@jterrats/open-orchestra 0.5.5 → 1.0.1

package/AGENTS.md

@@ -43,6 +43,7 @@
 ## Development Engineering
 
 - APIs are product contracts: define request, response, error shape, auth, pagination, rate limits, compatibility, and idempotency before implementation.
+- Load `rules/development-engineering.mdc` for implementation work that changes entry points, services, data access, async jobs, integrations, or tests.
 - Data models must use domain language, explicit invariants, clear ownership, safe migrations, and indexes based on real query patterns.
 - Frontend code must separate presentation, state, data access, and domain logic while preserving accessibility and responsive behavior.
 - Performance-sensitive work needs budgets, hot-path review, caching ownership, timeouts, retries, backoff, and measurement evidence.
@@ -150,7 +151,7 @@
 - Mark breaking changes with `!` and a `BREAKING CHANGE:` footer.
 - Keep PRs <400 lines. Review your own diff before requesting review.
 
-<!-- open-orchestra:start block-id="runtime-bootstrap" generator="open-orchestra runtime bootstrap" version="1" target="codex" source-manifest="open-orchestra command-manifest,runtime-bootstrap" content-sha256="411e2d184a03aafe61fc4b71d49011f83a4f94d33d3a64cc4cd590a979d07319" updated-at="2026-05-10T05:17:06.513Z" -->
+<!-- open-orchestra:start block-id="runtime-bootstrap" generator="open-orchestra runtime bootstrap" version="1" target="codex" source-manifest="open-orchestra command-manifest,runtime-bootstrap" content-sha256="d178c80135edb9ad2161e8c20eb2cfbf8cbca8ce189150886428b024389525d0" updated-at="2026-05-13T20:55:31.307Z" -->
 # Open Orchestra Runtime Bootstrap
 
 Runtime target: Codex. Reference Open Orchestra from AGENTS.md so local CLI work follows workflow gates.
@@ -177,7 +178,7 @@ Use the correct owner role for the type of work:
 
 ### Step 2 — Declare effort baseline
 ```
-orchestra estimate --task <ID> --sizing <xs|s|m|l|xl> --solo-days <N> --ai-unguided-days <N>
+orchestra estimate --task <ID> --sizing <xs|s|m|l|xl> --solo-days <N> --ai-unguided-days <N> --ai-guided-days <N>
 ```
 
 ### Step 3 — Run the autonomous workflow
@@ -219,17 +220,17 @@ orchestra benchmark --task <ID>
 ## Task Loop
 - `orchestra health` - Check local tools and workflow readiness.
 - `orchestra task list` - List local workflow tasks.
-- `orchestra context --task <id>` - Read task context bundle.
 - `orchestra delegation decide --task <id>` - Decide whether to delegate.
-- `orchestra plan --task <id>` - Render role execution plan.
 - `orchestra skills plan --task <id>` - Select task-scoped skills.
-- `orchestra skills render --target <target>` - Render skills for a runtime.
+- `orchestra skills render --target <generic|claude|cursor|codex|vscode|windsurf>` - Render skills for a runtime.
 - `orchestra protocol render` - Render subagent protocol.
 - `orchestra workflow render --task <id>` - Render workflow templates.
-- `orchestra evidence add --task <id> --role <role> --type <type> --summary <text>` - Record delivery evidence.
-- `orchestra review --task <id> --role <role> --result <approve|block|changes> --findings <text> --recommendation <text>` - Record reviewer outcome.
-- `orchestra gate --gate <id> --task <id>` - Evaluate workflow gate.
 - `orchestra summary` - Summarize workspace state.
+- `orchestra context --task <id>` - Read task context bundle.
+- `orchestra plan --task <id>` - Render role execution plan.
+- `orchestra gate --gate <architecture> --task <id>` - Evaluate workflow gate.
+- `orchestra review --task <id> --role <role> --result <approve|block|changes> --findings <text> --recommendation <text>` - Record reviewer outcome.
+- `orchestra evidence add --task <id> --role <role> --type <command|file|screenshot|trace|video|log|report> --summary <text>` - Record delivery evidence.
 
 ## Completion
 - Run the project validation gate.

package/CLAUDE.md

@@ -7,7 +7,7 @@
 This repo uses Open Orchestra for all development work. Every feature or fix MUST go through the workflow:
 
 1. **Task registration**: `orchestra task add --id <ID> --title "..." --owner <role> --paths "..." --goal "..."` before any code is written.
-2. **Effort baseline**: `orchestra estimate --task <ID> --sizing <xs|s|m|l|xl> --solo-days N --ai-unguided-days N` before starting implementation.
+2. **Effort baseline**: `orchestra estimate --task <ID> --sizing <xs|s|m|l|xl> --solo-days N --ai-unguided-days N --ai-guided-days N` before starting implementation.
 3. **Autonomous run**: `orchestra workflow run --task <ID> --gates phase` to execute the PM→PO→Architect→Developer→QA→Release phase sequence.
 4. **Sizing decision**: `orchestra decision add --task <ID> --owner architect --title "Story sizing" --decision "<sizing> [N points]" ...` is required before the developer phase proceeds.
 5. **Architect sizing format**: always use `"<xs|s|m|l|xl> [N points]"` in `--decision` so the sizing gate reads it correctly (e.g. `"m [5 points]"`).
@@ -169,7 +169,7 @@ Do NOT start implementation without a registered task and workflow run. Use `orc
 - Correct mistakes directly without apologizing.
 - **No Ninja Edits.** Summarize proposed changes and get agreement before modifying files.
 
-<!-- open-orchestra:start block-id="runtime-bootstrap" generator="open-orchestra runtime bootstrap" version="1" target="claude" source-manifest="open-orchestra command-manifest,runtime-bootstrap" content-sha256="af9e26eb55d14bc7d504c357f6fe6e996eaa2ea1ffb45a830afa15b1885fff8a" updated-at="2026-05-06T22:12:14.883Z" -->
+<!-- open-orchestra:start block-id="runtime-bootstrap" generator="open-orchestra runtime bootstrap" version="1" target="claude" source-manifest="open-orchestra command-manifest,runtime-bootstrap" content-sha256="8ad91f1f2db994b21271bd101fe3902b70140366dd9f4f866f99c36a4a3d290f" updated-at="2026-05-13T20:55:31.305Z" -->
 # Open Orchestra Runtime Bootstrap
 
 Runtime target: Claude. Reference compact Open Orchestra blocks from CLAUDE.md and load task skills on demand.
@@ -196,7 +196,7 @@ Use the correct owner role for the type of work:
 
 ### Step 2 — Declare effort baseline
 ```
-orchestra estimate --task <ID> --sizing <xs|s|m|l|xl> --solo-days <N> --ai-unguided-days <N>
+orchestra estimate --task <ID> --sizing <xs|s|m|l|xl> --solo-days <N> --ai-unguided-days <N> --ai-guided-days <N>
 ```
 
 ### Step 3 — Run the autonomous workflow
@@ -229,24 +229,26 @@ orchestra benchmark --task <ID>
 ```
 
 ## Active Work
-- Run `orchestra health --json`.
-- Run `orchestra task list --json` and identify the active task.
+- At session start, run `orchestra health --json` before implementation or file edits.
+- Run `orchestra task list --json --status pending,blocked,in_progress` and identify resumable work before creating a new task.
 - For the active task, run context, delegation, plan, skills, protocol, and workflow render commands.
+- Run `orchestra validate --pre-run --task <ID> --json` before implementation; resolve missing estimate, workflow run, evidence, or review checks.
+- If a user accepts a smaller/advisory path, record it with `orchestra validate --pre-run --task <ID> --bypass --bypass-rationale "..."`.
 
 ## Task Loop
 - `orchestra health` - Check local tools and workflow readiness.
 - `orchestra task list` - List local workflow tasks.
-- `orchestra context --task <id>` - Read task context bundle.
 - `orchestra delegation decide --task <id>` - Decide whether to delegate.
-- `orchestra plan --task <id>` - Render role execution plan.
 - `orchestra skills plan --task <id>` - Select task-scoped skills.
-- `orchestra skills render --target <target>` - Render skills for a runtime.
+- `orchestra skills render --target <generic|claude|cursor|codex|vscode|windsurf>` - Render skills for a runtime.
 - `orchestra protocol render` - Render subagent protocol.
 - `orchestra workflow render --task <id>` - Render workflow templates.
-- `orchestra evidence add --task <id> --role <role> --type <type> --summary <text>` - Record delivery evidence.
-- `orchestra review --task <id> --role <role> --result <approve|block|changes> --findings <text> --recommendation <text>` - Record reviewer outcome.
-- `orchestra gate --gate <id> --task <id>` - Evaluate workflow gate.
 - `orchestra summary` - Summarize workspace state.
+- `orchestra context --task <id>` - Read task context bundle.
+- `orchestra plan --task <id>` - Render role execution plan.
+- `orchestra gate --gate <architecture> --task <id>` - Evaluate workflow gate.
+- `orchestra review --task <id> --role <role> --result <approve|block|changes> --findings <text> --recommendation <text>` - Record reviewer outcome.
+- `orchestra evidence add --task <id> --role <role> --type <command|file|screenshot|trace|video|log|report> --summary <text>` - Record delivery evidence.
 
 ## Completion
 - Run the project validation gate.

package/README.md

@@ -10,19 +10,34 @@ published install target.
 
 ## Quick Start
 
+### First Visible Value
+
 ```bash
 npm install -g @jterrats/open-orchestra
 orchestra init
 orchestra health --json
-orchestra task add --id DEMO-001 --title "Ship a governed change" --owner product_owner --paths "README.md"
-orchestra estimate --task DEMO-001 --sizing s --solo-days 1 --ai-unguided-days 0.5
-orchestra decision add --task DEMO-001 --owner architect --title "Story sizing" --decision "s 2 points" --context "First governed task" --consequences "Developer phase can start"
+orchestra task add --id DEMO-001 --title "Ship a governed README update" --owner developer --paths "README.md"
 orchestra workflow run --task DEMO-001 --gates none
-orchestra evidence add --task DEMO-001 --role developer --type command --summary "Workflow completed"
-orchestra review --task DEMO-001 --role qa --result approve --findings "Evidence is present" --recommendation "Ready for release review"
+orchestra status
 orchestra release candidate --dry-run --json
 ```
 
+Success metric: a first-time user reaches a completed local workflow run and a
+release-candidate preview in under ten minutes, without configuring provider
+credentials or learning every gate type.
+
+### Governed Production Path
+
+```bash
+orchestra task add --id STORY-001 --title "Ship a governed change" --owner product_owner --paths "README.md"
+orchestra estimate --task STORY-001 --sizing s --solo-days 1 --ai-unguided-days 0.5 --ai-guided-days 0.25
+orchestra decision add --task STORY-001 --owner architect --title "Story sizing" --decision "s 2 points" --context "Production story" --consequences "Developer phase can start"
+orchestra workflow run --task STORY-001 --gates phase
+orchestra evidence add --task STORY-001 --role developer --type command --summary "Validation passed" --command "npm run precommit" --exit-code 0
+orchestra review --task STORY-001 --role qa --result approve --findings "Acceptance criteria covered" --recommendation "Ready for release review"
+orchestra release check --json
+```
+
 Stable installs use `npm install -g @jterrats/open-orchestra@latest`. Beta
 dogfooding uses `npm install -g @jterrats/open-orchestra@beta`, followed by:
 
@@ -41,9 +56,10 @@ orchestra advisory convert --json
 When developing Open Orchestra from this repository, use `npm install`,
 `npm run build`, and `node bin/orchestra.js ...` to exercise the local source.
 
-The short path is: initialize workflow files, create a task, declare effort,
-record architect sizing, run the governed workflow, attach evidence/reviews, and
-check release readiness. For a disposable fake-provider walkthrough, see
+The short path is: initialize workflow files, create a task, run the local
+workflow, inspect status, and preview release readiness. The production path adds
+explicit estimates, architecture sizing, human gates, command evidence, QA
+review, and release checks. For a disposable fake-provider walkthrough, see
 [docs/end-to-end-demo.md](docs/end-to-end-demo.md).
 
 ## Core Product Surface
@@ -56,9 +72,13 @@ Start with the small command set that supports production delivery:
   `orchestra evidence add`, `orchestra review`.
 - Tracker and release: `orchestra github sync --issue <number>`,
   `orchestra release check --json`, `orchestra upgrade --smoke --json`.
+- Workflow tooling: `orchestra workflow phase-plan --task <id>`,
+  `orchestra refresh --check --json`, `orchestra cursor canvas status --json`.
 
-Use `orchestra commands manifest --json` for the complete machine-readable
-reference. See [docs/core-command-surface.md](docs/core-command-surface.md) and
+Use `orchestra -h` for the human quickstart and `orchestra help commands` for
+the full command catalog. Use `orchestra commands manifest --json` for the
+complete machine-readable reference. See
+[docs/core-command-surface.md](docs/core-command-surface.md) and
 [docs/command-contracts.md](docs/command-contracts.md) for the stable/advanced
 split and automation contract.
 
@@ -73,6 +93,27 @@ management.
 For package naming rules, see [docs/package-naming.md](docs/package-naming.md).
 For tracker fallback behavior when `gh` is unavailable, see
 [docs/tracker-adapter-contract.md](docs/tracker-adapter-contract.md).
+For the 1.0.0 documentation path across install, workflow, providers,
+trackers, web console, release operations, troubleshooting, and migration, see
+[docs/adoption-guide.md](docs/adoption-guide.md).
+
+## 1.0.0 Workflow Tooling
+
+The 1.0.0 workflow surface keeps the CLI as the source of truth while making
+generated files and runtime views easier to audit:
+
+- `orchestra workflow phase-plan --task <id> --json` recommends optional UX,
+  docs, release, and risk-owner phases from task scope and project signals.
+- Phase playbooks live in `.agent-workflow/playbooks/` and are loaded only for
+  the active phase in provider prompts, `workflow render`, runtime briefs, and
+  runtime delegation packets.
+- `orchestra refresh --check --json` detects stale generated instruction files;
+  `orchestra refresh --dry-run` previews changes; `orchestra refresh --force`
+  updates managed blocks without overwriting user-authored content.
+- Provider progress is visible in `workflow run` output and the local web
+  console through `/api/workflow/progress`.
+- `orchestra cursor canvas status|sync|clean --json` is a Cursor-specific local
+  bridge. It is optional and separate from portable runtime bootstrap files.
 
 ## Supported Platforms
 
@@ -92,10 +133,33 @@ production release is ready only after the local precommit gate and CI
 installed-package dogfood pass on Ubuntu, macOS, and Windows for the current
 HEAD.
 
+For the `1.0.0` milestone, `orchestra release check --json` also reports a
+`gaReadiness` go/no-go section. GA blockers include uncovered acceptance
+criteria, blocking reviews, active locks, missing smoke or rollback evidence,
+missing documentation or observability evidence, missing security and package
+provenance evidence, missing public CLI contract evidence, missing migration
+readiness evidence, missing release test matrix evidence, and accepted risks
+without a follow-up or expiry.
+
+The release test matrix is available with:
+
+```bash
+npm run release:matrix -- --json
+```
+
+See [docs/release-test-matrix.md](docs/release-test-matrix.md).
+
 ## Autonomous Workflow
 
 The `workflow run` command executes a full story lifecycle as a governed multi-phase sequence without manual step-by-step commands. Each phase creates a sub-task, generates handoff artifacts, and persists state in an append-only run log.
 
+Use `orchestra workflow run` when you want Orchestra to drive the complete
+delivery lifecycle: PM, PO, Architect, Developer, QA, and Release, including
+phase gates and resumable run state. Use `orchestra run` only when you want to
+execute the already computed local task plan; it does not run the full
+multi-phase lifecycle and should not be treated as a replacement for workflow
+gates or release evidence.
+
 ```
 PM → PO [gate] → Architect [sizing gate] → Developer → QA [gate] → Release
 ```
@@ -161,6 +225,7 @@ orchestra estimate \
   --sizing m \
   --solo-days 5 \
   --ai-unguided-days 3 \
+  --ai-guided-days 2 \
   --confidence high
 ```
 
@@ -180,9 +245,11 @@ Benchmark: FEAT-001  [complete]
   Sizing:      m
   Solo:        5d  (declared)
   AI-unguided: 3d  (declared)
+  AI-guided:   2d  (declared)
   Actual:      1.4d
   vs Solo:     -72%
-  vs AI:       -53%
+  vs AI-U:     -53%
+  vs AI-G:     -30%
   QA loops:    1
   Reviews:     3 (0 blocking)
   Evidence:    5 artifacts

package/dist/assets/web-console.js

@@ -21,18 +21,23 @@ var endpoints = [
   ["graph", "/api/graph/plan"],
   ["roles", "/api/roles"],
   ["evidence", "/api/evidence"],
+  ["reviews", "/api/reviews"],
+  ["decisions", "/api/decisions"],
+  ["providerHealth", "/api/provider/health"],
   ["approvals", "/api/approvals"],
   ["usage", "/api/usage"],
   ["budget", "/api/budget"],
   ["tasks", "/api/tasks"],
   ["workflowRuns", "/api/workflow/runs"],
+  ["workflowProgress", "/api/workflow/progress"],
   ["evidenceView", "/api/evidence/view"],
   ["roleActivation", "/api/roles/activation"],
   ["skills", "/api/skills"],
   ["sources", "/api/sources"],
   ["lessons", "/api/lessons"],
   ["workspaceClassification", "/api/workspace/classification"],
-  ["runtimeAdapters", "/api/runtime/adapters"]
+  ["runtimeAdapters", "/api/runtime/adapters"],
+  ["runtimeInvocationPlans", "/api/runtime/invocation-plans"]
 ];
 var statePill = document.querySelector("#load-state");
 var lastUpdated = document.querySelector("#last-updated");
@@ -43,6 +48,10 @@ var validation = document.querySelector("#validation");
 var workspaceView = document.querySelector("#workspace-view");
 var graph = document.querySelector("#graph");
 var actions = document.querySelector("#actions");
+var taskBoard = document.querySelector("#task-board");
+var providerHealth = document.querySelector("#provider-health");
+var decisionsList = document.querySelector("#decisions-list");
+var reviewsList = document.querySelector("#reviews-list");
 var taskDetailSelect = document.querySelector("#task-detail-select");
 var taskDetail = document.querySelector("#task-detail");
 var taskOwner = document.querySelector("#task-owner");
@@ -142,9 +151,17 @@ function render(data) {
   renderValidation(data.validation);
   renderAdoptionGuide(data);
   renderReleaseReadiness(data);
-  renderWorkspace(data.workspaceClassification, data.runtimeAdapters);
+  renderWorkspace(
+    data.workspaceClassification,
+    data.runtimeAdapters,
+    data.runtimeInvocationPlans
+  );
   renderGraph(data.graph);
   renderActions(data);
+  renderTaskBoard(data.tasks, data.workflowProgress);
+  renderProviderHealth(data.providerHealth);
+  renderEventList(decisionsList, data.decisions, "No decisions recorded");
+  renderEventList(reviewsList, data.reviews, "No reviews recorded");
   renderTaskDetailControls(data.tasks);
   renderTaskWriteControls(data.roles);
   renderCharts(data);
@@ -153,7 +170,7 @@ function render(data) {
   renderRoles(data.roleActivation);
   renderPlanning(data.roleActivation);
   renderWorkflowControls(data.tasks, data.workflowRuns);
-  renderWorkflowRuns(data.workflowRuns);
+  renderWorkflowRuns(data.workflowRuns, data.workflowProgress);
   renderCost(data.usage, data.budget);
   renderPlaywrightTasks(data.tasks);
   renderSkillControls(data);
@@ -466,28 +483,40 @@ function renderReleaseReadiness(data) {
 }
 function readinessRow(ok, title, detail) {
   const node = listItem(title, detail);
-  const tag = document.createElement("span");
-  tag.className = ok ? "tag ok" : "tag warn";
-  tag.textContent = ok ? "ready" : "attention";
+  const tag2 = document.createElement("span");
+  tag2.className = ok ? "tag ok" : "tag warn";
+  tag2.textContent = ok ? "ready" : "attention";
   const row = document.createElement("div");
   row.className = "tag-row";
-  row.append(tag);
+  row.append(tag2);
   node.append(row);
   return node;
 }
-function renderWorkspace(classification, adapters) {
+function renderWorkspace(classification, adapters, invocationPlans) {
   const adapterNames = adapters.map(function(adapter) {
     return adapter.label;
   });
+  const executablePlan = invocationPlans.find(function(plan) {
+    return plan.gated.command;
+  });
   replace(workspaceView, [
     listItem(
       classification.kind + " workspace",
       classification.recommendedAction
     ),
     listItem("Write policy", classification.writePolicy),
-    listItem("Runtime targets", adapterNames.join(", "))
+    listItem("Runtime targets", adapterNames.join(", ")),
+    listItem(
+      "Runtime invocation",
+      executablePlan ? formatInvocationPlan(executablePlan.gated) : "brief-only"
+    )
   ]);
 }
+function formatInvocationPlan(plan) {
+  const command = [plan.command].concat(plan.args).join(" ");
+  const status = plan.canExecute ? "enabled" : "planning only";
+  return command + " (" + plan.permissionMode + ", " + status + ")";
+}
 function renderCharts(data) {
   const chartData = buildDashboardChartData(data);
   const hasChartData = chartData.taskStatus.length > 0 || chartData.graphState.length > 0 || chartData.costByProvider.length > 0;
@@ -581,10 +610,17 @@ function renderWorkflowControls(tasks, runs) {
   );
   document.querySelector("#workflow-start").disabled = !workflowTask.value || runningTaskIds.has(workflowTask.value);
 }
-function renderWorkflowRuns(runs) {
+function renderWorkflowRuns(runs, progress) {
+  const progressByRun = new Map(
+    (progress || []).map(function(item) {
+      return [item.runId, item];
+    })
+  );
   replace(
     workflowRuns,
-    runs.length > 0 ? runs.slice(0, 8).map(workflowRunItem) : [
+    runs.length > 0 ? runs.slice(0, 8).map(function(run) {
+      return workflowRunItem(run, progressByRun.get(run.id));
+    }) : [
       empty(
         "No workflow runs yet",
         "Start a task workflow to track phases, gates, and handoffs."
@@ -592,19 +628,24 @@ function renderWorkflowRuns(runs) {
     ]
   );
 }
-function workflowRunItem(run) {
+function workflowRunItem(run, progress) {
   const phases = (run.phases || []).map(function(phase) {
     return phase.phase + ":" + phase.status;
   }).join(" -> ");
-  const node = listItem(
-    run.id + " [" + run.status + "]",
-    run.taskId + " - gates " + run.gates + (phases ? " - " + phases : "")
-  );
+  const activeProgress = [...run.phases || []].reverse().find(function(phase) {
+    return phase.providerProgress && phase.providerProgress.status === "running";
+  })?.providerProgress;
+  const progressText = activeProgress ? " - provider " + activeProgress.provider + "/" + activeProgress.model + " elapsed " + formatWorkflowElapsed(activeProgress) : "";
+  const progressDetail = progress ? workflowProgressDetail(progress) : run.taskId + " - gates " + run.gates + (phases ? " - " + phases : "") + progressText;
+  const node = listItem(run.id + " [" + run.status + "]", progressDetail);
   const pausedGate = [...run.phases || []].reverse().find(function(phase) {
     return phase.status === "gate_paused";
   });
   const row = document.createElement("div");
   row.className = "tag-row";
+  workflowProgressTags(run, progress).forEach(function(item) {
+    row.append(item);
+  });
   if (pausedGate) {
     const approve = document.createElement("button");
     approve.className = "text-button";
@@ -626,9 +667,61 @@ function workflowRunItem(run) {
     resume.textContent = "Resume";
     row.append(resume);
   }
+  if (run.status === "running" || run.status === "paused") {
+    const cancel = document.createElement("button");
+    cancel.className = "text-button secondary";
+    cancel.type = "button";
+    cancel.dataset.workflowAction = "cancel";
+    cancel.dataset.run = run.id;
+    cancel.textContent = "Cancel";
+    row.append(cancel);
+  }
   node.append(row);
   return node;
 }
+function workflowProgressDetail(progress) {
+  const phase = progress.currentPhase ? progress.currentPhase + " (" + progress.currentRole + ")" : "No active phase";
+  const provider = progress.provider && progress.model ? " - provider " + progress.provider + "/" + progress.model : "";
+  const fallback = progress.fallbackState ? " - fallback " + progress.fallbackState : "";
+  const failure = progress.failureReason ? " - failure " + progress.failureReason : "";
+  return progress.taskId + " - gates " + progress.gates + " - " + progress.latestStatus + " - phase " + phase + " - " + progress.completedPhases + "/" + progress.totalPhases + " done - elapsed " + formatDuration(progress.elapsedMs) + provider + fallback + failure;
+}
+function workflowProgressTags(run, progress) {
+  if (!progress) {
+    return [tag(run.status, run.status === "failed" ? "warn" : "")];
+  }
+  const tags = [
+    tag(progress.status, progress.status === "failed" ? "warn" : "ok")
+  ];
+  if (progress.canApproveGate) {
+    tags.push(tag("gate paused", "warn"));
+  }
+  if (progress.canResume) {
+    tags.push(tag("resumable", "warn"));
+  }
+  if (progress.provider) {
+    tags.push(tag(progress.provider + "/" + progress.model, ""));
+  }
+  return tags;
+}
+function tag(text, tone) {
+  const node = document.createElement("span");
+  node.className = ["tag", tone].filter(Boolean).join(" ");
+  node.textContent = text;
+  return node;
+}
+function formatWorkflowElapsed(progress) {
+  const startedAt = Date.parse(progress.startedAt);
+  const elapsed = Number.isFinite(startedAt) ? Date.now() - startedAt : progress.elapsedMs || 0;
+  return formatDuration(elapsed);
+}
+function formatDuration(elapsed) {
+  if (elapsed < 1e3) return elapsed + "ms";
+  if (elapsed < 6e4) return (elapsed / 1e3).toFixed(1) + "s";
+  const minutes = Math.floor(elapsed / 6e4);
+  const seconds = Math.floor(elapsed % 6e4 / 1e3);
+  return minutes + "m" + String(seconds).padStart(2, "0") + "s";
+}
 async function startWorkflowFromWeb() {
   if (!workflowTask.value) {
     setLoading("Select a task to start workflow", "warn");
@@ -659,6 +752,10 @@ async function handleWorkflowAction(event) {
   }
   if (button.dataset.workflowAction === "resume") {
     await resumeWorkflowFromWeb(button);
+    return;
+  }
+  if (button.dataset.workflowAction === "cancel") {
+    await cancelWorkflowFromWeb(button);
   }
 }
 async function approveWorkflowGateFromWeb(button) {
@@ -693,6 +790,21 @@ async function resumeWorkflowFromWeb(button) {
   }
   await loadDashboard();
 }
+async function cancelWorkflowFromWeb(button) {
+  const response = await fetch("/api/workflow/cancel", {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({
+      run: button.dataset.run,
+      reason: "Canceled from web console"
+    })
+  });
+  if (!response.ok) {
+    setLoading("Workflow cancel failed", "warn");
+    return;
+  }
+  await loadDashboard();
+}
 function renderCost(usage, budget) {
   const rows = [
     listItem("Requests", String(usage.totals.requests)),
@@ -808,10 +920,10 @@ function renderRoles(report) {
       ["activationCriteria", "expectedEvidence", "gateParticipation"].forEach(
         function(field) {
           (entry.role[field] || []).slice(0, 3).forEach(function(value) {
-            const tag = document.createElement("span");
-            tag.className = "tag";
-            tag.textContent = value;
-            tags.append(tag);
+            const tag2 = document.createElement("span");
+            tag2.className = "tag";
+            tag2.textContent = value;
+            tags.append(tag2);
           });
         }
       );
@@ -859,10 +971,10 @@ function renderSkillCatalog(skills, sources) {
       const tags = document.createElement("div");
       tags.className = "tag-row";
       skill.sourceGroups.slice(0, 4).forEach(function(group) {
-        const tag = document.createElement("span");
-        tag.className = "tag";
-        tag.textContent = sourceMap.get(group) || group;
-        tags.append(tag);
+        const tag2 = document.createElement("span");
+        tag2.className = "tag";
+        tag2.textContent = sourceMap.get(group) || group;
+        tags.append(tag2);
       });
       node.append(tags);
       return node;
@@ -900,10 +1012,10 @@ async function loadSkillPlan() {
       const tags = document.createElement("div");
       tags.className = "tag-row";
       item.skill.sourceGroups.slice(0, 4).forEach(function(group) {
-        const tag = document.createElement("span");
-        tag.className = "tag";
-        tag.textContent = group;
-        tags.append(tag);
+        const tag2 = document.createElement("span");
+        tag2.className = "tag";
+        tag2.textContent = group;
+        tags.append(tag2);
       });
       node.append(tags);
       return node;
@@ -944,10 +1056,10 @@ function renderSourceCatalog(sources) {
       const tags = document.createElement("div");
       tags.className = "tag-row";
       source.locations.forEach(function(location) {
-        const tag = document.createElement("span");
-        tag.className = "tag";
-        tag.textContent = location;
-        tags.append(tag);
+        const tag2 = document.createElement("span");
+        tag2.className = "tag";
+        tag2.textContent = location;
+        tags.append(tag2);
       });
       node.append(tags);
       return node;
@@ -971,10 +1083,10 @@ function renderLessons(lessons) {
       tags.className = "tag-row";
       const appliesTo = Array.isArray(lesson.appliesTo) ? lesson.appliesTo : [];
       appliesTo.slice(0, 4).forEach(function(tool) {
-        const tag = document.createElement("span");
-        tag.className = "tag";
-        tag.textContent = tool;
-        tags.append(tag);
+        const tag2 = document.createElement("span");
+        tag2.className = "tag";
+        tag2.textContent = tool;
+        tags.append(tag2);
       });
       node.append(tags);
       return node;
@@ -1214,6 +1326,61 @@ function renderActions(data) {
     ]
   );
 }
+function renderTaskBoard(tasks, progressItems) {
+  const progressByTask = new Map(
+    (progressItems || []).map(function(item) {
+      return [item.taskId, item];
+    })
+  );
+  replace(
+    taskBoard,
+    tasks.length > 0 ? tasks.map(function(task) {
+      const progress = progressByTask.get(task.id);
+      const detail = [
+        task.status,
+        "owner " + task.ownerRole,
+        task.backlogItem ? "issue " + task.backlogItem : "no issue",
+        (task.paths || []).length > 0 ? "paths " + task.paths.slice(0, 3).join(", ") : "no paths",
+        progress?.currentPhase ? "phase " + progress.currentPhase : ""
+      ].filter(Boolean).join(" - ");
+      return listItem(task.id + " - " + task.title, detail);
+    }) : [empty("No tasks", "Create a task to populate the board.")]
+  );
+}
+function renderProviderHealth(providers) {
+  replace(
+    providerHealth,
+    providers.length > 0 ? providers.map(function(provider) {
+      const node = listItem(
+        provider.scope + " " + provider.provider + "/" + provider.model,
+        provider.detail + " - timeout " + provider.timeoutMs + "ms - fallbacks " + (provider.fallbacks.length > 0 ? provider.fallbacks.join(", ") : "none")
+      );
+      const row = document.createElement("div");
+      row.className = "tag-row";
+      row.append(
+        tag(provider.status, provider.status === "pass" ? "ok" : "warn")
+      );
+      node.append(row);
+      return node;
+    }) : [
+      empty(
+        "No provider routing",
+        "Configure model providers to see health."
+      )
+    ]
+  );
+}
+function renderEventList(target, events, emptyText) {
+  replace(
+    target,
+    events.length > 0 ? events.slice(0, 8).map(function(event) {
+      return listItem(
+        event.taskId ? event.taskId + " - " + event.summary : event.summary,
+        event.actor + " - " + new Date(event.timestamp).toLocaleString()
+      );
+    }) : [empty(emptyText, "No matching workflow events were found.")]
+  );
+}
 function metric(value, label) {
   const node = document.createElement("div");
   node.className = "metric";