Submitting this form writes a real task record and starts real execution immediately.
Running Tasks
Completed Tasks
Failed / Blocked Tasks
Projects
Manager Dashboard
Workflow and business control — global system health, maintenance mode, worker fleet, runtime identity, and the audit trail. Distinct from the Traefik dashboard (routing/infra diagnostics for platform administrators, reached separately via the management hostname).
Project Scope
Server-side authorized — this list is filtered to projects you're a member of (platform_admin sees all). Selecting a project shows its own maintenance-mode control below, separate from the platform-wide one above it.
System Health
Runtime Identity & Drift
Maintenance Mode (platform-wide)
Maintenance Mode (this project)
Requires project_admin on this project (platform_admin always qualifies) — a project_viewer/project_editor sees this state read-only and gets a 403 if they try to submit.
Worker Fleet
Worker
Type
Status
Last heartbeat
Provider Health
Provider
Enabled
Circuit
Consecutive failures
Spend this period
Active leases
Organizations (Tenants & Customers)
Requires platform_admin.
Customer
Tenant
Projects
Reconciliation Findings
Live sweep, read-only. Requires platform_admin. Git/Docker-dependent checks are skipped here (no repo/Docker client wired into the dashboard process) — see "checks skipped" below.
Classification
Severity
Summary
Auto-repairable
Reconciliation Sweep Runs
Requires platform_admin. Durable history of periodic (scheduler_worker.py, every RECONCILIATION_SWEEP_INTERVAL_SECONDS) and manually-triggered sweeps. Manual trigger does NOT replace the periodic scheduler, which keeps running regardless.
Triggered by
Initiator
Status
Findings
Repaired
Started
Finished
Error
Alerts
Requires platform_admin.
Type
Severity
Summary
Created
Acknowledged
Actions
RabbitMQ Queue Depth / Consumers
Requires platform_admin. Read-only management-API summaries — never message bodies. Oldest-message age is not shown (would require peeking message bodies).
Queue
Ready
Unacked
Consumers
State
Dead-Letter Replay
Requires platform_admin. Enter the task type (tasks / crawl_tasks / legacy_imported_tasks) and task ID of a genuinely terminal-failed task to reset it back to a re-claimable state — it re-runs through the SAME claim mechanism as any other task, never a separate path.
Deployment / Rollback History
Requires platform_admin. Durable ledger of every deploy and rollback attempt for this environment — candidate SHA, CI provenance hash, artifact digest, initiator, health-check result, rollback reason.
Action
Status
Candidate SHA
Artifact digest
Initiator
Started
Finished
Rollback reason
Legacy Identity Resolution
Requires platform_admin. Legacy inbox files whose site_name has no resolvable project fail closed into quarantine (never guessed). Map a site_name to a real project below to resolve AND re-import every matching quarantined entry in one action.
Unresolved quarantine
Inbox filename
site_name
Reason
Quarantined
Explicit mappings
site_name
Project ID
Note
Mapped
Task Containers
Requires platform_admin. Real, live listing via the read-only docker-socket-proxy (never write-capable) — currently-running per-agent-invocation containers. Full Postgres-task correlation and safe cleanup is a separate, deeper reconciliation feature.
Name
Status
Agent
Invocation ID
Image
Created
Live Worktrees
Requires platform_admin. Real, live `git worktree list` output per registered site repo under shared/site_source/ — no cached copy, read fresh on every load.
Repo
Path
Branch
HEAD
Detached
Locked
Crawl/Screenshot Queue
Task type
Status
Count
Social / Telegram Service Status
Client
Posts
Last post
Windows vs Linux Runtime
Site Onboarding & Crawl
Register a site for the selected project, verify ownership via a well-known file, configure a crawl policy, then run a bounded crawl. Registering/verifying/configuring requires project_admin; starting a crawl also allows project_editor.
Origin
Status
Verified at
Actions
Break-Glass Access (this project)
This is the AUTHORIZATION RECORD and audit trail only — it does not grant an SSH shell or any real
credential itself. Request/approve/activate here, then a named engineer uses their own already-held
access out-of-band and records what they did. Requires project_admin. See
docs/BREAK_GLASS_RUNBOOK.md for the full procedure.
Incident
Status
Requested by
Expires
Actions
Contracts & Approvals (this project)
Type
Task kind
Status
Reviews
Created
CMS Drafts (this project)
Type
Title
Status
Created
Published
Social Content (this project)
Channel
Caption
Status
Created
Published
Opportunities & Proposals
Opportunities are deterministic, evidence-derived findings (no model judgment). Proposing a fix requires project_editor+; approving/rejecting requires project_admin, and a proposal always needs two DISTINCT approvers who are not its own creator — editing a proposal after one approval resets it to needing two fresh approvals.
Opportunities
Kind
Route
Status
Actions
Proposals
Change
Status
Approvals
Actions
Evaluation
Deterministic counts and rates over this project's opportunities/proposals — no model judgment involved.
Audit Events
Time
Actor
Action
Reason
Outcome
CI Runs
Requires platform_admin. Durable ledger of reported CI outcomes. Real GitHub Actions execution requires operator-provisioned secrets (a Git remote, MAGENT_CI_DATABASE_URL) — an empty table here honestly means no run has reported yet, not a broken feature.
Git SHA
Status
Gates passed
Image digest
Started
Finished
Signed Provenance
Requires platform_admin. Audit trail of every provenance sign/verify attempt — payload hash only, never contents or signatures.
Event
Result
Candidate SHA
Key version
Occurred
Detail
Artifacts / Digests
Requires platform_admin. Unified digest lineage across CI runs and deployments — reads the same ci_runs/deployment_events rows shown above, joined into one view, not a separate copy.
Source
Digest
Reference (SHA)
Status
Occurred
Integration / Merge Queue (this project)
Durable audit trail alongside the real Postgres advisory-lock merge slot — claim attempts, grants, and releases.