feat(dashboard): summary stats header — agents, throughput, runtime, tokens, rate limits, project link

[ridermw]

Reference

See .github/media/elixir-screenshot.png — the top section shows:

\
SYMPHONY STATUS
Agents: 19/50
Throughput: 658,875 tps
Runtime: 1m 54s
Tokens: in 38,183,882 | out 368,361 | total 38,552,243
Rate Limits: codex | primary n/a | secondary n/a | credits n/a
Project: https://linear.app/project/.../issues
Next refresh: 1s
\\

Current state

Both web and TUI dashboards only show: Running count, Retrying count, Total tokens, Runtime.

Missing fields

1. Agents: N/M — running count / max_concurrent_agents
2. Throughput: X tps — tokens per second (total_tokens / seconds_running)
3. Tokens breakdown — in X | out Y | total Z (not just total)
4. Rate Limits — show current rate limit headroom from GitHub API headers
5. Project link — link to GitHub project board
6. Next refresh — countdown to next poll tick

Implementation

• Add max_agents to OrchestratorSnapshot
• Calculate throughput from totals
• Expose in/out/total tokens (already in codex_totals)
• Track rate limit headers in tracker responses
• Add project_url to config
• Add next_tick_at timestamp to snapshot

Applies to

• Web dashboard (server/dashboard.rs)
• TUI dashboard (tui.rs)

[ridermw]

Rusty Workpad

CPC-willi-I2SB0:Q:\rusty_workspaces\rusty-92@fa9ac7b

Plan

• 1. Extend OrchestratorSnapshot with new summary fields
  • 1.1 Add max_agents, throughput_tps, project_url, rate_limits, next_tick_at
  • 1.6 Update build_snapshot to populate new fields
• 2. Add project_url to TrackerConfig
• 3. Update API response (server/api.rs) — new snapshot fields in /api/v1/state
• 4. Update terminal dashboard — Agents N/M, Throughput, Tokens in/out/total, Rate Limits, Project, Next refresh
• 5. Update web dashboard (server/dashboard.rs)
  • 5.1 Render summary stats header with all new fields
  • 5.2 Add esc() + safeUrl() XSS protection (review feedback)
• 6. Update TUI dashboard — 5-card metrics, detail line, API deserialization
• 7. Update tests
  • 7.1-7.4 Update existing tests + add 5 new feature tests
  • 7.5 Add 3 XSS regression tests (review feedback)
• 8. Build and test — 351 tests pass, clippy clean
• 9. Address PR review feedback — XSS: esc(), safeUrl(), textContent error fallback

Acceptance Criteria

• OrchestratorSnapshot includes: max_agents, throughput_tps, rate_limits, project_url, next_tick_at
• Terminal dashboard shows: Agents N/M, Throughput X tps, Tokens in/out/total, Rate Limits, Project link, Next refresh
• Web dashboard HTML renders all summary stats from API response
• TUI dashboard renders expanded summary stats header
• API /api/v1/state JSON includes all new fields
• All existing tests updated and passing
• New tests cover throughput calculation and new snapshot fields
• cargo build, cargo test, cargo clippy all green
• Web dashboard escapes all dynamic values via esc() to prevent XSS
• Web dashboard validates URL protocols via safeUrl() (http/https only)
• XSS regression tests added

Validation

• cargo test — 351 tests pass (96 lib + 255 integration)
• cargo clippy — no new warnings (pre-existing only)
• cargo build — compiles clean

Notes

• Pull skill evidence: started on main@bb3a288, no new remote commits
• 12 files changed across 2 commits
• Commit 1: 393db42 — feature implementation (10 files, 350+ insertions)
• Commit 2: fa9ac7b — XSS fix addressing review feedback (2 files, 140 insertions)
• PR: feat(dashboard): summary stats header — agents, throughput, runtime, tokens, rate limits, project link #107
• XSS fix: esc() uses textContent/innerHTML DOM pattern, safeUrl() allows only http/https, fmt() wraps through esc(), error fallback uses textContent