f89e074dd1
Governed substrate for autonomous agents: scoped identity (passports), audited actions, MCP workspace. Infra IPs and secrets redacted for public release.
58 lines
1.9 KiB
JavaScript
58 lines
1.9 KiB
JavaScript
/**
|
|
* Owner-only endpoints — ADR-0059 AMEND-3 §4.9.
|
|
*
|
|
* Mount in server.js:
|
|
* app.use('/api/v3/owner', authenticate, ownerRoutesV3);
|
|
*
|
|
* Authz mirrors `routes/v3/secrets.js`: only the Development space (id 11)
|
|
* owner may access. Admin role alone is NOT enough.
|
|
*/
|
|
|
|
import express from 'express';
|
|
|
|
import { dbGet } from '../../database/connection.js';
|
|
import { apiLogger } from '../../utils/logger.js';
|
|
import { success, error, forbidden } from '../../utils/response.js';
|
|
import { getCallsLimits } from '../../services/livekit/callsLimits.js';
|
|
|
|
const log = apiLogger.child({ module: 'owner_api' });
|
|
const OWNER_SPACE_ID = 11;
|
|
|
|
const router = express.Router();
|
|
|
|
async function requireOwner(req, res) {
|
|
if (!req.user?.id) {
|
|
forbidden(res, 'Authentication required');
|
|
return false;
|
|
}
|
|
const space = await dbGet('SELECT id, owner_id FROM spaces WHERE id = ?', [OWNER_SPACE_ID]);
|
|
if (!space) {
|
|
error(res, 'OWNER_SPACE_MISSING', `Space ${OWNER_SPACE_ID} not found`, 500);
|
|
return false;
|
|
}
|
|
if (space.owner_id !== req.user.id) {
|
|
forbidden(res, 'Owner-only endpoint');
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
|
|
// GET /api/v3/owner/calls-settings — read-only view of current limits.
|
|
// PUT is intentionally NOT exposed in this cut: AMEND-3 specifies "edit via
|
|
// .env until D14 (2026-05-18)". A future PUT will land alongside the
|
|
// `_settings` + pg_notify migration post-D14.
|
|
router.get('/calls-settings', async (req, res) => {
|
|
if (!(await requireOwner(req, res))) return;
|
|
const limits = getCallsLimits();
|
|
log.debug({ userId: req.user.id }, 'calls-settings read');
|
|
return success(res, {
|
|
maxConcurrent: limits.maxConcurrent,
|
|
maxParticipantsPerRoom: limits.maxParticipantsPerRoom,
|
|
maxDurationMinutes: limits.maxDurationMinutes,
|
|
retentionDays: limits.retentionDays,
|
|
editable: false,
|
|
note: 'Edit via .env on each host until 2026-05-19 (post-D14 migration to _settings).',
|
|
});
|
|
});
|
|
|
|
export default router;
|