@openagt/dashboard 0.0.0-stage → 0.8.0

package/dist/dashboard/bridge-store.js

@@ -0,0 +1,262 @@
+import { randomUUID } from 'node:crypto';
+import { continuationPrompt } from '@openagt/agent-driver';
+import { CLOUD_SESSION_WINDOW_MS } from '../cloud-run-state.js';
+/** How long a collected answer stays with the Driver that collected it before it is offered again. */
+export const ANSWER_CLAIM_TTL_MS = 90_000;
+/** Most transcript entries kept per session, oldest dropped first. */
+const MAX_SESSION_EVENTS = 300;
+/**
+ * What a cloud session is told when the user picks a `stop` option (#358, #1554). It lives on
+ * claude.ai where nothing of ours can end it, so the bridge types this instead of a continuation:
+ * the decision, and that the user is taking over from here.
+ */
+export function takeoverPrompt(question, answer) {
+    return `You paused to ask: "${question}". The user chose: ${answer}. Stop here: the user is taking over and will come back with fresh instructions.`;
+}
+/** How recently the extension must have spoken to count as present. */
+const EXTENSION_ALIVE_WINDOW_MS = 3 * 60_000;
+export class BridgeQuestions {
+    bySession = new Map();
+    contact;
+    /**
+     * Note that something reached the bridge, whatever the outcome.
+     *
+     * Failures are recorded too, and that is the point: an extension that is misconfigured looks
+     * exactly like one that is not installed, because both leave no question behind. A refused
+     * request at least proves something is trying.
+     */
+    recordContact(route, status) {
+        this.contact = { at: new Date().toISOString(), route, status };
+    }
+    versionState;
+    /**
+     * What version the extension last claimed and whether it was refused for it (#1519).
+     *
+     * The accepted claims are recorded too, which is what clears a blocked banner: the moment an
+     * updated extension gets through, the last word is no longer a refusal.
+     */
+    recordVersion(got, expected, blocked) {
+        this.versionState = { got, expected, blocked, at: new Date().toISOString() };
+    }
+    /** The last version claim, or undefined while nothing has stated one. */
+    version() {
+        return this.versionState;
+    }
+    helloState;
+    /** What the injected page script last said about itself. */
+    recordHello(hello) {
+        this.helloState = hello;
+    }
+    /** The page script's last report, or undefined if none has ever arrived. */
+    hello() {
+        return this.helloState;
+    }
+    /** The last contact, or undefined if nothing has ever reached the bridge. */
+    lastContact() {
+        return this.contact;
+    }
+    statusBySession = new Map();
+    /**
+     * What claude.ai's session list last said about a session (#1332), as the Driver tab read it.
+     *
+     * This is the read-back a web run's own record cannot give: the run ends at its hand-off, so
+     * the record says `done` whether the session is parked on its user or finished hours ago.
+     */
+    recordStatus(status) {
+        this.statusBySession.set(status.sessionId, status);
+    }
+    /** The session's last list status, or undefined while the Driver has never reported one. */
+    status(sessionId) {
+        return this.statusBySession.get(sessionId);
+    }
+    /**
+     * Whether the session is waiting on a human: the bridge holds the question it is parked on, or
+     * claude.ai's list shows it awaiting input — a question asked in prose carries no block for
+     * the bridge to hold, and the list is the only thing that says the session stopped for it.
+     *
+     * A list status older than the session window no longer counts: the Driver stops reading a
+     * session past the window, so its last word would otherwise stand forever.
+     */
+    waiting(sessionId, now = new Date()) {
+        if (this.bySession.has(sessionId))
+            return true;
+        const status = this.statusBySession.get(sessionId);
+        return status?.status === 'awaiting' && now.getTime() - Date.parse(status.at) <= CLOUD_SESSION_WINDOW_MS;
+    }
+    /**
+     * Whether an extension is around (#1328): something reached the bridge and was let in within
+     * the window. The worker polls every half minute while it lives, so a longer silence means
+     * there is nobody to drain a request.
+     */
+    extensionAlive(now = new Date(), windowMs = EXTENSION_ALIVE_WINDOW_MS) {
+        const contact = this.contact;
+        if (!contact || contact.status >= 400)
+            return false;
+        return now.getTime() - Date.parse(contact.at) <= windowMs;
+    }
+    eventsBySession = new Map();
+    /**
+     * Record one transcript entry, keyed by its position.
+     *
+     * Keyed rather than appended because the page is re-read on every DOM change, so the same
+     * message arrives repeatedly and a growing list would be mostly duplicates. Position also lets
+     * a later read replace an earlier one, which is what a message still being streamed needs.
+     */
+    recordEvent(event) {
+        let bySeq = this.eventsBySession.get(event.sessionId);
+        if (!bySeq) {
+            bySeq = new Map();
+            this.eventsBySession.set(event.sessionId, bySeq);
+        }
+        bySeq.set(event.seq, event);
+        // Bound it: a long session would otherwise grow without limit in a daemon that never restarts.
+        if (bySeq.size > MAX_SESSION_EVENTS) {
+            for (const seq of [...bySeq.keys()].sort((a, b) => a - b).slice(0, bySeq.size - MAX_SESSION_EVENTS))
+                bySeq.delete(seq);
+        }
+    }
+    /** That session's transcript so far, in order. */
+    events(sessionId) {
+        return [...(this.eventsBySession.get(sessionId)?.values() ?? [])].sort((a, b) => a.seq - b.seq);
+    }
+    answersBySession = new Map();
+    /** The fingerprint of the question each session's `sent` answer resolved. */
+    answeredBySession = new Map();
+    /**
+     * Record the question a session is parked on, replacing any earlier one for that session.
+     *
+     * A question identical to one an answer was already delivered for is dropped: the extension's
+     * worker forgets what it sent when it restarts, and the answered block stays in the page's DOM,
+     * so the same question would otherwise resurface as parked right after being answered.
+     */
+    record(question) {
+        if (this.answeredBySession.get(question.sessionId) === fingerprint(question))
+            return;
+        const previous = this.bySession.get(question.sessionId);
+        // A genuinely new question means the session moved on: an undelivered pick for the old one
+        // must not be typed into it, and a resolved one no longer says anything about this question.
+        // Only a re-report of the question currently parked keeps its queued answer alive.
+        if (!previous || fingerprint(previous) !== fingerprint(question)) {
+            this.answersBySession.delete(question.sessionId);
+            this.answeredBySession.delete(question.sessionId);
+        }
+        this.bySession.set(question.sessionId, question);
+    }
+    /**
+     * Queue an answer picked in the dashboard (#1237). Refuses anything but labels of the question
+     * currently parked — exactly one unless the question is `multi` — so the only text this can
+     * ever put in a composer is composed from what the session itself offered.
+     */
+    queueAnswer(sessionId, labels) {
+        const question = this.bySession.get(sessionId);
+        if (!question)
+            return 'that session has no parked question';
+        const picked = question.options.filter(option => labels.includes(option.label));
+        if (picked.length !== labels.length || new Set(labels).size !== labels.length)
+            return 'every label must be one of the question options';
+        if (!question.multi && picked.length !== 1)
+            return 'pick exactly one option';
+        // Worded as a local run's answer is (agent-driver's continuation prompt): the labels joined, `(none)` for an
+        // empty multi-select, and a stopping pick hands the session over instead of continuing it.
+        const answer = picked.length ? picked.map(option => option.label).join(', ') : '(none)';
+        const text = picked.some(option => option.stop) ? takeoverPrompt(question.title, answer) : continuationPrompt(question.title, answer);
+        const queued = { id: randomUUID(), sessionId, labels, text, queuedAt: new Date().toISOString(), state: 'queued' };
+        this.answersBySession.set(sessionId, queued);
+        return queued;
+    }
+    /** Withdraw a queued answer. Too late once a Driver has collected it or the extension has delivered it. */
+    cancelAnswer(sessionId, now = Date.now()) {
+        const answer = this.answersBySession.get(sessionId);
+        if (!answer || answer.state !== 'queued' || this.claimed(answer, now))
+            return false;
+        this.answersBySession.delete(sessionId);
+        return true;
+    }
+    /** The answer waiting for the extension to deliver, if any — collected by a Driver or not. */
+    pendingAnswer(sessionId) {
+        const answer = this.answersBySession.get(sessionId);
+        return answer?.state === 'queued' ? answer : undefined;
+    }
+    /** Whether a Driver holds the answer: collected, and not so long ago that it is presumed lost. */
+    claimed(answer, now) {
+        return answer.claimedAt !== undefined && now - Date.parse(answer.claimedAt) < ANSWER_CLAIM_TTL_MS;
+    }
+    /**
+     * Hand the queued answer to the Driver asking, once (#1332): the next Driver asking within the
+     * claim's lifetime gets nothing, so a session served by two browsers is not answered twice. A
+     * claim nobody acknowledged — the Driver died mid-delivery — expires, and the answer is offered
+     * again.
+     */
+    claimAnswer(sessionId, now = Date.now()) {
+        const answer = this.pendingAnswer(sessionId);
+        if (!answer || this.claimed(answer, now))
+            return undefined;
+        answer.claimedAt = new Date(now).toISOString();
+        return answer;
+    }
+    /**
+     * Every session with an answer waiting to be delivered. The Driver serves these whatever the
+     * session window says: the page reports whichever session the user is on, so a pick can be for
+     * a session no listed run carries, and one nothing serves would sit queued forever.
+     */
+    pendingAnswerSessions() {
+        return [...this.answersBySession.values()].filter(answer => answer.state === 'queued').map(answer => answer.sessionId);
+    }
+    /** The session's answer in whatever state, for the dashboard to render. */
+    answer(sessionId) {
+        return this.answersBySession.get(sessionId);
+    }
+    /**
+     * The extension's word on what happened to a delivery. On success the question is resolved:
+     * it is dropped, and re-reports of the same block are ignored (see {@link record}).
+     */
+    resolveAnswer(sessionId, id, ok, note) {
+        const answer = this.answersBySession.get(sessionId);
+        if (!answer || answer.id !== id || answer.state !== 'queued')
+            return;
+        this.answersBySession.set(sessionId, { ...answer, state: ok ? 'sent' : 'failed', ...(note ? { note } : {}) });
+        if (!ok)
+            return;
+        const question = this.bySession.get(sessionId);
+        if (question)
+            this.answeredBySession.set(sessionId, fingerprint(question));
+        this.bySession.delete(sessionId);
+    }
+    /** The question that session is parked on, if the bridge has reported one. */
+    get(sessionId) {
+        return this.bySession.get(sessionId);
+    }
+    /** Every parked question, newest first. */
+    list() {
+        return [...this.bySession.values()].sort((a, b) => b.receivedAt.localeCompare(a.receivedAt));
+    }
+    /** Drop a session's question, once it is answered or its agent is gone. */
+    clear(sessionId) {
+        this.bySession.delete(sessionId);
+        this.eventsBySession.delete(sessionId);
+        this.answersBySession.delete(sessionId);
+        this.answeredBySession.delete(sessionId);
+        this.statusBySession.delete(sessionId);
+    }
+}
+/** What makes two reports the same question: the text shown, not when it arrived. */
+function fingerprint(question) {
+    return JSON.stringify([question.title, question.options, question.recommended ?? null, question.multi ?? false]);
+}
+/**
+ * The daemon's one store. A module singleton rather than a {@link DashboardContext} field
+ * because both ends live in the same process but reach it by different routes: the bridge
+ * endpoint writes from the raw HTTP handler, and the dashboard reads from an RPC, which is
+ * handed only what the wired context carries.
+ */
+let instance;
+export function bridgeQuestions() {
+    if (!instance)
+        instance = new BridgeQuestions();
+    return instance;
+}
+/** Replace the store. Tests only: a module singleton would otherwise leak between them. */
+export function resetBridgeQuestions() {
+    instance = undefined;
+}
+//# sourceMappingURL=bridge-store.js.map

package/dist/dashboard/bridge-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge-store.js","sourceRoot":"","sources":["../../src/dashboard/bridge-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AA8B/D,sGAAsG;AACtG,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAA;AAEzC,sEAAsE;AACtE,MAAM,kBAAkB,GAAG,GAAG,CAAA;AA6B9B;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,MAAc;IAC7D,OAAO,uBAAuB,QAAQ,sBAAsB,MAAM,kFAAkF,CAAA;AACtJ,CAAC;AAED,uEAAuE;AACvE,MAAM,yBAAyB,GAAG,CAAC,GAAG,MAAM,CAAA;AAE5C,MAAM,OAAO,eAAe;IACT,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAA;IACtD,OAAO,CAA2B;IAE1C;;;;;;OAMG;IACH,aAAa,CAAC,KAAa,EAAE,MAAc;QACzC,IAAI,CAAC,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;IAChE,CAAC;IAEO,YAAY,CAA2B;IAE/C;;;;;OAKG;IACH,aAAa,CAAC,GAAW,EAAE,QAAgB,EAAE,OAAgB;QAC3D,IAAI,CAAC,YAAY,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAA;IAC9E,CAAC;IAED,yEAAyE;IACzE,OAAO;QACL,OAAO,IAAI,CAAC,YAAY,CAAA;IAC1B,CAAC;IAEO,UAAU,CAAyB;IAE3C,4DAA4D;IAC5D,WAAW,CAAC,KAAkB;QAC5B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAA;IACzB,CAAC;IAED,4EAA4E;IAC5E,KAAK;QACH,OAAO,IAAI,CAAC,UAAU,CAAA;IACxB,CAAC;IAED,6EAA6E;IAC7E,WAAW;QACT,OAAO,IAAI,CAAC,OAAO,CAAA;IACrB,CAAC;IAEgB,eAAe,GAAG,IAAI,GAAG,EAA+B,CAAA;IAEzE;;;;;OAKG;IACH,YAAY,CAAC,MAA2B;QACtC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IACpD,CAAC;IAED,4FAA4F;IAC5F,MAAM,CAAC,SAAiB;QACtB,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC5C,CAAC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,SAAiB,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;QACzC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAA;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAClD,OAAO,MAAM,EAAE,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,uBAAuB,CAAA;IAC1G,CAAC;IAED;;;;OAIG;IACH,cAAc,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,EAAE,QAAQ,GAAG,yBAAyB;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO,KAAK,CAAA;QACnD,OAAO,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAA;IAC3D,CAAC;IAEgB,eAAe,GAAG,IAAI,GAAG,EAAoC,CAAA;IAE9E;;;;;;OAMG;IACH,WAAW,CAAC,KAAkB;QAC5B,IAAI,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACrD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,GAAG,EAAE,CAAA;YACjB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QAClD,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAC3B,+FAA+F;QAC/F,IAAI,KAAK,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC;YACpC,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,GAAG,kBAAkB,CAAC;gBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACxH,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,MAAM,CAAC,SAAiB;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;IACjG,CAAC;IAEgB,gBAAgB,GAAG,IAAI,GAAG,EAAwB,CAAA;IACnE,6EAA6E;IAC5D,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAA;IAE9D;;;;;;OAMG;IACH,MAAM,CAAC,QAAwB;QAC7B,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,WAAW,CAAC,QAAQ,CAAC;YAAE,OAAM;QACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QACvD,2FAA2F;QAC3F,6FAA6F;QAC7F,mFAAmF;QACnF,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;YAChD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QACnD,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;IAClD,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,SAAiB,EAAE,MAAgB;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC9C,IAAI,CAAC,QAAQ;YAAE,OAAO,qCAAqC,CAAA;QAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAC/E,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;YAAE,OAAO,iDAAiD,CAAA;QACvI,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,yBAAyB,CAAA;QAC5E,6GAA6G;QAC7G,2FAA2F;QAC3F,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;QACvF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACrI,MAAM,MAAM,GAAiB,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;QAC/H,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QAC5C,OAAO,MAAM,CAAA;IACf,CAAC;IAED,2GAA2G;IAC3G,YAAY,CAAC,SAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACnD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA;QACnF,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACvC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,8FAA8F;IAC9F,aAAa,CAAC,SAAiB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACnD,OAAO,MAAM,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IACxD,CAAC;IAED,kGAAkG;IAC1F,OAAO,CAAC,MAAoB,EAAE,GAAW;QAC/C,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,mBAAmB,CAAA;IACnG,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,SAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAA;QAC5C,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;YAAE,OAAO,SAAS,CAAA;QAC1D,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;QAC9C,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;OAIG;IACH,qBAAqB;QACnB,OAAO,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACxH,CAAC;IAED,2EAA2E;IAC3E,MAAM,CAAC,SAAiB;QACtB,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC7C,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,SAAiB,EAAE,EAAU,EAAE,EAAW,EAAE,IAAa;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACnD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAM;QACpE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAC7G,IAAI,CAAC,EAAE;YAAE,OAAM;QACf,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC9C,IAAI,QAAQ;YAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC1E,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IAClC,CAAC;IAED,8EAA8E;IAC9E,GAAG,CAAC,SAAiB;QACnB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACtC,CAAC;IAED,2CAA2C;IAC3C,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;IAC9F,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,SAAiB;QACrB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAChC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACtC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACvC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACxC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACxC,CAAC;CACF;AAED,qFAAqF;AACrF,SAAS,WAAW,CAAC,QAAwB;IAC3C,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI,EAAE,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAA;AAClH,CAAC;AAED;;;;;GAKG;AACH,IAAI,QAAqC,CAAA;AAEzC,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC,QAAQ;QAAE,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAA;IAC/C,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,oBAAoB;IAClC,QAAQ,GAAG,SAAS,CAAA;AACtB,CAAC"}

package/dist/dashboard/browser-proxy.d.ts

@@ -0,0 +1,41 @@
+import { type IncomingMessage, type ServerResponse } from 'node:http';
+/**
+ * The dashboard's route to an agent's browser preview (#813).
+ *
+ * The bridge itself lives in the agent (#802) on a port the OS picks per agent. The dashboard is a
+ * different origin, on the daemon's port, so it cannot post to that bridge directly: a JSON POST
+ * would need a CORS preflight, and answering it would mean letting browser origins reach the
+ * bridge — giving up exactly the containment #802 paid for by keeping Chrome's debug port
+ * unreachable from the web.
+ *
+ * So the daemon proxies. The pane talks same-origin to the daemon, the daemon talks to loopback,
+ * and the agent's port is never named by the client: it comes from the agent's own meta. A caller
+ * cannot point this at an arbitrary port, which is what keeps it from being an open relay into
+ * anything else listening on loopback.
+ */
+/** Where a proxied request is headed, once the URL has been understood. */
+export interface BrowserRoute {
+    projectId: string;
+    agentId: string;
+    /** `stream` renders in an `<img>`; `input` carries a click or a key back. */
+    leg: 'stream' | 'input';
+}
+/** The prefix the dashboard client posts to. */
+export declare const BROWSER_PROXY_PREFIX = "/browser";
+/**
+ * Parse `/browser/<projectId>/<agentId>/stream|input`, or undefined for anything else — an
+ * unrecognized shape must fall through to the bundle rather than be guessed at. Ids are taken
+ * verbatim and only ever used to look an agent up, never as a path.
+ */
+export declare function parseBrowserRoute(url: string | undefined): BrowserRoute | undefined;
+/** How the proxy finds the agent's bridge. Injectable so a test needs no registry and no run. */
+export type BrowserPortLookup = (projectId: string, agentId: string) => Promise<number | undefined>;
+/**
+ * Proxy one request to the agent's bridge. Returns false when the URL is not a browser route, so
+ * the dashboard server can carry on to the client bundle.
+ *
+ * Streams both ways rather than buffering: `/stream` is an endless `multipart/x-mixed-replace`
+ * body, so anything that waits for it to finish never answers.
+ */
+export declare function handleBrowserProxy(req: IncomingMessage, res: ServerResponse, lookup?: BrowserPortLookup): Promise<boolean>;
+//# sourceMappingURL=browser-proxy.d.ts.map

package/dist/dashboard/browser-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-proxy.d.ts","sourceRoot":"","sources":["../../src/dashboard/browser-proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAA;AAI9E;;;;;;;;;;;;;GAaG;AAEH,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,6EAA6E;IAC7E,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAA;CACxB;AAED,gDAAgD;AAChD,eAAO,MAAM,oBAAoB,aAAa,CAAA;AAE9C;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAkBnF;AAED,iGAAiG;AACjG,MAAM,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;AAgBnG;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,GAAE,iBAA4C,GACnD,OAAO,CAAC,OAAO,CAAC,CAyClB"}

package/dist/dashboard/browser-proxy.js

@@ -0,0 +1,96 @@
+import { request } from 'node:http';
+import { readLiveMetas } from '../store/index.js';
+import { defaultProjectsProvider } from './projects.js';
+/** The prefix the dashboard client posts to. */
+export const BROWSER_PROXY_PREFIX = '/browser';
+/**
+ * Parse `/browser/<projectId>/<agentId>/stream|input`, or undefined for anything else — an
+ * unrecognized shape must fall through to the bundle rather than be guessed at. Ids are taken
+ * verbatim and only ever used to look an agent up, never as a path.
+ */
+export function parseBrowserRoute(url) {
+    if (!url)
+        return undefined;
+    // Parse and decode defensively: a malformed target or escape (`/browser/p/%zz/stream`) names
+    // no run, and a throw here would escape the void-dispatched proxy handler as an unhandled
+    // rejection that kills the daemon (#938). Unparseable falls through to the bundle like any
+    // other unrecognized shape.
+    try {
+        const { pathname } = new URL(url, 'http://localhost');
+        if (!pathname.startsWith(`${BROWSER_PROXY_PREFIX}/`))
+            return undefined;
+        const parts = pathname.slice(BROWSER_PROXY_PREFIX.length + 1).split('/');
+        if (parts.length !== 3)
+            return undefined;
+        const [projectId, agentId, leg] = parts;
+        if (!projectId || !agentId)
+            return undefined;
+        if (leg !== 'stream' && leg !== 'input')
+            return undefined;
+        return { projectId, agentId: decodeURIComponent(agentId), leg };
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * The real lookup: the port the agent recorded on its own meta. An agent with no browser, a finished
+ * run, or an unknown id all read as undefined, which the caller turns into a 404.
+ */
+const defaultBrowserPortLookup = async (projectId, agentId) => {
+    const cwd = await defaultProjectsProvider().resolvePath(projectId);
+    if (!cwd)
+        return undefined;
+    const live = await readLiveMetas(cwd).catch(() => []);
+    const agent = live.find(meta => meta.id === agentId);
+    // Only a live agent: the bridge is torn down with the agent, so a port off a finished one would
+    // reach whatever the OS handed that number next.
+    return agent?.status === 'running' ? agent.browserStreamPort : undefined;
+};
+/**
+ * Proxy one request to the agent's bridge. Returns false when the URL is not a browser route, so
+ * the dashboard server can carry on to the client bundle.
+ *
+ * Streams both ways rather than buffering: `/stream` is an endless `multipart/x-mixed-replace`
+ * body, so anything that waits for it to finish never answers.
+ */
+export async function handleBrowserProxy(req, res, lookup = defaultBrowserPortLookup) {
+    const route = parseBrowserRoute(req.url);
+    if (!route)
+        return false;
+    const port = await lookup(route.projectId, route.agentId).catch(() => undefined);
+    if (!port) {
+        // The pane polls this while an agent is starting, and an agent may never have a browser at all,
+        // so a miss is ordinary rather than an error worth logging.
+        res.writeHead(404, { 'content-type': 'text/plain' }).end('no browser preview for this run');
+        return true;
+    }
+    const upstream = request({
+        host: '127.0.0.1',
+        port,
+        path: route.leg === 'stream' ? '/stream' : '/input',
+        method: route.leg === 'stream' ? 'GET' : 'POST',
+        headers: route.leg === 'input' ? { 'content-type': 'application/json' } : {},
+    }, proxied => {
+        res.writeHead(proxied.statusCode ?? 502, {
+            ...proxied.headers,
+            // The frames are a live view of whatever the human is typing. Nothing caches this.
+            'cache-control': 'no-store',
+        });
+        proxied.pipe(res);
+    });
+    // The agent can die mid-stream, which lands here rather than as a response.
+    upstream.on('error', () => {
+        if (!res.headersSent)
+            res.writeHead(502, { 'content-type': 'text/plain' });
+        res.end();
+    });
+    // Stop pulling frames the moment the pane goes away, or the agent keeps serving a dead viewer.
+    res.on('close', () => upstream.destroy());
+    if (route.leg === 'input')
+        req.pipe(upstream);
+    else
+        upstream.end();
+    return true;
+}
+//# sourceMappingURL=browser-proxy.js.map

package/dist/dashboard/browser-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-proxy.js","sourceRoot":"","sources":["../../src/dashboard/browser-proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAA6C,MAAM,WAAW,CAAA;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAyBvD,gDAAgD;AAChD,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,CAAA;AAE9C;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAuB;IACvD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,6FAA6F;IAC7F,0FAA0F;IAC1F,2FAA2F;IAC3F,4BAA4B;IAC5B,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;QACrD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,oBAAoB,GAAG,CAAC;YAAE,OAAO,SAAS,CAAA;QACtE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACxE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QACxC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,KAAK,CAAA;QACvC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAA;QAC5C,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,OAAO;YAAE,OAAO,SAAS,CAAA;QACzD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAA;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAKD;;;GAGG;AACH,MAAM,wBAAwB,GAAsB,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE;IAC/E,MAAM,GAAG,GAAG,MAAM,uBAAuB,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;IAClE,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,CAAA;IACpD,gGAAgG;IAChG,iDAAiD;IACjD,OAAO,KAAK,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1E,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAoB,EACpB,GAAmB,EACnB,MAAM,GAAsB,wBAAwB;IAEpD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAA;IAExB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAChF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,gGAAgG;QAChG,4DAA4D;QAC5D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAA;QAC3F,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CACtB;QACE,IAAI,EAAE,WAAW;QACjB,IAAI;QACJ,IAAI,EAAE,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;QACnD,MAAM,EAAE,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;QAC/C,OAAO,EAAE,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE;KAC7E,EACD,OAAO,CAAC,EAAE;QACR,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,IAAI,GAAG,EAAE;YACvC,GAAG,OAAO,CAAC,OAAO;YAClB,mFAAmF;YACnF,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAA;QACF,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnB,CAAC,CACF,CAAA;IAED,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACxB,IAAI,CAAC,GAAG,CAAC,WAAW;YAAE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;QAC1E,GAAG,CAAC,GAAG,EAAE,CAAA;IACX,CAAC,CAAC,CAAA;IACF,+FAA+F;IAC/F,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;IAEzC,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO;QAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;;QACxC,QAAQ,CAAC,GAAG,EAAE,CAAA;IACnB,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/dashboard/bundle.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Locate the built dashboard bundle (#405): `dist/dashboard-bundle`, where Vite
+ * writes it. Returns the directory only when its `index.html` exists, else undefined (the caller
+ * then serves the legacy page.ts). Shared by the daemon and the per-agent foreground dashboard (#427).
+ *
+ * One path, because there is one layout. The dashboard used to be its own package, so a published
+ * install read a copy of the bundle under this package's dist while the workspace read the original
+ * under the other package's — two candidates, a copy step, and a turbo task to sequence them. Now
+ * Vite writes here directly and both cases are the same directory (A7).
+ */
+export declare function resolveDashboardBundle(): Promise<string | undefined>;
+//# sourceMappingURL=bundle.d.ts.map

package/dist/dashboard/bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../../src/dashboard/bundle.ts"],"names":[],"mappings":"AAIA;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAO1E"}

package/dist/dashboard/bundle.js

@@ -0,0 +1,22 @@
+import { stat } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+/**
+ * Locate the built dashboard bundle (#405): `dist/dashboard-bundle`, where Vite
+ * writes it. Returns the directory only when its `index.html` exists, else undefined (the caller
+ * then serves the legacy page.ts). Shared by the daemon and the per-agent foreground dashboard (#427).
+ *
+ * One path, because there is one layout. The dashboard used to be its own package, so a published
+ * install read a copy of the bundle under this package's dist while the workspace read the original
+ * under the other package's — two candidates, a copy step, and a turbo task to sequence them. Now
+ * Vite writes here directly and both cases are the same directory (A7).
+ */
+export async function resolveDashboardBundle() {
+    // Resolved from the package root rather than from this module, so the answer is the same
+    // directory whether this is running out of `dist/`, `dist-test/`, or `src/` — all three sit one
+    // level under the package, and the bundle is only ever built once, into `dist/`.
+    const here = dirname(fileURLToPath(import.meta.url)); // <pkg>/{dist,dist-test,src}/dashboard
+    const dir = join(here, '..', '..', 'dist', 'dashboard-bundle');
+    return (await stat(join(dir, 'index.html')).then(s => s.isFile()).catch(() => false)) ? dir : undefined;
+}
+//# sourceMappingURL=bundle.js.map

package/dist/dashboard/bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../src/dashboard/bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,yFAAyF;IACzF,gGAAgG;IAChG,iFAAiF;IACjF,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA,CAAC,uCAAuC;IAC5F,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAA;IAC9D,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;AACzG,CAAC"}

package/dist/dashboard/cache.d.ts

@@ -0,0 +1,47 @@
+/**
+ * A read-through cache for the dashboard's slow reads (#1028).
+ *
+ * The dashboard polls. Every session view asks for its branch's PR, twice (the worktree bar and
+ * the handoff summary), on every navigation and again every ten seconds — and a git host read costs
+ * about 600ms against a local git read's ten. So the same answer was being bought over and over,
+ * and the panel waited for it each time.
+ *
+ * Three behaviours, and each one is load-bearing:
+ *   - **single flight** — concurrent asks for the same key share one call, so two panels and a
+ *     poll tick do not become three subprocesses
+ *   - **stale while revalidate** — once a value exists it is returned immediately, and refreshed
+ *     in the background when it is older than `ttlMs`; nobody waits twice for the same answer
+ *   - **a budget on the cold ask** — the first ask waits only `budgetMs` for the answer before
+ *     reporting `pending`, so a slow lookup delays one panel's extra detail rather than the page
+ *
+ * `pending` is not "failed": it means the answer is on its way and the next read will have it.
+ * A caller that must not act on a half-answer (offering to open a PR that may already exist)
+ * uses it to hold off.
+ */
+/** What a cached read answers with: the value, and whether it is still being fetched. */
+export interface Cached<T> {
+    value: T | undefined;
+    /** True when no value is known yet and a read is still running. */
+    pending: boolean;
+}
+/** Clock seam, so the tests do not sleep. */
+export type Now = () => number;
+export interface CacheOptions {
+    /** How old a value may be before a background refresh is started. */
+    ttlMs?: number;
+    /** How long a first, uncached ask waits before reporting `pending`. */
+    budgetMs?: number;
+    now?: Now;
+}
+/**
+ * Read `key` through the cache, calling `load` when it is missing or stale.
+ *
+ * A failed load is not cached: it leaves whatever was there (a panel keeps showing the last PR it
+ * knew about rather than dropping it because the git host hiccuped) and the next read tries again.
+ */
+export declare function cachedRead<T>(key: string, load: () => Promise<T>, options?: CacheOptions): Promise<Cached<T>>;
+/** Drop what is cached under `key`, so the next read is a fresh one. */
+export declare function invalidate(key: string): void;
+/** Test seam: forget everything. */
+export declare function clearCache(): void;
+//# sourceMappingURL=cache.d.ts.map

package/dist/dashboard/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../src/dashboard/cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAcH,yFAAyF;AACzF,MAAM,WAAW,MAAM,CAAC,CAAC;IACvB,KAAK,EAAE,CAAC,GAAG,SAAS,CAAA;IACpB,mEAAmE;IACnE,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,6CAA6C;AAC7C,MAAM,MAAM,GAAG,GAAG,MAAM,MAAM,CAAA;AAE9B,MAAM,WAAW,YAAY;IAC3B,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,GAAG,CAAA;CACV;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAgBvH;AAED,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAE5C;AAED,oCAAoC;AACpC,wBAAgB,UAAU,IAAI,IAAI,CAEjC"}

package/dist/dashboard/cache.js

@@ -0,0 +1,87 @@
+/**
+ * A read-through cache for the dashboard's slow reads (#1028).
+ *
+ * The dashboard polls. Every session view asks for its branch's PR, twice (the worktree bar and
+ * the handoff summary), on every navigation and again every ten seconds — and a git host read costs
+ * about 600ms against a local git read's ten. So the same answer was being bought over and over,
+ * and the panel waited for it each time.
+ *
+ * Three behaviours, and each one is load-bearing:
+ *   - **single flight** — concurrent asks for the same key share one call, so two panels and a
+ *     poll tick do not become three subprocesses
+ *   - **stale while revalidate** — once a value exists it is returned immediately, and refreshed
+ *     in the background when it is older than `ttlMs`; nobody waits twice for the same answer
+ *   - **a budget on the cold ask** — the first ask waits only `budgetMs` for the answer before
+ *     reporting `pending`, so a slow lookup delays one panel's extra detail rather than the page
+ *
+ * `pending` is not "failed": it means the answer is on its way and the next read will have it.
+ * A caller that must not act on a half-answer (offering to open a PR that may already exist)
+ * uses it to hold off.
+ */
+const entries = new Map();
+/**
+ * Read `key` through the cache, calling `load` when it is missing or stale.
+ *
+ * A failed load is not cached: it leaves whatever was there (a panel keeps showing the last PR it
+ * knew about rather than dropping it because the git host hiccuped) and the next read tries again.
+ */
+export async function cachedRead(key, load, options = {}) {
+    const { ttlMs = 60_000, budgetMs = 150, now = Date.now } = options;
+    const entry = entries.get(key);
+    // A known value answers straight away. Refresh it in the background when it has aged out, so
+    // the cost of being current is never paid by the caller that happens to ask.
+    if (entry?.has) {
+        if (now() - entry.at >= ttlMs && !entry.inflight)
+            void refresh(key, load, now);
+        return { value: entry.value, pending: false };
+    }
+    // Nothing known yet: join the running read, or start one, and wait a moment for it.
+    const inflight = entry?.inflight ?? refresh(key, load, now);
+    const settled = await withBudget(inflight, budgetMs);
+    if (settled.done)
+        return { value: settled.value, pending: false };
+    return { value: undefined, pending: true };
+}
+/** Drop what is cached under `key`, so the next read is a fresh one. */
+export function invalidate(key) {
+    entries.delete(key);
+}
+/** Test seam: forget everything. */
+export function clearCache() {
+    entries.clear();
+}
+function refresh(key, load, now) {
+    const inflight = load()
+        .then(value => {
+        entries.set(key, { value, has: true, at: now() });
+        return value;
+    })
+        .catch(error => {
+        // Keep the last good value; only the in-flight marker goes.
+        const current = entries.get(key);
+        if (current?.has)
+            entries.set(key, { value: current.value, has: true, at: current.at });
+        else
+            entries.delete(key);
+        throw error;
+    });
+    const current = entries.get(key);
+    entries.set(key, { ...(current ?? { has: false, at: 0 }), inflight });
+    // The rejection is reported to whoever awaited it; nothing else must see an unhandled one.
+    inflight.catch(() => { });
+    return inflight;
+}
+/** Resolve as soon as `promise` does, or give up waiting after `ms`. */
+async function withBudget(promise, ms) {
+    let timer;
+    const timeout = new Promise(resolve => {
+        timer = setTimeout(() => resolve({ done: false }), ms);
+    });
+    try {
+        return await Promise.race([promise.then(value => ({ done: true, value })).catch(() => ({ done: false })), timeout]);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=cache.js.map

package/dist/dashboard/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/dashboard/cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAYH,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAA;AAoBjD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAI,GAAW,EAAE,IAAsB,EAAE,OAAO,GAAiB,EAAE;IACjG,MAAM,EAAE,KAAK,GAAG,MAAM,EAAE,QAAQ,GAAG,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAA;IAClE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAyB,CAAA;IAEtD,6FAA6F;IAC7F,6EAA6E;IAC7E,IAAI,KAAK,EAAE,GAAG,EAAE,CAAC;QACf,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAE,KAAK,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;QAC9E,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC/C,CAAC;IAED,oFAAoF;IACpF,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;IAC3D,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IACpD,IAAI,OAAO,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACjE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AAC5C,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;AACrB,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,UAAU;IACxB,OAAO,CAAC,KAAK,EAAE,CAAA;AACjB,CAAC;AAED,SAAS,OAAO,CAAI,GAAW,EAAE,IAAsB,EAAE,GAAQ;IAC/D,MAAM,QAAQ,GAAG,IAAI,EAAE;SACpB,IAAI,CAAC,KAAK,CAAC,EAAE;QACZ,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;QACjD,OAAO,KAAK,CAAA;IACd,CAAC,CAAC;SACD,KAAK,CAAC,KAAK,CAAC,EAAE;QACb,4DAA4D;QAC5D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAyB,CAAA;QACxD,IAAI,OAAO,EAAE,GAAG;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;;YAClF,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACxB,MAAM,KAAK,CAAA;IACb,CAAC,CAAC,CAAA;IACJ,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAyB,CAAA;IACxD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;IACrE,2FAA2F;IAC3F,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACxB,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,wEAAwE;AACxE,KAAK,UAAU,UAAU,CAAI,OAAmB,EAAE,EAAU;IAC1D,IAAI,KAAgD,CAAA;IACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAkB,OAAO,CAAC,EAAE;QACrD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IACF,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAc,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;IACvI,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;AACH,CAAC"}

package/dist/dashboard/content-type.d.ts

@@ -0,0 +1,3 @@
+/** The content type for a file path (by its extension), or `application/octet-stream`. */
+export declare function contentTypeFor(path: string): string;
+//# sourceMappingURL=content-type.d.ts.map

package/dist/dashboard/content-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-type.d.ts","sourceRoot":"","sources":["../../src/dashboard/content-type.ts"],"names":[],"mappings":"AA4BA,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD"}