create-safest-tools 0.6.0 → 0.6.1

package/template/console/command/types.ts

@@ -1,49 +1,54 @@
 import type { WorkspaceView } from "../shell/types";
 
-export type CommandStatusTone = "neutral" | "warning" | "danger";
+export type CommandStatusTone = "neutral" | "positive" | "warning" | "danger";
 
 export type CommandAction =
   | { type: "report"; reportId: string }
   | { type: "view"; view: WorkspaceView };
 
 export interface CommandMetricSnapshot {
-  openReports: number;
-  needsHuman: number;
-  activeRuns: number;
-  unresolvedIncidents: number;
+  awaitingReview: number;
+  urgent: number;
+  unassigned: number;
+  onlineReviewers: number;
+  oldestWaitMinutes: number;
 }
 
 export interface CommandAttentionItem {
   id: string;
-  icon: string;
   title: string;
-  detail: string;
-  meta: string;
-  urgent: boolean;
+  reference: string;
+  queueName: string;
+  age: string;
+  ownership: string;
+  priorityLabel: string;
+  slaLabel: string;
+  tone: CommandStatusTone;
   action: CommandAction;
 }
 
 export interface CommandQueueLoad {
   id: string;
   name: string;
-  targetMinutes: number;
+  targetMinutes: number | null;
   openCount: number;
+  unassignedCount: number;
+  oldestMinutes: number;
+  breachedCount: number;
   pressure: number;
+  tone: CommandStatusTone;
 }
 
-export interface CommandRunSummary {
-  id: string;
-  title: string;
-  detail: string;
-  status: string;
-  tone: CommandStatusTone;
-  age: string;
-  action: CommandAction;
+export interface CommandSystemHealth {
+  issueCount: number;
+  incidentCount: number;
+  workflowIssueCount: number;
+  deliveryFailureCount: number;
+  activeRunCount: number;
 }
 
 export interface CommandPermissions {
   useAssistant: boolean;
-  manageWorkflows: boolean;
   viewAudit: boolean;
   manageInstallation: boolean;
 }
@@ -51,11 +56,10 @@ export interface CommandPermissions {
 export interface CommandSnapshot {
   loading: boolean;
   generatedAt: string;
-  firstName: string;
   metrics: CommandMetricSnapshot;
   attention: CommandAttentionItem[];
   queueLoads: CommandQueueLoad[];
-  recentRuns: CommandRunSummary[];
+  systemHealth: CommandSystemHealth;
   incompleteSetupCount: number;
   permissions: CommandPermissions;
 }

package/template/console/registry/RegistryDetailsDialog.tsx

@@ -124,7 +124,7 @@ export function RegistryDetailsDialog({ item, kind, canManage, onClose, onChange
   useEffect(() => {
     if (!item) return;
     let active = true;
-    setLoading(true); setError(""); setDetail(null); setDependencies(null); setValidation(null); setConfirmArchive(false);
+    setLoading(true); setPending(""); setError(""); setDetail(null); setDependencies(null); setValidation(null); setConfirmArchive(false);
     void Promise.all([
       requestJson<RegistryDetailResponse>(`/v1/admin/${route}/${encodeURIComponent(item.id)}`),
       requestJson<RegistryDependenciesResponse>(`/v1/admin/${route}/${encodeURIComponent(item.id)}/dependencies`),

package/template/console/registry/RegistryDialog.tsx

@@ -4,20 +4,21 @@ import { getShellSnapshot, subscribeToShell } from "../shell/store";
 import { announceRegistryChanged, registryEvents } from "./events";
 import type { ConnectionListResponse, ConnectionSummary, RegistryKind } from "./types";
 
-type ToolPurpose = "enrichment" | "action" | "ai" | "message";
-type ComponentKind = "built_in" | "webhook_enrichment" | "api_enrichment" | "workers_ai" | "specialist_agent" | "action" | "message";
-type ImplementationKind = "built_in" | "webhook" | "external_api" | "workers_ai" | "specialist_agent" | "message_template";
+type ToolPurpose = "enrichment" | "action" | "ai";
+type ComponentKind = "webhook_enrichment" | "api_enrichment" | "workers_ai" | "action";
+type ImplementationKind = "webhook" | "external_api" | "workers_ai";
 type ConnectionKind = "webhook" | "external_api" | "customer_worker" | "ai_provider" | "notification" | "email";
 type CredentialStrategy = "none" | "static_header" | "bearer" | "hmac" | "service_binding";
 
 const inputSchemaDefault = JSON.stringify({ type: "object", properties: { report: { type: "object" } } }, null, 2);
 const outputSchemaDefault = JSON.stringify({ type: "object", properties: { result: { type: "string" } } }, null, 2);
+const fixtureInputDefault = JSON.stringify({ report: {} }, null, 2);
+const fixtureOutputDefault = JSON.stringify({ result: "ok" }, null, 2);
 
 const purposeOptions: Array<{ value: ToolPurpose; title: string; description: string; meta: string; icon: string }> = [
   { value: "enrichment", title: "Enrichment", description: "Read customer context and add findings to a report.", meta: "Read-only", icon: "＋" },
   { value: "action", title: "Action", description: "Apply a reviewed change in a customer system.", meta: "Approval required", icon: "⚡" },
   { value: "ai", title: "AI analysis", description: "Classify, summarize, or analyze report evidence.", meta: "Read-only", icon: "✦" },
-  { value: "message", title: "Message", description: "Send a reusable, governed report communication.", meta: "Read-only", icon: "✉" },
 ];
 
 function slug(value: string): string {
@@ -36,19 +37,15 @@ function jsonObject(value: string, label: string): Record<string, unknown> {
 
 function componentForPurpose(purpose: ToolPurpose, implementation: ImplementationKind): ComponentKind {
   if (purpose === "action") return "action";
-  if (purpose === "ai") return implementation === "workers_ai" ? "workers_ai" : "specialist_agent";
-  if (purpose === "message") return "message";
+  if (purpose === "ai") return "workers_ai";
   if (implementation === "webhook") return "webhook_enrichment";
-  if (implementation === "external_api") return "api_enrichment";
-  return "built_in";
+  return "api_enrichment";
 }
 
 function referenceLabel(implementation: ImplementationKind): string {
   if (["webhook", "external_api"].includes(implementation)) return "Operation";
   if (implementation === "workers_ai") return "Workers AI model";
-  if (implementation === "specialist_agent") return "Specialist identifier";
-  if (implementation === "message_template") return "Message template key";
-  return "Built-in handler";
+  return "Implementation";
 }
 
 export function RegistryDialog() {
@@ -64,14 +61,16 @@ export function RegistryDialog() {
   const [keyEdited, setKeyEdited] = useState(false);
   const [description, setDescription] = useState("");
   const [purpose, setPurpose] = useState<ToolPurpose>("enrichment");
-  const [implementation, setImplementation] = useState<ImplementationKind>("built_in");
-  const [reference, setReference] = useState("custom-enrichment-v1");
+  const [implementation, setImplementation] = useState<ImplementationKind>("external_api");
+  const [reference, setReference] = useState("POST /");
   const [connectionVersionId, setConnectionVersionId] = useState("");
   const [risk, setRisk] = useState("low");
   const [inputFields, setInputFields] = useState("report.id, report.reason_code");
   const [classifications, setClassifications] = useState("report_operational");
   const [inputSchema, setInputSchema] = useState(inputSchemaDefault);
   const [outputSchema, setOutputSchema] = useState(outputSchemaDefault);
+  const [fixtureInput, setFixtureInput] = useState(fixtureInputDefault);
+  const [fixtureOutput, setFixtureOutput] = useState(fixtureOutputDefault);
   const [connections, setConnections] = useState<ConnectionSummary[]>([]);
   const [connectionKind, setConnectionKind] = useState<ConnectionKind>("external_api");
   const [targetMode, setTargetMode] = useState<"url" | "service">("url");
@@ -84,8 +83,9 @@ export function RegistryDialog() {
 
   const reset = (): void => {
     setStep(0); setName(""); setKey(""); setKeyEdited(false); setDescription(""); setPurpose("enrichment");
-    setImplementation("built_in"); setReference("custom-enrichment-v1"); setConnectionVersionId(""); setRisk("low");
+    setImplementation("external_api"); setReference("POST /"); setConnectionVersionId(""); setRisk("low");
     setInputFields("report.id, report.reason_code"); setClassifications("report_operational"); setInputSchema(inputSchemaDefault); setOutputSchema(outputSchemaDefault);
+    setFixtureInput(fixtureInputDefault); setFixtureOutput(fixtureOutputDefault);
     setConnectionKind("external_api"); setTargetMode("url"); setBaseUrl(""); setServiceBinding(""); setMethods("POST"); setPaths("/"); setCredential("none"); setSecretReference(""); setError("");
   };
   const close = (): void => { if (!pending) { setKind(null); reset(); } };
@@ -127,19 +127,15 @@ export function RegistryDialog() {
 
   const selectPurpose = (next: ToolPurpose): void => {
     setPurpose(next);
-    if (next === "enrichment") { setImplementation("built_in"); setReference("custom-enrichment-v1"); setRisk("low"); }
+    if (next === "enrichment") { setImplementation("external_api"); setReference("POST /"); setRisk("low"); }
     if (next === "action") { setImplementation("external_api"); setReference("POST /"); setRisk("high"); }
     if (next === "ai") { setImplementation("workers_ai"); setReference("@cf/meta/llama-3.1-8b-instruct"); setRisk("medium"); }
-    if (next === "message") { setImplementation("message_template"); setReference("report-update-v1"); setRisk("low"); }
   };
 
   const changeImplementation = (next: ImplementationKind): void => {
     setImplementation(next); setConnectionVersionId("");
-    if (next === "built_in") setReference("custom-enrichment-v1");
     if (["webhook", "external_api"].includes(next)) setReference("POST /");
     if (next === "workers_ai") setReference("@cf/meta/llama-3.1-8b-instruct");
-    if (next === "specialist_agent") setReference("custom-specialist-v1");
-    if (next === "message_template") setReference("report-update-v1");
   };
 
   const changeTargetMode = (next: "url" | "service"): void => {
@@ -161,7 +157,10 @@ export function RegistryDialog() {
         if (!reference.trim()) { setError(`Enter the ${referenceLabel(implementation).toLowerCase()}.`); return false; }
         if (needsConnection && !connectionVersionId) { setError("Select the connection this tool should use."); return false; }
         if (!commaValues(inputFields).length || !commaValues(classifications).length) { setError("Add at least one allowed input field and data classification."); return false; }
-        try { jsonObject(inputSchema, "Input schema"); jsonObject(outputSchema, "Output schema"); } catch (cause) { setError(errorMessage(cause, "Fix the JSON schemas.")); return false; }
+        try {
+          jsonObject(inputSchema, "Input schema"); jsonObject(outputSchema, "Output schema");
+          jsonObject(fixtureInput, "Example input"); jsonObject(fixtureOutput, "Example output");
+        } catch (cause) { setError(errorMessage(cause, "Fix the JSON contracts.")); return false; }
       } else {
         if (!commaValues(methods).length || !commaValues(paths).every((value) => value.startsWith("/"))) { setError("Allow at least one method and use absolute paths beginning with /."); return false; }
         if (needsSecret && !/^(?:CONNECTION|OAUTH|ACTION|NOTIFICATION|EMAIL|AI)_[A-Z0-9_]{2,96}$/u.test(secretReference)) { setError("Enter a valid Worker secret binding name, not the secret value."); return false; }
@@ -202,7 +201,7 @@ export function RegistryDialog() {
               timeout_policy: { timeout_ms: 5000 }, retry_policy: { maximum_attempts: isAction ? 5 : 3, backoff: "exponential" },
               cache_policy: { enabled: !isAction }, concurrency_policy: { maximum_concurrency: 8 }, budget_policy: {},
               approval_policy: isAction ? { mode: "human" } : {}, tool_manifest: [],
-              compatibility: { fixture_evidence: { passed: true, fixtures: [{ name: "Contract example", input: { report: {} }, expected_output: { result: "ok" }, expected_status: "succeeded", mode: "simulated" }] } },
+              compatibility: { fixture_evidence: { fixtures: [{ name: "Contract example", input: jsonObject(fixtureInput, "Example input"), expected_output: jsonObject(fixtureOutput, "Example output"), expected_status: "succeeded", mode: "simulated" }] } },
             },
           }),
         });
@@ -215,14 +214,14 @@ export function RegistryDialog() {
   const componentSetup = <>
     <div className={`safety-boundary ${isAction ? "registry-action-boundary" : ""}`}><strong>{isAction ? "Can change customer data" : "Read-only authority"}</strong><span>{isAction ? "Every workflow using this action must require human or bounded approval." : "This tool may add context and findings but cannot change customer data."}</span></div>
     <div className="form-grid">
-      <label>How it runs<select value={implementation} onChange={(event) => changeImplementation(event.currentTarget.value as ImplementationKind)}>{purpose === "enrichment" ? <><option value="built_in">Built-in logic</option><option value="external_api">Connected API</option><option value="webhook">Connected webhook</option></> : purpose === "action" ? <><option value="external_api">Connected API</option><option value="webhook">Connected webhook</option></> : purpose === "ai" ? <><option value="workers_ai">Workers AI</option><option value="specialist_agent">Specialist agent</option></> : <option value="message_template">Message template</option>}</select><small>{needsConnection ? "Requests use a separately governed connection." : "Runs inside this Resolve deployment."}</small></label>
+      <label>How it runs<select value={implementation} onChange={(event) => changeImplementation(event.currentTarget.value as ImplementationKind)}>{purpose === "ai" ? <option value="workers_ai">Workers AI</option> : <><option value="external_api">Connected API</option><option value="webhook">Connected webhook</option></>}</select><small>{needsConnection ? "Requests use a separately governed connection." : "Runs inside this Resolve deployment."}</small></label>
       <label>{referenceLabel(implementation)}<input value={reference} onChange={(event) => setReference(event.currentTarget.value)} /><small>{needsConnection ? "For example: POST /v1/enrich/report" : "An immutable runtime reference."}</small></label>
       {needsConnection ? <label className="wide-field">Connection<select value={connectionVersionId} onChange={(event) => setConnectionVersionId(event.currentTarget.value)}><option value="">Select a connection</option>{activeConnections.map((connection) => <option value={connection.activeVersionId || ""} key={connection.id}>{connection.name} · v{connection.version || 1}</option>)}</select>{!activeConnections.length ? <small>No active connections are available. Cancel this setup and add a connection first.</small> : <small>The tool pins this exact connection version for reproducibility.</small>}</label> : null}
       <label>Risk level<select value={risk} onChange={(event) => setRisk(event.currentTarget.value)}><option value="low">Low</option><option value="medium">Medium</option><option value="high">High</option><option value="critical">Critical</option></select></label>
       <label>Data classifications<input value={classifications} onChange={(event) => setClassifications(event.currentTarget.value)} /><small>Comma-separated labels used for governance.</small></label>
       <label className="wide-field">Allowed report fields<input value={inputFields} onChange={(event) => setInputFields(event.currentTarget.value)} /><small>Only these report fields are disclosed when the tool runs.</small></label>
     </div>
-    <details className="registry-advanced"><summary>Advanced data contracts</summary><p>JSON schemas constrain what the workflow sends and what the tool may return.</p><div className="form-grid"><label className="wide-field">Input schema<textarea className="code-input" spellCheck={false} value={inputSchema} onChange={(event) => setInputSchema(event.currentTarget.value)} /></label><label className="wide-field">Output schema<textarea className="code-input" spellCheck={false} value={outputSchema} onChange={(event) => setOutputSchema(event.currentTarget.value)} /></label></div></details>
+    <details className="registry-advanced"><summary>Advanced data contracts</summary><p>JSON schemas constrain what the workflow sends and what the tool may return. The example must match both schemas and is checked when the tool is created.</p><div className="form-grid"><label className="wide-field">Input schema<textarea className="code-input" spellCheck={false} value={inputSchema} onChange={(event) => setInputSchema(event.currentTarget.value)} /></label><label className="wide-field">Example input<textarea className="code-input" spellCheck={false} value={fixtureInput} onChange={(event) => setFixtureInput(event.currentTarget.value)} /></label><label className="wide-field">Output schema<textarea className="code-input" spellCheck={false} value={outputSchema} onChange={(event) => setOutputSchema(event.currentTarget.value)} /></label><label className="wide-field">Example output<textarea className="code-input" spellCheck={false} value={fixtureOutput} onChange={(event) => setFixtureOutput(event.currentTarget.value)} /></label></div></details>
   </>;
 
   const connectionSecurity = <>

package/template/console/reports/EnrichmentFindings.tsx

@@ -0,0 +1,148 @@
+import { dateTime, readable } from "../lib/format";
+import type { FindingRecord, WorkflowRunRecord } from "./types";
+
+type DataRecord = Record<string, unknown>;
+
+function record(value: unknown): DataRecord {
+  return value && typeof value === "object" && !Array.isArray(value) ? value as DataRecord : {};
+}
+
+function records(value: unknown): DataRecord[] {
+  return Array.isArray(value) ? value.filter((item): item is DataRecord => Boolean(item && typeof item === "object" && !Array.isArray(item))) : [];
+}
+
+function text(value: unknown, fallback = ""): string {
+  return typeof value === "string" || typeof value === "number" ? String(value) : fallback;
+}
+
+function count(value: unknown): number {
+  return typeof value === "number" && Number.isFinite(value) ? value : 0;
+}
+
+function accountAge(value: unknown): string {
+  const createdAt = Date.parse(text(value));
+  if (!Number.isFinite(createdAt) || createdAt > Date.now()) return "Unavailable";
+  const created = new Date(createdAt);
+  const now = new Date();
+  let months = (now.getUTCFullYear() - created.getUTCFullYear()) * 12 + now.getUTCMonth() - created.getUTCMonth();
+  if (now.getUTCDate() < created.getUTCDate()) months -= 1;
+  if (months < 1) {
+    const days = Math.floor((now.getTime() - created.getTime()) / 86_400_000);
+    return days < 1 ? "Today" : `${days} day${days === 1 ? "" : "s"}`;
+  }
+  const years = Math.floor(months / 12);
+  const remainingMonths = months % 12;
+  if (!years) return `${months} month${months === 1 ? "" : "s"}`;
+  return remainingMonths ? `${years}y ${remainingMonths}m` : `${years} year${years === 1 ? "" : "s"}`;
+}
+
+function findingTitle(finding: FindingRecord): string {
+  return readable(finding.componentKey || finding.findingType || "Enrichment result");
+}
+
+function findingState(finding: FindingRecord): string {
+  return finding.freshness || finding.status || "available";
+}
+
+function MessageResult({ message }: { message: DataRecord }) {
+  const media = record(message.media);
+  const reported = message.is_reported_message === true;
+  const body = text(message.body) || text(media.description) || (Object.keys(media).length ? "Media attachment" : "No message text");
+  const author = text(message.author_name) || readable(text(message.author_role, "participant"));
+  const timestamp = text(message.created_at);
+  const moderation = text(message.moderation_reason);
+  return (
+    <article className={`enrichment-message${reported ? " reported" : ""}`}>
+      <header><div><strong>{reported ? "Reported message" : author}</strong><span>{reported ? author : readable(text(message.author_role, "participant"))}</span></div><span>{timestamp ? dateTime(timestamp) : "Time unavailable"}</span></header>
+      <p>{body}</p>
+      <small>{readable(text(message.status, "available"))}{moderation ? ` · ${moderation}` : ""}{text(media.verdict) ? ` · Media: ${readable(text(media.verdict))}` : ""}</small>
+    </article>
+  );
+}
+
+function ConversationResult({ data }: { data: DataRecord }) {
+  const messages = records(data.messages);
+  if (!messages.length) return null;
+  const reported = messages.find((message) => message.is_reported_message === true);
+  const context = messages.filter((message) => message !== reported);
+  const preview = context.slice(Math.max(0, context.length - 5));
+  return (
+    <div className="enrichment-conversation">
+      {reported ? <div><h4>Reported message</h4><MessageResult message={reported} /></div> : null}
+      {preview.length ? <div><h4>{reported ? "Nearby conversation" : "Recent shared conversation"}</h4><div className="enrichment-message-list">{preview.map((message, index) => <MessageResult message={message} key={text(message.id, `message-${index}`)} />)}</div></div> : null}
+      {messages.length > preview.length + (reported ? 1 : 0) ? <details className="enrichment-expand"><summary>Review all {messages.length} collected messages</summary><div className="enrichment-message-list">{messages.map((message, index) => <MessageResult message={message} key={text(message.id, `all-message-${index}`)} />)}</div></details> : null}
+    </div>
+  );
+}
+
+function AccountResult({ account }: { account: DataRecord }) {
+  const totals = record(account.activity_totals);
+  const restrictions = record(account.active_restrictions);
+  const createdAt = text(account.created_at);
+  const restrictionParts = [
+    text(restrictions.banned_until) ? `Banned until ${dateTime(text(restrictions.banned_until))}` : "",
+    text(restrictions.posting_suspended_until) ? `Posting suspended until ${dateTime(text(restrictions.posting_suspended_until))}` : "",
+    count(restrictions.seconds_between_messages) > 0 ? `${count(restrictions.seconds_between_messages)}s posting interval` : "",
+  ].filter(Boolean);
+  return (
+    <article className="enrichment-account">
+      <header><div><strong>{text(account.display_name, "Unknown participant")}</strong><small>{readable(text(account.relationship, "participant"))} · {text(account.reference, "Reference unavailable")}</small></div><span>{readable(text(account.status, "unknown"))}</span></header>
+      <dl>
+        <div><dt>Account age</dt><dd>{accountAge(createdAt)}</dd></div>
+        <div><dt>Messages</dt><dd>{count(totals.messages)}</dd></div>
+        <div><dt>Moderated</dt><dd>{count(totals.moderated_messages)}</dd></div>
+        <div><dt>Media</dt><dd>{count(totals.media)}</dd></div>
+        <div><dt>Held media</dt><dd>{count(totals.held_media)}</dd></div>
+        <div><dt>Shared rooms</dt><dd>{count(totals.joined_rooms)}</dd></div>
+      </dl>
+      {createdAt ? <p className="enrichment-account-tenure">Joined {dateTime(createdAt)}</p> : null}
+      <p>{readable(text(account.role, "member"))} · {readable(text(account.age_band, "age unknown"))} · {readable(text(account.minor_protection, "standard protection"))}</p>
+      {restrictionParts.length ? <small className="enrichment-restriction">{restrictionParts.join(" · ")}</small> : null}
+      {text(account.moderation_reason) ? <small className="enrichment-restriction">Moderation reason: {text(account.moderation_reason)}</small> : null}
+    </article>
+  );
+}
+
+function AccountHistoryResult({ data }: { data: DataRecord }) {
+  const accounts = records(data.accounts);
+  const events = records(data.moderation_events);
+  if (!accounts.length && !events.length) return null;
+  return (
+    <div className="enrichment-history">
+      {accounts.length ? <div className="enrichment-account-list">{accounts.map((account, index) => <AccountResult account={account} key={text(account.reference, `account-${index}`)} />)}</div> : null}
+      {events.length ? <details className="enrichment-expand"><summary>{events.length} moderation event{events.length === 1 ? "" : "s"}</summary><div className="enrichment-event-list">{events.map((event, index) => <article key={text(event.id, `event-${index}`)}><strong>{readable(text(event.action, "Moderation event"))}</strong><span>{readable(text(event.target_type, "target"))} · {text(event.target_reference, "Reference unavailable")}</span>{text(event.reason) ? <p>{text(event.reason)}</p> : null}<small>{text(event.created_at) ? dateTime(text(event.created_at)) : "Time unavailable"}</small></article>)}</div></details> : null}
+    </div>
+  );
+}
+
+function Finding({ finding }: { finding: FindingRecord }) {
+  const data = record(finding.data);
+  const state = findingState(finding);
+  const hasConversation = records(data.messages).length > 0;
+  const hasHistory = records(data.accounts).length > 0 || records(data.moderation_events).length > 0;
+  return (
+    <article className="enrichment-finding">
+      <header><div><strong>{findingTitle(finding)}</strong><small>{finding.summary || "The enrichment completed without a summary."}</small></div><span className={`badge${state !== "available" ? " urgent" : ""}`}>{readable(state)}</span></header>
+      {hasConversation ? <ConversationResult data={data} /> : null}
+      {hasHistory ? <AccountHistoryResult data={data} /> : null}
+      <details className="enrichment-technical"><summary>Source and technical result</summary><dl><dt>Subject</dt><dd>{readable(finding.subjectType || "report")} · {finding.subjectReference || "Current report"}</dd><dt>Component</dt><dd>{finding.componentKey || finding.componentVersionId || "Unavailable"}{finding.componentVersion ? ` · version ${finding.componentVersion}` : ""}</dd><dt>Recorded</dt><dd>{finding.createdAt ? dateTime(finding.createdAt) : "Unavailable"}</dd></dl>{Object.keys(data).length ? <pre>{JSON.stringify(data, null, 2)}</pre> : <p>No structured output was retained.</p>}</details>
+    </article>
+  );
+}
+
+function EmptyEnrichment({ workflowRuns, permitted }: { workflowRuns: WorkflowRunRecord[]; permitted: boolean }) {
+  if (!permitted) return <div className="enrichment-empty"><strong>Enriched context is restricted</strong><p>Your role cannot read customer evidence or enrichment results.</p></div>;
+  const needsRepair = workflowRuns.some((run) => ["failed", "repair_required"].includes(run.state));
+  if (needsRepair) return <div className="enrichment-empty danger"><strong>Enrichment needs attention</strong><p>The workflow did not complete successfully. Open Technical workflow details to see its state.</p></div>;
+  if (workflowRuns.some((run) => run.state === "succeeded")) return <div className="enrichment-empty"><strong>No enrichment was produced</strong><p>The workflow completed without entering an enrichment step. This report did not contain the signed product identifiers required by that branch.</p></div>;
+  return <div className="enrichment-empty"><strong>No enrichment has run</strong><p>No completed workflow has attached customer context to this report yet.</p></div>;
+}
+
+export function EnrichmentFindings({ findings, workflowRuns, permitted }: { findings: FindingRecord[]; workflowRuns: WorkflowRunRecord[]; permitted: boolean }) {
+  return (
+    <section className="enrichment-section">
+      <div className="enrichment-heading"><div><h3>Enriched context</h3><p>Read-only customer data returned by the workflow’s enrichment tools and stored with this report.</p></div>{findings.length ? <span>{findings.length} result{findings.length === 1 ? "" : "s"}</span> : null}</div>
+      {findings.length ? <div className="enrichment-finding-list">{findings.map((finding, index) => <Finding finding={finding} key={finding.id ?? `${finding.findingType}-${index}`} />)}</div> : <EmptyEnrichment workflowRuns={workflowRuns} permitted={permitted} />}
+    </section>
+  );
+}

package/template/console/reports/ReportDrawer.tsx

@@ -1,6 +1,7 @@
 import { useEffect, useMemo, useState, useSyncExternalStore, type FormEvent } from "react";
 import { AnalystAvatar } from "../components/AnalystIdentity";
 import { dateTime, readable, relativeTime, safeCustomerUrl } from "../lib/format";
+import { EnrichmentFindings } from "./EnrichmentFindings";
 import {
   dispatchClaimReport,
   dispatchCloseReport,
@@ -8,8 +9,9 @@ import {
   dispatchReleaseReport,
   dispatchReporterMessage,
 } from "./events";
+import { otherReviewersOnReport, reportPresenceLabel } from "./presence-presentation";
 import { getReportWorkspaceSnapshot, subscribeToReportWorkspace } from "./store";
-import type { ReportAnswer, ReportDetailRecord, TimelineEvent } from "./types";
+import type { PresenceAnalyst, ReportAnswer, ReportDetailRecord, TimelineEvent } from "./types";
 
 function Fact({ label, children }: { label: string; children: React.ReactNode }) {
   return <><dt>{label}</dt><dd>{children || "—"}</dd></>;
@@ -19,6 +21,15 @@ function EmptyLine({ children }: { children: React.ReactNode }) {
   return <p className="detail-empty">{children}</p>;
 }
 
+function ReportCollaborators({ analysts }: { analysts: PresenceAnalyst[] }) {
+  if (!analysts.length) return null;
+  const label = reportPresenceLabel(analysts);
+  return <div className="report-collaborators" aria-label={label}>
+    <span className="presence-avatar-stack" aria-hidden="true">{analysts.slice(0, 3).map((analyst) => <AnalystAvatar analyst={analyst} size="small" key={analyst.actorId} />)}{analysts.length > 3 ? <span className="presence-overflow-avatar">+{analysts.length - 3}</span> : null}</span>
+    <span>{label}</span>
+  </div>;
+}
+
 function answerOptionLabel(answer: ReportAnswer, value: string): string {
   return answer.options?.find((option) => option.value === value)?.label || readable(value);
 }
@@ -103,7 +114,7 @@ const decisionOptions = [
   { value: "duplicate", label: "Duplicate report" },
 ] as const;
 
-function DetailContent({ report, actorId, generatedAt, actionCodes, claimReports, messageReporters, decideReports, pendingAction, messageMutationVersion, statusMessage, error }: {
+function DetailContent({ report, actorId, generatedAt, actionCodes, claimReports, messageReporters, decideReports, readEvidence, pendingAction, messageMutationVersion, statusMessage, error }: {
   report: ReportDetailRecord;
   actorId: string;
   generatedAt: string;
@@ -111,6 +122,7 @@ function DetailContent({ report, actorId, generatedAt, actionCodes, claimReports
   claimReports: boolean;
   messageReporters: boolean;
   decideReports: boolean;
+  readEvidence: boolean;
   pendingAction: "claim" | "release" | "message" | "decision" | null;
   messageMutationVersion: number;
   statusMessage: string;
@@ -207,12 +219,12 @@ function DetailContent({ report, actorId, generatedAt, actionCodes, claimReports
         </div></section>
       </div>
 
+      <EnrichmentFindings findings={findings} workflowRuns={workflowRuns} permitted={readEvidence} />
+
       {workflowRuns.length || timeline.length ? <section className="case-activity-section"><div className="case-activity-heading"><div><h3>Case activity</h3><p>A clear record of reporter communication, review, and decisions.</p></div><span>{caseTimeline.length} event{caseTimeline.length === 1 ? "" : "s"}</span></div><div className="report-timeline">{caseTimeline.map((item, index) => <article className="timeline-event" key={item.id ?? `${item.eventType}-${item.createdAt}-${index}`}><span className={`timeline-marker ${item.eventType || "event"}`} aria-hidden="true" /><div><strong>{timelineTitle(item)}</strong><span>{timelineDetail(item)}</span><small>{dateTime(item.createdAt)} · {relativeTime(item.createdAt)} · {readable(item.actorType || "system")}</small></div></article>)}</div>{workflowRuns.length || technicalTimeline.length ? <details className="workflow-technical"><summary>Technical workflow details <span>{workflowRuns.length} workflow run{workflowRuns.length === 1 ? "" : "s"}</span></summary><div className="report-run-list">{workflowRuns.map((run) => <article className="report-run-record" key={run.id}><div><strong>{run.workflowName || run.workflowKey || `Workflow ${String(run.workflowVersionId || run.id).slice(0, 12)}`}</strong><small>{readable(run.runKind || "primary")} · {readable(run.authorityMode || "assist")} · immutable version {run.workflowVersion || String(run.workflowVersionId || "").slice(0, 12)}</small></div><span className={`badge${["failed", "repair_required"].includes(run.state) ? " urgent" : ""}`}>{readable(run.state)}</span></article>)}</div>{technicalTimeline.length ? <p className="technical-event-count">{technicalTimeline.length} low-level execution event{technicalTimeline.length === 1 ? "" : "s"} recorded in the audit trail.</p> : null}</details> : null}</section> : null}
 
       <section><h3>Case messages</h3><div className="message-list">{messages.length ? messages.map((item, index) => <article className={`case-message ${item.direction}`} key={item.id ?? `${item.createdAt}-${index}`}><div>{item.body}</div><small>{readable(item.senderType)} · {dateTime(item.createdAt)} · {deliveryLabel(item.deliveryState)}{deliveryExplanation(item.deliveryState) ? ` — ${deliveryExplanation(item.deliveryState)}` : ""}</small></article>) : <EmptyLine>No case messages yet.</EmptyLine>}</div></section>
 
-      {findings.length ? <section><h3>Component findings</h3><div className="finding-result-list">{findings.map((finding, index) => <article key={finding.id ?? `${finding.findingType}-${index}`}><div><strong>{finding.findingType}</strong><small>{finding.summary}{finding.componentVersionId ? ` · component ${finding.componentVersionId}` : ""}{finding.expiresAt ? ` · expires ${dateTime(finding.expiresAt)}` : ""}</small>{finding.data ? <pre>{JSON.stringify(finding.data, null, 2)}</pre> : null}</div><span className={`badge${finding.freshness !== "available" ? " urgent" : ""}`}>{readable(finding.freshness || finding.status)}</span></article>)}</div></section> : null}
-
       {decisions.length ? <section><h3>Decisions &amp; rationale</h3><div className="decision-record-list">{decisions.map((decision, index) => <article className="decision-record" key={decision.id ?? `${decision.createdAt}-${index}`}><div><strong>{readable(decision.decisionCode)}</strong><span className="badge">{decision.policyCode || "Policy decision"}</span></div><p>{decision.rationale || "No rationale recorded."}</p><small>{readable(decision.makerType)} · {dateTime(decision.createdAt)} · {(decision.evidenceReferences || []).length} evidence reference(s)</small></article>)}</div></section> : null}
 
       {deliveries.length ? <section><h3>Decision and delivery</h3><div className="delivery-list">{deliveries.map((delivery) => <article key={delivery.id}><div><strong>{delivery.title}</strong><small>{delivery.detail}{deliveryExplanation(delivery.state) ? ` · ${deliveryExplanation(delivery.state)}` : ""}</small></div><span className={`badge${["failed", "rejected", "bounced", "suppressed"].includes(delivery.state) ? " urgent" : ""}`}>{deliveryLabel(delivery.state)}</span></article>)}</div></section> : null}
@@ -235,10 +247,11 @@ export function ReportDrawer() {
   const snapshot = useSyncExternalStore(subscribeToReportWorkspace, getReportWorkspaceSnapshot, getReportWorkspaceSnapshot);
   const detail = snapshot.detail;
   const open = Boolean(detail.reportId);
+  const collaborators = detail.report ? otherReviewersOnReport(snapshot.presence, detail.report.id, snapshot.actorId) : [];
   return (
     <dialog className="detail-dialog report-drawer" open={open} aria-labelledby="report-detail-title" onCancel={(event) => { event.preventDefault(); dispatchCloseReport(); }} data-react-slice="report-drawer">
-      <div className="detail-head"><div><h2 id="report-detail-title">{detail.report?.reference || "Report"}</h2><p>{detail.report ? `${readable(detail.report.state)} · ${readable(detail.report.queueId || "unassigned")}` : "Loading report…"}</p></div><button className="icon-button" type="button" aria-label="Close report detail" onClick={dispatchCloseReport}>×</button></div>
-      <div className="report-detail-content">{detail.loading && !detail.report ? <div className="skeleton-block" role="status" aria-label="Loading report detail" /> : detail.report ? <DetailContent report={detail.report} actorId={snapshot.actorId} generatedAt={snapshot.generatedAt} actionCodes={snapshot.actionCodes} claimReports={snapshot.permissions.claimReports} messageReporters={snapshot.permissions.messageReporters} decideReports={snapshot.permissions.decideReports} pendingAction={detail.pendingAction} messageMutationVersion={detail.messageMutationVersion} statusMessage={detail.statusMessage} error={detail.error} /> : detail.error ? <p className="error surface-error" role="alert">{detail.error}</p> : null}</div>
+      <div className="detail-head"><div><h2 id="report-detail-title">{detail.report?.reference || "Report"}</h2><p>{detail.report ? `${readable(detail.report.state)} · ${readable(detail.report.queueId || "unassigned")}` : "Loading report…"}</p><ReportCollaborators analysts={collaborators} /></div><button className="icon-button" type="button" aria-label="Close report detail" onClick={dispatchCloseReport}>×</button></div>
+      <div className="report-detail-content">{detail.loading && !detail.report ? <div className="skeleton-block" role="status" aria-label="Loading report detail" /> : detail.report ? <DetailContent report={detail.report} actorId={snapshot.actorId} generatedAt={snapshot.generatedAt} actionCodes={snapshot.actionCodes} claimReports={snapshot.permissions.claimReports} messageReporters={snapshot.permissions.messageReporters} decideReports={snapshot.permissions.decideReports} readEvidence={snapshot.permissions.readEvidence} pendingAction={detail.pendingAction} messageMutationVersion={detail.messageMutationVersion} statusMessage={detail.statusMessage} error={detail.error} /> : detail.error ? <p className="error surface-error" role="alert">{detail.error}</p> : null}</div>
     </dialog>
   );
 }