patchwarden 1.1.0 → 1.5.0

package/src/tools/taskLineage.ts

@@ -0,0 +1,300 @@
+import { randomBytes } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { getConfig } from "../config.js";
+import { guardReadPath } from "../security/pathGuard.js";
+import { redactSensitiveValue } from "../security/contentRedaction.js";
+import { PatchWardenError } from "../errors.js";
+
+export type TaskLoopStopReason =
+  | "success"
+  | "max_iterations_reached"
+  | "verification_failed"
+  | "high_risk_blocked"
+  | "user_confirmation_required"
+  | "agent_timeout"
+  | "policy_blocked"
+  | "watcher_blocked"
+  | "direct_profile_disabled"
+  | "direct_verification_failed"
+  | "direct_audit_failed";
+
+export interface TaskLineageDirectSession {
+  session_id: string;
+  status?: "passed" | "failed" | "skipped";
+  command_count?: number;
+  passed_commands?: number;
+  failed_commands?: number;
+  timed_out_commands?: number;
+  audit_decision?: "pass" | "warn" | "fail" | "not_run";
+  changed_files_total?: number;
+  next_action?: string;
+}
+
+export interface TaskLineageWorktree {
+  isolation_mode: "current_repo" | "worktree";
+  worktree_id?: string;
+  worktree_path?: string;
+  branch?: string;
+  requested_base_branch?: string;
+  cleanup: "keep" | "archive" | "delete_ignored_only";
+  status: "not_used" | "active" | "failed";
+  next_action: string;
+}
+
+export interface TaskLineageAgentRouting {
+  requested_agent: string | null;
+  selected_agent: string;
+  reason: string;
+  fallback: boolean;
+}
+
+export interface TaskLineageRound {
+  iteration: number;
+  task_id: string;
+  role: "main" | "fix_tests" | "cleanup";
+  status: string;
+  terminal: boolean;
+  verification_status: string;
+  audit_verdict: string;
+  fail_checks: string[];
+  warn_checks: string[];
+  next_action: string;
+}
+
+export interface TaskLineageRecord {
+  lineage_id: string;
+  goal: string;
+  repo_path: string;
+  created_at: string;
+  updated_at: string;
+  final_status: "accepted" | "needs_fix" | "blocked" | "failed";
+  stop_reason: TaskLoopStopReason;
+  next_action: string;
+  main_task: string | null;
+  fix_tasks: string[];
+  cleanup_tasks: string[];
+  direct_sessions: Array<string | TaskLineageDirectSession>;
+  rounds: TaskLineageRound[];
+  warnings: string[];
+  errors: string[];
+  worktree?: TaskLineageWorktree;
+  agent_routing?: TaskLineageAgentRouting;
+}
+
+export interface SafeTaskLineage {
+  lineage_id: string;
+  goal: string;
+  repo_path: string;
+  created_at: string;
+  updated_at: string;
+  final_status: TaskLineageRecord["final_status"];
+  stop_reason: TaskLoopStopReason;
+  next_action: string;
+  tasks: {
+    main: string | null;
+    fix: string[];
+    cleanup: string[];
+    direct_sessions: TaskLineageDirectSession[];
+  };
+  worktree: TaskLineageWorktree;
+  agent_routing: TaskLineageAgentRouting | null;
+  verification: {
+    latest_status: string;
+    passed: boolean;
+  };
+  rounds: TaskLineageRound[];
+  warnings: string[];
+  errors: string[];
+  truncated: boolean;
+}
+
+export function createLineageId(now = new Date()): string {
+  const stamp = now.toISOString().replace(/[-:.TZ]/g, "").slice(0, 14);
+  return `lineage_${stamp}_${randomBytes(4).toString("hex")}`;
+}
+
+export function writeTaskLineage(record: TaskLineageRecord): SafeTaskLineage {
+  const config = getConfig();
+  const lineageDir = resolve(config.workspaceRoot, ".patchwarden", "lineages", record.lineage_id);
+  mkdirSync(lineageDir, { recursive: true });
+  const safeRecord = redactSensitiveValue(record).value as TaskLineageRecord;
+  writeFileSync(join(lineageDir, "lineage.json"), JSON.stringify(safeRecord, null, 2) + "\n", "utf-8");
+  writeFileSync(join(lineageDir, "SUMMARY.md"), buildSummaryMarkdown(safeRecord), "utf-8");
+  return toSafeTaskLineage(safeRecord);
+}
+
+export function getTaskLineage(lineageId: string, options: { max_items?: number } = {}): SafeTaskLineage {
+  const maxItems = normalizeMaxItems(options.max_items);
+  if (!/^[A-Za-z0-9_-]+$/.test(lineageId)) {
+    throw new PatchWardenError(
+      "invalid_lineage_id",
+      "lineage_id may contain only letters, numbers, underscores, and hyphens.",
+      "Pass a lineage_id returned by run_task_loop.",
+      true,
+      { lineage_id: lineageId }
+    );
+  }
+  const config = getConfig();
+  const lineageFile = resolve(config.workspaceRoot, ".patchwarden", "lineages", lineageId, "lineage.json");
+  guardReadPath(lineageFile, config.workspaceRoot, ".patchwarden/lineages");
+  if (!existsSync(lineageFile)) {
+    throw new PatchWardenError(
+      "lineage_not_found",
+      `Task lineage not found: "${lineageId}".`,
+      "Pass a lineage_id returned by run_task_loop.",
+      true,
+      { lineage_id: lineageId }
+    );
+  }
+  const raw = readFileSync(lineageFile, "utf-8").replace(/^\uFEFF/, "");
+  const record = JSON.parse(raw) as TaskLineageRecord;
+  return toSafeTaskLineage(redactSensitiveValue(record).value as TaskLineageRecord, maxItems);
+}
+
+export function toSafeTaskLineage(record: TaskLineageRecord, maxItems = 8): SafeTaskLineage {
+  const rounds = record.rounds.slice(0, maxItems);
+  const latest = record.rounds[record.rounds.length - 1];
+  const directSessions = normalizeDirectSessions(record.direct_sessions);
+  return {
+    lineage_id: record.lineage_id,
+    goal: record.goal,
+    repo_path: record.repo_path,
+    created_at: record.created_at,
+    updated_at: record.updated_at,
+    final_status: record.final_status,
+    stop_reason: record.stop_reason,
+    next_action: record.next_action,
+    tasks: {
+      main: record.main_task,
+      fix: record.fix_tasks.slice(0, maxItems),
+      cleanup: record.cleanup_tasks.slice(0, maxItems),
+      direct_sessions: directSessions.slice(0, maxItems),
+    },
+    worktree: normalizeWorktree(record.worktree),
+    agent_routing: record.agent_routing ? {
+      requested_agent: record.agent_routing.requested_agent,
+      selected_agent: truncate(String(record.agent_routing.selected_agent), 120),
+      reason: truncate(String(record.agent_routing.reason), 240),
+      fallback: Boolean(record.agent_routing.fallback),
+    } : null,
+    verification: {
+      latest_status: latest?.verification_status || "not_available",
+      passed: latest?.verification_status === "passed",
+    },
+    rounds,
+    warnings: record.warnings.slice(0, maxItems).map((value) => truncate(value, 240)),
+    errors: record.errors.slice(0, maxItems).map((value) => truncate(value, 240)),
+    truncated:
+      record.rounds.length > maxItems ||
+      record.fix_tasks.length > maxItems ||
+      record.cleanup_tasks.length > maxItems ||
+      directSessions.length > maxItems ||
+      record.warnings.length > maxItems ||
+      record.errors.length > maxItems,
+  };
+}
+
+function buildSummaryMarkdown(record: TaskLineageRecord): string {
+  const rounds = record.rounds.map((round) =>
+    `- ${round.role} ${round.task_id}: ${round.status}, verification=${round.verification_status}, audit=${round.audit_verdict}`
+  );
+  return [
+    "# PatchWarden Task Lineage",
+    "",
+    `- Lineage: ${record.lineage_id}`,
+    `- Goal: ${record.goal}`,
+    `- Repo: ${record.repo_path}`,
+    `- Final status: ${record.final_status}`,
+    `- Stop reason: ${record.stop_reason}`,
+    `- Next action: ${record.next_action}`,
+    `- Isolation: ${normalizeWorktree(record.worktree).isolation_mode}`,
+    `- Worktree: ${formatWorktree(record.worktree)}`,
+    `- Agent routing: ${formatAgentRouting(record.agent_routing)}`,
+    "",
+    "## Tasks",
+    `- Main: ${record.main_task || "none"}`,
+    `- Fix tasks: ${record.fix_tasks.length > 0 ? record.fix_tasks.join(", ") : "none"}`,
+    `- Cleanup tasks: ${record.cleanup_tasks.length > 0 ? record.cleanup_tasks.join(", ") : "none"}`,
+    `- Direct sessions: ${formatDirectSessions(record.direct_sessions)}`,
+    "",
+    "## Rounds",
+    ...(rounds.length > 0 ? rounds : ["- None."]),
+    "",
+  ].join("\n");
+}
+
+function normalizeWorktree(value: TaskLineageWorktree | undefined): TaskLineageWorktree {
+  if (!value) {
+    return {
+      isolation_mode: "current_repo",
+      cleanup: "keep",
+      status: "not_used",
+      next_action: "none",
+    };
+  }
+  return {
+    isolation_mode: value.isolation_mode === "worktree" ? "worktree" : "current_repo",
+    worktree_id: value.worktree_id ? truncate(String(value.worktree_id), 120) : undefined,
+    worktree_path: value.worktree_path ? truncate(String(value.worktree_path), 260) : undefined,
+    branch: value.branch ? truncate(String(value.branch), 160) : undefined,
+    requested_base_branch: value.requested_base_branch ? truncate(String(value.requested_base_branch), 160) : undefined,
+    cleanup: value.cleanup,
+    status: value.status,
+    next_action: truncate(String(value.next_action || "review_worktree"), 240),
+  };
+}
+
+function formatWorktree(value: TaskLineageWorktree | undefined): string {
+  const worktree = normalizeWorktree(value);
+  if (worktree.isolation_mode !== "worktree") return "not used";
+  const id = worktree.worktree_id || "unknown";
+  const status = worktree.status || "unknown";
+  const branch = worktree.branch ? ` branch=${worktree.branch}` : "";
+  return `${id} status=${status}${branch}`;
+}
+
+function formatAgentRouting(value: TaskLineageAgentRouting | undefined): string {
+  if (!value) return "not recorded";
+  const requested = value.requested_agent ? ` requested=${value.requested_agent}` : "";
+  return `${value.selected_agent}${requested} reason=${truncate(value.reason, 160)}`;
+}
+
+function normalizeDirectSessions(value: Array<string | TaskLineageDirectSession>): TaskLineageDirectSession[] {
+  return value.map((entry) => {
+    if (typeof entry === "string") return { session_id: entry };
+    return {
+      session_id: String(entry.session_id || ""),
+      status: entry.status,
+      command_count: entry.command_count,
+      passed_commands: entry.passed_commands,
+      failed_commands: entry.failed_commands,
+      timed_out_commands: entry.timed_out_commands,
+      audit_decision: entry.audit_decision,
+      changed_files_total: entry.changed_files_total,
+      next_action: entry.next_action ? truncate(String(entry.next_action), 240) : undefined,
+    };
+  }).filter((entry) => entry.session_id !== "");
+}
+
+function formatDirectSessions(value: Array<string | TaskLineageDirectSession>): string {
+  const sessions = normalizeDirectSessions(value);
+  if (sessions.length === 0) return "none";
+  return sessions.map((entry) => {
+    const status = entry.status ? ` status=${entry.status}` : "";
+    const audit = entry.audit_decision ? ` audit=${entry.audit_decision}` : "";
+    return `${entry.session_id}${status}${audit}`;
+  }).join(", ");
+}
+
+function normalizeMaxItems(value: number | undefined): number {
+  if (value === undefined) return 8;
+  if (!Number.isInteger(value) || value < 1 || value > 50) {
+    throw new Error("max_items must be an integer from 1 to 50.");
+  }
+  return value;
+}
+
+function truncate(value: string, maxChars: number): string {
+  return value.length <= maxChars ? value : `${value.slice(0, maxChars)}...`;
+}

package/src/tools/toolCatalog.ts

@@ -25,6 +25,11 @@ export const CHATGPT_CORE_TOOL_NAMES = [
   "read_workspace_file",
   "save_plan",
   "create_task",
+  "run_task_loop",
+  "recommend_agent_for_task",
+  "get_task_lineage",
+  "export_task_evidence_pack",
+  "get_project_policy",
   "wait_for_task",
   "get_task_summary",
   "get_diff",
@@ -50,6 +55,7 @@ export const CHATGPT_DIRECT_TOOL_NAMES = [
   "read_workspace_file",
   "apply_patch",
   "run_verification",
+  "run_direct_verification_bundle",
   "finalize_direct_session",
   "audit_session",
   "safe_direct_summary",

package/src/tools/toolRegistry.ts

@@ -405,6 +405,61 @@ const STATIC_TOOL_META: Record<string, StaticToolMeta> = {
     requiresConfirmation: false,
     relatedTools: ["save_plan", "wait_for_task", "get_task_status"],
   },
+  run_task_loop: {
+    title: "Run Task Loop",
+    summary: "运行受保护的任务循环：创建任务、等待、验证、审计，并在低风险测试失败时创建 fix_tests 后续任务",
+    profiles: ["full", "chatgpt_core"],
+    modes: ["delegate", "audit"],
+    tags: ["loop", "task", "lineage", "verify", "audit", "fix"],
+    aliases: ["task_loop", "run_loop", "guarded_loop"],
+    risk: "workspace_write",
+    requiresConfirmation: false,
+    relatedTools: ["create_task", "wait_for_task", "safe_result", "safe_audit", "get_task_lineage"],
+  },
+  recommend_agent_for_task: {
+    title: "Recommend Agent For Task",
+    summary: "Return bounded agent routing guidance without starting an agent or creating a task",
+    profiles: ["full", "chatgpt_core"],
+    modes: ["delegate", "diagnostic"],
+    tags: ["agent", "routing", "recommend", "task", "safe"],
+    aliases: ["recommend_agent", "route_agent", "agent_routing"],
+    risk: "readonly",
+    requiresConfirmation: false,
+    relatedTools: ["list_agents", "create_task", "run_task_loop"],
+  },
+  get_task_lineage: {
+    title: "Get Task Lineage",
+    summary: "读取 run_task_loop 生成的任务链路安全摘要，不返回完整日志或 diff",
+    profiles: ["full", "chatgpt_core"],
+    modes: ["delegate", "audit", "diagnostic"],
+    tags: ["lineage", "loop", "summary", "task", "safe"],
+    aliases: ["lineage", "task_lineage"],
+    risk: "readonly",
+    requiresConfirmation: false,
+    relatedTools: ["run_task_loop", "safe_result", "safe_audit"],
+  },
+  export_task_evidence_pack: {
+    title: "Export Task Evidence Pack",
+    summary: "Export bounded lineage, verification, Direct, policy, and catalog evidence without logs or diffs",
+    profiles: ["full", "chatgpt_core"],
+    modes: ["delegate", "audit", "diagnostic"],
+    tags: ["evidence", "lineage", "summary", "release", "safe"],
+    aliases: ["evidence_pack", "export_evidence", "task_evidence"],
+    risk: "workspace_write",
+    requiresConfirmation: false,
+    relatedTools: ["get_task_lineage", "run_task_loop", "get_project_policy"],
+  },
+  get_project_policy: {
+    title: "Get Project Policy",
+    summary: "Read bounded project policy and release readiness without exposing secrets or expanding command permissions",
+    profiles: ["full", "chatgpt_core"],
+    modes: ["diagnostic", "release"],
+    tags: ["policy", "project", "release", "readiness", "safe"],
+    aliases: ["project_policy", "policy", "get_policy"],
+    risk: "readonly",
+    requiresConfirmation: false,
+    relatedTools: ["release_check", "release_prepare", "release_cleanup"],
+  },
   sync_file: {
     title: "Sync File",
     summary: "在 Direct 会话中同步文件（带 sha256 校验）",
@@ -517,6 +572,17 @@ const STATIC_TOOL_META: Record<string, StaticToolMeta> = {
     requiresConfirmation: false,
     relatedTools: ["finalize_direct_session", "audit_session"],
   },
+  run_direct_verification_bundle: {
+    title: "Run Direct Verification Bundle",
+    summary: "Run multiple Direct allowlisted verification commands and return bounded status without stdout or stderr tails",
+    profiles: ["full", "chatgpt_direct"],
+    modes: ["direct", "audit"],
+    tags: ["direct", "verify", "verification", "bundle", "safe"],
+    aliases: ["direct_verify_bundle", "verification_bundle"],
+    risk: "command",
+    requiresConfirmation: false,
+    relatedTools: ["run_verification", "safe_finalize_direct_session", "safe_audit_direct_session"],
+  },
   safe_direct_summary: {
     title: "Safe Direct Summary",
     summary: "Direct 会话安全摘要（不含完整 diff 或验证 stdout/stderr）",
@@ -696,6 +762,50 @@ const STATIC_TOOL_META: Record<string, StaticToolMeta> = {
     requiresConfirmation: true,
     relatedTools: ["audit_task", "safe_status"],
   },
+  release_check: {
+    title: "Release Check",
+    summary: "Run bounded release readiness checks through the existing release gate without remote writes",
+    profiles: ["full"],
+    modes: ["release", "diagnostic"],
+    tags: ["release", "check", "gate", "readiness", "policy"],
+    aliases: ["release_check", "check_release"],
+    risk: "release",
+    requiresConfirmation: true,
+    relatedTools: ["check_release_gate", "get_project_policy", "release_prepare", "release_verify"],
+  },
+  release_prepare: {
+    title: "Release Prepare",
+    summary: "Run policy-approved local release preparation commands through the existing command guard",
+    profiles: ["full"],
+    modes: ["release"],
+    tags: ["release", "prepare", "build", "test", "policy"],
+    aliases: ["prepare_release", "release_ready"],
+    risk: "release",
+    requiresConfirmation: true,
+    relatedTools: ["get_project_policy", "release_check", "release_verify"],
+  },
+  release_verify: {
+    title: "Release Verify",
+    summary: "Verify npm, GitHub release, and CI facts with read-only remote checks",
+    profiles: ["full"],
+    modes: ["release", "diagnostic"],
+    tags: ["release", "verify", "npm", "github", "ci"],
+    aliases: ["verify_release", "release_remote_verify"],
+    risk: "release",
+    requiresConfirmation: true,
+    relatedTools: ["release_check", "check_release_gate"],
+  },
+  release_cleanup: {
+    title: "Release Cleanup",
+    summary: "Dry-run-first cleanup for low-risk release artifacts under project policy",
+    profiles: ["full"],
+    modes: ["release"],
+    tags: ["release", "cleanup", "artifacts", "policy"],
+    aliases: ["cleanup_release", "release_artifact_cleanup"],
+    risk: "workspace_write",
+    requiresConfirmation: true,
+    relatedTools: ["get_project_policy", "release_prepare"],
+  },
   merge_worktree: {
     title: "Merge Worktree",
     summary: "v1.0.0: 合并隔离 worktree 变更回主工作区",

package/src/version.ts

@@ -1,2 +1,2 @@
-export const PATCHWARDEN_VERSION = "1.1.0";
-export const TOOL_SCHEMA_EPOCH = "2026-06-27-v9";
+export const PATCHWARDEN_VERSION = "1.5.0";
+export const TOOL_SCHEMA_EPOCH = "2026-07-05-v13";

package/ui/pages/dashboard.html

@@ -304,6 +304,38 @@ html.dark {
         <div id="suggestions-body" class="px-4 py-2"></div>
       </div>
 
+      <!-- ===== V1.5 RELEASE / POLICY / LINEAGE / EVIDENCE OVERVIEW ===== -->
+      <div class="grid grid-cols-1 lg:grid-cols-4 gap-4 mb-6">
+        <div class="rounded-lg" style="background-color: var(--pw-bg-surface); border: 1px solid var(--pw-border);">
+          <div class="flex items-center justify-between px-4 py-3" style="border-bottom: 1px solid var(--pw-border);">
+            <h2 class="text-sm font-semibold truncate" style="color: var(--pw-text-primary);">Lineage</h2>
+            <span id="lineage-count" class="text-xs whitespace-nowrap" style="color: var(--pw-text-tertiary);">...</span>
+          </div>
+          <div id="lineage-overview-body" class="px-4 py-3 text-sm" style="color: var(--pw-text-tertiary);">Loading</div>
+        </div>
+        <div class="rounded-lg" style="background-color: var(--pw-bg-surface); border: 1px solid var(--pw-border);">
+          <div class="flex items-center justify-between px-4 py-3" style="border-bottom: 1px solid var(--pw-border);">
+            <h2 class="text-sm font-semibold truncate" style="color: var(--pw-text-primary);">Project Policy</h2>
+            <span id="policy-status" class="text-xs whitespace-nowrap" style="color: var(--pw-text-tertiary);">...</span>
+          </div>
+          <div id="policy-overview-body" class="px-4 py-3 text-sm" style="color: var(--pw-text-tertiary);">Loading</div>
+        </div>
+        <div class="rounded-lg" style="background-color: var(--pw-bg-surface); border: 1px solid var(--pw-border);">
+          <div class="flex items-center justify-between px-4 py-3" style="border-bottom: 1px solid var(--pw-border);">
+            <h2 class="text-sm font-semibold truncate" style="color: var(--pw-text-primary);">Release</h2>
+            <span id="release-status" class="text-xs whitespace-nowrap" style="color: var(--pw-text-tertiary);">...</span>
+          </div>
+          <div id="release-overview-body" class="px-4 py-3 text-sm" style="color: var(--pw-text-tertiary);">Loading</div>
+        </div>
+        <div id="evidence-pack-card" class="rounded-lg" style="background-color: var(--pw-bg-surface); border: 1px solid var(--pw-border);">
+          <div class="flex items-center justify-between px-4 py-3" style="border-bottom: 1px solid var(--pw-border);">
+            <h2 class="text-sm font-semibold truncate" style="color: var(--pw-text-primary);">Evidence Pack</h2>
+            <span id="evidence-pack-status" class="text-xs whitespace-nowrap" style="color: var(--pw-text-tertiary);">...</span>
+          </div>
+          <div id="evidence-pack-overview-body" class="px-4 py-3 text-sm" style="color: var(--pw-text-tertiary);">Loading</div>
+        </div>
+      </div>
+
       <!-- ===== TWO-COLUMN LAYOUT ===== -->
       <div class="grid grid-cols-1 lg:grid-cols-5 gap-4 mb-6">
 
@@ -1027,6 +1059,115 @@ html.dark {
         + '</details>';
     }
 
+    // ---------- V1.5 panels ----------
+    async function refreshLineages() {
+      const body = $('lineage-overview-body');
+      const count = $('lineage-count');
+      if (!body) return;
+      try {
+        const data = await fetchJson('/api/lineages');
+        const lineages = Array.isArray(data.lineages) ? data.lineages : [];
+        if (count) count.textContent = String(data.total || lineages.length);
+        if (!lineages.length) {
+          body.innerHTML = '<div class="text-xs" style="color: var(--pw-text-tertiary);">No loop lineage yet</div>';
+          return;
+        }
+        const top = lineages[0];
+        const directSessions = top.tasks && Array.isArray(top.tasks.direct_sessions) ? top.tasks.direct_sessions : [];
+        const direct = directSessions.length ? directSessions[0] : null;
+        const worktree = top.worktree || {};
+        const directStatus = direct
+          ? ((direct.status || 'unknown') + ' / audit ' + (direct.audit_decision || 'not_run'))
+          : 'not run';
+        body.innerHTML =
+          '<div class="flex items-center justify-between gap-2 mb-2">'
+          + '<span class="text-xs truncate" style="color: var(--pw-text-primary); font-family: var(--pw-font-mono);" title="' + escapeHtml(top.lineage_id || '') + '">' + escapeHtml(shortId(top.lineage_id)) + '</span>'
+          + badgeHtml(top.stop_reason || 'unknown', statusKind(top.final_status))
+          + '</div>'
+          + '<div class="text-xs truncate mb-1" style="color: var(--pw-text-secondary);" title="' + escapeHtml(top.goal || '') + '">' + escapeHtml(top.goal || 'No goal') + '</div>'
+          + '<div class="text-xs truncate mb-1" style="color: var(--pw-text-tertiary);">Isolation: ' + escapeHtml(worktree.isolation_mode || 'current_repo') + '</div>'
+          + '<div class="text-xs truncate mb-1" style="color: var(--pw-text-tertiary);" title="' + escapeHtml(direct && direct.session_id ? direct.session_id : '') + '">Direct: ' + escapeHtml(directStatus) + '</div>'
+          + '<div class="text-xs" style="color: var(--pw-text-tertiary);">Next: ' + escapeHtml(top.next_action || 'none') + '</div>';
+      } catch (err) {
+        if (count) count.textContent = 'error';
+        body.innerHTML = '<div class="text-xs" style="color: var(--pw-state-error);">' + escapeHtml(err.message) + '</div>';
+      }
+    }
+
+    async function refreshProjectPolicy() {
+      const body = $('policy-overview-body');
+      const status = $('policy-status');
+      if (!body) return;
+      try {
+        const data = await fetchJson('/api/project-policy?repo_path=.');
+        const valid = data && data.valid !== false;
+        if (status) status.textContent = valid ? 'valid' : 'issues';
+        const issueCount = Array.isArray(data.issues) ? data.issues.length : 0;
+        const policy = data.effective_policy || {};
+        const release = (policy.release_mode || {});
+        body.innerHTML =
+          '<div class="flex items-center justify-between gap-2 mb-2">'
+          + '<span class="text-xs" style="color: var(--pw-text-secondary);">policy file</span>'
+          + badgeHtml(data.exists ? 'present' : 'defaults', data.exists ? 'success' : 'warning')
+          + '</div>'
+          + '<div class="text-xs mb-1" style="color: var(--pw-text-tertiary);">issues: ' + issueCount + '</div>'
+          + '<div class="text-xs truncate" style="color: var(--pw-text-tertiary);" title="' + escapeHtml(release.version_source || '') + '">version: ' + escapeHtml(release.version_source || 'package.json') + '</div>';
+      } catch (err) {
+        if (status) status.textContent = 'error';
+        body.innerHTML = '<div class="text-xs" style="color: var(--pw-state-error);">' + escapeHtml(err.message) + '</div>';
+      }
+    }
+
+    async function refreshReleaseStatus() {
+      const body = $('release-overview-body');
+      const status = $('release-status');
+      if (!body) return;
+      try {
+        const data = await fetchJson('/api/release/status?repo_path=.');
+        const ready = data && data.policy_valid && data.release_readiness && data.release_readiness.version_consistent !== false;
+        if (status) status.textContent = ready ? 'ready' : 'blocked';
+        const readiness = data.release_readiness || {};
+        const commands = Array.isArray(readiness.required_commands) ? readiness.required_commands : [];
+        const blocked = commands.filter(function (entry) { return !entry.allowed; }).length;
+        body.innerHTML =
+          '<div class="flex items-center justify-between gap-2 mb-2">'
+          + '<span class="text-xs" style="color: var(--pw-text-secondary);">version</span>'
+          + '<span class="text-xs" style="color: var(--pw-text-primary); font-family: var(--pw-font-mono);">' + escapeHtml(readiness.version || 'unknown') + '</span>'
+          + '</div>'
+          + '<div class="text-xs mb-1" style="color: var(--pw-text-tertiary);">commands blocked: ' + blocked + ' / ' + commands.length + '</div>'
+          + '<div class="text-xs" style="color: var(--pw-text-tertiary);">' + escapeHtml(data.next_action || '') + '</div>';
+      } catch (err) {
+        if (status) status.textContent = 'error';
+        body.innerHTML = '<div class="text-xs" style="color: var(--pw-state-error);">' + escapeHtml(err.message) + '</div>';
+      }
+    }
+
+    async function refreshEvidencePacks() {
+      const body = $('evidence-pack-overview-body');
+      const status = $('evidence-pack-status');
+      if (!body) return;
+      try {
+        const data = await fetchJson('/api/evidence-packs');
+        const packs = Array.isArray(data.evidence_packs) ? data.evidence_packs : [];
+        if (status) status.textContent = String(data.total || packs.length);
+        if (!packs.length) {
+          body.innerHTML = '<div class="text-xs" style="color: var(--pw-text-tertiary);">No exported evidence pack yet</div>';
+          return;
+        }
+        const top = packs[0];
+        body.innerHTML =
+          '<div class="flex items-center justify-between gap-2 mb-2">'
+          + '<span class="text-xs truncate" style="color: var(--pw-text-primary); font-family: var(--pw-font-mono);" title="' + escapeHtml(top.lineage_id || '') + '">' + escapeHtml(shortId(top.lineage_id)) + '</span>'
+          + badgeHtml(top.lineage && top.lineage.stop_reason ? top.lineage.stop_reason : 'unknown', statusKind(top.lineage && top.lineage.final_status))
+          + '</div>'
+          + '<div class="text-xs mb-1" style="color: var(--pw-text-tertiary);">policy issues: ' + escapeHtml(String(top.policy ? top.policy.issue_count : 0)) + '</div>'
+          + '<div class="text-xs truncate" style="color: var(--pw-text-tertiary);" title="' + escapeHtml(top.next_action || '') + '">Next: ' + escapeHtml(top.next_action || 'review') + '</div>';
+      } catch (err) {
+        if (status) status.textContent = 'error';
+        body.innerHTML = '<div class="text-xs" style="color: var(--pw-state-error);">' + escapeHtml(err.message) + '</div>';
+      }
+    }
+
     // ---------- Refresh orchestrators ----------
     async function refreshStatus() {
       try {
@@ -1067,14 +1208,14 @@ html.dark {
     }
 
     async function refreshAll() {
-      await Promise.all([refreshStatus(), refreshTasks(), refreshLogs(), refreshEvents()]);
+      await Promise.all([refreshStatus(), refreshTasks(), refreshLogs(), refreshEvents(), refreshLineages(), refreshProjectPolicy(), refreshReleaseStatus(), refreshEvidencePacks()]);
     }
 
     // ---------- Actions ----------
     async function handleAction(action, btnEl) {
       try {
         if (action === 'refresh') {
-          await Promise.all([refreshStatus(), refreshTasks()]);
+          await Promise.all([refreshStatus(), refreshTasks(), refreshLineages(), refreshProjectPolicy(), refreshReleaseStatus(), refreshEvidencePacks()]);
           return;
         }