Summary

Two deliverables. Primary is the sidebar restructure CC#2 flagged in #198 (past 25 entries, hard to scan); secondary is the verification that AlertInvestigationsPage (built forward-compat in #198) actually renders correctly against real #197 alert payloads.

• A) Sidebar restructure — 9 operator-friendly groups; 3 default-collapsed; per-group collapse state persisted to localStorage; per-group attention badge summing in-group items.
• B) Alert viewer verification — surprise finding: feat(kora): KR-ALERT-WAKE-AND-EMAIL-INTENT-PROMOTION-AND-ROUTER-LOOSEN-MEGABUCKET — 3 deliverables #197 doesn't emit alert.wake_requested. Endpoint rewritten to drive off alert.investigation_completed (real primary signal). FE type tightened: alert_id added, speculative title/detail dropped.

Per-deliverable status

Deliverable A — Sidebar restructure ✅

• 43 nav entries grouped into 9 operator-friendly buckets:
  • Expanded by default: Overview / Watch / Email / Promotion Loops / Activity & Reasoning / Control & Tickets
  • Collapsed by default: Daemon & Listeners / Settings / Diagnostic & Docs
• useSidebarGroupCollapse hook persists per-group state to localStorage["kora.sidebar.groupCollapse.v1"]; operator overrides win over group defaults.
• SidebarNavGroup component (keyboard-actionable: aria-expanded / aria-controls).
• Per-group badgeCount = sum of in-group items' badgeCount (operator sees "Promotion Loops 3" without expanding).
• Plugin items keep their existing bottom section (no behavioral change).

Deliverable B — Alert viewer verification ✅

Type-assumption gaps found + fixed:

1. ❌ Pre-feat(kora): KR-ALERT-WAKE-AND-EMAIL-INTENT-PROMOTION-AND-ROUTER-LOOSEN-MEGABUCKET — 3 deliverables #197 assumed alert.wake_requested seam exists → ✅ Reality: only alert.investigation_completed is emitted. Endpoint rewritten to iterate completed_rows as the primary signal.
2. ❌ Pre-feat(kora): KR-ALERT-WAKE-AND-EMAIL-INTENT-PROMOTION-AND-ROUTER-LOOSEN-MEGABUCKET — 3 deliverables #197 speculated title + detail fields → ✅ Reality: no such fields in payload. FE drops them; operator-facing context comes from category + investigation_summary_text.
3. ❌ Pre-feat(kora): KR-ALERT-WAKE-AND-EMAIL-INTENT-PROMOTION-AND-ROUTER-LOOSEN-MEGABUCKET — 3 deliverables #197 missed alert_id field → ✅ Added: surfaces as a font-mono chip on each card (first 12 chars of UUID) for cross-referencing the originating alert in /alerts.

Drill-down verified for alert IDs: _DRILL_DOWN_SUPPORTED_SEAMS includes alert.investigation_completed (added in #198); FastAPI's {caller_session_id:path} accepts the alert:category:severity literal. No BE changes needed — the drill-down endpoint already handles alert sessions.

Empty state preserved: when window has no completion rows, page renders the calm "Kora hasn't been woken by alerts" empty state.

Drift-guard pin summary (8 new / extended)

STOP-ASKs resolved inline

1. Sidebar grouping conflicts with routing — no conflict; refactor kept BUILTIN_NAV_REST as a derived view (flatMap) for backward-compat with partitionSidebarNav + plugin-position insertion logic.
2. Real feat(kora): KR-ALERT-WAKE-AND-EMAIL-INTENT-PROMOTION-AND-ROUTER-LOOSEN-MEGABUCKET — 3 deliverables #197 alert payload divergence — significant. Pre-feat(kora): KR-ALERT-WAKE-AND-EMAIL-INTENT-PROMOTION-AND-ROUTER-LOOSEN-MEGABUCKET — 3 deliverables #197 forward-compat in feat(kora): KR-FE-PROMOTION-REVIEW-MULTI-LOOP-EXTEND-MEGABUCKET — 5 new card variants + alert investigations viewer #198 assumed probe-parallel shape (wake row + title/detail). Reality is consumer-only emission with alert_id. FE shape adjusted; BE endpoint rewritten; drift-guards pinned the new alignment.
3. Drill-down for alert IDs — no BE changes needed. _DRILL_DOWN_SUPPORTED_SEAMS already includes the alert seams (added in feat(kora): KR-FE-PROMOTION-REVIEW-MULTI-LOOP-EXTEND-MEGABUCKET — 5 new card variants + alert investigations viewer #198); the endpoint matches any literal caller_session_id so alert:cost_ladder:critical joins without endpoint changes.

Screenshots

All 3 in web/docs/cockpit-nav-restructure-and-alert-viewer-verification/:

• sidebar_before.png — flat 43-entry sidebar (operator scans the whole list)
• sidebar_after.png — 9 groups; operator-priority surfaces expanded; daemon/settings/diagnostic collapsed; "Promotion Loops 3" badge sum
• alert_investigations_populated.png — 3 real-shape alert investigations rendering correctly (cost_ladder critical + webhook_dead_letter warning + reasoning_halted warning), each with id: <prefix> chip + drill link

Test plan

• tsc -b clean
• vite build clean
• 115 new + retained tests pass (sidebar pins + alert verification + drift-guards)
• Full tests/kora_cli/ regression: 0 new failures (76 vs 76 on base via stash)
• Operator smoke: collapse "Daemon & Listeners" group → refresh page → confirm preference survives
• Operator smoke: open /alert-investigations post-feat(kora): KR-ALERT-WAKE-AND-EMAIL-INTENT-PROMOTION-AND-ROUTER-LOOSEN-MEGABUCKET — 3 deliverables #197 → confirm real cards render with cost / model / DM status / alert_id chip
• Operator smoke: click "drill" on an alert card → confirm InvestigationDrillDown surfaces the alert.investigation_completed audit row

Recommended next CC#2 dispatch

• KR-FE-OPERATOR-FIRST-RUN-WIZARD — as Kora's pip-installable bundle gets closer, a first-run wizard would help operators get from pip install kora to a working cockpit faster (env vars, IsoKron auth, Slack DM channel ID, first probe wake). Single-deliverable bucket; pairs with the daemon migration work landing in parallel.
• KR-FE-SIDEBAR-MOBILE-COLLAPSE-UX — the group-collapse pattern shipped here works well on desktop but mobile sidebar slides out as a full-screen overlay; need to verify collapse interaction works there + maybe a "collapse all" shortcut. Small follow-on.

🤖 Generated with Claude Code