@cluesmith/codev 2.0.0-rc.7 → 2.0.0-rc.71

package/dist/agent-farm/utils/gate-watcher.js

@@ -0,0 +1,122 @@
+/**
+ * Spec 0100: Gate watcher for detecting gate transitions and sending af send notifications.
+ *
+ * Tracks which gates have been notified (dedup) and sends `af send architect`
+ * messages when new gates appear. Uses a dual-map design:
+ * - notified: Map<key, timestamp> for dedup
+ * - projectKeys: Map<projectPath, Set<key>> for clearing on gate resolution
+ */
+import { execFile } from 'node:child_process';
+import { resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+// Strip ANSI escape sequences
+const ANSI_RE = /\x1B\[[0-9;]*[A-Za-z]/g;
+// Reject control characters that could be injected
+const CONTROL_CHAR_RE = /[;\n\r]/;
+/**
+ * Sanitize a string for use in af send messages.
+ * Returns null if the value contains unsafe control characters.
+ */
+function sanitize(value) {
+    const stripped = value.replace(ANSI_RE, '').trim();
+    if (!stripped || CONTROL_CHAR_RE.test(stripped))
+        return null;
+    return stripped;
+}
+/**
+ * Resolve the path to the `af` CLI binary.
+ * Works from both source (src/) and compiled (dist/) contexts.
+ */
+function resolveAfBinary() {
+    // From dist/agent-farm/utils/gate-watcher.js → bin/af.js
+    // From src/agent-farm/utils/gate-watcher.ts → bin/af.js
+    const thisDir = typeof __dirname !== 'undefined'
+        ? __dirname
+        : dirname(fileURLToPath(import.meta.url));
+    // thisDir = .../packages/codev/dist/agent-farm/utils or .../src/agent-farm/utils
+    // Navigate up to packages/codev/bin/af.js
+    return resolve(thisDir, '../../../bin/af.js');
+}
+export class GateWatcher {
+    /** Dedup map: key -> ISO timestamp of first notification */
+    notified = new Map();
+    /** Index: projectPath -> set of keys in `notified` */
+    projectKeys = new Map();
+    /** Logger function */
+    log;
+    /** Path to af binary */
+    afBinary;
+    constructor(log, afBinary) {
+        this.log = log;
+        this.afBinary = afBinary ?? resolveAfBinary();
+    }
+    /**
+     * Check gate status for a project and send notification if it's a new gate.
+     */
+    async checkAndNotify(gateStatus, projectPath) {
+        if (!gateStatus.hasGate) {
+            // Gate resolved — clear all entries for this project
+            this.clearProject(projectPath);
+            return;
+        }
+        const { builderId, gateName } = gateStatus;
+        if (!builderId || !gateName)
+            return;
+        const key = `${projectPath}:${builderId}:${gateName}`;
+        // Already notified for this exact gate
+        if (this.notified.has(key))
+            return;
+        // Gate changed for this project — clear old entries, add new one
+        this.clearProject(projectPath);
+        this.notified.set(key, new Date().toISOString());
+        const keys = new Set();
+        keys.add(key);
+        this.projectKeys.set(projectPath, keys);
+        // Sanitize before sending
+        const safeBuilderId = sanitize(builderId);
+        const safeGateName = sanitize(gateName);
+        if (!safeBuilderId || !safeGateName) {
+            this.log('WARN', `Gate watcher: skipping af send — unsafe gateName or builderId for project ${projectPath}`);
+            return;
+        }
+        const message = [
+            `GATE: ${safeGateName} (Builder ${safeBuilderId})`,
+            `Builder ${safeBuilderId} is waiting for approval.`,
+            `Run: porch approve ${safeBuilderId} ${safeGateName}`,
+        ].join('\n');
+        await this.sendToArchitect(message, projectPath);
+    }
+    /**
+     * Clear all tracked keys for a project.
+     */
+    clearProject(projectPath) {
+        const keys = this.projectKeys.get(projectPath);
+        if (keys) {
+            for (const k of keys) {
+                this.notified.delete(k);
+            }
+            this.projectKeys.delete(projectPath);
+        }
+    }
+    /**
+     * Send a message to the architect via af send.
+     */
+    sendToArchitect(message, projectPath) {
+        return new Promise((resolve) => {
+            execFile(process.execPath, [this.afBinary, 'send', 'architect', message, '--raw', '--no-enter'], { cwd: projectPath, timeout: 10_000 }, (error) => {
+                if (error) {
+                    this.log('WARN', `Gate watcher: af send failed for ${projectPath}: ${error.message}`);
+                }
+                resolve();
+            });
+        });
+    }
+    /**
+     * Reset all state (useful for testing).
+     */
+    reset() {
+        this.notified.clear();
+        this.projectKeys.clear();
+    }
+}
+//# sourceMappingURL=gate-watcher.js.map

package/dist/agent-farm/utils/gate-watcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-watcher.js","sourceRoot":"","sources":["../../../src/agent-farm/utils/gate-watcher.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,8BAA8B;AAC9B,MAAM,OAAO,GAAG,wBAAwB,CAAC;AAEzC,mDAAmD;AACnD,MAAM,eAAe,GAAG,SAAS,CAAC;AAElC;;;GAGG;AACH,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe;IACtB,yDAAyD;IACzD,wDAAwD;IACxD,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,WAAW;QAC9C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,iFAAiF;IACjF,0CAA0C;IAC1C,OAAO,OAAO,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;AAChD,CAAC;AAID,MAAM,OAAO,WAAW;IACtB,4DAA4D;IACpD,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,sDAAsD;IAC9C,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;IACrD,sBAAsB;IACd,GAAG,CAAQ;IACnB,wBAAwB;IAChB,QAAQ,CAAS;IAEzB,YAAY,GAAU,EAAE,QAAiB;QACvC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,eAAe,EAAE,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,UAAsB,EAAE,WAAmB;QAC9D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,qDAAqD;YACrD,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC;QAC3C,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ;YAAE,OAAO;QAEpC,MAAM,GAAG,GAAG,GAAG,WAAW,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;QAEtD,uCAAuC;QACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAEnC,iEAAiE;QACjE,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAExC,0BAA0B;QAC1B,MAAM,aAAa,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,CAAC,aAAa,IAAI,CAAC,YAAY,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,6EAA6E,WAAW,EAAE,CAAC,CAAC;YAC7G,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG;YACd,SAAS,YAAY,aAAa,aAAa,GAAG;YAClD,WAAW,aAAa,2BAA2B;YACnD,sBAAsB,aAAa,IAAI,YAAY,EAAE;SACtD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,WAAmB;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,OAAe,EAAE,WAAmB;QAC1D,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,QAAQ,CACN,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EACpE,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,EACrC,CAAC,KAAK,EAAE,EAAE;gBACR,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,oCAAoC,WAAW,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACxF,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/agent-farm/utils/index.d.ts

@@ -2,5 +2,4 @@ export * from './config.js';
 export * from './deps.js';
 export * from './logger.js';
 export * from './shell.js';
-export * from './port-registry.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/agent-farm/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/agent-farm/utils/index.js

@@ -2,5 +2,4 @@ export * from './config.js';
 export * from './deps.js';
 export * from './logger.js';
 export * from './shell.js';
-export * from './port-registry.js';
 //# sourceMappingURL=index.js.map

package/dist/agent-farm/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/agent-farm/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/agent-farm/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/agent-farm/utils/notifications.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Push notification utilities for porch events.
+ * Sends notifications to the tower dashboard for real-time updates.
+ */
+export type NotificationType = 'gate' | 'blocked' | 'error' | 'info';
+interface NotificationPayload {
+    type: NotificationType;
+    projectPath: string;
+    projectId: string;
+    details: string;
+}
+/**
+ * Send a push notification to the tower dashboard.
+ * Notifications are delivered via SSE to connected browsers.
+ */
+export declare function sendPushNotification(payload: NotificationPayload): Promise<void>;
+/**
+ * Send notification when a gate is hit.
+ */
+export declare function notifyGateHit(projectRoot: string, projectId: string, gateName: string): Promise<void>;
+/**
+ * Send notification when builder is blocked.
+ */
+export declare function notifyBlocked(projectRoot: string, projectId: string, reason: string): Promise<void>;
+/**
+ * Send notification when build fails.
+ */
+export declare function notifyError(projectRoot: string, projectId: string, error: string): Promise<void>;
+export {};
+//# sourceMappingURL=notifications.d.ts.map

package/dist/agent-farm/utils/notifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/utils/notifications.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;AAErE,UAAU,mBAAmB;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AA+BD;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoDtF;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAYf"}

package/dist/agent-farm/utils/notifications.js

@@ -0,0 +1,121 @@
+/**
+ * Push notification utilities for porch events.
+ * Sends notifications to the tower dashboard for real-time updates.
+ */
+import path from 'node:path';
+// Default tower port
+const TOWER_PORT = process.env.CODEV_TOWER_PORT || '4100';
+// Track sent notifications to avoid duplicates within short window
+const recentNotifications = new Map();
+const DEDUPE_WINDOW_MS = 60000; // 1 minute
+function isDuplicate(key) {
+    const lastSent = recentNotifications.get(key);
+    if (lastSent && Date.now() - lastSent < DEDUPE_WINDOW_MS) {
+        return true;
+    }
+    recentNotifications.set(key, Date.now());
+    return false;
+}
+/**
+ * Get canonical project path from worktree path.
+ * Builder worktrees are at: <project>/.builders/<id>/<branch>
+ * Porch runs in these worktrees but notifications need the canonical path.
+ */
+function getCanonicalProjectPath(cwd) {
+    const builderMatch = cwd.match(/^(.+)\/.builders\/[^/]+$/);
+    if (builderMatch) {
+        return builderMatch[1]; // Return canonical project root
+    }
+    return cwd;
+}
+/**
+ * Send a push notification to the tower dashboard.
+ * Notifications are delivered via SSE to connected browsers.
+ */
+export async function sendPushNotification(payload) {
+    // Dedupe by project + type + details
+    const dedupeKey = `${payload.projectPath}:${payload.type}:${payload.details}`;
+    if (isDuplicate(dedupeKey)) {
+        return;
+    }
+    const projectName = path.basename(payload.projectPath);
+    let title;
+    let body;
+    switch (payload.type) {
+        case 'gate':
+            title = `${projectName}: Gate ${payload.details}`;
+            body = `Project ${payload.projectId} needs approval`;
+            break;
+        case 'blocked':
+            title = `${projectName}: Builder Blocked`;
+            body = `${payload.projectId}: ${payload.details}`;
+            break;
+        case 'error':
+            title = `${projectName}: Build Failed`;
+            body = `${payload.projectId}: ${payload.details}`;
+            break;
+        case 'info':
+        default:
+            title = `${projectName}`;
+            body = payload.details;
+            break;
+    }
+    try {
+        const response = await fetch(`http://localhost:${TOWER_PORT}/api/notify`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify({
+                type: payload.type,
+                title,
+                body,
+                project: payload.projectPath,
+            }),
+        });
+        if (!response.ok) {
+            console.warn(`[notifications] Tower responded ${response.status} for ${payload.type} notification (project ${payload.projectId})`);
+        }
+    }
+    catch {
+        // Tower may not be running - silently ignore
+    }
+}
+/**
+ * Send notification when a gate is hit.
+ */
+export async function notifyGateHit(projectRoot, projectId, gateName) {
+    await sendPushNotification({
+        type: 'gate',
+        projectPath: getCanonicalProjectPath(projectRoot),
+        projectId,
+        details: gateName,
+    });
+}
+/**
+ * Send notification when builder is blocked.
+ */
+export async function notifyBlocked(projectRoot, projectId, reason) {
+    await sendPushNotification({
+        type: 'blocked',
+        projectPath: getCanonicalProjectPath(projectRoot),
+        projectId,
+        details: reason,
+    });
+}
+/**
+ * Send notification when build fails.
+ */
+export async function notifyError(projectRoot, projectId, error) {
+    // Only send if CODEV_PUSH_ERRORS is enabled
+    if (process.env.CODEV_PUSH_ERRORS !== 'true') {
+        return;
+    }
+    await sendPushNotification({
+        type: 'error',
+        projectPath: getCanonicalProjectPath(projectRoot),
+        projectId,
+        details: error,
+    });
+}
+//# sourceMappingURL=notifications.js.map

package/dist/agent-farm/utils/notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../../src/agent-farm/utils/notifications.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAW7B,qBAAqB;AACrB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,MAAM,CAAC;AAE1D,mEAAmE;AACnE,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC;AACtD,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,WAAW;AAE3C,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,gBAAgB,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,GAAW;IAC1C,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC3D,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,gCAAgC;IAC1D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAA4B;IACrE,qCAAqC;IACrC,MAAM,SAAS,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAC9E,IAAI,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAEvD,IAAI,KAAa,CAAC;IAClB,IAAI,IAAY,CAAC;IAEjB,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,MAAM;YACT,KAAK,GAAG,GAAG,WAAW,UAAU,OAAO,CAAC,OAAO,EAAE,CAAC;YAClD,IAAI,GAAG,WAAW,OAAO,CAAC,SAAS,iBAAiB,CAAC;YACrD,MAAM;QACR,KAAK,SAAS;YACZ,KAAK,GAAG,GAAG,WAAW,mBAAmB,CAAC;YAC1C,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YAClD,MAAM;QACR,KAAK,OAAO;YACV,KAAK,GAAG,GAAG,WAAW,gBAAgB,CAAC;YACvC,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YAClD,MAAM;QACR,KAAK,MAAM,CAAC;QACZ;YACE,KAAK,GAAG,GAAG,WAAW,EAAE,CAAC;YACzB,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;YACvB,MAAM;IACV,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,UAAU,aAAa,EAAE;YACxE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK;gBACL,IAAI;gBACJ,OAAO,EAAE,OAAO,CAAC,WAAW;aAC7B,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,mCAAmC,QAAQ,CAAC,MAAM,QAAQ,OAAO,CAAC,IAAI,0BAA0B,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACrI,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAmB,EACnB,SAAiB,EACjB,QAAgB;IAEhB,MAAM,oBAAoB,CAAC;QACzB,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,uBAAuB,CAAC,WAAW,CAAC;QACjD,SAAS;QACT,OAAO,EAAE,QAAQ;KAClB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAmB,EACnB,SAAiB,EACjB,MAAc;IAEd,MAAM,oBAAoB,CAAC;QACzB,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,uBAAuB,CAAC,WAAW,CAAC;QACjD,SAAS;QACT,OAAO,EAAE,MAAM;KAChB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,WAAmB,EACnB,SAAiB,EACjB,KAAa;IAEb,4CAA4C;IAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM,EAAE,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,MAAM,oBAAoB,CAAC;QACzB,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,uBAAuB,CAAC,WAAW,CAAC;QACjD,SAAS;QACT,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;AACL,CAAC"}

package/dist/agent-farm/utils/server-utils.d.ts

@@ -1,6 +1,6 @@
 /**
  * Shared server utilities
- * Extracted from dashboard-server.ts, tower-server.ts, open-server.ts
+ * Extracted from tower-server.ts and open-server.ts
  * to eliminate code duplication (Maintenance Run 0004)
  */
 import type * as http from 'node:http';
@@ -15,10 +15,10 @@ export declare function escapeHtml(str: string): string;
  */
 export declare function parseJsonBody(req: http.IncomingMessage, maxSize?: number): Promise<Record<string, unknown>>;
 /**
- * Security: Validate request origin to prevent CSRF and DNS rebinding attacks
- * Allows only localhost and 127.0.0.1 hosts/origins
+ * Security: Validate request origin
+ * Currently allows all requests - security is handled by the server binding to localhost only.
  * @param req - HTTP incoming message
- * @returns true if request should be allowed
+ * @returns true (always allowed)
  */
-export declare function isRequestAllowed(req: http.IncomingMessage): boolean;
+export declare function isRequestAllowed(_req: http.IncomingMessage): boolean;
 //# sourceMappingURL=server-utils.d.ts.map

package/dist/agent-farm/utils/server-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-utils.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/utils/server-utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAC;AAEvC;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAO9C;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,SAAc,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAyBhH;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAgBnE"}
+{"version":3,"file":"server-utils.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/utils/server-utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAC;AAEvC;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAO9C;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,SAAc,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAyBhH;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAEpE"}

package/dist/agent-farm/utils/server-utils.js

@@ -1,6 +1,6 @@
 /**
  * Shared server utilities
- * Extracted from dashboard-server.ts, tower-server.ts, open-server.ts
+ * Extracted from tower-server.ts and open-server.ts
  * to eliminate code duplication (Maintenance Run 0004)
  */
 /**
@@ -44,23 +44,12 @@ export function parseJsonBody(req, maxSize = 1024 * 1024) {
     });
 }
 /**
- * Security: Validate request origin to prevent CSRF and DNS rebinding attacks
- * Allows only localhost and 127.0.0.1 hosts/origins
+ * Security: Validate request origin
+ * Currently allows all requests - security is handled by the server binding to localhost only.
  * @param req - HTTP incoming message
- * @returns true if request should be allowed
+ * @returns true (always allowed)
  */
-export function isRequestAllowed(req) {
-    const host = req.headers.host;
-    const origin = req.headers.origin;
-    // Host check (prevent DNS rebinding attacks)
-    if (host && !host.startsWith('localhost') && !host.startsWith('127.0.0.1')) {
-        return false;
-    }
-    // Origin check (prevent CSRF from external sites)
-    // Note: CLI tools/curl might not send Origin, so we only block if Origin is present and invalid
-    if (origin && !origin.startsWith('http://localhost') && !origin.startsWith('http://127.0.0.1')) {
-        return false;
-    }
+export function isRequestAllowed(_req) {
     return true;
 }
 //# sourceMappingURL=server-utils.js.map

package/dist/agent-farm/utils/server-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"server-utils.js","sourceRoot":"","sources":["../../../src/agent-farm/utils/server-utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,GAAG;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAyB,EAAE,OAAO,GAAG,IAAI,GAAG,IAAI;IAC5E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,IAAI,GAAG,CAAC,CAAC;QAEb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;gBAC5C,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAyB;IACxD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAElC,6CAA6C;IAC7C,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,kDAAkD;IAClD,gGAAgG;IAChG,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC/F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"server-utils.js","sourceRoot":"","sources":["../../../src/agent-farm/utils/server-utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,GAAG;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAyB,EAAE,OAAO,GAAG,IAAI,GAAG,IAAI;IAC5E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,IAAI,GAAG,CAAC,CAAC;QAEb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;gBAC5C,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA0B;IACzD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/agent-farm/utils/session.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Shared session-naming utilities for Agent Farm.
+ * Centralizes session name generation to prevent drift between commands.
+ */
+import type { Config } from '../types.js';
+/**
+ * Get a namespaced session name for a builder: builder-{project}-{id}
+ */
+export declare function getBuilderSessionName(config: Config, builderId: string): string;
+/**
+ * Parsed metadata from a session name.
+ * Our naming convention: architect-{basename}, builder-{basename}-{specId}, shell-{basename}-{shellId}
+ */
+export interface ParsedSession {
+    type: 'architect' | 'builder' | 'shell';
+    projectBasename: string;
+    roleId: string | null;
+}
+/**
+ * Parse a codev session name to extract type, project, and role.
+ * Returns null if the name doesn't match any known codev pattern.
+ *
+ * Examples:
+ *   "architect-codev-public"                → { type: 'architect', projectBasename: 'codev-public', roleId: null }
+ *   "builder-codevos_ai-0001"               → { type: 'builder', projectBasename: 'codevos_ai', roleId: '0001' }
+ *   "builder-codev-public-bugfix-242"       → { type: 'builder', projectBasename: 'codev-public', roleId: 'bugfix-242' }
+ *   "builder-codev-public-task-AbCd"        → { type: 'builder', projectBasename: 'codev-public', roleId: 'task-AbCd' }
+ *   "builder-codev-public-worktree-QwEr"    → { type: 'builder', projectBasename: 'codev-public', roleId: 'worktree-QwEr' }
+ *   "shell-codev-public-shell-1"            → { type: 'shell', projectBasename: 'codev-public', roleId: 'shell-1' }
+ */
+export declare function parseSessionName(name: string): ParsedSession | null;
+//# sourceMappingURL=session.d.ts.map

package/dist/agent-farm/utils/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/utils/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/E;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;IACxC,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAsCnE"}

package/dist/agent-farm/utils/session.js

@@ -0,0 +1,57 @@
+/**
+ * Shared session-naming utilities for Agent Farm.
+ * Centralizes session name generation to prevent drift between commands.
+ */
+import { basename } from 'node:path';
+/**
+ * Get a namespaced session name for a builder: builder-{project}-{id}
+ */
+export function getBuilderSessionName(config, builderId) {
+    return `builder-${basename(config.projectRoot)}-${builderId}`;
+}
+/**
+ * Parse a codev session name to extract type, project, and role.
+ * Returns null if the name doesn't match any known codev pattern.
+ *
+ * Examples:
+ *   "architect-codev-public"                → { type: 'architect', projectBasename: 'codev-public', roleId: null }
+ *   "builder-codevos_ai-0001"               → { type: 'builder', projectBasename: 'codevos_ai', roleId: '0001' }
+ *   "builder-codev-public-bugfix-242"       → { type: 'builder', projectBasename: 'codev-public', roleId: 'bugfix-242' }
+ *   "builder-codev-public-task-AbCd"        → { type: 'builder', projectBasename: 'codev-public', roleId: 'task-AbCd' }
+ *   "builder-codev-public-worktree-QwEr"    → { type: 'builder', projectBasename: 'codev-public', roleId: 'worktree-QwEr' }
+ *   "shell-codev-public-shell-1"            → { type: 'shell', projectBasename: 'codev-public', roleId: 'shell-1' }
+ */
+export function parseSessionName(name) {
+    // architect-{basename}
+    const architectMatch = name.match(/^architect-(.+)$/);
+    if (architectMatch) {
+        return { type: 'architect', projectBasename: architectMatch[1], roleId: null };
+    }
+    // builder-{basename}-bugfix-{N} — bugfix builder (issue number)
+    const bugfixMatch = name.match(/^builder-(.+)-(bugfix-\d+)$/);
+    if (bugfixMatch) {
+        return { type: 'builder', projectBasename: bugfixMatch[1], roleId: bugfixMatch[2] };
+    }
+    // builder-{basename}-task-{shortId} — ad-hoc task builder (shortId is URL-safe base64: a-zA-Z0-9_-)
+    const taskMatch = name.match(/^builder-(.+)-(task-[a-zA-Z0-9_-]+)$/);
+    if (taskMatch) {
+        return { type: 'builder', projectBasename: taskMatch[1], roleId: taskMatch[2] };
+    }
+    // builder-{basename}-worktree-{shortId} — generic worktree builder (shortId is URL-safe base64)
+    const worktreeMatch = name.match(/^builder-(.+)-(worktree-[a-zA-Z0-9_-]+)$/);
+    if (worktreeMatch) {
+        return { type: 'builder', projectBasename: worktreeMatch[1], roleId: worktreeMatch[2] };
+    }
+    // builder-{basename}-{specId} — SPIR builder (spec ID is digits, any length)
+    const builderMatch = name.match(/^builder-(.+)-(\d+)$/);
+    if (builderMatch) {
+        return { type: 'builder', projectBasename: builderMatch[1], roleId: builderMatch[2] };
+    }
+    // shell-{basename}-{shellId} — shellId is "shell-N" (last two segments)
+    const shellMatch = name.match(/^shell-(.+)-(shell-\d+)$/);
+    if (shellMatch) {
+        return { type: 'shell', projectBasename: shellMatch[1], roleId: shellMatch[2] };
+    }
+    return null;
+}
+//# sourceMappingURL=session.js.map

package/dist/agent-farm/utils/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../src/agent-farm/utils/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGrC;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,SAAiB;IACrE,OAAO,WAAW,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,SAAS,EAAE,CAAC;AAChE,CAAC;AAYD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,uBAAuB;IACvB,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtD,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjF,CAAC;IAED,gEAAgE;IAChE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9D,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,CAAC;IAED,oGAAoG;IACpG,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACrE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,CAAC;IAED,gGAAgG;IAChG,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC7E,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,CAAC;IAED,6EAA6E;IAC7E,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACxD,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,CAAC;IAED,wEAAwE;IACxE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC1D,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/agent-farm/utils/shell.d.ts

@@ -20,6 +20,7 @@ export declare function run(command: string, options?: {
 export declare function spawnDetached(command: string, args: string[], options?: {
     cwd?: string;
     logFile?: string;
+    env?: NodeJS.ProcessEnv;
 }): ChildProcess;
 /**
  * Check if a command exists
@@ -36,32 +37,18 @@ export declare function findAvailablePort(startPort: number): Promise<number>;
  */
 export declare function isProcessRunning(pid: number): Promise<boolean>;
 /**
- * Kill a process tree
+ * Kill a single process with SIGTERM → wait → SIGKILL escalation.
+ * Does NOT walk the process tree — safe for shepherd/session processes
+ * where tree-kill could kill siblings across projects.
  */
 export declare function killProcess(pid: number): Promise<void>;
 /**
- * Open a URL in the default browser
+ * Kill a process tree (all children). Use for annotation servers and
+ * dashboard servers where children must also die.
  */
-export declare function openBrowser(url: string): Promise<void>;
-export interface TtydOptions {
-    /** Port to run ttyd on */
-    port: number;
-    /** tmux session name to attach to (REQUIRED - prevents attaching to wrong session) */
-    sessionName: string;
-    /** Working directory */
-    cwd?: string;
-    /** Custom index.html path for ttyd */
-    customIndexPath?: string;
-    /** Bind host (default: localhost, use 0.0.0.0 for remote access) */
-    bindHost?: string;
-}
+export declare function killProcessTree(pid: number): Promise<void>;
 /**
- * Spawn ttyd attached to a specific tmux session.
- *
- * IMPORTANT: Always specify sessionName to prevent ttyd from attaching
- * to the wrong tmux session. This has caused cross-project issues.
- *
- * @returns The spawned child process, or null if spawn failed
+ * Open a URL in the default browser
  */
-export declare function spawnTtyd(options: TtydOptions): ChildProcess | null;
+export declare function openBrowser(url: string): Promise<void>;
 //# sourceMappingURL=shell.d.ts.map

package/dist/agent-farm/utils/shell.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/utils/shell.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKpE,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAsB,GAAG,CACvB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAC/C,OAAO,CAAC,UAAU,CAAC,CAgBrB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/C,YAAY,CA6Cd;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAYrE;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAuB1E;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOpE;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB5D;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG5D;AAED,MAAM,WAAW,WAAW;IAC1B,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,WAAW,GAAG,YAAY,GAAG,IAAI,CA8BnE"}
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/utils/shell.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKpE,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAsB,GAAG,CACvB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAC/C,OAAO,CAAC,UAAU,CAAC,CAgBrB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GACxE,YAAY,CA+Cd;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAYrE;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAuB1E;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOpE;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB5D;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAehE;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG5D"}

package/dist/agent-farm/utils/shell.js

@@ -29,10 +29,12 @@ export async function run(command, options = {}) {
  */
 export function spawnDetached(command, args, options = {}) {
     // Always capture stderr for error reporting, even when not logging
+    // Explicitly pass environment to ensure CODEV_WEB_KEY etc. are inherited
     const child = spawn(command, args, {
         cwd: options.cwd,
         detached: true,
         stdio: ['ignore', 'pipe', 'pipe'], // Always capture stdout/stderr
+        env: options.env || process.env,
     });
     // Buffer stderr for error reporting (keeps last 4KB)
     let stderrBuffer = '';
@@ -122,14 +124,44 @@ export async function isProcessRunning(pid) {
     }
 }
 /**
- * Kill a process tree
+ * Kill a single process with SIGTERM → wait → SIGKILL escalation.
+ * Does NOT walk the process tree — safe for shepherd/session processes
+ * where tree-kill could kill siblings across projects.
  */
 export async function killProcess(pid) {
+    // Send SIGTERM
+    try {
+        process.kill(pid, 'SIGTERM');
+    }
+    catch (err) {
+        if (err.code === 'ESRCH')
+            return; // already gone
+        throw err;
+    }
+    // Wait up to 3s for process to exit, then escalate to SIGKILL
+    for (let i = 0; i < 6; i++) {
+        await new Promise((r) => setTimeout(r, 500));
+        if (!(await isProcessRunning(pid)))
+            return;
+    }
+    try {
+        process.kill(pid, 'SIGKILL');
+    }
+    catch (err) {
+        if (err.code === 'ESRCH')
+            return;
+        throw err;
+    }
+}
+/**
+ * Kill a process tree (all children). Use for annotation servers and
+ * dashboard servers where children must also die.
+ */
+export async function killProcessTree(pid) {
     const treeKill = (await import('tree-kill')).default;
     return new Promise((resolve, reject) => {
         treeKill(pid, 'SIGTERM', (err) => {
             if (err) {
-                // Try SIGKILL if SIGTERM fails
                 treeKill(pid, 'SIGKILL', (err2) => {
                     if (err2)
                         reject(err2);
@@ -150,36 +182,4 @@ export async function openBrowser(url) {
     const open = (await import('open')).default;
     await open(url);
 }
-/**
- * Spawn ttyd attached to a specific tmux session.
- *
- * IMPORTANT: Always specify sessionName to prevent ttyd from attaching
- * to the wrong tmux session. This has caused cross-project issues.
- *
- * @returns The spawned child process, or null if spawn failed
- */
-export function spawnTtyd(options) {
-    const { port, sessionName, cwd, customIndexPath, bindHost } = options;
-    const ttydArgs = [
-        '-W',
-        '-p', String(port),
-        '-t', 'theme={"background":"#000000"}',
-        '-t', 'rightClickSelectsWord=true',
-    ];
-    // Add bind interface if specified (default is localhost)
-    if (bindHost) {
-        ttydArgs.push('-i', bindHost);
-    }
-    // Add custom index if provided and exists
-    if (customIndexPath) {
-        ttydArgs.push('-I', customIndexPath);
-    }
-    // CRITICAL: Always specify the session name to prevent attaching to wrong session
-    ttydArgs.push('tmux', 'attach-session', '-t', sessionName);
-    const child = spawnDetached('ttyd', ttydArgs, { cwd });
-    if (!child.pid) {
-        return null;
-    }
-    return child;
-}
 //# sourceMappingURL=shell.js.map