@thebackstoryis/engineering-with-ai 0.2.9 → 0.3.0

package/public/autonomy.js

@@ -0,0 +1,470 @@
+// Browser projections and controls for the server-owned autonomy contract.
+// No project root, provider command or credential is accepted from this module.
+const $ = id => document.getElementById(id);
+const view = { status: null, preview: null, draftPreview: null, draftIds: new Set(), poolSignature: '',
+  draftTouched: false, draftHydrated: false, loading: false, busy: false, dispatching: false,
+  resuming: new Set(), error: '', notice: '', requestRevision: 0, control: null, answer: null, runIntentId: '' };
+let host = null;
+
+function node(tag, content = '', className = '') {
+  const element = document.createElement(tag);
+  if (className) element.className = className;
+  element.textContent = String(content ?? '');
+  return element;
+}
+function set(id, content) { $(id).textContent = String(content ?? ''); }
+function replace(id, ...children) { $(id).replaceChildren(...children); }
+function replacePreservingFocus(id, ...children) {
+  const container = $(id), focused = container.contains(document.activeElement) ? document.activeElement.dataset.autonomyFocus : '';
+  container.replaceChildren(...children);
+  if (!focused) return;
+  const replacement = [...container.querySelectorAll('[data-autonomy-focus]')].find(element => element.dataset.autonomyFocus === focused && !element.disabled);
+  if (replacement) replacement.focus();
+  else (id === 'autonomyLiveRuns' ? $('autonomyLiveTitle') : $('autonomyCompanionStatus')).focus();
+}
+function staleDecision(code = 'autonomy-preview-stale') { return { status: 409, body: { code } }; }
+function itemFor(intentId) { return host.getItems().find(item => item.intentId === intentId); }
+function titleFor(intentId) { return itemFor(intentId)?.title || intentId; }
+function humanReason(code) {
+  return ({ 'grant-revoked': 'Grant revoked', 'outside-approved-pool': 'Outside your exact pool',
+    'autonomy-off': 'Autonomy off', 'build-approval-required': 'Build approval needed',
+    'prototype-selection-required': 'Prototype selection needed', 'manual-qa-required': 'Manual QA needed',
+    'repository-ownership-conflict': 'Repository is in use', 'afk-preflight-required': 'Build preflight needed',
+    'action-not-approved': 'Action is outside this grant', 'grant-policy-changed': 'Grant needs a fresh review',
+    'grant-expired': 'Grant expired', 'autonomy-provider-unavailable': 'Provider unavailable',
+    'autonomy-execution-unknown': 'Execution outcome unknown' })[code] || String(code ?? 'A prerequisite needs review').replaceAll('-', ' ');
+}
+function safeError(error) {
+  const code = error?.body?.code;
+  if (code === 'autonomy-preview-stale' || code === 'autonomy-run-stale' || code === 'autonomy-grant-stale'
+    || code === 'autonomy-policy-stale') return 'The evidence changed. Refresh and review the current state before trying again.';
+  if (code === 'autonomy-repository-dirty') return 'The repository has uncommitted work. Resolve it before dispatch.';
+  if (code === 'autonomy-canonical-decision-required') return 'A named human decision is required before this run can continue.';
+  return /^autonomy-[a-z0-9-]+$/.test(code ?? '') ? `EWAI stopped at ${humanReason(code)}. Refresh and inspect the recorded prerequisite.`
+    : 'Autonomy is unavailable. Refresh the dashboard and inspect the project checks.';
+}
+const mutation = (action, input) => host.api(`/api/autonomy/${action}`, { method: 'POST', body: JSON.stringify(input) });
+function badge() {
+  if (!view.status) return 'Autonomy unavailable';
+  if (view.status.status === 'revoked') return 'Grant revoked';
+  if (view.status.status === 'expired') return 'Grant expired';
+  return view.status.mode === 'delegated' ? 'Delegated within your grant' : 'Autonomy off';
+}
+
+function renderPool() {
+  const items = host.getItems().filter(item => item.intentId).sort((a, b) => a.intentId.localeCompare(b.intentId));
+  const signature = JSON.stringify(items.map(item => [item.intentId, item.title]));
+  if (signature === view.poolSignature) return;
+  view.poolSignature = signature;
+  const choices = items.map(item => {
+    const choice = node('button', '', 'autonomy-pool-choice');
+    choice.type = 'button'; choice.setAttribute('role', 'checkbox'); choice.setAttribute('aria-checked', String(view.draftIds.has(item.intentId)));
+    choice.value = item.intentId;
+    choice.addEventListener('click', () => {
+      const checked = choice.getAttribute('aria-checked') !== 'true';
+      choice.setAttribute('aria-checked', String(checked));
+      if (checked) view.draftIds.add(item.intentId); else view.draftIds.delete(item.intentId);
+      view.draftTouched = true;
+      view.draftPreview = null; renderAutonomyConfiguration();
+    });
+    const mark = node('span', '✓', 'autonomy-pool-mark'); mark.setAttribute('aria-hidden', 'true');
+    choice.append(mark, node('span', item.title || item.intentId), node('small', item.intentId));
+    return choice;
+  });
+  replace('autonomyPool', ...(choices.length ? choices : [node('p', 'No project intents are available for an exact pool.')]));
+}
+function selectedProposal() {
+  const intents = [...view.draftIds].sort();
+  const actions = [...document.querySelectorAll('[name="autonomyAction"][aria-checked="true"]')].map(input => input.value);
+  const provider = $('autonomyProvider').value;
+  const hours = Number($('autonomyExpiryHours').value), runtimeMinutes = Number($('autonomyRuntimeMinutes').value);
+  const operationSeconds = Number($('autonomyOperationSeconds').value), attempts = Number($('autonomyAttempts').value);
+  if (!intents.length || !actions.length || !Number.isSafeInteger(hours) || hours < 1 || hours > 24
+    || !Number.isSafeInteger(runtimeMinutes) || runtimeMinutes < 1 || runtimeMinutes > 1440
+    || !Number.isSafeInteger(operationSeconds) || operationSeconds < 1 || operationSeconds > 3600
+    || operationSeconds > runtimeMinutes * 60 || !Number.isSafeInteger(attempts) || attempts < 1 || attempts > 100) {
+    throw new Error('Choose at least one exact intent and action, then enter valid expiry and limits.');
+  }
+  return { intentIds: intents, actions, providers: [provider], expiresAt: new Date(Date.now() + hours * 3600000).toISOString(),
+    limits: { maxConcurrentIntents: 1, maxRuntimeMs: runtimeMinutes * 60000, maxOperationMs: operationSeconds * 1000, maxAttempts: attempts } };
+}
+function grantSummary(scope) {
+  if (!scope) return 'No approved grant. Select an exact pool to preview it.';
+  return `Exact pool: ${scope.intentIds.join(', ')}. Actions: ${scope.actions.join(', ')}. Provider: ${scope.providers.join(', ')}. One intent at a time; ${Math.round(scope.limits.maxRuntimeMs / 60000)} minute run, ${Math.round(scope.limits.maxOperationMs / 1000)} second operation, ${scope.limits.maxAttempts} attempts. Expires ${new Date(scope.expiresAt).toLocaleString()}.`;
+}
+function draftIsApprovable() {
+  const preview = view.draftPreview;
+  return Boolean(!view.error && preview?.proposal?.intentIds?.length);
+}
+
+export function renderAutonomyConfiguration() {
+  if (!host) return;
+  renderPool();
+  set('autonomyMode', badge());
+  $('autonomyMode').className = `autonomy-mode ${view.status?.status === 'current' ? 'delegated' : view.status?.status === 'revoked' ? 'revoked' : ''}`;
+  $('autonomyReviewButton').disabled = view.busy || !draftIsApprovable();
+  $('autonomyRevokeButton').disabled = view.busy || view.status?.status !== 'current';
+  $('autonomyPreviewButton').disabled = view.busy;
+  set('autonomyConfigurationStatus', view.error || view.notice || (view.loading ? 'Checking current authority and work…'
+    : view.status?.status === 'current' ? 'Grant active. Project evidence and all human checkpoints are rechecked before dispatch.'
+      : view.status?.status === 'revoked' ? 'Grant revoked. Pending work remains visible and no new action can start.'
+        : 'Autonomy is off until you approve a named grant.'));
+  const saved = view.status?.grant?.scope ? `Current approved grant: ${grantSummary(view.status.grant.scope)}` : '';
+  const summary = view.draftPreview
+    ? `${saved ? `${saved} ` : ''}New grant draft preview: ${grantSummary(view.draftPreview.proposal)} Preview only: ${view.draftPreview.executable.length} can progress; ${view.draftPreview.humanDecisions.length} need people; ${view.draftPreview.blocked.length} are blocked.`
+    : saved || grantSummary(null);
+  set('autonomyProposalSummary', summary);
+}
+
+function candidateCard(candidate, kind, allowRun = false) {
+  const card = node('article', '', `autonomy-candidate ${kind}`);
+  card.append(node('h5', titleFor(candidate.intentId)), node('small', candidate.intentId));
+  const action = candidate.action ? humanReason(candidate.action) : 'No executable action';
+  card.append(node('p', `Next: ${action}. Phase: ${candidate.phase || 'unrecorded'}.`));
+  if (candidate.reasons?.length) card.append(node('p', candidate.reasons.map(reason => humanReason(reason.code)).join(' · '), 'autonomy-reasons'));
+  const buttons = node('div', '', 'autonomy-card-actions');
+  if (kind === 'executable') {
+    const run = node('button', 'Run next action', 'primary-action'); run.type = 'button';
+    run.dataset.autonomyFocus = `dispatch:${candidate.intentId}`;
+    run.disabled = !allowRun; run.addEventListener('click', () => openDispatch(candidate.intentId, run)); buttons.append(run);
+    if (!allowRun && view.status?.status === 'current' && !view.busy && !view.dispatching) card.append(node('p', 'Ordered after an earlier eligible action.', 'autonomy-reasons'));
+  }
+  const inspect = node('button', 'Inspect intent', 'secondary-action'); inspect.type = 'button';
+  inspect.dataset.autonomyFocus = `inspect:${candidate.intentId}`;
+  inspect.addEventListener('click', () => { const item = itemFor(candidate.intentId); if (item) host.openIntent(item.id); });
+  buttons.append(inspect); card.append(buttons); return card;
+}
+function emptyCard(message, withDisabledRun = false) {
+  const card = node('div', '', 'autonomy-empty'); card.append(node('p', message));
+  if (withDisabledRun) { const button = node('button', 'Run next action', 'primary-action'); button.type = 'button'; button.disabled = true; card.append(button); }
+  return card;
+}
+export function renderAutonomyDecisions() {
+  if (!host) return;
+  const preview = view.draftPreview || view.preview;
+  if (!preview || view.error) {
+    set('autonomyCompanionStatus', view.error || 'Checking governed work…');
+    replacePreservingFocus('autonomyCanProgress', emptyCard('No trusted eligibility projection is available.', true));
+    replacePreservingFocus('autonomyNeedsHuman', emptyCard('Human checkpoints will appear here.'));
+    replacePreservingFocus('autonomyBlocked', emptyCard('Refresh to inspect exclusions.'));
+    return;
+  }
+  const granted = view.status?.status === 'current' && !view.draftPreview;
+  set('autonomyCompanionStatus', granted ? 'Bounded by the current named grant. Each action is rechecked before dispatch.'
+    : view.status?.status === 'revoked' ? 'Grant revoked. Pending work is retained below; dispatch is disabled.'
+      : 'Preview only. No provider or project action starts from this list.');
+  replacePreservingFocus('autonomyCanProgress', ...(preview.executable.length
+    ? preview.executable.map((candidate, index) => candidateCard(candidate, 'executable', granted && !view.busy && !view.dispatching && index === 0))
+    : [emptyCard('No work can progress under the current authority.', true)]));
+  replacePreservingFocus('autonomyNeedsHuman', ...(preview.humanDecisions.length
+    ? preview.humanDecisions.map(candidate => candidateCard(candidate, 'human'))
+    : [emptyCard('No human checkpoint is waiting in this pool.')]));
+  replacePreservingFocus('autonomyBlocked', ...(preview.blocked.length
+    ? preview.blocked.map(candidate => candidateCard(candidate, 'blocked'))
+    : [emptyCard('No additional exclusions in this projection.')]));
+}
+
+function runExplanation(run) {
+  if (run.status === 'cancel-requested' || run.cancellation?.status === 'requested') return 'Cancellation requested. Process termination is not yet confirmed; do not retry the action.';
+  if (run.status === 'cancelled' && run.cancellation?.status === 'confirmed') return 'Process stop confirmed. Captured work remains available for review.';
+  if (run.status === 'recovery-required' || run.cancellation?.status === 'unknown') return 'Outcome uncertain. Reconcile the run and canonical evidence before any retry.';
+  if (run.status === 'awaiting-human') return 'Stopped at a human checkpoint. A recorded answer does not approve the gate.';
+  if (run.status === 'paused') return 'Paused before another dispatch. Resume rechecks authority, evidence and limits.';
+  if (run.status === 'completed') return 'Bounded action completed. Human approvals remain separate.';
+  return 'The current action is bounded by the approved grant and recorded limits.';
+}
+function questionContext(question) {
+  return `${titleFor(question.intentId)} · ${question.phase} · owner ${question.owner} · ${question.codes.map(humanReason).join(' · ') || 'Named human decision'}`;
+}
+function renderAutonomyLive() {
+  if (!host) return;
+  set('autonomyLiveStatus', view.error || view.notice);
+  if (!view.status) return replacePreservingFocus('autonomyLiveRuns', emptyCard(view.error || 'Run status is unavailable.'));
+  const runs = view.status.runs || [];
+  if (!runs.length) return replacePreservingFocus('autonomyLiveRuns', emptyCard(view.error || (view.dispatching
+    ? 'Dispatch request pending. Run controls appear when the server records a run.' : 'No delegated run has started in this project.')));
+  const grantUsage = new Map();
+  for (const run of runs) {
+    const used = grantUsage.get(run.grantDigest) || { attempts: 0, elapsedMs: 0 };
+    used.attempts += run.counters.providerAttempts;
+    used.elapsedMs += run.counters.elapsedMs;
+    grantUsage.set(run.grantDigest, used);
+  }
+  const cards = runs.slice().reverse().map(run => {
+    const card = node('article', '', 'autonomy-run');
+    card.append(node('h4', `Run ${run.id.slice(0, 8)} · ${run.status}`), node('p', runExplanation(run)));
+    if (run.code) card.append(node('p', humanReason(run.code), 'autonomy-reasons'));
+    const limits = run.grantDigest === view.status.grant?.digest ? view.status.grant.scope.limits : null;
+    const used = grantUsage.get(run.grantDigest);
+    if (limits) card.append(node('small', `Attempts ${used.attempts}/${limits.maxAttempts}; runtime ${Math.max(0, Math.ceil((limits.maxRuntimeMs - used.elapsedMs) / 60000))} minutes remaining. Recorded grant-wide usage may be incomplete.`));
+    else card.append(node('small', 'Historical grant. Current limits do not describe this run.'));
+    card.append(node('small', ` Owner process ${run.lifetime?.ownerProcessAlive ? 'reported alive' : 'not alive or unconfirmed'}.`));
+    const actions = node('div', '', 'autonomy-card-actions');
+    for (const action of ['pause', 'resume', 'cancel', 'recover']) {
+      const available = action === 'pause' ? ['starting', 'running', 'awaiting-human'].includes(run.status)
+        : action === 'resume' ? run.status === 'paused' : action === 'cancel' ? !['completed', 'cancelled', 'cancel-requested', 'recovery-required', 'revoked', 'expired', 'blocked'].includes(run.status)
+          : run.status === 'recovery-required';
+      if (!available) continue;
+      const label = action === 'cancel' ? 'Request cancellation' : action === 'recover' ? 'Review recovery' : `${action[0].toUpperCase()}${action.slice(1)} run`;
+      const button = node('button', label, action === 'cancel' ? 'secondary-action danger' : 'secondary-action'); button.type = 'button';
+      button.disabled = action === 'resume' && view.resuming.has(run.id);
+      button.dataset.autonomyFocus = `control:${run.id}:${action}`;
+      button.addEventListener('click', () => openControl(run, action, button)); actions.append(button);
+    }
+    for (const question of run.questions || []) {
+      card.append(node('p', questionContext(question), 'autonomy-question-context'));
+      const button = node('button', `Record human answer for ${titleFor(question.intentId)}`, 'secondary-action'); button.type = 'button';
+      button.dataset.autonomyFocus = `answer:${run.id}:${question.id}`;
+      button.addEventListener('click', () => openAnswer(run, question, button)); actions.append(button);
+    }
+    card.append(actions); return card;
+  });
+  replacePreservingFocus('autonomyLiveRuns', ...(view.error ? [node('p', view.error, 'autonomy-reasons')] : []), ...cards);
+}
+
+export function renderAutonomyIntentDetail(item) {
+  if (!host || !item?.intentId) return;
+  const panel = node('section', '', 'autonomy-intent-detail');
+  panel.append(node('h3', 'Delegated delivery'));
+  const candidate = ['executable', 'humanDecisions', 'blocked'].flatMap(key => view.preview?.[key] || []).find(value => value.intentId === item.intentId);
+  const inPool = view.status?.grant?.scope?.intentIds.includes(item.intentId);
+  panel.append(node('p', view.error || (!view.status ? 'Authority status is unavailable.' : inPool ? 'This intent is in the exact recorded grant.' : 'This intent is outside the recorded grant.')));
+  if (candidate) panel.append(node('p', candidate.reasons?.length ? candidate.reasons.map(reason => humanReason(reason.code)).join(' · ') : `Next permitted action: ${humanReason(candidate.action)}.`));
+  $('drawerContent').append(panel);
+}
+
+function openDialog(id, opener, focusId) {
+  const dialog = $(id); dialog._autonomyOpener = opener;
+  dialog._autonomyOpenerId = opener?.id || '';
+  dialog._autonomyOpenerKey = opener?.dataset.autonomyFocus || '';
+  dialog.querySelector('[data-autonomy-error]').textContent = '';
+  dialog.showModal(); (focusId ? $(focusId) : dialog.querySelector('button[type="submit"]'))?.focus();
+}
+function openDispatch(intentId, opener) {
+  if (view.status?.status !== 'current' || view.preview?.executable[0]?.intentId !== intentId) return;
+  view.runIntentId = intentId;
+  view.dispatch = { intentId, grantDigest: view.status.grant.digest, provider: view.status.grant.scope.providers[0] };
+  set('autonomyDispatchSummary', `${titleFor(intentId)} is next by recorded priority. ${grantSummary(view.status.grant.scope)}`);
+  openDialog('autonomyDispatchDialog', opener, 'autonomyDispatchMode');
+}
+function openControl(run, action, opener) {
+  if (action === 'resume' && view.resuming.has(run.id)) return;
+  view.control = { runId: run.id, revision: run.revision, action };
+  set('autonomyControlTitle', `${action[0].toUpperCase()}${action.slice(1)} delegated run`);
+  set('autonomyControlSummary', `Run ${run.id.slice(0, 8)} at revision ${run.revision}.`);
+  set('autonomyControlBoundary', action === 'cancel' ? 'This requests a stop. The process may still be alive until termination is confirmed.'
+    : action === 'recover' ? 'Recovery checks what actually happened; it never retries an uncertain operation blindly.'
+      : 'EWAI checks current authority, ownership, evidence and limits before changing this run.');
+  set('autonomyControlConfirm', action === 'cancel' ? 'Request cancellation' : `Confirm ${action}`);
+  openDialog('autonomyControlDialog', opener);
+}
+function openAnswer(run, question, opener) {
+  view.answer = { runId: run.id, questionId: question.id, revision: run.revision };
+  set('autonomyAnswerSummary', questionContext(question));
+  openDialog('autonomyAnswerDialog', opener, 'autonomyAnswerName');
+}
+function busy(value) {
+  view.busy = value;
+  document.querySelectorAll('.autonomy-dialog button[type="submit"]').forEach(button => { button.disabled = value; });
+  renderAutonomyConfiguration();
+  if (!document.querySelector('.autonomy-dialog[open]')) renderAutonomyDecisions();
+}
+async function perform(operation) {
+  if (view.busy) return;
+  view.error = '';
+  busy(true);
+  try { await operation(); }
+  catch (error) {
+    view.notice = error?.message === 'Choose at least one exact intent and action, then enter valid expiry and limits.' ? error.message : safeError(error);
+    const dialog = document.querySelector('.autonomy-dialog[open]');
+    if (dialog) dialog.querySelector('[data-autonomy-error]').textContent = view.notice;
+    if (error?.status === 409) await loadAutonomyState();
+  }
+  finally { busy(false); renderAutonomyConfiguration(); renderAutonomyDecisions(); renderAutonomyLive(); }
+}
+
+export async function submitAutonomyControl(action, revision, runId) {
+  const result = await mutation('control', { action, runId, expectedRevision: revision, confirmed: true });
+  view.notice = result.cancellation?.status === 'unknown' || result.cancellation?.status === 'requested'
+    ? 'Cancellation requested; process termination is not yet confirmed.'
+    : result.cancellation?.status === 'confirmed' ? 'Process stop confirmed. Captured work is preserved.'
+      : `Run ${result.status}. Current evidence has been refreshed.`;
+  await loadAutonomyState();
+  return result;
+}
+export async function loadAutonomyState() {
+  if (!host) return;
+  const revision = ++view.requestRevision;
+  view.loading = true; renderAutonomyConfiguration();
+  try {
+    const status = await host.api('/api/autonomy');
+    if (revision !== view.requestRevision) return;
+    view.status = status;
+    if (!view.draftHydrated && !view.draftTouched && status.grant?.scope?.intentIds) {
+      const scope = status.grant.scope;
+      view.draftIds = new Set(scope.intentIds);
+      view.poolSignature = '';
+      for (const button of document.querySelectorAll('[name="autonomyAction"]')) {
+        button.setAttribute('aria-checked', String(scope.actions.includes(button.value)));
+      }
+      if ([...$('autonomyProvider').options].some(option => option.value === scope.providers[0])) {
+        $('autonomyProvider').value = scope.providers[0];
+      }
+      $('autonomyRuntimeMinutes').value = String(Math.round(scope.limits.maxRuntimeMs / 60000));
+      $('autonomyOperationSeconds').value = String(Math.round(scope.limits.maxOperationMs / 1000));
+      $('autonomyAttempts').value = String(scope.limits.maxAttempts);
+      const hours = Math.ceil((Date.parse(scope.expiresAt) - Date.now()) / 3600000);
+      $('autonomyExpiryHours').value = String(Math.max(1, Math.min(24, hours)));
+    }
+    view.draftHydrated = true;
+    try {
+      const preview = await mutation('preview', {});
+      if (revision !== view.requestRevision) return;
+      view.preview = preview; view.error = '';
+    } catch (error) {
+      if (revision !== view.requestRevision) return;
+      view.preview = null; view.error = `Eligibility preview unavailable. ${safeError(error)}`;
+    }
+  } catch (error) {
+    if (revision !== view.requestRevision) return;
+    view.status = null; view.preview = null; view.error = safeError(error);
+  } finally {
+    if (revision === view.requestRevision) {
+      view.loading = false; renderAutonomyConfiguration();
+      if (!document.querySelector('.autonomy-dialog[open]')) { renderAutonomyDecisions(); renderAutonomyLive(); }
+    }
+  }
+}
+
+export function configureAutonomyDashboard(options) {
+  host = options;
+  $('autonomyPreviewButton').addEventListener('click', () => perform(async () => {
+    const proposal = selectedProposal();
+    view.draftPreview = await mutation('preview', { proposal, record: false, confirmed: false });
+    view.notice = 'Preview only. No grant or provider has started.';
+    renderAutonomyConfiguration(); renderAutonomyDecisions();
+  }));
+  for (const input of document.querySelectorAll('.autonomy-configuration input, .autonomy-configuration select')) {
+    input.addEventListener('change', () => { view.draftTouched = true; view.draftPreview = null; renderAutonomyConfiguration(); renderAutonomyDecisions(); });
+  }
+  for (const button of document.querySelectorAll('[name="autonomyAction"]')) button.addEventListener('click', () => {
+    button.setAttribute('aria-checked', String(button.getAttribute('aria-checked') !== 'true'));
+    view.draftTouched = true; view.draftPreview = null; renderAutonomyConfiguration(); renderAutonomyDecisions();
+  });
+  $('autonomyReviewButton').addEventListener('click', event => {
+    if (!draftIsApprovable()) return;
+    set('autonomyApprovalSummary', grantSummary(view.draftPreview.proposal));
+    $('autonomyApprovalDialog')._reviewedPreview = view.draftPreview;
+    openDialog('autonomyApprovalDialog', event.currentTarget, 'autonomyApproverName');
+  });
+  $('autonomyApprovalForm').addEventListener('submit', event => {
+    event.preventDefault(); const name = $('autonomyApproverName').value.trim();
+    if (!name || !draftIsApprovable()) return;
+    perform(async () => {
+      const reviewed = $('autonomyApprovalDialog')._reviewedPreview;
+      const recorded = await mutation('preview', { proposal: reviewed.proposal, record: true, confirmed: true });
+      if (recorded.digest !== reviewed.digest) { view.draftPreview = null; throw staleDecision(); }
+      await mutation('approve', { expectedDigest: recorded.digest, approvedBy: name, confirmed: true });
+      $('autonomyApprovalDialog').close(); view.draftPreview = null;
+      view.notice = 'Grant approved. Current project evidence and gates are checked before work starts.';
+      await loadAutonomyState();
+    });
+  });
+  $('autonomyRevokeButton').addEventListener('click', event => {
+    $('autonomyRevocationDialog')._expectedDigest = view.status?.grant?.digest;
+    openDialog('autonomyRevocationDialog', event.currentTarget, 'autonomyRevokerName');
+  });
+  $('autonomyRevocationForm').addEventListener('submit', event => {
+    event.preventDefault(); const name = $('autonomyRevokerName').value.trim();
+    if (!name) return;
+    perform(async () => {
+      await mutation('revoke', { expectedDigest: $('autonomyRevocationDialog')._expectedDigest, revokedBy: name, confirmed: true });
+      $('autonomyRevocationDialog').close(); view.draftPreview = null;
+      view.notice = 'Grant revoked. Pending work is preserved; no further dispatch under this grant.';
+      await loadAutonomyState();
+    });
+  });
+  $('autonomyDispatchForm').addEventListener('submit', event => {
+    event.preventDefault();
+    if (view.dispatching || view.busy) return;
+    const reviewed = view.dispatch;
+    if (!reviewed || view.status?.status !== 'current' || view.status.grant?.digest !== reviewed.grantDigest
+      || view.preview?.executable[0]?.intentId !== reviewed.intentId) {
+      const message = safeError(staleDecision('autonomy-grant-stale'));
+      $('autonomyDispatchDialog').querySelector('[data-autonomy-error]').textContent = message;
+      view.notice = message;
+      return;
+    }
+    const mode = $('autonomyDispatchMode').value;
+    view.dispatching = true;
+    view.notice = 'Dispatch request pending. Live work shows the recorded run as soon as it is available.';
+    $('autonomyDispatchDialog').close();
+    host.showView('live');
+    renderAutonomyDecisions(); renderAutonomyLive();
+    (async () => {
+      try {
+        const result = await mutation(mode, { expectedDigest: reviewed.grantDigest,
+          provider: reviewed.provider, confirmed: true });
+        view.notice = `Run ${result.status}. Inspect Live work for the actual outcome.`;
+        await loadAutonomyState();
+      } catch (error) {
+        view.notice = safeError(error);
+        if (error?.status === 409) await loadAutonomyState();
+      } finally {
+        view.dispatching = false;
+        renderAutonomyConfiguration(); renderAutonomyDecisions(); renderAutonomyLive();
+      }
+    })();
+  });
+  $('autonomyControlForm').addEventListener('submit', event => {
+    event.preventDefault(); if (!view.control) return;
+    if (view.control.action === 'resume') {
+      const control = view.control;
+      if (view.resuming.has(control.runId) || view.busy) return;
+      view.resuming.add(control.runId);
+      $('autonomyControlDialog').close();
+      view.notice = 'Resume request pending. Live work shows the recorded outcome; cancellation remains available.';
+      renderAutonomyLive();
+      (async () => {
+        try { await submitAutonomyControl(control.action, control.revision, control.runId); }
+        catch (error) {
+          view.notice = safeError(error);
+          if (error?.status === 409) await loadAutonomyState();
+        } finally {
+          view.resuming.delete(control.runId);
+          renderAutonomyConfiguration(); renderAutonomyDecisions(); renderAutonomyLive();
+        }
+      })();
+      return;
+    }
+    perform(async () => { const control = view.control; await submitAutonomyControl(control.action, control.revision, control.runId); $('autonomyControlDialog').close(); });
+  });
+  $('autonomyAnswerForm').addEventListener('submit', event => {
+    event.preventDefault(); if (!view.answer) return;
+    const answeredBy = $('autonomyAnswerName').value.trim(), answer = $('autonomyAnswerText').value;
+    if (!answeredBy || !answer.trim()) return;
+    perform(async () => {
+      await mutation('answer', { runId: view.answer.runId, questionId: view.answer.questionId,
+        expectedRevision: view.answer.revision, answeredBy, answer, confirmed: true });
+      $('autonomyAnswerText').value = ''; $('autonomyAnswerDialog').close();
+      view.notice = 'Answer recorded privately. Human approval remains separate.';
+      await loadAutonomyState();
+    });
+  });
+  document.querySelectorAll('[data-autonomy-close]').forEach(button => button.addEventListener('click', () => button.closest('dialog').close()));
+  document.querySelectorAll('.autonomy-dialog').forEach(dialog => {
+    const error = node('p', '', 'autonomy-dialog-error'); error.dataset.autonomyError = '';
+    error.setAttribute('role', 'alert'); dialog.querySelector('.action-body').append(error);
+    dialog.addEventListener('close', () => {
+      renderAutonomyDecisions(); renderAutonomyLive();
+      const opener = dialog._autonomyOpener;
+      const replacement = dialog._autonomyOpenerId ? $(dialog._autonomyOpenerId)
+        : [...document.querySelectorAll('[data-autonomy-focus]')]
+          .find(button => button.dataset.autonomyFocus === dialog._autonomyOpenerKey);
+      if (opener?.isConnected && opener.getClientRects().length && !opener.disabled) opener.focus();
+      else if (replacement?.getClientRects().length && !replacement.disabled) replacement.focus();
+      else ($('liveView').hidden ? $('configurationNav') : $('autonomyLiveTitle')).focus();
+    });
+  });
+  renderAutonomyConfiguration(); renderAutonomyDecisions(); renderAutonomyLive();
+}

package/public/index.html

@@ -53,6 +53,24 @@
         <header class="configuration-heading"><h2>Make this dashboard work for you.</h2><p>Keep the everyday tools. Add the extra views when your project needs them.</p></header>
         <form id="dashboardPreferencesForm"><div id="dashboardPreferenceGroups"></div><div class="configuration-save"><button id="saveDashboardPreferences" type="submit" class="primary-action" disabled>Save changes</button><button id="cancelDashboardPreferences" type="button" class="quiet-button">Cancel</button><output id="dashboardPreferenceStatus" aria-live="polite"></output></div></form>
         <p class="configuration-assurance">These settings only change what’s shown. Your standards, required checks and approvals still apply. Turning on a view won’t run a scan, connect a team service or install anything.</p>
+        <section class="configuration-group autonomy-configuration" aria-labelledby="autonomyConfigurationTitle">
+          <header><div><h3 id="autonomyConfigurationTitle">Delegated delivery</h3><p>Choose an exact pool and limits. EWAI can progress only permitted work between your decisions.</p></div><strong id="autonomyMode" class="autonomy-mode">Checking…</strong></header>
+          <div class="autonomy-configuration-body">
+            <fieldset class="autonomy-pool-field"><legend>Exact intent pool</legend><p>Only the intents you select can enter this grant.</p><div id="autonomyPool" class="autonomy-pool" aria-live="polite">Loading project intents…</div></fieldset>
+            <fieldset class="autonomy-actions-field"><legend>Permitted progress</legend><button type="button" role="checkbox" aria-checked="true" name="autonomyAction" value="begin-harness">Begin a ready intent</button><button type="button" role="checkbox" aria-checked="false" name="autonomyAction" value="prepare-phase">Prepare a governed phase</button><button type="button" role="checkbox" aria-checked="false" name="autonomyAction" value="afk-build">Continue approved Build work</button></fieldset>
+            <div class="autonomy-limits">
+              <label>Provider<select id="autonomyProvider"><option value="codex">Codex</option><option value="claude">Claude</option><option value="antigravity">Antigravity</option></select></label>
+              <label>New grant expires after, hours<input id="autonomyExpiryHours" type="number" min="1" max="24" value="2" inputmode="numeric"></label>
+              <label>Run limit, minutes<input id="autonomyRuntimeMinutes" type="number" min="1" max="1440" value="30" inputmode="numeric"></label>
+              <label>Operation limit, seconds<input id="autonomyOperationSeconds" type="number" min="1" max="3600" value="900" inputmode="numeric"></label>
+              <label>Maximum attempts<input id="autonomyAttempts" type="number" min="1" max="100" value="2" inputmode="numeric"></label>
+            </div>
+            <p class="autonomy-boundary"><strong>Always yours:</strong> prototype selection, Build approval, Manual QA, risk acceptance, destructive actions, deployment and release. Limits bound runtime and attempts; reported spend is not a guaranteed money cap.</p>
+            <div class="autonomy-button-row"><button id="autonomyPreviewButton" type="button" class="secondary-action">Preview selected work</button><button id="autonomyReviewButton" type="button" class="primary-action" disabled>Review and approve grant</button><button id="autonomyRevokeButton" type="button" class="secondary-action danger" disabled>Revoke grant</button></div>
+            <p id="autonomyConfigurationStatus" role="status" aria-live="polite">Autonomy is off until you approve a named grant.</p>
+            <div id="autonomyProposalSummary" class="autonomy-proposal-summary" aria-live="polite"></div>
+          </div>
+        </section>
         <section class="configuration-group"><header><h3>Premium personas</h3><p>Manage your licence and installed library.</p></header><div class="configuration-licence"><strong id="configurationLicenceStatus">Checking persona status…</strong><p id="configurationLicenceDetail"></p><button id="managePersonaLicence" type="button" class="quiet-button">Manage licence</button></div></section>
         <section class="configuration-group"><header><h3>Setup and support</h3><p>Open these when you need them, without adding permanent navigation.</p></header><div class="configuration-shortcuts"><button type="button" class="quiet-button" data-view="guided">Project discovery</button><button type="button" class="quiet-button" data-view="intent-studio">Shape an intent</button><button type="button" class="quiet-button" data-view="error-reporting">Diagnostics and support</button></div></section>
       </section>
@@ -142,6 +160,7 @@
             </section>
           </aside>
         </div>
+        <section class="autonomy-companion" aria-labelledby="autonomyCompanionTitle"><header><h3 id="autonomyCompanionTitle">Delegated delivery</h3><p id="autonomyCompanionStatus" role="status" aria-live="polite" tabindex="-1">Checking the exact pool and next actions…</p></header><div class="autonomy-columns"><section aria-labelledby="autonomyCanProgressTitle"><h4 id="autonomyCanProgressTitle">Can progress</h4><div id="autonomyCanProgress"></div></section><section aria-labelledby="autonomyNeedsHumanTitle"><h4 id="autonomyNeedsHumanTitle">Needs your decision</h4><div id="autonomyNeedsHuman"></div></section></div><section class="autonomy-blocked-section" aria-labelledby="autonomyBlockedTitle"><h4 id="autonomyBlockedTitle">Not eligible</h4><div id="autonomyBlocked"></div></section></section>
       </section>
 
       <section id="portfolioView" class="dashboard-view portfolio-view" hidden aria-labelledby="portfolioTitle">
@@ -238,6 +257,7 @@
         </header>
         <section id="liveSummary" class="live-summary"></section>
         <section id="activeSessions" class="active-grid"></section>
+        <section class="autonomy-live" aria-labelledby="autonomyLiveTitle"><header><h3 id="autonomyLiveTitle" tabindex="-1">Delegated runs</h3><p>Actual run outcomes and stopping points. A cancellation request is not a confirmed stop.</p></header><p id="autonomyLiveStatus" role="status" aria-live="polite"></p><div id="autonomyLiveRuns" aria-live="polite">Checking delegated runs…</div></section>
       </section>
 
       <section id="knowledgeView" class="dashboard-view knowledge-view" hidden>
@@ -772,6 +792,12 @@
       </form>
     </dialog>
 
+    <dialog id="autonomyApprovalDialog" class="action-dialog autonomy-dialog" aria-labelledby="autonomyApprovalTitle"><form id="autonomyApprovalForm" class="action-sheet"><header><div><h2 id="autonomyApprovalTitle">Approve this exact grant</h2><p>Review the selected intents, actions, provider and limits. This never approves Build or Manual QA.</p></div><button type="button" class="close-button" data-autonomy-close aria-label="Close grant review">×</button></header><section class="action-body"><div id="autonomyApprovalSummary"></div><label for="autonomyApproverName">Your name</label><input id="autonomyApproverName" required maxlength="120" autocomplete="name"></section><footer><button type="button" class="secondary-action" data-autonomy-close>Keep autonomy off</button><button type="submit" class="primary-action">Approve this scope</button></footer></form></dialog>
+    <dialog id="autonomyRevocationDialog" class="action-dialog autonomy-dialog" aria-labelledby="autonomyRevocationTitle"><form id="autonomyRevocationForm" class="action-sheet"><header><div><h2 id="autonomyRevocationTitle">Revoke this grant</h2><p>Further dispatch and result acceptance will stop. An active process may still need cancellation.</p></div><button type="button" class="close-button" data-autonomy-close aria-label="Close revocation">×</button></header><section class="action-body"><label for="autonomyRevokerName">Your name</label><input id="autonomyRevokerName" required maxlength="120" autocomplete="name"></section><footer><button type="button" class="secondary-action" data-autonomy-close>Keep grant</button><button type="submit" class="primary-action danger">Confirm revocation</button></footer></form></dialog>
+    <dialog id="autonomyDispatchDialog" class="action-dialog autonomy-dialog" aria-labelledby="autonomyDispatchTitle"><form id="autonomyDispatchForm" class="action-sheet"><header><div><h2 id="autonomyDispatchTitle">Start the next permitted action</h2><p id="autonomyDispatchSummary"></p></div><button type="button" class="close-button" data-autonomy-close aria-label="Close run review">×</button></header><section class="action-body"><p>EWAI rechecks the grant, repository, evidence and current human gates before dispatch.</p><label for="autonomyDispatchMode">Run mode</label><select id="autonomyDispatchMode"><option value="run">Run one bounded action</option><option value="service">Start a local service until a checkpoint</option></select></section><footer><button type="button" class="secondary-action" data-autonomy-close>Not now</button><button type="submit" class="primary-action">Start permitted work</button></footer></form></dialog>
+    <dialog id="autonomyControlDialog" class="action-dialog autonomy-dialog" aria-labelledby="autonomyControlTitle"><form id="autonomyControlForm" class="action-sheet"><header><div><h2 id="autonomyControlTitle">Control delegated run</h2><p id="autonomyControlSummary"></p></div><button type="button" class="close-button" data-autonomy-close aria-label="Close run control">×</button></header><section class="action-body"><p id="autonomyControlBoundary"></p></section><footer><button type="button" class="secondary-action" data-autonomy-close>Not now</button><button id="autonomyControlConfirm" type="submit" class="primary-action">Confirm</button></footer></form></dialog>
+    <dialog id="autonomyAnswerDialog" class="action-dialog autonomy-dialog" aria-labelledby="autonomyAnswerTitle"><form id="autonomyAnswerForm" class="action-sheet"><header><div><h2 id="autonomyAnswerTitle">Answer a human question</h2><p>Your answer is private run evidence. It cannot approve Build or another human gate.</p></div><button type="button" class="close-button" data-autonomy-close aria-label="Close answer">×</button></header><section class="action-body"><p id="autonomyAnswerSummary" class="autonomy-question-context"></p><label for="autonomyAnswerName">Your name (must match the assigned owner)</label><input id="autonomyAnswerName" required maxlength="120" autocomplete="name"><label for="autonomyAnswerText">Your answer</label><textarea id="autonomyAnswerText" required maxlength="16000"></textarea></section><footer><button type="button" class="secondary-action" data-autonomy-close>Not now</button><button type="submit" class="primary-action">Record answer</button></footer></form></dialog>
+
     <dialog id="premiumSetupDialog" class="action-dialog" aria-labelledby="premiumSetupTitle">
       <form id="premiumSetupForm" class="action-sheet premium-setup-form">
         <header><div><h2 id="premiumSetupTitle">Set up premium personas</h2><p>Enter the key from My Account or your team invitation. We'll verify your licence and install the pack now.</p></div><button id="closePremiumSetup" type="button" class="close-button" aria-label="Close persona setup">×</button></header>

package/public/styles.css

@@ -2691,3 +2691,67 @@ button:focus-visible, input:focus-visible, select:focus-visible, textarea:focus-
   .configuration-heading h2 { font-size: 25px; }
   .configuration-group header, .configuration-setting, .configuration-licence, .configuration-shortcuts { padding: 19px; }
 }
+
+/* Governed autonomy sits inside the existing views, never in a new navigation lane. */
+.autonomy-configuration > header { display: flex; align-items: flex-start; justify-content: space-between; gap: 18px; }
+.autonomy-mode { flex: 0 0 auto; padding: 7px 10px; border-radius: 4px; background: var(--canvas); color: var(--muted); font-size: 11px; }
+.autonomy-mode.delegated { background: var(--green-soft); color: var(--green); }
+.autonomy-mode.revoked { background: var(--red-soft); color: var(--red); }
+.autonomy-configuration-body { display: grid; gap: 17px; min-width: 0; padding: 24px; }
+.autonomy-configuration fieldset { min-width: 0; margin: 0; padding: 15px; border: 1px solid var(--line); border-radius: 5px; }
+.autonomy-configuration legend { padding: 0 5px; font-weight: 750; }
+.autonomy-configuration fieldset > p { margin: 0 0 12px; font-size: 12px; }
+.autonomy-pool { display: grid; gap: 8px; margin-top: 12px; }
+.autonomy-pool-choice { display: grid; grid-template-columns: 20px minmax(0, 1fr); column-gap: 9px; align-items: center; min-height: 44px; padding: 6px 10px; border: 1px solid var(--line); border-radius: 5px; background: var(--surface); text-align: left; cursor: pointer; }
+.autonomy-pool-choice[aria-checked="true"] { border-color: var(--green); background: var(--green-soft); }
+.autonomy-pool-mark { grid-row: span 2; display: grid; place-items: center; width: 18px; height: 18px; border: 1px solid var(--line-strong); border-radius: 3px; color: transparent; font-size: 12px; }
+.autonomy-pool-choice[aria-checked="true"] .autonomy-pool-mark { border-color: var(--green); background: var(--green); color: white; }
+.autonomy-pool-choice span, .autonomy-pool-choice small { min-width: 0; overflow-wrap: anywhere; }
+.autonomy-pool-choice small { color: var(--muted); }
+.autonomy-actions-field { display: grid; gap: 7px; }
+.autonomy-actions-field button { min-height: 44px; padding: 9px 11px; border: 1px solid var(--line); border-radius: 5px; background: var(--surface); text-align: left; cursor: pointer; }
+.autonomy-actions-field button[aria-checked="true"] { border-color: var(--green); background: var(--green-soft); color: var(--green); font-weight: 750; }
+.autonomy-limits { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 13px; }
+.autonomy-limits label { display: grid; gap: 5px; font-weight: 700; }
+.autonomy-limits input, .autonomy-limits select, .autonomy-dialog input, .autonomy-dialog select, .autonomy-dialog textarea { width: 100%; min-width: 0; min-height: 44px; padding: 9px 10px; border: 1px solid var(--line-strong); border-radius: 5px; background: var(--surface); color: var(--ink); }
+.autonomy-dialog textarea { min-height: 120px; resize: vertical; }
+.autonomy-boundary { padding: 13px 15px; border-left: 4px solid var(--amber); background: var(--amber-soft); color: var(--ink) !important; }
+.autonomy-button-row, .autonomy-card-actions { display: flex; flex-wrap: wrap; gap: 9px; }
+.autonomy-button-row button, .autonomy-card-actions button, .autonomy-dialog button { min-height: 44px; font-size: 12px; }
+.autonomy-proposal-summary { padding: 13px 15px; border: 1px solid var(--line); border-radius: 5px; background: var(--surface-2); overflow-wrap: anywhere; }
+#autonomyConfigurationStatus { font-weight: 700; }
+.autonomy-companion, .autonomy-live { margin: 20px 24px 28px; padding: 22px; border: 1px solid var(--line); border-radius: 6px; background: var(--surface); }
+.autonomy-companion > header, .autonomy-live > header { margin-bottom: 18px; }
+.autonomy-companion h3, .autonomy-live h3 { margin: 0 0 6px; font-size: 19px; }
+.autonomy-companion h4, .autonomy-live h4 { margin: 0 0 9px; font-size: 14px; }
+.autonomy-companion header p, .autonomy-live header p { margin: 0; color: var(--muted); line-height: 1.5; }
+.autonomy-columns { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 16px; }
+.autonomy-columns > section, .autonomy-blocked-section { min-width: 0; padding: 16px; border: 1px solid var(--line); border-radius: 5px; background: var(--surface-2); }
+.autonomy-columns > section:nth-child(2) { border-top: 3px solid var(--amber); }
+.autonomy-blocked-section { margin-top: 16px; }
+.autonomy-candidate, .autonomy-run, .autonomy-empty { min-width: 0; padding: 15px; border: 1px solid var(--line); border-radius: 5px; background: var(--surface); overflow-wrap: anywhere; }
+.autonomy-candidate + .autonomy-candidate, .autonomy-run + .autonomy-run { margin-top: 9px; }
+.autonomy-candidate h5 { margin: 0 0 4px; font-size: 14px; }
+.autonomy-candidate small, .autonomy-run small { color: var(--muted); overflow-wrap: anywhere; }
+.autonomy-candidate p, .autonomy-run p, .autonomy-empty p { margin: 10px 0; line-height: 1.5; }
+.autonomy-question-context { padding: 10px 12px; border-left: 3px solid var(--amber); background: var(--amber-soft); color: var(--ink); overflow-wrap: anywhere; }
+.autonomy-reasons { color: var(--amber); font-weight: 700; }
+.autonomy-candidate .autonomy-card-actions, .autonomy-run .autonomy-card-actions { margin-top: 12px; }
+.autonomy-intent-detail { margin-top: 18px; padding: 16px; border-left: 4px solid var(--green); background: var(--surface-2); }
+.autonomy-intent-detail h3 { margin: 0 0 7px; }
+.autonomy-intent-detail p { margin: 7px 0; overflow-wrap: anywhere; }
+.autonomy-dialog .action-body { display: grid; gap: 9px; }
+.autonomy-dialog .action-body label { font-weight: 700; }
+.autonomy-dialog .action-body p { margin: 0 0 8px; }
+.autonomy-dialog .close-button { width: 44px; min-width: 44px; height: 44px; padding: 0; }
+.autonomy-dialog-error:not(:empty) { padding: 10px 12px; border-left: 3px solid var(--red); background: var(--red-soft); color: var(--red); }
+.autonomy-dialog :focus-visible, .autonomy-configuration :focus-visible, .autonomy-companion :focus-visible, .autonomy-live :focus-visible { outline: 3px solid var(--blue); outline-offset: 2px; }
+@media (max-width: 720px) {
+  .autonomy-configuration > header { flex-direction: column; }
+  .autonomy-configuration-body { padding: 18px; }
+  .autonomy-limits, .autonomy-columns { grid-template-columns: minmax(0, 1fr); }
+  .autonomy-companion, .autonomy-live { margin: 16px 12px; padding: 16px; }
+  .autonomy-button-row { flex-direction: column; }
+  .autonomy-button-row button { width: 100%; }
+  .autonomy-dialog .action-sheet > footer { flex-wrap: wrap; }
+}