String(s ?? '').replace(/[&<>"']/g, (c) => ({
+ '&': '&', '<': '<', '>': '>', '"': '"', "'": ''',
+}[c]));
+
+function filters() {
+ return {
+ q: document.getElementById('f-q').value.trim(),
+ customerId: document.getElementById('f-customer').value,
+ minBounty: document.getElementById('f-min').value || '0',
+ sort: document.getElementById('f-sort').value,
+ };
+}
+
+async function load() {
+ try {
+ const f = filters();
+ const qs = new URLSearchParams(f).toString();
+ const res = await api('GET', '/api/v1/board?' + qs);
+ tasks = res.tasks;
+ const sel = document.getElementById('f-customer');
+ if (sel.options.length === 1) {
+ res.customers.forEach((c) => sel.add(new Option(c.name, c.id)));
+ }
+ render();
+ } catch (e) { errorBox.textContent = e.message; }
+}
+
+function ageBadge(t) {
+ if (!t.publishedAt) return '';
+ const days = (Date.now() - new Date(t.publishedAt).getTime()) / 86400000;
+ if (days > 14) return '14d+';
+ if (days > 7) return '7d+';
+ return '';
+}
+
+function render() {
+ grid.replaceChildren(...tasks.map(renderCard));
+ if (!tasks.length) {
+ grid.innerHTML = 'No published tasks right now. Consultants add you to their pool to share work here.
';
+ }
+}
+
+function renderCard(t) {
+ const card = document.createElement('div');
+ card.className = 'card';
+ const myClaim = (t.claimRequests || []).some((c) => c.developerId === meId);
+ const others = (t.claimRequests || []).filter((c) => c.developerId !== meId).length;
+ card.innerHTML = `
+
+ ◈ ${t.bounty}
+ ${ageBadge(t)}
+
+
+ ${esc((t.description || '').slice(0, 180))}
+ ${(t.acceptanceCriteria || []).length} acceptance criteria
+
+
+ ${myClaim ? 'requested by you' : ''}
+ ${others ? `${others} other request(s)` : ''}
+
+ ${myClaim
+ ? ''
+ : ''}
+
`;
+ const claimBtn = card.querySelector('[data-act=claim]');
+ if (claimBtn) claimBtn.addEventListener('click', () => openClaim(t));
+ const wBtn = card.querySelector('[data-act=withdraw]');
+ if (wBtn) {
+ wBtn.addEventListener('click', async () => {
+ try { await api('POST', `/api/v1/tasks/${t.id}/claim/withdraw`, {}); load(); }
+ catch (e) { toast(e.message, 'err'); }
+ });
+ }
+ return card;
+}
+
+const dlg = document.getElementById('claim-dialog');
+let claimTask = null;
+function openClaim(t) {
+ claimTask = t;
+ document.getElementById('claim-task-title').textContent = `${t.title} — bounty ${t.bounty}`;
+ dlg.showModal();
+}
+document.getElementById('claim-cancel').addEventListener('click', () => dlg.close());
+document.getElementById('claim-form').addEventListener('submit', async (e) => {
+ e.preventDefault();
+ try {
+ await api('POST', `/api/v1/tasks/${claimTask.id}/claim`, {
+ note: document.getElementById('claim-note').value.trim(),
+ });
+ dlg.close();
+ document.getElementById('claim-note').value = '';
+ toast('Assignment requested — the consultant will review it.', 'ok');
+ load();
+ } catch (err) { toast(err.message, 'err'); }
+});
+
+// saved filters (§11.8)
+document.getElementById('f-save').addEventListener('click', async () => {
+ try {
+ const me = await api('GET', '/api/v1/auth/me');
+ const extra = me.user.extra || {};
+ extra.savedBoardFilters = JSON.stringify(filters());
+ await api('PATCH', '/api/v1/profile', { extra });
+ toast('Filters saved as your default.', 'ok');
+ } catch (e) { toast(e.message, 'err'); }
+});
+
+async function restoreFilters() {
+ try {
+ const me = await api('GET', '/api/v1/auth/me');
+ meId = me.user.id;
+ const saved = me.user.extra && me.user.extra.savedBoardFilters;
+ if (saved) {
+ const f = JSON.parse(saved);
+ document.getElementById('f-q').value = f.q || '';
+ document.getElementById('f-min').value = f.minBounty > 0 ? f.minBounty : '';
+ document.getElementById('f-sort').value = f.sort || '';
+ }
+ } catch (e) { /* anonymous — page guard handles it */ }
+}
+
+let timer = null;
+['f-q', 'f-min'].forEach((id) => {
+ document.getElementById(id).addEventListener('input', () => {
+ clearTimeout(timer);
+ timer = setTimeout(load, 300);
+ });
+});
+['f-customer', 'f-sort'].forEach((id) => {
+ document.getElementById(id).addEventListener('change', load);
+});
+
+subscribe('board', () => { clearTimeout(timer); timer = setTimeout(load, 400); });
+onPollFallback(load);
+restoreFilters().then(load);
diff --git a/web/static/js/my-tasks.js b/web/static/js/my-tasks.js
new file mode 100644
index 0000000..b28f0c0
--- /dev/null
+++ b/web/static/js/my-tasks.js
@@ -0,0 +1,54 @@
+import { api, toast } from '/static/js/api.js';
+import { subscribe, onPollFallback } from '/static/js/ws.js';
+
+const errorBox = document.getElementById('error');
+const esc = (s) => String(s ?? '').replace(/[&<>"']/g, (c) => ({
+ '&': '&', '<': '<', '>': '>', '"': '"', "'": ''',
+}[c]));
+
+// changes_requested renders in the In-progress column with a badge
+const colFor = (s) => (s === 'changes_requested' ? 'in_progress' : s);
+
+async function load() {
+ try {
+ const res = await api('GET', '/api/v1/my-tasks');
+ document.querySelectorAll('.kanban-col .stack').forEach((el) => el.replaceChildren());
+ res.tasks.forEach((t) => {
+ const col = document.querySelector(`[data-col="${colFor(t.status)}"] .stack`);
+ if (col) col.appendChild(card(t));
+ });
+ } catch (e) { errorBox.textContent = e.message; }
+}
+
+function card(t) {
+ const el = document.createElement('div');
+ el.className = 'card';
+ el.style.padding = '12px';
+ const badges = [];
+ if (t.status === 'changes_requested') badges.push('changes requested');
+ el.innerHTML = `
+ ${esc(t.title)} ${badges.join(' ')}
+
+ ◈ ${t.bounty}
+
+
`;
+ const actions = el.querySelector('[data-actions]');
+ const act = (label, path, primary) => {
+ const b = document.createElement('button');
+ b.className = 'btn small' + (primary ? ' primary' : '');
+ b.textContent = label;
+ b.addEventListener('click', async () => {
+ try { await api('POST', `/api/v1/tasks/${t.id}/${path}`, {}); load(); }
+ catch (e) { toast(e.message, 'err'); }
+ });
+ actions.appendChild(b);
+ };
+ if (t.status === 'assigned' || t.status === 'changes_requested') act('Start', 'start', true);
+ if (t.status === 'in_progress') act('Submit for review', 'submit-review', true);
+ if (['assigned', 'in_progress'].includes(t.status)) act('Abandon', 'abandon');
+ return el;
+}
+
+subscribe('board', () => setTimeout(load, 300));
+onPollFallback(load);
+load();
diff --git a/web/static/js/notifications-page.js b/web/static/js/notifications-page.js
new file mode 100644
index 0000000..c7d1404
--- /dev/null
+++ b/web/static/js/notifications-page.js
@@ -0,0 +1,41 @@
+import { api, toast } from '/static/js/api.js';
+
+const host = document.getElementById('notification-page-list');
+const errorBox = document.getElementById('error');
+let cursor = '';
+
+const esc = (s) => String(s ?? '').replace(/[&<>"']/g, (c) => ({
+ '&': '&', '<': '<', '>': '>', '"': '"', "'": ''',
+}[c]));
+
+async function load(reset) {
+ try {
+ if (reset) { cursor = ''; host.replaceChildren(); }
+ const res = await api('GET', `/api/v1/notifications?limit=30&cursor=${cursor}`);
+ const items = res.notifications;
+ cursor = items.length ? items[items.length - 1].id : cursor;
+ host.append(...items.map((n) => {
+ const div = document.createElement('div');
+ div.className = 'card';
+ div.style.padding = '12px';
+ div.innerHTML = `
+
+
${esc(n.title)}
+
${new Date(n.createdAt).toLocaleString()} ${n.readAt ? '' : '· new'}
+
${esc(n.body)}
` : ''}`;
+ return div;
+ }));
+ document.getElementById('notif-more').hidden = items.length < 30;
+ } catch (e) { errorBox.textContent = e.message; }
+}
+
+document.getElementById('mark-all').addEventListener('click', async () => {
+ try {
+ await api('POST', '/api/v1/notifications/read', { ids: [] });
+ toast('All notifications marked read.', 'ok');
+ load(true);
+ } catch (e) { toast(e.message, 'err'); }
+});
+document.getElementById('notif-more').addEventListener('click', () => load(false));
+load(true);
diff --git a/web/static/js/notifications.js b/web/static/js/notifications.js
new file mode 100644
index 0000000..1ec428f
--- /dev/null
+++ b/web/static/js/notifications.js
@@ -0,0 +1,55 @@
+// Global notifications: bell with unread badge, dropdown, and WS toasts for
+// every lifecycle transition (§11.1).
+import { api, toast } from '/static/js/api.js';
+import { subscribe, onPollFallback } from '/static/js/ws.js';
+
+if (document.body.dataset.loggedIn === '1') {
+ const bell = document.getElementById('nav-bell');
+ const badge = document.getElementById('nav-bell-count');
+ const panel = document.getElementById('notif-panel');
+ const list = document.getElementById('notif-list');
+
+ const esc = (s) => String(s ?? '').replace(/[&<>"']/g, (c) => ({
+ '&': '&', '<': '<', '>': '>', '"': '"', "'": ''',
+ }[c]));
+
+ async function refresh() {
+ try {
+ const res = await api('GET', '/api/v1/notifications?limit=15');
+ badge.textContent = res.unread > 0 ? String(res.unread) : '';
+ badge.hidden = res.unread === 0;
+ list.replaceChildren(...res.notifications.map((n) => {
+ const li = document.createElement('li');
+ li.innerHTML = `
+ ${esc(n.title)}${n.readAt ? '' : ' new'}
+ ${esc(n.body || '')}`;
+ return li;
+ }));
+ if (!res.notifications.length) {
+ list.innerHTML = 'No notifications.';
+ }
+ } catch (e) { /* signed out or transient */ }
+ }
+
+ bell.addEventListener('click', async () => {
+ panel.hidden = !panel.hidden;
+ if (!panel.hidden) {
+ await refresh();
+ try { await api('POST', '/api/v1/notifications/read', { ids: [] }); } catch (e) { /* ignore */ }
+ badge.hidden = true;
+ badge.textContent = '';
+ }
+ });
+ document.addEventListener('click', (e) => {
+ if (!panel.hidden && !panel.contains(e.target) && e.target !== bell) panel.hidden = true;
+ });
+
+ subscribe('notifications', (event, n) => {
+ if (event === 'notification' && n) {
+ toast(n.title, 'ok');
+ refresh();
+ }
+ });
+ onPollFallback(refresh);
+ refresh();
+}
diff --git a/web/static/js/pool.js b/web/static/js/pool.js
new file mode 100644
index 0000000..886b749
--- /dev/null
+++ b/web/static/js/pool.js
@@ -0,0 +1,56 @@
+import { api, toast } from '/static/js/api.js';
+
+const errorBox = document.getElementById('error');
+let developers = [];
+
+async function load() {
+ try {
+ const res = await api('GET', '/api/v1/consultant/pool');
+ developers = res.developers;
+ render();
+ } catch (e) { errorBox.textContent = e.message; }
+}
+
+function render() {
+ const filter = document.getElementById('pool-search').value.trim().toLowerCase();
+ const tbody = document.querySelector('#pool-table tbody');
+ tbody.replaceChildren(...developers
+ .filter((d) => !filter || d.name.toLowerCase().includes(filter) || d.email.toLowerCase().includes(filter))
+ .map((d) => {
+ const tr = document.createElement('tr');
+ const avatar = document.createElement('td');
+ if (d.avatarFileId) {
+ const img = document.createElement('img');
+ img.className = 'avatar';
+ img.src = `/files/${d.avatarFileId}`;
+ img.alt = '';
+ avatar.appendChild(img);
+ }
+ const name = document.createElement('td');
+ name.textContent = d.name;
+ name.dataset.userCard = d.id;
+ const email = document.createElement('td');
+ email.textContent = d.email;
+ const bio = document.createElement('td');
+ bio.textContent = (d.bio || '').slice(0, 80);
+ bio.className = 'muted';
+ const action = document.createElement('td');
+ const btn = document.createElement('button');
+ btn.className = d.inPool ? 'btn small' : 'btn small primary';
+ btn.textContent = d.inPool ? 'Remove from pool' : 'Add to pool';
+ btn.addEventListener('click', async () => {
+ try {
+ if (d.inPool) await api('DELETE', `/api/v1/consultant/pool/${d.id}`);
+ else await api('POST', '/api/v1/consultant/pool', { developerId: d.id });
+ d.inPool = !d.inPool;
+ render();
+ } catch (e) { toast(e.message, 'err'); }
+ });
+ action.appendChild(btn);
+ tr.append(avatar, name, email, bio, action);
+ return tr;
+ }));
+}
+
+document.getElementById('pool-search').addEventListener('input', render);
+load();
diff --git a/web/static/js/reviews.js b/web/static/js/reviews.js
new file mode 100644
index 0000000..41f063d
--- /dev/null
+++ b/web/static/js/reviews.js
@@ -0,0 +1,36 @@
+import { api } from '/static/js/api.js';
+import { subscribe, onPollFallback } from '/static/js/ws.js';
+
+const host = document.getElementById('review-list');
+const errorBox = document.getElementById('error');
+const esc = (s) => String(s ?? '').replace(/[&<>"']/g, (c) => ({
+ '&': '&', '<': '<', '>': '>', '"': '"', "'": ''',
+}[c]));
+
+async function load() {
+ try {
+ const res = await api('GET', '/api/v1/consultant/reviews');
+ host.replaceChildren(...res.tasks.map((t) => {
+ const card = document.createElement('div');
+ card.className = 'card';
+ const who = t.assignee
+ ? (t.assignee.kind === 'ai' ? 'AI work performer' : 'developer')
+ : 'unknown';
+ card.innerHTML = `
+
+ submitted by ${who} · updated ${new Date(t.updatedAt).toLocaleString()}
+ Open review`;
+ return card;
+ }));
+ if (!res.tasks.length) {
+ host.innerHTML = 'Nothing waiting for review. 🎉
';
+ }
+ } catch (e) { errorBox.textContent = e.message; }
+}
+
+subscribe('board', () => setTimeout(load, 300));
+onPollFallback(load);
+load();
diff --git a/web/static/js/task.js b/web/static/js/task.js
new file mode 100644
index 0000000..dc1e306
--- /dev/null
+++ b/web/static/js/task.js
@@ -0,0 +1,258 @@
+import { api, toast } from '/static/js/api.js';
+import { subscribe } from '/static/js/ws.js';
+
+const root = document.getElementById('task-root');
+const errorBox = document.getElementById('error');
+const taskId = root.dataset.taskId;
+const meId = root.dataset.userId;
+const isConsultant = root.dataset.isConsultant === '1' || root.dataset.isAdmin === '1';
+
+let task = null;
+const userCache = new Map();
+
+const esc = (s) => String(s ?? '').replace(/[&<>"']/g, (c) => ({
+ '&': '&', '<': '<', '>': '>', '"': '"', "'": ''',
+}[c]));
+
+async function userName(id) {
+ if (!id || id.startsWith('system')) return id || 'system';
+ if (!userCache.has(id)) {
+ try {
+ const res = await api('GET', `/api/v1/users/${id}/card`);
+ userCache.set(id, res.card.name);
+ } catch (e) { userCache.set(id, id.slice(0, 8)); }
+ }
+ return userCache.get(id);
+}
+
+async function load() {
+ try {
+ const res = await api('GET', `/api/v1/tasks/${taskId}`);
+ task = res.task;
+ await render();
+ } catch (e) {
+ errorBox.textContent = e.message;
+ root.innerHTML = '';
+ }
+}
+
+const mine = () => task.assignee && task.assignee.kind === 'human' && task.assignee.userId === meId;
+const myClaim = () => (task.claimRequests || []).some((c) => c.developerId === meId);
+
+async function render() {
+ const t = task;
+ const assigneeName = t.assignee
+ ? (t.assignee.kind === 'ai' ? `AI (job ${esc(t.assignee.jobId || '')})` : esc(await userName(t.assignee.userId)))
+ : '—';
+ const orphan = t.external && t.external.orphaned
+ ? 'orphaned upstream' : '';
+
+ const claims = await Promise.all((t.claimRequests || []).map(async (c) => `
+ ${esc(await userName(c.developerId))}${c.note ? ' — ' + esc(c.note) : ''}
+ ${isConsultant ? `
+
+ ` : ''}
+ `));
+
+ const comments = await Promise.all((t.comments || []).map(async (c) => `
+
+
${esc(await userName(c.authorId))} · ${new Date(c.at).toLocaleString()}
+
${c.body}
+
| ${new Date(e.at).toLocaleString()} |
+ ${esc(await userName(e.actorId))} |
+ ${esc(e.event)}${e.data && e.data.note ? ' — ' + esc(e.data.note) : ''} |
`));
+
+ const timeRows = (t.timeLog || []).map((e) =>
+ `| ${new Date(e.at).toLocaleString()} | ${e.minutes} min | ${esc(e.note)} |
`).join('');
+ const totalMin = (t.timeLog || []).reduce((a, e) => a + e.minutes, 0);
+
+ root.innerHTML = `
+
+
${esc(t.title)}
+ ◈ ${t.bounty}
+
+
+ ${esc(t.status)} ${orphan}
+ ${t.external ? `· ${esc(t.external.key)} ↗` : ''}
+ · assignee: ${assigneeName}
+ ${totalMin ? `· time logged: ${Math.floor(totalMin / 60)}h ${totalMin % 60}m` : ''}
+
+
+
+
Description
+
${esc(t.description)}
+ ${(t.acceptanceCriteria || []).length ? `
+
Acceptance criteria
+
${t.acceptanceCriteria.map((c) => `- ${esc(c)}
`).join('')}
` : ''}
+ ${(t.attachments || []).length ? `
+
Attachments
+
` : ''}
+ ${(t.links || []).length ? `
+
Links
+
` : ''}
+
+
Comments
+
${comments.join('') || '
No comments yet.
'}
+
+
+
Log time
+
+ ${timeRows ? `
` : ''}
+
+
Timeline
+
| When | Who | Event |
|---|
+ ${timeline.join('')}
+
' + esc(body).replace(/\n/g, '
') + '
' });
+ load();
+ } catch (err) { toast(err.message, 'err'); }
+ });
+ const timeForm = document.getElementById('time-form');
+ if (timeForm) {
+ timeForm.addEventListener('submit', async (e) => {
+ e.preventDefault();
+ try {
+ await api('POST', `/api/v1/tasks/${taskId}/time`, {
+ minutes: parseInt(document.getElementById('time-minutes').value, 10),
+ note: document.getElementById('time-note').value.trim(),
+ });
+ load();
+ } catch (err) { toast(err.message, 'err'); }
+ });
+ }
+}
+
+// ---- review dialog with per-AC checklist (§11.18) ----
+const reviewDlg = document.getElementById('review-dialog');
+function openReview() {
+ const host = document.getElementById('review-checklist');
+ host.replaceChildren(...(task.acceptanceCriteria || []).map((c, i) => {
+ const div = document.createElement('div');
+ div.innerHTML = ``;
+ return div;
+ }));
+ reviewDlg.showModal();
+}
+document.getElementById('review-cancel').addEventListener('click', () => reviewDlg.close());
+
+async function submitReview(decision) {
+ const checklist = [...document.querySelectorAll('[data-ac]')].map((cb, i) => ({
+ criterion: task.acceptanceCriteria[i], ok: cb.checked,
+ }));
+ try {
+ await api('POST', `/api/v1/tasks/${taskId}/review`, {
+ decision, note: document.getElementById('review-note').value.trim(), checklist,
+ });
+ reviewDlg.close();
+ toast(decision === 'approve' ? 'Approved — bounty awarded.' : 'Changes requested.', 'ok');
+ load();
+ } catch (e) { toast(e.message, 'err'); }
+}
+document.getElementById('review-approve').addEventListener('click', () => submitReview('approve'));
+document.getElementById('review-changes').addEventListener('click', () => submitReview('request_changes'));
+
+// ---- AI dialog ----
+const aiDlg = document.getElementById('ai-dialog');
+document.getElementById('ai-cancel').addEventListener('click', () => aiDlg.close());
+document.getElementById('ai-form').addEventListener('submit', async (e) => {
+ e.preventDefault();
+ try {
+ await api('POST', `/api/v1/tasks/${taskId}/assign-ai`, {
+ context: {
+ repositoryUrl: document.getElementById('ai-repo').value.trim(),
+ branch: document.getElementById('ai-branch').value.trim(),
+ instructions: document.getElementById('ai-instructions').value.trim(),
+ },
+ });
+ aiDlg.close();
+ toast('AI job created — the result will arrive for review.', 'ok');
+ load();
+ } catch (err) { toast(err.message, 'err'); }
+});
+
+subscribe('board', (event, data) => {
+ if (data && data.taskId === taskId) setTimeout(load, 200);
+});
+load();
diff --git a/web/templates/board.html b/web/templates/board.html
new file mode 100644
index 0000000..a238764
--- /dev/null
+++ b/web/templates/board.html
@@ -0,0 +1,46 @@
+{{define "content"}}
+Bounty Board
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+