@openagt/dashboard 0.0.0-stage → 0.9.0

package/dist/dashboard/docs.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The plan/backlog document categories the dashboard surfaces in its sidebar
+ * (#319, part of the MVP UI #309), so the human can read them beside the agent.
+ *
+ * These are written per session as `PLAN_<SESSION>.agent.md` (the plan for now) and
+ * `TODO_<SESSION>.agent.md` (the backlog), where SESSION is a git-branch slug — by
+ * OpenAgent's own system prompt back when it ran the agent (#323/#326), and by
+ * whatever a project's own skills tell an agent to write now. The flat fallback is `PLAN.md`
+ * at the root; the `TODO` category has no flat file: the agent queue is not a document of the
+ * checkout but a project package's data, and the dashboard shows it on that package's own page
+ * and the Overview's AI Queue card (#1774), not here. Scoped and flat-root names are matched
+ * against a flat readdir of the root, never taken from user input, so there is no path
+ * traversal to guard against.
+ */
+export declare const DOC_CATEGORIES: readonly [{
+    readonly flat: 'PLAN.md';
+    readonly scoped: RegExp;
+}, {
+    readonly scoped: RegExp;
+}];
+/** One surfaced document: its filename and current contents. */
+export interface WorkspaceDoc {
+    name: string;
+    content: string;
+}
+/**
+ * The workspace-root filenames to surface, in sidebar order: per category the flat
+ * file (if present) then its session-scoped files (sorted). Every name is a bare
+ * readdir entry matched against a fixed pattern, so none can traverse. Returns
+ * empty when the workspace is missing or unreadable.
+ */
+/**
+ * Read the surfaced plan/todo docs, in sidebar order: per category the flat file (if the
+ * category has one and it is present) then its session-scoped files (sorted), every one a
+ * workspace-root file. Missing or blank files are skipped; a file over the size cap is
+ * truncated. Never throws — a read error just omits that doc.
+ */
+export declare function readDocs(cwd: string): Promise<WorkspaceDoc[]>;
+//# sourceMappingURL=docs.d.ts.map

package/dist/dashboard/docs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.d.ts","sourceRoot":"","sources":["../../src/dashboard/docs.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,cAAc;aACvB,IAAI,EAAE,SAAS;aAAE,MAAM;;aACvB,MAAM;EACA,CAAA;AAEV,gEAAgE;AAChE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAKD;;;;;GAKG;AACH;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAoBnE"}

package/dist/dashboard/docs.js

@@ -0,0 +1,59 @@
+import { readFile, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+/**
+ * The plan/backlog document categories the dashboard surfaces in its sidebar
+ * (#319, part of the MVP UI #309), so the human can read them beside the agent.
+ *
+ * These are written per session as `PLAN_<SESSION>.agent.md` (the plan for now) and
+ * `TODO_<SESSION>.agent.md` (the backlog), where SESSION is a git-branch slug — by
+ * OpenAgent's own system prompt back when it ran the agent (#323/#326), and by
+ * whatever a project's own skills tell an agent to write now. The flat fallback is `PLAN.md`
+ * at the root; the `TODO` category has no flat file: the agent queue is not a document of the
+ * checkout but a project package's data, and the dashboard shows it on that package's own page
+ * and the Overview's AI Queue card (#1774), not here. Scoped and flat-root names are matched
+ * against a flat readdir of the root, never taken from user input, so there is no path
+ * traversal to guard against.
+ */
+export const DOC_CATEGORIES = [
+    { flat: 'PLAN.md', scoped: /^PLAN_[a-z0-9-]+\.agent\.md$/ },
+    { scoped: /^TODO_[a-z0-9-]+\.agent\.md$/ },
+];
+/** Cap a single doc so a runaway file can't bloat the docs payload. */
+const MAX_DOC_BYTES = 200_000;
+/**
+ * The workspace-root filenames to surface, in sidebar order: per category the flat
+ * file (if present) then its session-scoped files (sorted). Every name is a bare
+ * readdir entry matched against a fixed pattern, so none can traverse. Returns
+ * empty when the workspace is missing or unreadable.
+ */
+/**
+ * Read the surfaced plan/todo docs, in sidebar order: per category the flat file (if the
+ * category has one and it is present) then its session-scoped files (sorted), every one a
+ * workspace-root file. Missing or blank files are skipped; a file over the size cap is
+ * truncated. Never throws — a read error just omits that doc.
+ */
+export async function readDocs(cwd) {
+    let entries;
+    try {
+        entries = await readdir(cwd);
+    }
+    catch {
+        return [];
+    }
+    const present = new Set(entries);
+    const docs = [];
+    const push = (name, content) => {
+        if (!content?.trim())
+            return;
+        docs.push({ name, content: content.length > MAX_DOC_BYTES ? content.slice(0, MAX_DOC_BYTES) + '\n\n… (truncated)' : content });
+    };
+    for (const cat of DOC_CATEGORIES) {
+        if ('flat' in cat && present.has(cat.flat))
+            push(cat.flat, await readFile(join(cwd, cat.flat), 'utf8').catch(() => undefined));
+        for (const name of entries.filter(e => cat.scoped.test(e)).sort()) {
+            push(name, await readFile(join(cwd, name), 'utf8').catch(() => undefined));
+        }
+    }
+    return docs;
+}
+//# sourceMappingURL=docs.js.map

package/dist/dashboard/docs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.js","sourceRoot":"","sources":["../../src/dashboard/docs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,8BAA8B,EAAE;IAC3D,EAAE,MAAM,EAAE,8BAA8B,EAAE;CAClC,CAAA;AAQV,uEAAuE;AACvE,MAAM,aAAa,GAAG,OAAO,CAAA;AAE7B;;;;;GAKG;AACH;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAW;IACxC,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IAChC,MAAM,IAAI,GAAmB,EAAE,CAAA;IAC/B,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,OAA2B,EAAQ,EAAE;QAC/D,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE;YAAE,OAAM;QAC5B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IAChI,CAAC,CAAA;IACD,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,IAAI,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;QAC9H,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAClE,IAAI,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/dashboard/git-status.d.ts

@@ -0,0 +1,44 @@
+import { type GitRunner } from '@openagt/agent-data';
+import { type LinkedPr, type PrLookup } from './pull-requests.js';
+/** A project's git status for the panel. */
+export interface GitStatus {
+    branch: string;
+    /** Uncommitted changes present. */
+    dirty: boolean;
+    pr?: LinkedPr;
+    /** The PR is not known yet, rather than absent (#1028): the lookup is still running. */
+    prPending?: boolean;
+}
+/** Injectable seams so {@link readGitStatus} is unit-testable off disk. */
+export interface GitStatusDeps {
+    git?: GitRunner;
+    pr?: PrLookup;
+    /**
+     * The agent's start, when the status is read for an agent's checkout (#1255). The default lookup
+     * answers the newest PR for the branch *in any state* — so an agent on a reused pinned branch
+     * (`openagent/triage-quick`) wears a predecessor's merged PR as its own badge.
+     * With `since` set the PR is picked from the branch's whole history by {@link pickAgentPr}
+     * instead: an open PR, or a closed one no older than the agent itself.
+     */
+    since?: string;
+    /** The branch's full PR history, for the {@link GitStatusDeps.since} path (default {@link cachedPrsForBranch}). */
+    prs?: (cwd: string, branch: string) => Promise<LinkedPr[]>;
+    /**
+     * The project's folder, for a status read in a run's checkout: the branch's PR history is looked
+     * up and cached by it, as the run's handoff reads it, so the lookup the bar made while the run
+     * worked is warm once the run ends and its Open PR is asked about.
+     */
+    prRoot?: string;
+}
+/**
+ * The branch `cwd` has checked out, by its short name; `HEAD` when it is on no branch. Undefined
+ * when `cwd` is not a git repo, or git failed.
+ */
+export declare function currentBranch(cwd: string, git?: GitRunner): Promise<string | undefined>;
+/**
+ * Read a project's git status: the current branch and dirty flag (from git), plus the linked
+ * PR (best-effort). Returns undefined when the path is not a git repo. Forgiving — a failed
+ * `git status` reads as clean, and a failed PR lookup simply omits the PR.
+ */
+export declare function readGitStatus(cwd: string, deps?: GitStatusDeps): Promise<GitStatus | undefined>;
+//# sourceMappingURL=git-status.d.ts.map

package/dist/dashboard/git-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-status.d.ts","sourceRoot":"","sources":["../../src/dashboard/git-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAA;AACnE,OAAO,EAAiD,KAAK,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAOhH,4CAA4C;AAC5C,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,mCAAmC;IACnC,KAAK,EAAE,OAAO,CAAA;IACd,EAAE,CAAC,EAAE,QAAQ,CAAA;IACb,wFAAwF;IACxF,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,SAAS,CAAA;IACf,EAAE,CAAC,EAAE,QAAQ,CAAA;IACb;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,mHAAmH;IACnH,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC1D;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,SAA2B,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAE9G;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAUzG"}

package/dist/dashboard/git-status.js

@@ -0,0 +1,37 @@
+import { nodeGitRunner } from '@openagt/agent-data';
+import { cachedPrView, cachedPrsForBranch, pickAgentPr } from './pull-requests.js';
+/**
+ * The branch `cwd` has checked out, by its short name; `HEAD` when it is on no branch. Undefined
+ * when `cwd` is not a git repo, or git failed.
+ */
+export async function currentBranch(cwd, git = nodeGitRunner()) {
+    return git(['rev-parse', '--abbrev-ref', 'HEAD'], cwd).then(out => out.trim(), () => undefined);
+}
+/**
+ * Read a project's git status: the current branch and dirty flag (from git), plus the linked
+ * PR (best-effort). Returns undefined when the path is not a git repo. Forgiving — a failed
+ * `git status` reads as clean, and a failed PR lookup simply omits the PR.
+ */
+export async function readGitStatus(cwd, deps = {}) {
+    const git = deps.git ?? nodeGitRunner();
+    const branch = await currentBranch(cwd, git);
+    if (branch === undefined)
+        return undefined; // not a git repo (or git failed)
+    const dirty = (await git(['status', '--porcelain'], cwd).catch(() => '')).trim().length > 0;
+    // The branch and the dirty flag are what this row is for, and they are ten milliseconds of git.
+    // The PR is a git host read an order of magnitude slower, so it is read through the cache and is
+    // allowed to arrive late (#1028) rather than holding the whole row back on every poll.
+    const pr = await linkedPr(cwd, branch, deps);
+    return { branch, dirty, ...(pr.value ? { pr: pr.value } : {}), ...(pr.pending ? { prPending: true } : {}) };
+}
+/** The PR half of the status: the injected seam, the run-scoped history pick, or the plain view. */
+async function linkedPr(cwd, branch, deps) {
+    if (deps.pr)
+        return { value: await deps.pr(cwd).catch(() => undefined), pending: false };
+    if (deps.since === undefined)
+        return cachedPrView(cwd, branch).catch(() => ({ value: undefined, pending: false }));
+    if (deps.prs)
+        return { value: pickAgentPr(await deps.prs(cwd, branch).catch(() => []), deps.since), pending: false };
+    return cachedPrsForBranch(deps.prRoot ?? cwd, branch).then(read => ({ value: pickAgentPr(read.value ?? [], deps.since), pending: read.pending }), () => ({ value: undefined, pending: false }));
+}
+//# sourceMappingURL=git-status.js.map

package/dist/dashboard/git-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-status.js","sourceRoot":"","sources":["../../src/dashboard/git-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAkB,MAAM,qBAAqB,CAAA;AACnE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAgC,MAAM,oBAAoB,CAAA;AAuChH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,GAAG,GAAc,aAAa,EAAE;IAC/E,OAAO,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;AACjG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,IAAI,GAAkB,EAAE;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,aAAa,EAAE,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC5C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA,CAAC,iCAAiC;IAC5E,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;IAC3F,gGAAgG;IAChG,iGAAiG;IACjG,uFAAuF;IACvF,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAC5C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;AAC7G,CAAC;AAED,oGAAoG;AACpG,KAAK,UAAU,QAAQ,CACrB,GAAW,EACX,MAAc,EACd,IAAmB;IAEnB,IAAI,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACxF,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;IAClH,IAAI,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACpH,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CACxD,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,EACrF,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAC7C,CAAA;AACH,CAAC"}

package/dist/dashboard/http.d.ts

@@ -0,0 +1,29 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+/**
+ * The plumbing every one of the daemon's non-RPC HTTP surfaces shares: the browser bridge
+ * (`/_bridge`), the web-start queue (`/_web-start`) and the device relay (`/_relay`).
+ *
+ * All three answer plain-text statuses, JSON payloads, and read capped JSON request bodies, and
+ * each carried its own copy — two body readers that differed only in which message they rejected
+ * with, and three identical status responders.
+ */
+/** Answer with a plain-text status line. */
+export declare function end(res: ServerResponse, status: number, message: string, headers?: Record<string, string>): void;
+/** Answer with a JSON payload. */
+export declare function sendJson(res: ServerResponse, payload: unknown, status?: number): void;
+/**
+ * Read a JSON body, refusing anything past the cap rather than buffering it. Rejects with
+ * `body too large` on overflow and `body must be JSON` on anything unparseable — the messages the
+ * bridge and web-start routes answer 400 with, so a caller learns which of the two it hit.
+ */
+export declare function readJsonBody(req: IncomingMessage, maxBytes: number): Promise<unknown>;
+/**
+ * The preamble every POST route runs: refuse a non-POST, then read the body. Answers the request
+ * itself on either failure and resolves `undefined`, so a caller's whole check is
+ * `const body = await readPost(...); if (body === undefined) return`. JSON has no `undefined`, so
+ * the sentinel cannot collide with a body that parsed.
+ */
+export declare function readPost(req: IncomingMessage, res: ServerResponse, maxBytes: number): Promise<unknown>;
+/** Refuse anything but a GET, answering 405 itself. `false` means the request is already answered. */
+export declare function requireGet(req: IncomingMessage, res: ServerResponse): boolean;
+//# sourceMappingURL=http.d.ts.map

package/dist/dashboard/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/dashboard/http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAEhE;;;;;;;GAOG;AAEH,4CAA4C;AAC5C,wBAAgB,GAAG,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GAAG,IAAI,CAGpH;AAED,kCAAkC;AAClC,wBAAgB,QAAQ,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAM,GAAG,IAAI,CAGlF;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAsBrF;AAED;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAW5G;AAED,sGAAsG;AACtG,wBAAgB,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAI7E"}

package/dist/dashboard/http.js

@@ -0,0 +1,74 @@
+/**
+ * The plumbing every one of the daemon's non-RPC HTTP surfaces shares: the browser bridge
+ * (`/_bridge`), the web-start queue (`/_web-start`) and the device relay (`/_relay`).
+ *
+ * All three answer plain-text statuses, JSON payloads, and read capped JSON request bodies, and
+ * each carried its own copy — two body readers that differed only in which message they rejected
+ * with, and three identical status responders.
+ */
+/** Answer with a plain-text status line. */
+export function end(res, status, message, headers = {}) {
+    res.writeHead(status, { 'content-type': 'text/plain', ...headers });
+    res.end(message);
+}
+/** Answer with a JSON payload. */
+export function sendJson(res, payload, status = 200) {
+    res.writeHead(status, { 'content-type': 'application/json' });
+    res.end(JSON.stringify(payload));
+}
+/**
+ * Read a JSON body, refusing anything past the cap rather than buffering it. Rejects with
+ * `body too large` on overflow and `body must be JSON` on anything unparseable — the messages the
+ * bridge and web-start routes answer 400 with, so a caller learns which of the two it hit.
+ */
+export function readJsonBody(req, maxBytes) {
+    return new Promise((resolve, reject) => {
+        let size = 0;
+        const chunks = [];
+        req.on('data', (chunk) => {
+            size += chunk.length;
+            if (size > maxBytes) {
+                reject(new Error('body too large'));
+                req.destroy();
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on('end', () => {
+            try {
+                resolve(JSON.parse(Buffer.concat(chunks).toString('utf8')));
+            }
+            catch {
+                reject(new Error('body must be JSON'));
+            }
+        });
+        req.on('error', () => reject(new Error('read failed')));
+    });
+}
+/**
+ * The preamble every POST route runs: refuse a non-POST, then read the body. Answers the request
+ * itself on either failure and resolves `undefined`, so a caller's whole check is
+ * `const body = await readPost(...); if (body === undefined) return`. JSON has no `undefined`, so
+ * the sentinel cannot collide with a body that parsed.
+ */
+export async function readPost(req, res, maxBytes) {
+    if (req.method !== 'POST') {
+        end(res, 405, 'method not allowed', { allow: 'POST' });
+        return undefined;
+    }
+    try {
+        return await readJsonBody(req, maxBytes);
+    }
+    catch (err) {
+        end(res, 400, err.message);
+        return undefined;
+    }
+}
+/** Refuse anything but a GET, answering 405 itself. `false` means the request is already answered. */
+export function requireGet(req, res) {
+    if (req.method === 'GET')
+        return true;
+    end(res, 405, 'method not allowed', { allow: 'GET' });
+    return false;
+}
+//# sourceMappingURL=http.js.map

package/dist/dashboard/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/dashboard/http.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AAEH,4CAA4C;AAC5C,MAAM,UAAU,GAAG,CAAC,GAAmB,EAAE,MAAc,EAAE,OAAe,EAAE,OAAO,GAA2B,EAAE;IAC5G,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,GAAG,OAAO,EAAE,CAAC,CAAA;IACnE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;AAClB,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,QAAQ,CAAC,GAAmB,EAAE,OAAgB,EAAE,MAAM,GAAG,GAAG;IAC1E,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;IAC7D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,GAAoB,EAAE,QAAgB;IACjE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;YACpB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAA;gBACnC,GAAG,CAAC,OAAO,EAAE,CAAA;gBACb,OAAM;YACR,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAA;YACxC,CAAC;QACH,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAoB,EAAE,GAAmB,EAAE,QAAgB;IACxF,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QACtD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,GAAG,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAA;QACrC,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,GAAoB,EAAE,GAAmB;IAClE,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;QAAE,OAAO,IAAI,CAAA;IACrC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/dashboard/index.d.ts

@@ -0,0 +1,24 @@
+export { startDashboard, type Dashboard, type DashboardOptions } from './server.js';
+export type { StartAgentOptions, StartAgentResult, AddProjectResult, RemoveProjectResult, CleanupReport, OnboardingSuggestion, AgentWorktree } from './types.js';
+export { summarizeProject, defaultProjectsProvider, type ProjectSummary, type ProjectionRead, type ProjectsProvider, type SummarizeDeps, } from './projects.js';
+export { resolveDashboardBundle } from './bundle.js';
+export { makeRpcMount, RPC_PREFIX, isSameOriginRequest, isExpectedHost, type EventsSource } from './rpc-serve.js';
+export { serveClientBundle } from './static.js';
+export { readDocs, DOC_CATEGORIES, type WorkspaceDoc } from './docs.js';
+export { collectQueue, type ProjectQueue } from './queue.js';
+export { buildOverview, buildRecentAgents, type Overview, type ActiveAgent as ActiveAgent, type RecentProject, type RecentAgent as RecentAgent, type OverviewDeps } from './overview.js';
+export { buildDashboard, type DashboardData, type ProjectStat, type DashboardDeps } from './dashboard.js';
+export { readGitStatus, type GitStatus } from './git-status.js';
+export { prView, prsForBranch, openPrs, pickAgentPr, type LinkedPr, type OpenPr, type PrLookup, type BranchPrLookup, type PrLister } from './pull-requests.js';
+export { readAgentHandoff, agentBranchFor, openAgentPullRequest, type AgentHandoff, type HandoffCommit, type HandoffFile, type HandoffResult, type AgentHandoffDeps, } from './agent-handoff.js';
+export { buildInterventions, interventionKey, type Intervention, type InterventionsDeps, } from './interventions.js';
+export { buildOpenQuestions, type OpenQuestion, type OpenQuestionsDeps } from './open-questions.js';
+export { bridgeChoiceRequest, type BridgeOption, type BridgeQuestion } from './bridge-question.js';
+export { buildActivity, activityKey, type Activity, type ActivityDeps } from './activity.js';
+export { SeenTracker } from './keyed-watcher.js';
+export { BRIDGE_PREFIX, handleBridgeRequest, type BridgeHandlers, type BridgeSession, type BridgeEvent, type BridgeHello, type BridgeStart } from './bridge-endpoints.js';
+export { bridgeStarts, resetBridgeStarts, BridgeStarts, START_CLAIM_TTL_MS, MAX_START_PROMPT, type BridgeStartRequest, type BridgeStartState, type BridgeStartInput } from './bridge-starts.js';
+export { WEB_START_PREFIX, DAEMON_URL_ENV, handleWebStartRequest, type WebStartHandlers } from './web-start-endpoints.js';
+export { bridgeSessionsFrom, BRIDGE_SESSION_WINDOW_MS } from './bridge-sessions.js';
+export { bridgeQuestions, resetBridgeQuestions, BridgeQuestions, type BridgeContact, type BridgeAnswer } from './bridge-store.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/dashboard/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/dashboard/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,KAAK,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACnF,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,aAAa,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAChK,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,aAAa,GACnB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,mBAAmB,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAA;AACjH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,WAAW,CAAA;AACvE,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,YAAY,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,KAAK,QAAQ,EAAE,KAAK,WAAW,IAAI,WAAW,EAAE,KAAK,aAAa,EAAE,KAAK,WAAW,IAAI,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAA;AACxL,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAA;AACzG,OAAO,EAAE,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC/D,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,QAAQ,EAAE,KAAK,MAAM,EAAE,KAAK,QAAQ,EAAE,KAAK,cAAc,EAAE,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC9J,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,KAAK,YAAY,EACjB,KAAK,iBAAiB,GACvB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,kBAAkB,EAAE,KAAK,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACnG,OAAO,EAAE,mBAAmB,EAAE,KAAK,YAAY,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAClG,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5F,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACzK,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC/L,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AACzH,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA;AACnF,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,eAAe,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/dashboard/index.js

@@ -0,0 +1,23 @@
+export { startDashboard } from './server.js';
+export { summarizeProject, defaultProjectsProvider, } from './projects.js';
+export { resolveDashboardBundle } from './bundle.js';
+export { makeRpcMount, RPC_PREFIX, isSameOriginRequest, isExpectedHost } from './rpc-serve.js';
+export { serveClientBundle } from './static.js';
+export { readDocs, DOC_CATEGORIES } from './docs.js';
+export { collectQueue } from './queue.js';
+export { buildOverview, buildRecentAgents } from './overview.js';
+export { buildDashboard } from './dashboard.js';
+export { readGitStatus } from './git-status.js';
+export { prView, prsForBranch, openPrs, pickAgentPr } from './pull-requests.js';
+export { readAgentHandoff, agentBranchFor, openAgentPullRequest, } from './agent-handoff.js';
+export { buildInterventions, interventionKey, } from './interventions.js';
+export { buildOpenQuestions } from './open-questions.js';
+export { bridgeChoiceRequest } from './bridge-question.js';
+export { buildActivity, activityKey } from './activity.js';
+export { SeenTracker } from './keyed-watcher.js';
+export { BRIDGE_PREFIX, handleBridgeRequest } from './bridge-endpoints.js';
+export { bridgeStarts, resetBridgeStarts, BridgeStarts, START_CLAIM_TTL_MS, MAX_START_PROMPT } from './bridge-starts.js';
+export { WEB_START_PREFIX, DAEMON_URL_ENV, handleWebStartRequest } from './web-start-endpoints.js';
+export { bridgeSessionsFrom, BRIDGE_SESSION_WINDOW_MS } from './bridge-sessions.js';
+export { bridgeQuestions, resetBridgeQuestions, BridgeQuestions } from './bridge-store.js';
+//# sourceMappingURL=index.js.map

package/dist/dashboard/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/dashboard/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAyC,MAAM,aAAa,CAAA;AAEnF,OAAO,EACL,gBAAgB,EAChB,uBAAuB,GAKxB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,mBAAmB,EAAE,cAAc,EAAqB,MAAM,gBAAgB,CAAA;AACjH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAqB,MAAM,WAAW,CAAA;AACvE,OAAO,EAAE,YAAY,EAAqB,MAAM,YAAY,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAA0H,MAAM,eAAe,CAAA;AACxL,OAAO,EAAE,cAAc,EAA4D,MAAM,gBAAgB,CAAA;AACzG,OAAO,EAAE,aAAa,EAAkB,MAAM,iBAAiB,CAAA;AAC/D,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAiF,MAAM,oBAAoB,CAAA;AAC9J,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GAMrB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,kBAAkB,EAClB,eAAe,GAGhB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,kBAAkB,EAA6C,MAAM,qBAAqB,CAAA;AACnG,OAAO,EAAE,mBAAmB,EAA0C,MAAM,sBAAsB,CAAA;AAClG,OAAO,EAAE,aAAa,EAAE,WAAW,EAAoC,MAAM,eAAe,CAAA;AAC5F,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAiG,MAAM,uBAAuB,CAAA;AACzK,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAyE,MAAM,oBAAoB,CAAA;AAC/L,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,qBAAqB,EAAyB,MAAM,0BAA0B,CAAA;AACzH,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA;AACnF,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,eAAe,EAAyC,MAAM,mBAAmB,CAAA"}

package/dist/dashboard/interventions.d.ts

@@ -0,0 +1,67 @@
+import { type LiveAgent, type AgentMeta } from '../store/index.js';
+import type { OpenAgentEvent } from '../events.js';
+import type { ProjectSummary, ProjectionRead } from './projects.js';
+import { type BranchesFor } from '../store/branches.js';
+import { type PrLister } from './pull-requests.js';
+export { interventionKey } from './keys.js';
+/**
+ * One item awaiting the human. Two kinds: an open `pr` to review/merge or close, and an
+ * `awaiting` run paused on a choice gate. The card and the browser hook both iterate the flat
+ * list, branching on `kind` for the fields that differ.
+ */
+export interface Intervention {
+    projectId: string;
+    projectName: string;
+    /**
+     * `pr` = an open PR to review/merge or close; `awaiting` = a run waiting on the question it ended on (#636/#1774);
+     * `unpushed` = a finished agent whose branch has commits that were never pushed (#860).
+     */
+    kind: 'pr' | 'awaiting' | 'unpushed';
+    title: string;
+    /** The PR on the git host (`pr` only): where a click takes the user. */
+    url?: string;
+    /** The PR number (`pr` only). */
+    number?: number;
+    /** The question's id (`awaiting` only) — its stable identity, so it notifies exactly once. */
+    awaitId?: string;
+    /** Which run this is about (`awaiting` #738 / `unpushed`): a project has several agents. */
+    agentId?: string;
+    /** The branch the work is sitting on (`unpushed` only). */
+    branch?: string;
+    /** How many commits are waiting (`unpushed` only). */
+    commits?: number;
+    /** When the PR was opened (`pr`) or the agent last updated (the other two), ISO, for ordering. */
+    createdAt?: string;
+}
+/** Injectable seam so {@link buildInterventions} is unit-testable off disk. */
+export interface InterventionsDeps {
+    prs?: PrLister;
+    /** The reader of the runs that have a checkout (default {@link readLiveMetas}): a waiting run keeps its own; drives the `awaiting` source (#636). */
+    liveAgents?: (cwd: string) => Promise<LiveAgent[]>;
+    /** One run's events, by the project's path and the run's id (default {@link loadAgentEvents}): where a waiting run's question is read. */
+    events?: (cwd: string, agentId: string) => Promise<OpenAgentEvent[] | undefined>;
+    /** The finished-agent reader (default {@link listAgents}); drives the `unpushed` source (#860). */
+    agents?: (cwd: string) => Promise<AgentMeta[]>;
+    /** The project's checkouts and branches (default the project's provider, {@link projectBranches}): where a branch's state is read; drives the `unpushed` source (#860). */
+    branches?: BranchesFor;
+    /**
+     * How many of a project's most recent finished agents to inspect for unpushed work. Each one costs
+     * a handful of git reads, and this runs on a poll, so old history is not re-walked every minute:
+     * work that has sat unpushed for dozens of agents is not news, and the agent list stays the record.
+     */
+    handoffLimit?: number;
+}
+/**
+ * Build the cross-project interventions queue: every registered project's open PRs, plus any run
+ * currently paused on a choice gate (#636), newest first. Forgiving — a project with no remote
+ * (or an unreadable one) simply contributes nothing. Hand-opened draft PRs are excluded: they are
+ * not yet asking for review. A draft on an agent's branch is not (#1102): an agent publishes a
+ * draft when a person should look first, and cloud work adoption opens its PRs as drafts.
+ *
+ * Which projects were read whole comes back alongside the items (#1623): forgiveness here is what
+ * lets one unreachable project keep the queue useful, and it is also what would let that project's
+ * whole backlog announce itself as new the moment it came back. The queue's panels ignore this;
+ * the notification watcher is the caller that cannot.
+ */
+export declare function buildInterventions(projects: ProjectSummary[], deps?: InterventionsDeps): Promise<ProjectionRead<Intervention>>;
+//# sourceMappingURL=interventions.d.ts.map

package/dist/dashboard/interventions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interventions.d.ts","sourceRoot":"","sources":["../../src/dashboard/interventions.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8C,KAAK,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAE9G,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAEnE,OAAO,EAAmB,KAAK,WAAW,EAAoB,MAAM,sBAAsB,CAAA;AAC1F,OAAO,EAAW,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAI3D,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAS3C;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB;;;OAGG;IACH,IAAI,EAAE,IAAI,GAAG,UAAU,GAAG,UAAU,CAAA;IACpC,KAAK,EAAE,MAAM,CAAA;IACb,wEAAwE;IACxE,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,4FAA4F;IAC5F,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,kGAAkG;IAClG,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,+EAA+E;AAC/E,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,QAAQ,CAAA;IACd,qJAAqJ;IACrJ,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAClD,0IAA0I;IAC1I,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,EAAE,GAAG,SAAS,CAAC,CAAA;IAChF,mGAAmG;IACnG,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAC9C,2KAA2K;IAC3K,QAAQ,CAAC,EAAE,WAAW,CAAA;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAKD;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,cAAc,EAAE,EAC1B,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,CA6EvC"}

package/dist/dashboard/interventions.js

@@ -0,0 +1,169 @@
+import { listAgents, loadAgentEvents, readLiveMetas } from '../store/index.js';
+import { pendingChoices } from '../open-choices.js';
+import { agentBranchFor } from './agent-handoff.js';
+import { projectBranches } from '../store/branches.js';
+import { openPrs } from './pull-requests.js';
+import { interventionKey } from './keys.js';
+// Pure identity + diff, in the leaf `keys.ts` so the dashboard shares them rather than copying.
+export { interventionKey } from './keys.js';
+/** How many recent finished agents are inspected per project by default. */
+const HANDOFF_LIMIT = 5;
+/**
+ * Build the cross-project interventions queue: every registered project's open PRs, plus any run
+ * currently paused on a choice gate (#636), newest first. Forgiving — a project with no remote
+ * (or an unreadable one) simply contributes nothing. Hand-opened draft PRs are excluded: they are
+ * not yet asking for review. A draft on an agent's branch is not (#1102): an agent publishes a
+ * draft when a person should look first, and cloud work adoption opens its PRs as drafts.
+ *
+ * Which projects were read whole comes back alongside the items (#1623): forgiveness here is what
+ * lets one unreachable project keep the queue useful, and it is also what would let that project's
+ * whole backlog announce itself as new the moment it came back. The queue's panels ignore this;
+ * the notification watcher is the caller that cannot.
+ */
+export async function buildInterventions(projects, deps = {}) {
+    const prs = deps.prs ?? openPrs;
+    const liveAgents = deps.liveAgents ?? readLiveMetas;
+    const events = deps.events ?? loadAgentEvents;
+    const items = [];
+    const whole = [];
+    for (const project of projects) {
+        // A project is read whole only when every one of its sources answered. Each `unread()` below is
+        // a source that did not, and contributed nothing for a reason other than nothing being there.
+        let sawEverything = true;
+        const unread = () => {
+            sawEverything = false;
+            return [];
+        };
+        const open = await prs(project.path).catch(unread);
+        // The branches the project's runs are on, recorded or in a checkout (#1774): what tells a
+        // run's draft from one opened by hand. Read only when a draft asks.
+        let runBranches;
+        const isRunBranch = async (branch) => {
+            runBranches ??= new Set([...(await (deps.agents ?? listAgents)(project.path).catch(() => [])), ...(await liveAgents(project.path).catch(() => []))].flatMap(agent => (agent.branch ? [agent.branch] : [])));
+            return runBranches.has(branch);
+        };
+        for (const pr of open) {
+            // A draft opened by hand is not asking for review, so it stays off the queue. A draft on a
+            // run's branch is the opposite (#1102): the agent, or cloud work adoption, opened it as a
+            // draft so it does not ping reviewers, and if the queue then dropped it too, nothing
+            // would tell anyone the work exists — which is the whole of #860 again.
+            if (pr.isDraft && !(pr.headRefName !== undefined && (await isRunBranch(pr.headRefName))))
+                continue;
+            items.push({
+                projectId: project.id,
+                projectName: project.name,
+                kind: 'pr',
+                number: pr.number,
+                title: pr.title,
+                url: pr.url,
+                ...(pr.createdAt ? { createdAt: pr.createdAt } : {}),
+            });
+        }
+        // A run that ended on a question waits for the user, a "needs you" too (#636): it ended
+        // `waiting`, its checkout kept for the answer (#1774). The question is read off the run's own
+        // diary by the rule the run page and the open-questions list use, so the ping names the question
+        // they offer; a waiting run whose diary shows none is skipped. A project has several runs
+        // (#736), so each waiting run contributes its own item — keyed on the question's id, plus the
+        // agent id so two runs are told apart.
+        for (const meta of await liveAgents(project.path).catch(unread)) {
+            if (meta.status !== 'waiting')
+                continue;
+            const choice = pendingChoices((await events(project.path, meta.id).catch(() => undefined)) ?? []).at(-1);
+            if (!choice)
+                continue;
+            items.push({
+                projectId: project.id,
+                projectName: project.name,
+                kind: 'awaiting',
+                title: choice.title,
+                awaitId: choice.id,
+                agentId: meta.id,
+                ...(meta.updatedAt ? { createdAt: meta.updatedAt } : {}),
+            });
+        }
+        // A finished agent whose work never left the machine is a "needs you" too (#860). Until now the
+        // queue only knew about a PR that is *already on the git host* and an agent parked on a gate, so an agent
+        // that committed real code and stopped produced neither, and nothing told anyone: the overview
+        // drops it (it filters on `running`) and the handoff panel is behind clicking into that agent.
+        //
+        // Surfacing only: this says there is a decision waiting, it does not take it. A run publishes
+        // nothing by itself, so every finished run with work of its own reaches here until a person
+        // publishes it, or the agent does on their ask.
+        for (const item of await unpushedFor(project, deps, unread).catch(unread))
+            items.push(item);
+        if (sawEverything)
+            whole.push(project.id);
+    }
+    items.sort((a, b) => (b.createdAt ?? '').localeCompare(a.createdAt ?? ''));
+    // The same repo can be registered under two projects (e.g. a monorepo root + a subdir), so a
+    // PR would otherwise appear once per entry. Collapse by identity, keeping the first (newest-sorted).
+    const seen = new Set();
+    const unique = items.filter(item => (seen.has(interventionKey(item)) ? false : (seen.add(interventionKey(item)), true)));
+    return { items: unique, whole };
+}
+/**
+ * The finished agents of a project whose branch still holds unpushed, unmerged commits (#860).
+ *
+ * Only the most recent {@link InterventionsDeps.handoffLimit} finished agents are inspected, and
+ * their branches in one read of the project's branches provider: each read is a process, and
+ * this runs on a poll. A run started from another branch is the exception: its branch is read on
+ * its own, measured from the commit its own work begins at, as its page measures it; counted from
+ * the default branch it would be credited that other branch's commits too. The provider answers git facts only, so the git host PR lookup the handoff
+ * summary makes per branch is never paid here: an open PR means the branch was pushed, so
+ * `pushed` already excludes it, and the `pr` kind above is what surfaces it.
+ */
+async function unpushedFor(project, deps, unread) {
+    const agents = deps.agents ?? listAgents;
+    const branches = deps.branches ?? projectBranches;
+    const finished = (await agents(project.path))
+        // A subagent's branch is its main agent's to land, never a person's to push.
+        .filter(agent => agent.status !== 'running' && agent.parent === undefined)
+        .sort((a, b) => (b.startedAt ?? '').localeCompare(a.startedAt ?? ''))
+        .slice(0, deps.handoffLimit ?? HANDOFF_LIMIT)
+        .flatMap(agent => {
+        const branch = agentBranchFor(agent);
+        return branch === undefined ? [] : [{ agent, branch }];
+    });
+    if (finished.length === 0)
+        return [];
+    // No provider: the project has no checkouts and no branch state to read; nothing is waiting.
+    const source = await branches(project.path).catch(() => undefined);
+    if (!source)
+        return [];
+    // One read per commit the branches are measured from; the runs that name none share one.
+    const asks = new Map();
+    for (const { agent, branch } of finished)
+        asks.set(agent.baseCommit, [...(asks.get(agent.baseCommit) ?? []), branch]);
+    const states = new Map();
+    try {
+        for (const shown of await Promise.all([...asks].map(([from, asked]) => source.show(asked, from)))) {
+            for (const state of shown)
+                states.set(state.branch, state);
+        }
+    }
+    catch {
+        unread();
+        return [];
+    }
+    const items = [];
+    for (const { agent, branch } of finished) {
+        const state = states.get(branch);
+        // Every condition is a reason this is *not* waiting on anyone: the branch is gone, the session
+        // wrote nothing, it already landed, it is already on the remote, or there is nowhere to push.
+        if (!state || !state.exists || state.commits.length === 0 || state.files.length === 0 || state.merged || state.pushed || !state.hasRemote)
+            continue;
+        items.push({
+            projectId: project.id,
+            projectName: project.name,
+            kind: 'unpushed',
+            // What was asked, else the name the provider gave the branch, else the branch: never a prefix cut off here.
+            title: agent.intent?.trim() || state.name || branch,
+            agentId: agent.id,
+            branch,
+            commits: state.commits.length,
+            ...(agent.updatedAt ? { createdAt: agent.updatedAt } : {}),
+        });
+    }
+    return items;
+}
+//# sourceMappingURL=interventions.js.map