@openagt/dashboard 0.0.0-stage → 0.8.0

package/dist/dashboard/scheduler-state.d.ts

@@ -0,0 +1,73 @@
+import type { ProjectSummary } from './projects.js';
+import { type PublishLevel, type PublishPick } from '../publish-levels.js';
+import { type GitHostFor } from '../store/git-host.js';
+/** The file the scheduler keeps its state in, at the project's root; per user, hidden from git by the tool. */
+export declare const SCHEDULER_STATE_FILE = ".agent-scheduler/state.json";
+/** What the last tick decided for one scheduled command, one line for a person. */
+export interface SchedulerDecision {
+    command: string;
+    outcome: string;
+    /** The run's id when the tick started one: the same id the agent's record and checkout carry. */
+    run?: string;
+}
+/** The last tick as the state file remembers it. */
+export interface SchedulerTick {
+    /** ISO timestamp. */
+    at: string;
+    decisions: SchedulerDecision[];
+    /** Why the tick decided nothing, when it could not. */
+    note?: string;
+}
+/** One command of the project's schedule, as the scheduler's last tick read it, with this machine's switch and publish pick. */
+export interface SchedulerCommand {
+    command: string;
+    /** How often at most, as written (`1d`). */
+    every?: string;
+    /** The check, when the line has one. */
+    when?: string;
+    /** Whether it runs on this machine: the machine's switch, else what the line says. */
+    on: boolean;
+    /** How far a run of the command publishes its work, when the line says: `branch`, `pr` or `merge`. A line that says nothing publishes nothing. */
+    publish?: PublishLevel;
+    /** This machine's publish pick for the command, which stands in for the line's level; absent when nobody picked here. */
+    publishPick?: PublishPick;
+}
+/** A project's scheduler as the card shows it. */
+export interface SchedulerState {
+    /** Whether the state file exists and parses: a project without it has no scheduler set up. */
+    present: boolean;
+    /** Whether ticks start agents. */
+    on: boolean;
+    /** Whether the scheduler's process outlives the dashboard that started it. */
+    keepAlive: boolean;
+    /** Whether the scheduler's own process is alive on this machine. */
+    running: boolean;
+    /** The model every run starts on. */
+    model?: string;
+    /** How far past the quota boundary this project's unattended runs may start, in percentage points. */
+    spendOffset?: number;
+    lastTick?: SchedulerTick;
+    /** The schedule's commands with their switches; empty until the scheduler has ticked once with a schedule. */
+    commands: SchedulerCommand[];
+}
+export interface ProjectScheduler extends SchedulerState {
+    projectId: string;
+    projectName: string;
+    /** Whether one of the project's packages provides a git host; without one no pull request can be opened, so a publish pick stops at the branch. */
+    gitHost: boolean;
+}
+/**
+ * Read one project's scheduler state. `isAlive` is the process probe; injectable so a test can
+ * decide what "running" means without holding a process.
+ */
+export declare function readSchedulerState(cwd: string, isAlive?: (pid: number) => boolean): Promise<SchedulerState>;
+/** Every registered project's scheduler, one row per project in registry order, a failing read as not set up. */
+export declare function collectSchedulers(projects: ProjectSummary[], read?: (cwd: string) => Promise<SchedulerState>, gitHost?: GitHostFor): Promise<ProjectScheduler[]>;
+/**
+ * The spend offset the usage panel draws (#960), read off the projects' schedulers: the loosest
+ * one, since it is the one that lets unattended work spend the furthest; `undefined` when no
+ * scheduler names one. The panel's slider writes it back through each project's `offset` hook,
+ * so the schedulers agree unless one was set by hand.
+ */
+export declare function loosestSpendOffset(states: readonly SchedulerState[]): number | undefined;
+//# sourceMappingURL=scheduler-state.d.ts.map

package/dist/dashboard/scheduler-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler-state.d.ts","sourceRoot":"","sources":["../../src/dashboard/scheduler-state.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAiC,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACzG,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAYtE,+GAA+G;AAC/G,eAAO,MAAM,oBAAoB,gCAAgC,CAAA;AAEjE,mFAAmF;AACnF,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,iGAAiG;IACjG,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,oDAAoD;AACpD,MAAM,WAAW,aAAa;IAC5B,qBAAqB;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,iBAAiB,EAAE,CAAA;IAC9B,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,gIAAgI;AAChI,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,sFAAsF;IACtF,EAAE,EAAE,OAAO,CAAA;IACX,kJAAkJ;IAClJ,OAAO,CAAC,EAAE,YAAY,CAAA;IACtB,yHAAyH;IACzH,WAAW,CAAC,EAAE,WAAW,CAAA;CAC1B;AAED,kDAAkD;AAClD,MAAM,WAAW,cAAc;IAC7B,8FAA8F;IAC9F,OAAO,EAAE,OAAO,CAAA;IAChB,kCAAkC;IAClC,EAAE,EAAE,OAAO,CAAA;IACX,8EAA8E;IAC9E,SAAS,EAAE,OAAO,CAAA;IAClB,oEAAoE;IACpE,OAAO,EAAE,OAAO,CAAA;IAChB,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,sGAAsG;IACtG,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,8GAA8G;IAC9G,QAAQ,EAAE,gBAAgB,EAAE,CAAA;CAC7B;AAED,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACtD,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,mJAAmJ;IACnJ,OAAO,EAAE,OAAO,CAAA;CACjB;AAID;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAkC7H;AAqCD,iHAAiH;AACjH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,cAAc,EAAE,EAC1B,IAAI,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAsB,EACnE,OAAO,GAAE,UAA2B,GACnC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAQ7B;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,GAAG,MAAM,GAAG,SAAS,CAGxF"}

package/dist/dashboard/scheduler-state.js

@@ -0,0 +1,120 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { isPidAlive } from '../store/index.js';
+import { isPublishLevel, isPublishPick } from '../publish-levels.js';
+import { projectGitHost } from '../store/git-host.js';
+// The scheduler card's read (#1774): a projection of `.agent-scheduler/state.json`, the file the
+// scheduler writes per project and per user, exactly as it stands. The dashboard reads the file by
+// its name; it never runs the tool, and a project without the file is simply not set up.
+//
+// Forgiving like every other read here: a missing, unreadable or malformed file reads as not set
+// up, and a field that is not what the file promises reads as absent. The one thing added on the
+// way out is whether the scheduler's process is alive, which only the operating system knows; and
+// each scheduled command's switch and publish pick on this machine folded into the list the last
+// tick recorded.
+/** The file the scheduler keeps its state in, at the project's root; per user, hidden from git by the tool. */
+export const SCHEDULER_STATE_FILE = '.agent-scheduler/state.json';
+const NOT_SET_UP = { present: false, on: false, keepAlive: false, running: false, commands: [] };
+/**
+ * Read one project's scheduler state. `isAlive` is the process probe; injectable so a test can
+ * decide what "running" means without holding a process.
+ */
+export async function readSchedulerState(cwd, isAlive = isPidAlive) {
+    let raw;
+    try {
+        raw = await readFile(join(cwd, SCHEDULER_STATE_FILE), 'utf8');
+    }
+    catch {
+        return { ...NOT_SET_UP };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return { ...NOT_SET_UP };
+    }
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+        return { ...NOT_SET_UP };
+    const state = parsed;
+    const pid = typeof state['pid'] === 'number' ? state['pid'] : undefined;
+    const tick = lastTick(state['lastTick']);
+    const switches = state['switches'] && typeof state['switches'] === 'object' ? state['switches'] : {};
+    const publishes = state['publishes'] && typeof state['publishes'] === 'object' ? state['publishes'] : {};
+    const commands = scheduleLines(state['lastTick']).map(line => {
+        const switched = switches[line.command];
+        const picked = publishes[line.command];
+        return { ...line, on: typeof switched === 'boolean' ? switched : line.on, ...(isPublishPick(picked) ? { publishPick: picked } : {}) };
+    });
+    return {
+        present: true,
+        on: state['on'] === true,
+        keepAlive: state['keepAlive'] === true,
+        running: pid !== undefined && isAlive(pid),
+        ...(typeof state['model'] === 'string' ? { model: state['model'] } : {}),
+        ...(typeof state['spendOffset'] === 'number' && Number.isFinite(state['spendOffset']) ? { spendOffset: state['spendOffset'] } : {}),
+        ...(tick ? { lastTick: tick } : {}),
+        commands,
+    };
+}
+/** The schedule the last tick recorded, each line as written; a line not of the promised shape is left out. */
+function scheduleLines(value) {
+    const schedule = value && typeof value === 'object' ? value['schedule'] : undefined;
+    if (!Array.isArray(schedule))
+        return [];
+    const lines = [];
+    for (const item of schedule) {
+        if (!item || typeof item !== 'object')
+            continue;
+        const l = item;
+        if (typeof l['command'] !== 'string' || typeof l['on'] !== 'boolean')
+            continue;
+        lines.push({
+            command: l['command'],
+            ...(typeof l['every'] === 'string' ? { every: l['every'] } : {}),
+            ...(typeof l['when'] === 'string' ? { when: l['when'] } : {}),
+            on: l['on'],
+            ...(isPublishLevel(l['publish']) ? { publish: l['publish'] } : {}),
+        });
+    }
+    return lines;
+}
+/** The last tick, kept only when it has the shape the file promises. */
+function lastTick(value) {
+    if (!value || typeof value !== 'object')
+        return undefined;
+    const tick = value;
+    if (typeof tick['at'] !== 'string' || !Array.isArray(tick['decisions']))
+        return undefined;
+    const decisions = [];
+    for (const item of tick['decisions']) {
+        if (!item || typeof item !== 'object')
+            continue;
+        const d = item;
+        if (typeof d['command'] !== 'string' || typeof d['outcome'] !== 'string')
+            continue;
+        decisions.push({ command: d['command'], outcome: d['outcome'], ...(typeof d['run'] === 'string' ? { run: d['run'] } : {}) });
+    }
+    return { at: tick['at'], decisions, ...(typeof tick['note'] === 'string' ? { note: tick['note'] } : {}) };
+}
+/** Every registered project's scheduler, one row per project in registry order, a failing read as not set up. */
+export async function collectSchedulers(projects, read = readSchedulerState, gitHost = projectGitHost) {
+    const rows = [];
+    for (const project of projects) {
+        const state = await read(project.path).catch(() => ({ ...NOT_SET_UP }));
+        const host = await gitHost(project.path).catch(() => undefined);
+        rows.push({ projectId: project.id, projectName: project.name, gitHost: host !== undefined, ...state });
+    }
+    return rows;
+}
+/**
+ * The spend offset the usage panel draws (#960), read off the projects' schedulers: the loosest
+ * one, since it is the one that lets unattended work spend the furthest; `undefined` when no
+ * scheduler names one. The panel's slider writes it back through each project's `offset` hook,
+ * so the schedulers agree unless one was set by hand.
+ */
+export function loosestSpendOffset(states) {
+    const offsets = states.flatMap(state => (state.spendOffset !== undefined ? [state.spendOffset] : []));
+    return offsets.length ? Math.max(...offsets) : undefined;
+}
+//# sourceMappingURL=scheduler-state.js.map

package/dist/dashboard/scheduler-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler-state.js","sourceRoot":"","sources":["../../src/dashboard/scheduler-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,OAAO,EAAE,cAAc,EAAE,aAAa,EAAuC,MAAM,sBAAsB,CAAA;AACzG,OAAO,EAAE,cAAc,EAAmB,MAAM,sBAAsB,CAAA;AAEtE,iGAAiG;AACjG,mGAAmG;AACnG,yFAAyF;AACzF,EAAE;AACF,iGAAiG;AACjG,iGAAiG;AACjG,kGAAkG;AAClG,iGAAiG;AACjG,iBAAiB;AAEjB,+GAA+G;AAC/G,MAAM,CAAC,MAAM,oBAAoB,GAAG,6BAA6B,CAAA;AA4DjE,MAAM,UAAU,GAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;AAEhH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,OAAO,GAA6B,UAAU;IAClG,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAA;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,UAAU,EAAE,CAAA;IAC1B,CAAC;IACD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,UAAU,EAAE,CAAA;IAC1B,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,GAAG,UAAU,EAAE,CAAA;IAC5F,MAAM,KAAK,GAAG,MAAiC,CAAA;IAC/C,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACvE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAK,CAAC,UAAU,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAA;IACjI,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAK,CAAC,WAAW,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAA;IACrI,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC3D,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACvC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACtC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IACvI,CAAC,CAAC,CAAA;IACF,OAAO;QACL,OAAO,EAAE,IAAI;QACb,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI;QACxB,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,KAAK,IAAI;QACtC,OAAO,EAAE,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC;QAC1C,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,OAAO,KAAK,CAAC,aAAa,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,QAAQ;KACT,CAAA;AACH,CAAC;AAED,+GAA+G;AAC/G,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,QAAQ,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAiC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAChH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAA;IACvC,MAAM,KAAK,GAAuB,EAAE,CAAA;IACpC,KAAK,MAAM,IAAI,IAAI,QAAqB,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAQ;QAC/C,MAAM,CAAC,GAAG,IAA+B,CAAA;QACzC,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,SAAS;YAAE,SAAQ;QAC9E,KAAK,CAAC,IAAI,CAAC;YACT,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC;YACrB,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC;YACX,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,wEAAwE;AACxE,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACzD,MAAM,IAAI,GAAG,KAAgC,CAAA;IAC7C,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IACzF,MAAM,SAAS,GAAwB,EAAE,CAAA;IACzC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,CAAc,EAAE,CAAC;QAClD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAQ;QAC/C,MAAM,CAAC,GAAG,IAA+B,CAAA;QACzC,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ;YAAE,SAAQ;QAClF,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC9H,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;AAC3G,CAAC;AAED,iHAAiH;AACjH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAA0B,EAC1B,IAAI,GAA6C,kBAAkB,EACnE,OAAO,GAAe,cAAc;IAEpC,MAAM,IAAI,GAAuB,EAAE,CAAA;IACnC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAmB,EAAE,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC,CAAA;QACvF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC/D,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,KAAK,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA;IACxG,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAiC;IAClE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACrG,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1D,CAAC"}

package/dist/dashboard/server.d.ts

@@ -0,0 +1,103 @@
+import type { PreferencesStore } from '../registry.js';
+import type { QuotaSource } from './quota.js';
+import type { ModelsSource } from './models.js';
+import type { ProjectErrorsReader } from '../project-errors.js';
+import type { BridgeBrowserOwner } from '../bridge-browser.js';
+import type { AddProjectResult, StartAgentOptions, StartAgentResult } from './types.js';
+import type { EventsSource, RemoteAgents } from './rpc-serve.js';
+/** Options for {@link startDashboard}. */
+export interface DashboardOptions {
+    /** Port to bind. Default `4200`; pass `0` for an ephemeral port. */
+    port?: number;
+    /** Host to bind. Default `127.0.0.1` (localhost only). */
+    host?: string;
+    /**
+     * Called when the browser starts a run (#345): the `sendStart` RPC reaches this through the
+     * wired dashboard context. Wire it to the project's start hook.
+     */
+    onStart: (prompt: string, options: StartAgentOptions, projectId?: string) => StartAgentResult | Promise<StartAgentResult>;
+    /**
+     * Called when the browser adds a project (#396): the `sendAddProject` RPC reaches this through
+     * the wired dashboard context. Wire it to install the repo and register it.
+     */
+    onAddProject: (path: string) => Promise<AddProjectResult> | AddProjectResult;
+    /**
+     * The user-preferences store (#410): the `onPreferences` / `savePreferences` RPCs read and
+     * write it through the wired dashboard context.
+     */
+    preferences: PreferencesStore;
+    /** Where the usage panel reads the quota from (#533). */
+    quota: QuotaSource;
+    /** Which models each coding agent offers, for the agent and model menu. */
+    models: ModelsSource;
+    /** What a project currently suffers from (#1500), for the project list to carry. */
+    projectErrors: ProjectErrorsReader;
+    /** The daemon's own bridge browser (#1332): its status, and the show/hide/restart the settings page asks for. */
+    bridgeBrowser: BridgeBrowserOwner;
+    /**
+     * Serve the new dashboard bundle (#405) from this directory — the built SPA
+     * (`index.html` + `assets/**`). The daemon also mounts the dashboard's RPC surface
+     * at `/_rpc` (the calls + the live-event stream). Omit only for a broken install with
+     * no built bundle, where the server reports the bundle is missing.
+     */
+    clientBundleDir?: string;
+    /**
+     * The shared token that guards a non-loopback bind (#1051): with it set, every route (static
+     * bundle, `/_rpc`, `/_relay`) needs a valid `fw_daemon` cookie or a matching
+     * `?token=`, else 401. Omit for a loopback bind, where the guard is a no-op and local UX is
+     * byte-identical. A separate concern from the CSRF origin check in rpc-serve.ts.
+     */
+    token?: string;
+    /**
+     * The live-events source for a run this daemon is relaying from a connected device (#1067):
+     * a stream for such a run, else undefined so `onEvents` tails the run's diary off disk.
+     */
+    eventsSource: EventsSource;
+    /**
+     * The relayed-agent lookup the read RPCs consult (#1067 slice 2). A run-scoped RPC uses it to
+     * forward a remote agent's read/steer/handoff to the device that owns it.
+     */
+    remote: RemoteAgents;
+    /**
+     * Serve a relay-started run's events back to the daemon that relayed it here (#1067): the
+     * `/_relay/*` endpoints (start + events, plus the slice-2 `rpc`). All are fronted by the same
+     * `token` guard above, so a device without the cookie cannot start or read a run.
+     */
+    relay?: {
+        tailEvents: (agentId: string, onEvent: (event: import('../events.js').FrameworkEvent) => void) => () => void;
+        /** Run one whitelisted run-scoped RPC against this daemon's own checkout (#1067 slice 2). */
+        rpc?: (fn: string, args: unknown[]) => Promise<unknown>;
+    };
+    /**
+     * The browser bridge (#1237): the token a Claude web extension presents to report the question
+     * its cloud session is parked on. Absent leaves every `/_bridge/*` route 404, which is default.
+     *
+     * Deliberately not {@link token}. That one guards a non-loopback bind and is absent on a normal
+     * loopback daemon, where what keeps other origins out of `/_rpc` is the same-origin check.
+     * The bridge is the one route meant to be reached from another origin, so neither protects it
+     * and it authenticates on its own.
+     */
+    bridgeToken?: string;
+    /**
+     * The cloud sessions the browser bridge should have a tab open for (#1237). Only the daemon
+     * wires one, since it is the process that can see every project's runs.
+     */
+    bridgeSessions?: () => Promise<import('./bridge-endpoints.js').BridgeSession[]>;
+}
+/** A running localhost dashboard: the built SPA + its RPC mount. */
+export interface Dashboard {
+    /** The URL to open. */
+    readonly url: string;
+    /** Stop the server. Idempotent. */
+    close(): Promise<void>;
+}
+/**
+ * Start the localhost dashboard: a tiny `node:http` server that serves the built SPA (#405) and
+ * mounts its RPC surface at `/_rpc` — the calls and the live-event stream. The dashboard reads a
+ * run's own diary over that stream and steers the run through the files its tool reads, so there is
+ * no in-process event stream here; the server is a static-bundle + RPC host. The RPCs run in the
+ * daemon's own process, so `sendStart` / `sendAddProject` call the daemon's own closures via
+ * {@link DashboardOptions.onStart} / {@link DashboardOptions.onAddProject}.
+ */
+export declare function startDashboard(opts: DashboardOptions): Promise<Dashboard>;
+//# sourceMappingURL=server.d.ts.map

package/dist/dashboard/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/dashboard/server.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAK9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AACvF,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAOhE,0CAA0C;AAC1C,MAAM,WAAW,gBAAgB;IAC/B,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,0DAA0D;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;OAGG;IACH,OAAO,EAAE,CACP,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,iBAAiB,EAC1B,SAAS,CAAC,EAAE,MAAM,KACf,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACjD;;;OAGG;IACH,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAAA;IAC5E;;;OAGG;IACH,WAAW,EAAE,gBAAgB,CAAA;IAC7B,yDAAyD;IACzD,KAAK,EAAE,WAAW,CAAA;IAClB,2EAA2E;IAC3E,MAAM,EAAE,YAAY,CAAA;IACpB,oFAAoF;IACpF,aAAa,EAAE,mBAAmB,CAAA;IAClC,iHAAiH;IACjH,aAAa,EAAE,kBAAkB,CAAA;IACjC;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;OAGG;IACH,YAAY,EAAE,YAAY,CAAA;IAC1B;;;OAGG;IACH,MAAM,EAAE,YAAY,CAAA;IACpB;;;;OAIG;IACH,KAAK,CAAC,EAAE;QACN,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,cAAc,EAAE,cAAc,KAAK,IAAI,KAAK,MAAM,IAAI,CAAA;QAC5G,6FAA6F;QAC7F,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;KACxD,CAAA;IACD;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,uBAAuB,EAAE,aAAa,EAAE,CAAC,CAAA;CAChF;AAED,oEAAoE;AACpE,MAAM,WAAW,SAAS;IACxB,uBAAuB;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,mCAAmC;IACnC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAuIzE"}

package/dist/dashboard/server.js

@@ -0,0 +1,230 @@
+import { createServer } from 'node:http';
+import { timingSafeEqual } from 'node:crypto';
+import { serveClientBundle } from './static.js';
+import { makeRpcMount, RPC_PREFIX, isSameOriginRequest, isExpectedHost } from './rpc-serve.js';
+import { requestPathname } from '../request-path.js';
+import { MODULES_PREFIX, serveModuleFile } from './module-serve.js';
+import { handleRelayRequest, RELAY_PREFIX } from './relay-endpoints.js';
+import { BRIDGE_PREFIX, EXPECTED_EXTENSION_VERSION, handleBridgeRequest } from './bridge-endpoints.js';
+import { bridgeQuestions } from './bridge-store.js';
+import { bridgeStarts } from './bridge-starts.js';
+import { WEB_START_PREFIX, handleWebStartRequest } from './web-start-endpoints.js';
+/**
+ * Start the localhost dashboard: a tiny `node:http` server that serves the built SPA (#405) and
+ * mounts its RPC surface at `/_rpc` — the calls and the live-event stream. The dashboard reads a
+ * run's own diary over that stream and steers the run through the files its tool reads, so there is
+ * no in-process event stream here; the server is a static-bundle + RPC host. The RPCs run in the
+ * daemon's own process, so `sendStart` / `sendAddProject` call the daemon's own closures via
+ * {@link DashboardOptions.onStart} / {@link DashboardOptions.onAddProject}.
+ */
+export function startDashboard(opts) {
+    const host = opts.host ?? '127.0.0.1';
+    const port = opts.port ?? 4200;
+    const clientBundleDir = opts.clientBundleDir;
+    // A broken install ships no built bundle (the published package always does), so serve
+    // 503 for everything rather than stand up a half-wired mount. Returning here lets the
+    // main path below treat the bundle, mount, and quota as present with no re-checks.
+    if (!clientBundleDir) {
+        const server = createServer((_req, res) => {
+            res.writeHead(503, { 'content-type': 'text/plain' });
+            res.end('the dashboard bundle is not installed');
+        });
+        return listenDashboard(server, host, port, () => closeServer(server));
+    }
+    // The usage panel polls for the dashboard's whole life, not just during an agent:
+    // it has to show where the account stands while nothing is running (#533).
+    const quota = opts.quota;
+    const rpcMount = makeRpcMount({
+        startAgent: opts.onStart,
+        addProject: opts.onAddProject,
+        eventsSource: opts.eventsSource,
+        remote: opts.remote,
+        preferences: opts.preferences,
+        projectErrors: opts.projectErrors,
+        bridgeBrowser: opts.bridgeBrowser,
+        quota,
+        models: opts.models,
+    }, 
+    // The bound host, so the mount can reject a rebound `Host`: a page on evil.com whose DNS
+    // answers 127.0.0.1 is same-origin to the browser, so the Origin check alone lets it in.
+    { host });
+    // The device-to-daemon relay endpoints (#1067): wired only when an events tail is supplied.
+    // Fronted by the same token guard as every other route below.
+    const relayHandlers = opts.relay
+        ? { start: opts.onStart, tailEvents: opts.relay.tailEvents, ...(opts.relay.rpc ? { rpc: opts.relay.rpc } : {}) }
+        : undefined;
+    // The browser bridge (#1237). Off unless a token was supplied, and it carries that token itself
+    // rather than riding the shared-token guard (#1051), which a loopback daemon does not have.
+    const bridgeHandlers = opts.bridgeToken
+        ? {
+            token: opts.bridgeToken,
+            // The version gate (#1519): a stale extension is refused loudly rather than half-working.
+            expectedExtensionVersion: EXPECTED_EXTENSION_VERSION,
+            extensionVersion: (got, blocked) => bridgeQuestions().recordVersion(got, EXPECTED_EXTENSION_VERSION, blocked),
+            record: question => bridgeQuestions().record(question),
+            contact: (route, status) => bridgeQuestions().recordContact(route, status),
+            recordEvent: event => bridgeQuestions().recordEvent(event),
+            hello: hello => bridgeQuestions().recordHello(hello),
+            statuses: statuses => {
+                for (const status of statuses)
+                    bridgeQuestions().recordStatus(status);
+            },
+            // Claimed on read (#1332), like a start: two Drivers asking must not both type it.
+            answer: sessionId => {
+                const pending = bridgeQuestions().claimAnswer(sessionId);
+                return pending ? { id: pending.id, text: pending.text } : undefined;
+            },
+            answered: (sessionId, id, ok, note) => bridgeQuestions().resolveAnswer(sessionId, id, ok, note),
+            // The session start-queue (#1328). The claim happens inside claimNext, not in the route:
+            // two polling tabs handed the same request would create two cloud sessions.
+            start: () => {
+                const next = bridgeStarts().claimNext();
+                return next ? { id: next.id, repo: next.repo, branch: next.branch, prompt: next.prompt, ...(next.model ? { model: next.model } : {}) } : undefined;
+            },
+            started: (id, ok, sessionId, note) => bridgeStarts().resolve(id, ok, sessionId, note),
+            ...(opts.bridgeSessions ? { sessions: opts.bridgeSessions } : {}),
+        }
+        : undefined;
+    // The run-facing side of the same queue (#1328): a spawned web run asks here, on the same token.
+    const webStartHandlers = opts.bridgeToken
+        ? {
+            token: opts.bridgeToken,
+            extensionAlive: () => bridgeQuestions().extensionAlive(),
+            request: input => bridgeStarts().request(input),
+            get: id => bridgeStarts().get(id),
+        }
+        : undefined;
+    const token = opts.token;
+    const server = createServer((req, res) => {
+        const pathname = requestPathname(req);
+        if (pathname === undefined) {
+            res.writeHead(400, { 'content-type': 'text/plain' }).end('bad request');
+            return;
+        }
+        // The browser bridge (#1237) is checked BEFORE the shared-token guard (#1051), and is the only route that is.
+        // That guard's browser affordance is a `?token=` redirect meant for a human following a link,
+        // which is meaningless to an extension posting JSON; the bridge presents its own bearer token
+        // instead, so letting it past here costs nothing and skips a 302 it could not follow.
+        if (pathname === BRIDGE_PREFIX || pathname.startsWith(`${BRIDGE_PREFIX}/`)) {
+            void handleBridgeRequest(req, res, pathname, bridgeHandlers);
+            return;
+        }
+        if (pathname === WEB_START_PREFIX || pathname.startsWith(`${WEB_START_PREFIX}/`)) {
+            void handleWebStartRequest(req, res, pathname, webStartHandlers);
+            return;
+        }
+        // #1051: one guard fronting every route on a non-loopback bind; a no-op when no token is set.
+        if (token !== undefined && !authorizeDaemonRequest(req, res, token))
+            return;
+        // The device relay (#1067): another daemon posts a start here and streams the run's events back.
+        // The token guard above is a no-op on a loopback bind, so — exactly like the RPC mount below —
+        // the relay carries its own CSRF + DNS-rebinding guard, or a page the user merely visited could
+        // POST /_relay/start to start a run (the real device caller sends no Origin and a loopback
+        // Host, so both checks pass it; only a browser's cross-origin/rebound request is turned away).
+        if (pathname === RELAY_PREFIX || pathname.startsWith(`${RELAY_PREFIX}/`)) {
+            if (!guardBrowserOrigin(req, res, host))
+                return;
+            void handleRelayRequest(req, res, pathname, relayHandlers);
+            return;
+        }
+        if (pathname === RPC_PREFIX || pathname.startsWith(`${RPC_PREFIX}/`)) {
+            void rpcMount(req, res);
+            return;
+        }
+        // A project's dashboard modules (#1774): only the files of a package the project brings as a module.
+        if (pathname.startsWith(`${MODULES_PREFIX}/`)) {
+            // Void-dispatched like the bundle: a throw here must answer, not take the daemon down (#938).
+            void serveModuleFile(req, res, pathname).catch(() => {
+                if (!res.headersSent)
+                    res.writeHead(500, { 'content-type': 'text/plain' }).end('module file unreadable');
+            });
+            return;
+        }
+        void serveClientBundle(req, res, clientBundleDir);
+    });
+    return listenDashboard(server, host, port, async () => {
+        // Stop polling with the server: the poller outlives every agent by design,
+        // so nothing else would ever end it.
+        quota.stop();
+        await closeServer(server);
+    });
+}
+/** Bind the server and resolve a {@link Dashboard} handle; rejects if the port is already taken. */
+function listenDashboard(server, host, port, close) {
+    return new Promise((resolvePromise, rejectPromise) => {
+        server.once('error', rejectPromise);
+        server.listen(port, host, () => {
+            server.removeListener('error', rejectPromise);
+            const address = server.address();
+            resolvePromise({ url: `http://${host}:${address.port}`, close });
+        });
+    });
+}
+function closeServer(server) {
+    // Force-close keep-alive + streaming sockets (e.g. an open /_relay/events body, #1067) so close() resolves instead of waiting on them.
+    server.closeAllConnections();
+    return new Promise(resolvePromise => server.close(() => resolvePromise()));
+}
+/**
+ * The CSRF + DNS-rebinding guard the RPC mount applies, lifted to the device relay, which
+ * dispatches outside it. The relay is state-changing (it starts a run on this machine) and is
+ * wired unconditionally on a loopback bind, where the shared-token guard is a no-op, so without
+ * this a page the user merely visited reaches it. Returns true to admit the request; on rejection
+ * it has already answered 403.
+ */
+function guardBrowserOrigin(req, res, host) {
+    if (isSameOriginRequest(req) && isExpectedHost(req, host))
+        return true;
+    res.writeHead(403, { 'content-type': 'text/plain' }).end('forbidden');
+    return false;
+}
+/** The cookie a bootstrapped browser carries on every same-origin request (#1051). */
+const DAEMON_COOKIE = 'fw_daemon';
+/**
+ * The non-loopback bind guard (#1051): a request needs a valid `fw_daemon` cookie or a matching
+ * `?token=`, else 401. A valid `?token=` sets the cookie and 302s to the clean path so the token
+ * leaves the URL bar, history, and Referer after one hop; the cookie then rides RPC, the events
+ * Channel, and the MJPEG `<img>` screencast alike (all same-origin), which a bearer header cannot
+ * reach. Returns true to admit the request, false once it has answered (401 or the redirect).
+ */
+function authorizeDaemonRequest(req, res, token) {
+    // Safe to re-parse: requestPathname already parsed this same url without throwing (#938).
+    const url = new URL(req.url ?? '/', 'http://localhost');
+    const queryToken = url.searchParams.get('token');
+    if (queryToken !== null && tokensMatch(queryToken, token)) {
+        url.searchParams.delete('token');
+        const query = url.searchParams.toString();
+        res.writeHead(302, {
+            // Lax, not Strict: the device-hop (#1052) is a cross-origin top-level nav, and a Strict cookie set on it is withheld from the redirect right after, so the clean path 401s. Lax still rides top-level GET navs; CSRF stays covered by the same-origin check on /_rpc.
+            'set-cookie': `${DAEMON_COOKIE}=${token}; HttpOnly; SameSite=Lax; Path=/`,
+            location: url.pathname + (query ? `?${query}` : ''),
+        });
+        res.end();
+        return false;
+    }
+    const cookieToken = readCookie(req.headers.cookie, DAEMON_COOKIE);
+    if (cookieToken !== undefined && tokensMatch(cookieToken, token))
+        return true;
+    res.writeHead(401, { 'content-type': 'text/plain' });
+    res.end('unauthorized');
+    return false;
+}
+/** Constant-time token compare (#1051). The length check first, since `timingSafeEqual` throws on
+ * unequal-length buffers and a length mismatch cannot be a match anyway. */
+function tokensMatch(a, b) {
+    const ab = Buffer.from(a);
+    const bb = Buffer.from(b);
+    return ab.length === bb.length && timingSafeEqual(ab, bb);
+}
+/** One cookie's value out of a `Cookie` header, or `undefined`. */
+function readCookie(header, name) {
+    if (!header)
+        return undefined;
+    for (const part of header.split(';')) {
+        const eq = part.indexOf('=');
+        if (eq !== -1 && part.slice(0, eq).trim() === name)
+            return part.slice(eq + 1).trim();
+    }
+    return undefined;
+}
+//# sourceMappingURL=server.js.map

package/dist/dashboard/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/dashboard/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAA;AAChG,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAO7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC9F,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAGnE,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAsB,MAAM,sBAAsB,CAAA;AAC3F,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,mBAAmB,EAAuB,MAAM,uBAAuB,CAAA;AAC3H,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAyB,MAAM,0BAA0B,CAAA;AA8FzG;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,IAAsB;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAA;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAA;IAC9B,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAA;IAE5C,uFAAuF;IACvF,sFAAsF;IACtF,mFAAmF;IACnF,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACxC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;YACpD,GAAG,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAA;QAClD,CAAC,CAAC,CAAA;QACF,OAAO,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;IACvE,CAAC;IAED,kFAAkF;IAClF,2EAA2E;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;IACxB,MAAM,QAAQ,GAAG,YAAY,CAC3B;QACE,UAAU,EAAE,IAAI,CAAC,OAAO;QACxB,UAAU,EAAE,IAAI,CAAC,YAAY;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,KAAK;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB;IACD,yFAAyF;IACzF,yFAAyF;IACzF,EAAE,IAAI,EAAE,CACT,CAAA;IAED,4FAA4F;IAC5F,8DAA8D;IAC9D,MAAM,aAAa,GAA8B,IAAI,CAAC,KAAK;QACzD,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAChH,CAAC,CAAC,SAAS,CAAA;IAEb,gGAAgG;IAChG,4FAA4F;IAC5F,MAAM,cAAc,GAA+B,IAAI,CAAC,WAAW;QACjE,CAAC,CAAC;YACE,KAAK,EAAE,IAAI,CAAC,WAAW;YACvB,0FAA0F;YAC1F,wBAAwB,EAAE,0BAA0B;YACpD,gBAAgB,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,eAAe,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,0BAA0B,EAAE,OAAO,CAAC;YAC7G,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;YACtD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,eAAe,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC;YAC1E,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC;YAC1D,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC;YACpD,QAAQ,EAAE,QAAQ,CAAC,EAAE;gBACnB,KAAK,MAAM,MAAM,IAAI,QAAQ;oBAAE,eAAe,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;YACvE,CAAC;YACD,mFAAmF;YACnF,MAAM,EAAE,SAAS,CAAC,EAAE;gBAClB,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;gBACxD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;YACrE,CAAC;YACD,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,eAAe,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC;YAC/F,yFAAyF;YACzF,4EAA4E;YAC5E,KAAK,EAAE,GAAG,EAAE;gBACV,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC,SAAS,EAAE,CAAA;gBACvC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;YACpJ,CAAC;YACD,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC;YACrF,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE;QACH,CAAC,CAAC,SAAS,CAAA;IAEb,iGAAiG;IACjG,MAAM,gBAAgB,GAAiC,IAAI,CAAC,WAAW;QACrE,CAAC,CAAC;YACE,KAAK,EAAE,IAAI,CAAC,WAAW;YACvB,cAAc,EAAE,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC,cAAc,EAAE;YACxD,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;YAC/C,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;SAClC;QACH,CAAC,CAAC,SAAS,CAAA;IAEb,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;IACxB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;QACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;YACvE,OAAM;QACR,CAAC;QACD,8GAA8G;QAC9G,8FAA8F;QAC9F,8FAA8F;QAC9F,sFAAsF;QACtF,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,aAAa,GAAG,CAAC,EAAE,CAAC;YAC3E,KAAK,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAA;YAC5D,OAAM;QACR,CAAC;QACD,IAAI,QAAQ,KAAK,gBAAgB,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,gBAAgB,GAAG,CAAC,EAAE,CAAC;YACjF,KAAK,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAA;YAChE,OAAM;QACR,CAAC;QACD,8FAA8F;QAC9F,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC;YAAE,OAAM;QAC3E,iGAAiG;QACjG,+FAA+F;QAC/F,gGAAgG;QAChG,2FAA2F;QAC3F,+FAA+F;QAC/F,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,CAAC,EAAE,CAAC;YACzE,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC;gBAAE,OAAM;YAC/C,KAAK,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAA;YAC1D,OAAM;QACR,CAAC;QACD,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,EAAE,CAAC;YACrE,KAAK,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YACvB,OAAM;QACR,CAAC;QACD,qGAAqG;QACrG,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC,EAAE,CAAC;YAC9C,8FAA8F;YAC9F,KAAK,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBAClD,IAAI,CAAC,GAAG,CAAC,WAAW;oBAAE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;YAC1G,CAAC,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QACD,KAAK,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IACF,OAAO,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;QACpD,2EAA2E;QAC3E,qCAAqC;QACrC,KAAK,CAAC,IAAI,EAAE,CAAA;QACZ,MAAM,WAAW,CAAC,MAAM,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,oGAAoG;AACpG,SAAS,eAAe,CAAC,MAAc,EAAE,IAAY,EAAE,IAAY,EAAE,KAA0B;IAC7F,OAAO,IAAI,OAAO,CAAY,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QAC9D,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;QACnC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;YAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAA;YAC/C,cAAc,CAAC,EAAE,GAAG,EAAE,UAAU,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAClE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,uIAAuI;IACvI,MAAM,CAAC,mBAAmB,EAAE,CAAA;IAC5B,OAAO,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAA;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,GAAoB,EAAE,GAAmB,EAAE,IAAY;IACjF,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACtE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACrE,OAAO,KAAK,CAAA;AACd,CAAC;AAED,sFAAsF;AACtF,MAAM,aAAa,GAAG,WAAW,CAAA;AAEjC;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,GAAoB,EAAE,GAAmB,EAAE,KAAa;IACtF,0FAA0F;IAC1F,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAA;IACvD,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAChD,IAAI,UAAU,KAAK,IAAI,IAAI,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAChC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAA;QACzC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,sQAAsQ;YACtQ,YAAY,EAAE,GAAG,aAAa,IAAI,KAAK,kCAAkC;YACzE,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC,CAAA;QACF,GAAG,CAAC,GAAG,EAAE,CAAA;QACT,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IACjE,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7E,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;IACpD,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IACvB,OAAO,KAAK,CAAA;AACd,CAAC;AAED;4EAC4E;AAC5E,SAAS,WAAW,CAAC,CAAS,EAAE,CAAS;IACvC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACzB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACzB,OAAO,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,IAAI,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;AAC3D,CAAC;AAED,mEAAmE;AACnE,SAAS,UAAU,CAAC,MAA0B,EAAE,IAAY;IAC1D,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACtF,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/dashboard/static.d.ts

@@ -0,0 +1,9 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+/**
+ * Serve `dir`'s static bundle for this request: the requested file when it exists,
+ * otherwise `index.html` (the SPA fallback, so client routes and unknown paths still
+ * boot the app). Path-traversal is guarded — a request that escapes `dir` falls back to
+ * `index.html` rather than reading outside the bundle.
+ */
+export declare function serveClientBundle(req: IncomingMessage, res: ServerResponse, dir: string): Promise<void>;
+//# sourceMappingURL=static.d.ts.map

package/dist/dashboard/static.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static.d.ts","sourceRoot":"","sources":["../../src/dashboard/static.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAwBhE;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAyB7G"}

package/dist/dashboard/static.js

@@ -0,0 +1,54 @@
+import { readFile, stat } from 'node:fs/promises';
+import { join, normalize, sep } from 'node:path';
+import { contentTypeFor } from './content-type.js';
+import { requestPathname } from '../request-path.js';
+// Serve the built dashboard bundle (#405). The dashboard is a plain Vite SPA — one static
+// `index.html` plus `assets/**` — so the daemon serves it as
+// plain files with an SPA fallback (any non-asset path yields `index.html`, which boots
+// the client router). Assets are copied into the
+// framework package at build time (see scripts/bundle-dashboard.mjs).
+/** Whether a real, readable file exists at `path`. */
+async function isFile(path) {
+    return stat(path).then(s => s.isFile()).catch(() => false);
+}
+/** Decode a percent-encoded path; a malformed escape names no file, so it decodes to nothing. */
+function tryDecode(pathname) {
+    try {
+        return decodeURIComponent(pathname);
+    }
+    catch {
+        return '';
+    }
+}
+/**
+ * Serve `dir`'s static bundle for this request: the requested file when it exists,
+ * otherwise `index.html` (the SPA fallback, so client routes and unknown paths still
+ * boot the app). Path-traversal is guarded — a request that escapes `dir` falls back to
+ * `index.html` rather than reading outside the bundle.
+ */
+export async function serveClientBundle(req, res, dir) {
+    // Neither an unparseable request target nor a malformed escape (`/%zz`) may throw: this
+    // runs void-dispatched, so an exception here would be an unhandled rejection that takes
+    // the daemon down (#938). Both fall back to the SPA shell like any other unknown path.
+    const pathname = requestPathname(req) ?? '/';
+    const rel = tryDecode(pathname).replace(/^\/+/, '');
+    const root = normalize(dir);
+    const candidate = normalize(join(root, rel));
+    const within = candidate === root || candidate.startsWith(root + sep);
+    const target = within && rel && (await isFile(candidate)) ? candidate : join(root, 'index.html');
+    const body = await readFile(target).catch(() => undefined);
+    if (body === undefined) {
+        res.writeHead(404, { 'content-type': 'text/plain' });
+        res.end('dashboard bundle not built');
+        return;
+    }
+    const type = contentTypeFor(target);
+    // Only the fingerprinted files under `assets/` are immutable. Everything at a stable path
+    // (index.html, the host files a module imports as `/host/*.js`) must always revalidate: a
+    // browser that kept `/host/module.js` from the last version would hand every module a host
+    // missing whatever the new version added, until its cache expired a year later.
+    const cacheControl = target.startsWith(join(root, 'assets') + sep) ? 'public, max-age=31536000, immutable' : 'no-cache';
+    res.writeHead(200, { 'content-type': type, 'cache-control': cacheControl });
+    res.end(body);
+}
+//# sourceMappingURL=static.js.map