agentboard 0.2.0

data/app/services/agentboard/workflow_engine.rb

@@ -0,0 +1,261 @@
+module Agentboard
+  # DAG scheduler with precise semantics (spec §28):
+  # - a step is runnable when all dependencies succeeded and its condition is true
+  # - failed/skipped dependencies skip downstream steps unless the step has an explicit
+  #   condition (a failure branch) that evaluates true
+  # - bounded retries with backoff create new attempt rows; non-idempotent steps never retry
+  # - cancellation propagates to running executions, then finalizes the run
+  module WorkflowEngine
+    module_function
+
+    def workflow_dir = Agentboard.config.root_path.join(".agentboard", "workflows")
+
+    # Registers (or reuses) an immutable version of a workflow definition.
+    def register!(project:, yaml:, actor: Authorization.system_actor)
+      Authorization.authorize!(actor, "workflow.manage")
+      definition = Workflows::Definition.parse_yaml(yaml, enforce_features: true)
+      digest = definition.digest
+      existing = WorkflowDefinition.where(project: project, name: definition.name).order(version: :desc).first
+      return existing if existing&.digest == digest
+
+      WorkflowDefinition.create!(project: project, name: definition.name, version: (existing&.version || 0) + 1,
+                                 definition: definition.to_h, source_yaml: yaml.to_s[0, 100_000], digest: digest)
+    end
+
+    def sync_from_disk!(project:)
+      Dir[workflow_dir.join("*.yml").to_s].sort.map do |path|
+        register!(project: project, yaml: File.read(path))
+      rescue Agentboard::Error => e
+        Agentboard.logger.warn("[agentboard] workflow #{File.basename(path)} invalid: #{e.message}")
+        nil
+      end.compact
+    end
+
+    def latest(project:, name:)
+      WorkflowDefinition.where(project: project, name: name).order(version: :desc).first or
+        raise Error.not_found("Workflow #{name} is not registered")
+    end
+
+    def start!(definition:, ticket:, actor:)
+      Authorization.authorize!(actor, "execution.start")
+      # Re-checked at start: a licence may have lapsed since the definition was registered.
+      Agentboard.require_feature!(:advanced_workflows) if definition.parsed.advanced_features.any?
+      raise Error.workspace_conflict("#{ticket.key} already has an active workflow run") if ticket.workflow_runs.active.exists?
+
+      parsed = definition.parsed
+      WorkflowRun.transaction do
+        run = WorkflowRun.create!(workflow_definition: definition, ticket: ticket, status: "running", started_at: Time.current,
+                                  base_sha: ticket.project.repository.head_sha)
+        parsed.steps.each do |s|
+          run.steps.create!(step_key: s.id, step_type: s.type, status: "pending", attempt: 1, input: { "depends_on" => s.depends_on })
+        end
+        EventStore.append!(type: "workflow.started", aggregate: run, ticket: ticket, actor: actor,
+                           payload: { workflow: definition.name, version: definition.version, digest: definition.digest, run_id: run.id })
+        run
+      end
+    end
+
+    def cancel!(run:, actor:, reason: "cancelled")
+      WorkflowRun.transaction do
+        run.lock!
+        return run if run.terminal?
+
+        run.update!(status: "cancelled", cancel_reason: reason, finished_at: Time.current)
+        run.steps.where(status: %w[pending waiting running]).find_each do |step|
+          step.executions.active.each { |e| Executions.request_cancel!(execution: e, actor: actor, reason: "workflow cancelled") }
+          step.update!(status: "cancelled", finished_at: Time.current)
+        end
+        EventStore.append!(type: "workflow.cancelled", aggregate: run, ticket: run.ticket, actor: actor, payload: { reason: reason })
+      end
+      run
+    end
+
+    def tick
+      WorkflowRun.where(status: %w[running waiting_for_approval]).find_each { |run| advance(run) }
+    end
+
+    def advance(run)
+      definition = run.definition
+      if definition.timeout_seconds && run.started_at && Time.current - run.started_at > definition.timeout_seconds
+        return cancel!(run: run, actor: Authorization.system_actor, reason: "workflow timeout")
+      end
+
+      steps = run.current_steps
+      steps.each_value { |step| poll_waiting(run, step, definition) if step.status == "waiting" }
+      Extensions.run(:workflow_advance, run: run, steps: steps, definition: definition)
+      steps = run.reload.current_steps
+
+      definition.topological_order.each do |key|
+        step = steps[key]
+        next unless step&.status == "pending"
+        next if step.available_at && step.available_at > Time.current
+
+        spec = definition.step(key)
+        deps = spec.depends_on.map { |d| steps[d] }
+        next unless deps.all?(&:terminal?)
+
+        ctx = condition_context(run, steps)
+        all_ok = deps.all? { |d| d.status == "succeeded" }
+        runnable =
+          if spec.condition
+            Workflows::Condition.parse(spec.condition).evaluate(ctx)
+          else
+            all_ok
+          end
+        if runnable
+          start_step(run, step, spec, deps)
+        else
+          step.update!(status: "skipped", finished_at: Time.current, output: { "reason" => spec.condition ? "condition false" : "dependency did not succeed" })
+          EventStore.append!(type: "workflow.step_skipped", aggregate: run, ticket: run.ticket, payload: { step: key })
+        end
+      end
+      finalize(run.reload)
+    rescue StandardError => e
+      Agentboard.logger.error("[agentboard] workflow #{run.id} advance failed: #{e.class}: #{e.message}")
+    end
+
+    def condition_context(run, steps)
+      {
+        "steps" => steps.transform_values { |s| { "status" => s.status, "output" => s.output } },
+        "ticket" => { "priority" => run.ticket.priority, "kind" => run.ticket.kind, "status" => run.ticket.status }
+      }
+    end
+
+    def start_step(run, step, spec, deps)
+      handoff = latest_handoff(deps)
+      verify_handoff!(run, handoff) if handoff
+      step.update!(status: "running", started_at: Time.current, input: step.input.merge("handoff" => handoff).compact)
+      EventStore.append!(type: "workflow.step_started", aggregate: run, ticket: run.ticket, payload: { step: spec.id, type: spec.type, attempt: step.attempt })
+
+      case spec.type
+      when "agent"
+        Executions.enqueue!(ticket: run.ticket.reload, provider_key: spec.provider, action: spec.action, actor: Authorization.system_actor,
+                            workflow_step: step, idempotency_key: "wf:#{step.id}",
+                            metadata: { "handoff" => handoff, "base_ref" => handoff&.dig("head_sha"), "workflow_run_id" => run.id,
+                                        "timeout_seconds" => spec.timeout_seconds }.compact)
+      when "command", "verification"
+        run_command_step(run, step, spec, handoff)
+      when "human_approval"
+        head = handoff&.dig("head_sha") || run.base_sha
+        approval = Approvals.request!(project: run.ticket.project, ticket: run.ticket, actor: Authorization.system_actor,
+                                      action_kind: "workflow_gate", head_sha: head, workflow_step: step,
+                                      required_role: spec.required_role || "maintainer",
+                                      action_payload: { workflow_run_id: run.id, step: spec.id, head_sha: head },
+                                      reason: "Workflow #{run.workflow_definition.name} requires approval at step #{spec.id}")
+        step.update!(status: "waiting", output: { "approval_id" => approval.id, "head_sha" => head })
+        run.update!(status: "waiting_for_approval")
+      when "condition"
+        finish_step(run, step, "succeeded", output: { "result" => true })
+
+      when "git_commit"
+        path = handoff&.dig("worktree_path")
+        raise Error.validation_failed("git_commit needs a worktree from a previous step") unless path
+
+        manager = Git::WorktreeManager.new(repository: run.ticket.project.repository, workspace: Agentboard.config.workspace_path)
+        head = manager.snapshot!(path, message: "#{run.ticket.key}: workflow commit")
+        finish_step(run, step, "succeeded", output: (handoff || {}).merge("head_sha" => head))
+      else
+        handler = Extensions.step_handler(spec.type)
+        unless handler
+          return finish_step(run, step, "failed", error: "Step type #{spec.type} requires AgentBoard Pro", failure_code: "capability_unavailable")
+        end
+
+        handler.call(run: run, step: step, spec: spec, handoff: handoff)
+      end
+    rescue Agentboard::Error => e
+      finish_step(run, step, "failed", error: e.message, failure_code: e.code.downcase)
+    end
+
+
+
+    def latest_handoff(deps)
+      deps.select { |d| d.status == "succeeded" && d.output["head_sha"] }.max_by { |d| d.finished_at.to_f }&.output
+    end
+
+    # The receiving step verifies actual repository state rather than trusting the summary.
+    def verify_handoff!(run, handoff)
+      repo = run.ticket.project.repository
+      if handoff["head_sha"] && repo.resolve_commit(handoff["head_sha"]).nil?
+        raise Error.validation_failed("Handoff head #{handoff["head_sha"]} does not exist in the repository")
+      end
+      ids = Array(handoff["artifact_ids"])
+      if ids.any? && Artifact.where(id: ids, ticket_id: run.ticket_id).count != ids.size
+        raise Error.validation_failed("Handoff references unknown artifacts")
+      end
+    end
+
+    def run_command_step(run, step, spec, handoff)
+      dir = handoff&.dig("worktree_path").presence || run.ticket.project.root_path
+      PathGuard.within!(Agentboard.config.workspace_path, dir) if handoff&.dig("worktree_path").present?
+      Thread.new do
+        ActiveRecord::Base.connection_pool.with_connection do
+          execution = Execution.create!(ticket: run.ticket, provider_key: "local", action: "verify", status: "verifying",
+                                        attempt: Execution.next_attempt_for(run.ticket), workflow_step: step, worktree_path: dir,
+                                        base_sha: handoff&.dig("base_sha"), head_sha: Git::Repository.new(dir).head_sha(chdir: dir),
+                                        started_at: Time.current, metadata: { "command" => spec.command })
+          results = VerificationService.run_catalog!(execution: execution, chdir: dir, names: [ spec.command ], timeout: spec.timeout_seconds)
+          ok = results.all?(&:passed?)
+          Executions.transition!(execution, ok ? "completed" : "failed", failure_code: ok ? nil : "verification_failed")
+        end
+      rescue StandardError => e
+        Agentboard.logger.error("[agentboard] command step failed: #{e.class}: #{e.message}")
+        ActiveRecord::Base.connection_pool.with_connection { finish_step(run, step.reload, "failed", error: e.class.name) }
+      end
+    end
+
+    # Callback from Executions.transition! when an execution linked to a step finishes.
+    def step_execution_finished(execution)
+      step = execution.workflow_step
+      return unless step && step.status == "running"
+
+      run = step.workflow_run
+      ok = execution.status == "completed"
+      output = {
+        "schema_version" => 1, "ticket_key" => run.ticket.key, "from_step" => step.step_key,
+        "base_sha" => execution.base_sha, "head_sha" => execution.head_sha, "branch" => execution.branch,
+        "worktree_path" => execution.worktree_path, "execution_id" => execution.id,
+        "artifact_ids" => execution.artifacts.where(kind: %w[commit diff test_report]).pluck(:id),
+        "verification_result_ids" => execution.verification_results.pluck(:id),
+        "summary" => execution.summary.to_s[0, 2000], "known_issues" => ok ? [] : [ execution.failure_message ].compact
+      }
+      finish_step(run, step, ok ? "succeeded" : "failed", output: output, error: execution.failure_message,
+                                                          failure_code: execution.failure_code)
+    end
+
+    def poll_waiting(run, step, definition)
+      approval = Approval.find_by(id: step.output["approval_id"])
+      return finish_step(run, step, "failed", error: "approval missing") unless approval
+
+      head = step.output["head_sha"]
+      digest = approval.action_digest
+      if approval.valid_for?(action_digest: digest, head_sha: head)
+        finish_step(run, step, "succeeded", output: step.output.merge("approved_by" => approval.decided_by))
+      elsif %w[rejected expired invalidated].include?(approval.decision) || approval.expired?
+        finish_step(run, step, "failed", error: "approval #{approval.decision}")
+      end
+    end
+
+    def finish_step(run, step, status, output: nil, error: nil, failure_code: nil)
+      WorkflowStep.transaction do
+        step.update!(status: status, finished_at: Time.current, output: output || step.output, error: error&.to_s&.[](0, 2000))
+        EventStore.append!(type: "workflow.step_#{status}", aggregate: run, ticket: run.ticket,
+                           payload: { step: step.step_key, attempt: step.attempt, error: error }.compact)
+        run.update!(status: "running") if run.status == "waiting_for_approval" && run.steps.where(status: "waiting").none?
+        Extensions.run(:workflow_step_failed, run: run, step: step, failure_code: failure_code) if status == "failed"
+      end
+    end
+
+
+    def finalize(run)
+      return if run.terminal?
+
+      steps = run.current_steps.values
+      return unless steps.all?(&:terminal?)
+
+      status = steps.any? { |s| s.status == "failed" } ? "failed" : "succeeded"
+      run.update!(status: status, finished_at: Time.current)
+      EventStore.append!(type: "workflow.#{status}", aggregate: run, ticket: run.ticket, payload: { run_id: run.id })
+    end
+
+  end
+end

data/app/views/agentboard/agents/index.html.erb

@@ -0,0 +1,51 @@
+<% content_for :title, "Agents" %>
+<% content_for :crumbs do %><%= icon("bot", size: 16, klass: "muted") %> <span>Agents</span><% end %>
+<div class="page-head"><div><h1>Providers & sessions</h1><p>Capabilities are detected from installed binaries — configuration only expresses intent.</p></div></div>
+<div class="stats mb">
+  <% @probes.each do |p, probe| %>
+    <div class="stat">
+      <div class="row"><%= provider_avatar(p.key, size: 26) %><strong><%= p.display_name %></strong>
+        <span style="margin-left:auto"><%= probe.installed ? execution_pill(probe.supports?(:active_execution) ? "completed" : "waiting") : execution_pill("skipped") %></span></div>
+      <div class="stat-sub mt-sm"><%= probe.installed ? "v#{probe.version} · #{probe.validation}" : "Not installed" %></div>
+      <div class="row row-wrap mt-sm" style="gap:4px">
+        <% Agentboard::Providers::CAPABILITIES.each do |cap| %>
+          <span class="prov <%= probe.supports?(cap) ? "prov-git-observed" : "prov-inferred" %>" title="<%= cap %>"><%= cap.to_s.tr("_", " ") %></span>
+        <% end %>
+      </div>
+      <% probe.diagnostics.first(1).each do |d| %><div class="hint mt-sm"><%= d %></div><% end %>
+    </div>
+  <% end %>
+</div>
+<div class="card card-body-flush">
+  <div class="card-head"><h2><%= icon("user", size: 15) %> Sessions</h2><span class="muted" style="margin-left:auto;font-size:12px">Agent-supplied session ids are labels; trust comes from hooks, the runtime, or the MCP process.</span></div>
+  <% if @sessions.empty? %>
+    <div class="empty"><%= icon("bot", size: 26) %><strong>No agent sessions yet</strong><span>Run <code>bundle exec agentboard provider setup claude</code>, then start <code>claude</code> in this repository.</span></div>
+  <% else %>
+    <table class="table table-compact">
+      <thead><tr><th>Session</th><th>Trust</th><th>State</th><th>Ticket</th><th>Attach</th><th class="right">Last seen</th></tr></thead>
+      <tbody>
+        <% @sessions.each do |s| %>
+          <% link = s.ticket_links.find { |l| l.ended_at.nil? } %>
+          <tr>
+            <td><span class="row"><%= provider_avatar(s.provider_key, size: 20) %><span class="truncate"><%= s.display_name %></span></span></td>
+            <td><span class="prov <%= { "launched" => "prov-confirmed", "hook" => "prov-provider-reported", "mcp_stdio" => "prov-git-observed" }.fetch(s.trust_level, "prov-inferred") %>"><%= s.trust_level %></span></td>
+            <td><%= execution_pill({ "active" => "running", "revoked" => "rejected" }.fetch(s.state, "skipped")) %></td>
+            <td><% if link %><%= link_to link.ticket.key, ticket_path(link.ticket), class: "link mono" %> <span class="faint" style="font-size:11px"><%= link.source %><%= " · unconfirmed" if link.confidence == "needs_confirmation" %></span><% else %><span class="faint">—</span><% end %></td>
+            <td>
+              <%= form_with url: session_path(s), method: :patch, class: "row" do %>
+                <select name="ticket_key" class="select" style="height:26px;width:150px;font-size:12px"><option value="">Detach</option><% @open_tickets.each do |t| %><option value="<%= t.key %>" <%= "selected" if link&.ticket_id == t.id %>><%= t.key %></option><% end %></select>
+                <button class="btn btn-sm">Set</button>
+              <% end %>
+            </td>
+            <td class="right muted"><%= ago(s.last_seen_at || s.created_at) %>
+              <% if s.state == "active" && %w[mcp_stdio hook].include?(s.trust_level) && can?("session.manage") %>
+                <%= button_to "Revoke", session_path(s), method: :patch, params: { revoke: "1" }, class: "btn btn-sm btn-danger", form: { style: "display:inline;margin-left:6px" } %>
+              <% end %>
+              <% if s.metadata["correlated_session_id"] %><span class="prov prov-confirmed" title="Same agent process (pid <%= s.metadata["agent_pid"] %>)">correlated</span><% end %>
+            </td>
+          </tr>
+        <% end %>
+      </tbody>
+    </table>
+  <% end %>
+</div>

data/app/views/agentboard/analytics/show.html.erb

@@ -0,0 +1,78 @@
+<% content_for :title, "Analytics" %>
+<% content_for :crumbs do %><%= icon("chart", size: 16, klass: "muted") %> <span>Analytics</span><% end %>
+<div class="page-head"><div><h1>Delivery analytics</h1><p>Unknown values are shown as “—”, never as zero. Costs are only what providers reported.</p></div></div>
+<div class="stats mb">
+  <div class="stat"><div class="stat-label">Executions</div><div class="stat-value"><%= @total %></div><div class="stat-sub"><%= @by_status["completed"].to_i %> completed · <%= @by_status["failed"].to_i %> failed</div></div>
+  <div class="stat"><div class="stat-label">First-pass success</div><div class="stat-value"><%= @first_pass_rate ? "#{@first_pass_rate}%" : "—" %></div><div class="stat-sub">implement attempts passing checks on try #1</div></div>
+  <div class="stat"><div class="stat-label">Median duration</div><div class="stat-value"><%= duration(@median_duration) %></div><div class="stat-sub"><%= @retries %> retries</div></div>
+  <div class="stat"><div class="stat-label">Human interventions</div><div class="stat-value"><%= @human_interventions %></div><div class="stat-sub">approval latency <%= duration(@approval_latency) %></div></div>
+</div>
+<% if @metrics.nil? %>
+  <div class="callout mb"><%= icon("chart", size: 16) %><div><strong>Operational metrics</strong> (queue wait p95, event lag, orphan worktrees, provider errors), the support bundle and audit export are part of <strong>AgentBoard Pro</strong>. The statistics below are free.</div></div>
+<% else %>
+<div class="stats mb">
+  <div class="stat"><div class="stat-label">Queue wait (median / p95)</div><div class="stat-value" style="font-size:18px"><%= duration(@metrics[:queue_wait_median]) %> <span class="muted" style="font-size:13px">/ <%= duration(@metrics[:queue_wait_p95]) %></span></div></div>
+  <div class="stat"><div class="stat-label">Event processing lag</div><div class="stat-value" style="font-size:18px"><%= @metrics[:outbox_lag_median] ? "#{@metrics[:outbox_lag_median].round(2)}s" : "—" %></div><div class="stat-sub"><%= @metrics[:outbox_pending] %> pending · <%= @metrics[:outbox_dead] %> dead</div></div>
+  <div class="stat"><div class="stat-label">Provider errors / cancellations</div><div class="stat-value" style="font-size:18px"><%= @metrics[:provider_errors] %> <span class="muted" style="font-size:13px">/ <%= @metrics[:cancellations] %></span></div></div>
+  <div class="stat"><div class="stat-label">Sessions · orphan worktrees</div><div class="stat-value" style="font-size:18px"><%= @metrics[:active_sessions] %> <span class="muted" style="font-size:13px">· <%= @metrics[:orphan_worktrees] %></span></div><div class="stat-sub">orphans: run <code>agentboard cleanup</code></div></div>
+</div>
+<% end %>
+<div class="detail" style="grid-template-columns:minmax(0,1fr) minmax(0,1fr)">
+  <div class="card">
+    <div class="card-head"><h3>Executions · last 14 days</h3></div>
+    <div class="card-body">
+      <% days = (13.downto(0)).map { |i| i.days.ago.to_date } %>
+      <% peak = [@daily.values.max.to_i, 1].max %>
+      <div class="bars">
+        <% days.each do |d| %>
+          <div class="bar" title="<%= d %>: <%= @daily[d].to_i %>"><span style="height:<%= (@daily[d].to_i * 100.0 / peak).round %>%"></span><small><%= d.strftime("%d") %></small></div>
+        <% end %>
+      </div>
+    </div>
+  </div>
+  <div class="card">
+    <div class="card-head"><h3>Outcomes by provider</h3></div>
+    <div class="card-body">
+      <% if @by_provider.empty? %><div class="empty" style="padding:16px">No data yet.</div><% end %>
+      <% @by_provider.each do |provider, statuses| %>
+        <% sum = statuses.values.sum.to_f %>
+        <div class="hbar">
+          <span class="row"><%= provider_avatar(provider, size: 18) %><%= provider %></span>
+          <span class="hbar-track">
+            <% { "completed" => "seg-completed", "failed" => "seg-failed", "interrupted" => "seg-interrupted", "cancelled" => "seg-cancelled" }.each do |s, cls| %>
+              <% if statuses[s].positive? %><span class="<%= cls %>" style="width:<%= (statuses[s] / sum * 100).round(1) %>%" title="<%= s %>: <%= statuses[s] %>"></span><% end %>
+            <% end %>
+            <% active = statuses.sum { |s, c| Agentboard::StateMachines::Execution::ACTIVE.include?(s) ? c : 0 } %>
+            <% if active.positive? %><span class="seg-active" style="width:<%= (active / sum * 100).round(1) %>%"></span><% end %>
+          </span>
+          <span class="right muted"><%= sum.to_i %></span>
+        </div>
+      <% end %>
+    </div>
+  </div>
+  <div class="card">
+    <div class="card-head"><h3>Token usage (provider-reported)</h3></div>
+    <div class="card-body-flush">
+      <table class="table table-compact"><thead><tr><th>Provider</th><th class="right">Input</th><th class="right">Output</th><th class="right">Reported cost</th></tr></thead>
+        <tbody>
+          <% if @tokens.empty? %><tr><td colspan="4" class="muted">No usage reported.</td></tr><% end %>
+          <% @tokens.each do |provider, tin, tout, _n| %>
+            <% costs = @reported_cost.select { |(p, _c), _| p == provider } %>
+            <tr><td><%= provider %></td><td class="right mono"><%= tin ? number_with_delimiter(tin) : "—" %></td><td class="right mono"><%= tout ? number_with_delimiter(tout) : "—" %></td>
+              <td class="right mono"><%= costs.any? ? costs.map { |(_, cur), v| "#{number_with_precision(v, precision: 4)} #{cur}" }.join(", ") : "—" %></td></tr>
+          <% end %>
+        </tbody>
+      </table>
+      <p class="hint" style="padding:10px 14px;margin:0">Subscription-based CLI usage is not billed per token; reported cost is the provider's own estimate.</p>
+    </div>
+  </div>
+  <div class="card">
+    <div class="card-head"><h3>Verification outcomes</h3></div>
+    <div class="card-body">
+      <% vsum = [@verification.values.sum, 1].max.to_f %>
+      <% %w[passed failed timeout error].each do |s| %>
+        <div class="hbar"><span><%= s.humanize %></span><span class="hbar-track"><span class="<%= s == "passed" ? "seg-completed" : "seg-failed" %>" style="width:<%= (@verification[s].to_i / vsum * 100).round(1) %>%"></span></span><span class="right muted"><%= @verification[s].to_i %></span></div>
+      <% end %>
+    </div>
+  </div>
+</div>

data/app/views/agentboard/approvals/_approval.html.erb

@@ -0,0 +1,27 @@
+<% ticket = approval.ticket %>
+<div class="stack-sm" style="padding:10px 12px;border:1px solid var(--border);border-radius:11px;background:var(--surface)">
+  <div class="row">
+    <span class="pill pill-review"><span class="pill-dot"></span><%= approval.action_kind.humanize %></span>
+    <% if ticket %><%= link_to ticket.key, ticket_path(ticket), class: "link mono", style: "font-size:12px" %><% end %>
+    <span class="faint" style="margin-left:auto;font-size:11.5px"><%= ago(approval.created_at) %></span>
+  </div>
+  <% if approval.reason.present? %><div style="font-size:13px;white-space:pre-wrap"><%= approval.reason.truncate(600) %></div><% end %>
+  <% if (summary = approval.action_payload["summary"]).present? %><pre class="code-block" style="padding:8px 10px;font-size:11.5px"><%= summary.truncate(800) %></pre><% end %>
+  <% if approval.execution_id %><div class="hint"><%= link_to "Open execution →", execution_path(approval.execution_id), class: "link" %></div><% end %>
+  <div class="row muted" style="font-size:11.5px;flex-wrap:wrap">
+    <span>by <%= approval.requested_by %></span><span>·</span><span>head <%= sha_tag(approval.head_sha) %></span><span>·</span>
+    <span title="<%= approval.action_digest %>">digest <code><%= approval.action_digest[0, 10] %></code></span>
+    <% if approval.expires_at %><span>·</span><span>expires <%= ago(approval.expires_at).to_s.sub(" ago", "").html_safe %></span><% end %>
+  </div>
+  <% if !can?("approval.decide") %>
+    <div class="hint">Waiting for a <%= approval.required_role %>.</div>
+  <% elsif approval.requested_by == current_actor.label && Agentboard.feature?(:team_mode) && Agentboard.config.authenticate_with %>
+    <div class="hint">You requested this — another <%= approval.required_role %> must decide (separation of duties).</div>
+  <% else %>
+  <%= form_with url: approval_path(approval), method: :patch, class: "row" do %>
+    <input class="input" name="reason" placeholder="Note (optional)" style="height:28px">
+    <button name="decision" value="rejected" class="btn btn-sm btn-danger"><%= icon("x", size: 12) %> Reject</button>
+    <button name="decision" value="approved" class="btn btn-sm btn-success"><%= icon("check", size: 12) %> Approve</button>
+  <% end %>
+  <% end %>
+</div>

data/app/views/agentboard/approvals/index.html.erb

@@ -0,0 +1,31 @@
+<% content_for :title, "Approvals" %>
+<% content_for :crumbs do %><%= icon("shield", size: 16, klass: "muted") %> <span>Approvals</span><% end %>
+<div class="content-narrow">
+  <div class="page-head"><div><h1>Approvals</h1><p>Each approval is bound to an exact action digest and commit. Any code change invalidates it.</p></div></div>
+  <div class="section-title">Pending · <%= @pending.size %></div>
+  <% if @pending.empty? %>
+    <div class="card"><div class="empty"><%= icon("shield", size: 26) %><strong>Nothing waiting for you</strong><span>Privileged actions and reviews that need a human will show up here.</span></div></div>
+  <% else %>
+    <div class="stack"><% @pending.each do |a| %><%= render "approval", approval: a %><% end %></div>
+  <% end %>
+  <div class="section-title mt">History</div>
+  <div class="card card-body-flush">
+    <% if @decided.empty? %><div class="empty" style="padding:20px">No decisions yet.</div><% else %>
+      <table class="table table-compact">
+        <thead><tr><th>Action</th><th>Ticket</th><th>Decision</th><th>Head</th><th>By</th><th class="right">When</th></tr></thead>
+        <tbody>
+          <% @decided.each do |a| %>
+            <tr>
+              <td><%= a.action_kind.humanize %></td>
+              <td><% if (tk = a.ticket) %><%= link_to tk.key, ticket_path(tk), class: "link mono" %><% end %></td>
+              <td><%= execution_pill(a.decision) %><% if a.decision_reason.present? %> <span class="muted" style="font-size:12px"><%= a.decision_reason.truncate(60) %></span><% end %></td>
+              <td><%= sha_tag(a.head_sha) %></td>
+              <td class="muted"><%= a.decided_by || "system" %></td>
+              <td class="right muted"><%= ago(a.decided_at || a.updated_at) %></td>
+            </tr>
+          <% end %>
+        </tbody>
+      </table>
+    <% end %>
+  </div>
+</div>

data/app/views/agentboard/board/_card.html.erb

@@ -0,0 +1,36 @@
+<% lease = ticket.leases.find { |l| l.released_at.nil? && l.expires_at > Time.current } %>
+<% running = ticket.executions.find { |e| Agentboard::StateMachines::Execution::ACTIVE.include?(e.status) } %>
+<% done, total = ticket.criteria_progress %>
+<% allowed = Agentboard::StateMachines::Ticket.next_states(ticket.status) %>
+<%= link_to ticket_path(ticket), class: "tcard#{" is-blocked" if ticket.status == "blocked"}#{" is-running" if running}",
+      draggable: "true", id: "ticket-#{ticket.key}",
+      data: { key: ticket.key, status: ticket.status, allowed: allowed.join(" "), position: ticket.position, move_url: move_ticket_path(ticket), turbo_frame: "_top" } do %>
+  <div class="tcard-top">
+    <%= priority_icon(ticket.priority) %>
+    <span class="tcard-key"><%= ticket.key %></span>
+    <% if %w[blocked reopened].include?(ticket.status) %>
+      <%= status_pill(ticket.status) %>
+    <% end %>
+    <span class="tcard-foot">
+      <% if running %><%= provider_avatar(running.provider_key, size: 18) %><% end %>
+      <% if lease %><span title="Leased by <%= lease.holder_label %> until <%= lease.expires_at.strftime("%H:%M") %>"><%= avatar(lease.holder_label, kind: lease.agent_session_id ? "agent" : "human", size: 18) %></span><% end %>
+    </span>
+  </div>
+  <div class="tcard-title"><%= ticket.title %></div>
+  <% if ticket.status == "blocked" && ticket.blocked_reason.present? %>
+    <div class="tcard-blocker"><%= icon("ban", size: 13) %><span class="truncate"><%= ticket.blocked_reason %></span></div>
+  <% end %>
+  <div class="tcard-meta">
+    <%= kind_badge(ticket.kind) %>
+    <% ticket.labels.first(2).each do |l| %><span class="label-chip" style="--h:<%= Digest::MD5.hexdigest(l)[0, 2].to_i(16) * 360 / 255 %>"><%= l %></span><% end %>
+    <% if total.positive? %>
+      <span class="row" style="gap:5px" title="Acceptance criteria"><%= meter(done, total) %><span><%= done %>/<%= total %></span></span>
+    <% end %>
+    <% if ticket.depends_on.any? { |d| d.status != "done" } %>
+      <span class="row" style="gap:3px;color:var(--c-orange)" title="Waiting on dependencies"><%= icon("link", size: 12) %><%= ticket.depends_on.count { |d| d.status != "done" } %></span>
+    <% end %>
+    <% if running %>
+      <span class="row" style="gap:4px;color:var(--accent-text)"><%= icon("pulse", size: 12) %><%= running.status.humanize.downcase %></span>
+    <% end %>
+  </div>
+<% end %>

data/app/views/agentboard/board/show.html.erb

@@ -0,0 +1,73 @@
+<% content_for :title, "Board" %>
+<% content_for :bare, "1" %>
+<% content_for :crumbs do %>
+  <%= icon("kanban", size: 16, klass: "muted") %> <span>Board</span>
+  <span class="faint" style="font-weight:500"><%= @columns.values.sum(&:size) %> tickets</span>
+<% end %>
+<% content_for :actions do %>
+  <%= form_with url: board_path, method: :get, class: "search", data: { controller: "autosubmit", turbo_action: "replace" } do %>
+    <%= icon("search", size: 14) %>
+    <input class="input" type="search" name="q" value="<%= @filters["q"] %>" placeholder="Search or jump to <%= current_project.key %>-…" data-hotkey="search" data-action="input->autosubmit#submit" autocomplete="off">
+  <% end %>
+  <%= link_to new_ticket_path, class: "btn btn-primary" do %><%= icon("plus", size: 14) %> New ticket<% end %>
+<% end %>
+<% content_for :toolbar do %>
+  <div class="board-toolbar">
+    <span class="muted" style="font-size:12px;margin-right:2px">Filter</span>
+    <% %w[feature bug task chore spike].each do |k| %>
+      <%= link_to k.capitalize, board_path(@filters.merge("kind" => (@filters["kind"] == k ? nil : k)).compact), class: "filter-chip #{"is-on" if @filters["kind"] == k}" %>
+    <% end %>
+    <span class="faint">·</span>
+    <% Agentboard::Ticket::PRIORITIES.each do |p, label| %>
+      <%= link_to board_path(@filters.merge("priority" => (@filters["priority"] == p.to_s ? nil : p.to_s)).compact), class: "filter-chip #{"is-on" if @filters["priority"] == p.to_s}" do %><%= priority_icon(p) %> <%= label %><% end %>
+    <% end %>
+    <% if @labels.any? %>
+      <span class="faint">·</span>
+      <% @labels.first(8).each do |l| %>
+        <%= link_to l, board_path(@filters.merge("label" => (@filters["label"] == l ? nil : l)).compact), class: "filter-chip #{"is-on" if @filters["label"] == l}" %>
+      <% end %>
+    <% end %>
+    <% if @milestones.any? %>
+      <span class="faint">·</span>
+      <% @milestones.each do |m| %>
+        <%= link_to board_path(@filters.merge("milestone" => (@filters["milestone"] == m.id ? nil : m.id)).compact), class: "filter-chip #{"is-on" if @filters["milestone"] == m.id}" do %><%= icon("flag", size: 12) %> <%= m.name %><% end %>
+      <% end %>
+    <% end %>
+    <% if @filters.any? %>
+      <%= link_to board_path, class: "btn btn-ghost btn-sm" do %><%= icon("x", size: 12) %> Clear<% end %>
+    <% end %>
+  </div>
+  <% if @active_executions.any? %>
+    <div class="live-strip">
+      <% @active_executions.each do |e| %>
+        <%= link_to execution_path(e), class: "live-item" do %>
+          <%= provider_avatar(e.provider_key, size: 20) %>
+          <strong class="mono" style="font-size:11.5px"><%= e.ticket.key %></strong>
+          <%= execution_pill(e.status) %>
+          <span class="muted"><%= e.action %> · <%= duration(e.duration) %></span>
+        <% end %>
+      <% end %>
+    </div>
+  <% end %>
+<% end %>
+
+<div class="board" data-controller="board">
+  <% @columns.each do |status, tickets| %>
+    <section class="column" data-column="<%= status %>">
+      <header class="column-head">
+        <%= status_glyph(status) %>
+        <h3><%= Agentboard::StateMachines::Ticket::LABELS[status] %></h3>
+        <span class="column-count"><%= tickets.size %></span>
+        <% if %w[backlog ready].include?(status) %>
+          <%= link_to new_ticket_path(status: status), class: "btn btn-ghost btn-sm btn-icon", title: "New ticket in #{status}" do %><%= icon("plus", size: 14) %><% end %>
+        <% end %>
+      </header>
+      <div class="column-body">
+        <% if tickets.empty? %>
+          <div class="column-empty"><%= status == "ready" ? "Tickets with acceptance criteria land here" : "Drop tickets here" %></div>
+        <% end %>
+        <%= render partial: "agentboard/board/card", collection: tickets, as: :ticket %>
+      </div>
+    </section>
+  <% end %>
+</div>

data/app/views/agentboard/executions/index.html.erb

@@ -0,0 +1,33 @@
+<% content_for :title, "Executions" %>
+<% content_for :crumbs do %><%= icon("terminal", size: 16, klass: "muted") %> <span>Executions</span><% end %>
+<% unless @daemon[:running] %>
+  <div class="callout callout-warn mb"><%= icon("alert", size: 16) %><div><strong>The runtime daemon is not running.</strong> Queued executions wait until you start it:<br><code>bundle exec agentboard daemon start</code> — agents run in that separate process, so restarting the web server never kills them.</div></div>
+<% end %>
+<div class="tabs">
+  <%= link_to "All", executions_path, class: "tab #{"is-active" unless @status}" %>
+  <% %w[queued running verifying completed failed cancelled interrupted].each do |s| %>
+    <%= link_to s.humanize, executions_path(status: s), class: "tab #{"is-active" if @status == s}" %>
+  <% end %>
+</div>
+<div class="card card-body-flush">
+  <% if @executions.empty? %>
+    <div class="empty"><%= icon("terminal", size: 28) %><strong>No executions</strong><span>Open a ticket and start an agent, or run <code>bundle exec agentboard run <%= current_project.key %>-1 --provider fake</code>.</span></div>
+  <% else %>
+    <table class="table">
+      <thead><tr><th>Execution</th><th>Ticket</th><th>Status</th><th>Checks</th><th>Head</th><th>Duration</th><th class="right">Started</th></tr></thead>
+      <tbody>
+        <% @executions.each do |e| %>
+          <tr>
+            <td><%= link_to execution_path(e), class: "row-link" do %><%= provider_avatar(e.provider_key, size: 20) %><span><strong style="font-weight:550"><%= e.action.humanize %></strong> <span class="muted">#<%= e.attempt %></span></span><% end %></td>
+            <td><%= link_to e.ticket.key, ticket_path(e.ticket), class: "link mono", style: "font-size:12px" %> <span class="muted truncate" style="max-width:240px;display:inline-block;vertical-align:bottom"><%= e.ticket.title %></span></td>
+            <td><%= execution_pill(e.status) %><% if e.failure_code %> <span class="faint" style="font-size:11.5px"><%= e.failure_code %></span><% end %></td>
+            <td class="muted"><%= e.verification_results.any? ? "#{e.verification_results.count(&:passed?)}/#{e.verification_results.size}" : "—" %></td>
+            <td><%= sha_tag(e.head_sha) %></td>
+            <td class="muted"><%= duration(e.duration) %></td>
+            <td class="right muted"><%= ago(e.started_at || e.created_at) %></td>
+          </tr>
+        <% end %>
+      </tbody>
+    </table>
+  <% end %>
+</div>