webui

type AgentEvent struct {
	Workspace string `json:"workspace"`
	Kind      string `json:"kind"`
	Line      string `json:"line"`
}

type AgentFeed struct {
	// contains filtered or unexported fields
}

type BoardBandGroup struct {
	Band  queue.Band
	Tasks []task.Task
}

type BoardColumn struct {
	Status    task.Status
	Count     int
	Tasks     []task.Task
	Truncated int
}

type BudgetView struct {
	Cap   int
	Spent int
}

type Config struct {
	// Addr is the TCP address to bind. Default 127.0.0.1:8090.
	Addr string
	// Poll is the journal tail interval. Default 500ms.
	Poll time.Duration
	// Heartbeat is the SSE keepalive interval. Default 15s.
	Heartbeat time.Duration
	// Version is the application version stamped into every health
	// response and the dashboard's Version stat card. Empty leaves the
	// card on the dashboard's "unknown" fallback — cmd/tq always passes
	// the ldflags-injected main.version, so only in-package test
	// constructors see the fallback.
	Version string
	// RequestLog enables per-request access logging (method, path, status,
	// duration) via slog at Info level. Off by default.
	RequestLog bool
	// DailyBudget mirrors the agent pool's --daily-budget so the dashboard
	// can show the spend card (tasks enqueued today vs cap). 0 hides the
	// card — the cap is an operator decision, not queue state.
	DailyBudget int
	// AuthToken, when set, requires every request (pages, API, SSE, static)
	// to present the token via an Authorization: Bearer header or a `token`
	// query parameter. Validate refuses non-loopback binds without it.
	AuthToken string
	// AllowWrites opts in to admin actions from the dashboard (cancel
	// pending/running tasks, rescue dead-lettered ones). ADR-0003's default
	// is a read-only projection; writes are a conscious operator decision
	// guarded by per-form CSRF tokens (withCSRF) and, on non-loopback
	// binds, by the auth token. Off by default.
	AllowWrites bool
	// ReadModelPath, when set, moves the aggregate read side and the live
	// notifications onto an ADR-0019 S3 metaengine read model: the
	// projection at this path folds the journal (readmodel.PathFor
	// derives it beside the queue db) and its Watcher replaces the hand
	// tailer→hub fan-out. Status counts (nowband, /api/stats) read the
	// collection; the task table, board, detail pages and fact feeds stay
	// store-backed — the planned table does not carry lease owner,
	// NotBefore or payload, which those row-rich views render. Empty =
	// the store-backed defaults (off). Setting it requires Pump: this
	// package never opens the projection itself (the composition root
	// owns that engine — the single-opener seam).
	ReadModelPath string
	// Pump is the injected live-projection runtime consumed when
	// ReadModelPath is set: the folded model plus its managed lifecycle
	// (host start, teardown on Run's return). cmd/tq's serve wiring
	// composes it so webui stays a leaf of the composition root rather
	// than its peer. Nil with ReadModelPath set fails Validate; with
	// ReadModelPath empty the hand tailer runs regardless.
	Pump ProjectionPump
	// DLQBackoff, when > 0, turns on the poisoned-repo DLQ-backoff
	// surface: each snapshot folds the journal per repo (the shared
	// dlqbackoff derivation behind `tq pool-health`'s dlqBackoffUntil
	// JSON field and `tq dlq`'s poisoned rows) and the dashboard renders
	// the repos currently in backoff — a nowband chip plus the panel
	// above the dead-letter queue. 0 keeps the surface off (no journal
	// read, nothing rendered), mirroring pool-health's --dlq-backoff.
	DLQBackoff time.Duration
	// CrushServer, when set, enables the L2 live agent pane: Run starts
	// the workspace-event collector against the pool's shared crush
	// server (unix socket; the same flag agent-pool takes), and
	// /agents/live streams distilled tool events to the pane. Empty =
	// the pane is off and /agents/live serves 503 (routed runs are an
	// L1 opt-in; local runs produce no workspace events).
	CrushServer string
}

type DashboardData struct {
	Counts     map[task.Status]int
	Total      int
	Tasks      []task.Task
	Dead       []task.Task
	Facts      []journal.Fact
	Filter     FilterState
	Now        time.Time
	Projects   []ProjectSummary
	Page       int
	TotalPages int
	MatchTotal int
	Budget     *BudgetView
	// Board holds the per-status columns when the filter selects the board
	// view; nil on the table view (which uses Tasks/Page/TotalPages).
	Board []BoardColumn
	// JournalSeq is the journal watermark (highest fact seq) — the resume
	// point every SSE/bridge consumer carries.
	JournalSeq int64
	// FactBuckets counts facts per equal slice of the last hour (the
	// activity sparkline's series).
	FactBuckets []float64
	// CompleteMinutes is the time-to-complete (queue wait + run) of recent
	// completed tasks in minutes, newest first (the completion histogram's
	// raw data).
	CompleteMinutes []float64
	// Reviews holds the parsed verdict of every COMPLETED review task on
	// the visible page (keyed by task id) — the agent-review loop made
	// visible: an approve/request-changes badge in the table and findings
	// on the detail page. Absent when the page shows no finished reviews.
	Reviews map[string]executor.ReviewResult
	// Parked is the rate-limit-parked count (pending with not_before in
	// the future) — the "11 tasks parked until 19:40" one-glance segment
	// in the nowband meta (16-00 report f44; the stats payload already
	// carries the same number).
	Parked int
	// BudgetParked counts tasks parked by the claim-time budget gate:
	// pending-with-not_before tasks whose latest task.requeued fact in
	// the last 24h carries the budget class — the "the pool is idle ON
	// PURPOSE (money)" lamp next to the parked segment. The 24h window
	// is the badge's honest scope, not a live park state.
	BudgetParked int
	// Stranded counts tasks that can never run: pending with a dependency
	// that is terminally not-completed (dead or cancelled). The claim
	// gate skips them silently forever — the one stuck-middle state the
	// operator can otherwise only find by reading dep graphs. Derived
	// from existing reads (no stranded fact type; that contract addition
	// awaits a demonstrated need), M14.
	Stranded int
	// LoopSuspects counts tasks whose claim count exceeds
	// queue.ClaimAnomalyThreshold — the churn lamp in the nowband meta
	// (the P1 class: one task out-claming its budget for days). tq stats
	// lists the suspects; the webui only counts them.
	LoopSuspects int
	// SessionsOpened / SessionsClosed count the interactive-session
	// lifecycle facts (session.opened / session.closed) — the session
	// volume one-glance segment in the nowband meta (03-28 §f20).
	SessionsOpened int
	SessionsClosed int
	// SessionsOpen is the begun-but-never-closed count — the lamp next to
	// the volume segment (03-28 §f9/f20). Read-only observation: closing
	// stays an explicit operator ruling.
	SessionsOpen int
	// AllowWrites mirrors Config.AllowWrites: the templates render the
	// admin affordances (cancel/stop/rescue forms) only when writes are
	// enabled server-side.
	AllowWrites bool
	// Statuses holds the parsed outcome of every COMPLETED status task on
	// the visible page (keyed by task id) — the done-prompt loop made
	// visible: a report badge in the table and the report path + next-item
	// count on the detail page. Absent when the page shows no finished
	// status reports.
	Statuses map[string]executor.StatusResult
	// Prioritizes holds the parsed outcome of every COMPLETED prioritize
	// task on the visible page (keyed by task id) — the AI batch scorer
	// made visible: a verdict-count badge in the table and the verdict
	// count + derived session usage on the detail page. Nil when the page
	// shows no finished scorer run.
	Prioritizes map[string]executor.PrioritizeResult
	// AgentResults holds the parsed outcome of every COMPLETED agent task
	// on the visible page (keyed by task id) — the run's derived outcome
	// (footer commits) + derived session usage made visible: a commit-count
	// badge in the table and the result card on the detail page. Nil when
	// the page shows no finished agent run.
	AgentResults map[string]executor.AgentResult
	// DLQBackoff holds each repo currently in poisoned-repo DLQ backoff
	// (repo → backoff deadline): the dashboard's rendering of the same
	// fold behind `tq pool-health`'s dlqBackoffUntil JSON field and `tq
	// dlq`'s poisoned rows. Nil when the surface is off
	// (Config.DLQBackoff == 0) or no repo is standing in backoff.
	DLQBackoff map[string]time.Time
}

type FilterState struct {
	Project string
	Status  task.Status
	Query   string
	Page    int
	// Sort selects the task-table ordering: "", "age-asc", "age-desc",
	// "priority-asc", "priority-desc", "attempts-asc", "attempts-desc".
	// Empty keeps the severity order (dead, running, pending, ...).
	Sort string
	// View picks the task projection: viewTable (default) or viewBoard.
	// Board drops Status (columns ARE the statuses) and ignores Sort/Page.
	View string
	// Band bounds the listing to one ADR-0015 band (backlog | hot |
	// machine); empty means all bands.
	Band string
	// Evidence filters the DLQ listing to dead tasks whose failure evidence
	// matches this comma-separated term spec with !-negation — the same
	// semantics as `tq dlq --evidence-stage`
	// (executor.MatchesEvidenceStageSet, including the
	// gate-env/gate-dead/gate-slow error-text aliases); empty means all
	// dead tasks.
	Evidence string
}

type Hub struct {
	// contains filtered or unexported fields
}

type ProjectSummary struct {
	Name    string
	Total   int
	Pending int
	Running int
	Dead    int
}

type ProjectionPump interface {
	Model() *readmodel.Model
	Run(ctx context.Context, notify func(cursor int64)) error
}

type Server struct {
	// contains filtered or unexported fields
}