@nordbyte/nordrelay 0.8.2 → 0.8.3

package/dist/runtime/relay-runtime-helpers.js

@@ -97,6 +97,7 @@ export function taskToUnifiedJob(id, kind, title, task, options) {
         startedAt: task.startedAt,
         updatedAt: task.updatedAt,
         durationMs: task.durationMs,
+        correlationId: task.correlationId,
         summary: task.prompt || task.detail,
         logTail: task.currentTool || task.lastTool ? `Current tool: ${task.currentTool ?? "-"}\nLast tool: ${task.lastTool ?? "-"}` : undefined,
         ...options,
@@ -117,6 +118,7 @@ export function activityToUnifiedJob(event, kind, title, options) {
         updatedAt: event.timestamp,
         finishedAt: event.timestamp,
         durationMs: event.durationMs,
+        correlationId: event.correlationId,
         summary: event.prompt || event.detail,
         logPath: event.detail,
         logTail: event.detail,
@@ -145,6 +147,7 @@ export function promptActivityToUnifiedJob(event) {
         threadId: event.threadId,
         workspace: event.workspace,
         owner: event.actor,
+        correlationId: event.correlationId,
         startedAt: event.timestamp,
         updatedAt: event.timestamp,
         finishedAt: status === "running" || status === "queued" ? undefined : event.timestamp,

package/dist/runtime/relay-runtime-prompt-queue-artifacts.js

@@ -14,7 +14,7 @@ import { activeSessionSourceForContextKey, ChannelMirrorRegistry } from "../chan
 import { listThreads as listCodexThreads } from "../agents/codex/codex-state.js";
 import { friendlyErrorText } from "../core/error-messages.js";
 import { clearLogFile, getAgentUpdateLogPath, getConnectorHealth, getConnectorLogPath, getPackageVersion, getUpdateLogPath, getVersionChecks, readConnectorState, readFormattedLogTail, spawnConnectorRestart, spawnSelfUpdate } from "../support/operations.js";
-import { PromptStore, toPromptEnvelope } from "../state/prompt-store.js";
+import { ensurePromptCorrelationId, PromptStore, toPromptEnvelope } from "../state/prompt-store.js";
 import { UnifiedJobStore } from "../state/job-store.js";
 import { buildRuntimeMetrics } from "./metrics.js";
 import { RelayArtifactService } from "./relay-artifact-service.js";
@@ -134,10 +134,11 @@ export async function relayRuntimeSendUploadPrompt(runtime, options, actor) {
 }
 export async function relayRuntimeSendEnvelope(runtime, envelope, actor) {
     const activityActor = envelope.activityActor ?? actor;
+    const correlated = ensurePromptCorrelationId({ ...envelope, activityActor });
     const session = await runtime.getSession(false);
     const external = getExternalSnapshotForSession(session, runtime.config, { maxEvents: 0 });
     if (session.isProcessing() || external?.activity.active) {
-        const queued = runtime.queueService.enqueue(envelope);
+        const queued = runtime.queueService.enqueue(correlated);
         const info = runtime.publicInfo(session);
         runtime.appendActivity({
             source: "web",
@@ -147,7 +148,8 @@ export async function relayRuntimeSendEnvelope(runtime, envelope, actor) {
             workspace: info.workspace,
             agentId: info.agentId,
             actor: activityActor,
-            prompt: envelope.description,
+            correlationId: correlated.correlationId,
+            prompt: correlated.description,
             detail: external?.activity.active
                 ? `Queued because ${external.agentLabel} CLI is still processing another task.`
                 : `Queued at position ${runtime.queueService.length()}.`,
@@ -161,18 +163,19 @@ export async function relayRuntimeSendEnvelope(runtime, envelope, actor) {
             workspace: info.workspace,
             promptId: queued.id,
             actor: activityActor,
-            description: envelope.description,
+            correlationId: correlated.correlationId,
+            description: correlated.description,
         });
         if (external?.activity.active) {
             runtime.broadcastStatus(`Waiting for ${external.agentLabel} CLI task... ${runtime.queueService.length()} queued.`, "info");
         }
         runtime.broadcastQueue();
-        return { queued: true, queueId: queued.id };
+        return { queued: true, queueId: queued.id, correlationId: correlated.correlationId };
     }
-    void runtime.runPrompt(session, { ...envelope, activityActor }).catch((error) => {
-        runtime.broadcast({ type: "turn_error", id: runtime.currentTurnId ?? "turn", error: friendlyErrorText(error), at: new Date().toISOString() });
+    void runtime.runPrompt(session, correlated).catch((error) => {
+        runtime.broadcast({ type: "turn_error", id: runtime.currentTurnId ?? "turn", error: friendlyErrorText(error), at: new Date().toISOString(), correlationId: correlated.correlationId });
     });
-    return { queued: false };
+    return { queued: false, correlationId: correlated.correlationId };
 }
 export function relayRuntimeQueue(runtime) {
     return runtime.queueService.list();
@@ -194,6 +197,7 @@ export function relayRuntimeQueueAction(runtime, action, id, actor) {
         threadId: null,
         workspace: runtime.config.workspace,
         actor,
+        correlationId: affected?.correlationId,
         prompt: affected?.description,
         detail: id ? `${action}: ${id}` : `${action}: ${before.length} queued`,
     });
@@ -207,9 +211,9 @@ export function relayRuntimeQueueAction(runtime, action, id, actor) {
     runtime.broadcastQueue();
     return runtime.queue();
 }
-export async function relayRuntimeArtifacts(runtime) {
+export async function relayRuntimeArtifacts(runtime, limit = 20) {
     const session = await runtime.getSession(true);
-    return runtime.artifactService.list(session.getInfo().workspace, 20);
+    return runtime.artifactService.list(session.getInfo().workspace, limit);
 }
 export async function relayRuntimeArtifact(runtime, turnId) {
     const session = await runtime.getSession(true);

package/dist/runtime/relay-runtime-sessions.js

@@ -348,6 +348,14 @@ export function relayRuntimeActivity(runtime, options = {}) {
     const currentInfo = runtime.registry.get(runtime.contextKey)?.getInfo();
     return runtime.activityStore.list(options).map((event) => runtime.enrichActivityEvent(event, currentInfo));
 }
+export function relayRuntimeActivityPage(runtime, options = {}) {
+    const currentInfo = runtime.registry.get(runtime.contextKey)?.getInfo();
+    const page = runtime.activityStore.listPage(options);
+    return {
+        ...page,
+        items: page.items.map((event) => runtime.enrichActivityEvent(event, currentInfo)),
+    };
+}
 export async function relayRuntimeRetry(runtime, actor) {
     const cached = runtime.queueService.getLastPrompt();
     if (!cached) {

package/dist/runtime/relay-runtime-trace.js

@@ -0,0 +1,92 @@
+export async function relayRuntimeTrace(runtime, correlationId) {
+    const id = correlationId.trim();
+    if (!id) {
+        throw new Error("correlationId is required.");
+    }
+    const activity = runtime.activityStore.findByCorrelationId(id, 200).map((event) => runtime.enrichActivityEvent(event));
+    const audit = runtime.auditStore.findByCorrelationId(id, 200);
+    const chat = runtime.chatStore.findByCorrelationId(id, 200);
+    const queue = runtime.queue().filter((item) => item.correlationId === id);
+    const jobs = (await runtime.jobs({ limit: 500 })).jobs.filter((job) => job.correlationId === id);
+    const timeline = traceTimeline({ activity, audit, chat, queue, jobs });
+    const timestamps = timeline.map((item) => Date.parse(item.at)).filter(Number.isFinite);
+    const lastStatus = [...activity].reverse().find((event) => event.status)?.status ??
+        jobs.find((job) => job.status)?.status ??
+        (queue.length ? "queued" : "unknown");
+    return {
+        correlationId: id,
+        summary: {
+            startedAt: timestamps.length ? new Date(Math.min(...timestamps)).toISOString() : null,
+            updatedAt: timestamps.length ? new Date(Math.max(...timestamps)).toISOString() : null,
+            status: lastStatus,
+            sources: [...new Set(timeline.map((item) => item.source))],
+            threadId: activity.find((event) => event.threadId)?.threadId ?? chat.find((message) => message.threadId)?.threadId ?? jobs.find((job) => job.threadId)?.threadId,
+            workspace: activity.find((event) => event.workspace)?.workspace ?? jobs.find((job) => job.workspace)?.workspace,
+            agentId: activity.find((event) => event.agentId)?.agentId ?? jobs.find((job) => job.agentId)?.agentId,
+        },
+        activity,
+        audit,
+        chat,
+        queue,
+        jobs,
+        timeline,
+    };
+}
+function traceTimeline(input) {
+    return [
+        ...input.activity.map((event) => ({
+            id: event.id,
+            at: event.timestamp,
+            source: "activity",
+            status: event.status,
+            type: event.type,
+            title: `${event.source} ${event.type}`,
+            detail: event.prompt || event.detail,
+            threadId: event.threadId,
+            workspace: event.workspace,
+            agentId: event.agentId,
+        })),
+        ...input.audit.map((event) => ({
+            id: event.id,
+            at: event.timestamp,
+            source: "audit",
+            status: event.status,
+            type: event.action,
+            title: `${event.channelId} ${event.action}`,
+            detail: event.description || event.detail,
+            threadId: event.threadId,
+            workspace: event.workspace,
+            agentId: event.agentId,
+        })),
+        ...input.chat.map((message) => ({
+            id: message.id,
+            at: message.timestamp,
+            source: "chat",
+            type: message.role,
+            title: `${message.source} ${message.role}`,
+            detail: message.text,
+            threadId: message.threadId,
+        })),
+        ...input.queue.map((item) => ({
+            id: item.id,
+            at: item.createdAt,
+            source: "queue",
+            status: item.lastError ? "failed" : "queued",
+            type: "queued_prompt",
+            title: `Queued prompt ${item.id}`,
+            detail: item.lastError || item.description,
+        })),
+        ...input.jobs.map((job) => ({
+            id: job.id,
+            at: job.updatedAt,
+            source: "job",
+            status: job.status,
+            type: job.kind,
+            title: job.title,
+            detail: job.summary || job.logTail,
+            threadId: job.threadId,
+            workspace: job.workspace,
+            agentId: job.agentId,
+        })),
+    ].sort((left, right) => Date.parse(left.at) - Date.parse(right.at));
+}

package/dist/runtime/relay-runtime-updates-jobs.js

@@ -13,6 +13,7 @@ import { ChannelTurnService } from "../channels/shared/channel-turn-service.js";
 import { activeSessionSourceForContextKey, ChannelMirrorRegistry } from "../channels/shared/channel-mirror-registry.js";
 import { listThreads as listCodexThreads } from "../agents/codex/codex-state.js";
 import { friendlyErrorText } from "../core/error-messages.js";
+import { cursorPage, normalizeCursorLimit } from "../core/pagination.js";
 import { clearLogFile, getAgentUpdateLogPath, getConnectorHealth, getConnectorLogPath, getPackageVersion, getUpdateLogPath, getVersionChecks, readConnectorState, readFormattedLogTail, spawnConnectorRestart, spawnSelfUpdate } from "../support/operations.js";
 import { PromptStore, toPromptEnvelope } from "../state/prompt-store.js";
 import { UnifiedJobStore } from "../state/job-store.js";
@@ -161,7 +162,7 @@ export function relayRuntimeTasks(runtime) {
         recent: runtime.activity({ limit: 20 }),
     };
 }
-export async function relayRuntimeJobs(runtime) {
+export async function relayRuntimeJobs(runtime, options = {}) {
     const jobs = [];
     const current = runtime.currentProgress;
     if (current) {
@@ -190,6 +191,7 @@ export async function relayRuntimeJobs(runtime) {
             threadId: null,
             workspace: runtime.config.workspace,
             owner: item.activityActor,
+            correlationId: item.correlationId,
             startedAt: createdAt,
             updatedAt: createdAt,
             summary: item.description,
@@ -245,8 +247,12 @@ export async function relayRuntimeJobs(runtime) {
     }
     const liveJobs = dedupeJobs(jobs);
     const storedJobs = runtime.jobStore.upsertMany(liveJobs);
+    const sortedJobs = dedupeJobs([...liveJobs, ...storedJobs]).sort((left, right) => Date.parse(right.updatedAt) - Date.parse(left.updatedAt));
+    const limit = normalizeCursorLimit(options.limit, 100, 500);
+    const page = cursorPage(sortedJobs, options.cursor, limit, (job) => job.id);
     return {
-        jobs: dedupeJobs([...liveJobs, ...storedJobs]).sort((left, right) => Date.parse(right.updatedAt) - Date.parse(left.updatedAt)),
+        jobs: page.items,
+        pagination: page.pagination,
         updatedAt: new Date().toISOString(),
     };
 }
@@ -254,13 +260,13 @@ export async function relayRuntimeJobLog(runtime, id) {
     if (id.startsWith("agent-update:")) {
         const updateId = id.slice("agent-update:".length);
         const log = runtime.agentUpdates.readLog(updateId);
-        return { job: (await runtime.jobs()).jobs.find((job) => job.id === id) ?? null, plain: log.plain };
+        return { job: (await runtime.jobs({ limit: 500 })).jobs.find((job) => job.id === id) ?? null, plain: log.plain };
     }
     if (id.startsWith("queue:")) {
         const queueId = id.slice("queue:".length);
         const item = runtime.queueService.rawList().find((candidate) => candidate.id === queueId);
         return {
-            job: (await runtime.jobs()).jobs.find((job) => job.id === id) ?? null,
+            job: (await runtime.jobs({ limit: 500 })).jobs.find((job) => job.id === id) ?? null,
             plain: item ? [
                 `Queued prompt: ${item.id}`,
                 `Created: ${new Date(item.createdAt).toISOString()}`,
@@ -270,7 +276,7 @@ export async function relayRuntimeJobLog(runtime, id) {
             ].filter(Boolean).join("\n") : "Queued prompt not found.",
         };
     }
-    const job = (await runtime.jobs()).jobs.find((candidate) => candidate.id === id) ?? null;
+    const job = (await runtime.jobs({ limit: 500 })).jobs.find((candidate) => candidate.id === id) ?? null;
     return { job, plain: job?.logTail || job?.logPath || job?.summary || runtime.jobStore.get(id)?.summary || "No log available for this job." };
 }
 export async function relayRuntimeJobAction(runtime, id, action, actor) {

package/dist/runtime/relay-runtime.js

@@ -32,10 +32,11 @@ import { createSupportBundle } from "../support/support-bundle.js";
 import { transcribeAudio } from "../artifacts/voice.js";
 import { WebActivityStore, WebChatStore, } from "../web/web-state.js";
 import { evaluateWorkspacePolicy, filterAllowedWorkspaces } from "../core/workspace-policy.js";
-import { relayRuntimeSubscribe, relayRuntimeSnapshot, relayRuntimeStatus, relayRuntimeBootstrapStatus, relayRuntimeVersion, relayRuntimeDiagnostics, relayRuntimeAdapterHealth, relayRuntimePermissions, relayRuntimeMetrics, relayRuntimeAudit, relayRuntimeSupportBundle, relayRuntimeLogs, relayRuntimeClearLogs, relayRuntimeRestartConnector, relayRuntimeDispose } from "./relay-runtime-dashboard.js";
+import { relayRuntimeSubscribe, relayRuntimeSnapshot, relayRuntimeStatus, relayRuntimeBootstrapStatus, relayRuntimeVersion, relayRuntimeDiagnostics, relayRuntimeAdapterHealth, relayRuntimePermissions, relayRuntimeMetrics, relayRuntimeAudit, relayRuntimeAuditPage, relayRuntimeSupportBundle, relayRuntimeLogs, relayRuntimeClearLogs, relayRuntimeRestartConnector, relayRuntimeDispose } from "./relay-runtime-dashboard.js";
+import { relayRuntimeTrace } from "./relay-runtime-trace.js";
 import { relayRuntimeUpdateConnector, relayRuntimeAgentUpdateJobs, relayRuntimeStartAgentUpdate, relayRuntimeAgentUpdateLog, relayRuntimeDeleteAgentUpdateLog, relayRuntimeSendAgentUpdateInput, relayRuntimeCancelAgentUpdate, relayRuntimeTasks, relayRuntimeJobs, relayRuntimeJobLog, relayRuntimeJobAction, relayRuntimeRecordAgentUpdateLifecycle } from "./relay-runtime-updates-jobs.js";
 import { relayRuntimeActiveSessions, relayRuntimeGetSession, relayRuntimeListKnownContextMetadata, relayRuntimeDiscoverRunningConnectorSessions, relayRuntimeDiscoverActiveCodexSessions, relayRuntimeExternalActiveSession, relayRuntimeSessionStubForMetadata, relayRuntimeCapabilitiesForAgent, relayRuntimeActiveSessionKey, relayRuntimePreferredActiveSession, relayRuntimeRecordActivity, relayRuntimeAppendActivity, relayRuntimeEnrichActivityInput, relayRuntimeEnrichActivityEvent, relayRuntimeEnrichActivityFields, relayRuntimeAppendAudit, relayRuntimeUpdateCurrentProgress, relayRuntimeAddCurrentTool, relayRuntimeBroadcastQueue, relayRuntimeBroadcastStatus, relayRuntimeBroadcast, relayRuntimeScheduleActiveSessionsBroadcast, relayRuntimePublicInfo } from "./relay-runtime-active-sessions.js";
-import { relayRuntimeLocks, relayRuntimeLockWebSession, relayRuntimeUnlockWebSession, relayRuntimeControlOptions, relayRuntimeAuthStatus, relayRuntimeLogin, relayRuntimeLogout, relayRuntimeChatHistory, relayRuntimeWebMirrorPreference, relayRuntimeSessionDetail, relayRuntimeClearChatHistory, relayRuntimeActivity, relayRuntimeRetry, relayRuntimeSync, relayRuntimeListSessions, relayRuntimeListSessionsPage, relayRuntimeFilteredSessions, relayRuntimeListModels, relayRuntimeSetAgent, relayRuntimeNewSession, relayRuntimeSwitchSession, relayRuntimeAttachSession, relayRuntimeSetModel, relayRuntimeSetReasoningEffort, relayRuntimeSetFastMode, relayRuntimeSetLaunchProfile, relayRuntimeHandback, relayRuntimeAbort, relayRuntimeGetControlSession, relayRuntimeCliPathOptions } from "./relay-runtime-sessions.js";
+import { relayRuntimeLocks, relayRuntimeLockWebSession, relayRuntimeUnlockWebSession, relayRuntimeControlOptions, relayRuntimeAuthStatus, relayRuntimeLogin, relayRuntimeLogout, relayRuntimeChatHistory, relayRuntimeWebMirrorPreference, relayRuntimeSessionDetail, relayRuntimeClearChatHistory, relayRuntimeActivity, relayRuntimeActivityPage, relayRuntimeRetry, relayRuntimeSync, relayRuntimeListSessions, relayRuntimeListSessionsPage, relayRuntimeFilteredSessions, relayRuntimeListModels, relayRuntimeSetAgent, relayRuntimeNewSession, relayRuntimeSwitchSession, relayRuntimeAttachSession, relayRuntimeSetModel, relayRuntimeSetReasoningEffort, relayRuntimeSetFastMode, relayRuntimeSetLaunchProfile, relayRuntimeHandback, relayRuntimeAbort, relayRuntimeGetControlSession, relayRuntimeCliPathOptions } from "./relay-runtime-sessions.js";
 import { relayRuntimeSendPrompt, relayRuntimeSendUploadPrompt, relayRuntimeSendEnvelope, relayRuntimeQueue, relayRuntimeQueuePaused, relayRuntimeQueueAction, relayRuntimeArtifacts, relayRuntimeArtifact, relayRuntimeDeleteArtifact, relayRuntimeCreateArtifactZip, relayRuntimeArtifactPreview, relayRuntimeEnsureActiveThread, relayRuntimeEnsureIdle, relayRuntimeRunPrompt, relayRuntimeDrainQueue, relayRuntimeUpdateSession } from "./relay-runtime-prompt-queue-artifacts.js";
 export const WEB_CONTEXT_KEY = "web:dashboard";
 const ACTIVE_CODEX_DISCOVERY_LIMIT = 200;
@@ -208,8 +209,8 @@ export class RelayRuntime {
     tasks() {
         return relayRuntimeTasks(this);
     }
-    async jobs() {
-        return relayRuntimeJobs(this);
+    async jobs(options = {}) {
+        return relayRuntimeJobs(this, options);
     }
     async jobLog(id) {
         return relayRuntimeJobLog(this, id);
@@ -226,6 +227,12 @@ export class RelayRuntime {
     audit(options = 50) {
         return relayRuntimeAudit(this, options);
     }
+    auditPage(options = {}) {
+        return relayRuntimeAuditPage(this, options);
+    }
+    async trace(correlationId) {
+        return relayRuntimeTrace(this, correlationId);
+    }
     async supportBundle(actor) {
         return relayRuntimeSupportBundle(this, actor);
     }
@@ -265,6 +272,9 @@ export class RelayRuntime {
     activity(options = {}) {
         return relayRuntimeActivity(this, options);
     }
+    activityPage(options = {}) {
+        return relayRuntimeActivityPage(this, options);
+    }
     async retry(actor) {
         return relayRuntimeRetry(this, actor);
     }
@@ -331,8 +341,8 @@ export class RelayRuntime {
     queueAction(action, id, actor) {
         return relayRuntimeQueueAction(this, action, id, actor);
     }
-    async artifacts() {
-        return relayRuntimeArtifacts(this);
+    async artifacts(limit = 20) {
+        return relayRuntimeArtifacts(this, limit);
     }
     async artifact(turnId) {
         return relayRuntimeArtifact(this, turnId);

package/dist/state/prompt-store.js

@@ -224,6 +224,16 @@ export function toPromptEnvelope(input, artifactOutDir) {
         description: describePromptInput(input),
     };
 }
+export function createCorrelationId() {
+    return randomUUID().replace(/-/g, "").slice(0, 12);
+}
+export function ensurePromptCorrelationId(prompt) {
+    const existing = prompt.correlationId?.trim();
+    if (existing) {
+        return { ...prompt, correlationId: existing };
+    }
+    return { ...prompt, correlationId: createCorrelationId() };
+}
 function createQueueId() {
     return randomUUID().replace(/-/g, "").slice(0, 8);
 }
@@ -232,7 +242,9 @@ function isPromptEnvelope(value) {
         return false;
     }
     const candidate = value;
-    return isCodexPromptInput(candidate.input) && typeof candidate.description === "string";
+    return isCodexPromptInput(candidate.input) &&
+        typeof candidate.description === "string" &&
+        (candidate.correlationId === undefined || typeof candidate.correlationId === "string");
 }
 function isQueuedPrompt(value) {
     return isPromptEnvelope(value) &&

package/dist/web/web-api-contract.js

@@ -9,6 +9,7 @@ export const WEB_API_ROUTE_DEFINITIONS = [
     exact("/api/progress", ["GET"], "inspect"),
     exact("/api/metrics", ["GET"], "inspect"),
     exact("/api/jobs", ["GET"], "inspect"),
+    exact("/api/trace", ["GET"], "sessions.read"),
     dynamic("/api/jobs/:id/log", "^/api/jobs/[^/]+/log$", ["GET"], "inspect", `/api/jobs/${stringToken}/log`),
     dynamic("/api/jobs/:id/action", "^/api/jobs/[^/]+/action$", ["POST"], "inspect", `/api/jobs/${stringToken}/action`),
     exact("/api/active-sessions", ["GET"], "sessions.read"),
@@ -35,6 +36,7 @@ export const WEB_API_ROUTE_DEFINITIONS = [
     exact("/api/peers/global-sessions", ["GET"], "sessions.read"),
     dynamic("/api/peers/invitations/:id", "^/api/peers/invitations/[^/]+$", ["DELETE"], "peers.write", `/api/peers/invitations/${stringToken}`),
     dynamic("/api/peers/:id/repin", "^/api/peers/[^/]+/repin$", ["POST"], "peers.write", `/api/peers/${stringToken}/repin`),
+    dynamic("/api/peers/:id/rotate", "^/api/peers/[^/]+/rotate$", ["POST"], "peers.write", `/api/peers/${stringToken}/rotate`),
     dynamic("/api/peers/:id/health", "^/api/peers/[^/]+/health$", ["GET"], "peers.connect", `/api/peers/${stringToken}/health`),
     dynamic("/api/peers/:id", "^/api/peers/[^/]+$", ["PATCH", "DELETE"], "peers.write", `/api/peers/${stringToken}`),
     dynamic("/api/peers/:id/proxy", "^/api/peers/[^/]+/proxy$", ["POST"], "peers.connect", `/api/peers/${stringToken}/proxy`),

package/dist/web/web-dashboard-access-routes.js

@@ -278,19 +278,22 @@ export async function handleDashboardAccessRoute(req, res, url, options) {
         return true;
     }
     if (req.method === "GET" && url.pathname === "/api/audit") {
+        const page = runtime.auditPage({
+            limit: numberParam(url, "limit", 50),
+            cursor: url.searchParams.get("cursor") || undefined,
+            channelId: (url.searchParams.get("channel") || "all"),
+            category: (url.searchParams.get("category") || "all"),
+            status: (url.searchParams.get("status") || "all"),
+            action: url.searchParams.get("action") || "all",
+            actor: url.searchParams.get("actor") || undefined,
+            agentId: url.searchParams.get("agent") || "all",
+            threadId: url.searchParams.get("thread") || undefined,
+            workspace: url.searchParams.get("workspace") || undefined,
+            since: url.searchParams.get("since") || undefined,
+        });
         sendJson(res, 200, {
-            events: runtime.audit({
-                limit: numberParam(url, "limit", 50),
-                channelId: (url.searchParams.get("channel") || "all"),
-                category: (url.searchParams.get("category") || "all"),
-                status: (url.searchParams.get("status") || "all"),
-                action: url.searchParams.get("action") || "all",
-                actor: url.searchParams.get("actor") || undefined,
-                agentId: url.searchParams.get("agent") || "all",
-                threadId: url.searchParams.get("thread") || undefined,
-                workspace: url.searchParams.get("workspace") || undefined,
-                since: url.searchParams.get("since") || undefined,
-            }),
+            events: page.items,
+            pagination: page.pagination,
         });
         return true;
     }

package/dist/web/web-dashboard-artifact-routes.js

@@ -1,9 +1,13 @@
-import { readJsonBody, requiredSearch, sendFile, sendJson, stringField, } from "./web-dashboard-http.js";
+import { cursorPage, normalizeCursorLimit } from "../core/pagination.js";
+import { numberParam, readJsonBody, requiredSearch, sendFile, sendJson, stringField, } from "./web-dashboard-http.js";
 export async function handleDashboardArtifactRoute(req, res, url, options) {
     const { runtime, authUser } = options;
     if (req.method === "GET" && url.pathname === "/api/artifacts") {
         await options.assertCurrentSessionScope(authUser);
-        sendJson(res, 200, { reports: await runtime.artifacts() });
+        const limit = normalizeCursorLimit(numberParam(url, "limit", 50), 50, 200);
+        const reports = await runtime.artifacts(500);
+        const page = cursorPage(reports, url.searchParams.get("cursor") || undefined, limit, (report) => report.turnId);
+        sendJson(res, 200, { reports: page.items, pagination: page.pagination });
         return true;
     }
     if (req.method === "DELETE" && url.pathname === "/api/artifacts") {

package/dist/web/web-dashboard-assets.js

@@ -13,6 +13,7 @@ const clientSources = [
     "client/jobs.js",
     "client/metrics.js",
     "client/admin.js",
+    "client/users.js",
     "client/settings-wizard.js",
 ];
 const styleSources = [

package/dist/web/web-dashboard-pages.js

@@ -137,7 +137,6 @@ ${faviconLinks}
           <select id="peerSelect" title="NordRelay target"></select>
           <select id="agentSelect"></select>
           <button id="themeBtn" class="secondary" title="Toggle dark theme">Dark</button>
-          <button id="refreshBtn">Refresh</button>
           <button id="logoutBtn" class="secondary">Logout</button>
         </div>
       </header>
@@ -200,6 +199,7 @@ ${faviconLinks}
         <div class="panel">
           <div class="row"><button id="reloadTasksBtn">Reload tasks</button></div>
           <div id="tasksList" class="list"></div>
+          <div id="jobsPager" class="pager"></div>
         </div>
       </section>
 
@@ -232,6 +232,14 @@ ${faviconLinks}
         <div class="panel">
           <div class="row"><select id="activitySource"><option value="all">All sources</option><option value="web">Web</option><option value="telegram">Telegram</option><option value="discord">Discord</option><option value="slack">Slack</option><option value="cli">CLI</option></select><select id="activityCategory"><option value="all">All categories</option><option value="prompt">Prompt</option><option value="session">Session</option><option value="queue">Queue</option><option value="agent-update">Agent update</option><option value="artifact">Artifact</option><option value="system">System</option><option value="auth">Auth</option><option value="security">Security</option><option value="tool">Tool</option></select><select id="activityStatus"><option value="all">All statuses</option><option value="queued">Queued</option><option value="running">Running</option><option value="completed">Completed</option><option value="failed">Failed</option><option value="aborted">Aborted</option><option value="info">Info</option></select><input id="activityActor" placeholder="Actor"><input id="activityAgent" placeholder="Agent"><input id="activityThread" placeholder="Thread ID"><input id="activityWorkspace" placeholder="Workspace"><input id="activityType" placeholder="Type"><input id="activitySince" type="datetime-local"><input id="activityLimit" type="number" value="100" min="1" max="500"><button id="loadActivityBtn">Load activity</button><button id="exportActivityBtn" class="secondary">Export</button></div>
           <div id="activityList" class="list"></div>
+          <div id="activityPager" class="pager"></div>
+        </div>
+      </section>
+
+      <section class="page" id="page-trace">
+        <div class="panel">
+          <div class="row"><input id="traceCorrelationId" placeholder="Correlation ID"><button id="loadTraceBtn">Load trace</button></div>
+          <div id="traceDetail" class="list"></div>
         </div>
       </section>
 
@@ -240,6 +248,7 @@ ${faviconLinks}
           <div class="row"><button id="reloadArtifactsBtn">Reload artifacts</button><input id="artifactSearch" placeholder="Search artifacts"><select id="artifactKind"><option value="all">All files</option><option value="images">Images</option><option value="docs">Docs/code</option></select><button id="zipSelectedArtifactsBtn" class="secondary">ZIP selected</button><button id="deleteSelectedArtifactsBtn" class="danger">Delete selected</button></div>
           <div id="artifactPreview" class="preview"></div>
           <div id="artifactList" class="list"></div>
+          <div id="artifactPager" class="pager"></div>
         </div>
       </section>
 
@@ -268,49 +277,71 @@ ${faviconLinks}
 
       <section class="page" id="page-access">
         <div class="panel">
-          <div class="row"><button id="loadAccessBtn">Reload users</button><button id="createUserBtn">Create user</button><button id="createGroupBtn" class="secondary">Create group</button><button id="createChatBtn" class="secondary">Add Telegram chat</button><button id="createDiscordChannelBtn" class="secondary">Add Discord channel</button><button id="createSlackChannelBtn" class="secondary">Add Slack channel</button><button id="lockSessionBtn" class="secondary">Lock web session</button><button id="unlockSessionBtn" class="secondary">Unlock web session</button></div>
-          <div id="accessTabs" class="tabs access-tabs">
-            <button type="button" data-access-tab="users" class="active">Users</button>
-            <button type="button" data-access-tab="groups">Groups</button>
-            <button type="button" data-access-tab="telegram">Telegram</button>
-            <button type="button" data-access-tab="discord">Discord</button>
-            <button type="button" data-access-tab="slack">Slack</button>
-            <button type="button" data-access-tab="locks">Locks</button>
-            <button type="button" data-access-tab="audit">Audit</button>
+          <div class="section-header access-section-header">
+            <div id="accessTabs" class="section-tabs access-tabs" role="tablist" aria-label="Users sections">
+              <button type="button" role="tab" aria-selected="true" tabindex="0" data-access-tab="users" class="active">Users</button>
+              <button type="button" role="tab" aria-selected="false" tabindex="-1" data-access-tab="groups">Groups</button>
+              <button type="button" role="tab" aria-selected="false" tabindex="-1" data-access-tab="telegram">Telegram</button>
+              <button type="button" role="tab" aria-selected="false" tabindex="-1" data-access-tab="discord">Discord</button>
+              <button type="button" role="tab" aria-selected="false" tabindex="-1" data-access-tab="slack">Slack</button>
+              <button type="button" role="tab" aria-selected="false" tabindex="-1" data-access-tab="locks">Locks</button>
+              <button type="button" role="tab" aria-selected="false" tabindex="-1" data-access-tab="audit">Audit</button>
+            </div>
           </div>
           <div class="access-tab active" data-access-tab-panel="users">
-            <div id="accessPanel" class="settings-grid"></div>
+            <div class="access-tab-heading">
+              <div class="row access-heading-actions"><button id="loadAccessBtn" class="secondary">Reload</button><button id="createUserBtn">Create user</button></div>
+              <div class="access-filter-row">
+                <input id="userSearch" placeholder="Search users">
+                <select id="userStatusFilter"><option value="all">All statuses</option><option value="active">Active</option><option value="disabled">Disabled</option></select>
+                <select id="userGroupFilter"><option value="all">All groups</option></select>
+                <select id="userIdentityFilter"><option value="all">All identities</option><option value="telegram">Telegram linked</option><option value="discord">Discord linked</option><option value="slack">Slack linked</option><option value="web">Web sessions</option><option value="unlinked">No chat identity</option></select>
+              </div>
+            </div>
+            <div id="accessPanel" class="list user-list"></div>
+            <div id="usersPager" class="pager"></div>
           </div>
           <div class="access-tab" data-access-tab-panel="groups">
-            <h2>Groups</h2>
+            <div class="access-tab-heading">
+              <div class="row access-heading-actions"><button id="createGroupBtn" class="secondary">Create group</button></div>
+              <div class="access-filter-row"><input id="groupSearch" placeholder="Search groups"></div>
+            </div>
             <div id="groupsList" class="list"></div>
           </div>
           <div class="access-tab" data-access-tab-panel="telegram">
-            <h2>Telegram chats</h2>
+            <div class="access-tab-heading">
+              <div class="row access-heading-actions"><button id="createChatBtn" class="secondary">Add Telegram chat</button></div>
+              <input id="telegramChatSearch" placeholder="Search Telegram chats">
+            </div>
             <div id="telegramChatsList" class="list"></div>
           </div>
           <div class="access-tab" data-access-tab-panel="discord">
             <div class="access-tab-heading">
-              <h2>Discord channels</h2>
+              <div class="row access-heading-actions"><button id="createDiscordChannelBtn" class="secondary">Add Discord channel</button></div>
               <input id="discordChannelSearch" placeholder="Search Discord channels">
             </div>
             <div id="discordChannelsList" class="list"></div>
           </div>
           <div class="access-tab" data-access-tab-panel="slack">
             <div class="access-tab-heading">
-              <h2>Slack channels</h2>
+              <div class="row access-heading-actions"><button id="createSlackChannelBtn" class="secondary">Add Slack channel</button></div>
               <input id="slackChannelSearch" placeholder="Search Slack channels">
             </div>
             <div id="slackChannelsList" class="list"></div>
           </div>
           <div class="access-tab" data-access-tab-panel="locks">
-            <h2>Locks</h2>
+            <div class="access-tab-heading">
+              <div class="row access-heading-actions"><button id="lockSessionBtn" class="secondary">Lock web session</button><button id="unlockSessionBtn" class="secondary">Unlock web session</button></div>
+            </div>
             <div id="locksList" class="list"></div>
           </div>
           <div class="access-tab" data-access-tab-panel="audit">
-            <h2>Audit</h2>
-            <div class="row"><select id="auditChannel"><option value="all">All channels</option><option value="web">Web</option><option value="telegram">Telegram</option><option value="discord">Discord</option><option value="slack">Slack</option></select><select id="auditCategory"><option value="all">All categories</option><option value="prompt">Prompt</option><option value="session">Session</option><option value="queue">Queue</option><option value="agent-update">Agent update</option><option value="artifact">Artifact</option><option value="system">System</option><option value="auth">Auth</option><option value="security">Security</option><option value="tool">Tool</option></select><select id="auditStatus"><option value="all">All statuses</option><option value="ok">OK</option><option value="failed">Failed</option><option value="denied">Denied</option></select><input id="auditActor" placeholder="Actor"><input id="auditAgent" placeholder="Agent"><input id="auditThread" placeholder="Thread ID"><input id="auditWorkspace" placeholder="Workspace"><input id="auditSince" type="datetime-local"><input id="auditLimit" type="number" value="50" min="1" max="500"><button id="loadAuditBtn">Load audit</button><button id="exportAuditBtn" class="secondary">Export</button></div>
+            <div class="access-tab-heading">
+              <div class="row access-heading-actions"><button id="loadAuditBtn">Load audit</button><button id="exportAuditBtn" class="secondary">Export</button></div>
+            </div>
+            <div class="row audit-filter-row"><select id="auditChannel"><option value="all">All channels</option><option value="web">Web</option><option value="telegram">Telegram</option><option value="discord">Discord</option><option value="slack">Slack</option></select><select id="auditCategory"><option value="all">All categories</option><option value="prompt">Prompt</option><option value="session">Session</option><option value="queue">Queue</option><option value="agent-update">Agent update</option><option value="artifact">Artifact</option><option value="system">System</option><option value="auth">Auth</option><option value="security">Security</option><option value="tool">Tool</option></select><select id="auditStatus"><option value="all">All statuses</option><option value="ok">OK</option><option value="failed">Failed</option><option value="denied">Denied</option></select><input id="auditActor" placeholder="Actor"><input id="auditAgent" placeholder="Agent"><input id="auditThread" placeholder="Thread ID"><input id="auditWorkspace" placeholder="Workspace"><input id="auditSince" type="datetime-local"><input id="auditLimit" type="number" value="50" min="1" max="500"></div>
             <div id="auditList" class="list"></div>
+            <div id="auditPager" class="pager"></div>
           </div>
         </div>
       </section>
@@ -326,8 +357,11 @@ ${faviconLinks}
 
       <section class="page" id="page-settings">
         <div class="panel">
-          <div class="row"><button id="saveSettingsBtn">Save settings</button><button id="settingsWizardBtn" class="secondary">Setup wizard</button><button id="restartBtn" class="secondary">Restart NordRelay</button><span id="settingsStatus"></span></div>
-          <div id="settingsTabs" class="tabs"></div>
+          <div id="settingsTabHeader" class="section-header settings-section-header">
+            <div id="settingsTabs" class="section-tabs settings-tabs" role="tablist" aria-label="Settings sections"></div>
+          </div>
+          <div id="settingsSubnav" class="settings-subnav" hidden></div>
+          <div id="settingsActions" class="row settings-actions"><button id="saveSettingsBtn">Save settings</button><button id="settingsWizardBtn" class="secondary">Setup wizard</button><button id="restartBtn" class="secondary">Restart NordRelay</button><span id="settingsStatus"></span></div>
           <div id="settingsForm" class="settings-grid"></div>
         </div>
       </section>
@@ -372,6 +406,10 @@ ${faviconLinks}
     <div id="sessionDetail"></div>
     <div class="row dialog-actions"><button id="closeSessionDetailBtn" class="secondary">Close</button></div>
   </dialog>
+  <dialog id="userDetailDialog">
+    <div id="userDetail"></div>
+    <div class="row dialog-actions"><button id="closeUserDetailBtn" class="secondary">Close</button></div>
+  </dialog>
   <dialog id="adminDialog">
     <form method="dialog" id="adminDialogForm">
       <h2 id="adminDialogTitle">Edit</h2>