Codestin Search App

SasSwart · 2026-07-22T15:59:58Z

Renders the per-call network calls as a collapsible panel above the session threads, using the network_call_logs field added to the threads API.

Each row shows the request method, allowed/blocked status, URL, and timestamp, and expands to show the protocol, matched rule, and full detail. The header shows the total count and a blocked-count badge from the session summary; when the server caps the list, the panel notes how many calls are shown. The panel is omitted when the session did not pass through Agent Firewall.

PR map (merge strictly bottom-up)

This change is a 4-PR stack. Each PR depends on all the ones below it, so merge in this exact order:

feat: add network calls summary to AI session threads API #27417 — backend network summary (base main)
feat: show network request summary on AI session detail card #27418 — frontend summary rows (base feat: add network calls summary to AI session threads API #27417)
feat: add network calls list to AI session threads API #27425 — backend per-call list network_call_logs (base feat: show network request summary on AI session detail card #27418)
feat(site): show network calls list on AI session detail #27426 — frontend network-calls panel (base feat: add network calls list to AI session threads API #27425)

Refs AIGOV-464

🤖 Generated with Claude Code

linear-code · 2026-07-22T16:00:01Z

AIGOV-464

Backend for the AI session network summary. Exposes total/blocked network calls and top destination domains on the session threads endpoint (`GET /api/v2/ai-gateway/sessions/{id}`). Total and blocked reuse the existing Agent Firewall aggregation from the sessions list query, so the numbers match the sessions table. Top domains are a new server-side aggregation (`GetAIBridgeSessionTopDomains`) over boundary logs, using the same interception-window correlation. There is no network-error state, matching the current data model. Frontend consuming these fields is in a separate stacked PR. ### PR map (merge strictly bottom-up) This change is a 4-PR stack. Each PR depends on all the ones below it, so merge in this exact order: 1. #27417 — backend network summary (base `main`) 2. #27418 — frontend summary rows (base #27417) 3. #27425 — backend per-call list `network_call_logs` (base #27418) 4. #27426 — frontend network-calls panel (base #27425) Refs AIGOV-463 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Opus 4.8 (1M context) <[email protected]> Co-authored-by: Cian Johnston <[email protected]>

Frontend for the AI session network summary. Adds Network calls, Blocked network requests, and Top domains rows to the Session summary card on the individual AI session detail page, driven by the network fields on the session threads response. Renders "Disabled" when network monitoring was not active and "No activity" when there were no calls. Covered by Storybook stories for each state. ### PR map (merge strictly bottom-up) This change is a 4-PR stack. Each PR depends on all the ones below it, so merge in this exact order: 1. #27417 — backend network summary 2. #27418 — frontend summary rows 3. #27425 — backend per-call list `network_call_logs` 4. #27426 — frontend network-calls panel Refs AIGOV-463 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Opus 4.8 (1M context) <[email protected]> Co-authored-by: Cian Johnston <[email protected]>

EhabY · 2026-07-30T14:26:09Z

Can we rebase this on the latest main or something? I'm not sure what the new changes are 🙏

The AI session threads API returned only a network call *summary* (total/blocked counts + top domains). This adds the per-call list so the session detail can render individual Agent Firewall network calls. `ListAIBridgeSessionNetworkCalls` reuses the same sequence-number windowing as the existing summary and includes all protocols. The list is exposed as `network_call_logs` on the threads response and is capped server-side at 100 rows. The summary (`network_calls.total`/`blocked`) remains authoritative for whole-session totals: the list length and its blocked count equal the summary only when a session has at most 100 calls, and are truncated beyond that. ### PR map (merge strictly bottom-up) This change is a 4-PR stack. Each PR depends on all the ones below it, so merge in this exact order: 1. #27417 — backend network summary 2. #27418 — frontend summary rows 3. #27425 — backend per-call list `network_call_logs` 4. #27426 — frontend network-calls panel Refs AIGOV-464 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Opus 4.8 (1M context) <[email protected]>

github-actions · 2026-08-03T09:39:01Z

Docs preview

Check off each page once it's been reviewed. If a page changes in a later push, its checkbox clears automatically so it gets a fresh look. Pages not yet wired into the docs navigation aren't listed here.

coderagents · 2026-08-03T09:40:35Z

Documentation Check

Updates Needed

docs/ai-coder/ai-gateway/audit.md - The Session detail section documents the Session summary card (network requests, blocked, top domains) but not the new per-call Network calls panel this PR adds above the threads. Document that it lists individual Agent Firewall calls with method, Allowed/Blocked status, URL, and timestamp; expands to show protocol, matched rule, and full detail; shows a blocked-count badge; notes when only the first N of the total calls are shown (server cap of 1000); shows "No network calls were recorded for this session." when empty; and is omitted entirely when the session did not pass through Agent Firewall.
docs/images/aibridge/session_detail.png - The screenshot referenced from the Session detail section predates the network calls panel, so it no longer matches the UI.

Not flagged: docs/reference/api/aigateway.md and docs/reference/api/schemas.md are auto-generated and already regenerated in this PR for the network_call_logs field. Backend query, dbauthz, and test changes have no user-facing docs surface.

Automated review via Coder Agents

Render the per-call network calls as a collapsible panel above the session threads. Each row shows the method, allowed/blocked status, URL, and timestamp, and expands to show the protocol, matched rule, and full detail. The panel is omitted when the session did not pass through Agent Firewall. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

EhabY

pls fix compilation and linting 🙏

EhabY · 2026-08-03T10:04:46Z

 					{session ? (
 						<SessionTimeline
 							initiator={session.initiator}
 							threads={threads}
+							networkCallSummary={session.network_calls}
+							networkCalls={session.network_call_logs ?? []}


Does it make sense to just pass session as a whole?

session has quite a large footprint. I like passing only what the SessionTimeline needs as a form of self documentation. Happy to change it if you deem that better, but I think its fine as it?

We could pass the session and do something like Pick<AIBridgeSessionThreadsResponse, "initiator" | "network_calls" | "network_call_logs">

I do not feel strongly but that is easier to pass IMO (if we want pass another field we just add | "new_field")

EhabY · 2026-08-03T10:13:07Z

+				)}
+			</div>
+
+			{isOpen && (


Maybe we separate this into a components for easier reading? We can avoid the ternary operators here and just have a if (...) else ...

This could actually resolve a bug where we render both when there's a summary but an empty list:

No network calls were recorded for this session.
Showing the first 0 of 4 network calls.

Please add a storybook for this actually

I've added a storybook for this. However, this this is not a state that is possible from the API's side? If there is no summary, there will be no calls?

Ah yeah fair enough, tbh I prefer the frontend to be fully tested regardless of the backend implicit contract. I prefer this but not pressed about it

EhabY · 2026-08-03T10:36:55Z

+// of rendered rows.
+export const BlockedBadge: Story = {
+	play: async ({ canvas }) => {
+		const header = canvas.getByText("Network calls (4)").closest("div");


Maybe give the header a data-testid, or query the badge directly by its accessible name since this is brittle

EhabY · 2026-08-03T10:38:01Z

+// The blocked-count badge in the header reflects the summary, not the number
+// of rendered rows.


This claims that the badge "reflects the summary, not the number of rendered rows", but it inherits the meta args where blocked is 2 and exactly 2 rendered rows are blocked, so the story cannot tell the two apart. Give it summary: { total: 4, blocked: 9 } to actually pin the claim

EhabY · 2026-08-03T10:40:04Z

+		await expect(canvas.queryByText("Protocol")).not.toBeInTheDocument();
+
+		const rowButtons = canvas.getAllByRole("button", { expanded: false });
+		// The first row button toggles the first call's detail open.


Unneeded comment

The API now returns firewall log entries via the shared AgentFirewallLog type, replacing the bespoke AIBridgeSessionNetworkCall type. Update the components and mock data to match.

SasSwart · 2026-08-03T11:27:01Z

@EhabY apologies. There was an unfortunate window after I merged the prior PR and before I had pushed the rebase in which you saw a bunch of irrelevant changes. That's been fixed.

I'm tending to the comments you've already made now. Will re-request new review when done.

Removes hand-rolled open/close state and CSS-driven chevron rotation in favor of the shared Collapsible primitive, matching the pattern used elsewhere in the codebase.

EhabY

Code looks solid now, but there are a few issues with the UX (I understand this is not a priority now, but should at least file an issue for later):

I think we should align the method/URLs into columns:

We should align the items on the right here:

I would expect inner items to be indented more:

EhabY · 2026-08-03T14:13:06Z

 					{session ? (
 						<SessionTimeline
 							initiator={session.initiator}
 							threads={threads}
+							networkCallSummary={session.network_calls}
+							networkCalls={session.network_call_logs ?? []}


We could pass the session and do something like Pick<AIBridgeSessionThreadsResponse, "initiator" | "network_calls" | "network_call_logs">

I do not feel strongly but that is easier to pass IMO (if we want pass another field we just add | "new_field")

EhabY · 2026-08-03T14:19:34Z

+				)}
+			</div>
+
+			{isOpen && (


Ah yeah fair enough, tbh I prefer the frontend to be fully tested regardless of the backend implicit contract. I prefer this but not pressed about it

EhabY · 2026-08-03T14:24:23Z

+		await expect(
+			canvas.getByText("Blocked network calls: 9"),
+		).toBeInTheDocument();


getByText("Blocked network calls: 9") never matches:
the sr-only span and the 9 are sibling nodes (NetworkCallsTable.tsx:42-46), and the matcher
reads only direct text children. This play function fails. Put the full string in one node, or
use aria-label + getByLabelText. Keep line 39.

EhabY · 2026-08-03T14:25:01Z

+	 * Drives the header count and blocked badge. Reflects the whole session, so
+	 * its total can exceed the number of rows in `calls`, which is capped
+	 * server-side.
+	 */


nit: JSDoc says summary drives the header and badge, but NetworkCallsList (:56) reuses this interface and renders neither.

Something like:

Session-wide totals. total can exceed calls.length, which is capped server-side.

EhabY · 2026-08-03T14:25:37Z

-		created_at: "2026-03-09T09:28:19.000Z",
-	},
-];
+export const MockAIBridgeSessionNetworkCalls: readonly TypesGen.AgentFirewallLog[] =


nit: we should probably rename this now that the type changed (MockAgentFirewallLogs)

github-actions Bot assigned SasSwart Jul 22, 2026

SasSwart force-pushed the aigov-464-frontend branch from f9e824c to c60d5c1 Compare July 23, 2026 10:08

This was referenced Jul 23, 2026

feat: add network calls summary to AI session threads API #27417

Merged

feat: show network request summary on AI session detail card #27418

Merged

feat: add network calls list to AI session threads API #27425

Merged

SasSwart force-pushed the aigov-464-frontend branch from c60d5c1 to 7ad90bb Compare July 28, 2026 13:17

SasSwart marked this pull request as ready for review July 30, 2026 11:13

SasSwart requested a review from EhabY July 30, 2026 11:13

SasSwart requested a review from a team as a code owner July 30, 2026 11:55

Base automatically changed from aigov-464 to main August 3, 2026 09:34

SasSwart force-pushed the aigov-464-frontend branch from 7ad90bb to 70a8dd2 Compare August 3, 2026 09:38

SasSwart force-pushed the aigov-464-frontend branch from 70a8dd2 to d753830 Compare August 3, 2026 09:50

EhabY reviewed Aug 3, 2026

View reviewed changes

refactor(site): use AgentFirewallLog type for network calls

3af5588

The API now returns firewall log entries via the shared AgentFirewallLog type, replacing the bespoke AIBridgeSessionNetworkCall type. Update the components and mock data to match.

refactor(site): use Radix Collapsible for network calls table

c88a182

Removes hand-rolled open/close state and CSS-driven chevron rotation in favor of the shared Collapsible primitive, matching the pattern used elsewhere in the codebase.

SasSwart force-pushed the aigov-464-frontend branch from 9025554 to c88a182 Compare August 3, 2026 11:59

SasSwart requested a review from EhabY August 3, 2026 13:32

EhabY approved these changes Aug 3, 2026

View reviewed changes

SasSwart merged commit a60f393 into main Aug 4, 2026
26 checks passed

SasSwart deleted the aigov-464-frontend branch August 4, 2026 06:30

github-actions Bot locked and limited conversation to collaborators Aug 4, 2026

		// The blocked-count badge in the header reflects the summary, not the number
		// of rendered rows.

Uh oh!

Conversation

SasSwart commented Jul 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR map (merge strictly bottom-up)

Uh oh!

linear-code Bot commented Jul 22, 2026

Uh oh!

EhabY commented Jul 30, 2026

Uh oh!

github-actions Bot commented Aug 3, 2026

Docs preview

Uh oh!

coderagents Bot commented Aug 3, 2026

Documentation Check

Updates Needed

Uh oh!

EhabY left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

SasSwart commented Aug 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

EhabY left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

SasSwart commented Jul 22, 2026 •

edited

Loading

SasSwart commented Aug 3, 2026 •

edited

Loading