@jhizzard/termdeck 0.10.4 → 0.12.0

package/packages/client/public/style.css

@@ -389,6 +389,31 @@
       flex: 1;
     }
 
+    /* Sprint 42 T4 — drag handle for PTY panel reordering. Only the handle
+       is grabbable; the rest of the panel header / xterm body are unaffected. */
+    .panel-drag-handle {
+      cursor: grab;
+      color: var(--tg-text-dim);
+      font-size: 12px;
+      letter-spacing: -2px;
+      user-select: none;
+      flex-shrink: 0;
+      padding: 0 2px;
+      opacity: 0.5;
+      transition: opacity 0.15s;
+    }
+    .panel-drag-handle:hover { opacity: 1; color: var(--tg-accent); }
+    .panel-drag-handle:active { cursor: grabbing; }
+    .term-panel.dragging {
+      opacity: 0.5;
+      outline: 2px dashed var(--tg-accent);
+      outline-offset: -2px;
+    }
+    .term-panel.drag-over {
+      outline: 2px solid var(--tg-accent);
+      outline-offset: -2px;
+    }
+
     .status-dot {
       width: 8px; height: 8px;
       border-radius: 50%;
@@ -768,6 +793,156 @@
       filter: none;
     }
 
+    /* ===== REMOVE PROJECT BUTTON + MODAL (Sprint 42 T4) ===== */
+    .prompt-remove-project {
+      background: var(--tg-bg);
+      border: 1px solid var(--tg-border);
+      color: var(--tg-text-dim);
+      font-size: 18px;
+      line-height: 1;
+      padding: 0;
+      width: 26px;
+      height: 26px;
+      border-radius: var(--tg-radius-sm);
+      cursor: pointer;
+      font-family: var(--tg-sans);
+      transition: all 0.15s;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      margin-left: 4px;
+    }
+    .prompt-remove-project:hover {
+      border-color: var(--tg-red, #f7768e);
+      color: var(--tg-red, #f7768e);
+    }
+    .remove-project-modal {
+      display: none;
+      position: fixed;
+      inset: 0;
+      z-index: 3000;
+      align-items: center;
+      justify-content: center;
+    }
+    .remove-project-modal.open { display: flex; }
+    .remove-project-backdrop {
+      position: absolute;
+      inset: 0;
+      background: rgba(0, 0, 0, 0.72);
+    }
+    .remove-project-card {
+      position: relative;
+      background: var(--tg-surface);
+      border: 1px solid var(--tg-accent-dim);
+      border-radius: 10px;
+      padding: 22px 24px 18px;
+      width: 460px;
+      max-width: calc(100vw - 40px);
+      box-shadow: 0 16px 48px rgba(0, 0, 0, 0.55);
+      font-family: var(--tg-sans);
+      color: var(--tg-text);
+    }
+    .remove-project-card h3 {
+      margin: 0 0 4px;
+      font-size: 16px;
+      color: var(--tg-accent);
+    }
+    .remove-project-card .rpm-help {
+      margin: 0 0 14px;
+      font-size: 12px;
+      color: var(--tg-text-dim);
+      line-height: 1.5;
+    }
+    .remove-project-card .rpm-help code {
+      background: var(--tg-bg);
+      padding: 1px 5px;
+      border-radius: 3px;
+      font-family: var(--tg-mono);
+      font-size: 11px;
+    }
+    .remove-project-card .rpm-help strong {
+      color: var(--tg-green);
+    }
+    .remove-project-card label {
+      display: block;
+      margin-bottom: 10px;
+    }
+    .remove-project-card label > span {
+      display: block;
+      font-size: 11px;
+      color: var(--tg-text-dim);
+      margin-bottom: 3px;
+      text-transform: uppercase;
+      letter-spacing: 0.5px;
+    }
+    .remove-project-card select {
+      width: 100%;
+      background: var(--tg-bg);
+      border: 1px solid var(--tg-border);
+      color: var(--tg-text);
+      font-size: 13px;
+      padding: 7px 10px;
+      border-radius: var(--tg-radius-sm);
+      font-family: var(--tg-mono);
+      box-sizing: border-box;
+    }
+    .remove-project-card select:focus {
+      outline: none;
+      border-color: var(--tg-accent-dim);
+    }
+    .remove-project-card .rpm-warning {
+      background: rgba(247, 118, 142, 0.08);
+      border: 1px solid rgba(247, 118, 142, 0.4);
+      color: var(--tg-text);
+      font-size: 12px;
+      padding: 8px 10px;
+      border-radius: 4px;
+      margin: 6px 0 8px;
+      line-height: 1.5;
+    }
+    .remove-project-card .rpm-status {
+      font-size: 12px;
+      min-height: 16px;
+      margin: 4px 0 8px;
+      color: var(--tg-text-dim);
+    }
+    .remove-project-card .rpm-status.error { color: var(--tg-red); }
+    .remove-project-card .rpm-status.ok { color: var(--tg-green); }
+    .remove-project-card .rpm-actions {
+      display: flex;
+      justify-content: flex-end;
+      gap: 8px;
+      margin-top: 6px;
+    }
+    .remove-project-card button {
+      font-size: 12px;
+      font-weight: 600;
+      padding: 6px 16px;
+      border-radius: 4px;
+      cursor: pointer;
+      font-family: var(--tg-sans);
+      border: 1px solid var(--tg-border);
+    }
+    .remove-project-card .rpm-cancel {
+      background: transparent;
+      color: var(--tg-text-dim);
+    }
+    .remove-project-card .rpm-cancel:hover {
+      color: var(--tg-text);
+      border-color: var(--tg-border-active);
+    }
+    .remove-project-card .rpm-confirm {
+      background: var(--tg-red, #f7768e);
+      color: var(--tg-bg);
+      border-color: var(--tg-red, #f7768e);
+    }
+    .remove-project-card .rpm-confirm:hover { filter: brightness(1.1); }
+    .remove-project-card .rpm-confirm:disabled {
+      opacity: 0.5;
+      cursor: not-allowed;
+      filter: none;
+    }
+
     /* ===== Orchestration preview button + modal (Sprint 37 T3) ===== */
     .prompt-preview-project {
       background: transparent;
@@ -3392,6 +3567,61 @@
       background: rgba(255, 255, 255, 0.08);
     }
 
+    /* Sprint 43 T1 — second toolbar row: hide-isolated / min-degree / window
+       / layout selectors. Mirrors .graph-filters spacing but shifts the
+       background a notch darker so the two rows are visually distinguishable
+       and the edge-type chips above feel like their own band. */
+    .graph-filters-row2 {
+      gap: 14px;
+      padding: 6px 16px;
+      background: rgba(0, 0, 0, 0.18);
+      border-bottom: 1px solid var(--tg-border);
+    }
+    .graph-control {
+      display: inline-flex;
+      align-items: center;
+      gap: 6px;
+      font-size: 11px;
+      font-family: var(--tg-mono);
+      color: var(--tg-text-dim);
+    }
+    .graph-control select {
+      background: var(--tg-bg);
+      color: var(--tg-text);
+      border: 1px solid var(--tg-border);
+      border-radius: var(--tg-radius-sm);
+      padding: 3px 6px;
+      font-family: var(--tg-mono);
+      font-size: 11px;
+      cursor: pointer;
+    }
+    .graph-control select:focus {
+      outline: none;
+      border-color: var(--tg-accent);
+    }
+    .graph-control-toggle {
+      cursor: pointer;
+      user-select: none;
+    }
+    .graph-control-toggle input[type="checkbox"] {
+      accent-color: var(--tg-accent);
+      cursor: pointer;
+    }
+    .graph-control-stat {
+      margin-left: auto;
+      font-size: 10px;
+      color: var(--tg-text-dim);
+      font-family: var(--tg-mono);
+      padding: 2px 8px;
+      border: 1px solid transparent;
+      border-radius: 999px;
+    }
+    .graph-control-stat:not(:empty) {
+      background: rgba(122, 162, 247, 0.10);
+      border-color: rgba(122, 162, 247, 0.35);
+      color: var(--tg-text);
+    }
+
     .graph-stage {
       position: relative;
       flex: 1;

package/packages/server/src/config.js

@@ -298,6 +298,54 @@ function addProject({ name, path: projectPath, defaultTheme, defaultCommand }) {
   return parsed.projects;
 }
 
+// Remove a project from ~/.termdeck/config.yaml and return the updated projects
+// map. Mirrors addProject for the inverse operation. Throws ENOENT-shaped
+// errors with `code` set so callers can map cleanly to HTTP status. Files on
+// disk at the project's `path` are NEVER touched — this only edits the YAML
+// entry. The user retains all source code.
+function removeProject(name, configPath = CONFIG_PATH) {
+  if (!name || !/^[A-Za-z0-9_.-]+$/.test(name)) {
+    const err = new Error('Project name must be non-empty and contain only letters, digits, . _ or -');
+    err.code = 'BAD_NAME';
+    throw err;
+  }
+
+  const yaml = require('yaml');
+  let parsed = {};
+  if (fs.existsSync(configPath)) {
+    const raw = fs.readFileSync(configPath, 'utf-8');
+    try {
+      parsed = yaml.parse(raw) || {};
+    } catch (err) {
+      throw new Error(`config.yaml is not valid YAML — cannot safely rewrite: ${err.message}`);
+    }
+  }
+
+  if (!parsed.projects || typeof parsed.projects !== 'object' || !parsed.projects[name]) {
+    const err = new Error(`Project "${name}" not found in config.yaml`);
+    err.code = 'NOT_FOUND';
+    throw err;
+  }
+
+  delete parsed.projects[name];
+
+  if (fs.existsSync(configPath)) {
+    const ts = new Date().toISOString().replace(/[:.]/g, '-');
+    const bak = `${configPath}.${ts}.bak`;
+    try {
+      fs.copyFileSync(configPath, bak);
+    } catch (err) {
+      console.warn('[config] Could not write backup before removing project:', err.message);
+    }
+  }
+
+  const out = yaml.stringify(parsed);
+  fs.writeFileSync(configPath, out, 'utf-8');
+  console.log(`[config] Removed project "${name}" (files on disk untouched)`);
+
+  return parsed.projects;
+}
+
 // Apply a structural patch to ~/.termdeck/config.yaml. Sprint 36 introduces
 // this for the dashboard RAG toggle (PATCH /api/config) but the helper is
 // generic — pass a deep partial of the config tree, every leaf in `patch` that
@@ -394,6 +442,7 @@ function updateConfig(patch, configPath = CONFIG_PATH) {
 module.exports = {
   loadConfig,
   addProject,
+  removeProject,
   updateConfig,
   // exported for tests / introspection
   _parseDotenv: parseDotenv,

package/packages/server/src/database.js

@@ -2,12 +2,50 @@
 
 const path = require('path');
 const os = require('os');
+const fs = require('fs');
+
+// Sprint 43 T2: load a numbered migration .sql file from the repo-root
+// `migrations/` directory if present, falling back to an inline string for
+// packaged npm installs where the `files` allowlist in package.json does not
+// ship `migrations/`. Authoritative source-of-truth is the .sql file; the
+// fallback is kept in lockstep when the schema changes.
+function loadMigrationSql(name, fallback) {
+  const candidates = [
+    path.join(__dirname, '..', '..', '..', 'migrations', name),
+    path.join(__dirname, '..', '..', '..', '..', 'migrations', name),
+  ];
+  for (const candidate of candidates) {
+    try {
+      const sql = fs.readFileSync(candidate, 'utf8');
+      if (sql && sql.trim().length) return sql;
+    } catch (_e) { /* try next */ }
+  }
+  return fallback;
+}
+
+const FLASHBACK_EVENTS_INLINE_SQL = `
+  CREATE TABLE IF NOT EXISTS flashback_events (
+    id              INTEGER PRIMARY KEY AUTOINCREMENT,
+    fired_at        TEXT    NOT NULL,
+    session_id      TEXT    NOT NULL,
+    project         TEXT,
+    error_text      TEXT    NOT NULL,
+    hits_count      INTEGER NOT NULL DEFAULT 0,
+    top_hit_id      TEXT,
+    top_hit_score   REAL,
+    dismissed_at    TEXT,
+    clicked_through INTEGER NOT NULL DEFAULT 0
+  );
+  CREATE INDEX IF NOT EXISTS flashback_events_fired_at_idx
+    ON flashback_events(fired_at DESC);
+  CREATE INDEX IF NOT EXISTS flashback_events_session_idx
+    ON flashback_events(session_id);
+`;
 
 function initDatabase(Database) {
   const dbPath = path.join(os.homedir(), '.termdeck', 'termdeck.db');
 
   // Ensure directory exists
-  const fs = require('fs');
   fs.mkdirSync(path.dirname(dbPath), { recursive: true });
 
   const db = new Database(dbPath);
@@ -115,6 +153,16 @@ function initDatabase(Database) {
     console.warn('[db] projects.default_theme drop migration failed:', err.message);
   }
 
+  // Sprint 43 T2: flashback_events durable audit table. Schema lives in
+  // migrations/001_flashback_events.sql (repo-root, source-of-truth) with
+  // an inline fallback for packaged installs. Idempotent CREATE so this
+  // replays safely on every server start.
+  try {
+    db.exec(loadMigrationSql('001_flashback_events.sql', FLASHBACK_EVENTS_INLINE_SQL));
+  } catch (err) {
+    console.warn('[db] flashback_events migration failed:', err.message);
+  }
+
   return db;
 }
 

package/packages/server/src/flashback-diag.js

@@ -1,15 +1,37 @@
-// Flashback diagnostic ring buffer (Sprint 39 T1).
+// Flashback diagnostic ring buffer (Sprint 39 T1) + durable audit table
+// (Sprint 43 T2).
 //
-// Six decision points along the Flashback pipeline write structured events
-// here so production-flow regressions surface as a readable timeline instead
-// of a silent gate failure. The ring is in-memory and lost on restart by
-// design — persistence is a Sprint-40+ concern. Public surface:
+// Two layers of observability for the Flashback pipeline:
 //
-//   log({ sessionId, event, ...fields })  — append one event
-//   snapshot({ sessionId?, eventType?, limit? }) — read back filtered tail
-//   _resetForTest()                                — test-only ring clear
+//   (1) IN-MEMORY RING — six decision points along the pipeline write
+//       structured events to a 200-event ring. Lost on restart. Powers the
+//       /api/flashback/diag endpoint and the live diagnostic UI. This is
+//       fine-grained: every pattern match, every rate-limit hit, every
+//       bridge query gets logged.
 //
-// Event shape (all events): { ts, sessionId, event, ...event-specific fields }.
+//   (2) SQLITE AUDIT TABLE (flashback_events) — every actual fire (the
+//       moment a proactive_memory frame is sent over WS to the user's
+//       panel) gets one durable row. Survives restart. Powers the
+//       /flashback-history.html dashboard and the click-through funnel.
+//       This is coarse-grained: one row per fire, plus dismiss/click-through
+//       outcome.
+//
+// Public surface:
+//
+//   In-memory ring (Sprint 39):
+//     log({ sessionId, event, ...fields }) — append one event
+//     snapshot({ sessionId?, eventType?, limit? }) — read back filtered tail
+//     _resetForTest() — test-only ring clear
+//
+//   SQLite audit (Sprint 43 T2):
+//     recordFlashback(db, { sessionId, project, error_text, hits_count,
+//                           top_hit_id, top_hit_score, fired_at? }) → id
+//     markDismissed(db, eventId, dismissedAt?) → bool
+//     markClickedThrough(db, eventId) → bool
+//     getRecentFlashbacks(db, { since?, limit? }) → row[]
+//     getFunnelStats(db, { since? }) → { fires, dismissed, clicked_through }
+//
+// Event shape (ring): { ts, sessionId, event, ...event-specific fields }.
 //
 // Event types and their producers:
 //   pattern_match           — session.js _detectErrors (PATTERNS.error /
@@ -21,9 +43,13 @@
 //   bridge_result           — mnestra-bridge queryMnestra at call return
 //   proactive_memory_emit   — index.js onErrorDetected WS send block
 //
-// The route GET /api/flashback/diag (registered in index.js) returns
-// snapshot() output as JSON for ad-hoc inspection by Joshua and consumption
-// by T4's production-flow e2e test.
+// The audit table is an EXTENSION of the ring, not a replacement. Ring stays
+// for the live UI; SQLite is for the historical question "did flashback fire
+// when I needed it, and did I act on it?"
+//
+// SQLite functions are SAFE when db is null/undefined: they no-op and return
+// null/false/[] so test fixtures and Database-unavailable installs don't
+// break the live emit path.
 
 const RING_SIZE = 200;
 
@@ -48,4 +74,152 @@ function _resetForTest() {
   ring = [];
 }
 
-module.exports = { log, snapshot, _resetForTest, RING_SIZE };
+// ---- SQLite audit (Sprint 43 T2) ----------------------------------------
+
+// Persists one row per actual flashback fire. Returns the inserted row id
+// (number) or null when persistence is unavailable. Errors are caught and
+// logged — flashback persistence must never break the live emit path.
+function recordFlashback(db, event) {
+  if (!db) return null;
+  if (!event || (!event.sessionId && !event.session_id)) return null;
+  try {
+    const fired_at = event.fired_at || new Date().toISOString();
+    const session_id = event.session_id || event.sessionId;
+    const hits_count = Number.isFinite(event.hits_count) ? event.hits_count : 0;
+    const top_hit_score = (typeof event.top_hit_score === 'number'
+      && Number.isFinite(event.top_hit_score)) ? event.top_hit_score : null;
+    const result = db.prepare(`
+      INSERT INTO flashback_events
+        (fired_at, session_id, project, error_text, hits_count,
+         top_hit_id, top_hit_score)
+      VALUES (?, ?, ?, ?, ?, ?, ?)
+    `).run(
+      fired_at,
+      session_id,
+      event.project || null,
+      event.error_text || '',
+      hits_count,
+      event.top_hit_id || null,
+      top_hit_score,
+    );
+    // better-sqlite3 returns BigInt for lastInsertRowid; coerce to Number
+    // so it serializes naturally into JSON and the WS frame.
+    return Number(result.lastInsertRowid);
+  } catch (err) {
+    console.warn('[flashback-diag] recordFlashback INSERT failed:', err.message);
+    return null;
+  }
+}
+
+// Marks an event as dismissed (toast went away — by user, by 30s timeout,
+// or implicitly via click-through). Idempotent: only writes when
+// dismissed_at is currently NULL, so the FIRST dismiss wins. Returns true
+// when a row was actually updated.
+function markDismissed(db, eventId, dismissedAt) {
+  if (!db || !eventId) return false;
+  const id = Number(eventId);
+  if (!Number.isFinite(id) || id <= 0) return false;
+  try {
+    const ts = dismissedAt || new Date().toISOString();
+    const result = db.prepare(`
+      UPDATE flashback_events
+         SET dismissed_at = ?
+       WHERE id = ? AND dismissed_at IS NULL
+    `).run(ts, id);
+    return result.changes > 0;
+  } catch (err) {
+    console.warn('[flashback-diag] markDismissed UPDATE failed:', err.message);
+    return false;
+  }
+}
+
+// Marks an event as clicked-through (user opened the modal). Click-through
+// is also an implicit dismiss, so if dismissed_at is still NULL we set it
+// at the same moment. Idempotent: clicking twice is a no-op on the second
+// pass. Returns true when a row was actually updated.
+function markClickedThrough(db, eventId) {
+  if (!db || !eventId) return false;
+  const id = Number(eventId);
+  if (!Number.isFinite(id) || id <= 0) return false;
+  try {
+    const ts = new Date().toISOString();
+    const result = db.prepare(`
+      UPDATE flashback_events
+         SET clicked_through = 1,
+             dismissed_at    = COALESCE(dismissed_at, ?)
+       WHERE id = ? AND clicked_through = 0
+    `).run(ts, id);
+    return result.changes > 0;
+  } catch (err) {
+    console.warn('[flashback-diag] markClickedThrough UPDATE failed:', err.message);
+    return false;
+  }
+}
+
+// Reads the most-recent N flashback fires, optionally filtered to events
+// fired at-or-after the `since` ISO timestamp. Hard cap of 500 rows so
+// pathological queries can't OOM the dashboard.
+function getRecentFlashbacks(db, { since, limit } = {}) {
+  if (!db) return [];
+  try {
+    const cap = Math.max(1, Math.min(500, Number(limit) || 100));
+    const cols = `id, fired_at, session_id, project, error_text, hits_count,
+                  top_hit_id, top_hit_score, dismissed_at, clicked_through`;
+    if (since) {
+      return db.prepare(
+        `SELECT ${cols} FROM flashback_events
+          WHERE fired_at >= ?
+          ORDER BY fired_at DESC
+          LIMIT ?`
+      ).all(since, cap);
+    }
+    return db.prepare(
+      `SELECT ${cols} FROM flashback_events
+        ORDER BY fired_at DESC
+        LIMIT ?`
+    ).all(cap);
+  } catch (err) {
+    console.warn('[flashback-diag] getRecentFlashbacks SELECT failed:', err.message);
+    return [];
+  }
+}
+
+// Click-through funnel aggregates: total fires, dismissed (any reason),
+// clicked-through (modal opened). Optional `since` ISO timestamp filter.
+// All three are scalar counts — the dashboard renders them as a percentage
+// funnel chart.
+function getFunnelStats(db, { since } = {}) {
+  const empty = { fires: 0, dismissed: 0, clicked_through: 0 };
+  if (!db) return empty;
+  try {
+    const where = since ? `WHERE fired_at >= ?` : '';
+    const args = since ? [since] : [];
+    const row = db.prepare(
+      `SELECT
+         COUNT(*) AS fires,
+         SUM(CASE WHEN dismissed_at IS NOT NULL THEN 1 ELSE 0 END) AS dismissed,
+         SUM(CASE WHEN clicked_through = 1 THEN 1 ELSE 0 END) AS clicked_through
+       FROM flashback_events ${where}`
+    ).get(...args);
+    return {
+      fires: Number(row?.fires || 0),
+      dismissed: Number(row?.dismissed || 0),
+      clicked_through: Number(row?.clicked_through || 0),
+    };
+  } catch (err) {
+    console.warn('[flashback-diag] getFunnelStats SELECT failed:', err.message);
+    return empty;
+  }
+}
+
+module.exports = {
+  log,
+  snapshot,
+  _resetForTest,
+  RING_SIZE,
+  recordFlashback,
+  markDismissed,
+  markClickedThrough,
+  getRecentFlashbacks,
+  getFunnelStats,
+};