agentic-workflow-manager 8.2.1 → 8.4.0

package/dist/src/core/dashboard/render-html.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderDashboardHtml = renderDashboardHtml;
+const styles_1 = require("./styles");
+const validate_1 = require("./validate");
+const CSP = "default-src 'none'; style-src 'unsafe-inline'; img-src data:; script-src 'none'; connect-src 'none'; frame-src 'none'; object-src 'none'; base-uri 'none'; form-action 'none'";
+const SECTION_TITLES = { machine: 'Machine / install', project: 'Project readiness', planning: 'Design / planning', execution: 'Execution', qa: 'QA', retro: 'Retro', history: 'Final / history' };
+const STATE_TEXT = { ok: 'OK', attention: 'Attention', missing: 'Missing', unavailable: 'Unavailable', not_applicable: 'Not applicable' };
+const STATE_GLYPH = { ok: '●', attention: '▲', missing: '×', unavailable: '⊘', not_applicable: '—' };
+function escapeHtml(value) { return value.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&#39;'); }
+function sectionHtml(section, supplement = '') {
+    const title = SECTION_TITLES[section.id];
+    const availability = section.availability === 'available' ? '' : `<p class="availability ${section.availability}">⊘ Source ${escapeHtml(section.availability.replace('_', ' '))}</p>`;
+    const rows = section.items.length === 0 ? '<p class="empty">No observations reported.</p>' : `<table><thead><tr><th scope="col">Observation</th><th scope="col">State</th><th scope="col">Detail</th><th scope="col">Remediation</th></tr></thead><tbody>${section.items.map((item) => `<tr><td data-label="Observation">${escapeHtml(item.label)}</td><td data-label="State"><span class="state ${item.state}">${STATE_GLYPH[item.state]} ${STATE_TEXT[item.state]}</span></td><td data-label="Detail">${item.detail ? escapeHtml(item.detail) : '—'}</td><td data-label="Remediation">${item.remediation ? `<code>${escapeHtml(item.remediation)}</code>` : '—'}</td></tr>`).join('')}</tbody></table>`;
+    return `<section id="${section.id}" aria-label="${title}"><header><h2>${title}</h2><span class="eyebrow">${escapeHtml(section.availability.replace('_', ' '))}</span></header><div class="section-body">${availability}${supplement}${rows}</div></section>`;
+}
+function diagnosticCards(items, attribute) {
+    const labels = ['installation', 'sensors', 'permissions'];
+    const cards = items.slice(0, 3).map((item, index) => `<li data-diagnostic-card="${labels[index] ?? 'diagnostic'}"><span class="state ${item.state}">${STATE_GLYPH[item.state]} ${STATE_TEXT[item.state]}</span><strong>${escapeHtml(item.label)}</strong><span>${item.detail ? escapeHtml(item.detail) : 'No additional detail'}</span></li>`).join('') || '<li><span class="state not_applicable">— Not applicable</span><strong>No machine observations</strong><span>Machine diagnostics are not available.</span></li>';
+    if (attribute === 'data-machine-diagnostics')
+        return `<section data-machine-diagnostics aria-labelledby="machine-diagnostics-heading"><header><h2 id="machine-diagnostics-heading">Machine diagnostics</h2></header><div class="section-body"><ul class="diagnostic-grid">${cards}</ul></div></section>`;
+    return `<div class="machine-preparation-strip" data-machine-preparation role="group" aria-labelledby="machine-preparation-heading"><h3 id="machine-preparation-heading">Preparación de máquina</h3><ul class="diagnostic-grid">${cards}</ul></div>`;
+}
+function machineBento(items) {
+    const names = ['Instalación', 'Sensores globales', 'Persistencia'];
+    return `<div class="machine-bento" data-machine-bento>${names.map((name, index) => {
+        const item = items[index];
+        return `<article class="bento-card"><h2>${name}</h2>${item ? `<span class="state ${item.state}">${STATE_GLYPH[item.state]} ${STATE_TEXT[item.state]}</span><strong>${escapeHtml(item.label)}</strong><span>${item.detail ? escapeHtml(item.detail) : 'Sin detalle adicional'}</span>` : '<span class="state unavailable">⊘ Unavailable</span><span>Sin observación disponible</span>'}</article>`;
+    }).join('')}</div>`;
+}
+function nextActions(snapshot) {
+    const actionable = snapshot.sections.flatMap((section) => section.items.filter((item) => item.remediation)).slice(0, 2);
+    const rows = [...actionable, { id: 'setup.initialize', label: 'Inicializar proyecto', state: 'attention', remediation: 'awm init' }];
+    return `<div data-next-actions role="group" aria-labelledby="next-actions-heading"><h2 id="next-actions-heading">Siguiente acción requerida</h2><ol class="action-list">${rows.map((item) => `<li data-next-action="${escapeHtml(item.id)}"><span class="state ${item.state}">${STATE_GLYPH[item.state]} ${STATE_TEXT[item.state]}</span><span>${escapeHtml(item.label)}</span><code>${item.remediation}</code><button type="button" disabled aria-describedby="static-controls-note">Copy command (static)</button></li>`).join('')}</ol></div>`;
+}
+function privacyAndActions(snapshot) {
+    return `<section data-privacy-security aria-label="Privacy and security"><header><h2>Privacy &amp; security</h2></header><div class="section-body privacy-body"><div><p class="lede">This portable view contains sanitized states and exact operator remedies only. It excludes paths, identities, environment values, secret-like values, raw command output, ledger prose, and error stacks.</p><p id="privacy-toggle-note" class="static-note">Static export: this checked setting documents the enforced share-safe boundary and cannot be changed in this file.</p></div><label class="static-toggle" data-static-privacy-toggle><span>Share-safe sanitization</span><input type="checkbox" checked disabled aria-describedby="privacy-toggle-note"><span aria-hidden="true">Enabled</span></label></div></section>${nextActions(snapshot)}`;
+}
+function dashboardToolbar() {
+    return `<header class="dashboard-toolbar" data-dashboard-toolbar><p class="toolbar-brand">AWM <span>Doctor dashboard</span></p><form role="search" aria-label="Search dashboard"><label class="sr-only" for="dashboard-search">Search resources</label><input id="dashboard-search" type="search" placeholder="Search resources" disabled aria-describedby="static-controls-note"></form><div class="toolbar-actions"><button type="button" disabled aria-describedby="static-controls-note">Notifications (static)</button><button type="button" disabled aria-describedby="static-controls-note">Help (static)</button><button type="button" disabled aria-describedby="static-controls-note">Export dashboard (static)</button><button type="button" disabled aria-describedby="static-controls-note">New deployment (static)</button></div><p id="static-controls-note" class="sr-only">Controls are shown for reference only; this exported dashboard does not run scripts.</p></header>`;
+}
+function projectHeaderActions() {
+    return `<div class="project-header-actions" data-project-header-actions role="group" aria-label="Project actions"><button type="button" disabled aria-describedby="static-controls-note">Export evidence (static)</button><button type="button" disabled aria-describedby="static-controls-note">Attach evidence (static)</button></div>`;
+}
+function projectChrome(project) {
+    return `<div class="project-chrome"><p class="eyebrow" data-project-breadcrumb>AWM / Proyecto / ${project}</p><nav data-project-nav aria-label="Project navigation"><span aria-current="page">Proyecto</span><span>Ejecución</span><span>Configuración</span></nav></div>`;
+}
+function projectEvidenceComposition() {
+    return `<div data-project-evidence role="group" aria-labelledby="project-evidence-heading"><h3 id="project-evidence-heading" class="sr-only">Project evidence</h3><div class="evidence-grid compact-composition"><div><h3>Planes de trabajo</h3><div class="plan-card active" data-plan-card="active"><div><strong>Plan activo</strong><span class="state attention">Sin observación</span></div><p>Progreso: sin observación</p><button type="button" disabled aria-describedby="static-controls-note">Ver plan (estático)</button></div><div class="plan-card blocked" data-plan-card="blocked"><div><strong>Plan bloqueado</strong><span class="state unavailable">Sin observación</span></div><p>Progreso: sin observación</p><button type="button" disabled aria-describedby="static-controls-note">Ver plan (estático)</button></div></div><div><h3>Impacto y trazabilidad</h3><table class="evidence-table"><thead><tr><th scope="col">Tipo</th><th scope="col">Fuente</th><th scope="col">Estado</th><th scope="col">Fecha</th></tr></thead><tbody><tr><td colspan="4" class="empty">No hay evidencia de impacto disponible en este snapshot.</td></tr></tbody></table></div></div><div class="closure-actions" data-closure-actions role="group" aria-labelledby="closure-actions-heading"><div><h3 id="closure-actions-heading">Qué falta para cerrar el ciclo</h3><p class="empty">La ausencia de marcador no equivale a cero hallazgos.</p></div><div><button type="button" disabled aria-describedby="static-controls-note">Completar QA (estático)</button><button type="button" disabled aria-describedby="static-controls-note">Registrar retro (estático)</button><button type="button" disabled aria-describedby="static-controls-note">Adjuntar evidencia (estático)</button></div></div></div>`;
+}
+function projectComposition(snapshot) {
+    const stageSections = ['planning', 'execution', 'qa', 'retro', 'history'];
+    const byId = new Map(snapshot.sections.map((section) => [section.id, section]));
+    const stages = stageSections.map((id) => {
+        const section = byId.get(id);
+        const stage = id === 'history' ? 'evidence' : id;
+        const available = section?.availability === 'available';
+        return `<li data-stage="${stage}"><span aria-hidden="true" class="timeline-marker"></span><strong>${stage === 'evidence' ? 'Evidence' : SECTION_TITLES[id]}</strong><span class="state ${available ? 'ok' : 'unavailable'}">${available ? '● Available' : '⊘ Unavailable'}</span></li>`;
+    }).join('');
+    const provisional = snapshot.confidence === 'provisional' ? '<aside data-provisional-evidence aria-label="Provisional evidence"><strong>Provisional evidence</strong><span>Current observations are still being verified by downstream QA and evidence capture.</span></aside>' : '';
+    const prepItems = byId.get('machine')?.items ?? [];
+    const prepNames = ['installation', 'sensors', 'persistence'];
+    const preparation = `<div class="machine-preparation-strip" data-machine-preparation role="group" aria-labelledby="machine-preparation-heading"><h3 id="machine-preparation-heading">Preparación de máquina</h3><ul class="diagnostic-grid">${prepNames.map((name, index) => { const item = prepItems[index]; return `<li data-machine-preparation-card="${name}">${item ? `<span class="state ${item.state}">${STATE_GLYPH[item.state]} ${STATE_TEXT[item.state]}</span><strong>${escapeHtml(item.label)}</strong><span>${item.detail ? escapeHtml(item.detail) : 'Sin detalle adicional'}</span>` : '<span class="state unavailable">⊘ Unavailable</span><strong>Sin observación</strong><span>Fuente no disponible</span>'}</li>`; }).join('')}</ul></div>`;
+    const machineSupplement = `${preparation}<nav class="lifecycle-timeline" data-lifecycle-timeline aria-labelledby="lifecycle-timeline-heading"><h3 id="lifecycle-timeline-heading">Línea de ciclo</h3><ol class="timeline connected-timeline">${stages}</ol></nav>${provisional}`;
+    const historySupplement = projectEvidenceComposition();
+    return snapshot.sections.map((section) => sectionHtml(section, section.id === 'machine' ? machineSupplement : section.id === 'history' ? historySupplement : '')).join('');
+}
+/** Renders a portable, static, share-safe dashboard document. */
+function renderDashboardHtml(input) {
+    const snapshot = (0, validate_1.validateDashboardSnapshotV1)(input);
+    const overall = escapeHtml(snapshot.overall);
+    const project = escapeHtml(snapshot.project.label);
+    const machineItems = snapshot.sections.find((section) => section.id === 'machine')?.items ?? [];
+    const sections = snapshot.project.detected ? projectComposition(snapshot) : `${machineBento(machineItems)}${privacyAndActions(snapshot)}${snapshot.sections.map((section) => sectionHtml(section)).join('')}`;
+    const links = '<li>Inicio</li><li>Estado</li><li class="active">Configuración</li><li>Terminal</li>';
+    const projectDetected = snapshot.project.detected;
+    const heading = projectDetected ? 'Project lifecycle' : 'Machine configuration';
+    const intro = projectDetected ? 'Readiness, lifecycle state, and eligible observations presented directly for operator review.' : 'Machine readiness and safe configuration state outside a project.';
+    const navLabel = projectDetected ? 'Dashboard sections' : 'Machine configuration sections';
+    const context = projectDetected ? `Project: ${project}` : 'No project detected';
+    return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta http-equiv="Content-Security-Policy" content="${CSP}"><title>AWM Doctor dashboard</title><style>${styles_1.DASHBOARD_STYLES}</style></head><body><div class="shell"><nav data-operational-sidebar aria-label="${navLabel}"><p class="brand">AWM<small>Doctor dashboard</small></p><ul>${links}</ul><button data-sidebar-diagnose type="button" disabled aria-describedby="static-controls-note">Ejecutar diagnóstico</button><div data-sidebar-operator-controls><span>Operaciones</span><button type="button" disabled aria-describedby="static-controls-note">Soporte</button><button type="button" disabled aria-describedby="static-controls-note">Cerrar sesión</button></div></nav><main>${dashboardToolbar()}<div class="dashboard-content"><header class="page-header">${projectDetected ? projectChrome(project) : ''}<p class="eyebrow">Read-only diagnostic evidence</p><h1>${heading}</h1><p class="lede">${intro}</p><p><span class="status ${overall}">● ${overall}</span> <span class="status">Confidence: ${escapeHtml(snapshot.confidence)}</span></p><p class="eyebrow">${context}</p>${projectDetected ? projectHeaderActions() : ''}</header>${sections}<footer>Generated ${escapeHtml(snapshot.generatedAt)} · Static share-safe dashboard</footer></div></main></div></body></html>\n`;
+}

package/dist/src/core/dashboard/render-terminal.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderFullTerminal = renderFullTerminal;
+const validate_1 = require("./validate");
+const SECTION_TITLES = {
+    machine: 'Machine / install',
+    project: 'Project readiness',
+    planning: 'Design / planning',
+    execution: 'Execution',
+    qa: 'QA',
+    retro: 'Retro',
+    history: 'Final / history',
+};
+const STATE_PRESENTATION = {
+    ok: { glyph: '✔', text: 'ok' },
+    attention: { glyph: '⚠', text: 'attention' },
+    missing: { glyph: '✖', text: 'missing' },
+    unavailable: { glyph: '⊘', text: 'unavailable' },
+    not_applicable: { glyph: '—', text: 'not applicable' },
+};
+/** Renders a complete, color-free dashboard suitable for terminals and logs. */
+function renderFullTerminal(input) {
+    const snapshot = (0, validate_1.validateDashboardSnapshotV1)(input);
+    const lines = [
+        `AWM dashboard · ${snapshot.overall}`,
+        `Project: ${snapshot.project.label}`,
+        `Confidence: ${snapshot.confidence}`,
+    ];
+    for (const section of snapshot.sections) {
+        lines.push('', SECTION_TITLES[section.id]);
+        if (section.availability !== 'available')
+            lines.push(`  ⊘ source ${section.availability.replace('_', ' ')}`);
+        if (section.items.length === 0)
+            lines.push('  No observations reported.');
+        for (const item of section.items) {
+            const presentation = STATE_PRESENTATION[item.state];
+            lines.push(`  ${presentation.glyph} ${item.label} [${item.id}]${item.detail ? ` — ${item.detail}` : ` — ${presentation.text}`}`);
+            if (item.remediation)
+                lines.push(`    → ${item.remediation}`);
+        }
+    }
+    return lines.join('\n');
+}

package/dist/src/core/dashboard/sanitize.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeDashboardSource = sanitizeDashboardSource;
+const crypto_1 = require("crypto");
+const STATES = new Set(['ok', 'attention', 'missing', 'unavailable', 'not_applicable', 'active', 'blocked']);
+const ALLOWED_KEYS = new Set(['findings', 'label', 'id', 'state', 'detail', 'remediation', 'remediationVerified', 'execution', 'qa', 'retro', 'history', 'lifecycle', 'journal', 'markers', 'tasks', 'total', 'completed', 'qaComplete', 'retroComplete']);
+const CANONICAL_LABELS = new Set([
+    'Preferences', 'Registries', 'Profile', 'Sensors', 'Optional source unavailable',
+    'Extensions', 'Registry pins', 'Active bundles', 'Project context', 'Constitution', 'Static preflight',
+]);
+const CANONICAL_FINDING_IDS = new Set([
+    'machine.preferences.missing', 'machine.registries.stale', 'project.profile.missing',
+    'project.sensors.unavailable', 'project.preflight.degraded', 'planning.source.unavailable', 'execution.source.unavailable',
+]);
+const PROVIDER_FINDING_ID = /^machine\.provider\.(?:claude-code|codex|opencode|cursor|copilot|antigravity)\.(?:binary\.version|skills\.global|agents\.native|workflows\.global|context\.global|hook\.trust|guidance\.project|constitution\.delivery)$/;
+const PROJECT_FINDING_ID = /^project\.(?:profile\.present|extensions\.configured|registry-pins\.present|bundles\.coherent|context\.present|constitution\.present|sensors\.present|preflight\.not_collected)$/;
+const PROVIDER_LABEL = /^Provider (?:claude-code|codex|opencode|cursor|copilot|antigravity): (?:binary\.version|skills\.global|agents\.native|workflows\.global|context\.global|hook\.trust|guidance\.project|constitution\.delivery)$/;
+const DANGEROUS = /(?:ghp_|sk-[A-Za-z]|<|>|\\\\[^\\\s]+\\[^\\\s]+|\/[A-Za-z0-9._-]+(?:\/[A-Za-z0-9._-]+)*|[A-Za-z]:\\|\b[A-Za-z_][A-Za-z0-9_]*=|token|secret|password)/iu;
+function sanitize(value, key) {
+    if (value === null || typeof value === 'boolean')
+        return value;
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value))
+            throw new Error('Dashboard source numbers must be finite');
+        return value;
+    }
+    if (typeof value === 'string') {
+        if (key === 'state' && !STATES.has(value))
+            throw new Error(`Dashboard source state is invalid: ${value}`);
+        // IDs are source-controlled and are rendered into snapshots. Preserve only
+        // the small canonical vocabulary; opaque IDs retain deterministic ordering
+        // without exporting repository names, emails, IPs, or local identifiers.
+        if (key === 'id') {
+            if (value.trim() === '')
+                throw new Error('Dashboard finding id is invalid');
+            return CANONICAL_FINDING_IDS.has(value) || PROVIDER_FINDING_ID.test(value) || PROJECT_FINDING_ID.test(value)
+                ? value : `item-${(0, crypto_1.createHash)('sha256').update(value).digest('hex').slice(0, 16)}`;
+        }
+        if (key === 'label' && !CANONICAL_LABELS.has(value) && !PROVIDER_LABEL.test(value))
+            return '[redacted]';
+        return DANGEROUS.test(value) ? '[redacted]' : value;
+    }
+    if (Array.isArray(value))
+        return value.map((entry) => sanitize(entry));
+    if (!value || typeof value !== 'object')
+        throw new Error('Dashboard source must contain JSON-compatible values');
+    const out = {};
+    for (const [entryKey, entryValue] of Object.entries(value)) {
+        if (!ALLOWED_KEYS.has(entryKey))
+            continue;
+        // Source details are untrusted command/error output. Renderers only receive
+        // canonical details produced after collection (for example lifecycle state).
+        if (entryKey === 'detail')
+            continue;
+        out[entryKey] = sanitize(entryValue, entryKey);
+    }
+    return out;
+}
+/** Removes dynamic credentials, local paths, and hostile markup from source observations. */
+function sanitizeDashboardSource(value) {
+    return sanitize(value);
+}

package/dist/src/core/dashboard/styles.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DASHBOARD_STYLES = void 0;
+/** Inline visual system derived from the approved Stitch dashboard artifacts. */
+exports.DASHBOARD_STYLES = `
+:root { color-scheme: dark; --canvas:#070d16; --surface:#101a29; --surface-raised:#172235; --surface-nav:#202a3b; --ink:#edf3ff; --muted:#b7c2d4; --border:#39455b; --indigo:#aebcff; --cyan:#8cecff; --amber:#ffc06a; --red:#ffb4ac; --green:#77e8be; --radius:4px; }
+* { box-sizing:border-box; }
+html { background:var(--canvas); color:var(--ink); font:14px/1.35 system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif; }
+body { margin:0; background:var(--canvas); }
+.shell { display:grid; grid-template-columns:12rem minmax(0,1fr); min-height:100vh; }
+.shell > nav { background:var(--surface-nav); border-right:1px solid var(--border); padding:.85rem .65rem; }
+.brand { margin:0 0:1rem; font-size:.9rem; font-weight:750; letter-spacing:-.03em; }
+.brand small { display:block; color:var(--muted); font-size:.72rem; font-weight:500; letter-spacing:0; }
+.shell > nav ul { list-style:none; margin:0; padding:0; display:grid; gap:.15rem; }
+.shell > nav li { color:var(--muted); font-size:.78rem; padding:.4rem .45rem; border-left:2px solid transparent; } .shell > nav li.active { background:var(--indigo); color:#101a29; font-weight:750; }
+.shell > nav > button { margin-top:1rem; width:100%; } [data-sidebar-operator-controls] { border-top:1px solid var(--border); color:var(--muted); display:grid; font-size:.72rem; gap:.35rem; margin-top:1rem; padding-top:.75rem; }
+main { min-width:0; padding:0 clamp(.75rem,3vw,2.5rem) 3rem; }
+.dashboard-content { margin:0 auto; width:min(100%,72rem); }
+header { border-bottom:1px solid var(--border); padding-bottom:1.25rem; }
+.dashboard-toolbar { align-items:center; display:flex; flex-wrap:wrap; gap:.45rem; justify-content:space-between; margin:0 calc(clamp(.75rem,3vw,2.5rem) * -1); min-height:2.8rem; padding:.4rem clamp(.75rem,3vw,2.5rem); }
+.toolbar-brand { font-weight:750; letter-spacing:-.025em; margin:0; } .toolbar-brand span { color:var(--muted); font-size:.76rem; font-weight:500; margin-left:.35rem; }
+.dashboard-toolbar form { margin-left:auto; } .dashboard-toolbar input { background:#080e18; border:1px solid var(--border); border-radius:var(--radius); color:var(--muted); min-width:12rem; padding:.4rem .55rem; } .dashboard-toolbar input:disabled { cursor:not-allowed; opacity:.72; }
+.toolbar-actions,.project-header-actions,.closure-actions > div:last-child { display:flex; flex-wrap:wrap; gap:.4rem; }
+button { background:var(--surface-raised); border:1px solid var(--border); border-radius:var(--radius); color:var(--ink); font:inherit; padding:.38rem .55rem; } button:disabled { cursor:not-allowed; opacity:.7; } button:focus-visible,input:focus-visible { outline:3px solid var(--cyan); outline-offset:3px; }
+.page-header { padding:1.35rem 0 .8rem; } .project-header-actions { margin-top:.6rem; }
+h1,h2,p { margin-top:0; } h1 { font-size:clamp(1.45rem,2.4vw,2rem); letter-spacing:-.035em; margin-bottom:.2rem; } h2 { font-size:.88rem; letter-spacing:.035em; margin:0; } h3 { font-size:.8rem; margin:.1rem 0 .45rem; }
+.eyebrow,.status { color:var(--muted); font-family:ui-monospace,SFMono-Regular,Consolas,monospace; font-size:.78rem; }
+.status { display:inline-flex; align-items:center; gap:.4rem; border:1px solid var(--border); border-radius:var(--radius); padding:.2rem .5rem; }
+.status.degraded { color:var(--amber); border-color:#72552e; } .status.healthy { color:var(--green); border-color:#2f6c58; }
+.lede { color:var(--muted); max-width:72ch; }
+section { background:var(--surface); border:1px solid var(--border); border-radius:var(--radius); margin-top:.65rem; overflow:hidden; }
+section > header { align-items:center; background:var(--surface-raised); border:0; display:flex; justify-content:space-between; padding:.55rem .75rem; }
+.section-body { padding:.75rem; }
+.availability { color:var(--muted); font-size:.85rem; margin-bottom:.75rem; } .availability.unavailable { color:var(--amber); }
+table { border-collapse:collapse; width:100%; } th,td { border-bottom:1px solid var(--border); padding:.45rem .4rem; text-align:left; vertical-align:top; } th { color:var(--muted); font-size:.66rem; letter-spacing:.07em; text-transform:uppercase; } tr:last-child td { border-bottom:0; }
+.state { font-weight:650; white-space:nowrap; } .state.ok { color:var(--green); } .state.attention { color:var(--amber); } .state.missing,.state.unavailable { color:var(--red); } .state.not_applicable { color:var(--muted); }
+code { background:#080e18; border:1px solid var(--border); border-radius:2px; color:var(--cyan); font:inherit; padding:.12rem .3rem; white-space:pre-wrap; overflow-wrap:anywhere; }
+.empty { color:var(--muted); margin:0; } footer { color:var(--muted); font-size:.8rem; padding:1.25rem 0; }
+.diagnostic-grid,.timeline,.action-list { display:grid; gap:.45rem; list-style:none; margin:0; padding:0; } .diagnostic-grid { grid-template-columns:repeat(3,minmax(0,1fr)); } .machine-preparation-strip { background:#0b1320; border:1px solid var(--border); margin-bottom:.65rem; padding:.6rem; } .machine-preparation-strip h3 { color:var(--muted); font-size:.68rem; letter-spacing:.07em; text-transform:uppercase; } .diagnostic-grid li { border-right:1px solid var(--border); display:grid; gap:.2rem; padding:0 .5rem; } .diagnostic-grid li:last-child { border-right:0; } .diagnostic-grid strong { font-size:.78rem; } .diagnostic-grid li > span:last-child { color:var(--muted); font: .7rem ui-monospace,SFMono-Regular,Consolas,monospace; }
+.lifecycle-timeline { background:#0b1320; border:1px solid var(--border); margin-bottom:.65rem; padding:.6rem; } .lifecycle-timeline h3 { color:var(--muted); font-size:.68rem; letter-spacing:.07em; text-transform:uppercase; } .timeline { grid-template-columns:repeat(5,minmax(0,1fr)); } .connected-timeline { border-top:1px solid var(--border); margin-top:.4rem; padding-top:.25rem; } .timeline li { background:#0b1320; display:grid; gap:.2rem; padding:.2rem; } .timeline-marker { background:var(--surface-raised); border:1px solid var(--border); border-radius:50%; height:.65rem; width:.65rem; } .timeline .state { font-size:.68rem; } .timeline .state.unavailable { background:#38141c; color:#fff0ed; display:inline-flex; padding:.08rem .25rem; width:max-content; } aside[data-provisional-evidence] { background:#261d10; border-left:3px solid var(--amber); color:var(--ink); display:grid; gap:.15rem; margin-top:.65rem; padding:.6rem .75rem; } aside[data-provisional-evidence] span { color:var(--muted); }
+.privacy-body { align-items:center; display:flex; gap:1rem; justify-content:space-between; } .static-note { color:var(--muted); font-size:.78rem; margin:0; } .static-toggle { align-items:center; background:#0b1320; border:1px solid var(--border); display:flex; flex-wrap:wrap; gap:.5rem; padding:.65rem; } .static-toggle input { accent-color:var(--cyan); } .static-toggle input:disabled { opacity:1; }
+.machine-bento { display:grid; gap:.65rem; grid-template-columns:repeat(3,minmax(0,1fr)); margin-top:.65rem; } .bento-card { background:var(--surface); border:1px solid var(--border); display:grid; gap:.35rem; min-height:8rem; padding:.75rem; } .bento-card h2 { color:var(--muted); font-size:.7rem; letter-spacing:.07em; text-transform:uppercase; } [data-next-actions] { background:var(--surface); border:1px solid var(--border); margin-top:.65rem; padding:.75rem; } [data-next-actions] h2 { margin-bottom:.65rem; } .project-chrome { display:flex; flex-wrap:wrap; gap:.5rem 1rem; justify-content:space-between; } [data-project-nav] { display:flex; gap:.65rem; font-size:.72rem; } [data-project-nav] [aria-current] { color:var(--cyan); font-weight:700; }
+.evidence-grid.compact-composition { display:grid; gap:.65rem; grid-template-columns:repeat(2,minmax(0,1fr)); padding:.65rem; } .evidence-grid h2 { font-size:.9rem; margin-bottom:.4rem; } .plan-card { border:1px solid var(--border); display:grid; gap:.35rem; margin-top:.4rem; padding:.55rem; } .plan-card.active { border-left:3px solid var(--indigo); } .plan-card.blocked { border-left:3px solid var(--red); } .plan-card > div { align-items:center; display:flex; justify-content:space-between; gap:.5rem; } .plan-card p { color:var(--muted); font-size:.72rem; margin:0; }
+.evidence-table { margin-top:.65rem; } .closure-actions { align-items:center; border-top:1px solid var(--border); display:flex; gap:1rem; justify-content:space-between; margin-top:1rem; padding:1rem; } .closure-actions h3 { font-size:.9rem; margin:0 0:.25rem; }
+.action-list li { align-items:center; border-bottom:1px solid var(--border); display:grid; gap:.6rem; grid-template-columns:max-content minmax(8rem,1fr) minmax(10rem,auto) max-content; padding:.65rem 0; } .action-list li:last-child { border-bottom:0; }
+.sr-only { clip:rect(0 0 0 0); clip-path:inset(50%); height:1px; overflow:hidden; position:absolute; white-space:nowrap; width:1px; }
+a:focus-visible { outline:3px solid var(--cyan); outline-offset:3px; }
+@media (max-width: 720px) { .shell { display:block; } nav { border-bottom:1px solid var(--border); border-right:0; } nav ul { grid-template-columns:repeat(2,minmax(0,1fr)); } main { padding:0 1rem 2rem; } .dashboard-toolbar { margin:0 -1rem; padding:.65rem 1rem; } .dashboard-toolbar form { margin-left:0; order:3; width:100%; } .dashboard-toolbar input { width:100%; } .privacy-body,.closure-actions { align-items:stretch; flex-direction:column; } .diagnostic-grid,.timeline,.evidence-grid,.machine-bento { grid-template-columns:1fr; } .action-list li { grid-template-columns:max-content 1fr; } .action-list code,.action-list button { grid-column:1 / -1; } table,thead,tbody,tr,th,td { display:block; } thead { position:absolute; width:1px; height:1px; overflow:hidden; clip:rect(0 0 0 0); } td { border:0; padding:.25rem 0; } tr { border-bottom:1px solid var(--border); padding:.7rem 0; } tr:last-child { border-bottom:0; } td::before { color:var(--muted); content:attr(data-label) ": "; font-size:.72rem; text-transform:uppercase; } }
+@media (prefers-reduced-motion: reduce) { *,*::before,*::after { animation-duration:.01ms !important; animation-iteration-count:1 !important; scroll-behavior:auto !important; transition-duration:.01ms !important; } }
+@media print { :root { color-scheme:light; } body { background:#fff; color:#000; } .shell { display:block; } nav { display:none; } main { max-width:none; padding:0; } section { break-inside:avoid; border-color:#666; } section > header { background:#eee; } .state,.availability,code { color:#000 !important; } }
+`;

package/dist/src/core/dashboard/types.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dashboardSnapshot = dashboardSnapshot;
+const PROJECT_SECTION_IDS = ['machine', 'project', 'planning', 'execution', 'qa', 'retro', 'history'];
+/** Safe, deterministic V1 fixture and renderer input. */
+function dashboardSnapshot(overrides = {}) {
+    const { project: projectOverride, sections: sectionsOverride, ...rest } = overrides;
+    const project = projectOverride ?? { detected: false, label: 'No project detected' };
+    const sections = sectionsOverride ?? (project.detected
+        ? PROJECT_SECTION_IDS.map((id) => ({ id, availability: id === 'machine' ? 'available' : 'not_applicable', items: [] }))
+        : [{ id: 'machine', availability: 'available', items: [] }]);
+    return {
+        schema: 1,
+        generatedAt: '2026-08-22T00:00:00.000Z',
+        overall: 'healthy',
+        project,
+        confidence: 'none',
+        sections,
+        ...rest,
+    };
+}

package/dist/src/core/dashboard/validate.js

@@ -0,0 +1,106 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DashboardValidationError = void 0;
+exports.validateDashboardSnapshotV1 = validateDashboardSnapshotV1;
+const SECTION_ORDER = ['machine', 'project', 'planning', 'execution', 'qa', 'retro', 'history'];
+const ITEM_STATES = ['ok', 'attention', 'missing', 'unavailable', 'not_applicable'];
+const AVAILABILITIES = ['available', 'unavailable', 'not_applicable'];
+const OVERALLS = ['healthy', 'degraded'];
+const CONFIDENCES = ['none', 'provisional', 'observing', 'supported'];
+const ACTIONABLE_STATES = new Set(['attention', 'missing', 'unavailable']);
+class DashboardValidationError extends Error {
+    constructor(message) {
+        super(`Invalid DashboardSnapshotV1: ${message}`);
+        this.name = 'DashboardValidationError';
+    }
+}
+exports.DashboardValidationError = DashboardValidationError;
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function assertRecord(value, path) {
+    if (!isRecord(value))
+        throw new DashboardValidationError(`${path} must be an object`);
+}
+function assertOnlyKeys(value, keys, path) {
+    for (const key of Object.keys(value)) {
+        if (!keys.includes(key))
+            throw new DashboardValidationError(`${path}.${key} is not supported`);
+    }
+}
+function assertNonEmptyString(value, path) {
+    if (typeof value !== 'string' || value.trim() === '') {
+        throw new DashboardValidationError(`${path} must be a non-empty string`);
+    }
+}
+function assertEnum(value, values, path) {
+    if (typeof value !== 'string' || !values.includes(value)) {
+        throw new DashboardValidationError(`${path} must be one of ${values.join(', ')}`);
+    }
+}
+/** Validates the durable public dashboard boundary without coercing unknown input. */
+function validateDashboardSnapshotV1(value) {
+    assertRecord(value, 'snapshot');
+    assertOnlyKeys(value, ['schema', 'generatedAt', 'overall', 'project', 'confidence', 'sections'], 'snapshot');
+    if (value.schema !== 1)
+        throw new DashboardValidationError('schema must be version 1');
+    assertNonEmptyString(value.generatedAt, 'generatedAt');
+    if (Number.isNaN(Date.parse(value.generatedAt)))
+        throw new DashboardValidationError('generatedAt must be a valid date-time');
+    assertEnum(value.overall, OVERALLS, 'overall');
+    assertEnum(value.confidence, CONFIDENCES, 'confidence');
+    assertRecord(value.project, 'project');
+    assertOnlyKeys(value.project, ['detected', 'label'], 'project');
+    if (typeof value.project.detected !== 'boolean')
+        throw new DashboardValidationError('project.detected must be boolean');
+    assertNonEmptyString(value.project.label, 'project.label');
+    if (!Array.isArray(value.sections))
+        throw new DashboardValidationError('sections must be an array');
+    const sectionIds = new Set();
+    const itemIds = new Set();
+    let previousOrder = -1;
+    for (const [sectionIndex, section] of value.sections.entries()) {
+        const sectionPath = `sections[${sectionIndex}]`;
+        assertRecord(section, sectionPath);
+        assertOnlyKeys(section, ['id', 'availability', 'items'], sectionPath);
+        assertEnum(section.id, SECTION_ORDER, `${sectionPath}.id`);
+        const order = SECTION_ORDER.indexOf(section.id);
+        if (order <= previousOrder)
+            throw new DashboardValidationError('section order must be deterministic');
+        previousOrder = order;
+        if (sectionIds.has(section.id))
+            throw new DashboardValidationError(`duplicate section id ${section.id}`);
+        sectionIds.add(section.id);
+        assertEnum(section.availability, AVAILABILITIES, `${sectionPath}.availability`);
+        if (!Array.isArray(section.items))
+            throw new DashboardValidationError(`${sectionPath}.items must be an array`);
+        for (const [itemIndex, item] of section.items.entries()) {
+            const itemPath = `${sectionPath}.items[${itemIndex}]`;
+            assertRecord(item, itemPath);
+            assertOnlyKeys(item, ['id', 'label', 'state', 'detail', 'remediation'], itemPath);
+            assertNonEmptyString(item.id, `${itemPath}.id`);
+            if (itemIds.has(item.id))
+                throw new DashboardValidationError(`duplicate item id ${item.id}`);
+            itemIds.add(item.id);
+            assertNonEmptyString(item.label, `${itemPath}.label`);
+            assertEnum(item.state, ITEM_STATES, `${itemPath}.state`);
+            if (item.detail !== undefined)
+                assertNonEmptyString(item.detail, `${itemPath}.detail`);
+            if (item.remediation !== undefined)
+                assertNonEmptyString(item.remediation, `${itemPath}.remediation`);
+            if (ACTIONABLE_STATES.has(item.state) && item.remediation === undefined) {
+                throw new DashboardValidationError(`${itemPath}.remediation is required for actionable state`);
+            }
+            if (item.state === 'not_applicable' && item.remediation !== undefined) {
+                throw new DashboardValidationError(`${itemPath}.remediation is forbidden for not_applicable state`);
+            }
+        }
+    }
+    if (!value.project.detected && (value.sections.length !== 1 || value.sections[0].id !== 'machine')) {
+        throw new DashboardValidationError('no project snapshot may contain only the machine section');
+    }
+    if (value.project.detected && sectionIds.size !== SECTION_ORDER.length) {
+        throw new DashboardValidationError('detected project snapshot must contain the canonical lifecycle sections');
+    }
+    return value;
+}

package/dist/src/core/dashboard/write-html.js

@@ -0,0 +1,88 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveHtmlTarget = resolveHtmlTarget;
+exports.writeHtmlAtomically = writeHtmlAtomically;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const crypto_1 = require("crypto");
+function resolveHtmlTarget(input, operations = fs_1.default) {
+    if (!input || typeof input.cwd !== 'string' || input.cwd.trim() === '' || input.cwd.includes('\0') || typeof input.target !== 'string' || input.target.trim() === '' || input.target.includes('\0') || input.target.startsWith('--'))
+        throw new Error('--html requires a file target');
+    if (input.force !== undefined && typeof input.force !== 'boolean')
+        throw new Error('--force must be boolean');
+    const target = path_1.default.isAbsolute(input.target) ? path_1.default.normalize(input.target) : path_1.default.resolve(input.cwd, input.target);
+    const parent = path_1.default.dirname(target);
+    if (!operations.existsSync(parent) || !operations.statSync(parent).isDirectory())
+        throw new Error(`HTML parent directory does not exist: ${parent}`);
+    for (let current = parent;; current = path_1.default.dirname(current)) {
+        if (operations.lstatSync(current).isSymbolicLink())
+            throw new Error('HTML parent directory must not contain a symbolic link');
+        if (current === path_1.default.parse(current).root)
+            break;
+    }
+    try {
+        operations.accessSync(parent, fs_1.default.constants.W_OK);
+    }
+    catch {
+        throw new Error(`HTML parent directory is not writable: ${parent}`);
+    }
+    let stat;
+    try {
+        stat = operations.lstatSync(target);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return target;
+        throw error;
+    }
+    if (stat.isSymbolicLink() || !stat.isFile())
+        throw new Error('HTML target must be a regular file');
+    if (!input.force)
+        throw new Error(`HTML target already exists: ${target}; use --force`);
+    return target;
+}
+function writeHtmlAtomically(input, operations = fs_1.default) {
+    if (!input || typeof input.cwd !== 'string' || input.cwd.trim() === '' || input.cwd.includes('\0'))
+        throw new Error('writeHtmlAtomically requires a non-empty cwd');
+    if (typeof input.target !== 'string' || input.target.trim() === '' || !path_1.default.isAbsolute(input.target))
+        throw new Error('writeHtmlAtomically requires a non-empty absolute target');
+    if (input.target.includes('\0'))
+        throw new Error('writeHtmlAtomically target must not contain NUL');
+    if (typeof input.html !== 'string' || input.html.length === 0)
+        throw new Error('writeHtmlAtomically requires non-empty html');
+    if (input.force !== undefined && typeof input.force !== 'boolean')
+        throw new Error('writeHtmlAtomically force must be boolean');
+    if (operations.existsSync(input.target) && !input.force)
+        throw new Error(`HTML target already exists: ${input.target}; use --force`);
+    const platform = input.platform ?? process.platform;
+    if (typeof platform !== 'string' || !/^[a-z0-9]+$/i.test(platform))
+        throw new Error('writeHtmlAtomically platform must be a valid platform');
+    const temp = path_1.default.join(path_1.default.dirname(input.target), `.${path_1.default.basename(input.target)}.${process.pid}.${(0, crypto_1.randomUUID)()}.tmp`);
+    let fd;
+    let tempCreated = false;
+    try {
+        fd = platform === 'win32' ? operations.openSync(temp, 'wx') : operations.openSync(temp, 'wx', 0o600);
+        tempCreated = true;
+        operations.writeFileSync(fd, input.html, 'utf8');
+        operations.fsyncSync(fd);
+        operations.closeSync(fd);
+        fd = undefined;
+        operations.renameSync(temp, input.target);
+    }
+    catch (error) {
+        if (fd !== undefined)
+            try {
+                operations.closeSync(fd);
+            }
+            catch { /* best effort */ }
+        try {
+            if (tempCreated && operations.existsSync(temp))
+                operations.unlinkSync(temp);
+        }
+        catch { /* known temp only */ }
+        throw error;
+    }
+}

package/dist/src/core/diagnostics/context.js

@@ -297,7 +297,7 @@ function gatherProject(root, bundles, agent = 'claude-code') {
         context = { present: true, file: 'AGENTS.md' };
     return {
         root,
-        profile: { present: profilePresent, extensions: profile.extensions },
+        profile: { present: profilePresent, extensions: profile.extensions, registries: profile.registries },
         activeBundles: { expected, linked, broken },
         orphanLinks,
         sensors: { present: fs_1.default.existsSync(path_1.default.join(root, '.awm', 'sensors.json')) },