agor-live 0.12.2 → 0.12.3

package/dist/core/db/index.js

@@ -193,13 +193,15 @@ __export(schema_postgres_exports, {
   repos: () => repos,
   sessionMcpServers: () => sessionMcpServers,
   sessions: () => sessions,
+  sessionsRelations: () => sessionsRelations,
   tasks: () => tasks,
   threadSessionMap: () => threadSessionMap,
   users: () => users,
   worktreeOwners: () => worktreeOwners,
-  worktrees: () => worktrees
+  worktrees: () => worktrees,
+  worktreesRelations: () => worktreesRelations
 });
-import { sql } from "drizzle-orm";
+import { relations, sql } from "drizzle-orm";
 import {
   bigint,
   boolean,
@@ -213,7 +215,7 @@ import {
   uniqueIndex,
   varchar
 } from "drizzle-orm/pg-core";
-var t, sessions, tasks, messages, boards, repos, worktrees, worktreeOwners, users, mcpServers, boardObjects, sessionMcpServers, boardComments, gatewayChannels, threadSessionMap;
+var t, sessions, tasks, messages, boards, repos, worktrees, worktreeOwners, users, mcpServers, boardObjects, sessionMcpServers, boardComments, gatewayChannels, threadSessionMap, sessionsRelations, worktreesRelations;
 var init_schema_postgres = __esm({
   "src/db/schema.postgres.ts"() {
     "use strict";
@@ -700,6 +702,15 @@ var init_schema_postgres = __esm({
         channelStatusIdx: index("idx_thread_map_channel_status").on(table.channel_id, table.status)
       })
     );
+    sessionsRelations = relations(sessions, ({ one }) => ({
+      worktree: one(worktrees, {
+        fields: [sessions.worktree_id],
+        references: [worktrees.worktree_id]
+      })
+    }));
+    worktreesRelations = relations(worktrees, ({ many }) => ({
+      sessions: many(sessions)
+    }));
   }
 });
 
@@ -715,13 +726,15 @@ __export(schema_sqlite_exports, {
   repos: () => repos2,
   sessionMcpServers: () => sessionMcpServers2,
   sessions: () => sessions2,
+  sessionsRelations: () => sessionsRelations2,
   tasks: () => tasks2,
   threadSessionMap: () => threadSessionMap2,
   users: () => users2,
   worktreeOwners: () => worktreeOwners2,
-  worktrees: () => worktrees2
+  worktrees: () => worktrees2,
+  worktreesRelations: () => worktreesRelations2
 });
-import { sql as sql2 } from "drizzle-orm";
+import { relations as relations2, sql as sql2 } from "drizzle-orm";
 import {
   index as index2,
   integer as integer2,
@@ -730,7 +743,7 @@ import {
   text as text2,
   uniqueIndex as uniqueIndex2
 } from "drizzle-orm/sqlite-core";
-var t2, sessions2, tasks2, messages2, boards2, repos2, worktrees2, worktreeOwners2, users2, mcpServers2, boardObjects2, sessionMcpServers2, boardComments2, gatewayChannels2, threadSessionMap2;
+var t2, sessions2, tasks2, messages2, boards2, repos2, worktrees2, worktreeOwners2, users2, mcpServers2, boardObjects2, sessionMcpServers2, boardComments2, gatewayChannels2, threadSessionMap2, sessionsRelations2, worktreesRelations2;
 var init_schema_sqlite = __esm({
   "src/db/schema.sqlite.ts"() {
     "use strict";
@@ -1218,6 +1231,15 @@ var init_schema_sqlite = __esm({
         channelStatusIdx: index2("idx_thread_map_channel_status").on(table.channel_id, table.status)
       })
     );
+    sessionsRelations2 = relations2(sessions2, ({ one }) => ({
+      worktree: one(worktrees2, {
+        fields: [sessions2.worktree_id],
+        references: [worktrees2.worktree_id]
+      })
+    }));
+    worktreesRelations2 = relations2(worktrees2, ({ many }) => ({
+      sessions: many(sessions2)
+    }));
   }
 });
 
@@ -1278,10 +1300,10 @@ function isSQLiteDatabase(db) {
 function isPostgresDatabase(db) {
   return !("run" in db);
 }
-function jsonExtract(db, column, path2) {
-  const parts = path2.split(".");
+function jsonExtract(db, column, path3) {
+  const parts = path3.split(".");
   if (isSQLiteDatabase(db)) {
-    return sql3`json_extract(${column}, ${`$.${path2}`})`;
+    return sql3`json_extract(${column}, ${`$.${path3}`})`;
   } else {
     if (parts.length === 1) {
       return sql3`${column}${sql3.raw(`->>'${parts[0]}'`)}`;
@@ -1543,14 +1565,14 @@ import postgres from "postgres";
 init_esm_shims();
 import { homedir } from "os";
 import { join } from "path";
-function expandPath(path2) {
-  if (path2.startsWith("file:~/")) {
-    return `file:${join(homedir(), path2.slice(7))}`;
+function expandPath(path3) {
+  if (path3.startsWith("file:~/")) {
+    return `file:${join(homedir(), path3.slice(7))}`;
   }
-  if (path2.startsWith("~/")) {
-    return join(homedir(), path2.slice(2));
+  if (path3.startsWith("~/")) {
+    return join(homedir(), path3.slice(2));
   }
-  return path2;
+  return path3;
 }
 
 // src/db/client.ts
@@ -1812,18 +1834,8 @@ async function checkMigrationStatus(db) {
       );
       appliedHashes = result.map((row) => String(row.hash));
     }
-    const normalizedAppliedHashes = appliedHashes;
-    const numExpected = expectedMigrations.length;
-    const numApplied = normalizedAppliedHashes.length;
-    if (numApplied >= numExpected) {
-      return {
-        hasPending: false,
-        pending: [],
-        applied: expectedMigrations.map((m) => m.tag)
-      };
-    }
-    const pending = expectedMigrations.filter((m) => !normalizedAppliedHashes.includes(m.hash)).map((m) => m.tag);
-    const appliedTags = expectedMigrations.filter((m) => normalizedAppliedHashes.includes(m.hash)).map((m) => m.tag);
+    const pending = expectedMigrations.filter((m) => !appliedHashes.includes(m.hash)).map((m) => m.tag);
+    const appliedTags = expectedMigrations.filter((m) => appliedHashes.includes(m.hash)).map((m) => m.tag);
     return {
       hasPending: pending.length > 0,
       pending,
@@ -2527,9 +2539,149 @@ var BoardObjectRepository = class {
 
 // src/db/repositories/boards.ts
 init_esm_shims();
-init_ids();
 import { and as and2, eq as eq4, like as like2, ne } from "drizzle-orm";
-import * as yaml from "js-yaml";
+import * as yaml2 from "js-yaml";
+
+// src/config/config-manager.ts
+init_esm_shims();
+import { readFileSync } from "fs";
+import fs from "fs/promises";
+import os from "os";
+import path2 from "path";
+import yaml from "js-yaml";
+
+// src/config/constants.ts
+init_esm_shims();
+var DAEMON = {
+  /**
+   * Default daemon port
+   */
+  DEFAULT_PORT: 3030,
+  /**
+   * Default daemon host
+   */
+  DEFAULT_HOST: "localhost"
+};
+
+// src/config/config-manager.ts
+function getAgorHome() {
+  return path2.join(os.homedir(), ".agor");
+}
+function getConfigPath() {
+  return path2.join(getAgorHome(), "config.yaml");
+}
+function validateConfig(config) {
+  const mode = config.execution?.unix_user_mode;
+  if (mode === "opportunistic") {
+    throw new Error(
+      `Config error: 'opportunistic' unix_user_mode has been deprecated.
+Please update your config to use one of:
+  - 'insulated': Filesystem isolation via Unix groups (recommended)
+  - 'strict': Full process impersonation required
+
+To update: agor config set execution.unix_user_mode insulated`
+    );
+  }
+}
+async function loadConfig() {
+  const configPath = getConfigPath();
+  try {
+    const content = await fs.readFile(configPath, "utf-8");
+    const config = yaml.load(content);
+    const finalConfig = config || {};
+    validateConfig(finalConfig);
+    return finalConfig;
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      return getDefaultConfig();
+    }
+    throw new Error(
+      `Failed to load config: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+}
+function getDefaultConfig() {
+  return {
+    defaults: {
+      board: "main",
+      agent: "claude-code"
+    },
+    display: {
+      tableStyle: "unicode",
+      colorOutput: true,
+      shortIdLength: 8
+    },
+    daemon: {
+      port: DAEMON.DEFAULT_PORT,
+      host: DAEMON.DEFAULT_HOST,
+      allowAnonymous: true,
+      // Default: Allow anonymous access (local mode)
+      requireAuth: false,
+      // Default: Do not require authentication
+      mcpEnabled: true
+      // Default: Enable built-in MCP server
+    },
+    ui: {
+      port: 5173,
+      host: "localhost"
+    },
+    codex: {
+      home: "~/.agor/codex"
+    },
+    execution: {
+      session_token_expiration_ms: 864e5,
+      // 24 hours
+      session_token_max_uses: 1,
+      // Single-use tokens
+      sync_unix_passwords: true
+      // Default: sync passwords to Unix
+    }
+  };
+}
+function validateBaseUrl(url) {
+  const trimmed = url.trim().replace(/\/$/, "");
+  if (!trimmed.startsWith("http://") && !trimmed.startsWith("https://")) {
+    throw new Error(`Invalid base URL: "${url}". Must start with http:// or https://`);
+  }
+  try {
+    new URL(trimmed);
+  } catch {
+    throw new Error(`Invalid base URL format: "${url}". Must be a valid HTTP(S) URL.`);
+  }
+  return trimmed;
+}
+async function getBaseUrl() {
+  if (process.env.AGOR_BASE_URL) {
+    return validateBaseUrl(process.env.AGOR_BASE_URL);
+  }
+  const config = await loadConfig();
+  if (config.daemon?.base_url) {
+    return validateBaseUrl(config.daemon.base_url);
+  }
+  const defaults = getDefaultConfig();
+  const envPort = process.env.PORT ? Number.parseInt(process.env.PORT, 10) : void 0;
+  const port = envPort || config.daemon?.port || defaults.daemon?.port || DAEMON.DEFAULT_PORT;
+  const host = config.daemon?.host || defaults.daemon?.host || DAEMON.DEFAULT_HOST;
+  return `http://${host}:${port}`;
+}
+
+// src/db/repositories/boards.ts
+init_ids();
+
+// src/utils/url.ts
+init_esm_shims();
+init_ids();
+function getSessionUrl(sessionId, boardId, boardSlug, baseUrl) {
+  if (!boardId) return null;
+  const boardParam = boardSlug || shortId(boardId);
+  return `${baseUrl}/b/${boardParam}/${shortId(sessionId)}`;
+}
+function getBoardUrl(boardId, boardSlug, baseUrl) {
+  const boardParam = boardSlug || shortId(boardId);
+  return `${baseUrl}/b/${boardParam}`;
+}
+
+// src/db/repositories/boards.ts
 init_database_wrapper();
 init_schema();
 var BoardRepository = class {
@@ -2538,16 +2690,23 @@ var BoardRepository = class {
   }
   /**
    * Convert database row to Board type
+   *
+   * @param row - Database row
+   * @param baseUrl - Base URL for generating board URLs
    */
-  rowToBoard(row) {
+  rowToBoard(row, baseUrl) {
     const data = row.data;
+    const boardId = row.board_id;
+    const slug = row.slug !== null ? row.slug : void 0;
+    const url = baseUrl ? getBoardUrl(boardId, slug, baseUrl) : "";
     return {
-      board_id: row.board_id,
+      board_id: boardId,
       name: row.name,
-      slug: row.slug !== null ? row.slug : void 0,
+      slug,
       created_at: new Date(row.created_at).toISOString(),
       last_updated: row.updated_at ? new Date(row.updated_at).toISOString() : new Date(row.created_at).toISOString(),
       created_by: row.created_by,
+      url,
       ...data
     };
   }
@@ -2627,6 +2786,7 @@ var BoardRepository = class {
   async create(data) {
     try {
       const boardId = data.board_id ?? generateId();
+      const baseUrl = await getBaseUrl();
       let finalSlug;
       if (data.slug === null) {
         finalSlug = void 0;
@@ -2649,7 +2809,7 @@ var BoardRepository = class {
       if (!row) {
         throw new RepositoryError("Failed to retrieve created board");
       }
-      return this.rowToBoard(row);
+      return this.rowToBoard(row, baseUrl);
     } catch (error) {
       if (error instanceof RepositoryError) throw error;
       throw new RepositoryError(
@@ -2664,8 +2824,9 @@ var BoardRepository = class {
   async findById(id) {
     try {
       const fullId = await this.resolveId(id);
+      const baseUrl = await getBaseUrl();
       const row = await select(this.db).from(boards3).where(eq4(boards3.board_id, fullId)).one();
-      return row ? this.rowToBoard(row) : null;
+      return row ? this.rowToBoard(row, baseUrl) : null;
     } catch (error) {
       if (error instanceof EntityNotFoundError) return null;
       if (error instanceof AmbiguousIdError) throw error;
@@ -2680,8 +2841,9 @@ var BoardRepository = class {
    */
   async findBySlug(slug) {
     try {
+      const baseUrl = await getBaseUrl();
       const row = await select(this.db).from(boards3).where(eq4(boards3.slug, slug)).one();
-      return row ? this.rowToBoard(row) : null;
+      return row ? this.rowToBoard(row, baseUrl) : null;
     } catch (error) {
       throw new RepositoryError(
         `Failed to find board by slug: ${error instanceof Error ? error.message : String(error)}`,
@@ -2706,8 +2868,9 @@ var BoardRepository = class {
    */
   async findAll() {
     try {
+      const baseUrl = await getBaseUrl();
       const rows = await select(this.db).from(boards3).all();
-      return rows.map((row) => this.rowToBoard(row));
+      return rows.map((row) => this.rowToBoard(row, baseUrl));
     } catch (error) {
       throw new RepositoryError(
         `Failed to find all boards: ${error instanceof Error ? error.message : String(error)}`,
@@ -2953,7 +3116,7 @@ var BoardRepository = class {
       "# Version: 1.0",
       ""
     ].join("\n");
-    return header + yaml.dump(blob, { indent: 2, lineWidth: -1 });
+    return header + yaml2.dump(blob, { indent: 2, lineWidth: -1 });
   }
   /**
    * Import board from YAML string
@@ -2969,7 +3132,7 @@ var BoardRepository = class {
    */
   parseYamlToBlob(yamlContent) {
     try {
-      const blob = yaml.load(yamlContent, { schema: yaml.JSON_SCHEMA });
+      const blob = yaml2.load(yamlContent, { schema: yaml2.JSON_SCHEMA });
       this.validateBoardBlob(blob);
       return blob;
     } catch (error) {
@@ -3057,7 +3220,14 @@ function decryptConfig(config) {
     if (typeof decrypted[field] === "string" && decrypted[field]) {
       try {
         decrypted[field] = decryptApiKey(decrypted[field]);
-      } catch {
+      } catch (error) {
+        console.error(
+          `[gateway-channels] Failed to decrypt ${field}:`,
+          error instanceof Error ? error.message : String(error)
+        );
+        console.error(
+          "[gateway-channels] Channel credentials may be corrupted or master secret changed"
+        );
       }
     }
   }
@@ -3198,6 +3368,15 @@ var GatewayChannelRepository = class {
         throw new EntityNotFoundError("GatewayChannel", id);
       }
       const merged = { ...current, ...updates };
+      if (updates.config) {
+        const mergedConfig = { ...current.config, ...updates.config };
+        for (const field of SENSITIVE_CONFIG_FIELDS) {
+          if (!updates.config[field] && current.config[field]) {
+            mergedConfig[field] = current.config[field];
+          }
+        }
+        merged.config = mergedConfig;
+      }
       const insertData = this.channelToInsert(merged);
       await update(this.db, gatewayChannels3).set({
         name: insertData.name,
@@ -4104,32 +4283,29 @@ init_esm_shims();
 init_esm_shims();
 
 // src/db/repositories/sessions.ts
+import { and as and4, desc, eq as eq9, inArray, isNotNull, isNull as isNull2, like as like6, or, sql as sql6 } from "drizzle-orm";
 init_ids();
 init_database_wrapper();
 init_schema();
-import {
-  and as and4,
-  desc,
-  eq as eq9,
-  getTableColumns,
-  inArray,
-  isNotNull,
-  isNull as isNull2,
-  like as like6,
-  or,
-  sql as sql6
-} from "drizzle-orm";
 var SessionRepository = class {
   constructor(db) {
     this.db = db;
   }
   /**
    * Convert database row to Session type
+   *
+   * @param row - Database row
+   * @param worktreeBoardId - Board ID from worktree (if JOINed)
+   * @param boardSlug - Board slug from boards table (if JOINed)
+   * @param baseUrl - Base URL for generating session URLs
    */
-  rowToSession(row) {
+  rowToSession(row, worktreeBoardId, boardSlug, baseUrl) {
     const genealogyData = row.data.genealogy || { children: [] };
+    const sessionId = row.session_id;
+    const boardId = worktreeBoardId ?? null;
+    const url = baseUrl ? getSessionUrl(sessionId, boardId, boardSlug, baseUrl) : null;
     return {
-      session_id: row.session_id,
+      session_id: sessionId,
       status: row.status,
       agentic_tool: row.agentic_tool,
       created_at: new Date(row.created_at).toISOString(),
@@ -4137,6 +4313,8 @@ var SessionRepository = class {
       created_by: row.created_by,
       unix_username: row.unix_username || null,
       worktree_id: row.worktree_id,
+      worktree_board_id: boardId,
+      url,
       ...row.data,
       tasks: row.data.tasks.map((id) => id),
       genealogy: {
@@ -4249,11 +4427,15 @@ var SessionRepository = class {
     try {
       const insertData = this.sessionToInsert(data);
       await insert(this.db, sessions3).values(insertData).run();
-      const row = await select(this.db).from(sessions3).where(eq9(sessions3.session_id, insertData.session_id)).one();
-      if (!row) {
+      const baseUrl = await getBaseUrl();
+      const result = await select(this.db).from(sessions3).leftJoin(worktrees3, eq9(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(boards3, eq9(worktrees3.board_id, boards3.board_id)).where(eq9(sessions3.session_id, insertData.session_id)).one();
+      if (!result) {
         throw new RepositoryError("Failed to retrieve created session");
       }
-      return this.rowToSession(row);
+      const sessionRow = result.sessions;
+      const boardId = result.worktrees?.board_id ?? null;
+      const boardSlug = result.boards?.slug ?? null;
+      return this.rowToSession(sessionRow, boardId, boardSlug, baseUrl);
     } catch (error) {
       if (error instanceof RepositoryError) throw error;
       throw new RepositoryError(
@@ -4264,12 +4446,22 @@ var SessionRepository = class {
   }
   /**
    * Find session by ID (supports short ID)
+   *
+   * Automatically LEFT JOINs with worktrees table to populate worktree_board_id and url.
+   * This avoids N+1 queries when URL generation is needed.
    */
   async findById(id) {
     try {
       const fullId = await this.resolveId(id);
-      const row = await select(this.db).from(sessions3).where(eq9(sessions3.session_id, fullId)).one();
-      return row ? this.rowToSession(row) : null;
+      const baseUrl = await getBaseUrl();
+      const result = await select(this.db).from(sessions3).leftJoin(worktrees3, eq9(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(boards3, eq9(worktrees3.board_id, boards3.board_id)).where(eq9(sessions3.session_id, fullId)).one();
+      if (!result) {
+        return null;
+      }
+      const sessionRow = result.sessions;
+      const boardId = result.worktrees?.board_id ?? null;
+      const boardSlug = result.boards?.slug ?? null;
+      return this.rowToSession(sessionRow, boardId, boardSlug, baseUrl);
     } catch (error) {
       if (error instanceof EntityNotFoundError) return null;
       if (error instanceof AmbiguousIdError) throw error;
@@ -4281,11 +4473,21 @@ var SessionRepository = class {
   }
   /**
    * Find all sessions
+   *
+   * LEFT JOINs with worktrees to populate board_id and url in a single query.
    */
   async findAll() {
     try {
-      const rows = await select(this.db).from(sessions3).all();
-      return rows.map((row) => this.rowToSession(row));
+      const baseUrl = await getBaseUrl();
+      const results = await select(this.db).from(sessions3).leftJoin(worktrees3, eq9(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(boards3, eq9(worktrees3.board_id, boards3.board_id)).all();
+      return results.map(
+        (result) => {
+          const sessionRow = result.sessions;
+          const boardId = result.worktrees?.board_id ?? null;
+          const boardSlug = result.boards?.slug ?? null;
+          return this.rowToSession(sessionRow, boardId, boardSlug, baseUrl);
+        }
+      );
     } catch (error) {
       throw new RepositoryError(
         `Failed to find all sessions: ${error instanceof Error ? error.message : String(error)}`,
@@ -4295,11 +4497,21 @@ var SessionRepository = class {
   }
   /**
    * Find sessions by status
+   *
+   * LEFT JOINs with worktrees to populate board_id and url.
    */
   async findByStatus(status) {
     try {
-      const rows = await select(this.db).from(sessions3).where(eq9(sessions3.status, status)).all();
-      return rows.map((row) => this.rowToSession(row));
+      const baseUrl = await getBaseUrl();
+      const results = await select(this.db).from(sessions3).leftJoin(worktrees3, eq9(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(boards3, eq9(worktrees3.board_id, boards3.board_id)).where(eq9(sessions3.status, status)).all();
+      return results.map(
+        (result) => {
+          const sessionRow = result.sessions;
+          const boardId = result.worktrees?.board_id ?? null;
+          const boardSlug = result.boards?.slug ?? null;
+          return this.rowToSession(sessionRow, boardId, boardSlug, baseUrl);
+        }
+      );
     } catch (error) {
       throw new RepositoryError(
         `Failed to find sessions by status: ${error instanceof Error ? error.message : String(error)}`,
@@ -4309,11 +4521,22 @@ var SessionRepository = class {
   }
   /**
    * Find sessions by board ID
+   *
+   * Uses materialized board_id column for O(1) indexed lookup.
+   * LEFT JOINs with worktrees to populate url (board_id already known from filter).
    */
   async findByBoard(boardId) {
     try {
-      const rows = await select(this.db).from(sessions3).where(eq9(sessions3.board_id, boardId)).all();
-      return rows.map((row) => this.rowToSession(row));
+      const baseUrl = await getBaseUrl();
+      const results = await select(this.db).from(sessions3).leftJoin(worktrees3, eq9(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(boards3, eq9(worktrees3.board_id, boards3.board_id)).where(eq9(sessions3.board_id, boardId)).all();
+      return results.map(
+        (result) => {
+          const sessionRow = result.sessions;
+          const board_id = result.worktrees?.board_id ?? null;
+          const boardSlug = result.boards?.slug ?? null;
+          return this.rowToSession(sessionRow, board_id, boardSlug, baseUrl);
+        }
+      );
     } catch (error) {
       throw new RepositoryError(
         `Failed to find sessions by board: ${error instanceof Error ? error.message : String(error)}`,
@@ -4323,18 +4546,28 @@ var SessionRepository = class {
   }
   /**
    * Find child sessions (forked or spawned from this session)
+   *
+   * LEFT JOINs with worktrees to populate board_id and url.
    */
   async findChildren(sessionId) {
     try {
       const fullId = await this.resolveId(sessionId);
+      const baseUrl = await getBaseUrl();
       const { jsonExtract: jsonExtract2 } = await Promise.resolve().then(() => (init_database_wrapper(), database_wrapper_exports));
-      const rows = await select(this.db).from(sessions3).where(
+      const results = await select(this.db).from(sessions3).leftJoin(worktrees3, eq9(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(boards3, eq9(worktrees3.board_id, boards3.board_id)).where(
         or(
           sql6`${jsonExtract2(this.db, sessions3.data, "genealogy.parent_session_id")} = ${fullId}`,
           sql6`${jsonExtract2(this.db, sessions3.data, "genealogy.forked_from_session_id")} = ${fullId}`
         )
       ).all();
-      return rows.map((row) => this.rowToSession(row));
+      return results.map(
+        (result) => {
+          const sessionRow = result.sessions;
+          const boardId = result.worktrees?.board_id ?? null;
+          const boardSlug = result.boards?.slug ?? null;
+          return this.rowToSession(sessionRow, boardId, boardSlug, baseUrl);
+        }
+      );
     } catch (error) {
       throw new RepositoryError(
         `Failed to find child sessions: ${error instanceof Error ? error.message : String(error)}`,
@@ -4387,14 +4620,18 @@ var SessionRepository = class {
   async update(id, updates) {
     try {
       const fullId = await this.resolveId(id);
+      const baseUrl = await getBaseUrl();
       const statusInfo = updates.status ? ` (status: ${updates.status}, ready_for_prompt: ${updates.ready_for_prompt})` : "";
       console.debug(`\u{1F504} [SessionRepo] Updating session ${fullId.substring(0, 8)}${statusInfo}`);
       const result = await this.db.transaction(async (tx) => {
-        const currentRow = await select(tx).from(sessions3).where(eq9(sessions3.session_id, fullId)).one();
-        if (!currentRow) {
+        const currentResult = await select(tx).from(sessions3).leftJoin(worktrees3, eq9(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(boards3, eq9(worktrees3.board_id, boards3.board_id)).where(eq9(sessions3.session_id, fullId)).one();
+        if (!currentResult) {
           throw new EntityNotFoundError("Session", id);
         }
-        const current = this.rowToSession(currentRow);
+        const currentRow = currentResult.sessions;
+        const boardId = currentResult.worktrees?.board_id ?? null;
+        const boardSlug = currentResult.boards?.slug ?? null;
+        const current = this.rowToSession(currentRow, boardId, boardSlug, baseUrl);
         const merged = deepMerge(current, updates);
         const insertData = this.sessionToInsert(merged);
         await update(tx, sessions3).set({
@@ -4461,15 +4698,18 @@ var SessionRepository = class {
    * instead of N+1. Returns sessions where user is a worktree owner OR worktree.others_can
    * allows at least 'view' access.
    *
+   * Also populates board_id and url via the worktrees JOIN.
+   *
    * NOTE: This method should only be called when RBAC is enabled. When RBAC is disabled,
    * the scopeSessionQuery hook is not registered, so default Feathers query is used
    * (which returns all sessions without filtering).
    *
    * @param userId - User ID to check access for
-   * @returns Array of accessible sessions
+   * @returns Array of accessible sessions with urls populated
    */
   async findAccessibleSessions(userId) {
-    const rows = await select(this.db, getTableColumns(sessions3)).from(sessions3).innerJoin(worktrees3, eq9(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(
+    const baseUrl = await getBaseUrl();
+    const results = await select(this.db).from(sessions3).innerJoin(worktrees3, eq9(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(boards3, eq9(worktrees3.board_id, boards3.board_id)).leftJoin(
       worktreeOwners3,
       and4(
         eq9(worktreeOwners3.worktree_id, worktrees3.worktree_id),
@@ -4481,7 +4721,14 @@ var SessionRepository = class {
         inArray(worktrees3.others_can, ["view", "prompt", "all"])
       )
     ).all();
-    return rows.map((row) => this.rowToSession(row));
+    return results.map(
+      (result) => {
+        const sessionRow = result.sessions;
+        const boardId = result.worktrees?.board_id ?? null;
+        const boardSlug = result.boards?.slug ?? null;
+        return this.rowToSession(sessionRow, boardId, boardSlug, baseUrl);
+      }
+    );
   }
   /**
    * Enrich a single session with last assistant message
@@ -4530,7 +4777,7 @@ var SessionRepository = class {
             fullText = messageData.content.filter((block) => block.type === "text" && block.text).map((block) => block.text).join("\n");
           }
           if (fullText.length > truncationLength) {
-            fullText = fullText.substring(0, truncationLength) + "...";
+            fullText = `${fullText.substring(0, truncationLength)}...`;
           }
           lastMessageBySession.set(sessionId, fullText);
         }
@@ -5317,6 +5564,20 @@ var ThreadSessionMapRepository = class {
       );
     }
   }
+  /**
+   * Find all mappings for a worktree (for UI filtering gateway sessions)
+   */
+  async findByWorktree(worktreeId) {
+    try {
+      const rows = await select(this.db).from(threadSessionMap3).where(eq12(threadSessionMap3.worktree_id, worktreeId)).all();
+      return rows.map((row) => this.rowToMapping(row));
+    } catch (error) {
+      throw new RepositoryError(
+        `Failed to find mappings by worktree: ${error instanceof Error ? error.message : String(error)}`,
+        error
+      );
+    }
+  }
 };
 
 // src/db/repositories/users.ts
@@ -5636,7 +5897,7 @@ import {
   and as and7,
   desc as desc2,
   eq as eq14,
-  getTableColumns as getTableColumns2,
+  getTableColumns,
   inArray as inArray2,
   isNotNull as isNotNull2,
   isNull as isNull3,
@@ -5955,7 +6216,7 @@ var WorktreeRepository = class {
    * @returns Array of accessible worktrees
    */
   async findAccessibleWorktrees(userId) {
-    const rows = await select(this.db, getTableColumns2(worktrees3)).from(worktrees3).leftJoin(
+    const rows = await select(this.db, getTableColumns(worktrees3)).from(worktrees3).leftJoin(
       worktreeOwners3,
       and7(
         eq14(worktreeOwners3.worktree_id, worktrees3.worktree_id),
@@ -6104,7 +6365,7 @@ var WorktreeRepository = class {
             fullText = messageData.content.filter((block) => block.type === "text" && block.text).map((block) => block.text).join("\n");
           }
           if (fullText.length > truncationLength) {
-            fullText = fullText.substring(0, truncationLength) + "...";
+            fullText = `${fullText.substring(0, truncationLength)}...`;
           }
           lastMessageBySession.set(sessionId, fullText);
         }
@@ -6115,7 +6376,7 @@ var WorktreeRepository = class {
         const sessionId = row.session_id;
         let lastMessage = lastMessageBySession.get(sessionId) || "";
         if (lastMessage.length > truncationLength) {
-          lastMessage = lastMessage.substring(0, truncationLength) + "...truncated";
+          lastMessage = `${lastMessage.substring(0, truncationLength)}...truncated`;
         }
         const sessionData = row.data;
         const messageCount = sessionData?.message_count ?? 0;