@topolo/cli 0.13.19 → 0.13.22

package/agent-packs/gui/studio.css

@@ -0,0 +1,14 @@
+:root{font-family:Inter,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif;color:#17212e;background:#f6f8fa;font-synthesis:none;--line:#e4e9ee;--muted:#687789;--blue:#287b9d;--pale:#eaf4f8}*{box-sizing:border-box}body{margin:0}button,input,textarea,select{font:inherit}button,a{touch-action:manipulation}button{cursor:pointer}button:disabled{cursor:default;opacity:.45}button,a,input,textarea,select{outline-offset:4px}button:focus-visible,a:focus-visible,input:focus-visible,textarea:focus-visible,select:focus-visible{outline:2px solid var(--blue)}button{border:1px solid var(--line);background:#fff;color:inherit;border-radius:9px;padding:10px 13px;transition:background .15s,transform .15s}button:hover:not(:disabled){background:#edf3f6}button:active:not(:disabled){transform:translateY(1px)}a{color:#246c8a;text-decoration:none}a:hover{text-decoration:underline}header{height:66px;background:#fff;display:flex;align-items:center;justify-content:space-between;padding:0 25px;border-bottom:1px solid var(--line);gap:12px;position:sticky;top:0;z-index:5}.wordmark{font-size:23px;font-weight:800;letter-spacing:-1.2px}.wordmark span{color:var(--blue)}.product{font-size:12px;color:var(--muted);letter-spacing:0;font-weight:500;border-left:1px solid var(--line);padding-left:13px;margin-left:13px}.head-actions{display:flex;align-items:center;gap:10px}.fresh{font-size:11px;color:var(--muted)}.icon-button{font-size:19px;padding:5px 10px}.navigation{background:#fff;display:flex;align-items:center;gap:4px;padding:0 20px;border-bottom:1px solid var(--line);overflow:auto}.navigation button{border:0;background:none;border-radius:0;white-space:nowrap;padding:16px 10px;font-size:12px;border-bottom:2px solid transparent;color:var(--muted)}.navigation button[aria-selected=true]{border-bottom-color:var(--blue);color:#1b627d;font-weight:650}.count{font-size:10px;display:inline-flex;align-items:center;justify-content:center;min-width:18px;margin-left:5px;padding:2px 5px;border-radius:5px;background:#f0f3f6;color:#657486}.navigation button[aria-selected=true] .count{background:var(--pale);color:#23667f}.notice{margin:12px 24px;background:#fff2df;border:1px solid #f0d5a8;border-radius:8px;padding:12px;font-size:12px}.workspace{display:grid;grid-template-columns:270px minmax(0,1fr);max-width:1600px;margin:auto;min-height:calc(100svh - 114px)}.queue{border-right:1px solid var(--line);padding:22px 15px;background:#f9fafb}.queue-heading{display:flex;align-items:center;justify-content:space-between;margin-bottom:14px}.eyebrow{font-size:10px;font-weight:650;text-transform:uppercase;letter-spacing:1.4px;color:var(--blue)}.queue-heading .eyebrow{color:var(--muted)}.search{width:100%;padding:10px 12px;border:1px solid var(--line);border-radius:8px;font-size:12px;background:#fff}.filters{display:flex;gap:7px;margin:9px 0 16px}.filters select{width:50%;min-width:0;border:1px solid var(--line);border-radius:6px;background:#fff;color:var(--muted);padding:7px;font-size:11px}.queue-item{display:block;width:100%;text-align:left;border:1px solid transparent;background:transparent;padding:13px 12px;margin:3px 0}.queue-item.selected{background:#fff;border-color:#d4e3eb;box-shadow:0 2px 5px #16233305}.queue-item .name{display:block;font-size:13px;line-height:1.45;font-weight:620;margin:5px 0}.queue-item .small{display:block;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.small{font-size:11px;color:var(--muted);line-height:1.5}.queue-item .state{font-size:10px;color:#526d7a}.dot{display:inline-block;width:5px;height:5px;border-radius:50%;background:#cc9348;margin-right:6px}.dot.done{background:#49967c}.content{min-width:0;padding:30px 32px 150px;background:#fff}.context-line{display:flex;justify-content:space-between;gap:10px;align-items:center}.pager{display:flex;gap:6px;align-items:center}.pager span{font-size:11px;color:var(--muted);margin-right:5px}.pager button{padding:4px 10px;font-size:20px}h1{font-size:clamp(24px,3vw,35px);line-height:1.16;letter-spacing:-1px;font-weight:660;margin:14px 0 10px;max-width:850px}.subtitle{font-size:13px;line-height:1.6;color:var(--muted);margin:0 0 23px;max-width:800px}.detail-layout{display:grid;grid-template-columns:minmax(0,1fr) 240px;gap:25px}.preview-area{min-width:0}.preview{height:min(52svh,530px);min-height:240px;background:#f3f5f7;border-radius:12px;border:1px solid var(--line);display:flex;align-items:center;justify-content:center;overflow:hidden;position:relative}.preview img{height:100%;width:100%;object-fit:contain}.preview button{position:absolute;right:12px;bottom:12px;font-size:11px;box-shadow:0 2px 8px #17212e15}.preview-caption{display:flex;justify-content:space-between;gap:12px;font-size:11px;color:var(--muted);margin:12px 0}.thumbnails{display:flex;gap:9px;overflow:auto;padding:2px 2px 9px}.thumb{padding:3px;flex:0 0 95px;border-radius:7px;background:#f7f9fa}.thumb img{width:100%;height:68px;object-fit:cover;object-position:top;border-radius:4px}.thumb span{display:block;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-size:10px;padding:5px 3px}.thumb[aria-pressed=true]{border:2px solid var(--blue);padding:2px}.inspector{border-left:1px solid var(--line);padding-left:23px}.inspector section{padding:0 0 18px;margin:0 0 19px;border-bottom:1px solid var(--line)}h2{font-size:12px;margin:0 0 10px;font-weight:650}.inspector p,.detail-copy{font-size:12px;line-height:1.7;color:var(--muted);margin:0}.owner{display:flex;align-items:center;gap:9px;margin-bottom:10px}.avatar{background:var(--pale);color:var(--blue);border-radius:50%;height:30px;width:30px;display:grid;place-items:center;font-size:10px;font-weight:600}.owner-name{font-size:12px;font-weight:600}.support-link{display:flex;align-items:center;justify-content:space-between;padding:10px 0;border-bottom:1px solid #eff2f5;font-size:12px}.status-panel{padding:22px;border:1px solid var(--line);border-radius:10px;background:#fafcfd;min-height:250px}.status-panel h2{font-size:18px;line-height:1.5;letter-spacing:-.3px}.status-pill{font-size:10px;display:inline-block;padding:5px 8px;border-radius:5px;background:var(--pale);color:#23677f;margin-bottom:15px}.stage-track{display:flex;gap:6px;margin:24px 0;flex-wrap:wrap}.stage{font-size:10px;padding:7px 10px;background:#f0f3f6;color:var(--muted);border-radius:5px}.stage.pass{background:#eaf5ef;color:#36775b}.details{margin-top:20px;border-top:1px solid var(--line);padding-top:15px}.details summary{font-size:12px;color:#496575;cursor:pointer}.details p{font-size:12px;line-height:1.75;color:var(--muted)}pre{font:11px/1.6 ui-monospace,monospace;white-space:pre-wrap;word-break:break-word;background:#f6f8fa;padding:12px;border-radius:6px}.response-bar{position:fixed;bottom:0;right:0;left:270px;background:#ffffffef;backdrop-filter:blur(15px);border-top:1px solid var(--line);padding:14px 32px;z-index:4}.response-inner{max-width:1250px;margin:auto;display:flex;align-items:center;justify-content:space-between;gap:18px}.response-text{font-size:11px;color:var(--muted);max-width:400px;line-height:1.5}.response-actions{display:flex;gap:7px;flex-wrap:wrap}.primary{background:var(--blue);border-color:var(--blue);color:#fff}.primary:hover:not(:disabled){background:#226e8d}.quiet{background:transparent}.response-actions button{font-size:12px}.mobile-queue{display:none}.empty{padding:50px 20px;text-align:center;color:var(--muted);font-size:13px}.activity-row{border-bottom:1px solid var(--line);padding:16px 0}.activity-row strong{font-size:13px}.activity-row p{font-size:12px;color:var(--muted);line-height:1.6}.activity-row time{font-size:10px;color:var(--muted)}.table-wrap{overflow:auto}table{border-collapse:collapse;width:100%;font-size:12px}th,td{text-align:left;vertical-align:top;padding:14px 10px;border-bottom:1px solid var(--line);min-width:120px;line-height:1.6}th{font-size:10px;text-transform:uppercase;letter-spacing:1px;color:var(--muted)}dialog{width:min(520px,calc(100% - 30px));border:1px solid var(--line);border-radius:14px;padding:25px;box-shadow:0 25px 100px #15233330;color:inherit}dialog::backdrop{background:#17212e60;backdrop-filter:blur(3px)}dialog h2{font-size:21px;letter-spacing:-.5px}dialog p{font-size:12px;line-height:1.6;color:var(--muted)}dialog select,textarea{display:block;width:100%;padding:10px;border:1px solid #d8e1e8;border-radius:8px;margin:12px 0;font-size:13px}textarea{min-height:120px;resize:vertical}dialog .actions{display:flex;justify-content:flex-end;gap:8px;margin-top:20px}.toast{position:fixed;bottom:105px;left:50%;transform:translateX(-50%);background:#173e50;color:white;border-radius:8px;padding:12px 18px;font-size:12px;z-index:20;max-width:90%}.image-dialog{width:min(1000px,95vw);max-height:95svh;padding:15px}.image-dialog img{width:100%;height:78svh;object-fit:contain}.image-dialog .actions{margin:0 0 10px}.record{background:#eef6f2;padding:12px 15px;border-radius:8px;font-size:12px;line-height:1.65;margin-top:15px;color:#356b55}.intro{font-size:12px;color:var(--muted);line-height:1.6;margin:0 0 25px}.queue-item{animation:appear .15s ease-out}.focus-content{animation:appear .2s ease-out}@keyframes appear{from{opacity:.5;transform:translateY(3px)}to{opacity:1;transform:translateY(0)}}[hidden]{display:none!important}@media(min-width:1600px){.response-bar{left:max(270px,calc((100vw - 1600px)/2 + 270px));right:max(0px,calc((100vw - 1600px)/2))}}@media(max-width:1150px){.detail-layout{grid-template-columns:1fr}.inspector{border-left:0;padding-left:0;display:grid;grid-template-columns:1fr 1fr;gap:20px;margin-top:25px}.content{padding:24px 25px 155px}.response-bar{padding:12px 25px}.workspace{grid-template-columns:235px minmax(0,1fr)}.response-bar{left:235px}}@media(max-width:850px){header{padding:0 20px;height:58px}.product{display:none}.workspace{display:block;min-height:calc(100svh - 108px)}.queue{display:none;position:fixed;inset:108px 0 0;z-index:6;overflow:auto;padding:18px 20px;border-right:0}.queue.open{display:block}.mobile-queue{display:inline-flex;gap:8px;align-items:center;font-size:11px;border-radius:20px;background:#f6f8fb}.content{padding:23px 22px 150px}.response-bar{left:0;padding:13px 22px}.response-inner{gap:10px}.response-text{max-width:250px}.preview{height:min(47svh,450px)}.fresh{display:none}.navigation{padding:0 12px}.navigation button{padding:15px 9px}.inspector{grid-template-columns:1fr 1fr}.queue-item .small{white-space:normal}.queue-item{padding:14px}.head-actions{gap:7px}}@media(max-width:480px){header{padding:0 15px}.wordmark{font-size:22px}.mobile-queue{max-width:170px;overflow:hidden;white-space:nowrap}.content{padding:22px 17px 170px}h1{font-size:27px;letter-spacing:-.7px}.subtitle{font-size:12px;margin-bottom:18px}.context-line{gap:6px}.eyebrow{font-size:9px;letter-spacing:1px}.inspector{display:block}.response-bar{padding:12px 17px}.response-inner{display:block}.response-text{max-width:none;margin-bottom:10px;font-size:10px}.response-actions{display:grid;grid-template-columns:1fr 1fr 1fr;gap:6px}.response-actions button{padding:10px 8px;font-size:11px}.navigation button{font-size:11px;padding:14px 7px}.count{margin-left:3px}.preview{height:40svh;min-height:220px}.preview-caption{font-size:10px}.status-panel{padding:19px}.toast{bottom:140px}.pager span{display:none}}@media(prefers-reduced-motion:reduce){*{animation:none!important;transition:none!important}}
+
+.workspace.wide{display:block}.workspace.wide .content{min-height:calc(100svh - 114px)}
+
+.status-panel .detail-copy,.inspector section>p{display:-webkit-box;-webkit-box-orient:vertical;-webkit-line-clamp:4;overflow:hidden}.inspector .small{-webkit-line-clamp:2}
+
+.workflow-progress{margin:18px 0;padding:18px;border:1px solid var(--line);border-radius:9px;font-size:12px;line-height:1.55}.workflow-progress h2{margin:0 0 12px;font-size:15px}.workflow-steps{list-style:none;margin:18px 0 0;padding:0}.workflow-steps li{border-left:2px solid #dce4e9;padding:0 0 18px 16px;position:relative}.workflow-steps li:before{content:"";position:absolute;left:-5px;top:5px;width:8px;height:8px;border-radius:50%;background:#cdd7de}.workflow-steps li.verified{border-color:#459078}.workflow-steps li.verified:before{background:#459078}.workflow-steps strong{display:inline-block;margin-right:12px}.workflow-steps p{margin:5px 0 0}.workflow-steps li:last-child{padding-bottom:0}
+
+.view-guide{padding:14px 24px;border-bottom:1px solid var(--line);background:#fff}.view-guide p{margin:0;font-size:12px;line-height:1.65;color:#496575}.view-guide .coverage-note{margin-top:6px;color:#735a30}@media(max-width:480px){.view-guide{padding:12px 17px}.view-guide p{font-size:11px}}
+
+/* Single-item workspace; the work finder is a dialog, never a sidebar. */
+.workspace{display:block;max-width:1240px}.response-bar{left:0;right:0}.response-inner{max-width:1176px}.work-finder{margin-left:auto;white-space:nowrap;font-size:12px}.work-picker{width:min(600px,calc(100vw - 32px));max-height:82svh;padding:0;background:#fff;overflow:auto}.work-picker .picker-body{padding:22px}.work-picker .queue-heading{margin-bottom:18px}.work-picker h2{font-size:19px;margin:0}.work-picker .filters{margin-bottom:12px}.work-picker .filters select{margin:0;width:50%}.work-picker #picker-summary{margin:0 0 12px}.work-picker .queue-item{padding:12px 9px;margin:0;border-radius:0;border-bottom:1px solid var(--line);animation:none}.work-picker .queue-item.selected{box-shadow:none;border-color:var(--line);background:var(--pale)}.work-picker .queue-item .name{font-size:13px;margin:4px 0}.work-picker .queue-item .eyebrow{font-size:9px}.work-picker[open]{display:block}.head-actions{flex-shrink:0}
+@media(max-width:850px){.workspace{display:block}.work-finder{font-size:11px}.response-bar{left:0;right:0}}
+@media(max-width:480px){.work-picker .picker-body{padding:17px}.work-picker{max-height:85svh}.work-finder{padding:8px 10px}header{gap:8px}.work-picker .filters select{font-size:12px}}

package/agent-packs/gui/studio.js

@@ -0,0 +1,121 @@
+'use strict';
+const $ = id => document.getElementById(id);
+const node = (tag, value = '', cls = '') => { const n = document.createElement(tag); n.textContent = value; if (cls) n.className = cls; return n; };
+const fmt = t => t && !Number.isNaN(Date.parse(t)) ? new Intl.DateTimeFormat('en-GB', {timeZone:'Asia/Dubai', day:'2-digit', month:'short', hour:'2-digit', minute:'2-digit'}).format(new Date(t)) : 'Not recorded';
+let data, inbox = {responses:[], revisions:{}}, selected = localStorage.getItem('topolo-studio-selection') || '', view = 'review', chosen = -1, refreshing = false, refreshPending = false, lastFingerprint = '', submissionId = null, responseItem = null;
+let lastSeen = localStorage.getItem('topolo-catch-up-last-read') || '';
+const viewState = new Map();
+let initialHash = ''; try { initialHash = decodeURIComponent(location.hash.slice(1)); } catch {}
+function toast(value) { $('toast').textContent = value; $('toast').hidden = false; clearTimeout(toast.timer); toast.timer = setTimeout(() => $('toast').hidden = true, 4500); }
+function safeURL(value) { try { const u = new URL(value, location.href); return ['http:','https:'].includes(u.protocol) || (u.protocol === 'codex:' && u.hostname === 'threads') ? u.href : null; } catch { return null; } }
+function needsReview(t) { return t.needsHuman === true; }
+function isBlocked(t) { return t.blocked || t.kind === 'held' || /blocked|stopped|held|hold|gap|refus/i.test(t.status || ''); }
+function latestResponse(t) { return inbox.responses.filter(r => r.itemId === t.id).sort((a,b) => b.recordedAtUTC.localeCompare(a.recordedAtUTC))[0]; }
+const workflowLabel = r => ({pending_delivery:'Waiting for delivery',route_unresolved:'Owner route needs verification',delivered:'Delivered · awaiting acceptance',accepted:'Accepted · in progress',completed:'Completed',blocked:'Blocked · owner action',rejected:'Owner declined',delivery_unknown:'Delivery needs reconciliation',verification_needed:'Evidence needs verification'}[r?.workflow?.state] || 'Saved · awaiting delivery');
+function responseProgress(record) {
+  const section = node('section','','workflow-progress'), w = record.workflow;
+  section.append(node('h2','Response progress'),node('strong',workflowLabel(record)));
+  if(w?.owner) section.append(node('p','Responsible owner: ' + w.owner.title,'small'));
+  section.append(node('p',w?.summary || 'Saved locally. Owner acceptance has not been verified.'));
+  const steps = node('ol','','workflow-steps');
+  for(const [state,label] of [['saved','Saved'],['delivered','Delivered'],['accepted','Accepted'],['completed','Completed']]) {
+    const e = state === 'saved' ? {atUTC:record.recordedAtUTC,summary:'Your exact response was saved.'} : w?.events?.slice().reverse().find(e=>e.state===state);
+    const li = node('li','','' + (e ? 'verified':'pending'));
+    li.append(node('strong',label),node('span',e ? fmt(e.atUTC) : 'Not yet verified','small'));
+    if(e) li.append(node('p',e.summary)); steps.append(li);
+  }
+  section.append(steps); return section;
+}
+function currentResponse(t) { const r = latestResponse(t); return r && r.sourceRevision === inbox.revisions[t.id] ? r : null; }
+function matches(t) { const q = $('search').value.toLowerCase(); return (!q || [t.title,t.summary,t.application,t.owner,t.laneTitle].join(' ').toLowerCase().includes(q)) && (!$('lane').value || t.laneId === $('lane').value) && (!$('state').value || ($('state').value === 'blocked' ? isBlocked(t) : $('state').value === 'media' ? t.reviewImages?.length : $('state').value === 'completed' ? true : needsReview(t))); }
+function allItems() { return [...(data?.tasks || []), ...(data?.completed || [])]; }
+function pendingDecisions() { return data.tasks.filter(t => needsReview(t) && !currentResponse(t)); }
+function workItems(completed = false) { return (completed ? data.completed || [] : data.tasks).filter(t => !needsReview(t)); }
+function viewRows() { return view === 'recorded' ? allItems().filter(t => latestResponse(t)) : view === 'review' ? pendingDecisions() : workItems(data.completed?.some(t => t.id === selected)); }
+function rows() { return (view === 'work' ? workItems($('state').value === 'completed') : viewRows()).filter(matches); }
+function closeFinder() { if ($('queue').open) $('queue').close(); $('queue-toggle').setAttribute('aria-expanded','false'); }
+function renderPicker() {
+  const list = rows(), shown = list.slice(0,8);
+  $('picker-summary').textContent = list.length > 8 ? 'Showing 8 of ' + list.length + ' matches. Refine your search to find another item.' : list.length + (list.length === 1 ? ' match' : ' matches');
+  $('queue-list').replaceChildren(...shown.map(queueRow));
+  if (!shown.length) $('queue-list').append(node('p','No matches. Try another search or filter.','empty'));
+}
+function openFinder() { renderPicker(); $('queue').showModal(); $('queue-toggle').setAttribute('aria-expanded','true'); $('search').focus(); }
+function reference(t) { return ['Topolo decision reference: ' + t.id, 'Work: ' + t.title, 'Lane: ' + (t.laneTitle || 'Engineering'), t.decisionId ? 'Decision: ' + t.decisionId : '', 'Status: ' + t.status, t.roadmap?.itemId ? 'Roadmap: ' + t.roadmap.itemId : '', 'View: ' + location.origin + '/#' + encodeURIComponent(t.id)].filter(Boolean).join('\n'); }
+async function copyReference(t) { try { await navigator.clipboard.writeText(reference(t)); toast('Reference copied — paste it into any chat.'); } catch { $('copy-text').value = reference(t); $('copy-dialog').showModal(); $('copy-text').select(); } }
+function selectItem(t) { if (!t || typeof t.id !== 'string' || !t.id) return false; selected = t.id; chosen = -1; localStorage.setItem('topolo-studio-selection', selected); history.replaceState(null, '', '#' + encodeURIComponent(selected)); closeFinder(); render(); return true; }
+function openTask(taskId) {
+  const item = typeof taskId === 'string' && allItems().find(t => t.id === 'task:' + taskId && t.nativeTask?.id === taskId);
+  if (!item) { toast('This task is not in the current task feed. Refresh to load its recorded status.'); return false; }
+  view = latestResponse(item) ? 'recorded' : needsReview(item) ? 'review' : 'work';
+  for (const id of ['search','lane','state']) $(id).value = '';
+  if (view === 'work' && data.completed?.some(t => t.id === item.id)) $('state').value = 'completed';
+  return selectItem(item);
+}
+function setView(value) {
+  viewState.set(view, {selected, search:$('search').value, lane:$('lane').value, state:$('state').value});
+  view = value; const saved = viewState.get(view); selected = saved?.selected || ''; chosen = -1;
+  for (const id of ['search','lane','state']) $(id).value = saved?.[id] || '';
+  closeFinder(); render();
+}
+function anchor(label, url) { const safe = safeURL(url); if (!safe) return null; const a = node('a', label, 'support-link'); a.href = safe; a.target = '_blank'; a.rel = 'noopener noreferrer'; a.append(node('span','↗')); return a; }
+function details(title, content) { const d = node('details','','details'); d.append(node('summary',title)); if (typeof content === 'string') d.append(node('p',content)); else d.append(content); return d; }
+function renderReviewBacklog() {
+  const area = $('review-backlog'), records = data.decisionCoverage?.records || [], wasOpen = area.querySelector('details')?.open;
+  area.hidden = view !== 'review' || !records.length; area.replaceChildren(); if(area.hidden) return;
+  const list = node('ul','','review-backlog-list');
+  for(const record of records) { const row = node('li'); row.append(node('strong',record.title),node('p',record.reason)); list.append(row); }
+  const disclosure = details('Older review backlog · ' + records.length + ' records being reconciled',list); disclosure.open = Boolean(wasOpen); area.append(disclosure);
+}
+function queueRow(t) { const b = node('button','','queue-item' + (selected === t.id ? ' selected' : '')); b.type = 'button'; b.setAttribute('aria-current', selected === t.id ? 'true':'false'); b.append(node('span',t.application || t.laneTitle || 'Shared work','eyebrow'), node('span',t.title,'name')); const s = node('span','','state'); s.append(node('i','','dot' + (latestResponse(t) ? ' done':'')), document.createTextNode(latestResponse(t) ? workflowLabel(latestResponse(t)) : data.completed?.some(x => x.id === t.id) ? 'Completed' : needsReview(t) ? 'Awaiting your review' : isBlocked(t) ? 'Blocked · owner action' : 'In progress')); b.append(s); b.onclick = () => selectItem(t); return b; }
+function showMedia(t, area) { const images = t.reviewImages || []; chosen = Math.min(chosen,images.length-1); const image = images[Math.min(chosen, images.length - 1)]; const box = node('div','','preview'); const img = node('img'); img.src = safeURL(image.url); img.alt = image.label || t.title; img.loading = 'eager'; img.onerror = () => { img.hidden = true; box.append(node('p','Preview unavailable. Open the source or send feedback.','small')); }; box.append(img); const expand = node('button','Expand preview ↗'); expand.onclick = () => { $('full-image').src = img.src; $('full-image').alt = img.alt; $('image-dialog').showModal(); }; box.append(expand); area.append(box); const caption = node('div','','preview-caption'); caption.append(node('span',image.label || 'Review preview'), node('span',String(chosen + 1) + ' / ' + images.length)); area.append(caption); const thumbs = node('div','','thumbnails'); images.slice(0,3).forEach((image,index) => { const b = node('button','','thumb'); b.setAttribute('aria-label','Preview ' + (index + 1) + ': ' + (image.label || 'image')); b.setAttribute('aria-pressed',String(chosen === index)); const i = node('img'); i.src = safeURL(image.url); i.alt = ''; i.loading = 'lazy'; b.append(i,node('span',image.label || 'Preview ' + (index + 1))); b.onclick = () => { chosen = index; renderFocus(t); }; thumbs.append(b); }); if (images.length > 3) { const more = node('button','+' + (images.length - 3) + ' more','thumb'); more.onclick = () => { chosen = (chosen + 1) % images.length; renderFocus(t); }; thumbs.append(more); } area.append(thumbs); }
+function renderFocus(t) {
+  const content = $('focus'); content.replaceChildren(); content.className = 'content focus-content'; const context = node('div','','context-line'); context.append(node('span',t.application || (needsReview(t) ? 'Your review' : 'Shared work'),'eyebrow')); const list = viewRows(), index = list.findIndex(x => x.id === t.id); const pager = node('div','','pager'); pager.append(node('span',(index + 1) + ' of ' + list.length)); const prev = node('button','‹'), next = node('button','›'); prev.setAttribute('aria-label','Previous item'); next.setAttribute('aria-label','Next item'); prev.disabled = index <= 0; next.disabled = index >= list.length - 1; prev.onclick = () => selectItem(list[index - 1]); next.onclick = () => selectItem(list[index + 1]); pager.append(prev,next); context.append(pager); content.append(context,node('h1',t.title),node('p',needsReview(t) ? (t.reviewImages?.length ? t.reviewImages.length + ' directions ready. Select a preview and share your preference.' : t.status || 'Ready for your response') : t.status || 'Current work','subtitle'));
+  const layout = node('div','','detail-layout'), area = node('div','','preview-area');
+  if (t.reviewImages?.length) { if(chosen < 0) { const selectedAsset = latestResponse(t)?.response.asset; chosen = Math.max(0,(t.imageFiles || t.reviewImages).findIndex(i => (i.sha256 || i.url) === selectedAsset)); } showMedia(t,area); } else { const panel = node('div','','status-panel'); panel.append(node('span',latestResponse(t) ? workflowLabel(latestResponse(t)) : isBlocked(t) ? 'Owner action needed' : 'Current evidence','status-pill'), node('h2',t.status || 'In progress'), node('p',t.summary || 'Open the supporting material for this item.','detail-copy')); if (t.stages) { const stages = node('div','','stage-track'); for (const s of t.stages) stages.append(node('span',s.name,'stage ' + (['done','pass','complete'].includes(s.state) ? 'pass':''))); panel.append(stages); } area.append(panel); }
+  const record = latestResponse(t); if (record) { const r = node('div','','record'); r.append(node('strong',currentResponse(t) ? 'Your response is saved' : 'Your earlier response'),node('div',record.response.note),node('div',workflowLabel(record) + ' · ' + fmt(record.workflow?.atUTC || record.recordedAtUTC),'small')); area.prepend(r,responseProgress(record)); }
+  const evidence = node('div'); evidence.append(node('p',t.summary || 'No additional summary recorded.')); if(t.context) evidence.append(node('pre',t.context)); if (t.next) evidence.append(node('p','Next action: ' + t.next)); if (t.request?.text || t.originalRequest?.source) evidence.append(node('p','Original request: ' + (t.request?.text || t.originalRequest.source))); if (t.contributors?.length) { const ul = node('ul'); for (const c of t.contributors) ul.append(node('li',(data.agents?.[c.role]?.title || c.role) + ' — ' + c.contribution + ' (' + c.proof + ')')); evidence.append(details('Contributors',ul)); } if (t.evidence?.length) evidence.append(details('Technical evidence',node('pre',t.evidence.map(e => typeof e === 'string' ? e : JSON.stringify(e)).join('\n')))); area.append(details('Full context & evidence',evidence));
+  const inspector = node('aside','','inspector'); const owner = node('section'); const ownerRow = node('div','','owner'); const title = t.laneTitle || 'Topolo Engineering'; ownerRow.append(node('span',title.split(' ').map(x => x[0]).slice(0,2).join(''),'avatar')); const names = node('div'); names.append(node('div',title,'owner-name'),node('div','Prepared for you','small')); ownerRow.append(names); owner.append(ownerRow,node('p',t.owner || 'See originating lane for the next owner.')); inspector.append(owner);
+  const glance = node('section'); glance.append(node('h2',t.reviewImages?.length ? 'At a glance' : 'Next action'),node('p',t.reviewImages?.length ? (t.summary || t.status) : (t.next || 'No next action recorded.'))); if (t.verifiedAt || t.laneUpdatedAt) glance.append(node('p','Evidence · ' + fmt(t.verifiedAt || t.laneUpdatedAt),'small')); inspector.append(glance);
+  const support = node('section'); support.append(node('h2','Supporting material')); let count = 0; for (const link of t.links || []) { const a = anchor(link.label || 'Open source',link.url); if (a) {support.append(a); count++;} } if (t.roadmap?.url) { const a = anchor(t.roadmap.itemId ? 'Roadmap item' : 'Roadmap scope',t.roadmap.url); if(a) {support.append(a); count++;} } if (!count) support.append(node('p','No linked files for this item.')); const copy = node('button','Copy reference ↗','quiet'); copy.style.marginTop = '12px'; copy.onclick = () => copyReference(t); support.append(copy); inspector.append(support);
+  layout.append(area,inspector); content.append(layout); $('response-bar').hidden = false; $('response-context').textContent = t.reviewImages?.length && needsReview(t) ? 'Preference only. This does not approve implementation or publish anything.' : 'Send a scoped response. Track delivery, acceptance and completion in Your responses.'; $('primary-action').textContent = t.reviewImages?.length && needsReview(t) ? 'Choose this direction' : 'Send feedback'; $('primary-action').onclick = () => openResponse(t, t.reviewImages?.length && needsReview(t) ? 'preference':'feedback'); $('change-action').onclick = () => openResponse(t,'request_changes'); $('hold-action').onclick = () => openResponse(t,'hold_request');
+}
+function openResponse(t,intent) { responseItem = t; submissionId = crypto.randomUUID(); $('response-title').textContent = intent === 'preference' ? 'Record your preference' : intent === 'hold_request' ? 'Ask the owner to hold' : intent === 'request_changes' ? 'Request changes' : 'Send feedback'; $('response-scope').textContent = t.title; $('intent').value = intent; $('response-note').value = localStorage.getItem('topolo-studio-draft:' + t.id) || (intent === 'preference' ? 'My preferred direction is ' + (t.reviewImages[chosen]?.label || String(chosen + 1)) + '.' : ''); $('response-error').textContent = ''; $('response-dialog').showModal(); $('response-note').focus(); }
+async function submitResponse(event) { event.preventDefault(); const t = responseItem; if (!t) return; const note = $('response-note').value.trim(); if (!note) return; const button = $('submit-response'); button.disabled = true; $('response-error').textContent = ''; const response = {intent:$('intent').value,note}; if (response.intent === 'preference' && t.reviewImages?.length) response.asset = t.imageFiles?.[chosen]?.sha256 || t.reviewImages[chosen].sha256 || t.reviewImages[chosen].url; const payload = {requestId:submissionId,itemId:t.id,revision:inbox.revisions[t.id],response}; if(t.nativeTask) { await submitNativeResponse(t,response,submissionId); return; } try { if (!inbox.nonce || !payload.revision) throw Error('Local decision inbox unavailable. Keep this draft and refresh.'); const res = await fetch('/api/decisions',{method:'POST',headers:{'Content-Type':'application/json','X-Studio-Token':inbox.nonce},body:JSON.stringify(payload)}); const record = await res.json(); if (!res.ok) throw Error(record.error || 'Response not confirmed saved.'); if (!inbox.responses.some(r => r.id === record.id)) inbox.responses.push(record); localStorage.removeItem('topolo-studio-draft:' + t.id); $('response-dialog').close(); view = 'recorded'; selected = t.id; render(); toast('Response saved. Track delivery and owner progress in Your responses.'); refresh(); } catch(e) { $('response-error').textContent = e.message; } finally {button.disabled = false;} }
+function render() {
+  if (!data) return; for (const b of document.querySelectorAll('[data-view]')) b.setAttribute('aria-selected',String(b.dataset.view === view)); $('review-count').textContent = pendingDecisions().length; $('work-count').textContent = workItems().length; $('recorded-count').textContent = inbox.responses.length; $('updated').textContent = (data.activityConnection === 'live' ? 'Live activity · ' : 'Saved feed · ') + fmt(data.updatedAt); if (['releases','activity'].includes(view)) closeFinder(); $('response-bar').hidden = true; $('queue-toggle').hidden = ['releases','activity'].includes(view); $('search').placeholder = view === 'review' ? 'Find a decision…' : 'Find work…';
+  $('view-description').textContent = {review:'Decisions · Choices, approvals or information explicitly requested from you. Once you respond, track the result in Your responses.',work:'Work · Owner tasks, fixes, blockers and issue summaries. Items requesting your decision are in Decisions. This count is not the number of queued releases.',recorded:'Your responses · What you have answered, with delivery, acceptance and completion shown separately.',releases:'Releases · Saved environment evidence from the responsible owners.',activity:'Activity · Recorded changes across the connected feeds.'}[view];
+  $('decision-coverage').hidden = !['review','work'].includes(view) || data.decisionCoverage?.state !== 'incomplete';
+  $('decision-coverage').textContent = data.decisionCoverage?.summary || '';
+  renderReviewBacklog();
+  if (view === 'releases') { $('focus').replaceChildren(node('span','Delivery evidence','eyebrow'),node('h1','Release progress'),node('p','Saved evidence from the owning lanes. Each environment must be verified independently.','intro')); const wrap = node('div','','table-wrap'), table = node('table'), head = node('tr'); for(const label of ['Application','DEV','Staging','Production','Next']) head.append(node('th',label)); table.append(head); for(const r of data.releaseOverview || []) { const tr = node('tr'); for(const key of ['app','dev','staging','production','next']) tr.append(node('td',r[key] || 'Unverified')); table.append(tr); } wrap.append(table); $('focus').append(wrap); return; }
+  if (view === 'activity') { $('focus').replaceChildren(node('span',data.activityConnection === 'live' ? 'Live task timeline' : 'Saved timeline','eyebrow'),node('h1','Recent activity')); for(const c of (data.changes || []).slice(0,40)) { const row = node('article','','activity-row'); row.append(node('time',fmt(c.at)),node('div',c.title || 'Update'),node('p',c.detail || c.summary || '')); if(c.taskId) { const open = node('button','View task','secondary'); open.type='button'; open.onclick=()=>openTask(c.taskId); row.append(open); } $('focus').append(row); } return; }
+  const list = viewRows(); if (!list.some(t => t.id === selected)) selected = list[0]?.id || ''; $('queue-title').textContent = view === 'review' ? 'Find a decision' : view === 'recorded' ? 'Find a response' : 'Find work'; $('queue-toggle').textContent = view === 'review' ? 'Find decision' : view === 'recorded' ? 'Find response' : 'Find work'; renderPicker(); const t = list.find(t => t.id === selected); if(t) renderFocus(t); else { $('focus').replaceChildren(node('span',view === 'review' ? 'Published requests' : 'No matches','eyebrow'),node('h1',view === 'review' ? 'No published decisions waiting' : 'Nothing in this view'),node('p',view === 'review' ? 'No unanswered request matches this view. This does not establish that all work has been checked for missing decisions. Recorded responses stay in Your responses.' : 'Change the search or filters to see more work.','intro')); }
+}
+async function refresh() { if(refreshing) { refreshPending = true; return; } refreshing = true; try { let next = await savedJSON('updates.json'); next = await combineFeeds(next); let liveWork; try {liveWork = await savedJSON('/api/work');} catch {liveWork = {tasks:[],connection:'offline'};} window.nativeWork = liveWork; for (const task of liveWork.tasks || []) { const item = nativeTaskItem(task); if(task.state === 'completed') (next.completed ||= []).push(item); else (next.tasks ||= []).push(item); } let local; try {local = await savedJSON('/api/inbox');} catch {local = {responses:[],revisions:{}};} const fingerprint = JSON.stringify([next,local.responses]); data = next; inbox = local; if(initialHash) { const linked = allItems().find(t => t.id === initialHash); if(linked) { selected = linked.id; view = latestResponse(linked) ? 'recorded' : needsReview(linked) ? 'review' : 'work'; } initialHash = ''; } if(fingerprint !== lastFingerprint) { lastFingerprint = fingerprint; const value = $('lane').value; $('lane').replaceChildren(new Option('All lanes','')); const lanes = new Map(allItems().map(t => [t.laneId,t.laneTitle])); for(const [id,title] of lanes) if(id) $('lane').append(new Option(title || id,id)); $('lane').value = value; render(); } $('notice').hidden = false; $('notice').textContent = !inbox.nonce ? 'Viewer only: local response inbox is unavailable. Copy a reference to keep feedback attached to the right work.' : data.sourceNotice?.includes('unavailable') ? data.sourceNotice : liveWork.activityNotice ? liveWork.activityNotice : liveWork.connection === 'live' ? 'Task activity is live. Earlier saved-feedback delivery remains separate; follow each response for its acceptance and result.' : 'Native execution is disconnected. Saved task evidence is shown; no work is being retried.'; $('notice').hidden = !$('notice').textContent; } catch { $('notice').hidden = false; $('notice').textContent = 'Saved feeds unavailable. This view may be historical; no current status is inferred.'; } finally {refreshing = false; if(refreshPending) {refreshPending = false; void refresh();}} }
+const viewButtons = [...document.querySelectorAll('[data-view]')]; for(const [index,b] of viewButtons.entries()) { b.onclick = () => setView(b.dataset.view); b.onkeydown = e => { const target = e.key === 'ArrowRight' ? (index+1)%viewButtons.length : e.key === 'ArrowLeft' ? (index+viewButtons.length-1)%viewButtons.length : e.key === 'Home' ? 0 : e.key === 'End' ? viewButtons.length-1 : null; if(target !== null) {e.preventDefault();viewButtons[target].focus();viewButtons[target].click();} }; }
+for(const id of ['search','lane','state']) $(id).oninput = renderPicker;
+$('refresh').onclick = refresh; $('queue-toggle').onclick = openFinder; $('close-queue').onclick = closeFinder; $('queue').addEventListener('close', () => $('queue-toggle').setAttribute('aria-expanded','false')); $('queue').addEventListener('keydown', e => { if(e.key === 'Escape') { e.preventDefault(); e.stopPropagation(); closeFinder(); } });
+$('response-form').onsubmit = submitResponse; $('response-note').oninput = () => { if(responseItem) localStorage.setItem('topolo-studio-draft:' + responseItem.id,$('response-note').value); };
+for(const b of document.querySelectorAll('[data-close]')) b.onclick = () => $(b.dataset.close).close();
+document.addEventListener('keydown', e => { if(e.target.matches('input,textarea,select') || document.querySelector('dialog[open]')) return; if(['ArrowLeft','ArrowRight'].includes(e.key) && data && !['activity','releases'].includes(view)) { const list = viewRows(), i = list.findIndex(t => t.id === selected), target = i + (e.key === 'ArrowRight' ? 1:-1); if(list[target]) {e.preventDefault();selectItem(list[target]);} } });
+if(initialHash) selected = initialHash;
+refresh(); document.addEventListener('visibilitychange',() => {if(!document.hidden) refresh();});
+
+// Native task updates are pushed from the owning connection; no polling loop.
+function nativeTaskItem(task) {
+ const workers=(window.nativeWork?.workers || []).filter(w=>w.taskId===task.id);
+ const latest=workers[workers.length-1], choice=latest?.resolution?.resolved;
+ return {id:'task:'+task.id,nativeTask:task,originalRequest:{source:task.objective},kind:'task',title:({'pending-work-discovery':'Pending work review','retained-inventory-verification':'Work inventory check'})[task.route?.task?.type] || (({engineering:'Engineering',operations:'Operations',cicd:'CI/CD'})[task.channel] || 'Shared')+' task',application:({engineering:'Engineering',operations:'Operations',cicd:'CI/CD'})[task.channel] || task.channel,laneId:'native-work',laneTitle:'Task coordinators',owner:task.deliveryOwner,status:task.state,statusLabel:task.state.replaceAll('_',' '),summary:task.summary,next:task.verification?.summary || task.route?.acceptance || 'The coordinator will select the appropriate discipline.',needsHuman:task.state==='needs_input',closed:task.state==='completed',blocked:['blocked','unknown','failed'].includes(task.state),evidenceAtUTC:new Date(task.updatedAt*1000).toISOString(),evidence:(task.checkpoints || []).map(p=>p.path),context:['Task: '+task.id,'Phase: '+task.phase,choice?'Execution: '+choice.model+' / '+choice.effort:'Routing pending','Specialists are replaced after each task; progress and results remain here.',task.result?.summary || ''].join('\n\n'),links:[]};
+}
+let workRequestId;
+$('request-work').onclick=()=>{workRequestId=localStorage.getItem('topolo-work-request-id') || crypto.randomUUID();localStorage.setItem('topolo-work-request-id',workRequestId);$('work-objective').value=localStorage.getItem('topolo-work-draft') || '';$('work-error').textContent='';$('work-dialog').showModal();$('work-objective').focus();};
+$('work-objective').oninput=()=>localStorage.setItem('topolo-work-draft',$('work-objective').value);
+$('work-form').onsubmit=async event=>{event.preventDefault();$('work-submit').disabled=true;try{if(!window.nativeWork?.nonce || window.nativeWork.connection!=='live')throw Error('The native coordinator is disconnected. Your draft is retained.');const response=await fetch('/api/work',{method:'POST',headers:{'Content-Type':'application/json','X-Studio-Token':window.nativeWork.nonce},body:JSON.stringify({requestId:workRequestId,objective:$('work-objective').value.trim(),channel:$('work-channel').value,canonicalClaimId:null})});const result=await response.json();if(!response.ok)throw Error(result.error || 'Dispatch was not confirmed. Keep the same request identity.');localStorage.removeItem('topolo-work-request-id');localStorage.removeItem('topolo-work-draft');$('work-dialog').close();view='work';selected='task:'+result.task.id;await refresh();toast('Request recorded. Follow its progress in Work.');}catch(error){$('work-error').textContent=error.message;}finally{$('work-submit').disabled=false;}};
+const workEvents=new EventSource('/api/work/events');workEvents.onmessage=()=>refresh();
+const feedEvents=new EventSource('/api/feed/events');feedEvents.onmessage=()=>refresh();
+workEvents.onerror=()=>{if(window.nativeWork)window.nativeWork.connection='offline';};
+
+async function submitNativeResponse(item,response,requestId) {
+ try {const result=await fetch('/api/work/responses',{method:'POST',headers:{'Content-Type':'application/json','X-Studio-Token':window.nativeWork.nonce},body:JSON.stringify({requestId,taskId:item.nativeTask.id,revision:item.nativeTask.revision,intent:response.intent==='hold_request'?'hold':response.intent==='request_changes'?'request_changes':'continue',note:response.note})});const value=await result.json();if(!result.ok)throw Error(value.error || 'Response not accepted.');$('response-dialog').close();localStorage.removeItem('topolo-studio-draft:'+item.id);view='work';await refresh();toast('Response recorded on the task. Its next attempt uses fresh workers.');}catch(error){$('response-error').textContent=error.message;}finally{$('submit-response').disabled=false;}
+}

package/agent-packs/gui/studio_server.py

@@ -0,0 +1,355 @@
+#!/usr/bin/env python3
+"""Loopback-only saved-feed viewer and append-only human response inbox.
+
+Records responses and projects evidence-backed workflow receipts.
+No browser request can write receipts, dispatch agents or execute platform actions.
+"""
+import argparse
+import hashlib
+import hmac
+import json
+import os
+import re
+import secrets
+import select
+import tempfile
+import threading
+from datetime import datetime, timezone
+from http.server import SimpleHTTPRequestHandler, ThreadingHTTPServer
+from pathlib import Path
+from urllib.parse import urlsplit
+
+
+def digest(value):
+    return hashlib.sha256(json.dumps(value, sort_keys=True, separators=(",", ":")).encode()).hexdigest()
+
+
+def activity_topic(task_type, fallback):
+    """Use a bounded authored task type, excluding scope qualifiers and machine data."""
+    if not isinstance(task_type,str):return fallback
+    value=task_type.strip()
+    if not re.fullmatch(r'[A-Za-z][A-Za-z -]{2,119}',value):return fallback
+    value=re.sub(r'^read[ -]only\s+','',value,flags=re.I)
+    value=re.split(r'\s+(?:across|using|against|with|from)\s+',value,maxsplit=1,flags=re.I)[0]
+    words=value.replace('-', ' ').split()
+    if not 2<=len(words)<=7 or len(value)>54:return fallback
+    value=' '.join(words)
+    return value[0].upper()+value[1:]
+
+
+def activity_progress(summary):
+    """Accept one clear human progress sentence, never a technical proof dump."""
+    if not isinstance(summary,str):return None
+    value=re.sub(r'^Reported progress:\s*','',summary.strip())
+    # Validate the whole commentary before selecting its first sentence.
+    if len(value)>400 or re.search(r'[\n\r`/\\{}\[\]<>]|https?:|\b[0-9a-f]{12,}\b|\b\w*[0-9]\w*[0-9]\w*\b',value,re.I):return None
+    sentence=re.split(r'(?<=[.!?])\s+',value,maxsplit=1)[0]
+    if not 20<=len(sentence)<=180 or not re.fullmatch(r"[A-Za-z0-9 ,.;:!?()'’—-]+",sentence):return None
+    if not re.match(r"^(?:I(?:'m| am)?|We(?:'re| are)?|The specialist|The reviewer) (?:am |are )?(?:checking|reviewing|comparing|reconciling|verifying|reading|preparing|investigating|have |found |confirmed )",sentence,re.I):return None
+    return sentence
+
+
+def task_activity_text(task, event):
+    """Project only stated scope and lifecycle facts, never a raw model report."""
+    labels={'pending-work-discovery':'Pending work review',
+            'retained-inventory-verification':'Work inventory check'}
+    channel={'engineering':'Engineering', 'operations':'Operations', 'cicd':'CI/CD'}.get(task.get('channel'),'Shared')
+    task_type=task.get('route',{}).get('task',{}).get('type')
+    topic=labels.get(task_type) or activity_topic(task_type,channel+' task')
+    kind=event['kind']
+    summaries={
+        'requested':('Request received','Your request is recorded. A coordinator will choose the appropriate specialist.'),
+        'native-resume-verified':('Specialist started','A specialist is working on this task. Its findings will appear in the task details.'),
+        'worker-progress':('Progress reported','A specialist recorded a progress update. Open the task for the latest findings and next step.'),
+        'coordinator-released':('Specialist selected','The coordinator has selected a specialist. Work will continue within the recorded task scope.'),
+        'worker-released':('Result ready for review','The specialist has saved a result. Independent review is the next step.'),
+        'verification-recorded':('Review available','An independent review is available. Open the task for its findings, limitations and next steps.'),
+        'completion-blocked':('Work needs attention','The task could not be completed. Open its details for the recorded issue and next owner action.'),
+        'dispatch-blocked':('Work could not start','A specialist could not start. Open the task for the reason and next supported action.'),
+        'routing-checkpoint-reconciled':('Routing restored','The existing routing result has been restored. Work can continue without repeating that step.'),
+        'human-response':('Response saved','Your response is saved on the existing task. Follow the task for its next action.'),
+        'review-continuation-requested':('New review requested','Another review has been requested for the existing result. The original execution is preserved.'),
+        'recovery-required':('Work needs reconciliation','The outcome needs verification before work can continue. Open the task for the existing checkpoint and owner.'),
+    }
+    label,detail=summaries.get(kind,('Task updated','The task has a recorded update. Open its details for the current status and next action.'))
+    if kind=='native-resume-verified' and re.search(r'\breview\b',event.get('summary',''),re.I):
+        label,detail='Review started','An independent reviewer is checking the existing result. Findings will appear in the task details.'
+    if kind=='worker-progress':
+        commentary=activity_progress(event.get('summary',''))
+        if commentary:detail=commentary
+    if kind=='verification-recorded':
+        report=event.get('summary','')
+        scope=re.search(r'\b([0-9][0-9,]*) of ([0-9][0-9,]*) (?:retained )?(?:claims|records)\b',report,re.I)
+        if scope:
+            reviewed,total=(int(value.replace(',','')) for value in scope.groups())
+            if 0<reviewed<total:
+                unfinished=re.search(r'\b([0-9][0-9,]*) are unfinished\b',report,re.I)
+                count=int(unfinished[1].replace(',','')) if unfinished else None
+                outcome=(f'The review reports {count:,} unfinished items among {reviewed:,} of {total:,} work records.'
+                         if count is not None and 0<=count<=reviewed
+                         else f'The review covers {reviewed:,} of {total:,} work records.')
+                detail=outcome+' Review the remaining records before treating this as the full backlog.'
+    return topic+' · '+label,detail
+
+
+def project_task_activity(saved, snapshot):
+    tasks={task['id']:task for task in snapshot.get('tasks',[])}
+    changes={str(item.get('id',item.get('at','')+':'+item.get('title',''))):item for item in saved.get('changes',[])}
+    for event in snapshot.get('events',[]):
+        if event['kind'] in {'worker-reserved','checkpoint-saved','unstarted-worker-reconciled','task-context-bound'}:continue
+        task=tasks.get(event['taskId'],{});identity='native-task:'+event['taskId']+':'+str(event['sequence'])
+        title,detail=task_activity_text(task,event)
+        changes[identity]={'id':identity,'at':datetime.fromtimestamp(event['at'],timezone.utc).isoformat(),
+                          'title':title,'detail':detail,'fullDetail':event['summary'],
+                          'taskId':event['taskId'],'owner':task.get('deliveryOwner'),
+                          'taskState':task.get('state'),'source':'native-task-ledger'}
+    for event in snapshot.get('coordinatorObservations',[]):
+        changes[event['id']]={'id':event['id'],'at':datetime.fromtimestamp(event['at'],timezone.utc).isoformat(),
+            'title':event['owner']+(' · execution observed' if event['state']=='active' else ' · now idle'),
+            'detail':event['summary'],'owner':event['owner'],'source':'native-status-observation'}
+    ordered=sorted(changes.values(),key=lambda item:item.get('at',''),reverse=True)
+    return {**saved,'changes':ordered,'updatedAt':ordered[0]['at'] if ordered else saved.get('updatedAt'),
+            'activityConnection':snapshot.get('connection','offline')}
+
+
+def feed_events(root,inbox):
+    """OS filesystem notifications, not a timer or an agent polling loop."""
+    if not hasattr(select,'kqueue'):raise OSError('Native feed notifications require macOS kqueue')
+    roots=[root,root/'feeds',inbox,inbox.parent/'decision-studio-receipts']
+    descriptors={};queue=select.kqueue()
+    def sync():
+        paths={p for p in roots if p.is_dir()}
+        receipts=roots[-1]
+        if receipts.is_dir():paths.update(p for p in receipts.rglob('*') if p.is_dir() and not p.is_symlink())
+        for path in set(descriptors)-paths:os.close(descriptors.pop(path))
+        for path in paths-set(descriptors):
+            fd=os.open(path,os.O_RDONLY);descriptors[path]=fd
+            queue.control([select.kevent(fd,filter=select.KQ_FILTER_VNODE,flags=select.KQ_EV_ADD|select.KQ_EV_CLEAR,fflags=select.KQ_NOTE_WRITE|select.KQ_NOTE_RENAME|select.KQ_NOTE_DELETE)],0,0)
+    try:
+        sync()
+        yield {'connected':True,'source':'native-file-events'}
+        while True:
+            changes=queue.control(None,32,None)
+            if changes:
+                sync()
+                yield {'changed':True,'source':'native-file-events'}
+    finally:
+        queue.close()
+        for fd in descriptors.values():os.close(fd)
+
+
+def item_catalog(root):
+    base = json.loads((root / "updates.json").read_text())
+    result = {str(t["id"]): t for t in base.get("tasks", []) + base.get("completed", [])}
+    manifest = json.loads((root / "feeds.json").read_text())
+    for feed in manifest.get("feeds", []):
+        url = feed["url"]
+        if not re.fullmatch(r"feeds/[A-Za-z0-9_-]+\.json", url):
+            raise ValueError("Invalid local feed path")
+        lane = json.loads((root / url).read_text())
+        if lane.get("writerLane") != feed["laneId"]:
+            raise ValueError("Lane identity mismatch")
+        for item in lane.get("items", []):
+            result[feed["laneId"] + ":" + item["id"]] = {**item, "laneId": feed["laneId"]}
+            if feed.get("ownerThreadId"):
+                result[feed["laneId"] + ":" + item["id"]]["workflowOwner"] = {"threadId": feed["ownerThreadId"], "title": feed["ownerThreadTitle"]}
+    for item in result.values():
+        if not item.get("laneId"):
+            item["workflowOwner"] = {"threadId": "01a120cd-e25d-7302-9130-6bfb4e41d38c", "title": "Topolo Engineering"}
+    return result
+
+
+def response_workflow(record, item, receipts):
+    """Project trusted local coordinator receipts; never infer ACK from a send."""
+    route = record.get("workflowOwner") or item.get("workflowOwner")
+    result = {"state": "pending_delivery" if route else "route_unresolved", "owner": route,
+              "summary": "Saved; automatic workflow delivery is not connected yet.", "events": []}
+    if not route:
+        result["summary"] = "Saved; originating owner route needs verification."
+    source_hash = digest(record)
+    allowed = {"delivered", "accepted", "completed", "blocked", "rejected", "delivery_unknown"}
+    paths = sorted((receipts / record["id"]).glob("*.json"))
+    previous = None
+    for path in paths:
+        try:
+            event = json.loads(path.read_text())
+            if (event["responseId"] != record["id"] or event["responseHash"] != source_hash
+                    or not route or event["ownerThreadId"] != route["threadId"]
+                    or event["state"] not in allowed or not event.get("summary")
+                    or not event.get("atUTC") or not event.get("proof")):
+                raise ValueError("Receipt identity or evidence missing")
+            for proof in event["proof"]:
+                data = Path(proof["path"]).read_bytes()
+                if hashlib.sha256(data).hexdigest() != proof["sha256"]:
+                    raise ValueError("Receipt proof changed")
+            if event["state"] == "completed" and previous != "accepted":
+                raise ValueError("Completion requires prior positive owner acceptance")
+            result["events"].append({k: event[k] for k in ("state", "atUTC", "summary")})
+            result.update(state=event["state"], summary=event["summary"], atUTC=event["atUTC"])
+            previous = event["state"]
+        except (OSError, ValueError, KeyError, TypeError):
+            result.update(state="verification_needed", summary="Workflow receipt could not be verified. Completion is not confirmed.")
+            break
+    return result
+
+
+def make_handler(root, inbox, work=None):
+    nonce = secrets.token_urlsafe(32)
+    lock = threading.Lock()
+
+    class Handler(SimpleHTTPRequestHandler):
+        def __init__(self, *args, **kwargs):
+            super().__init__(*args, directory=str(root), **kwargs)
+
+        def end_headers(self):
+            self.send_header("Cache-Control", "no-store")
+            self.send_header("X-Content-Type-Options", "nosniff")
+            self.send_header("Content-Security-Policy", "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' https: data:; media-src 'self' https:; connect-src 'self'; frame-src 'none'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'")
+            super().end_headers()
+
+        def reply(self, status, value):
+            body = json.dumps(value).encode()
+            self.send_response(status)
+            self.send_header("Content-Type", "application/json; charset=utf-8")
+            self.send_header("Content-Length", str(len(body)))
+            self.end_headers()
+            self.wfile.write(body)
+
+        def valid_host(self):
+            return self.headers.get("Host") in {"127.0.0.1:" + str(self.server.server_port), "localhost:" + str(self.server.server_port)}
+
+        def do_GET(self):
+            if not self.valid_host():
+                return self.reply(403, {"error": "Local host required"})
+            path = urlsplit(self.path).path
+            if work and path == '/updates.json':
+                try:return self.reply(200,project_task_activity(json.loads((root/'updates.json').read_text()),work.snapshot()))
+                except Exception:return self.reply(503,{'error':'Current task activity is unavailable; saved history is not presented as live.'})
+            if work and path == '/api/work':
+                try:return self.reply(200,{**work.snapshot(),'nonce':nonce})
+                except Exception:return self.reply(503,{'error':'Work records are unavailable; existing checkpoints are preserved.'})
+            if path == '/api/feed/events':
+                if not hasattr(select,'kqueue'):return self.reply(503,{'error':'Native saved-feed notifications are unavailable on this platform.'})
+                try:
+                    events=feed_events(root,inbox);first=next(events)
+                    self.send_response(200);self.send_header('Content-Type','text/event-stream');self.end_headers()
+                    self.wfile.write(('data: '+json.dumps(first)+'\n\n').encode());self.wfile.flush()
+                    for event in events:
+                        self.wfile.write(('data: '+json.dumps(event)+'\n\n').encode());self.wfile.flush()
+                except (OSError,ValueError,StopIteration):pass
+                return
+            if work and path == '/api/work/events':
+                try:
+                    events=work.events();first=next(events)
+                    self.send_response(200);self.send_header('Content-Type','text/event-stream');self.end_headers()
+                    self.wfile.write(('data: '+json.dumps(first)+'\n\n').encode());self.wfile.flush()
+                    for event in events:
+                        self.wfile.write(('data: '+json.dumps(event)+'\n\n').encode());self.wfile.flush()
+                except (OSError,ValueError,StopIteration):pass
+                except Exception:pass
+                return
+            if path == "/api/inbox":
+                try:
+                    items = item_catalog(root)
+                    records = [json.loads(p.read_text()) for p in sorted(inbox.glob("*.json"))]
+                    return self.reply(200, {"nonce": nonce, "revisions": {k: digest(v) for k, v in items.items()}, "responses": [{**r, "workflow": response_workflow(r, items.get(r["itemId"], {}), inbox.parent / "decision-studio-receipts")} for r in records]})
+                except (OSError, ValueError, KeyError):
+                    return self.reply(503, {"error": "Saved feeds or decision inbox unavailable"})
+            if path.startswith("/api/"):
+                return self.reply(404, {"error": "Unknown local action"})
+            return super().do_GET()
+
+        def do_POST(self):
+            if work and urlsplit(self.path).path in {'/api/work','/api/work/responses'}:
+                if (not self.valid_host() or self.headers.get('Origin')!='http://'+self.headers.get('Host','') or
+                    not hmac.compare_digest(self.headers.get('X-Studio-Token',''),nonce)):
+                    return self.reply(403,{'error':'Open the local work panel before submitting.'})
+                try:
+                    size=int(self.headers.get('Content-Length','0'))
+                    if not 0<size<=32768 or self.headers.get_content_type()!='application/json':raise ValueError('Invalid work request')
+                    payload=json.loads(self.rfile.read(size));result=(work.respond(payload) if urlsplit(self.path).path.endswith('/responses') else work.submit(payload))
+                    return self.reply(202 if result['created'] else 200,result)
+                except (ValueError,KeyError,TypeError):return self.reply(400,{'error':'Invalid work request'})
+                except Exception as exc:return self.reply(409,{'error':str(exc)})
+            if urlsplit(self.path).path != "/api/decisions":
+                return self.reply(404, {"error": "Unknown local action"})
+            origin = self.headers.get("Origin")
+            expected = "http://" + self.headers.get("Host", "")
+            if not self.valid_host() or origin != expected or not hmac.compare_digest(self.headers.get("X-Studio-Token", ""), nonce):
+                return self.reply(403, {"error": "Open this local panel again before sending"})
+            try:
+                size = int(self.headers.get("Content-Length", "0"))
+                if not 0 < size <= 32768 or self.headers.get_content_type() != "application/json":
+                    return self.reply(400, {"error": "Invalid response payload"})
+                payload = json.loads(self.rfile.read(size))
+                rid = payload["requestId"]
+                if not isinstance(rid, str) or not re.fullmatch(r"[a-f0-9-]{36}", rid):
+                    raise ValueError("Invalid response identity")
+                response = payload["response"]
+                if not isinstance(response, dict) or set(response) - {"intent", "note", "asset"}:
+                    raise ValueError("Invalid response fields")
+                if response.get("intent") not in {"feedback", "preference", "request_changes", "hold_request"}:
+                    raise ValueError("Unsupported response")
+                note = response.get("note", "")
+                if not isinstance(note, str) or not 1 <= len(note.strip()) <= 8000:
+                    raise ValueError("Add a short response")
+                with lock:
+                    target = inbox / (rid + ".json")
+                    input_hash = digest(payload)
+                    if target.exists():
+                        existing = json.loads(target.read_text())
+                        if existing["inputHash"] != input_hash:
+                            return self.reply(409, {"error": "Response identity already used"})
+                        return self.reply(200, existing)
+                    catalog = item_catalog(root)
+                    item = catalog.get(payload["itemId"])
+                    if item is None or digest(item) != payload.get("revision"):
+                        return self.reply(409, {"error": "This item changed. Refresh and review it before sending."})
+                    asset = response.get("asset")
+                    images = item.get("imageFiles", []) + item.get("reviewImages", [])
+                    if asset is not None and asset not in [i.get("sha256", i.get("url")) for i in images]:
+                        raise ValueError("Selected preview is no longer available")
+                    record = {"schemaVersion": 1, "id": rid, "itemId": payload["itemId"], "title": item.get("title"), "sourceRevision": payload["revision"], "recordedAtUTC": datetime.now(timezone.utc).isoformat(), "status": "recorded_pending_owner_acceptance", "source": "local_decision_studio", "originThreadId": item.get("originThreadId") or item.get("originIntakeThreadId") or item.get("sourceThreadId"), "laneId": item.get("laneId"), "workflowOwner": item.get("workflowOwner"), "response": response, "inputHash": input_hash, "execution": "No agent dispatch, approval activation, publication or platform mutation performed"}
+                    inbox.mkdir(parents=True, exist_ok=True)
+                    # Publish a fully synced record without ever replacing another ID.
+                    fd, temporary = tempfile.mkstemp(prefix=".response-", suffix=".tmp", dir=inbox)
+                    try:
+                        with os.fdopen(fd, "w") as file:
+                            json.dump(record, file, indent=2)
+                            file.write("\n")
+                            file.flush()
+                            os.fsync(file.fileno())
+                        os.link(temporary, target)
+                        directory_fd = os.open(inbox, os.O_RDONLY)
+                        try:
+                            os.fsync(directory_fd)
+                        finally:
+                            os.close(directory_fd)
+                    finally:
+                        os.unlink(temporary)
+                    return self.reply(201, record)
+            except (ValueError, KeyError, TypeError):
+                return self.reply(400, {"error": "Invalid response. Refresh and try again."})
+            except OSError:
+                return self.reply(503, {"error": "Response was not confirmed saved. Keep this draft and retry the same response."})
+
+        def log_message(self, *args):
+            pass
+
+    return Handler
+
+
+if __name__ == "__main__":
+    parser = argparse.ArgumentParser()
+    parser.add_argument("--port", type=int, default=8769)
+    parser.add_argument("--root", type=Path, default=Path(__file__).resolve().parent)
+    parser.add_argument("--store", type=Path, default=Path.home()/"AgentPacks")
+    parser.add_argument("--inbox", type=Path)
+    args = parser.parse_args()
+    import sys
+    sys.path.insert(0,str(Path(__file__).resolve().parents[1]/'src'))
+    from topolo_agent_pack.work_gui import Client
+    work=Client(args.store) if (args.store/'work/config.json').is_file() else None
+    server = ThreadingHTTPServer(("127.0.0.1", args.port), make_handler(args.root.resolve(), args.inbox or args.store/'work/decision-inbox', work))
+    print("Topolo Decision Studio on loopback port " + str(server.server_port), flush=True)
+    server.serve_forever()

package/agent-packs/roles/cicd/CLAUDE.md

@@ -0,0 +1,24 @@
+# Topolo CI/CD
+
+Own human-facing coordination of CI/CD throughput across development, staging and production. Keep the front door available: dispatch bounded diagnostic or implementation tasks to temporary specialists where the supported mechanism is available; checkpoint and retire those workers after verification. Do not create a permanent worker roster or substitute chat reporting loops for missing dispatch functionality.
+
+## Release-controller operating context
+The controller is the restricted internal service in Topolo-io/TopoloReleaseController, separate from the public application registry and Deploy Orchestrator. Read context/release-controller.md before routing or diagnosis: it is the selected immutable operating runbook, not task history. Current controller access, fleet endpoints and exact intent/job checkpoints belong in the selected task context. Dispatch immediate read-only diagnostics under the existing request; do not ask the human to re-explain the controller or approve an ordinary read. Use the existing broker, preserve owners and record precise missing observer access rather than guessing hosts or creating duplicate work. The submission gateway and native authority observer expose different read operations; follow the bound runbook. Mutations retain their existing release, review and effect gates.
+
+## Durable context
+
+Topolo Agent stores reusable specialization only. Load task objectives, current ownership, release intent identities, decisions, outstanding effects and evidence from existing Topolo Docs/Bytes records at assignment time. Publish meaningful progress and decisions to the canonical task and engineering GUI. Chat history and local paths are not task authority. If the cloud packet is missing, report the precise continuity gap and reconcile existing records before creating or replaying work.
+
+## Release practice
+
+Use supported release-controller and Topolo MCP/CLI interfaces. Discover the current authority, runner capabilities and repository topology before acting. Read release ledgers through read-only observers for diagnosis. Existing controller ownership, pauses, leases, signed custody, unknown provider effects and recovery holds remain binding. Never start a competing controller, kill an owner's job, clear a hold or blindly replay a mutation to improve apparent throughput.
+
+Reconcile queue age, ready versus blocked work, dependency critical paths, admission limits, runner compatibility, actual utilisation, failed validations, stale evidence and environment promotion gates. Distinguish compute shortage from scheduler, database locking, provenance, review and recovery bottlenecks. Verify each host with actual accepted job evidence; a healthy service or configured repository list is insufficient.
+
+Advance eligible work through DEV -> STG -> PROD under the existing release process. Bind every stage to the exact source SHA, artifact and release intent. Source validation, publication, installation, deployment and verified production behaviour are separate outcomes. Implement controller or infrastructure fixes only within explicitly assigned engineering scope and the applicable release procedure. Do not bypass validation to drain the queue.
+
+## Efficiency
+
+Use low effort for routine queue reconciliation and deterministic status checks, medium for ordinary pipeline diagnosis or contained fixes, and higher reasoning for concurrency, recovery, provenance, security or ambiguous production effects. Use the lightest available model suitable for very simple bounded tasks. Verify actual native model and effort settings; instructions alone do not configure them.
+
+Report completed releases, throughput changes, material blockers and decisions concisely. Record task identity, owner, outcome, next action and evidence once in canonical records. Do not create monitoring schedules or polling loops without explicit authorization.

package/agent-packs/specializations/cicd--cicd.json

@@ -0,0 +1,5 @@
+{
+  "format": "topolo-role-specialization-v1",
+  "logicalId": "intakes/cicd",
+  "instructions": "# Topolo CI/CD\n\n## Specialization\nCoordinate CI/CD requests only. Record the human request once, dispatch a suitable temporary task worker through the task broker, then return idle. Never SSH to hosts, clean storage, edit source, manage a train or deploy from the front door. A routing-only worker returns the supplied routing JSON instead of submitting another task.\n\n## Release-controller operating context\nThe controller is the restricted internal service in Topolo-io/TopoloReleaseController, separate from the public application registry and Deploy Orchestrator. Read context/release-controller.md before routing or diagnosis: it is the selected immutable operating runbook, not task history. Current controller access, fleet endpoints and exact intent/job checkpoints belong in the selected task context. Dispatch immediate read-only diagnostics under the existing request; do not ask the human to re-explain the controller or approve an ordinary read. Use the existing broker, preserve owners and record precise missing observer access rather than guessing hosts or creating duplicate work. The submission gateway and native authority observer expose different read operations; follow the bound runbook. Mutations retain their existing release, review and effect gates.\n\n## Required inputs\nThe existing task identity, exact scope, original owner, current controller intent/job and checkpoint references, applicable authority and acceptance. Obtain only the relevant Docs/Bytes packet. A missing live release observer is a specific blocker; historical host names or health alone do not establish current queue activity.\n\n## Working method\nFirst reconcile existing intent and effect identities. Read current accepted controller/job/runner evidence, distinguish eligibility from capacity and source preparation from release. Act only within the assigned phase. Preserve exact SHA/artifact custody through DEV, STG and PROD. Verify actual outcomes and publish one meaningful state change to the same task/GUI.\n\n## Result and boundaries\nExecute only the bounded assignment, then return its checkpoint and stop. Do not spawn other agents, resume old workers, create schedules or send peer messages. Topolo Agent contains reusable specialization only. Load current task context from the referenced Topolo Docs/Bytes packet, preserving canonical task, intent, owner and effect identities. An empty local workspace grants no permission to repeat work. Local task packets are disposable caches. Refuse missing context or unresolved effects; never silently invent completion. Record outcome, next action and evidence in the existing task/GUI through supported mechanisms. A missing cloud or feed capability is a blocker, not permission to substitute chat history. No production mutation is authorized by this definition alone."
+}