Add Pandora read-only runner

Merge read-only action runner.

Author: besfeng23

app/api/pandora/operator-actions/[id]/approve/route.ts

@@ -0,0 +1,12 @@
+import { NextResponse, type NextRequest } from "next/server";
+import { assertNoClientUserIdOverride, resolvePandoraServerSession } from "@/lib/auth/pandora-server-session-resolver";
+import { createSupabaseServerClient } from "@/lib/supabase/server";
+import { approveOperatorAction, type OperatorActionDbClient } from "@/lib/services/pandora-operator-action-service";
+export const dynamic = "force-dynamic";
+export async function POST(request: NextRequest, context: { params: Promise<{ id: string }> }) {
+  let body: unknown; try { body = await request.json(); } catch { body = {}; }
+  const rejected = await assertNoClientUserIdOverride(request, body); if (rejected) return NextResponse.json({ ok: false, blockers: rejected.blockers }, { status: 400 });
+  const session = await resolvePandoraServerSession({ request }); if (!session.ok) return NextResponse.json({ ok: false, blockers: session.blockers }, { status: 401 });
+  try { const { id } = await context.params; const supabase = await createSupabaseServerClient(); const action = await approveOperatorAction(supabase as unknown as OperatorActionDbClient, { userId: session.session.userId, actionId: id }); return NextResponse.json({ ok: true, action }); }
+  catch (error) { return NextResponse.json({ ok: false, error: error instanceof Error ? error.message : "Action cannot be approved" }, { status: 400 }); }
+}

app/api/pandora/operator-actions/[id]/cancel/route.ts

@@ -1,12 +1,12 @@
 import { NextResponse, type NextRequest } from "next/server";
-import { resolvePandoraServerSession } from "@/lib/auth/pandora-server-session-resolver";
+import { assertNoClientUserIdOverride, resolvePandoraServerSession } from "@/lib/auth/pandora-server-session-resolver";
 import { createSupabaseServerClient } from "@/lib/supabase/server";
 import { cancelOperatorAction, type OperatorActionDbClient } from "@/lib/services/pandora-operator-action-service";
-
 export const dynamic = "force-dynamic";
 export async function POST(request: NextRequest, context: { params: Promise<{ id: string }> }) {
-  const session = await resolvePandoraServerSession({ request });
-  if (!session.ok) return NextResponse.json({ ok: false, blockers: session.blockers }, { status: 401 });
+  let body: unknown; try { body = await request.json(); } catch { body = {}; }
+  const rejected = await assertNoClientUserIdOverride(request, body); if (rejected) return NextResponse.json({ ok: false, blockers: rejected.blockers }, { status: 400 });
+  const session = await resolvePandoraServerSession({ request }); if (!session.ok) return NextResponse.json({ ok: false, blockers: session.blockers }, { status: 401 });
   try { const { id } = await context.params; const supabase = await createSupabaseServerClient(); const action = await cancelOperatorAction(supabase as unknown as OperatorActionDbClient, { userId: session.session.userId, actionId: id }); return NextResponse.json({ ok: true, action }); }
-  catch (error) { return NextResponse.json({ ok: false, error: error instanceof Error ? error.message : "Action not found" }, { status: 404 }); }
+  catch (error) { return NextResponse.json({ ok: false, error: error instanceof Error ? error.message : "Action not found" }, { status: 400 }); }
 }

app/api/pandora/operator-actions/[id]/dry-run/route.ts

@@ -1,12 +1,12 @@
 import { NextResponse, type NextRequest } from "next/server";
-import { resolvePandoraServerSession } from "@/lib/auth/pandora-server-session-resolver";
+import { assertNoClientUserIdOverride, resolvePandoraServerSession } from "@/lib/auth/pandora-server-session-resolver";
 import { createSupabaseServerClient } from "@/lib/supabase/server";
 import { dryRunOperatorAction, type OperatorActionDbClient } from "@/lib/services/pandora-operator-action-service";
-
 export const dynamic = "force-dynamic";
 export async function POST(request: NextRequest, context: { params: Promise<{ id: string }> }) {
-  const session = await resolvePandoraServerSession({ request });
-  if (!session.ok) return NextResponse.json({ ok: false, blockers: session.blockers }, { status: 401 });
+  let body: unknown; try { body = await request.json(); } catch { body = {}; }
+  const rejected = await assertNoClientUserIdOverride(request, body); if (rejected) return NextResponse.json({ ok: false, blockers: rejected.blockers }, { status: 400 });
+  const session = await resolvePandoraServerSession({ request }); if (!session.ok) return NextResponse.json({ ok: false, blockers: session.blockers }, { status: 401 });
   try { const { id } = await context.params; const supabase = await createSupabaseServerClient(); const action = await dryRunOperatorAction(supabase as unknown as OperatorActionDbClient, { userId: session.session.userId, actionId: id }); return NextResponse.json({ ok: true, action, result: action.result }); }
-  catch (error) { return NextResponse.json({ ok: false, error: error instanceof Error ? error.message : "Action not found" }, { status: 404 }); }
+  catch (error) { return NextResponse.json({ ok: false, error: error instanceof Error ? error.message : "Action not found" }, { status: 400 }); }
 }

app/api/pandora/operator-actions/[id]/events/route.ts

@@ -0,0 +1,10 @@
+import { NextResponse, type NextRequest } from "next/server";
+import { resolvePandoraServerSession } from "@/lib/auth/pandora-server-session-resolver";
+import { createSupabaseServerClient } from "@/lib/supabase/server";
+import { listOperatorActionEvents, type OperatorActionDbClient } from "@/lib/services/pandora-operator-action-service";
+export const dynamic = "force-dynamic";
+export async function GET(request: NextRequest, context: { params: Promise<{ id: string }> }) {
+  const session = await resolvePandoraServerSession({ request }); if (!session.ok) return NextResponse.json({ ok: false, blockers: session.blockers }, { status: 401 });
+  try { const { id } = await context.params; const supabase = await createSupabaseServerClient(); const events = await listOperatorActionEvents(supabase as unknown as OperatorActionDbClient, { userId: session.session.userId, actionId: id }); return NextResponse.json({ ok: true, events }); }
+  catch (error) { return NextResponse.json({ ok: false, error: error instanceof Error ? error.message : "Action not found" }, { status: 404 }); }
+}

app/api/pandora/operator-actions/[id]/execute/route.ts

@@ -0,0 +1,12 @@
+import { NextResponse, type NextRequest } from "next/server";
+import { assertNoClientUserIdOverride, resolvePandoraServerSession } from "@/lib/auth/pandora-server-session-resolver";
+import { createSupabaseServerClient } from "@/lib/supabase/server";
+import { executeApprovedOperatorAction, type OperatorActionDbClient } from "@/lib/services/pandora-operator-action-service";
+export const dynamic = "force-dynamic";
+export async function POST(request: NextRequest, context: { params: Promise<{ id: string }> }) {
+  let body: unknown; try { body = await request.json(); } catch { body = {}; }
+  const rejected = await assertNoClientUserIdOverride(request, body); if (rejected) return NextResponse.json({ ok: false, blockers: rejected.blockers }, { status: 400 });
+  const session = await resolvePandoraServerSession({ request }); if (!session.ok) return NextResponse.json({ ok: false, blockers: session.blockers }, { status: 401 });
+  try { const { id } = await context.params; const supabase = await createSupabaseServerClient(); const action = await executeApprovedOperatorAction(supabase as unknown as OperatorActionDbClient, { userId: session.session.userId, actionId: id }); return NextResponse.json({ ok: true, action, result: action.result }); }
+  catch (error) { return NextResponse.json({ ok: false, error: error instanceof Error ? error.message : "Action must be approved before execution" }, { status: 400 }); }
+}

components/pandora/OperatorActionCenterCard.tsx

@@ -2,6 +2,8 @@ import type { OperatorActionCenterData } from "./types";
 import { OperatorActionComposer } from "./OperatorActionComposer";
 import { OperatorActionList } from "./OperatorActionList";
 
+const emptyCounts = { proposed: 0, dry_ran: 0, approved: 0, executing: 0, completed: 0, blocked: 0, failed: 0, cancelled: 0 };
 export function OperatorActionCenterCard({ data }: { data: OperatorActionCenterData }) {
-  return <section className="pd-card"><div className="pd-section-head"><div><p className="pd-label">Operator Action Center</p><h3>Controlled proposals and dry-runs</h3><p>Safe operator workflow foundation: action proposals, idempotency, audit events, and visible history with zero destructive memory mutation.</p></div><span className="pd-pill pd-pill-amber">Live actions gated</span></div><OperatorActionComposer /><OperatorActionList actions={data.actions} />{data.warnings.length > 0 ? <div className="pd-warning-list">{data.warnings.map((warning) => <p key={warning}>⚠ {warning}</p>)}</div> : null}</section>;
+  const countsByStatus = data.countsByStatus ?? emptyCounts;
+  return <section className="pd-card"><div className="pd-section-head"><div><p className="pd-label">Operator Action Center</p><h3>Approval-gated read-only runner</h3><p>Safe operator workflow: proposals, dry-runs, approval, read-only execution, idempotency, audit events, and visible history with zero destructive memory mutation.</p></div><span className="pd-pill pd-pill-amber">Live actions gated</span></div><div className="pd-mini-grid">{Object.entries(countsByStatus).map(([status,count]) => <div className="pd-mini" key={status}><strong>{count}</strong><span>{status}</span></div>)}</div><OperatorActionComposer /><OperatorActionList actions={data.actions} />{data.warnings.length > 0 ? <div className="pd-warning-list">{data.warnings.map((warning) => <p key={warning}>⚠ {warning}</p>)}</div> : null}</section>;
 }

components/pandora/OperatorActionControls.tsx

@@ -0,0 +1,17 @@
+"use client";
+import type { OperatorActionSummary } from "./types";
+
+async function postAction(actionId: string, verb: "dry-run" | "approve" | "execute" | "cancel") {
+  await fetch(`/api/pandora/operator-actions/${actionId}/${verb}`, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({}) });
+  window.location.reload();
+}
+
+export function OperatorActionControls({ action }: { action: OperatorActionSummary }) {
+  const terminal = ["completed", "failed", "cancelled"].includes(action.status);
+  return <div className="pd-action-controls">
+    {action.status === "proposed" ? <button className="button-link" type="button" onClick={() => postAction(action.id, "dry-run")}>Prepare dry-run</button> : null}
+    {(action.status === "proposed" || action.status === "dry_ran") ? <button className="button-link button-link--primary" type="button" onClick={() => postAction(action.id, "approve")}>Approve</button> : null}
+    {action.status === "approved" ? <button className="button-link button-link--primary" type="button" onClick={() => postAction(action.id, "execute")}>Execute approved read-only action</button> : null}
+    {!terminal && action.status !== "executing" ? <button className="button-link" type="button" onClick={() => postAction(action.id, "cancel")}>Cancel</button> : null}
+  </div>;
+}

components/pandora/OperatorActionEnvelope.tsx

@@ -9,6 +9,9 @@ export function OperatorActionEnvelope({ action }: { action: OperatorActionSumma
         <div className="pd-mini"><strong>{action.request_id}</strong><span>request_id</span></div>
         <div className="pd-mini"><strong>{action.idempotency_key.slice(0, 12)}…</strong><span>idempotency</span></div>
         <div className="pd-mini"><strong>{noMutation ? "Yes" : "Pending"}</strong><span>No mutation performed</span></div>
+        <div className="pd-mini"><strong>{action.approved_at ?? "Pending"}</strong><span>approved_at</span></div>
+        <div className="pd-mini"><strong>{action.completed_at ?? "Pending"}</strong><span>completed_at</span></div>
+        <div className="pd-mini"><strong>{action.failed_at ?? "Pending"}</strong><span>failed_at</span></div>
       </div>
       {action.warnings.length > 0 ? <div className="pd-warning-list">{action.warnings.map((warning) => <p key={warning}>⚠ {warning}</p>)}</div> : <p className="pd-muted">No warnings recorded for this action.</p>}
     </div>

components/pandora/OperatorActionList.tsx

@@ -1,9 +1,11 @@
 import type { OperatorActionSummary } from "./types";
 import { OperatorActionEnvelope } from "./OperatorActionEnvelope";
+import { OperatorActionControls } from "./OperatorActionControls";
+import { OperatorActionTimeline } from "./OperatorActionTimeline";
 
-const colors: Record<string, string> = { proposed: "slate", dry_ran: "emerald", queued: "blue", blocked: "amber", completed: "emerald", failed: "red", cancelled: "slate" };
+const colors: Record<string, string> = { proposed: "slate", dry_ran: "emerald", approved: "blue", executing: "amber", blocked: "amber", completed: "emerald", failed: "red", cancelled: "slate" };
 
 export function OperatorActionList({ actions }: { actions: OperatorActionSummary[] }) {
   if (actions.length === 0) return <div className="pd-empty"><strong>No operator actions yet.</strong><span>Prepare a safe dry-run proposal to create action history.</span></div>;
-  return <div className="pd-list">{actions.map((action) => <article className="pd-list-item" key={action.id}><div className="pd-section-head"><div><p className="pd-label">{action.action_type}</p><h4>{action.title}</h4><p>{action.description}</p></div><span className={`pd-pill pd-pill-${colors[action.status] ?? "slate"}`}>{action.status}</span></div><div className="pd-mini-grid"><div className="pd-mini"><strong>{action.namespace ?? "global"}</strong><span>namespace</span></div><div className="pd-mini"><strong>{action.mode}</strong><span>mode</span></div><div className="pd-mini"><strong>{action.created_at}</strong><span>created</span></div><div className="pd-mini"><strong>{action.updated_at}</strong><span>updated</span></div></div><OperatorActionEnvelope action={action} /></article>)}</div>;
+  return <div className="pd-list">{actions.map((action) => <article className="pd-list-item" key={action.id}><div className="pd-section-head"><div><p className="pd-label">{action.action_type}</p><h4>{action.title}</h4><p>{action.description}</p></div><span className={`pd-pill pd-pill-${colors[action.status] ?? "slate"}`}>{action.status}</span></div><div className="pd-mini-grid"><div className="pd-mini"><strong>{action.namespace ?? "global"}</strong><span>namespace</span></div><div className="pd-mini"><strong>{action.mode}</strong><span>mode</span></div><div className="pd-mini"><strong>{action.created_at}</strong><span>created</span></div><div className="pd-mini"><strong>{action.updated_at}</strong><span>updated</span></div></div><OperatorActionEnvelope action={action} /><OperatorActionTimeline events={action.event_preview} /><OperatorActionControls action={action} /></article>)}</div>;
 }

components/pandora/OperatorActionTimeline.tsx

@@ -0,0 +1,5 @@
+import type { OperatorActionEventSummary } from "./types";
+export function OperatorActionTimeline({ events = [] }: { events?: OperatorActionEventSummary[] }) {
+  if (events.length === 0) return <p className="pd-muted">No event timeline loaded for this action.</p>;
+  return <ol className="pd-timeline-list">{events.map((event) => <li key={event.id}><strong>{event.event_type}</strong><span>{event.created_at}</span><p>{event.message}</p></li>)}</ol>;
+}