portable-agent-layer 0.72.0 → 0.73.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (67) hide show
  1. package/package.json +10 -7
  2. package/src/cli/server.ts +7 -0
  3. package/src/hooks/handlers/agenda.ts +195 -7
  4. package/src/hooks/lib/agenda-store.ts +2 -0
  5. package/src/hooks/lib/goal-links.ts +83 -0
  6. package/src/hooks/lib/models.ts +1 -1
  7. package/src/hooks/lib/projects.ts +5 -0
  8. package/src/hooks/lib/settings.ts +2 -0
  9. package/src/hooks/lib/telos-goals.ts +8 -2
  10. package/src/hooks/lib/token-usage.ts +2 -0
  11. package/src/tools/agent/project.ts +22 -20
  12. package/src/tools/control-room/attention.ts +146 -0
  13. package/src/tools/control-room/data.ts +76 -5
  14. package/src/tools/control-room/detail.ts +158 -0
  15. package/src/tools/control-room/matrix.ts +91 -19
  16. package/src/tools/control-room/prefs.ts +96 -0
  17. package/src/tools/control-room/server-config.ts +8 -0
  18. package/src/tools/control-room/server.ts +196 -11
  19. package/src/tools/control-room/snooze.ts +65 -0
  20. package/src/tools/control-room/static.ts +68 -0
  21. package/src/tools/control-room/ui/app.tsx +196 -50
  22. package/src/tools/control-room/ui/attention-bell.tsx +118 -0
  23. package/src/tools/control-room/ui/components/README.md +18 -0
  24. package/src/tools/control-room/ui/components/badge.tsx +38 -0
  25. package/src/tools/control-room/ui/components/button.tsx +43 -0
  26. package/src/tools/control-room/ui/components/card.tsx +45 -0
  27. package/src/tools/control-room/ui/components/input.tsx +24 -0
  28. package/src/tools/control-room/ui/components/label.tsx +18 -0
  29. package/src/tools/control-room/ui/components/popover.tsx +37 -0
  30. package/src/tools/control-room/ui/components/separator.tsx +25 -0
  31. package/src/tools/control-room/ui/components/skeleton.tsx +14 -0
  32. package/src/tools/control-room/ui/components/switch.tsx +27 -0
  33. package/src/tools/control-room/ui/components/table.tsx +60 -0
  34. package/src/tools/control-room/ui/components/toggle-group.tsx +38 -0
  35. package/src/tools/control-room/ui/dist/assets/index-BoQjFpzV.js +49 -0
  36. package/src/tools/control-room/ui/dist/assets/index-Dncp2bYg.css +2 -0
  37. package/src/tools/control-room/ui/dist/index.html +19 -0
  38. package/src/tools/control-room/ui/format.ts +0 -12
  39. package/src/tools/control-room/ui/frame.tsx +125 -0
  40. package/src/tools/control-room/ui/index.html +2 -2
  41. package/src/tools/control-room/ui/lib/api.ts +27 -0
  42. package/src/tools/control-room/ui/lib/cn.ts +6 -0
  43. package/src/tools/control-room/ui/lib/write.ts +43 -0
  44. package/src/tools/control-room/ui/package.json +28 -0
  45. package/src/tools/control-room/ui/parts.tsx +235 -0
  46. package/src/tools/control-room/ui/screens/log.tsx +274 -0
  47. package/src/tools/control-room/ui/screens/project-detail.tsx +302 -0
  48. package/src/tools/control-room/ui/screens/projects.tsx +128 -0
  49. package/src/tools/control-room/ui/screens/settings.tsx +205 -0
  50. package/src/tools/control-room/ui/screens/today.tsx +391 -0
  51. package/src/tools/control-room/ui/theme.css +127 -0
  52. package/src/tools/control-room/ui/vite.config.ts +36 -0
  53. package/src/tools/control-room/writes.ts +106 -0
  54. package/src/tools/ledger/outcomes.ts +9 -0
  55. package/src/tools/ledger/query.ts +2 -0
  56. package/src/tools/ledger/view.ts +31 -10
  57. package/src/tools/lib/handoff-note.ts +14 -0
  58. package/src/tools/lib/project-isc.ts +61 -0
  59. package/src/tools/control-room/ui/agenda.tsx +0 -43
  60. package/src/tools/control-room/ui/agents.tsx +0 -67
  61. package/src/tools/control-room/ui/app.css +0 -857
  62. package/src/tools/control-room/ui/board.tsx +0 -82
  63. package/src/tools/control-room/ui/handoffs.tsx +0 -37
  64. package/src/tools/control-room/ui/ledger.tsx +0 -137
  65. package/src/tools/control-room/ui/matrix.tsx +0 -117
  66. package/src/tools/control-room/ui/panel.tsx +0 -60
  67. package/src/tools/control-room/ui/signal.tsx +0 -161
@@ -0,0 +1,96 @@
1
+ /**
2
+ * The knobs behind the grid and the bell.
3
+ *
4
+ * These were constants in the source, which meant "gone quiet after 14 days"
5
+ * was PAL's opinion rather than the user's. They live in pal-settings.json now,
6
+ * with the old constants as the defaults so nothing changes until someone says
7
+ * otherwise.
8
+ */
9
+
10
+ import { PROJECT_STALE_DAYS_DEFAULT } from "../../hooks/lib/projects";
11
+ import {
12
+ raw as rawSettings,
13
+ reload,
14
+ write as writeSettings,
15
+ } from "../../hooks/lib/settings";
16
+
17
+ const ATTENTION_SOURCES = ["refusals", "waiting", "unranked"] as const;
18
+ export type AttentionSource = (typeof ATTENTION_SOURCES)[number];
19
+
20
+ export interface ControlRoomPrefs {
21
+ quietAfterDays: number;
22
+ urgentWithinDays: number;
23
+ rankGoals: boolean;
24
+ attention: Record<AttentionSource, boolean>;
25
+ }
26
+
27
+ const PREF_DEFAULTS: ControlRoomPrefs = {
28
+ quietAfterDays: PROJECT_STALE_DAYS_DEFAULT,
29
+ urgentWithinDays: 14,
30
+ rankGoals: true,
31
+ attention: { refusals: true, waiting: true, unranked: true },
32
+ };
33
+
34
+ const DAY_LIMIT = 365;
35
+
36
+ function storedPrefs(): Partial<ControlRoomPrefs> {
37
+ const stored = rawSettings().controlRoom;
38
+ return (stored ?? {}) as Partial<ControlRoomPrefs>;
39
+ }
40
+
41
+ function positiveDays(value: unknown, fallback: number): number {
42
+ return typeof value === "number" &&
43
+ Number.isInteger(value) &&
44
+ value > 0 &&
45
+ value <= DAY_LIMIT
46
+ ? value
47
+ : fallback;
48
+ }
49
+
50
+ export function readPrefs(): ControlRoomPrefs {
51
+ const stored = storedPrefs();
52
+ return {
53
+ quietAfterDays: positiveDays(stored.quietAfterDays, PREF_DEFAULTS.quietAfterDays),
54
+ urgentWithinDays: positiveDays(
55
+ stored.urgentWithinDays,
56
+ PREF_DEFAULTS.urgentWithinDays
57
+ ),
58
+ rankGoals: stored.rankGoals ?? PREF_DEFAULTS.rankGoals,
59
+ attention: { ...PREF_DEFAULTS.attention, ...(stored.attention ?? {}) },
60
+ };
61
+ }
62
+
63
+ export type PrefUpdate = Partial<ControlRoomPrefs>;
64
+
65
+ export function validatePrefs(update: PrefUpdate): string | null {
66
+ for (const key of ["quietAfterDays", "urgentWithinDays"] as const) {
67
+ const value = update[key];
68
+ if (value === undefined) continue;
69
+ if (positiveDays(value, -1) === -1) {
70
+ return `${key} must be a whole number of days, 1..${DAY_LIMIT}`;
71
+ }
72
+ }
73
+ if (update.rankGoals !== undefined && typeof update.rankGoals !== "boolean") {
74
+ return "rankGoals must be true or false";
75
+ }
76
+ for (const [key, value] of Object.entries(update.attention ?? {})) {
77
+ if (!(ATTENTION_SOURCES as readonly string[]).includes(key)) {
78
+ return `unknown attention source: ${key}`;
79
+ }
80
+ if (typeof value !== "boolean") return `attention.${key} must be true or false`;
81
+ }
82
+ return null;
83
+ }
84
+
85
+ export function writePrefs(update: PrefUpdate): ControlRoomPrefs {
86
+ const data = rawSettings();
87
+ const current = readPrefs();
88
+ const next: ControlRoomPrefs = {
89
+ ...current,
90
+ ...update,
91
+ attention: { ...current.attention, ...(update.attention ?? {}) },
92
+ };
93
+ writeSettings({ ...data, controlRoom: { ...next } });
94
+ reload();
95
+ return next;
96
+ }
@@ -0,0 +1,8 @@
1
+ /**
2
+ * Where the control room listens. Split from server.ts so the build can read it
3
+ * without importing the server itself — server.ts imports the page bundle, and
4
+ * a bundler asked to load that would be chasing its own output.
5
+ */
6
+
7
+ export const DEFAULT_PORT = 7250;
8
+ export const LOOPBACK = "127.0.0.1";
@@ -9,14 +9,35 @@
9
9
  import { loadMachine } from "../../hooks/lib/machine";
10
10
  import { readAllProjects } from "../../hooks/lib/projects";
11
11
  import { isServesKind, setServes } from "../../hooks/lib/serves";
12
+ import { PAGE_OUTCOMES } from "../ledger/outcomes";
12
13
  import { type LedgerFilter, ledgerFiles, parseSince } from "../ledger/query";
13
14
  import { ledgerView } from "../ledger/view";
14
- import { agenda, agentsAtWork, board, handoffs, signal } from "./data";
15
+ import { attention, markRead } from "./attention";
16
+ import { agenda, agentsAtWork, board, handoffs, signal, summary } from "./data";
17
+ import { projectDetail } from "./detail";
15
18
  import { matrix } from "./matrix";
16
- import index from "./ui/index.html";
19
+ import { type PrefUpdate, readPrefs, validatePrefs, writePrefs } from "./prefs";
20
+ import { DEFAULT_PORT, LOOPBACK } from "./server-config";
21
+ import { MAX_SNOOZE_DAYS, setSnooze } from "./snooze";
22
+ import { indexHtml, staticAsset } from "./static";
23
+ import {
24
+ type InstallSettings,
25
+ isQuadrant,
26
+ QUADRANTS,
27
+ readInstallSettings,
28
+ setIscStatus,
29
+ setPlacement,
30
+ type WriteOutcome,
31
+ writeInstallSettings,
32
+ } from "./writes";
17
33
 
18
- export const DEFAULT_PORT = 7250;
19
- export const LOOPBACK = "127.0.0.1";
34
+ export { DEFAULT_PORT, LOOPBACK };
35
+
36
+ /**
37
+ * Every path the single-page app owns. Listed rather than wildcarded, because a
38
+ * blanket "/*" outranks the fetch handler and would swallow /api as well.
39
+ */
40
+ const PAGE_ROUTES = ["/", "/projects", "/projects/:slug", "/log", "/settings"];
20
41
 
21
42
  export interface ServerStatus {
22
43
  pid: number;
@@ -30,11 +51,25 @@ function json(body: unknown, status = 200): Response {
30
51
  return Response.json(body, { status });
31
52
  }
32
53
 
33
- /** A window the page cannot parse is an error, not the whole ledger. */
54
+ const AUTHORITIES: readonly string[] = ["user", "agent"];
55
+
56
+ /**
57
+ * Free-form on the record, so the page may name any of them: a runtime or
58
+ * machine label PAL has never seen simply matches nothing.
59
+ */
60
+ const PASSTHROUGH = ["project", "runtime", "machine", "actor", "tool"] as const;
61
+
62
+ /**
63
+ * A window the page cannot parse is an error, not the whole ledger. The same
64
+ * goes for a closed set it spells wrong — silently answering with every row
65
+ * would read as "no such filter" rather than "no such value".
66
+ */
34
67
  function filterFromQuery(params: URLSearchParams): LedgerFilter | string {
35
68
  const filter: LedgerFilter = {};
36
- const project = params.get("project");
37
- if (project) filter.project = project;
69
+ for (const key of PASSTHROUGH) {
70
+ const value = params.get(key);
71
+ if (value) filter[key] = value;
72
+ }
38
73
  for (const key of ["since", "until"] as const) {
39
74
  const spec = params.get(key);
40
75
  if (!spec) continue;
@@ -42,6 +77,18 @@ function filterFromQuery(params: URLSearchParams): LedgerFilter | string {
42
77
  if (!at) return `Unrecognised ${key}: ${spec}`;
43
78
  filter[key] = at;
44
79
  }
80
+ const outcome = params.get("outcome");
81
+ if (outcome) {
82
+ if (!(PAGE_OUTCOMES as readonly string[]).includes(outcome)) {
83
+ return `Unrecognised outcome: ${outcome}`;
84
+ }
85
+ filter.outcome = outcome;
86
+ }
87
+ const authority = params.get("authority");
88
+ if (authority) {
89
+ if (!AUTHORITIES.includes(authority)) return `Unrecognised authority: ${authority}`;
90
+ filter.authority = authority;
91
+ }
45
92
  return filter;
46
93
  }
47
94
 
@@ -52,6 +99,23 @@ function projects(): Response {
52
99
  return json(slugs.map((slug) => ({ slug })));
53
100
  }
54
101
 
102
+ function oneProject(slug: string | null): Response {
103
+ if (!slug) return json({ error: "slug is required" }, 400);
104
+ const detail = projectDetail(slug);
105
+ return detail ? json(detail) : json({ error: `no such project: ${slug}` }, 404);
106
+ }
107
+
108
+ const SUMMARY_DAYS_DEFAULT = 14;
109
+ const SUMMARY_DAYS_MAX = 365;
110
+
111
+ function summaryFor(spec: string | null): Response {
112
+ const days = spec ? Number(spec) : SUMMARY_DAYS_DEFAULT;
113
+ if (!Number.isInteger(days) || days < 1 || days > SUMMARY_DAYS_MAX) {
114
+ return json({ error: `days must be a whole number of 1..${SUMMARY_DAYS_MAX}` }, 400);
115
+ }
116
+ return json(summary(days));
117
+ }
118
+
55
119
  function withFilter(url: URL, view: (filter: LedgerFilter) => unknown): Response {
56
120
  const filter = filterFromQuery(url.searchParams);
57
121
  if (typeof filter === "string") return json({ error: filter }, 400);
@@ -99,19 +163,130 @@ async function overrideServes(request: Request): Promise<Response> {
99
163
  return json({ project, serves, by: "user" });
100
164
  }
101
165
 
166
+ async function readBody(request: Request): Promise<Record<string, unknown> | null> {
167
+ try {
168
+ return ((await request.json()) ?? {}) as Record<string, unknown>;
169
+ } catch {
170
+ return null;
171
+ }
172
+ }
173
+
174
+ function answer(outcome: WriteOutcome, body: Record<string, unknown>): Response {
175
+ return outcome.ok
176
+ ? json({ ...body, changed: outcome.changed })
177
+ : json({ error: outcome.error }, outcome.status);
178
+ }
179
+
180
+ /** Close or reopen one criterion — the same rule `complete-isc` reaches. */
181
+ async function iscWrite(request: Request): Promise<Response> {
182
+ const body = await readBody(request);
183
+ if (!body) return json({ error: "expected a JSON body" }, 400);
184
+ const { project, id, status } = body;
185
+ if (typeof project !== "string" || !project) {
186
+ return json({ error: "project is required" }, 400);
187
+ }
188
+ if (typeof id !== "number" || !Number.isInteger(id) || id < 1) {
189
+ return json({ error: "id must be a positive integer" }, 400);
190
+ }
191
+ if (status !== "open" && status !== "done") {
192
+ return json({ error: "status must be open or done" }, 400);
193
+ }
194
+ return answer(setIscStatus(project, id, status === "done"), { project, id, status });
195
+ }
196
+
197
+ async function placementWrite(request: Request): Promise<Response> {
198
+ const body = await readBody(request);
199
+ if (!body) return json({ error: "expected a JSON body" }, 400);
200
+ const { project, quadrant } = body;
201
+ if (typeof project !== "string" || !project) {
202
+ return json({ error: "project is required" }, 400);
203
+ }
204
+ if (quadrant !== null && !isQuadrant(quadrant)) {
205
+ return json(
206
+ { error: `quadrant must be null or one of ${QUADRANTS.join(", ")}` },
207
+ 400
208
+ );
209
+ }
210
+ return answer(setPlacement(project, quadrant), { project, quadrant });
211
+ }
212
+
213
+ async function settingsWrite(request: Request): Promise<Response> {
214
+ const body = await readBody(request);
215
+ if (!body) return json({ error: "expected a JSON body" }, 400);
216
+ const update: Partial<InstallSettings> = {};
217
+ for (const key of ["actor", "timezone"] as const) {
218
+ const value = body[key];
219
+ if (value === undefined) continue;
220
+ if (typeof value !== "string") return json({ error: `${key} must be a string` }, 400);
221
+ update[key] = value;
222
+ }
223
+ const outcome = writeInstallSettings(update);
224
+ return outcome.ok ? json(readInstallSettings()) : answer(outcome, {});
225
+ }
226
+
227
+ async function snoozeWrite(request: Request): Promise<Response> {
228
+ const body = await readBody(request);
229
+ if (!body) return json({ error: "expected a JSON body" }, 400);
230
+ const { project, id, days } = body;
231
+ if (typeof project !== "string" || !project) {
232
+ return json({ error: "project is required" }, 400);
233
+ }
234
+ if (typeof id !== "number" || !Number.isInteger(id) || id < 1) {
235
+ return json({ error: "id must be a positive integer" }, 400);
236
+ }
237
+ if (
238
+ typeof days !== "number" ||
239
+ !Number.isInteger(days) ||
240
+ days < 0 ||
241
+ days > MAX_SNOOZE_DAYS
242
+ ) {
243
+ return json({ error: `days must be a whole number of 0..${MAX_SNOOZE_DAYS}` }, 400);
244
+ }
245
+ return json({ project, id, until: setSnooze(project, id, days) });
246
+ }
247
+
248
+ async function readWrite(request: Request): Promise<Response> {
249
+ const body = await readBody(request);
250
+ if (!body) return json({ error: "expected a JSON body" }, 400);
251
+ const ids = body.all === true ? attention().items.map((i) => i.id) : body.ids;
252
+ if (!Array.isArray(ids) || ids.some((id) => typeof id !== "string")) {
253
+ return json({ error: "ids must be an array of strings, or all must be true" }, 400);
254
+ }
255
+ return json({ marked: markRead(ids as string[]) });
256
+ }
257
+
258
+ async function prefsWrite(request: Request): Promise<Response> {
259
+ const body = await readBody(request);
260
+ if (!body) return json({ error: "expected a JSON body" }, 400);
261
+ const failure = validatePrefs(body as PrefUpdate);
262
+ return failure ? json({ error: failure }, 400) : json(writePrefs(body as PrefUpdate));
263
+ }
264
+
265
+ const WRITES: Record<string, (request: Request) => Promise<Response>> = {
266
+ "/api/serves": overrideServes,
267
+ "/api/isc": iscWrite,
268
+ "/api/placement": placementWrite,
269
+ "/api/settings": settingsWrite,
270
+ "/api/snooze": snoozeWrite,
271
+ "/api/attention/read": readWrite,
272
+ "/api/prefs": prefsWrite,
273
+ };
274
+
102
275
  export function startControlRoom(port: number = DEFAULT_PORT) {
103
276
  const startedAt = new Date().toISOString();
104
277
  return Bun.serve({
105
278
  hostname: LOOPBACK,
106
279
  port,
107
280
  development: false,
108
- routes: { "/": index },
281
+ routes: Object.fromEntries(PAGE_ROUTES.map((path) => [path, () => indexHtml()])),
109
282
  fetch(request, server) {
110
283
  const url = new URL(request.url);
111
- if (request.method === "POST" && url.pathname === "/api/serves") {
112
- return overrideServes(request);
113
- }
284
+ const write = WRITES[url.pathname];
285
+ if (request.method === "POST" && write) return write(request);
114
286
  if (request.method !== "GET") return json({ error: "read only" }, 405);
287
+ if (!url.pathname.startsWith("/api/")) {
288
+ return staticAsset(url.pathname) ?? json({ error: "not found" }, 404);
289
+ }
115
290
  switch (url.pathname) {
116
291
  case "/api/agenda":
117
292
  return json(agenda());
@@ -127,8 +302,18 @@ export function startControlRoom(port: number = DEFAULT_PORT) {
127
302
  return withFilter(url, agentsAtWork);
128
303
  case "/api/ledger":
129
304
  return withFilter(url, ledgerView);
305
+ case "/api/project":
306
+ return oneProject(url.searchParams.get("slug"));
307
+ case "/api/summary":
308
+ return summaryFor(url.searchParams.get("days"));
130
309
  case "/api/projects":
131
310
  return projects();
311
+ case "/api/settings":
312
+ return json(readInstallSettings());
313
+ case "/api/prefs":
314
+ return json(readPrefs());
315
+ case "/api/attention":
316
+ return json(attention());
132
317
  case "/api/status":
133
318
  return status(server.port ?? port, startedAt);
134
319
  default:
@@ -0,0 +1,65 @@
1
+ /**
2
+ * Snoozed criteria — an ISC you have seen and do not want ranked this week.
3
+ *
4
+ * Kept out of the ISA on purpose: the record says what the project is judged
5
+ * against, and "not this week" is a fact about your attention rather than about
6
+ * the project. It expires by date, so nothing has to unsnooze it.
7
+ */
8
+
9
+ import { existsSync, readFileSync, writeFileSync } from "node:fs";
10
+ import { resolve } from "node:path";
11
+ import { ensureDir, paths } from "../../hooks/lib/paths";
12
+
13
+ const DAY_MS = 86_400_000;
14
+ export const MAX_SNOOZE_DAYS = 90;
15
+
16
+ /** project#isc → the day it wakes up. */
17
+ export type Snoozes = Record<string, string>;
18
+
19
+ function snoozeKey(project: string, id: number): string {
20
+ return `${project}#${id}`;
21
+ }
22
+
23
+ function snoozeFile(): string {
24
+ return resolve(ensureDir(paths.state()), "snoozed.json");
25
+ }
26
+
27
+ export function readSnoozes(now: Date = new Date()): Snoozes {
28
+ const file = snoozeFile();
29
+ if (!existsSync(file)) return {};
30
+ let stored: Snoozes;
31
+ try {
32
+ stored = JSON.parse(readFileSync(file, "utf-8")) as Snoozes;
33
+ } catch {
34
+ return {};
35
+ }
36
+ const today = now.toISOString().slice(0, 10);
37
+ return Object.fromEntries(
38
+ Object.entries(stored).filter(
39
+ ([, until]) => typeof until === "string" && until > today
40
+ )
41
+ );
42
+ }
43
+
44
+ export function snoozedUntil(
45
+ project: string,
46
+ id: number,
47
+ snoozes: Snoozes
48
+ ): string | null {
49
+ return snoozes[snoozeKey(project, id)] ?? null;
50
+ }
51
+
52
+ /** Zero days wakes it now, which is how the page un-snoozes. */
53
+ export function setSnooze(
54
+ project: string,
55
+ id: number,
56
+ days: number,
57
+ now: Date = new Date()
58
+ ): string | null {
59
+ const live = readSnoozes(now);
60
+ const key = snoozeKey(project, id);
61
+ if (days <= 0) delete live[key];
62
+ else live[key] = new Date(now.getTime() + days * DAY_MS).toISOString().slice(0, 10);
63
+ writeFileSync(snoozeFile(), `${JSON.stringify(live, null, 2)}\n`, "utf-8");
64
+ return live[key] ?? null;
65
+ }
@@ -0,0 +1,68 @@
1
+ /**
2
+ * The built page, off disk. Vite compiles src/tools/control-room/ui into
3
+ * ui/dist; this serves it, and says so plainly when the build has not been run
4
+ * rather than answering a blank page.
5
+ */
6
+
7
+ import { spawnSync } from "node:child_process";
8
+ import { existsSync } from "node:fs";
9
+ import { isAbsolute, relative, resolve } from "node:path";
10
+
11
+ const UI_DIST = resolve(import.meta.dir, "ui", "dist");
12
+
13
+ export const BUILD_COMMAND = "bun run build:ui";
14
+
15
+ export function isBuilt(): boolean {
16
+ return existsSync(resolve(UI_DIST, "index.html"));
17
+ }
18
+
19
+ /**
20
+ * A clone has vite; a published install has the prepacked dist and never needs
21
+ * it. Either way the page is there by the time the server answers.
22
+ */
23
+ export function buildPage(): boolean {
24
+ const repoRoot = resolve(import.meta.dir, "..", "..", "..");
25
+ // node_modules/.bin/vite is a shell shim that Windows cannot spawn directly;
26
+ // the package's own JS entry runs the same build under any runtime.
27
+ const vite = resolve(repoRoot, "node_modules", "vite", "bin", "vite.js");
28
+ if (!existsSync(vite)) return false;
29
+ const built = spawnSync(process.execPath, [vite, "build"], {
30
+ cwd: resolve(import.meta.dir, "ui"),
31
+ encoding: "utf-8",
32
+ });
33
+ return built.status === 0 && isBuilt();
34
+ }
35
+
36
+ function unbuiltPage(): Response {
37
+ return new Response(
38
+ `<!doctype html><meta charset="utf-8"><title>PAL control room</title>` +
39
+ `<body style="font:14px system-ui;padding:3rem;max-width:34rem">` +
40
+ `<h1>The page has not been built</h1>` +
41
+ `<p>The control room's assets are a build artifact rather than source. Run:</p>` +
42
+ `<pre style="background:#eee;padding:1rem">${BUILD_COMMAND}</pre></body>`,
43
+ { status: 503, headers: { "content-type": "text/html; charset=utf-8" } }
44
+ );
45
+ }
46
+
47
+ export function indexHtml(): Response {
48
+ if (!isBuilt()) return unbuiltPage();
49
+ return new Response(Bun.file(resolve(UI_DIST, "index.html")), {
50
+ headers: { "content-type": "text/html; charset=utf-8" },
51
+ });
52
+ }
53
+
54
+ /**
55
+ * Only what the build emitted, resolved inside dist — a request that climbs out
56
+ * of it with `..` is a miss, not a file read.
57
+ */
58
+ export function staticAsset(pathname: string): Response | null {
59
+ const target = resolve(UI_DIST, `.${pathname}`);
60
+ if (!isInsideDist(target)) return null;
61
+ return existsSync(target) ? new Response(Bun.file(target)) : null;
62
+ }
63
+
64
+ /** Compared as paths, not strings — a separator differs by platform. */
65
+ function isInsideDist(target: string): boolean {
66
+ const rel = relative(UI_DIST, target);
67
+ return rel !== "" && !rel.startsWith("..") && !isAbsolute(rel);
68
+ }