Handle excluded input column in event expansion

.gitattributes

@@ -0,0 +1 @@
+src/inspect_scout/_view/dist/** filter=lfs diff=lfs merge=lfs -text

.github/workflows/build.yaml

@@ -125,7 +125,7 @@ jobs:
         run: python scripts/export_openapi_schema.py
       - name: Check schema is up-to-date
         run: |
-          if ! git diff --exit-code src/inspect_scout/_view/www/openapi.json
+          if ! git diff --exit-code src/inspect_scout/_view/openapi.json
           then
             echo "❌ openapi.json is out of sync with Python API code!"
             echo ""
@@ -136,208 +136,83 @@ jobs:
             exit 1
           fi
 
-  js-lint:
+  submodule-on-main:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
 
-      - uses: pnpm/action-setup@v4
-        with:
-          package_json_file: src/inspect_scout/_view/www/package.json
-
-      - name: Install Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: 22
-          cache: pnpm
-          cache-dependency-path: src/inspect_scout/_view/www/pnpm-lock.yaml
-
-      - name: Install dependencies
-        working-directory: src/inspect_scout/_view/www
-        run: pnpm install --frozen-lockfile
-
-      - name: Check linting
-        working-directory: src/inspect_scout/_view/www
-        run: pnpm lint
-
-  js-typecheck:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: pnpm/action-setup@v4
-        with:
-          package_json_file: src/inspect_scout/_view/www/package.json
-
-      - name: Install Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: 22
-          cache: pnpm
-          cache-dependency-path: src/inspect_scout/_view/www/pnpm-lock.yaml
-
-      - name: Install dependencies
-        working-directory: src/inspect_scout/_view/www
-        run: pnpm install --frozen-lockfile
-
-      - name: Check typechecking
-        working-directory: src/inspect_scout/_view/www
-        run: pnpm typecheck
+      - name: Verify submodule commit is on ts-mono main
+        run: |
+          SUBMODULE_SHA=$(git ls-tree HEAD src/inspect_scout/_view/ts-mono | awk '{print $3}')
+          echo "Submodule points to: $SUBMODULE_SHA"
+
+          git fetch https://github.com/meridianlabs-ai/ts-mono.git main
+          MAIN_SHA=$(git rev-parse FETCH_HEAD)
+          echo "ts-mono main is at: $MAIN_SHA"
+
+          if git merge-base --is-ancestor "$SUBMODULE_SHA" "$MAIN_SHA"; then
+            echo "✓ Submodule commit is on ts-mono main"
+          else
+            echo "✗ Submodule commit $SUBMODULE_SHA is not on ts-mono main."
+            echo "  Merge the submodule PR first, then update the pointer (see docs/submodule-guide.md step 6)."
+            exit 1
+          fi
 
-  js-format:
+  js-dist-validation:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-
-      - uses: pnpm/action-setup@v4
         with:
-          package_json_file: src/inspect_scout/_view/www/package.json
-
-      - name: Install Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: 22
-          cache: pnpm
-          cache-dependency-path: src/inspect_scout/_view/www/pnpm-lock.yaml
-
-      - name: Install dependencies
-        working-directory: src/inspect_scout/_view/www
-        run: pnpm install --frozen-lockfile
-
-      - name: Check formatting
-        working-directory: src/inspect_scout/_view/www
-        run: pnpm format:check
-
-  js-build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
+          submodules: true
 
       - uses: pnpm/action-setup@v4
         with:
-          package_json_file: src/inspect_scout/_view/www/package.json
+          package_json_file: src/inspect_scout/_view/ts-mono/package.json
 
       - name: Install Node.js
         uses: actions/setup-node@v6
         with:
           node-version: 22
           cache: pnpm
-          cache-dependency-path: src/inspect_scout/_view/www/pnpm-lock.yaml
+          cache-dependency-path: src/inspect_scout/_view/ts-mono/pnpm-lock.yaml
 
       - name: Install dependencies
-        working-directory: src/inspect_scout/_view/www
+        working-directory: src/inspect_scout/_view/ts-mono
         run: pnpm install --frozen-lockfile
 
       - name: Generate TypeScript types from OpenAPI
-        working-directory: src/inspect_scout/_view/www
-        run: pnpm types:generate
+        working-directory: src/inspect_scout/_view/ts-mono
+        run: pnpm --filter scout types:generate
 
       - name: Check generated types are up-to-date
-        working-directory: src/inspect_scout/_view/www
+        working-directory: src/inspect_scout/_view/ts-mono
         run: |
-          if ! git diff --exit-code src/types/generated.ts
+          if ! git diff --exit-code
           then
             echo "❌ generated.ts is out of sync with openapi.json!"
             echo ""
             echo "TypeScript types need to be regenerated. Run:"
-            echo "  cd src/inspect_scout/_view/www"
-            echo "  pnpm types:generate"
+            echo "  cd src/inspect_scout/_view/ts-mono"
+            echo "  pnpm --filter scout types:generate"
             echo ""
-            echo "Then commit the updated src/types/generated.ts file."
+            echo "Then commit the updated generated.ts file."
             exit 1
           fi
 
-      - name: Build package
-        working-directory: src/inspect_scout/_view/www
+      - name: Build
+        working-directory: src/inspect_scout/_view/ts-mono
         run: pnpm build
 
-      - name: Check build output is clean
-        working-directory: src/inspect_scout/_view/www
+      - name: Check dist is up-to-date
         run: |
-          if ! git diff --exit-code
+          if ! git diff --exit-code src/inspect_scout/_view/dist
           then
-            echo "❌ Build produced unexpected changes!"
+            echo "❌ dist/ is out of sync with the frontend source!"
+            echo ""
+            echo "The build output has changed. Run:"
+            echo "  cd src/inspect_scout/_view/ts-mono"
+            echo "  pnpm build"
             echo ""
-            echo "Files changed during build:"
-            git diff --name-only
+            echo "Then commit the updated dist/ directory."
             exit 1
           fi
-
-  js-test:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: pnpm/action-setup@v4
-        with:
-          package_json_file: src/inspect_scout/_view/www/package.json
-
-      - name: Install Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: 22
-          cache: pnpm
-          cache-dependency-path: src/inspect_scout/_view/www/pnpm-lock.yaml
-
-      - name: Install dependencies
-        working-directory: src/inspect_scout/_view/www
-        run: pnpm install --frozen-lockfile
-
-      - name: Run tests
-        working-directory: src/inspect_scout/_view/www
-        run: pnpm test
-
-  js-e2e:
-    continue-on-error: true  # TODO: remove once e2e tests prove stable
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: pnpm/action-setup@v4
-        with:
-          package_json_file: src/inspect_scout/_view/www/package.json
-
-      - name: Install Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: 22
-          cache: pnpm
-          cache-dependency-path: src/inspect_scout/_view/www/pnpm-lock.yaml
-
-      - name: Install dependencies
-        working-directory: src/inspect_scout/_view/www
-        run: pnpm install --frozen-lockfile
-
-      - name: Get Playwright version
-        id: pw-version
-        working-directory: src/inspect_scout/_view/www
-        run: echo "version=$(pnpm exec playwright --version)" >> "$GITHUB_OUTPUT"
-
-      - name: Cache Playwright browsers
-        id: pw-cache
-        uses: actions/cache@v4
-        with:
-          path: ~/.cache/ms-playwright
-          key: playwright-${{ runner.os }}-${{ steps.pw-version.outputs.version }}
-
-      - name: Install Playwright browsers
-        if: steps.pw-cache.outputs.cache-hit != 'true'
-        working-directory: src/inspect_scout/_view/www
-        run: pnpm exec playwright install --with-deps chromium
-
-      - name: Install Playwright system deps (on cache hit)
-        if: steps.pw-cache.outputs.cache-hit == 'true'
-        working-directory: src/inspect_scout/_view/www
-        run: pnpm exec playwright install-deps chromium
-
-      - name: Run e2e tests
-        working-directory: src/inspect_scout/_view/www
-        run: pnpm e2e
-
-      - name: Upload test results
-        if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@v4
-        with:
-          name: playwright-report
-          path: src/inspect_scout/_view/www/playwright-report/
-          retention-days: 7

.github/workflows/npm-publish.yml

@@ -24,7 +24,7 @@ jobs:
     environment: npm
     defaults:
       run:
-        working-directory: src/inspect_scout/_view/www
+        working-directory: src/inspect_scout/_view/ts-mono/apps/scout
     permissions:
       contents: read
       id-token: write
@@ -33,30 +33,33 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          submodules: true
 
       - name: Set up pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 9
 
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
           node-version: "22.x"
           registry-url: "https://registry.npmjs.org"
           cache: "pnpm"
-          cache-dependency-path: "src/inspect_scout/_view/www/pnpm-lock.yaml"
+          cache-dependency-path: src/inspect_scout/_view/ts-mono/pnpm-lock.yaml
 
       - name: Upgrade npm (for Trusted Publishing)
         run: |
           npm i -g npm@^11.5.1
-          npm --version    
-          
+          npm --version
+
       - name: Install dependencies
+        working-directory: src/inspect_scout/_view/ts-mono
         run: pnpm install --frozen-lockfile
 
-      - name: Sync version from git tag
-        run: npm version from-git --no-git-tag-version
+      - name: Prepare package for publishing
+        run: |
+          npm pkg set name="@meridianlabs/inspect-scout-viewer"
+          npm pkg delete private
+          npm version from-git --no-git-tag-version
 
       - name: Bump to prerelease version
         if: ${{ inputs.prerelease }}
@@ -68,6 +71,7 @@ jobs:
           npm version "${NEW_VERSION}-beta.${TIMESTAMP}" --no-git-tag-version
 
       - name: Run quality checks
+        working-directory: src/inspect_scout/_view/ts-mono
         run: pnpm check
 
       - name: Build library for prerelease

.github/workflows/publish.yaml

@@ -21,6 +21,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0 # Get all tags for version detection
+          lfs: true
 
       - name: Set up Python
         uses: actions/setup-python@v5

.gitignore

@@ -31,6 +31,10 @@ MANIFEST
 *.manifest
 *.spec
 
+# Built view maps
+/src/inspect_scout/_view/dist/assets/*.js.map
+
+
 # Installer logs
 pip-log.txt
 pip-delete-this-directory.txt
@@ -210,6 +214,7 @@ src/inspect_scout/_version.py
 
 # Inspect logs and scans
 /logs/
+/logs-*/
 /scans/
 
 # Scout local configuration (developer-only, not checked in)
@@ -226,9 +231,6 @@ scout.local.yaml
 # node
 /src/inspect_scout/_view/www/node_modules
 
-# dist builds
-/src/inspect_scout/_view/www/*.tgz
-
 # test data
 /examples/test-db
 

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "src/inspect_scout/_view/ts-mono"]
+	path = src/inspect_scout/_view/ts-mono
+	url = https://github.com/meridianlabs-ai/ts-mono.git