269f164 · d58d19f · ff1ec96 · 6ca9da5 · 3346fbb · 704c797
@@ -106,7 +106,7 @@
bytes in `tools/list`. After changing a tool run `bun scripts/mcp-table.ts`;
| `flag_set` | — | Set or clear a flag (admin) | 209 |
| `flag_winner` | — | An A/B flag winner becomes default | 206 |
| `flags` | — | Declared flags: why, default, owner issue, live value | 171 |
| `flow` | `bugs` | Pipeline (admin); `q`: `/fleet` rows, `action` plans an op, `apply` does it; `kind:bugs`; `repo`: why stuck | 480 |
| `flow` | `bugs`, `drift` | Pipeline (admin); `q`: `/fleet` rows, `action` plans an op, `apply` does it; `kind:bugs`; `repo`: why stuck | 488 |
| `follow_mode` | — | How a spawned forge follows its parent: `tell-me` or `take-updates` | 265 |
| `following` | — | Where a fork stands against what it follows: in step, behind, ahead, diverged | 243 |
| `forge_proposals` | — | What this forge proposed to its parent; `reachable` false if it is silent | 245 |
@@ -536,3 +536,8 @@
answers
  (the clone URL as the forge prints it), then `/plugin install forge@forge`
  (the root `.claude-plugin/marketplace.json` names the marketplace `forge`).
  From a clone, `claude --plugin-dir plugins/claude-code` is the local way.
`flow` with `{ kind: "drift" }` (#10861) is another: `{ drifting: [{ repo, number, landings, hours }] }`,
open pulls over 25 landings or 6 h behind main, furthest first, from
`src/flow/alarm_drift.ts`. Each is brought up to date by
`POST /{repo}/pulls/{number}/update`, the button beside it on /boards.
@@ -0,0 +1,9 @@
# Pulls drifting from main
An open pull more than 25 landings or 6 h behind its base is listed on `/boards` (and so `/flow`) under "Drifting from main", furthest first, each with one button, "Bring up to date". Nothing is shown when none drifts. The same fact is the `drift` alarm.
- **Page:** `src/web/pages/boards-drift.ts`, a plain section of `/boards` (admin only, as the page is). The button posts `POST /:owner/:name/pulls/:number/update` (`updateSubmit`, `src/web/studio/actions.ts`): same-origin, a viewer of the pull, and a writer of the repository; it asks the pull's agent to merge main into its branch (`bringUpToDate`) and lands nothing. Closed pulls, pulls with no agent, and a pull that has used its tries are refused in words.
- **Terminal:** the palette entry "Drifting pulls" (`src/tui/screens/drift.ts`, admins who are people); `b` or enter asks, `r` reads again. Same reads, same action, same refusals.
- **MCP:** `flow` with `{ kind: drift }` lists them: `{ drifting: [{ repo, number, landings, hours }] }`. There is no verb to ask the agent yet; use the route.
- **Reads:** `src/flow/alarm_drift.ts`, git per pull cached by head and tip; merged and closed pulls never count.
- **Tests:** `test/flow-alarm-drift.test.ts`, `test/studio-update-pull.test.ts` (writer, non-writer, closed, cross-origin), `test/tui-drift.test.ts`.
@@ -1,7 +1,6 @@
[
  "src/apps/cloud.ts",
  "src/crew/governor_log.ts",
  "src/flow/alarm_drift.ts",
  "src/flow/alarm_unproposed.ts",
  "src/flow/approved_wait.ts",
  "src/flow/clog_words.ts",
@@ -6,6 +6,8 @@
 * so a rebased pull would stay named); the hours run from the first of them. Merged and closed pulls never count.
 */
import { existsSync } from "node:fs";
import type { App } from "../app.ts";
import { runGit } from "../git/env.ts";
import { isSafeOid, isSafeRef } from "../git/guard.ts";
@@ -40,7 +42,7 @@
interface Row {
/** Landings on `branch` past where `headOid` forked from it and when the first happened, read from git; zero when unreadable. */
export async function readDrift(dir: string, branch: string, headOid: string): Promise<Omit<Drift, "number">> {
  const none = { landings: 0, since: null };
  if (!isSafeOid(headOid) || !isSafeRef(branch)) return none;
  if (!isSafeOid(headOid) || !isSafeRef(branch) || !existsSync(dir)) return none;
  const tip = `refs/heads/${branch}`;
  const fork = await runGit(["merge-base", headOid, tip], { cwd: dir });
  const base = fork.ok ? fork.value.trim() : "";
@@ -64,7 +66,7 @@
export function clearDriftCache(): void {
/** The tip of `branch`, one cheap git call; null when unreadable. */
export async function branchTip(dir: string, branch: string): Promise<string | null> {
  if (!isSafeRef(branch)) return null;
  if (!isSafeRef(branch) || !existsSync(dir)) return null;
  const out = await runGit(["rev-parse", "--verify", "-q", `refs/heads/${branch}`], { cwd: dir });
  const oid = out.ok ? out.value.trim() : "";
  return isSafeOid(oid) ? oid : null;
@@ -107,21 +109,25 @@
export function driftAlarm(drifts: readonly Drift[], now: number): DriftAlarm {
  return { fired: true, since: new Date(since).toISOString(), says: `${named.join("; ")}${more}.` };
}
/** Reads every open pull's drift from its repository's main and answers the alarm. */
export async function alarmDrift(
/** One open pull's drift and where it lives. */
export interface RepoDrift extends Drift {
  readonly repo: string;
}
/** Every open pull's drift from its repository's main; `publicOnly` leaves private repositories out. Git reads are cached per head and tip. */
export async function readDrifts(
  app: App,
  now: Date | number = Date.now(),
  { read = readDrift, readTip = branchTip }: { read?: DriftReader; readTip?: typeof branchTip } = {},
): Promise<DriftAlarm> {
  const at = typeof now === "number" ? now : now.getTime();
  { read = readDrift, readTip = branchTip, publicOnly = false }: { read?: DriftReader; readTip?: typeof branchTip; publicOnly?: boolean } = {},
): Promise<RepoDrift[]> {
  const rows = app.db
    .query<Row, []>(
    .query<Row, [number]>(
      `SELECT i.number, p.base_branch, p.head_oid, o.username AS owner, r.name
         FROM issue i JOIN pull p ON p.issue_id = i.id
         JOIN repo r ON r.id = i.repo_id JOIN user o ON o.id = r.owner_id
        WHERE i.kind = 'pull' AND i.state = 'open' AND p.merged_at IS NULL`,
        WHERE i.kind = 'pull' AND i.state = 'open' AND p.merged_at IS NULL
          AND (?1 = 0 OR r.visibility = 'public')`,
    )
    .all();
    .all(publicOnly ? 1 : 0);
  const tips = new Map<string, Promise<string | null>>();
  const tipOf = (dir: string, branch: string) => {
    const k = `${dir}\0${branch}`;
@@ -129,11 +135,36 @@
export async function alarmDrift(
    if (!t) tips.set(k, (t = readTip(dir, branch)));
    return t;
  };
  const drifts = await Promise.all(
  return Promise.all(
    rows.map(async (r) => {
      const dir = repoDir(app.reposRoot, r.owner, r.name);
      return { number: r.number, ...(await cachedDrift(read, dir, r.base_branch, r.head_oid, await tipOf(dir, r.base_branch))) };
      return { repo: `${r.owner}/${r.name}`, number: r.number, ...(await cachedDrift(read, dir, r.base_branch, r.head_oid, await tipOf(dir, r.base_branch))) };
    }),
  );
  return driftAlarm(drifts, at);
}
export interface DriftingPull {
  readonly repo: string;
  readonly number: number;
  readonly landings: number;
  /** Hours since main first moved past the pull's base, one decimal; 0 when it has not. */
  readonly hours: number;
}
/** The pulls past either limit, the furthest behind first: what /boards and the MCP `flow` tool list beside the one action that brings each up to date. */
export function driftingPulls(drifts: readonly RepoDrift[], now: number): DriftingPull[] {
  return drifts
    .filter((d) => drifting(d, now))
    .sort((a, b) => b.landings - a.landings || behind(b, now) - behind(a, now) || a.repo.localeCompare(b.repo) || a.number - b.number)
    .map((d) => ({ repo: d.repo, number: d.number, landings: d.landings, hours: Math.round(behind(d, now) / 360_000) / 10 }));
}
/** Reads every open pull's drift from its repository's main and answers the alarm. */
export async function alarmDrift(
  app: App,
  now: Date | number = Date.now(),
  opts: { read?: DriftReader; readTip?: typeof branchTip } = {},
): Promise<DriftAlarm> {
  const at = typeof now === "number" ? now : now.getTime();
  return driftAlarm(await readDrifts(app, opts), at);
}
@@ -7,6 +7,7 @@
import { whyIssue, whyPull, liveHead, whyRepo, type Why } from "../../../flow/wh
import { countRead } from "../../../system/telemetry_reads.ts";
import { COLUMNS, readSort, sortRows } from "../../../fleet/columns.ts";
import { viewFleet } from "../../../fleet/rows.ts";
import { driftingPulls, readDrifts } from "../../../flow/alarm_drift.ts";
import { openBugs } from "../../../flow/bugs.ts";
import { flowCached } from "../../../system/flow_cache.ts";
import { scopeAllows } from "../../../core/tokens.ts";
@@ -27,13 +28,13 @@
const said = (subject: string, why: Why) =>
export const tool: Tool = {
  name: "flow",
  doc: "with no arguments, the forge's pipeline (a forge admin's, or an agent the owner granted `telemetry:read`; private repositories cut out): per stage counts, `oldestWaiting`, `capacity`, the bottleneck, the merge `queue` and what each reviewer has `reviewing`, and `declines` (crew runs declined in 24 h, by reason) (the `ui://forge/flow` card); with `{ q, sort? }`, the rows a fleet query line selects: `{ kind, columns, items }`, only rows you may read, `sort` a column key led by `-` to reverse, a bad line answers its reason; with `{ q, action: { verb, value }, apply? }`, a fleet operation over those rows as `POST /api/v1/fleet/ops` answers it: the dry-run plan `{ dryRun: true, query, kind, verb, value, reversible, rows, counts }` and nothing changed, or with `apply: true` (an admin token, a person) the receipt `{ dryRun: false, id, rows, … }` whose id `limb` undoes; with `{ kind: bugs }`, `{ open, overdue, bugs: [{ repo, number, priority, dueAt }] }` soonest due first, at most 100 (an admin sees all, anyone else public repositories); with `{ repo, issue? or pull? }` (a repository writer), why it is not moving: `{ subject, moving, state?, cause, says, clears, next? }`, the first of wall (a person decides access), ceiling, hot_file, blocked_by, later_gate, no_builder, no_headroom, red_check, waiting_review that holds it (`flow/why.ts`); `repo` alone asks about the repository's builders",
  doc: "with no arguments, the forge's pipeline (a forge admin's, or an agent the owner granted `telemetry:read`; private repositories cut out): per stage counts, `oldestWaiting`, `capacity`, the bottleneck, the merge `queue` and what each reviewer has `reviewing`, and `declines` (crew runs declined in 24 h, by reason) (the `ui://forge/flow` card); with `{ q, sort? }`, the rows a fleet query line selects: `{ kind, columns, items }`, only rows you may read, `sort` a column key led by `-` to reverse, a bad line answers its reason; with `{ q, action: { verb, value }, apply? }`, a fleet operation over those rows as `POST /api/v1/fleet/ops` answers it: the dry-run plan `{ dryRun: true, query, kind, verb, value, reversible, rows, counts }` and nothing changed, or with `apply: true` (an admin token, a person) the receipt `{ dryRun: false, id, rows, … }` whose id `limb` undoes; with `{ kind: drift }`, `{ drifting: [{ repo, number, landings, hours }] }` the open pulls over 25 landings or 6 h behind main, furthest first; each is brought up to date by `POST /{repo}/pulls/{number}/update`; with `{ kind: bugs }`, `{ open, overdue, bugs: [{ repo, number, priority, dueAt }] }` soonest due first, at most 100 (an admin sees all, anyone else public repositories); with `{ repo, issue? or pull? }` (a repository writer), why it is not moving: `{ subject, moving, state?, cause, says, clears, next? }`, the first of wall (a person decides access), ceiling, hot_file, blocked_by, later_gate, no_builder, no_headroom, red_check, waiting_review that holds it (`flow/why.ts`); `repo` alone asks about the repository's builders",
  description:
    "Pipeline (admin); `q`: `/fleet` rows, `action` plans an op, `apply` does it; `kind:bugs`; `repo`: why stuck.",
  inputSchema: {
    type: "object",
    properties: {
      kind: { type: "string", enum: ["bugs"] },
      kind: { type: "string", enum: ["bugs", "drift"] },
      q: { type: "string", maxLength: 500 },
      sort: { type: "string" },
      action: { type: "object" },
@@ -79,7 +80,11 @@
export const tool: Tool = {
      return good({ kind: view.kind, columns: COLUMNS[view.kind], items: sortRows(view.rows, sort) });
    }
    if (args["kind"] !== undefined) {
      if (args["kind"] !== "bugs") return bad("invalid", "kind is bugs");
      if (args["kind"] === "drift") {
        const all = user.isAdmin && user.kind !== "agent" ? {} : { publicOnly: true };
        return good({ drifting: driftingPulls(await readDrifts(ctx.app, all), Date.now()).slice(0, 100) });
      }
      if (args["kind"] !== "bugs") return bad("invalid", "kind is bugs or drift");
      // As the terminal's bugs screen: an admin sees every repository, anyone else public ones.
      const all = openBugs(ctx.app.db, user.isAdmin && user.kind !== "agent" ? {} : { publicOnly: true });
      const now = Date.now();
@@ -252,6 +252,7 @@
import {
import {
  saySubmit,
  shipSubmit,
  updateSubmit,
  takeBackSubmit,
  holdSubmit,
  releaseSubmit,
@@ -1196,6 +1197,7 @@
export function buildRouter(): Router<Handler> {
  router.add("POST", "/feed/like", likeSubmit);
  router.add("POST", "/:owner/:name/pulls/:number/checks", pullChecksSubmit);
  router.add("POST", "/:owner/:name/pulls/:number/ship", shipSubmit);
  router.add("POST", "/:owner/:name/pulls/:number/update", updateSubmit);
  router.add("POST", "/:owner/:name/pulls/:number/say", saySubmit);
  router.add("POST", "/:owner/:name/pulls/:number/take-back", takeBackSubmit);
  router.add("POST", "/:owner/:name/pulls/:number/hold", holdSubmit);
@@ -0,0 +1,84 @@
/**
 * Pulls drifting from main, in the terminal: the section /boards shows, from
 * the same reads (`readDrifts`, `driftingPulls`), and the same one action, the
 * route's: `b` (or enter) asks the pull's agent to bring it up to date, for a
 * writer of its repository. Gated as /boards is: a site admin who is a person.
 *
 *   b, enter  bring the pull up to date     r  read again
 */
import { bringUpToDate } from "../../crew/autonomy.ts";
import { driftingPulls, readDrifts, type DriftingPull } from "../../flow/alarm_drift.ts";
import { getPull } from "../../core/pulls.ts";
import { canWrite, getRepo } from "../../core/repos.ts";
import type { Ctx, Screen } from "../app/app.ts";
import { binding } from "../app/keys.ts";
import type { Session } from "../session.ts";
import { ListState, drawList, metaOf, runAsync, type ListRow } from "./common.ts";
import type { PaletteEntry } from "./entries.ts";
import { emptyState } from "../ui/widgets.ts";
export const mayDrift = (f: Session): boolean => f.user?.isAdmin === true && f.user.kind !== "agent";
export function driftRows(pulls: readonly DriftingPull[]): ListRow[] {
  return pulls.map((p) => ({ title: `${p.repo} #${p.number}`, meta: metaOf(`${p.landings} landings`, `${p.hours} h behind`) }));
}
/** Ask the pull's agent, as the route does; the words the toast says. */
export function askUpdate(f: Session, p: DriftingPull): { ok: boolean; says: string } {
  const [owner = "", name = ""] = p.repo.split("/");
  const repo = getRepo(f.db, owner, name);
  const pull = repo ? getPull(f.db, repo.id, p.number) : undefined;
  if (!repo || !pull) return { ok: false, says: "That pull is gone." };
  if (!canWrite(f.db, repo, f.user)) return { ok: false, says: "Only someone who can write here brings a pull up to date." };
  const who = pull.state === "open" && pull.mergedAt === null ? bringUpToDate(f.app, repo, pull, []) : undefined;
  return who === undefined
    ? { ok: false, says: "The crew could not take it now (closed, no agent, or it has already tried its limit); say what to do on the pull." }
    : { ok: true, says: `${who} is bringing #${pull.number} up to date with ${pull.baseBranch}.` };
}
export function driftScreen(f: Session, ctx: Ctx): Screen {
  const state = new ListState();
  let pulls: readonly DriftingPull[] = [];
  let loaded = false;
  const read = async (): Promise<void> => {
    pulls = driftingPulls(await readDrifts(f.app), Date.now());
    loaded = true;
    state.clamp(pulls.length);
    ctx.invalidate();
  };
  const ask = (): void => {
    const p = pulls[state.index];
    if (p === undefined) return;
    const r = askUpdate(f, p);
    ctx.toast(r.says, r.ok ? "success" : "danger");
  };
  return {
    title: "Drifting from main",
    keys: [binding(["j", "k"], "move"), binding(["b", "enter"], "bring up to date"), binding(["r"], "read again"), binding(["esc", "q"], "close")],
    load: read,
    render(area, s) {
      if (loaded && pulls.length === 0) {
        emptyState(s, area, ctx.theme.c, { title: "Nothing drifts", body: "No open pull is more than 25 landings or 6 h behind main." });
        return;
      }
      drawList(s, area, ctx.theme.c, state, driftRows(pulls));
    },
    key(e) {
      if (e.key === "esc" || e.key === "q") ctx.pop();
      else if (e.key === "b" || e.key === "enter") ask();
      else if (e.key === "r") runAsync(ctx, read);
      else state.key(e, pulls.length);
      return true;
    },
  };
}
export const entry: PaletteEntry = {
  id: "drift",
  title: "Drifting pulls",
  hint: "open pulls far behind main, and the one action that brings each up to date",
  after: ["boards"],
  offered: mayDrift,
  run: (session, ctx) => ctx.push(driftScreen(session, ctx)),
};
@@ -18,6 +18,7 @@
import { entry as dotfiles } from "./dotfiles.ts";
import { entry as devices } from "./devices.ts";
import { entry as bets } from "./bets.ts";
import { entry as boards } from "./boards.ts";
import { entry as drift } from "./drift.ts";
import { entry as bugs } from "./bugs.ts";
import { entry as bulk } from "./bulk.ts";
import { entry as childCredit } from "./childcredit.ts";
@@ -93,6 +94,7 @@
export interface PaletteEntry {
export const ENTRIES: readonly PaletteEntry[] = [
  sentinel,
  boards,
  drift,
  askData,
  bugs,
  homePins,
@@ -0,0 +1,29 @@
/**
 * The drifting pulls on /boards (and so /flow): open pulls more than 25
 * landings or 6 h behind main, each a row with the one button that asks its
 * agent to bring it up to date (`POST …/pulls/N/update`). A plain section like
 * the other /boards blocks, no frame around the list. Nothing shown when none drifts.
 */
import type { DriftingPull } from "../../flow/alarm_drift.ts";
import { html, type Html } from "../html.ts";
import { btn } from "../ui.ts";
export function driftSection(pulls: readonly DriftingPull[]): Html | null {
  if (pulls.length === 0) return null;
  return html`<section class="settings-block" id="drifting">
    <h2>Drifting from main</h2>
      
        sentinelcrew
        1d ago
        outdated
      
      Principles 6 and 7 (rows over boxes, few borders): this wraps the list in card(), which is a box around a list. Render the heading and the rows as a plain section like the other /boards blocks (settings-block). Also each row holds a form with a button per line; keep it, but do not frame it.
    
    <ul class="list" data-drifting="${String(pulls.length)}">
      ${pulls.map(
        (p) => html`<li data-drift="${p.repo}#${String(p.number)}">
          <a href="/${p.repo}/pulls/${String(p.number)}">${p.repo} #${String(p.number)}</a>
          <span class="muted small">${String(p.landings)} landings · ${String(p.hours)} h behind</span>
          <form method="post" action="/${p.repo}/pulls/${String(p.number)}/update" class="bar">
            <input type="hidden" name="back" value="/boards" />
            ${btn("Bring up to date", { size: "sm" })}
          </form>
        </li>`,
      )}
    </ul>
  </section>`;
}
@@ -13,6 +13,8 @@
import { CHART_NAMES } from "../../boards/chart.ts";
import { MAX_H, MAX_PANELS, MAX_TITLE, MAX_W, RANGES, type Board, type Panel } from "../../boards/store.ts";
import type { App } from "../../app.ts";
import type { Ctx } from "../../http/context.ts";
import { driftingPulls, readDrifts } from "../../flow/alarm_drift.ts";
import { driftSection } from "./boards-drift.ts";
import { notePhase, takeSessionTime, timePhase, timePhaseAsync } from "../../core/route_timing.ts";
import { liveRegionsJs } from "../client.ts";
import { notFoundPage, signInFirst } from "../chrome.ts";
@@ -113,6 +115,7 @@
export async function boardsList(ctx: Ctx): Promise<Response> {
        </ul>`
  }</section>`;
  const flow = timePhase(ctx.request, "flow", () => flowPanel(ctx.app, { kind: "owner" }, ctx.url, "/boards"));
  const drift = driftSection(await timePhaseAsync(ctx.request, "drift", async () => driftingPulls(await readDrifts(ctx.app), Date.now())));
  const rendering = performance.now();
  const response = page({
    ctx,
@@ -121,7 +124,7 @@
export async function boardsList(ctx: Ctx): Promise<Response> {
        ${btn("Flow", { href: "/flow", variant: "ghost" })}
        ${btn("Explore the data", { href: "/boards/data", variant: "ghost" })}</div>
      ${alarmLines(cachedAlarms(ctx.app.db, new Date(), forgeCeiling(ctx.app.config)))}
      ${body} ${make} ${flow} ${boardsHoldsCard(ctx.app.db, ctx.auth.user, true)}`,
      ${body} ${make} ${drift} ${flow} ${boardsHoldsCard(ctx.app.db, ctx.auth.user, true)}`,
  });
  notePhase(ctx.request, "render", performance.now() - rendering);
  return response;
@@ -22,7 +22,7 @@
import { mergePull } from "../../actions/pulls.ts";
import { revertPull } from "../../actions/revert.ts";
import { takeBackWords } from "../../actions/revert_words.ts";
import { getPull } from "../../core/pulls.ts";
import { canRead, getRepo, type Repo } from "../../core/repos.ts";
import { canRead, canWrite, getRepo, type Repo } from "../../core/repos.ts";
import { bringUpToDate } from "../../crew/autonomy.ts";
import type { Ctx } from "../../http/context.ts";
import { crumbsFor, loadRepo, notFoundPage, pageHead, repoBase, signInFirst } from "../chrome.ts";
@@ -278,6 +278,28 @@
export async function shipSubmit(ctx: Ctx): Promise<Response> {
  });
}
/** POST /:owner/:name/pulls/:number/update — ask the pull's agent to bring its branch up to date with main; nothing lands. A writer's. */
      
        sentinelcrew
        1d ago
        
      
      No test exercises this route. Add one for a writer, a non-writer, a closed pull and a cross-origin post; the test file only checks the card renders.
    
export async function updateSubmit(ctx: Ctx): Promise<Response> {
  const repo = loadRepo(ctx);
  if (!repo) return notFoundPage(ctx);
  if (!ctx.auth.user) return signInFirst(ctx);
  const form = await readForm(ctx, "rw");
  if (form instanceof Response) return form;
  const base = repoBase(repo);
  const number = Number(ctx.params.number);
  const pull = Number.isInteger(number) ? getPull(ctx.app.db, repo.id, number) : undefined;
  if (!pull || !mayView(ctx.app.db, repo, pull, ctx.auth.user)) return notFoundPage(ctx);
  const back = backTo(form, changeHref(base, pull.number));
  if (!canWrite(ctx.app.db, repo, ctx.auth.user))
    return flashOrJson(ctx, back, { tone: "danger", message: "Only someone who can write here brings a pull up to date." });
  const who = pull.state === "open" && pull.mergedAt === null ? bringUpToDate(ctx.app, repo, pull, []) : undefined;
  return flashOrJson(ctx, back, {
    ...(who === undefined
      ? { tone: "danger" as const, message: "The crew could not take it now (closed, no agent, or it has already tried its limit); say what to do on the pull." }
      : { message: `${who} is bringing #${pull.number} up to date with ${pull.baseBranch}.` }),
  });
}
/**
 * POST /:owner/:name/pulls/:number/take-back — open a new change that
 * undoes exactly what a shipped one merged. Never touches the default
@@ -9,7 +9,8 @@
import { setIssueState } from "../src/core/issues.ts";
import { createPull } from "../src/core/pulls.ts";
import { createRepo } from "../src/core/repos.ts";
import { createUser } from "../src/core/users.ts";
import { alarmDrift, clearDriftCache, branchTip, cachedDrift, driftAlarm, readDrift } from "../src/flow/alarm_drift.ts";
import { driftSection } from "../src/web/pages/boards-drift.ts";
import { alarmDrift, driftingPulls, readDrifts, clearDriftCache, branchTip, cachedDrift, driftAlarm, readDrift } from "../src/flow/alarm_drift.ts";
import { repoDir } from "../src/git/repos.ts";
import { quietLogs } from "./helpers/globals.ts";
@@ -86,6 +87,17 @@
test("read from git: landings past a pull's base, open pulls only", async () =>
  expect(fired.says).toContain(`#${open.number} is 26 landings`);
  const both = await alarmDrift(app, new Date(Date.now()));
  expect(both.says).toBe(`#${open.number} is 26 landings behind main; #${shut.number} is 26 landings behind main.`);
  // The list /boards and the MCP `flow` tool answer: furthest behind first, each with its update button.
  const listed = driftingPulls(await readDrifts(app), Date.now());
  expect(listed.map((d) => [d.repo, d.number, d.landings])).toEqual([
    ["ada/svc", open.number, 26],
    ["ada/svc", shut.number, 26],
  ]);
  expect(driftingPulls(await readDrifts(app, { publicOnly: true }), Date.now())).toHaveLength(2);
  const card = String(driftSection(listed));
  expect(card).toContain(`action="/ada/svc/pulls/${open.number}/update"`);
  expect(card).toContain("26 landings");
  expect(driftSection([])).toBeNull();
  setIssueState(app.db, shut.id, "closed");
  const one = await alarmDrift(app, new Date(Date.now()));
  expect(one.says).toBe(`#${open.number} is 26 landings behind main.`);
@@ -95,6 +95,7 @@
test("a site-admin person is offered the whole roster", () => {
    ["signins", "Signed in", "your browsers and tokens; d signs a browser out"],
    ["sentinel", "Sentinel", "the forge's open faults"],
    ["boards", "Boards", "the forge's boards and their panels"],
    ["drift", "Drifting pulls", "open pulls far behind main, and the one action that brings each up to date"],
    ["ask-data", "Data explorer", "start from a question about the forge's data"],
    ["bugs", "Bugs", "open bugs and the bug clock"],
    ["home-pins", "Pinned panels", "the panels pinned to home: reorder and unpin"],
@@ -0,0 +1,114 @@
/** POST /:owner/:name/pulls/:number/update: a writer asks the pull's agent to bring it up to date; nobody else, no closed pull, no cross-origin post. */
import { afterAll, beforeAll, expect, test } from "bun:test";
import { mkdtemp, rm } from "node:fs/promises";
import { tmpdir } from "node:os";
import { join } from "node:path";
import { createAgent } from "../src/actions/crew.ts";
import { openPull } from "../src/actions/pulls.ts";
import { commitToBranch, createRepo } from "../src/actions/repos.ts";
import { createApp, type App } from "../src/app.ts";
import { activeRunFor } from "../src/core/runs.ts";
import { setIssueState } from "../src/core/issues.ts";
import { createSession } from "../src/core/sessions.ts";
import { createUser, type User } from "../src/core/users.ts";
import type { Repo } from "../src/core/repos.ts";
import { serve, type Servers } from "../src/http/server.ts";
import { quietLogs } from "./helpers/globals.ts";
quietLogs();
let dataDir: string;
let app: App;
let servers: Servers;
let alice: User;
let repo: Repo;
let aliceCookie: string;
let bobCookie: string;
let n = 0;
beforeAll(async () => {
  dataDir = await mkdtemp(join(tmpdir(), "forge-update-pull-"));
  app = createApp({ dataDir, port: 0 });
  servers = await serve(app);
  const mk = async (username: string) => {
    const u = await createUser(app.db, {
      origin: "seed",
      trusted: true,
      username,
      email: `${username}@forge.local`,
      password: "a-good-passphrase",
      adminIfFirst: username === "alice",
    });
    if (!u.ok) throw new Error(String(u.error));
    return u.value;
  };
  alice = await mk("alice");
  const bob = await mk("bob");
  aliceCookie = `forge_session=${createSession(app.db, alice.id).token}`;
  bobCookie = `forge_session=${createSession(app.db, bob.id).token}`;
  const made = await createRepo(app, alice, { name: "notes", visibility: "public" });
  if (!made.ok) throw new Error(String(made.error));
  repo = made.value;
  await commitToBranch(app, alice, repo, { message: "base", files: [{ path: "a.txt", content: "a\n" }] });
}, 30_000);
afterAll(async () => {
  servers.stop();
  app.close();
  await rm(dataDir, { recursive: true, force: true });
});
/** An open pull assigned to a fresh agent, so there is someone to ask. */
async function agentPull() {
  const branch = `b${++n}`;
  const c = await commitToBranch(app, alice, repo, { branch, message: branch, files: [{ path: `${branch}.txt`, content: "x\n" }] });
  if (!c.ok) throw new Error(JSON.stringify(c.error));
  const opened = await openPull(app, alice, repo, { title: branch, baseBranch: "main", headBranch: branch });
  if (!opened.ok) throw new Error(String(opened.error));
  const agent = await createAgent(app, alice, { username: `bot${n}` });
  if (!agent.ok) throw new Error(JSON.stringify(agent.error));
  app.db.query("UPDATE issue SET assignee_id = ?1 WHERE id = ?2").run(agent.value.user.id, opened.value.id);
  return opened.value;
}
const post = (number: number, cookie: string | undefined, origin = servers.url) =>
  fetch(`${servers.url}/alice/notes/pulls/${number}/update`, {
    method: "POST",
    headers: { ...(cookie ? { cookie } : {}), origin, accept: "application/json" },
    body: new URLSearchParams({ back: "/boards" }),
    redirect: "manual",
  });
test("a writer asks the agent: it is named and a run is queued", async () => {
  const pull = await agentPull();
  const res = await post(pull.number, aliceCookie);
  expect(res.status).toBe(200);
  const body = JSON.stringify(await res.json());
  expect(body).toContain("is bringing");
  expect(body).toContain(`#${pull.number}`);
  expect(activeRunFor(app.db, "agent", pull.id)).toBeDefined();
});
test("someone who cannot write is refused and nothing is queued", async () => {
  const pull = await agentPull();
  const res = await post(pull.number, bobCookie);
  expect(res.status).toBe(422);
  expect(JSON.stringify(await res.json())).toContain("Only someone who can write");
  expect(activeRunFor(app.db, "agent", pull.id)).toBeUndefined();
});
test("a closed pull cannot be asked", async () => {
  const pull = await agentPull();
  setIssueState(app.db, pull.id, "closed");
  const res = await post(pull.number, aliceCookie);
  expect(res.status).toBe(422);
  expect(JSON.stringify(await res.json())).toContain("could not take it");
  expect(activeRunFor(app.db, "agent", pull.id)).toBeUndefined();
});
test("a cross-origin post is refused and nothing is queued", async () => {
  const pull = await agentPull();
  const res = await post(pull.number, aliceCookie, "https://evil.example");
  expect(res.status).toBe(403);
  expect(activeRunFor(app.db, "agent", pull.id)).toBeUndefined();
});
@@ -0,0 +1,87 @@
/** The terminal's drifting-pulls screen: offered to a person admin only, says nothing drifts, and asks the agent as the route does. */
import { afterAll, beforeAll, expect, test } from "bun:test";
import { mkdtemp, rm } from "node:fs/promises";
import { tmpdir } from "node:os";
import { join } from "node:path";
import { createAgent } from "../src/actions/crew.ts";
import { openPull } from "../src/actions/pulls.ts";
import { commitToBranch, createRepo } from "../src/actions/repos.ts";
import { createApp, type App } from "../src/app.ts";
import { createUser, type User } from "../src/core/users.ts";
import type { Repo } from "../src/core/repos.ts";
import { createForgeApp } from "../src/tui/forge.ts";
import { ENTRIES } from "../src/tui/screens/entries.ts";
import { askUpdate, driftRows, driftScreen, entry } from "../src/tui/screens/drift.ts";
import { headlessTerminal } from "../src/tui/term/terminal.ts";
import { quietLogs } from "./helpers/globals.ts";
import { settleApp } from "./helpers/tui.ts";
quietLogs();
let dataDir: string;
let app: App;
let alice: User;
let bob: User;
let repo: Repo;
const open = (user: User) =>
  createForgeApp(app, { sshUsername: user.username, remoteAddress: "127.0.0.1", fingerprint: "SHA256:t", user }, { terminal: headlessTerminal(120, 30), exitHooks: false });
beforeAll(async () => {
  dataDir = await mkdtemp(join(tmpdir(), "forge-tui-drift-"));
  app = createApp({ dataDir, port: 0 });
  const mk = async (username: string) => {
    const u = await createUser(app.db, { origin: "seed", trusted: true, username, email: `${username}@forge.local`, password: "a-good-passphrase", adminIfFirst: username === "alice" });
    if (!u.ok) throw new Error(String(u.error));
    return u.value;
  };
  alice = await mk("alice");
  bob = await mk("bob");
  const made = await createRepo(app, alice, { name: "notes", visibility: "public" });
  if (!made.ok) throw new Error(String(made.error));
  repo = made.value;
  await commitToBranch(app, alice, repo, { message: "base", files: [{ path: "a.txt", content: "a\n" }] });
}, 30_000);
afterAll(async () => {
  app.close();
  await rm(dataDir, { recursive: true, force: true });
});
test("the entry is in the palette list and offered to a person admin alone", () => {
  expect(ENTRIES).toContain(entry);
  const a = open(alice);
  const b = open(bob);
  expect(entry.offered(a.session)).toBe(true);
  expect(entry.offered(b.session)).toBe(false);
});
test("rows say landings and hours; an empty forge says nothing drifts", async () => {
  expect(driftRows([{ repo: "alice/notes", number: 3, landings: 26, hours: 1.5 }])).toEqual([
    { title: "alice/notes #3", meta: expect.stringContaining("26 landings") },
  ]);
  const { app: tui, session } = open(alice);
  tui.start();
  await settleApp(tui);
  tui.push(driftScreen(session, tui.ctx));
  await settleApp(tui);
  expect(tui.screen.toText()).toContain("Nothing drifts");
  tui.stop();
});
test("asking: a writer's agent is named, a reader is refused", async () => {
  const c = await commitToBranch(app, alice, repo, { branch: "w", message: "w", files: [{ path: "w.txt", content: "w\n" }] });
  if (!c.ok) throw new Error(JSON.stringify(c.error));
  const opened = await openPull(app, alice, repo, { title: "w", baseBranch: "main", headBranch: "w" });
  if (!opened.ok) throw new Error(String(opened.error));
  const agent = await createAgent(app, alice, { username: "bot" });
  if (!agent.ok) throw new Error(JSON.stringify(agent.error));
  app.db.query("UPDATE issue SET assignee_id = ?1 WHERE id = ?2").run(agent.value.user.id, opened.value.id);
  const p = { repo: "alice/notes", number: opened.value.number, landings: 30, hours: 0 };
  const refused = askUpdate(open(bob).session, p);
  expect(refused.ok).toBe(false);
  expect(refused.says).toContain("Only someone who can write");
  const done = askUpdate(open(alice).session, p);
  expect(done.ok).toBe(true);
  expect(done.says).toContain("bot is bringing");
});
		@@ -106,7 +106,7 @@ bytes in `tools/list`. After changing a tool run `bun scripts/mcp-table.ts`;
106	106	\| `flag_set` \| — \| Set or clear a flag (admin) \| 209 \|
107	107	\| `flag_winner` \| — \| An A/B flag winner becomes default \| 206 \|
108	108	\| `flags` \| — \| Declared flags: why, default, owner issue, live value \| 171 \|
109		\| `flow` \| `bugs` \| Pipeline (admin); `q`: `/fleet` rows, `action` plans an op, `apply` does it; `kind:bugs`; `repo`: why stuck \| 480 \|
	109	\| `flow` \| `bugs`, `drift` \| Pipeline (admin); `q`: `/fleet` rows, `action` plans an op, `apply` does it; `kind:bugs`; `repo`: why stuck \| 488 \|
110	110	\| `follow_mode` \| — \| How a spawned forge follows its parent: `tell-me` or `take-updates` \| 265 \|
111	111	\| `following` \| — \| Where a fork stands against what it follows: in step, behind, ahead, diverged \| 243 \|
112	112	\| `forge_proposals` \| — \| What this forge proposed to its parent; `reachable` false if it is silent \| 245 \|
		@@ -536,3 +536,8 @@ answers
536	536	(the clone URL as the forge prints it), then `/plugin install forge@forge`
537	537	(the root `.claude-plugin/marketplace.json` names the marketplace `forge`).
538	538	From a clone, `claude --plugin-dir plugins/claude-code` is the local way.
	539
	540	`flow` with `{ kind: "drift" }` (#10861) is another: `{ drifting: [{ repo, number, landings, hours }] }`,
	541	open pulls over 25 landings or 6 h behind main, furthest first, from
	542	`src/flow/alarm_drift.ts`. Each is brought up to date by
	543	`POST /{repo}/pulls/{number}/update`, the button beside it on /boards.
		@@ -0,0 +1,9 @@
	1	# Pulls drifting from main
	2
	3	An open pull more than 25 landings or 6 h behind its base is listed on `/boards` (and so `/flow`) under "Drifting from main", furthest first, each with one button, "Bring up to date". Nothing is shown when none drifts. The same fact is the `drift` alarm.
	4
	5	- Page: `src/web/pages/boards-drift.ts`, a plain section of `/boards` (admin only, as the page is). The button posts `POST /:owner/:name/pulls/:number/update` (`updateSubmit`, `src/web/studio/actions.ts`): same-origin, a viewer of the pull, and a writer of the repository; it asks the pull's agent to merge main into its branch (`bringUpToDate`) and lands nothing. Closed pulls, pulls with no agent, and a pull that has used its tries are refused in words.
	6	- Terminal: the palette entry "Drifting pulls" (`src/tui/screens/drift.ts`, admins who are people); `b` or enter asks, `r` reads again. Same reads, same action, same refusals.
	7	- MCP: `flow` with `{ kind: drift }` lists them: `{ drifting: [{ repo, number, landings, hours }] }`. There is no verb to ask the agent yet; use the route.
	8	- Reads: `src/flow/alarm_drift.ts`, git per pull cached by head and tip; merged and closed pulls never count.
	9	- Tests: `test/flow-alarm-drift.test.ts`, `test/studio-update-pull.test.ts` (writer, non-writer, closed, cross-origin), `test/tui-drift.test.ts`.
		@@ -1,7 +1,6 @@
1	1	[
2	2	"src/apps/cloud.ts",
3	3	"src/crew/governor_log.ts",
4		"src/flow/alarm_drift.ts",
5	4	"src/flow/alarm_unproposed.ts",
6	5	"src/flow/approved_wait.ts",
7	6	"src/flow/clog_words.ts",
		@@ -6,6 +6,8 @@
6	6	* so a rebased pull would stay named); the hours run from the first of them. Merged and closed pulls never count.
7	7	*/
8	8
	9	import { existsSync } from "node:fs";
	10
9	11	import type { App } from "../app.ts";
10	12	import { runGit } from "../git/env.ts";
11	13	import { isSafeOid, isSafeRef } from "../git/guard.ts";
		@@ -40,7 +42,7 @@ interface Row {
40	42	/** Landings on `branch` past where `headOid` forked from it and when the first happened, read from git; zero when unreadable. */
41	43	export async function readDrift(dir: string, branch: string, headOid: string): Promise<Omit<Drift, "number">> {
42	44	const none = { landings: 0, since: null };
43		if (!isSafeOid(headOid) \|\| !isSafeRef(branch)) return none;
	45	if (!isSafeOid(headOid) \|\| !isSafeRef(branch) \|\| !existsSync(dir)) return none;
44	46	const tip = `refs/heads/${branch}`;
45	47	const fork = await runGit(["merge-base", headOid, tip], { cwd: dir });
46	48	const base = fork.ok ? fork.value.trim() : "";
		@@ -64,7 +66,7 @@ export function clearDriftCache(): void {
64	66
65	67	/** The tip of `branch`, one cheap git call; null when unreadable. */
66	68	export async function branchTip(dir: string, branch: string): Promise<string \| null> {
67		if (!isSafeRef(branch)) return null;
	69	if (!isSafeRef(branch) \|\| !existsSync(dir)) return null;
68	70	const out = await runGit(["rev-parse", "--verify", "-q", `refs/heads/${branch}`], { cwd: dir });
69	71	const oid = out.ok ? out.value.trim() : "";
70	72	return isSafeOid(oid) ? oid : null;
		@@ -107,21 +109,25 @@ export function driftAlarm(drifts: readonly Drift[], now: number): DriftAlarm {
107	109	return { fired: true, since: new Date(since).toISOString(), says: `${named.join("; ")}${more}.` };
108	110	}
109	111
110		/** Reads every open pull's drift from its repository's main and answers the alarm. */
111		export async function alarmDrift(
	112	/** One open pull's drift and where it lives. */
	113	export interface RepoDrift extends Drift {
	114	readonly repo: string;
	115	}
	116
	117	/** Every open pull's drift from its repository's main; `publicOnly` leaves private repositories out. Git reads are cached per head and tip. */
	118	export async function readDrifts(
112	119	app: App,
113		now: Date \| number = Date.now(),
114		{ read = readDrift, readTip = branchTip }: { read?: DriftReader; readTip?: typeof branchTip } = {},
115		): Promise<DriftAlarm> {
116		const at = typeof now === "number" ? now : now.getTime();
	120	{ read = readDrift, readTip = branchTip, publicOnly = false }: { read?: DriftReader; readTip?: typeof branchTip; publicOnly?: boolean } = {},
	121	): Promise<RepoDrift[]> {
117	122	const rows = app.db
118		.query<Row, []>(
	123	.query<Row, [number]>(
119	124	`SELECT i.number, p.base_branch, p.head_oid, o.username AS owner, r.name
120	125	FROM issue i JOIN pull p ON p.issue_id = i.id
121	126	JOIN repo r ON r.id = i.repo_id JOIN user o ON o.id = r.owner_id
122		WHERE i.kind = 'pull' AND i.state = 'open' AND p.merged_at IS NULL`,
	127	WHERE i.kind = 'pull' AND i.state = 'open' AND p.merged_at IS NULL
	128	AND (?1 = 0 OR r.visibility = 'public')`,
123	129	)
124		.all();
	130	.all(publicOnly ? 1 : 0);
125	131	const tips = new Map<string, Promise<string \| null>>();
126	132	const tipOf = (dir: string, branch: string) => {
127	133	const k = `${dir}\0${branch}`;
		@@ -129,11 +135,36 @@ export async function alarmDrift(
129	135	if (!t) tips.set(k, (t = readTip(dir, branch)));
130	136	return t;
131	137	};
132		const drifts = await Promise.all(
	138	return Promise.all(
133	139	rows.map(async (r) => {
134	140	const dir = repoDir(app.reposRoot, r.owner, r.name);
135		return { number: r.number, ...(await cachedDrift(read, dir, r.base_branch, r.head_oid, await tipOf(dir, r.base_branch))) };
	141	return { repo: `${r.owner}/${r.name}`, number: r.number, ...(await cachedDrift(read, dir, r.base_branch, r.head_oid, await tipOf(dir, r.base_branch))) };
136	142	}),
137	143	);
138		return driftAlarm(drifts, at);
	144	}
	145
	146	export interface DriftingPull {
	147	readonly repo: string;
	148	readonly number: number;
	149	readonly landings: number;
	150	/** Hours since main first moved past the pull's base, one decimal; 0 when it has not. */
	151	readonly hours: number;
	152	}
	153
	154	/** The pulls past either limit, the furthest behind first: what /boards and the MCP `flow` tool list beside the one action that brings each up to date. */
	155	export function driftingPulls(drifts: readonly RepoDrift[], now: number): DriftingPull[] {
	156	return drifts
	157	.filter((d) => drifting(d, now))
	158	.sort((a, b) => b.landings - a.landings \|\| behind(b, now) - behind(a, now) \|\| a.repo.localeCompare(b.repo) \|\| a.number - b.number)
	159	.map((d) => ({ repo: d.repo, number: d.number, landings: d.landings, hours: Math.round(behind(d, now) / 360_000) / 10 }));
	160	}
	161
	162	/** Reads every open pull's drift from its repository's main and answers the alarm. */
	163	export async function alarmDrift(
	164	app: App,
	165	now: Date \| number = Date.now(),
	166	opts: { read?: DriftReader; readTip?: typeof branchTip } = {},
	167	): Promise<DriftAlarm> {
	168	const at = typeof now === "number" ? now : now.getTime();
	169	return driftAlarm(await readDrifts(app, opts), at);
139	170	}
		@@ -7,6 +7,7 @@ import { whyIssue, whyPull, liveHead, whyRepo, type Why } from "../../../flow/wh
7	7	import { countRead } from "../../../system/telemetry_reads.ts";
8	8	import { COLUMNS, readSort, sortRows } from "../../../fleet/columns.ts";
9	9	import { viewFleet } from "../../../fleet/rows.ts";
	10	import { driftingPulls, readDrifts } from "../../../flow/alarm_drift.ts";
10	11	import { openBugs } from "../../../flow/bugs.ts";
11	12	import { flowCached } from "../../../system/flow_cache.ts";
12	13	import { scopeAllows } from "../../../core/tokens.ts";
		@@ -27,13 +28,13 @@ const said = (subject: string, why: Why) =>
27	28
28	29	export const tool: Tool = {
29	30	name: "flow",
30		doc: "with no arguments, the forge's pipeline (a forge admin's, or an agent the owner granted `telemetry:read`; private repositories cut out): per stage counts, `oldestWaiting`, `capacity`, the bottleneck, the merge `queue` and what each reviewer has `reviewing`, and `declines` (crew runs declined in 24 h, by reason) (the `ui://forge/flow` card); with `{ q, sort? }`, the rows a fleet query line selects: `{ kind, columns, items }`, only rows you may read, `sort` a column key led by `-` to reverse, a bad line answers its reason; with `{ q, action: { verb, value }, apply? }`, a fleet operation over those rows as `POST /api/v1/fleet/ops` answers it: the dry-run plan `{ dryRun: true, query, kind, verb, value, reversible, rows, counts }` and nothing changed, or with `apply: true` (an admin token, a person) the receipt `{ dryRun: false, id, rows, … }` whose id `limb` undoes; with `{ kind: bugs }`, `{ open, overdue, bugs: [{ repo, number, priority, dueAt }] }` soonest due first, at most 100 (an admin sees all, anyone else public repositories); with `{ repo, issue? or pull? }` (a repository writer), why it is not moving: `{ subject, moving, state?, cause, says, clears, next? }`, the first of wall (a person decides access), ceiling, hot_file, blocked_by, later_gate, no_builder, no_headroom, red_check, waiting_review that holds it (`flow/why.ts`); `repo` alone asks about the repository's builders",
	31	doc: "with no arguments, the forge's pipeline (a forge admin's, or an agent the owner granted `telemetry:read`; private repositories cut out): per stage counts, `oldestWaiting`, `capacity`, the bottleneck, the merge `queue` and what each reviewer has `reviewing`, and `declines` (crew runs declined in 24 h, by reason) (the `ui://forge/flow` card); with `{ q, sort? }`, the rows a fleet query line selects: `{ kind, columns, items }`, only rows you may read, `sort` a column key led by `-` to reverse, a bad line answers its reason; with `{ q, action: { verb, value }, apply? }`, a fleet operation over those rows as `POST /api/v1/fleet/ops` answers it: the dry-run plan `{ dryRun: true, query, kind, verb, value, reversible, rows, counts }` and nothing changed, or with `apply: true` (an admin token, a person) the receipt `{ dryRun: false, id, rows, … }` whose id `limb` undoes; with `{ kind: drift }`, `{ drifting: [{ repo, number, landings, hours }] }` the open pulls over 25 landings or 6 h behind main, furthest first; each is brought up to date by `POST /{repo}/pulls/{number}/update`; with `{ kind: bugs }`, `{ open, overdue, bugs: [{ repo, number, priority, dueAt }] }` soonest due first, at most 100 (an admin sees all, anyone else public repositories); with `{ repo, issue? or pull? }` (a repository writer), why it is not moving: `{ subject, moving, state?, cause, says, clears, next? }`, the first of wall (a person decides access), ceiling, hot_file, blocked_by, later_gate, no_builder, no_headroom, red_check, waiting_review that holds it (`flow/why.ts`); `repo` alone asks about the repository's builders",
31	32	description:
32	33	"Pipeline (admin); `q`: `/fleet` rows, `action` plans an op, `apply` does it; `kind:bugs`; `repo`: why stuck.",
33	34	inputSchema: {
34	35	type: "object",
35	36	properties: {
36		kind: { type: "string", enum: ["bugs"] },
	37	kind: { type: "string", enum: ["bugs", "drift"] },
37	38	q: { type: "string", maxLength: 500 },
38	39	sort: { type: "string" },
39	40	action: { type: "object" },
		@@ -79,7 +80,11 @@ export const tool: Tool = {
79	80	return good({ kind: view.kind, columns: COLUMNS[view.kind], items: sortRows(view.rows, sort) });
80	81	}
81	82	if (args["kind"] !== undefined) {
82		if (args["kind"] !== "bugs") return bad("invalid", "kind is bugs");
	83	if (args["kind"] === "drift") {
	84	const all = user.isAdmin && user.kind !== "agent" ? {} : { publicOnly: true };
	85	return good({ drifting: driftingPulls(await readDrifts(ctx.app, all), Date.now()).slice(0, 100) });
	86	}
	87	if (args["kind"] !== "bugs") return bad("invalid", "kind is bugs or drift");
83	88	// As the terminal's bugs screen: an admin sees every repository, anyone else public ones.
84	89	const all = openBugs(ctx.app.db, user.isAdmin && user.kind !== "agent" ? {} : { publicOnly: true });
85	90	const now = Date.now();
		@@ -252,6 +252,7 @@ import {
252	252	import {
253	253	saySubmit,
254	254	shipSubmit,
	255	updateSubmit,
255	256	takeBackSubmit,
256	257	holdSubmit,
257	258	releaseSubmit,
		@@ -1196,6 +1197,7 @@ export function buildRouter(): Router<Handler> {
1196	1197	router.add("POST", "/feed/like", likeSubmit);
1197	1198	router.add("POST", "/:owner/:name/pulls/:number/checks", pullChecksSubmit);
1198	1199	router.add("POST", "/:owner/:name/pulls/:number/ship", shipSubmit);
	1200	router.add("POST", "/:owner/:name/pulls/:number/update", updateSubmit);
1199	1201	router.add("POST", "/:owner/:name/pulls/:number/say", saySubmit);
1200	1202	router.add("POST", "/:owner/:name/pulls/:number/take-back", takeBackSubmit);
1201	1203	router.add("POST", "/:owner/:name/pulls/:number/hold", holdSubmit);
		@@ -0,0 +1,84 @@
	1	/**
	2	* Pulls drifting from main, in the terminal: the section /boards shows, from
	3	* the same reads (`readDrifts`, `driftingPulls`), and the same one action, the
	4	* route's: `b` (or enter) asks the pull's agent to bring it up to date, for a
	5	* writer of its repository. Gated as /boards is: a site admin who is a person.
	6	*
	7	* b, enter bring the pull up to date r read again
	8	*/
	9
	10	import { bringUpToDate } from "../../crew/autonomy.ts";
	11	import { driftingPulls, readDrifts, type DriftingPull } from "../../flow/alarm_drift.ts";
	12	import { getPull } from "../../core/pulls.ts";
	13	import { canWrite, getRepo } from "../../core/repos.ts";
	14	import type { Ctx, Screen } from "../app/app.ts";
	15	import { binding } from "../app/keys.ts";
	16	import type { Session } from "../session.ts";
	17	import { ListState, drawList, metaOf, runAsync, type ListRow } from "./common.ts";
	18	import type { PaletteEntry } from "./entries.ts";
	19	import { emptyState } from "../ui/widgets.ts";
	20
	21	export const mayDrift = (f: Session): boolean => f.user?.isAdmin === true && f.user.kind !== "agent";
	22
	23	export function driftRows(pulls: readonly DriftingPull[]): ListRow[] {
	24	return pulls.map((p) => ({ title: `${p.repo} #${p.number}`, meta: metaOf(`${p.landings} landings`, `${p.hours} h behind`) }));
	25	}
	26
	27	/** Ask the pull's agent, as the route does; the words the toast says. */
	28	export function askUpdate(f: Session, p: DriftingPull): { ok: boolean; says: string } {
	29	const [owner = "", name = ""] = p.repo.split("/");
	30	const repo = getRepo(f.db, owner, name);
	31	const pull = repo ? getPull(f.db, repo.id, p.number) : undefined;
	32	if (!repo \|\| !pull) return { ok: false, says: "That pull is gone." };
	33	if (!canWrite(f.db, repo, f.user)) return { ok: false, says: "Only someone who can write here brings a pull up to date." };
	34	const who = pull.state === "open" && pull.mergedAt === null ? bringUpToDate(f.app, repo, pull, []) : undefined;
	35	return who === undefined
	36	? { ok: false, says: "The crew could not take it now (closed, no agent, or it has already tried its limit); say what to do on the pull." }
	37	: { ok: true, says: `${who} is bringing #${pull.number} up to date with ${pull.baseBranch}.` };
	38	}
	39
	40	export function driftScreen(f: Session, ctx: Ctx): Screen {
	41	const state = new ListState();
	42	let pulls: readonly DriftingPull[] = [];
	43	let loaded = false;
	44	const read = async (): Promise<void> => {
	45	pulls = driftingPulls(await readDrifts(f.app), Date.now());
	46	loaded = true;
	47	state.clamp(pulls.length);
	48	ctx.invalidate();
	49	};
	50	const ask = (): void => {
	51	const p = pulls[state.index];
	52	if (p === undefined) return;
	53	const r = askUpdate(f, p);
	54	ctx.toast(r.says, r.ok ? "success" : "danger");
	55	};
	56	return {
	57	title: "Drifting from main",
	58	keys: [binding(["j", "k"], "move"), binding(["b", "enter"], "bring up to date"), binding(["r"], "read again"), binding(["esc", "q"], "close")],
	59	load: read,
	60	render(area, s) {
	61	if (loaded && pulls.length === 0) {
	62	emptyState(s, area, ctx.theme.c, { title: "Nothing drifts", body: "No open pull is more than 25 landings or 6 h behind main." });
	63	return;
	64	}
	65	drawList(s, area, ctx.theme.c, state, driftRows(pulls));
	66	},
	67	key(e) {
	68	if (e.key === "esc" \|\| e.key === "q") ctx.pop();
	69	else if (e.key === "b" \|\| e.key === "enter") ask();
	70	else if (e.key === "r") runAsync(ctx, read);
	71	else state.key(e, pulls.length);
	72	return true;
	73	},
	74	};
	75	}
	76
	77	export const entry: PaletteEntry = {
	78	id: "drift",
	79	title: "Drifting pulls",
	80	hint: "open pulls far behind main, and the one action that brings each up to date",
	81	after: ["boards"],
	82	offered: mayDrift,
	83	run: (session, ctx) => ctx.push(driftScreen(session, ctx)),
	84	};
		@@ -18,6 +18,7 @@ import { entry as dotfiles } from "./dotfiles.ts";
18	18	import { entry as devices } from "./devices.ts";
19	19	import { entry as bets } from "./bets.ts";
20	20	import { entry as boards } from "./boards.ts";
	21	import { entry as drift } from "./drift.ts";
21	22	import { entry as bugs } from "./bugs.ts";
22	23	import { entry as bulk } from "./bulk.ts";
23	24	import { entry as childCredit } from "./childcredit.ts";
		@@ -93,6 +94,7 @@ export interface PaletteEntry {
93	94	export const ENTRIES: readonly PaletteEntry[] = [
94	95	sentinel,
95	96	boards,
	97	drift,
96	98	askData,
97	99	bugs,
98	100	homePins,
		@@ -0,0 +1,29 @@
	1	/**
	2	* The drifting pulls on /boards (and so /flow): open pulls more than 25
	3	* landings or 6 h behind main, each a row with the one button that asks its
	4	* agent to bring it up to date (`POST …/pulls/N/update`). A plain section like
	5	* the other /boards blocks, no frame around the list. Nothing shown when none drifts.
	6	*/
	7
	8	import type { DriftingPull } from "../../flow/alarm_drift.ts";
	9	import { html, type Html } from "../html.ts";
	10	import { btn } from "../ui.ts";
	11
	12	export function driftSection(pulls: readonly DriftingPull[]): Html \| null {
	13	if (pulls.length === 0) return null;
	14	return html`<section class="settings-block" id="drifting">
	15	<h2>Drifting from main</h2>
		sentinelcrew 1d ago outdated Principles 6 and 7 (rows over boxes, few borders): this wraps the list in `card()`, which is a box around a list. Render the heading and the rows as a plain section like the other /boards blocks (`settings-block`). Also each row holds a form with a button per line; keep it, but do not frame it.
	16	<ul class="list" data-drifting="${String(pulls.length)}">
	17	${pulls.map(
	18	(p) => html`<li data-drift="${p.repo}#${String(p.number)}">
	19	<a href="/${p.repo}/pulls/${String(p.number)}">${p.repo} #${String(p.number)}</a>
	20	<span class="muted small">${String(p.landings)} landings · ${String(p.hours)} h behind</span>
	21	<form method="post" action="/${p.repo}/pulls/${String(p.number)}/update" class="bar">
	22	<input type="hidden" name="back" value="/boards" />
	23	${btn("Bring up to date", { size: "sm" })}
	24	</form>
	25	</li>`,
	26	)}
	27	</ul>
	28	</section>`;
	29	}
		@@ -13,6 +13,8 @@ import { CHART_NAMES } from "../../boards/chart.ts";
13	13	import { MAX_H, MAX_PANELS, MAX_TITLE, MAX_W, RANGES, type Board, type Panel } from "../../boards/store.ts";
14	14	import type { App } from "../../app.ts";
15	15	import type { Ctx } from "../../http/context.ts";
	16	import { driftingPulls, readDrifts } from "../../flow/alarm_drift.ts";
	17	import { driftSection } from "./boards-drift.ts";
16	18	import { notePhase, takeSessionTime, timePhase, timePhaseAsync } from "../../core/route_timing.ts";
17	19	import { liveRegionsJs } from "../client.ts";
18	20	import { notFoundPage, signInFirst } from "../chrome.ts";
		@@ -113,6 +115,7 @@ export async function boardsList(ctx: Ctx): Promise<Response> {
113	115	</ul>`
114	116	}</section>`;
115	117	const flow = timePhase(ctx.request, "flow", () => flowPanel(ctx.app, { kind: "owner" }, ctx.url, "/boards"));
	118	const drift = driftSection(await timePhaseAsync(ctx.request, "drift", async () => driftingPulls(await readDrifts(ctx.app), Date.now())));
116	119	const rendering = performance.now();
117	120	const response = page({
118	121	ctx,
		@@ -121,7 +124,7 @@ export async function boardsList(ctx: Ctx): Promise<Response> {
121	124	${btn("Flow", { href: "/flow", variant: "ghost" })}
122	125	${btn("Explore the data", { href: "/boards/data", variant: "ghost" })}</div>
123	126	${alarmLines(cachedAlarms(ctx.app.db, new Date(), forgeCeiling(ctx.app.config)))}
124		${body} ${make} ${flow} ${boardsHoldsCard(ctx.app.db, ctx.auth.user, true)}`,
	127	${body} ${make} ${drift} ${flow} ${boardsHoldsCard(ctx.app.db, ctx.auth.user, true)}`,
125	128	});
126	129	notePhase(ctx.request, "render", performance.now() - rendering);
127	130	return response;