaseUrl: process.env.DATABASE_URL ?? \"\",\n sessionSecret: process.env.SESSION_SECRET ?? \"dev-insecure-change-me\",\n guardiqEnabled: (process.env.GUARDIQ_GATEWAY_ENABLED ?? \"false\").toLowerCase() === \"true\",\n guardiqUrl: process.env.GUARDIQ_GATEWAY_URL ?? \"\",\n};\n",[],[392,502,59,583],"667268e3-19f3-479d-9d0e-500795bd1241","db.ts","382493d2-ae73-11f1-831f-1607ee4eb77e",17,["D",1789194531099],"import pg from \"pg\";\nimport { env } from \"./env.ts\";\n\nexport const pool = new pg.Pool({\n connectionString: env.databaseUrl,\n max: 10,\n});\n\nexport const query = (text: string, params: unknown[] = []) => pool.query(text, params);\n",[],[392,502,59,590],"4385aef1-43c0-4625-8c0b-249d78de96b4","42ed4057-36f5-4c93-9268-99588af6b637",19,["D",1789194551591],[603],[392,502,59,288],{"_33":604,"_13":605,"_36":606,"_38":598,"_40":41,"_42":599,"_44":45,"_46":607,"_17":48,"_49":50,"_51":608,"_53":54,"_55":-5,"_76":609,"_18":610},"c229b66e-4f90-49de-9394-499cff67c0e8","migrate.ts","4454e710-ae73-11f1-aa80-1607ee4eb77e",["D",1789194551591],"// Runs db/migrations/*.sql in order against DATABASE_URL.\n// For local dev; on Railway the db plugin / start script handles this too.\nimport { readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { pool } from \"./db.ts\";\n\nconst here = fileURLToPath(new URL(\".\", import.meta.url));\nconst dir = join(here, \"../../../db/migrations\");\n\nasync function main() {\n const files = (await readdirSafe(dir)).filter((f) => f.endsWith(\".sql\")).sort();\n for (const f of files) {\n const sql = await readFile(join(dir, f), \"utf8\");\n await pool.query(sql);\n console.log(\"migrated\", f);\n }\n process.exit(0);\n}\nasync function readdirSafe(d: string): Promise {\n try { return await (await import(\"node:fs/promises\")).readdir(d); } catch { return []; }\n}\nmain().catch((e) => { console.error(e); process.exit(1); });\n",[],[392,502,59,288,605],"db1b462e-d75b-4e72-ad79-c2a3a45673c8",["D",1789194473035],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","GuardIQ platform — staging repo + Obsidian context vault","imageUrl","userId","87827f52-809f-4c8c-82fd-cce5c85d6470","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","01a09439-0fa1-765a-b133-877a1dbbdae8","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_665":661},"org",{"_11":12,"_658":659,"_660":661,"_621":622,"_662":663,"_664":54},"branch",{"_17":551,"_13":16,"_33":41,"_650":611,"_651":-5,"_652":-5,"_653":-5,"_654":-5,"_655":-5,"_656":14,"_657":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Brandon Schoelkoph","avatar","https://lh3.googleusercontent.com/a/ACg8ocL_nGI6cWAuFF3QdGYr09skIboOCarbJkURw78yoFABEesnKSS2=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":611,"_13":14,"_46":902,"_613":-5,"_614":54,"_615":616,"_617":616,"_618":619,"_620":-5,"_621":622,"_623":-5,"_624":54,"_625":-5,"_626":-5,"_627":48,"_628":629,"_630":-5,"_631":-5,"_632":-5,"_633":-5,"_634":635,"_636":635,"_637":638,"_639":638,"_640":638,"_641":635,"_642":635,"_643":903,"_645":904,"_647":905,"_649":54},[695,722,731,735,737,759,760,761,762,763],"files",[695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763],"counts",{"_686":48,"_687":321,"_688":48,"_32":689,"_690":691},[],{"_33":34,"_13":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_18":685},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[57,58,59,35],"pulls","branches","forks",{"_692":48,"_694":48},"connections",{"_692":48,"_693":48},"count","unfilledCount","emptyCount",{"_33":391,"_13":392,"_36":393,"_38":-5,"_40":41,"_42":394,"_44":45,"_46":395,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":900,"_18":901},{"_33":501,"_13":502,"_36":503,"_38":393,"_40":41,"_42":394,"_44":45,"_46":504,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":898,"_18":899},{"_33":556,"_13":59,"_36":557,"_38":503,"_40":41,"_42":558,"_44":45,"_46":559,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":896,"_18":897},{"_33":597,"_13":288,"_36":598,"_38":557,"_40":41,"_42":599,"_44":45,"_46":600,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":894,"_18":895},{"_33":604,"_13":605,"_36":606,"_38":598,"_40":41,"_42":599,"_44":45,"_46":607,"_17":48,"_49":50,"_51":608,"_53":54,"_55":-5,"_76":892,"_18":893},{"_33":589,"_13":590,"_36":591,"_38":557,"_40":41,"_42":592,"_44":45,"_46":593,"_17":48,"_49":50,"_51":594,"_53":54,"_55":-5,"_76":890,"_18":891},{"_33":582,"_13":583,"_36":584,"_38":557,"_40":41,"_42":558,"_44":45,"_46":585,"_17":48,"_49":50,"_51":586,"_53":54,"_55":-5,"_76":888,"_18":889},{"_33":575,"_13":155,"_36":576,"_38":557,"_40":41,"_42":577,"_44":45,"_46":578,"_17":361,"_49":50,"_51":579,"_53":54,"_55":-5,"_76":886,"_18":887},{"_33":567,"_13":568,"_36":569,"_38":557,"_40":41,"_42":570,"_44":45,"_46":571,"_17":48,"_49":50,"_51":572,"_53":54,"_55":-5,"_76":884,"_18":885},{"_33":532,"_13":533,"_36":534,"_38":503,"_40":41,"_42":535,"_44":45,"_46":536,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":882,"_18":883},{"_33":548,"_13":549,"_36":550,"_38":534,"_40":41,"_42":551,"_44":45,"_46":552,"_17":48,"_49":50,"_51":553,"_53":54,"_55":-5,"_76":880,"_18":881},{"_33":541,"_13":542,"_36":543,"_38":534,"_40":41,"_42":535,"_44":45,"_46":544,"_17":48,"_49":50,"_51":545,"_53":54,"_55":-5,"_76":878,"_18":879},{"_33":525,"_13":462,"_36":526,"_38":503,"_40":41,"_42":527,"_44":45,"_46":528,"_17":48,"_49":24,"_51":529,"_53":54,"_55":-5,"_76":876,"_18":877},{"_33":519,"_13":71,"_36":520,"_38":503,"_40":41,"_42":394,"_44":45,"_46":521,"_17":48,"_49":24,"_51":522,"_53":54,"_55":-5,"_76":874,"_18":875},{"_33":512,"_13":424,"_36":513,"_38":503,"_40":41,"_42":514,"_44":45,"_46":515,"_17":48,"_49":24,"_51":516,"_53":54,"_55":-5,"_76":872,"_18":873},{"_33":400,"_13":401,"_36":402,"_38":393,"_40":41,"_42":403,"_44":45,"_46":404,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":870,"_18":871},{"_33":469,"_13":59,"_36":470,"_38":402,"_40":41,"_42":471,"_44":45,"_46":472,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":868,"_18":869},{"_33":493,"_13":494,"_36":495,"_38":470,"_40":41,"_42":496,"_44":45,"_46":497,"_17":48,"_49":50,"_51":498,"_53":54,"_55":-5,"_76":866,"_18":867},{"_33":485,"_13":486,"_36":487,"_38":470,"_40":41,"_42":488,"_44":45,"_46":489,"_17":48,"_49":24,"_51":490,"_53":54,"_55":-5,"_76":864,"_18":865},{"_33":478,"_13":479,"_36":480,"_38":470,"_40":41,"_42":471,"_44":45,"_46":481,"_17":48,"_49":50,"_51":482,"_53":54,"_55":-5,"_76":862,"_18":863},{"_33":461,"_13":462,"_36":463,"_38":402,"_40":41,"_42":464,"_44":45,"_46":465,"_17":48,"_49":24,"_51":466,"_53":54,"_55":-5,"_76":860,"_18":861},{"_33":453,"_13":454,"_36":455,"_38":402,"_40":41,"_42":456,"_44":45,"_46":457,"_17":48,"_49":24,"_51":458,"_53":54,"_55":-5,"_76":858,"_18":859},{"_33":447,"_13":71,"_36":448,"_38":402,"_40":41,"_42":403,"_44":45,"_46":449,"_17":48,"_49":24,"_51":450,"_53":54,"_55":-5,"_76":856,"_18":857},{"_33":439,"_13":440,"_36":441,"_38":402,"_40":41,"_42":442,"_44":45,"_46":443,"_17":48,"_49":50,"_51":444,"_53":54,"_55":-5,"_76":854,"_18":855},{"_33":431,"_13":432,"_36":433,"_38":402,"_40":41,"_42":434,"_44":45,"_46":435,"_17":48,"_49":50,"_51":436,"_53":54,"_55":-5,"_76":852,"_18":853},{"_33":423,"_13":424,"_36":425,"_38":402,"_40":41,"_42":426,"_44":45,"_46":427,"_17":48,"_49":24,"_51":428,"_53":54,"_55":-5,"_76":850,"_18":851},{"_33":415,"_13":416,"_36":417,"_38":402,"_40":41,"_42":418,"_44":45,"_46":419,"_17":48,"_49":50,"_51":420,"_53":54,"_55":-5,"_76":848,"_18":849},{"_33":318,"_13":319,"_36":320,"_38":-5,"_40":41,"_42":321,"_44":45,"_46":322,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":846,"_18":847},{"_33":358,"_13":359,"_36":360,"_38":320,"_40":41,"_42":361,"_44":45,"_46":362,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":844,"_18":845},{"_33":383,"_13":384,"_36":385,"_38":360,"_40":41,"_42":386,"_44":45,"_46":387,"_17":48,"_49":24,"_51":388,"_53":54,"_55":-5,"_76":842,"_18":843},{"_33":375,"_13":376,"_36":377,"_38":360,"_40":41,"_42":378,"_44":45,"_46":379,"_17":48,"_49":24,"_51":380,"_53":54,"_55":-5,"_76":840,"_18":841},{"_33":368,"_13":369,"_36":370,"_38":360,"_40":41,"_42":361,"_44":45,"_46":371,"_17":48,"_49":24,"_51":372,"_53":54,"_55":-5,"_76":838,"_18":839},{"_33":334,"_13":335,"_36":336,"_38":320,"_40":41,"_42":337,"_44":45,"_46":338,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":836,"_18":837},{"_33":351,"_13":352,"_36":353,"_38":336,"_40":41,"_42":337,"_44":45,"_46":354,"_17":48,"_49":24,"_51":355,"_53":54,"_55":-5,"_76":834,"_18":835},{"_33":343,"_13":344,"_36":345,"_38":336,"_40":41,"_42":346,"_44":45,"_46":347,"_17":48,"_49":24,"_51":348,"_53":54,"_55":-5,"_76":832,"_18":833},{"_33":328,"_13":88,"_36":329,"_38":320,"_40":41,"_42":321,"_44":45,"_46":330,"_17":48,"_49":24,"_51":331,"_53":54,"_55":-5,"_76":830,"_18":831},{"_33":287,"_13":288,"_36":289,"_38":-5,"_40":41,"_42":290,"_44":45,"_46":291,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":828,"_18":829},{"_33":304,"_13":305,"_36":306,"_38":289,"_40":41,"_42":290,"_44":45,"_46":307,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":826,"_18":827},{"_33":311,"_13":312,"_36":313,"_38":306,"_40":41,"_42":290,"_44":45,"_46":314,"_17":48,"_49":24,"_51":315,"_53":54,"_55":-5,"_76":824,"_18":825},{"_33":296,"_13":297,"_36":298,"_38":289,"_40":41,"_42":299,"_44":45,"_46":300,"_17":48,"_49":24,"_51":301,"_53":54,"_55":-5,"_76":822,"_18":823},{"_33":272,"_13":273,"_36":274,"_38":-5,"_40":41,"_42":275,"_44":45,"_46":276,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":820,"_18":821},{"_33":280,"_13":281,"_36":282,"_38":274,"_40":41,"_42":275,"_44":45,"_46":283,"_17":48,"_49":24,"_51":284,"_53":54,"_55":-5,"_76":818,"_18":819},{"_33":111,"_13":57,"_36":112,"_38":-5,"_40":41,"_42":113,"_44":45,"_46":114,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":816,"_18":817},{"_33":226,"_13":227,"_36":228,"_38":112,"_40":41,"_42":229,"_44":45,"_46":230,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":814,"_18":815},{"_33":241,"_13":59,"_36":242,"_38":228,"_40":41,"_42":243,"_44":45,"_46":244,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":812,"_18":813},{"_33":264,"_13":265,"_36":266,"_38":242,"_40":41,"_42":267,"_44":45,"_46":268,"_17":48,"_49":50,"_51":269,"_53":54,"_55":-5,"_76":810,"_18":811},{"_33":257,"_13":155,"_36":258,"_38":242,"_40":41,"_42":259,"_44":45,"_46":260,"_17":48,"_49":50,"_51":261,"_53":54,"_55":-5,"_76":808,"_18":809},{"_33":250,"_13":251,"_36":252,"_38":242,"_40":41,"_42":243,"_44":45,"_46":253,"_17":48,"_49":50,"_51":254,"_53":54,"_55":-5,"_76":806,"_18":807},{"_33":235,"_13":71,"_36":236,"_38":228,"_40":41,"_42":229,"_44":45,"_46":237,"_17":48,"_49":24,"_51":238,"_53":54,"_55":-5,"_76":804,"_18":805},{"_33":198,"_13":199,"_36":200,"_38":112,"_40":41,"_42":201,"_44":45,"_46":202,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":802,"_18":803},{"_33":213,"_13":59,"_36":214,"_38":200,"_40":41,"_42":215,"_44":45,"_46":216,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":800,"_18":801},{"_33":220,"_13":155,"_36":221,"_38":214,"_40":41,"_42":215,"_44":45,"_46":222,"_17":48,"_49":50,"_51":223,"_53":54,"_55":-5,"_76":798,"_18":799},{"_33":207,"_13":71,"_36":208,"_38":200,"_40":41,"_42":201,"_44":45,"_46":209,"_17":48,"_49":24,"_51":210,"_53":54,"_55":-5,"_76":796,"_18":797},{"_33":169,"_13":58,"_36":170,"_38":112,"_40":41,"_42":113,"_44":45,"_46":171,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":794,"_18":795},{"_33":182,"_13":59,"_36":39,"_38":170,"_40":41,"_42":183,"_44":45,"_46":184,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":792,"_18":793},{"_33":192,"_13":155,"_36":193,"_38":39,"_40":41,"_42":183,"_44":45,"_46":194,"_17":48,"_49":50,"_51":195,"_53":54,"_55":-5,"_76":790,"_18":791},{"_33":34,"_13":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":189,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_76":788,"_18":789},{"_33":176,"_13":71,"_36":177,"_38":170,"_40":41,"_42":113,"_44":45,"_46":178,"_17":48,"_49":24,"_51":179,"_53":54,"_55":-5,"_76":786,"_18":787},{"_33":122,"_13":123,"_36":124,"_38":112,"_40":41,"_42":125,"_44":45,"_46":126,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":784,"_18":785},{"_33":137,"_13":59,"_36":138,"_38":124,"_40":41,"_42":139,"_44":45,"_46":140,"_17":48,"_49":115,"_51":-5,"_53":54,"_55":-5,"_76":782,"_18":783},{"_33":161,"_13":162,"_36":163,"_38":138,"_40":41,"_42":164,"_44":45,"_46":165,"_17":48,"_49":50,"_51":166,"_53":54,"_55":-5,"_76":780,"_18":781},{"_33":154,"_13":155,"_36":156,"_38":138,"_40":41,"_42":139,"_44":45,"_46":157,"_17":48,"_49":50,"_51":158,"_53":54,"_55":-5,"_76":778,"_18":779},{"_33":146,"_13":147,"_36":148,"_38":138,"_40":41,"_42":149,"_44":45,"_46":150,"_17":48,"_49":50,"_51":151,"_53":54,"_55":-5,"_76":776,"_18":777},{"_33":131,"_13":71,"_36":132,"_38":124,"_40":41,"_42":125,"_44":45,"_46":133,"_17":48,"_49":24,"_51":134,"_53":54,"_55":-5,"_76":774,"_18":775},{"_33":103,"_13":104,"_36":105,"_38":-5,"_40":41,"_42":106,"_44":45,"_46":107,"_17":48,"_49":24,"_51":108,"_53":54,"_55":-5,"_76":772,"_18":773},{"_33":95,"_13":96,"_36":97,"_38":-5,"_40":41,"_42":98,"_44":45,"_46":99,"_17":48,"_49":24,"_51":100,"_53":54,"_55":-5,"_76":770,"_18":771},{"_33":87,"_13":88,"_36":89,"_38":-5,"_40":41,"_42":90,"_44":45,"_46":91,"_17":48,"_49":24,"_51":92,"_53":54,"_55":-5,"_76":768,"_18":769},{"_33":79,"_13":80,"_36":81,"_38":-5,"_40":41,"_42":82,"_44":45,"_46":83,"_17":48,"_49":24,"_51":84,"_53":54,"_55":-5,"_76":766,"_18":767},{"_33":70,"_13":71,"_36":72,"_38":-5,"_40":41,"_42":73,"_44":45,"_46":74,"_17":48,"_49":24,"_51":75,"_53":54,"_55":-5,"_76":764,"_18":765},[],[71],[],[80],[],[88],[],[96],[],[104],[],[57,123,71],[],[57,123,59,147],[],[57,123,59,155],[],[57,123,59,162],[755,756,757],[57,123,59],[754,758],[57,123],[],[57,58,71],[],[57,58,59,35],[],[57,58,59,155],[750,751],[57,58,59],[749,752],[57,58],[],[57,199,71],[],[57,199,59,155],[746],[57,199,59],[745,747],[57,199],[],[57,227,71],[],[57,227,59,251],[],[57,227,59,155],[],[57,227,59,265],[740,741,742],[57,227,59],[739,743],[57,227],[738,744,748,753],[57],[],[273,281],[736],[273],[],[288,297],[],[288,305,312],[733],[288,305],[732,734],[288],[],[319,88],[],[319,335,344],[],[319,335,352],[728,729],[319,335],[],[319,359,369],[],[319,359,376],[],[319,359,384],[724,725,726],[319,359],[723,727,730],[319],[],[392,401,416],[],[392,401,424],[],[392,401,432],[],[392,401,440],[],[392,401,71],[],[392,401,454],[],[392,401,462],[],[392,401,59,479],[],[392,401,59,486],[],[392,401,59,494],[712,713,714],[392,401,59],[711,715,716,717,718,719,720,721],[392,401],[],[392,502,424],[],[392,502,71],[],[392,502,462],[],[392,502,533,542],[],[392,502,533,549],[705,706],[392,502,533],[],[392,502,59,568],[],[392,502,59,155],[],[392,502,59,583],[],[392,502,59,590],[],[392,502,59,288,605],[699],[392,502,59,288],[698,700,701,702,703],[392,502,59],[697,704,707,708,709],[392,502],[696,710],[392],["D",1789194473035],{"_11":12,"_665":661},{"_11":12,"_658":659,"_660":661,"_621":622,"_662":663,"_664":54},{"_17":551,"_13":16,"_33":41,"_650":611,"_651":-5,"_652":-5,"_653":-5,"_654":-5,"_655":-5,"_656":14,"_657":12},"ctx",{"_643":-5,"_682":939,"_940":941,"_942":943,"_944":54,"_945":54,"_946":54,"_947":45,"_948":-5,"_949":-7,"_950":-7,"_951":48,"_952":54,"_953":54,"_954":-5,"_955":54,"_956":54,"_957":54,"_958":-5},"ENV",{"_910":911,"_912":913,"_914":16,"_915":916,"_917":918,"_919":920,"_921":922,"_923":924,"_925":926,"_927":928,"_929":930,"_931":932,"_933":934,"_935":936,"_937":938},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]