@aiworker/web 1.22.0 → 1.22.2

package/server/lib/scheduled-tasks/routes.js

@@ -15,7 +15,7 @@ export const registerScheduledTaskRoutes = (app, dependencies) => {
     sanitizeProjects,
     projectConfigRuntime,
     scheduledTasksRuntime,
-    getOpenChamberEventClients,
+    getAiWorkerEventClients,
     writeSseEvent,
     scheduledTaskService = createScheduledTaskService(dependencies),
   } = dependencies;
@@ -149,14 +149,14 @@ export const registerScheduledTaskRoutes = (app, dependencies) => {
     // not of this server: a desktop shell and a browser tab can be connected to
     // the same server at once. Recording it on the connection keeps the answer
     // current without any enable/disable setting to go stale.
-    res.openchamberBrowserCapable = req.query?.browser === '1';
+    res.aiworkerBrowserCapable = req.query?.browser === '1';
 
-    const clients = getOpenChamberEventClients();
+    const clients = getAiWorkerEventClients();
     clients.add(res);
 
     try {
       writeSseEvent(res, {
-        type: 'openchamber:event-stream-ready',
+        type: 'aiworker:event-stream-ready',
         properties: {
           connectedAt: Date.now(),
         },
@@ -167,7 +167,7 @@ export const registerScheduledTaskRoutes = (app, dependencies) => {
     const heartbeat = setInterval(() => {
       try {
         writeSseEvent(res, {
-          type: 'openchamber:heartbeat',
+          type: 'aiworker:heartbeat',
           properties: {
             timestamp: Date.now(),
           },

package/server/lib/scheduled-tasks/service.js

@@ -1,6 +1,6 @@
 import fs from 'node:fs';
 import path from 'node:path';
-import { OpenChamberControlError } from '../openchamber-control/error.js';
+import { AiWorkerControlError } from '../openchamber-control/error.js';
 import { setLoopFileEnabled } from './loops.js';
 
 const asNonEmptyString = (value) => {
@@ -24,10 +24,10 @@ export const createScheduledTaskService = (dependencies) => {
 
   const findProjectByID = async (projectID) => {
     const normalized = asNonEmptyString(projectID);
-    if (!normalized) throw new OpenChamberControlError('projectId is required', 400);
+    if (!normalized) throw new AiWorkerControlError('projectId is required', 400);
     const projects = await listProjects();
     const project = projects.find((entry) => entry.id === normalized) || null;
-    if (!project) throw new OpenChamberControlError('Project not found', 404);
+    if (!project) throw new AiWorkerControlError('Project not found', 404);
     return project;
   };
 
@@ -35,17 +35,17 @@ export const createScheduledTaskService = (dependencies) => {
     const requestedProjectID = asNonEmptyString(projectId);
     const requestedDirectory = asNonEmptyString(directory);
     if (requestedProjectID && requestedDirectory) {
-      throw new OpenChamberControlError('Provide only one of projectId or directory', 400);
+      throw new AiWorkerControlError('Provide only one of projectId or directory', 400);
     }
     if (requestedProjectID) {
       await findProjectByID(requestedProjectID);
       return requestedProjectID;
     }
-    if (!requestedDirectory) throw new OpenChamberControlError('projectId or directory is required', 400);
+    if (!requestedDirectory) throw new AiWorkerControlError('projectId or directory is required', 400);
     const resolvedDirectory = path.resolve(requestedDirectory);
     const projects = await listProjects();
     const project = projects.find((entry) => path.resolve(entry.path) === resolvedDirectory);
-    if (!project) throw new OpenChamberControlError(`Project not found for directory: ${resolvedDirectory}`, 404);
+    if (!project) throw new AiWorkerControlError(`Project not found for directory: ${resolvedDirectory}`, 404);
     return project.id;
   };
 
@@ -57,28 +57,28 @@ export const createScheduledTaskService = (dependencies) => {
   const findLoopTask = async (projectID, taskID) => {
     await findProjectByID(projectID);
     const normalizedTaskID = asNonEmptyString(taskID);
-    if (!normalizedTaskID) throw new OpenChamberControlError('taskId is required', 400);
+    if (!normalizedTaskID) throw new AiWorkerControlError('taskId is required', 400);
     const tasks = await scheduledTasksRuntime.syncProject(projectID);
     const task = tasks.find((entry) => entry?.id === normalizedTaskID) || null;
-    if (!task) throw new OpenChamberControlError('Task not found', 404);
-    if (!task.loopFile) throw new OpenChamberControlError('Task is not managed by a loop file', 400);
-    if (!fs.existsSync(task.loopFile)) throw new OpenChamberControlError('Loop file not found', 404);
+    if (!task) throw new AiWorkerControlError('Task not found', 404);
+    if (!task.loopFile) throw new AiWorkerControlError('Task is not managed by a loop file', 400);
+    if (!fs.existsSync(task.loopFile)) throw new AiWorkerControlError('Loop file not found', 404);
     return task;
   };
 
   const setLoopEnabled = async (projectID, taskID, enabled) => {
     if (typeof enabled !== 'boolean') {
-      throw new OpenChamberControlError('enabled must be a boolean', 400);
+      throw new AiWorkerControlError('enabled must be a boolean', 400);
     }
     const task = await findLoopTask(projectID, taskID);
     try {
       if (!setLoopFileEnabled(task.loopFile, enabled)) {
-        throw new OpenChamberControlError('Loop file must be valid before changing its enabled state', 400);
+        throw new AiWorkerControlError('Loop file must be valid before changing its enabled state', 400);
       }
     } catch (error) {
-      if (error instanceof OpenChamberControlError) throw error;
+      if (error instanceof AiWorkerControlError) throw error;
       const message = error instanceof Error ? error.message : 'Failed to update loop file';
-      throw new OpenChamberControlError(message, 500);
+      throw new AiWorkerControlError(message, 500);
     }
     const tasks = await scheduledTasksRuntime.syncProject(projectID);
     return tasks.find((entry) => entry.id === taskID) || null;
@@ -90,7 +90,7 @@ export const createScheduledTaskService = (dependencies) => {
       fs.unlinkSync(task.loopFile);
     } catch (error) {
       const message = error instanceof Error ? error.message : 'Failed to delete loop file';
-      throw new OpenChamberControlError(message, 500);
+      throw new AiWorkerControlError(message, 500);
     }
     return scheduledTasksRuntime.syncProject(projectID);
   };
@@ -98,7 +98,7 @@ export const createScheduledTaskService = (dependencies) => {
   const upsert = async (projectID, taskInput) => {
     await findProjectByID(projectID);
     if (!taskInput || typeof taskInput !== 'object') {
-      throw new OpenChamberControlError('task payload is required', 400);
+      throw new AiWorkerControlError('task payload is required', 400);
     }
     let upserted;
     try {
@@ -106,7 +106,7 @@ export const createScheduledTaskService = (dependencies) => {
     } catch (error) {
       const message = error instanceof Error ? error.message : 'Failed to save scheduled task';
       const invalid = message.toLowerCase().includes('required') || message.toLowerCase().includes('invalid');
-      throw new OpenChamberControlError(message, invalid ? 400 : 500);
+      throw new AiWorkerControlError(message, invalid ? 400 : 500);
     }
     await scheduledTasksRuntime.syncProject(projectID);
     const tasks = await projectConfigRuntime.listScheduledTasks(projectID);
@@ -120,7 +120,7 @@ export const createScheduledTaskService = (dependencies) => {
   const remove = async (projectID, taskID) => {
     await findProjectByID(projectID);
     const normalizedTaskID = asNonEmptyString(taskID);
-    if (!normalizedTaskID) throw new OpenChamberControlError('taskId is required', 400);
+    if (!normalizedTaskID) throw new AiWorkerControlError('taskId is required', 400);
     const current = await projectConfigRuntime.listScheduledTasks(projectID);
     const existing = current.find((task) => task.id === normalizedTaskID) || null;
     if (existing?.loopFile && fs.existsSync(existing.loopFile)) {
@@ -129,13 +129,13 @@ export const createScheduledTaskService = (dependencies) => {
       // file exists. The file itself is the removal surface. Once the file is
       // gone (the task is an orphan that the next sync would remove anyway),
       // deleting the row is safe and allowed.
-      throw new OpenChamberControlError(
+      throw new AiWorkerControlError(
         'Loop task is managed by its .agents/loops markdown file; delete the file to remove the task',
         400,
       );
     }
     const result = await projectConfigRuntime.deleteScheduledTask(projectID, normalizedTaskID);
-    if (!result.deleted) throw new OpenChamberControlError('Task not found', 404);
+    if (!result.deleted) throw new AiWorkerControlError('Task not found', 404);
     await scheduledTasksRuntime.syncProject(projectID);
     return projectConfigRuntime.listScheduledTasks(projectID);
   };
@@ -143,14 +143,14 @@ export const createScheduledTaskService = (dependencies) => {
   const run = async (projectID, taskID) => {
     await findProjectByID(projectID);
     const normalizedTaskID = asNonEmptyString(taskID);
-    if (!normalizedTaskID) throw new OpenChamberControlError('taskId is required', 400);
+    if (!normalizedTaskID) throw new AiWorkerControlError('taskId is required', 400);
     const result = await scheduledTasksRuntime.runNow(projectID, normalizedTaskID);
     if (result.running || result.queued) {
-      throw new OpenChamberControlError(result.error || 'Task already running', 409);
+      throw new AiWorkerControlError(result.error || 'Task already running', 409);
     }
-    if (result.skipped) throw new OpenChamberControlError('Task not found or disabled', 404);
+    if (result.skipped) throw new AiWorkerControlError('Task not found or disabled', 404);
     if (!result.ok) {
-      throw new OpenChamberControlError(result.error || 'Task run failed', 500, { task: result.task });
+      throw new AiWorkerControlError(result.error || 'Task run failed', 500, { task: result.task });
     }
     return {
       task: result.task,
@@ -164,7 +164,7 @@ export const createScheduledTaskService = (dependencies) => {
   const setEnabled = async (projectID, taskID, enabled) => {
     const tasks = await list(projectID);
     const task = tasks.find((entry) => entry?.id === taskID);
-    if (!task) throw new OpenChamberControlError('Task not found', 404);
+    if (!task) throw new AiWorkerControlError('Task not found', 404);
     const result = await upsert(projectID, { ...task, enabled });
     return result.task;
   };

package/server/lib/scheduled-tasks/service.test.js

@@ -166,7 +166,7 @@ describe('scheduled-task loop-file routes', () => {
       sanitizeProjects: vi.fn(),
       projectConfigRuntime: {},
       scheduledTasksRuntime: {},
-      getOpenChamberEventClients: () => new Set(),
+      getAiWorkerEventClients: () => new Set(),
       writeSseEvent: vi.fn(),
     });
     return handlers;

package/server/lib/security/bind-host.js

@@ -32,9 +32,9 @@ export const isLoopbackBindHost = (host) => {
 export const isNetworkExposedBindHost = (host) => !isLoopbackBindHost(host);
 
 export const isUnsafeUnauthenticatedLanAllowed = (env = process.env) =>
-  env?.OPENCHAMBER_ALLOW_UNAUTHENTICATED_LAN === 'true';
+  env?.AIWORKER_ALLOW_UNAUTHENTICATED_LAN === 'true';
 
 export const getUnauthenticatedLanErrorMessage = (host) =>
-  `OpenChamber refuses to bind to ${host || 'a network-exposed host'} without UI authentication. `
-  + 'Set --ui-password or OPENCHAMBER_UI_PASSWORD before exposing it over LAN, '
-  + 'or set OPENCHAMBER_ALLOW_UNAUTHENTICATED_LAN=true to accept the risk.';
+  `AiWorker refuses to bind to ${host || 'a network-exposed host'} without UI authentication. `
+  + 'Set --ui-password or AIWORKER_UI_PASSWORD before exposing it over LAN, '
+  + 'or set AIWORKER_ALLOW_UNAUTHENTICATED_LAN=true to accept the risk.';

package/server/lib/security/bind-host.test.js

@@ -25,7 +25,7 @@ describe('bind host exposure classification', () => {
       '::ffff:192.168.1.10',
       'fe80::1',
       'fc00::1',
-      'openchamber.local',
+      'aiworker.local',
       'example.com',
       '',
     ]) {

package/server/lib/security/request-security.js

@@ -103,7 +103,7 @@ export const createRequestSecurityRuntime = (deps) => {
     return { origins, hosts };
   };
 
-  const isRequestOriginAllowed = async (req) => {
+  const isRequestOriginAllowed = (req) => {
     const originHeader = typeof req.headers.origin === 'string' ? req.headers.origin.trim() : '';
     if (!originHeader) {
       return false;
@@ -120,15 +120,21 @@ export const createRequestSecurityRuntime = (deps) => {
       return false;
     }
 
-    const candidates = await getRequestOriginCandidates(req);
-    if (candidates.origins.has(origin.origin)) return true;
+    const forwardedHostHeader = req.headers['x-forwarded-host'];
+    const forwardedHost = (Array.isArray(forwardedHostHeader) ? forwardedHostHeader[0] : forwardedHostHeader || '')
+      .split(',')[0].trim().toLowerCase();
+    const hostHeader = req.headers.host;
+    const host = forwardedHost || (Array.isArray(hostHeader) ? hostHeader[0] : hostHeader || '').trim().toLowerCase();
+    if (host && host === origin.host.toLowerCase()) return true;
 
-    // TLS commonly ends at a cloud edge before an HTTP hop to OpenChamber.
+    // TLS commonly ends at a cloud edge before an HTTP hop to AiWorker.
     // In that setup the browser's Origin is https while a generic reverse
     // proxy reports the upstream request as http. The external host remains
     // authoritative, so compare it directly instead of requiring the proxy to
     // preserve the browser-facing protocol.
-    return candidates.hosts.has(origin.host.toLowerCase());
+    return getRequestOriginCandidates(req).then((candidates) => (
+      candidates.origins.has(origin.origin) || candidates.hosts.has(origin.host.toLowerCase())
+    ));
   };
 
   return {

package/server/lib/security/request-security.test.js

@@ -9,55 +9,55 @@ describe('request security runtime', () => {
   test('allows packaged client origins for remote client transports', async () => {
     const runtime = createRuntime();
 
-    await expect(runtime.isRequestOriginAllowed({
+    expect(await runtime.isRequestOriginAllowed({
       headers: {
         origin: 'openchamber-ui://app',
         host: '192.168.1.130:1202',
       },
       socket: {},
-    })).resolves.toBe(true);
+    })).toBe(true);
 
-    await expect(runtime.isRequestOriginAllowed({
+    expect(await runtime.isRequestOriginAllowed({
       headers: {
         origin: 'capacitor://localhost',
         host: '192.168.1.130:1202',
       },
       socket: {},
-    })).resolves.toBe(true);
+    })).toBe(true);
 
     // Android Capacitor WebView (androidScheme 'https') reports this origin.
-    await expect(runtime.isRequestOriginAllowed({
+    expect(await runtime.isRequestOriginAllowed({
       headers: {
         origin: 'https://localhost',
         host: '192.168.1.130:1202',
       },
       socket: {},
-    })).resolves.toBe(true);
+    })).toBe(true);
   });
 
   test('rejects unknown origins', async () => {
     const runtime = createRuntime();
 
-    await expect(runtime.isRequestOriginAllowed({
+    expect(await runtime.isRequestOriginAllowed({
       headers: {
         origin: 'https://evil.example.com',
         host: '192.168.1.130:1202',
       },
       socket: {},
-    })).resolves.toBe(false);
+    })).toBe(false);
   });
 
   test('allows the external host when TLS terminates before an HTTP proxy hop', async () => {
     const runtime = createRuntime();
 
-    await expect(runtime.isRequestOriginAllowed({
+    expect(await runtime.isRequestOriginAllowed({
       headers: {
         origin: 'https://devchamber.example.com',
         host: 'devchamber.example.com',
         'x-forwarded-proto': 'http',
       },
       socket: {},
-    })).resolves.toBe(true);
+    })).toBe(true);
   });
 
   test('uses the forwarded external host without trusting a different origin', async () => {
@@ -71,13 +71,13 @@ describe('request security runtime', () => {
       socket: {},
     };
 
-    await expect(runtime.isRequestOriginAllowed({
+    expect(await runtime.isRequestOriginAllowed({
       ...request,
       headers: { ...request.headers, origin: 'https://devchamber.example.com' },
-    })).resolves.toBe(true);
-    await expect(runtime.isRequestOriginAllowed({
+    })).toBe(true);
+    expect(await runtime.isRequestOriginAllowed({
       ...request,
       headers: { ...request.headers, origin: 'https://evil.example.com' },
-    })).resolves.toBe(false);
+    })).toBe(false);
   });
 });

package/server/lib/session-assist/runtime.js

@@ -1,7 +1,7 @@
 // Session assist: after a session goes idle and stays quiet, generate a short
 // recap of the agent's last reply plus one suggested user follow-up with the
 // small model, and store both on the session's metadata
-// (metadata.openchamber.assist). Clients decide visibility from
+// (metadata.aiworker.assist). Clients decide visibility from
 // assist.forMessageID — a new message makes the payload stale everywhere
 // without any extra writes.
 //
@@ -12,10 +12,10 @@ import fs from 'fs';
 import os from 'os';
 import path from 'path';
 
-const OPENCHAMBER_SETTINGS_FILE = path.join(
-  process.env.OPENCHAMBER_DATA_DIR
-    ? path.resolve(process.env.OPENCHAMBER_DATA_DIR)
-    : path.join(os.homedir(), '.config', 'openchamber'),
+const AIWORKER_SETTINGS_FILE = path.join(
+  process.env.AIWORKER_DATA_DIR
+    ? path.resolve(process.env.AIWORKER_DATA_DIR)
+    : path.join(os.homedir(), '.config', 'aiworker'),
   'settings.json',
 );
 
@@ -24,7 +24,7 @@ const OPENCHAMBER_SETTINGS_FILE = path.join(
 // payloads stay untouched — clients keep showing them and dismissal still works.
 const getSessionAssistTargets = () => {
   try {
-    const raw = fs.readFileSync(OPENCHAMBER_SETTINGS_FILE, 'utf8');
+    const raw = fs.readFileSync(AIWORKER_SETTINGS_FILE, 'utf8');
     const settings = JSON.parse(raw);
     return {
       recap: settings?.sessionRecapEnabled !== false,
@@ -257,6 +257,7 @@ export const createSessionAssistRuntime = ({
         prompt: `The latest exchange in the conversation:\n\n${transcript}\n\nWrite ${requestedFields} in the SAME language as this sample from the conversation: "${languageSample}"`,
         system: buildAssistSystemPrompt(targets),
         directory,
+        sessionID: sessionId,
         preferredProviderID: typeof lastAssistantInfo.providerID === 'string' ? lastAssistantInfo.providerID : undefined,
         preferredModelID: typeof lastAssistantInfo.modelID === 'string' ? lastAssistantInfo.modelID : undefined,
       });
@@ -316,8 +317,8 @@ export const createSessionAssistRuntime = ({
     const currentMetadata = freshSession?.metadata && typeof freshSession.metadata === 'object'
       ? freshSession.metadata
       : (session.metadata && typeof session.metadata === 'object' ? session.metadata : {});
-    const currentNamespace = currentMetadata.openchamber && typeof currentMetadata.openchamber === 'object'
-      ? currentMetadata.openchamber
+    const currentNamespace = currentMetadata.aiworker && typeof currentMetadata.aiworker === 'object'
+      ? currentMetadata.aiworker
       : {};
 
     console.log(`[session-assist] generated for ${sessionId} via ${generated.providerID}/${generated.modelID}`);
@@ -327,7 +328,7 @@ export const createSessionAssistRuntime = ({
       body: {
         metadata: {
           ...currentMetadata,
-          openchamber: {
+          aiworker: {
             ...currentNamespace,
             assist: {
               recap,

package/server/lib/session-folders/routes.js

@@ -32,10 +32,10 @@ export const registerSessionFoldersRoutes = (app, dependencies) => {
   const {
     fsPromises,
     path,
-    openchamberDataDir,
+    aiworkerDataDir,
   } = dependencies;
 
-  const filePath = path.join(openchamberDataDir, 'sessions-directories.json');
+  const filePath = path.join(aiworkerDataDir, 'sessions-directories.json');
   let saveQueue = Promise.resolve();
 
   const ensureDir = async () => {

package/server/lib/session-folders/routes.test.js

@@ -73,7 +73,7 @@ describe('session folders routes', () => {
     registerSessionFoldersRoutes(app, {
       fsPromises,
       path,
-      openchamberDataDir: '/tmp/openchamber-test',
+      aiworkerDataDir: '/tmp/openchamber-test',
     });
 
     const handler = getRoute('POST', '/api/session-folders');
@@ -103,7 +103,7 @@ describe('session folders routes', () => {
     registerSessionFoldersRoutes(app, {
       fsPromises,
       path,
-      openchamberDataDir: '/tmp/openchamber-test',
+      aiworkerDataDir: '/tmp/openchamber-test',
     });
 
     const handler = getRoute('POST', '/api/session-folders');
@@ -121,7 +121,7 @@ describe('session folders routes', () => {
     registerSessionFoldersRoutes(app, {
       fsPromises,
       path,
-      openchamberDataDir: '/tmp/openchamber-test',
+      aiworkerDataDir: '/tmp/openchamber-test',
     });
 
     const response = createMockResponse();
@@ -137,7 +137,7 @@ describe('session folders routes', () => {
     registerSessionFoldersRoutes(app, {
       fsPromises,
       path,
-      openchamberDataDir: '/tmp/openchamber-test',
+      aiworkerDataDir: '/tmp/openchamber-test',
     });
 
     const response = createMockResponse();
@@ -156,7 +156,7 @@ describe('session folders routes', () => {
     registerSessionFoldersRoutes(app, {
       fsPromises,
       path,
-      openchamberDataDir: '/tmp/openchamber-test',
+      aiworkerDataDir: '/tmp/openchamber-test',
     });
 
     const response = createMockResponse();
@@ -181,7 +181,7 @@ describe('session folders routes', () => {
     registerSessionFoldersRoutes(app, {
       fsPromises,
       path,
-      openchamberDataDir: '/tmp/openchamber-test',
+      aiworkerDataDir: '/tmp/openchamber-test',
     });
 
     const response = createMockResponse();
@@ -204,7 +204,7 @@ describe('session folders routes', () => {
     registerSessionFoldersRoutes(app, {
       fsPromises,
       path,
-      openchamberDataDir: '/tmp/openchamber-test',
+      aiworkerDataDir: '/tmp/openchamber-test',
     });
 
     const response = createMockResponse();
@@ -227,7 +227,7 @@ describe('session folders routes', () => {
     registerSessionFoldersRoutes(app, {
       fsPromises,
       path,
-      openchamberDataDir: '/tmp/openchamber-test',
+      aiworkerDataDir: '/tmp/openchamber-test',
     });
 
     const response = createMockResponse();

package/server/lib/session-goal/DOCUMENTATION.md

@@ -108,13 +108,26 @@ before touching the filesystem). Rationale: metadata rides every
      stop), with a tick-side safety net. Messages sent while paused leave
      the goal alone; Resume re-arms the loop, and resuming over an aborted
      tail skips the audit and goes straight to a continuation nudge;
-   - terminal checks, cheapest first: assistant turn error → `blocked`;
-     `tokensUsed >= tokenBudget` → `budgetLimited`;
-     `turnsUsed >= MAX_AUTO_TURNS` (20) → `blocked`;
-   - if the latest message is a compaction summary, skip the audit and
-     continue unconditionally — running into the context window mid-work is
-     by definition "in progress, not finished" (the summary is a retelling,
-     not evidence, and must not be judged);
+    - terminal checks, cheapest first: assistant turn error → `blocked`;
+      `tokensUsed >= tokenBudget` → `budgetLimited`;
+      `turnsUsed >= MAX_AUTO_TURNS` (20) → `blocked`;
+    - error classification is independent of `finish`: `MessageAbortedError`
+      keeps the pause/resume behavior; only a `finish: "length"` with no
+      error, or `MessageOutputLengthError`, is an in-progress truncation that
+      skips the audit and continues. Any other non-null error wins over a
+      length finish and blocks with its non-empty `error.name`, or
+      `assistant turn failed` when unnamed;
+    - length recovery is bounded separately from the token budget and
+      auto-continuation cap: the first truncation permits one continuation, but
+      a second consecutive completed, non-summary assistant turn that is also
+      truncated settles the goal as `blocked` (`repeated output truncation`).
+      The consecutive state is derived from the loaded message history, not
+      persisted, using `info.time.created` chronology rather than message IDs.
+      Summary messages are not agent turns; an ordinary completed assistant
+      turn naturally breaks the consecutive condition. Explicit Resume grants
+      one new recovery attempt over the same transcript; the continuation
+      consumes that permission, so another truncation blocks again. Resume
+      does not bypass assistant errors or the token budget;
    - otherwise, small-model audit of the objective + the last assistant turn
      only — no conversation history and no continuation prompts
      (`restrictToPreferredProvider`, session's own provider/model preferred):

package/server/lib/session-goal/create.js

@@ -14,7 +14,7 @@ export const buildGoalIntroText = (tokenBudget) => {
     + '\n</system-reminder>';
 };
 
-const fitObjective = async ({ objective, directory, providerID, modelID, warn }) => {
+const fitObjective = async ({ objective, directory, sessionID, providerID, modelID, warn }) => {
   if (objective.length <= GOAL_OBJECTIVE_CHAR_LIMIT) return objective;
 
   let distilled = null;
@@ -32,6 +32,7 @@ const fitObjective = async ({ objective, directory, providerID, modelID, warn })
         'Write in the same language as the task text.',
       ].join('\n'),
       directory,
+      sessionID,
       preferredProviderID: providerID,
       preferredModelID: modelID,
     });
@@ -66,6 +67,7 @@ export const createSessionGoal = async ({
   const objectiveText = await fitObjective({
     objective: String(objective ?? '').trim(),
     directory,
+    sessionID,
     providerID,
     modelID,
     warn,
@@ -105,7 +107,7 @@ export const createSessionGoal = async ({
       'content-type': 'application/json',
       accept: 'application/json',
     },
-    body: JSON.stringify({ metadata: { openchamber: { goal } } }),
+    body: JSON.stringify({ metadata: { aiworker: { goal } } }),
   });
   if (!response.ok) throw new Error(`goal metadata patch failed (${response.status})`);
   return goal;

package/server/lib/session-goal/create.test.js

@@ -64,7 +64,7 @@ describe('session goal creation', () => {
       });
 
       const payload = JSON.parse(fetchMock.mock.calls[0][1].body);
-      expect(payload.metadata.openchamber.goal).toMatchObject({
+      expect(payload.metadata.aiworker.goal).toMatchObject({
         objective: 'Finish the migration',
         objectiveFile: false,
       });

package/server/lib/session-goal/objectives.js

@@ -1,6 +1,6 @@
 // File-backed goal objectives. Session metadata must stay light (it rides
 // every session.updated event), so the objective TEXT lives in a file under
-// the OpenChamber data dir, keyed by the SESSION ID: sessions are globally
+// the AiWorker data dir, keyed by the SESSION ID: sessions are globally
 // unique and carry at most one goal at a time, so the mapping is fully
 // deterministic — the metadata only carries an `objectiveFile: true` flag,
 // never a path, and user-writable metadata cannot become a file-read vector.
@@ -16,9 +16,9 @@ export const GOAL_OBJECTIVE_CHAR_LIMIT = 5_000;
 const SESSION_ID_PATTERN = /^[A-Za-z0-9_-]{4,128}$/;
 
 const goalsDir = () => path.join(
-  process.env.OPENCHAMBER_DATA_DIR
-    ? path.resolve(process.env.OPENCHAMBER_DATA_DIR)
-    : path.join(os.homedir(), '.config', 'openchamber'),
+  process.env.AIWORKER_DATA_DIR
+    ? path.resolve(process.env.AIWORKER_DATA_DIR)
+    : path.join(os.homedir(), '.config', 'aiworker'),
   'goals',
 );
 

package/server/lib/session-goal/routes.js

@@ -1,6 +1,6 @@
 import { deleteObjective, readObjective, writeObjective } from './objectives.js';
 
-// OpenChamber-owned routes for file-backed goal objectives, keyed by session
+// AiWorker-owned routes for file-backed goal objectives, keyed by session
 // id (one goal per session; a new goal overwrites the old file). The UI
 // writes the objective file before stamping the goal metadata (which only
 // carries an `objectiveFile: true` flag), reads it back for display, and