@animalabs/connectome-host 0.3.1 → 0.3.7

package/src/modules/web-ui-module.ts

@@ -41,6 +41,7 @@ import { createHash, timingSafeEqual } from 'node:crypto';
 import type { Recipe } from '../recipe.js';
 import type { SessionManager } from '../session-manager.js';
 import type { BranchState } from '../commands.js';
+import type { CallLedger } from '../call-ledger.js';
 import { handleCommand } from '../commands.js';
 import { AgentTreeReducer, type AgentTreeSnapshot } from '../state/agent-tree-reducer.js';
 import { FleetTreeAggregator } from '../state/fleet-tree-aggregator.js';
@@ -54,6 +55,7 @@ import {
   type WelcomeMessageEntry,
   type RequestHistoryMessage,
   type TokenUsage,
+  type CallLedgerSnapshot,
   type McplListMessage,
   type LessonsListMessage,
 } from '../web/protocol.js';
@@ -63,6 +65,16 @@ import {
   DEFAULT_CONFIG_PATH,
 } from '../mcpl-config.js';
 import { loadRecipe } from '../recipe.js';
+import {
+  ObserverRegistry,
+  ObserverSessions,
+  sessionTokenFromRequest,
+  traceRequiredScope,
+  filterEntryForScopes,
+  scopeWelcome,
+  type ObserverScope,
+  type ObserverHelloIdentity,
+} from './web-ui-observers.js';
 
 /**
  * Minimal slice of AppContext the module needs. Defined locally to avoid
@@ -108,15 +120,46 @@ export interface WebUiModuleConfig {
    * the entire host is firewalled off from browsers.
    */
   allowedOrigins?: string[];
+  /**
+   * Path to the observer grant file (data/observers.json — see connectome
+   * docs/observability.md). When set AND the file holds at least one grant,
+   * key-authenticated observers may connect: static assets are served
+   * without basic auth (the app shell carries no data), /ws upgrades are
+   * accepted unauthenticated and must present a signed observer-hello
+   * before anything is sent, and every frame is filtered by the grant's
+   * scope mask. With no grants the webui behaves exactly as before.
+   */
+  observersPath?: string;
+  /** Content-free recent provider-call ledger for spend/cache diagnostics. */
+  callLedger?: CallLedger;
+}
+
+/** Data stashed on the Bun WS upgrade. */
+interface WsData {
+  id: number;
+  /** True when the upgrade carried valid basic auth (full access). */
+  authed: boolean;
+  /** Host header of the upgrade request — the observer statement binds it. */
+  host: string;
 }
 
 /** Per-connection state. */
 interface ClientState {
   /** Stable id matching ws.data.id; used for routing fleet IPC responses. */
   id: number;
-  ws: ServerWebSocket<{ id: number }>;
+  ws: ServerWebSocket<WsData>;
   /** True after we've sent the welcome message. */
   welcomed: boolean;
+  /**
+   * Authorization state. 'full' = basic-auth (or open loopback) — behavior
+   * identical to pre-observer builds, scopes null. 'pending' = upgraded
+   * without auth, must observer-hello before any data flows. 'observer' =
+   * key-authenticated; `scopes` is the grant's mask.
+   */
+  auth: 'full' | 'pending' | 'observer';
+  scopes: Set<ObserverScope> | null;
+  /** Kills pending connections that never complete the hello. */
+  authTimer?: ReturnType<typeof setTimeout>;
   /** Open peek subscriptions for this client, keyed by scope. Each entry
    *  carries its detacher so unsubscribe and disconnect both clean up
    *  without the framework leaking listeners. */
@@ -132,6 +175,161 @@ const WELCOME_HISTORY_LIMIT = 200;
 const HISTORY_PAGE_DEFAULT = 200;
 const HISTORY_PAGE_MAX = 500;
 
+interface CoverageSummary {
+  id: string;
+  level: number;
+  tokens?: number;
+  sourceIds?: string[];
+  mergedInto?: string;
+}
+
+interface CoverageChunk {
+  index: number;
+  tokens?: number;
+  compressed?: boolean;
+  summaryId?: string;
+  messages?: Array<{ id?: string }>;
+}
+
+interface CoverageStrategy {
+  summaries?: CoverageSummary[];
+  chunks?: CoverageChunk[];
+  compressionQueue?: number[];
+  mergeQueue?: Array<{ level: number; sourceIds: string[] }>;
+  resolutions?: Map<string, number>;
+  pendingCompression?: Promise<void> | null;
+}
+
+export interface ContextCoverageSnapshot {
+  agent: string;
+  branch: string;
+  generatedAt: string;
+  supported: boolean;
+  totals: {
+    chunks: number;
+    compressedChunks: number;
+    coveredMessages: number;
+    coveredTokens: number;
+    summaries: number;
+  };
+  levels: Array<{
+    level: number;
+    summaries: number;
+    frontier: number;
+    tokens: number;
+    coveredChunks: number;
+    coveredMessages: number;
+    coveredTokens: number;
+  }>;
+  chunks: Array<{
+    index: number;
+    messages: number;
+    tokens: number;
+    compressed: boolean;
+    summaryId: string | null;
+    maxLevel: number;
+    selectedMin: number;
+    selectedMax: number;
+    queued: boolean;
+  }>;
+  queue: {
+    inFlight: boolean;
+    pending: string | null;
+    l1: number[];
+    merges: Array<{ targetLevel: number; sourceCount: number; firstSource: string | null; lastSource: string | null }>;
+  };
+}
+
+/** Build a text-free projection of the autobiographical summary pyramid. */
+export function buildContextCoverageSnapshot(
+  agentName: string,
+  cm: {
+    currentBranch: () => { name: string };
+    getStrategy: () => unknown;
+    getPendingWork?: () => { description?: string } | null;
+  },
+): ContextCoverageSnapshot {
+  const strategy = cm.getStrategy() as CoverageStrategy;
+  const summaries = Array.isArray(strategy.summaries) ? strategy.summaries : [];
+  const chunks = Array.isArray(strategy.chunks) ? strategy.chunks : [];
+  const compressionQueue = Array.isArray(strategy.compressionQueue) ? strategy.compressionQueue : [];
+  const mergeQueue = Array.isArray(strategy.mergeQueue) ? strategy.mergeQueue : [];
+  const resolutions = strategy.resolutions instanceof Map ? strategy.resolutions : new Map<string, number>();
+  const summaryById = new Map(summaries.map(summary => [summary.id, summary]));
+  const queuedChunks = new Set(compressionQueue);
+
+  const projectedChunks = chunks.map((chunk) => {
+    let maxLevel = 0;
+    let current = chunk.summaryId ? summaryById.get(chunk.summaryId) : undefined;
+    const seen = new Set<string>();
+    while (current && !seen.has(current.id)) {
+      seen.add(current.id);
+      maxLevel = Math.max(maxLevel, current.level);
+      current = current.mergedInto ? summaryById.get(current.mergedInto) : undefined;
+    }
+
+    const selected = (chunk.messages ?? [])
+      .map(message => typeof message.id === 'string' ? (resolutions.get(message.id) ?? 0) : 0);
+    return {
+      index: chunk.index,
+      messages: chunk.messages?.length ?? 0,
+      tokens: Math.max(0, chunk.tokens ?? 0),
+      compressed: chunk.compressed === true,
+      summaryId: chunk.summaryId ?? null,
+      maxLevel,
+      selectedMin: selected.length > 0 ? Math.min(...selected) : 0,
+      selectedMax: selected.length > 0 ? Math.max(...selected) : 0,
+      queued: queuedChunks.has(chunk.index),
+    };
+  });
+
+  const levelNumbers = [...new Set(summaries.map(summary => summary.level))]
+    .filter(level => Number.isFinite(level) && level > 0)
+    .sort((a, b) => a - b);
+  const levels = levelNumbers.map((level) => {
+    const atLevel = summaries.filter(summary => summary.level === level);
+    const covered = projectedChunks.filter(chunk => chunk.maxLevel >= level);
+    return {
+      level,
+      summaries: atLevel.length,
+      frontier: atLevel.filter(summary => !summary.mergedInto).length,
+      tokens: atLevel.reduce((total, summary) => total + Math.max(0, summary.tokens ?? 0), 0),
+      coveredChunks: covered.length,
+      coveredMessages: covered.reduce((total, chunk) => total + chunk.messages, 0),
+      coveredTokens: covered.reduce((total, chunk) => total + chunk.tokens, 0),
+    };
+  });
+  const covered = projectedChunks.filter(chunk => chunk.maxLevel > 0);
+  const pending = cm.getPendingWork?.()?.description ?? null;
+
+  return {
+    agent: agentName,
+    branch: cm.currentBranch().name,
+    generatedAt: new Date().toISOString(),
+    supported: Array.isArray(strategy.summaries) && Array.isArray(strategy.chunks),
+    totals: {
+      chunks: projectedChunks.length,
+      compressedChunks: projectedChunks.filter(chunk => chunk.compressed).length,
+      coveredMessages: covered.reduce((total, chunk) => total + chunk.messages, 0),
+      coveredTokens: covered.reduce((total, chunk) => total + chunk.tokens, 0),
+      summaries: summaries.length,
+    },
+    levels,
+    chunks: projectedChunks,
+    queue: {
+      inFlight: strategy.pendingCompression != null,
+      pending,
+      l1: [...compressionQueue],
+      merges: mergeQueue.map(merge => ({
+        targetLevel: merge.level,
+        sourceCount: merge.sourceIds.length,
+        firstSource: merge.sourceIds[0] ?? null,
+        lastSource: merge.sourceIds[merge.sourceIds.length - 1] ?? null,
+      })),
+    },
+  };
+}
+
 /**
  * Structural view of the windowed-read facade added to
  * @animalabs/context-manager alongside this protocol version. Typed
@@ -174,6 +372,10 @@ interface SharedServerState {
   allowedOrigins: string[];
   clients: Map<number, ClientState>;
   nextClientId: number;
+  /** Observer grant registry (hot-reloaded) — null when not configured. */
+  observers: ObserverRegistry | null;
+  /** Short-lived HTTP session tokens minted after observer WS auth. */
+  observerSessions: ObserverSessions;
   /** Aggregate session usage published to clients: parent's own totals plus
    *  the most-recent `usage:updated` totals reported by each fleet child.
    *  Recomputed from `parentUsage` + `childUsage` on every relevant event. */
@@ -191,6 +393,9 @@ interface SharedServerState {
    *  every usage:updated event so the welcome and live UsageMessage frames
    *  carry consistent values. */
   latestPerAgentCost: import('../web/protocol.js').PerAgentCost[];
+  /** Recent per-call cache diagnostics, updated directly by the adapter. */
+  latestCallLedger?: CallLedgerSnapshot;
+  callLedgerDetacher: (() => void) | null;
   /** Currently-bound app, refreshed on every setApp() call. WS handlers read
    *  from here so the singleton always points at the live framework regardless
    *  of which WebUiModule instance is "active". */
@@ -260,10 +465,14 @@ export class WebUiModule implements Module {
       allowedOrigins: this.config.allowedOrigins ?? defaultAllowedOrigins(port),
       clients: new Map(),
       nextClientId: 1,
+      observers: this.config.observersPath ? new ObserverRegistry(this.config.observersPath) : null,
+      observerSessions: new ObserverSessions(),
       latestUsage: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
       parentUsage: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
       childUsage: new Map(),
       latestPerAgentCost: [],
+      latestCallLedger: this.config.callLedger?.snapshot(),
+      callLedgerDetacher: null,
       pendingFleetRequests: new Map(),
       childRecipeCache: new Map(),
       app: null,
@@ -271,14 +480,15 @@ export class WebUiModule implements Module {
       fleetEventDetacher: null,
       messageListenerDetacher: null,
     };
+    state.observers?.start();
     state.server = Bun.serve({
       port,
       hostname: host,
       fetch: (req, server) => this.handleHttp(req, server),
       websocket: {
-        open: (ws) => this.onWsOpen(ws as ServerWebSocket<{ id: number }>),
-        message: (ws, msg) => this.onWsMessage(ws as ServerWebSocket<{ id: number }>, msg),
-        close: (ws) => this.onWsClose(ws as ServerWebSocket<{ id: number }>),
+        open: (ws) => this.onWsOpen(ws as ServerWebSocket<WsData>),
+        message: (ws, msg) => this.onWsMessage(ws as ServerWebSocket<WsData>, msg),
+        close: (ws) => this.onWsClose(ws as ServerWebSocket<WsData>),
       },
     });
     // When port=0 is passed (test setups, ephemeral binds), the OS picks a
@@ -294,6 +504,19 @@ export class WebUiModule implements Module {
     }
     sharedServer = state;
 
+    // Provider calls include auxiliary compression requests that never emit a
+    // framework usage trace, so subscribe at the adapter ledger itself. This
+    // keeps the panel live for both conversational and memory-maintenance
+    // calls without polling the JSONL log.
+    state.callLedgerDetacher = this.config.callLedger?.onUpdate((ledger) => {
+      state.latestCallLedger = ledger;
+      const msg: WebUiServerMessage = { type: 'call-ledger', ledger };
+      for (const client of state.clients.values()) {
+        if (!client.welcomed) continue;
+        if (client.scopes === null || client.scopes.has('health')) this.send(client, msg);
+      }
+    }) ?? null;
+
     console.log(`[webui] listening on http://${host}:${boundPort}`);
   }
 
@@ -352,7 +575,10 @@ export class WebUiModule implements Module {
           const entry = toWireEntry(ev.message as MessageLike, cm0.getMessageCount() - 1);
           const push: WebUiServerMessage = { type: 'message-appended', entry };
           for (const c of ss.clients.values()) {
-            if (c.welcomed) this.send(c, push);
+            if (!c.welcomed) continue;
+            if (c.scopes === null) { this.send(c, push); continue; }
+            const filtered = filterEntryForScopes(entry, c.scopes);
+            if (filtered) this.send(c, { type: 'message-appended', entry: filtered });
           }
         } catch (err) {
           // Never let a viewer-side projection error break the store's
@@ -577,6 +803,17 @@ export class WebUiModule implements Module {
     }
   }
 
+  // -------------------------------------------------------------------------
+  // Observer scope filtering — event-family masks (docs/observability.md §4).
+  // Full clients (scopes === null) bypass everything: historical behavior.
+  // Pure projections live in web-ui-observers.ts (unit-tested there).
+  // -------------------------------------------------------------------------
+
+  private clientAllowsTrace(client: ClientState, event: { type: string }): boolean {
+    if (client.scopes === null) return true;
+    return client.scopes.has(traceRequiredScope(event));
+  }
+
   private fanOutTrace(event: TraceEvent): void {
     // Update cached usage snapshot first so welcomes for late-connecting
     // clients get a current value.
@@ -615,8 +852,10 @@ export class WebUiModule implements Module {
       : null;
     for (const client of sharedServer!.clients.values()) {
       if (!client.welcomed) continue;
-      this.send(client, traceMsg);
-      if (usageMsg) this.send(client, usageMsg);
+      if (this.clientAllowsTrace(client, event)) this.send(client, traceMsg);
+      if (usageMsg && (client.scopes === null || client.scopes.has('health'))) {
+        this.send(client, usageMsg);
+      }
     }
   }
 
@@ -733,6 +972,10 @@ export class WebUiModule implements Module {
   private async handleHttp(req: Request, server: ReturnType<typeof Bun.serve>): Promise<Response> {
     const url = new URL(req.url);
 
+    // Observer feature gate: live only when grants exist. With no grants
+    // every path below reduces to the historical basic-auth-only behavior.
+    const observersActive = sharedServer!.observers?.active() ?? false;
+
     // WebSocket upgrade
     if (url.pathname === '/ws') {
       // Origin check FIRST — drive-by CSRF on a localhost-bound WS is the
@@ -740,15 +983,61 @@ export class WebUiModule implements Module {
       // `new WebSocket(...)` the way they do on fetch, so without an
       // explicit check, any tab the operator opens could connect here.
       if (!this.checkOrigin(req)) return new Response('Forbidden', { status: 403 });
-      if (!this.checkAuth(req)) return this.unauthorized();
+      const basicOk = this.checkAuth(req);
+      // Without basic auth the upgrade is allowed only when observer grants
+      // exist — and then NOTHING is sent until a signed observer-hello
+      // verifies (in-band auth; see onWsOpen/onWsMessage).
+      if (!basicOk && !observersActive) return this.unauthorized();
       const id = sharedServer!.nextClientId++;
-      const ok = server.upgrade(req, { data: { id } });
+      const ok = server.upgrade(req, {
+        data: { id, authed: basicOk, host: req.headers.get('host') ?? '' } satisfies WsData,
+      });
       if (!ok) return new Response('Upgrade failed', { status: 400 });
       // Bun returns undefined on success; the response is taken over by the upgrade.
       return new Response(null, { status: 101 });
     }
 
-    if (!this.checkAuth(req)) return this.unauthorized();
+    // HTTP auth: basic auth grants everything (historical behavior); an
+    // observer session cookie (minted after WS key auth) grants by scope;
+    // when observers are active the static app shell is public — it carries
+    // no data, and key-only devices must be able to load the SPA to
+    // authenticate at all.
+    const basicOk = this.checkAuth(req);
+    const sessionScopes = basicOk
+      ? null
+      : sharedServer!.observerSessions.lookup(sessionTokenFromRequest(req));
+    const httpAllowed = (scope: ObserverScope): boolean =>
+      basicOk || (sessionScopes?.has(scope) ?? false);
+    // /auth/basic: deliberate basic-auth challenge point. fetch() never
+    // triggers the browser's native credential prompt, but a top-level
+    // navigation here does — the SPA's "sign in with password" fallback for
+    // devices without an observer grant. Once credentials are cached for
+    // the realm, the WS upgrade carries them and the client is 'full'.
+    if (url.pathname === '/auth/basic') {
+      if (basicOk) return new Response(null, { status: 302, headers: { location: '/' } });
+      return this.unauthorized();
+    }
+    const isStatic = !url.pathname.startsWith('/debug/')
+      && url.pathname !== '/curve'
+      && url.pathname !== '/healthz'
+      && !url.pathname.startsWith('/files/');
+    if (!basicOk && !(observersActive && isStatic) && !sessionScopes) {
+      return this.unauthorized();
+    }
+
+    // Per-route scope gates for observer sessions (basic auth passes all).
+    if ((url.pathname.startsWith('/debug/') || url.pathname === '/curve') && !httpAllowed('debug')) {
+      return this.unauthorized();
+    }
+    if (url.pathname === '/healthz' && !httpAllowed('health')) {
+      return this.unauthorized();
+    }
+    if (url.pathname.startsWith('/files/') && !basicOk) {
+      // Workspace files stay basic-auth-only: mount contents are outside the
+      // observer scope model (they are the agent's working files, not wire
+      // events). Revisit if a 'files' scope is ever warranted.
+      return this.unauthorized();
+    }
 
     // Debug: the membrane-normalized request that WOULD be emitted if the
     // agent were activated right now — no inference, no state mutation.
@@ -763,6 +1052,12 @@ export class WebUiModule implements Module {
     if (url.pathname === '/debug/context/curve') {
       return this.handleContextCurve(url);
     }
+    if (url.pathname === '/debug/context/coverage') {
+      return this.handleContextCoverage(url);
+    }
+    if (url.pathname === '/debug/context/maintenance') {
+      return this.handleContextMaintenance();
+    }
     if (url.pathname === '/curve') {
       return new Response(CURVE_PAGE_HTML, {
         headers: { 'content-type': 'text/html; charset=utf-8' },
@@ -798,6 +1093,39 @@ export class WebUiModule implements Module {
     return this.serveStatic(requested);
   }
 
+  /**
+   * Counts-only state and bounded history for periodic context maintenance.
+   * Authentication is enforced by handleHttp before this method is reached.
+   * The framework snapshot deliberately contains no message or summary text.
+   */
+  private handleContextMaintenance(): Response {
+    const app = sharedServer?.app;
+    if (!app) return Response.json({ error: 'app not bound yet' }, { status: 503 });
+    const framework = app.framework as unknown as {
+      getContextMaintenanceSnapshot?: () => Record<string, unknown>;
+    };
+    if (typeof framework.getContextMaintenanceSnapshot !== 'function') {
+      return Response.json(
+        { error: 'framework lacks context-maintenance diagnostics' },
+        { status: 501 },
+      );
+    }
+    return Response.json(framework.getContextMaintenanceSnapshot());
+  }
+
+  /** Summary-tree coverage and queued work, with no message or summary text. */
+  private handleContextCoverage(url: URL): Response {
+    const app = sharedServer?.app;
+    if (!app) return Response.json({ error: 'app not bound yet' }, { status: 503 });
+    const agentName = url.searchParams.get('agent') || app.recipe.agent.name || 'agent';
+    const agent = app.framework.getAgent(agentName);
+    if (!agent) {
+      return Response.json({ error: `Agent not found: ${agentName}` }, { status: 404 });
+    }
+    const cm = agent.getContextManager();
+    return Response.json(buildContextCoverageSnapshot(agentName, cm));
+  }
+
   /**
    * Debug endpoint: return the membrane-normalized request the framework would
    * hand to the model if the agent were activated right now. Delegates to
@@ -1116,16 +1444,60 @@ export class WebUiModule implements Module {
   // WebSocket lifecycle
   // -------------------------------------------------------------------------
 
-  private onWsOpen(ws: ServerWebSocket<{ id: number }>): void {
+  private onWsOpen(ws: ServerWebSocket<WsData>): void {
     const id = ws.data.id;
-    const client: ClientState = { id, ws, welcomed: false, peeks: new Map() };
+    const client: ClientState = {
+      id, ws, welcomed: false, peeks: new Map(),
+      auth: ws.data.authed ? 'full' : 'pending',
+      scopes: null,
+    };
     sharedServer!.clients.set(id, client);
 
+    if (client.auth === 'pending') {
+      // In-band observer auth: tell the client what host its statement must
+      // bind, and give it a bounded window to present a verifiable hello.
+      // No data flows on this connection until then.
+      this.send(client, { type: 'observer-auth-required', host: ws.data.host });
+      client.authTimer = setTimeout(() => {
+        if (client.auth === 'pending') ws.close(4401, 'observer auth timeout');
+      }, 15_000);
+      return;
+    }
+
     if (sharedServer?.app) void this.sendWelcome(client);
     // Else: park until setApp() flushes welcomes.
   }
 
-  private onWsMessage(ws: ServerWebSocket<{ id: number }>, raw: string | Buffer): void {
+  private handleObserverHello(client: ClientState, identity: ObserverHelloIdentity): void {
+    const registry = sharedServer!.observers;
+    const result = registry?.verifyHello(identity, client.ws.data.host) ?? null;
+    if (!result) {
+      this.send(client, { type: 'error', message: 'observer auth failed' });
+      client.ws.close(4401, 'observer auth failed');
+      return;
+    }
+    if (client.authTimer) clearTimeout(client.authTimer);
+    client.auth = 'observer';
+    client.scopes = result.scopes;
+    this.send(client, {
+      type: 'observer-ack',
+      scopes: [...result.scopes],
+      sessionToken: sharedServer!.observerSessions.mint(result.scopes),
+      label: result.grant.label,
+    });
+    console.error(`[webui-observers] observer connected: ${result.grant.label} scopes=[${[...result.scopes].join(',')}]`);
+    if (sharedServer?.app) void this.sendWelcome(client);
+  }
+
+  /** Client message types a scoped (non-full) observer may send. */
+  private observerMaySend(client: ClientState, type: string): boolean {
+    if (client.auth !== 'observer') return false;
+    if (type === 'ping') return true;
+    if (type === 'request-history') return client.scopes?.has('messages') ?? false;
+    return false; // observers are read-only: no user-message/command/mcpl/fleet
+  }
+
+  private onWsMessage(ws: ServerWebSocket<WsData>, raw: string | Buffer): void {
     const id = ws.data.id;
     const client = sharedServer!.clients.get(id);
     if (!client) return;
@@ -1142,6 +1514,20 @@ export class WebUiModule implements Module {
       return;
     }
 
+    // Observer auth interlock: a pending connection may ONLY hello; a
+    // key-authenticated observer is read-only within its scopes. Full
+    // (basic-auth) clients skip both gates — historical behavior.
+    if (parsed.type === 'observer-hello') {
+      if (client.auth === 'pending') this.handleObserverHello(client, parsed.identity);
+      // hello on an already-authenticated connection is a no-op
+      return;
+    }
+    if (client.auth === 'pending') return; // nothing else before auth
+    if (client.auth === 'observer' && !this.observerMaySend(client, parsed.type)) {
+      this.send(client, { type: 'error', message: `forbidden for observer scope (${parsed.type})` });
+      return;
+    }
+
     if (!sharedServer?.app) {
       this.send(client, { type: 'error', message: 'host not ready' });
       return;
@@ -1825,10 +2211,11 @@ export class WebUiModule implements Module {
     }
   }
 
-  private onWsClose(ws: ServerWebSocket<{ id: number }>): void {
+  private onWsClose(ws: ServerWebSocket<WsData>): void {
     const id = ws.data.id;
     const client = sharedServer?.clients.get(id);
     if (client) {
+      if (client.authTimer) clearTimeout(client.authTimer);
       for (const detach of client.peeks.values()) {
         try { detach(); } catch { /* ignore */ }
       }
@@ -1969,9 +2356,12 @@ export class WebUiModule implements Module {
 
   private async sendWelcome(client: ClientState): Promise<void> {
     if (!sharedServer?.app) return;
+    // Never send data to a connection that hasn't authenticated. Parked
+    // pending connections get their welcome from handleObserverHello.
+    if (client.auth === 'pending') return;
 
     const welcome = await this.buildWelcome();
-    this.send(client, welcome);
+    this.send(client, client.scopes === null ? welcome : scopeWelcome(welcome, client.scopes));
     client.welcomed = true;
     // Live trace forwarding is driven by the single fan-out listener
     // installed in setApp(); membership is implicit in `sharedServer!.clients`.
@@ -2003,10 +2393,16 @@ export class WebUiModule implements Module {
       resolveBlobs: false,
       alignToBodyGroups: true,
     });
+    let entries = coalesceAndFlatten(win.messages as unknown as MessageLike[], win.startIndex);
+    if (client.scopes !== null) {
+      entries = entries
+        .map((e) => filterEntryForScopes(e, client.scopes!))
+        .filter((e): e is WelcomeMessageEntry => e !== null);
+    }
     this.send(client, {
       type: 'history-page',
       corrId: req.corrId,
-      entries: coalesceAndFlatten(win.messages as unknown as MessageLike[], win.startIndex),
+      entries,
       startIndex: win.startIndex,
       totalCount: win.totalCount,
     });
@@ -2112,6 +2508,9 @@ export class WebUiModule implements Module {
       ...(sharedServer!.latestPerAgentCost.length > 0
         ? { perAgentCost: sharedServer!.latestPerAgentCost }
         : {}),
+      ...(sharedServer!.latestCallLedger
+        ? { callLedger: sharedServer!.latestCallLedger }
+        : {}),
     };
   }