@jhizzard/termdeck 1.2.0 → 1.4.0

package/packages/client/public/index.html

@@ -35,12 +35,18 @@
       </div>
 
       <div class="topbar-center">
-        <button class="layout-btn" data-layout="1x1">1x1</button>
-        <button class="layout-btn active" data-layout="2x1">2x1</button>
-        <button class="layout-btn" data-layout="2x2">2x2</button>
-        <button class="layout-btn" data-layout="3x2">3x2</button>
-        <button class="layout-btn" data-layout="2x4">2x4</button>
-        <button class="layout-btn" data-layout="4x2">4x2</button>
+        <button class="layout-btn" data-layout="1x1" title="1 panel">1x1</button>
+        <button class="layout-btn active" data-layout="2x1" title="2 panels — side by side">2x1</button>
+        <button class="layout-btn" data-layout="1x2" title="2 panels — stacked vertically">1x2</button>
+        <button class="layout-btn" data-layout="2x2" title="4 panels">2x2</button>
+        <button class="layout-btn" data-layout="3x2" title="6 panels">3x2</button>
+        <button class="layout-btn" data-layout="2x4" title="8 panels — 2 cols × 4 rows">2x4</button>
+        <button class="layout-btn" data-layout="4x2" title="8 panels — 4 cols × 2 rows">4x2</button>
+        <button class="layout-btn" data-layout="2x5" title="10 panels — 2 cols × 5 rows">2x5</button>
+        <button class="layout-btn" data-layout="5x2" title="10 panels — 5 cols × 2 rows">5x2</button>
+        <button class="layout-btn" data-layout="4x3" title="12 panels — 4 cols × 3 rows">4x3</button>
+        <button class="layout-btn" data-layout="3x4" title="12 panels — 3 cols × 4 rows">3x4</button>
+        <button class="layout-btn" data-layout="4x4" title="16 panels">4x4</button>
         <button class="layout-btn" data-layout="orch" title="Orchestrator: 4 workers across top, 1 full-width orchestrator across bottom">orch</button>
         <button class="layout-btn control-btn" data-layout="control" title="Aggregate activity feed">control</button>
       </div>
@@ -58,6 +64,13 @@
         <button class="topbar-ql-btn" onclick="quickLaunch('python3 -m http.server 8080')" title="Open a Python HTTP server on :8080">python</button>
       </div>
       <div class="topbar-row-2-spacer"></div>
+      <!-- TERMINAL FONT-SIZE STEPPER (Sprint 65 T1): global xterm.js font size,
+           persisted in localStorage, applied to every panel. -->
+      <div class="topbar-fontsize" title="Terminal font size (applies to all panels)">
+        <button type="button" id="btn-font-dec" class="font-step-btn" aria-label="Decrease terminal font size">A−</button>
+        <span id="fontSizeLabel" class="font-size-label">13</span>
+        <button type="button" id="btn-font-inc" class="font-step-btn" aria-label="Increase terminal font size">A+</button>
+      </div>
       <button id="btn-status" title="Global metrics: session counts, RAG mode, and memory bridge status">status</button>
       <button id="btn-config" title="Configuration: project list, theme defaults, and live RAG-mode toggle">config</button>      <button id="btn-sprint" title="Define and kick off a 4+1 sprint">sprint</button>
       <button id="btn-graph" title="Open the knowledge-graph view (memory_items + memory_relationships, force-directed)" onclick="window.open('/graph.html','_blank','noopener')">graph</button>
@@ -67,6 +80,15 @@
     </div>
   </div>
 
+  <!-- ORCHESTRATOR PIN ROW (Sprint 65 T1): panels with meta.role==='orchestrator'
+       render here — pinned, always visible, outside the chip filter. The row
+       collapses to zero height when no orchestrator panel exists. -->
+  <div class="orch-pin-row" id="orch-pin-row"></div>
+
+  <!-- PROJECT FILTER CHIPS (Sprint 65 T1): per-project visibility filter,
+       auto-discovered from meta.project and populated by app.js. -->
+  <div class="project-chips-row" id="project-chips"></div>
+
   <!-- TERMINAL GRID -->
   <div class="grid-container layout-2x1" id="termGrid">
     <div class="control-feed" id="controlFeed">

package/packages/client/public/style.css

@@ -10,6 +10,9 @@
       --tg-text-bright: #eef1ff;
       --tg-accent: #7aa2f7;
       --tg-accent-dim: #3d5a9e;
+      /* Sprint 65 T1 — orchestrator-panel accent (gold/amber). A theme can
+         override this var; the ORCH-pin CSS falls back to #d4a017 if unset. */
+      --tg-accent-orch: #d4a017;
       --tg-green: #9ece6a;
       --tg-amber: #e0af68;
       --tg-red: #f7768e;
@@ -317,6 +320,14 @@
     .grid-container.layout-3x2 { grid-template-columns: 1fr 1fr 1fr; grid-template-rows: 1fr 1fr; }
     .grid-container.layout-4x2 { grid-template-columns: 1fr 1fr 1fr 1fr; grid-template-rows: 1fr 1fr; }
     .grid-container.layout-2x4 { grid-template-columns: 1fr 1fr; grid-template-rows: 1fr 1fr 1fr 1fr; }
+    /* Sprint 65 T1 (1.4 / Path A) — denser presets for many-parallel-projects
+       work. layout-1x2 already exists above; these cover 10 / 12 / 16-panel
+       grids. WxH = columns × rows, consistent with the presets above. */
+    .grid-container.layout-2x5 { grid-template-columns: 1fr 1fr; grid-template-rows: repeat(5, 1fr); }
+    .grid-container.layout-5x2 { grid-template-columns: repeat(5, 1fr); grid-template-rows: 1fr 1fr; }
+    .grid-container.layout-4x3 { grid-template-columns: repeat(4, 1fr); grid-template-rows: 1fr 1fr 1fr; }
+    .grid-container.layout-3x4 { grid-template-columns: 1fr 1fr 1fr; grid-template-rows: repeat(4, 1fr); }
+    .grid-container.layout-4x4 { grid-template-columns: repeat(4, 1fr); grid-template-rows: repeat(4, 1fr); }
 
     /* Orchestrator: workers across the top (60%), one full-width orchestrator
        panel across the bottom (40%). The last panel is always the orchestrator.
@@ -370,6 +381,122 @@
     .term-panel.exited { opacity: 0.55; }
     .term-panel.exited .panel-terminal { pointer-events: none; }
 
+    /* ===== Sprint 65 T1: project-filter chips + ORCH pin + tile lifecycle =====
+       Brad's 2026-05-13 v2 spec (BACKLOG § D.5). Placed after the .term-panel
+       base + variants so .term-panel.panel--role-orch wins the cascade against
+       .term-panel:hover / .term-panel.exited (equal specificity → source order). */
+
+    /* 1.1 — project-filter chip row, above the grid. app.js leaves it empty
+       when there is only one project bucket (nothing worth filtering). */
+    .project-chips-row {
+      display: flex;
+      flex-wrap: wrap;
+      align-items: center;
+      gap: 6px;
+      padding: 6px 38px 0 6px;
+      flex-shrink: 0;
+    }
+    .project-chips-row:empty { display: none; }
+
+    .project-chip {
+      display: inline-flex;
+      align-items: center;
+      gap: 5px;
+      font-family: var(--tg-mono);
+      font-size: 11px;
+      color: var(--tg-text-dim);
+      background: var(--tg-surface);
+      border: 1px solid var(--tg-border);
+      border-radius: 999px;
+      padding: 3px 11px;
+      cursor: pointer;
+      white-space: nowrap;
+      transition: color 0.1s, background 0.1s, border-color 0.1s;
+    }
+    .project-chip:hover {
+      color: var(--tg-text);
+      background: var(--tg-surface-hover);
+      border-color: var(--tg-border-active);
+    }
+    .project-chip.active {
+      color: var(--tg-accent);
+      border-color: var(--tg-accent);
+    }
+    .project-chip-count { font-size: 10px; opacity: 0.7; }
+
+    /* 1.1 — a tile hidden by the chip filter. display:none keeps the PTY +
+       xterm.js instance alive (no teardown); fitAll() / verifyLayoutHealth()
+       already skip display:none panels. Two classes → beats base .term-panel. */
+    .term-panel.panel--filtered-out { display: none; }
+
+    /* 1.2 — orchestrator pin row: above the chip row + grid. The orch tile is
+       always grid-column 1 for muscle-memory consistency; the row collapses to
+       zero height when no orchestrator panel exists. Right padding mirrors the
+       grid's 38px guide-rail reservation. */
+    .orch-pin-row {
+      display: grid;
+      grid-template-columns: minmax(280px, 1fr) 2fr;
+      gap: 6px;
+      height: clamp(180px, 24vh, 280px);
+      padding: 6px 38px 0 6px;
+      flex-shrink: 0;
+      box-sizing: border-box;
+    }
+    .orch-pin-row:empty { display: none; }
+
+    /* 1.2 — orchestrator panel: gold/amber border so the operator's primary
+       control surface is distinguishable at a glance (Brad's "from 6+ feet"
+       acceptance bar). */
+    .term-panel.panel--role-orch {
+      border: 2px solid var(--tg-accent-orch, #d4a017);
+      box-shadow: 0 0 0 1px rgba(212, 160, 23, 0.3);
+    }
+    .term-panel.panel--role-orch:hover {
+      border-color: var(--tg-accent-orch, #d4a017);
+    }
+    /* The ORCH text badge — prepended to the .panel-type slot so the header
+       reads "ORCH <type>". ORCH always wins the slot over the project label. */
+    .term-panel.panel--role-orch .panel-type::before {
+      content: "ORCH ";
+      font-weight: 700;
+      color: var(--tg-accent-orch, #d4a017);
+      margin-right: 4px;
+    }
+
+    /* 1.3 — a tile dimming out during the grace window before auto-removal. */
+    .term-panel.panel--exiting {
+      opacity: 0.5;
+      pointer-events: none;
+      transition: opacity 0.3s ease;
+    }
+
+    /* (c) — topbar terminal font-size stepper (Joshua's 2026-05-16 ask). */
+    .topbar-fontsize {
+      display: inline-flex;
+      align-items: center;
+      gap: 3px;
+      margin-right: 4px;
+    }
+    .font-step-btn {
+      background: var(--tg-surface);
+      border: 1px solid var(--tg-border);
+      color: var(--tg-text-dim);
+      font-family: var(--tg-mono);
+      font-size: 10px;
+      padding: 2px 6px;
+      border-radius: var(--tg-radius-sm);
+      cursor: pointer;
+      transition: color 0.1s, border-color 0.1s;
+    }
+    .font-step-btn:hover { color: var(--tg-text); border-color: var(--tg-border-active); }
+    .font-size-label {
+      font-family: var(--tg-mono);
+      font-size: 10px;
+      color: var(--tg-text-dim);
+      min-width: 14px;
+      text-align: center;
+    }
+
     /* --- Panel Header (metadata bar) --- */
     .panel-header {
       display: flex;

package/packages/server/src/agent-adapters/claude.js

@@ -221,6 +221,17 @@ const claudeAdapter = {
     binary: 'claude',
     defaultArgs: [],
     env: {},
+    // Sprint 64 T2 (carve-out 2.4) — when shellWrap is `false`, spawnTerminalSession
+    // bypasses the `zsh -c <command>` wrapper and execs `binary` + `defaultArgs`
+    // directly via `pty.spawn`. Preserves the user's PATH lookup of `claude`
+    // while keeping the PTY rooted in an interactive context (zsh -c discards
+    // the TTY-interactive flags Claude Code's input handler needs). Falls back
+    // to the legacy wrapper when the user-supplied `command` carries additional
+    // args (e.g. `claude --resume <uuid>` from a launcher button) so user args
+    // are not silently dropped. See packages/server/src/index.js:1118-1175 for
+    // the dispatch logic and packages/server/tests/adapter-spawn-shell-wrap.test.js
+    // for the fence.
+    shellWrap: false,
   },
   patterns: {
     prompt: PROMPT,

package/packages/server/src/agent-adapters/codex.js

@@ -155,6 +155,41 @@ function _codexCandidateDirs(homedir, now) {
   return out;
 }
 
+// Sprint 64 T2 (carve-out 2.1) — `min(birthtime, mtime)` is the right gate
+// for cross-panel contamination. Sprint 63 EXIT-CAPTURE-VERIFICATION.md
+// Finding #1 documents the failure mode: when codex panel-B spawned and
+// self-exited during the 0.129→0.130 auto-update, panel-A's rollout was
+// still being written by panel-A's ongoing turns; A's `mtimeMs` exceeded
+// B's `createdAtMs`, so A was returned as B's transcript.
+//
+// Why `min(birthtime, mtime)` rather than birthtime alone or mtime alone:
+//   • Cross-panel contamination (Sprint 63 Finding #1): Panel-A active panel
+//     has `birthtime=T_A_create` (in the past) and `mtime=NOW` (bumped each
+//     turn). min = birthtime — correctly rejects when birthtime < spawn time.
+//   • Backdated-mtime stale rollouts: mtime < birthtime. min = mtime —
+//     correctly rejects when backdated mtime < spawn time.
+//   • Same-session rollout (this panel's own): birthtime AND mtime both
+//     post-spawn. min = birthtime ≈ mtime — correctly admits.
+//   • Platforms without birthtime (some Linux tmpfs returns birthtimeMs=0):
+//     fall back to `mtime` for both terms of the min → equivalent to mtime
+//     gate, same behavior as pre-fix.
+//
+// Gate epsilon (per Sprint 64 T4-CODEX 16:21 AUDIT-CONCERN — deterministic
+// pre-spawn rejection on birthtime-capable platforms):
+//   • Birthtime-capable platforms (APFS, ext4 with `statx`, NTFS): STRICT,
+//     no epsilon. Birthtime is deterministic FS metadata — no jitter, no
+//     quantization beyond ~1ns. A file with `birthtimeMs < spawnTimestampMs`
+//     was unambiguously created before this panel spawned and CANNOT be
+//     this panel's rollout. Strict gate is correct.
+//   • Mtime-fallback platforms (rare; some Linux tmpfs): use
+//     `_CODEX_GATE_EPSILON_MS_MTIME_FALLBACK = 5000ms` to absorb FS time
+//     quantization rounding plus any small clock-skew between OS time and
+//     `Date.now()`. mtime can drift in production (active concurrent panel
+//     bumps it), so this epsilon path is intentionally narrower than
+//     birthtime — it's a structural fallback, not a tolerance knob.
+const _CODEX_GATE_EPSILON_MS_BIRTHTIME = 0;
+const _CODEX_GATE_EPSILON_MS_MTIME_FALLBACK = 5000;
+
 async function resolveTranscriptPath(session) {
   const fs = require('fs');
   const path = require('path');
@@ -164,6 +199,15 @@ async function resolveTranscriptPath(session) {
   const createdAtMs = session.meta.createdAt
     ? Date.parse(session.meta.createdAt)
     : 0;
+  // Sprint 64 T2 (carve-out 2.1) — spawnTimestampMs is set in spawnTerminalSession
+  // immediately after `pty.spawn` returns; strictly later than createdAt (which
+  // is set in `sessions.create` BEFORE pty.spawn). Use it when present; fall
+  // back to createdAt for older sessions reloaded from SQLite that pre-date the
+  // field. The `- _CODEX_GATE_EPSILON_MS` accounts for filesystem time-stamp
+  // quantization rounding (worst-case 1s on some platforms).
+  const spawnAtMs = (typeof session.meta.spawnTimestampMs === 'number' && session.meta.spawnTimestampMs > 0)
+    ? session.meta.spawnTimestampMs
+    : createdAtMs;
   const candidates = [];
   for (const dir of _codexCandidateDirs(os.homedir(), Date.now())) {
     let entries;
@@ -174,7 +218,18 @@ async function resolveTranscriptPath(session) {
       const full = path.join(dir, name);
       let st;
       try { st = fs.statSync(full); } catch (_) { continue; }
-      if (createdAtMs && st.mtimeMs < createdAtMs) continue;
+      // Per-file gate: prefer strict birthtime when the platform exposes it;
+      // fall back to epsilon-tolerant mtime only when birthtime is unavailable.
+      // Either signal indicates "this rollout existed before the panel
+      // spawned" → reject the candidate.
+      const hasBirthtime = (typeof st.birthtimeMs === 'number' && st.birthtimeMs > 0);
+      const epsilonForFile = hasBirthtime
+        ? _CODEX_GATE_EPSILON_MS_BIRTHTIME
+        : _CODEX_GATE_EPSILON_MS_MTIME_FALLBACK;
+      const gateMsForFile = spawnAtMs > 0 ? spawnAtMs - epsilonForFile : 0;
+      const fileBirthMs = hasBirthtime ? st.birthtimeMs : st.mtimeMs;
+      const fileMinMs = Math.min(fileBirthMs, st.mtimeMs);
+      if (gateMsForFile && fileMinMs < gateMsForFile) continue;
       candidates.push({ full, mtime: st.mtimeMs });
     }
   }
@@ -264,6 +319,138 @@ function bootPromptTemplate(lane = {}, sprint = {}) {
   ].join('\n');
 }
 
+// ──────────────────────────────────────────────────────────────────────────
+// probeCodexVersion — Sprint 64 T2 (carve-out 2.3).
+//
+// Pre-spawn version probe for the Codex CLI auto-update lifecycle hazard
+// documented in Sprint 63 EXIT-CAPTURE-VERIFICATION.md Finding #1. Codex CLI
+// has no `--no-update` flag (verified 2026-05-11 against codex 0.130.0), so a
+// stale codex panel may fire its interactive update picker on spawn, accept
+// "Update now," `npm install -g @openai/codex`, and exit 0 — BEFORE any canary
+// inject lands. Joshua's Sprint 63 T2 lost a codex canary panel to exactly
+// this failure mode at 13:26 ET.
+//
+// Approach (per Sprint 64 ORCH SCOPE 16:14 ET adjudication of T4-CODEX 16:11
+// AUDIT-CONCERN #3 default-install visibility): two complementary WARN paths.
+//
+//   • **Persisted last-seen-version drift.** Read
+//     `~/.termdeck/.last-codex-version`. Absent → write `observed` silently,
+//     no WARN (first run is "baseline," not "drift"). Present and
+//     `observed !== persisted` → log WARN + update persisted to new observed
+//     (self-heals: next spawn is silent on the new version). Catches the
+//     Sprint 63 auto-update hazard for the default operator with no env-var
+//     setup required. Doesn't false-alarm on stable installs (no env, no
+//     persisted file changes once written).
+//
+//   • **`CODEX_PINNED_VERSION` env knob.** Operator-explicit pin retained
+//     as a separate signal — useful in CI / multi-user installs where the
+//     persisted file is per-user but the pin is global. WARN on observed ≠
+//     pinned; independent of the drift path above.
+//
+// Why not a hardcoded "known-good window"? Codex shipped 0.125 → 0.129 →
+// 0.130 in ~10 days; a baked-in version list goes stale in a week. The
+// persisted-self-heal path is the deterministic answer.
+//
+// Why not a wrapper shim (option B) that intercepts the update picker? The
+// picker has already shifted shape across recent codex releases; a shim that
+// answers "n\n" today may answer "yes\n" to a future renamed prompt. Real
+// fix lives upstream — file a `--no-update` flag against the Codex CLI repo.
+// Tracking that filing is cheaper than maintaining a shim.
+//
+// Dependency-injected `spawnSync` + `logger` + `fsApi` keep the fence test
+// free of a live codex binary on PATH or filesystem dependence.
+// ──────────────────────────────────────────────────────────────────────────
+
+// Module-level constants for testability — ORCH SCOPE 16:14 ET. Fence tests
+// override the path by passing `{ persistedVersionPath: '...' }`.
+const _CODEX_PERSISTED_VERSION_FILENAME = '.last-codex-version';
+
+function _defaultPersistedVersionPath() {
+  const os = require('os');
+  const path = require('path');
+  return path.join(os.homedir(), '.termdeck', _CODEX_PERSISTED_VERSION_FILENAME);
+}
+
+function probeCodexVersion({
+  pinnedVersion = process.env.CODEX_PINNED_VERSION,
+  spawnSync = require('child_process').spawnSync,
+  logger = console,
+  fsApi = require('fs'),
+  persistedVersionPath = _defaultPersistedVersionPath(),
+} = {}) {
+  let observed = null;
+  try {
+    const res = spawnSync('codex', ['--version'], { encoding: 'utf8', timeout: 2000 });
+    if (!res || res.status !== 0 || !res.stdout) {
+      return { ok: null, observed: null, reason: 'probe-failed' };
+    }
+    const match = String(res.stdout).match(/(\d+\.\d+\.\d+)/);
+    observed = match ? match[1] : null;
+  } catch (_) {
+    return { ok: null, observed: null, reason: 'probe-error' };
+  }
+  if (!observed) {
+    return { ok: null, observed: null, reason: 'no-version-string' };
+  }
+
+  // Drift path: compare observed against persisted last-seen value.
+  let persisted = null;
+  let driftDetected = false;
+  try {
+    if (fsApi.existsSync(persistedVersionPath)) {
+      const raw = fsApi.readFileSync(persistedVersionPath, 'utf8');
+      const trimmed = String(raw || '').trim();
+      persisted = trimmed.length > 0 ? trimmed : null;
+    }
+  } catch (_) {
+    // Read failure is non-fatal — treat as absent. Persistence is best-effort.
+    persisted = null;
+  }
+  if (persisted === null) {
+    // First-run baseline — write silently, no WARN.
+    _writePersistedVersion(fsApi, persistedVersionPath, observed);
+  } else if (persisted !== observed) {
+    driftDetected = true;
+    if (logger && typeof logger.warn === 'function') {
+      logger.warn(
+        `[codex] version drift detected: observed=${observed} persisted=${persisted} — `
+        + 'codex CLI may have auto-updated since last spawn (Sprint 63 lifecycle hazard).'
+      );
+    }
+    _writePersistedVersion(fsApi, persistedVersionPath, observed);
+  }
+
+  // Pin path: independent of drift. Warns on every spawn where pin ≠ observed.
+  let pinnedMismatch = false;
+  if (pinnedVersion && observed !== pinnedVersion) {
+    pinnedMismatch = true;
+    if (logger && typeof logger.warn === 'function') {
+      logger.warn(
+        `[codex] version pin mismatch: observed=${observed} pinned=${pinnedVersion} — `
+        + 'CODEX_PINNED_VERSION env var requires explicit re-pin (Sprint 63 lifecycle hazard).'
+      );
+    }
+  }
+
+  if (driftDetected || pinnedMismatch) {
+    return { ok: false, observed, persisted, pinned: pinnedVersion || null, driftDetected, pinnedMismatch };
+  }
+  return { ok: true, observed, persisted, pinned: pinnedVersion || null, driftDetected: false, pinnedMismatch: false };
+}
+
+function _writePersistedVersion(fsApi, p, version) {
+  try {
+    const path = require('path');
+    const dir = path.dirname(p);
+    try { fsApi.mkdirSync(dir, { recursive: true }); }
+    catch (_) { /* fail-soft — usually already exists */ }
+    fsApi.writeFileSync(p, `${version}\n`, 'utf8');
+  } catch (_) {
+    // Persistence failure is non-fatal — WARN behavior is unaffected the
+    // next spawn (we'll re-detect drift against whatever is/isn't on disk).
+  }
+}
+
 const codexAdapter = {
   name: 'codex',
   sessionType: 'codex',
@@ -274,6 +461,14 @@ const codexAdapter = {
     binary: 'codex',
     defaultArgs: [],
     env: { OPENAI_API_KEY: process.env.OPENAI_API_KEY },
+    // Sprint 64 T2 (carve-out 2.4) — direct spawn (no `zsh -c` wrapper) when
+    // the launching command is exactly the binary name. Sprint 63
+    // EXIT-CAPTURE-VERIFICATION.md § 6 flagged this as a probable contributor
+    // to codex's fast-death window during the 2026-05-11 13:26 ET update-picker
+    // event — codex spawned through `zsh -c codex` may have lost the
+    // interactive-TTY context the update-picker dialog needed. See claude.js
+    // for the full rationale + fallback semantics.
+    shellWrap: false,
   },
   patterns: {
     prompt: PROMPT,
@@ -329,4 +524,11 @@ const codexAdapter = {
   },
 };
 
+// Sprint 64 T2 (carve-out 2.3) — expose probeCodexVersion on the adapter object
+// so call sites can `require('./codex').probeCodexVersion(...)` without
+// threading through the registry. Adapter-shape parity tests (Sprint 45 T4's
+// tests/agent-adapter-parity.test.js) iterate a fixed allowlist of fields and
+// tolerate extra properties — adding this function is safe.
+codexAdapter.probeCodexVersion = probeCodexVersion;
+
 module.exports = codexAdapter;

package/packages/server/src/agent-adapters/gemini.js

@@ -247,6 +247,10 @@ const geminiAdapter = {
     // not for in-adapter overriding. OAuth-personal is the typical auth
     // path (settings.json `security.auth.selectedType: 'oauth-personal'`).
     env: {},
+    // Sprint 64 T2 (carve-out 2.4) — direct spawn (no `zsh -c` wrapper) when
+    // the launching command is exactly the binary name. See claude.js for the
+    // full rationale + fallback semantics.
+    shellWrap: false,
   },
   patterns: {
     prompt: PROMPT,

package/packages/server/src/agent-adapters/grok.js

@@ -446,6 +446,10 @@ const grokAdapter = {
     env: {
       GROK_MODEL: chooseModel(),
     },
+    // Sprint 64 T2 (carve-out 2.4) — direct spawn (no `zsh -c` wrapper) when
+    // the launching command is exactly the binary name. See claude.js for the
+    // full rationale + fallback semantics.
+    shellWrap: false,
   },
   patterns: {
     prompt: PROMPT,

package/packages/server/src/database.js

@@ -66,7 +66,8 @@ function initDatabase(Database) {
       exit_code INTEGER,
       reason TEXT,
       theme TEXT DEFAULT 'tokyo-night',
-      theme_override TEXT
+      theme_override TEXT,
+      role TEXT
     );
 
     CREATE TABLE IF NOT EXISTS command_history (
@@ -137,6 +138,24 @@ function initDatabase(Database) {
     console.warn('[db] sessions.theme_override migration failed:', err.message);
   }
 
+  // Migration (Sprint 65 T2): add sessions.role for the explicit
+  // orchestrator/worker/reviewer/auditor panel-role flag (Brad's 2026-05-13
+  // v2 dashboard spec — Approach A). SQLite has no `ADD COLUMN IF NOT EXISTS`,
+  // so PRAGMA-check first — same pattern as the command_history.source and
+  // sessions.theme_override migrations above. No backfill: pre-Sprint-65 rows
+  // stay role=NULL (unroled), which is the correct default for sessions that
+  // pre-date the feature.
+  try {
+    const cols = db.prepare(`PRAGMA table_info(sessions)`).all();
+    const hasRole = cols.some((c) => c.name === 'role');
+    if (!hasRole) {
+      db.exec(`ALTER TABLE sessions ADD COLUMN role TEXT`);
+      console.log("[db] Migrated sessions: added 'role' column");
+    }
+  } catch (err) {
+    console.warn('[db] sessions.role migration failed:', err.message);
+  }
+
   // Migration (v0.7.0): drop the dead projects.default_theme column. It was
   // CREATE'd in early v0.1 but was never read or written by any code path
   // (see Sprint 32 T1 grep). Removing it eliminates a latent contract-drift