feat(control-pane): serve 3D agent-airspace viz + /api/proximity feed

Adds the Layer 4 observability view to the control pane: a self-contained, dependency-free 3D point-cloud of the agent airspace (positions from the proximity embedding, sized by working set, colored by collision risk, links for converging pairs) plus an XSS-safe advisory panel that polls every 5s. - proximity-viz.js: renderProximityVizHtml() (canvas projection, no external JS) - server.js: GET /proximity (page) + GET /api/proximity (snapshot.proximity feed) - test: asserts both routes serve and the feed carries positions/links/advisories
2026-06-23 00:21:27 +08:00 · 2026-06-21 19:41:12 -04:00
5 changed files with 260 additions and 15 deletions
@@ -379,14 +379,14 @@ checksum = "790eea4361631c5e7d22598ecd5723ff611904e3344ce8720784c93e3d83d40b"

 [[package]]
 name = "cron"
-version = "0.17.0"
+version = "0.16.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a5dcd6f69605c2956916ce24e8af637b754964c9a83f4662d3a2361654cdba09"
+checksum = "089df96cf6a25253b4b6b6744d86f91150a3d4df546f31a95def47976b8cba97"
 dependencies = [
 "chrono",
 "once_cell",
 "phf",
- "winnow 0.7.15",
+ "winnow",
 ]

 [[package]]
@@ -2344,7 +2344,7 @@ dependencies = [
 "toml_datetime",
 "toml_parser",
 "toml_writer",
- "winnow 1.0.3",
+ "winnow",
 ]

 [[package]]
@@ -2362,7 +2362,7 @@ version = "1.1.2+spec-1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a2abe9b86193656635d2411dc43050282ca48aa31c2451210f4202550afb7526"
 dependencies = [
- "winnow 1.0.3",
+ "winnow",
 ]

 [[package]]
@@ -2933,15 +2933,6 @@ version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"

-[[package]]
-name = "winnow"
-version = "0.7.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "df79d97927682d2fd8adb29682d1140b343be4ac0f08fd68b7765d9c059d3945"
-dependencies = [
- "memchr",
-]
-
 [[package]]
 name = "winnow"
 version = "1.0.3"
@@ -47,7 +47,7 @@ libc = "0.2"

 # Time
 chrono = { version = "0.4", features = ["serde"] }
-cron = "0.17"
+cron = "0.16"

 # UUID for session IDs
 uuid = { version = "1", features = ["v4"] }
@@ -0,0 +1,191 @@
+'use strict';
+
+/**
+ * Self-contained 3D "agent airspace" visualization, served by the control pane.
+ *
+ * Renders each agent as a point in code-space (positions from the proximity
+ * embedding), sized by working-set size and colored by collision risk, with
+ * links between converging pairs (amber = transmit advisory, red = steer). The
+ * scene auto-rotates so you can read the cloud. Dependency-free: a hand-rolled
+ * 3D2D projection on a <canvas>, no external scripts (CSP/offline friendly).
+ *
+ * This is the operator/Enterprise view of Layer 4: multi-agent observability:
+ * literally watch the swarm and watch one agent steer away from a collision.
+ */
+
+function renderProximityVizHtml() {
+  return `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8" />
+<meta name="viewport" content="width=device-width, initial-scale=1" />
+<title>ECC Agent Airspace</title>
+<style>
+  :root { color-scheme: dark; }
+  * { box-sizing: border-box; }
+  body { margin: 0; font: 14px/1.4 -apple-system, system-ui, sans-serif; background: #0b0e14; color: #e6edf3; }
+  header { display: flex; align-items: baseline; gap: 12px; padding: 12px 16px; border-bottom: 1px solid #1f2630; }
+  header h1 { font-size: 15px; margin: 0; }
+  header .sub { color: #8b949e; font-size: 12px; }
+  #wrap { display: grid; grid-template-columns: 1fr 320px; height: calc(100vh - 49px); }
+  #stage { position: relative; }
+  canvas { width: 100%; height: 100%; display: block; }
+  #side { border-left: 1px solid #1f2630; padding: 12px 14px; overflow-y: auto; }
+  #side h2 { font-size: 12px; text-transform: uppercase; letter-spacing: .04em; color: #8b949e; margin: 0 0 8px; }
+  .adv { border: 1px solid #1f2630; border-radius: 8px; padding: 8px 10px; margin-bottom: 8px; }
+  .adv.resolution { border-color: #b3402f; }
+  .adv.advisory { border-color: #9a6700; }
+  .adv .lv { font-size: 11px; text-transform: uppercase; letter-spacing: .04em; }
+  .adv.resolution .lv { color: #ff7b72; }
+  .adv.advisory .lv { color: #e3b341; }
+  .adv .who { color: #c9d1d9; }
+  .adv .act { color: #8b949e; font-size: 12px; margin-top: 3px; }
+  .empty { color: #6e7681; }
+  #legend { position: absolute; left: 12px; bottom: 12px; font-size: 11px; color: #8b949e; background: rgba(11,14,20,.7); padding: 6px 8px; border-radius: 6px; }
+  .dot { display: inline-block; width: 8px; height: 8px; border-radius: 50%; margin-right: 5px; vertical-align: middle; }
+</style>
+</head>
+<body>
+  <header>
+    <h1>ECC - Agent Airspace</h1>
+    <span class="sub" id="status">connecting...</span>
+  </header>
+  <div id="wrap">
+    <div id="stage">
+      <canvas id="c"></canvas>
+      <div id="legend">
+        <div><span class="dot" style="background:#3fb950"></span>clear</div>
+        <div><span class="dot" style="background:#e3b341"></span>traffic advisory (transmit)</div>
+        <div><span class="dot" style="background:#ff7b72"></span>resolution (steer)</div>
+      </div>
+    </div>
+    <div id="side">
+      <h2>Advisories</h2>
+      <div id="advisories"><div class="empty">No advisories - airspace clear.</div></div>
+    </div>
+  </div>
+<script>
+(function () {
+  var canvas = document.getElementById('c');
+  var ctx = canvas.getContext('2d');
+  var state = { positions: [], links: [], advisories: [], riskByAgent: {} };
+  var angle = 0;
+
+  function resize() {
+    var r = canvas.parentElement.getBoundingClientRect();
+    var dpr = window.devicePixelRatio || 1;
+    canvas.width = Math.max(1, Math.floor(r.width * dpr));
+    canvas.height = Math.max(1, Math.floor(r.height * dpr));
+    ctx.setTransform(dpr, 0, 0, dpr, 0, 0);
+  }
+  window.addEventListener('resize', resize);
+
+  function riskColor(risk) {
+    if (risk >= 0.7) return '#ff7b72';
+    if (risk >= 0.35) return '#e3b341';
+    return '#3fb950';
+  }
+
+  // 3D to 2D: rotate around Y, simple perspective.
+  function project(p, w, h) {
+    var x = p[0], y = p[1] || 0, z = p[2] || 0;
+    var ca = Math.cos(angle), sa = Math.sin(angle);
+    var rx = x * ca - z * sa;
+    var rz = x * sa + z * ca;
+    var scale = 2.4 / (3.2 + rz); // perspective
+    return [w / 2 + rx * scale * (Math.min(w, h) * 0.32), h / 2 + y * scale * (Math.min(w, h) * 0.32), scale];
+  }
+
+  function draw() {
+    var w = canvas.clientWidth, h = canvas.clientHeight;
+    ctx.clearRect(0, 0, w, h);
+    var pos = {};
+    for (var i = 0; i < state.positions.length; i++) {
+      var a = state.positions[i];
+      pos[a.agentId] = project(a.position || [0, 0, 0], w, h);
+    }
+    // links first (under the points)
+    for (var l = 0; l < state.links.length; l++) {
+      var link = state.links[l];
+      if (link.risk < 0.2) continue;
+      var pa = pos[link.a], pb = pos[link.b];
+      if (!pa || !pb) continue;
+      ctx.strokeStyle = riskColor(link.risk);
+      ctx.globalAlpha = Math.min(1, 0.25 + link.risk * 0.7);
+      ctx.lineWidth = 1 + link.risk * 3;
+      ctx.beginPath(); ctx.moveTo(pa[0], pa[1]); ctx.lineTo(pb[0], pb[1]); ctx.stroke();
+    }
+    ctx.globalAlpha = 1;
+    // points
+    for (var k = 0; k < state.positions.length; k++) {
+      var ag = state.positions[k];
+      var p = pos[ag.agentId];
+      var radius = (6 + Math.sqrt(ag.fileCount || 1) * 3) * p[2];
+      ctx.fillStyle = riskColor(state.riskByAgent[ag.agentId] || 0);
+      ctx.beginPath(); ctx.arc(p[0], p[1], radius, 0, Math.PI * 2); ctx.fill();
+      ctx.fillStyle = '#c9d1d9';
+      ctx.font = '11px -apple-system, system-ui, sans-serif';
+      ctx.fillText(String(ag.agentId).slice(0, 18), p[0] + radius + 4, p[1] + 3);
+    }
+    angle += 0.0035;
+    requestAnimationFrame(draw);
+  }
+
+  function renderAdvisories() {
+    var box = document.getElementById('advisories');
+    box.textContent = '';
+    if (!state.advisories.length) {
+      var e = document.createElement('div'); e.className = 'empty';
+      e.textContent = 'No advisories - airspace clear.'; box.appendChild(e); return;
+    }
+    state.advisories.forEach(function (adv) {
+      var el = document.createElement('div');
+      el.className = 'adv ' + (adv.level === 'resolution' ? 'resolution' : 'advisory');
+      var lv = document.createElement('div'); lv.className = 'lv';
+      lv.textContent = Math.round(adv.risk * 100) + '% - ' + adv.level; el.appendChild(lv);
+      var who = document.createElement('div'); who.className = 'who';
+      who.textContent = (adv.aLabel || adv.a) + '  <->  ' + (adv.bLabel || adv.b); el.appendChild(who);
+      var act = document.createElement('div'); act.className = 'act';
+      act.textContent = adv.level === 'resolution'
+        ? (adv.steer + ' steers - ' + adv.hold + ' holds')
+        : 'both transmit intent';
+      el.appendChild(act);
+      box.appendChild(el);
+    });
+  }
+
+  function applySnapshot(prox) {
+    state.positions = prox.positions || [];
+    state.links = prox.links || [];
+    state.advisories = prox.advisories || [];
+    var risk = {};
+    state.links.forEach(function (l) {
+      risk[l.a] = Math.max(risk[l.a] || 0, l.risk);
+      risk[l.b] = Math.max(risk[l.b] || 0, l.risk);
+    });
+    state.riskByAgent = risk;
+    renderAdvisories();
+    var c = prox.counts || {};
+    document.getElementById('status').textContent =
+      (c.agents || 0) + ' agents - ' + (c.advisories || 0) + ' advisories - ' + (c.resolutions || 0) + ' steering';
+  }
+
+  function poll() {
+    fetch('/api/proximity').then(function (r) { return r.json(); }).then(function (data) {
+      applySnapshot(data && data.enabled ? data : (data || {}));
+    }).catch(function () {
+      document.getElementById('status').textContent = 'offline';
+    });
+  }
+
+  resize();
+  poll();
+  setInterval(poll, 5000);
+  requestAnimationFrame(draw);
+})();
+</script>
+</body>
+</html>`;
+}
+
+module.exports = { renderProximityVizHtml };
@@ -8,6 +8,7 @@ const { spawn } = require('child_process');
 const { buildControlPaneAction } = require('./actions');
 const { buildControlPaneSnapshot, resolveControlPaneConfig } = require('./state');
 const { renderControlPaneHtml } = require('./ui');
+const { renderProximityVizHtml } = require('./proximity-viz');
 const { claimWorkItem, moveWorkItem } = require('./work-item-mutations');

 // Run a single write against the local work-item store, then close it. Kept
@@ -265,6 +266,25 @@ function createControlPaneServer(options = {}) {
        return;
      }

+      // 3D agent-airspace visualization (Layer 4 observability).
+      if (req.method === 'GET' && requestUrl.pathname === '/proximity') {
+        sendText(res, 200, renderProximityVizHtml(), 'text/html; charset=utf-8');
+        return;
+      }
+
+      if (req.method === 'GET' && requestUrl.pathname === '/api/proximity') {
+        const snapshot = await buildControlPaneSnapshot({
+          repoRoot,
+          dbPath: resolvedConfig.dbPath,
+          stateDbPath: resolvedConfig.stateDbPath,
+          config: resolvedConfig,
+          allowActions,
+          includeProximity: true
+        });
+        sendJson(res, 200, snapshot.proximity || { enabled: true, advisories: [], positions: [], links: [], counts: {} });
+        return;
+      }
+
      const actionMatch = requestUrl.pathname.match(/^\/api\/actions\/([^/]+)$/);
      if (req.method === 'POST' && actionMatch) {
        if (!allowActions) {
@@ -226,6 +226,49 @@ async function runTests() {
    passed++;
  else failed++;

+  if (
+    await test('serves the 3D agent-airspace page and the proximity JSON feed', async () => {
+      const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'ecc-control-pane-proximity-'));
+      const dbPath = path.join(tempDir, 'ecc2.db');
+
+      try {
+        await writeMinimalDatabase(dbPath);
+        const app = await createControlPaneServer({
+          host: '127.0.0.1',
+          port: 0,
+          dbPath,
+          repoRoot: REPO_ROOT,
+          allowActions: false
+        });
+
+        await app.listen();
+        try {
+          // The Enterprise/Pro 3D observability view: a self-contained HTML page.
+          const page = await fetchLocal(`${app.url}/proximity`);
+          assert.strictEqual(page.status, 200);
+          assert.ok((page.headers.get('content-type') || '').includes('text/html'));
+          const html = await page.text();
+          assert.ok(html.includes('Agent Airspace'), 'page is titled Agent Airspace');
+          assert.ok(html.includes('<canvas'), 'page renders a canvas');
+          assert.ok(html.includes('/api/proximity'), 'page polls the proximity feed');
+
+          // The feed the page polls: shape must carry the airspace arrays.
+          const prox = await fetchLocal(`${app.url}/api/proximity`).then(r => r.json());
+          assert.ok(Array.isArray(prox.positions), 'positions array present');
+          assert.ok(Array.isArray(prox.links), 'links array present');
+          assert.ok(Array.isArray(prox.advisories), 'advisories array present');
+          assert.ok(prox.counts && typeof prox.counts === 'object', 'counts present');
+        } finally {
+          await app.close();
+        }
+      } finally {
+        fs.rmSync(tempDir, { recursive: true, force: true });
+      }
+    })
+  )
+    passed++;
+  else failed++;
+
  if (
    await test('serves health, asset, not-found, invalid body, and read-only action responses', async () => {
      const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'ecc-control-pane-routes-'));