feat(ui): rebuild the logged-in shell, chat pane, dashboard widgets and sign-in

THIRD_PARTY_NOTICES

@@ -103,8 +103,8 @@ COMPONENT INVENTORY
 - npm: @floating-ui/react 0.27.20 (declared license: MIT)
 - npm: @floating-ui/react-dom 2.1.9 (declared license: MIT)
 - npm: @floating-ui/utils 0.2.12 (declared license: MIT)
-- npm: @fontsource/ibm-plex-mono 5.3.0 (declared license: OFL-1.1)
-- npm: @fontsource/ibm-plex-sans 5.3.0 (declared license: OFL-1.1)
+- npm: @fontsource-variable/geist 5.3.0 (declared license: OFL-1.1)
+- npm: @fontsource-variable/geist-mono 5.3.0 (declared license: OFL-1.1)
 - npm: @hono/node-server 1.19.15 (declared license: MIT)
 - npm: @mantine/core 9.5.2 (declared license: MIT)
 - npm: @mantine/hooks 9.5.2 (declared license: MIT)
@@ -4295,10 +4295,10 @@ IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
 CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 --- Applies to -------------------------------------------------------------
-- npm: @fontsource/ibm-plex-mono 5.3.0 / LICENSE
+- npm: @fontsource-variable/geist 5.3.0 / LICENSE
 ----------------------------------------------------------------------------
 
-Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-ThinItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-ExtraLight.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-ExtraLightItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Light.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-LightItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Regular.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Italic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Medium.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-MediumItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-SemiBold.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-SemiBoldItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Bold.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-BoldItalic.ttf: Copyright 2017 IBM Corp. All rights reserved.
+Copyright 2024 The Geist Project Authors (https://github.com/vercel/geist-font) Geist-Italic[wght].ttf: Copyright 2024 The Geist Project Authors (https://github.com/vercel/geist-font)
 
 This Font Software is licensed under the SIL Open Font License, Version 1.1.
 This license is copied below, and is also available with a FAQ at:
@@ -4393,10 +4393,10 @@ FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
 OTHER DEALINGS IN THE FONT SOFTWARE.
 
 --- Applies to -------------------------------------------------------------
-- npm: @fontsource/ibm-plex-sans 5.3.0 / LICENSE
+- npm: @fontsource-variable/geist-mono 5.3.0 / LICENSE
 ----------------------------------------------------------------------------
 
-Copyright 2019 IBM Corp. All rights reserved. IBMPlexSans-Italic[wdth,wght].ttf: Copyright 2019 IBM Corp. All rights reserved.
+Copyright 2024 The Geist Project Authors (https://github.com/vercel/geist-font.git) GeistMono-Italic[wght].ttf: Copyright 2024 The Geist Project Authors (https://github.com/vercel/geist-font.git)
 
 This Font Software is licensed under the SIL Open Font License, Version 1.1.
 This license is copied below, and is also available with a FAQ at:

internal/agent/runtime.go

@@ -23,7 +23,7 @@ import (
 	appid "github.com/labstack/fanout/internal/id"
 )
 
-const systemPrompt = `You are Fanout's observability assistant. Use observability_overview first for broad health questions, intelligence_snapshot for the latest precomputed anomalies and recurring log patterns, service_topology for dependencies, service_performance for activity/latency/endpoints/comparisons, trace_detail for trace or root-cause inspection, and search_logs for log questions. Treat structured outputs as authoritative. You can also list, inspect, create, and update the user's named dashboards. When asked to create a dashboard, compose a useful complete layout using overview, topology, activity, performance, trace, logs, and assistant widgets; use unique stable widget IDs, valid non-overlapping 12-column positions, and the requested time window. Creating is additive. Only update an existing dashboard after the user explicitly asks to change or replace it; inspect it first and preserve unrelated views. State the time window you used, distinguish missing data from healthy behavior, and never invent services, metrics, or causal claims. Keep answers concise because attached views provide interactive details. Never expose implementation details to the user: do not mention protocol names, tool names, schemas, query IDs, data-source names, storage engines, providers, or internal execution steps. Refer to attached interactive content simply as a view.`
+const systemPrompt = `You are Fanout's observability assistant. When a view is attached to your reply it is the picture: never draw diagrams, trees, or charts in text, never use code fences to draw boxes, arrows, or trees, and never add a table or list that restates what an attached view already shows; your prose adds only what the view omits. Use observability_overview first for broad health questions, intelligence_snapshot for the latest precomputed anomalies and recurring log patterns, service_topology for dependencies, service_performance for activity/latency/endpoints/comparisons, trace_detail for trace or root-cause inspection, and search_logs for log questions. Treat structured outputs as authoritative. You can also list, inspect, create, and update the user's named dashboards. When asked to create a dashboard, compose a useful complete layout using overview, topology, activity, performance, trace, logs, and assistant widgets; use unique stable widget IDs, valid non-overlapping 12-column positions, and the requested time window. Creating is additive. Only update an existing dashboard after the user explicitly asks to change or replace it; inspect it first and preserve unrelated views. State the time window you used, distinguish missing data from healthy behavior, and never invent services, metrics, or causal claims. Keep answers concise because attached views provide interactive details. Never expose implementation details to the user: do not mention protocol names, tool names, schemas, query IDs, data-source names, storage engines, providers, or internal execution steps. Refer to attached interactive content simply as a view.`
 
 // Error categories used to pick a client-safe RUN_ERROR message; the raw
 // error (which can include provider response bodies) stays server-side.

internal/agent/runtime_test.go

@@ -287,3 +287,14 @@ func TestRuntimeSurfacesTokenLimitTruncation(t *testing.T) {
 		t.Fatalf("assistant message missing truncation notice: %#v", messages)
 	}
 }
+
+func TestSystemPromptForbidsTextDiagrams(t *testing.T) {
+	for _, want := range []string{
+		"never draw diagrams, trees, or charts in text",
+		"never add a table or list that restates what an attached view already shows",
+	} {
+		if !strings.Contains(systemPrompt, want) {
+			t.Fatalf("system prompt is missing %q", want)
+		}
+	}
+}

internal/dashboard/service.go

@@ -108,11 +108,15 @@ func DefaultState() State {
 			{ID: "activity", Type: "activity", Title: "Recent activity", Enabled: true},
 			{ID: "assistant", Type: "assistant", Title: "Ask Fanout", Enabled: true},
 		},
+		// Sizes mirror widgetDefaults in ui/host/src/dashboard-layout.ts: a card
+		// gets the shape its content fills. The old default gave Ask Fanout the
+		// full twelve columns for three chips and left the health card with a
+		// blank band under it.
 		Layout: []Layout{
-			{I: "health", X: 0, Y: 0, W: 4, H: 3, MinW: 3, MinH: 2},
-			{I: "topology", X: 4, Y: 0, W: 8, H: 6, MinW: 4, MinH: 4},
-			{I: "activity", X: 0, Y: 3, W: 4, H: 3, MinW: 3, MinH: 2},
-			{I: "assistant", X: 0, Y: 6, W: 12, H: 3, MinW: 4, MinH: 2},
+			{I: "health", X: 0, Y: 0, W: 4, H: 3, MinW: 3, MinH: 3},
+			{I: "topology", X: 4, Y: 0, W: 8, H: 5, MinW: 4, MinH: 4},
+			{I: "activity", X: 0, Y: 3, W: 4, H: 5, MinW: 3, MinH: 4},
+			{I: "assistant", X: 4, Y: 5, W: 4, H: 3, MinW: 3, MinH: 3},
 		},
 		Filters: Filters{Window: "1h"},
 	}

internal/dashboard/service_test.go

@@ -3,6 +3,7 @@ package dashboard
 import (
 	"context"
 	"errors"
+	"reflect"
 	"testing"
 
 	appid "github.com/labstack/fanout/internal/id"
@@ -150,6 +151,38 @@ func TestServiceMigratesLegacyCanvasOnFirstRead(t *testing.T) {
 	assertDashboardUUIDv7s(t, item)
 }
 
+func TestDefaultStateMatchesTheClientWidgetSizes(t *testing.T) {
+	state := DefaultState()
+	want := []Layout{
+		{I: "health", X: 0, Y: 0, W: 4, H: 3, MinW: 3, MinH: 3},
+		{I: "topology", X: 4, Y: 0, W: 8, H: 5, MinW: 4, MinH: 4},
+		{I: "activity", X: 0, Y: 3, W: 4, H: 5, MinW: 3, MinH: 4},
+		{I: "assistant", X: 4, Y: 5, W: 4, H: 3, MinW: 3, MinH: 3},
+	}
+	if !reflect.DeepEqual(state.Layout, want) {
+		t.Fatalf("default layout = %#v, want %#v", state.Layout, want)
+	}
+	overlaps := func(a, b Layout) bool {
+		return a.X < b.X+b.W && b.X < a.X+a.W && a.Y < b.Y+b.H && b.Y < a.Y+a.H
+	}
+	for i := range state.Layout {
+		for j := i + 1; j < len(state.Layout); j++ {
+			if overlaps(state.Layout[i], state.Layout[j]) {
+				t.Errorf("%q overlaps %q", state.Layout[i].I, state.Layout[j].I)
+			}
+		}
+	}
+	// Validate wants UUIDv7 widget ids, which the default state is given when
+	// it is created for an owner; everything else it checks holds as written.
+	normalized, err := normalizeStateIDs(state)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if err := Validate("System overview", "", normalized); err != nil {
+		t.Fatalf("default state does not validate: %v", err)
+	}
+}
+
 func TestValidateRejectsInvalidStates(t *testing.T) {
 	newID := func() string {
 		t.Helper()

internal/observability/contracts.go

@@ -116,7 +116,7 @@ type HeatmapPoint struct {
 	P95MS   float64   `json:"p95_ms"`
 }
 
-// Direction mirrors the closed union in ui/apps/src/contracts.ts
+// Direction mirrors the closed union in ui/contracts.ts
 // ("improvement" | "regression" | "stable"); keep the two in sync.
 type Direction string
 

internal/ui/dist/assets/chat._threadId-DC_eOz23.js

@@ -0,0 +1 @@
+import{t as e}from"./chat-BWEtId3_.js";var t=e;export{t as component};

internal/ui/dist/assets/chat.index-DC_eOz23.js

@@ -0,0 +1 @@
+import{t as e}from"./chat-BWEtId3_.js";var t=e;export{t as component};