@cluesmith/codev 3.3.2 → 3.3.4

package/dist/agent-farm/servers/gate-profiles.d.ts

@@ -17,9 +17,30 @@
  * correctness bug, since agy's screens classify by an entirely different rule.
  */
 import type { GateProfile } from './render-gate.js';
-/** claude composer profile (marker ❯, dim placeholder — measured, spike g2). */
+/**
+ * claude composer profile (marker ❯, dim placeholder — measured, spike g2).
+ *
+ * `queuesInputMidTurn` measured for Issue #1664 against claude 2.1.266: a message delivered while
+ * a turn was streaming landed intact and was submitted as one message at the turn's end in 100 of
+ * 100 trials (0 head-loss), and the TUI shows it as `Press up to edit queued messages` in the
+ * meantime. Evidence: `codev/evidence/1664-streaming-delivery/`.
+ */
 export declare const CLAUDE_PROFILE: GateProfile;
-/** codex composer profile (marker ›, dim placeholder — measured, spike g2). */
+/**
+ * codex composer profile (marker ›, dim placeholder — measured, spike g2).
+ *
+ * `queuesInputMidTurn` measured for Issue #1664 against codex-cli 0.153.4, by the same harness
+ * and the same production delivery path as claude's: 20 of 20 mid-turn deliveries landed intact
+ * and were submitted, 0 head-loss, every one written at an instant the retired whole-screen
+ * settle would have refused. Evidence: `codev/evidence/1664-streaming-delivery/`.
+ *
+ * One measured quirk worth knowing, though it needs no code: codex's composer SLIDES DOWN the
+ * screen as its transcript grows (measured rows 13 → 37 over ~11 s) until it reaches the bottom
+ * and pins. Its row span is part of the fingerprint, so during that phase the region legitimately
+ * counts as moving and mail holds — a fresh codex session's first delivery waits for the screen
+ * to fill. Transient, self-correcting, and not worth special-casing: a long-lived builder's
+ * screen is always full.
+ */
 export declare const CODEX_PROFILE: GateProfile;
 /**
  * agy composer profile (Spec 1313 Phase 3 — net-new measurement). agy breaks the
@@ -32,6 +53,27 @@ export declare const CODEX_PROFILE: GateProfile;
  * option is palette-12, counted) — so a blind Enter never confirms filesystem
  * trust. Region bounds reuse the shared rule-line/status patterns (agy brackets
  * its composer with `─────` rules, like claude).
+ *
+ * The two marker ANCHORS (#1474) exist because `> ` alone does not identify agy's
+ * composer. Measured on real agy 1.1.13 captures (`fixtures/gate/agy-*.txt`), a live
+ * screen routinely carries OTHER `> ` rows, and last-match-wins picked them over the
+ * composer:
+ *   - the slash-menu selection cursor (`> /add-dir …`) — palette-12 like the composer,
+ *     and rendered BELOW it, so it won the marker scan outright;
+ *   - the transcript echo of every submitted turn (`> <the message you sent>`), palette-4,
+ *     one per conversation turn;
+ *   - the trust dialog's selected option — palette-12, with no composer on screen at all.
+ * Hence `markerRequiresCursorRow: true` (only the live input row holds the cursor — menu
+ * and dialog rows never do) and `markerFgPalette: 12` (the marker glyph's own color, which
+ * separates the composer from the palette-4 transcript echo). Both were measured stable
+ * across agy's modes, including the bare-`>` no-hint mode.
+ *
+ * Direction of failure, deliberately: an agy re-theme, or a cursor parked off the composer
+ * (e.g. a single mid-repaint frame), yields NO marker ⇒ `no-composer-marker` ⇒ the message
+ * is held and re-checked, never delivered onto a screen we failed to understand. A
+ * sustained hold escalates through the mailbox-delivery liveness telemetry
+ * (`recordStreak`) — the same drift path {@link REGION_END_PATTERNS} documents — so widen
+ * these anchors ONLY from a real capture.
  */
 export declare const AGY_PROFILE: GateProfile;
 /**

package/dist/agent-farm/servers/gate-profiles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate-profiles.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/gate-profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AA+BpD,gFAAgF;AAChF,eAAO,MAAM,cAAc,EAAE,WAI5B,CAAC;AAEF,+EAA+E;AAC/E,eAAO,MAAM,aAAa,EAAE,WAI3B,CAAC;AASF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,WAAW,EAAE,WAKzB,CAAC;AAQF;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,WAAW,GAAG,WAAW,GAAG,IAAI,CAMxE"}
+{"version":3,"file":"gate-profiles.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/gate-profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AA+BpD;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,EAAE,WAK5B,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,aAAa,EAAE,WAK3B,CAAC;AAkBF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,WAAW,EAAE,WAyBzB,CAAC;AAQF;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,WAAW,GAAG,WAAW,GAAG,IAAI,CAMxE"}

package/dist/agent-farm/servers/gate-profiles.js

@@ -45,24 +45,56 @@ const COMPOSER_MARKER = /^[❯›]/;
  * from a real capture — a too-loose pattern that matches draft content is a false-clean.
  */
 const REGION_END_PATTERNS = [/^[─━╌┄]{5,}/, /^\s{2,}(gpt|high:|~\/)/];
-/** claude composer profile (marker ❯, dim placeholder — measured, spike g2). */
+/**
+ * claude composer profile (marker ❯, dim placeholder — measured, spike g2).
+ *
+ * `queuesInputMidTurn` measured for Issue #1664 against claude 2.1.266: a message delivered while
+ * a turn was streaming landed intact and was submitted as one message at the turn's end in 100 of
+ * 100 trials (0 head-loss), and the TUI shows it as `Press up to edit queued messages` in the
+ * meantime. Evidence: `codev/evidence/1664-streaming-delivery/`.
+ */
 export const CLAUDE_PROFILE = {
     app: 'claude',
     markerPattern: COMPOSER_MARKER,
     regionEndPatterns: REGION_END_PATTERNS,
+    queuesInputMidTurn: true,
 };
-/** codex composer profile (marker ›, dim placeholder — measured, spike g2). */
+/**
+ * codex composer profile (marker ›, dim placeholder — measured, spike g2).
+ *
+ * `queuesInputMidTurn` measured for Issue #1664 against codex-cli 0.153.4, by the same harness
+ * and the same production delivery path as claude's: 20 of 20 mid-turn deliveries landed intact
+ * and were submitted, 0 head-loss, every one written at an instant the retired whole-screen
+ * settle would have refused. Evidence: `codev/evidence/1664-streaming-delivery/`.
+ *
+ * One measured quirk worth knowing, though it needs no code: codex's composer SLIDES DOWN the
+ * screen as its transcript grows (measured rows 13 → 37 over ~11 s) until it reaches the bottom
+ * and pins. Its row span is part of the fingerprint, so during that phase the region legitimately
+ * counts as moving and mail holds — a fresh codex session's first delivery waits for the screen
+ * to fill. Transient, self-correcting, and not worth special-casing: a long-lived builder's
+ * screen is always full.
+ */
 export const CODEX_PROFILE = {
     app: 'codex',
     markerPattern: COMPOSER_MARKER,
     regionEndPatterns: REGION_END_PATTERNS,
+    queuesInputMidTurn: true,
 };
 /**
- * agy (Antigravity CLI 1.1.8) composer marker: a `> ` prompt glyph at the input
- * row start — a different glyph from claude/codex's `❯`/`›`, so its own pattern.
- * (Measured, Spec 1313 Phase 3; the marker cell renders palette-12 bright-blue.)
+ * agy (Antigravity CLI) composer marker: a `>` prompt glyph at the input row start — a
+ * different glyph from claude/codex's `❯`/`›`, so its own pattern. The trailing separator
+ * is `\s|$` rather than a literal space because agy's no-hint mode renders the empty
+ * composer as a BARE `>`, which right-trims to `">"` (measured on 1.1.13, #1474) — the
+ * old `/^> /` never matched it, so the gate held every message to an agy in that mode
+ * forever.
+ *
+ * This text pattern is deliberately NOT the whole marker test. `> ` is ordinary output —
+ * and, measured on real agy screens, it is also agy's own slash-menu selection cursor and
+ * the per-turn transcript echo of each submitted message. The composer is identified by
+ * this pattern PLUS the two anchors on {@link AGY_PROFILE} below; broaden or narrow the
+ * three together, never this line alone.
  */
-const AGY_MARKER = /^> /;
+const AGY_MARKER = /^>(\s|$)/;
 /**
  * agy composer profile (Spec 1313 Phase 3 — net-new measurement). agy breaks the
  * dim-placeholder assumption: its idle mode-hint (`Accept-edits mode: …`) renders
@@ -74,12 +106,53 @@ const AGY_MARKER = /^> /;
  * option is palette-12, counted) — so a blind Enter never confirms filesystem
  * trust. Region bounds reuse the shared rule-line/status patterns (agy brackets
  * its composer with `─────` rules, like claude).
+ *
+ * The two marker ANCHORS (#1474) exist because `> ` alone does not identify agy's
+ * composer. Measured on real agy 1.1.13 captures (`fixtures/gate/agy-*.txt`), a live
+ * screen routinely carries OTHER `> ` rows, and last-match-wins picked them over the
+ * composer:
+ *   - the slash-menu selection cursor (`> /add-dir …`) — palette-12 like the composer,
+ *     and rendered BELOW it, so it won the marker scan outright;
+ *   - the transcript echo of every submitted turn (`> <the message you sent>`), palette-4,
+ *     one per conversation turn;
+ *   - the trust dialog's selected option — palette-12, with no composer on screen at all.
+ * Hence `markerRequiresCursorRow: true` (only the live input row holds the cursor — menu
+ * and dialog rows never do) and `markerFgPalette: 12` (the marker glyph's own color, which
+ * separates the composer from the palette-4 transcript echo). Both were measured stable
+ * across agy's modes, including the bare-`>` no-hint mode.
+ *
+ * Direction of failure, deliberately: an agy re-theme, or a cursor parked off the composer
+ * (e.g. a single mid-repaint frame), yields NO marker ⇒ `no-composer-marker` ⇒ the message
+ * is held and re-checked, never delivered onto a screen we failed to understand. A
+ * sustained hold escalates through the mailbox-delivery liveness telemetry
+ * (`recordStreak`) — the same drift path {@link REGION_END_PATTERNS} documents — so widen
+ * these anchors ONLY from a real capture.
  */
 export const AGY_PROFILE = {
     app: 'agy',
     markerPattern: AGY_MARKER,
     regionEndPatterns: REGION_END_PATTERNS,
     placeholderFgPalette: 8,
+    markerRequiresCursorRow: true,
+    markerFgPalette: 12,
+    // Issue #1664, set by OWNER RULING (2026-09-09) — **UNMEASURED**. Every other value of this
+    // field on this page came from driving the real TUI through the acceptance harness; this one
+    // did not. The owner's call is that mid-turn delivery is universal and only human input holds
+    // mail, so agy is granted the licence rather than waiting on a measurement.
+    //
+    // What that trades away, stated plainly so a future reader is not misled by the company this
+    // line keeps: if agy DROPS or mishandles input arriving mid-turn, a delivery lands as text in
+    // its composer that is never submitted — the body strands on the line, the classifier then
+    // reads it as `user-text`, and every later message to that agent queues behind it until a
+    // human clears the line. That is a stuck agent with a visible cause, not silent data loss, but
+    // it is a real failure mode and it is not ruled out by anything in this repository.
+    //
+    // Settling it is a harness run, not an argument:
+    //   node --experimental-strip-types scripts/bugfix-1664-streaming-delivery-harness.mts \
+    //     --harness agy --scenario streaming --trials 20 --assume-queues-input
+    // If that reports 20/20 delivered-intact and submitted, replace this comment with the measured
+    // one. If it does not, this line is what needs changing.
+    queuesInputMidTurn: true,
 };
 /** Registry keyed by the harness name `detectHarnessFromCommand` returns. */
 const PROFILES_BY_HARNESS = {

package/dist/agent-farm/servers/gate-profiles.js.map

@@ -1 +1 @@
-{"version":3,"file":"gate-profiles.js","sourceRoot":"","sources":["../../../src/agent-farm/servers/gate-profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAG/D;;;;;GAKG;AACH,MAAM,eAAe,GAAG,OAAO,CAAC;AAEhC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,mBAAmB,GAAG,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;AAEtE,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAgB;IACzC,GAAG,EAAE,QAAQ;IACb,aAAa,EAAE,eAAe;IAC9B,iBAAiB,EAAE,mBAAmB;CACvC,CAAC;AAEF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,aAAa,GAAgB;IACxC,GAAG,EAAE,OAAO;IACZ,aAAa,EAAE,eAAe;IAC9B,iBAAiB,EAAE,mBAAmB;CACvC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,GAAG,KAAK,CAAC;AAEzB;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,WAAW,GAAgB;IACtC,GAAG,EAAE,KAAK;IACV,aAAa,EAAE,UAAU;IACzB,iBAAiB,EAAE,mBAAmB;IACtC,oBAAoB,EAAE,CAAC;CACxB,CAAC;AAEF,6EAA6E;AAC7E,MAAM,mBAAmB,GAAgC;IACvD,MAAM,EAAE,cAAc;IACtB,KAAK,EAAE,aAAa;CACrB,CAAC;AAiBF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,cAAc,CAAC,QAAqB;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,WAAW,CAAC;IAC7E,MAAM,OAAO,GAAG,wBAAwB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,OAAO,IAAI,OAAO,IAAI,mBAAmB;QAAE,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACnF,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"gate-profiles.js","sourceRoot":"","sources":["../../../src/agent-farm/servers/gate-profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAG/D;;;;;GAKG;AACH,MAAM,eAAe,GAAG,OAAO,CAAC;AAEhC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,mBAAmB,GAAG,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;AAEtE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAgB;IACzC,GAAG,EAAE,QAAQ;IACb,aAAa,EAAE,eAAe;IAC9B,iBAAiB,EAAE,mBAAmB;IACtC,kBAAkB,EAAE,IAAI;CACzB,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,aAAa,GAAgB;IACxC,GAAG,EAAE,OAAO;IACZ,aAAa,EAAE,eAAe;IAC9B,iBAAiB,EAAE,mBAAmB;IACtC,kBAAkB,EAAE,IAAI;CACzB,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,GAAG,UAAU,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,WAAW,GAAgB;IACtC,GAAG,EAAE,KAAK;IACV,aAAa,EAAE,UAAU;IACzB,iBAAiB,EAAE,mBAAmB;IACtC,oBAAoB,EAAE,CAAC;IACvB,uBAAuB,EAAE,IAAI;IAC7B,eAAe,EAAE,EAAE;IACnB,4FAA4F;IAC5F,6FAA6F;IAC7F,8FAA8F;IAC9F,4EAA4E;IAC5E,EAAE;IACF,6FAA6F;IAC7F,8FAA8F;IAC9F,2FAA2F;IAC3F,0FAA0F;IAC1F,+FAA+F;IAC/F,oFAAoF;IACpF,EAAE;IACF,iDAAiD;IACjD,yFAAyF;IACzF,2EAA2E;IAC3E,+FAA+F;IAC/F,yDAAyD;IACzD,kBAAkB,EAAE,IAAI;CACzB,CAAC;AAEF,6EAA6E;AAC7E,MAAM,mBAAmB,GAAgC;IACvD,MAAM,EAAE,cAAc;IACtB,KAAK,EAAE,aAAa;CACrB,CAAC;AAiBF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,cAAc,CAAC,QAAqB;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,WAAW,CAAC;IAC7E,MAAM,OAAO,GAAG,wBAAwB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,OAAO,IAAI,OAAO,IAAI,mBAAmB;QAAE,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACnF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/agent-farm/servers/ide-forward.d.ts

@@ -0,0 +1,62 @@
+/**
+ * IDE prefix forward (Issue #1668).
+ *
+ * Tower forwards a fixed `/ide/` prefix to a single local VS Code server-web
+ * process — plain HTTP here and, for the workbench's own remote-protocol
+ * sockets, a raw bidirectional WebSocket pipe (Tower never parses those frames;
+ * they are VS Code's protocol, not Tower's — see `tower-websocket.ts` for the
+ * contrast with the PTY terminal bridge).
+ *
+ * Authorization is decided upstream by `isForwardAuthorized` (the HTTP path also
+ * passes the general `isRequestAllowed` choke point first); this module only
+ * proxies, after that decision. Header hygiene and `x-forwarded-*` stamping
+ * happen here, strictly after auth (Issue #1668 §D2).
+ */
+import http from 'node:http';
+import type net from 'node:net';
+/** The tunnel's public authority, for stamping `x-forwarded-*` on tunnel-borne requests. */
+export interface PublicAuthority {
+    host: string;
+    proto: string;
+    prefix: string;
+}
+/**
+ * Merge the IDE connection token into a Cookie header value as `vscode-tkn=…`,
+ * preserving every existing cookie and never clobbering an already-present
+ * `vscode-tkn` (Issue #1668). Exported for testing.
+ */
+export declare function mergeConnectionTokenCookie(existing: string | string[] | undefined, token: string): string;
+/**
+ * Derive the tunnel's public authority from the cloud config, matching the
+ * `accessUrl` Tower advertises (`tower-tunnel.ts`: `${server_url}/t/${tower_name}/`).
+ * Returns null when the tower is not cloud-registered.
+ */
+export declare function getPublicAuthority(): PublicAuthority | null;
+/**
+ * Build the header set forwarded to the IDE server: drop hop-by-hop and
+ * Tower-internal headers, set the loopback `Host`, and — only when tunnel-borne
+ * — stamp `x-forwarded-host` / `x-forwarded-proto` / `x-forwarded-prefix` from
+ * the public authority so the workbench builds correct `remoteAuthority` and
+ * base-path URLs and never sees a stale upstream port. Response caching headers
+ * (`Cache-Control` / `ETag`) are a RESPONSE concern and preserved separately.
+ *
+ * Pure and exported for unit testing.
+ */
+export declare function buildForwardHeaders(incoming: http.IncomingHttpHeaders, port: number, publicAuthority: PublicAuthority | null, connectionToken: string | null): Record<string, string | string[]>;
+/** True if `pathname` targets the IDE forward prefix (`/ide` or `/ide/…`). */
+export declare function matchIdePrefix(pathname: string): boolean;
+/**
+ * Forward a plain HTTP request to the local IDE server. Assumes authorization
+ * has already passed. Path and query are forwarded unchanged (the workbench
+ * runs with `--server-base-path /ide` and selects the workspace from `?folder=`).
+ * A dead / unreachable server yields 502, never a crash.
+ */
+export declare function forwardIdeHttp(req: http.IncomingMessage, res: http.ServerResponse, log: (level: 'INFO' | 'ERROR' | 'WARN', message: string) => void): Promise<void>;
+/**
+ * Forward a WebSocket upgrade to the local IDE server as a raw bidirectional
+ * byte pipe. Tower authenticates the upgrade (caller) and then gets out of the
+ * way — the workbench speaks VS Code's own remote protocol, which Tower must not
+ * parse. Mirrors `tunnel-client.ts handleWebSocketConnect`'s pipe.
+ */
+export declare function forwardIdeWebSocket(req: http.IncomingMessage, socket: net.Socket, head: Buffer, log: (level: 'INFO' | 'ERROR' | 'WARN', message: string) => void): Promise<void>;
+//# sourceMappingURL=ide-forward.d.ts.map

package/dist/agent-farm/servers/ide-forward.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ide-forward.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/ide-forward.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAuChC,4FAA4F;AAC5F,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAUD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAMzG;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,eAAe,GAAG,IAAI,CAa3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,IAAI,CAAC,mBAAmB,EAClC,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,eAAe,GAAG,IAAI,EACvC,eAAe,EAAE,MAAM,GAAG,IAAI,GAC7B,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CA0BnC;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGxD;AAaD;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,GAC/D,OAAO,CAAC,IAAI,CAAC,CAmCf;AAaD;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,MAAM,EAAE,GAAG,CAAC,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,GAC/D,OAAO,CAAC,IAAI,CAAC,CA2Df"}

package/dist/agent-farm/servers/ide-forward.js

@@ -0,0 +1,274 @@
+/**
+ * IDE prefix forward (Issue #1668).
+ *
+ * Tower forwards a fixed `/ide/` prefix to a single local VS Code server-web
+ * process — plain HTTP here and, for the workbench's own remote-protocol
+ * sockets, a raw bidirectional WebSocket pipe (Tower never parses those frames;
+ * they are VS Code's protocol, not Tower's — see `tower-websocket.ts` for the
+ * contrast with the PTY terminal bridge).
+ *
+ * Authorization is decided upstream by `isForwardAuthorized` (the HTTP path also
+ * passes the general `isRequestAllowed` choke point first); this module only
+ * proxies, after that decision. Header hygiene and `x-forwarded-*` stamping
+ * happen here, strictly after auth (Issue #1668 §D2).
+ */
+import http from 'node:http';
+import { URL } from 'node:url';
+import { readCloudConfig } from '../lib/cloud-config.js';
+import { TUNNEL_PROXY_HEADER } from '../lib/tunnel-client.js';
+import { TOWER_KEY_HEADER, LEGACY_WEB_KEY_HEADER } from '@cluesmith/codev-types';
+import { IDE_DEFAULT_PREFIX, readIdeConnectionToken } from '../lib/ide-record.js';
+import { getRecordedIdePort, ensureIdeServerLive } from './ide-server.js';
+/** Hop-by-hop headers not forwarded between connections (RFC 7230 §6.1). */
+const HOP_BY_HOP = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-authenticate',
+    'proxy-authorization',
+    'te',
+    'trailers',
+    'transfer-encoding',
+    'upgrade',
+]);
+/**
+ * Headers stripped before forwarding to the IDE server:
+ * - `x-forwarded-port` / `x-original-host`: a leaked upstream port makes the
+ *   browser dial the wrong WebSocket port, breaking the live session.
+ * - `codev-tower-key` / `codev-web-key`: Tower's auth credential — the IDE
+ *   server must never see it.
+ * - `x-codev-tunnel-proxy`: Tower's tunnel marker — never forwarded, so it
+ *   cannot leak or be trusted downstream (marker integrity, #1674).
+ * - `host`: replaced with the loopback target authority below.
+ */
+const STRIP_BEFORE_FORWARD = new Set([
+    'x-forwarded-port',
+    'x-original-host',
+    TOWER_KEY_HEADER,
+    LEGACY_WEB_KEY_HEADER,
+    TUNNEL_PROXY_HEADER,
+    'host',
+]);
+/** True if this request arrived over the tunnel (stamped by `TunnelClient`, #1588). */
+function isTunnelBorne(headers) {
+    return headers[TUNNEL_PROXY_HEADER] === '1';
+}
+/** The connection-token cookie name the VS Code server reads. */
+const IDE_TOKEN_COOKIE = 'vscode-tkn';
+/**
+ * Merge the IDE connection token into a Cookie header value as `vscode-tkn=…`,
+ * preserving every existing cookie and never clobbering an already-present
+ * `vscode-tkn` (Issue #1668). Exported for testing.
+ */
+export function mergeConnectionTokenCookie(existing, token) {
+    const current = Array.isArray(existing) ? existing.join('; ') : existing ?? '';
+    // Never clobber: if a vscode-tkn is already present, leave the header as-is.
+    if (new RegExp(`(^|;\\s*)${IDE_TOKEN_COOKIE}=`).test(current))
+        return current;
+    const pair = `${IDE_TOKEN_COOKIE}=${token}`;
+    return current ? `${current}; ${pair}` : pair;
+}
+/**
+ * Derive the tunnel's public authority from the cloud config, matching the
+ * `accessUrl` Tower advertises (`tower-tunnel.ts`: `${server_url}/t/${tower_name}/`).
+ * Returns null when the tower is not cloud-registered.
+ */
+export function getPublicAuthority() {
+    const cfg = readCloudConfig();
+    if (!cfg)
+        return null;
+    let host;
+    let proto;
+    try {
+        const url = new URL(cfg.server_url);
+        host = url.host;
+        proto = url.protocol === 'http:' ? 'http' : 'https';
+    }
+    catch {
+        return null;
+    }
+    return { host, proto, prefix: `/t/${cfg.tower_name}${IDE_DEFAULT_PREFIX.replace(/\/$/, '')}` };
+}
+/**
+ * Build the header set forwarded to the IDE server: drop hop-by-hop and
+ * Tower-internal headers, set the loopback `Host`, and — only when tunnel-borne
+ * — stamp `x-forwarded-host` / `x-forwarded-proto` / `x-forwarded-prefix` from
+ * the public authority so the workbench builds correct `remoteAuthority` and
+ * base-path URLs and never sees a stale upstream port. Response caching headers
+ * (`Cache-Control` / `ETag`) are a RESPONSE concern and preserved separately.
+ *
+ * Pure and exported for unit testing.
+ */
+export function buildForwardHeaders(incoming, port, publicAuthority, connectionToken) {
+    const out = {};
+    for (const [key, value] of Object.entries(incoming)) {
+        if (value === undefined)
+            continue;
+        const lower = key.toLowerCase();
+        if (HOP_BY_HOP.has(lower))
+            continue;
+        if (STRIP_BEFORE_FORWARD.has(lower))
+            continue;
+        out[key] = value;
+    }
+    out['host'] = `127.0.0.1:${port}`;
+    if (isTunnelBorne(incoming) && publicAuthority) {
+        out['x-forwarded-host'] = publicAuthority.host;
+        out['x-forwarded-proto'] = publicAuthority.proto;
+        out['x-forwarded-prefix'] = publicAuthority.prefix;
+    }
+    // Present the IDE server's connection token as a cookie. The server is
+    // spawned with `--connection-token-file` and 403s without it, and it cannot
+    // ride the browser's cookie jar through the relay (Set-Cookie Path=/ide never
+    // matches /t/<tower>/ide/), so Tower injects it here — merging with, never
+    // clobbering, any existing Cookie header (Issue #1668).
+    if (connectionToken) {
+        out['cookie'] = mergeConnectionTokenCookie(incoming.cookie, connectionToken);
+    }
+    return out;
+}
+/** True if `pathname` targets the IDE forward prefix (`/ide` or `/ide/…`). */
+export function matchIdePrefix(pathname) {
+    const bare = IDE_DEFAULT_PREFIX.replace(/\/$/, ''); // "/ide"
+    return pathname === bare || pathname.startsWith(IDE_DEFAULT_PREFIX);
+}
+/** Copy response headers, dropping hop-by-hop; preserves `Cache-Control` / `ETag`. */
+function copyResponseHeaders(headers) {
+    const out = {};
+    for (const [key, value] of Object.entries(headers)) {
+        if (value === undefined)
+            continue;
+        if (HOP_BY_HOP.has(key.toLowerCase()))
+            continue;
+        out[key] = value;
+    }
+    return out;
+}
+/**
+ * Forward a plain HTTP request to the local IDE server. Assumes authorization
+ * has already passed. Path and query are forwarded unchanged (the workbench
+ * runs with `--server-base-path /ide` and selects the workspace from `?folder=`).
+ * A dead / unreachable server yields 502, never a crash.
+ */
+export async function forwardIdeHttp(req, res, log) {
+    // Hot path: resolve the target port from the record — no port scan. A dead
+    // server fails the connect below, which triggers a respawn (Issue #1668).
+    const port = getRecordedIdePort();
+    if (port === null) {
+        res.writeHead(502, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ error: 'IDE server unavailable' }));
+        return;
+    }
+    const headers = buildForwardHeaders(req.headers, port, getPublicAuthority(), readIdeConnectionToken());
+    const proxyReq = http.request({ hostname: '127.0.0.1', port, path: req.url || '/', method: req.method, headers }, (proxyRes) => {
+        res.writeHead(proxyRes.statusCode ?? 502, copyResponseHeaders(proxyRes.headers));
+        proxyRes.pipe(res);
+        proxyRes.on('error', () => {
+            if (!res.writableEnded)
+                res.end();
+        });
+    });
+    proxyReq.on('error', (err) => {
+        log('WARN', `IDE HTTP forward error: ${err.message}`);
+        onUpstreamConnectError(err, log);
+        if (!res.headersSent) {
+            res.writeHead(502, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Bad Gateway: IDE server unavailable' }));
+        }
+        else if (!res.writableEnded) {
+            res.end();
+        }
+    });
+    req.pipe(proxyReq);
+    req.on('error', () => proxyReq.destroy());
+}
+/**
+ * On a refused/reset upstream connection the recorded server is down. Kick a
+ * respawn off the hot path (fire-and-forget) so the next request lands; this
+ * request still 502s. The respawn (cold path) is where the `lsof` probe lives.
+ */
+function onUpstreamConnectError(err, log) {
+    if (err.code === 'ECONNREFUSED' || err.code === 'ECONNRESET') {
+        ensureIdeServerLive(log).catch(() => { });
+    }
+}
+/**
+ * Forward a WebSocket upgrade to the local IDE server as a raw bidirectional
+ * byte pipe. Tower authenticates the upgrade (caller) and then gets out of the
+ * way — the workbench speaks VS Code's own remote protocol, which Tower must not
+ * parse. Mirrors `tunnel-client.ts handleWebSocketConnect`'s pipe.
+ */
+export async function forwardIdeWebSocket(req, socket, head, log) {
+    const port = getRecordedIdePort();
+    if (port === null) {
+        socket.write('HTTP/1.1 502 Bad Gateway\r\n\r\n');
+        socket.destroy();
+        return;
+    }
+    // Header hygiene drops the hop-by-hop `Connection`/`Upgrade` pair, so re-add
+    // them for the upstream upgrade (as `tunnel-client.ts` does). The client's
+    // `Sec-WebSocket-Key` is preserved by `buildForwardHeaders` and forwarded as-is
+    // so the upstream's `Sec-WebSocket-Accept` — relayed back verbatim — validates
+    // against the client's own key.
+    const headers = buildForwardHeaders(req.headers, port, getPublicAuthority(), readIdeConnectionToken());
+    headers['Connection'] = 'Upgrade';
+    headers['Upgrade'] = 'websocket';
+    const upstream = http.request({
+        hostname: '127.0.0.1',
+        port,
+        path: req.url || '/',
+        method: 'GET',
+        headers,
+    });
+    upstream.on('upgrade', (_upstreamRes, upstreamSocket, upstreamHead) => {
+        // Replay the handshake response and any buffered bytes, then pipe both ways.
+        socket.write(rebuildUpgradeResponse(_upstreamRes));
+        if (upstreamHead.length > 0)
+            socket.write(upstreamHead);
+        if (head.length > 0)
+            upstreamSocket.write(head);
+        upstreamSocket.pipe(socket);
+        socket.pipe(upstreamSocket);
+        const closeBoth = () => {
+            if (!socket.destroyed)
+                socket.destroy();
+            if (!upstreamSocket.destroyed)
+                upstreamSocket.destroy();
+        };
+        socket.on('error', closeBoth);
+        upstreamSocket.on('error', closeBoth);
+        socket.on('close', closeBoth);
+        upstreamSocket.on('close', closeBoth);
+    });
+    upstream.on('response', (upstreamRes) => {
+        // Upstream declined the upgrade (e.g. 404) — relay the status and close.
+        socket.write(`HTTP/1.1 ${upstreamRes.statusCode ?? 502} ${upstreamRes.statusMessage ?? ''}\r\n\r\n`);
+        socket.destroy();
+    });
+    upstream.on('error', (err) => {
+        log('WARN', `IDE WS forward error: ${err.message}`);
+        onUpstreamConnectError(err, log);
+        if (!socket.destroyed) {
+            socket.write('HTTP/1.1 502 Bad Gateway\r\n\r\n');
+            socket.destroy();
+        }
+    });
+    upstream.end();
+}
+/** Reconstruct the HTTP/1.1 101 switching-protocols response line + headers. */
+function rebuildUpgradeResponse(res) {
+    const statusLine = `HTTP/1.1 ${res.statusCode ?? 101} ${res.statusMessage ?? 'Switching Protocols'}`;
+    const lines = [statusLine];
+    for (const [key, value] of Object.entries(res.headers)) {
+        if (value === undefined)
+            continue;
+        if (Array.isArray(value)) {
+            for (const v of value)
+                lines.push(`${key}: ${v}`);
+        }
+        else {
+            lines.push(`${key}: ${value}`);
+        }
+    }
+    return lines.join('\r\n') + '\r\n\r\n';
+}
+//# sourceMappingURL=ide-forward.js.map

package/dist/agent-farm/servers/ide-forward.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ide-forward.js","sourceRoot":"","sources":["../../../src/agent-farm/servers/ide-forward.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE1E,4EAA4E;AAC5E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,YAAY;IACZ,YAAY;IACZ,oBAAoB;IACpB,qBAAqB;IACrB,IAAI;IACJ,UAAU;IACV,mBAAmB;IACnB,SAAS;CACV,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,kBAAkB;IAClB,iBAAiB;IACjB,gBAAgB;IAChB,qBAAqB;IACrB,mBAAmB;IACnB,MAAM;CACP,CAAC,CAAC;AASH,uFAAuF;AACvF,SAAS,aAAa,CAAC,OAAiC;IACtD,OAAO,OAAO,CAAC,mBAAmB,CAAC,KAAK,GAAG,CAAC;AAC9C,CAAC;AAED,iEAAiE;AACjE,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAEtC;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAuC,EAAE,KAAa;IAC/F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC/E,6EAA6E;IAC7E,IAAI,IAAI,MAAM,CAAC,YAAY,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9E,MAAM,IAAI,GAAG,GAAG,gBAAgB,IAAI,KAAK,EAAE,CAAC;IAC5C,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,IAAY,CAAC;IACjB,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QAChB,KAAK,GAAG,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;AACjG,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAkC,EAClC,IAAY,EACZ,eAAuC,EACvC,eAA8B;IAE9B,MAAM,GAAG,GAAsC,EAAE,CAAC;IAClD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACpC,IAAI,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9C,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,GAAG,aAAa,IAAI,EAAE,CAAC;IAElC,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,eAAe,EAAE,CAAC;QAC/C,GAAG,CAAC,kBAAkB,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC;QAC/C,GAAG,CAAC,mBAAmB,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC;QACjD,GAAG,CAAC,oBAAoB,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC;IACrD,CAAC;IAED,uEAAuE;IACvE,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,wDAAwD;IACxD,IAAI,eAAe,EAAE,CAAC;QACpB,GAAG,CAAC,QAAQ,CAAC,GAAG,0BAA0B,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;IAC7D,OAAO,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;AACtE,CAAC;AAED,sFAAsF;AACtF,SAAS,mBAAmB,CAAC,OAAiC;IAC5D,MAAM,GAAG,GAA+C,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QAChD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAyB,EACzB,GAAwB,EACxB,GAAgE;IAEhE,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACvG,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAC3B,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,EAClF,CAAC,QAAQ,EAAE,EAAE;QACX,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACjF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,IAAI,CAAC,GAAG,CAAC,aAAa;gBAAE,GAAG,CAAC,GAAG,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QAC3B,GAAG,CAAC,MAAM,EAAE,2BAA2B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACtD,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAC9B,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,GAA0B,EAAE,GAAgE;IAC1H,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC7D,mBAAmB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAyB,EACzB,MAAkB,EAClB,IAAY,EACZ,GAAgE;IAEhE,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACjD,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,6EAA6E;IAC7E,2EAA2E;IAC3E,gFAAgF;IAChF,+EAA+E;IAC/E,gCAAgC;IAChC,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACvG,OAAO,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC;IAClC,OAAO,CAAC,SAAS,CAAC,GAAG,WAAW,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,QAAQ,EAAE,WAAW;QACrB,IAAI;QACJ,IAAI,EAAE,GAAG,CAAC,GAAG,IAAI,GAAG;QACpB,MAAM,EAAE,KAAK;QACb,OAAO;KACR,CAAC,CAAC;IAEH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE;QACpE,6EAA6E;QAC7E,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC;QACnD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEhD,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAE5B,MAAM,SAAS,GAAG,GAAG,EAAE;YACrB,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,CAAC,cAAc,CAAC,SAAS;gBAAE,cAAc,CAAC,OAAO,EAAE,CAAC;QAC1D,CAAC,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9B,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9B,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,EAAE;QACtC,yEAAyE;QACzE,MAAM,CAAC,KAAK,CAAC,YAAY,WAAW,CAAC,UAAU,IAAI,GAAG,IAAI,WAAW,CAAC,aAAa,IAAI,EAAE,UAAU,CAAC,CAAC;QACrG,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;QAClD,GAAG,CAAC,MAAM,EAAE,yBAAyB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACjD,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE,CAAC;AACjB,CAAC;AAED,gFAAgF;AAChF,SAAS,sBAAsB,CAAC,GAAyB;IACvD,MAAM,UAAU,GAAG,YAAY,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,aAAa,IAAI,qBAAqB,EAAE,CAAC;IACrG,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC;AACzC,CAAC"}

package/dist/agent-farm/servers/ide-server.d.ts

@@ -0,0 +1,68 @@
+/**
+ * IDE server lifecycle, Tower-side (Issue #1668).
+ *
+ * Tower is the spawner: `afx ide start` drives this through the local-only
+ * `/api/ide` endpoint, and the same spawn path is reused by boot reconcile and
+ * by on-demand respawn when a `/ide/` request arrives and the server is down.
+ * Runtime state lives in the `~/.agent-farm/ide-server.json` record (Issue
+ * #1668 §D3) — no config file, no `global.db` change. Liveness is discovered by
+ * port (`getProcessesOnPort`), the same way Tower finds its own process.
+ */
+import http from 'node:http';
+import { type IdeServerRecord } from '../lib/ide-record.js';
+type LogFn = (level: 'INFO' | 'ERROR' | 'WARN', message: string) => void;
+/**
+ * The recorded IDE server port, or null if none — the forward's hot-path target
+ * resolution. A plain record read, no port scan (Issue #1668): a dead server
+ * fails the proxy connect immediately, which is the only liveness check the
+ * forward needs.
+ */
+export declare function getRecordedIdePort(): number | null;
+export interface SpawnIdeOptions {
+    serverPath: string;
+    port?: number;
+    defaultFolder?: string;
+}
+/**
+ * Spawn the IDE server detached (so it survives a Tower restart, like a
+ * shellper) and write the runtime record. Resolves to the record once the
+ * server is listening, or throws if the binary is missing or never binds.
+ */
+export declare function spawnIdeServer(opts: SpawnIdeOptions, log: LogFn): Promise<IdeServerRecord>;
+/**
+ * Stop the IDE server on the recorded port: SIGTERM, wait for exit, escalate to
+ * SIGKILL for survivors (mirrors `towerStop`, #1668 plan §4), then delete the
+ * record. Cold path — `getProcessesOnPort` is fine here.
+ */
+export declare function stopIdeServer(log: LogFn): Promise<{
+    stopped: boolean;
+    port: number | null;
+}>;
+export interface IdeStatus {
+    record: IdeServerRecord | null;
+    alive: boolean;
+    pid: number | null;
+}
+/** Report the IDE server's status from the record plus a live port probe. */
+export declare function ideServerStatus(): IdeStatus;
+/**
+ * Ensure the IDE server is live and return its port, or null if it cannot be
+ * made live (no record, or a respawn that never bound). A live server is the
+ * fast path (no spawn). A recorded-but-dead server is respawned from the
+ * recorded `serverPath`; concurrent callers share one in-flight respawn.
+ */
+export declare function ensureIdeServerLive(log?: LogFn): Promise<number | null>;
+/**
+ * Boot-time reconcile: adopt a live server (no orphan) or respawn a recorded
+ * but dead one. Best-effort — never throws into Tower boot.
+ */
+export declare function reconcileIdeServer(log: LogFn): Promise<void>;
+/**
+ * Local-only `/api/ide` management endpoint driving the lifecycle above:
+ * `POST` starts (body `{ serverPath, port?, defaultFolder? }`), `DELETE` stops,
+ * `GET` reports status. Reached only post-`isRequestAllowed` (key required) and
+ * blocked from the tunnel like `/api/tunnel/*` — it spawns/kills a process.
+ */
+export declare function handleIdeApi(req: http.IncomingMessage, res: http.ServerResponse, log: LogFn): Promise<void>;
+export {};
+//# sourceMappingURL=ide-server.d.ts.map

package/dist/agent-farm/servers/ide-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ide-server.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/ide-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAM7B,OAAO,EAGL,KAAK,eAAe,EAMrB,MAAM,sBAAsB,CAAC;AAE9B,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AA4BzE;;;;;GAKG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAElD;AAYD,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,KAAK,GAAG,OAAO,CAAC,eAAe,CAAC,CA6EhG;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,KAAK,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAkClG;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED,6EAA6E;AAC7E,wBAAgB,eAAe,IAAI,SAAS,CAK3C;AAKD;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,GAAE,KAAgB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAsBvF;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAQlE;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,KAAK,GACT,OAAO,CAAC,IAAI,CAAC,CA6Cf"}