Add dashboard on web and cli (#136)

* feat(pds): add live status dashboard at /status

Dark-themed dashboard for conference demos. Shows server identity,
repository record counts, relay federation sync status, firehose
subscriber details, and a live event stream with inline CBOR decoding.

- GET /status serves the dashboard HTML
- GET /xrpc/gg.mk.experimental.getSubscribers exposes sanitized
  firehose subscriber metadata (connectedAt, cursor)
- Relay sync polling (bsky.network) with animated status transitions
- WebSocket firehose connection with minimal inline CBOR decoder

* Add live terminal dashboard for PDS monitoring (#135)

* feat(pds): add CLI dashboard command for live PDS monitoring

Adds `pds dashboard` command that shows a real-time terminal UI with:
- Repository panel (collection counts)
- Federation panel (relay sync status)
- Firehose panel (subscribers, sequence number)
- Notifications panel (likes, reposts, follows via AppView proxy)
- Events panel (live firehose events via WebSocket)
- Keybindings: [a] activate, [r] request crawl, [e] emit identity, [q] quit

Uses ANSI escape codes + picocolors for rendering (no new dependencies).
Firehose frames decoded with existing @atproto/lex-cbor decodeAll.

https://claude.ai/code/session_01XjTynB9skS7w4f14XUzTrC

* style: apply prettier formatting

https://claude.ai/code/session_01XjTynB9skS7w4f14XUzTrC

* fix(pds): fix events panel separator overflow in CLI dashboard

The separator line didn't account for the WebSocket status text width,
causing it to overflow and merge with the status indicator.

https://claude.ai/code/session_01XjTynB9skS7w4f14XUzTrC

* fix(pds): fix dashboard seq display, collection sorting, and separator padding

- Fetch latestSeq from authenticated getFirehoseStatus endpoint as primary
  source, falling back to getSubscribers
- Sort collections by priority (posts, likes, follows first) and filter
  out empty collections
- Add missing collection names (chat, postgates, labeler)
- Add right padding to events separator so "connected" isn't flush with edge

https://claude.ai/code/session_01XjTynB9skS7w4f14XUzTrC

* feat(pds): show identity events in dashboard firehose log

Parse #identity frames from the firehose in addition to #commit frames.
Identity events display with cyan "IDENTITY" action and the handle.

https://claude.ai/code/session_01XjTynB9skS7w4f14XUzTrC

---------

Co-authored-by: Claude <noreply@anthropic.com>

* Remove firehose status from web dash

* Changeset

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: ascorbic

.changeset/pds-dashboard.md

@@ -0,0 +1,5 @@
+---
+"@getcirrus/pds": minor
+---
+
+Add live terminal dashboard for PDS monitoring via `pds dashboard`. Shows repository stats, federation sync status, firehose subscribers with IPs, real-time event log, and notifications. Also adds a web dashboard at `/status`.

packages/oauth-provider/test/helpers.ts

@@ -86,9 +86,7 @@ export async function createDpopProof(
  * @param alg The algorithm (default: ES256)
  * @returns The key pair and public JWK
  */
-export async function generateDpopKeyPair(
-	alg: string = "ES256",
-): Promise<{
+export async function generateDpopKeyPair(alg: string = "ES256"): Promise<{
 	privateKey: CryptoKey;
 	publicKey: CryptoKey;
 	publicJwk: JsonWebKey;

packages/pds/src/account-do.ts

@@ -755,9 +755,7 @@ export class AccountDurableObject extends DurableObject<PDSEnv> {
 
 		// Lazily iterate SQLite rows — the cursor is already lazy,
 		// only .toArray() would materialize everything in memory.
-		const cursor = this.ctx.storage.sql.exec(
-			"SELECT cid, bytes FROM blocks",
-		);
+		const cursor = this.ctx.storage.sql.exec("SELECT cid, bytes FROM blocks");
 
 		async function* blocks(): AsyncGenerator<CarBlock> {
 			for (const row of cursor) {
@@ -1090,10 +1088,11 @@ export class AccountDurableObject extends DurableObject<PDSEnv> {
 		// Accept with hibernation
 		this.ctx.acceptWebSocket(server);
 
-		// Store cursor in attachment
+		// Store cursor and client metadata in attachment
 		server.serializeAttachment({
 			cursor: cursor ?? 0,
 			connectedAt: Date.now(),
+			ip: request.headers.get("CF-Connecting-IP") ?? null,
 		});
 
 		// Backfill if cursor provided
@@ -1345,15 +1344,29 @@ export class AccountDurableObject extends DurableObject<PDSEnv> {
 	 * RPC method: Firehose status - returns subscriber count and latest sequence
 	 */
 	async rpcGetFirehoseStatus(): Promise<{
-		subscribers: number;
+		subscribers: Array<{
+			connectedAt: number;
+			cursor: number;
+			ip: string | null;
+		}>;
 		latestSeq: number | null;
 	}> {
 		const sockets = this.ctx.getWebSockets();
 		await this.ensureStorageInitialized();
-		const storage = await this.getStorage();
-		const seq = await storage.getSeq();
+		const seq = this.sequencer!.getLatestSeq();
 		return {
-			subscribers: sockets.length,
+			subscribers: sockets.map((ws) => {
+				const attachment = ws.deserializeAttachment() as {
+					cursor: number;
+					connectedAt: number;
+					ip: string | null;
+				};
+				return {
+					connectedAt: attachment.connectedAt,
+					cursor: attachment.cursor,
+					ip: attachment.ip ?? null,
+				};
+			}),
 			latestSeq: seq || null,
 		};
 	}