agent-board-runner 0.1.2 → 0.1.3

package/dist/cli.js

@@ -188,7 +188,7 @@ import { execFile as execFile2 } from "node:child_process";
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { existsSync as existsSync4, lstatSync, mkdirSync as mkdirSync4, readdirSync, readFileSync as readFileSync4, rmSync as rmSync2, writeFileSync as writeFileSync7 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
-import { join as join8, resolve as resolve2, sep } from "node:path";
+import { join as join9, resolve as resolve2, sep } from "node:path";
 import { parse } from "node:url";
 import { promisify as promisify2 } from "node:util";
 
@@ -412,7 +412,10 @@ async function savePastedImage(sessionId, extCode, bytes) {
   return path;
 }
 function registerPtySession(sessionId, pty, ticket) {
-  const handle = { pty, ticket, outputBuffer: [], sockets: /* @__PURE__ */ new Set(), readOnly: false };
+  const handle = { pty, ticket, outputBuffer: [], sockets: /* @__PURE__ */ new Set(), readOnly: false, exited: false };
+  pty.onExit(() => {
+    handle.exited = true;
+  });
   pty.onData((data) => {
     handle.outputBuffer.push(data);
     if (handle.outputBuffer.length > MAX_BUFFERED_CHUNKS) handle.outputBuffer.shift();
@@ -431,7 +434,7 @@ function setPtySessionReadOnly(sessionId, readOnly) {
 }
 function resizePtySession(sessionId, cols, rows) {
   const handle = registry.get(sessionId);
-  if (!handle) return;
+  if (!handle || handle.exited) return;
   handle.pty.resize(cols, rows);
 }
 function stopPtySession(sessionId) {
@@ -735,10 +738,12 @@ async function logActivity(supabase, params) {
 }
 
 // src/sessions.ts
-async function countRunningSessions(supabase, projectId, ownerUserId) {
-  const { count, error } = await supabase.from("sessions").select("id, cards!card_id!inner(project_id, assigned_user_id)", { count: "exact", head: true }).eq("cards.project_id", projectId).eq("cards.assigned_user_id", ownerUserId).eq("status", "running");
+async function getRunningSessionForProject(supabase, projectId, ownerUserId) {
+  const { data, error } = await supabase.from("sessions").select("id, card_id, agent_state, cards!card_id!inner(project_id, assigned_user_id)").eq("cards.project_id", projectId).eq("cards.assigned_user_id", ownerUserId).eq("status", "running").limit(1).maybeSingle();
   if (error) throw error;
-  return count ?? 0;
+  if (!data) return null;
+  const row = data;
+  return { id: row.id, cardId: row.card_id, agentState: row.agent_state };
 }
 async function listQueuedSessionsForRunner(supabase, ownerUserId) {
   const { data, error } = await supabase.from("sessions").select(
@@ -812,7 +817,8 @@ async function updateCard(supabase, cardId, changes) {
     ...changes.deployError !== void 0 ? { deploy_error: changes.deployError } : {},
     ...changes.customActionStatus !== void 0 ? { custom_action_status: changes.customActionStatus } : {},
     ...changes.customActionOutput !== void 0 ? { custom_action_output: changes.customActionOutput } : {},
-    ...changes.requeueRequestedAt !== void 0 ? { requeue_requested_at: changes.requeueRequestedAt } : {}
+    ...changes.requeueRequestedAt !== void 0 ? { requeue_requested_at: changes.requeueRequestedAt } : {},
+    ...changes.restartRequestedAt !== void 0 ? { restart_requested_at: changes.restartRequestedAt } : {}
   }).eq("id", cardId);
   if (error) throw error;
 }
@@ -828,7 +834,7 @@ async function getProjectRepos(supabase, projectId) {
 }
 async function listCardsInColumn(supabase, projectId, column) {
   const { data, error } = await supabase.from("cards").select(
-    "id, project_id, title, instructions, column_name, assigned_user_id, deploy_error, file_references, preview_urls, custom_action_status, requeue_requested_at"
+    "id, project_id, title, instructions, column_name, assigned_user_id, deploy_error, file_references, preview_urls, custom_action_status, requeue_requested_at, restart_requested_at"
   ).eq("project_id", projectId).eq("column_name", column);
   if (error) throw error;
   return data;
@@ -911,9 +917,9 @@ async function upsertClaudeUsage(supabase, userId, changes) {
 
 // src/usageMonitor.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync6 } from "node:fs";
-import { homedir as homedir3, tmpdir as tmpdir5 } from "node:os";
-import { join as join7 } from "node:path";
+import { mkdirSync as mkdirSync3 } from "node:fs";
+import { tmpdir as tmpdir5 } from "node:os";
+import { join as join8 } from "node:path";
 import { spawn as spawn2 } from "node-pty";
 
 // src/agentMomentHookScript.ts
@@ -1263,38 +1269,79 @@ function claudeCliSettingsArgs() {
   ];
 }
 
-// src/usageMonitor.ts
-var SESSION_ID = "usage-monitor";
-var TICKET = randomUUID4();
-var SCRATCH_DIR = join7(tmpdir5(), "agent-board-usage-monitor");
-var POLL_INTERVAL_MS = Number(process.env.AGENT_BOARD_USAGE_POLL_INTERVAL_MS ?? 15 * 6e4);
-var IDLE_MS = 2e3;
-var HARD_TIMEOUT_MS = 6e4;
-function usageMonitorSessionId() {
-  return SESSION_ID;
-}
-function usageMonitorTicket() {
-  return TICKET;
-}
-function ensureScratchDirTrusted() {
+// src/claudeTrust.ts
+import { existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync6 } from "node:fs";
+import { homedir as homedir3 } from "node:os";
+import { join as join7 } from "node:path";
+function ensureDirTrusted(dirPath) {
   const claudeJsonPath = join7(homedir3(), ".claude.json");
   if (!existsSync3(claudeJsonPath)) return;
   try {
     const raw = readFileSync3(claudeJsonPath, "utf8");
     const data = JSON.parse(raw);
     data.projects ??= {};
-    const keys = [SCRATCH_DIR, SCRATCH_DIR.replace(/\\/g, "/")];
+    const keys = [dirPath, dirPath.replace(/\\/g, "/")];
     const alreadyTrusted = keys.every((key) => data.projects[key]?.hasTrustDialogAccepted === true);
     if (alreadyTrusted) return;
     for (const key of keys) {
       data.projects[key] = { ...data.projects[key], hasTrustDialogAccepted: true };
     }
     writeFileSync6(claudeJsonPath, JSON.stringify(data, null, 2));
-    logger.runner.info("USAGE_MONITOR", `Pre-trusted scratch directory ${SCRATCH_DIR} in ~/.claude.json.`);
+    logger.runner.info("TRUST", `Pre-trusted ${dirPath} in ~/.claude.json.`);
   } catch (err) {
-    logger.runner.error("USAGE_MONITOR", "Failed to pre-trust the usage-monitor scratch directory:", err);
+    logger.runner.error("TRUST", `Failed to pre-trust ${dirPath}:`, err);
   }
 }
+function ensureMcpServersTrusted(dirPath) {
+  const mcpJsonPath = join7(dirPath, ".mcp.json");
+  if (!existsSync3(mcpJsonPath)) return;
+  let serverNames;
+  try {
+    const mcpConfig = JSON.parse(readFileSync3(mcpJsonPath, "utf8"));
+    serverNames = Object.keys(mcpConfig.mcpServers ?? {});
+  } catch (err) {
+    logger.runner.error("TRUST", `Failed to read ${mcpJsonPath}:`, err);
+    return;
+  }
+  if (serverNames.length === 0) return;
+  const claudeJsonPath = join7(homedir3(), ".claude.json");
+  if (!existsSync3(claudeJsonPath)) return;
+  try {
+    const raw = readFileSync3(claudeJsonPath, "utf8");
+    const data = JSON.parse(raw);
+    data.projects ??= {};
+    const keys = [dirPath, dirPath.replace(/\\/g, "/")];
+    const alreadyApproved = keys.every(
+      (key) => serverNames.every((name) => data.projects[key]?.enabledMcpjsonServers?.includes(name))
+    );
+    if (alreadyApproved) return;
+    for (const key of keys) {
+      const project = data.projects[key] ??= {};
+      project.enabledMcpjsonServers = [.../* @__PURE__ */ new Set([...project.enabledMcpjsonServers ?? [], ...serverNames])];
+      project.disabledMcpjsonServers = (project.disabledMcpjsonServers ?? []).filter(
+        (name) => !serverNames.includes(name)
+      );
+    }
+    writeFileSync6(claudeJsonPath, JSON.stringify(data, null, 2));
+    logger.runner.info("TRUST", `Pre-approved MCP servers [${serverNames.join(", ")}] for ${dirPath}.`);
+  } catch (err) {
+    logger.runner.error("TRUST", `Failed to pre-approve MCP servers for ${dirPath}:`, err);
+  }
+}
+
+// src/usageMonitor.ts
+var SESSION_ID = "usage-monitor";
+var TICKET = randomUUID4();
+var SCRATCH_DIR = join8(tmpdir5(), "agent-board-usage-monitor");
+var POLL_INTERVAL_MS = Number(process.env.AGENT_BOARD_USAGE_POLL_INTERVAL_MS ?? 15 * 6e4);
+var IDLE_MS = 2e3;
+var HARD_TIMEOUT_MS = 6e4;
+function usageMonitorSessionId() {
+  return SESSION_ID;
+}
+function usageMonitorTicket() {
+  return TICKET;
+}
 function pollUsageOnce() {
   let pty;
   try {
@@ -1341,7 +1388,7 @@ function pollUsageOnce() {
 }
 function startUsageMonitor() {
   mkdirSync3(SCRATCH_DIR, { recursive: true });
-  ensureScratchDirTrusted();
+  ensureDirTrusted(SCRATCH_DIR);
   pollUsageOnce();
   setInterval(pollUsageOnce, POLL_INTERVAL_MS);
 }
@@ -1357,7 +1404,7 @@ var IGNORED_ENTRY_NAMES = /* @__PURE__ */ new Set([".git", ".claude", "node_modu
 var AGENT_SAFE_SUBDIR_NAMES = /* @__PURE__ */ new Set(["skills", "commands", "agents", "rules"]);
 function ensureSkillsDirExists(claudeDir) {
   try {
-    mkdirSync4(join8(claudeDir, "skills"), { recursive: true });
+    mkdirSync4(join9(claudeDir, "skills"), { recursive: true });
   } catch (err) {
     logger.runner.warn("FILES", "Could not create .claude/skills:", err);
   }
@@ -1484,7 +1531,7 @@ function listSafeAgentDirectory(baseDir, relPath, atClaudeRoot) {
   }
   const isRepoRootLevel = segments.length === 0 || segments.length === 1 && segments[0] !== ".claude";
   if (isRepoRootLevel) {
-    ensureSkillsDirExists(join8(baseDir, relPath, ".claude"));
+    ensureSkillsDirExists(join9(baseDir, relPath, ".claude"));
     const entries2 = listDirectory(baseDir, relPath, { includeDotClaude: true });
     return entries2.filter((entry) => entry.type === "file" && entry.name === "CLAUDE.md" || entry.type === "dir" && entry.name === ".claude");
   }
@@ -1515,7 +1562,7 @@ function assertWritableAgentPath(relPath, atClaudeRoot) {
 function listDirectoryForBrowse(rootPath, relPath) {
   return listDirectory(rootPath, relPath).map((entry) => ({
     ...entry,
-    hasGit: entry.type === "dir" && existsSync4(join8(rootPath, entry.path, ".git"))
+    hasGit: entry.type === "dir" && existsSync4(join9(rootPath, entry.path, ".git"))
   }));
 }
 var SAFE_CLONE_URL_PATTERN = /^(https?:\/\/|git:\/\/|ssh:\/\/|git@[\w.-]+:)\S+$/i;
@@ -1553,7 +1600,7 @@ async function handleCloneRequest(req, res, query) {
     sendJson(res, 400, { error: "N\xE3o foi poss\xEDvel determinar o nome da pasta a partir da URL." });
     return;
   }
-  const destPath = join8(setupEntry.rootPath, folderName);
+  const destPath = join9(setupEntry.rootPath, folderName);
   if (existsSync4(destPath)) {
     sendJson(res, 409, { error: `J\xE1 existe uma pasta "${folderName}" na raiz permitida.` });
     return;
@@ -1621,7 +1668,7 @@ function findBrandIconPath(repoRoot) {
       if (entry.isSymbolicLink() || IGNORED_ENTRY_NAMES.has(entry.name)) continue;
       const relPath = relDir ? `${relDir}/${entry.name}` : entry.name;
       if (entry.isDirectory()) {
-        walk(join8(dir, entry.name), relPath, depth + 1);
+        walk(join9(dir, entry.name), relPath, depth + 1);
       } else if (entry.isFile()) {
         const match = patterns.find(({ pattern }) => pattern.test(entry.name));
         if (match) candidatesByBaseName.get(match.baseName).push({ relPath, depth });
@@ -1786,7 +1833,7 @@ async function getRepoDiffForTarget(label, cwd) {
 async function handleDiffRequest(entry, res, projectId) {
   try {
     const children = statuslineSupabase && projectId ? await getProjectRepos(statuslineSupabase, projectId) : [];
-    const targets = children.length > 0 ? children.map((child2) => ({ label: child2.subpath, cwd: join8(entry.repoRoot, child2.subpath) })) : [{ label: null, cwd: entry.repoRoot }];
+    const targets = children.length > 0 ? children.map((child2) => ({ label: child2.subpath, cwd: join9(entry.repoRoot, child2.subpath) })) : [{ label: null, cwd: entry.repoRoot }];
     const repos = await Promise.all(targets.map((target) => getRepoDiffForTarget(target.label, target.cwd)));
     sendJson(res, 200, { repos });
   } catch (err) {
@@ -2094,7 +2141,7 @@ function attachAgentEventsServer() {
 
 // src/columnActions.ts
 import { exec } from "node:child_process";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 import { promisify as promisify3 } from "node:util";
 var execAsync = promisify3(exec);
 var OUTPUT_TAIL_CHARS = 4e3;
@@ -2104,7 +2151,7 @@ function tail(text) {
 function resolveTargets(project, children, repoRoot, column, timing) {
   if (children.length > 0) {
     return children.flatMap(
-      (child2) => (child2.column_actions[column] ?? []).filter((action) => action.timing === timing).map((action) => ({ label: child2.subpath, cwd: join9(repoRoot, child2.subpath), command: action.command }))
+      (child2) => (child2.column_actions[column] ?? []).filter((action) => action.timing === timing).map((action) => ({ label: child2.subpath, cwd: join10(repoRoot, child2.subpath), command: action.command }))
     );
   }
   return (project.column_actions[column] ?? []).filter((action) => action.timing === timing).map((action) => ({ label: null, cwd: repoRoot, command: action.command }));
@@ -2210,7 +2257,7 @@ async function checkPendingDeployActionReruns(supabase, config) {
 }
 
 // src/deploy.ts
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 
 // src/devServer.ts
 import { spawn as spawn4 } from "node:child_process";
@@ -2219,7 +2266,7 @@ import { spawn as spawn4 } from "node:child_process";
 import { spawn as spawn3 } from "node:child_process";
 import { accessSync, constants } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { delimiter, join as join10 } from "node:path";
+import { delimiter, join as join11 } from "node:path";
 import { bin as bundledBinaryPath, install as downloadCloudflared } from "cloudflared";
 var TRYCLOUDFLARE_URL_RE = /https:\/\/[a-z0-9-]+\.trycloudflare\.com/;
 var STARTUP_TIMEOUT_MS = 2e4;
@@ -2230,15 +2277,15 @@ function wellKnownDirectories() {
   const home = homedir5();
   if (IS_WINDOWS2) {
     const candidates = [
-      process.env.ProgramFiles && join10(process.env.ProgramFiles, "cloudflared"),
-      process.env["ProgramFiles(x86)"] && join10(process.env["ProgramFiles(x86)"], "cloudflared"),
-      process.env.LOCALAPPDATA && join10(process.env.LOCALAPPDATA, "Microsoft", "WinGet", "Links"),
-      join10(home, "scoop", "shims"),
-      process.env.ChocolateyInstall && join10(process.env.ChocolateyInstall, "bin")
+      process.env.ProgramFiles && join11(process.env.ProgramFiles, "cloudflared"),
+      process.env["ProgramFiles(x86)"] && join11(process.env["ProgramFiles(x86)"], "cloudflared"),
+      process.env.LOCALAPPDATA && join11(process.env.LOCALAPPDATA, "Microsoft", "WinGet", "Links"),
+      join11(home, "scoop", "shims"),
+      process.env.ChocolateyInstall && join11(process.env.ChocolateyInstall, "bin")
     ];
     return candidates.filter((dir) => Boolean(dir));
   }
-  return ["/usr/local/bin", "/usr/bin", "/opt/homebrew/bin", join10(home, ".local", "bin")];
+  return ["/usr/local/bin", "/usr/bin", "/opt/homebrew/bin", join11(home, ".local", "bin")];
 }
 function pathDirectories() {
   return (process.env.PATH ?? "").split(delimiter).map((dir) => dir.trim().replace(/^"|"$/g, "")).filter(Boolean);
@@ -2254,7 +2301,7 @@ function isExecutableFile(path) {
 function findInstalledBinary() {
   const override = process.env.AGENT_BOARD_CLOUDFLARED_PATH;
   const directories = [...pathDirectories(), ...wellKnownDirectories()];
-  const candidates = [...override ? [override] : [], ...directories.map((dir) => join10(dir, BINARY_NAME))];
+  const candidates = [...override ? [override] : [], ...directories.map((dir) => join11(dir, BINARY_NAME))];
   return candidates.find(isExecutableFile) ?? null;
 }
 async function locateCloudflared() {
@@ -2485,6 +2532,8 @@ var SHIFT_TAB_PRESSES_TO_PLAN_MODE = 4;
 var SHIFT_TAB_DELAY_MS = 400;
 var PLAN_MODE_INDICATOR = /plan mode on/i;
 function spawnAgentPty(repoPath, cardId, cardTitle, instructions, sessionId, ticket, planFirst) {
+  ensureDirTrusted(repoPath);
+  ensureMcpServersTrusted(repoPath);
   const claudeSessionId = randomUUID6();
   const pty = spawn5(
     CLAUDE_BINARY,
@@ -2581,6 +2630,8 @@ function sendContinue(pty, cardId) {
   }
 }
 function resumeAgentPty(repoPath, claudeSessionId, sessionId, ticket) {
+  ensureDirTrusted(repoPath);
+  ensureMcpServersTrusted(repoPath);
   return spawn5(
     CLAUDE_BINARY,
     [
@@ -2604,8 +2655,8 @@ function resumeAgentPty(repoPath, claudeSessionId, sessionId, ticket) {
 // src/cardAttachments.ts
 import { mkdir as mkdir2, writeFile as writeFile2 } from "node:fs/promises";
 import { tmpdir as tmpdir6 } from "node:os";
-import { extname, join as join11 } from "node:path";
-var ATTACHMENTS_ROOT = join11(tmpdir6(), "agent-board", "card-attachments");
+import { extname, join as join12 } from "node:path";
+var ATTACHMENTS_ROOT = join12(tmpdir6(), "agent-board", "card-attachments");
 function sanitizeFileName(fileName) {
   return fileName.replace(/[^a-zA-Z0-9._-]/g, "_");
 }
@@ -2617,13 +2668,13 @@ async function downloadCardAttachments(supabase, cardId) {
   }
   const rows = data ?? [];
   if (rows.length === 0) return [];
-  const targetDir = join11(ATTACHMENTS_ROOT, cardId);
+  const targetDir = join12(ATTACHMENTS_ROOT, cardId);
   await mkdir2(targetDir, { recursive: true });
   const paths = [];
   for (const row of rows) {
     const baseName = sanitizeFileName(row.file_name);
     const fileName = extname(baseName) ? baseName : `${baseName}${extname(row.storage_path)}`;
-    const localPath = join11(targetDir, `${row.id}-${fileName}`);
+    const localPath = join12(targetDir, `${row.id}-${fileName}`);
     try {
       const { data: blob, error: downloadError } = await supabase.storage.from(CARD_ATTACHMENTS_BUCKET).download(row.storage_path);
       if (downloadError) throw downloadError;
@@ -2697,6 +2748,7 @@ function cancelUsageResume(sessionId) {
 
 // src/orchestrator.ts
 var TERMINAL_TICKET_TTL_MS = 60 * 60 * 1e3;
+var RESUME_CONVERSATION_MISSING_PATTERN = /no conversation found with session id/i;
 var inFlightCardIds = /* @__PURE__ */ new Set();
 var activeSessionByCard = /* @__PURE__ */ new Map();
 var intentionallyStoppedSessionIds = /* @__PURE__ */ new Set();
@@ -2770,11 +2822,17 @@ async function dispatchRunnerQueue(supabase, config) {
   try {
     const queued = await listQueuedSessionsForRunner(supabase, config.ownerUserId);
     if (queued.length === 0) return;
+    const queuedProjectIds = new Set(queued.map((entry) => entry.cards.project_id));
     const maxConcurrentProjects = await getRunnerMaxConcurrentProjects(supabase, config.runnerId);
     const runningProjectIds = /* @__PURE__ */ new Set();
     for (const project of config.registeredProjects) {
-      const runningCount = await countRunningSessions(supabase, project.id, config.ownerUserId);
-      if (runningCount > 0) runningProjectIds.add(project.id);
+      const running = await getRunningSessionForProject(supabase, project.id, config.ownerUserId);
+      if (!running) continue;
+      if (running.agentState === "done" && queuedProjectIds.has(project.id)) {
+        await pauseFinishedSession(supabase, config, project.id, running.cardId, running.id);
+        continue;
+      }
+      runningProjectIds.add(project.id);
     }
     let freeProjectSlots = maxConcurrentProjects - runningProjectIds.size;
     if (freeProjectSlots <= 0) return;
@@ -2828,9 +2886,13 @@ async function spawnSessionPty(supabase, config, entry) {
   const ticket = randomUUID7();
   let pty;
   let newClaudeSessionId = null;
+  let resumeConversationMissing = false;
   try {
     if (claudeSessionId) {
       pty = resumeAgentPty(registered.repoPath, claudeSessionId, sessionId, ticket);
+      pty.onData((chunk) => {
+        if (RESUME_CONVERSATION_MISSING_PATTERN.test(normalizeTerminalOutput(chunk))) resumeConversationMissing = true;
+      });
     } else {
       const attachmentPaths = await downloadCardAttachments(supabase, cardId);
       const instructions = buildInstructionsWithMcpContext(
@@ -2878,11 +2940,24 @@ async function spawnSessionPty(supabase, config, entry) {
   );
   pty.onExit(({ exitCode }) => {
     const wasIntentional = intentionallyStoppedSessionIds.delete(sessionId);
-    logger.card.warn(cardId, `Session exited (code ${exitCode}) \u2014 this only happens if the process crashed or was killed, the card doesn't auto-advance.`);
     activityWatcher.stop();
     unregisterAgentActivityWatcher(sessionId);
     cancelUsageResume(sessionId);
     activeSessionByCard.delete(cardId);
+    if (resumeConversationMissing) {
+      logger.card.warn(
+        cardId,
+        `Session ${sessionId}: --resume ${claudeSessionId} found no such conversation \u2014 clearing it so the next attempt starts a fresh one instead of repeating the same failure.`
+      );
+      void updateSession(
+        supabase,
+        sessionId,
+        { status: "failed", endedAt: (/* @__PURE__ */ new Date()).toISOString(), claudeSessionId: null },
+        { projectId: card.project_id, cardId, userId: config.ownerUserId }
+      );
+      return;
+    }
+    logger.card.warn(cardId, `Session exited (code ${exitCode}) \u2014 this only happens if the process crashed or was killed, the card doesn't auto-advance.`);
     if (!wasIntentional && exitCode !== 0) {
       publishAgentState(supabase, card.project_id, cardId, sessionId, "error");
     }
@@ -2903,7 +2978,7 @@ function watchAgentActivity(supabase, config, projectId, cardId, sessionId, pty)
     } else {
       cancelUsageResume(sessionId);
     }
-    if (state === "done") void pauseFinishedSession(supabase, config, projectId, cardId, sessionId);
+    if (state === "done") void dispatchRunnerQueue(supabase, config);
   });
   pty.onData((chunk) => watcher.push(chunk));
   registerAgentActivityWatcher(sessionId, watcher);
@@ -2913,8 +2988,7 @@ async function pauseFinishedSession(supabase, config, projectId, cardId, session
   const paused = await pauseRunningSession(supabase, sessionId, { projectId, cardId, userId: config.ownerUserId });
   if (!paused) return;
   setPtySessionReadOnly(sessionId, true);
-  logger.card.info(cardId, `Session ${sessionId} paused (agent reached "done") \u2014 WIP slot freed, pty stays viewable read-only.`);
-  await dispatchRunnerQueue(supabase, config);
+  logger.card.info(cardId, `Session ${sessionId} paused (agent reached "done", another session needs this project's WIP slot).`);
 }
 async function requeuePausedCard(supabase, config, card) {
   const active = await getActiveSessionForCard(supabase, card.id);
@@ -2992,6 +3066,24 @@ async function stopCardSession(supabase, config, card) {
   logger.card.info(card.id, `Session ${sessionId} stopped.`);
   await dispatchRunnerQueue(supabase, config);
 }
+async function restartCardSession(supabase, config, card) {
+  const sessionId = activeSessionByCard.get(card.id) ?? (await getActiveSessionForCard(supabase, card.id))?.id;
+  if (sessionId) {
+    intentionallyStoppedSessionIds.add(sessionId);
+    stopPtySession(sessionId);
+    cancelUsageResume(sessionId);
+    activeSessionByCard.delete(card.id);
+    await updateSession(
+      supabase,
+      sessionId,
+      { status: "failed", claudeSessionId: null, endedAt: (/* @__PURE__ */ new Date()).toISOString() },
+      { projectId: card.project_id, cardId: card.id, userId: config.ownerUserId }
+    );
+    logger.card.info(card.id, `Session ${sessionId} abandoned by "Reiniciar sess\xE3o"; starting a fresh one.`);
+  }
+  await updateCard(supabase, card.id, { restartRequestedAt: null });
+  await enqueueCard(supabase, config, card);
+}
 
 // src/deploy.ts
 async function handleDeployRequested(supabase, config, project) {
@@ -3009,7 +3101,7 @@ async function handleDeployRequested(supabase, config, project) {
   }
   const children = await getProjectRepos(supabase, project.id);
   const repoRoot = resolveRepoPath(config, project.repo_path);
-  const targets = children.length > 0 ? children.map((child2) => ({ label: child2.subpath, path: join12(repoRoot, child2.subpath) })) : [{ label: null, path: repoRoot }];
+  const targets = children.length > 0 ? children.map((child2) => ({ label: child2.subpath, path: join13(repoRoot, child2.subpath) })) : [{ label: null, path: repoRoot }];
   const failures = [];
   for (const target of targets) {
     const result = await pushBranchToMain(target.path);
@@ -3143,7 +3235,7 @@ async function syncRegisteredProjects(supabase, config, registeredPaths) {
 }
 
 // src/review.ts
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 var inFlightCardIds2 = /* @__PURE__ */ new Set();
 async function handleCardEnteredRevisao(supabase, config, card) {
   if (inFlightCardIds2.has(card.id)) return;
@@ -3152,7 +3244,7 @@ async function handleCardEnteredRevisao(supabase, config, card) {
     const project = await getProject(supabase, card.project_id);
     const children = await getProjectRepos(supabase, project.id);
     const repoRoot = resolveRepoPath(config, project.repo_path);
-    const targets = children.length > 0 ? children.filter((child2) => child2.dev_command).map((child2) => ({ label: child2.subpath, cwd: join13(repoRoot, child2.subpath), command: child2.dev_command })) : project.dev_command ? [{ label: "", cwd: repoRoot, command: project.dev_command }] : [];
+    const targets = children.length > 0 ? children.filter((child2) => child2.dev_command).map((child2) => ({ label: child2.subpath, cwd: join14(repoRoot, child2.subpath), command: child2.dev_command })) : project.dev_command ? [{ label: "", cwd: repoRoot, command: project.dev_command }] : [];
     if (targets.length === 0) {
       logger.card.info(card.id, `No dev_command configured for project ${project.id}, skipping automatic preview.`);
       return;
@@ -3238,7 +3330,7 @@ function attachTerminalServer() {
         const buffer = data;
         const frameType = buffer[0];
         if (frameType === FRAME_TYPE_IMAGE) {
-          if (handle.readOnly) return;
+          if (handle.readOnly || handle.exited) return;
           const extCode = buffer[1];
           const bytes = buffer.subarray(2);
           savePastedImage(sessionId, extCode, bytes).then((path) => handle.pty.write(`${path} `)).catch((err) => logger.runner.warn("TERMINAL", `Terminal WS: failed to save pasted image for session ${sessionId}:`, err));
@@ -3256,7 +3348,7 @@ function attachTerminalServer() {
         logger.runner.warn("TERMINAL", `Terminal WS: ignoring binary frame with unknown type ${frameType} for session ${sessionId}.`);
         return;
       }
-      if (handle.readOnly) return;
+      if (handle.readOnly || handle.exited) return;
       handle.pty.write(data.toString());
     });
     socket.on("close", () => {
@@ -3378,6 +3470,7 @@ async function startRunner() {
   const registeredPaths = new Set(config.registeredProjects.map((project) => project.id));
   const lastKnownColumn = /* @__PURE__ */ new Map();
   const lastKnownRequeueRequestedAt = /* @__PURE__ */ new Map();
+  const lastKnownRestartRequestedAt = /* @__PURE__ */ new Map();
   await syncRegisteredProjects(supabase, config, registeredPaths).catch((err) => logger.runner.error("PROJECT_SYNC", "syncRegisteredProjects failed:", err));
   logger.runner.info("BOOT", `Agent Board runner "${config.runnerName}" starting (${registeredPaths.size} project(s) registered).`);
   for (const project of config.registeredProjects) {
@@ -3473,6 +3566,11 @@ async function startRunner() {
       if (card.requeue_requested_at && card.requeue_requested_at !== previousRequeueRequestedAt) {
         void requeuePausedCard(supabase, config, card);
       }
+      const previousRestartRequestedAt = lastKnownRestartRequestedAt.get(card.id);
+      lastKnownRestartRequestedAt.set(card.id, card.restart_requested_at);
+      if (card.restart_requested_at && card.restart_requested_at !== previousRestartRequestedAt) {
+        void restartCardSession(supabase, config, card);
+      }
       if (previousColumn !== void 0 && previousColumn !== card.column_name) {
         void clearColumnActionStatus(supabase, card);
         void handleColumnEntered(supabase, config, card);

package/dist/index.js

@@ -26,7 +26,7 @@ import { execFile as execFile2 } from "node:child_process";
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { existsSync as existsSync2, lstatSync, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync2, rmSync, writeFileSync as writeFileSync5 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
-import { join as join6, resolve, sep } from "node:path";
+import { join as join7, resolve, sep } from "node:path";
 import { parse } from "node:url";
 import { promisify as promisify2 } from "node:util";
 
@@ -250,7 +250,10 @@ async function savePastedImage(sessionId, extCode, bytes) {
   return path;
 }
 function registerPtySession(sessionId, pty, ticket) {
-  const handle = { pty, ticket, outputBuffer: [], sockets: /* @__PURE__ */ new Set(), readOnly: false };
+  const handle = { pty, ticket, outputBuffer: [], sockets: /* @__PURE__ */ new Set(), readOnly: false, exited: false };
+  pty.onExit(() => {
+    handle.exited = true;
+  });
   pty.onData((data) => {
     handle.outputBuffer.push(data);
     if (handle.outputBuffer.length > MAX_BUFFERED_CHUNKS) handle.outputBuffer.shift();
@@ -269,7 +272,7 @@ function setPtySessionReadOnly(sessionId, readOnly) {
 }
 function resizePtySession(sessionId, cols, rows) {
   const handle = registry.get(sessionId);
-  if (!handle) return;
+  if (!handle || handle.exited) return;
   handle.pty.resize(cols, rows);
 }
 function stopPtySession(sessionId) {
@@ -573,10 +576,12 @@ async function logActivity(supabase, params) {
 }
 
 // src/sessions.ts
-async function countRunningSessions(supabase, projectId, ownerUserId) {
-  const { count, error } = await supabase.from("sessions").select("id, cards!card_id!inner(project_id, assigned_user_id)", { count: "exact", head: true }).eq("cards.project_id", projectId).eq("cards.assigned_user_id", ownerUserId).eq("status", "running");
+async function getRunningSessionForProject(supabase, projectId, ownerUserId) {
+  const { data, error } = await supabase.from("sessions").select("id, card_id, agent_state, cards!card_id!inner(project_id, assigned_user_id)").eq("cards.project_id", projectId).eq("cards.assigned_user_id", ownerUserId).eq("status", "running").limit(1).maybeSingle();
   if (error) throw error;
-  return count ?? 0;
+  if (!data) return null;
+  const row = data;
+  return { id: row.id, cardId: row.card_id, agentState: row.agent_state };
 }
 async function listQueuedSessionsForRunner(supabase, ownerUserId) {
   const { data, error } = await supabase.from("sessions").select(
@@ -650,7 +655,8 @@ async function updateCard(supabase, cardId, changes) {
     ...changes.deployError !== void 0 ? { deploy_error: changes.deployError } : {},
     ...changes.customActionStatus !== void 0 ? { custom_action_status: changes.customActionStatus } : {},
     ...changes.customActionOutput !== void 0 ? { custom_action_output: changes.customActionOutput } : {},
-    ...changes.requeueRequestedAt !== void 0 ? { requeue_requested_at: changes.requeueRequestedAt } : {}
+    ...changes.requeueRequestedAt !== void 0 ? { requeue_requested_at: changes.requeueRequestedAt } : {},
+    ...changes.restartRequestedAt !== void 0 ? { restart_requested_at: changes.restartRequestedAt } : {}
   }).eq("id", cardId);
   if (error) throw error;
 }
@@ -666,7 +672,7 @@ async function getProjectRepos(supabase, projectId) {
 }
 async function listCardsInColumn(supabase, projectId, column) {
   const { data, error } = await supabase.from("cards").select(
-    "id, project_id, title, instructions, column_name, assigned_user_id, deploy_error, file_references, preview_urls, custom_action_status, requeue_requested_at"
+    "id, project_id, title, instructions, column_name, assigned_user_id, deploy_error, file_references, preview_urls, custom_action_status, requeue_requested_at, restart_requested_at"
   ).eq("project_id", projectId).eq("column_name", column);
   if (error) throw error;
   return data;
@@ -749,9 +755,9 @@ async function upsertClaudeUsage(supabase, userId, changes) {
 
 // src/usageMonitor.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { existsSync, mkdirSync, readFileSync, writeFileSync as writeFileSync4 } from "node:fs";
-import { homedir as homedir2, tmpdir as tmpdir5 } from "node:os";
-import { join as join5 } from "node:path";
+import { mkdirSync } from "node:fs";
+import { tmpdir as tmpdir5 } from "node:os";
+import { join as join6 } from "node:path";
 import { spawn as spawn2 } from "node-pty";
 
 // src/agentMomentHookScript.ts
@@ -1101,38 +1107,79 @@ function claudeCliSettingsArgs() {
   ];
 }
 
-// src/usageMonitor.ts
-var SESSION_ID = "usage-monitor";
-var TICKET = randomUUID3();
-var SCRATCH_DIR = join5(tmpdir5(), "agent-board-usage-monitor");
-var POLL_INTERVAL_MS = Number(process.env.AGENT_BOARD_USAGE_POLL_INTERVAL_MS ?? 15 * 6e4);
-var IDLE_MS = 2e3;
-var HARD_TIMEOUT_MS = 6e4;
-function usageMonitorSessionId() {
-  return SESSION_ID;
-}
-function usageMonitorTicket() {
-  return TICKET;
-}
-function ensureScratchDirTrusted() {
+// src/claudeTrust.ts
+import { existsSync, readFileSync, writeFileSync as writeFileSync4 } from "node:fs";
+import { homedir as homedir2 } from "node:os";
+import { join as join5 } from "node:path";
+function ensureDirTrusted(dirPath) {
   const claudeJsonPath = join5(homedir2(), ".claude.json");
   if (!existsSync(claudeJsonPath)) return;
   try {
     const raw = readFileSync(claudeJsonPath, "utf8");
     const data = JSON.parse(raw);
     data.projects ??= {};
-    const keys = [SCRATCH_DIR, SCRATCH_DIR.replace(/\\/g, "/")];
+    const keys = [dirPath, dirPath.replace(/\\/g, "/")];
     const alreadyTrusted = keys.every((key) => data.projects[key]?.hasTrustDialogAccepted === true);
     if (alreadyTrusted) return;
     for (const key of keys) {
       data.projects[key] = { ...data.projects[key], hasTrustDialogAccepted: true };
     }
     writeFileSync4(claudeJsonPath, JSON.stringify(data, null, 2));
-    logger.runner.info("USAGE_MONITOR", `Pre-trusted scratch directory ${SCRATCH_DIR} in ~/.claude.json.`);
+    logger.runner.info("TRUST", `Pre-trusted ${dirPath} in ~/.claude.json.`);
+  } catch (err) {
+    logger.runner.error("TRUST", `Failed to pre-trust ${dirPath}:`, err);
+  }
+}
+function ensureMcpServersTrusted(dirPath) {
+  const mcpJsonPath = join5(dirPath, ".mcp.json");
+  if (!existsSync(mcpJsonPath)) return;
+  let serverNames;
+  try {
+    const mcpConfig = JSON.parse(readFileSync(mcpJsonPath, "utf8"));
+    serverNames = Object.keys(mcpConfig.mcpServers ?? {});
+  } catch (err) {
+    logger.runner.error("TRUST", `Failed to read ${mcpJsonPath}:`, err);
+    return;
+  }
+  if (serverNames.length === 0) return;
+  const claudeJsonPath = join5(homedir2(), ".claude.json");
+  if (!existsSync(claudeJsonPath)) return;
+  try {
+    const raw = readFileSync(claudeJsonPath, "utf8");
+    const data = JSON.parse(raw);
+    data.projects ??= {};
+    const keys = [dirPath, dirPath.replace(/\\/g, "/")];
+    const alreadyApproved = keys.every(
+      (key) => serverNames.every((name) => data.projects[key]?.enabledMcpjsonServers?.includes(name))
+    );
+    if (alreadyApproved) return;
+    for (const key of keys) {
+      const project = data.projects[key] ??= {};
+      project.enabledMcpjsonServers = [.../* @__PURE__ */ new Set([...project.enabledMcpjsonServers ?? [], ...serverNames])];
+      project.disabledMcpjsonServers = (project.disabledMcpjsonServers ?? []).filter(
+        (name) => !serverNames.includes(name)
+      );
+    }
+    writeFileSync4(claudeJsonPath, JSON.stringify(data, null, 2));
+    logger.runner.info("TRUST", `Pre-approved MCP servers [${serverNames.join(", ")}] for ${dirPath}.`);
   } catch (err) {
-    logger.runner.error("USAGE_MONITOR", "Failed to pre-trust the usage-monitor scratch directory:", err);
+    logger.runner.error("TRUST", `Failed to pre-approve MCP servers for ${dirPath}:`, err);
   }
 }
+
+// src/usageMonitor.ts
+var SESSION_ID = "usage-monitor";
+var TICKET = randomUUID3();
+var SCRATCH_DIR = join6(tmpdir5(), "agent-board-usage-monitor");
+var POLL_INTERVAL_MS = Number(process.env.AGENT_BOARD_USAGE_POLL_INTERVAL_MS ?? 15 * 6e4);
+var IDLE_MS = 2e3;
+var HARD_TIMEOUT_MS = 6e4;
+function usageMonitorSessionId() {
+  return SESSION_ID;
+}
+function usageMonitorTicket() {
+  return TICKET;
+}
 function pollUsageOnce() {
   let pty;
   try {
@@ -1179,7 +1226,7 @@ function pollUsageOnce() {
 }
 function startUsageMonitor() {
   mkdirSync(SCRATCH_DIR, { recursive: true });
-  ensureScratchDirTrusted();
+  ensureDirTrusted(SCRATCH_DIR);
   pollUsageOnce();
   setInterval(pollUsageOnce, POLL_INTERVAL_MS);
 }
@@ -1195,7 +1242,7 @@ var IGNORED_ENTRY_NAMES = /* @__PURE__ */ new Set([".git", ".claude", "node_modu
 var AGENT_SAFE_SUBDIR_NAMES = /* @__PURE__ */ new Set(["skills", "commands", "agents", "rules"]);
 function ensureSkillsDirExists(claudeDir) {
   try {
-    mkdirSync2(join6(claudeDir, "skills"), { recursive: true });
+    mkdirSync2(join7(claudeDir, "skills"), { recursive: true });
   } catch (err) {
     logger.runner.warn("FILES", "Could not create .claude/skills:", err);
   }
@@ -1322,7 +1369,7 @@ function listSafeAgentDirectory(baseDir, relPath, atClaudeRoot) {
   }
   const isRepoRootLevel = segments.length === 0 || segments.length === 1 && segments[0] !== ".claude";
   if (isRepoRootLevel) {
-    ensureSkillsDirExists(join6(baseDir, relPath, ".claude"));
+    ensureSkillsDirExists(join7(baseDir, relPath, ".claude"));
     const entries2 = listDirectory(baseDir, relPath, { includeDotClaude: true });
     return entries2.filter((entry) => entry.type === "file" && entry.name === "CLAUDE.md" || entry.type === "dir" && entry.name === ".claude");
   }
@@ -1353,7 +1400,7 @@ function assertWritableAgentPath(relPath, atClaudeRoot) {
 function listDirectoryForBrowse(rootPath, relPath) {
   return listDirectory(rootPath, relPath).map((entry) => ({
     ...entry,
-    hasGit: entry.type === "dir" && existsSync2(join6(rootPath, entry.path, ".git"))
+    hasGit: entry.type === "dir" && existsSync2(join7(rootPath, entry.path, ".git"))
   }));
 }
 var SAFE_CLONE_URL_PATTERN = /^(https?:\/\/|git:\/\/|ssh:\/\/|git@[\w.-]+:)\S+$/i;
@@ -1391,7 +1438,7 @@ async function handleCloneRequest(req, res, query) {
     sendJson(res, 400, { error: "N\xE3o foi poss\xEDvel determinar o nome da pasta a partir da URL." });
     return;
   }
-  const destPath = join6(setupEntry.rootPath, folderName);
+  const destPath = join7(setupEntry.rootPath, folderName);
   if (existsSync2(destPath)) {
     sendJson(res, 409, { error: `J\xE1 existe uma pasta "${folderName}" na raiz permitida.` });
     return;
@@ -1459,7 +1506,7 @@ function findBrandIconPath(repoRoot) {
       if (entry.isSymbolicLink() || IGNORED_ENTRY_NAMES.has(entry.name)) continue;
       const relPath = relDir ? `${relDir}/${entry.name}` : entry.name;
       if (entry.isDirectory()) {
-        walk(join6(dir, entry.name), relPath, depth + 1);
+        walk(join7(dir, entry.name), relPath, depth + 1);
       } else if (entry.isFile()) {
         const match = patterns.find(({ pattern }) => pattern.test(entry.name));
         if (match) candidatesByBaseName.get(match.baseName).push({ relPath, depth });
@@ -1624,7 +1671,7 @@ async function getRepoDiffForTarget(label, cwd) {
 async function handleDiffRequest(entry, res, projectId) {
   try {
     const children = statuslineSupabase && projectId ? await getProjectRepos(statuslineSupabase, projectId) : [];
-    const targets = children.length > 0 ? children.map((child2) => ({ label: child2.subpath, cwd: join6(entry.repoRoot, child2.subpath) })) : [{ label: null, cwd: entry.repoRoot }];
+    const targets = children.length > 0 ? children.map((child2) => ({ label: child2.subpath, cwd: join7(entry.repoRoot, child2.subpath) })) : [{ label: null, cwd: entry.repoRoot }];
     const repos = await Promise.all(targets.map((target) => getRepoDiffForTarget(target.label, target.cwd)));
     sendJson(res, 200, { repos });
   } catch (err) {
@@ -1933,15 +1980,15 @@ function attachAgentEventsServer() {
 // src/auth.ts
 import { createClient } from "@supabase/supabase-js";
 import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync4, rmSync as rmSync2, writeFileSync as writeFileSync7 } from "node:fs";
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 import open from "open";
 
 // src/config.ts
 import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync6 } from "node:fs";
 import { hostname, homedir as homedir4 } from "node:os";
-import { join as join7, resolve as resolve2 } from "node:path";
-var CONFIG_DIR = join7(homedir4(), ".agent-board");
-var CONFIG_FILE = join7(CONFIG_DIR, "credentials.json");
+import { join as join8, resolve as resolve2 } from "node:path";
+var CONFIG_DIR = join8(homedir4(), ".agent-board");
+var CONFIG_FILE = join8(CONFIG_DIR, "credentials.json");
 function loadConfig() {
   if (!existsSync3(CONFIG_FILE)) return null;
   return JSON.parse(readFileSync3(CONFIG_FILE, "utf-8"));
@@ -1974,7 +2021,7 @@ function resolveRepoPath(config, relativeRepoPath) {
 }
 
 // src/auth.ts
-var SESSION_FILE = join8(CONFIG_DIR, "session.json");
+var SESSION_FILE = join9(CONFIG_DIR, "session.json");
 var DEFAULT_SUPABASE_URL = "https://brpxshvnmxgkbffgdfcc.supabase.co";
 var DEFAULT_SUPABASE_ANON_KEY = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImJycHhzaHZubXhna2JmZmdkZmNjIiwicm9sZSI6ImFub24iLCJpYXQiOjE3ODc1OTQwMTEsImV4cCI6MjEwMzE3MDAxMX0.ErsAGZysLFgNvijetR7w1YvIziXC-1D2sx04Hm2UW9c";
 function resolveSupabaseUrl() {
@@ -2033,7 +2080,7 @@ async function requireSession(supabase) {
 
 // src/columnActions.ts
 import { exec } from "node:child_process";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 import { promisify as promisify3 } from "node:util";
 var execAsync = promisify3(exec);
 var OUTPUT_TAIL_CHARS = 4e3;
@@ -2043,7 +2090,7 @@ function tail(text) {
 function resolveTargets(project, children, repoRoot, column, timing) {
   if (children.length > 0) {
     return children.flatMap(
-      (child2) => (child2.column_actions[column] ?? []).filter((action) => action.timing === timing).map((action) => ({ label: child2.subpath, cwd: join9(repoRoot, child2.subpath), command: action.command }))
+      (child2) => (child2.column_actions[column] ?? []).filter((action) => action.timing === timing).map((action) => ({ label: child2.subpath, cwd: join10(repoRoot, child2.subpath), command: action.command }))
     );
   }
   return (project.column_actions[column] ?? []).filter((action) => action.timing === timing).map((action) => ({ label: null, cwd: repoRoot, command: action.command }));
@@ -2149,7 +2196,7 @@ async function checkPendingDeployActionReruns(supabase, config) {
 }
 
 // src/deploy.ts
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 
 // src/devServer.ts
 import { spawn as spawn4 } from "node:child_process";
@@ -2158,7 +2205,7 @@ import { spawn as spawn4 } from "node:child_process";
 import { spawn as spawn3 } from "node:child_process";
 import { accessSync, constants } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { delimiter, join as join10 } from "node:path";
+import { delimiter, join as join11 } from "node:path";
 import { bin as bundledBinaryPath, install as downloadCloudflared } from "cloudflared";
 var TRYCLOUDFLARE_URL_RE = /https:\/\/[a-z0-9-]+\.trycloudflare\.com/;
 var STARTUP_TIMEOUT_MS = 2e4;
@@ -2169,15 +2216,15 @@ function wellKnownDirectories() {
   const home = homedir5();
   if (IS_WINDOWS2) {
     const candidates = [
-      process.env.ProgramFiles && join10(process.env.ProgramFiles, "cloudflared"),
-      process.env["ProgramFiles(x86)"] && join10(process.env["ProgramFiles(x86)"], "cloudflared"),
-      process.env.LOCALAPPDATA && join10(process.env.LOCALAPPDATA, "Microsoft", "WinGet", "Links"),
-      join10(home, "scoop", "shims"),
-      process.env.ChocolateyInstall && join10(process.env.ChocolateyInstall, "bin")
+      process.env.ProgramFiles && join11(process.env.ProgramFiles, "cloudflared"),
+      process.env["ProgramFiles(x86)"] && join11(process.env["ProgramFiles(x86)"], "cloudflared"),
+      process.env.LOCALAPPDATA && join11(process.env.LOCALAPPDATA, "Microsoft", "WinGet", "Links"),
+      join11(home, "scoop", "shims"),
+      process.env.ChocolateyInstall && join11(process.env.ChocolateyInstall, "bin")
     ];
     return candidates.filter((dir) => Boolean(dir));
   }
-  return ["/usr/local/bin", "/usr/bin", "/opt/homebrew/bin", join10(home, ".local", "bin")];
+  return ["/usr/local/bin", "/usr/bin", "/opt/homebrew/bin", join11(home, ".local", "bin")];
 }
 function pathDirectories() {
   return (process.env.PATH ?? "").split(delimiter).map((dir) => dir.trim().replace(/^"|"$/g, "")).filter(Boolean);
@@ -2193,7 +2240,7 @@ function isExecutableFile(path) {
 function findInstalledBinary() {
   const override = process.env.AGENT_BOARD_CLOUDFLARED_PATH;
   const directories = [...pathDirectories(), ...wellKnownDirectories()];
-  const candidates = [...override ? [override] : [], ...directories.map((dir) => join10(dir, BINARY_NAME))];
+  const candidates = [...override ? [override] : [], ...directories.map((dir) => join11(dir, BINARY_NAME))];
   return candidates.find(isExecutableFile) ?? null;
 }
 async function locateCloudflared() {
@@ -2424,6 +2471,8 @@ var SHIFT_TAB_PRESSES_TO_PLAN_MODE = 4;
 var SHIFT_TAB_DELAY_MS = 400;
 var PLAN_MODE_INDICATOR = /plan mode on/i;
 function spawnAgentPty(repoPath, cardId, cardTitle, instructions, sessionId, ticket, planFirst) {
+  ensureDirTrusted(repoPath);
+  ensureMcpServersTrusted(repoPath);
   const claudeSessionId = randomUUID5();
   const pty = spawn5(
     CLAUDE_BINARY,
@@ -2520,6 +2569,8 @@ function sendContinue(pty, cardId) {
   }
 }
 function resumeAgentPty(repoPath, claudeSessionId, sessionId, ticket) {
+  ensureDirTrusted(repoPath);
+  ensureMcpServersTrusted(repoPath);
   return spawn5(
     CLAUDE_BINARY,
     [
@@ -2543,8 +2594,8 @@ function resumeAgentPty(repoPath, claudeSessionId, sessionId, ticket) {
 // src/cardAttachments.ts
 import { mkdir as mkdir2, writeFile as writeFile2 } from "node:fs/promises";
 import { tmpdir as tmpdir6 } from "node:os";
-import { extname, join as join11 } from "node:path";
-var ATTACHMENTS_ROOT = join11(tmpdir6(), "agent-board", "card-attachments");
+import { extname, join as join12 } from "node:path";
+var ATTACHMENTS_ROOT = join12(tmpdir6(), "agent-board", "card-attachments");
 function sanitizeFileName(fileName) {
   return fileName.replace(/[^a-zA-Z0-9._-]/g, "_");
 }
@@ -2556,13 +2607,13 @@ async function downloadCardAttachments(supabase, cardId) {
   }
   const rows = data ?? [];
   if (rows.length === 0) return [];
-  const targetDir = join11(ATTACHMENTS_ROOT, cardId);
+  const targetDir = join12(ATTACHMENTS_ROOT, cardId);
   await mkdir2(targetDir, { recursive: true });
   const paths = [];
   for (const row of rows) {
     const baseName = sanitizeFileName(row.file_name);
     const fileName = extname(baseName) ? baseName : `${baseName}${extname(row.storage_path)}`;
-    const localPath = join11(targetDir, `${row.id}-${fileName}`);
+    const localPath = join12(targetDir, `${row.id}-${fileName}`);
     try {
       const { data: blob, error: downloadError } = await supabase.storage.from(CARD_ATTACHMENTS_BUCKET).download(row.storage_path);
       if (downloadError) throw downloadError;
@@ -2636,6 +2687,7 @@ function cancelUsageResume(sessionId) {
 
 // src/orchestrator.ts
 var TERMINAL_TICKET_TTL_MS = 60 * 60 * 1e3;
+var RESUME_CONVERSATION_MISSING_PATTERN = /no conversation found with session id/i;
 var inFlightCardIds = /* @__PURE__ */ new Set();
 var activeSessionByCard = /* @__PURE__ */ new Map();
 var intentionallyStoppedSessionIds = /* @__PURE__ */ new Set();
@@ -2709,11 +2761,17 @@ async function dispatchRunnerQueue(supabase, config) {
   try {
     const queued = await listQueuedSessionsForRunner(supabase, config.ownerUserId);
     if (queued.length === 0) return;
+    const queuedProjectIds = new Set(queued.map((entry) => entry.cards.project_id));
     const maxConcurrentProjects = await getRunnerMaxConcurrentProjects(supabase, config.runnerId);
     const runningProjectIds = /* @__PURE__ */ new Set();
     for (const project of config.registeredProjects) {
-      const runningCount = await countRunningSessions(supabase, project.id, config.ownerUserId);
-      if (runningCount > 0) runningProjectIds.add(project.id);
+      const running = await getRunningSessionForProject(supabase, project.id, config.ownerUserId);
+      if (!running) continue;
+      if (running.agentState === "done" && queuedProjectIds.has(project.id)) {
+        await pauseFinishedSession(supabase, config, project.id, running.cardId, running.id);
+        continue;
+      }
+      runningProjectIds.add(project.id);
     }
     let freeProjectSlots = maxConcurrentProjects - runningProjectIds.size;
     if (freeProjectSlots <= 0) return;
@@ -2767,9 +2825,13 @@ async function spawnSessionPty(supabase, config, entry) {
   const ticket = randomUUID6();
   let pty;
   let newClaudeSessionId = null;
+  let resumeConversationMissing = false;
   try {
     if (claudeSessionId) {
       pty = resumeAgentPty(registered.repoPath, claudeSessionId, sessionId, ticket);
+      pty.onData((chunk) => {
+        if (RESUME_CONVERSATION_MISSING_PATTERN.test(normalizeTerminalOutput(chunk))) resumeConversationMissing = true;
+      });
     } else {
       const attachmentPaths = await downloadCardAttachments(supabase, cardId);
       const instructions = buildInstructionsWithMcpContext(
@@ -2817,11 +2879,24 @@ async function spawnSessionPty(supabase, config, entry) {
   );
   pty.onExit(({ exitCode }) => {
     const wasIntentional = intentionallyStoppedSessionIds.delete(sessionId);
-    logger.card.warn(cardId, `Session exited (code ${exitCode}) \u2014 this only happens if the process crashed or was killed, the card doesn't auto-advance.`);
     activityWatcher.stop();
     unregisterAgentActivityWatcher(sessionId);
     cancelUsageResume(sessionId);
     activeSessionByCard.delete(cardId);
+    if (resumeConversationMissing) {
+      logger.card.warn(
+        cardId,
+        `Session ${sessionId}: --resume ${claudeSessionId} found no such conversation \u2014 clearing it so the next attempt starts a fresh one instead of repeating the same failure.`
+      );
+      void updateSession(
+        supabase,
+        sessionId,
+        { status: "failed", endedAt: (/* @__PURE__ */ new Date()).toISOString(), claudeSessionId: null },
+        { projectId: card.project_id, cardId, userId: config.ownerUserId }
+      );
+      return;
+    }
+    logger.card.warn(cardId, `Session exited (code ${exitCode}) \u2014 this only happens if the process crashed or was killed, the card doesn't auto-advance.`);
     if (!wasIntentional && exitCode !== 0) {
       publishAgentState(supabase, card.project_id, cardId, sessionId, "error");
     }
@@ -2842,7 +2917,7 @@ function watchAgentActivity(supabase, config, projectId, cardId, sessionId, pty)
     } else {
       cancelUsageResume(sessionId);
     }
-    if (state === "done") void pauseFinishedSession(supabase, config, projectId, cardId, sessionId);
+    if (state === "done") void dispatchRunnerQueue(supabase, config);
   });
   pty.onData((chunk) => watcher.push(chunk));
   registerAgentActivityWatcher(sessionId, watcher);
@@ -2852,8 +2927,7 @@ async function pauseFinishedSession(supabase, config, projectId, cardId, session
   const paused = await pauseRunningSession(supabase, sessionId, { projectId, cardId, userId: config.ownerUserId });
   if (!paused) return;
   setPtySessionReadOnly(sessionId, true);
-  logger.card.info(cardId, `Session ${sessionId} paused (agent reached "done") \u2014 WIP slot freed, pty stays viewable read-only.`);
-  await dispatchRunnerQueue(supabase, config);
+  logger.card.info(cardId, `Session ${sessionId} paused (agent reached "done", another session needs this project's WIP slot).`);
 }
 async function requeuePausedCard(supabase, config, card) {
   const active = await getActiveSessionForCard(supabase, card.id);
@@ -2931,6 +3005,24 @@ async function stopCardSession(supabase, config, card) {
   logger.card.info(card.id, `Session ${sessionId} stopped.`);
   await dispatchRunnerQueue(supabase, config);
 }
+async function restartCardSession(supabase, config, card) {
+  const sessionId = activeSessionByCard.get(card.id) ?? (await getActiveSessionForCard(supabase, card.id))?.id;
+  if (sessionId) {
+    intentionallyStoppedSessionIds.add(sessionId);
+    stopPtySession(sessionId);
+    cancelUsageResume(sessionId);
+    activeSessionByCard.delete(card.id);
+    await updateSession(
+      supabase,
+      sessionId,
+      { status: "failed", claudeSessionId: null, endedAt: (/* @__PURE__ */ new Date()).toISOString() },
+      { projectId: card.project_id, cardId: card.id, userId: config.ownerUserId }
+    );
+    logger.card.info(card.id, `Session ${sessionId} abandoned by "Reiniciar sess\xE3o"; starting a fresh one.`);
+  }
+  await updateCard(supabase, card.id, { restartRequestedAt: null });
+  await enqueueCard(supabase, config, card);
+}
 
 // src/deploy.ts
 async function handleDeployRequested(supabase, config, project) {
@@ -2948,7 +3040,7 @@ async function handleDeployRequested(supabase, config, project) {
   }
   const children = await getProjectRepos(supabase, project.id);
   const repoRoot = resolveRepoPath(config, project.repo_path);
-  const targets = children.length > 0 ? children.map((child2) => ({ label: child2.subpath, path: join12(repoRoot, child2.subpath) })) : [{ label: null, path: repoRoot }];
+  const targets = children.length > 0 ? children.map((child2) => ({ label: child2.subpath, path: join13(repoRoot, child2.subpath) })) : [{ label: null, path: repoRoot }];
   const failures = [];
   for (const target of targets) {
     const result = await pushBranchToMain(target.path);
@@ -3082,7 +3174,7 @@ async function syncRegisteredProjects(supabase, config, registeredPaths) {
 }
 
 // src/review.ts
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 var inFlightCardIds2 = /* @__PURE__ */ new Set();
 async function handleCardEnteredRevisao(supabase, config, card) {
   if (inFlightCardIds2.has(card.id)) return;
@@ -3091,7 +3183,7 @@ async function handleCardEnteredRevisao(supabase, config, card) {
     const project = await getProject(supabase, card.project_id);
     const children = await getProjectRepos(supabase, project.id);
     const repoRoot = resolveRepoPath(config, project.repo_path);
-    const targets = children.length > 0 ? children.filter((child2) => child2.dev_command).map((child2) => ({ label: child2.subpath, cwd: join13(repoRoot, child2.subpath), command: child2.dev_command })) : project.dev_command ? [{ label: "", cwd: repoRoot, command: project.dev_command }] : [];
+    const targets = children.length > 0 ? children.filter((child2) => child2.dev_command).map((child2) => ({ label: child2.subpath, cwd: join14(repoRoot, child2.subpath), command: child2.dev_command })) : project.dev_command ? [{ label: "", cwd: repoRoot, command: project.dev_command }] : [];
     if (targets.length === 0) {
       logger.card.info(card.id, `No dev_command configured for project ${project.id}, skipping automatic preview.`);
       return;
@@ -3177,7 +3269,7 @@ function attachTerminalServer() {
         const buffer = data;
         const frameType = buffer[0];
         if (frameType === FRAME_TYPE_IMAGE) {
-          if (handle.readOnly) return;
+          if (handle.readOnly || handle.exited) return;
           const extCode = buffer[1];
           const bytes = buffer.subarray(2);
           savePastedImage(sessionId, extCode, bytes).then((path) => handle.pty.write(`${path} `)).catch((err) => logger.runner.warn("TERMINAL", `Terminal WS: failed to save pasted image for session ${sessionId}:`, err));
@@ -3195,7 +3287,7 @@ function attachTerminalServer() {
         logger.runner.warn("TERMINAL", `Terminal WS: ignoring binary frame with unknown type ${frameType} for session ${sessionId}.`);
         return;
       }
-      if (handle.readOnly) return;
+      if (handle.readOnly || handle.exited) return;
       handle.pty.write(data.toString());
     });
     socket.on("close", () => {
@@ -3317,6 +3409,7 @@ async function startRunner() {
   const registeredPaths = new Set(config.registeredProjects.map((project) => project.id));
   const lastKnownColumn = /* @__PURE__ */ new Map();
   const lastKnownRequeueRequestedAt = /* @__PURE__ */ new Map();
+  const lastKnownRestartRequestedAt = /* @__PURE__ */ new Map();
   await syncRegisteredProjects(supabase, config, registeredPaths).catch((err) => logger.runner.error("PROJECT_SYNC", "syncRegisteredProjects failed:", err));
   logger.runner.info("BOOT", `Agent Board runner "${config.runnerName}" starting (${registeredPaths.size} project(s) registered).`);
   for (const project of config.registeredProjects) {
@@ -3412,6 +3505,11 @@ async function startRunner() {
       if (card.requeue_requested_at && card.requeue_requested_at !== previousRequeueRequestedAt) {
         void requeuePausedCard(supabase, config, card);
       }
+      const previousRestartRequestedAt = lastKnownRestartRequestedAt.get(card.id);
+      lastKnownRestartRequestedAt.set(card.id, card.restart_requested_at);
+      if (card.restart_requested_at && card.restart_requested_at !== previousRestartRequestedAt) {
+        void restartCardSession(supabase, config, card);
+      }
       if (previousColumn !== void 0 && previousColumn !== card.column_name) {
         void clearColumnActionStatus(supabase, card);
         void handleColumnEntered(supabase, config, card);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-board-runner",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Local runner for Agent Board — signs in with your own Supabase account (no shared secrets) and drives Claude Code against repos under your local repos root.",
   "type": "module",
   "bin": {