@ucsandman/legcli 0.9.0 → 0.11.0

package/src/audit.mjs

@@ -0,0 +1,118 @@
+// audit — one list of who did what on this board, across every terminal and
+// every card, newest first.
+//
+// The ledger already names an actor on every event; until now you could only
+// read that one session or one card at a time, which is no use when the
+// question is "who landed that?" or "who handed my terminal off last night".
+// Nothing new is recorded here: this reads what is already on disk.
+//
+// Owner only (src/server.mjs): the trail names repositories and people.
+import { existsSync, readdirSync, readFileSync } from 'node:fs'
+import { join } from 'node:path'
+import { home } from './store.mjs'
+import { listSessions, readEvents as readSessionEvents } from './sessions.mjs'
+import { readEvents as readCardEvents } from './ledger.mjs'
+
+// The types worth a line in an audit: something a person or an agent DID, not
+// the running commentary. A `status` line is commentary; a hand-off is not.
+export const AUDITED = [
+  'handoff', 'handoff_requested', 'handed_off', 'landed', 'land', 'bounced', 'killed',
+  'approved', 'approval_needed', 'reassigned', 'paused', 'resumed', 'ended', 'done',
+  'failed', 'trust', 'harness', 'worktree', 'station_done', 'leg_started', 'rerun',
+]
+
+export const ACTOR_KINDS = ['human', 'agent', 'leg']
+
+function actorOf(ev) {
+  // a card event carries a structured actor; a session event carries `by`
+  if (ev.actor && typeof ev.actor === 'object') {
+    if (ev.actor.type === 'human') return { kind: 'human', name: String(ev.actor.id ?? 'unknown') }
+    if (ev.actor.type === 'agent') return { kind: 'agent', name: String(ev.actor.adapter ?? 'agent') }
+    return { kind: 'leg', name: 'leg' }
+  }
+  if (ev.by) return { kind: 'human', name: String(ev.by) }
+  return { kind: 'leg', name: 'leg' }
+}
+
+function cardIds() {
+  const root = join(home(), 'cards')
+  if (!existsSync(root)) return []
+  try { return readdirSync(root).filter((d) => existsSync(join(root, d, 'card.json'))) } catch { return [] }
+}
+
+function cardMeta(id) {
+  try { return JSON.parse(readFileSync(join(home(), 'cards', id, 'card.json'), 'utf8')) } catch { return null }
+}
+
+// → { entries: [...], truncated, scanned: { sessions, cards, events } }
+// `scanned` is on the record deliberately: an empty audit from a board that
+// looked at nothing reads exactly like a quiet week, and the two are not the
+// same thing.
+export function auditTrail({ limit = 200, since = null, who = null, kind = null, types = null } = {}) {
+  const sinceMs = since ? Date.parse(since) : null
+  const wanted = Array.isArray(types) && types.length ? new Set(types) : new Set(AUDITED)
+  const rows = []
+  let events = 0
+
+  const sessions = listSessions()
+  for (const s of sessions) {
+    for (const ev of readSessionEvents(s.session_id)) {
+      events++
+      if (!wanted.has(ev.type)) continue
+      const at = Date.parse(ev.ts)
+      if (sinceMs && Number.isFinite(at) && at < sinceMs) continue
+      const actor = actorOf(ev)
+      rows.push({
+        at: ev.ts,
+        who: actor.name,
+        kind: actor.kind,
+        what: ev.type,
+        summary: String(ev.summary ?? ''),
+        where: 'terminal',
+        id: s.session_id,
+        agent: s.agent ?? null,
+        repo: s.repo ?? null,
+        branch: s.branch ?? null,
+      })
+    }
+  }
+
+  const ids = cardIds()
+  for (const id of ids) {
+    const card = cardMeta(id)
+    for (const ev of readCardEvents(id)) {
+      events++
+      if (!wanted.has(ev.type)) continue
+      const at = Date.parse(ev.ts)
+      if (sinceMs && Number.isFinite(at) && at < sinceMs) continue
+      const actor = actorOf(ev)
+      rows.push({
+        at: ev.ts,
+        who: actor.name,
+        kind: actor.kind,
+        what: ev.type,
+        summary: String(ev.summary ?? ''),
+        where: 'card',
+        id,
+        agent: ev.actor?.type === 'agent' ? ev.actor.adapter : null,
+        repo: card?.repo ?? null,
+        branch: card?.branch ?? null,
+      })
+    }
+  }
+
+  let filtered = rows
+  if (who) filtered = filtered.filter((r) => r.who.toLowerCase() === String(who).toLowerCase())
+  if (kind) filtered = filtered.filter((r) => r.kind === kind)
+  filtered.sort((a, b) => (Date.parse(b.at) || 0) - (Date.parse(a.at) || 0))
+  const capped = filtered.slice(0, Math.max(1, Math.min(limit, 1000)))
+
+  return {
+    entries: capped,
+    truncated: filtered.length > capped.length,
+    matched: filtered.length,
+    // L2: a verdict carries the volume it processed
+    scanned: { sessions: sessions.length, cards: ids.length, events },
+    people: [...new Set(rows.filter((r) => r.kind === 'human').map((r) => r.who))].sort(),
+  }
+}

package/src/board/audit.js

@@ -0,0 +1,123 @@
+// Audit trail: who did what, across every terminal and every card on this
+// board. Data: /api/audit, which is owner-only — the trail names repositories
+// and the people on the roster.
+//
+// It loads when the reader asks, never on a board render: the trail reads every
+// session's events and every card's ledger, and that is not work to do on a
+// timer behind a panel nobody has opened. Like the history cell, nothing here
+// arrives over SSE (DESIGN.md rule 3: the live terminals lane is the only live
+// region).
+//
+// `el`, `api`, `getToken`, `ago` and `whenAgo` are copied from sessions.js,
+// which cannot export from its IIFE. The time grammar is sessions.js's: a
+// change to ago() there is a change here in the same commit.
+(function () {
+  'use strict'
+
+  function getToken() { return localStorage.getItem('legToken') || localStorage.getItem('batonToken') || '' }
+  async function api(path, opts = {}) {
+    const headers = { 'Content-Type': 'application/json' }
+    const token = getToken()
+    if (token) headers.Authorization = `Bearer ${token}`
+    const r = await fetch(path, { method: opts.method || 'GET', headers, body: opts.body ? JSON.stringify(opts.body) : undefined })
+    const data = await r.json().catch(() => ({}))
+    if (!r.ok) throw new Error(data.error || `${r.status} ${r.statusText}`)
+    return data
+  }
+  function el(tag, attrs, children) {
+    const n = document.createElement(tag)
+    for (const [k, v] of Object.entries(attrs || {})) { if (v === null || v === undefined) continue; if (k === 'class') n.className = v; else n.setAttribute(k, v) }
+    for (const c of children || []) { if (c === null || c === undefined) continue; n.appendChild(typeof c === 'string' ? document.createTextNode(c) : c) }
+    return n
+  }
+  function ago(ms) {
+    const s = Math.max(0, Math.floor(ms / 1000))
+    if (s < 60) return `${s}s`
+    const m = Math.floor(s / 60)
+    if (m < 60) return `${m}m`
+    const h = Math.floor(m / 60)
+    if (h < 48) return `${h}h${m % 60 ? ` ${m % 60}m` : ''}`
+    const d = Math.floor(h / 24)
+    return `${d}d${h % 24 ? ` ${h % 24}h` : ''}`
+  }
+  function whenAgo(ts) {
+    const t = Date.parse(ts)
+    return Number.isFinite(t) ? `${ago(Date.now() - t)} ago` : ''
+  }
+  function clockAt(ms) {
+    const d = new Date(ms)
+    if (!Number.isFinite(d.getTime())) return ''
+    return d.toLocaleString(undefined, { month: 'short', day: 'numeric', hour: '2-digit', minute: '2-digit', hour12: false })
+  }
+
+  const root = document.getElementById('audit')
+  if (!root) return
+  const whoSel = document.getElementById('audit-who')
+  const kindSel = document.getElementById('audit-kind')
+  const loadBtn = document.getElementById('audit-load')
+  const meta = document.getElementById('audit-meta')
+  const list = document.getElementById('audit-list')
+  let knownPeople = null
+
+  // A guest or an operator never sees this panel; the fieldset stays hidden
+  // until /api/audit answers, so a 403 leaves nothing on the page to click.
+  async function reveal() {
+    try {
+      const r = await api('/api/audit?limit=1')
+      root.hidden = false
+      knownPeople = r.people || []
+      fillPeople()
+    } catch { root.hidden = true }
+  }
+
+  function fillPeople() {
+    if (!knownPeople) return
+    const current = whoSel.value
+    while (whoSel.options.length > 1) whoSel.remove(1)
+    for (const p of knownPeople) whoSel.appendChild(el('option', { value: p }, [p]))
+    whoSel.value = current
+  }
+
+  function row(e) {
+    const line = el('div', { class: 'audit-row' })
+    line.appendChild(el('span', { class: 'audit-when', title: e.at }, [clockAt(Date.parse(e.at))]))
+    line.appendChild(el('span', { class: `chip chip-id-${e.kind === 'human' ? 'human' : (e.agent || 'leg')}` }, [e.who]))
+    line.appendChild(el('span', { class: 'audit-what' }, [e.what.replace(/_/g, ' ')]))
+    line.appendChild(el('span', { class: 'audit-summary' }, [e.summary || '']))
+    const where = e.where === 'card' ? `card ${e.id}` : `terminal ${String(e.id).split('-').pop()}`
+    line.appendChild(el('span', { class: 'chip' }, [where]))
+    if (e.repo) line.appendChild(el('span', { class: 'chip' }, [String(e.repo).split(/[\\/]/).pop() + (e.branch ? `@${e.branch}` : '')]))
+    line.appendChild(el('span', { class: 'audit-ago' }, [whenAgo(e.at)]))
+    return line
+  }
+
+  async function load() {
+    loadBtn.disabled = true
+    meta.textContent = 'reading every terminal and every card…'
+    list.replaceChildren()
+    try {
+      const q = new URLSearchParams({ limit: '200' })
+      if (whoSel.value) q.set('who', whoSel.value)
+      if (kindSel.value) q.set('kind', kindSel.value)
+      const r = await api(`/api/audit?${q}`)
+      knownPeople = r.people || knownPeople
+      fillPeople()
+      // L2: the verdict carries the volume it processed, so an empty trail from
+      // a board that looked at nothing does not read like a quiet week.
+      const scanned = `${r.scanned.sessions} terminal${r.scanned.sessions === 1 ? '' : 's'} and ${r.scanned.cards} card${r.scanned.cards === 1 ? '' : 's'}, ${r.scanned.events} events read`
+      meta.textContent = r.entries.length
+        ? `${r.matched} action${r.matched === 1 ? '' : 's'}${r.truncated ? `, newest ${r.entries.length} shown` : ''} — ${scanned}`
+        : `nothing matched — ${scanned}`
+      for (const e of r.entries) list.appendChild(row(e))
+    } catch (err) {
+      meta.textContent = err.message
+    } finally {
+      loadBtn.disabled = false
+    }
+  }
+
+  loadBtn.addEventListener('click', load)
+  whoSel.addEventListener('change', load)
+  kindSel.addEventListener('change', load)
+  reveal()
+})()

package/src/board/board.css

@@ -130,6 +130,7 @@
   --id-codex: #69DBBA;   /* oklch(0.815 0.115 172) cool green */
   --id-agy: #CC97F3;     /* oklch(0.760 0.140 310) violet, 46 degrees clear of the accent */
   --id-grok: #70B8FF;    /* oklch(0.750 0.130 240) azure blue */
+  --id-copilot: #F0A3B8; /* oklch(0.790 0.110 5) rose; lists and reads, never runs */
   --id-fake: #A0A6AE;    /* oklch(0.720 0.010 258) the scripted adapter, neutral in hue */
 
   /* type scale. Fixed rem, range 13 to 52. The old board ran 13 to 21, which
@@ -222,6 +223,7 @@ code { font-family: var(--mono); font-size: 0.94em; }
 .dot.id-codex { background: var(--id-codex); }
 .dot.id-agy { background: var(--id-agy); }
 .dot.id-grok { background: var(--id-grok); }
+.dot.id-copilot { background: var(--id-copilot); }
 
 /* ---- logins ------------------------------------------------------------- */
 .logins { display: grid; gap: 20px; }
@@ -323,6 +325,7 @@ code { font-family: var(--mono); font-size: 0.94em; }
 .chip-id-codex { color: var(--id-codex); }
 .chip-id-agy { color: var(--id-agy); }
 .chip-id-grok { color: var(--id-grok); }
+.chip-id-copilot { color: var(--id-copilot); }
 .chip-id-fake { color: var(--id-fake); }
 .chip-state-ok { color: var(--ok-text); }
 .chip-state-warn { color: var(--warn-text); }
@@ -370,7 +373,7 @@ code { font-family: var(--mono); font-size: 0.94em; }
 .drawer-msg-when { font-size: var(--t--1); color: var(--text-3); font-family: var(--mono); }
 
 /* ---- ledger: on the ground, unpanelled --------------------------------- */
-.ledger { margin-top: 56px; display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 40px; padding-top: 32px; border-top: 1px solid var(--edge); }
+.ledger { margin-top: 56px; display: grid; grid-template-columns: repeat(4, minmax(0, 1fr)); gap: 40px; padding-top: 32px; border-top: 1px solid var(--edge); }
 .ledger-cell h3 { font-size: var(--t-2); font-weight: var(--w-head); letter-spacing: -.012em; }
 .ledger-cell .region-meta { margin-top: 6px; font-size: var(--t-0); color: var(--text-3); }
 .ledger-actions { margin-top: 18px; display: flex; gap: 10px; flex-wrap: wrap; }
@@ -384,6 +387,38 @@ code { font-family: var(--mono); font-size: 0.94em; }
 .line-main { color: var(--text); }
 .line-meta { color: var(--text-2); }
 .line-when { color: var(--text-3); text-align: right; }
+/* history: the conversations every agent keeps, one row each, opening in place */
+.history-filters { display: grid; grid-template-columns: auto minmax(0, 1fr); gap: 10px 14px; align-items: center; margin: 4px 0 18px; max-width: 64ch; }
+.history-filters label { font-size: var(--t-0); font-weight: var(--w-head); color: var(--text-2); }
+.history-filters label:has(input[type="checkbox"]) { grid-column: 1 / -1; display: flex; align-items: center; gap: 8px; font-weight: var(--w-text); }
+/* Audit trail (Settings). Same grammar as the history rows: a flat list with
+   hairline separators, the time on the left, the actor as a chip. */
+.audit { border: 0; padding: 0; margin: 22px 0 0; }
+.audit legend { font-size: var(--t-0); font-weight: var(--w-head); color: var(--text-2); padding: 0; }
+.audit-filters { display: flex; flex-wrap: wrap; gap: 10px 14px; align-items: center; margin: 10px 0 14px; }
+.audit-filters label { font-size: var(--t-0); font-weight: var(--w-head); color: var(--text-2); }
+.audit-list { display: block; }
+.audit-row { display: flex; flex-wrap: wrap; gap: 6px 10px; align-items: baseline; padding: 10px 0; font-size: var(--t-0); }
+.audit-row + .audit-row { border-top: 1px solid var(--line); }
+.audit-when { color: var(--text-3); font-variant-numeric: tabular-nums; min-width: 12ch; }
+.audit-what { font-weight: var(--w-head); }
+.audit-summary { color: var(--text-2); flex: 1 1 46ch; min-width: 0; overflow-wrap: anywhere; }
+.audit-ago { color: var(--text-3); margin-left: auto; }
+@media (max-width: 640px) { .audit-ago { margin-left: 0; } }
+
+.history-list { display: block; }
+.history-row { display: grid; grid-template-columns: minmax(0, 1fr) auto; gap: 6px 20px; align-items: baseline; padding: 12px 0; font-size: var(--t-0); }
+.history-row + .history-row, .history-row + .history-detail, .history-detail + .history-row { border-top: 1px solid var(--line); }
+.history-title { display: block; width: 100%; text-align: left; background: none; border: 0; padding: 0; font: inherit; color: var(--text); cursor: pointer; line-height: 1.4; }
+.history-title:hover { color: var(--accent-hi); }
+.history-title:focus-visible { outline: 2px solid var(--focus); outline-offset: 3px; border-radius: var(--r-control); }
+.history-register { display: flex; align-items: baseline; gap: 14px; flex-wrap: wrap; font-size: var(--t--1); color: var(--text-3); }
+.history-when { color: var(--text-3); white-space: nowrap; font-size: var(--t--1); }
+.history-detail { padding: 14px 0 20px; }
+.history-detail .kv { margin-bottom: 14px; }
+.history-command { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; margin-top: 12px; font-size: var(--t-0); }
+.history-empty { font-size: var(--t-0); color: var(--text-3); padding: 12px 0; }
+
 .group-head { display: flex; align-items: baseline; gap: 10px; margin-top: 24px; margin-bottom: 4px; font-size: var(--t-0); font-weight: var(--w-head); color: var(--text-2); }
 .group-head:first-child { margin-top: 0; }
 .group-head span { font-weight: var(--w-text); color: var(--text-3); }
@@ -556,6 +591,8 @@ dialog::backdrop { background: rgba(0,0,0,.6); }
   .kv { grid-template-columns: 1fr; gap: 4px 0; }
   .kv-val + .kv-key { margin-top: 12px; }
   .ledger { grid-template-columns: 1fr; gap: 32px; margin-top: 40px; }
+  .history-row { grid-template-columns: 1fr; }
+  .history-filters { grid-template-columns: 1fr; }
   .line { grid-template-columns: 1fr auto; gap: 6px 14px; }
   .line-main { grid-column: 1 / -1; }
   .line-meta { grid-column: 1; }

package/src/board/board.js

@@ -292,6 +292,15 @@
       : `${s === 'reconnecting' ? 'Reconnecting' : 'Connecting'} to Leg on ${state.bind}.`
   }
 
+  // sessions.js owns the terminals region and listens for `leg:sessions`.
+  // `baton:sessions` is the old name, still emitted for anything outside this
+  // page that listens for it; nothing in the board may listen for both, because
+  // each listener rebuilds the whole grid.
+  function publishSessions(detail) {
+    window.dispatchEvent(new CustomEvent('leg:sessions', { detail }))
+    window.dispatchEvent(new CustomEvent('baton:sessions', { detail }))
+  }
+
   function connectSse() {
     if (state.es) { try { state.es.close() } catch { /* ignore */ } }
     const request = ++state.sseRequest
@@ -312,9 +321,12 @@
       // nothing between the drop and this hello was replayed: an open detail
       // region is as old as the gap
       scheduleDrawerRefresh()
-      if (data.sessions) window.dispatchEvent(new CustomEvent('leg:sessions', { detail: data.sessions })); window.dispatchEvent(new CustomEvent('baton:sessions', { detail: data.sessions }));
+      if (data.sessions) publishSessions(data.sessions)
     })
-    es.addEventListener('sessions', (e) => { if (state.es === es && request === state.sseRequest) window.dispatchEvent(new CustomEvent('leg:sessions', { detail: JSON.parse(e.data) })); window.dispatchEvent(new CustomEvent('baton:sessions', { detail: JSON.parse(e.data) })); })
+    // one parse, one publish, and both inside the staleness guard: the missing
+    // braces meant a superseded EventSource still drove a full rebuild, and the
+    // payload (a quarter of a megabyte) was parsed twice to do it
+    es.addEventListener('sessions', (e) => { if (state.es === es && request === state.sseRequest) publishSessions(JSON.parse(e.data)) })
     es.addEventListener('card', (e) => { if (state.es === es && request === state.sseRequest) upsertCard(JSON.parse(e.data)) })
     es.addEventListener('removed', (e) => { if (state.es === es && request === state.sseRequest) dropCard(JSON.parse(e.data).card_id) })
     es.addEventListener('event', (e) => { if (state.es === es && request === state.sseRequest) onLedgerEvent(JSON.parse(e.data)) })