feat: new ops console for the admin surface

The old admin was five separate html pages, so every navigation was a full
reload and the operational picture was scattered across all of them. Worth
saying: the api was never the problem, every endpoint answers in under 200ms.
It felt slow because of the architecture, not the backend.

This is a single page console. React and htm from a cdn, no bundler and no
babel-in-the-browser, because a runtime transpiler on every load is exactly the
slowness we are trying to get rid of. Hash routing, polling that keeps the last
good payload on screen instead of flashing a spinner, and stale responses are
dropped so a slow request cannot overwrite a newer one.

/admin/api/ops/overview answers the whole dashboard in one call rather than
making the browser fan out and stitch. It carries the things that actually
matter and were not visible anywhere before: when live evidence matures, why a
cohort does or does not clear the trade gate, which stage of the pipeline has
gone quiet, and what is sitting in dead letters.

Controls, all of which change production and all of which ask twice:
- requeue dead letters, which only ever moves dead_letter back to pending
- execution mode and a kill switch, now read from autonomy_settings on every
  poll instead of only from AUTONOMY_EXECUTION_MODE, so halting no longer needs
  a redeploy first
- run the reaction analysis and read its output

The d3 graph is framed rather than ported. It works, and rewriting it would risk
something valuable for nothing the operator can see.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WnNxwxfXSbeNtjvtz5gayb

workers/executionWorker.js

@@ -3,6 +3,7 @@ const { openRuntimeDb } = require('../src/db/runtime');
 const { initAutonomySchema } = require('../src/autonomy/schema');
 const { createOrderIntent } = require('../src/autonomy/orderIntents');
 const { createAlpacaPaperClient } = require('../src/brokers/alpacaPaper');
+const { getExecutionControls } = require('../src/autonomy/settings');
 
 function sleep(ms) { return new Promise((resolve) => setTimeout(resolve, ms)); }
 
@@ -12,10 +13,27 @@ async function runExecutionWorker({ intelligencePath, pollMs = 10000, mode = 'sh
   db.pragma('journal_mode = WAL');
   db.pragma('busy_timeout = 5000');
   initAutonomySchema(db);
-  const paperClient = mode === 'paper'
-    ? createAlpacaPaperClient({ keyId: process.env.ALPACA_PAPER_KEY_ID, secretKey: process.env.ALPACA_PAPER_SECRET_KEY })
-    : null;
+
+  // mode is re-read every poll now. the env var is only the default, so the kill
+  // switch actually works during an incident instead of needing a redeploy first.
+  let paperClient = null;
+  let lastMode = null;
+  let lastKill = null;
+
   while (true) {
+    const controls = getExecutionControls(db, { AUTONOMY_EXECUTION_MODE: mode });
+    if (controls.mode !== lastMode) {
+      console.log(`[${workerId}] execution mode = ${controls.mode} (from ${controls.modeSource})`);
+      lastMode = controls.mode;
+    }
+    if (controls.killSwitch !== lastKill) {
+      console.log(`[${workerId}] kill switch ${controls.killSwitch ? 'ENGAGED, no orders will be placed' : 'released'}`);
+      lastKill = controls.killSwitch;
+    }
+    if (controls.mode === 'paper' && !paperClient) {
+      paperClient = createAlpacaPaperClient({ keyId: process.env.ALPACA_PAPER_KEY_ID, secretKey: process.env.ALPACA_PAPER_SECRET_KEY });
+    }
+    if (controls.mode !== 'paper') paperClient = null;
     if (paperClient) {
       try {
         const [account, positions, orders] = await Promise.all([
@@ -49,7 +67,9 @@ async function runExecutionWorker({ intelligencePath, pollMs = 10000, mode = 'sh
         console.error(`[${workerId}] broker reconciliation:`, error.message);
       }
     }
-    const decisions = db.prepare(`
+    // Broker reconciliation above still runs while the switch is engaged, we want
+    // to keep seeing the account. It is order creation specifically that stops.
+    const decisions = controls.killSwitch ? [] : db.prepare(`
       SELECT d.id FROM autonomy_decisions d
       JOIN autonomy_predictions p ON p.id = d.prediction_id
       LEFT JOIN autonomy_order_intents oi ON oi.decision_id = d.id
@@ -59,8 +79,8 @@ async function runExecutionWorker({ intelligencePath, pollMs = 10000, mode = 'sh
     for (const decision of decisions) {
       try {
         const intent = createOrderIntent(db, decision.id, notional, { tradable: true, maxNotional: notional });
-        if (mode === 'paper') db.prepare("UPDATE autonomy_order_intents SET status='pending', updated_at=datetime('now') WHERE client_order_id=?").run(intent.clientOrderId);
-        console.log(`[${workerId}] ${mode} intent ${intent.clientOrderId}`);
+        if (controls.mode === 'paper') db.prepare("UPDATE autonomy_order_intents SET status='pending', updated_at=datetime('now') WHERE client_order_id=?").run(intent.clientOrderId);
+        console.log(`[${workerId}] ${controls.mode} intent ${intent.clientOrderId}`);
       } catch (error) {
         console.error(`[${workerId}] decision ${decision.id}:`, error.message);
       }