@aiworker/web 1.22.0 → 1.23.0

package/server/lib/github/auth.js

@@ -2,13 +2,13 @@ import fs from 'fs';
 import path from 'path';
 import os from 'os';
 
-const OPENCHAMBER_DATA_DIR = process.env.OPENCHAMBER_DATA_DIR
-  ? path.resolve(process.env.OPENCHAMBER_DATA_DIR)
-  : path.join(os.homedir(), '.config', 'openchamber');
+const AIWORKER_DATA_DIR = process.env.AIWORKER_DATA_DIR
+  ? path.resolve(process.env.AIWORKER_DATA_DIR)
+  : path.join(os.homedir(), '.config', 'aiworker');
 
-const STORAGE_DIR = OPENCHAMBER_DATA_DIR;
+const STORAGE_DIR = AIWORKER_DATA_DIR;
 const STORAGE_FILE = path.join(STORAGE_DIR, 'github-auth.json');
-const SETTINGS_FILE = path.join(OPENCHAMBER_DATA_DIR, 'settings.json');
+const SETTINGS_FILE = path.join(AIWORKER_DATA_DIR, 'settings.json');
 
 const DEFAULT_GITHUB_CLIENT_ID = 'Ov23lizomPOC3eFYo56r';
 const DEFAULT_GITHUB_SCOPES = 'repo read:org workflow read:user user:email';
@@ -45,7 +45,7 @@ function readJsonFile() {
 function writeJsonFile(payload) {
   ensureStorageDir();
 
-  // Atomic write so multiple OpenChamber instances can safely share the same file.
+  // Atomic write so multiple AiWorker instances can safely share the same file.
   const tmpFile = `${STORAGE_FILE}.${process.pid}.${Date.now()}.tmp`;
   fs.writeFileSync(tmpFile, JSON.stringify(payload, null, 2), 'utf8');
   try {
@@ -299,7 +299,7 @@ export function clearGitHubAuth() {
 }
 
 export function getGitHubClientId() {
-  const raw = process.env.OPENCHAMBER_GITHUB_CLIENT_ID;
+  const raw = process.env.AIWORKER_GITHUB_CLIENT_ID;
   const clientId = typeof raw === 'string' ? raw.trim() : '';
   if (clientId) return clientId;
 
@@ -317,7 +317,7 @@ export function getGitHubClientId() {
 }
 
 export function getGitHubScopes() {
-  const raw = process.env.OPENCHAMBER_GITHUB_SCOPES;
+  const raw = process.env.AIWORKER_GITHUB_SCOPES;
   const fromEnv = typeof raw === 'string' ? raw.trim() : '';
   if (fromEnv) return fromEnv;
 

package/server/lib/github/pr-status.js

@@ -339,7 +339,7 @@ const repoPullsCache = new Map();
 // head, and while that one is open the open-PR path wins and never reads this
 // cache at all. "No history yet" is the volatile answer, since closing or
 // merging a PR elsewhere flips it, so it expires far sooner. Either way, doing
-// it from OpenChamber invalidates the entry immediately.
+// it from AiWorker invalidates the entry immediately.
 const HISTORICAL_PR_FOUND_TTL_MS = 6 * 60 * 60 * 1000;
 const HISTORICAL_PR_ABSENT_TTL_MS = 10 * 60 * 1000;
 const HISTORICAL_PR_CACHE_MAX_ENTRIES = 500;

package/server/lib/github/routes.js

@@ -281,7 +281,7 @@ export function registerGitHubRoutes(app) {
       const clientId = getGitHubClientId();
       if (!clientId) {
         return res.status(400).json({
-          error: 'GitHub OAuth client not configured. Set OPENCHAMBER_GITHUB_CLIENT_ID.',
+          error: 'GitHub OAuth client not configured. Set AIWORKER_GITHUB_CLIENT_ID.',
         });
       }
 
@@ -313,7 +313,7 @@ export function registerGitHubRoutes(app) {
       const clientId = getGitHubClientId();
       if (!clientId) {
         return res.status(400).json({
-          error: 'GitHub OAuth client not configured. Set OPENCHAMBER_GITHUB_CLIENT_ID.',
+          error: 'GitHub OAuth client not configured. Set AIWORKER_GITHUB_CLIENT_ID.',
         });
       }
 

package/server/lib/inherited-env.js

@@ -6,13 +6,15 @@
  * external command it spawns, which corrupts Python venv detection and any
  * other program that reads argv[0]/$0 while leaving `/proc/self/exe` correct.
  *
- * See openchamber/openchamber#2588 and pingdotgg/t3code#2509.
+ * See aiworker/openchamber#2588 and pingdotgg/t3code#2509.
  */
 
 import { createRequire } from 'node:module';
 import { existsSync } from 'node:fs';
 
-const LINUX_ENV_BINARIES = ['/usr/bin/env', '/bin/env'];
+const POSIX_ENV_BINARIES = ['/usr/bin/env', '/bin/env'];
+/** Variables a PTY shell must never inherit from the AiWorker host process. */
+const PTY_HOST_PRIVATE_VARIABLES = Object.freeze(['ARGV0', 'NODE_CHANNEL_FD']);
 
 /**
  * Remove AppImage `ARGV0` from a mutable env object (or `process.env`).
@@ -49,26 +51,31 @@ export function clearAppImageArgv0FromProcessEnv() {
 }
 
 /**
- * Resolve a Linux PTY launch that drops native `ARGV0` before the shell starts.
+ * Resolve a POSIX PTY launch that unsets host-private variables before the
+ * shell starts.
  *
- * `bun-pty` merges the OS environ into the child, so deleting `ARGV0` from the
- * JS env object alone is not enough. Wrapping with `env -u ARGV0` unsets it
- * before execing the real shell. No-op on non-Linux platforms.
+ * `bun-pty` merges the OS environ into the child, so deleting a variable from
+ * the JS env object alone is not enough: AppImage `ARGV0` came back on Linux,
+ * and the daemon's `NODE_CHANNEL_FD` came back everywhere (Node then warns
+ * "Failed to parse IPC channel number" when a CLI such as opencode exits).
+ * Wrapping with `env -u NAME ...` unsets them before execing the real shell.
+ * No-op on Windows and when no `env` binary is found.
  *
  * @param {string} executable
  * @param {string[]} args
+ * @param {readonly string[]} variables
  * @returns {{ executable: string, args: string[] }}
  */
-export function resolveLinuxPtyLaunch(executable, args = []) {
-  if (process.platform !== 'linux') {
+export function resolvePosixPtyLaunch(executable, args = [], variables = PTY_HOST_PRIVATE_VARIABLES) {
+  if (process.platform === 'win32' || variables.length === 0) {
     return { executable, args };
   }
-  const envBinary = LINUX_ENV_BINARIES.find((candidate) => existsSync(candidate));
+  const envBinary = POSIX_ENV_BINARIES.find((candidate) => existsSync(candidate));
   if (!envBinary) {
     return { executable, args };
   }
   return {
     executable: envBinary,
-    args: ['-u', 'ARGV0', executable, ...args],
+    args: [...variables.flatMap((name) => ['-u', name]), executable, ...args],
   };
 }

package/server/lib/inherited-env.test.js

@@ -1,7 +1,7 @@
 import { describe, expect, it } from 'vitest';
 import {
   clearAppImageArgv0FromProcessEnv,
-  resolveLinuxPtyLaunch,
+  resolvePosixPtyLaunch,
   stripAppImageArgv0Leak,
 } from './inherited-env.js';
 
@@ -9,7 +9,7 @@ describe('stripAppImageArgv0Leak', () => {
   it('removes ARGV0 from a child env object', () => {
     const env = {
       PATH: '/usr/bin',
-      ARGV0: '/path/to/OpenChamber-1.17.2-linux-x86_64.AppImage',
+      ARGV0: '/path/to/AiWorker-1.17.2-linux-x86_64.AppImage',
       SHELL: '/bin/zsh',
     };
 
@@ -35,7 +35,7 @@ describe('stripAppImageArgv0Leak', () => {
 describe('clearAppImageArgv0FromProcessEnv', () => {
   it('removes ARGV0 from process.env', () => {
     const previous = process.env.ARGV0;
-    process.env.ARGV0 = '/path/to/OpenChamber.AppImage';
+    process.env.ARGV0 = '/path/to/AiWorker.AppImage';
     try {
       clearAppImageArgv0FromProcessEnv();
       expect(process.env.ARGV0).toBeUndefined();
@@ -46,18 +46,17 @@ describe('clearAppImageArgv0FromProcessEnv', () => {
   });
 });
 
-describe('resolveLinuxPtyLaunch', () => {
-  it('wraps the shell with env -u ARGV0 on Linux', () => {
-    if (process.platform !== 'linux') return;
-    expect(resolveLinuxPtyLaunch('/bin/zsh', ['-l'])).toEqual({
+describe('resolvePosixPtyLaunch', () => {
+  it('wraps the shell with env -u for every host-private variable on POSIX', () => {
+    if (process.platform === 'win32') return;
+    expect(resolvePosixPtyLaunch('/bin/zsh', ['-l'])).toEqual({
       executable: expect.stringMatching(/\/env$/),
-      args: ['-u', 'ARGV0', '/bin/zsh', '-l'],
+      args: ['-u', 'ARGV0', '-u', 'NODE_CHANNEL_FD', '/bin/zsh', '-l'],
     });
   });
 
-  it('leaves non-Linux launches unchanged', () => {
-    if (process.platform === 'linux') return;
-    expect(resolveLinuxPtyLaunch('/bin/zsh', ['-l'])).toEqual({
+  it('leaves the launch unchanged with nothing to unset', () => {
+    expect(resolvePosixPtyLaunch('/bin/zsh', ['-l'], [])).toEqual({
       executable: '/bin/zsh',
       args: ['-l'],
     });

package/server/lib/linear/auth.js

@@ -5,17 +5,17 @@ import { isPlainObject, readEnv, readFiniteNumber, readTrimmedString } from './p
 
 const DEFAULT_LINEAR_CLIENT_ID = '91bbe26a69a2c8568d3683f1e01e776c';
 const DEFAULT_LINEAR_SCOPES = 'read,write,comments:create';
-const DEFAULT_LINEAR_BROKER_URL = 'https://api.openchamber.dev/v1/oauth/linear';
+const DEFAULT_LINEAR_BROKER_URL = 'https://api.aiworker.dev/v1/oauth/linear';
 const ACCESS_TOKEN_REFRESH_SKEW_MS = 2 * 60_000;
 const LEGACY_WORKSPACE_ID = 'legacy';
 const SESSION_COMMENTS_SETTING_KEY = 'linearSessionComments';
 
 function resolveDataDir() {
-  const fromEnv = readEnv('OPENCHAMBER_DATA_DIR');
+  const fromEnv = readEnv('AIWORKER_DATA_DIR');
   if (fromEnv) {
     return path.resolve(fromEnv);
   }
-  return path.join(os.homedir(), '.config', 'openchamber');
+  return path.join(os.homedir(), '.config', 'aiworker');
 }
 
 function storageFile() {
@@ -377,7 +377,7 @@ export function toLinearPublicStatus(auth, workspaces = getLinearAuthWorkspaces(
 }
 
 export function getLinearClientId() {
-  const fromEnv = readEnv('OPENCHAMBER_LINEAR_CLIENT_ID');
+  const fromEnv = readEnv('AIWORKER_LINEAR_CLIENT_ID');
   if (fromEnv) return fromEnv;
   const stored = readSettingString('linearClientId');
   if (stored) return stored;
@@ -385,13 +385,13 @@ export function getLinearClientId() {
 }
 
 export function getLinearClientSecret() {
-  const fromEnv = readEnv('OPENCHAMBER_LINEAR_CLIENT_SECRET');
+  const fromEnv = readEnv('AIWORKER_LINEAR_CLIENT_SECRET');
   if (fromEnv) return fromEnv;
   return readSettingString('linearClientSecret');
 }
 
 export function getLinearScopes() {
-  const fromEnv = readEnv('OPENCHAMBER_LINEAR_SCOPES');
+  const fromEnv = readEnv('AIWORKER_LINEAR_SCOPES');
   if (fromEnv) return fromEnv;
   const stored = readSettingString('linearScopes');
   if (stored) return stored;
@@ -399,7 +399,7 @@ export function getLinearScopes() {
 }
 
 export function getLinearBrokerUrl() {
-  const fromEnv = readEnv('OPENCHAMBER_LINEAR_BROKER_URL');
+  const fromEnv = readEnv('AIWORKER_LINEAR_BROKER_URL');
   if (fromEnv) return fromEnv.replace(/\/+$/, '');
   const stored = readSettingString('linearBrokerUrl');
   if (stored) return stored.replace(/\/+$/, '');
@@ -407,7 +407,7 @@ export function getLinearBrokerUrl() {
 }
 
 export function getLinearRedirectUri() {
-  const fromEnv = readEnv('OPENCHAMBER_LINEAR_REDIRECT_URI');
+  const fromEnv = readEnv('AIWORKER_LINEAR_REDIRECT_URI');
   if (fromEnv) return fromEnv;
   const stored = readSettingString('linearRedirectUri');
   if (stored) return stored;

package/server/lib/linear/auth.test.js

@@ -26,23 +26,23 @@ describe('Linear auth storage', () => {
   let previousRedirect;
 
   beforeEach(() => {
-    previousDataDir = process.env.OPENCHAMBER_DATA_DIR;
-    previousPort = process.env.OPENCHAMBER_PORT;
-    previousClientId = process.env.OPENCHAMBER_LINEAR_CLIENT_ID;
-    previousRedirect = process.env.OPENCHAMBER_LINEAR_REDIRECT_URI;
+    previousDataDir = process.env.AIWORKER_DATA_DIR;
+    previousPort = process.env.AIWORKER_PORT;
+    previousClientId = process.env.AIWORKER_LINEAR_CLIENT_ID;
+    previousRedirect = process.env.AIWORKER_LINEAR_REDIRECT_URI;
     dataDir = makeTempDir();
-    process.env.OPENCHAMBER_DATA_DIR = dataDir;
-    delete process.env.OPENCHAMBER_LINEAR_CLIENT_ID;
-    delete process.env.OPENCHAMBER_LINEAR_SCOPES;
-    delete process.env.OPENCHAMBER_LINEAR_REDIRECT_URI;
-    delete process.env.OPENCHAMBER_PORT;
+    process.env.AIWORKER_DATA_DIR = dataDir;
+    delete process.env.AIWORKER_LINEAR_CLIENT_ID;
+    delete process.env.AIWORKER_LINEAR_SCOPES;
+    delete process.env.AIWORKER_LINEAR_REDIRECT_URI;
+    delete process.env.AIWORKER_PORT;
   });
 
   afterEach(() => {
-    restoreEnv('OPENCHAMBER_DATA_DIR', previousDataDir);
-    restoreEnv('OPENCHAMBER_PORT', previousPort);
-    restoreEnv('OPENCHAMBER_LINEAR_CLIENT_ID', previousClientId);
-    restoreEnv('OPENCHAMBER_LINEAR_REDIRECT_URI', previousRedirect);
+    restoreEnv('AIWORKER_DATA_DIR', previousDataDir);
+    restoreEnv('AIWORKER_PORT', previousPort);
+    restoreEnv('AIWORKER_LINEAR_CLIENT_ID', previousClientId);
+    restoreEnv('AIWORKER_LINEAR_REDIRECT_URI', previousRedirect);
     fs.rmSync(dataDir, { recursive: true, force: true });
   });
 
@@ -58,7 +58,7 @@ describe('Linear auth storage', () => {
       expiresAt: Date.now() + 60_000,
       scope: 'read,write',
       user: { id: 'user-1', name: 'Ada', displayName: 'Ada Lovelace', email: 'ada@example.com', avatarUrl: 'https://example.com/a.png' },
-      organization: { id: 'org-1', name: 'OpenChamber', urlKey: 'openchamber' },
+      organization: { id: 'org-1', name: 'AiWorker', urlKey: 'aiworker' },
     });
 
     const stored = getLinearAuth();
@@ -75,12 +75,12 @@ describe('Linear auth storage', () => {
         email: 'ada@example.com',
         avatarUrl: 'https://example.com/a.png',
       },
-      organization: { id: 'org-1', name: 'OpenChamber', urlKey: 'openchamber' },
+      organization: { id: 'org-1', name: 'AiWorker', urlKey: 'aiworker' },
       scope: 'read,write',
       workspaces: [{
         id: 'org-1',
-        name: 'OpenChamber',
-        urlKey: 'openchamber',
+        name: 'AiWorker',
+        urlKey: 'aiworker',
         current: true,
         user: {
           id: 'user-1',
@@ -137,14 +137,14 @@ describe('Linear auth storage', () => {
 
   it('uses the baked-in client id unless env or settings override it', () => {
     expect(getLinearClientId()).toBe(DEFAULT_LINEAR_CLIENT_ID_VALUE);
-    process.env.OPENCHAMBER_LINEAR_CLIENT_ID = 'env-client';
+    process.env.AIWORKER_LINEAR_CLIENT_ID = 'env-client';
     expect(getLinearClientId()).toBe('env-client');
   });
 
   it('uses the stable public broker callback by default', () => {
-    process.env.OPENCHAMBER_PORT = '3001';
-    expect(getLinearRedirectUri()).toBe('https://api.openchamber.dev/v1/oauth/linear/callback');
-    process.env.OPENCHAMBER_LINEAR_REDIRECT_URI = 'http://localhost:3000/linear/oauth/callback';
+    process.env.AIWORKER_PORT = '3001';
+    expect(getLinearRedirectUri()).toBe('https://api.aiworker.dev/v1/oauth/linear/callback');
+    process.env.AIWORKER_LINEAR_REDIRECT_URI = 'http://localhost:3000/linear/oauth/callback';
     expect(getLinearRedirectUri()).toBe('http://localhost:3000/linear/oauth/callback');
   });
 
@@ -161,7 +161,7 @@ describe('Linear auth storage', () => {
       accessToken: 'legacy-access',
       refreshToken: 'legacy-refresh',
       user: { id: 'user-1', name: 'Ada' },
-      organization: { id: 'org-1', name: 'OpenChamber', urlKey: 'openchamber' },
+      organization: { id: 'org-1', name: 'AiWorker', urlKey: 'aiworker' },
     }), 'utf8');
 
     const stored = getLinearAuth();
@@ -216,7 +216,7 @@ describe('Linear auth storage', () => {
     setLinearAuth({
       accessToken: 'access-1',
       user: { id: 'user-1', name: 'Ada' },
-      organization: { id: 'org-1', name: 'OpenChamber', urlKey: 'openchamber' },
+      organization: { id: 'org-1', name: 'AiWorker', urlKey: 'aiworker' },
     });
     const file = JSON.parse(fs.readFileSync(getLinearAuthFilePath(), 'utf8'));
     file.workspaces[0].authorizedAt = 111;
@@ -225,7 +225,7 @@ describe('Linear auth storage', () => {
     setLinearAuth({
       accessToken: 'access-1',
       user: { id: 'user-1', name: 'Ada' },
-      organization: { id: 'org-1', name: 'OpenChamber', urlKey: 'openchamber' },
+      organization: { id: 'org-1', name: 'AiWorker', urlKey: 'aiworker' },
       workspaceId: 'org-1',
     }, { activate: false });
     expect(getLinearAuth().authorizedAt).toBe(111);

package/server/lib/linear/issues.test.js

@@ -40,9 +40,9 @@ describe('Linear issue list/get', () => {
   let previousDataDir;
 
   beforeEach(() => {
-    previousDataDir = process.env.OPENCHAMBER_DATA_DIR;
+    previousDataDir = process.env.AIWORKER_DATA_DIR;
     dataDir = makeTempDir();
-    process.env.OPENCHAMBER_DATA_DIR = dataDir;
+    process.env.AIWORKER_DATA_DIR = dataDir;
     setLinearAuth({
       accessToken: 'access-1',
       refreshToken: 'refresh-1',
@@ -56,9 +56,9 @@ describe('Linear issue list/get', () => {
     vi.unstubAllGlobals();
     clearLinearAuth();
     if (previousDataDir === undefined) {
-      delete process.env.OPENCHAMBER_DATA_DIR;
+      delete process.env.AIWORKER_DATA_DIR;
     } else {
-      process.env.OPENCHAMBER_DATA_DIR = previousDataDir;
+      process.env.AIWORKER_DATA_DIR = previousDataDir;
     }
     fs.rmSync(dataDir, { recursive: true, force: true });
   });
@@ -336,7 +336,7 @@ describe('Linear issue list/get', () => {
       expect(body.query).toContain('mutation CommentCreate');
       expect(body.variables.input).toEqual({
         issueId: 'issue-uuid-1',
-        body: 'OpenChamber session started.',
+        body: 'AiWorker session started.',
       });
       expect(options.headers.Authorization).toBe('Bearer access-1');
       return jsonResponse({
@@ -351,7 +351,7 @@ describe('Linear issue list/get', () => {
 
     const result = await createLinearIssueComment({
       issueId: 'ENG-12',
-      body: 'OpenChamber session started.',
+      body: 'AiWorker session started.',
     });
     expect(result).toEqual({ connected: true, comment: { id: 'comment-9' } });
     expect(JSON.stringify(result)).not.toContain('access-1');

package/server/lib/linear/mapping.test.js

@@ -18,16 +18,16 @@ describe('Linear project mapping storage', () => {
   let previousDataDir;
 
   beforeEach(() => {
-    previousDataDir = process.env.OPENCHAMBER_DATA_DIR;
+    previousDataDir = process.env.AIWORKER_DATA_DIR;
     dataDir = makeTempDir();
-    process.env.OPENCHAMBER_DATA_DIR = dataDir;
+    process.env.AIWORKER_DATA_DIR = dataDir;
   });
 
   afterEach(() => {
     if (previousDataDir === undefined) {
-      delete process.env.OPENCHAMBER_DATA_DIR;
+      delete process.env.AIWORKER_DATA_DIR;
     } else {
-      process.env.OPENCHAMBER_DATA_DIR = previousDataDir;
+      process.env.AIWORKER_DATA_DIR = previousDataDir;
     }
     fs.rmSync(dataDir, { recursive: true, force: true });
   });

package/server/lib/linear/oauth.js

@@ -141,7 +141,7 @@ export async function startAuthorization({ origin } = {}) {
   const clientId = getLinearClientId();
   if (!clientId) {
     throw new LinearOAuthError(
-      'Linear OAuth client not configured. Set OPENCHAMBER_LINEAR_CLIENT_ID.',
+      'Linear OAuth client not configured. Set AIWORKER_LINEAR_CLIENT_ID.',
       'LINEAR_CLIENT_ID_MISSING',
     );
   }
@@ -269,7 +269,7 @@ export async function consumeAuthorizationCallback({ code, state, error, errorDe
   }
   if (!pending?.codeVerifier) {
     throw failAuthorization(
-      'This authorization session has expired or is unknown to the running app. Return to OpenChamber and click Connect again.',
+      'This authorization session has expired or is unknown to the running app. Return to AiWorker and click Connect again.',
       'UNKNOWN_STATE',
     );
   }

package/server/lib/linear/oauth.test.js

@@ -20,23 +20,23 @@ describe('Linear OAuth PKCE', () => {
   let previousRedirect;
 
   beforeEach(() => {
-    previousDataDir = process.env.OPENCHAMBER_DATA_DIR;
-    previousPort = process.env.OPENCHAMBER_PORT;
-    previousRedirect = process.env.OPENCHAMBER_LINEAR_REDIRECT_URI;
+    previousDataDir = process.env.AIWORKER_DATA_DIR;
+    previousPort = process.env.AIWORKER_PORT;
+    previousRedirect = process.env.AIWORKER_LINEAR_REDIRECT_URI;
     dataDir = makeTempDir();
-    process.env.OPENCHAMBER_DATA_DIR = dataDir;
-    process.env.OPENCHAMBER_PORT = '3001';
-    delete process.env.OPENCHAMBER_LINEAR_CLIENT_ID;
-    process.env.OPENCHAMBER_LINEAR_REDIRECT_URI = 'http://127.0.0.1:3001/linear/oauth/callback';
+    process.env.AIWORKER_DATA_DIR = dataDir;
+    process.env.AIWORKER_PORT = '3001';
+    delete process.env.AIWORKER_LINEAR_CLIENT_ID;
+    process.env.AIWORKER_LINEAR_REDIRECT_URI = 'http://127.0.0.1:3001/linear/oauth/callback';
     clearPendingAuthorizationsForTests();
   });
 
   afterEach(() => {
     vi.unstubAllGlobals();
     clearPendingAuthorizationsForTests();
-    restoreEnv('OPENCHAMBER_DATA_DIR', previousDataDir);
-    restoreEnv('OPENCHAMBER_PORT', previousPort);
-    restoreEnv('OPENCHAMBER_LINEAR_REDIRECT_URI', previousRedirect);
+    restoreEnv('AIWORKER_DATA_DIR', previousDataDir);
+    restoreEnv('AIWORKER_PORT', previousPort);
+    restoreEnv('AIWORKER_LINEAR_REDIRECT_URI', previousRedirect);
     fs.rmSync(dataDir, { recursive: true, force: true });
   });
 
@@ -113,7 +113,7 @@ describe('Linear OAuth PKCE', () => {
   });
 
   it('claims a broker callback and exchanges it locally with PKCE', async () => {
-    delete process.env.OPENCHAMBER_LINEAR_REDIRECT_URI;
+    delete process.env.AIWORKER_LINEAR_REDIRECT_URI;
     const brokerAndTokenFetch = vi.fn(async (url, init) => {
       const target = String(url);
       if (target.endsWith('/start')) {
@@ -121,7 +121,7 @@ describe('Linear OAuth PKCE', () => {
         expect(body.state).toMatch(/^[A-Za-z0-9_-]{43}$/);
         expect(body.claimSecret).toMatch(/^[A-Za-z0-9_-]{43}$/);
         return new Response(JSON.stringify({
-          redirectUri: 'https://api.openchamber.dev/v1/oauth/linear/callback',
+          redirectUri: 'https://api.aiworker.dev/v1/oauth/linear/callback',
           expiresIn: 600,
         }), { status: 200 });
       }
@@ -134,7 +134,7 @@ describe('Linear OAuth PKCE', () => {
       if (target === 'https://api.linear.app/oauth/token') {
         const body = new URLSearchParams(init.body);
         expect(body.get('code')).toBe('broker-code');
-        expect(body.get('redirect_uri')).toBe('https://api.openchamber.dev/v1/oauth/linear/callback');
+        expect(body.get('redirect_uri')).toBe('https://api.aiworker.dev/v1/oauth/linear/callback');
         expect(body.get('code_verifier')).toMatch(/^[A-Za-z0-9_-]{43}$/);
         return new Response(JSON.stringify({
           access_token: 'broker-access',
@@ -148,7 +148,7 @@ describe('Linear OAuth PKCE', () => {
 
     const started = await startAuthorization({ origin: 'desktop' });
     const authorizationUrl = new URL(started.authorizationUrl);
-    expect(authorizationUrl.searchParams.get('redirect_uri')).toBe('https://api.openchamber.dev/v1/oauth/linear/callback');
+    expect(authorizationUrl.searchParams.get('redirect_uri')).toBe('https://api.aiworker.dev/v1/oauth/linear/callback');
 
     const result = await pollAuthorizationBroker();
     expect(result).toMatchObject({ accessToken: 'broker-access', origin: 'desktop' });

package/server/lib/linear/routes.js

@@ -29,7 +29,7 @@ function renderLinearOAuthCallbackPage({ title, message, desktopReturn }) {
 <head>
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
-<title>${escapeHtml(title)} — OpenChamber</title>
+<title>${escapeHtml(title)} — AiWorker</title>
 <style>
   :root { color-scheme: light dark; }
   body { margin: 0; min-height: 100vh; display: flex; align-items: center; justify-content: center;
@@ -46,8 +46,8 @@ function renderLinearOAuthCallbackPage({ title, message, desktopReturn }) {
 <main>
 <h1>${escapeHtml(title)}</h1>
 <p>${escapeHtml(message)}</p>
-${desktopReturn ? `<a class="return" href="openchamber://focus/linear-auth">Return to OpenChamber</a>
-<script>window.location.href = 'openchamber://focus/linear-auth';</script>` : ''}
+${desktopReturn ? `<a class="return" href="aiworker://focus/linear-auth">Return to AiWorker</a>
+<script>window.location.href = 'aiworker://focus/linear-auth';</script>` : ''}
 </main>
 </body>
 </html>`;
@@ -103,7 +103,7 @@ export function registerLinearRoutes(app) {
 
       return finish(200, {
         title: 'Authorization Complete',
-        message: 'You can close this tab and return to OpenChamber.',
+        message: 'You can close this tab and return to AiWorker.',
         desktopReturn: result.origin === 'desktop',
       });
     } catch (error) {
@@ -113,7 +113,7 @@ export function registerLinearRoutes(app) {
         : 502;
       return finish(status, {
         title: 'Authorization Failed',
-        message: error instanceof Error ? error.message : 'Linear authorization failed. Return to OpenChamber and click Connect again.',
+        message: error instanceof Error ? error.message : 'Linear authorization failed. Return to AiWorker and click Connect again.',
         desktopReturn: error?.origin === 'desktop',
       });
     }

package/server/lib/linear/routes.test.js

@@ -25,23 +25,23 @@ describe('Linear auth routes', () => {
   let previousDataDir;
 
   beforeEach(() => {
-    previousDataDir = process.env.OPENCHAMBER_DATA_DIR;
+    previousDataDir = process.env.AIWORKER_DATA_DIR;
     dataDir = makeTempDir();
-    process.env.OPENCHAMBER_DATA_DIR = dataDir;
-    process.env.OPENCHAMBER_PORT = '3001';
-    process.env.OPENCHAMBER_LINEAR_REDIRECT_URI = 'http://127.0.0.1:3001/linear/oauth/callback';
-    delete process.env.OPENCHAMBER_LINEAR_CLIENT_ID;
+    process.env.AIWORKER_DATA_DIR = dataDir;
+    process.env.AIWORKER_PORT = '3001';
+    process.env.AIWORKER_LINEAR_REDIRECT_URI = 'http://127.0.0.1:3001/linear/oauth/callback';
+    delete process.env.AIWORKER_LINEAR_CLIENT_ID;
   });
 
   afterEach(() => {
     vi.unstubAllGlobals();
     if (previousDataDir === undefined) {
-      delete process.env.OPENCHAMBER_DATA_DIR;
+      delete process.env.AIWORKER_DATA_DIR;
     } else {
-      process.env.OPENCHAMBER_DATA_DIR = previousDataDir;
+      process.env.AIWORKER_DATA_DIR = previousDataDir;
     }
-    delete process.env.OPENCHAMBER_PORT;
-    delete process.env.OPENCHAMBER_LINEAR_REDIRECT_URI;
+    delete process.env.AIWORKER_PORT;
+    delete process.env.AIWORKER_LINEAR_REDIRECT_URI;
     fs.rmSync(dataDir, { recursive: true, force: true });
   });
 
@@ -76,7 +76,7 @@ describe('Linear auth routes', () => {
               email: 'ada@example.com',
               avatarUrl: 'https://example.com/a.png',
             },
-            organization: { id: 'org-1', name: 'OpenChamber', urlKey: 'openchamber' },
+            organization: { id: 'org-1', name: 'AiWorker', urlKey: 'aiworker' },
           },
         });
       }
@@ -89,7 +89,7 @@ describe('Linear auth routes', () => {
       .expect(200);
 
     expect(callback.text).toContain('Authorization Complete');
-    expect(callback.text).toContain('openchamber://focus/linear-auth');
+    expect(callback.text).toContain('aiworker://focus/linear-auth');
 
     const status = await request(app).get('/api/linear/auth/status').expect(200);
     expect(status.body.connected).toBe(true);
@@ -100,12 +100,12 @@ describe('Linear auth routes', () => {
       email: 'ada@example.com',
       avatarUrl: 'https://example.com/a.png',
     });
-    expect(status.body.organization).toEqual({ id: 'org-1', name: 'OpenChamber', urlKey: 'openchamber' });
+    expect(status.body.organization).toEqual({ id: 'org-1', name: 'AiWorker', urlKey: 'aiworker' });
     expect(status.body.scope).toBe('read,write,comments:create');
     expect(status.body.workspaces).toEqual([{
       id: 'org-1',
-      name: 'OpenChamber',
-      urlKey: 'openchamber',
+      name: 'AiWorker',
+      urlKey: 'aiworker',
       current: true,
       user: {
         id: 'user-1',
@@ -133,7 +133,7 @@ describe('Linear auth routes', () => {
       .expect(400);
     expect(tokenFetch).not.toHaveBeenCalled();
     expect(response.text).toContain('Authorization Failed');
-    expect(response.text).not.toContain('openchamber://');
+    expect(response.text).not.toContain('aiworker://');
   });
 
   it('omits the desktop deep link for flows started outside the desktop shell', async () => {
@@ -162,7 +162,7 @@ describe('Linear auth routes', () => {
       .get('/linear/oauth/callback')
       .query({ state, code: 'auth-code' })
       .expect(200);
-    expect(response.text).not.toContain('openchamber://');
+    expect(response.text).not.toContain('aiworker://');
   });
 
   it('disconnects and revokes the refresh token', async () => {