@openagt/dashboard 0.0.0-stage → 0.8.0

package/dist/dashboard/content-type.js

@@ -0,0 +1,31 @@
+import { extname } from 'node:path';
+/**
+ * Content types for the files the framework's two static servers hand out — the dashboard
+ * bundle (static.ts) and a project's on-demand Preview (preview.ts). One table so the two
+ * cannot drift apart, which they had: each was missing extensions the other listed. The two
+ * servers keep their own policies (SPA fallback + immutable cache vs 403 + stream); only this
+ * lookup is shared. Unknown extensions fall back to `application/octet-stream`.
+ */
+const CONTENT_TYPES = {
+    '.html': 'text/html; charset=utf-8',
+    '.js': 'text/javascript; charset=utf-8',
+    '.mjs': 'text/javascript; charset=utf-8',
+    '.css': 'text/css; charset=utf-8',
+    '.json': 'application/json; charset=utf-8',
+    '.svg': 'image/svg+xml',
+    '.ico': 'image/x-icon',
+    '.png': 'image/png',
+    '.jpg': 'image/jpeg',
+    '.jpeg': 'image/jpeg',
+    '.gif': 'image/gif',
+    '.webp': 'image/webp',
+    '.woff': 'font/woff',
+    '.woff2': 'font/woff2',
+    '.map': 'application/json; charset=utf-8',
+    '.webmanifest': 'application/manifest+json',
+};
+/** The content type for a file path (by its extension), or `application/octet-stream`. */
+export function contentTypeFor(path) {
+    return CONTENT_TYPES[extname(path).toLowerCase()] ?? 'application/octet-stream';
+}
+//# sourceMappingURL=content-type.js.map

package/dist/dashboard/content-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-type.js","sourceRoot":"","sources":["../../src/dashboard/content-type.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC;;;;;;GAMG;AACH,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,gCAAgC;IACxC,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,iCAAiC;IACzC,cAAc,EAAE,2BAA2B;CAC5C,CAAA;AAED,0FAA0F;AAC1F,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAA;AACjF,CAAC"}

package/dist/dashboard/dashboard.d.ts

@@ -0,0 +1,38 @@
+import type { ProjectSummary } from './projects.js';
+import { type ProjectQueue } from './queue.js';
+import { type ActiveAgent, type OverviewDeps } from './overview.js';
+/** One project's rollup row. */
+export interface ProjectStat {
+    projectId: string;
+    /** Whether the repo has any ticket in `tickets/` (#958) — presence only, not a count. */
+    hasTickets: boolean;
+    /** Whether one of the project's packages provides tickets at all (#1774): without one, there is nothing to populate. */
+    providesTickets: boolean;
+}
+/** The dashboard page payload (#471). */
+export interface DashboardData {
+    totals: {
+        projects: number;
+        openTodos: number;
+    };
+    /** Agents going right now, most-recently-updated first (from {@link buildOverview}). */
+    active: ActiveAgent[];
+    /** Every registered project, most-recently-active first. */
+    projects: ProjectStat[];
+    /** The per-project agent queue (from {@link collectQueue}): the projects that have one, with their open entries. */
+    queue: ProjectQueue[];
+}
+/** Injectable readers so {@link buildDashboard} is unit-testable off disk. */
+export interface DashboardDeps extends OverviewDeps {
+    /** Whether a project has tickets (#958). Defaults to the provider's list being non-empty (false on any error). */
+    tickets?: (cwd: string) => Promise<boolean>;
+    /** Whether a project's packages provide tickets (#1774). Defaults to the provider lookup (false on any error). */
+    providesTickets?: (cwd: string) => Promise<boolean>;
+}
+/**
+ * Build the Overview dashboard: the {@link buildOverview} rollup (working now / queue) plus the
+ * per-project ticket presence the onboarding checklist reads. Forgiving — a project whose state
+ * cannot be read simply contributes nothing.
+ */
+export declare function buildDashboard(projects: ProjectSummary[], deps?: DashboardDeps): Promise<DashboardData>;
+//# sourceMappingURL=dashboard.d.ts.map

package/dist/dashboard/dashboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../src/dashboard/dashboard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,YAAY,CAAA;AAE5D,OAAO,EAAiB,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAA;AAYlF,gCAAgC;AAChC,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,yFAAyF;IACzF,UAAU,EAAE,OAAO,CAAA;IACnB,wHAAwH;IACxH,eAAe,EAAE,OAAO,CAAA;CACzB;AAED,yCAAyC;AACzC,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAA;QAChB,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;IACD,wFAAwF;IACxF,MAAM,EAAE,WAAW,EAAE,CAAA;IACrB,4DAA4D;IAC5D,QAAQ,EAAE,WAAW,EAAE,CAAA;IACvB,oHAAoH;IACpH,KAAK,EAAE,YAAY,EAAE,CAAA;CACtB;AAED,8EAA8E;AAC9E,MAAM,WAAW,aAAc,SAAQ,YAAY;IACjD,kHAAkH;IAClH,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3C,kHAAkH;IAClH,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CACpD;AAYD;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAyBjH"}

package/dist/dashboard/dashboard.js

@@ -0,0 +1,42 @@
+import { collectQueue } from './queue.js';
+import { projectTickets } from '../store/tickets.js';
+import { buildOverview } from './overview.js';
+/** Whether the provider one of the project's packages declares (#1774) lists any ticket; no provider, no tickets. */
+async function hasProvidedTickets(cwd) {
+    try {
+        const source = await projectTickets(cwd);
+        return source !== undefined && (await source.list()).length > 0;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Build the Overview dashboard: the {@link buildOverview} rollup (working now / queue) plus the
+ * per-project ticket presence the onboarding checklist reads. Forgiving — a project whose state
+ * cannot be read simply contributes nothing.
+ */
+export async function buildDashboard(projects, deps = {}) {
+    const hasTicketsFor = deps.tickets ?? hasProvidedTickets;
+    const providesTicketsFor = deps.providesTickets ?? (cwd => projectTickets(cwd).then(source => source !== undefined, () => false));
+    // Compute the queue once and hand it to buildOverview so the backlog is read a single time.
+    const queue = await (deps.queue ?? (p => collectQueue(p)))(projects);
+    const overview = await buildOverview(projects, { ...deps, queue: async () => queue });
+    // Most-recently-active first: the checklist takes the head of this list as the project to act
+    // on, so the order is the output here even though the timestamp itself is not.
+    const ordered = [...projects].sort((a, b) => (b.lastActivityAt ?? '').localeCompare(a.lastActivityAt ?? ''));
+    const projectStats = [];
+    for (const project of ordered) {
+        projectStats.push({ projectId: project.id, hasTickets: await hasTicketsFor(project.path), providesTickets: await providesTicketsFor(project.path) });
+    }
+    return {
+        totals: {
+            projects: projects.length,
+            openTodos: overview.queueOpen,
+        },
+        active: overview.active,
+        projects: projectStats,
+        queue,
+    };
+}
+//# sourceMappingURL=dashboard.js.map

package/dist/dashboard/dashboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard.js","sourceRoot":"","sources":["../../src/dashboard/dashboard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAqB,MAAM,YAAY,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAuC,MAAM,eAAe,CAAA;AA2ClF,qHAAqH;AACrH,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAA;QACxC,OAAO,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAA0B,EAAE,IAAI,GAAkB,EAAE;IACvF,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,IAAI,kBAAkB,CAAA;IACxD,MAAM,kBAAkB,GAAG,IAAI,CAAC,eAAe,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAEjI,4FAA4F;IAC5F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;IACpE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,CAAA;IAErF,8FAA8F;IAC9F,+EAA+E;IAC/E,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAA;IAC5G,MAAM,YAAY,GAAkB,EAAE,CAAA;IACtC,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACtJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE;YACN,QAAQ,EAAE,QAAQ,CAAC,MAAM;YACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B;QACD,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,QAAQ,EAAE,YAAY;QACtB,KAAK;KACN,CAAA;AACH,CAAC"}

package/dist/dashboard/discord-webhook.d.ts

@@ -0,0 +1,17 @@
+/** Discord rejects a message over 2000 characters outright, so a long reply is trimmed. */
+export declare const MAX_CONTENT = 2000;
+/**
+ * The one Discord *webhook* transport (#627): a single POST of one message. The two
+ * notification posters (activity, interventions) each carried their own copy of this fetch;
+ * their line formatters rightly stay beside the types they switch on, but the transport is
+ * not per-feed. Deliberately not in discord/rest.ts — that module is the bot-token API
+ * (channels, replies), and a webhook needs no token and reaches one fixed channel — though
+ * it shares that module's clamp: Discord rejects a message over 2000 chars outright, so an
+ * unclamped "needs you" batch would silently post nothing (#940).
+ *
+ * Resolves whether Discord accepted the post. A failed delivery must never throw out of a
+ * daemon watcher, so a non-ok response and a network error both resolve `false` for the
+ * caller to log.
+ */
+export declare function postDiscordWebhook(webhook: string, content: string, fetchImpl?: typeof fetch): Promise<boolean>;
+//# sourceMappingURL=discord-webhook.d.ts.map

package/dist/dashboard/discord-webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discord-webhook.d.ts","sourceRoot":"","sources":["../../src/dashboard/discord-webhook.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,eAAO,MAAM,WAAW,OAAO,CAAA;AAS/B;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,GAAE,OAAO,KAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAW5H"}

package/dist/dashboard/discord-webhook.js

@@ -0,0 +1,36 @@
+/** Discord rejects a message over 2000 characters outright, so a long reply is trimmed. */
+export const MAX_CONTENT = 2000;
+/** Trim to Discord's limit, marking the cut so a truncated answer never reads as a complete one. */
+function clampContent(text) {
+    if (text.length <= MAX_CONTENT)
+        return text;
+    const notice = '\n… (truncated)';
+    return text.slice(0, MAX_CONTENT - notice.length) + notice;
+}
+/**
+ * The one Discord *webhook* transport (#627): a single POST of one message. The two
+ * notification posters (activity, interventions) each carried their own copy of this fetch;
+ * their line formatters rightly stay beside the types they switch on, but the transport is
+ * not per-feed. Deliberately not in discord/rest.ts — that module is the bot-token API
+ * (channels, replies), and a webhook needs no token and reaches one fixed channel — though
+ * it shares that module's clamp: Discord rejects a message over 2000 chars outright, so an
+ * unclamped "needs you" batch would silently post nothing (#940).
+ *
+ * Resolves whether Discord accepted the post. A failed delivery must never throw out of a
+ * daemon watcher, so a non-ok response and a network error both resolve `false` for the
+ * caller to log.
+ */
+export async function postDiscordWebhook(webhook, content, fetchImpl = fetch) {
+    try {
+        const res = await fetchImpl(webhook, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ content: clampContent(content) }),
+        });
+        return res.ok;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=discord-webhook.js.map

package/dist/dashboard/discord-webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discord-webhook.js","sourceRoot":"","sources":["../../src/dashboard/discord-webhook.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAA;AAE/B,oGAAoG;AACpG,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,IAAI,CAAC,MAAM,IAAI,WAAW;QAAE,OAAO,IAAI,CAAA;IAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAA;IAChC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAA;AAC5D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAe,EAAE,OAAe,EAAE,SAAS,GAAiB,KAAK;IACxG,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;SACzD,CAAC,CAAA;QACF,OAAO,GAAG,CAAC,EAAE,CAAA;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC"}

package/dist/dashboard/docs.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The plan/backlog document categories the dashboard surfaces in its sidebar
+ * (#319, part of the MVP UI #309), so the human can read them beside the agent.
+ *
+ * These are written per session as `PLAN_<SESSION>.agent.md` (the plan for now) and
+ * `TODO_<SESSION>.agent.md` (the backlog), where SESSION is a git-branch slug — by
+ * The Framework's own system prompt back when it ran the agent (#323/#326), and by
+ * whatever a project's own skills tell an agent to write now. The flat fallback is `PLAN.md`
+ * at the root; the `TODO` category has no flat file: the agent queue is not a document of the
+ * checkout but a project package's data, and the dashboard shows it on that package's own page
+ * and the Overview's AI Queue card (#1774), not here. Scoped and flat-root names are matched
+ * against a flat readdir of the root, never taken from user input, so there is no path
+ * traversal to guard against.
+ */
+export declare const DOC_CATEGORIES: readonly [{
+    readonly flat: 'PLAN.md';
+    readonly scoped: RegExp;
+}, {
+    readonly scoped: RegExp;
+}];
+/** One surfaced document: its filename and current contents. */
+export interface WorkspaceDoc {
+    name: string;
+    content: string;
+}
+/**
+ * The workspace-root filenames to surface, in sidebar order: per category the flat
+ * file (if present) then its session-scoped files (sorted). Every name is a bare
+ * readdir entry matched against a fixed pattern, so none can traverse. Returns
+ * empty when the workspace is missing or unreadable.
+ */
+/**
+ * Read the surfaced plan/todo docs, in sidebar order: per category the flat file (if the
+ * category has one and it is present) then its session-scoped files (sorted), every one a
+ * workspace-root file. Missing or blank files are skipped; a file over the size cap is
+ * truncated. Never throws — a read error just omits that doc.
+ */
+export declare function readDocs(cwd: string): Promise<WorkspaceDoc[]>;
+//# sourceMappingURL=docs.d.ts.map

package/dist/dashboard/docs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.d.ts","sourceRoot":"","sources":["../../src/dashboard/docs.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,cAAc;aACvB,IAAI,EAAE,SAAS;aAAE,MAAM;;aACvB,MAAM;EACA,CAAA;AAEV,gEAAgE;AAChE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAKD;;;;;GAKG;AACH;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAoBnE"}

package/dist/dashboard/docs.js

@@ -0,0 +1,59 @@
+import { readFile, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+/**
+ * The plan/backlog document categories the dashboard surfaces in its sidebar
+ * (#319, part of the MVP UI #309), so the human can read them beside the agent.
+ *
+ * These are written per session as `PLAN_<SESSION>.agent.md` (the plan for now) and
+ * `TODO_<SESSION>.agent.md` (the backlog), where SESSION is a git-branch slug — by
+ * The Framework's own system prompt back when it ran the agent (#323/#326), and by
+ * whatever a project's own skills tell an agent to write now. The flat fallback is `PLAN.md`
+ * at the root; the `TODO` category has no flat file: the agent queue is not a document of the
+ * checkout but a project package's data, and the dashboard shows it on that package's own page
+ * and the Overview's AI Queue card (#1774), not here. Scoped and flat-root names are matched
+ * against a flat readdir of the root, never taken from user input, so there is no path
+ * traversal to guard against.
+ */
+export const DOC_CATEGORIES = [
+    { flat: 'PLAN.md', scoped: /^PLAN_[a-z0-9-]+\.agent\.md$/ },
+    { scoped: /^TODO_[a-z0-9-]+\.agent\.md$/ },
+];
+/** Cap a single doc so a runaway file can't bloat the docs payload. */
+const MAX_DOC_BYTES = 200_000;
+/**
+ * The workspace-root filenames to surface, in sidebar order: per category the flat
+ * file (if present) then its session-scoped files (sorted). Every name is a bare
+ * readdir entry matched against a fixed pattern, so none can traverse. Returns
+ * empty when the workspace is missing or unreadable.
+ */
+/**
+ * Read the surfaced plan/todo docs, in sidebar order: per category the flat file (if the
+ * category has one and it is present) then its session-scoped files (sorted), every one a
+ * workspace-root file. Missing or blank files are skipped; a file over the size cap is
+ * truncated. Never throws — a read error just omits that doc.
+ */
+export async function readDocs(cwd) {
+    let entries;
+    try {
+        entries = await readdir(cwd);
+    }
+    catch {
+        return [];
+    }
+    const present = new Set(entries);
+    const docs = [];
+    const push = (name, content) => {
+        if (!content?.trim())
+            return;
+        docs.push({ name, content: content.length > MAX_DOC_BYTES ? content.slice(0, MAX_DOC_BYTES) + '\n\n… (truncated)' : content });
+    };
+    for (const cat of DOC_CATEGORIES) {
+        if ('flat' in cat && present.has(cat.flat))
+            push(cat.flat, await readFile(join(cwd, cat.flat), 'utf8').catch(() => undefined));
+        for (const name of entries.filter(e => cat.scoped.test(e)).sort()) {
+            push(name, await readFile(join(cwd, name), 'utf8').catch(() => undefined));
+        }
+    }
+    return docs;
+}
+//# sourceMappingURL=docs.js.map

package/dist/dashboard/docs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.js","sourceRoot":"","sources":["../../src/dashboard/docs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,8BAA8B,EAAE;IAC3D,EAAE,MAAM,EAAE,8BAA8B,EAAE;CAClC,CAAA;AAQV,uEAAuE;AACvE,MAAM,aAAa,GAAG,OAAO,CAAA;AAE7B;;;;;GAKG;AACH;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAW;IACxC,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IAChC,MAAM,IAAI,GAAmB,EAAE,CAAA;IAC/B,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,OAA2B,EAAQ,EAAE;QAC/D,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE;YAAE,OAAM;QAC5B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IAChI,CAAC,CAAA;IACD,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,IAAI,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;QAC9H,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAClE,IAAI,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/dashboard/file-diff.d.ts

@@ -0,0 +1,67 @@
+import { type GitRunner } from '@gemstack/agent-data';
+import type { FileGitStatus } from './file-status.js';
+import { safeRepoPath } from './file-read.js';
+export { safeRepoPath };
+/** One file's diff, capped so a hover card can render it. */
+export interface FileDiff {
+    /** The repo-relative path asked for. */
+    path: string;
+    status: FileGitStatus;
+    /** Unified diff body, hunks only (git's `diff --git` / index preamble is dropped). */
+    patch: string;
+    added: number;
+    removed: number;
+    /** The patch hit the preview cap and was cut. */
+    truncated: boolean;
+    /** Nothing textual to show (git reports a binary change, or the file is not UTF-8 text). */
+    binary: boolean;
+}
+/** One changed file in a session's Changes list (#817): what moved, and by how much. */
+export interface FileChange {
+    path: string;
+    status: FileGitStatus;
+    added: number;
+    removed: number;
+    /** Line counts are unavailable (a binary file, or an untracked one too large to count). */
+    binary: boolean;
+}
+/**
+ * The diff for one changed file in the checkout at `cwd`, or, given a `range`, between two
+ * commits of the repository at `cwd` (a run's committed change, `agent-tree.ts`).
+ *
+ * Tracked files diff against `HEAD`, not the index, so a change the agent staged still shows;
+ * that also matches `git status --porcelain`, which is what dotted the file in the first place.
+ * An untracked file is rendered as all-added from its contents, since `git diff --no-index`
+ * exits non-zero on a difference and would read as a failure here.
+ *
+ * Returns null when the path is unsafe, unreadable, or has no diff to show.
+ */
+export declare function readFileDiff(cwd: string, path: string, status: FileGitStatus, git?: GitRunner, range?: {
+    from: string;
+    to: string;
+}): Promise<FileDiff | null>;
+/** One `git diff --numstat` line, parsed. */
+export interface NumstatEntry {
+    path: string;
+    added: number;
+    removed: number;
+    binary: boolean;
+}
+/**
+ * Parse `git diff --numstat` output: `added<TAB>removed<TAB>path`, with `-` for both counts
+ * on a binary file. The one parser for the grammar — it was written here and in run-handoff,
+ * and the copies had already drifted on a path containing a tab (this side rejoined it, the
+ * other dropped the line).
+ */
+export declare function parseNumstat(out: string): NumstatEntry[];
+/**
+ * Every changed file in the checkout at `cwd`, with its line counts: the session's Changes list
+ * (#817). One `git status` plus one `git diff --numstat`, not a diff per file, so a session that
+ * touched forty files still costs two git calls.
+ *
+ * Untracked files have no numstat entry (they are not in the diff at all), so their added count
+ * is their line count, read from disk. Sorted by path, so the list does not reshuffle as a live
+ * session edits.
+ */
+export declare function readFileChanges(cwd: string, statuses: Record<string, FileGitStatus>, git?: GitRunner): Promise<FileChange[]>;
+//# sourceMappingURL=file-diff.d.ts.map

package/dist/dashboard/file-diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-diff.d.ts","sourceRoot":"","sources":["../../src/dashboard/file-diff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAA;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAkC,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAI7E,OAAO,EAAE,YAAY,EAAE,CAAA;AAUvB,6DAA6D;AAC7D,MAAM,WAAW,QAAQ;IACvB,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,aAAa,CAAA;IACrB,sFAAsF;IACtF,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,iDAAiD;IACjD,SAAS,EAAE,OAAO,CAAA;IAClB,4FAA4F;IAC5F,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,wFAAwF;AACxF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,aAAa,CAAA;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,2FAA2F;IAC3F,MAAM,EAAE,OAAO,CAAA;CAChB;AAoCD;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,EACrB,GAAG,GAAE,SAA2B,EAChC,KAAK,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACnC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CA4B1B;AAGD,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,OAAO,CAAA;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,EAAE,CAUxD;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,EACvC,GAAG,GAAE,SAA2B,GAC/B,OAAO,CAAC,UAAU,EAAE,CAAC,CAqBvB"}

package/dist/dashboard/file-diff.js

@@ -0,0 +1,132 @@
+import { nodeGitRunner } from '@gemstack/agent-data';
+import { cutToPreview, readConfinedFile, safeRepoPath } from './file-read.js';
+// `safeRepoPath` moved to file-read.js with #828, where the unchanged-file preview shares it.
+// Re-exported so this stays the import site it has been.
+export { safeRepoPath };
+/** Drop git's `diff --git` / `index` / `mode` preamble, keeping the `---`/`+++`/hunk body. */
+function hunksOnly(patch) {
+    const lines = patch.split('\n');
+    const start = lines.findIndex(line => line.startsWith('--- ') || line.startsWith('@@'));
+    return (start === -1 ? [] : lines.slice(start)).join('\n').trimEnd();
+}
+/** Count the +/- lines of a unified patch, ignoring the `---`/`+++` file headers. */
+function countChanges(patch) {
+    let added = 0;
+    let removed = 0;
+    let inHunk = false;
+    for (const line of patch.split('\n')) {
+        if (line.startsWith('@@')) {
+            inHunk = true;
+            continue;
+        }
+        // The file headers only ever precede the first hunk. Past it a line opening the same way is
+        // content — a removed `---` separator reads `----`, a removed `-- comment` reads `--- comment`
+        // — and skipping those undercounted the file's own stats.
+        if (!inHunk && (line.startsWith('+++') || line.startsWith('---')))
+            continue;
+        if (line.startsWith('+'))
+            added++;
+        else if (line.startsWith('-'))
+            removed++;
+    }
+    return { added, removed };
+}
+/** An untracked file has no blob to diff against, so render its contents as all-added. */
+function asAllAdded(text) {
+    const lines = text.split('\n');
+    if (lines[lines.length - 1] === '')
+        lines.pop(); // a trailing newline is not a line
+    return lines.map(line => `+${line}`).join('\n');
+}
+/**
+ * The diff for one changed file in the checkout at `cwd`, or, given a `range`, between two
+ * commits of the repository at `cwd` (a run's committed change, `agent-tree.ts`).
+ *
+ * Tracked files diff against `HEAD`, not the index, so a change the agent staged still shows;
+ * that also matches `git status --porcelain`, which is what dotted the file in the first place.
+ * An untracked file is rendered as all-added from its contents, since `git diff --no-index`
+ * exits non-zero on a difference and would read as a failure here.
+ *
+ * Returns null when the path is unsafe, unreadable, or has no diff to show.
+ */
+export async function readFileDiff(cwd, path, status, git = nodeGitRunner(), range) {
+    if (!safeRepoPath(path))
+        return null;
+    if (!range && status === 'untracked') {
+        const raw = await readConfinedFile(cwd, path);
+        if (!raw)
+            return null;
+        if (raw.includes(0))
+            return { path, status, patch: '', added: 0, removed: 0, truncated: false, binary: true };
+        const all = asAllAdded(raw.toString('utf8'));
+        const { body: patch, truncated } = cutToPreview(all);
+        // Every line of an untracked file is an addition, so it is counted rather than parsed — and
+        // counted over the whole file, not the cut preview: the Changes list reports the file's own
+        // size, which a long new file used to report as exactly the preview limit.
+        return { path, status, patch, added: all ? all.split('\n').length : 0, removed: 0, truncated, binary: false };
+    }
+    // `HEAD` is missing in a repo with no commits yet; the working-tree diff is the honest answer
+    // there rather than an error.
+    const raw = range
+        ? await git(['diff', '--unified=3', range.from, range.to, '--', path], cwd).catch(() => '')
+        : await git(['diff', '--unified=3', 'HEAD', '--', path], cwd)
+            .catch(() => git(['diff', '--unified=3', '--', path], cwd))
+            .catch(() => '');
+    if (!raw.trim())
+        return null;
+    if (/^Binary files /m.test(raw))
+        return { path, status, patch: '', added: 0, removed: 0, truncated: false, binary: true };
+    const { body: patch, truncated } = cutToPreview(hunksOnly(raw));
+    if (!patch)
+        return null;
+    return { path, status, patch, ...countChanges(patch), truncated, binary: false };
+}
+/**
+ * Parse `git diff --numstat` output: `added<TAB>removed<TAB>path`, with `-` for both counts
+ * on a binary file. The one parser for the grammar — it was written here and in run-handoff,
+ * and the copies had already drifted on a path containing a tab (this side rejoined it, the
+ * other dropped the line).
+ */
+export function parseNumstat(out) {
+    const entries = [];
+    for (const line of out.split('\n')) {
+        const [added, removed, ...rest] = line.split('\t');
+        const path = rest.join('\t');
+        if (!path || added === undefined || removed === undefined)
+            continue;
+        const binary = added === '-' || removed === '-';
+        entries.push({ path, added: binary ? 0 : Number(added) || 0, removed: binary ? 0 : Number(removed) || 0, binary });
+    }
+    return entries;
+}
+/**
+ * Every changed file in the checkout at `cwd`, with its line counts: the session's Changes list
+ * (#817). One `git status` plus one `git diff --numstat`, not a diff per file, so a session that
+ * touched forty files still costs two git calls.
+ *
+ * Untracked files have no numstat entry (they are not in the diff at all), so their added count
+ * is their line count, read from disk. Sorted by path, so the list does not reshuffle as a live
+ * session edits.
+ */
+export async function readFileChanges(cwd, statuses, git = nodeGitRunner()) {
+    const paths = Object.keys(statuses).filter(safeRepoPath);
+    if (paths.length === 0)
+        return [];
+    const numstat = await git(['diff', '--numstat', 'HEAD'], cwd)
+        .catch(() => git(['diff', '--numstat'], cwd))
+        .catch(() => '');
+    const counted = new Map(parseNumstat(numstat).map(entry => [entry.path, entry]));
+    const changes = await Promise.all(paths.map(async (path) => {
+        const status = statuses[path];
+        const known = counted.get(path);
+        if (known)
+            return { ...known, status };
+        if (status !== 'untracked')
+            return { path, status, added: 0, removed: 0, binary: false };
+        // An untracked file is not in any diff, so its whole content is the addition.
+        const diff = await readFileDiff(cwd, path, status, git).catch(() => null);
+        return { path, status, added: diff?.added ?? 0, removed: 0, binary: diff?.binary ?? false };
+    }));
+    return changes.sort((a, b) => a.path.localeCompare(b.path));
+}
+//# sourceMappingURL=file-diff.js.map

package/dist/dashboard/file-diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-diff.js","sourceRoot":"","sources":["../../src/dashboard/file-diff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAkB,MAAM,sBAAsB,CAAA;AAEpE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAE7E,8FAA8F;AAC9F,yDAAyD;AACzD,OAAO,EAAE,YAAY,EAAE,CAAA;AAmCvB,8FAA8F;AAC9F,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;IACvF,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAA;AACtE,CAAC;AAED,qFAAqF;AACrF,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,GAAG,IAAI,CAAA;YACb,SAAQ;QACV,CAAC;QACD,4FAA4F;QAC5F,+FAA+F;QAC/F,0DAA0D;QAC1D,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAAE,SAAQ;QAC3E,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,KAAK,EAAE,CAAA;aAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAA;IAC1C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;AAC3B,CAAC;AAED,0FAA0F;AAC1F,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;QAAE,KAAK,CAAC,GAAG,EAAE,CAAA,CAAC,mCAAmC;IACnF,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACjD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAW,EACX,IAAY,EACZ,MAAqB,EACrB,GAAG,GAAc,aAAa,EAAE,EAChC,KAAoC;IAEpC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAEpC,IAAI,CAAC,KAAK,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC7C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;QAC7G,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;QACpD,4FAA4F;QAC5F,4FAA4F;QAC5F,2EAA2E;QAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IAC/G,CAAC;IAED,8FAA8F;IAC9F,8BAA8B;IAC9B,MAAM,GAAG,GAAG,KAAK;QACf,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC3F,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC;aACxD,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;aAC1D,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;IACtB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAA;IAC5B,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAEzH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AAClF,CAAC;AAWD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,OAAO,GAAmB,EAAE,CAAA;IAClC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5B,IAAI,CAAC,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS;YAAE,SAAQ;QACnE,MAAM,MAAM,GAAG,KAAK,KAAK,GAAG,IAAI,OAAO,KAAK,GAAG,CAAA;QAC/C,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IACpH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,QAAuC,EACvC,GAAG,GAAc,aAAa,EAAE;IAEhC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IACxD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEjC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC;SAC1D,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;SAC5C,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;IAClB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;IAEhF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAuB,EAAE;QAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAE,CAAA;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,KAAK;YAAE,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAA;QACtC,IAAI,MAAM,KAAK,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;QACxF,8EAA8E;QAC9E,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QACzE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK,EAAE,CAAA;IAC7F,CAAC,CAAC,CACH,CAAA;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AAC7D,CAAC"}

package/dist/dashboard/file-read.d.ts

@@ -0,0 +1,42 @@
+/** Cap what a hover card renders, whether it is a patch or a file. */
+export declare const MAX_PREVIEW_LINES = 500;
+/** One unchanged file's contents for the tree's hover card (#828). */
+export interface FileContent {
+    /** The repo-relative path asked for. */
+    path: string;
+    /** The file's text, cut at {@link MAX_PREVIEW_LINES}. Empty when binary. */
+    text: string;
+    /** The file was longer than the cap and was cut. */
+    truncated: boolean;
+    /** Not UTF-8 text, so there is nothing to render. */
+    binary: boolean;
+}
+/**
+ * Whether a client-supplied path may be read: repo-relative, no traversal, no absolute path, no
+ * leading `-` (git would read it as a flag), and never into `.git` (config and credentials live
+ * there). Rejecting is the whole contract; the caller resolves it against a checkout it chose.
+ */
+export declare function safeRepoPath(path: string): boolean;
+/**
+ * Read a repo-relative file from `cwd`, or null when it is unsafe, outside the checkout, or
+ * unreadable.
+ *
+ * The confinement check is a `realpath` on both sides, not a string compare on the resolved path.
+ * `resolve` does not follow symlinks, so `src/link.txt -> /etc/passwd` resolves to a path that sits
+ * happily under `cwd` and passes a textual check while the read leaves the repo. `realpath` is what
+ * makes the containment real; it also normalizes the platform's own links (macOS `/tmp`), which is
+ * why `cwd` goes through it too rather than being compared raw.
+ */
+export declare function readConfinedFile(cwd: string, path: string): Promise<Buffer | null>;
+/** Cut a body to {@link MAX_PREVIEW_LINES}, reporting whether anything was dropped. */
+export declare function cutToPreview(body: string): {
+    body: string;
+    truncated: boolean;
+};
+/**
+ * One unchanged file's contents (#828). Null when the path is unsafe, outside the checkout, or
+ * unreadable. A file git has not touched still reads from the resolved checkout, so a session's
+ * hover shows its worktree's copy rather than the project root's (#815).
+ */
+export declare function readFileContent(cwd: string, path: string): Promise<FileContent | null>;
+//# sourceMappingURL=file-read.d.ts.map

package/dist/dashboard/file-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-read.d.ts","sourceRoot":"","sources":["../../src/dashboard/file-read.ts"],"names":[],"mappings":"AAIA,sEAAsE;AACtE,eAAO,MAAM,iBAAiB,MAAM,CAAA;AAEpC,sEAAsE;AACtE,MAAM,WAAW,WAAW;IAC1B,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAA;IACZ,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAA;IACZ,oDAAoD;IACpD,SAAS,EAAE,OAAO,CAAA;IAClB,qDAAqD;IACrD,MAAM,EAAE,OAAO,CAAA;CAChB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CASlD;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAUxF;AAED,uFAAuF;AACvF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAI/E;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAM5F"}

package/dist/dashboard/file-read.js

@@ -0,0 +1,69 @@
+// Reading one file out of a checkout, for the panel's hover card: the diff of a changed file
+// (#816, file-diff.ts) and the contents of an unchanged one (#828). Both take a path from the
+// client, so the guard and the confined read live here, once, and every caller goes through them.
+/** Cap what a hover card renders, whether it is a patch or a file. */
+export const MAX_PREVIEW_LINES = 500;
+/**
+ * Whether a client-supplied path may be read: repo-relative, no traversal, no absolute path, no
+ * leading `-` (git would read it as a flag), and never into `.git` (config and credentials live
+ * there). Rejecting is the whole contract; the caller resolves it against a checkout it chose.
+ */
+export function safeRepoPath(path) {
+    if (!path || path.length > 1024 || path.includes('\0'))
+        return false;
+    if (path.startsWith('/') || path.startsWith('-') || /^[a-zA-Z]:/.test(path))
+        return false;
+    const parts = path.split(/[\\/]/);
+    // Any `.git` segment, not just a leading one: a nested repo's `.git/config` holds credentials too.
+    // Compared case-insensitively, because macOS and Windows are: there `.GIT/config` opens the very
+    // file this refuses, and the path comes from the browser.
+    if (parts.some(part => part.toLowerCase() === '.git'))
+        return false;
+    return parts.every(part => part !== '' && part !== '.' && part !== '..');
+}
+/**
+ * Read a repo-relative file from `cwd`, or null when it is unsafe, outside the checkout, or
+ * unreadable.
+ *
+ * The confinement check is a `realpath` on both sides, not a string compare on the resolved path.
+ * `resolve` does not follow symlinks, so `src/link.txt -> /etc/passwd` resolves to a path that sits
+ * happily under `cwd` and passes a textual check while the read leaves the repo. `realpath` is what
+ * makes the containment real; it also normalizes the platform's own links (macOS `/tmp`), which is
+ * why `cwd` goes through it too rather than being compared raw.
+ */
+export async function readConfinedFile(cwd, path) {
+    if (!safeRepoPath(path))
+        return null;
+    const { readFile, realpath } = await import('node:fs/promises');
+    const { resolve, sep } = await import('node:path');
+    const root = await realpath(resolve(cwd)).catch(() => null);
+    if (!root)
+        return null;
+    // A missing file has no realpath, so this also answers "not there" before the read.
+    const full = await realpath(resolve(cwd, path)).catch(() => null);
+    if (!full || !full.startsWith(root + sep))
+        return null;
+    return readFile(full).catch(() => null);
+}
+/** Cut a body to {@link MAX_PREVIEW_LINES}, reporting whether anything was dropped. */
+export function cutToPreview(body) {
+    const lines = body.split('\n');
+    if (lines.length <= MAX_PREVIEW_LINES)
+        return { body, truncated: false };
+    return { body: lines.slice(0, MAX_PREVIEW_LINES).join('\n'), truncated: true };
+}
+/**
+ * One unchanged file's contents (#828). Null when the path is unsafe, outside the checkout, or
+ * unreadable. A file git has not touched still reads from the resolved checkout, so a session's
+ * hover shows its worktree's copy rather than the project root's (#815).
+ */
+export async function readFileContent(cwd, path) {
+    const raw = await readConfinedFile(cwd, path);
+    if (!raw)
+        return null;
+    if (raw.includes(0))
+        return { path, text: '', truncated: false, binary: true };
+    const { body, truncated } = cutToPreview(raw.toString('utf8').replace(/\n$/, ''));
+    return { path, text: body, truncated, binary: false };
+}
+//# sourceMappingURL=file-read.js.map