agileflow 3.0.2 → 3.2.0

package/CHANGELOG.md

@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [3.2.0] - 2026-02-21
+
+### Added
+- Cross-IDE capability profiles, multi-agent audit systems, and AI attribution blocking
+
+## [3.1.0] - 2026-02-14
+
+### Added
+- Legal audit system, native Agent Teams integration, and startup performance improvements
+
 ## [3.0.2] - 2026-02-14
 
 ### Added

package/README.md

@@ -3,30 +3,23 @@
 </p>
 
 [![npm version](https://img.shields.io/npm/v/agileflow?color=brightgreen)](https://www.npmjs.com/package/agileflow)
-[![Commands](https://img.shields.io/badge/commands-93-blue)](docs/04-architecture/commands.md)
-[![Agents/Experts](https://img.shields.io/badge/agents%2Fexperts-45-orange)](docs/04-architecture/subagents.md)
-[![Skills](https://img.shields.io/badge/skills-dynamic-purple)](docs/04-architecture/skills.md)
+[![Commands](https://img.shields.io/badge/commands-98-blue)](https://docs.agileflow.projectquestorg.com/docs/commands)
+[![Agents/Experts](https://img.shields.io/badge/agents%2Fexperts-83-orange)](https://docs.agileflow.projectquestorg.com/docs/agents)
+[![Skills](https://img.shields.io/badge/skills-dynamic-purple)](https://docs.agileflow.projectquestorg.com/docs/features/skills)
 
-**AI-driven agile development for Claude Code, Cursor, Windsurf, OpenAI Codex CLI, and more.** Combining Scrum, Kanban, ADRs, and docs-as-code principles into one framework-agnostic system.
+**AI-driven agile development for Claude Code, Cursor, Windsurf, OpenAI Codex, and more.** Combining Scrum, Kanban, ADRs, and docs-as-code principles into one framework-agnostic system.
 
 ---
 
 ## Quick Start
 
-### Installation
-
 ```bash
 npx agileflow@latest setup
 ```
 
-That's it! The `npx` command always fetches the latest version.
-
-**Updates:**
-```bash
-npx agileflow@latest update
-```
+The `npx` command always fetches the latest version.
 
-### After Setup
+**Updates:** `npx agileflow@latest update`
 
 ```bash
 /agileflow:help              # View all commands
@@ -39,25 +32,21 @@ npx agileflow@latest update
 | IDE | Status | Config Location |
 |-----|--------|-----------------|
 | Claude Code | Supported | `.claude/commands/agileflow/` |
-| Cursor | Supported | `.cursor/rules/agileflow/` |
+| Cursor | Supported | `.cursor/commands/agileflow/` |
 | Windsurf | Supported | `.windsurf/workflows/agileflow/` |
-| OpenAI Codex CLI | Supported | `.codex/skills/` |
+| OpenAI Codex | Supported | `.codex/skills/` and `~/.codex/prompts/` |
 
 ---
 
 ## Why AgileFlow?
 
-AgileFlow combines three proven methodologies:
-
-- **Agile (Scrum/Kanban)** - Break work into Epics → Stories → Acceptance Criteria
-- **ADRs** - Record architectural decisions so future teams don't re-debate
-- **Docs-as-Code** - Humans and AI agents coordinate via versioned files
+Traditional project management tools create friction between planning and execution. AgileFlow eliminates this gap by embedding project management directly into your AI-assisted coding workflow.
 
-**Key Benefits:**
-- Clear priorities and testable increments
-- Durable memory and decision history
-- Multi-agent collaboration via message bus
-- Works with any tech stack or framework
+- **No context switching** - Manage epics, stories, and status without leaving your terminal
+- **AI-native workflows** - Purpose-built for Claude Code's capabilities
+- **Docs-as-code** - All project artifacts live in your repository as plain text
+- **Intelligent agents** - 55 specialized AI agents for different domains
+- **Framework-agnostic** - Works with any tech stack
 
 ---
 
@@ -65,86 +54,68 @@ AgileFlow combines three proven methodologies:
 
 | Component | Count | Description |
 |-----------|-------|-------------|
-| [Commands](docs/04-architecture/commands.md) | 93 | Slash commands for agile workflows |
-| [Agents/Experts](docs/04-architecture/subagents.md) | 45 | Specialized agents with self-improving knowledge bases |
-| [Skills](docs/04-architecture/skills.md) | Dynamic | Generated on-demand with `/agileflow:skill:create` |
+| [Commands](https://docs.agileflow.projectquestorg.com/docs/commands) | 98 | Slash commands for agile workflows |
+| [Agents/Experts](https://docs.agileflow.projectquestorg.com/docs/agents) | 83 | Specialized agents with self-improving knowledge bases |
+| [Skills](https://docs.agileflow.projectquestorg.com/docs/features/skills) | Dynamic | Generated on-demand with `/agileflow:skill:create` |
 
 ---
 
-## Documentation
-
-Full documentation lives in [`docs/04-architecture/`](docs/04-architecture/):
-
-### Reference
-- [Commands](docs/04-architecture/commands.md) - All 93 slash commands
-- [Agents/Experts](docs/04-architecture/subagents.md) - 45 specialized agents with self-improving knowledge
-- [Skills](docs/04-architecture/skills.md) - Dynamic skill generator with MCP integration
-
-### Architecture
-- [AgileFlow CLI Overview](docs/04-architecture/agileflow-cli-overview.md) - System architecture
-- [Agent Expert System](docs/04-architecture/agent-expert-system.md) - Self-improving agents
-- [Multi-Expert Orchestration](docs/04-architecture/multi-expert-orchestration.md) - Parallel expert analysis
-- [Multi-Session Coordination](docs/04-architecture/multi-session-coordination.md) - Parallel Claude Code sessions
-
-### Configuration
-- [Configuration System](docs/04-architecture/configuration-system.md) - 8 configuration agents
-- [Hooks System](docs/04-architecture/hooks-system.md) - Event-driven automation
-- [Session Harness](docs/04-architecture/session-harness.md) - Test verification and sessions
-- [PreCompact Context](docs/04-architecture/precompact-context.md) - Context preservation during compacts
+## Features
+
+| Feature | Description | Docs |
+|---------|-------------|------|
+| Agent Expertise | Self-improving agents that maintain domain knowledge | [Learn more](https://docs.agileflow.projectquestorg.com/docs/features/agent-expertise-system) |
+| Agent Teams | Multi-domain expert coordination with quality gates | [Learn more](https://docs.agileflow.projectquestorg.com/docs/features/agent-teams) |
+| Skills System | Custom AI prompts that learn from your feedback | [Learn more](https://docs.agileflow.projectquestorg.com/docs/features/skills) |
+| Parallel Sessions | Isolated workspaces with boundary protection | [Learn more](https://docs.agileflow.projectquestorg.com/docs/features/parallel-sessions) |
+| Loop Mode | Autonomous story execution until epic completion | [Learn more](https://docs.agileflow.projectquestorg.com/docs/features/loop-mode) |
+| AI Council | Three-perspective strategic decision analysis | [Learn more](https://docs.agileflow.projectquestorg.com/docs/commands/council) |
+| Logic Audit | Multi-agent logic bug detection with consensus voting | [Learn more](https://docs.agileflow.projectquestorg.com/docs/commands/logic-audit) |
+| Damage Control | Block destructive commands with PreToolUse hooks | [Learn more](https://docs.agileflow.projectquestorg.com/docs/features/damage-control) |
+| Smart Detection | Contextual feature recommendations with 42 detectors | [Learn more](https://docs.agileflow.projectquestorg.com/docs/features/smart-detect) |
+| Visual Mode | Screenshot verification for UI development | [Learn more](https://docs.agileflow.projectquestorg.com/docs/features/visual-mode) |
+| Context Preservation | Preserve state during automatic context compaction | [Learn more](https://docs.agileflow.projectquestorg.com/docs/features/compact-context) |
+| Research Pipeline | Structured research workflow with synthesis | [Learn more](https://docs.agileflow.projectquestorg.com/docs/commands/research) |
+| Automations | Scheduled recurring tasks without a daemon | [Learn more](https://docs.agileflow.projectquestorg.com/docs/commands/automate) |
+| Tmux Integration | Multi-window terminal sessions with keybindings and status bar | [Learn more](https://docs.agileflow.projectquestorg.com/docs/features/tmux-keybindings) |
+| IDE Integrations | Claude Code, Cursor, Windsurf, OpenAI Codex support | [Learn more](https://docs.agileflow.projectquestorg.com/docs/features/ide-integrations) |
+
+See the [full features overview](https://docs.agileflow.projectquestorg.com/docs/features) for details.
 
 ---
 
 ## Examples
 
-### Create an Epic with Stories
 ```bash
+# Create an epic
 /agileflow:epic EPIC=EP-0001 TITLE="User Authentication" OWNER=AG-API GOAL="Secure login"
-```
 
-### Work on a Story
-```bash
-/agileflow:assign STORY=US-0001 NEW_OWNER=AG-UI NEW_STATUS=in-progress
-# ... implement ...
-/agileflow:status STORY=US-0001 STATUS=in-review SUMMARY="Login form complete"
-```
+# Work on a story
+/agileflow:babysit
 
-### Use Multi-Expert Analysis
-```bash
+# Multi-expert analysis
 /agileflow:multi-expert Is this authentication implementation secure?
-```
-
-### Work in Parallel Sessions
-```bash
-/agileflow:session:new       # Create isolated workspace
-/agileflow:session:status    # View all sessions
-```
 
----
-
-## Project Structure
-
-After running `agileflow setup`:
+# AI Council for strategic decisions
+/agileflow:council Should we use microservices or a monolith?
 
-```
-docs/
-  00-meta/             # Templates, conventions
-  01-brainstorming/    # Ideas and sketches
-  02-practices/        # Testing, git, CI practices
-  03-decisions/        # ADRs
-  04-architecture/     # Architecture documentation
-  05-epics/            # Epic definitions
-  06-stories/          # User stories
-  07-testing/          # Test cases
-  08-project/          # Roadmap, backlog
-  09-agents/           # Agent status, message bus
-  10-research/         # Research notes
+# Parallel sessions
+/agileflow:session:new
 ```
 
 ---
 
-## Online Documentation
+## Documentation
+
+Full documentation at **[docs.agileflow.projectquestorg.com](https://docs.agileflow.projectquestorg.com)**.
 
-Visit [docs.agileflow.projectquestorg.com](https://docs.agileflow.projectquestorg.com) for the full documentation site.
+| Section | Link |
+|---------|------|
+| Getting Started | [docs.agileflow.projectquestorg.com/docs/getting-started](https://docs.agileflow.projectquestorg.com/docs/getting-started) |
+| Installation | [docs.agileflow.projectquestorg.com/docs/installation](https://docs.agileflow.projectquestorg.com/docs/installation) |
+| Commands | [docs.agileflow.projectquestorg.com/docs/commands](https://docs.agileflow.projectquestorg.com/docs/commands) |
+| Agents | [docs.agileflow.projectquestorg.com/docs/agents](https://docs.agileflow.projectquestorg.com/docs/agents) |
+| Features | [docs.agileflow.projectquestorg.com/docs/features](https://docs.agileflow.projectquestorg.com/docs/features) |
 
 ---
 
@@ -154,4 +125,5 @@ MIT
 
 ## Support
 
-For issues or questions, visit the [GitHub repository](https://github.com/projectquestorg/AgileFlow).
+- [Documentation](https://docs.agileflow.projectquestorg.com) - Full docs site
+- [GitHub Issues](https://github.com/projectquestorg/AgileFlow/issues) - Bug reports and feature requests

package/lib/dashboard-automations.js

@@ -0,0 +1,130 @@
+'use strict';
+
+/**
+ * dashboard-automations.js - Automation Scheduling and Management
+ *
+ * Handles automation registry, scheduling (next run calculation),
+ * run/stop operations, and inbox integration.
+ * Extracted from dashboard-server.js for testability.
+ */
+
+/**
+ * Calculate next run time for an automation
+ * @param {Object} automation - Automation config with enabled and schedule properties
+ * @returns {string|null} - ISO timestamp, human-readable string, or null
+ */
+function calculateNextRun(automation) {
+  if (!automation.enabled || !automation.schedule) return null;
+
+  const now = new Date();
+  const schedule = automation.schedule;
+
+  switch (schedule.type) {
+    case 'on_session':
+      return 'Every session';
+    case 'daily': {
+      // Next day at midnight (or specified hour)
+      const nextDaily = new Date(now);
+      nextDaily.setDate(nextDaily.getDate() + 1);
+      nextDaily.setHours(schedule.hour || 0, 0, 0, 0);
+      return nextDaily.toISOString();
+    }
+    case 'weekly': {
+      // Next occurrence of the specified day
+      let targetDay = 0;
+      if (typeof schedule.day === 'string') {
+        const idx = [
+          'sunday',
+          'monday',
+          'tuesday',
+          'wednesday',
+          'thursday',
+          'friday',
+          'saturday',
+        ].indexOf(schedule.day.toLowerCase());
+        targetDay = idx >= 0 ? idx : 0; // Default to Sunday if invalid name
+      } else {
+        targetDay = schedule.day || 0;
+      }
+      const nextWeekly = new Date(now);
+      const daysUntil = (targetDay - now.getDay() + 7) % 7 || 7;
+      nextWeekly.setDate(nextWeekly.getDate() + daysUntil);
+      nextWeekly.setHours(schedule.hour || 0, 0, 0, 0);
+      return nextWeekly.toISOString();
+    }
+    case 'monthly': {
+      // Next occurrence of the specified date
+      const nextMonthly = new Date(now);
+      const targetDate = schedule.date || 1;
+      if (now.getDate() >= targetDate) {
+        nextMonthly.setMonth(nextMonthly.getMonth() + 1);
+      }
+      nextMonthly.setDate(targetDate);
+      nextMonthly.setHours(schedule.hour || 0, 0, 0, 0);
+      return nextMonthly.toISOString();
+    }
+    case 'interval': {
+      const hours = schedule.hours || 24;
+      return `Every ${hours} hour${hours > 1 ? 's' : ''}`;
+    }
+    default:
+      return null;
+  }
+}
+
+/**
+ * Create an inbox item from an automation result
+ * @param {string} automationId - Automation ID
+ * @param {Object} result - Run result
+ * @param {string|undefined} automationName - Display name of the automation
+ * @returns {Object} - Inbox item
+ */
+function createInboxItem(automationId, result, automationName) {
+  const itemId = `inbox_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
+
+  return {
+    id: itemId,
+    automationId,
+    title: automationName || automationId,
+    summary: result.success
+      ? result.output?.slice(0, 200) || 'Completed successfully'
+      : result.error?.slice(0, 200) || 'Failed',
+    timestamp: new Date().toISOString(),
+    status: 'unread',
+    result: {
+      success: result.success,
+      output: result.output,
+      error: result.error,
+      duration_ms: result.duration_ms,
+    },
+  };
+}
+
+/**
+ * Enrich automation list with running status and next run time
+ * @param {Array} automations - Raw automation list
+ * @param {Map} runningAutomations - Map of currently running automation IDs
+ * @param {Object} registry - Automation registry (for getRunHistory)
+ * @returns {Array} - Enriched automation list
+ */
+function enrichAutomationList(automations, runningAutomations, registry) {
+  return automations.map(automation => {
+    const isRunning = runningAutomations.has(automation.id);
+    const lastRun = registry.getRunHistory(automation.id, 1)[0];
+    const nextRun = calculateNextRun(automation);
+
+    return {
+      ...automation,
+      status: isRunning ? 'running' : automation.enabled ? 'idle' : 'disabled',
+      lastRun: lastRun?.at,
+      lastRunSuccess: lastRun?.success,
+      nextRun,
+    };
+  });
+}
+
+module.exports = {
+  calculateNextRun,
+  createInboxItem,
+  enrichAutomationList,
+};

package/lib/dashboard-git.js

@@ -0,0 +1,254 @@
+'use strict';
+
+/**
+ * dashboard-git.js - Git Operations for Dashboard
+ *
+ * Git status, diff, and action handlers used by the dashboard server.
+ * Extracted from dashboard-server.js for testability.
+ */
+
+// Lazy-loaded dependencies
+let _childProcess, _validatePaths;
+
+function getChildProcess() {
+  if (!_childProcess) _childProcess = require('child_process');
+  return _childProcess;
+}
+function getValidatePaths() {
+  if (!_validatePaths) _validatePaths = require('./validate-paths');
+  return _validatePaths;
+}
+
+/**
+ * Get current git status
+ * @param {string} projectRoot - Project root directory
+ * @returns {{ branch: string, staged: Array, unstaged: Array }}
+ */
+function getGitStatus(projectRoot) {
+  try {
+    const branch = getChildProcess()
+      .execFileSync('git', ['branch', '--show-current'], {
+        cwd: projectRoot,
+        encoding: 'utf8',
+        stdio: ['pipe', 'pipe', 'pipe'],
+      })
+      .trim();
+
+    const statusOutput = getChildProcess().execFileSync('git', ['status', '--porcelain'], {
+      cwd: projectRoot,
+      encoding: 'utf8',
+      stdio: ['pipe', 'pipe', 'pipe'],
+    });
+
+    const staged = [];
+    const unstaged = [];
+
+    for (const line of statusOutput.split('\n').filter(Boolean)) {
+      if (line.length < 4) continue; // Skip malformed lines (need XY + space + filename)
+      const indexStatus = line[0];
+      const workTreeStatus = line[1];
+      const file = line.slice(3);
+
+      // Parse the status character to a descriptive status
+      const parseStatus = char => {
+        switch (char) {
+          case 'A':
+            return 'added';
+          case 'M':
+            return 'modified';
+          case 'D':
+            return 'deleted';
+          case 'R':
+            return 'renamed';
+          case 'C':
+            return 'copied';
+          case '?':
+            return 'untracked';
+          default:
+            return 'modified';
+        }
+      };
+
+      if (indexStatus !== ' ' && indexStatus !== '?') {
+        staged.push({ path: file, file, status: parseStatus(indexStatus) });
+      }
+      if (workTreeStatus !== ' ') {
+        unstaged.push({
+          path: file,
+          file,
+          status: workTreeStatus === '?' ? 'untracked' : parseStatus(workTreeStatus),
+        });
+      }
+    }
+
+    return { branch, staged, unstaged };
+  } catch {
+    return { branch: 'unknown', staged: [], unstaged: [] };
+  }
+}
+
+/**
+ * Get diff for a specific file
+ * @param {string} filePath - Path to the file
+ * @param {string} projectRoot - Project root directory
+ * @param {boolean} staged - Whether to get staged diff
+ * @returns {string} - The diff content
+ */
+function getFileDiff(filePath, projectRoot, staged = false) {
+  // Validate filePath stays within project root
+  const pathResult = getValidatePaths().validatePath(filePath, projectRoot, {
+    allowSymlinks: true,
+  });
+  if (!pathResult.ok) {
+    return '';
+  }
+
+  try {
+    const diffArgs = staged ? ['diff', '--cached', '--', filePath] : ['diff', '--', filePath];
+
+    const diff = getChildProcess().execFileSync('git', diffArgs, {
+      cwd: projectRoot,
+      encoding: 'utf8',
+    });
+
+    // If no diff, file might be untracked - show entire file content as addition
+    if (!diff && !staged) {
+      const statusOutput = getChildProcess()
+        .execFileSync('git', ['status', '--porcelain', '--', filePath], {
+          cwd: projectRoot,
+          encoding: 'utf8',
+        })
+        .trim();
+
+      // Check if file is untracked
+      if (statusOutput.startsWith('??')) {
+        try {
+          const content = require('fs').readFileSync(
+            require('path').join(projectRoot, filePath),
+            'utf8'
+          );
+          // Format as a new file diff
+          const lines = content.split('\n');
+          return [
+            `diff --git a/${filePath} b/${filePath}`,
+            `new file mode 100644`,
+            `--- /dev/null`,
+            `+++ b/${filePath}`,
+            `@@ -0,0 +1,${lines.length} @@`,
+            ...lines.map(line => `+${line}`),
+          ].join('\n');
+        } catch {
+          return '';
+        }
+      }
+    }
+
+    return diff;
+  } catch (error) {
+    console.error('[Diff Error]', error.message);
+    return '';
+  }
+}
+
+/**
+ * Parse diff statistics from diff content
+ * @param {string} diff - The diff content
+ * @returns {{ additions: number, deletions: number }}
+ */
+function parseDiffStats(diff) {
+  let additions = 0;
+  let deletions = 0;
+
+  for (const line of diff.split('\n')) {
+    if (line.startsWith('+') && !line.startsWith('+++')) {
+      additions++;
+    } else if (line.startsWith('-') && !line.startsWith('---')) {
+      deletions++;
+    }
+  }
+
+  return { additions, deletions };
+}
+
+/**
+ * Execute a git action (stage, unstage, revert, commit)
+ * @param {string} type - Action type (git_stage, git_unstage, git_revert, git_commit)
+ * @param {string} projectRoot - Project root directory
+ * @param {Object} options - Action options
+ * @param {string[]} [options.files] - Files to operate on
+ * @param {string} [options.commitMessage] - Commit message (for git_commit)
+ * @param {Object} protocol - Protocol module reference
+ */
+function handleGitAction(type, projectRoot, options, protocol) {
+  const { files, commitMessage } = options;
+
+  // Validate file paths - reject path traversal attempts
+  if (files && files.length > 0) {
+    for (const f of files) {
+      if (typeof f !== 'string' || f.includes('\0')) {
+        throw new Error('Invalid file path');
+      }
+      const resolved = require('path').resolve(projectRoot, f);
+      if (!resolved.startsWith(projectRoot)) {
+        throw new Error('File path outside project');
+      }
+    }
+  }
+
+  // Validate commit message
+  if (commitMessage !== undefined && commitMessage !== null) {
+    if (
+      typeof commitMessage !== 'string' ||
+      commitMessage.length > 10000 ||
+      commitMessage.includes('\0')
+    ) {
+      throw new Error('Invalid commit message');
+    }
+  }
+
+  const fileArgs = files && files.length > 0 ? files : null;
+
+  switch (type) {
+    case protocol.InboundMessageType.GIT_STAGE:
+      if (fileArgs) {
+        getChildProcess().execFileSync('git', ['add', '--', ...fileArgs], {
+          cwd: projectRoot,
+        });
+      } else {
+        getChildProcess().execFileSync('git', ['add', '-A'], { cwd: projectRoot });
+      }
+      break;
+    case protocol.InboundMessageType.GIT_UNSTAGE:
+      if (fileArgs) {
+        getChildProcess().execFileSync('git', ['restore', '--staged', '--', ...fileArgs], {
+          cwd: projectRoot,
+        });
+      } else {
+        getChildProcess().execFileSync('git', ['restore', '--staged', '.'], {
+          cwd: projectRoot,
+        });
+      }
+      break;
+    case protocol.InboundMessageType.GIT_REVERT:
+      if (fileArgs) {
+        getChildProcess().execFileSync('git', ['checkout', '--', ...fileArgs], {
+          cwd: projectRoot,
+        });
+      }
+      break;
+    case protocol.InboundMessageType.GIT_COMMIT:
+      if (commitMessage) {
+        getChildProcess().execFileSync('git', ['commit', '-m', commitMessage], {
+          cwd: projectRoot,
+        });
+      }
+      break;
+  }
+}
+
+module.exports = {
+  getGitStatus,
+  getFileDiff,
+  parseDiffStats,
+  handleGitAction,
+};

package/lib/dashboard-inbox.js

@@ -0,0 +1,64 @@
+'use strict';
+
+/**
+ * dashboard-inbox.js - Inbox Management
+ *
+ * Manages the inbox of automation results and user actions
+ * (accept, dismiss, mark read).
+ * Extracted from dashboard-server.js for testability.
+ */
+
+/**
+ * Get sorted inbox items (newest first)
+ * @param {Map} inbox - Map of itemId -> InboxItem
+ * @returns {Array} - Sorted inbox items
+ */
+function getSortedInboxItems(inbox) {
+  return Array.from(inbox.values()).sort((a, b) => new Date(b.timestamp) - new Date(a.timestamp));
+}
+
+/**
+ * Handle an inbox action (accept, dismiss, read)
+ * @param {Map} inbox - Map of itemId -> InboxItem
+ * @param {string} itemId - Item ID
+ * @param {string} action - Action to perform (accept, dismiss, read)
+ * @returns {{ success: boolean, item?: Object, error?: string }}
+ */
+function handleInboxAction(inbox, itemId, action) {
+  const item = inbox.get(itemId);
+  if (!item) {
+    return { success: false, error: `Inbox item ${itemId} not found` };
+  }
+
+  switch (action) {
+    case 'accept':
+      item.status = 'accepted';
+      inbox.delete(itemId);
+      return {
+        success: true,
+        item,
+        notification: { level: 'success', message: `Accepted: ${item.title}` },
+      };
+
+    case 'dismiss':
+      item.status = 'dismissed';
+      inbox.delete(itemId);
+      return {
+        success: true,
+        item,
+        notification: { level: 'info', message: `Dismissed: ${item.title}` },
+      };
+
+    case 'read':
+      item.status = 'read';
+      return { success: true, item };
+
+    default:
+      return { success: false, error: `Unknown action: ${action}` };
+  }
+}
+
+module.exports = {
+  getSortedInboxItems,
+  handleInboxAction,
+};

package/lib/dashboard-protocol.js

@@ -490,6 +490,7 @@ function createTeamMetrics(traceId, metrics) {
     per_agent: (metrics && metrics.per_agent) || {},
     per_gate: (metrics && metrics.per_gate) || {},
     team_completion_ms: metrics && metrics.team_completion_ms,
+    total_cost_usd: (metrics && metrics.total_cost_usd) || 0,
     computed_at: metrics && metrics.computed_at,
     timestamp: new Date().toISOString(),
   };