@openagt/dashboard 0.0.0-stage → 0.9.0

package/dist/dashboard/pull-requests.js

@@ -0,0 +1,137 @@
+import { projectGitHost } from '../store/git-host.js';
+import { cachedRead, invalidate } from './cache.js';
+/** A provider's request as OpenAgent keeps it: the state upper-cased, the head as the request's commit. */
+export function linkedPrOf(request) {
+    return {
+        number: request.number,
+        url: request.url,
+        state: request.state.toUpperCase(),
+        title: request.title,
+        ...(request.createdAt ? { createdAt: request.createdAt } : {}),
+        ...(request.head ? { headRefOid: request.head } : {}),
+        ...(request.mergeCommit ? { mergeCommit: request.mergeCommit } : {}),
+    };
+}
+/** A provider's open request as the interventions queue keeps it. */
+export function openPrOf(request) {
+    return {
+        number: request.number,
+        title: request.title,
+        url: request.url,
+        isDraft: request.draft,
+        ...(request.branch ? { headRefName: request.branch } : {}),
+        ...(request.createdAt ? { createdAt: request.createdAt } : {}),
+    };
+}
+/**
+ * Every PR a branch name has ever had, newest first (#1251).
+ *
+ * The newest request for a head *in any state* is what a single view would answer, so a session
+ * whose prompt pins its branch name (`openagent/triage-quick`) inherits a predecessor's
+ * merged PR as its own. The list form keeps the whole history so {@link pickAgentPr} can decide
+ * which entry, if any, belongs to the agent asking. Resolves `[]` when the project has no git host or
+ * the git host could not answer — indistinguishable from "no PRs", which is what every caller would do
+ * with a failure anyway.
+ */
+export async function prsForBranch(cwd, branch, gitHost = projectGitHost) {
+    return prsForBranchOrThrow(cwd, branch, gitHost).catch(() => []);
+}
+/**
+ * {@link prsForBranch} for a caller about to *open* a PR (#1601): a listing the git host could not
+ * answer throws instead of reading as "no PRs", because "none" and "could not tell" must not look
+ * alike there — the difference is a second draft PR on a branch that already has one. A project
+ * with no git host has none, truthfully.
+ */
+export async function prsForBranchOrThrow(cwd, branch, gitHost = projectGitHost) {
+    const source = await gitHost(cwd);
+    if (!source)
+        return [];
+    const listed = await source.requests({ branch, state: 'all' });
+    if (!listed.ok)
+        throw new Error(listed.error);
+    return listed.requests.map(linkedPrOf);
+}
+/** The newest PR of `branch`, in any state, or undefined when it has none or the git host cannot tell. */
+export async function prView(cwd, branch, gitHost = projectGitHost) {
+    return (await prsForBranch(cwd, branch, gitHost))[0];
+}
+/**
+ * The cached form of {@link prView} (#1028), and what the dashboard's panels use.
+ *
+ * A PR lookup costs a process where the git reads beside it cost ten milliseconds, and the answer
+ * changes about as often as someone opens a PR. Cached per checkout and branch, shared between
+ * the worktree bar and the handoff summary, and refreshed behind whoever asks. `pending` says the
+ * answer is not known yet rather than that there is no PR — the difference matters to a caller
+ * deciding whether to offer "Open PR". A read with no branch to ask about answers nothing at once.
+ */
+export async function cachedPrView(cwd, branch) {
+    if (branch === undefined)
+        return { value: undefined, pending: false };
+    return cachedRead(prCacheKey(cwd, branch), () => prView(cwd, branch));
+}
+/** Forget a branch's PR, after an action that changes whether it has one. */
+export function forgetPr(cwd, branch) {
+    invalidate(prCacheKey(cwd, branch));
+}
+/** The cached form of {@link prsForBranch}, shared through the same read-through cache (#1028). */
+export async function cachedPrsForBranch(cwd, branch) {
+    return cachedRead(branchPrsCacheKey(cwd, branch), () => prsForBranch(cwd, branch));
+}
+/** Forget a branch's PR history, after an action that changes it (opening one). */
+export function forgetBranchPrs(cwd, branch) {
+    invalidate(branchPrsCacheKey(cwd, branch));
+}
+/** An unprintable separator, so paths cannot collide with the keys. */
+const KEY_SEP = String.fromCharCode(0);
+function prCacheKey(cwd, branch) {
+    return ['pr', cwd, branch ?? ''].join(KEY_SEP);
+}
+function branchPrsCacheKey(cwd, branch) {
+    return ['prs', cwd, branch].join(KEY_SEP);
+}
+/**
+ * The PR that belongs to an agent, out of every PR its branch name has had (#1251/#1255).
+ *
+ * An OPEN PR always counts: a git host allows one open PR per head branch, so whatever is open on the
+ * run's branch is where its pushed commits land. A closed one counts only when it was created
+ * after the agent started (`since`, the agent's `startedAt`) — the oldest such entry, which is the one
+ * this agent's handoff opened. Anything older is a previous agent's PR wearing the same branch name,
+ * which is exactly what showed a merged two-day-old PR as a fresh session's own. Without `since`
+ * only an open PR is trusted.
+ *
+ * `order` exists for the one caller asking a different question (#1512). `'first'` answers
+ * identity — which PR did *this agent* open, so a later agent's must not be the answer. `'latest'`
+ * answers the handoff decision — which PR last saw the branch, so "did the session keep working
+ * past it" is readable off that PR's `headRefOid`; there the oldest entry would call work that a
+ * second PR already landed unlanded.
+ */
+export function pickAgentPr(prs, since, order = 'first') {
+    const open = prs.find(pr => pr.state === 'OPEN');
+    if (open)
+        return open;
+    if (!since)
+        return undefined;
+    const closed = prs
+        .filter(pr => pr.createdAt && pr.createdAt >= since)
+        .sort((a, b) => ((a.createdAt ?? '') < (b.createdAt ?? '') ? -1 : 1));
+    return order === 'latest' ? closed.at(-1) : closed[0];
+}
+/**
+ * A project's open PRs, through its git host. Unlike the other reads here it *rejects* when the git host
+ * could not answer — no remote, not logged in, the git host unreachable — instead of resolving `[]`.
+ *
+ * "No PRs are open" and "I could not look" are different answers, and its caller keeps a baseline
+ * of what it has already announced (#1623): taking the second for the first makes the next
+ * successful read announce every already-open PR as new. The caller decides what a failure costs;
+ * it cannot decide what it never hears about. A project with no git host package has none open.
+ */
+export async function openPrs(cwd, gitHost = projectGitHost) {
+    const source = await gitHost(cwd);
+    if (!source)
+        return [];
+    const listed = await source.requests({ state: 'open' });
+    if (!listed.ok)
+        throw new Error(listed.error);
+    return listed.requests.map(openPrOf);
+}
+//# sourceMappingURL=pull-requests.js.map

package/dist/dashboard/pull-requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pull-requests.js","sourceRoot":"","sources":["../../src/dashboard/pull-requests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAwC,MAAM,sBAAsB,CAAA;AAC3F,OAAO,EAAE,UAAU,EAAE,UAAU,EAAe,MAAM,YAAY,CAAA;AAiEhE,2GAA2G;AAC3G,MAAM,UAAU,UAAU,CAAC,OAAuB;IAChD,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAA;AACH,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,QAAQ,CAAC,OAAuB;IAC9C,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,KAAK;QACtB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,MAAc,EAAE,OAAO,GAAe,cAAc;IAClG,OAAO,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAe,EAAE,CAAC,EAAE,CAAC,CAAA;AAC9E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAW,EAAE,MAAc,EAAE,OAAO,GAAe,cAAc;IACzG,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IACtB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9D,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC7C,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;AACxC,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,GAAW,EAAE,MAAc,EAAE,OAAO,GAAe,cAAc;IAC5F,OAAO,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,MAAe;IAC7D,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACrE,OAAO,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAA;AACvE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,MAAe;IACnD,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAA;AACrC,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,MAAc;IAClE,OAAO,UAAU,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAA;AACpF,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,MAAc;IACzD,UAAU,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAA;AAC5C,CAAC;AAED,uEAAuE;AACvE,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;AAEtC,SAAS,UAAU,CAAC,GAAW,EAAE,MAAe;IAC9C,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,MAAc;IACpD,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,WAAW,CAAC,GAAe,EAAE,KAAc,EAAE,KAAK,GAAuB,OAAO;IAC9F,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,KAAK,MAAM,CAAC,CAAA;IAChD,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IACrB,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5B,MAAM,MAAM,GAAG,GAAG;SACf,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,SAAS,IAAI,KAAK,CAAC;SACnD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,OAAO,GAAe,cAAc;IAC7E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IACtB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC7C,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;AACtC,CAAC"}

package/dist/dashboard/queue.d.ts

@@ -0,0 +1,17 @@
+import type { ProjectSummary } from './projects.js';
+import { type QueueFor } from '../store/queue.js';
+/** One project's queue, as the dashboard reads it. */
+export interface ProjectQueue {
+    projectId: string;
+    projectName: string;
+    /** The open entries, in order of work: each the task a future agent is started with. */
+    entries: string[];
+}
+/**
+ * The queue of every project that has one, most entries first: a project one of whose packages
+ * provides the queue is listed even with nothing queued (the card shows the projects it can speak
+ * for), and a project with no provider is left out (it has no queue, so nothing is said about it).
+ * `queueFor` is injectable so this is unit-testable off disk and processes.
+ */
+export declare function collectQueue(projects: ProjectSummary[], queueFor?: QueueFor): Promise<ProjectQueue[]>;
+//# sourceMappingURL=queue.d.ts.map

package/dist/dashboard/queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../src/dashboard/queue.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAO/D,sDAAsD;AACtD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,wFAAwF;IACxF,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE,QAAQ,GAAE,QAAuB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CASzH"}

package/dist/dashboard/queue.js

@@ -0,0 +1,19 @@
+import { projectQueue } from '../store/queue.js';
+/**
+ * The queue of every project that has one, most entries first: a project one of whose packages
+ * provides the queue is listed even with nothing queued (the card shows the projects it can speak
+ * for), and a project with no provider is left out (it has no queue, so nothing is said about it).
+ * `queueFor` is injectable so this is unit-testable off disk and processes.
+ */
+export async function collectQueue(projects, queueFor = projectQueue) {
+    const queues = [];
+    for (const project of projects) {
+        const source = await queueFor(project.path).catch(() => undefined);
+        if (!source)
+            continue;
+        const entries = await source.list().catch(() => []);
+        queues.push({ projectId: project.id, projectName: project.name, entries });
+    }
+    return queues.sort((a, b) => b.entries.length - a.entries.length);
+}
+//# sourceMappingURL=queue.js.map

package/dist/dashboard/queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.js","sourceRoot":"","sources":["../../src/dashboard/queue.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAiB,MAAM,mBAAmB,CAAA;AAe/D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAA0B,EAAE,QAAQ,GAAa,YAAY;IAC9F,MAAM,MAAM,GAAmB,EAAE,CAAA;IACjC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAClE,IAAI,CAAC,MAAM;YAAE,SAAQ;QACrB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAa,EAAE,CAAC,EAAE,CAAC,CAAA;QAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;AACnE,CAAC"}

package/dist/dashboard/quota.d.ts

@@ -0,0 +1,53 @@
+import { QuotaPoller } from '../quota-poller.js';
+import { type QuotaBoundary } from '../quota-boundary.js';
+import type { DriverQuotaUnavailableReason, DriverQuotaWindow } from '@openagt/agent-driver';
+/**
+ * Everything the dashboard needs to draw the usage panel (#533): the account's
+ * own windows, and where they stand against the quota boundary (#879).
+ */
+export interface QuotaView {
+    /**
+     * The account's quota windows as the agent reported them (session, week, and
+     * a week per model). Empty when we have no reading at all — check
+     * {@link unavailable} before reading that as "nothing used".
+     */
+    windows: DriverQuotaWindow[];
+    /** When the reading was taken, epoch ms. Absent when there has never been one. */
+    readAt?: number;
+    /**
+     * Why there is no reading, when there isn't one. Present alongside stale
+     * `windows` too: the last good reading is kept through a blip, and this says
+     * the newest attempt failed, so the UI can mark it stale rather than blank it.
+     */
+    unavailable?: DriverQuotaUnavailableReason;
+    /**
+     * The quota boundary of the account's week (#879). Absent when there is no
+     * reading, or when the week's reset could not be placed — which is "we don't
+     * know", not "nothing is allowed".
+     */
+    boundary?: QuotaBoundary;
+}
+/** Where a dashboard reads the quota from. */
+export interface QuotaSource {
+    read(): Promise<QuotaView>;
+    /** Stop any polling behind it. */
+    stop(): void;
+}
+/**
+ * A {@link QuotaSource} backed by a live poller.
+ *
+ * The boundary is measured per read rather than captured: it moves with the clock, so a cached
+ * one would be stale the moment the week's day rolls over. A read costs no reading of the
+ * account: the poller's last good windows are measured again.
+ */
+export declare function pollerQuotaSource(poller: QuotaPoller, now?: () => number): QuotaSource;
+/**
+ * The daemon's own quota source: it polls for the whole life of the dashboard,
+ * not just during an agent, because the panel has to show where the account stands
+ * even when nothing is running.
+ *
+ * Separate from the reading an agent takes for itself: that one dies with the agent, and
+ * nothing stops a running agent over quota anyway. This one exists to draw the bar.
+ */
+export declare function defaultQuotaSource(): QuotaSource;
+//# sourceMappingURL=quota.d.ts.map

package/dist/dashboard/quota.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota.d.ts","sourceRoot":"","sources":["../../src/dashboard/quota.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAEvE,OAAO,KAAK,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAE5F;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB;;;;OAIG;IACH,OAAO,EAAE,iBAAiB,EAAE,CAAA;IAC5B,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;OAIG;IACH,WAAW,CAAC,EAAE,4BAA4B,CAAA;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,aAAa,CAAA;CACzB;AAED,8CAA8C;AAC9C,MAAM,WAAW,WAAW;IAC1B,IAAI,IAAI,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1B,kCAAkC;IAClC,IAAI,IAAI,IAAI,CAAA;CACb;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,GAAE,MAAM,MAAyB,GAAG,WAAW,CAgBxG;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,IAAI,WAAW,CAKhD"}

package/dist/dashboard/quota.js

@@ -0,0 +1,42 @@
+import { QuotaPoller } from '../quota-poller.js';
+import { weekBoundary } from '../quota-boundary.js';
+import { ClaudeCodeDriver } from '@openagt/agent-driver-claude';
+/**
+ * A {@link QuotaSource} backed by a live poller.
+ *
+ * The boundary is measured per read rather than captured: it moves with the clock, so a cached
+ * one would be stale the moment the week's day rolls over. A read costs no reading of the
+ * account: the poller's last good windows are measured again.
+ */
+export function pollerQuotaSource(poller, now = () => Date.now()) {
+    return {
+        stop: () => poller.stop(),
+        read: async () => {
+            const envelope = poller.current();
+            const windows = envelope.lastGood?.windows ?? [];
+            const boundary = weekBoundary(windows, now());
+            const view = {
+                windows,
+                ...(boundary ? { boundary } : {}),
+                ...(envelope.lastGoodAt !== undefined ? { readAt: envelope.lastGoodAt } : {}),
+                ...(envelope.latest && !envelope.latest.available ? { unavailable: envelope.latest.reason } : {}),
+            };
+            return view;
+        },
+    };
+}
+/**
+ * The daemon's own quota source: it polls for the whole life of the dashboard,
+ * not just during an agent, because the panel has to show where the account stands
+ * even when nothing is running.
+ *
+ * Separate from the reading an agent takes for itself: that one dies with the agent, and
+ * nothing stops a running agent over quota anyway. This one exists to draw the bar.
+ */
+export function defaultQuotaSource() {
+    const driver = new ClaudeCodeDriver();
+    const poller = new QuotaPoller({ read: () => driver.readQuota() });
+    poller.start();
+    return pollerQuotaSource(poller);
+}
+//# sourceMappingURL=quota.js.map

package/dist/dashboard/quota.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota.js","sourceRoot":"","sources":["../../src/dashboard/quota.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,YAAY,EAAsB,MAAM,sBAAsB,CAAA;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAqC/D;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAmB,EAAE,GAAG,GAAiB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IACzF,OAAO;QACL,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;QACzB,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;YACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAA;YAChD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7C,MAAM,IAAI,GAAc;gBACtB,OAAO;gBACP,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClG,CAAA;YACD,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAA;IACrC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IAClE,MAAM,CAAC,KAAK,EAAE,CAAA;IACd,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAA;AAClC,CAAC"}

package/dist/dashboard/relay-endpoints.d.ts

@@ -0,0 +1,32 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { OpenAgentEvent } from '../events.js';
+import type { StartAgentOptions, StartAgentResult } from './types.js';
+/**
+ * The device-side of the remote-agent relay (#1067): the two endpoints a daemon exposes so another
+ * daemon (holding this device's token) can run a session here and watch it. They live under
+ * `/_relay`, behind the shared-token guard (#1051) in {@link startDashboard}. The guard admits a matching
+ * `oa_daemon` cookie without the browser-only `?token=` 302, so a daemon-to-daemon call passes with
+ * a cookie and a token-less caller is already 401'd before it reaches here.
+ *
+ * - `POST /_relay/start`  starts an ordinary local agent and returns its {@link StartAgentResult}. It
+ *   runs in this device's own home checkout (slice 1); which project it targets is a later slice.
+ * - `GET  /_relay/events?run=<id>` streams that agent's events as newline-delimited JSON until it
+ *   ends or the caller disconnects.
+ * - `GET  /_relay/ping` (#1072) a cookie-guarded reachability probe: 200 and an empty body, starts
+ *   nothing. The online/offline status the dashboard shows is the local daemon calling this on each
+ *   saved device with its token; a token-less caller is already 401'd by the shared-token guard (#1051) above.
+ * - `POST /_relay/rpc` (#1067 slice 2) runs one whitelisted run-scoped RPC (a read/diff/steer/handoff/
+ *   push/PR) against this device's own checkout for the daemon relaying an agent here, answering {result}.
+ */
+export declare const RELAY_PREFIX = "/_relay";
+/** What the daemon wires behind the relay endpoints: its own start closure and an events tail. */
+export interface RelayHandlers {
+    start: (prompt: string, options: StartAgentOptions, projectId?: string) => StartAgentResult | Promise<StartAgentResult>;
+    tailEvents: (agentId: string, onEvent: (event: OpenAgentEvent) => void) => () => void;
+    /** Run one whitelisted read/steer/handoff RPC against THIS device's own checkout, for the daemon
+     *  relaying an agent here (#1067 slice 2); the caller wraps the result as {result}. */
+    rpc?: (fn: string, args: unknown[]) => Promise<unknown>;
+}
+/** Route a `/_relay/*` request. A host that wired no relay handlers 404s every relay route. */
+export declare function handleRelayRequest(req: IncomingMessage, res: ServerResponse, pathname: string, handlers: RelayHandlers | undefined): Promise<void>;
+//# sourceMappingURL=relay-endpoints.d.ts.map

package/dist/dashboard/relay-endpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-endpoints.d.ts","sourceRoot":"","sources":["../../src/dashboard/relay-endpoints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAGrE;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,YAAY,YAAY,CAAA;AAErC,kGAAkG;AAClG,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,KAAK,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACvH,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,KAAK,MAAM,IAAI,CAAA;IACrF;2FACuF;IACvF,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CACxD;AAUD,+FAA+F;AAC/F,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,aAAa,GAAG,SAAS,GAClC,OAAO,CAAC,IAAI,CAAC,CASf"}

package/dist/dashboard/relay-endpoints.js

@@ -0,0 +1,115 @@
+import { end, readJsonBody, requireGet, sendJson } from './http.js';
+/**
+ * The device-side of the remote-agent relay (#1067): the two endpoints a daemon exposes so another
+ * daemon (holding this device's token) can run a session here and watch it. They live under
+ * `/_relay`, behind the shared-token guard (#1051) in {@link startDashboard}. The guard admits a matching
+ * `oa_daemon` cookie without the browser-only `?token=` 302, so a daemon-to-daemon call passes with
+ * a cookie and a token-less caller is already 401'd before it reaches here.
+ *
+ * - `POST /_relay/start`  starts an ordinary local agent and returns its {@link StartAgentResult}. It
+ *   runs in this device's own home checkout (slice 1); which project it targets is a later slice.
+ * - `GET  /_relay/events?run=<id>` streams that agent's events as newline-delimited JSON until it
+ *   ends or the caller disconnects.
+ * - `GET  /_relay/ping` (#1072) a cookie-guarded reachability probe: 200 and an empty body, starts
+ *   nothing. The online/offline status the dashboard shows is the local daemon calling this on each
+ *   saved device with its token; a token-less caller is already 401'd by the shared-token guard (#1051) above.
+ * - `POST /_relay/rpc` (#1067 slice 2) runs one whitelisted run-scoped RPC (a read/diff/steer/handoff/
+ *   push/PR) against this device's own checkout for the daemon relaying an agent here, answering {result}.
+ */
+export const RELAY_PREFIX = '/_relay';
+const MAX_START_BODY = 256 * 1024;
+/** Route a `/_relay/*` request. A host that wired no relay handlers 404s every relay route. */
+export async function handleRelayRequest(req, res, pathname, handlers) {
+    // Ping is a pure reachability + auth probe (#1072): it needs no wired handlers and starts nothing,
+    // so it answers even on a host that enabled no relay. Reaching here means the cookie already passed.
+    if (pathname === `${RELAY_PREFIX}/ping`)
+        return handlePing(req, res);
+    if (!handlers)
+        return end(res, 404, 'relay not enabled');
+    if (pathname === `${RELAY_PREFIX}/start`)
+        return handleStart(req, res, handlers);
+    if (pathname === `${RELAY_PREFIX}/events`)
+        return handleEvents(req, res, handlers);
+    if (pathname === `${RELAY_PREFIX}/rpc`)
+        return handleRpc(req, res, handlers);
+    end(res, 404, 'not found');
+}
+/** `GET /_relay/ping` (#1072): answer 200 with an empty body. Starts nothing; only proves this
+ * daemon is reachable and the caller's cookie is valid (the shared-token guard (#1051) already enforced that). */
+function handlePing(req, res) {
+    if (!requireGet(req, res))
+        return;
+    end(res, 200, '');
+}
+/** `POST /_relay/start`: read the agent request, start it locally, and answer with the result JSON. */
+async function handleStart(req, res, handlers) {
+    if (req.method !== 'POST')
+        return end(res, 405, 'method not allowed', { allow: 'POST' });
+    let body;
+    try {
+        body = (await readJsonBody(req, MAX_START_BODY));
+    }
+    catch {
+        return end(res, 400, 'invalid request body');
+    }
+    const prompt = typeof body.prompt === 'string' ? body.prompt : '';
+    const options = (body.options && typeof body.options === 'object' ? body.options : {});
+    // Never relay onward from a relayed agent: strip any nested target before starting it here.
+    // And a start relayed to a device never names a branch: the caller's branches are not this machine's.
+    const { remote: _drop, base: _callers, ...local } = options;
+    let result;
+    try {
+        result = await handlers.start(prompt, local, undefined);
+    }
+    catch (err) {
+        result = { ok: false, error: err instanceof Error ? err.message : String(err) };
+    }
+    sendJson(res, result);
+}
+/** `GET /_relay/events?run=<id>`: stream the agent's events as newline-delimited JSON. */
+function handleEvents(req, res, handlers) {
+    if (!requireGet(req, res))
+        return;
+    const agentId = new URL(req.url ?? '/', 'http://localhost').searchParams.get('run');
+    if (!agentId)
+        return end(res, 400, 'missing run id');
+    res.writeHead(200, { 'content-type': 'application/x-ndjson', 'cache-control': 'no-cache' });
+    const stop = handlers.tailEvents(agentId, event => {
+        // A dropped write (the caller went away mid-line) must not throw out of the tail callback.
+        try {
+            res.write(`${JSON.stringify(event)}\n`);
+        }
+        catch {
+            // the socket is gone; the close handler below tears the tail down
+        }
+    });
+    const close = () => stop();
+    res.on('close', close);
+    req.on('close', close);
+}
+const MAX_RPC_BODY = 256 * 1024;
+/** POST /_relay/rpc: run one whitelisted RPC on this device and answer {result}. */
+async function handleRpc(req, res, handlers) {
+    if (req.method !== 'POST')
+        return end(res, 405, 'method not allowed', { allow: 'POST' });
+    if (!handlers.rpc)
+        return end(res, 404, 'relay rpc not enabled');
+    let body;
+    try {
+        body = (await readJsonBody(req, MAX_RPC_BODY));
+    }
+    catch {
+        return end(res, 400, 'invalid request body');
+    }
+    const fn = typeof body.fn === 'string' ? body.fn : '';
+    const args = Array.isArray(body.args) ? body.args : [];
+    if (!fn)
+        return end(res, 400, 'missing rpc name');
+    try {
+        sendJson(res, { result: await handlers.rpc(fn, args) });
+    }
+    catch (err) {
+        end(res, 500, err instanceof Error ? err.message : 'rpc failed');
+    }
+}
+//# sourceMappingURL=relay-endpoints.js.map

package/dist/dashboard/relay-endpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-endpoints.js","sourceRoot":"","sources":["../../src/dashboard/relay-endpoints.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEnE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,SAAS,CAAA;AAiBrC,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAA;AAEjC,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAoB,EACpB,GAAmB,EACnB,QAAgB,EAChB,QAAmC;IAEnC,mGAAmG;IACnG,qGAAqG;IACrG,IAAI,QAAQ,KAAK,GAAG,YAAY,OAAO;QAAE,OAAO,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACpE,IAAI,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAA;IACxD,IAAI,QAAQ,KAAK,GAAG,YAAY,QAAQ;QAAE,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAA;IAChF,IAAI,QAAQ,KAAK,GAAG,YAAY,SAAS;QAAE,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAA;IAClF,IAAI,QAAQ,KAAK,GAAG,YAAY,MAAM;QAAE,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAA;IAC5E,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;AAC5B,CAAC;AAED;kHACkH;AAClH,SAAS,UAAU,CAAC,GAAoB,EAAE,GAAmB;IAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;QAAE,OAAM;IACjC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;AACnB,CAAC;AAED,uGAAuG;AACvG,KAAK,UAAU,WAAW,CAAC,GAAoB,EAAE,GAAmB,EAAE,QAAuB;IAC3F,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IACxF,IAAI,IAAoB,CAAA;IACxB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,cAAc,CAAC,CAAmB,CAAA;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAA;IAC9C,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IACjE,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAsB,CAAA;IAC3G,4FAA4F;IAC5F,sGAAsG;IACtG,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO,CAAA;IAC3D,IAAI,MAAwB,CAAA;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;IACjF,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AACvB,CAAC;AAED,0FAA0F;AAC1F,SAAS,YAAY,CAAC,GAAoB,EAAE,GAAmB,EAAE,QAAuB;IACtF,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;QAAE,OAAM;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACnF,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAA;IACpD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,sBAAsB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAA;IAC3F,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;QAChD,2FAA2F;QAC3F,IAAI,CAAC;YACH,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;IACH,CAAC,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,GAAS,EAAE,CAAC,IAAI,EAAE,CAAA;IAChC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACtB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,YAAY,GAAG,GAAG,GAAG,IAAI,CAAA;AAC/B,oFAAoF;AACpF,KAAK,UAAU,SAAS,CAAC,GAAoB,EAAE,GAAmB,EAAE,QAAuB;IACzF,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IACxF,IAAI,CAAC,QAAQ,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAA;IAChE,IAAI,IAAsC,CAAA;IAC1C,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,CAAqC,CAAA;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAA;IAC9C,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACrD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IACtD,IAAI,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAA;IACjD,IAAI,CAAC;QACH,QAAQ,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IAClE,CAAC;AACH,CAAC"}

package/dist/dashboard/remote-run.d.ts

@@ -0,0 +1,95 @@
+import { EventStream } from '../event-stream.js';
+import type { OpenAgentEvent } from '../events.js';
+import type { AgentMeta } from '../store/index.js';
+import type { StartAgentOptions, StartAgentResult } from './types.js';
+/**
+ * The server-side half of "run on a connected device" (#1067). The local daemon holds the saved
+ * device's token, so it - not the browser - drives the remote daemon: it POSTs the agent to the
+ * remote's `/_relay/start` and then fetch-streams the remote's `/_relay/events` back into a local
+ * {@link EventStream}, which the dashboard reads over its normal same-origin `onEvents` channel. So
+ * the browser never talks cross-origin and the token never leaves the two daemons (issue #1067 (b)).
+ *
+ * Authentication is the shared-token cookie (#1051), sent daemon-to-daemon: `Cookie: oa_daemon=<token>` with no
+ * `Origin` header. The remote's guard admits a matching cookie without the browser-only `?token=`
+ * 302, and its `/_rpc` CSRF check (absent Origin passes) is not even on these raw routes.
+ */
+/** Where a relayed agent executes: the remote daemon's origin and its #1051 token. Memory-only. */
+export interface RemoteTarget {
+    url: string;
+    token: string;
+}
+/** The body a relay start forwards to the remote's `/_relay/start`. */
+export interface RelayStartBody {
+    prompt: string;
+    options: StartAgentOptions;
+}
+/**
+ * Health-check a saved device (#1072): a cookie'd `GET /_relay/ping`, true on any 2xx, false on a
+ * non-2xx, an unreachable host, or the timeout. The token stays in memory for the check only, never
+ * persisted, same as {@link startRemoteAgent}. This is how the browser's status dots learn reachable
+ * from not: it has the tokens, the daemon does the cross-origin request.
+ */
+export declare function pingRemote(target: RemoteTarget): Promise<boolean>;
+/**
+ * Start an agent on the remote daemon and return its {@link StartAgentResult} (with the remote's own run
+ * id). A non-2xx or a transport failure surfaces as an `ok: false` result the dashboard shows, the
+ * same shape a local refusal has, so the caller does not special-case remote errors.
+ */
+export declare function startRemoteAgent(target: RemoteTarget, body: RelayStartBody): Promise<StartAgentResult>;
+/**
+ * Relay one run-scoped RPC to the device that owns a remote agent (#1067 slice 2). The local daemon
+ * holds the device token, so a read/diff/handoff/push/PR for a relayed agent runs ON the device: POST
+ * {fn, args} to the remote's /_relay/rpc over the shared-token cookie (#1051) (no Origin), returning the device's
+ * result. Throws on an unreachable device or a non-2xx so the caller falls back to its own empty/error
+ * shape, the same way a failed local read does.
+ */
+export declare function relayRpc(target: RemoteTarget, fn: string, args: unknown[]): Promise<unknown>;
+/**
+ * Fetch-stream a remote agent's newline-delimited events into `onEvent` until the remote closes the
+ * body, the agent ends, or `cancel()` is called. A 401 (the token was rotated) ends the stream
+ * cleanly rather than as an error, so the dashboard sees a normal `done`, not a lost connection.
+ * Returns a cancel function; calling it aborts the fetch and releases the reader.
+ */
+export declare function streamRemoteEvents(target: RemoteTarget, agentId: string, onEvent: (event: OpenAgentEvent) => void, onEnd?: () => void): () => void;
+/**
+ * The local daemon's live relayed runs (#1067), keyed by the remote agent id. Registering an agent opens
+ * an {@link EventStream} the dashboard reads through `onEvents`, fed by {@link streamRemoteEvents}
+ * from the remote. This map is where a saved device's token lives daemon-side: in memory, for the
+ * run's lifetime.
+ *
+ * The `targets` map outlives the event pump (#1067 slice 2): a finished remote agent's post-run reads,
+ * open-PR and merge still have to reach the device after its event stream has ended, so the device
+ * target is kept until {@link dispose} clears it, not dropped when the stream closes.
+ *
+ * The `metas` map (#1077) holds a local {@link AgentMeta} stub per relayed agent so `onAgents` can show a
+ * remote run in the session list and re-open it after a dashboard reload; {@link list} projects it
+ * per project. Same lifetime as `targets`: it outlives the event stream and is cleared on dispose.
+ */
+export declare class RelayedAgents {
+    private readonly agents;
+    private readonly targets;
+    private readonly metas;
+    /** Open a local stream for a remote agent and start pumping the remote's events into it. */
+    register(agentId: string, target: RemoteTarget, meta: AgentMeta, projectId: string): void;
+    /** The live event stream for a relayed agent, or undefined when this daemon is not relaying it. */
+    get(agentId: string | undefined): EventStream<OpenAgentEvent> | undefined;
+    /** The device a relayed agent runs on, kept past the event stream so post-run push/PR still reach it. */
+    target(agentId: string | undefined): RemoteTarget | undefined;
+    /** A project's relayed run stubs (#1077), newest-first, so `onAgents` can surface them in the list. */
+    list(projectId: string): AgentMeta[];
+    /** Fold each relayed event into the agent's list row via the store's own reducer (#1077), so the
+     *  local stub mirrors the device: the terminal status on `end`, the waiting flag while it is parked
+     *  (#785), the driver once its session starts. Events carry no write time, so this stamps its own. */
+    private apply;
+    /** Close a relayed agent's event stream (not its target). Idempotent. */
+    private endStream;
+    /** Stop every pump, close every stream, and forget every device target + list stub, on daemon shutdown. */
+    dispose(): void;
+}
+/**
+ * Fold one relayed event into the memory-only row of a run on a device: what the device's own
+ * card would say, kept here because that card is on the device. The events are the ones a run's
+ * diary yields: the agent's session id, its cost, its end.
+ */
+export declare function foldRelayedEvent(meta: AgentMeta, event: OpenAgentEvent, at: string): AgentMeta;
+//# sourceMappingURL=remote-run.d.ts.map

package/dist/dashboard/remote-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-run.d.ts","sourceRoot":"","sources":["../../src/dashboard/remote-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAGrE;;;;;;;;;;GAUG;AAEH,mGAAmG;AACnG,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;CACd;AAED,uEAAuE;AACvE,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,iBAAiB,CAAA;CAC3B;AAOD;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAUvE;AAOD;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAa5G;AAID;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAUlG;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,EACxC,KAAK,CAAC,EAAE,MAAM,IAAI,GACjB,MAAM,IAAI,CAwCZ;AAmBD;;;;;;;;;;;;;GAaG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAG1D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4D;IAElF,4FAA4F;IAC5F,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAUxF;IAED,mGAAmG;IACnG,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC,cAAc,CAAC,GAAG,SAAS,CAExE;IAED,yGAAyG;IACzG,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAE5D;IAED,uGAAuG;IACvG,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,CAKnC;IAED;;0GAEsG;IACtG,OAAO,CAAC,KAAK;IAMb,yEAAyE;IACzE,OAAO,CAAC,SAAS;IAUjB,2GAA2G;IAC3G,OAAO,IAAI,IAAI,CAQd;CACF;AAOD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,SAAS,CAS9F"}