@hansenexus/hud 0.1.0 → 0.2.0

package/panels/force-state-panel.js

@@ -1,113 +0,0 @@
-import {
-  InfoRow,
-  PanelSection
-} from "../chunk-kyeb6qeq.js";
-import {
-  Badge,
-  Button
-} from "../chunk-xztw0xyt.js";
-import {
-  FORCED_STATES,
-  FORCE_STATE_PARAM,
-  getForceStateStore,
-  resolveForcedState
-} from "../chunk-c5y856ad.js";
-import"../chunk-5gtx3pza.js";
-
-// panels/force-state-panel.tsx
-import { Layers } from "lucide-react";
-import { useSyncExternalStore } from "react";
-import { jsx, jsxs } from "react/jsx-runtime";
-"use client";
-var CHOICES = [null, ...FORCED_STATES];
-function subscribe(listener) {
-  return getForceStateStore().subscribe(listener);
-}
-function getSnapshot() {
-  return getForceStateStore().getSnapshot();
-}
-function ForceStatePanel() {
-  const store = getForceStateStore();
-  const snapshot = useSyncExternalStore(subscribe, getSnapshot, getSnapshot);
-  const hasOverrides = Object.keys(snapshot.overrides).length > 0;
-  return /* @__PURE__ */ jsxs("div", {
-    className: "space-y-4 p-3",
-    "data-hud-force-state": "",
-    children: [
-      /* @__PURE__ */ jsxs(PanelSection, {
-        icon: Layers,
-        title: "State boundaries",
-        children: [
-          snapshot.boundaries.length === 0 ? /* @__PURE__ */ jsx("p", {
-            className: "px-2 text-[10px] text-muted-foreground",
-            children: "No state boundary on this page. Wrap a query branch in StateBoundary to list it here."
-          }) : snapshot.boundaries.map((boundary) => {
-            const override = snapshot.overrides[boundary.id] ?? null;
-            const effective = resolveForcedState(snapshot, boundary);
-            return /* @__PURE__ */ jsxs("div", {
-              className: "space-y-1 px-2 py-1",
-              children: [
-                /* @__PURE__ */ jsxs("div", {
-                  className: "flex items-center justify-between gap-2",
-                  children: [
-                    /* @__PURE__ */ jsxs("span", {
-                      className: "truncate font-mono text-[10px]",
-                      children: [
-                        boundary.parentId ? "↳ " : "",
-                        boundary.id
-                      ]
-                    }),
-                    /* @__PURE__ */ jsx(Badge, {
-                      variant: effective ? "default" : "outline",
-                      className: "text-[9px]",
-                      children: effective ?? "real"
-                    })
-                  ]
-                }),
-                /* @__PURE__ */ jsx("div", {
-                  className: "flex gap-1",
-                  children: CHOICES.map((choice) => /* @__PURE__ */ jsx(Button, {
-                    size: "xs",
-                    variant: override === choice ? "default" : "outline",
-                    className: "h-6 flex-1 px-1 text-[10px]",
-                    onClick: () => store.force(boundary.id, choice),
-                    children: choice ?? "auto"
-                  }, choice ?? "auto"))
-                })
-              ]
-            }, boundary.id);
-          }),
-          hasOverrides && /* @__PURE__ */ jsx(Button, {
-            size: "xs",
-            variant: "ghost",
-            className: "h-6 w-full text-[10px]",
-            onClick: () => store.clearOverrides(),
-            children: "Reset all to auto"
-          })
-        ]
-      }),
-      /* @__PURE__ */ jsxs(PanelSection, {
-        title: "URL param",
-        children: [
-          /* @__PURE__ */ jsx(InfoRow, {
-            label: `?${FORCE_STATE_PARAM}=`,
-            value: snapshot.param ? `${snapshot.param.target ? `${snapshot.param.target}:` : ""}${snapshot.param.state}` : "not set"
-          }),
-          /* @__PURE__ */ jsxs("p", {
-            className: "px-2 text-[10px] text-muted-foreground",
-            children: [
-              "?",
-              FORCE_STATE_PARAM,
-              "=loading|empty|error forces the top-level boundaries; ?",
-              FORCE_STATE_PARAM,
-              "=<id>:error targets one. A panel toggle wins over the param."
-            ]
-          })
-        ]
-      })
-    ]
-  });
-}
-export {
-  ForceStatePanel
-};

package/panels/info-row.d.mts

@@ -1,21 +0,0 @@
-import * as react from 'react';
-import { ReactNode } from 'react';
-import { LucideIcon } from 'lucide-react';
-
-declare function PanelSection({ icon: Icon, title, children, }: {
-    icon?: LucideIcon;
-    title: string;
-    children: ReactNode;
-}): react.JSX.Element;
-declare function InfoRow({ label, value, copyable, }: {
-    label: string;
-    value: string;
-    copyable?: boolean;
-}): react.JSX.Element;
-declare function ShortcutRow({ keys, label }: {
-    keys: string[];
-    label: string;
-}): react.JSX.Element;
-declare function LoadingSpinner(): react.JSX.Element;
-
-export { InfoRow, LoadingSpinner, PanelSection, ShortcutRow };

package/panels/info-row.js

@@ -1,14 +0,0 @@
-import {
-  InfoRow,
-  LoadingSpinner,
-  PanelSection,
-  ShortcutRow
-} from "../chunk-kyeb6qeq.js";
-import"../chunk-xztw0xyt.js";
-import"../chunk-5gtx3pza.js";
-export {
-  ShortcutRow,
-  PanelSection,
-  LoadingSpinner,
-  InfoRow
-};

package/panels/mock-seed-panel.d.mts

@@ -1,15 +0,0 @@
-import * as react from 'react';
-import { HudSeedDescriptor } from '../core/api-types.mjs';
-
-/**
- * Runtime mock toggle + data seeding. The mock switch writes the `hud-mock`
- * cookie and reloads — the server layout re-reads it and passes `forceMock`
- * into the app's ConvexClientProvider, so SSR and client always agree. Seeds
- * run on the dev machine through the bridge (`bunx convex run`), which keeps
- * remote-refusal guardrails in seed functions intact.
- */
-declare function MockSeedPanel({ seeds }: {
-    seeds?: HudSeedDescriptor[];
-}): react.JSX.Element;
-
-export { MockSeedPanel };

package/panels/mock-seed-panel.js

@@ -1,14 +0,0 @@
-import {
-  MockSeedPanel
-} from "../chunk-k0vr8dsy.js";
-import"../chunk-50pq4sg6.js";
-import"../chunk-wspz08q7.js";
-import"../chunk-kyeb6qeq.js";
-import"../chunk-xztw0xyt.js";
-import"../chunk-hc2g0n35.js";
-import"../chunk-babjpqkb.js";
-import"../chunk-v086j53b.js";
-import"../chunk-5gtx3pza.js";
-export {
-  MockSeedPanel
-};

package/panels/network-console-panel.d.mts

@@ -1,6 +0,0 @@
-import * as react from 'react';
-
-/** Console + fetch + long-task capture (ring buffer, newest last). */
-declare function NetworkConsolePanel(): react.JSX.Element;
-
-export { NetworkConsolePanel };

package/panels/network-console-panel.js

@@ -1,9 +0,0 @@
-import {
-  NetworkConsolePanel
-} from "../chunk-tf774c4w.js";
-import"../chunk-24vrg16w.js";
-import"../chunk-xztw0xyt.js";
-import"../chunk-5gtx3pza.js";
-export {
-  NetworkConsolePanel
-};

package/panels/role-switcher-panel.d.mts

@@ -1,28 +0,0 @@
-import * as react from 'react';
-
-interface HudRoleDescriptor {
-    id: string;
-    label: string;
-    /** Hierarchy level shown as "Lvl n"; omit to hide. */
-    level?: number;
-    /** Badge classes for the current-role chip (tone is app-specific). */
-    badgeClassName?: string;
-}
-interface HudRoleAdapter {
-    roles: HudRoleDescriptor[];
-    currentRoleId?: string;
-    currentUserLabel?: string;
-    isLoading?: boolean;
-    /** Perform the switch (Convex mutation, dev-login POST, …). May throw. */
-    onSwitch: (roleId: string) => Promise<void> | void;
-}
-/**
- * Role switcher over an app-provided adapter. Harvested from nexus-lms'
- * dev toolbar; the Convex mutation moved behind `onSwitch` so any auth
- * backend (or dev-routes' `useDevRoleLogin`) can drive it.
- */
-declare function RoleSwitcherPanel({ adapter }: {
-    adapter: HudRoleAdapter;
-}): react.JSX.Element;
-
-export { type HudRoleAdapter, type HudRoleDescriptor, RoleSwitcherPanel };

package/panels/role-switcher-panel.js

@@ -1,9 +0,0 @@
-import {
-  RoleSwitcherPanel
-} from "../chunk-6jt8yg4m.js";
-import"../chunk-kyeb6qeq.js";
-import"../chunk-xztw0xyt.js";
-import"../chunk-5gtx3pza.js";
-export {
-  RoleSwitcherPanel
-};

package/panels/sessions-panel.d.mts

@@ -1,6 +0,0 @@
-import * as react from 'react';
-
-/** Active Claude Code sessions on this machine, via the local bridge. */
-declare function SessionsPanel(): react.JSX.Element;
-
-export { SessionsPanel };

package/panels/sessions-panel.js

@@ -1,13 +0,0 @@
-import {
-  SessionsPanel
-} from "../chunk-t9eh4t0b.js";
-import"../chunk-50pq4sg6.js";
-import"../chunk-wspz08q7.js";
-import"../chunk-kyeb6qeq.js";
-import"../chunk-xztw0xyt.js";
-import"../chunk-babjpqkb.js";
-import"../chunk-v086j53b.js";
-import"../chunk-5gtx3pza.js";
-export {
-  SessionsPanel
-};

package/panels/tokens-panel.d.mts

@@ -1,38 +0,0 @@
-import * as react from 'react';
-
-interface HudTokenDescriptor {
-    /** CSS custom property, including the leading dashes (e.g. --bauhaus-primary-ink). */
-    cssVar: string;
-    /** Short display label; defaults to the var name without its prefix. */
-    label?: string;
-}
-interface HudTokenGroup {
-    label: string;
-    tokens: HudTokenDescriptor[];
-    /**
-     * Scope attribute the design system hangs its tokens on, with optional
-     * value — e.g. { attribute: "data-bauhaus" } or
-     * { attribute: "data-direction", value: "glass-vercel" }. Rendered onto the
-     * group's swatch container so scoped var() lookups resolve. Omit for
-     * :root-scoped systems.
-     */
-    scope?: {
-        attribute: string;
-        value?: string;
-    };
-}
-interface HudTokensAdapter {
-    groups: HudTokenGroup[];
-    /** Where the tokens live, shown as a hint (e.g. packages/ui/styles/bauhaus-tokens.css). */
-    sourceHint?: string;
-}
-/**
- * Live design-token swatches: each tile paints `var(<token>)` inside the
- * group's scope attribute, so what renders IS the resolved value in the
- * current theme — no hardcoded copies to drift. Click copies the var name.
- */
-declare function TokensPanel({ adapter }: {
-    adapter: HudTokensAdapter;
-}): react.JSX.Element;
-
-export { type HudTokenDescriptor, type HudTokenGroup, type HudTokensAdapter, TokensPanel };

package/panels/tokens-panel.js

@@ -1,9 +0,0 @@
-import {
-  TokensPanel
-} from "../chunk-nm82wr8r.js";
-import"../chunk-kyeb6qeq.js";
-import"../chunk-xztw0xyt.js";
-import"../chunk-5gtx3pza.js";
-export {
-  TokensPanel
-};

package/panels/unlock-panel.d.mts

@@ -1,33 +0,0 @@
-import * as react from 'react';
-import { HudAccess } from '../core/access.mjs';
-import { HudEnv } from '../core/types.mjs';
-import 'lucide-react';
-
-type HudUnlockState = "checking" | "locked" | "unlocked" | "unconfigured";
-/**
- * Unlock state for a deployed hud.
- *
- * The browser never sees the password or the token: the cookie is httpOnly
- * and only the server can judge it, so this hook asks `${apiBase}/unlock`
- * rather than reading anything locally. On a tier that needs no unlock it
- * settles on `unlocked` without a request.
- */
-declare function useHudUnlock(apiBase: string, access: HudAccess): {
-    state: HudUnlockState;
-    error: string | null;
-    unlock: (password: string) => Promise<boolean>;
-};
-interface HudUnlockPanelProps {
-    env: HudEnv;
-    state: HudUnlockState;
-    error: string | null;
-    onUnlock: (password: string) => Promise<boolean>;
-}
-/**
- * The only panel a locked deployed hud shows. Everything else, including
- * the read-only production panels, stays behind it, because the panels
- * themselves fetch from `/api/hud/*` routes that would refuse anyway.
- */
-declare function HudUnlockPanel({ env, state, error, onUnlock }: HudUnlockPanelProps): react.JSX.Element;
-
-export { HudUnlockPanel, type HudUnlockPanelProps, type HudUnlockState, useHudUnlock };

package/panels/unlock-panel.js

@@ -1,14 +0,0 @@
-import {
-  HudUnlockPanel,
-  useHudUnlock
-} from "../chunk-msqkkqw7.js";
-import"../chunk-r06bpmy6.js";
-import"../chunk-kyeb6qeq.js";
-import"../chunk-xztw0xyt.js";
-import"../chunk-babjpqkb.js";
-import"../chunk-v086j53b.js";
-import"../chunk-5gtx3pza.js";
-export {
-  useHudUnlock,
-  HudUnlockPanel
-};

package/panels/variants-panel.d.mts

@@ -1,51 +0,0 @@
-import * as react from 'react';
-
-interface HudVariantCategory {
-    id: string;
-    name: string;
-    /** Registry status — "active" renders as votable, "decided" as settled. */
-    status: string;
-    alternativeCount: number;
-    /** Domain bucket (marketing / admin / shared, …) for grouping. */
-    domain?: string;
-}
-interface HudGenerateRequest {
-    /** Repo-relative component path (apps/… or packages/…). */
-    path: string;
-    brief: string;
-    count: number;
-}
-interface HudGenerateResult {
-    ok: boolean;
-    /** Repo-relative queue marker path on success. */
-    markerPath?: string;
-    error?: string;
-}
-interface HudVariantsAdapter {
-    categories: HudVariantCategory[];
-    /** Deep link to the full review dashboard (e.g. /dev/review/console). */
-    reviewHref: string;
-    /** Deep link for one category's drill-in page. */
-    categoryHref?: (categoryId: string) => string;
-    /**
-     * Open the in-page preview drawer, when the app has a PreviewProvider
-     * mounted on the current route. Omit to fall back to deep links.
-     */
-    openPreview?: (categoryId: string) => void;
-    /**
-     * Queue a variant-generation brief (console: /api/dev/generate-variants →
-     * .claude/queue marker — human stays in the loop, no autonomous dispatch).
-     */
-    generate?: (request: HudGenerateRequest) => Promise<HudGenerateResult>;
-}
-/**
- * Variant-voting overview over an app-provided adapter: registered preview
- * categories with status, drill-in links (or the in-page drawer when
- * mounted), and the generate-brief queue. Voting itself stays on the review
- * dashboard — it needs the showcase to judge alternatives.
- */
-declare function VariantsPanel({ adapter }: {
-    adapter: HudVariantsAdapter;
-}): react.JSX.Element;
-
-export { type HudGenerateRequest, type HudGenerateResult, type HudVariantCategory, type HudVariantsAdapter, VariantsPanel };

package/panels/variants-panel.js

@@ -1,12 +0,0 @@
-import {
-  VariantsPanel
-} from "../chunk-k50yfp5d.js";
-import"../chunk-wspz08q7.js";
-import"../chunk-kyeb6qeq.js";
-import"../chunk-xztw0xyt.js";
-import"../chunk-babjpqkb.js";
-import"../chunk-v086j53b.js";
-import"../chunk-5gtx3pza.js";
-export {
-  VariantsPanel
-};

package/panels/vitals-panel.d.mts

@@ -1,11 +0,0 @@
-import * as react from 'react';
-
-/** Current values as a plain record — consumed by the dispatch payload. */
-declare function getVitalsSnapshot(): Record<string, number>;
-/**
- * Live Core Web Vitals of the current page (web-vitals, in-memory) plus the
- * app's server-side SigNoz snapshot via the hud hub.
- */
-declare function VitalsPanel(): react.JSX.Element;
-
-export { VitalsPanel, getVitalsSnapshot };

package/panels/vitals-panel.js

@@ -1,15 +0,0 @@
-import {
-  VitalsPanel,
-  getVitalsSnapshot
-} from "../chunk-ghxh8926.js";
-import"../chunk-xezxydm3.js";
-import"../chunk-wspz08q7.js";
-import"../chunk-kyeb6qeq.js";
-import"../chunk-xztw0xyt.js";
-import"../chunk-babjpqkb.js";
-import"../chunk-v086j53b.js";
-import"../chunk-5gtx3pza.js";
-export {
-  getVitalsSnapshot,
-  VitalsPanel
-};

package/server/guard.d.mts

@@ -1,42 +0,0 @@
-import { HudEnv, HudCapability } from '../core/types.mjs';
-import 'lucide-react';
-import 'react';
-
-/**
- * Server-side hud gate: layer two of the three the hud architecture calls
- * for (client render gate · per-app route gate · hub token).
- *
- * Client capability filtering is convenience: the panels a browser cannot see
- * are still reachable by typing the URL. Every `/api/hud/*` route therefore
- * re-derives the env itself and refuses anything the tier's matrix denies,
- * which is what makes production genuinely read-only rather than
- * read-only-by-UI. Deliberately framework-free (it takes anything with
- * `headers.get`) so the route decides how to render the failure.
- */
-
-interface HudGuardRequest {
-    headers: {
-        get(name: string): string | null;
-    };
-}
-type HudGuardResult = {
-    ok: true;
-    env: HudEnv;
-} | {
-    ok: false;
-    status: 401 | 403 | 404;
-    error: string;
-};
-/**
- * Whether this request may exercise `capability` right now.
- *
- * Order matters: a hud that is not enabled at all answers 404 (nothing here),
- * a denied capability answers 403 before any password is considered (the
- * password must never be a way to widen the matrix), and only a permitted
- * capability gets as far as the unlock check.
- */
-declare function checkHudRequest(request: HudGuardRequest, capability: HudCapability): Promise<HudGuardResult>;
-/** Whether the current request already carries a valid unlock (status route). */
-declare function isHudRequestUnlocked(request: HudGuardRequest): Promise<boolean>;
-
-export { type HudGuardRequest, type HudGuardResult, checkHudRequest, isHudRequestUnlocked };

package/server/guard.js

@@ -1,12 +0,0 @@
-import {
-  checkHudRequest,
-  isHudRequestUnlocked
-} from "../chunk-1atxwdhw.js";
-import"../chunk-r06bpmy6.js";
-import"../chunk-babjpqkb.js";
-import"../chunk-v086j53b.js";
-import"../chunk-5gtx3pza.js";
-export {
-  isHudRequestUnlocked,
-  checkHudRequest
-};

package/server/unlock.d.mts

@@ -1,28 +0,0 @@
-/**
- * The `/api/hud/unlock` handler, shared by every app that mounts the hud.
- *
- * Framework-free on purpose (it takes anything with `headers.get` and a
- * `json()`), so each app's route file is four lines of Next glue and the
- * policy lives in one place. Verification is HMAC over the token's own issue
- * time (see core/access.ts), so nothing server-side needs to be stored.
- */
-interface HudUnlockRequest {
-    headers: {
-        get(name: string): string | null;
-    };
-    json(): Promise<unknown>;
-}
-interface HudUnlockResult {
-    status: number;
-    body: Record<string, unknown>;
-    /** `Set-Cookie` value, when the attempt changed the unlock state. */
-    setCookie?: string;
-}
-/** GET: what the client needs to decide between the panels and the lock. */
-declare function handleHudUnlockStatus(request: HudUnlockRequest): Promise<HudUnlockResult>;
-/** POST: exchange the password for a signed, expiring unlock cookie. */
-declare function handleHudUnlockAttempt(request: HudUnlockRequest): Promise<HudUnlockResult>;
-/** Test seam: the attempt budget is process state, not request state. */
-declare function resetHudUnlockAttempts(): void;
-
-export { type HudUnlockRequest, type HudUnlockResult, handleHudUnlockAttempt, handleHudUnlockStatus, resetHudUnlockAttempts };

package/server/unlock.js

@@ -1,108 +0,0 @@
-import {
-  isHudRequestUnlocked
-} from "../chunk-1atxwdhw.js";
-import {
-  hudRequiresUnlock,
-  hudUnlockCookieString,
-  hudUnlockTtlMs,
-  resolveHudAccess,
-  signHudUnlockToken,
-  timingSafeEqual
-} from "../chunk-r06bpmy6.js";
-import {
-  isHudVisible,
-  resolveHudEnv
-} from "../chunk-babjpqkb.js";
-import"../chunk-v086j53b.js";
-import"../chunk-5gtx3pza.js";
-
-// server/unlock.ts
-var ATTEMPT_WINDOW_MS = 10 * 60 * 1000;
-var MAX_FAILED_ATTEMPTS = 10;
-var failures = new Map;
-function clientKey(request) {
-  const forwarded = request.headers.get("x-forwarded-for");
-  return forwarded?.split(",")[0]?.trim() || request.headers.get("x-real-ip") || "unknown";
-}
-function isThrottled(key, now) {
-  const entry = failures.get(key);
-  if (!entry)
-    return false;
-  if (now - entry.firstAt > ATTEMPT_WINDOW_MS) {
-    failures.delete(key);
-    return false;
-  }
-  return entry.count >= MAX_FAILED_ATTEMPTS;
-}
-function recordFailure(key, now) {
-  const entry = failures.get(key);
-  if (!entry || now - entry.firstAt > ATTEMPT_WINDOW_MS) {
-    failures.set(key, { count: 1, firstAt: now });
-    return;
-  }
-  entry.count += 1;
-}
-async function handleHudUnlockStatus(request) {
-  const env = resolveHudEnv();
-  if (!isHudVisible(env)) {
-    return { status: 404, body: { error: "not found" } };
-  }
-  const access = resolveHudAccess(env);
-  return {
-    status: 200,
-    body: {
-      env,
-      access,
-      required: hudRequiresUnlock(access),
-      configured: !hudRequiresUnlock(access) || Boolean(process.env.HUD_ACCESS_PASSWORD),
-      unlocked: await isHudRequestUnlocked(request)
-    }
-  };
-}
-async function handleHudUnlockAttempt(request) {
-  const env = resolveHudEnv();
-  if (!isHudVisible(env)) {
-    return { status: 404, body: { error: "not found" } };
-  }
-  const access = resolveHudAccess(env);
-  if (!hudRequiresUnlock(access)) {
-    return { status: 200, body: { unlocked: true, required: false } };
-  }
-  const expected = process.env.HUD_ACCESS_PASSWORD;
-  if (!expected) {
-    return {
-      status: 503,
-      body: { unlocked: false, configured: false, error: "hud unlock is not configured" }
-    };
-  }
-  const now = Date.now();
-  const key = clientKey(request);
-  if (isThrottled(key, now)) {
-    return { status: 429, body: { unlocked: false, error: "too many attempts, try again later" } };
-  }
-  let submitted = "";
-  try {
-    const payload = await request.json();
-    if (typeof payload?.password === "string")
-      submitted = payload.password;
-  } catch {}
-  if (!submitted || !timingSafeEqual(submitted, expected)) {
-    recordFailure(key, now);
-    return { status: 401, body: { unlocked: false, error: "wrong password" } };
-  }
-  failures.delete(key);
-  const ttlMs = hudUnlockTtlMs(access);
-  return {
-    status: 200,
-    body: { unlocked: true, env, access, expiresInMs: ttlMs },
-    setCookie: hudUnlockCookieString(await signHudUnlockToken(expected, now), ttlMs)
-  };
-}
-function resetHudUnlockAttempts() {
-  failures.clear();
-}
-export {
-  resetHudUnlockAttempts,
-  handleHudUnlockStatus,
-  handleHudUnlockAttempt
-};