@openagt/dashboard 0.0.0-stage → 0.8.0

package/dist/dashboard/file-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-read.js","sourceRoot":"","sources":["../../src/dashboard/file-read.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,8FAA8F;AAC9F,kGAAkG;AAElG,sEAAsE;AACtE,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAA;AAcpC;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACpE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACzF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACjC,mGAAmG;IACnG,iGAAiG;IACjG,0DAA0D;IAC1D,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;QAAE,OAAO,KAAK,CAAA;IACnE,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAA;AAC1E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,IAAY;IAC9D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACpC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;IAC/D,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;IAClD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAC3D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,oFAAoF;IACpF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IACjE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACtD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;AACzC,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,KAAK,CAAC,MAAM,IAAI,iBAAiB;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IACxE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,IAAY;IAC7D,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAC9E,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;IACjF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AACvD,CAAC"}

package/dist/dashboard/file-status.d.ts

@@ -0,0 +1,21 @@
+import { type GitRunner } from '@gemstack/agent-data';
+/**
+ * The tree's per-file git state. `added` is a file a commit created (a run's committed change,
+ * `agent-tree.ts`); the working tree's status here never says it, a new file there is `untracked`.
+ */
+export type FileGitStatus = 'untracked' | 'added' | 'modified' | 'deleted';
+/** One `git status --porcelain` line: the two status columns and the path they are about. */
+export interface PorcelainEntry {
+    code: string;
+    /** Repo-relative; a rename resolves to the new path. */
+    path: string;
+}
+/** Parse `git status --porcelain` output. Shared with the handoff's pending-files read (#1173). */
+export declare function parsePorcelain(out: string): PorcelainEntry[];
+/**
+ * Read each changed file's status from `git status --porcelain`, keyed by repo-relative path.
+ * `??` is untracked, a `D` in either column is deleted, anything else (M/A/R/C…) reads as
+ * modified. Renames map to the new path. Returns `{}` when the path is not a git repo.
+ */
+export declare function readFileStatuses(cwd: string, git?: GitRunner): Promise<Record<string, FileGitStatus>>;
+//# sourceMappingURL=file-status.d.ts.map

package/dist/dashboard/file-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-status.d.ts","sourceRoot":"","sources":["../../src/dashboard/file-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAKpE;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAA;AAO1E,6FAA6F;AAC7F,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAA;CACb;AAED,mGAAmG;AACnG,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,EAAE,CAa5D;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,SAA2B,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAO5H"}

package/dist/dashboard/file-status.js

@@ -0,0 +1,37 @@
+import { nodeGitRunner } from '@gemstack/agent-data';
+/** Strip git's surrounding quotes from a path with special chars (basic; leaves escapes as-is). */
+function unquotePath(path) {
+    return path.length >= 2 && path.startsWith('"') && path.endsWith('"') ? path.slice(1, -1) : path;
+}
+/** Parse `git status --porcelain` output. Shared with the handoff's pending-files read (#1173). */
+export function parsePorcelain(out) {
+    const entries = [];
+    for (const line of out.split('\n')) {
+        if (line.length < 4)
+            continue;
+        const code = line.slice(0, 2);
+        let path = line.slice(3);
+        const arrow = path.indexOf(' -> ');
+        if (arrow !== -1)
+            path = path.slice(arrow + 4); // a rename: the new path is the one that exists
+        path = unquotePath(path);
+        if (!path)
+            continue;
+        entries.push({ code, path });
+    }
+    return entries;
+}
+/**
+ * Read each changed file's status from `git status --porcelain`, keyed by repo-relative path.
+ * `??` is untracked, a `D` in either column is deleted, anything else (M/A/R/C…) reads as
+ * modified. Renames map to the new path. Returns `{}` when the path is not a git repo.
+ */
+export async function readFileStatuses(cwd, git = nodeGitRunner()) {
+    const out = await git(['status', '--porcelain'], cwd).catch(() => '');
+    const map = {};
+    for (const { code, path } of parsePorcelain(out)) {
+        map[path] = code === '??' ? 'untracked' : code.includes('D') ? 'deleted' : 'modified';
+    }
+    return map;
+}
+//# sourceMappingURL=file-status.js.map

package/dist/dashboard/file-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-status.js","sourceRoot":"","sources":["../../src/dashboard/file-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAkB,MAAM,sBAAsB,CAAA;AAWpE,mGAAmG;AACnG,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAClG,CAAC;AASD,mGAAmG;AACnG,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,OAAO,GAAqB,EAAE,CAAA;IACpC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,SAAQ;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC7B,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAClC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA,CAAC,gDAAgD;QAC/F,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;QACxB,IAAI,CAAC,IAAI;YAAE,SAAQ;QACnB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9B,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,GAAG,GAAc,aAAa,EAAE;IAClF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;IACrE,MAAM,GAAG,GAAkC,EAAE,CAAA;IAC7C,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;IACvF,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/dashboard/gh.d.ts

@@ -0,0 +1,131 @@
+import { type CliRunner } from '../cli-exec.js';
+import { type Cached } from './cache.js';
+/**
+ * The `gh` CLI, in one place: the JSON reads the dashboard makes of pull requests. Reads only:
+ * pushing, opening and merging are the project's branches provider's (`../store/branches.ts`).
+ *
+ * There were four separate `gh` adapters across three modules. Three were reads that each
+ * hand-rolled `execFile` + `JSON.parse` + a swallowed failure and each spelled the 8s timeout
+ * again, and two of those differed only in whether a branch positional was passed.
+ */
+/** Runs `gh`, resolving stdout and rejecting with the CLI's own stderr on failure. */
+export type GhRunner = CliRunner;
+/** A forgiving `gh --json` read: resolves `empty` when gh is missing/unauthed, or its output is not JSON. */
+export declare function ghJson<T>(args: string[], cwd: string, empty: T, gh?: GhRunner): Promise<T>;
+/** The PR opened for a branch, when there is one. */
+export interface LinkedPr {
+    number: number;
+    url: string;
+    /** OPEN / MERGED / CLOSED (as gh reports it). */
+    state: string;
+    title: string;
+    /** ISO creation time, when the read included it: what tells one agent's PR from a predecessor's. */
+    createdAt?: string;
+    /**
+     * The head commit the PR covers, when the read included it (#1512): what tells "the branch's
+     * PR already landed everything" from "the session kept working after its PR merged".
+     */
+    headRefOid?: string;
+}
+/**
+ * A best-effort PR lookup, for a named branch or for the checkout's current branch. One type for
+ * both: the named-branch form is the general one, and "the current branch" is just omitting it.
+ */
+export type PrLookup = (cwd: string, branch?: string) => Promise<LinkedPr | undefined>;
+/**
+ * The branch-addressed form, for a caller that always names one (#799): a finished session's
+ * worktree may be gone, so "the current branch" would silently be the project's, not the
+ * session's. Narrower than {@link PrLookup} on purpose, so that invariant is in the type.
+ */
+export type BranchPrLookup = (cwd: string, branch: string) => Promise<LinkedPr | undefined>;
+/**
+ * The PR for `branch`, or for whatever branch `cwd` is on when none is named. Resolves undefined
+ * when gh is missing/unauthed or there is no PR.
+ *
+ * The named-branch form is what a finished session needs (#799): its worktree may be gone, so the
+ * checkout's current branch is the project's, not the session's. The fields are copied out rather
+ * than passed through, so a future `--json` addition cannot leak into what callers store.
+ *
+ * Every optional field {@link LinkedPr} declares must be both asked for and copied out here, or it
+ * is silently absent for every caller of this path. `createdAt` was once neither, and it is what
+ * tells an agent's own PR from a predecessor's on the same branch name ({@link pickAgentPr}).
+ */
+export declare function ghPrView(cwd: string, branch?: string, gh?: GhRunner): Promise<LinkedPr | undefined>;
+/**
+ * The cached form of {@link ghPrView} (#1028), and what the dashboard's panels use.
+ *
+ * A PR lookup costs about 600ms where the git reads beside it cost ten, and the answer changes
+ * about as often as someone opens a PR. Cached per checkout and branch, shared between the
+ * worktree bar and the handoff summary, and refreshed behind whoever asks. `pending` says the
+ * answer is not known yet rather than that there is no PR — the difference matters to a caller
+ * deciding whether to offer "Open PR".
+ */
+export declare function cachedPrView(cwd: string, branch?: string): Promise<Cached<LinkedPr | undefined>>;
+/** Forget a branch's PR, after an action that changes whether it has one. */
+export declare function forgetPr(cwd: string, branch?: string): void;
+/**
+ * Every PR a branch name has ever had, newest first (#1251).
+ *
+ * `gh pr view <branch>` answers with the newest PR for that head *in any state*, so a session
+ * whose prompt pins its branch name (`the-framework/triage-quick`) inherits a predecessor's
+ * merged PR as its own. The list form keeps the whole history so {@link pickAgentPr} can decide
+ * which entry, if any, belongs to the agent asking. Resolves `[]` when gh is missing/unauthed —
+ * indistinguishable from "no PRs", which is what every caller would do with a failure anyway.
+ */
+export declare function ghPrsForBranch(cwd: string, branch: string): Promise<LinkedPr[]>;
+/**
+ * {@link ghPrsForBranch} for a caller about to *open* a PR (#1601): a listing that fails throws
+ * instead of reading as "no PRs", because "none" and "could not tell" must not look alike there —
+ * the difference is a second draft PR on a branch that already has one.
+ */
+export declare function ghPrsForBranchOrThrow(cwd: string, branch: string): Promise<LinkedPr[]>;
+/** The cached form of {@link ghPrsForBranch}, shared through the same read-through cache (#1028). */
+export declare function cachedPrsForBranch(cwd: string, branch: string): Promise<Cached<LinkedPr[]>>;
+/** Forget a branch's PR history, after an action that changes it (opening one). */
+export declare function forgetBranchPrs(cwd: string, branch: string): void;
+/**
+ * The PR that belongs to an agent, out of every PR its branch name has had (#1251/#1255).
+ *
+ * An OPEN PR always counts: GitHub allows one open PR per head branch, so whatever is open on the
+ * run's branch is where its pushed commits land. A closed one counts only when it was created
+ * after the agent started (`since`, the agent's `startedAt`) — the oldest such entry, which is the one
+ * this agent's handoff opened. Anything older is a previous agent's PR wearing the same branch name,
+ * which is exactly what showed a merged two-day-old PR as a fresh session's own. Without `since`
+ * only an open PR is trusted.
+ *
+ * `order` exists for the one caller asking a different question (#1512). `'first'` answers
+ * identity — which PR did *this agent* open, so a later agent's must not be the answer. `'latest'`
+ * answers the handoff decision — which PR last saw the branch, so "did the session keep working
+ * past it" is readable off that PR's `headRefOid`; there the oldest entry would call work that a
+ * second PR already landed unlanded.
+ */
+export declare function pickAgentPr(prs: LinkedPr[], since?: string, order?: 'first' | 'latest'): LinkedPr | undefined;
+/** An open PR on the interventions queue (#632). */
+export interface OpenPr {
+    number: number;
+    title: string;
+    url: string;
+    /**
+     * Draft PRs are generally left off the queue: a draft is not asking for review.
+     *
+     * The exception is a draft the framework opened for itself (#1102), which {@link headRefName}
+     * is what tells apart.
+     */
+    isDraft: boolean;
+    /** The branch the PR is from, so a session's own PR can be recognised as ours (#1102). */
+    headRefName?: string;
+    createdAt?: string;
+}
+/**
+ * A checkout's open PRs. Unlike the other reads here it *rejects* when gh could not answer — no
+ * remote, not authenticated, GitHub unreachable — instead of resolving `[]`.
+ *
+ * "No PRs are open" and "I could not look" are different answers, and its caller keeps a baseline
+ * of what it has already announced (#1623): taking the second for the first makes the next
+ * successful read announce every already-open PR as new. The caller decides what a failure costs;
+ * it cannot decide what it never hears about.
+ */
+export declare function ghPrList(cwd: string, gh?: GhRunner): Promise<OpenPr[]>;
+/** Lists a checkout's open PRs; rejects when there is no remote / gh is unavailable. */
+export type PrLister = (cwd: string) => Promise<OpenPr[]>;
+//# sourceMappingURL=gh.d.ts.map

package/dist/dashboard/gh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gh.d.ts","sourceRoot":"","sources":["../../src/dashboard/gh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1D,OAAO,EAA0B,KAAK,MAAM,EAAE,MAAM,YAAY,CAAA;AAEhE;;;;;;;GAOG;AAEH,sFAAsF;AACtF,MAAM,MAAM,QAAQ,GAAG,SAAS,CAAA;AAQhC,6GAA6G;AAC7G,wBAAsB,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,GAAE,QAAiB,GAAG,OAAO,CAAC,CAAC,CAAC,CAMxG;AAED,qDAAqD;AACrD,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,oGAAoG;IACpG,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAA;AAEtF;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAA;AAI3F;;;;;;;;;;;GAWG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,GAAE,QAAiB,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAajH;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC,CAEtG;AAED,6EAA6E;AAC7E,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAE3D;AAMD;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAErF;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAE5F;AAiBD,qGAAqG;AACrG,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAEjG;AAED,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAEjE;AASD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,GAAE,OAAO,GAAG,QAAkB,GAAG,QAAQ,GAAG,SAAS,CAQtH;AAED,oDAAoD;AACpD,MAAM,WAAW,MAAM;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,MAAM,CAAA;IACX;;;;;OAKG;IACH,OAAO,EAAE,OAAO,CAAA;IAChB,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;;;GAQG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,GAAE,QAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAIpF;AAED,wFAAwF;AACxF,MAAM,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA"}

package/dist/dashboard/gh.js

@@ -0,0 +1,150 @@
+import { cliRunner } from '../cli-exec.js';
+import { cachedRead, invalidate } from './cache.js';
+/**
+ * Reads are capped short and never surface an error: every caller is a panel that renders
+ * whatever it got, and "gh is not installed" must cost a page load nothing.
+ */
+const readGh = cliRunner({ bin: 'gh', timeoutMs: 8_000 });
+/** A forgiving `gh --json` read: resolves `empty` when gh is missing/unauthed, or its output is not JSON. */
+export async function ghJson(args, cwd, empty, gh = readGh) {
+    try {
+        return JSON.parse(await gh(args, cwd));
+    }
+    catch {
+        return empty;
+    }
+}
+const PR_VIEW_FIELDS = 'number,url,state,title,createdAt,headRefOid';
+/**
+ * The PR for `branch`, or for whatever branch `cwd` is on when none is named. Resolves undefined
+ * when gh is missing/unauthed or there is no PR.
+ *
+ * The named-branch form is what a finished session needs (#799): its worktree may be gone, so the
+ * checkout's current branch is the project's, not the session's. The fields are copied out rather
+ * than passed through, so a future `--json` addition cannot leak into what callers store.
+ *
+ * Every optional field {@link LinkedPr} declares must be both asked for and copied out here, or it
+ * is silently absent for every caller of this path. `createdAt` was once neither, and it is what
+ * tells an agent's own PR from a predecessor's on the same branch name ({@link pickAgentPr}).
+ */
+export async function ghPrView(cwd, branch, gh = readGh) {
+    const args = ['pr', 'view', ...(branch ? [branch] : []), '--json', PR_VIEW_FIELDS];
+    const pr = await ghJson(args, cwd, undefined, gh);
+    return pr
+        ? {
+            number: pr.number,
+            url: pr.url,
+            state: pr.state,
+            title: pr.title,
+            ...(pr.createdAt ? { createdAt: pr.createdAt } : {}),
+            ...(pr.headRefOid ? { headRefOid: pr.headRefOid } : {}),
+        }
+        : undefined;
+}
+/**
+ * The cached form of {@link ghPrView} (#1028), and what the dashboard's panels use.
+ *
+ * A PR lookup costs about 600ms where the git reads beside it cost ten, and the answer changes
+ * about as often as someone opens a PR. Cached per checkout and branch, shared between the
+ * worktree bar and the handoff summary, and refreshed behind whoever asks. `pending` says the
+ * answer is not known yet rather than that there is no PR — the difference matters to a caller
+ * deciding whether to offer "Open PR".
+ */
+export async function cachedPrView(cwd, branch) {
+    return cachedRead(prCacheKey(cwd, branch), () => ghPrView(cwd, branch));
+}
+/** Forget a branch's PR, after an action that changes whether it has one. */
+export function forgetPr(cwd, branch) {
+    invalidate(prCacheKey(cwd, branch));
+}
+function prCacheKey(cwd, branch) {
+    return `pr\u0000${cwd}\u0000${branch ?? ''}`;
+}
+/**
+ * Every PR a branch name has ever had, newest first (#1251).
+ *
+ * `gh pr view <branch>` answers with the newest PR for that head *in any state*, so a session
+ * whose prompt pins its branch name (`the-framework/triage-quick`) inherits a predecessor's
+ * merged PR as its own. The list form keeps the whole history so {@link pickAgentPr} can decide
+ * which entry, if any, belongs to the agent asking. Resolves `[]` when gh is missing/unauthed —
+ * indistinguishable from "no PRs", which is what every caller would do with a failure anyway.
+ */
+export async function ghPrsForBranch(cwd, branch) {
+    return linkedPrs(await ghJson(prListArgs(branch), cwd, []));
+}
+/**
+ * {@link ghPrsForBranch} for a caller about to *open* a PR (#1601): a listing that fails throws
+ * instead of reading as "no PRs", because "none" and "could not tell" must not look alike there —
+ * the difference is a second draft PR on a branch that already has one.
+ */
+export async function ghPrsForBranchOrThrow(cwd, branch) {
+    return linkedPrs(JSON.parse(await readGh(prListArgs(branch), cwd)));
+}
+function prListArgs(branch) {
+    return ['pr', 'list', '--head', branch, '--state', 'all', '--limit', '20', '--json', 'number,url,state,title,createdAt,headRefOid'];
+}
+function linkedPrs(prs) {
+    return prs.map(pr => ({
+        number: pr.number,
+        url: pr.url,
+        state: pr.state,
+        title: pr.title,
+        ...(pr.createdAt ? { createdAt: pr.createdAt } : {}),
+        ...(pr.headRefOid ? { headRefOid: pr.headRefOid } : {}),
+    }));
+}
+/** The cached form of {@link ghPrsForBranch}, shared through the same read-through cache (#1028). */
+export async function cachedPrsForBranch(cwd, branch) {
+    return cachedRead(branchPrsCacheKey(cwd, branch), () => ghPrsForBranch(cwd, branch));
+}
+/** Forget a branch's PR history, after an action that changes it (opening one). */
+export function forgetBranchPrs(cwd, branch) {
+    invalidate(branchPrsCacheKey(cwd, branch));
+}
+/** Same unprintable separator idea as `prCacheKey`, spelled so paths cannot collide with it. */
+const KEY_SEP = String.fromCharCode(0);
+function branchPrsCacheKey(cwd, branch) {
+    return ['prs', cwd, branch].join(KEY_SEP);
+}
+/**
+ * The PR that belongs to an agent, out of every PR its branch name has had (#1251/#1255).
+ *
+ * An OPEN PR always counts: GitHub allows one open PR per head branch, so whatever is open on the
+ * run's branch is where its pushed commits land. A closed one counts only when it was created
+ * after the agent started (`since`, the agent's `startedAt`) — the oldest such entry, which is the one
+ * this agent's handoff opened. Anything older is a previous agent's PR wearing the same branch name,
+ * which is exactly what showed a merged two-day-old PR as a fresh session's own. Without `since`
+ * only an open PR is trusted.
+ *
+ * `order` exists for the one caller asking a different question (#1512). `'first'` answers
+ * identity — which PR did *this agent* open, so a later agent's must not be the answer. `'latest'`
+ * answers the handoff decision — which PR last saw the branch, so "did the session keep working
+ * past it" is readable off that PR's `headRefOid`; there the oldest entry would call work that a
+ * second PR already landed unlanded.
+ */
+export function pickAgentPr(prs, since, order = 'first') {
+    const open = prs.find(pr => pr.state === 'OPEN');
+    if (open)
+        return open;
+    if (!since)
+        return undefined;
+    const closed = prs
+        .filter(pr => pr.createdAt && pr.createdAt >= since)
+        .sort((a, b) => ((a.createdAt ?? '') < (b.createdAt ?? '') ? -1 : 1));
+    return order === 'latest' ? closed.at(-1) : closed[0];
+}
+/**
+ * A checkout's open PRs. Unlike the other reads here it *rejects* when gh could not answer — no
+ * remote, not authenticated, GitHub unreachable — instead of resolving `[]`.
+ *
+ * "No PRs are open" and "I could not look" are different answers, and its caller keeps a baseline
+ * of what it has already announced (#1623): taking the second for the first makes the next
+ * successful read announce every already-open PR as new. The caller decides what a failure costs;
+ * it cannot decide what it never hears about.
+ */
+export async function ghPrList(cwd, gh = readGh) {
+    const fields = 'number,title,url,isDraft,headRefName,createdAt';
+    const args = ['pr', 'list', '--state', 'open', '--limit', '50', '--json', fields];
+    return JSON.parse(await gh(args, cwd));
+}
+//# sourceMappingURL=gh.js.map

package/dist/dashboard/gh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gh.js","sourceRoot":"","sources":["../../src/dashboard/gh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAe,MAAM,YAAY,CAAA;AAchE;;;GAGG;AACH,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;AAEzD,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,MAAM,CAAI,IAAc,EAAE,GAAW,EAAE,KAAQ,EAAE,EAAE,GAAa,MAAM;IAC1F,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAM,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AA+BD,MAAM,cAAc,GAAG,6CAA6C,CAAA;AAEpE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,MAAe,EAAE,EAAE,GAAa,MAAM;IAChF,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAA;IAClF,MAAM,EAAE,GAAG,MAAM,MAAM,CAAuB,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAA;IACvE,OAAO,EAAE;QACP,CAAC,CAAC;YACE,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,GAAG,EAAE,EAAE,CAAC,GAAG;YACX,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD;QACH,CAAC,CAAC,SAAS,CAAA;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,MAAe;IAC7D,OAAO,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAA;AACzE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,MAAe;IACnD,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAA;AACrC,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,MAAe;IAC9C,OAAO,WAAW,GAAG,SAAS,MAAM,IAAI,EAAE,EAAE,CAAA;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,MAAc;IAC9D,OAAO,SAAS,CAAC,MAAM,MAAM,CAAa,UAAU,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAA;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW,EAAE,MAAc;IACrE,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAe,CAAC,CAAA;AACnF,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,6CAA6C,CAAC,CAAA;AACrI,CAAC;AAED,SAAS,SAAS,CAAC,GAAe;IAChC,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACpB,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,GAAG,EAAE,EAAE,CAAC,GAAG;QACX,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,CAAC,CAAA;AACL,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,MAAc;IAClE,OAAO,UAAU,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAA;AACtF,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,MAAc;IACzD,UAAU,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAA;AAC5C,CAAC;AAED,gGAAgG;AAChG,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;AAEtC,SAAS,iBAAiB,CAAC,GAAW,EAAE,MAAc;IACpD,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,WAAW,CAAC,GAAe,EAAE,KAAc,EAAE,KAAK,GAAuB,OAAO;IAC9F,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,KAAK,MAAM,CAAC,CAAA;IAChD,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IACrB,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5B,MAAM,MAAM,GAAG,GAAG;SACf,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,SAAS,IAAI,KAAK,CAAC;SACnD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AACvD,CAAC;AAmBD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,EAAE,GAAa,MAAM;IAC/D,MAAM,MAAM,GAAG,gDAAgD,CAAA;IAC/D,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IACjF,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAa,CAAA;AACpD,CAAC"}

package/dist/dashboard/git-status.d.ts

@@ -0,0 +1,44 @@
+import { type GitRunner } from '@openagt/agent-data';
+import { type LinkedPr, type PrLookup } from './pull-requests.js';
+/** A project's git status for the panel. */
+export interface GitStatus {
+    branch: string;
+    /** Uncommitted changes present. */
+    dirty: boolean;
+    pr?: LinkedPr;
+    /** The PR is not known yet, rather than absent (#1028): the lookup is still running. */
+    prPending?: boolean;
+}
+/** Injectable seams so {@link readGitStatus} is unit-testable off disk. */
+export interface GitStatusDeps {
+    git?: GitRunner;
+    pr?: PrLookup;
+    /**
+     * The agent's start, when the status is read for an agent's checkout (#1255). The default lookup
+     * answers the newest PR for the branch *in any state* — so an agent on a reused pinned branch
+     * (`the-framework/triage-quick`) wears a predecessor's merged PR as its own badge.
+     * With `since` set the PR is picked from the branch's whole history by {@link pickAgentPr}
+     * instead: an open PR, or a closed one no older than the agent itself.
+     */
+    since?: string;
+    /** The branch's full PR history, for the {@link GitStatusDeps.since} path (default {@link cachedPrsForBranch}). */
+    prs?: (cwd: string, branch: string) => Promise<LinkedPr[]>;
+    /**
+     * The project's folder, for a status read in a run's checkout: the branch's PR history is looked
+     * up and cached by it, as the run's handoff reads it, so the lookup the bar made while the run
+     * worked is warm once the run ends and its Open PR is asked about.
+     */
+    prRoot?: string;
+}
+/**
+ * The branch `cwd` has checked out, by its short name; `HEAD` when it is on no branch. Undefined
+ * when `cwd` is not a git repo, or git failed.
+ */
+export declare function currentBranch(cwd: string, git?: GitRunner): Promise<string | undefined>;
+/**
+ * Read a project's git status: the current branch and dirty flag (from git), plus the linked
+ * PR (best-effort). Returns undefined when the path is not a git repo. Forgiving — a failed
+ * `git status` reads as clean, and a failed PR lookup simply omits the PR.
+ */
+export declare function readGitStatus(cwd: string, deps?: GitStatusDeps): Promise<GitStatus | undefined>;
+//# sourceMappingURL=git-status.d.ts.map

package/dist/dashboard/git-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-status.d.ts","sourceRoot":"","sources":["../../src/dashboard/git-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAA;AACnE,OAAO,EAAiD,KAAK,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAOhH,4CAA4C;AAC5C,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,mCAAmC;IACnC,KAAK,EAAE,OAAO,CAAA;IACd,EAAE,CAAC,EAAE,QAAQ,CAAA;IACb,wFAAwF;IACxF,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,SAAS,CAAA;IACf,EAAE,CAAC,EAAE,QAAQ,CAAA;IACb;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,mHAAmH;IACnH,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC1D;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,SAA2B,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAE9G;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAUzG"}

package/dist/dashboard/git-status.js

@@ -0,0 +1,37 @@
+import { nodeGitRunner } from '@openagt/agent-data';
+import { cachedPrView, cachedPrsForBranch, pickAgentPr } from './pull-requests.js';
+/**
+ * The branch `cwd` has checked out, by its short name; `HEAD` when it is on no branch. Undefined
+ * when `cwd` is not a git repo, or git failed.
+ */
+export async function currentBranch(cwd, git = nodeGitRunner()) {
+    return git(['rev-parse', '--abbrev-ref', 'HEAD'], cwd).then(out => out.trim(), () => undefined);
+}
+/**
+ * Read a project's git status: the current branch and dirty flag (from git), plus the linked
+ * PR (best-effort). Returns undefined when the path is not a git repo. Forgiving — a failed
+ * `git status` reads as clean, and a failed PR lookup simply omits the PR.
+ */
+export async function readGitStatus(cwd, deps = {}) {
+    const git = deps.git ?? nodeGitRunner();
+    const branch = await currentBranch(cwd, git);
+    if (branch === undefined)
+        return undefined; // not a git repo (or git failed)
+    const dirty = (await git(['status', '--porcelain'], cwd).catch(() => '')).trim().length > 0;
+    // The branch and the dirty flag are what this row is for, and they are ten milliseconds of git.
+    // The PR is a git host read an order of magnitude slower, so it is read through the cache and is
+    // allowed to arrive late (#1028) rather than holding the whole row back on every poll.
+    const pr = await linkedPr(cwd, branch, deps);
+    return { branch, dirty, ...(pr.value ? { pr: pr.value } : {}), ...(pr.pending ? { prPending: true } : {}) };
+}
+/** The PR half of the status: the injected seam, the run-scoped history pick, or the plain view. */
+async function linkedPr(cwd, branch, deps) {
+    if (deps.pr)
+        return { value: await deps.pr(cwd).catch(() => undefined), pending: false };
+    if (deps.since === undefined)
+        return cachedPrView(cwd, branch).catch(() => ({ value: undefined, pending: false }));
+    if (deps.prs)
+        return { value: pickAgentPr(await deps.prs(cwd, branch).catch(() => []), deps.since), pending: false };
+    return cachedPrsForBranch(deps.prRoot ?? cwd, branch).then(read => ({ value: pickAgentPr(read.value ?? [], deps.since), pending: read.pending }), () => ({ value: undefined, pending: false }));
+}
+//# sourceMappingURL=git-status.js.map

package/dist/dashboard/git-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-status.js","sourceRoot":"","sources":["../../src/dashboard/git-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAkB,MAAM,qBAAqB,CAAA;AACnE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAgC,MAAM,oBAAoB,CAAA;AAuChH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,GAAG,GAAc,aAAa,EAAE;IAC/E,OAAO,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;AACjG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,IAAI,GAAkB,EAAE;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,aAAa,EAAE,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC5C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA,CAAC,iCAAiC;IAC5E,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;IAC3F,gGAAgG;IAChG,iGAAiG;IACjG,uFAAuF;IACvF,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAC5C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;AAC7G,CAAC;AAED,oGAAoG;AACpG,KAAK,UAAU,QAAQ,CACrB,GAAW,EACX,MAAc,EACd,IAAmB;IAEnB,IAAI,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACxF,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;IAClH,IAAI,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACpH,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CACxD,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,EACrF,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAC7C,CAAA;AACH,CAAC"}

package/dist/dashboard/github.d.ts

@@ -0,0 +1,11 @@
+import { type GitRunner } from '@gemstack/agent-data';
+/**
+ * Normalize a git remote URL to an `https://github.com/<owner>/<repo>` URL, or undefined when
+ * it is not a GitHub remote. Handles the scp-style (`git@github.com:o/r.git`), ssh
+ * (`ssh://git@github.com/o/r.git`), and https (`https://github.com/o/r.git`) forms, dropping
+ * a `.git` suffix, an embedded credential, and a trailing slash.
+ */
+export declare function githubUrlFromRemote(remote: string): string | undefined;
+/** The repo's GitHub URL from its `origin` remote, or undefined (no remote / not GitHub). */
+export declare function githubUrlFor(cwd: string, git?: GitRunner): Promise<string | undefined>;
+//# sourceMappingURL=github.d.ts.map

package/dist/dashboard/github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../src/dashboard/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAKpE;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAWtE;AAED,6FAA6F;AAC7F,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,SAA2B,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAM7G"}

package/dist/dashboard/github.js

@@ -0,0 +1,33 @@
+import { nodeGitRunner } from '@gemstack/agent-data';
+// The project panel's "Open on GitHub" (#489, part of #488). Derives the repo's github.com
+// URL from its `origin` remote so the panel can link straight to it. A read of git state,
+// safe anywhere — the relay has no local checkout, so it resolves to nothing there.
+/**
+ * Normalize a git remote URL to an `https://github.com/<owner>/<repo>` URL, or undefined when
+ * it is not a GitHub remote. Handles the scp-style (`git@github.com:o/r.git`), ssh
+ * (`ssh://git@github.com/o/r.git`), and https (`https://github.com/o/r.git`) forms, dropping
+ * a `.git` suffix, an embedded credential, and a trailing slash.
+ */
+export function githubUrlFromRemote(remote) {
+    const url = remote.trim();
+    const match = url.match(/^git@github\.com:(.+?)$/) ||
+        url.match(/^ssh:\/\/git@github\.com\/(.+?)$/) ||
+        url.match(/^https?:\/\/(?:[^@/]+@)?github\.com\/(.+?)$/);
+    if (!match || !match[1])
+        return undefined;
+    const slug = match[1].replace(/\.git$/, '').replace(/\/$/, '');
+    // Guard against a junk capture: a GitHub slug is `owner/repo`, both non-empty.
+    if (!/^[^/]+\/[^/]+$/.test(slug))
+        return undefined;
+    return `https://github.com/${slug}`;
+}
+/** The repo's GitHub URL from its `origin` remote, or undefined (no remote / not GitHub). */
+export async function githubUrlFor(cwd, git = nodeGitRunner()) {
+    try {
+        return githubUrlFromRemote(await git(['remote', 'get-url', 'origin'], cwd));
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=github.js.map

package/dist/dashboard/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/dashboard/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAkB,MAAM,sBAAsB,CAAA;AACpE,2FAA2F;AAC3F,0FAA0F;AAC1F,oFAAoF;AAEpF;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;IACzB,MAAM,KAAK,GACT,GAAG,CAAC,KAAK,CAAC,yBAAyB,CAAC;QACpC,GAAG,CAAC,KAAK,CAAC,kCAAkC,CAAC;QAC7C,GAAG,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAC1D,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC9D,+EAA+E;IAC/E,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IAClD,OAAO,sBAAsB,IAAI,EAAE,CAAA;AACrC,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,GAAG,GAAc,aAAa,EAAE;IAC9E,IAAI,CAAC;QACH,OAAO,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}

package/dist/dashboard/http.d.ts

@@ -0,0 +1,29 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+/**
+ * The plumbing every one of the daemon's non-RPC HTTP surfaces shares: the browser bridge
+ * (`/_bridge`), the web-start queue (`/_web-start`) and the device relay (`/_relay`).
+ *
+ * All three answer plain-text statuses, JSON payloads, and read capped JSON request bodies, and
+ * each carried its own copy — two body readers that differed only in which message they rejected
+ * with, and three identical status responders.
+ */
+/** Answer with a plain-text status line. */
+export declare function end(res: ServerResponse, status: number, message: string, headers?: Record<string, string>): void;
+/** Answer with a JSON payload. */
+export declare function sendJson(res: ServerResponse, payload: unknown, status?: number): void;
+/**
+ * Read a JSON body, refusing anything past the cap rather than buffering it. Rejects with
+ * `body too large` on overflow and `body must be JSON` on anything unparseable — the messages the
+ * bridge and web-start routes answer 400 with, so a caller learns which of the two it hit.
+ */
+export declare function readJsonBody(req: IncomingMessage, maxBytes: number): Promise<unknown>;
+/**
+ * The preamble every POST route runs: refuse a non-POST, then read the body. Answers the request
+ * itself on either failure and resolves `undefined`, so a caller's whole check is
+ * `const body = await readPost(...); if (body === undefined) return`. JSON has no `undefined`, so
+ * the sentinel cannot collide with a body that parsed.
+ */
+export declare function readPost(req: IncomingMessage, res: ServerResponse, maxBytes: number): Promise<unknown>;
+/** Refuse anything but a GET, answering 405 itself. `false` means the request is already answered. */
+export declare function requireGet(req: IncomingMessage, res: ServerResponse): boolean;
+//# sourceMappingURL=http.d.ts.map

package/dist/dashboard/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/dashboard/http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAEhE;;;;;;;GAOG;AAEH,4CAA4C;AAC5C,wBAAgB,GAAG,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GAAG,IAAI,CAGpH;AAED,kCAAkC;AAClC,wBAAgB,QAAQ,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAM,GAAG,IAAI,CAGlF;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAsBrF;AAED;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAW5G;AAED,sGAAsG;AACtG,wBAAgB,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAI7E"}

package/dist/dashboard/http.js

@@ -0,0 +1,74 @@
+/**
+ * The plumbing every one of the daemon's non-RPC HTTP surfaces shares: the browser bridge
+ * (`/_bridge`), the web-start queue (`/_web-start`) and the device relay (`/_relay`).
+ *
+ * All three answer plain-text statuses, JSON payloads, and read capped JSON request bodies, and
+ * each carried its own copy — two body readers that differed only in which message they rejected
+ * with, and three identical status responders.
+ */
+/** Answer with a plain-text status line. */
+export function end(res, status, message, headers = {}) {
+    res.writeHead(status, { 'content-type': 'text/plain', ...headers });
+    res.end(message);
+}
+/** Answer with a JSON payload. */
+export function sendJson(res, payload, status = 200) {
+    res.writeHead(status, { 'content-type': 'application/json' });
+    res.end(JSON.stringify(payload));
+}
+/**
+ * Read a JSON body, refusing anything past the cap rather than buffering it. Rejects with
+ * `body too large` on overflow and `body must be JSON` on anything unparseable — the messages the
+ * bridge and web-start routes answer 400 with, so a caller learns which of the two it hit.
+ */
+export function readJsonBody(req, maxBytes) {
+    return new Promise((resolve, reject) => {
+        let size = 0;
+        const chunks = [];
+        req.on('data', (chunk) => {
+            size += chunk.length;
+            if (size > maxBytes) {
+                reject(new Error('body too large'));
+                req.destroy();
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on('end', () => {
+            try {
+                resolve(JSON.parse(Buffer.concat(chunks).toString('utf8')));
+            }
+            catch {
+                reject(new Error('body must be JSON'));
+            }
+        });
+        req.on('error', () => reject(new Error('read failed')));
+    });
+}
+/**
+ * The preamble every POST route runs: refuse a non-POST, then read the body. Answers the request
+ * itself on either failure and resolves `undefined`, so a caller's whole check is
+ * `const body = await readPost(...); if (body === undefined) return`. JSON has no `undefined`, so
+ * the sentinel cannot collide with a body that parsed.
+ */
+export async function readPost(req, res, maxBytes) {
+    if (req.method !== 'POST') {
+        end(res, 405, 'method not allowed', { allow: 'POST' });
+        return undefined;
+    }
+    try {
+        return await readJsonBody(req, maxBytes);
+    }
+    catch (err) {
+        end(res, 400, err.message);
+        return undefined;
+    }
+}
+/** Refuse anything but a GET, answering 405 itself. `false` means the request is already answered. */
+export function requireGet(req, res) {
+    if (req.method === 'GET')
+        return true;
+    end(res, 405, 'method not allowed', { allow: 'GET' });
+    return false;
+}
+//# sourceMappingURL=http.js.map