Refactor large work graph and operator UI source files

[cbusillo]

Objective

Reduce the largest Launchplane source files so future work graph, service API, and operator UI changes can land without repeatedly editing multi-thousand-line files.

Finish Line

Work graph/UI changes land without editing giant files

Current Status

State: Backend/frontend refactor sprint is parked after a substantial cleanup pass. frontend/src/App.tsx is down to 1,907 lines; control_plane/service.py is down to 7,589 lines after extracting work-graph, product-config, and runtime-key-safety route adapters. The oversized control_plane/cli.py cleanup was split into #421 so it does not expand this issue's scope.
Next action: If #307 resumes, choose one more narrow route adapter or close/narrow the issue after confirming common work graph/operator UI changes no longer require editing giant implementation blocks.
Blocked by: No active blocker. Work is intentionally paused because the user said we are done landing changes for now.
Last verified: 2026-05-07 after PRs #422, #423, and #425 merged, post-merge CI/Security/CodeQL passed, deploy succeeded, and live health returned launchplane_req_2280daeb174548d48f43e4382471031d.

Scope

• Extract work graph HTTP route/adaptor code from the broad service module behind existing authorization and contract boundaries.
• Split operator cockpit rendering into focused frontend components without changing the user-facing workflow.
• Consider splitting workflow deploy helper shell blocks only after runtime behavior is stable.
• Keep changes mechanical and separately verified; avoid broad style rewrites.

Acceptance Criteria

• Refactor PRs preserve existing behavior and tests.
• Each PR reduces a concrete large-file hotspot or narrows a repeated edit surface.
• Work graph/provider changes can be made in focused modules without editing the broad service or app shell for common cases.
• Docs are updated only where ownership or operational behavior changes.

Relationships

• Follows Build What To Work On Next cockpit #190 live cockpit validation.
• Related to work graph Project provider and operator UI slices merged in PRs Rank work graph planning snapshots #295 through Gate work graph deploy env on token #306.

Validation

• Existing unit tests for work graph contracts, service snapshot/rank routes, and GitHub Project provider continue to pass.
• Frontend typecheck/build continue to pass after component extraction.
• Targeted browser fixture review for any UI component split that changes markup or layout.

Decisions

• Do not pause Build What To Work On Next cockpit #190 for this cleanup.
• Track cleanup now so source growth does not become invisible debt.

Open Questions

• Should service route extraction use a small local router module first, or wait for a broader service boundary pass?
• Which frontend split creates the most review value: What-next row rendering, chooser controls, or data-loading state?

[cbusillo]

Next slice starting May 7, 2026: extract the work graph service route/adaptor logic out of the broad control_plane/service.py module without changing behavior.

Scope for this slice:

• keep the existing HTTP API and authorization behavior intact
• move snapshot/rank route handling and payload building behind a focused module boundary
• preserve existing tests first, then add only narrow coverage if the extraction creates new seams
• avoid frontend changes in this PR

Validation target: targeted work graph/service tests, changed-file lint/format, full unit suite, PR CI/Security/CodeQL, deploy health.

[cbusillo]

Slice completed May 7, 2026.

Landed PR #367: extracted the work graph snapshot payload assembly and rank result construction from control_plane/service.py into control_plane/work_graph_service.py, preserving the existing HTTP authz/validation order and adding direct unit coverage for the extracted helper contracts.

Validation:

• PR checks passed: CI, Security, CodeQL
• Post-merge main checks passed: CI run 25470593750, Security run 25470593749, CodeQL run 25470593776
• Deploy Launchplane run 25470650445 succeeded
• Live health check succeeded against https://launchplane.shinycomputers.com/v1/health with postgres backend

This closes the work-graph service route extraction slice for #307. Next #307 slice can move to another large-file boundary, likely operator UI or another service route cluster.

[cbusillo]

Next slice starting May 7, 2026: extract one mechanical operator UI component boundary from frontend/src/App.tsx without changing the operator workflow.

Scope for this slice:

• create a focused worktree/branch from current main
• move a self-contained rendering cluster out of the broad App shell
• keep API request/session behavior intact
• preserve styling and markup unless the extraction needs import-level cleanup

Validation target: pnpm --dir frontend validate, targeted browser smoke if a runnable UI is available, PR CI/Security/CodeQL, deploy health.

[cbusillo]

Second slice completed May 7, 2026.

Landed PR #368: extracted the operator work graph queue from frontend/src/App.tsx into frontend/src/WorkGraphQueue.tsx, with shared status UI primitives and formatting helpers split into focused modules. This reduced App.tsx from 4,483 lines to 4,244 lines without changing API/session behavior.

Validation:

• Local: pnpm --dir frontend typecheck
• Local: pnpm --dir frontend validate
• Browser smoke: http://127.0.0.1:5179/ui/?fixtures=1, fixture gallery rendered the extracted work graph panel; state/recommendation segmented controls interacted cleanly; browser console had no runtime errors
• PR Extract operator work graph queue component #368 checks passed: CI, Security, CodeQL
• Post-merge main checks passed: CI run 25471051225, Security run 25471051221, CodeQL run 25471051213
• Deploy Launchplane run 25471100219 succeeded
• Live health check succeeded against https://launchplane.shinycomputers.com/v1/health with postgres backend

This closes the first operator UI extraction slice for #307. Remaining work can continue with another focused App shell/component boundary.

[cbusillo]

Next slice starting May 7, 2026: extract the Every Code queue rendering from frontend/src/App.tsx into a focused component module.

Scope for this slice:

• keep API/session loading behavior in the App shell
• move only the queue presentation and local state-label mapping
• reuse the shared status UI primitives created in PR Extract operator work graph queue component #368
• preserve fixture gallery behavior and styling

Validation target: pnpm --dir frontend typecheck, pnpm --dir frontend validate, fixture-gallery browser smoke for the queue area, PR checks, deploy health.

[cbusillo]

Third UI slice completed May 7, 2026.

Landed PR #369: extracted the Every Code queue rendering from frontend/src/App.tsx into frontend/src/EveryCodeQueue.tsx, keeping fetch/filter/session state in the App shell and reusing the shared status primitives from PR #368.

Validation:

• Local: pnpm --dir frontend typecheck
• Local: pnpm --dir frontend validate
• Browser smoke: http://127.0.0.1:5180/ui/?fixtures=1, confirmed fixture gallery includes the Every Code queue row and browser console had no runtime errors
• PR Extract Every Code queue component #369 checks passed: CI, Security, CodeQL
• Post-merge main checks passed: CI run 25471566828, Security run 25471566826, CodeQL run 25471566832
• Deploy Launchplane run 25471619959 succeeded
• Live health check succeeded against https://launchplane.shinycomputers.com/v1/health with postgres backend

This closes the Every Code queue extraction slice for #307. Remaining cleanup can continue with another App shell panel boundary.

[cbusillo]

Next slice starting May 7, 2026: extract the unauthenticated/operator auth panels from frontend/src/App.tsx into a focused component module.

Scope for this slice:

• move AuthPanel and ApiErrorPanel presentation only
• keep session/auth state and sign-out behavior in the App shell
• preserve login URL behavior and existing markup/classes

Validation target: pnpm --dir frontend typecheck, pnpm --dir frontend validate, browser smoke for unauthenticated UI, PR checks, deploy health.

[cbusillo]

Fourth UI slice completed May 7, 2026.

Landed PR #370: extracted unauthenticated auth/API error panel rendering from frontend/src/App.tsx into frontend/src/AuthPanels.tsx, keeping session/auth state and sign-out behavior in the App shell.

Validation:

• Local: pnpm --dir frontend typecheck
• Local: pnpm --dir frontend validate
• Browser smoke: http://127.0.0.1:5181/ui/, verified unauthenticated sign-in panel renders correctly and browser console had no runtime errors
• PR Extract operator auth panels #370 checks passed: CI, Security, CodeQL
• Post-merge main checks passed: CI run 25471905585, Security run 25471905595, CodeQL run 25471905594
• Deploy Launchplane run 25471964054 succeeded
• Live health check succeeded against https://launchplane.shinycomputers.com/v1/health with postgres backend

This closes the auth panel extraction slice for #307. App.tsx is now below the original hotspot level by several focused presentation boundaries, with more panel splits still possible later.