@azure-id/orc 1.7.1 → 1.8.1

package/bin/webui/js/panels/overview.js

@@ -1,488 +1,492 @@
-"use strict";
-/* panels/overview.js — orc ui client
-   FINDING_ROUTE (a caution routes to the panel that can CLEAR it), the
-   attention list, the stat tiles.
-
-   Loaded by app.html in the order its numeric prefix names. Classic
-   script, no import/export: an ES module import carries no query string,
-   and every static request here needs the per-launch session token. */
-
-
-/* ================================================================ OVERVIEW == */
-
-/* WHERE A PROBLEM IS ACTUALLY FIXED (v0.43.6).
-   `orc doctor` reports every problem in one list, and the panel used to send
-   the whole list to Maintenance with a single "Open Maintenance" button. That
-   is right for the install-footprint findings — version skew, orphans, missing
-   files, unwired hooks — because `orc update` / `doctor --fix` really is where
-   those are repaired. It was WRONG for the ones whose fix lives on another
-   panel, and `diy-stale` was the one people hit: the flow is recompiled with
-   `orc diy compile`, which is a button on FLOW. Sending them to Maintenance
-   pointed at a page with no control for the thing it was complaining about.
-
-   So the routing is a table keyed on the finding id the CLI already emits.
-   `null` means there is nothing to press anywhere — a dangling trace pointer
-   clears itself on the next run, and offering a button for it would be a lie. */
-const FINDING_ROUTE = {
-  "diy-stale": { panel: "flow", cta: "overview.item.diyStale.cta" },
-  "trace-pointer-dangling": { panel: null },
-  // v0.46.0. Correct by the rule, not by default: `export-stale` is cleared by
-  // `orc export`, which IS a CLI write Maintenance can run — so Maintenance is
-  // genuinely the panel that can clear it, not merely the fallback.
-  "export-stale": { panel: "maintenance", cta: "overview.item.exportStale.cta" },
-  "pact-broken": { panel: "pact", cta: "overview.item.pactBroken.cta" },
-  // v0.48.1. Same rule again: `orc doc audit` and `orc doc ship` are both on
-  // DOCS, so that is where a drifted document has to send you.
-  "doc-drifted": { panel: "docs", cta: "overview.item.docDrifted.cta" },
-  "boundary-refuse": { panel: "boundary", cta: "overview.item.boundaryRefuse.cta" },
-  // v0.49.1. Same rule a third time. `orc wiki sync` is a BUTTON on Knowledge
-  // and it is free, and `orc wiki plan` (which ranks the refresh) is the card
-  // directly above it — so Knowledge is genuinely the panel that can clear
-  // both, not merely the fallback.
-  "wiki-unregistered": { panel: "knowledge", cta: "overview.item.wikiUnregistered.cta" },
-  "wiki-debt": { panel: "knowledge", cta: "overview.item.wikiDebt.cta" },
-  // v0.50.0. `orc doctor` collapses the whole `orc extra` subsystem into ONE
-  // finding carrying the count and the ids — a doctor that recited eleven ids
-  // for a subsystem most repos never arm is a doctor people learn to scroll
-  // past. It routes to Extra because that is where every one of them is
-  // rendered beside the connection it is about, and where the connection test
-  // that clears most of them lives.
-  "extra-findings": { panel: "extra", cta: "overview.item.extraFindings.cta" },
-  // v0.56.0. The rule again, and this time the finding is about the TOOL rather
-  // than the project: a legacy global `orc` package owns the `orc` command and
-  // blocks every install source. `orc upgrade` is the thing that clears it (it
-  // evicts the old package first), and `upgrade` is an action row on
-  // MAINTENANCE — so that is genuinely the panel that can clear it.
-  "legacy-global-package": { panel: "maintenance", cta: "overview.item.legacyGlobalPackage.cta" },
-  // v1.0.0 W5. The rule again: a demoted run is cleared by `orc extra promote`,
-  // and Recovery is the Extra tab where every other journal-shaped state is
-  // already rendered — so that is genuinely the panel that can clear it.
-  "extra-demoted-run": { panel: "extra", cta: "overview.item.extraDemotedRun.cta" },
-  // v1.0.0 W16. An INSTALL-FOOTPRINT finding, so it takes the documented
-  // default rather than an interesting exception: the thing that clears it is
-  // `orc update`, which is an action row on MAINTENANCE. It is spelled out
-  // rather than left to DEFAULT_FINDING_ROUTE because the CTA is specific --
-  // a reader who sees "lane config drifted" should be told which button.
-  "lane-keys-drifted": { panel: "maintenance", cta: "overview.item.laneKeysDrifted.cta" },
-  // v1.3.0. The rule again, and cleanly: every one of these is cleared on the
-  // CLI Hook Interface panel — the board is where an orphaned component is
-  // removed, the caution strip is where an invalid layout is named, and the
-  // Rebuild button is where a stale compile is fixed.
-  "statusline-layout-orphaned": { panel: "hookui", cta: "overview.item.statuslineOrphaned.cta" },
-  "statusline-layout-invalid": { panel: "hookui", cta: "overview.item.statuslineInvalid.cta" },
-  "statusline-layout-unreadable": { panel: "hookui", cta: "overview.item.statuslineUnreadable.cta" },
-  // v1.5.0. The rule again, and all four the same way: every command that
-  // clears one of these — `orc test env`, `orc test report`, `orc test
-  // security` — is on the TEST panel, beside the run it is about.
-  // `test-evidence-unstaged` goes there too even though the fix is a line in
-  // .gitignore that ORC will not write: Test is where the sentence explaining
-  // WHY that folder must never be staged already lives.
-  // v1.6.0. An INSTALL-FOOTPRINT finding takes the documented default:
-  // `read-gate-unwired` is cleared by `orc update`, which is an action row on
-  // MAINTENANCE. `read-gate-fallback` is NOT a button anywhere — the record
-  // ages out on its own and there is nothing to press — so it gets
-  // `panel: null` rather than a button that would do nothing, the same call
-  // `trace-pointer-dangling` made.
-  "read-gate-unwired": { panel: "maintenance", cta: "overview.item.readGateUnwired.cta" },
-  "read-gate-fallback": { panel: null },
-  "test-env-unhealthy": { panel: "test", cta: "overview.item.testEnvUnhealthy.cta" },
-  "test-run-red": { panel: "test", cta: "overview.item.testRunRed.cta" },
-  "test-unchecked-owasp": { panel: "test", cta: "overview.item.testUncheckedOwasp.cta" },
-  "test-evidence-unstaged": { panel: "test", cta: "overview.item.testEvidenceUnstaged.cta" },
-};
-const DEFAULT_FINDING_ROUTE = { panel: "maintenance", cta: "overview.item.doctor.cta" };
-const findingRoute = (id) => FINDING_ROUTE[id] || DEFAULT_FINDING_ROUTE;
-
-PANELS.overview = function (host) {
-  head(host, t("overview.title"), t("overview.sub"));
-  section(
-    host,
-    () => read("/api/overview").then((r) => r.data),
-    (d) => {
-      const out = frag();
-      const doctor = d.doctor || {};
-      const w = d.wiki || {};
-      const p = d.patterns || {};
-      // Rows since v0.49.2: `{ slug, updated_ms, lane }`. Everything that only
-      // wants a count still reads `.length`.
-      const waiting = d.waiting || [];
-      const findings = doctor.findings || [];
-
-      /* --- the tiles ------------------------------------------------------ */
-      const stats = el("div", "grid grid-3");
-      stats.append(
-        statTile(
-          t("overview.tile.install"),
-          doctor.ok ? t("overview.tile.installHealthy") : tn(findings.length, "overview.tile.installIssues"),
-          doctor.installed_version
-            ? t("overview.tile.installNote", { payload: doctor.installed_version, cli: doctor.package_version })
-            : "",
-          doctor.ok ? "ok" : "warn",
-          doctor.ok ? null : "maintenance"
-        )
-      );
-      stats.append(
-        statTile(
-          t("overview.tile.wiki"),
-          // TIER and STATE are CLI vocabulary (FRESH / AGING / STALE /
-          // unregistered) — the words the docs and every other lane use. They
-          // are shown as-is in both languages; only the sentence under them is
-          // translated.
-          w.state === "registered" ? w.tier || t("overview.tile.wikiUnknown") : String(w.state || "none").toUpperCase(),
-          w.state === "registered"
-            ? t("overview.tile.wikiNote", { docs: w.docs, scan: w.last_scan || "?" })
-            : t("overview.tile.wikiNone"),
-          w.tier === "FRESH" ? "ok" : w.tier === "AGING" ? "warn" : w.state === "none" ? "" : "bad",
-          "knowledge"
-        )
-      );
-      stats.append(
-        statTile(
-          t("overview.tile.waiting"),
-          String(waiting.length),
-          t("overview.tile.waitingNote", { n: d.runs_total || 0 }),
-          waiting.length ? "warn" : "ok",
-          "runs"
-        )
-      );
-      const langs = (p.patterns || []).map((x) => x.lang);
-      stats.append(
-        statTile(
-          t("overview.tile.patterns"),
-          String(langs.length),
-          langs.length ? langs.join(", ") : t("overview.tile.patternsNone"),
-          langs.length ? "ok" : "",
-          "knowledge"
-        )
-      );
-
-      /* v0.46.0 — three chips repeating the CLI's OWN state words. A chip with
-         nothing to say still renders its good state: an absent chip and a
-         healthy one must never look the same. */
-      const pc = d.pact;
-      const bc = d.boundary;
-      const wd = d.wiki_debt;
-      stats.append(
-        statTile(
-          t("overview.tile.pact"),
-          pc && pc.ok
-            ? (pc.counts.BROKEN ? pc.counts.BROKEN + " BROKEN" : pc.counts.DRIFTED ? pc.counts.DRIFTED + " DRIFTED" : pc.counts.HOLDING + " HOLDING")
-            : t("overview.tile.none"),
-          pc && pc.ok ? t("overview.tile.pactNote", { n: pc.entries, u: pc.counts.UNCHECKABLE }) : t("overview.tile.pactNone"),
-          pc && pc.ok ? (pc.counts.BROKEN ? "bad" : pc.counts.DRIFTED ? "warn" : "ok") : "",
-          pc && pc.ok ? "pact" : null
-        )
-      );
-      stats.append(
-        statTile(
-          t("overview.tile.boundary"),
-          bc && bc.cards && bc.cards.length
-            ? (bc.counts.REFUSE ? bc.counts.REFUSE + " REFUSE" : bc.counts.ESCALATE ? bc.counts.ESCALATE + " ESCALATE" : bc.counts.EXECUTE + " EXECUTE")
-            : t("overview.tile.none"),
-          bc && bc.cards && bc.cards.length ? t("overview.tile.boundaryNote", { n: bc.cards.length, stale: bc.stale }) : t("overview.tile.boundaryNone"),
-          bc && bc.cards && bc.cards.length ? (bc.counts.REFUSE ? "bad" : bc.counts.ESCALATE ? "warn" : "ok") : "",
-          bc && bc.cards && bc.cards.length ? "boundary" : null
-        )
-      );
-      stats.append(
-        statTile(
-          t("overview.tile.debt"),
-          wd && wd.ok && wd.pending ? String(wd.pending) : "0",
-          wd && wd.ok && wd.pending
-            ? t("overview.tile.debtNote", { tier: wd.tier, tok: kTokUi((wd.tokens || {}).input + (wd.tokens || {}).cache_write + (wd.tokens || {}).cache_read + (wd.tokens || {}).output) })
-            : t("overview.tile.debtNone"),
-          wd && wd.ok && wd.pending ? "warn" : "ok",
-          "knowledge"
-        )
-      );
-
-      // The version check crosses the network, so it must never hold up the
-      // tiles beside it: the tile renders in its pending state and fills itself
-      // in when the answer lands.
-      const vt = statTile(t("overview.tile.version"), t("common.checking"), t("overview.tile.versionChecking"), "");
-      vt.classList.add("stat-pending");
-      stats.append(vt);
-      versionInfo()
-        .then((v) => {
-          const s = versionState(v);
-          vt.classList.remove("stat-pending");
-          vt.replaceChildren();
-          vt.append(el("div", "stat-label", t("overview.tile.version")));
-          const val = el("div", "stat-value" + (s.kind ? " stat-" + s.kind : ""));
-          val.append(document.createTextNode(v && v.version ? "v" + v.version : "?"), chip(s.label, s.kind));
-          vt.append(val, el("div", "stat-note", s.note));
-        })
-        .catch(() => {
-          vt.classList.remove("stat-pending");
-          vt.replaceChildren(
-            el("div", "stat-label", t("overview.tile.version")),
-            el("div", "stat-value", "?"),
-            el("div", "stat-note", t("overview.tile.versionFailed"))
-          );
-        });
-      out.append(stats);
-
-      /* --- worth doing ----------------------------------------------------
-         One list, in severity order, of everything that wants a decision — and
-         every row carries the panel where the fix actually is. This is the
-         panel's answer to "what now", and it is the only place the wiki tier
-         turns into advice instead of a colour. */
-      out.append(attentionCard(d, findings));
-
-      /* --- waiting runs --------------------------------------------------- */
-      if (waiting.length) {
-        const c = card(t("overview.waiting.title"));
-        c.append(el("div", "note", t("overview.waiting.note")));
-        const list = el("div", "run-list");
-        for (const r of waiting) {
-          // The CARD CONTRACT (v0.49.2). `.run-card` is a four-column grid —
-          // caret, chip, mid, age — and this row used to append three children
-          // with no caret, so the chip landed in the 16px caret column and
-          // printed over an 88px-wide slug. One column short is not a rounding
-          // error; it is the whole card. This row navigates rather than expands,
-          // so it declares `.no-caret` and fills the three columns that variant
-          // has, in order.
-          const b = el("button", "run-card no-caret");
-          b.type = "button";
-          b.append(chip("waiting", "warn"));
-          const mid = el("div", "run-mid");
-          mid.append(el("div", "run-slug", r.slug));
-          mid.append(el("div", "run-where", r.lane ? r.lane + " · " + t("overview.waiting.where") : t("overview.waiting.where")));
-          b.append(mid, el("div", "run-age", r.updated_ms ? t("overview.waiting.since", { age: relAge(r.updated_ms) }) : ""));
-          b.addEventListener("click", () => {
-            location.hash = "#/runs?slug=" + encodeURIComponent(r.slug);
-          });
-          list.append(b);
-          // A CAUTION ROUTES TO THE PANEL THAT CAN CLEAR IT — and here the panel
-          // that can clear it is this one. A waiting run is what blocks the
-          // upgrade preview, so the way out sits beside the thing complaining.
-          const done = el("button", "btn btn-sm btn-ghost", t("runs.close.button"));
-          done.type = "button";
-          done.addEventListener("click", (ev) => {
-            ev.stopPropagation();
-            confirmRunClose(r.slug, () => route());
-          });
-          const act = el("div", "row-actions run-card-actions");
-          act.append(done);
-          list.append(act);
-        }
-        c.append(list);
-        out.append(c);
-      }
-
-      /* --- v0.54.0: foreign dispatches that never reported back ------------
-         ONE LINE, and only when there is something to say. Money was spent and
-         work is half-done, and nothing will look at it again unless somebody is
-         told. It ROUTES to the panel that can clear it (Extra ▸ Recovery) — it
-         never resumes anything, because continuing a third party's unfinished
-         write without asking is the same class of act as routing off Claude
-         without saying so. */
-      const ej = d.extra_journal;
-      if (ej && ej.orphans) {
-        const c = card(t("overview.extraOrphan.title"));
-        c.append(el("div", "note", t("overview.extraOrphan.note")));
-        // `.no-caret` — this row NAVIGATES rather than expands, and every
-        // `.run-card` variant declares its own column count (v0.49.2). A card
-        // one column short is not a rounding error; it is the whole card.
-        const b = el("button", "run-card no-caret");
-        b.type = "button";
-        b.append(chip(tn(ej.orphans, "overview.extraOrphan.chip"), "bad"));
-        const mid = el("div", "run-mid");
-        mid.append(el("div", "run-slug", t("overview.extraOrphan.slug")));
-        mid.append(el("div", "run-where", t("overview.extraOrphan.where")));
-        b.append(mid, el("div", "run-age", ""));
-        b.addEventListener("click", () => {
-          location.hash = "#/extra";
-        });
-        c.append(b);
-        out.append(c);
-      }
-
-      /* --- the raw doctor list -------------------------------------------
-         Kept below the actionable card, because it is the EVIDENCE: the exact
-         message the CLI printed, unedited and untranslated, so what you read
-         here is what you would read in a terminal. */
-      if (!doctor.ok && findings.length) {
-        const c = card(t("overview.doctor.title"));
-        for (const f of findings) {
-          const row = el("div", "finding");
-          row.append(chip(f.fixable ? t("overview.doctor.fixable") : t("overview.doctor.manual"), f.fixable ? "info" : "warn"));
-          const detail = el("div");
-          detail.append(el("div", null, f.message));
-          const r = findingRoute(f.id);
-          if (r.panel) {
-            const go = el("button", "btn btn-ghost btn-sm", t(r.cta));
-            go.type = "button";
-            go.addEventListener("click", () => (location.hash = "#/" + r.panel));
-            detail.append(go);
-          } else {
-            detail.append(el("div", "note", t("overview.attention.nothingToDo")));
-          }
-          row.append(detail);
-          c.append(row);
-        }
-        out.append(c);
-      }
-
-      /* --- where things are ----------------------------------------------- */
-      const paths = card(t("overview.paths.title"));
-      const where = d.where || {};
-      paths.append(
-        kvList(
-          [
-            [t("overview.paths.project"), where.project_root],
-            [t("overview.paths.config"), where.config],
-            [t("overview.paths.skills"), where.skills],
-            [t("overview.paths.runs"), where.run_dir],
-            [t("overview.paths.traces"), where.log_dir],
-          ],
-          true
-        )
-      );
-      out.append(paths);
-
-      const know = card(t("overview.know.title"));
-      know.append(
-        kvList([
-          [t("overview.know.patterns"), langs.join(", ") || t("common.none")],
-          [t("overview.know.tags"), w.crosslink_tags === undefined ? "" : String(w.crosslink_tags)],
-          // `state` and `reason` are the CLI's — shown verbatim.
-          [t("overview.know.diy"), d.diy ? `${d.diy.state} — ${d.diy.reason}` : ""],
-        ])
-      );
-      out.append(know);
-
-      return out;
-    }
-  );
-};
-
-// The actionable list. Each entry is {kind, title, body, panel, cta} and knows
-// where its fix lives — never a blanket "go to Maintenance".
-function attentionCard(d, findings) {
-  const w = d.wiki || {};
-  const p = d.patterns || {};
-  const items = [];
-
-  // 1. Install findings, routed per id.
-  for (const f of findings) {
-    const r = findingRoute(f.id);
-    if (f.id === "diy-stale") {
-      items.push({
-        kind: "warn",
-        title: t("overview.item.diyStale.title"),
-        body: t("overview.item.diyStale.body"),
-        evidence: d.diy && d.diy.reason,
-        panel: "flow",
-        cta: t("overview.item.diyStale.cta"),
-      });
-    } else if (r.panel) {
-      items.push({
-        kind: f.fixable ? "warn" : "bad",
-        // A doctor finding is already a sentence written for a human — using it
-        // as the title beats paraphrasing it into something less exact.
-        title: f.message,
-        panel: r.panel,
-        cta: t(r.cta),
-      });
-    }
-  }
-
-  // 2. The wiki. THIS is the recommendation the panel was missing: an AGING
-  //    wiki is not an error, it is the moment a refresh is still cheap.
-  if (!w.state || w.state === "none") {
-    items.push({ kind: "info", title: t("overview.item.wikiNone.title"), body: t("overview.item.wikiNone.body"), panel: "knowledge", cta: t("overview.item.wikiNone.cta") });
-  } else if (w.state !== "registered") {
-    items.push({ kind: "warn", title: t("overview.item.wikiUnregistered.title"), body: t("overview.item.wikiUnregistered.body"), panel: "knowledge", cta: t("overview.item.wikiUnregistered.cta") });
-  } else if (w.tier === "AGING") {
-    items.push({
-      kind: "warn",
-      title: t("overview.item.wikiAging.title"),
-      body: t("overview.item.wikiAging.body"),
-      evidence: (w.reasons || [])[0],
-      panel: "knowledge",
-      cta: t("overview.item.wikiAging.cta"),
-    });
-  } else if (w.tier && w.tier !== "FRESH") {
-    items.push({
-      kind: "bad",
-      title: t("overview.item.wikiStale.title"),
-      body: t("overview.item.wikiStale.body"),
-      evidence: (w.reasons || [])[0],
-      panel: "knowledge",
-      cta: t("overview.item.wikiStale.cta"),
-    });
-  }
-
-  // 3. No cached pattern — not a fault, but the cheapest quality win there is.
-  if (!(p.patterns || []).length)
-    items.push({ kind: "info", title: t("overview.item.patterns.title"), body: t("overview.item.patterns.body"), panel: "knowledge", cta: t("overview.item.patterns.cta") });
-
-  // 4. Runs left waiting.
-  if ((d.waiting || []).length)
-    items.push({
-      kind: "warn",
-      title: tn((d.waiting || []).length, "overview.item.waiting.title"),
-      body: t("overview.item.waiting.body"),
-      panel: "runs",
-      cta: t("overview.item.waiting.cta"),
-    });
-
-  const c = card(t("overview.attention.title"), chip(String(items.length), items.length ? "warn" : "ok"));
-  c.id = "attention-card";
-
-  if (!items.length) {
-    const ok = el("div", "all-clear");
-    ok.append(el("div", "all-clear-mark", "✓"));
-    const txt = el("div");
-    txt.append(el("div", "all-clear-title", t("overview.attention.allClear")));
-    txt.append(el("div", "note", t("overview.attention.allClearHint")));
-    ok.append(txt);
-    c.append(ok);
-  }
-
-  const list = el("div", "todo-list");
-  const order = { bad: 0, warn: 1, info: 2 };
-  items.sort((a, b) => (order[a.kind] || 3) - (order[b.kind] || 3));
-  for (const it of items) {
-    const row = el("button", "todo todo-" + it.kind);
-    row.type = "button";
-    row.append(el("span", "todo-mark"));
-    const mid = el("div", "todo-body");
-    mid.append(el("div", "todo-title", it.title));
-    if (it.body) mid.append(el("div", "todo-text", it.body));
-    // The CLI's own words for WHY, kept verbatim under our explanation.
-    if (it.evidence) mid.append(el("div", "todo-evidence", it.evidence));
-    row.append(mid, el("span", "todo-cta", it.cta));
-    row.addEventListener("click", () => (location.hash = "#/" + it.panel));
-    list.append(row);
-  }
-  if (items.length) c.append(list);
-
-  // The update offer is appended asynchronously so a slow network check never
-  // delays the list — it arrives as one more row when the answer does.
-  versionInfo()
-    .then((v) => {
-      if (!v || !v.update_available) return;
-      const row = el("button", "todo todo-info todo-late");
-      row.type = "button";
-      row.append(el("span", "todo-mark"));
-      const mid = el("div", "todo-body");
-      mid.append(el("div", "todo-title", t("overview.item.update.title", { latest: v.latest })));
-      mid.append(el("div", "todo-text", t("overview.item.update.body", { version: v.version })));
-      row.append(mid, el("span", "todo-cta", t("overview.item.update.cta")));
-      row.addEventListener("click", () => (location.hash = "#/maintenance"));
-      if (!list.isConnected) c.append(list);
-      list.append(row);
-      const count = c.querySelector(".card-head .chip");
-      if (count) {
-        count.textContent = String(list.children.length);
-        count.className = "chip chip-warn";
-      }
-      const clear = c.querySelector(".all-clear");
-      if (clear) clear.remove();
-    })
-    .catch(() => {});
-
-  return c;
-}
+"use strict";
+/* panels/overview.js — orc ui client
+   FINDING_ROUTE (a caution routes to the panel that can CLEAR it), the
+   attention list, the stat tiles.
+
+   Loaded by app.html in the order its numeric prefix names. Classic
+   script, no import/export: an ES module import carries no query string,
+   and every static request here needs the per-launch session token. */
+
+
+/* ================================================================ OVERVIEW == */
+
+/* WHERE A PROBLEM IS ACTUALLY FIXED (v0.43.6).
+   `orc doctor` reports every problem in one list, and the panel used to send
+   the whole list to Maintenance with a single "Open Maintenance" button. That
+   is right for the install-footprint findings — version skew, orphans, missing
+   files, unwired hooks — because `orc update` / `doctor --fix` really is where
+   those are repaired. It was WRONG for the ones whose fix lives on another
+   panel, and `diy-stale` was the one people hit: the flow is recompiled with
+   `orc diy compile`, which is a button on FLOW. Sending them to Maintenance
+   pointed at a page with no control for the thing it was complaining about.
+
+   So the routing is a table keyed on the finding id the CLI already emits.
+   `null` means there is nothing to press anywhere — a dangling trace pointer
+   clears itself on the next run, and offering a button for it would be a lie. */
+const FINDING_ROUTE = {
+  "diy-stale": { panel: "flow", cta: "overview.item.diyStale.cta" },
+  "trace-pointer-dangling": { panel: null },
+  // v0.46.0. Correct by the rule, not by default: `export-stale` is cleared by
+  // `orc export`, which IS a CLI write Maintenance can run — so Maintenance is
+  // genuinely the panel that can clear it, not merely the fallback.
+  "export-stale": { panel: "maintenance", cta: "overview.item.exportStale.cta" },
+  "pact-broken": { panel: "pact", cta: "overview.item.pactBroken.cta" },
+  // v0.48.1. Same rule again: `orc doc audit` and `orc doc ship` are both on
+  // DOCS, so that is where a drifted document has to send you.
+  "doc-drifted": { panel: "docs", cta: "overview.item.docDrifted.cta" },
+  "boundary-refuse": { panel: "boundary", cta: "overview.item.boundaryRefuse.cta" },
+  // v0.49.1. Same rule a third time. `orc wiki sync` is a BUTTON on Knowledge
+  // and it is free, and `orc wiki plan` (which ranks the refresh) is the card
+  // directly above it — so Knowledge is genuinely the panel that can clear
+  // both, not merely the fallback.
+  "wiki-unregistered": { panel: "knowledge", cta: "overview.item.wikiUnregistered.cta" },
+  "wiki-debt": { panel: "knowledge", cta: "overview.item.wikiDebt.cta" },
+  // v0.50.0. `orc doctor` collapses the whole `orc extra` subsystem into ONE
+  // finding carrying the count and the ids — a doctor that recited eleven ids
+  // for a subsystem most repos never arm is a doctor people learn to scroll
+  // past. It routes to Extra because that is where every one of them is
+  // rendered beside the connection it is about, and where the connection test
+  // that clears most of them lives.
+  "extra-findings": { panel: "extra", cta: "overview.item.extraFindings.cta" },
+  // v0.56.0. The rule again, and this time the finding is about the TOOL rather
+  // than the project: a legacy global `orc` package owns the `orc` command and
+  // blocks every install source. `orc upgrade` is the thing that clears it (it
+  // evicts the old package first), and `upgrade` is an action row on
+  // MAINTENANCE — so that is genuinely the panel that can clear it.
+  "legacy-global-package": { panel: "maintenance", cta: "overview.item.legacyGlobalPackage.cta" },
+  // v1.0.0 W5. The rule again: a demoted run is cleared by `orc extra promote`,
+  // and Recovery is the Extra tab where every other journal-shaped state is
+  // already rendered — so that is genuinely the panel that can clear it.
+  "extra-demoted-run": { panel: "extra", cta: "overview.item.extraDemotedRun.cta" },
+  // v1.0.0 W16. An INSTALL-FOOTPRINT finding, so it takes the documented
+  // default rather than an interesting exception: the thing that clears it is
+  // `orc update`, which is an action row on MAINTENANCE. It is spelled out
+  // rather than left to DEFAULT_FINDING_ROUTE because the CTA is specific --
+  // a reader who sees "lane config drifted" should be told which button.
+  "lane-keys-drifted": { panel: "maintenance", cta: "overview.item.laneKeysDrifted.cta" },
+  // v1.8.0. A DRIFTED code graph is cleared by the free `orc graph update`, which
+  // is a button on the Knowledge panel's code graph card — the panel that can
+  // CLEAR it, not the default.
+  "graph-drifted": { panel: "knowledge", cta: "overview.item.graphDrifted.cta" },
+  // v1.3.0. The rule again, and cleanly: every one of these is cleared on the
+  // CLI Hook Interface panel — the board is where an orphaned component is
+  // removed, the caution strip is where an invalid layout is named, and the
+  // Rebuild button is where a stale compile is fixed.
+  "statusline-layout-orphaned": { panel: "hookui", cta: "overview.item.statuslineOrphaned.cta" },
+  "statusline-layout-invalid": { panel: "hookui", cta: "overview.item.statuslineInvalid.cta" },
+  "statusline-layout-unreadable": { panel: "hookui", cta: "overview.item.statuslineUnreadable.cta" },
+  // v1.5.0. The rule again, and all four the same way: every command that
+  // clears one of these — `orc test env`, `orc test report`, `orc test
+  // security` — is on the TEST panel, beside the run it is about.
+  // `test-evidence-unstaged` goes there too even though the fix is a line in
+  // .gitignore that ORC will not write: Test is where the sentence explaining
+  // WHY that folder must never be staged already lives.
+  // v1.6.0. An INSTALL-FOOTPRINT finding takes the documented default:
+  // `read-gate-unwired` is cleared by `orc update`, which is an action row on
+  // MAINTENANCE. `read-gate-fallback` is NOT a button anywhere — the record
+  // ages out on its own and there is nothing to press — so it gets
+  // `panel: null` rather than a button that would do nothing, the same call
+  // `trace-pointer-dangling` made.
+  "read-gate-unwired": { panel: "maintenance", cta: "overview.item.readGateUnwired.cta" },
+  "read-gate-fallback": { panel: null },
+  "test-env-unhealthy": { panel: "test", cta: "overview.item.testEnvUnhealthy.cta" },
+  "test-run-red": { panel: "test", cta: "overview.item.testRunRed.cta" },
+  "test-unchecked-owasp": { panel: "test", cta: "overview.item.testUncheckedOwasp.cta" },
+  "test-evidence-unstaged": { panel: "test", cta: "overview.item.testEvidenceUnstaged.cta" },
+};
+const DEFAULT_FINDING_ROUTE = { panel: "maintenance", cta: "overview.item.doctor.cta" };
+const findingRoute = (id) => FINDING_ROUTE[id] || DEFAULT_FINDING_ROUTE;
+
+PANELS.overview = function (host) {
+  head(host, t("overview.title"), t("overview.sub"));
+  section(
+    host,
+    () => read("/api/overview").then((r) => r.data),
+    (d) => {
+      const out = frag();
+      const doctor = d.doctor || {};
+      const w = d.wiki || {};
+      const p = d.patterns || {};
+      // Rows since v0.49.2: `{ slug, updated_ms, lane }`. Everything that only
+      // wants a count still reads `.length`.
+      const waiting = d.waiting || [];
+      const findings = doctor.findings || [];
+
+      /* --- the tiles ------------------------------------------------------ */
+      const stats = el("div", "grid grid-3");
+      stats.append(
+        statTile(
+          t("overview.tile.install"),
+          doctor.ok ? t("overview.tile.installHealthy") : tn(findings.length, "overview.tile.installIssues"),
+          doctor.installed_version
+            ? t("overview.tile.installNote", { payload: doctor.installed_version, cli: doctor.package_version })
+            : "",
+          doctor.ok ? "ok" : "warn",
+          doctor.ok ? null : "maintenance"
+        )
+      );
+      stats.append(
+        statTile(
+          t("overview.tile.wiki"),
+          // TIER and STATE are CLI vocabulary (FRESH / AGING / STALE /
+          // unregistered) — the words the docs and every other lane use. They
+          // are shown as-is in both languages; only the sentence under them is
+          // translated.
+          w.state === "registered" ? w.tier || t("overview.tile.wikiUnknown") : String(w.state || "none").toUpperCase(),
+          w.state === "registered"
+            ? t("overview.tile.wikiNote", { docs: w.docs, scan: w.last_scan || "?" })
+            : t("overview.tile.wikiNone"),
+          w.tier === "FRESH" ? "ok" : w.tier === "AGING" ? "warn" : w.state === "none" ? "" : "bad",
+          "knowledge"
+        )
+      );
+      stats.append(
+        statTile(
+          t("overview.tile.waiting"),
+          String(waiting.length),
+          t("overview.tile.waitingNote", { n: d.runs_total || 0 }),
+          waiting.length ? "warn" : "ok",
+          "runs"
+        )
+      );
+      const langs = (p.patterns || []).map((x) => x.lang);
+      stats.append(
+        statTile(
+          t("overview.tile.patterns"),
+          String(langs.length),
+          langs.length ? langs.join(", ") : t("overview.tile.patternsNone"),
+          langs.length ? "ok" : "",
+          "knowledge"
+        )
+      );
+
+      /* v0.46.0 — three chips repeating the CLI's OWN state words. A chip with
+         nothing to say still renders its good state: an absent chip and a
+         healthy one must never look the same. */
+      const pc = d.pact;
+      const bc = d.boundary;
+      const wd = d.wiki_debt;
+      stats.append(
+        statTile(
+          t("overview.tile.pact"),
+          pc && pc.ok
+            ? (pc.counts.BROKEN ? pc.counts.BROKEN + " BROKEN" : pc.counts.DRIFTED ? pc.counts.DRIFTED + " DRIFTED" : pc.counts.HOLDING + " HOLDING")
+            : t("overview.tile.none"),
+          pc && pc.ok ? t("overview.tile.pactNote", { n: pc.entries, u: pc.counts.UNCHECKABLE }) : t("overview.tile.pactNone"),
+          pc && pc.ok ? (pc.counts.BROKEN ? "bad" : pc.counts.DRIFTED ? "warn" : "ok") : "",
+          pc && pc.ok ? "pact" : null
+        )
+      );
+      stats.append(
+        statTile(
+          t("overview.tile.boundary"),
+          bc && bc.cards && bc.cards.length
+            ? (bc.counts.REFUSE ? bc.counts.REFUSE + " REFUSE" : bc.counts.ESCALATE ? bc.counts.ESCALATE + " ESCALATE" : bc.counts.EXECUTE + " EXECUTE")
+            : t("overview.tile.none"),
+          bc && bc.cards && bc.cards.length ? t("overview.tile.boundaryNote", { n: bc.cards.length, stale: bc.stale }) : t("overview.tile.boundaryNone"),
+          bc && bc.cards && bc.cards.length ? (bc.counts.REFUSE ? "bad" : bc.counts.ESCALATE ? "warn" : "ok") : "",
+          bc && bc.cards && bc.cards.length ? "boundary" : null
+        )
+      );
+      stats.append(
+        statTile(
+          t("overview.tile.debt"),
+          wd && wd.ok && wd.pending ? String(wd.pending) : "0",
+          wd && wd.ok && wd.pending
+            ? t("overview.tile.debtNote", { tier: wd.tier, tok: kTokUi((wd.tokens || {}).input + (wd.tokens || {}).cache_write + (wd.tokens || {}).cache_read + (wd.tokens || {}).output) })
+            : t("overview.tile.debtNone"),
+          wd && wd.ok && wd.pending ? "warn" : "ok",
+          "knowledge"
+        )
+      );
+
+      // The version check crosses the network, so it must never hold up the
+      // tiles beside it: the tile renders in its pending state and fills itself
+      // in when the answer lands.
+      const vt = statTile(t("overview.tile.version"), t("common.checking"), t("overview.tile.versionChecking"), "");
+      vt.classList.add("stat-pending");
+      stats.append(vt);
+      versionInfo()
+        .then((v) => {
+          const s = versionState(v);
+          vt.classList.remove("stat-pending");
+          vt.replaceChildren();
+          vt.append(el("div", "stat-label", t("overview.tile.version")));
+          const val = el("div", "stat-value" + (s.kind ? " stat-" + s.kind : ""));
+          val.append(document.createTextNode(v && v.version ? "v" + v.version : "?"), chip(s.label, s.kind));
+          vt.append(val, el("div", "stat-note", s.note));
+        })
+        .catch(() => {
+          vt.classList.remove("stat-pending");
+          vt.replaceChildren(
+            el("div", "stat-label", t("overview.tile.version")),
+            el("div", "stat-value", "?"),
+            el("div", "stat-note", t("overview.tile.versionFailed"))
+          );
+        });
+      out.append(stats);
+
+      /* --- worth doing ----------------------------------------------------
+         One list, in severity order, of everything that wants a decision — and
+         every row carries the panel where the fix actually is. This is the
+         panel's answer to "what now", and it is the only place the wiki tier
+         turns into advice instead of a colour. */
+      out.append(attentionCard(d, findings));
+
+      /* --- waiting runs --------------------------------------------------- */
+      if (waiting.length) {
+        const c = card(t("overview.waiting.title"));
+        c.append(el("div", "note", t("overview.waiting.note")));
+        const list = el("div", "run-list");
+        for (const r of waiting) {
+          // The CARD CONTRACT (v0.49.2). `.run-card` is a four-column grid —
+          // caret, chip, mid, age — and this row used to append three children
+          // with no caret, so the chip landed in the 16px caret column and
+          // printed over an 88px-wide slug. One column short is not a rounding
+          // error; it is the whole card. This row navigates rather than expands,
+          // so it declares `.no-caret` and fills the three columns that variant
+          // has, in order.
+          const b = el("button", "run-card no-caret");
+          b.type = "button";
+          b.append(chip("waiting", "warn"));
+          const mid = el("div", "run-mid");
+          mid.append(el("div", "run-slug", r.slug));
+          mid.append(el("div", "run-where", r.lane ? r.lane + " · " + t("overview.waiting.where") : t("overview.waiting.where")));
+          b.append(mid, el("div", "run-age", r.updated_ms ? t("overview.waiting.since", { age: relAge(r.updated_ms) }) : ""));
+          b.addEventListener("click", () => {
+            location.hash = "#/runs?slug=" + encodeURIComponent(r.slug);
+          });
+          list.append(b);
+          // A CAUTION ROUTES TO THE PANEL THAT CAN CLEAR IT — and here the panel
+          // that can clear it is this one. A waiting run is what blocks the
+          // upgrade preview, so the way out sits beside the thing complaining.
+          const done = el("button", "btn btn-sm btn-ghost", t("runs.close.button"));
+          done.type = "button";
+          done.addEventListener("click", (ev) => {
+            ev.stopPropagation();
+            confirmRunClose(r.slug, () => route());
+          });
+          const act = el("div", "row-actions run-card-actions");
+          act.append(done);
+          list.append(act);
+        }
+        c.append(list);
+        out.append(c);
+      }
+
+      /* --- v0.54.0: foreign dispatches that never reported back ------------
+         ONE LINE, and only when there is something to say. Money was spent and
+         work is half-done, and nothing will look at it again unless somebody is
+         told. It ROUTES to the panel that can clear it (Extra ▸ Recovery) — it
+         never resumes anything, because continuing a third party's unfinished
+         write without asking is the same class of act as routing off Claude
+         without saying so. */
+      const ej = d.extra_journal;
+      if (ej && ej.orphans) {
+        const c = card(t("overview.extraOrphan.title"));
+        c.append(el("div", "note", t("overview.extraOrphan.note")));
+        // `.no-caret` — this row NAVIGATES rather than expands, and every
+        // `.run-card` variant declares its own column count (v0.49.2). A card
+        // one column short is not a rounding error; it is the whole card.
+        const b = el("button", "run-card no-caret");
+        b.type = "button";
+        b.append(chip(tn(ej.orphans, "overview.extraOrphan.chip"), "bad"));
+        const mid = el("div", "run-mid");
+        mid.append(el("div", "run-slug", t("overview.extraOrphan.slug")));
+        mid.append(el("div", "run-where", t("overview.extraOrphan.where")));
+        b.append(mid, el("div", "run-age", ""));
+        b.addEventListener("click", () => {
+          location.hash = "#/extra";
+        });
+        c.append(b);
+        out.append(c);
+      }
+
+      /* --- the raw doctor list -------------------------------------------
+         Kept below the actionable card, because it is the EVIDENCE: the exact
+         message the CLI printed, unedited and untranslated, so what you read
+         here is what you would read in a terminal. */
+      if (!doctor.ok && findings.length) {
+        const c = card(t("overview.doctor.title"));
+        for (const f of findings) {
+          const row = el("div", "finding");
+          row.append(chip(f.fixable ? t("overview.doctor.fixable") : t("overview.doctor.manual"), f.fixable ? "info" : "warn"));
+          const detail = el("div");
+          detail.append(el("div", null, f.message));
+          const r = findingRoute(f.id);
+          if (r.panel) {
+            const go = el("button", "btn btn-ghost btn-sm", t(r.cta));
+            go.type = "button";
+            go.addEventListener("click", () => (location.hash = "#/" + r.panel));
+            detail.append(go);
+          } else {
+            detail.append(el("div", "note", t("overview.attention.nothingToDo")));
+          }
+          row.append(detail);
+          c.append(row);
+        }
+        out.append(c);
+      }
+
+      /* --- where things are ----------------------------------------------- */
+      const paths = card(t("overview.paths.title"));
+      const where = d.where || {};
+      paths.append(
+        kvList(
+          [
+            [t("overview.paths.project"), where.project_root],
+            [t("overview.paths.config"), where.config],
+            [t("overview.paths.skills"), where.skills],
+            [t("overview.paths.runs"), where.run_dir],
+            [t("overview.paths.traces"), where.log_dir],
+          ],
+          true
+        )
+      );
+      out.append(paths);
+
+      const know = card(t("overview.know.title"));
+      know.append(
+        kvList([
+          [t("overview.know.patterns"), langs.join(", ") || t("common.none")],
+          [t("overview.know.tags"), w.crosslink_tags === undefined ? "" : String(w.crosslink_tags)],
+          // `state` and `reason` are the CLI's — shown verbatim.
+          [t("overview.know.diy"), d.diy ? `${d.diy.state} — ${d.diy.reason}` : ""],
+        ])
+      );
+      out.append(know);
+
+      return out;
+    }
+  );
+};
+
+// The actionable list. Each entry is {kind, title, body, panel, cta} and knows
+// where its fix lives — never a blanket "go to Maintenance".
+function attentionCard(d, findings) {
+  const w = d.wiki || {};
+  const p = d.patterns || {};
+  const items = [];
+
+  // 1. Install findings, routed per id.
+  for (const f of findings) {
+    const r = findingRoute(f.id);
+    if (f.id === "diy-stale") {
+      items.push({
+        kind: "warn",
+        title: t("overview.item.diyStale.title"),
+        body: t("overview.item.diyStale.body"),
+        evidence: d.diy && d.diy.reason,
+        panel: "flow",
+        cta: t("overview.item.diyStale.cta"),
+      });
+    } else if (r.panel) {
+      items.push({
+        kind: f.fixable ? "warn" : "bad",
+        // A doctor finding is already a sentence written for a human — using it
+        // as the title beats paraphrasing it into something less exact.
+        title: f.message,
+        panel: r.panel,
+        cta: t(r.cta),
+      });
+    }
+  }
+
+  // 2. The wiki. THIS is the recommendation the panel was missing: an AGING
+  //    wiki is not an error, it is the moment a refresh is still cheap.
+  if (!w.state || w.state === "none") {
+    items.push({ kind: "info", title: t("overview.item.wikiNone.title"), body: t("overview.item.wikiNone.body"), panel: "knowledge", cta: t("overview.item.wikiNone.cta") });
+  } else if (w.state !== "registered") {
+    items.push({ kind: "warn", title: t("overview.item.wikiUnregistered.title"), body: t("overview.item.wikiUnregistered.body"), panel: "knowledge", cta: t("overview.item.wikiUnregistered.cta") });
+  } else if (w.tier === "AGING") {
+    items.push({
+      kind: "warn",
+      title: t("overview.item.wikiAging.title"),
+      body: t("overview.item.wikiAging.body"),
+      evidence: (w.reasons || [])[0],
+      panel: "knowledge",
+      cta: t("overview.item.wikiAging.cta"),
+    });
+  } else if (w.tier && w.tier !== "FRESH") {
+    items.push({
+      kind: "bad",
+      title: t("overview.item.wikiStale.title"),
+      body: t("overview.item.wikiStale.body"),
+      evidence: (w.reasons || [])[0],
+      panel: "knowledge",
+      cta: t("overview.item.wikiStale.cta"),
+    });
+  }
+
+  // 3. No cached pattern — not a fault, but the cheapest quality win there is.
+  if (!(p.patterns || []).length)
+    items.push({ kind: "info", title: t("overview.item.patterns.title"), body: t("overview.item.patterns.body"), panel: "knowledge", cta: t("overview.item.patterns.cta") });
+
+  // 4. Runs left waiting.
+  if ((d.waiting || []).length)
+    items.push({
+      kind: "warn",
+      title: tn((d.waiting || []).length, "overview.item.waiting.title"),
+      body: t("overview.item.waiting.body"),
+      panel: "runs",
+      cta: t("overview.item.waiting.cta"),
+    });
+
+  const c = card(t("overview.attention.title"), chip(String(items.length), items.length ? "warn" : "ok"));
+  c.id = "attention-card";
+
+  if (!items.length) {
+    const ok = el("div", "all-clear");
+    ok.append(el("div", "all-clear-mark", "✓"));
+    const txt = el("div");
+    txt.append(el("div", "all-clear-title", t("overview.attention.allClear")));
+    txt.append(el("div", "note", t("overview.attention.allClearHint")));
+    ok.append(txt);
+    c.append(ok);
+  }
+
+  const list = el("div", "todo-list");
+  const order = { bad: 0, warn: 1, info: 2 };
+  items.sort((a, b) => (order[a.kind] || 3) - (order[b.kind] || 3));
+  for (const it of items) {
+    const row = el("button", "todo todo-" + it.kind);
+    row.type = "button";
+    row.append(el("span", "todo-mark"));
+    const mid = el("div", "todo-body");
+    mid.append(el("div", "todo-title", it.title));
+    if (it.body) mid.append(el("div", "todo-text", it.body));
+    // The CLI's own words for WHY, kept verbatim under our explanation.
+    if (it.evidence) mid.append(el("div", "todo-evidence", it.evidence));
+    row.append(mid, el("span", "todo-cta", it.cta));
+    row.addEventListener("click", () => (location.hash = "#/" + it.panel));
+    list.append(row);
+  }
+  if (items.length) c.append(list);
+
+  // The update offer is appended asynchronously so a slow network check never
+  // delays the list — it arrives as one more row when the answer does.
+  versionInfo()
+    .then((v) => {
+      if (!v || !v.update_available) return;
+      const row = el("button", "todo todo-info todo-late");
+      row.type = "button";
+      row.append(el("span", "todo-mark"));
+      const mid = el("div", "todo-body");
+      mid.append(el("div", "todo-title", t("overview.item.update.title", { latest: v.latest })));
+      mid.append(el("div", "todo-text", t("overview.item.update.body", { version: v.version })));
+      row.append(mid, el("span", "todo-cta", t("overview.item.update.cta")));
+      row.addEventListener("click", () => (location.hash = "#/maintenance"));
+      if (!list.isConnected) c.append(list);
+      list.append(row);
+      const count = c.querySelector(".card-head .chip");
+      if (count) {
+        count.textContent = String(list.children.length);
+        count.className = "chip chip-warn";
+      }
+      const clear = c.querySelector(".all-clear");
+      if (clear) clear.remove();
+    })
+    .catch(() => {});
+
+  return c;
+}