@shield-agent/kya 0.1.39 → 0.1.41

package/dist/receipt/render-receipt.d.ts

@@ -1,4 +1,7 @@
 import { type TrailEvent } from "../trail.js";
+import type { KyaFileConfig } from "../config.js";
+import { type OrrCard, type SandboxCard, type WiredHostRow } from "./enrich.js";
+import { type ShowbackReport } from "../showback/cost-per-task.js";
 export interface ReceiptModel {
     readonly title: string;
     readonly rangeLabel: string;
@@ -14,7 +17,51 @@ export interface ReceiptModel {
     }[];
     /** When true, page connects to /events SSE for live refresh. */
     readonly live?: boolean;
+    /** Local identity from .kya/config.json (inert text; never a link). */
+    readonly identity?: KyaFileConfig;
+    /** Sandbox state + configured KYA_SANDBOX backend. */
+    readonly sandboxes?: SandboxCard;
+    /** Per-host wiring status across the connect registry. */
+    readonly wiredHosts?: readonly WiredHostRow[];
+    /** Slim ORR card from orr-report/report.json. */
+    readonly orr?: OrrCard;
+    /** Observe-only showback from .kya/usage.json. */
+    readonly showback?: ShowbackReport;
 }
+export type WorstVerdict = "never" | "deny" | "hold" | "allow";
+export interface SessionAggregate {
+    readonly sessionId: string;
+    readonly events: number;
+    readonly deny: number;
+    readonly hold: number;
+    readonly never: number;
+    readonly lastTs: string;
+    /** never > deny > hold > allow. */
+    readonly worst: WorstVerdict;
+}
+export interface CountRow {
+    readonly label: string;
+    readonly count: number;
+}
+export interface EventAggregates {
+    readonly modes: {
+        readonly observe: number;
+        readonly hold: number;
+        readonly offline: number;
+    };
+    readonly planes: {
+        readonly ide: number;
+        readonly runtime: number;
+    };
+    /** Top 8 sessions by recency. */
+    readonly sessions: readonly SessionAggregate[];
+    /** Top 8 reason codes by count. */
+    readonly reasons: readonly CountRow[];
+    /** Counts by productLabel, sorted desc. */
+    readonly products: readonly CountRow[];
+}
+/** Pure rollup of trail events for the report's stat chips and sections. */
+export declare function aggregateEvents(events: readonly TrailEvent[]): EventAggregates;
 export declare function buildReceiptModel(sessionId: string, events: readonly TrailEvent[], extras?: Partial<Omit<ReceiptModel, "title" | "events" | "generatedAt" | "rangeLabel">>): ReceiptModel;
 export declare function buildWindowReceiptModel(events: readonly TrailEvent[], days: number, extras?: Partial<Omit<ReceiptModel, "title" | "events" | "generatedAt" | "rangeLabel">>): ReceiptModel;
 /** Shared loader for static artifacts and the live loopback server. */

package/dist/receipt/render-receipt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render-receipt.d.ts","sourceRoot":"","sources":["../../src/receipt/render-receipt.ts"],"names":[],"mappings":"AAKA,OAAO,EAA2C,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAEvF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACpF,gEAAgE;IAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAyED,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,SAAS,UAAU,EAAE,EAC7B,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,GAAG,QAAQ,GAAG,aAAa,GAAG,YAAY,CAAC,CAAC,GACtF,YAAY,CAWd;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,SAAS,UAAU,EAAE,EAC7B,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,GAAG,QAAQ,GAAG,aAAa,GAAG,YAAY,CAAC,CAAC,GACtF,YAAY,CAWd;AAED,uEAAuE;AACvE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB,GAAG,YAAY,CAOf;AAiDD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CA2S7D;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAsBjE"}
+{"version":3,"file":"render-receipt.d.ts","sourceRoot":"","sources":["../../src/receipt/render-receipt.ts"],"names":[],"mappings":"AAKA,OAAO,EAA2C,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAML,KAAK,OAAO,EACZ,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACpF,gEAAgE;IAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,sDAAsD;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC;IACjC,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC9C,iDAAiD;IACjD,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IACvB,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;CACpC;AAyED,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE/D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mCAAmC;IACnC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;CAC9B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9F,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE,iCAAiC;IACjC,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC/C,mCAAmC;IACnC,QAAQ,CAAC,OAAO,EAAE,SAAS,QAAQ,EAAE,CAAC;IACtC,2CAA2C;IAC3C,QAAQ,CAAC,QAAQ,EAAE,SAAS,QAAQ,EAAE,CAAC;CACxC;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,eAAe,CA2D9E;AAED,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,SAAS,UAAU,EAAE,EAC7B,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,GAAG,QAAQ,GAAG,aAAa,GAAG,YAAY,CAAC,CAAC,GACtF,YAAY,CAgBd;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,SAAS,UAAU,EAAE,EAC7B,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,GAAG,QAAQ,GAAG,aAAa,GAAG,YAAY,CAAC,CAAC,GACtF,YAAY,CAgBd;AAED,uEAAuE;AACvE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB,GAAG,YAAY,CAsBf;AAsOD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAgY7D;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CA8IjE"}

package/dist/receipt/render-receipt.js

@@ -4,6 +4,8 @@
 import { assertNoSecrets, clip } from "../dash/render.js";
 import { clipMultiline, DIFF_MAX_TOTAL_CHARS } from "../diff-preview.js";
 import { productLabel, readTrail, readTrailSince } from "../trail.js";
+import { loadIdentity, loadOrrCard, loadSandboxes, loadShowbackCard, loadWiredHosts, } from "./enrich.js";
+import { SHOWBACK_DISCLAIMER, } from "../showback/cost-per-task.js";
 function esc(s) {
     return s
         .replace(/&/g, "&")
@@ -84,6 +86,67 @@ function verdictWord(verdict) {
         return "HOLD";
     return v;
 }
+/** Pure rollup of trail events for the report's stat chips and sections. */
+export function aggregateEvents(events) {
+    const modes = { observe: 0, hold: 0, offline: 0 };
+    const planes = { ide: 0, runtime: 0 };
+    const reasonCounts = new Map();
+    const productCounts = new Map();
+    const bySession = new Map();
+    for (const e of events) {
+        if (e.mode === "observe")
+            modes.observe++;
+        else if (e.mode === "hold")
+            modes.hold++;
+        else if (e.mode === "offline")
+            modes.offline++;
+        if (e.host === "ide")
+            planes.ide++;
+        else if (e.host === "runtime")
+            planes.runtime++;
+        reasonCounts.set(e.reasonCode, (reasonCounts.get(e.reasonCode) ?? 0) + 1);
+        const pl = productLabel(e.product);
+        productCounts.set(pl, (productCounts.get(pl) ?? 0) + 1);
+        const sid = e.sessionId || "unknown";
+        let s = bySession.get(sid);
+        if (!s) {
+            s = { events: 0, deny: 0, hold: 0, never: 0, lastTs: e.ts };
+            bySession.set(sid, s);
+        }
+        s.events++;
+        if (e.neverEvent || e.reasonCode === "NEVER_EVENT")
+            s.never++;
+        const v = e.verdict.toUpperCase();
+        if (v === "DENY")
+            s.deny++;
+        else if (v === "REQUIRE_APPROVE")
+            s.hold++;
+        if (e.ts > s.lastTs)
+            s.lastTs = e.ts;
+    }
+    const sessions = [...bySession.entries()]
+        .map(([sessionId, s]) => ({
+        sessionId,
+        ...s,
+        worst: (s.never > 0
+            ? "never"
+            : s.deny > 0
+                ? "deny"
+                : s.hold > 0
+                    ? "hold"
+                    : "allow"),
+    }))
+        .sort((a, b) => b.lastTs.localeCompare(a.lastTs))
+        .slice(0, 8);
+    const reasons = [...reasonCounts.entries()]
+        .map(([label, count]) => ({ label, count }))
+        .sort((a, b) => b.count - a.count || a.label.localeCompare(b.label))
+        .slice(0, 8);
+    const products = [...productCounts.entries()]
+        .map(([label, count]) => ({ label, count }))
+        .sort((a, b) => b.count - a.count || a.label.localeCompare(b.label));
+    return { modes, planes, sessions, reasons, products };
+}
 export function buildReceiptModel(sessionId, events, extras) {
     const filtered = events.filter((e) => e.sessionId === sessionId);
     return {
@@ -94,6 +157,11 @@ export function buildReceiptModel(sessionId, events, extras) {
         spend: extras?.spend,
         mcpSeen: extras?.mcpSeen,
         live: extras?.live,
+        identity: extras?.identity,
+        sandboxes: extras?.sandboxes,
+        wiredHosts: extras?.wiredHosts,
+        orr: extras?.orr,
+        showback: extras?.showback,
     };
 }
 export function buildWindowReceiptModel(events, days, extras) {
@@ -106,16 +174,42 @@ export function buildWindowReceiptModel(events, days, extras) {
         spend: extras?.spend,
         mcpSeen: extras?.mcpSeen,
         live: extras?.live,
+        identity: extras?.identity,
+        sandboxes: extras?.sandboxes,
+        wiredHosts: extras?.wiredHosts,
+        orr: extras?.orr,
+        showback: extras?.showback,
     };
 }
 /** Shared loader for static artifacts and the live loopback server. */
 export function loadReceiptModel(input) {
     const days = input.days > 0 ? Math.floor(input.days) : 3;
+    const showback = loadShowbackCard(input.cwd);
+    const extras = {
+        live: input.live,
+        identity: loadIdentity(input.cwd),
+        sandboxes: loadSandboxes(input.cwd),
+        wiredHosts: loadWiredHosts(input.cwd),
+        orr: loadOrrCard(input.cwd),
+        showback,
+        spend: showback
+            ? {
+                tokens: showback.totalTokensIn + showback.totalTokensOut,
+                usdEstimate: showback.estimatedUsd ?? undefined,
+            }
+            : undefined,
+    };
     if (input.sessionId) {
-        return buildReceiptModel(input.sessionId, readTrail(input.cwd), { live: input.live });
+        return buildReceiptModel(input.sessionId, readTrail(input.cwd), extras);
     }
     const since = new Date(Date.now() - days * 24 * 60 * 60 * 1000);
-    return buildWindowReceiptModel(readTrailSince(input.cwd, since), days, { live: input.live });
+    return buildWindowReceiptModel(readTrailSince(input.cwd, since), days, extras);
+}
+function modeBadge(mode) {
+    const letter = mode === "observe" ? "O" : mode === "hold" ? "H" : mode === "offline" ? "X" : "";
+    if (!letter)
+        return "";
+    return `<span class="modeb" title="${letter === "O" ? "observe" : letter === "H" ? "hold" : "offline"} mode">${letter}</span>`;
 }
 function renderFeed(events, nowMs, live) {
     if (events.length === 0) {
@@ -145,7 +239,7 @@ function renderFeed(events, nowMs, live) {
   <div class="rail" aria-hidden="true"><span class="tick"></span></div>
   <div class="main">
     <div class="top">
-      <span class="verdict">${esc(verdictWord(e.verdict))}</span>
+      <span class="verdict">${esc(verdictWord(e.verdict))}</span>${modeBadge(e.mode)}
       <code class="tool">${esc(e.toolId)}</code>
       <time class="when" datetime="${esc(e.ts)}" title="${esc(e.ts)}">${esc(clock(e.ts))} <span class="rel">${esc(relativeTime(e.ts, nowMs))}</span></time>
     </div>
@@ -161,6 +255,167 @@ function renderFeed(events, nowMs, live) {
     }
     return parts.join("\n");
 }
+function identityLine(identity) {
+    if (!identity)
+        return "";
+    const nameId = identity.agentName && identity.agentId
+        ? `${identity.agentName}/${identity.agentId}`
+        : (identity.agentName ?? identity.agentId);
+    const bits = [nameId, identity.host, identity.baseUrl].filter((b) => typeof b === "string" && b.trim().length > 0);
+    if (bits.length === 0)
+        return "";
+    // baseUrl is inert text here — never an anchor.
+    return `<div class="identity">${esc(clip(bits.join(" · "), 160))}</div>`;
+}
+function statChips(agg) {
+    const chip = (label, n, cls = "") => n > 0 ? `<span class="stat${cls ? ` ${cls}` : ""}">${label}<b>${n}</b></span>` : "";
+    return {
+        modes: chip("Mode: observe", agg.modes.observe) +
+            chip("Mode: hold", agg.modes.hold, "warn") +
+            chip("Mode: offline", agg.modes.offline),
+        planes: chip("IDE", agg.planes.ide) + chip("Runtime", agg.planes.runtime),
+        products: agg.products.length >= 2
+            ? `<div class="stats" aria-label="Products">${agg.products
+                .map((p) => `<span class="stat">${esc(clip(p.label, 40))}<b>${p.count}</b></span>`)
+                .join("")}</div>`
+            : "",
+    };
+}
+function sessionsPanel(agg, nowMs) {
+    if (agg.sessions.length === 0)
+        return "";
+    const rows = agg.sessions
+        .map((s) => `<li>
+      <span class="wdot ${s.worst}" title="worst verdict: ${s.worst}"></span>
+      <code class="sid" title="${esc(s.sessionId)}">${esc(clip(s.sessionId, 24))}</code>
+      <span class="cnt">${s.events} event${s.events === 1 ? "" : "s"}</span>
+      <span class="rel">${esc(relativeTime(s.lastTs, nowMs))}</span>
+    </li>`)
+        .join("\n");
+    return `<section class="panel" aria-label="Sessions">
+  <h2>Sessions</h2>
+  <ul class="rows">
+${rows}
+  </ul>
+</section>`;
+}
+function reasonsPanel(agg) {
+    if (agg.reasons.length === 0)
+        return "";
+    const chips = agg.reasons
+        .map((r) => `<span class="chip"><code>${esc(clip(r.label, 60))}</code> × ${r.count}</span>`)
+        .join("\n    ");
+    return `<section class="panel" aria-label="Reasons">
+  <h2>Reasons</h2>
+  <div class="chiprow">
+    ${chips}
+  </div>
+</section>`;
+}
+function wiredHostsPanel(hosts) {
+    if (!hosts || hosts.length === 0)
+        return "";
+    if (!hosts.some((h) => h.wired !== "none"))
+        return "";
+    const rank = (h) => h.wired !== "none" ? 0 : h.recipeOnly ? 1 : 2;
+    const rows = [...hosts]
+        .sort((a, b) => rank(a) - rank(b))
+        .map((h) => {
+        if (h.recipeOnly) {
+            return `<li class="mute">${esc(h.label)} — manual setup <span class="hint" title="${esc(h.recipeOnly)}">docs recipe</span></li>`;
+        }
+        if (h.wired === "none") {
+            return `<li class="mute">${esc(h.label)} — not wired</li>`;
+        }
+        const reload = h.reload ? ` · ${esc(h.reload.reload)}` : "";
+        const running = h.running ? "running" : "not running";
+        return `<li>${esc(h.label)} — wired (${h.wired})${reload} · ${running}</li>`;
+    })
+        .join("\n    ");
+    return `<section class="panel" aria-label="Wired hosts">
+  <h2>Wired hosts</h2>
+  <ul class="rows">
+    ${rows}
+  </ul>
+</section>`;
+}
+function sandboxesPanel(card, nowMs) {
+    if (!card)
+        return "";
+    if (card.sandboxes.length === 0 && !card.backend)
+        return "";
+    const backend = card.backend
+        ? `<p class="sub">Configured backend: <code>${esc(clip(card.backend, 40))}</code></p>`
+        : "";
+    const tbl = card.sandboxes.length === 0
+        ? ""
+        : `<table class="tbl">
+    <thead><tr><th>id</th><th>backend</th><th>status</th><th>created</th></tr></thead>
+    <tbody>
+${card.sandboxes
+            .map((s) => `      <tr>
+        <td><code title="${esc(s.sandboxId)}">${esc(clip(s.sandboxId, 20))}</code></td>
+        <td>${esc(s.backend)}</td>
+        <td><span class="pill ${s.status === "running" ? "ok" : "mute"}">${esc(s.status)}</span></td>
+        <td>${esc(relativeTime(s.createdAt, nowMs))}</td>
+      </tr>`)
+            .join("\n")}
+    </tbody>
+  </table>`;
+    return `<section class="panel" aria-label="Sandboxes">
+  <h2>Sandboxes</h2>
+  ${backend}
+  ${tbl}
+</section>`;
+}
+function orrPanel(orr, nowMs) {
+    if (!orr)
+        return "";
+    const target = orr.targetName
+        ? `<span class="mute">target ${esc(clip(orr.targetName, 60))}</span>`
+        : "";
+    const failure = orr.primaryFailureMode
+        ? `<p class="line">Primary failure mode: ${esc(clip(orr.primaryFailureMode, 200))}</p>`
+        : "";
+    const fix = orr.mostUrgentFix
+        ? `<p class="line">Most urgent fix: ${esc(clip(orr.mostUrgentFix, 200))}</p>`
+        : "";
+    const when = orr.generatedAt ? ` · ${esc(relativeTime(orr.generatedAt, nowMs))}` : "";
+    return `<section class="panel" aria-label="ORR">
+  <h2>Operational readiness</h2>
+  <div class="orrline">
+    <span class="pill orr-${esc(orr.overall)}">${esc(orr.overall)}</span>
+    <span class="disp">${esc(orr.disposition.replace(/_/g, " "))}</span>
+    ${target}
+  </div>
+  ${failure}
+  ${fix}
+  <p class="mute small">scorecards: ${orr.scorecards.pass} pass · ${orr.scorecards.fail} fail · ${orr.scorecards.partial} partial · ${orr.scorecards.notEvaluated} n/e${when}</p>
+</section>`;
+}
+function usdText(usd) {
+    return usd === null ? "USD n/a" : `~$${usd.toFixed(2)}`;
+}
+function showbackPanel(report) {
+    if (!report)
+        return "";
+    const topRuns = [...report.perRun]
+        .sort((a, b) => (b.estimatedUsd ?? -1) - (a.estimatedUsd ?? -1))
+        .slice(0, 5);
+    const runs = topRuns.length === 0
+        ? ""
+        : `<ul class="rows">
+${topRuns
+            .map((r) => `    <li><code title="${esc(r.runId)}">${esc(clip(r.runId, 32))}</code> — ${r.steps} step${r.steps === 1 ? "" : "s"} · ${esc(usdText(r.estimatedUsd))}</li>`)
+            .join("\n")}
+  </ul>`;
+    return `<section class="panel" aria-label="Showback">
+  <h2>Showback (observe only)</h2>
+  <p class="line">${report.totalTokensIn} tokens in · ${report.totalTokensOut} tokens out · ${esc(usdText(report.estimatedUsd))}</p>
+  ${runs}
+  <p class="mute small">${esc(SHOWBACK_DISCLAIMER)}</p>
+</section>`;
+}
 export function renderReceiptHtml(model) {
     const nowMs = Date.now();
     const events = [...model.events].map((e) => ({
@@ -172,6 +427,8 @@ export function renderReceiptHtml(model) {
         diffPreview: e.diffPreview ? clipMultiline(e.diffPreview, DIFF_MAX_TOTAL_CHARS) : undefined,
     }));
     const c = countVerdicts(events);
+    const agg = aggregateEvents(events);
+    const chips = statChips(agg);
     const blocked = events.filter((e) => e.neverEvent || e.reasonCode === "NEVER_EVENT");
     const tools = model.mcpSeen && model.mcpSeen.length > 0
         ? model.mcpSeen.map((m) => m.toolId)
@@ -296,6 +553,81 @@ export function renderReceiptHtml(model) {
   .stat.bad b { color: var(--bad); }
   .stat.warn b { color: var(--warn); }
   .stat.ok b { color: var(--ok); }
+  .identity {
+    margin-top: 0.45rem; color: var(--mute); font-size: 0.78rem;
+    word-break: break-word;
+  }
+  .modeb {
+    display: inline-block; font-size: 0.6rem; font-weight: 700;
+    color: var(--mute); border: 1px solid var(--line); border-radius: 4px;
+    padding: 0 0.28rem; line-height: 1.1rem; vertical-align: baseline;
+  }
+  .panel {
+    background: var(--card); border: 1px solid var(--line);
+    border-radius: 12px; padding: 0.7rem 0.9rem 0.8rem; margin-bottom: 1rem;
+  }
+  .panel h2 {
+    margin: 0 0 0.5rem; font-size: 0.72rem; font-weight: 700;
+    letter-spacing: 0.07em; text-transform: uppercase; color: var(--day);
+  }
+  .panel .sub { margin: 0 0 0.45rem; color: var(--mute); font-size: 0.8rem; }
+  .panel .line { margin: 0.25rem 0; font-size: 0.84rem; word-break: break-word; }
+  .panel .mute { color: var(--mute); }
+  .panel .small { font-size: 0.74rem; }
+  .rows {
+    list-style: none; margin: 0; padding: 0;
+    display: flex; flex-direction: column; gap: 0.3rem;
+    font-size: 0.82rem;
+  }
+  .rows li { display: flex; flex-wrap: wrap; align-items: baseline; gap: 0.45rem; min-width: 0; }
+  .rows li.mute { color: var(--mute); }
+  .rows .sid, .rows code {
+    font-family: "IBM Plex Mono", ui-monospace, SFMono-Regular, Menlo, monospace;
+    font-size: 0.78rem; word-break: break-all;
+  }
+  .rows .cnt { color: var(--mute); font-size: 0.76rem; }
+  .rows .rel { margin-left: auto; color: var(--mute); font-size: 0.74rem; white-space: nowrap; }
+  .rows .hint {
+    font-size: 0.72rem; border-bottom: 1px dotted var(--mute); cursor: help;
+  }
+  .wdot {
+    width: 0.5rem; height: 0.5rem; border-radius: 50%; flex: none;
+    align-self: center; background: var(--mute);
+  }
+  .wdot.allow { background: var(--ok); }
+  .wdot.hold { background: var(--warn); }
+  .wdot.deny, .wdot.never { background: var(--bad); }
+  .chiprow { display: flex; flex-wrap: wrap; gap: 0.35rem; }
+  .chip {
+    font-size: 0.76rem; color: var(--mute);
+    background: color-mix(in srgb, var(--bg) 55%, var(--card));
+    border: 1px solid var(--line); border-radius: 999px; padding: 0.15rem 0.55rem;
+  }
+  .chip code {
+    font-family: "IBM Plex Mono", ui-monospace, Menlo, monospace;
+    color: var(--fg); font-size: 0.74rem;
+  }
+  .tbl { width: 100%; border-collapse: collapse; font-size: 0.8rem; }
+  .tbl th {
+    text-align: left; font-size: 0.66rem; font-weight: 700; letter-spacing: 0.06em;
+    text-transform: uppercase; color: var(--mute); padding: 0.15rem 0.5rem 0.3rem 0;
+  }
+  .tbl td { padding: 0.2rem 0.5rem 0.2rem 0; border-top: 1px solid var(--line); }
+  .tbl code {
+    font-family: "IBM Plex Mono", ui-monospace, Menlo, monospace; font-size: 0.76rem;
+  }
+  .pill {
+    display: inline-block; font-size: 0.7rem; font-weight: 700;
+    letter-spacing: 0.04em; text-transform: uppercase;
+    border-radius: 999px; padding: 0.1rem 0.55rem;
+    border: 1px solid var(--line); color: var(--mute);
+  }
+  .pill.ok { color: var(--ok); border-color: color-mix(in srgb, var(--ok) 40%, transparent); }
+  .pill.orr-green { color: var(--ok); border-color: color-mix(in srgb, var(--ok) 40%, transparent); }
+  .pill.orr-amber { color: var(--warn); border-color: color-mix(in srgb, var(--warn) 40%, transparent); }
+  .pill.orr-red { color: var(--bad); border-color: color-mix(in srgb, var(--bad) 40%, transparent); }
+  .orrline { display: flex; flex-wrap: wrap; align-items: baseline; gap: 0.55rem; }
+  .orrline .disp { font-size: 0.84rem; font-weight: 600; }
   .alert {
     display: flex; flex-wrap: wrap; gap: 0.45rem 0.75rem; align-items: baseline;
     background: color-mix(in srgb, var(--bad) 12%, var(--card));
@@ -320,7 +652,6 @@ export function renderReceiptHtml(model) {
     text-transform: uppercase; color: var(--day);
     background: color-mix(in srgb, var(--bg) 55%, var(--card));
     border-bottom: 1px solid var(--line);
-    position: sticky; top: 4.2rem; z-index: 1;
   }
   .ev {
     display: grid; grid-template-columns: 1.1rem 1fr; gap: 0;
@@ -431,17 +762,26 @@ export function renderReceiptHtml(model) {
       <h1>${esc(model.title)}</h1>
       <div class="range">${esc(model.rangeLabel)}${livePill}</div>
     </div>
+    ${identityLine(model.identity)}
     <div class="stats" aria-label="Counts">
       <span class="stat ok">Allow<b>${c.allow}</b></span>
       <span class="stat bad">Deny<b>${c.deny}</b></span>
       <span class="stat warn">Hold<b>${c.require}</b></span>
       <span class="stat">Never<b>${c.never}</b></span>
+      ${chips.modes}${chips.planes}
     </div>
+    ${chips.products}
   </header>
   ${blockedBanner}
   <section class="feed" id="feed" aria-label="Activity feed">
 ${renderFeed(events, nowMs, model.live)}
   </section>
+  ${sessionsPanel(agg, nowMs)}
+  ${reasonsPanel(agg)}
+  ${wiredHostsPanel(model.wiredHosts)}
+  ${sandboxesPanel(model.sandboxes, nowMs)}
+  ${orrPanel(model.orr, nowMs)}
+  ${showbackPanel(model.showback)}
   ${toolsHtml}
 </main>
 ${liveScript}
@@ -453,6 +793,8 @@ ${liveScript}
 }
 export function renderReceiptMarkdown(model) {
     const c = countVerdicts(model.events);
+    const agg = aggregateEvents(model.events);
+    const nowMs = Date.now();
     const lines = [
         `# ${model.title}`,
         "",
@@ -460,17 +802,94 @@ export function renderReceiptMarkdown(model) {
         "",
         `Allow ${c.allow} | Deny ${c.deny} | Hold ${c.require} | Never ${c.never}`,
         "",
-        "## Feed",
-        ...[...model.events]
-            .sort((a, b) => b.ts.localeCompare(a.ts))
-            .flatMap((e) => {
-            const sum = e.summary?.trim() ? ` - ${e.summary.trim()}` : "";
-            const head = `- **${verdictWord(e.verdict)}** \`${e.toolId}\`${sum} - ${productLabel(e.product)} - ${e.reasonCode}`;
-            if (!e.diffPreview?.trim())
-                return [head];
-            return [head, "", "```", e.diffPreview.trim(), "```", ""];
-        }),
     ];
+    if (model.identity) {
+        const id = model.identity;
+        const nameId = id.agentName && id.agentId
+            ? `${id.agentName}/${id.agentId}`
+            : (id.agentName ?? id.agentId);
+        const bits = [nameId, id.host, id.baseUrl].filter((b) => typeof b === "string" && b.trim().length > 0);
+        if (bits.length > 0) {
+            lines.push(bits.join(" · "), "");
+        }
+    }
+    const modeBits = [
+        agg.modes.observe > 0 ? `observe ${agg.modes.observe}` : "",
+        agg.modes.hold > 0 ? `hold ${agg.modes.hold}` : "",
+        agg.modes.offline > 0 ? `offline ${agg.modes.offline}` : "",
+    ].filter(Boolean);
+    const planeBits = [
+        agg.planes.ide > 0 ? `IDE ${agg.planes.ide}` : "",
+        agg.planes.runtime > 0 ? `Runtime ${agg.planes.runtime}` : "",
+    ].filter(Boolean);
+    if (modeBits.length > 0 || planeBits.length > 0) {
+        lines.push(`Modes: ${modeBits.join(" | ") || "-"} · Planes: ${planeBits.join(" | ") || "-"}`, "");
+    }
+    if (agg.products.length >= 2) {
+        lines.push("## Products", ...agg.products.map((p) => `- ${p.label} × ${p.count}`), "");
+    }
+    lines.push("## Feed", ...[...model.events]
+        .sort((a, b) => b.ts.localeCompare(a.ts))
+        .flatMap((e) => {
+        const sum = e.summary?.trim() ? ` - ${e.summary.trim()}` : "";
+        const head = `- **${verdictWord(e.verdict)}** \`${e.toolId}\`${sum} - ${productLabel(e.product)} - ${e.reasonCode}`;
+        if (!e.diffPreview?.trim())
+            return [head];
+        return [head, "", "```", e.diffPreview.trim(), "```", ""];
+    }), "");
+    if (agg.sessions.length > 0) {
+        lines.push("## Sessions", ...agg.sessions.map((s) => `- \`${s.sessionId}\` — ${s.events} event${s.events === 1 ? "" : "s"}, worst: ${s.worst}, last ${relativeTime(s.lastTs, nowMs)}`), "");
+    }
+    if (agg.reasons.length > 0) {
+        lines.push("## Reasons", ...agg.reasons.map((r) => `- ${r.label} × ${r.count}`), "");
+    }
+    const hosts = model.wiredHosts ?? [];
+    if (hosts.some((h) => h.wired !== "none")) {
+        lines.push("## Wired hosts");
+        for (const h of hosts) {
+            if (h.recipeOnly) {
+                lines.push(`- ${h.label} — manual setup (docs recipe)`);
+            }
+            else if (h.wired === "none") {
+                lines.push(`- ${h.label} — not wired`);
+            }
+            else {
+                const reload = h.reload ? ` · ${h.reload.reload}` : "";
+                lines.push(`- ${h.label} — wired (${h.wired})${reload} · ${h.running ? "running" : "not running"}`);
+            }
+        }
+        lines.push("");
+    }
+    if (model.sandboxes && (model.sandboxes.sandboxes.length > 0 || model.sandboxes.backend)) {
+        const sb = model.sandboxes;
+        lines.push("## Sandboxes");
+        if (sb.backend)
+            lines.push(`Configured backend: ${sb.backend}`);
+        for (const s of sb.sandboxes) {
+            lines.push(`- \`${s.sandboxId}\` — ${s.backend} · ${s.status} · created ${relativeTime(s.createdAt, nowMs)}`);
+        }
+        lines.push("");
+    }
+    if (model.orr) {
+        const orr = model.orr;
+        lines.push("## Operational readiness", `overall: ${orr.overall} · disposition: ${orr.disposition.replace(/_/g, " ")}${orr.targetName ? ` · target ${orr.targetName}` : ""}`);
+        if (orr.primaryFailureMode)
+            lines.push(`Primary failure mode: ${orr.primaryFailureMode}`);
+        if (orr.mostUrgentFix)
+            lines.push(`Most urgent fix: ${orr.mostUrgentFix}`);
+        lines.push(`scorecards: ${orr.scorecards.pass} pass · ${orr.scorecards.fail} fail · ${orr.scorecards.partial} partial · ${orr.scorecards.notEvaluated} n/e${orr.generatedAt ? ` · ${relativeTime(orr.generatedAt, nowMs)}` : ""}`, "");
+    }
+    if (model.showback) {
+        const sb = model.showback;
+        lines.push("## Showback (observe only)", `${sb.totalTokensIn} tokens in · ${sb.totalTokensOut} tokens out · ${usdText(sb.estimatedUsd)}`);
+        const topRuns = [...sb.perRun]
+            .sort((a, b) => (b.estimatedUsd ?? -1) - (a.estimatedUsd ?? -1))
+            .slice(0, 5);
+        for (const r of topRuns) {
+            lines.push(`- \`${r.runId}\` — ${r.steps} step${r.steps === 1 ? "" : "s"} · ${usdText(r.estimatedUsd)}`);
+        }
+        lines.push(SHOWBACK_DISCLAIMER, "");
+    }
     const md = `${lines.join("\n")}\n`;
     assertNoSecrets(md);
     return md;