issue-flow 0.14.0 → 0.16.0

package/dist/run-HSC7R33Y.js

@@ -0,0 +1,55 @@
+#!/usr/bin/env node
+import {
+  publishIssueDetails,
+  publishStorySeed,
+  runPipeline
+} from "./chunk-OLUOZLU5.js";
+import "./chunk-VK65RNFA.js";
+import "./chunk-Q2TZA6AC.js";
+import "./chunk-OGN2NX57.js";
+import "./chunk-EPFC4LHT.js";
+import "./chunk-X6GY3CM2.js";
+import "./chunk-KV2K7MK2.js";
+import "./chunk-SW2MF47D.js";
+import "./chunk-YA6FWFYW.js";
+import "./chunk-QZOBR6YF.js";
+import "./chunk-BSBJXPLC.js";
+import "./chunk-CRGIQFUQ.js";
+import "./chunk-L6HSKTQE.js";
+import "./chunk-PGN2VX4Y.js";
+import "./chunk-GV2DABNZ.js";
+import "./chunk-2H43OVTU.js";
+import "./chunk-WLJVL25O.js";
+import "./chunk-DBEMD34J.js";
+import "./chunk-MCLPSL6B.js";
+import "./chunk-H3EYBJZU.js";
+import "./chunk-KMMASOA6.js";
+import "./chunk-4FUWWBTP.js";
+import "./chunk-OGVWJO4S.js";
+import "./chunk-73TS2H42.js";
+import "./chunk-AOAQU7PD.js";
+import "./chunk-IAMIBZRF.js";
+import "./chunk-MXCOSPLJ.js";
+import "./chunk-C5TL7T4V.js";
+import "./chunk-3D4A4B46.js";
+import "./chunk-OOX3RMD3.js";
+import "./chunk-J2LJB2OH.js";
+import "./chunk-VTF4RWS5.js";
+import "./chunk-SVDEWOUD.js";
+import "./chunk-ROIIEVZH.js";
+import "./chunk-FKWYD44M.js";
+import "./chunk-HAKDLR6N.js";
+import "./chunk-WNROH2YE.js";
+import "./chunk-GPLP7EPL.js";
+import "./chunk-P3LRUNC6.js";
+import "./chunk-R42YHLDV.js";
+import "./chunk-GVOZ6NDO.js";
+import "./chunk-QVLIIGBU.js";
+import "./chunk-7Z4Y3VKM.js";
+import "./chunk-XEYH6ZZI.js";
+export {
+  publishIssueDetails,
+  publishStorySeed,
+  runPipeline
+};
+//# sourceMappingURL=run-HSC7R33Y.js.map

package/dist/{session-publisher-T7EI3CIP.js → session-publisher-VVXOCJ2S.js}

@@ -2,10 +2,10 @@
 import {
   getSessionPublisher,
   setSessionPublisher
-} from "./chunk-6QYMSNVA.js";
+} from "./chunk-ROIIEVZH.js";
 import "./chunk-P3LRUNC6.js";
 export {
   getSessionPublisher,
   setSessionPublisher
 };
-//# sourceMappingURL=session-publisher-T7EI3CIP.js.map
+//# sourceMappingURL=session-publisher-VVXOCJ2S.js.map

package/dist/{state-manager-GQH32C44.js → state-manager-TIC73GQY.js}

@@ -14,8 +14,8 @@ import {
   selectActiveStory,
   setLastError,
   trimErrorMessage
-} from "./chunk-J3SOTUVI.js";
-import "./chunk-LBGHI4S2.js";
+} from "./chunk-GVOZ6NDO.js";
+import "./chunk-QVLIIGBU.js";
 import "./chunk-7Z4Y3VKM.js";
 export {
   allStoriesPass,
@@ -33,4 +33,4 @@ export {
   setLastError,
   trimErrorMessage
 };
-//# sourceMappingURL=state-manager-GQH32C44.js.map
+//# sourceMappingURL=state-manager-TIC73GQY.js.map

package/dist/{usage-V2CHE5PY.js → usage-WDDNSIHP.js}

@@ -5,26 +5,26 @@ import {
 } from "./chunk-CRGIQFUQ.js";
 import {
   resolveProjectPaths
-} from "./chunk-QK7WUO7A.js";
+} from "./chunk-VTF4RWS5.js";
 import {
   printError,
   printInfo
-} from "./chunk-TYRNTSPJ.js";
-import "./chunk-6QYMSNVA.js";
-import "./chunk-3WFZETIM.js";
+} from "./chunk-SVDEWOUD.js";
+import "./chunk-ROIIEVZH.js";
+import "./chunk-FKWYD44M.js";
 import {
   getIssuePaths
 } from "./chunk-HAKDLR6N.js";
-import "./chunk-BEZ5BA5U.js";
+import "./chunk-WNROH2YE.js";
 import {
   discardedExecutionCount
-} from "./chunk-67YIU2VB.js";
+} from "./chunk-GPLP7EPL.js";
 import "./chunk-P3LRUNC6.js";
-import "./chunk-G5EK2XRN.js";
+import "./chunk-R42YHLDV.js";
 import {
   loadTaskPlan
-} from "./chunk-J3SOTUVI.js";
-import "./chunk-LBGHI4S2.js";
+} from "./chunk-GVOZ6NDO.js";
+import "./chunk-QVLIIGBU.js";
 import "./chunk-7Z4Y3VKM.js";
 import "./chunk-XEYH6ZZI.js";
 
@@ -174,4 +174,4 @@ export {
   formatUsageReport,
   runUsage
 };
-//# sourceMappingURL=usage-V2CHE5PY.js.map
+//# sourceMappingURL=usage-WDDNSIHP.js.map

package/dist/{web-EA3KGNFN.js → web-IPGY52AK.js}

@@ -1,29 +1,24 @@
 #!/usr/bin/env node
 import {
   readSessionFile
-} from "./chunk-JN6D3MY6.js";
+} from "./chunk-G5LACAXO.js";
 import {
   ensureSingleWebServer,
-  getWebLockFile,
-  readWebLock,
-  removeWebLock
-} from "./chunk-LFEQIZLB.js";
-import "./chunk-UJ3L2MS7.js";
-import "./chunk-KMRFRXIT.js";
+  stopWebMonitor
+} from "./chunk-YA6FWFYW.js";
+import "./chunk-PGN2VX4Y.js";
+import "./chunk-OGVWJO4S.js";
 import {
   parseJournal
-} from "./chunk-3BWZO4YI.js";
+} from "./chunk-IAMIBZRF.js";
+import "./chunk-C5TL7T4V.js";
 import {
   loadWebConfig
-} from "./chunk-QJ5UZAH5.js";
-import "./chunk-QK7WUO7A.js";
-import {
-  printError,
-  printInfo,
-  printWarning
-} from "./chunk-TYRNTSPJ.js";
-import "./chunk-6QYMSNVA.js";
-import "./chunk-3WFZETIM.js";
+} from "./chunk-J2LJB2OH.js";
+import "./chunk-VTF4RWS5.js";
+import "./chunk-SVDEWOUD.js";
+import "./chunk-ROIIEVZH.js";
+import "./chunk-FKWYD44M.js";
 import {
   EVENTS_FILENAME,
   ISSUES_DIR_NAME,
@@ -32,12 +27,12 @@ import {
   SESSION_FILENAME,
   getGlobalRoot
 } from "./chunk-HAKDLR6N.js";
-import "./chunk-BEZ5BA5U.js";
-import "./chunk-67YIU2VB.js";
+import "./chunk-WNROH2YE.js";
+import "./chunk-GPLP7EPL.js";
 import "./chunk-P3LRUNC6.js";
-import "./chunk-G5EK2XRN.js";
-import "./chunk-J3SOTUVI.js";
-import "./chunk-LBGHI4S2.js";
+import "./chunk-R42YHLDV.js";
+import "./chunk-GVOZ6NDO.js";
+import "./chunk-QVLIIGBU.js";
 import "./chunk-7Z4Y3VKM.js";
 import "./chunk-XEYH6ZZI.js";
 
@@ -130,11 +125,6 @@ function watchSessionDirectory(options = {}) {
 }
 
 // src/commands/web.ts
-var STOP_POLL_INTERVAL_MS = 100;
-var STOP_TIMEOUT_MS = 5e3;
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
 async function runWebServe(options) {
   const cli = {};
   if (options.port !== void 0) cli.port = options.port;
@@ -169,40 +159,12 @@ async function runWebServe(options) {
   return 0;
 }
 async function runWebStop() {
-  const lockFile = getWebLockFile();
-  const lock = await readWebLock(lockFile);
-  if (lock === null) {
-    printInfo("No web monitor is currently running.");
-    return 0;
-  }
-  try {
-    process.kill(lock.pid, "SIGTERM");
-  } catch (err) {
-    if (err.code === "ESRCH") {
-      printWarning(
-        "The web monitor lock referenced a process that is no longer running; removing it."
-      );
-      await removeWebLock(lockFile);
-      return 0;
-    }
-    printError(
-      `Failed to stop the web monitor: ${err instanceof Error ? err.message : String(err)}`
-    );
-    return 1;
-  }
-  const deadline = Date.now() + STOP_TIMEOUT_MS;
-  while (Date.now() < deadline) {
-    if (await readWebLock(lockFile) === null) {
-      printInfo(`Web monitor (pid ${lock.pid}) stopped.`);
-      return 0;
-    }
-    await sleep(STOP_POLL_INTERVAL_MS);
-  }
-  printWarning("Sent the stop signal, but the web monitor did not confirm shutdown in time.");
-  return 0;
+  const webConfig = await loadWebConfig();
+  const result = await stopWebMonitor({ port: webConfig.port, host: webConfig.host });
+  return result === "failed" || result === "unowned" ? 1 : 0;
 }
 export {
   runWebServe,
   runWebStop
 };
-//# sourceMappingURL=web-EA3KGNFN.js.map
+//# sourceMappingURL=web-IPGY52AK.js.map

package/dist/{web-EA3KGNFN.js.map → web-IPGY52AK.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/web/session-directory.ts","../src/commands/web.ts"],"sourcesContent":["import { readdir, readFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { type JournalEntry, parseJournal } from '../core/journal.js';\nimport type { ValidatedSessionSnapshot } from '../schemas.js';\nimport {\n  EVENTS_FILENAME,\n  type GetGlobalRootOptions,\n  getGlobalRoot,\n  ISSUES_DIR_NAME,\n  PROJECTS_DIR_NAME,\n  ROTATED_EVENTS_FILENAME,\n  SESSION_FILENAME,\n} from '../storage/paths.js';\nimport { readSessionFile } from '../storage/session-file.js';\n\n/**\n * Multi-session discovery for the web monitoring server (US-003).\n *\n * The single-instance server (`web/lock.ts`) runs decoupled from any one\n * pipeline invocation, so it cannot hold a `SessionPublisher` in memory for\n * \"the\" run being monitored — there may be zero, one or several running at\n * once, each in its own process. Instead this module polls every\n * `~/.issue-flow/projects/<project>/issues/<n>/session.json` on disk (the\n * same file `FilePublisher` already writes) and keeps an in-memory map of the\n * ones that are both well-formed and recently updated.\n *\n * Polling rather than `fs.watch` is a deliberate choice, not a placeholder:\n * `fs.watch`'s `recursive` option is only reliable on macOS and Windows (Linux\n * needs a manual per-directory watch tree, and the whole thing still degrades\n * to polling on network filesystems), while a `~/.issue-flow` tree is small\n * and local — a cheap poll of it is simpler and behaves identically on every\n * platform, which is what the US-003 acceptance criteria ask to validate.\n */\n\n/** How often the directory tree is rescanned, unless overridden. */\nexport const DEFAULT_POLL_INTERVAL_MS = 3000;\n\n/**\n * A session stops being reported once its file has gone this long without an\n * update. `FilePublisher` touches a live session every 10s without rewriting\n * its content. Three missed heartbeats plus ample scheduling/filesystem slack\n * avoid flapping while still removing an abruptly killed run promptly.\n */\nexport const DEFAULT_STALE_AFTER_MS = 90_000;\n\nexport interface ActiveSession {\n  /** Directory the session.json was read from, one level up from the file. */\n  issueDir: string;\n  filePath: string;\n  snapshot: ValidatedSessionSnapshot;\n  /** mtime of the file at the last successful read, in epoch ms. */\n  updatedAtMs: number;\n}\n\nexport interface SessionDirectoryOptions extends GetGlobalRootOptions {\n  /** Poll interval, in ms. Default {@link DEFAULT_POLL_INTERVAL_MS}. */\n  pollIntervalMs?: number;\n  /** Staleness threshold, in ms. Default {@link DEFAULT_STALE_AFTER_MS}. */\n  staleAfterMs?: number;\n  /** Invoked (at most once) when a poll fails unexpectedly. Best-effort logging only. */\n  onWarn?: (message: string) => void;\n}\n\nexport interface SessionDirectoryHandle {\n  /** Snapshot of every session currently considered active. */\n  sessions(): ActiveSession[];\n  /** A single active session by id, or undefined. */\n  getSession(sessionId: string): ActiveSession | undefined;\n  /** Journal entries for one active session, oldest generation first. */\n  events(sessionId: string): Promise<JournalEntry[] | undefined>;\n  /** Force an immediate rescan instead of waiting for the next tick. Never throws. */\n  refresh(): Promise<void>;\n  /** Stop polling. Idempotent. */\n  close(): void;\n}\n\nasync function listSubdirectories(dir: string): Promise<string[]> {\n  try {\n    const entries = await readdir(dir, { withFileTypes: true });\n    // Symlinks are skipped on purpose, same discipline as the storage\n    // migration walk: following one could pull session data from outside the\n    // global tree into the listing.\n    return entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name);\n  } catch {\n    // Missing/unreadable projects (or issues) directory reads as \"none yet\" —\n    // this is routinely the case before the first --web run ever happens.\n    return [];\n  }\n}\n\n/** Every `session.json` path currently on disk, one per project/issue pair. */\nasync function discoverSessionFiles(root: string): Promise<string[]> {\n  const projectsDir = join(root, PROJECTS_DIR_NAME);\n  const projectIds = await listSubdirectories(projectsDir);\n\n  const perProject = await Promise.all(\n    projectIds.map(async (projectId) => {\n      const issuesDir = join(projectsDir, projectId, ISSUES_DIR_NAME);\n      const issueIds = await listSubdirectories(issuesDir);\n      return issueIds.map((issueId) => join(issuesDir, issueId, SESSION_FILENAME));\n    }),\n  );\n\n  return perProject.flat();\n}\n\nasync function readJournalFile(filePath: string): Promise<JournalEntry[]> {\n  try {\n    return parseJournal(await readFile(filePath, 'utf-8'));\n  } catch {\n    return [];\n  }\n}\n\n/**\n * Start polling the global storage tree for active sessions.\n *\n * Returns a handle immediately; the first scan happens synchronously in the\n * background and `sessions()` answers `[]` until it completes, same as \"no\n * sessions found yet\" — there is nothing to await here that would not also\n * delay the server's very first bind.\n */\nexport function watchSessionDirectory(\n  options: SessionDirectoryOptions = {},\n): SessionDirectoryHandle {\n  const root = getGlobalRoot(options);\n  const pollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n  const staleAfterMs = options.staleAfterMs ?? DEFAULT_STALE_AFTER_MS;\n  const warn = options.onWarn;\n\n  // Keyed by sessionId, not by file path: a session's identity is the id\n  // inside its content, and that is what /api/status?session=<id> looks up.\n  let sessions = new Map<string, ActiveSession>();\n  let warned = false;\n\n  async function scan(): Promise<void> {\n    let files: string[];\n    try {\n      files = await discoverSessionFiles(root);\n    } catch (err) {\n      if (!warned) {\n        warned = true;\n        warn?.(\n          `issue-flow: web monitor could not scan the session directory (will keep retrying silently): ${\n            err instanceof Error ? err.message : String(err)\n          }`,\n        );\n      }\n      return;\n    }\n\n    const now = Date.now();\n    const next = new Map<string, ActiveSession>();\n    for (const filePath of files) {\n      const result = await readSessionFile(filePath);\n      if (result === null) continue;\n      if (now - result.updatedAtMs > staleAfterMs) continue; // stopped updating: not active\n      const sessionId = result.snapshot.sessionId as string;\n      next.set(sessionId, {\n        issueDir: join(filePath, '..'),\n        filePath,\n        snapshot: result.snapshot,\n        updatedAtMs: result.updatedAtMs,\n      });\n    }\n    sessions = next;\n  }\n\n  // The first scan runs immediately (not just after the first interval tick)\n  // so a server started right after a session begins does not report \"no\n  // sessions\" for a whole poll interval.\n  void scan();\n  const timer = setInterval(() => void scan(), pollIntervalMs);\n  timer.unref();\n\n  return {\n    sessions: () => [...sessions.values()],\n    getSession: (sessionId: string) => sessions.get(sessionId),\n    events: async (sessionId: string) => {\n      const session = sessions.get(sessionId);\n      if (session === undefined) return undefined;\n      const [rotated, current] = await Promise.all([\n        readJournalFile(join(session.issueDir, ROTATED_EVENTS_FILENAME)),\n        readJournalFile(join(session.issueDir, EVENTS_FILENAME)),\n      ]);\n      return [...rotated, ...current];\n    },\n    refresh: scan,\n    close: () => clearInterval(timer),\n  };\n}\n","import { loadWebConfig } from '../config.js';\nimport type { WebConfig } from '../schemas.js';\nimport { printError, printInfo, printWarning } from '../ui/logger.js';\nimport { ensureSingleWebServer, getWebLockFile, readWebLock, removeWebLock } from '../web/lock.js';\nimport { watchSessionDirectory } from '../web/session-directory.js';\n\n/**\n * `issue-flow web serve` / `issue-flow web stop` (US-002).\n *\n * `serve` is the process `ensureWebMonitor()` (`web/lock.ts`) spawns detached\n * — it is not meant to be run interactively, though nothing stops a user from\n * doing so to watch every session on the machine without going through a\n * pipeline command first. It never exits on its own: the server stays bound\n * (see `unref: false` in `web/server.ts`) until `stop` sends it `SIGTERM`, at\n * which point `startWebServer`'s own signal handler closes it (removing the\n * lock) and re-raises the signal for the default termination behavior.\n */\n\nconst STOP_POLL_INTERVAL_MS = 100;\nconst STOP_TIMEOUT_MS = 5000;\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nexport interface RunWebServeOptions {\n  port?: number;\n  host?: string;\n  refresh?: number;\n}\n\n/**\n * Bind (or defer to) the single web monitor instance and keep the process\n * alive for as long as it stays bound. Logging is intentionally silent on the\n * happy path: this process is spawned with `stdio: 'ignore'`, so anything\n * printed here goes nowhere — the caller (`ensureWebMonitor`) is the one that\n * tells the user the server is up.\n */\nexport async function runWebServe(options: RunWebServeOptions): Promise<number> {\n  // Built conditionally, not `{ port: options.port, ... }`: loadWebConfig()\n  // spreads this object directly over the lower-precedence layers, and an\n  // explicit `undefined` value would overwrite an env/.issue-flow.json\n  // setting instead of falling through to it (only an *absent* key does).\n  const cli: Partial<WebConfig> = {};\n  if (options.port !== undefined) cli.port = options.port;\n  if (options.host !== undefined) cli.host = options.host;\n  if (options.refresh !== undefined) cli.refreshSeconds = options.refresh;\n  const webConfig = await loadWebConfig({ cli });\n\n  const sessions = watchSessionDirectory();\n\n  const noop = (): void => {};\n  const handle = await ensureSingleWebServer({\n    sessions,\n    port: webConfig.port,\n    host: webConfig.host,\n    refreshSeconds: webConfig.refreshSeconds,\n    unref: false,\n    info: noop,\n    warn: noop,\n  });\n\n  if (handle === null) {\n    sessions.close();\n    return 1;\n  }\n\n  if (handle.server === undefined) {\n    // Another instance already won the race (or was already running by the\n    // time this process got here): nothing to serve, so it exits right away\n    // instead of idling as a redundant detached process.\n    sessions.close();\n    return 0;\n  }\n\n  const originalClose = handle.close;\n  handle.close = async () => {\n    await originalClose();\n    sessions.close();\n  };\n\n  return 0;\n}\n\n/** Stop the single running web monitor instance, if any. */\nexport async function runWebStop(): Promise<number> {\n  const lockFile = getWebLockFile();\n  const lock = await readWebLock(lockFile);\n  if (lock === null) {\n    printInfo('No web monitor is currently running.');\n    return 0;\n  }\n\n  try {\n    process.kill(lock.pid, 'SIGTERM');\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === 'ESRCH') {\n      printWarning(\n        'The web monitor lock referenced a process that is no longer running; removing it.',\n      );\n      await removeWebLock(lockFile);\n      return 0;\n    }\n    printError(\n      `Failed to stop the web monitor: ${err instanceof Error ? err.message : String(err)}`,\n    );\n    return 1;\n  }\n\n  const deadline = Date.now() + STOP_TIMEOUT_MS;\n  while (Date.now() < deadline) {\n    if ((await readWebLock(lockFile)) === null) {\n      printInfo(`Web monitor (pid ${lock.pid}) stopped.`);\n      return 0;\n    }\n    await sleep(STOP_POLL_INTERVAL_MS);\n  }\n\n  printWarning('Sent the stop signal, but the web monitor did not confirm shutdown in time.');\n  return 0;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,SAAS,gBAAgB;AAClC,SAAS,YAAY;AAkCd,IAAM,2BAA2B;AAQjC,IAAM,yBAAyB;AAiCtC,eAAe,mBAAmB,KAAgC;AAChE,MAAI;AACF,UAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAI1D,WAAO,QAAQ,OAAO,CAAC,UAAU,MAAM,YAAY,CAAC,EAAE,IAAI,CAAC,UAAU,MAAM,IAAI;AAAA,EACjF,QAAQ;AAGN,WAAO,CAAC;AAAA,EACV;AACF;AAGA,eAAe,qBAAqB,MAAiC;AACnE,QAAM,cAAc,KAAK,MAAM,iBAAiB;AAChD,QAAM,aAAa,MAAM,mBAAmB,WAAW;AAEvD,QAAM,aAAa,MAAM,QAAQ;AAAA,IAC/B,WAAW,IAAI,OAAO,cAAc;AAClC,YAAM,YAAY,KAAK,aAAa,WAAW,eAAe;AAC9D,YAAM,WAAW,MAAM,mBAAmB,SAAS;AACnD,aAAO,SAAS,IAAI,CAAC,YAAY,KAAK,WAAW,SAAS,gBAAgB,CAAC;AAAA,IAC7E,CAAC;AAAA,EACH;AAEA,SAAO,WAAW,KAAK;AACzB;AAEA,eAAe,gBAAgB,UAA2C;AACxE,MAAI;AACF,WAAO,aAAa,MAAM,SAAS,UAAU,OAAO,CAAC;AAAA,EACvD,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAUO,SAAS,sBACd,UAAmC,CAAC,GACZ;AACxB,QAAM,OAAO,cAAc,OAAO;AAClC,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,eAAe,QAAQ,gBAAgB;AAC7C,QAAM,OAAO,QAAQ;AAIrB,MAAI,WAAW,oBAAI,IAA2B;AAC9C,MAAI,SAAS;AAEb,iBAAe,OAAsB;AACnC,QAAI;AACJ,QAAI;AACF,cAAQ,MAAM,qBAAqB,IAAI;AAAA,IACzC,SAAS,KAAK;AACZ,UAAI,CAAC,QAAQ;AACX,iBAAS;AACT;AAAA,UACE,+FACE,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CACjD;AAAA,QACF;AAAA,MACF;AACA;AAAA,IACF;AAEA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,OAAO,oBAAI,IAA2B;AAC5C,eAAW,YAAY,OAAO;AAC5B,YAAM,SAAS,MAAM,gBAAgB,QAAQ;AAC7C,UAAI,WAAW,KAAM;AACrB,UAAI,MAAM,OAAO,cAAc,aAAc;AAC7C,YAAM,YAAY,OAAO,SAAS;AAClC,WAAK,IAAI,WAAW;AAAA,QAClB,UAAU,KAAK,UAAU,IAAI;AAAA,QAC7B;AAAA,QACA,UAAU,OAAO;AAAA,QACjB,aAAa,OAAO;AAAA,MACtB,CAAC;AAAA,IACH;AACA,eAAW;AAAA,EACb;AAKA,OAAK,KAAK;AACV,QAAM,QAAQ,YAAY,MAAM,KAAK,KAAK,GAAG,cAAc;AAC3D,QAAM,MAAM;AAEZ,SAAO;AAAA,IACL,UAAU,MAAM,CAAC,GAAG,SAAS,OAAO,CAAC;AAAA,IACrC,YAAY,CAAC,cAAsB,SAAS,IAAI,SAAS;AAAA,IACzD,QAAQ,OAAO,cAAsB;AACnC,YAAM,UAAU,SAAS,IAAI,SAAS;AACtC,UAAI,YAAY,OAAW,QAAO;AAClC,YAAM,CAAC,SAAS,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,QAC3C,gBAAgB,KAAK,QAAQ,UAAU,uBAAuB,CAAC;AAAA,QAC/D,gBAAgB,KAAK,QAAQ,UAAU,eAAe,CAAC;AAAA,MACzD,CAAC;AACD,aAAO,CAAC,GAAG,SAAS,GAAG,OAAO;AAAA,IAChC;AAAA,IACA,SAAS;AAAA,IACT,OAAO,MAAM,cAAc,KAAK;AAAA,EAClC;AACF;;;AC5KA,IAAM,wBAAwB;AAC9B,IAAM,kBAAkB;AAExB,SAAS,MAAM,IAA2B;AACxC,SAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;AAeA,eAAsB,YAAY,SAA8C;AAK9E,QAAM,MAA0B,CAAC;AACjC,MAAI,QAAQ,SAAS,OAAW,KAAI,OAAO,QAAQ;AACnD,MAAI,QAAQ,SAAS,OAAW,KAAI,OAAO,QAAQ;AACnD,MAAI,QAAQ,YAAY,OAAW,KAAI,iBAAiB,QAAQ;AAChE,QAAM,YAAY,MAAM,cAAc,EAAE,IAAI,CAAC;AAE7C,QAAM,WAAW,sBAAsB;AAEvC,QAAM,OAAO,MAAY;AAAA,EAAC;AAC1B,QAAM,SAAS,MAAM,sBAAsB;AAAA,IACzC;AAAA,IACA,MAAM,UAAU;AAAA,IAChB,MAAM,UAAU;AAAA,IAChB,gBAAgB,UAAU;AAAA,IAC1B,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,EACR,CAAC;AAED,MAAI,WAAW,MAAM;AACnB,aAAS,MAAM;AACf,WAAO;AAAA,EACT;AAEA,MAAI,OAAO,WAAW,QAAW;AAI/B,aAAS,MAAM;AACf,WAAO;AAAA,EACT;AAEA,QAAM,gBAAgB,OAAO;AAC7B,SAAO,QAAQ,YAAY;AACzB,UAAM,cAAc;AACpB,aAAS,MAAM;AAAA,EACjB;AAEA,SAAO;AACT;AAGA,eAAsB,aAA8B;AAClD,QAAM,WAAW,eAAe;AAChC,QAAM,OAAO,MAAM,YAAY,QAAQ;AACvC,MAAI,SAAS,MAAM;AACjB,cAAU,sCAAsC;AAChD,WAAO;AAAA,EACT;AAEA,MAAI;AACF,YAAQ,KAAK,KAAK,KAAK,SAAS;AAAA,EAClC,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS,SAAS;AACnD;AAAA,QACE;AAAA,MACF;AACA,YAAM,cAAc,QAAQ;AAC5B,aAAO;AAAA,IACT;AACA;AAAA,MACE,mCAAmC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IACrF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,SAAO,KAAK,IAAI,IAAI,UAAU;AAC5B,QAAK,MAAM,YAAY,QAAQ,MAAO,MAAM;AAC1C,gBAAU,oBAAoB,KAAK,GAAG,YAAY;AAClD,aAAO;AAAA,IACT;AACA,UAAM,MAAM,qBAAqB;AAAA,EACnC;AAEA,eAAa,6EAA6E;AAC1F,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/web/session-directory.ts","../src/commands/web.ts"],"sourcesContent":["import { readdir, readFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { type JournalEntry, parseJournal } from '../core/journal.js';\nimport type { ValidatedSessionSnapshot } from '../schemas.js';\nimport {\n  EVENTS_FILENAME,\n  type GetGlobalRootOptions,\n  getGlobalRoot,\n  ISSUES_DIR_NAME,\n  PROJECTS_DIR_NAME,\n  ROTATED_EVENTS_FILENAME,\n  SESSION_FILENAME,\n} from '../storage/paths.js';\nimport { readSessionFile } from '../storage/session-file.js';\n\n/**\n * Multi-session discovery for the web monitoring server (US-003).\n *\n * The single-instance server (`web/lock.ts`) runs decoupled from any one\n * pipeline invocation, so it cannot hold a `SessionPublisher` in memory for\n * \"the\" run being monitored — there may be zero, one or several running at\n * once, each in its own process. Instead this module polls every\n * `~/.issue-flow/projects/<project>/issues/<n>/session.json` on disk (the\n * same file `FilePublisher` already writes) and keeps an in-memory map of the\n * ones that are both well-formed and recently updated.\n *\n * Polling rather than `fs.watch` is a deliberate choice, not a placeholder:\n * `fs.watch`'s `recursive` option is only reliable on macOS and Windows (Linux\n * needs a manual per-directory watch tree, and the whole thing still degrades\n * to polling on network filesystems), while a `~/.issue-flow` tree is small\n * and local — a cheap poll of it is simpler and behaves identically on every\n * platform, which is what the US-003 acceptance criteria ask to validate.\n */\n\n/** How often the directory tree is rescanned, unless overridden. */\nexport const DEFAULT_POLL_INTERVAL_MS = 3000;\n\n/**\n * A session stops being reported once its file has gone this long without an\n * update. `FilePublisher` touches a live session every 10s without rewriting\n * its content. Three missed heartbeats plus ample scheduling/filesystem slack\n * avoid flapping while still removing an abruptly killed run promptly.\n */\nexport const DEFAULT_STALE_AFTER_MS = 90_000;\n\nexport interface ActiveSession {\n  /** Directory the session.json was read from, one level up from the file. */\n  issueDir: string;\n  filePath: string;\n  snapshot: ValidatedSessionSnapshot;\n  /** mtime of the file at the last successful read, in epoch ms. */\n  updatedAtMs: number;\n}\n\nexport interface SessionDirectoryOptions extends GetGlobalRootOptions {\n  /** Poll interval, in ms. Default {@link DEFAULT_POLL_INTERVAL_MS}. */\n  pollIntervalMs?: number;\n  /** Staleness threshold, in ms. Default {@link DEFAULT_STALE_AFTER_MS}. */\n  staleAfterMs?: number;\n  /** Invoked (at most once) when a poll fails unexpectedly. Best-effort logging only. */\n  onWarn?: (message: string) => void;\n}\n\nexport interface SessionDirectoryHandle {\n  /** Snapshot of every session currently considered active. */\n  sessions(): ActiveSession[];\n  /** A single active session by id, or undefined. */\n  getSession(sessionId: string): ActiveSession | undefined;\n  /** Journal entries for one active session, oldest generation first. */\n  events(sessionId: string): Promise<JournalEntry[] | undefined>;\n  /** Force an immediate rescan instead of waiting for the next tick. Never throws. */\n  refresh(): Promise<void>;\n  /** Stop polling. Idempotent. */\n  close(): void;\n}\n\nasync function listSubdirectories(dir: string): Promise<string[]> {\n  try {\n    const entries = await readdir(dir, { withFileTypes: true });\n    // Symlinks are skipped on purpose, same discipline as the storage\n    // migration walk: following one could pull session data from outside the\n    // global tree into the listing.\n    return entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name);\n  } catch {\n    // Missing/unreadable projects (or issues) directory reads as \"none yet\" —\n    // this is routinely the case before the first --web run ever happens.\n    return [];\n  }\n}\n\n/** Every `session.json` path currently on disk, one per project/issue pair. */\nasync function discoverSessionFiles(root: string): Promise<string[]> {\n  const projectsDir = join(root, PROJECTS_DIR_NAME);\n  const projectIds = await listSubdirectories(projectsDir);\n\n  const perProject = await Promise.all(\n    projectIds.map(async (projectId) => {\n      const issuesDir = join(projectsDir, projectId, ISSUES_DIR_NAME);\n      const issueIds = await listSubdirectories(issuesDir);\n      return issueIds.map((issueId) => join(issuesDir, issueId, SESSION_FILENAME));\n    }),\n  );\n\n  return perProject.flat();\n}\n\nasync function readJournalFile(filePath: string): Promise<JournalEntry[]> {\n  try {\n    return parseJournal(await readFile(filePath, 'utf-8'));\n  } catch {\n    return [];\n  }\n}\n\n/**\n * Start polling the global storage tree for active sessions.\n *\n * Returns a handle immediately; the first scan happens synchronously in the\n * background and `sessions()` answers `[]` until it completes, same as \"no\n * sessions found yet\" — there is nothing to await here that would not also\n * delay the server's very first bind.\n */\nexport function watchSessionDirectory(\n  options: SessionDirectoryOptions = {},\n): SessionDirectoryHandle {\n  const root = getGlobalRoot(options);\n  const pollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n  const staleAfterMs = options.staleAfterMs ?? DEFAULT_STALE_AFTER_MS;\n  const warn = options.onWarn;\n\n  // Keyed by sessionId, not by file path: a session's identity is the id\n  // inside its content, and that is what /api/status?session=<id> looks up.\n  let sessions = new Map<string, ActiveSession>();\n  let warned = false;\n\n  async function scan(): Promise<void> {\n    let files: string[];\n    try {\n      files = await discoverSessionFiles(root);\n    } catch (err) {\n      if (!warned) {\n        warned = true;\n        warn?.(\n          `issue-flow: web monitor could not scan the session directory (will keep retrying silently): ${\n            err instanceof Error ? err.message : String(err)\n          }`,\n        );\n      }\n      return;\n    }\n\n    const now = Date.now();\n    const next = new Map<string, ActiveSession>();\n    for (const filePath of files) {\n      const result = await readSessionFile(filePath);\n      if (result === null) continue;\n      if (now - result.updatedAtMs > staleAfterMs) continue; // stopped updating: not active\n      const sessionId = result.snapshot.sessionId as string;\n      next.set(sessionId, {\n        issueDir: join(filePath, '..'),\n        filePath,\n        snapshot: result.snapshot,\n        updatedAtMs: result.updatedAtMs,\n      });\n    }\n    sessions = next;\n  }\n\n  // The first scan runs immediately (not just after the first interval tick)\n  // so a server started right after a session begins does not report \"no\n  // sessions\" for a whole poll interval.\n  void scan();\n  const timer = setInterval(() => void scan(), pollIntervalMs);\n  timer.unref();\n\n  return {\n    sessions: () => [...sessions.values()],\n    getSession: (sessionId: string) => sessions.get(sessionId),\n    events: async (sessionId: string) => {\n      const session = sessions.get(sessionId);\n      if (session === undefined) return undefined;\n      const [rotated, current] = await Promise.all([\n        readJournalFile(join(session.issueDir, ROTATED_EVENTS_FILENAME)),\n        readJournalFile(join(session.issueDir, EVENTS_FILENAME)),\n      ]);\n      return [...rotated, ...current];\n    },\n    refresh: scan,\n    close: () => clearInterval(timer),\n  };\n}\n","import { loadWebConfig } from '../config.js';\nimport type { WebConfig } from '../schemas.js';\nimport { ensureSingleWebServer, stopWebMonitor } from '../web/lock.js';\nimport { watchSessionDirectory } from '../web/session-directory.js';\n\n/**\n * `issue-flow web serve` / `issue-flow web stop` (US-002).\n *\n * `serve` is the process `ensureWebMonitor()` (`web/lock.ts`) spawns detached\n * — it is not meant to be run interactively, though nothing stops a user from\n * doing so to watch every session on the machine without going through a\n * pipeline command first. It never exits on its own: the server stays bound\n * (see `unref: false` in `web/server.ts`) until `stop` sends it `SIGTERM`, at\n * which point `startWebServer`'s own signal handler closes it (removing the\n * lock) and re-raises the signal for the default termination behavior.\n */\n\nexport interface RunWebServeOptions {\n  port?: number;\n  host?: string;\n  refresh?: number;\n}\n\n/**\n * Bind (or defer to) the single web monitor instance and keep the process\n * alive for as long as it stays bound. Logging is intentionally silent on the\n * happy path: this process is spawned with `stdio: 'ignore'`, so anything\n * printed here goes nowhere — the caller (`ensureWebMonitor`) is the one that\n * tells the user the server is up.\n */\nexport async function runWebServe(options: RunWebServeOptions): Promise<number> {\n  // Built conditionally, not `{ port: options.port, ... }`: loadWebConfig()\n  // spreads this object directly over the lower-precedence layers, and an\n  // explicit `undefined` value would overwrite an env/.issue-flow.json\n  // setting instead of falling through to it (only an *absent* key does).\n  const cli: Partial<WebConfig> = {};\n  if (options.port !== undefined) cli.port = options.port;\n  if (options.host !== undefined) cli.host = options.host;\n  if (options.refresh !== undefined) cli.refreshSeconds = options.refresh;\n  const webConfig = await loadWebConfig({ cli });\n\n  const sessions = watchSessionDirectory();\n\n  const noop = (): void => {};\n  const handle = await ensureSingleWebServer({\n    sessions,\n    port: webConfig.port,\n    host: webConfig.host,\n    refreshSeconds: webConfig.refreshSeconds,\n    unref: false,\n    info: noop,\n    warn: noop,\n  });\n\n  if (handle === null) {\n    sessions.close();\n    return 1;\n  }\n\n  if (handle.server === undefined) {\n    // Another instance already won the race (or was already running by the\n    // time this process got here): nothing to serve, so it exits right away\n    // instead of idling as a redundant detached process.\n    sessions.close();\n    return 0;\n  }\n\n  const originalClose = handle.close;\n  handle.close = async () => {\n    await originalClose();\n    sessions.close();\n  };\n\n  return 0;\n}\n\n/** Stop the single running web monitor instance, if any. */\nexport async function runWebStop(): Promise<number> {\n  const webConfig = await loadWebConfig();\n  const result = await stopWebMonitor({ port: webConfig.port, host: webConfig.host });\n  return result === 'failed' || result === 'unowned' ? 1 : 0;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,SAAS,gBAAgB;AAClC,SAAS,YAAY;AAkCd,IAAM,2BAA2B;AAQjC,IAAM,yBAAyB;AAiCtC,eAAe,mBAAmB,KAAgC;AAChE,MAAI;AACF,UAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAI1D,WAAO,QAAQ,OAAO,CAAC,UAAU,MAAM,YAAY,CAAC,EAAE,IAAI,CAAC,UAAU,MAAM,IAAI;AAAA,EACjF,QAAQ;AAGN,WAAO,CAAC;AAAA,EACV;AACF;AAGA,eAAe,qBAAqB,MAAiC;AACnE,QAAM,cAAc,KAAK,MAAM,iBAAiB;AAChD,QAAM,aAAa,MAAM,mBAAmB,WAAW;AAEvD,QAAM,aAAa,MAAM,QAAQ;AAAA,IAC/B,WAAW,IAAI,OAAO,cAAc;AAClC,YAAM,YAAY,KAAK,aAAa,WAAW,eAAe;AAC9D,YAAM,WAAW,MAAM,mBAAmB,SAAS;AACnD,aAAO,SAAS,IAAI,CAAC,YAAY,KAAK,WAAW,SAAS,gBAAgB,CAAC;AAAA,IAC7E,CAAC;AAAA,EACH;AAEA,SAAO,WAAW,KAAK;AACzB;AAEA,eAAe,gBAAgB,UAA2C;AACxE,MAAI;AACF,WAAO,aAAa,MAAM,SAAS,UAAU,OAAO,CAAC;AAAA,EACvD,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAUO,SAAS,sBACd,UAAmC,CAAC,GACZ;AACxB,QAAM,OAAO,cAAc,OAAO;AAClC,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,eAAe,QAAQ,gBAAgB;AAC7C,QAAM,OAAO,QAAQ;AAIrB,MAAI,WAAW,oBAAI,IAA2B;AAC9C,MAAI,SAAS;AAEb,iBAAe,OAAsB;AACnC,QAAI;AACJ,QAAI;AACF,cAAQ,MAAM,qBAAqB,IAAI;AAAA,IACzC,SAAS,KAAK;AACZ,UAAI,CAAC,QAAQ;AACX,iBAAS;AACT;AAAA,UACE,+FACE,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CACjD;AAAA,QACF;AAAA,MACF;AACA;AAAA,IACF;AAEA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,OAAO,oBAAI,IAA2B;AAC5C,eAAW,YAAY,OAAO;AAC5B,YAAM,SAAS,MAAM,gBAAgB,QAAQ;AAC7C,UAAI,WAAW,KAAM;AACrB,UAAI,MAAM,OAAO,cAAc,aAAc;AAC7C,YAAM,YAAY,OAAO,SAAS;AAClC,WAAK,IAAI,WAAW;AAAA,QAClB,UAAU,KAAK,UAAU,IAAI;AAAA,QAC7B;AAAA,QACA,UAAU,OAAO;AAAA,QACjB,aAAa,OAAO;AAAA,MACtB,CAAC;AAAA,IACH;AACA,eAAW;AAAA,EACb;AAKA,OAAK,KAAK;AACV,QAAM,QAAQ,YAAY,MAAM,KAAK,KAAK,GAAG,cAAc;AAC3D,QAAM,MAAM;AAEZ,SAAO;AAAA,IACL,UAAU,MAAM,CAAC,GAAG,SAAS,OAAO,CAAC;AAAA,IACrC,YAAY,CAAC,cAAsB,SAAS,IAAI,SAAS;AAAA,IACzD,QAAQ,OAAO,cAAsB;AACnC,YAAM,UAAU,SAAS,IAAI,SAAS;AACtC,UAAI,YAAY,OAAW,QAAO;AAClC,YAAM,CAAC,SAAS,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,QAC3C,gBAAgB,KAAK,QAAQ,UAAU,uBAAuB,CAAC;AAAA,QAC/D,gBAAgB,KAAK,QAAQ,UAAU,eAAe,CAAC;AAAA,MACzD,CAAC;AACD,aAAO,CAAC,GAAG,SAAS,GAAG,OAAO;AAAA,IAChC;AAAA,IACA,SAAS;AAAA,IACT,OAAO,MAAM,cAAc,KAAK;AAAA,EAClC;AACF;;;AChKA,eAAsB,YAAY,SAA8C;AAK9E,QAAM,MAA0B,CAAC;AACjC,MAAI,QAAQ,SAAS,OAAW,KAAI,OAAO,QAAQ;AACnD,MAAI,QAAQ,SAAS,OAAW,KAAI,OAAO,QAAQ;AACnD,MAAI,QAAQ,YAAY,OAAW,KAAI,iBAAiB,QAAQ;AAChE,QAAM,YAAY,MAAM,cAAc,EAAE,IAAI,CAAC;AAE7C,QAAM,WAAW,sBAAsB;AAEvC,QAAM,OAAO,MAAY;AAAA,EAAC;AAC1B,QAAM,SAAS,MAAM,sBAAsB;AAAA,IACzC;AAAA,IACA,MAAM,UAAU;AAAA,IAChB,MAAM,UAAU;AAAA,IAChB,gBAAgB,UAAU;AAAA,IAC1B,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,EACR,CAAC;AAED,MAAI,WAAW,MAAM;AACnB,aAAS,MAAM;AACf,WAAO;AAAA,EACT;AAEA,MAAI,OAAO,WAAW,QAAW;AAI/B,aAAS,MAAM;AACf,WAAO;AAAA,EACT;AAEA,QAAM,gBAAgB,OAAO;AAC7B,SAAO,QAAQ,YAAY;AACzB,UAAM,cAAc;AACpB,aAAS,MAAM;AAAA,EACjB;AAEA,SAAO;AACT;AAGA,eAAsB,aAA8B;AAClD,QAAM,YAAY,MAAM,cAAc;AACtC,QAAM,SAAS,MAAM,eAAe,EAAE,MAAM,UAAU,MAAM,MAAM,UAAU,KAAK,CAAC;AAClF,SAAO,WAAW,YAAY,WAAW,YAAY,IAAI;AAC3D;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "issue-flow",
-  "version": "0.14.0",
+  "version": "0.16.0",
   "description": "Unified CLI for orchestrating the full issue-flow pipeline via Claude Code, Codex CLI, Cursor CLI or Antigravity CLI",
   "type": "module",
   "bin": {

package/web/AGENTS.md

@@ -18,6 +18,15 @@ informado). Os dois significam "não informado" e nunca podem virar `0`,
 qualquer coisa que não seja número finito para `null`. Prefira
 `x !== null && x !== undefined` a `!x`: zero é um valor legítimo.
 
+O chip de versão no header é a versão do **monitor** (`/api/health`), não a da
+CLI que executa o pipeline: os assets desta página vêm da memória daquele
+processo, então é ela que explica o que está na tela. As duas aparecem juntas no
+card de configuração, e a divergência entre elas vira um aviso ali.
+
+Toda resposta nova carrega `X-Issue-Flow-Instance`. O client guarda a primeira
+identidade observada e chama `window.location.reload()` quando ela muda: isso é
+o handoff de assets depois de `--restart-web`, não um estado de sessão.
+
 Com **uma** sessão ativa o painel abre direto no detalhe (comportamento
 histórico). Com **duas ou mais**, `renderDashboard()` lista um card por
 execução; o clique define `state.selectedSessionId` e o poll passa a usar o

package/web/public/app.css

@@ -266,6 +266,19 @@ a:hover {
   font-weight: 700;
 }
 
+/* Versão do processo que serve o painel. Par medido: --text-muted sobre
+   --surface-sunken (6,10 claro / 5,33 escuro). */
+.app-version {
+  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+  font-size: 0.72rem;
+  font-weight: 500;
+  padding: 1px 7px;
+  border-radius: 999px;
+  background: var(--surface-sunken);
+  color: var(--text-muted);
+  vertical-align: middle;
+}
+
 .issue-link {
   font-weight: 600;
 }

package/web/public/app.js

@@ -89,6 +89,8 @@
     now: document.getElementById('now'),
     resilience: document.getElementById('resilience'),
     configuration: document.getElementById('configuration'),
+    appVersion: document.getElementById('app-version'),
+    appVersionDashboard: document.getElementById('app-version-dashboard'),
     phases: document.getElementById('phases'),
     nextSteps: document.getElementById('next-steps'),
     stories: document.getElementById('stories'),
@@ -127,6 +129,11 @@
     // guardar o nó levaria a uma referência morta.
     selectedDetail: null,
     configWritable: false,
+    // Identifica o processo que serviu os assets atuais. Uma troca significa
+    // que --restart-web colocou código novo no mesmo origin e exige reload.
+    serverInstanceId: null,
+    // Versão do monitor, vinda de /api/health. Null enquanto não respondeu.
+    monitorVersion: null,
     // Multi-sessão (#35): lista de /api/sessions e seleção explícita do usuário.
     // selectedSessionId null = modo automático (1 sessão → detalhe; 2+ → dashboard).
     sessions: [],
@@ -528,6 +535,35 @@
     state.eventsUrl = null;
   }
 
+  // A versão exibida no header é a do processo que serviu esta página, nunca a
+  // da CLI que iniciou a execução: os assets vivem na memória desse processo,
+  // então é ela que explica o que está na tela. As duas aparecem juntas no card
+  // de configuração quando divergem.
+  function renderMonitorVersion(version) {
+    const label = typeof version === 'string' && version !== '' ? 'v' + version : null;
+    state.monitorVersion = label === null ? null : version;
+    for (const node of [els.appVersion, els.appVersionDashboard]) {
+      if (!node) continue;
+      node.textContent = label || '';
+      node.title = label === null ? '' : 'Versão do monitor que serve este painel';
+      node.hidden = label === null;
+    }
+  }
+
+  function serverInstanceChanged(response) {
+    const instanceId = response.headers.get('X-Issue-Flow-Instance');
+    if (!instanceId) return false; // servidor anterior à identidade de instância
+    if (state.serverInstanceId === null) {
+      state.serverInstanceId = instanceId;
+      return false;
+    }
+    if (state.serverInstanceId !== instanceId) {
+      window.location.reload();
+      return true;
+    }
+    return false;
+  }
+
   function requestPoll() {
     clearTimer();
     if (state.polling) {
@@ -560,6 +596,7 @@
     state.pollAgain = false;
     try {
       const sessionsRes = await fetch('api/sessions', { cache: 'no-store' });
+      if (serverInstanceChanged(sessionsRes)) return;
       if (!sessionsRes.ok) throw new Error('HTTP ' + sessionsRes.status);
       const sessions = await sessionsRes.json();
       if (!Array.isArray(sessions)) throw new Error('sessions payload invalid');
@@ -1032,6 +1069,34 @@
 
   function renderConfiguration(snapshot) {
     clear(els.configuration);
+
+    // Quem executou e quem está mostrando. São processos diferentes e podem
+    // estar em versões diferentes; este é o único lugar onde as duas aparecem
+    // lado a lado, então a divergência é dita aqui.
+    const env = snapshot.environment;
+    const runVersion = env && env.cliVersion ? env.cliVersion : null;
+    const runtime = el('dl', 'now-grid');
+    const runtimeBits = [runVersion ? 'v' + runVersion : 'versão não registrada'];
+    if (env && env.node) runtimeBits.push(env.node);
+    if (env && env.platform) runtimeBits.push(env.platform);
+    nowRow(runtime, 'Issue Flow (execução)', runtimeBits.join(' · '));
+    nowRow(
+      runtime,
+      'Monitor (este painel)',
+      state.monitorVersion ? 'v' + state.monitorVersion : '—',
+    );
+    els.configuration.appendChild(runtime);
+    if (runVersion !== null && state.monitorVersion && runVersion !== state.monitorVersion) {
+      els.configuration.appendChild(
+        el(
+          'p',
+          'alert-entry level-warn',
+          'Este painel é servido por uma versão diferente da que executa o pipeline. ' +
+            'Reinicie o monitor com --restart-web para ver a interface desta versão.',
+        ),
+      );
+    }
+
     const config = snapshot.configuration;
     if (!config) {
       els.configuration.appendChild(el('p', 'empty', 'Configuração não capturada nesta execução.'));
@@ -1721,18 +1786,20 @@
     // Default do seletor vem da configuração do servidor (/api/health);
     // a escolha do usuário em localStorage tem precedência.
     const stored = readStoredRefresh();
-    if (stored !== null) {
-      state.refreshSeconds = stored;
-    } else {
-      try {
-        const health = await fetch('api/health', { cache: 'no-store' }).then((r) => r.json());
-        state.configWritable = list(health.capabilities).includes('config:agent:write');
-        const suggested = Number(health.refreshSeconds);
-        if (Number.isFinite(suggested) && suggested > 0) state.refreshSeconds = suggested;
-      } catch (err) {
-        // Sem /api/health segue o default local (5s).
+    try {
+      const healthRes = await fetch('api/health', { cache: 'no-store' });
+      serverInstanceChanged(healthRes);
+      const health = await healthRes.json();
+      renderMonitorVersion(health.version);
+      state.configWritable = list(health.capabilities).includes('config:agent:write');
+      const suggested = Number(health.refreshSeconds);
+      if (stored === null && Number.isFinite(suggested) && suggested > 0) {
+        state.refreshSeconds = suggested;
       }
+    } catch (err) {
+      // Sem /api/health segue o default local (5s).
     }
+    if (stored !== null) state.refreshSeconds = stored;
     buildRefreshSelect();
 
     window.setInterval(renderTimers, 1000);

package/web/public/index.html

@@ -37,7 +37,10 @@
     <div id="view-dashboard" class="view" hidden>
       <header class="card header">
         <div class="header-main">
-          <h1><span class="brand">issue-flow</span></h1>
+          <h1>
+            <span class="brand">issue-flow</span>
+            <span id="app-version-dashboard" class="app-version" hidden></span>
+          </h1>
           <p class="muted">Execuções ativas</p>
         </div>
         <div class="header-side">
@@ -69,6 +72,7 @@
         </button>
         <h1>
           <span class="brand">issue-flow</span>
+          <span id="app-version" class="app-version" hidden></span>
           <a id="issue-link" class="issue-link" target="_blank" rel="noopener" hidden>#—</a>
         </h1>
         <p id="branch-line" class="muted mono"></p>
@@ -142,7 +146,7 @@
     <section class="card">
       <div class="section-head">
         <h2>Harnesses e configuração efetiva</h2>
-        <span class="muted">preferências futuras e overrides desta execução</span>
+        <span class="muted">versões, preferências futuras e overrides desta execução</span>
       </div>
       <div id="configuration"></div>
     </section>