aidevops 3.29.40 → 3.29.42

package/packages/gui-api/src/status-pulse-workers.ts

@@ -1,23 +1,22 @@
 import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
 import { join } from "node:path";
 import {
-  type GuiPulseAuthorAssociation,
-  type GuiPulseIssueOrigin,
-  type GuiPulseProviderId,
   type GuiPulseResourceKind,
   type GuiPulseResourceSnapshot,
+  type GuiPulseSystemicFinding,
+  type GuiPulseWorkerActionSummary,
   type GuiPulseWorkerActivityEvent,
   type GuiPulseWorkerChartSeries,
   type GuiPulseWorkerKpiCard,
-  type GuiPulseWorkerOutcome,
-  type GuiPulseWorkerSeverity,
-  type GuiPulseWorkerStatus,
   type GuiPulseWorkerSummary,
   type GuiPulseWorkerUsageSnapshot,
   type GuiPulsePeriodBucket,
   pulseWorkersFixture,
 } from "../../gui-shared/src";
 import { collapseHome, expandHome, formatEpochField, isRecord, readJsonObject, stringField } from "./status-adapter-utils";
+import { buildAttention } from "./status-pulse-workers-attention";
+import { authorAssociationFromRecord, isHealthyOutcome, issueOriginFromRecord, outcomeFromRecord, providerFromString, severityFromStatus, statusFromOutcome } from "./status-pulse-workers-classifiers";
+import { costRef, countOptions, durationMsFromRecord, type MetricRecord, numberValue, recordTimeMs, stringOrNumber, summaryFromRecord } from "./status-pulse-workers-values";
 
 export interface PulseWorkersAdapterOptions {
   metricsPath?: string;
@@ -35,8 +34,6 @@ interface SourceState {
   observed_at: string;
 }
 
-type MetricRecord = Record<string, unknown>;
-
 const DAY_MS = 86_400_000;
 const WEEK_MS = 7 * DAY_MS;
 const DEFAULT_SCOPE = "local aidevops telemetry";
@@ -44,11 +41,7 @@ const DEFAULT_METRICS_PATH_REF = "~/.aidevops/logs/headless-runtime-metrics.json
 const DEFAULT_PULSE_STATS_PATH_REF = "~/.aidevops/logs/pulse-stats.json";
 const DEFAULT_RESOURCE_METRICS_PATH_REF = "~/.aidevops/logs/resource-metrics.jsonl";
 const DEFAULT_TOKEN_REPORTS_ROOT_REF = "~/.aidevops/_reports/token-use";
-const DIRECT_WORKER_OUTCOMES = new Set<string>(["merged", "closed", "in_progress", "needs_maintainer_review", "blocked", "failed", "deferred", "created_followup"]);
-const WORKER_OUTCOME_KEYWORDS: Array<[string, GuiPulseWorkerOutcome]> = [["success", "merged"], ["complete", "merged"], ["follow", "created_followup"], ["defer", "deferred"], ["block", "blocked"], ["fail", "failed"], ["kill", "failed"]];
-const DIRECT_ISSUE_ORIGINS = new Set<string>(["aidevops_created", "maintainer_created", "origin_interactive", "third_party", "unknown"]);
-const ISSUE_ORIGIN_KEYWORDS: Array<[string, GuiPulseIssueOrigin]> = [["interactive", "origin_interactive"], ["third", "third_party"], ["community", "third_party"], ["maintainer", "maintainer_created"], ["aidevops", "aidevops_created"]];
-const KNOWN_PROVIDER_IDS: readonly GuiPulseProviderId[] = ["anthropic", "openai", "cursor", "google", "local"];
+const PULSE_WORKER_ACTIONS: GuiPulseWorkerActionSummary[] = pulseWorkersFixture.actions;
 
 export function readPulseWorkersSummary(options: PulseWorkersAdapterOptions = {}): { summary: GuiPulseWorkerSummary; source_path_refs: string[] } {
   const nowMs = options.nowMs ?? Date.parse(options.observedAt ?? new Date().toISOString());
@@ -73,12 +66,14 @@ export function readPulseWorkersSummary(options: PulseWorkersAdapterOptions = {}
   ];
 
   const dayMetrics = filterWindow(metrics.records, nowMs, DAY_MS);
+  const previousDayMetrics = filterWindowBetween(metrics.records, nowMs - (2 * DAY_MS), nowMs - DAY_MS);
   const weekMetrics = filterWindow(metrics.records, nowMs, WEEK_MS);
   const pulseCounters = extractPulseCounters(pulseStats.value, nowMs);
   const resourceSnapshots = resourceMetricsToSnapshots(resources.records, observedAt);
   const usageSamples = collectUsageSamples([...dayMetrics, ...tokenReports.records]);
   const events = buildEvents(dayMetrics, resourceSnapshots, usageSamples, observedAt);
-  const warnings = buildAttention(sourceStates, pulseCounters, resourceSnapshots, oauthPool.value);
+  const insights = buildInsights(events, dayMetrics, previousDayMetrics, resourceSnapshots);
+  const warnings = [...buildAttention(sourceStates, pulseCounters, resourceSnapshots, oauthPool.value), ...insights.map((finding) => ({ id: finding.id, severity: finding.severity, title: finding.title, detail: `${finding.detail} Recommended fix: ${finding.recommendation}`, event_ref: finding.event_refs[0] ?? null }))].slice(0, 12);
 
   const summary: GuiPulseWorkerSummary = {
     value_policy: "metadata_only_no_prompt_payloads_no_secrets",
@@ -89,9 +84,11 @@ export function readPulseWorkersSummary(options: PulseWorkersAdapterOptions = {}
     updated_at: observedAt,
     kpis: buildKpis(dayMetrics, weekMetrics, pulseCounters, usageSamples, resourceSnapshots),
     attention: warnings,
+    insights,
     filters: buildFilters(events),
     charts: buildCharts(metrics.records, pulseCounters, nowMs),
     events,
+    actions: PULSE_WORKER_ACTIONS,
   };
 
   return { summary, source_path_refs: sourceStates.map((source) => source.path_ref) };
@@ -144,20 +141,11 @@ function filterWindow(records: MetricRecord[], nowMs: number, windowMs: number):
   });
 }
 
-function recordTimeMs(record: MetricRecord): number | null {
-  for (const key of ["ts", "timestamp", "started_at", "finished_at", "created_at", "updated_at"]) {
-    const value = record[key];
-    if (typeof value === "number" && Number.isFinite(value)) {
-      return value > 9_999_999_999 ? value : value * 1000;
-    }
-    if (typeof value === "string" && value.length > 0) {
-      const parsed = Date.parse(value);
-      if (Number.isFinite(parsed)) {
-        return parsed;
-      }
-    }
-  }
-  return null;
+function filterWindowBetween(records: MetricRecord[], startMs: number, endMs: number): MetricRecord[] {
+  return records.filter((record) => {
+    const time = recordTimeMs(record);
+    return time !== null && time >= startMs && time < endMs;
+  });
 }
 
 function extractPulseCounters(value: Record<string, unknown>, nowMs: number): Record<string, number> {
@@ -192,21 +180,6 @@ function buildKpis(dayMetrics: MetricRecord[], weekMetrics: MetricRecord[], coun
   ];
 }
 
-function buildAttention(sources: SourceState[], counters: Record<string, number>, resources: GuiPulseResourceSnapshot[], oauthPool: Record<string, unknown>): GuiPulseWorkerSummary["attention"] {
-  const missing = sources.filter((source) => source.health !== "present");
-  const attention: GuiPulseWorkerSummary["attention"] = missing.map((source) => ({ id: `source-${source.health}-${slug(source.path_ref)}`, severity: source.health === "invalid" ? "warning" : "info", title: `Telemetry source ${source.health}`, detail: `${source.path_ref} was ${source.health}; the GUI used safe empty summaries for that source.`, event_ref: null }));
-  for (const [name, count] of Object.entries(counters).filter(([, count]) => count > 0)) {
-    attention.push({ id: `pulse-counter-${slug(name)}`, severity: "warning", title: `Pulse counter active: ${name}`, detail: `${count} events observed in the selected local period.`, event_ref: null });
-  }
-  for (const resource of resources.filter((item) => item.pressure === "medium" || item.pressure === "high")) {
-    attention.push({ id: `resource-${slug(resource.kind)}-${slug(resource.label)}`, severity: resource.pressure === "high" ? "critical" : "warning", title: `${resource.label} pressure ${resource.pressure}`, detail: resource.available_label, event_ref: null });
-  }
-  if (!hasAvailableProvider(oauthPool)) {
-    attention.push({ id: "provider-availability-unknown", severity: "info", title: "Provider availability unknown", detail: "OAuth pool metadata did not expose an available provider account count; the GUI marks provider capacity as unknown.", event_ref: null });
-  }
-  return attention.slice(0, 12);
-}
-
 function buildEvents(records: MetricRecord[], resources: GuiPulseResourceSnapshot[], usage: GuiPulseWorkerUsageSnapshot[], observedAt: string): GuiPulseWorkerActivityEvent[] {
   return records.slice(-25).sort((left, right) => (recordTimeMs(right) ?? 0) - (recordTimeMs(left) ?? 0)).map((record, index) => {
     const outcome = outcomeFromRecord(record);
@@ -238,11 +211,87 @@ function buildEvents(records: MetricRecord[], resources: GuiPulseResourceSnapsho
       drilldown_sections: [
         { label: "Evidence", body: "Derived from local worker outcome/resource metadata; prompt text and command payloads are not exposed." },
         { label: "Outcome", body: outcome },
+        { label: "Verification", body: verificationSummary(record) },
+        { label: "Systemic fix", body: systemicFixRecommendation(record, outcome) },
       ],
     };
   });
 }
 
+function buildInsights(events: GuiPulseWorkerActivityEvent[], dayMetrics: MetricRecord[], previousDayMetrics: MetricRecord[], resources: GuiPulseResourceSnapshot[]): GuiPulseSystemicFinding[] {
+  const findings: GuiPulseSystemicFinding[] = [];
+  const thirdPartyWaiting = events.filter((event) => event.issue_origin === "third_party" && (event.outcome === "needs_maintainer_review" || event.outcome === "blocked" || event.outcome === "in_progress"));
+  if (thirdPartyWaiting.length > 0) {
+    findings.push(finding("third-party-waiting", "third_party_waiting", "warning", "Third-party issues waiting", `${thirdPartyWaiting.length} community-origin issue events need triage or resolution in the selected period.`, "Community reports are separated from aidevops-created task handling and may need a maintainer decision before dispatch.", thirdPartyWaiting, "Create a systemic triage task that preserves non-collaborator trust boundaries and adds first-response thresholds.", "community waiting count", thirdPartyWaiting.length, "high"));
+  }
+
+  const failedOrBlocked = events.filter((event) => event.outcome === "failed" || event.outcome === "blocked");
+  for (const [key, group] of groupEvents(failedOrBlocked, (event) => [event.repo_ref ?? "repo:unknown", event.usage?.provider ?? "provider:unknown", event.resources[0]?.kind ?? "resource:unknown"].join("|"))) {
+    if (group.length > 1) {
+      findings.push(finding(`repeated-${key}`, "repeated_failure", "critical", "Repeated failure pattern", `${group.length} failed or blocked runs share repo/provider/resource context.`, "A repeated worker blindspot is likely being retried as individual failures instead of being converted into a shared guardrail or helper fix.", group, "Create a systemic fix task with grouped evidence, affected repo/provider/resource, and a focused verification command.", key.replaceAll("|", " · "), group.length, "medium"));
+    }
+  }
+
+  const weakVerification = events.filter((event) => event.drilldown_sections.some((section) => section.label === "Verification" && /missing|weak|not recorded/i.test(section.body)));
+  if (weakVerification.length > 0) {
+    findings.push(finding("weak-verification", "weak_verification", "warning", "No-verification outcomes", `${weakVerification.length} events lack strong verification metadata.`, "Workers may be completing or blocking without durable command evidence in the telemetry stream.", weakVerification, "Create a systemic fix task to require verification command capture in worker outcome records.", "verification coverage", weakVerification.length, "medium"));
+  }
+
+  const pressureEvents = events.filter((event) => event.resources.some((resource) => resource.pressure === "medium" || resource.pressure === "high"));
+  if (pressureEvents.length > 0 || resources.some((resource) => resource.pressure === "medium" || resource.pressure === "high")) {
+    findings.push(finding("resource-pressure", "resource_pressure", resources.some((resource) => resource.pressure === "high") ? "critical" : "warning", "Resource allowance pressure", `${pressureEvents.length} events overlapped medium/high resource pressure; ${resources.length} resource samples are in scope.`, "Provider quota, GitHub API, queue, CI, or local resource pressure can inflate retry cost and slow dispatch-to-merge cycles.", pressureEvents, "Create a systemic capacity task that records allowance snapshots before redispatching failed workers.", "resource pressure", Math.max(pressureEvents.length, resources.length), "medium"));
+  }
+
+  const currentCost = sumCost(dayMetrics);
+  const previousCost = sumCost(previousDayMetrics);
+  const failedCostEvents = events.filter((event) => (event.outcome === "failed" || event.outcome === "blocked") && event.usage?.estimated_cost_ref != null);
+  if (currentCost > 0 && previousCost > 0 && currentCost >= previousCost * 1.5) {
+    findings.push(finding("cost-spike", "cost_spike", "warning", "Cost spike versus previous period", `Estimated selected-period cost is ${currentCost.toFixed(2)} versus ${previousCost.toFixed(2)} in the previous equivalent window.`, "Retry loops or expensive models may be consuming allowance faster than successful outcomes justify.", events, "Create a systemic cost-control task that ties model/provider selection to outcome quality and retry count.", "estimated USD", dayMetrics.length, "medium", `previous equivalent period: ${previousCost.toFixed(2)}`));
+  } else if (failedCostEvents.length > 0) {
+    findings.push(finding("failed-run-cost", "high_retry_cost", "warning", "Failed-run cost attached to outcomes", `${failedCostEvents.length} failed or blocked events include token/cost metadata.`, "Cost is being spent on outcomes that did not merge, close, defer, or create follow-up work.", failedCostEvents, "Create a systemic retry-budget task that escalates or changes strategy before another costly rerun.", "failed-run cost samples", failedCostEvents.length, "medium"));
+  }
+
+  const slowEvents = events.filter((event) => (event.duration_ms ?? 0) >= 1_800_000);
+  if (slowEvents.length > 0) {
+    findings.push(finding("slow-bottlenecks", "slow_bottleneck", "warning", "Slow dispatch-to-outcome bottlenecks", `${slowEvents.length} events exceeded 30 minutes.`, "Long-running dispatch, review, or merge gates can hide queue/concurrency or CI runner bottlenecks.", slowEvents, "Create a systemic bottleneck task that separates dispatch-to-PR and PR-to-merge timing evidence.", "duration >=30m", slowEvents.length, "medium"));
+  }
+
+  return findings.slice(0, 8);
+}
+
+function finding(id: string, kind: GuiPulseSystemicFinding["kind"], severity: GuiPulseSystemicFinding["severity"], title: string, detail: string, likelyCause: string, events: GuiPulseWorkerActivityEvent[], recommendation: string, metricLabel: string, sampleSize: number, confidence: GuiPulseSystemicFinding["confidence"], comparisonLabel = "selected period scoped to active filters"): GuiPulseSystemicFinding {
+  return { id: `insight-${id.replace(/[^a-z0-9-]+/gi, "-").toLowerCase()}`, kind, severity, title, detail, likely_cause: likelyCause, evidence_refs: evidenceRefs(events), event_refs: events.map((event) => event.id).slice(0, 6), confidence, recommendation, metric_label: metricLabel, period_label: "Last 24h", scope_label: DEFAULT_SCOPE, comparison_label: comparisonLabel, sample_size: sampleSize, primary_action: "create_systemic_fix" };
+}
+
+function groupEvents(events: GuiPulseWorkerActivityEvent[], keyFor: (event: GuiPulseWorkerActivityEvent) => string): Map<string, GuiPulseWorkerActivityEvent[]> {
+  const groups = new Map<string, GuiPulseWorkerActivityEvent[]>();
+  for (const event of events) {
+    const key = keyFor(event);
+    groups.set(key, [...(groups.get(key) ?? []), event]);
+  }
+  return groups;
+}
+
+function evidenceRefs(events: GuiPulseWorkerActivityEvent[]): string[] {
+  return events.flatMap((event) => [event.repo_ref, event.issue_ref, event.pull_request_ref, event.worker_session_ref, event.command_job_ref].filter(Boolean) as string[]).slice(0, 8);
+}
+
+function verificationSummary(record: MetricRecord): string {
+  const value = stringField(record, "verification") ?? stringField(record, "testing") ?? stringField(record, "verification_status");
+  if (typeof value === "string" && value.length > 0) return value;
+  return "Verification missing or weak in local telemetry; outcome should carry command evidence before completion claims.";
+}
+
+function systemicFixRecommendation(record: MetricRecord, outcome: string): string {
+  if (/missing|weak|none/i.test(verificationSummary(record))) return "Require worker outcome telemetry to include verification commands and results.";
+  if (outcome === "failed" || outcome === "blocked") return "Group repeated failure evidence and create a worker-ready helper or validator fix.";
+  return "Create follow-up only when the same blindspot repeats across events in the selected period.";
+}
+
+function sumCost(records: MetricRecord[]): number {
+  return records.reduce((sum, record) => sum + (numberValue(record.estimated_cost_usd ?? record.cost_usd) ?? 0), 0);
+}
+
 function buildFilters(events: GuiPulseWorkerActivityEvent[]): GuiPulseWorkerSummary["filters"] {
   return {
     repos: countOptions(events.map((event) => event.repo_ref).filter(Boolean) as string[], "repo:"),
@@ -284,93 +333,3 @@ function usageFromRecord(record: MetricRecord): GuiPulseWorkerUsageSnapshot | nu
   const model = stringField(record, "model") ?? stringField(record, "model_ref") ?? null;
   return { provider, provider_ref: `provider:${provider}`, model_ref: model, input_tokens: input ?? 0, output_tokens: output ?? 0, cached_tokens: numberValue(record.cached_tokens) ?? 0, total_tokens: total, cost_ref: costRef(record), estimated_cost_ref: costRef(record), wall_time_ms: numberValue(record.wall_time_ms ?? record.duration_ms) ?? 0 };
 }
-
-function outcomeFromRecord(record: MetricRecord): GuiPulseWorkerOutcome {
-  const raw = String(record.outcome ?? record.result ?? record.status ?? "in_progress").toLowerCase();
-  if (DIRECT_WORKER_OUTCOMES.has(raw)) {
-    return raw as GuiPulseWorkerOutcome;
-  }
-  const match = WORKER_OUTCOME_KEYWORDS.find(([keyword]) => raw.includes(keyword));
-  return match?.[1] ?? "in_progress";
-}
-
-function statusFromOutcome(outcome: GuiPulseWorkerOutcome): GuiPulseWorkerStatus {
-  if (outcome === "failed") return "failed";
-  if (outcome === "blocked" || outcome === "needs_maintainer_review") return "blocked";
-  if (outcome === "in_progress") return "running";
-  if (outcome === "deferred") return "deferred";
-  return "completed";
-}
-
-function severityFromStatus(status: GuiPulseWorkerStatus): GuiPulseWorkerSeverity {
-  if (status === "failed" || status === "blocked") return "critical";
-  if (status === "attention" || status === "deferred") return "warning";
-  if (status === "completed" || status === "healthy") return "success";
-  return "info";
-}
-
-function isHealthyOutcome(outcome: GuiPulseWorkerOutcome): boolean {
-  return ["merged", "closed", "deferred", "created_followup"].includes(outcome);
-}
-
-function issueOriginFromRecord(record: MetricRecord): GuiPulseIssueOrigin {
-  const raw = String(record.issue_origin ?? record.origin ?? "unknown").toLowerCase();
-  if (DIRECT_ISSUE_ORIGINS.has(raw)) return raw as GuiPulseIssueOrigin;
-  const match = ISSUE_ORIGIN_KEYWORDS.find(([keyword]) => raw.includes(keyword));
-  return match?.[1] ?? "unknown";
-}
-
-function authorAssociationFromRecord(record: MetricRecord): GuiPulseAuthorAssociation {
-  const raw = String(record.author_association ?? "UNKNOWN").toUpperCase();
-  if (["OWNER", "MEMBER", "COLLABORATOR", "CONTRIBUTOR", "FIRST_TIME_CONTRIBUTOR", "NONE", "UNKNOWN"].includes(raw)) return raw as GuiPulseAuthorAssociation;
-  return "UNKNOWN";
-}
-
-function durationMsFromRecord(record: MetricRecord): number | null {
-  const duration = numberValue(record.duration_ms ?? record.wall_time_ms);
-  if (duration !== null) return duration;
-  const elapsed = numberValue(record.elapsed_s);
-  return elapsed === null ? null : elapsed * 1000;
-}
-
-function summaryFromRecord(record: MetricRecord, outcome: GuiPulseWorkerOutcome): string {
-  const issue = stringOrNumber(record.issue ?? record.issue_number);
-  return issue === null ? `Worker outcome: ${outcome}.` : `Worker outcome for #${issue.replace(/^#/, "")}: ${outcome}.`;
-}
-
-function countOptions(values: string[], prefix = ""): Array<{ id: string; label: string; count: number }> {
-  const counts = new Map<string, number>();
-  for (const value of values) counts.set(value, (counts.get(value) ?? 0) + 1);
-  return [...counts.entries()].map(([label, count]) => ({ id: `${prefix}${slug(label)}`, label, count })).sort((a, b) => b.count - a.count || a.label.localeCompare(b.label));
-}
-
-function hasAvailableProvider(value: Record<string, unknown>): boolean {
-  const providers = Array.isArray(value.providers) ? value.providers : [];
-  return providers.some((provider) => isRecord(provider) && (numberValue(provider.available) ?? 0) > 0);
-}
-
-function costRef(record: MetricRecord): string | null {
-  const cost = record.estimated_cost_ref ?? record.cost_ref;
-  if (typeof cost === "string" && cost.length > 0 && !cost.includes("/")) return cost;
-  const amount = numberValue(record.estimated_cost_usd ?? record.cost_usd);
-  return amount === null ? null : `$${amount.toFixed(2)} estimated`;
-}
-
-function providerFromString(value: string | undefined): GuiPulseProviderId {
-  if (KNOWN_PROVIDER_IDS.includes(value as GuiPulseProviderId)) return value as GuiPulseProviderId;
-  return "unknown";
-}
-
-function stringOrNumber(value: unknown): string | null {
-  if (typeof value === "string" && value.length > 0) return value;
-  if (typeof value === "number" && Number.isFinite(value)) return String(value);
-  return null;
-}
-
-function numberValue(value: unknown): number | null {
-  return typeof value === "number" && Number.isFinite(value) ? value : null;
-}
-
-function slug(value: string): string {
-  return value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "unknown";
-}

package/packages/gui-shared/src/contracts.ts

@@ -1,6 +1,6 @@
 export type GuiRouteClassification = "read" | "write" | "destructive";
 
-export type GuiOperationId = "setup.status.read" | "capabilities.read" | "filesystem.read" | "vault.status.read" | "apps.action.run" | "apps.action.status" | "tambo.session.read";
+export type GuiOperationId = "setup.status.read" | "capabilities.read" | "filesystem.read" | "vault.status.read" | "apps.action.run" | "apps.action.status" | "pulse_workers.action.run" | "pulse_workers.action.status" | "tambo.session.read";
 
 export type GuiFileRootId = "agents" | "config" | "localSetup" | "git";
 
@@ -106,6 +106,34 @@ export interface GuiAppActionJobSummary {
   output: string[];
 }
 
+export type GuiPulseWorkerActionId = "diagnose" | "run_pulse" | "open_logs" | "create_systemic_fix";
+
+export interface GuiPulseWorkerActionSummary {
+  id: GuiPulseWorkerActionId;
+  label: string;
+  enabled: boolean;
+  classification: GuiRouteClassification;
+  confirmation: "none" | "recommended" | "required";
+  command_preview: string;
+  target_ref: string;
+  scope_copy: string;
+  expected_effect: string;
+  audit_ref: string;
+}
+
+export interface GuiPulseWorkerActionJobSummary {
+  id: string;
+  action: GuiPulseWorkerActionId;
+  target_ref: string;
+  status: "running" | "completed" | "failed" | "rejected";
+  command_preview: string;
+  started_at: string;
+  finished_at: string | null;
+  exit_code: number | null;
+  output: string[];
+  audit_ref: string;
+}
+
 export interface GuiSecretReference {
   name: string;
   status: "configured" | "missing" | "unchecked";
@@ -239,9 +267,9 @@ export type GuiPulseWorkerOutcome = "merged" | "closed" | "in_progress" | "needs
 
 export type GuiPulseWorkerSeverity = "info" | "success" | "warning" | "critical";
 
-export type GuiPulseIssueOrigin = "aidevops_created" | "maintainer_created" | "origin_interactive" | "third_party" | "unknown";
+export type GuiPulseIssueOrigin = "aidevops_created" | "self_created" | "maintainer_created" | "origin_interactive" | "third_party" | "imported" | "unknown";
 
-export type GuiPulseAuthorAssociation = "OWNER" | "MEMBER" | "COLLABORATOR" | "CONTRIBUTOR" | "FIRST_TIME_CONTRIBUTOR" | "NONE" | "UNKNOWN";
+export type GuiPulseAuthorAssociation = "OWNER" | "MEMBER" | "COLLABORATOR" | "CONTRIBUTOR" | "FIRST_TIMER" | "FIRST_TIME_CONTRIBUTOR" | "NONE" | "UNKNOWN";
 
 export type GuiPulseResourceKind = "provider_model" | "github_api" | "ci_capacity" | "queue" | "cpu" | "memory" | "disk" | "network";
 
@@ -294,6 +322,27 @@ export interface GuiPulseWorkerChartSeries {
   points: GuiPulseWorkerChartPoint[];
 }
 
+export type GuiPulseInsightKind = "third_party_waiting" | "high_retry_cost" | "repeated_failure" | "cost_spike" | "weak_verification" | "resource_pressure" | "slow_bottleneck";
+
+export interface GuiPulseSystemicFinding {
+  id: string;
+  kind: GuiPulseInsightKind;
+  severity: GuiPulseWorkerSeverity;
+  title: string;
+  detail: string;
+  likely_cause: string;
+  evidence_refs: string[];
+  event_refs: string[];
+  confidence: "low" | "medium" | "high";
+  recommendation: string;
+  metric_label: string;
+  period_label: string;
+  scope_label: string;
+  comparison_label: string;
+  sample_size: number;
+  primary_action: GuiPulseWorkerActionId;
+}
+
 export interface GuiPulseWorkerActivityEvent {
   id: string;
   type: GuiPulseWorkerEventType;
@@ -333,6 +382,7 @@ export interface GuiPulseWorkerSummary {
   updated_at: string;
   kpis: GuiPulseWorkerKpiCard[];
   attention: Array<{ id: string; severity: GuiPulseWorkerSeverity; title: string; detail: string; event_ref: string | null }>;
+  insights: GuiPulseSystemicFinding[];
   filters: {
     repos: GuiPulseWorkerFilterOption[];
     event_types: GuiPulseWorkerFilterOption[];
@@ -345,6 +395,7 @@ export interface GuiPulseWorkerSummary {
   };
   charts: GuiPulseWorkerChartSeries[];
   events: GuiPulseWorkerActivityEvent[];
+  actions: GuiPulseWorkerActionSummary[];
 }
 
 export interface GuiConversationMessage {
@@ -655,6 +706,28 @@ export const APP_ACTION_STATUS_ROUTE_MANIFEST: GuiRouteManifest = {
   redactions: ["secret_values", "credential_paths", "private_key_material"],
 };
 
+export const PULSE_WORKERS_ACTION_ROUTE_MANIFEST: GuiRouteManifest = {
+  route: "/api/pulse-workers/actions/:action",
+  method: "POST",
+  operation_id: "pulse_workers.action.run",
+  classification: "write",
+  source_surface: "pulse_workers",
+  adapter: "pulseWorkerActions.startPulseWorkerAction",
+  command_pattern: ["allowlisted", "aidevops", "pulse/worker-diagnostics", "background-job"],
+  redactions: ["secret_values", "credential_paths", "private_key_material", "github_tokens", "authorization_headers", "session_cookies"],
+};
+
+export const PULSE_WORKERS_ACTION_STATUS_ROUTE_MANIFEST: GuiRouteManifest = {
+  route: "/api/pulse-workers/jobs/:jobId",
+  method: "GET",
+  operation_id: "pulse_workers.action.status",
+  classification: "read",
+  source_surface: "pulse_workers",
+  adapter: "pulseWorkerActions.readPulseWorkerActionJob",
+  command_pattern: ["background-job", "metadata-and-redacted-output-only"],
+  redactions: ["secret_values", "credential_paths", "private_key_material", "github_tokens", "authorization_headers", "session_cookies"],
+};
+
 export const GUI_FILE_ROOTS: readonly GuiFileRootDefinition[] = [
   {
     id: "agents",

package/packages/gui-shared/src/fixtures.ts

@@ -27,6 +27,11 @@ export const pulseWorkersFixture: GuiPulseWorkerSummary = {
     { id: "stale-loop", severity: "warning", title: "1 worker loop matched stale-symptom diagnostics", detail: "Pulse should suggest a systemic diagnostics task instead of another retry.", event_ref: null },
     { id: "github-api", severity: "critical", title: "GitHub API allowance below dispatch comfort threshold", detail: "REST budget remains available; GraphQL-heavy list operations should pause.", event_ref: "event:community-25876" },
   ],
+  insights: [
+    { id: "insight-community-waiting", kind: "third_party_waiting", severity: "warning", title: "Third-party issues waiting", detail: "1 community-origin issue needs triage before dispatch.", likely_cause: "Community reports require collaborator trust-boundary handling and may need maintainer decisions.", evidence_refs: ["marcusquinn/aidevops", "#25876"], event_refs: ["event:community-25876"], confidence: "high", recommendation: "Create a systemic triage task with first-response thresholds and non-collaborator safety checks.", metric_label: "community waiting count", period_label: pulsePeriod, scope_label: pulseScope, comparison_label: "previous 24h baseline", sample_size: 1, primary_action: "create_systemic_fix" },
+    { id: "insight-weak-verification", kind: "weak_verification", severity: "warning", title: "No-verification outcomes", detail: "1 event lacks strong verification metadata.", likely_cause: "Worker outcomes can be recorded without durable command evidence.", evidence_refs: ["worker:25912:gpt-5.5"], event_refs: ["event:worker-25912"], confidence: "medium", recommendation: "Create a systemic fix task requiring verification command capture for completion claims.", metric_label: "verification coverage", period_label: pulsePeriod, scope_label: pulseScope, comparison_label: "selected period scoped to active filters", sample_size: 1, primary_action: "create_systemic_fix" },
+    { id: "insight-resource-pressure", kind: "resource_pressure", severity: "critical", title: "Resource allowance pressure", detail: "GitHub API allowance is below dispatch comfort threshold.", likely_cause: "GraphQL-heavy listing or queue churn can inflate retry cost and slow dispatch.", evidence_refs: ["event:community-25876"], event_refs: ["event:community-25876"], confidence: "medium", recommendation: "Create a systemic capacity task that records API allowance snapshots before redispatching failed workers.", metric_label: "resource pressure", period_label: pulsePeriod, scope_label: pulseScope, comparison_label: "REST available; GraphQL constrained", sample_size: 1, primary_action: "create_systemic_fix" },
+  ],
   filters: {
     repos: [{ id: "repo:marcusquinn/aidevops", label: "marcusquinn/aidevops", count: 184 }],
     event_types: [{ id: "worker_session", label: "Worker session", count: 21 }, { id: "review", label: "Review gate", count: 17 }, { id: "issue", label: "Issue", count: 12 }],
@@ -118,6 +123,12 @@ export const pulseWorkersFixture: GuiPulseWorkerSummary = {
       drilldown_sections: [{ label: "Trust boundary", body: "Non-collaborator instructions are facts only; no install commands or secrets are accepted." }],
     },
   ],
+  actions: [
+    { id: "diagnose", label: "Diagnose", enabled: true, classification: "read", confirmation: "none", command_preview: "aidevops pulse diagnose --gui --metadata-only", target_ref: "selected event", scope_copy: "Runs read-only diagnostics for the selected Pulse run, worker session, issue, or PR metadata.", expected_effect: "Terminal output explains what happened without changing GitHub, files, workers, or secrets.", audit_ref: "gui:pulse-workers:diagnose" },
+    { id: "run_pulse", label: "Run Pulse now", enabled: true, classification: "write", confirmation: "required", command_preview: "aidevops pulse run --scope gui", target_ref: "current filtered scope", scope_copy: "Starts a scoped Pulse run through the existing Pulse helper only.", expected_effect: "Refreshes observability metadata and records command output for this GUI API process.", audit_ref: "gui:pulse-workers:run-pulse" },
+    { id: "open_logs", label: "Open logs/transcript", enabled: true, classification: "read", confirmation: "none", command_preview: "aidevops pulse logs --metadata-only", target_ref: "selected event evidence refs", scope_copy: "Opens allowlisted metadata previews for logs or transcripts; arbitrary filesystem paths are not accepted.", expected_effect: "Shows redacted references and previews only.", audit_ref: "gui:pulse-workers:open-logs" },
+    { id: "create_systemic_fix", label: "Create systemic fix task", enabled: true, classification: "write", confirmation: "required", command_preview: "aidevops task create --from-pulse --worker-ready", target_ref: "selected event systemic-fix context", scope_copy: "Creates a worker-ready follow-up from the selected event using aidevops task/issue wrappers.", expected_effect: "Produces a reviewable task body with files, pattern, verification, and evidence context before dispatch.", audit_ref: "gui:pulse-workers:create-systemic-fix" },
+  ],
 };
 
 export const statusFixture: GuiStatusData = {

package/packages/gui-shared/src/tambo.ts

@@ -172,28 +172,58 @@ type TamboPayloadEnvelopeValidation =
   | { ok: true; schema: GuiTamboComponentSchema; props: Record<string, unknown> }
   | { ok: false; result: GuiTamboValidationResult };
 
+type TamboComponentLookup =
+  | { ok: true; payload: Record<string, unknown>; schema: GuiTamboComponentSchema }
+  | { ok: false; result: GuiTamboValidationResult };
+
 function validateTamboPayloadEnvelope(payload: unknown, scope: GuiConversationScope): TamboPayloadEnvelopeValidation {
+  const lookup = resolveTamboComponentLookup(payload);
+  if (lookup.ok === false) {
+    return lookup;
+  }
+
+  const envelopeError = validateScopedTamboEnvelope(lookup.payload, scope);
+  if (envelopeError !== null) {
+    return { ok: false, result: invalid(lookup.schema.name, {}, envelopeError) };
+  }
+
+  const props = resolveTamboComponentProps(lookup.schema, lookup.payload.props);
+  if (props.ok === false) {
+    return props;
+  }
+
+  return { ok: true, schema: lookup.schema, props: props.value };
+}
+
+function resolveTamboComponentLookup(payload: unknown): TamboComponentLookup {
   if (!isRecord(payload)) {
     return { ok: false, result: invalid(null, {}, "payload_not_object") };
   }
-  if (typeof payload.component !== "string") {
-    return { ok: false, result: invalid(null, {}, "component_missing") };
-  }
 
-  const schema = findTamboComponentSchema(payload.component);
+  const schema = resolveTamboComponentSchema(payload.component);
   if (schema === undefined) {
-    return { ok: false, result: invalid(null, {}, "component_not_registered") };
+    return { ok: false, result: invalid(null, {}, componentLookupError(payload.component)) };
   }
 
-  const envelopeError = validateScopedTamboEnvelope(payload, scope);
-  if (envelopeError !== null) {
-    return { ok: false, result: invalid(schema.name, {}, envelopeError) };
-  }
-  if (!isRecord(payload.props)) {
+  return { ok: true, payload, schema };
+}
+
+function resolveTamboComponentSchema(component: unknown): GuiTamboComponentSchema | undefined {
+  return typeof component === "string" ? findTamboComponentSchema(component) : undefined;
+}
+
+function componentLookupError(component: unknown): string {
+  return typeof component === "string" ? "component_not_registered" : "component_missing";
+}
+
+function resolveTamboComponentProps(
+  schema: GuiTamboComponentSchema,
+  props: unknown,
+): { ok: true; value: Record<string, unknown> } | { ok: false; result: GuiTamboValidationResult } {
+  if (!isRecord(props)) {
     return { ok: false, result: invalid(schema.name, {}, "props_not_object") };
   }
-
-  return { ok: true, schema, props: payload.props };
+  return { ok: true, value: props };
 }
 
 function findTamboComponentSchema(component: string): GuiTamboComponentSchema | undefined {

package/packages/gui-web/src/AppActionTerminal.tsx

@@ -1,11 +1,14 @@
-import type { GuiAppActionJobSummary } from "@aidevops/gui-shared";
+import type { GuiAppActionJobSummary, GuiPulseWorkerActionJobSummary } from "@aidevops/gui-shared";
 import { type ReactElement, type ReactNode, useEffect, useRef } from "react";
 import { FiX } from "react-icons/fi";
 
 const ANSI_PATTERN = /\x1b\[([0-9;]*)m/g;
 
-export function AppActionTerminal({ job, onDismiss }: { job: GuiAppActionJobSummary; onDismiss: (jobId: string) => void }): ReactElement {
+type TerminalJob = GuiAppActionJobSummary | GuiPulseWorkerActionJobSummary;
+
+export function AppActionTerminal({ job, label, onDismiss }: { job: TerminalJob; label?: string; onDismiss: (jobId: string) => void }): ReactElement {
   const outputRef = useRef<HTMLPreElement | null>(null);
+  const title = label ?? terminalTitle(job);
 
   useEffect(() => {
     if (outputRef.current !== null) {
@@ -14,14 +17,18 @@ export function AppActionTerminal({ job, onDismiss }: { job: GuiAppActionJobSumm
   }, [job.output.length]);
 
   return (
-    <section className="app-terminal" id={`app-job-${job.id}`} aria-label="App action terminal output">
-      <header><strong>{job.app_id} {job.action}</strong><span>{terminalStatusLabel(job)}</span><button aria-label={`Dismiss ${job.app_id} ${job.action} terminal output`} className="terminal-close-button" onClick={() => onDismiss(job.id)} title="Dismiss terminal output" type="button"><FiX aria-hidden="true" /></button></header>
+    <section className="app-terminal" id={`app-job-${job.id}`} aria-label={`${title} terminal output`}>
+      <header><strong>{title}</strong><span>{terminalStatusLabel(job)}</span><button aria-label={`Dismiss ${title} terminal output`} className="terminal-close-button" onClick={() => onDismiss(job.id)} title="Dismiss terminal output" type="button"><FiX aria-hidden="true" /></button></header>
       <pre ref={outputRef}>{renderTerminalOutput(job.output)}</pre>
     </section>
   );
 }
 
-function terminalStatusLabel(job: GuiAppActionJobSummary): string {
+function terminalTitle(job: TerminalJob): string {
+  return "app_id" in job ? `${job.app_id} ${job.action}` : `Pulse & Workers ${job.action}`;
+}
+
+function terminalStatusLabel(job: TerminalJob): string {
   if (job.status === "running") {
     return "running";
   }

package/packages/gui-web/src/GenUiCards.tsx

@@ -1,10 +1,11 @@
 import { validateTamboComponentPayload, type GuiConversationMessagePart, type GuiConversationScope, type GuiTamboValidationResult } from "../../gui-shared/src";
+import { text } from "./app-model";
 
 export function TamboConversationPart({ part, scope }: { part: GuiConversationMessagePart; scope: GuiConversationScope }) {
   const validation = validateTamboComponentPayload(part.payload_json, scope);
 
   if (!validation.ok) {
-    return <div className="genui-card genui-card-invalid" data-genui-component={validation.component ?? "unknown"} role="note"><strong>Unsupported DevOps card</strong><small>{validation.errors.join(", ")}</small></div>;
+    return <div className="genui-card genui-card-invalid" data-genui-component={validation.component ?? "unknown"} role="note"><strong>{text.unsupportedDevOpsCard}</strong><small>{validation.errors.join(", ")}</small></div>;
   }
 
   return <DevOpsCard validation={validation} />;
@@ -15,15 +16,15 @@ function DevOpsCard({ validation }: { validation: GuiTamboValidationResult }) {
   const entries = Object.entries(props).filter(([key]) => key !== "title" && key !== "disabled");
 
   return (
-    <section className="genui-card" data-genui-component={validation.component ?? "unknown"} aria-label={`${validation.component} DevOps card`}>
+    <section className="genui-card" data-genui-component={validation.component ?? "unknown"} aria-label={`${validation.component} ${text.devOpsCard}`}>
       <header>
-        <p className="eyebrow">Tambo GenUI · read-only</p>
+        <p className="eyebrow">{text.tamboGenUiReadOnly}</p>
         <h3>{stringProp(props.title) ?? validation.component}</h3>
       </header>
       <dl>
         {entries.map(([key, value]) => <CardProperty key={key} name={key} value={value} />)}
       </dl>
-      {validation.component === "ApprovalPromptCard" ? <p className="genui-deferred">Approval execution is deferred until audited approval tooling exists.</p> : null}
+      {validation.component === "ApprovalPromptCard" ? <p className="genui-deferred">{text.approvalExecutionDeferred}</p> : null}
     </section>
   );
 }