Expose canonical Evidence, cockpit queues, and Target inventory

[justsml]

Parent

#97

Type: AFK

What to build

Give the operator one canonical project workflow to inspect Artifacts, Findings, blockers, validation state, approvals, tool failures, and Target inventory. Chat and Render JSON remain projections rather than owners of this state.

Acceptance criteria

• Artifact rows open a bounded redacted preview with checksum, size, indexing, custody, and explicit raw/download actions.
• The dashboard renders canonical findings, blockers, validation plans, pending approvals, and tool failures without collapsing them into one signal.
• Targets have a first-class inventory API and UI with stable IDs, locators, relationships, authorization state, and scope.
• Every record links to its canonical detail and raw diagnostics where relevant.
• Reconnect and reload reconstruct the same operator view from durable records.

Blocked by

None - can start immediately

[justsml]

This was generated by AI during triage.

Progress pushed to PR #160 in eb9240d11. The durable target inventory now renders in the workspace cockpit instead of remaining API-only. Operators can inspect stable target IDs, kinds, bounded locators, network profiles, safe scalar scope summaries, relationships, and distinct authorized/denied/expired/revoked/consumed/pending/unrecorded states. Inventory-only projects leave compact-empty mode, and no client-side mutation or duplicate authorization state was added.

The public integration seam now also proves project-scoped targets remain visible in a thread cockpit, unrelated-thread targets are excluded, reload reconstructs the same records, and authorized, denied, expired, and unrecorded states remain distinct. Focused cockpit/inventory tests pass (2/2), a fresh typecheck passes, and git diff --check passes.

Leaving #112 open: bounded Artifact detail/preview and the remaining canonical cockpit queues are still outstanding.

[justsml]

This was generated by AI during triage.

Progress on #112 is now pushed to PR #160 in two reviewable commits:

• eb9240d11 renders the canonical target inventory in the research cockpit.
• c3bfbad14 adds the project-scoped Artifact detail API with bounded redacted previews, custody/checksum/indexing metadata, and safe binary/unavailable states.

Verification: 4 focused integration files / 16 tests passed, full typecheck passed, and diff checks passed.

The issue remains open for the remaining canonical cockpit queues.

[justsml]

This was generated by AI during triage.

Progress on #112 is pushed to PR #160 in commit 565a3b2cb.

The workspace now renders the canonical durable queues already returned by the cockpit service: active blockers, pending approvals, validation plans, recent findings, and tool failures. Recorded next actions remain read-only labels, and full tool-failure diagnostics remain available behind an explicit reveal path. A project with only canonical queue records no longer collapses to an empty dashboard after reload.

Verification: typecheck passed; the focused cockpit and target-inventory integration files passed (2/2); diff checks passed.

The ticket remains open for review and any remaining canonical detail/navigation links. PR #160 now covers the bounded Artifact preview, Target inventory, and distinct read-only cockpit queue slices without claiming that stable IDs are a substitute for every record's canonical detail route.

[justsml]

PR #160 has been marked draft and parked after council triage. The branch is 391 commits behind main and overlaps newer Artifact work. The issue remains open because bounded verified preview, audited raw/download actions, actionable canonical queues, forensic Tool Run detail, complete Target scope navigation, pagination, and rendered reload reconstruction are not yet implemented. See the latest PR comment for the full blocker ledger.

[justsml]

Council addendum after the parking review:

• P0 durability blocker: the cockpit's canonical blocker queue currently reads the default blocker service, but that default repository is process-local. Restarting the app loses blockers, so reload/reconnect cannot reconstruct the promised durable operator view.
• P2 freshness gap: target and authorization mutations do not publish a project-change event, so the live target inventory can remain stale until reload or an unrelated event.

These reinforce the existing draft/parked decision for PR #160. The ticket remains open.