@monster-orange/den 0.4.26 → 0.4.28

package/src/ui/server/public/transcript-view.js

@@ -0,0 +1,202 @@
+/**
+ * A read-only transcript view, shared (D32: a helper's transcript; later
+ * an agent's own). Items are { at?, kind: prompt|text|tool|result|note,
+ * tool?, text, error? }, as the server summarizes them: tool calls in a few
+ * words, their results under them, never thinking.
+ *
+ * openTranscript({ title, subtitle?, note?, load, opener? }) shows it in a
+ * modal <dialog> of its own (made once, kept in <body>): labelled, focus on
+ * its heading, Escape or Close gives focus back to the opener. `load()`
+ * resolves { items, omitted } (or rejects with an Error to show).
+ */
+
+const t = (key, vars) => window.denShell?.t?.(key, vars) ?? key;
+const esc = (s) =>
+  String(s ?? "").replace(
+    /[&<>"']/g,
+    (c) =>
+      ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[
+        c
+      ],
+  );
+
+const time = (ms) => {
+  if (typeof ms !== "number") return "";
+  try {
+    return new Date(ms).toLocaleTimeString([], {
+      hour: "2-digit",
+      minute: "2-digit",
+      second: "2-digit",
+    });
+  } catch {
+    return "";
+  }
+};
+
+/** The items as a list (no dialog): for a page that shows them in place. */
+export function transcriptHtml(items, { omitted = 0 } = {}) {
+  const rows = (items ?? []).map((i) => {
+    const at = i.at
+      ? `<time class="tx-at" datetime="${esc(new Date(i.at).toISOString())}">${esc(time(i.at))}</time>`
+      : "";
+    if (i.kind === "tool")
+      return `<li class="tx-i tx-tool">${at}<span class="tx-k">${esc(i.tool || "tool")}</span><span class="tx-t mono">${esc(i.text)}</span></li>`;
+    if (i.kind === "result")
+      return `<li class="tx-i tx-res${i.error ? " err" : ""}">${at}<span class="tx-k" aria-label="${esc(t(i.error ? "tx.error" : "tx.result"))}">${i.error ? "✗" : "←"}</span><span class="tx-t mono">${esc(i.text)}</span></li>`;
+    if (i.kind === "prompt")
+      return `<li class="tx-i tx-prompt">${at}<span class="tx-k">${esc(t("tx.asked"))}</span><span class="tx-t">${esc(i.text)}</span></li>`;
+    if (i.kind === "note")
+      return `<li class="tx-i tx-note"><span class="tx-t">${esc(i.text)}</span></li>`;
+    return `<li class="tx-i tx-text">${at}<span class="tx-t">${esc(i.text)}</span></li>`;
+  });
+  return (
+    (omitted
+      ? `<p class="tx-omit">${esc(t("tx.omitted", { n: omitted }))}</p>`
+      : "") +
+    (rows.length
+      ? `<ol class="tx-list">${rows.join("")}</ol>`
+      : `<p class="tx-empty">${esc(t("tx.empty"))}</p>`)
+  );
+}
+
+const CSS = `
+.tx-dlg{font-family:var(--sans);box-shadow:var(--shadow);width:min(860px,calc(100vw - 32px));max-height:calc(100vh - 48px);padding:0;border:1px solid var(--border-strong);border-radius:10px;background:var(--raised, var(--surface));color:var(--text)}
+.tx-dlg::backdrop{background:rgba(0,0,0,.35)}
+.tx-hd{display:flex;gap:8px;align-items:baseline;padding:12px 16px;border-bottom:1px solid var(--border)}
+.tx-hd h2{font-size:15px;margin:0;outline:none;min-width:0;overflow-wrap:anywhere}
+.tx-sub{color:var(--muted);font-size:12px;min-width:0;overflow-wrap:anywhere}
+.tx-hd .x{margin-left:auto;flex:none}
+.tx-body{padding:8px 16px 4px;overflow:auto;max-height:calc(100vh - 200px)}
+.tx-note{margin:0;padding:8px 16px 12px;color:var(--muted);font-size:12px;border-top:1px solid var(--border)}
+.tx-list{list-style:none;margin:0;padding:0}
+.tx-i{display:grid;grid-template-columns:auto auto 1fr;gap:4px 8px;padding:4px 0;font-size:13px;align-items:baseline;border-bottom:1px dashed var(--border)}
+.tx-i:last-child{border-bottom:0}
+.tx-at{color:var(--faint);font-size:11px;font-variant-numeric:tabular-nums}
+.tx-k{color:var(--muted);font-weight:600;font-size:12px}
+.tx-t{grid-column:3;min-width:0;overflow-wrap:anywhere;white-space:pre-wrap}
+.tx-text .tx-t,.tx-prompt .tx-t,.tx-note .tx-t{grid-column:2 / 4}
+.tx-text:not(:has(.tx-at)) .tx-t,.tx-note .tx-t{grid-column:1 / 4}
+.tx-t.mono{font-family:var(--mono);font-size:12px}
+.tx-res .tx-t{color:var(--muted)}
+.tx-res.err .tx-k,.tx-res.err .tx-t{color:var(--bad)}
+.tx-omit,.tx-empty{color:var(--muted);font-size:12px}
+@media (max-width:520px){.tx-i{grid-template-columns:auto 1fr}.tx-at{display:none}.tx-t{grid-column:2}.tx-text .tx-t,.tx-prompt .tx-t{grid-column:1 / 3}}
+`;
+
+let dlg = null;
+let opener = null;
+let openerKey = "";
+
+const q = (v) =>
+  typeof CSS !== "undefined" && CSS.escape
+    ? CSS.escape(String(v))
+    : String(v).replace(/["\\]/g, "\\$&");
+
+/**
+ * How to find `el` again once a page redraws it (the Agents page's poll
+ * replaces its rows and bars): a helper's row, an agent's "All helpers",
+ * a pane's Helpers button. "" for anything else.
+ */
+export function refindKey(el) {
+  if (!el || !el.matches) return "";
+  if (el.matches("button.agh[data-helper]"))
+    return `button.agh[data-helper="${q(el.dataset.helper)}"][data-agent="${q(el.dataset.agent)}"]`;
+  const g = el.closest?.(".aghs[data-helpers-of]");
+  if (g && el.matches(".aghs-all"))
+    return `.aghs[data-helpers-of="${q(g.dataset.helpersOf)}"][data-ws="${q(g.dataset.ws)}"] .aghs-all`;
+  const pane = el.closest?.(".pane[data-id]");
+  if (pane && el.matches('[data-act="helpers"]'))
+    return `.pane[data-id="${q(pane.dataset.id)}"] [data-act="helpers"]`;
+  return "";
+}
+
+/** Focus `el`, or, once it is gone, what `key` finds now (refindKey). */
+export function focusBack(el, key) {
+  if (el?.isConnected) return void el.focus?.();
+  if (!key) return;
+  const now = Array.from(document.querySelectorAll(key)).find(
+    (x) => !x.closest("dialog"),
+  );
+  now?.focus?.();
+}
+
+function dialog() {
+  if (dlg && dlg.isConnected) return dlg;
+  if (!document.getElementById("tx-css")) {
+    const s = document.createElement("style");
+    s.id = "tx-css";
+    s.textContent = CSS;
+    document.head.append(s);
+  }
+  dlg = document.createElement("dialog");
+  dlg.className = "tx-dlg";
+  dlg.id = "tx-dlg";
+  dlg.setAttribute("aria-labelledby", "tx-h");
+  dlg.innerHTML =
+    `<div class="tx-hd"><h2 id="tx-h" tabindex="-1"></h2><span class="tx-sub" id="tx-sub"></span>` +
+    `<button type="button" class="den-btn sm x" data-tx-close></button></div>` +
+    `<div class="tx-body" id="tx-body" aria-live="polite"></div>` +
+    `<p class="tx-note" id="tx-note" hidden></p>`;
+  dlg.querySelector("[data-tx-close]").addEventListener("click", () => close());
+  dlg.addEventListener("close", () => {
+    const o = opener;
+    const k = openerKey;
+    opener = null;
+    openerKey = "";
+    focusBack(o, k);
+  });
+  document.body.append(dlg);
+  return dlg;
+}
+
+function close() {
+  if (!dlg) return;
+  if (typeof dlg.close === "function" && dlg.open) dlg.close();
+  else {
+    dlg.removeAttribute("open");
+    dlg.dispatchEvent(new Event("close"));
+  }
+}
+
+/** Show a transcript (see the file's comment). Resolves once it is drawn. */
+export async function openTranscript({
+  title,
+  subtitle = "",
+  note = "",
+  load,
+  opener: from = null,
+}) {
+  const d = dialog();
+  opener = from ?? document.activeElement;
+  openerKey = refindKey(opener);
+  d.querySelector("#tx-h").textContent = title;
+  d.querySelector("#tx-sub").textContent = subtitle;
+  const x = d.querySelector("[data-tx-close]");
+  x.textContent = t("tx.close");
+  const n = d.querySelector("#tx-note");
+  n.textContent = note;
+  n.hidden = !note;
+  const body = d.querySelector("#tx-body");
+  body.setAttribute("aria-busy", "true");
+  body.innerHTML = `<p class="tx-empty">${esc(t("tx.loading"))}</p>`;
+  if (!d.open) {
+    if (typeof d.showModal === "function") d.showModal();
+    else d.setAttribute("open", "");
+  }
+  d.querySelector("#tx-h").focus();
+  try {
+    const r = await load();
+    body.innerHTML = transcriptHtml(r?.items, { omitted: r?.omitted ?? 0 });
+    // The newest lines are what a person opens it for.
+    body.scrollTop = body.scrollHeight;
+  } catch (e) {
+    body.innerHTML = `<p class="tx-empty" role="alert">${esc(t("tx.failed", { err: e?.message || String(e) }))}</p>`;
+  } finally {
+    body.removeAttribute("aria-busy");
+  }
+}
+
+/** Close the transcript view, if open (tests, page changes). */
+export function closeTranscript() {
+  close();
+}

package/src/ui/server/request-guard.ts

@@ -707,7 +707,9 @@ export function agentRefusal(
       AGENT_READ_ONLY.some((r) => pathMatches(r, pathname)))
   )
     return `${p.actor} can't use ${pathname}: signing in, web.secret and the admin password are a person's.`;
-  const m = SESSION_ROUTE.exec(pathname);
+  // D32's helpers count is the list's, no session's: read-grade.
+  const m =
+    pathname === "/api/sessions/helpers" ? null : SESSION_ROUTE.exec(pathname);
   if (m) {
     let id = m[1];
     try {

package/src/ui/server/route-classes.ts

@@ -172,6 +172,18 @@ export const ROUTES: readonly RouteEntry[] = [
     "/api/workspaces/:ws/agents/:id/paths",
     "which paths an agent printed exist in its workspace (stat only, AG-4b)",
   ),
+  R(
+    "/api/workspaces/:ws/agents/:id/helpers",
+    "D32: the helpers an agent started in its own session, read from the runtime's files (never written)",
+  ),
+  R(
+    "/api/workspaces/:ws/agents/:id/helpers/:helper",
+    "D32: one helper's transcript, tool calls summarized, read-only (no stop or steer)",
+  ),
+  R(
+    "/api/sessions/helpers",
+    "D32: how many helpers the agents have running (a count, for the rail's badge)",
+  ),
   R(
     "/api/sessions",
     "lists the sessions and agents (names and states, never their output)",
@@ -392,6 +404,20 @@ export const ROUTES: readonly RouteEntry[] = [
     "/api/hub",
     "HUB-1.5: Den Hub: its URL, connected or not, the team and the install's label (never the token)",
   ),
+  M(
+    ["POST"],
+    "/api/hub/connect",
+    "HUB-1.7: start Connect to Hub: a PKCE verifier and single-use state kept here; answers Hub's /connect URL",
+  ),
+  M(
+    ["POST"],
+    "/api/hub/disconnect",
+    "HUB-1.7: revoke this install's Hub token on Hub, then remove it here",
+  ),
+  R(
+    "/hub/callback",
+    "HUB-1.7: Hub sends the person back here. Sign-in free: the session cookie is SameSite=Strict, so Hub's redirect doesn't carry it. It acts only for a state this server issued to a signed-in Connect (single-use, 10 min), with the PKCE verifier only this server holds; anything else changes nothing",
+  ),
   M(
     ["PUT"],
     "/api/agents/rotation",
@@ -488,6 +514,9 @@ export const SIGNIN_FREE: readonly string[] = [
   // SEC-2a: approve this computer with a code, from the signed-out page.
   "/api/signin/code",
   "/api/signin/code/:id",
+  // HUB-1.7: Hub's redirect back (no session cookie on it): the state
+  // this server issued is the proof (hub-connect.ts).
+  "/hub/callback",
 ];
 
 /**
@@ -533,6 +562,10 @@ export const REGEX_ROUTES: Readonly<Record<string, readonly string[]>> = {
   "agent-routes.ts:RUNTIME_PATH": ["/api/agents/runtimes/:id/path"],
   "agent-routes.ts:PERSONA_PATH": ["/api/personas/:id"],
   "agent-routes.ts:PLAIN_PATH": ["/api/workspaces/:ws/sessions"],
+  "agent-routes.ts:HELPERS_PATH": [
+    "/api/workspaces/:ws/agents/:id/helpers",
+    "/api/workspaces/:ws/agents/:id/helpers/:helper",
+  ],
   "agent-routes.ts:CONVERSATIONS_PATH": [
     "/api/workspaces/:ws/conversations",
     "/api/workspaces/:ws/conversations/:id/import",

package/src/ui/server/session-routes.ts

@@ -64,7 +64,16 @@ import { parseSessionName } from "../../shared/sessions/names.js";
 import { sessionPaths } from "../../shared/sessions/paths.js";
 import { loadPty, type PtyLoad } from "../../shared/sessions/pty.js";
 import type { SessionInfo } from "../../shared/sessions/types.js";
-import { agentRows, newerOf, noteEnded } from "../cli/agent-ops.js";
+import type { HelperSettings } from "../../shared/agents/helpers.js";
+import { readAgentsConfig } from "../../shared/den-config.js";
+import {
+  agentRows,
+  isStoppedState,
+  newerOf,
+  noteEnded,
+  rowHelpers,
+  type AgentRow,
+} from "../cli/agent-ops.js";
 import type { AgentRecord, Override } from "../../shared/agents/records.js";
 import { state as sessionState } from "../cli/sessions-command.js";
 import { recordAction } from "./audit.js";
@@ -91,6 +100,8 @@ export interface SessionRouteDeps {
   waitingAgents?: () => ReadonlySet<string>;
   /** D28: each agent's effective rotation settings (one resolver per list). */
   rotationPolicy?: () => (rec: AgentRecord) => RotationPolicy | undefined;
+  /** D32: agents.helpers (default: the agents config's, else its defaults). */
+  helperSettings?: () => HelperSettings | undefined;
 }
 
 interface Resolved {
@@ -102,6 +113,7 @@ interface Resolved {
   pty: () => PtyLoad;
   waitingAgents: () => ReadonlySet<string>;
   rotationPolicy?: SessionRouteDeps["rotationPolicy"];
+  helperSettings: () => HelperSettings | undefined;
 }
 
 /** A workspace name as `?ws=` may give it. */
@@ -122,6 +134,15 @@ function resolve(d: SessionRouteDeps = {}): Resolved {
           throw e;
         }
       }),
+    helperSettings:
+      d.helperSettings ??
+      (() => {
+        try {
+          return readAgentsConfig().helpers;
+        } catch {
+          return undefined;
+        }
+      }),
     activeWorkspaces: d.activeWorkspaces ?? (() => getActiveWorkspaces()),
     workspaceExists:
       d.workspaceExists ??
@@ -209,6 +230,8 @@ export interface ListedSession {
   rotation?: RotationInfo;
   /** D28: the last relaunch from a handoff (the page toasts one Den did by itself). */
   lastRotation?: RotationEntry;
+  /** D32: its helpers (counts and the recent ones). */
+  helpers?: AgentRow["helpers"];
 }
 
 /** The list, from the host's sessions and the agent records. */
@@ -216,6 +239,7 @@ export function listedSessions(
   sessions: SessionInfo[],
   d: Pick<Resolved, "stateDir" | "dist" | "activeWorkspaces"> &
     Partial<Pick<Resolved, "waitingAgents">> &
+    Partial<Pick<Resolved, "helperSettings">> &
     Pick<SessionRouteDeps, "rotationPolicy">,
   /** A workspace asked for by name (`?ws=`), listed even when inactive. */
   also?: string,
@@ -237,6 +261,7 @@ export function listedSessions(
   const out: ListedSession[] = [];
   const agentSessions = new Set<string>();
   noteEnded(d.stateDir(), mine, records);
+  const helperSettings = d.helperSettings?.();
   for (const r of agentRows(
     mine,
     records,
@@ -283,6 +308,11 @@ export function listedSessions(
       ...(r.lastRotation ? { lastRotation: r.lastRotation } : {}),
       ...(revoked.has(rec.id) && s && !s.exited ? { tokenRevoked: true } : {}),
       ...(waiting.has(rec.id) && s && !s.exited ? { waiting: true } : {}),
+      // D32: the helpers it started in its own session.
+      ...(() => {
+        const h = rowHelpers(rec, !isStoppedState(r.state), helperSettings);
+        return h ? { helpers: h } : {};
+      })(),
     });
   }
   for (const s of mine) {
@@ -311,6 +341,9 @@ export function listedSessions(
   );
 }
 
+/** D32: the helpers count, under /api/sessions/ but no session's route. */
+export const SESSION_HELPERS_PATH = "/api/sessions/helpers";
+
 /**
  * `GET /api/sessions`; false when `pathname` isn't it. `ioAllowed` is what
  * the request checks say about this browser: beyond loopback without a
@@ -323,6 +356,8 @@ export async function handleSessionList(
   ioAllowed: boolean,
   deps: SessionRouteDeps = {},
 ): Promise<boolean> {
+  if (pathname === "/api/sessions/helpers")
+    return helpersRunning(req, res, deps);
   if (pathname !== "/api/sessions") return false;
   if (req.method !== "GET" && req.method !== "HEAD") {
     res.setHeader("Allow", "GET");
@@ -660,3 +695,38 @@ export async function handleSessionUpgrade(
     detach();
   });
 }
+
+/**
+ * D32: `GET /api/sessions/helpers`: how many helpers the active
+ * workspaces' agents have running now, `{ running }` (the rail's Agents
+ * badge on every page). Names and counts only, never a transcript.
+ */
+async function helpersRunning(
+  req: http.IncomingMessage,
+  res: http.ServerResponse,
+  deps: SessionRouteDeps,
+): Promise<true> {
+  if (req.method !== "GET" && req.method !== "HEAD") {
+    res.setHeader("Allow", "GET");
+    sendJson(res, { ok: false, error: "method not allowed" }, 405);
+    return true;
+  }
+  const d = resolve(deps);
+  let sessions: SessionInfo[] = [];
+  try {
+    const c = await d.connectExisting();
+    if (c)
+      try {
+        sessions = await c.list();
+      } finally {
+        c.close();
+      }
+  } catch {
+    /* no host: nothing runs, so no helper runs */
+  }
+  let running = 0;
+  for (const r of listedSessions(sessions, d))
+    running += r.helpers?.running ?? 0;
+  sendJson(res, { running });
+  return true;
+}

package/src/ui/server/ui-assets.ts

@@ -34,6 +34,9 @@ export const UI_MODULES: readonly string[] = [
   "/error-page.js",
   "/agents-section.js",
   "/agents-page.js",
+  // D32: an agent's helpers, and the shared read-only transcript view.
+  "/agent-helpers.js",
+  "/transcript-view.js",
   // The Start agent form's choices, shared by both (AG-10.0).
   "/agent-start.js",
   // AG-10.4-10.7: the persona picker, editor and Settings › Personas.