@adonis-agora/agent-dashboard 0.1.0

package/dist/src/client/trend-path.js

@@ -0,0 +1,25 @@
+/**
+ * Project a daily trend series into SVG geometry. The x-axis spreads points evenly across `width`;
+ * the y-axis is normalized against the series max (inverted, since SVG y grows downward). A single
+ * point renders centered; an empty series yields empty paths and `max: 1`. Pure — no DOM.
+ */
+export function buildTrendGeometry(points, metric, width, height) {
+    if (points.length === 0)
+        return { line: '', area: '', vertices: [], max: 1 };
+    const max = Math.max(1, ...points.map((point) => point[metric]));
+    const lastIndex = Math.max(1, points.length - 1);
+    const vertices = points.map((point, index) => {
+        const value = point[metric];
+        const x = points.length === 1 ? width / 2 : (index / lastIndex) * width;
+        const y = height - (value / max) * height;
+        return { day: point.day, value, x, y };
+    });
+    const line = vertices
+        .map((vertex, index) => `${index === 0 ? 'M' : 'L'}${vertex.x.toFixed(2)},${vertex.y.toFixed(2)}`)
+        .join(' ');
+    const firstX = vertices[0]?.x ?? 0;
+    const lastX = vertices[vertices.length - 1]?.x ?? width;
+    const area = `${line} L${lastX.toFixed(2)},${height} L${firstX.toFixed(2)},${height} Z`;
+    return { line, area, vertices, max };
+}
+//# sourceMappingURL=trend-path.js.map

package/dist/src/client/trend-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trend-path.js","sourceRoot":"","sources":["../../../src/client/trend-path.ts"],"names":[],"mappings":"AAwBA;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAyB,EACzB,MAAmB,EACnB,KAAa,EACb,MAAc;IAEd,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAE7E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAkB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC;QACxE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC;QAC1C,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,QAAQ;SAClB,GAAG,CACF,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAC7F;SACA,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC;IACxD,MAAM,IAAI,GAAG,GAAG,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,MAAM,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,MAAM,IAAI,CAAC;IAExF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AACvC,CAAC"}

package/dist/src/client/types.d.ts

@@ -0,0 +1,202 @@
+/**
+ * Wire shapes returned by the `@adonis-agora/agent` provider's read-only governance routes
+ * (`/agent/governance/*`) plus the per-actor `quota/today` route. These MIRROR the target's SPI
+ * (`AgentGovernanceQueries` in `src/spi/governance-queries.ts`) exactly — the SPA is a pure consumer,
+ * so any drift here is a bug against the server contract, not a local choice.
+ */
+/** Inclusive UTC-day range, each `YYYY-MM-DD`. Sent as `?from=&to=`. */
+export interface GovernanceRange {
+    fromDay: string;
+    toDay: string;
+}
+/** `GET /agent/governance/spend/model` — spend + token totals for one model over the range. */
+export interface ModelSpendRow {
+    modelId: string;
+    requests: number;
+    inputTokens: number;
+    outputTokens: number;
+    costUsd: number;
+}
+/** `GET /agent/governance/spend/actor` — spend + token totals for one acting ref over the range. */
+export interface ActorSpendRow {
+    actorRef: string;
+    requests: number;
+    totalTokens: number;
+    costUsd: number;
+}
+/** `GET /agent/governance/usage/trend` — one point on the daily usage/cost trend. */
+export interface UsageTrendPoint {
+    day: string;
+    totalTokens: number;
+    costUsd: number;
+}
+/** `GET /agent/governance/tool-calls/recent` — a recent tool call for the activity feed. */
+export interface ToolCallActivityRow {
+    toolCallId: string;
+    toolName: string;
+    toolType: string;
+    status: string;
+    threadId: string;
+    createdAt: string;
+}
+/** `GET /agent/governance/threads/recent` — a recent thread with rolled-up activity. */
+export interface ThreadActivityRow {
+    threadId: string;
+    title: string;
+    actorRef: string;
+    messageCount: number;
+    totalTokens: number;
+    lastActivityAt: string;
+}
+/** `GET /agent/quota/today` — the caller's token spend so far today. */
+export interface QuotaToday {
+    usedTokens: number;
+}
+/** A run's lifecycle status as the read-model surfaces it. */
+export type RunStatus = 'running' | 'completed' | 'failed' | 'cancelled';
+/** Filters + cursor for `GET /agent/governance/runs`. All optional; absent = no constraint. */
+export interface ListRunsFilter {
+    /** Exact `actor_ref`. */
+    actor?: string;
+    /** Exact `agent_name`. */
+    agent?: string;
+    status?: RunStatus;
+    /** Inclusive UTC-day lower bound on `started_at`, `YYYY-MM-DD`. */
+    from?: string;
+    /** Inclusive UTC-day upper bound on `started_at`, `YYYY-MM-DD`. */
+    to?: string;
+    /** Opaque cursor from a prior page's {@link ListRunsResult.nextCursor}; omit for the first page. */
+    cursor?: string;
+    /** Page size; defaults to 50, clamped to 200 by the server. */
+    limit?: number;
+}
+/** A run row for the governance list + detail. Newest-first in {@link ListRunsResult}. */
+export interface RunSummaryRow {
+    runId: string;
+    threadId: string;
+    actorRef: string;
+    tenantRef: string | null;
+    agentName: string | null;
+    status: string;
+    /** ISO timestamp. */
+    startedAt: string;
+    /** ISO timestamp, `null` while still running. */
+    finishedAt: string | null;
+    /** `finishedAt - startedAt` in ms, `null` while still running. */
+    durationMs: number | null;
+    stepCount: number;
+    inputTokens: number;
+    outputTokens: number;
+    costUsd: number | null;
+    error: string | null;
+    durable: boolean;
+}
+/** `GET /agent/governance/runs` — one page, newest-first, with an opaque forward cursor. */
+export interface ListRunsResult {
+    runs: RunSummaryRow[];
+    /** Pass back as {@link ListRunsFilter.cursor} for the next page; `null` when the last page was returned. */
+    nextCursor: string | null;
+}
+/** A message belonging to a run, for {@link RunDetail}. */
+export interface RunMessageRow {
+    id: string;
+    role: string;
+    content: string;
+    createdAt: string;
+}
+/** A tool call belonging to a run, for {@link RunDetail} (and the approvals subset). */
+export interface RunToolCallRow {
+    toolCallId: string;
+    toolName: string;
+    toolType: string;
+    status: string;
+    input: unknown;
+    output: unknown;
+    error: string | null;
+    executionMs: number | null;
+    createdAt: string;
+}
+/** A usage ledger row belonging to a run, for {@link RunDetail}. */
+export interface RunUsageRow {
+    modelId: string;
+    purpose: string;
+    inputTokens: number;
+    outputTokens: number;
+    costUsd: number | null;
+    createdAt: string;
+}
+/**
+ * `GET /agent/governance/runs/:id` — the full trace of one run (run + messages + tool calls +
+ * pending approvals + usage), or `null` if unknown.
+ */
+export interface RunDetail {
+    run: RunSummaryRow;
+    messages: RunMessageRow[];
+    toolCalls: RunToolCallRow[];
+    /** The subset of `toolCalls` still `pending_approval`. */
+    approvals: RunToolCallRow[];
+    usage: RunUsageRow[];
+}
+/** Filters for `GET /agent/governance/approvals/pending`. */
+export interface PendingApprovalsFilter {
+    /** Restrict to a single acting ref (the owning run's `actor_ref`). */
+    actor?: string;
+    /** Cap the inbox; defaults to 50, clamped to 200 by the server. */
+    limit?: number;
+}
+/**
+ * `GET /agent/governance/approvals/pending` — one tool call awaiting a HITL decision, for the
+ * cross-thread approvals inbox (oldest first).
+ */
+export interface PendingApprovalRow {
+    toolCallId: string;
+    toolName: string;
+    input: unknown;
+    threadId: string;
+    /** The run this call belongs to, for a trace deep-link; `null` for a call recorded before run tracking. */
+    runId: string | null;
+    /** Who asked — the owning run's (or thread's) actor. */
+    actorRef: string;
+    /** ISO timestamp the call was recorded (requested). */
+    requestedAt: string;
+}
+/** Inclusive UTC-day range for the run/tool aggregates; each bound `YYYY-MM-DD`, both optional. */
+export interface ToolStatsRange {
+    /** Lower bound on the row's `created_at`/`started_at`; omit for no lower bound. */
+    from?: string;
+    /** Upper bound; omit for no upper bound. */
+    to?: string;
+}
+/**
+ * `GET /agent/governance/tools/stats` — per-tool call/failure/rejection/latency rollup over a range,
+ * highest call count first.
+ */
+export interface PerToolStatRow {
+    toolName: string;
+    toolType: string;
+    calls: number;
+    failed: number;
+    rejected: number;
+    /** Mean `executionMs` across calls that recorded one; `null` when none did. */
+    avgDurationMs: number | null;
+}
+/**
+ * `GET /agent/governance/reliability` — aggregated run reliability over a range (success / failure /
+ * cancel rates + mean settled duration).
+ */
+export interface RunReliability {
+    runs: number;
+    completed: number;
+    failed: number;
+    cancelled: number;
+    running: number;
+    /** completed / runs, 0 when runs = 0. */
+    successRate: number;
+    /** failed / runs, 0 when runs = 0. */
+    failureRate: number;
+    /** cancelled / runs, 0 when runs = 0. */
+    cancelRate: number;
+    /** Mean duration of settled (completed/failed/cancelled) runs in ms; `null` when none settled. */
+    avgDurationMs: number | null;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/client/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/client/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,wEAAwE;AACxE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,+FAA+F;AAC/F,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,oGAAoG;AACpG,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,4FAA4F;AAC5F,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,wEAAwE;AACxE,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,8DAA8D;AAC9D,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEzE,+FAA+F;AAC/F,MAAM,WAAW,cAAc;IAC7B,yBAAyB;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0BAA0B;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,oGAAoG;IACpG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,0FAA0F;AAC1F,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,kEAAkE;IAClE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,4FAA4F;AAC5F,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,aAAa,EAAE,CAAC;IACtB,4GAA4G;IAC5G,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wFAAwF;AACxF,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,oEAAoE;AACpE,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,aAAa,CAAC;IACnB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,0DAA0D;IAC1D,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,KAAK,EAAE,WAAW,EAAE,CAAC;CACtB;AAED,6DAA6D;AAC7D,MAAM,WAAW,sBAAsB;IACrC,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,2GAA2G;IAC3G,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,mGAAmG;AACnG,MAAM,WAAW,cAAc;IAC7B,mFAAmF;IACnF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,sCAAsC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,kGAAkG;IAClG,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B"}

package/dist/src/client/types.js

@@ -0,0 +1,8 @@
+/**
+ * Wire shapes returned by the `@adonis-agora/agent` provider's read-only governance routes
+ * (`/agent/governance/*`) plus the per-actor `quota/today` route. These MIRROR the target's SPI
+ * (`AgentGovernanceQueries` in `src/spi/governance-queries.ts`) exactly — the SPA is a pure consumer,
+ * so any drift here is a bug against the server contract, not a local choice.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/client/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/client/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/src/server/define_config.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Optional `config('agent').dashboard` block. The dashboard reuses the agent config's `path` and
+ * `actorResolver` (so it sits behind the SAME actor gating as the governance routes); this block only
+ * toggles it on/off and optionally overrides the mount path.
+ */
+export interface AgentDashboardConfig {
+    /** Mount the SPA. Default `true` — set `false` to keep the routes off entirely. */
+    enabled?: boolean;
+    /** Override the mount path. Default `<agentPath>/dashboard`. */
+    path?: string;
+}
+export interface ResolvedAgentDashboardConfig {
+    enabled: boolean;
+    path?: string;
+}
+/** Fill defaults for the optional dashboard config block. */
+export declare function resolveDashboardConfig(config: AgentDashboardConfig | undefined): ResolvedAgentDashboardConfig;
+//# sourceMappingURL=define_config.d.ts.map

package/dist/src/server/define_config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define_config.d.ts","sourceRoot":"","sources":["../../../src/server/define_config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,mFAAmF;IACnF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,6DAA6D;AAC7D,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,oBAAoB,GAAG,SAAS,GACvC,4BAA4B,CAG9B"}

package/dist/src/server/define_config.js

@@ -0,0 +1,6 @@
+/** Fill defaults for the optional dashboard config block. */
+export function resolveDashboardConfig(config) {
+    const enabled = config?.enabled ?? true;
+    return config?.path !== undefined ? { enabled, path: config.path } : { enabled };
+}
+//# sourceMappingURL=define_config.js.map

package/dist/src/server/define_config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define_config.js","sourceRoot":"","sources":["../../../src/server/define_config.ts"],"names":[],"mappings":"AAiBA,6DAA6D;AAC7D,MAAM,UAAU,sBAAsB,CACpC,MAAwC;IAExC,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC;IACxC,OAAO,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;AACnF,CAAC"}

package/dist/src/server/paths.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Pure path/asset helpers for the dashboard provider — extracted so they can be unit-tested without
+ * booting an AdonisJS app. The provider composes these; it holds only the router wiring + I/O.
+ */
+/** Collapse duplicate slashes and strip leading/trailing ones: `/agent//` → `agent`. */
+export declare function trimSlashes(path: string): string;
+/** The agent API base as an absolute path with a single leading slash: `agent` → `/agent`. */
+export declare function apiBaseFor(agentPath: string): string;
+/**
+ * The canonical dashboard mount path (no trailing slash), default `<agentPath>/dashboard`. A caller
+ * may override with an explicit `dashboardPath`; both are normalized to a single leading slash.
+ */
+export declare function mountPathFor(agentPath: string, dashboardPath?: string): string;
+/** MIME type for a filename by extension; `application/octet-stream` for anything unknown. */
+export declare function contentTypeFor(filename: string): string;
+/**
+ * Reject a wildcard asset request that tries to escape the SPA root via `..` or an absolute path.
+ * Returns the safe, normalized relative segments (never starting with `..`), or `null` to deny.
+ */
+export declare function safeAssetSegments(wildcard: string | string[] | undefined): string[] | null;
+/**
+ * Inject the resolved agent API base into the served `index.html` as a global the SPA reads before
+ * boot, so the client calls the exact base the provider mounted (no build-time coupling). Idempotent
+ * per response — inserted right before `</head>`.
+ */
+export declare function injectApiBase(html: string, apiBase: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/src/server/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../src/server/paths.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,wFAAwF;AACxF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,8FAA8F;AAC9F,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAM9E;AAsBD,8FAA8F;AAC9F,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIvD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,IAAI,CAU1F;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAInE"}

package/dist/src/server/paths.js

@@ -0,0 +1,78 @@
+/**
+ * Pure path/asset helpers for the dashboard provider — extracted so they can be unit-tested without
+ * booting an AdonisJS app. The provider composes these; it holds only the router wiring + I/O.
+ */
+/** Collapse duplicate slashes and strip leading/trailing ones: `/agent//` → `agent`. */
+export function trimSlashes(path) {
+    return path.replace(/\/+/g, '/').replace(/^\/+|\/+$/g, '');
+}
+/** The agent API base as an absolute path with a single leading slash: `agent` → `/agent`. */
+export function apiBaseFor(agentPath) {
+    const trimmed = trimSlashes(agentPath);
+    return trimmed === '' ? '/' : `/${trimmed}`;
+}
+/**
+ * The canonical dashboard mount path (no trailing slash), default `<agentPath>/dashboard`. A caller
+ * may override with an explicit `dashboardPath`; both are normalized to a single leading slash.
+ */
+export function mountPathFor(agentPath, dashboardPath) {
+    if (dashboardPath !== undefined && trimSlashes(dashboardPath) !== '') {
+        return `/${trimSlashes(dashboardPath)}`;
+    }
+    const trimmed = trimSlashes(agentPath);
+    return trimmed === '' ? '/dashboard' : `/${trimmed}/dashboard`;
+}
+const CONTENT_TYPES = {
+    html: 'text/html; charset=utf-8',
+    js: 'text/javascript; charset=utf-8',
+    mjs: 'text/javascript; charset=utf-8',
+    css: 'text/css; charset=utf-8',
+    json: 'application/json; charset=utf-8',
+    svg: 'image/svg+xml',
+    png: 'image/png',
+    jpg: 'image/jpeg',
+    jpeg: 'image/jpeg',
+    gif: 'image/gif',
+    webp: 'image/webp',
+    ico: 'image/x-icon',
+    woff: 'font/woff',
+    woff2: 'font/woff2',
+    ttf: 'font/ttf',
+    map: 'application/json; charset=utf-8',
+    txt: 'text/plain; charset=utf-8',
+};
+/** MIME type for a filename by extension; `application/octet-stream` for anything unknown. */
+export function contentTypeFor(filename) {
+    const dot = filename.lastIndexOf('.');
+    const ext = dot === -1 ? '' : filename.slice(dot + 1).toLowerCase();
+    return CONTENT_TYPES[ext] ?? 'application/octet-stream';
+}
+/**
+ * Reject a wildcard asset request that tries to escape the SPA root via `..` or an absolute path.
+ * Returns the safe, normalized relative segments (never starting with `..`), or `null` to deny.
+ */
+export function safeAssetSegments(wildcard) {
+    const parts = Array.isArray(wildcard) ? wildcard : (wildcard ?? '').split('/');
+    const segments = [];
+    for (const raw of parts) {
+        const part = raw.trim();
+        if (part === '' || part === '.')
+            continue;
+        if (part === '..' || part.includes('\0') || part.includes('\\'))
+            return null;
+        segments.push(part);
+    }
+    return segments;
+}
+/**
+ * Inject the resolved agent API base into the served `index.html` as a global the SPA reads before
+ * boot, so the client calls the exact base the provider mounted (no build-time coupling). Idempotent
+ * per response — inserted right before `</head>`.
+ */
+export function injectApiBase(html, apiBase) {
+    const tag = `<script>window.__AGENT_DASHBOARD_BASE__=${JSON.stringify(apiBase)}</script>`;
+    if (html.includes('</head>'))
+        return html.replace('</head>', `${tag}</head>`);
+    return `${tag}${html}`;
+}
+//# sourceMappingURL=paths.js.map

package/dist/src/server/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/server/paths.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,wFAAwF;AACxF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACvC,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,aAAsB;IACpE,IAAI,aAAa,KAAK,SAAS,IAAI,WAAW,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;QACrE,OAAO,IAAI,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACvC,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,OAAO,YAAY,CAAC;AACjE,CAAC;AAED,MAAM,aAAa,GAA2B;IAC5C,IAAI,EAAE,0BAA0B;IAChC,EAAE,EAAE,gCAAgC;IACpC,GAAG,EAAE,gCAAgC;IACrC,GAAG,EAAE,yBAAyB;IAC9B,IAAI,EAAE,iCAAiC;IACvC,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,cAAc;IACnB,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,YAAY;IACnB,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,iCAAiC;IACtC,GAAG,EAAE,2BAA2B;CACjC,CAAC;AAEF,8FAA8F;AAC9F,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAuC;IACvE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG;YAAE,SAAS;QAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7E,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAe;IACzD,MAAM,GAAG,GAAG,2CAA2C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC;IAC1F,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,GAAG,SAAS,CAAC,CAAC;IAC9E,OAAO,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/package.json

@@ -0,0 +1,84 @@
+{
+  "name": "@adonis-agora/agent-dashboard",
+  "version": "0.1.0",
+  "description": "Read-only governance console (spend by model/actor, usage trend, recent threads & tool calls, quota) for @adonis-agora/agent — a dependency-light React SPA served by a thin AdonisJS provider. Part of the Agora ecosystem.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/DavideCarvalho/adonis-agent.git",
+    "directory": "packages/dashboard"
+  },
+  "author": "Davi Carvalho <davi@goflip.ai>",
+  "type": "module",
+  "main": "./dist/providers/agent_dashboard_provider.js",
+  "types": "./dist/providers/agent_dashboard_provider.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/providers/agent_dashboard_provider.d.ts",
+      "import": "./dist/providers/agent_dashboard_provider.js",
+      "default": "./dist/providers/agent_dashboard_provider.js"
+    },
+    "./agent_dashboard_provider": {
+      "types": "./dist/providers/agent_dashboard_provider.d.ts",
+      "import": "./dist/providers/agent_dashboard_provider.js",
+      "default": "./dist/providers/agent_dashboard_provider.js"
+    },
+    "./client": {
+      "types": "./dist/src/client/index.d.ts",
+      "import": "./dist/src/client/index.js",
+      "default": "./dist/src/client/index.js"
+    }
+  },
+  "files": [
+    "dist/",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "sideEffects": false,
+  "peerDependencies": {
+    "@adonisjs/core": "^7.3.0",
+    "@adonis-agora/agent": "^0.1.0"
+  },
+  "peerDependenciesMeta": {
+    "@adonisjs/core": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@adonisjs/core": "^7.3.0",
+    "@testing-library/react": "^16.1.0",
+    "@types/node": "^22.0.0",
+    "@types/react": "^19.0.0",
+    "@types/react-dom": "^19.0.0",
+    "@vitejs/plugin-react": "^4.3.4",
+    "jsdom": "^25.0.1",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0",
+    "typescript": "^5.4.0",
+    "vite": "^7.0.0",
+    "vitest": "^3.0.0",
+    "@adonis-agora/agent": "0.1.0"
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "keywords": [
+    "adonisjs",
+    "adonis",
+    "ai",
+    "agent",
+    "governance",
+    "dashboard",
+    "spa",
+    "react",
+    "spend",
+    "usage",
+    "agora"
+  ],
+  "scripts": {
+    "build": "vite build && tsc -p tsconfig.json",
+    "test": "vitest run --passWithNoTests",
+    "test:watch": "vitest",
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.app.json --noEmit"
+  }
+}