Unify admin workbench UI (#64)

* Add Gleam state machine subsystem spike

* Integrate Lustre workbench with Gleam projections

* Add Lustre state graph entrypoint

* Add graph renderer comparison lab

* Render Lustre state graphs with Cytoscape

* Improve Lustre graph replay and retry inputs

* Add model-driven Lustre demo graphs

* Improve Lustre graph model boundaries

* Promote workbench route and labels

* Clarify workbench controls

* Fix workbench fixture controls

* Port model access UI to Lustre

* Preserve model access deep links

* Fix Gleam dev reloading

* Test Gleam dev reload wiring

* Review map boundary baseline for workbench

* Satisfy workbench type checks

* Unify admin workbench UI

* Prepare v0.0.9 release

* Harden UI docs guard

* Fix admin browser smoke target

Author: bglusman

.github/workflows/ci.yml

@@ -18,6 +18,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           persist-credentials: false
+          fetch-depth: 0
       - uses: erlef/setup-beam@8251c48667b97e88a0a24ec512f5b72a039fcea7 # v1
         with:
           otp-version: "29.0"
@@ -62,8 +63,11 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           persist-credentials: false
+          fetch-depth: 0
       - name: Check docs links
         run: ruby scripts/check-docs-site.rb
+      - name: Check UI docs acknowledgement
+        run: scripts/check-ui-docs-ack.sh
 
   test:
     name: test

README.md

@@ -13,7 +13,7 @@ decision happened.
 ## Install
 
 Wardwright publishes early native binaries for macOS and Linux. The latest
-published release is `v0.0.8`, with a model-aware workbench, saved simulator
+published release is `v0.0.9`, with a model-aware workbench, saved simulator
 test cases, an experimental in-page authoring assistant, and local ratchets for
 style and browser-regression checks.
 
@@ -45,14 +45,14 @@ WARDWRIGHT_BIND=127.0.0.1:8787 \
 For a pinned release:
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/bglusman/wardwright/main/scripts/install.sh | sh -s -- --version v0.0.8
+curl -fsSL https://raw.githubusercontent.com/bglusman/wardwright/main/scripts/install.sh | sh -s -- --version v0.0.9
 ```
 
 Set `WARDWRIGHT_ADMIN_TOKEN` before exposing Wardwright beyond loopback. See
 [Packaging](docs/packaging.md) for release targets, manual archive install
 steps, and service details.
 
-Then visit `http://127.0.0.1:8787/policies`. Set `BASIC_AUTH_PASSWORD` before
+Then visit `http://127.0.0.1:8787/admin`. Set `BASIC_AUTH_PASSWORD` before
 exposing the workbench or protected control APIs beyond loopback; the Basic Auth
 username is always `admin`. Model calls remain governed separately by model
 access configuration.
@@ -69,8 +69,8 @@ model-scoped API key, or set unkeyed models to internal-only composition:
 }
 ```
 
-Use the protected `/admin/model-api-keys` page to select a registered model and
-generate or revoke keys for that model. Raw keys are shown once; Wardwright
+Use the protected `/admin` operator UI to select a registered model and generate
+or revoke keys for that model. Raw keys are shown once; Wardwright
 stores only a hash in the SQLite store at
 `~/.local/share/wardwright/wardwright.sqlite3` unless `XDG_DATA_HOME` or
 `WARDWRIGHT_SQLITE_STORE` points somewhere else. The same store persists
@@ -97,7 +97,8 @@ wardwright tools --json
 Wardwright exposes:
 
 - OpenAI-compatible `/v1/chat/completions` and `/v1/models` endpoints.
-- A policy workbench at `/policies`.
+- A registered-model workbench at `/admin`, with the legacy policy
+  projection workbench still available at `/policies`.
 - Protected authoring APIs, plus MCP tools at `/mcp`.
 - Receipts, simulations, model access details, and admin status endpoints.
 
@@ -123,24 +124,25 @@ provider credentials on an instance reachable by untrusted users. See
 
 ## Policy Workbench
 
-The installed service includes a LiveView workbench at `/policies`. It loads
-seeded and local examples, lets you choose the Wardwright model being simulated,
-edit caller input, backend model output, retry attempts, and relevant history,
-then steps through routing, state transitions, stream retries, rewrites, tool
-decisions, and receipt events. Reviewed turns can be saved as reusable test cases
-for later simulation, regression export, or agent review.
+The installed service includes a registered-model workbench at `/admin`. It
+lets you choose the Wardwright model being simulated, load a fixture, edit caller
+input, backend model output, and retry attempts, then step through routing,
+state transitions, stream retries, rewrites, tool decisions, and receipt events.
+The older `/policies` workbench remains available as a legacy fallback during
+the transition.
 
-![Wardwright policy workbench showing context-window dispatcher simulation](docs/assets/workbench/route-composition-simulator.png)
+![Wardwright registered-model workbench showing a retry fixture](docs/assets/workbench/registered-model-workbench.png)
 
-See [Policy Workbench](docs/workbench.md) for screenshots and the example
-catalog. See [Model Middleware](docs/wardwright-models.md) for the current model
+See [Policy Workbench](docs/workbench.md) for screenshots and workflow details.
+See [Model Middleware](docs/wardwright-models.md) for the current model
 composition shape.
 
 ## Current Runtime
 
-The active app is a Phoenix/LiveView service. Elixir owns runtime plumbing,
-provider calls, HTTP/API boundaries, receipts, and the UI. Gleam is used for
-correctness-heavy pure policy logic where the boundary is stable.
+The active app is a Phoenix service with server-rendered operator workbenches.
+Elixir owns runtime plumbing, provider calls, HTTP/API boundaries, and receipts;
+Gleam is used for correctness-heavy pure policy logic where the boundary is
+stable.
 
 Current capabilities include:
 

app/config/dev.exs

@@ -1,5 +1,34 @@
 import Config
 
+code_reloader? = System.get_env("WARDWRIGHT_CODE_RELOADER", "true") != "false"
+gleam_code_reloader? = System.get_env("WARDWRIGHT_GLEAM_CODE_RELOADER", "false") == "true"
+
+reloadable_compilers =
+  if code_reloader? do
+    [:elixir, :app] ++ if(gleam_code_reloader?, do: [:gleam, :erlang], else: [])
+  else
+    []
+  end
+
+live_reload_patterns = [
+  ~r"priv/static/.*(js|css|png|jpeg|jpg|gif|svg)$",
+  ~r"lib/wardwright_web/(controllers|live|components|layouts)/.*(ex|heex)$",
+  ~r"lib/wardwright_web/.*_controller.ex$",
+  ~r"lib/wardwright_web/.*_socket.ex$"
+]
+
+live_reload_patterns =
+  live_reload_patterns ++
+    if(gleam_code_reloader?, do: [~r"src/wardwright/.*\.gleam$"], else: [])
+
 config :phoenix_live_view,
   debug_attributes: true,
   debug_heex_annotations: true
+
+config :wardwright, WardwrightWeb.Endpoint,
+  code_reloader: code_reloader?,
+  debug_errors: true,
+  reloadable_compilers: reloadable_compilers,
+  live_reload: [
+    patterns: live_reload_patterns
+  ]

app/gleam.toml

@@ -4,6 +4,43 @@ target = "erlang"
 
 [dependencies]
 gleam_stdlib = ">= 1.0.0 and < 2.0.0"
+act = ">= 0.4.0 and < 1.0.0"
+gleam_json = ">= 3.1.0 and < 4.0.0"
+lustre = ">= 5.7.0 and < 6.0.0"
+glizzy = ">= 0.1.0 and < 1.0.0"
+non_empty_list = ">= 2.3.0 and < 3.0.0"
+trie_again = ">= 1.1.4 and < 2.0.0"
 
 [dev_dependencies]
 gleeunit = ">= 1.0.0 and < 2.0.0"
+glinter = ">= 2.19.0 and < 3.0.0"
+
+[tools.glinter]
+include = ["src/"]
+
+[tools.glinter.rules]
+assert_ok_pattern = "off"
+discarded_result = "off"
+echo = "off"
+error_context_lost = "off"
+deep_nesting = "off"
+duplicate_import = "off"
+function_complexity = "off"
+label_possible = "off"
+missing_labels = "off"
+missing_type_annotation = "off"
+module_complexity = "off"
+panic_without_message = "off"
+prefer_guard_clause = "off"
+redundant_case = "off"
+short_variable_name = "off"
+string_inspect = "off"
+stringly_typed_error = "off"
+thrown_away_error = "off"
+todo_without_message = "off"
+trailing_underscore = "off"
+unnecessary_string_concatenation = "off"
+unnecessary_variable = "off"
+unqualified_import = "off"
+unused_exports = "off"
+unwrap_used = "off"

app/lib/wardwright.ex

@@ -8,6 +8,7 @@ defmodule Wardwright do
 
   @model_id "coding-balanced"
   @model_version "2026-05-13.mock"
+  @model_definition_version 1
   @local_model "local/qwen-coder"
   @managed_model "managed/kimi-k2.6"
   @local_context_window 32_768
@@ -31,6 +32,7 @@ defmodule Wardwright do
   def model_id, do: @model_id
   def model_id(config) when is_map(config), do: Map.get(config, "model_id", @model_id)
   def model_version, do: @model_version
+  def model_definition_version, do: @model_definition_version
   def local_model, do: @local_model
   def managed_model, do: @managed_model
   def local_context_window, do: @local_context_window
@@ -50,6 +52,7 @@ defmodule Wardwright do
         }
       ],
       "governance" => [%{"action" => "transform", "id" => "prompt_transforms", "kind" => "request_transform"}],
+      "model_definition_version" => @model_definition_version,
       "model_id" => @model_id,
       "policy_cache" => %{"max_entries" => 64, "recent_limit" => 20},
       "prompt_transforms" => %{},
@@ -281,6 +284,7 @@ defmodule Wardwright do
       "fallback_rate" => 0.0,
       "governance" => Map.get(config, "governance", []),
       "id" => model_id,
+      "model_definition_version" => Map.get(config, "model_definition_version", @model_definition_version),
       "model_id" => model_id,
       "prompt_transforms" => Map.get(config, "prompt_transforms", %{}),
       "public_model_id" => model_id,
@@ -728,6 +732,10 @@ defmodule Wardwright do
       "cascades" => normalize_selectors(Map.get(config, "cascades", []), "models"),
       "dispatchers" => normalize_selectors(Map.get(config, "dispatchers", []), "models"),
       "governance" => Map.get(config, "governance", []),
+      "model_definition_version" =>
+        config
+        |> Map.get("model_definition_version", @model_definition_version)
+        |> positive_integer(@model_definition_version),
       "model_id" => model_id,
       "policy_cache" => normalize_policy_cache(Map.get(config, "policy_cache", %{})),
       "prompt_transforms" => Map.get(config, "prompt_transforms", %{}),

app/lib/wardwright/cli.ex

@@ -78,9 +78,9 @@ defmodule Wardwright.CLI do
     """
   end
 
-  defp admin_path(["access" | _]), do: "/admin/model-api-keys"
-  defp admin_path(["keys" | _]), do: "/admin/model-api-keys"
-  defp admin_path(_rest), do: "/policies"
+  defp admin_path(["access" | _]), do: "/admin?view=model_access"
+  defp admin_path(["keys" | _]), do: "/admin?view=model_access"
+  defp admin_path(_rest), do: "/admin"
 
   defp tools_help do
     tools = WardwrightWeb.PolicyAuthoringTools.cli_descriptions() |> Enum.join("\n")