Add Pandora shadow pack preflight v1 (deterministic diff, risk, review, preflight tables)

app/api/pandora/shadow-context-packs/[id]/preflight/route.ts

@@ -0,0 +1,6 @@
+import { NextResponse, type NextRequest } from "next/server";
+import { assertNoClientUserIdOverride, resolvePandoraServerSession } from "@/lib/auth/pandora-server-session-resolver";
+import { createSupabaseServerClient } from "@/lib/supabase/server";
+import { createOrRefreshShadowPackPreflight, type ShadowPackPreflightDbClient } from "@/lib/services/pandora-shadow-pack-preflight-service";
+export const dynamic = "force-dynamic";
+export async function POST(request: NextRequest, context: { params: Promise<{ id: string }> }) { const body = await request.json().catch(() => ({})); const rejected = await assertNoClientUserIdOverride(request, body); if (rejected) return NextResponse.json({ ok:false, blockers: rejected.blockers }, { status: 400 }); const session = await resolvePandoraServerSession({ request }); if (!session.ok) return NextResponse.json({ ok:false, blockers: session.blockers }, { status: 401 }); try { const { id } = await context.params; const supabase = await createSupabaseServerClient(); const preflight = await createOrRefreshShadowPackPreflight(supabase as unknown as ShadowPackPreflightDbClient, { userId: session.session.userId, shadowPackId: id, requestId: typeof body.request_id === "string" ? body.request_id : undefined }); return NextResponse.json({ ok:true, preflight, no_core_memory_mutation_performed:true, no_promotion_performed:true }); } catch(e) { return NextResponse.json({ ok:false, error: e instanceof Error ? e.message : "Preflight failed" }, { status: 400 }); } }

app/api/pandora/shadow-pack-preflights/[id]/archive/route.ts

@@ -0,0 +1,6 @@
+import { NextResponse, type NextRequest } from "next/server";
+import { assertNoClientUserIdOverride, resolvePandoraServerSession } from "@/lib/auth/pandora-server-session-resolver";
+import { createSupabaseServerClient } from "@/lib/supabase/server";
+import { archiveShadowPackPreflight, type ShadowPackPreflightDbClient } from "@/lib/services/pandora-shadow-pack-preflight-service";
+export const dynamic = "force-dynamic";
+export async function POST(request: NextRequest, context: { params: Promise<{ id: string }> }) { const body = await request.json().catch(() => ({})); const rejected = await assertNoClientUserIdOverride(request, body); if (rejected) return NextResponse.json({ ok:false, blockers: rejected.blockers }, { status: 400 }); const session = await resolvePandoraServerSession({ request }); if (!session.ok) return NextResponse.json({ ok:false, blockers: session.blockers }, { status: 401 }); try { const { id } = await context.params; const supabase = await createSupabaseServerClient(); const preflight = await archiveShadowPackPreflight(supabase as unknown as ShadowPackPreflightDbClient, { userId: session.session.userId, preflightId: id, reason: typeof body.reason === "string" ? body.reason : undefined }); return NextResponse.json({ ok:true, preflight, no_core_memory_mutation_performed:true, no_promotion_performed:true }); } catch(e) { return NextResponse.json({ ok:false, error: e instanceof Error ? e.message : "Archive failed" }, { status: 400 }); } }

app/api/pandora/shadow-pack-preflights/[id]/review/route.ts

@@ -0,0 +1,6 @@
+import { NextResponse, type NextRequest } from "next/server";
+import { assertNoClientUserIdOverride, resolvePandoraServerSession } from "@/lib/auth/pandora-server-session-resolver";
+import { createSupabaseServerClient } from "@/lib/supabase/server";
+import { updateShadowPackPreflightReview, type ShadowPackPreflightDbClient } from "@/lib/services/pandora-shadow-pack-preflight-service";
+export const dynamic = "force-dynamic";
+export async function POST(request: NextRequest, context: { params: Promise<{ id: string }> }) { const body = await request.json().catch(() => ({})); const rejected = await assertNoClientUserIdOverride(request, body); if (rejected) return NextResponse.json({ ok:false, blockers: rejected.blockers }, { status: 400 }); const session = await resolvePandoraServerSession({ request }); if (!session.ok) return NextResponse.json({ ok:false, blockers: session.blockers }, { status: 401 }); try { const { id } = await context.params; const input = body && typeof body === "object" ? body as Record<string, unknown> : {}; const supabase = await createSupabaseServerClient(); const preflight = await updateShadowPackPreflightReview(supabase as unknown as ShadowPackPreflightDbClient, { userId: session.session.userId, preflightId: id, reviewerNotes: String(input.reviewer_notes ?? ""), reviewerDecision: String(input.reviewer_decision ?? "") }); return NextResponse.json({ ok:true, preflight, no_core_memory_mutation_performed:true, no_promotion_performed:true }); } catch(e) { return NextResponse.json({ ok:false, error: e instanceof Error ? e.message : "Review failed" }, { status: 400 }); } }

app/api/pandora/shadow-pack-preflights/[id]/route.ts

@@ -0,0 +1,6 @@
+import { NextResponse, type NextRequest } from "next/server";
+import { assertNoClientUserIdOverride, resolvePandoraServerSession } from "@/lib/auth/pandora-server-session-resolver";
+import { createSupabaseServerClient } from "@/lib/supabase/server";
+import { getShadowPackPreflight, type ShadowPackPreflightDbClient } from "@/lib/services/pandora-shadow-pack-preflight-service";
+export const dynamic = "force-dynamic";
+export async function GET(request: NextRequest, context: { params: Promise<{ id: string }> }) { const rejected = await assertNoClientUserIdOverride(request); if (rejected) return NextResponse.json({ ok:false, blockers: rejected.blockers }, { status: 400 }); const session = await resolvePandoraServerSession({ request }); if (!session.ok) return NextResponse.json({ ok:false, blockers: session.blockers }, { status: 401 }); try { const { id } = await context.params; const supabase = await createSupabaseServerClient(); const preflight = await getShadowPackPreflight(supabase as unknown as ShadowPackPreflightDbClient, { userId: session.session.userId, preflightId: id }); return NextResponse.json({ ok:true, preflight }); } catch(e) { return NextResponse.json({ ok:false, error: e instanceof Error ? e.message : "Not found" }, { status: 404 }); } }

app/api/pandora/shadow-pack-preflights/route.ts

@@ -0,0 +1,6 @@
+import { NextResponse, type NextRequest } from "next/server";
+import { assertNoClientUserIdOverride, resolvePandoraServerSession } from "@/lib/auth/pandora-server-session-resolver";
+import { createSupabaseServerClient } from "@/lib/supabase/server";
+import { listShadowPackPreflights, type ShadowPackPreflightDbClient } from "@/lib/services/pandora-shadow-pack-preflight-service";
+export const dynamic = "force-dynamic";
+export async function GET(request: NextRequest) { const rejected = await assertNoClientUserIdOverride(request); if (rejected) return NextResponse.json({ ok:false, blockers: rejected.blockers }, { status: 400 }); const session = await resolvePandoraServerSession({ request }); if (!session.ok) return NextResponse.json({ ok:false, blockers: session.blockers }, { status: 401 }); const url = new URL(request.url); const supabase = await createSupabaseServerClient(); const preflights = await listShadowPackPreflights(supabase as unknown as ShadowPackPreflightDbClient, { userId: session.session.userId, namespace: url.searchParams.get("namespace") ?? undefined, status: url.searchParams.get("status") ?? undefined, limit: 25 }); return NextResponse.json({ ok:true, preflights }); }

components/pandora/OperatorActionComposer.tsx

@@ -5,5 +5,5 @@ export function OperatorActionComposer() {
   const [actionType, setActionType] = useState("verify_namespace_invariants");
   const [namespace, setNamespace] = useState("real_life");
   async function prepare() { await fetch("/api/pandora/operator-actions", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ action_type: actionType, namespace, mode: "dry_run", payload: { source: "operator_action_center" } }) }); window.location.reload(); }
-  return <div className="pd-composer"><div className="pd-mini-grid"><label className="pd-mini"><span>Action type</span><select value={actionType} onChange={(e) => setActionType(e.target.value)}><option value="verify_namespace_invariants">verify_namespace_invariants</option><option value="verify_pack_supersession">verify_pack_supersession</option><option value="check_retrieval_eval_status">check_retrieval_eval_status</option><option value="refresh_dashboard_snapshot">refresh_dashboard_snapshot</option><option value="prepare_distill_smoke_plan">prepare_distill_smoke_plan</option><option value="prepare_shadow_context_pack">prepare_shadow_context_pack</option></select></label><label className="pd-mini"><span>Namespace</span><select value={namespace} onChange={(e) => setNamespace(e.target.value)}><option value="real_life">real_life</option><option value="au">au</option></select></label></div><button className="button-link button-link--primary" type="button" onClick={prepare}>Prepare dry-run</button><p className="pd-muted">For prepare_shadow_context_pack: Creates shadow candidate only after approval/execution. No promotion. Only dry-run or queued-only proposals are available. No core memory mutation is available from this card.</p></div>;
+  return <div className="pd-composer"><div className="pd-mini-grid"><label className="pd-mini"><span>Action type</span><select value={actionType} onChange={(e) => setActionType(e.target.value)}><option value="verify_namespace_invariants">verify_namespace_invariants</option><option value="verify_pack_supersession">verify_pack_supersession</option><option value="check_retrieval_eval_status">check_retrieval_eval_status</option><option value="refresh_dashboard_snapshot">refresh_dashboard_snapshot</option><option value="prepare_distill_smoke_plan">prepare_distill_smoke_plan</option><option value="prepare_shadow_context_pack">prepare_shadow_context_pack</option><option value="prepare_shadow_pack_preflight">prepare_shadow_pack_preflight</option></select></label><label className="pd-mini"><span>Namespace</span><select value={namespace} onChange={(e) => setNamespace(e.target.value)}><option value="real_life">real_life</option><option value="au">au</option></select></label></div><button className="button-link button-link--primary" type="button" onClick={prepare}>Prepare dry-run</button><p className="pd-muted">For prepare_shadow_context_pack: creates shadow candidate only after approval/execution. For prepare_shadow_pack_preflight, payload.shadow_pack_id is required by the API/service; use a direct action payload only when the target shadow pack is known. No promotion. Only dry-run or queued-only proposals are available. No core memory mutation is available from this card.</p></div>;
 }

components/pandora/PandoraDashboard.tsx

@@ -13,6 +13,7 @@ import { TopBar } from "./TopBar";
 import { VerificationConsoleCard } from "./VerificationConsoleCard";
 import { OperatorActionCenterCard } from "./OperatorActionCenterCard";
 import { ShadowContextPackLabCard } from "./ShadowContextPackLabCard";
+import { ShadowPackPreflightCard } from "./ShadowPackPreflightCard";
 import { WorkQueueCard } from "./WorkQueueCard";
 import type { PandoraDashboardData, StatItem } from "./types";
 import { useState } from "react";
@@ -47,6 +48,7 @@ export function PandoraDashboard({ dashboardData }: { dashboardData: PandoraDash
           <VerificationConsoleCard verification={dashboardData.verification} />
           <OperatorActionCenterCard data={dashboardData.operatorActions} />
           <ShadowContextPackLabCard data={dashboardData.shadowContextPackLab} />
+          <ShadowPackPreflightCard data={dashboardData.shadowPackPreflights} />
           <div className="pd-dashboard-grid">
             <div className="pd-dashboard-col pd-dashboard-col-wide">
               <MemorySpacesCard spaces={dashboardData.memorySpaces} />

components/pandora/ShadowContextPackControls.tsx

@@ -1,4 +1,4 @@
 "use client";
 import type { ShadowContextPackSummary } from "./types";
-async function post(id: string, verb: "review" | "reject" | "archive") { await fetch(`/api/pandora/shadow-context-packs/${id}/${verb}`, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({}) }); window.location.reload(); }
-export function ShadowContextPackControls({ pack }: { pack: ShadowContextPackSummary }) { return <div className="pd-action-controls"><button className="button-link button-link--primary" type="button" onClick={() => post(pack.id, "review")}>Mark reviewed</button><button className="button-link" type="button" onClick={() => post(pack.id, "reject")}>Reject</button><button className="button-link" type="button" onClick={() => post(pack.id, "archive")}>Archive</button></div>; }
+async function post(id: string, verb: "review" | "reject" | "archive" | "preflight") { await fetch(`/api/pandora/shadow-context-packs/${id}/${verb}`, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({}) }); window.location.reload(); }
+export function ShadowContextPackControls({ pack }: { pack: ShadowContextPackSummary }) { return <div className="pd-action-controls"><button className="button-link button-link--primary" type="button" onClick={() => post(pack.id, "preflight")}>Create/refresh preflight</button><button className="button-link" type="button" onClick={() => post(pack.id, "review")}>Mark reviewed</button><button className="button-link" type="button" onClick={() => post(pack.id, "reject")}>Reject</button><button className="button-link" type="button" onClick={() => post(pack.id, "archive")}>Archive</button></div>; }

components/pandora/ShadowPackDiffViewer.tsx

@@ -0,0 +1,3 @@
+import type { ShadowPackDiffSummary } from "./types";
+function Keys({ label, keys }: { label: string; keys: string[] }) { return <div className="pd-mini"><strong>{keys.length}</strong><span>{label}: {keys.length ? keys.join(", ") : "none"}</span></div>; }
+export function ShadowPackDiffViewer({ diff }: { diff: ShadowPackDiffSummary }) { return <div><p className="pd-muted">Active master: {diff.active_master_pack_id ?? "none"} • Shadow: {diff.shadow_pack_id}</p><div className="pd-mini-grid"><Keys label="added" keys={diff.added_keys} /><Keys label="removed" keys={diff.removed_keys} /><Keys label="changed" keys={diff.changed_keys} /><Keys label="unchanged" keys={diff.unchanged_keys} /></div><p className="pd-muted">Deltas — source events: {diff.source_event_count_delta}, open loops: {diff.open_loop_count_delta}, needs review: {diff.needs_review_count_delta}, recent summaries: {diff.top_recent_summary_count}, evidence changed: {diff.evidence_summary_changed ? "yes" : "no"}</p></div>; }

components/pandora/ShadowPackPreflightCard.tsx

@@ -0,0 +1,4 @@
+import type { ShadowPackPreflightData } from "./types";
+import { ShadowPackPreflightList } from "./ShadowPackPreflightList";
+const empty: ShadowPackPreflightData = { preflights: [], warnings: [], countsByStatus: { draft:0, ready_for_review:0, reviewed:0, approved_for_promotion:0, blocked:0, archived:0 }, riskDistribution: { low:0, medium:0, high:0, blocked:0 } };
+export function ShadowPackPreflightCard({ data }: { data?: ShadowPackPreflightData }) { const d=data??empty; return <section className="pd-card"><div className="pd-section-head"><div><p className="pd-label">Shadow Pack Preflight</p><h3>Diff + promotion readiness review</h3><p>Preflight only — no production context pack mutation</p></div><span className="pd-pill pd-pill-slate">No promotion route</span></div><div className="pd-mini-grid">{Object.entries(d.countsByStatus).map(([s,c])=><div className="pd-mini" key={s}><strong>{c}</strong><span>{s}</span></div>)}</div><div className="pd-mini-grid">{Object.entries(d.riskDistribution).map(([s,c])=><div className="pd-mini" key={s}><strong>{c}</strong><span>{s} risk</span></div>)}</div><ShadowPackPreflightList preflights={d.preflights}/>{d.warnings.length ? <div className="pd-warning-list">{d.warnings.map((w)=><p key={w}>⚠ {w}</p>)}</div> : null}</section>; }

components/pandora/ShadowPackPreflightControls.tsx

@@ -0,0 +1,4 @@
+"use client";
+import type { ShadowPackPreflightSummary } from "./types";
+async function archive(id: string) { await fetch(`/api/pandora/shadow-pack-preflights/${id}/archive`, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({}) }); window.location.reload(); }
+export function ShadowPackPreflightControls({ preflight }: { preflight: ShadowPackPreflightSummary }) { return <div className="pd-action-controls"><button className="button-link" type="button" onClick={() => archive(preflight.id)}>Archive</button></div>; }

components/pandora/ShadowPackPreflightList.tsx

@@ -0,0 +1,6 @@
+import type { ShadowPackPreflightSummary } from "./types";
+import { ShadowPackDiffViewer } from "./ShadowPackDiffViewer";
+import { ShadowPackRiskSummary } from "./ShadowPackRiskSummary";
+import { ShadowPackPreflightReviewForm } from "./ShadowPackPreflightReviewForm";
+import { ShadowPackPreflightControls } from "./ShadowPackPreflightControls";
+export function ShadowPackPreflightList({ preflights }: { preflights: ShadowPackPreflightSummary[] }) { if (!preflights.length) return <p className="pd-muted">No shadow pack promotion preflights yet.</p>; return <div className="pd-action-list">{preflights.map((p)=><article className="pd-action-item" key={p.id}><div><p className="pd-label">{p.namespace} • {p.status}</p><h4>Shadow pack {p.shadow_pack_id}</h4><p>Reviewer decision: {p.reviewer_decision ?? "not reviewed"}</p></div><ShadowPackRiskSummary risk={p.risk_summary}/><ShadowPackDiffViewer diff={p.diff_summary}/><p className="pd-muted">Reviewer notes: {p.reviewer_notes || "none"}</p><ShadowPackPreflightReviewForm preflight={p}/><ShadowPackPreflightControls preflight={p}/></article>)}</div>; }

components/pandora/ShadowPackPreflightReviewForm.tsx

@@ -0,0 +1,5 @@
+"use client";
+import { useState } from "react";
+import type { ShadowPackPreflightSummary } from "./types";
+async function save(id: string, reviewer_notes: string, reviewer_decision: string) { await fetch(`/api/pandora/shadow-pack-preflights/${id}/review`, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ reviewer_notes, reviewer_decision }) }); window.location.reload(); }
+export function ShadowPackPreflightReviewForm({ preflight }: { preflight: ShadowPackPreflightSummary }) { const [notes, setNotes] = useState(preflight.reviewer_notes ?? ""); return <div className="pd-action-controls"><textarea aria-label="Reviewer notes" value={notes} onChange={(e)=>setNotes(e.target.value)} placeholder="Reviewer notes" /><button className="button-link" onClick={()=>save(preflight.id, notes, "needs_changes")}>Mark needs changes</button><button className="button-link button-link--primary" onClick={()=>save(preflight.id, notes, "approved_for_promotion")}>Approve for future promotion (NOT promotion)</button><button className="button-link" onClick={()=>save(preflight.id, notes, "blocked")}>Block</button></div>; }

components/pandora/ShadowPackRiskSummary.tsx

@@ -0,0 +1,3 @@
+import type { ShadowPackRiskSummary as Risk } from "./types";
+const tone = { low: "pd-pill-emerald", medium: "pd-pill-amber", high: "pd-pill-red", blocked: "pd-pill-red" } as const;
+export function ShadowPackRiskSummary({ risk }: { risk: Risk }) { return <div><span className={`pd-pill ${tone[risk.status]}`}>{risk.status} risk • {risk.score}/100</span>{risk.blockers.length ? <div className="pd-warning-list">{risk.blockers.map((b) => <p key={b}>⛔ {b}</p>)}</div> : null}{risk.warnings.length ? <div className="pd-warning-list">{risk.warnings.map((w) => <p key={w}>⚠ {w}</p>)}</div> : null}<ul>{risk.reasons.map((r) => <li key={r}>{r}</li>)}</ul></div>; }