agor-live 0.12.2 → 0.12.3

package/dist/core/index.d.ts

@@ -1,30 +1,30 @@
 export { AgorClient, AgorService, BoardsService, MessagesService, ReposLocalService, ReposService, ServiceTypes, SessionsService, TasksService, WorktreesService, createClient, createRestClient, isDaemonRunning } from './api/index.js';
 export { AGOR_INTERNAL_ENV_VARS, AGOR_USER_ENV_KEYS_VAR, AgorYmlSchema, ApiKeyName, BLOCKED_ENV_VARS, ENV_VAR_CONSTRAINTS, KeyResolutionContext, KeyResolutionResult, ValidationError, createUserProcessEnvironment, formatValidationError, formatValidationErrors, getEnvVarBlockReason, isEnvVarAllowed, isValid, parseAgorYml, resolveApiKey, resolveApiKeySync, resolveSystemEnvironment, resolveUserEnvironment, validateEnvVar, withUserEnvironment, withUserEnvironmentSync, writeAgorYml } from './config/index.js';
-export { c as ensureCodexHome, e as expandHomePath, g as getAgorHome, a as getConfigPath, d as getConfigValue, k as getCredential, h as getDaemonUrl, m as getDaemonUser, q as getDataHome, x as getDataHomeAsync, b as getDefaultConfig, t as getReposDir, y as getReposDirAsync, w as getWorktreePath, v as getWorktreesDir, z as getWorktreesDirAsync, i as initConfig, p as isUnixImpersonationEnabled, o as isWorktreeRbacEnabled, l as loadConfig, j as loadConfigSync, n as requireDaemonUser, r as resolveCodexHome, s as saveConfig, f as setConfigValue, u as unsetConfigValue } from './config-manager-DGBdhxtZ.js';
+export { c as ensureCodexHome, e as expandHomePath, g as getAgorHome, j as getBaseUrl, a as getConfigPath, d as getConfigValue, m as getCredential, h as getDaemonUrl, n as getDaemonUser, t as getDataHome, y as getDataHomeAsync, b as getDefaultConfig, v as getReposDir, z as getReposDirAsync, x as getWorktreePath, w as getWorktreesDir, A as getWorktreesDirAsync, i as initConfig, q as isUnixImpersonationEnabled, p as isWorktreeRbacEnabled, l as loadConfig, k as loadConfigSync, o as requireDaemonUser, r as resolveCodexHome, s as saveConfig, f as setConfigValue, u as unsetConfigValue } from './config-manager-BLDGbZHT.js';
 export { DAEMON, DATABASE, ENVIRONMENT, GIT, PAGINATION, RepoReference, RepoReferenceOption, SESSION, WEBSOCKET, extractSlugFromUrl, formatRepoReference, getDefaultRepoReference, getGroupedRepoReferenceOptions, getRepoReferenceOptions, isValidGitUrl, isValidSlug, parseRepoReference, resolveRepoReference } from './config/browser.js';
-export { f as AgorCodexSettings, j as AgorConfig, i as AgorCredentials, b as AgorDaemonSettings, e as AgorDatabaseSettings, A as AgorDefaults, a as AgorDisplaySettings, g as AgorExecutionSettings, d as AgorOpenCodeSettings, h as AgorPathSettings, c as AgorUISettings, k as ConfigKey, C as CredentialKey, U as UnknownJson } from './types-D_wAaaE3.js';
+export { f as AgorCodexSettings, j as AgorConfig, i as AgorCredentials, b as AgorDaemonSettings, e as AgorDatabaseSettings, A as AgorDefaults, a as AgorDisplaySettings, g as AgorExecutionSettings, d as AgorOpenCodeSettings, h as AgorPathSettings, c as AgorUISettings, k as ConfigKey, C as CredentialKey, U as UnknownJson } from './types-Ddri21rw.js';
 export { AmbiguousIdError, BaseRepository, BoardCommentsRepository, BoardObjectRepository, BoardRepository, CreateUserData, DEFAULT_ADMIN_USER, EntityNotFoundError, GatewayChannelRepository, IdResolutionError, InsertValues, MCPServerRepository, MessagesRepository, MigrationError, MutationResult, RawQueryResult, RepoRepository, RepositoryError, SessionMCPServerRepository, SessionRepository, SessionWithLastMessage, TaskRepository, ThreadSessionMapRepository, UnifiedQuery, UnifiedReturning, UsersRepository, WorktreeRepository, WorktreeSessionActivity, WorktreeWithZone, WorktreeWithZoneAndSessions, boardComments, boardObjects, boards, checkMigrationStatus, compare, createDefaultAdminUser, createUser, decryptApiKey, deleteFrom, encryptApiKey, executeAll, executeGet, executeRaw, executeRun, formatShortId, gatewayChannels, generateId, generateSlug, generateUniqueSlug, getOne, getUserByEmail, hash, identifyUrlParam, initializeDatabase, insert, insertOne, isEncrypted, isForeignKeyConstraintError, isPostgresDatabase, isSQLiteDatabase, isShortId, jsonExtract, mcpServers, messages, repos, resolveShortId, runMigrations, seedInitialData, select, sessionMcpServers, sessions, tasks, threadSessionMap, update, userExists, users, withSessionGuard, worktreeOwners, worktrees } from './db/index.js';
 export { CloneOptions, CloneProgress, CloneResult, WorktreeInfo, cleanWorktree, cloneRepo, createWorktree, deleteRepoDirectory, deleteWorktreeDirectory, extractRepoName, getCurrentBranch, getCurrentSha, getDefaultBranch, getGitState, getRemoteBranches, getRemoteUrl, hasRemoteBranch, isClean, isGitRepo, isValidGitRepo, listWorktrees, pruneWorktrees, removeWorktree } from './git/index.js';
 export { MCPTemplateContext, MCPTemplateResolutionResult, buildMCPTemplateContextFromEnv, resolveMcpServerEnv, resolveMcpServerTemplates, resolveMcpServersTemplates } from './mcp/index.js';
 export { PermissionDecision, PermissionRequest } from './permissions/index.js';
-export { b as AgenticTool, A as AgenticToolName, C as ClaudeCodePermissionMode, d as CodexApprovalPolicy, e as CodexNetworkAccess, a as CodexPermissionMode, c as CodexSandboxMode, G as GeminiPermissionMode, O as OpenCodePermissionMode, P as PermissionMode, h as ScheduledRunMetadata, f as Session, S as SessionStatus, i as SpawnConfig, g as getDefaultPermissionMode } from './session-Da9rf6n5.js';
-export { e as Board, a as BoardEntityObject, f as BoardExportBlob, d as BoardObject, B as BoardObjectType, M as MarkdownBoardObject, T as TextBoardObject, c as ZoneBoardObject, b as ZoneTrigger, Z as ZoneTriggerBehavior } from './board-C-PU8jok.js';
+export { b as AgenticTool, A as AgenticToolName, C as ClaudeCodePermissionMode, d as CodexApprovalPolicy, e as CodexNetworkAccess, a as CodexPermissionMode, c as CodexSandboxMode, G as GeminiPermissionMode, O as OpenCodePermissionMode, P as PermissionMode, h as ScheduledRunMetadata, f as Session, S as SessionStatus, i as SpawnConfig, g as getDefaultPermissionMode } from './session-DLVkt-jY.js';
+export { e as Board, a as BoardEntityObject, f as BoardExportBlob, d as BoardObject, B as BoardObjectType, M as MarkdownBoardObject, T as TextBoardObject, c as ZoneBoardObject, b as ZoneTrigger, Z as ZoneTriggerBehavior } from './board-CZuyMRpr.js';
 export { B as BoardComment, b as BoardCommentCreate, c as BoardCommentPatch, a as CommentAttachmentType, C as CommentReaction, R as ReactionSummary, g as getCommentAttachmentType, f as groupReactions, d as isReply, e as isResolvable, i as isThreadRoot } from './board-comment-rH4c6eVl.js';
 export { b as ContextFileDetail, a as ContextFileListItem, C as ContextFilePath } from './context-ByxGjp5l.js';
-export { a as AuthenticatedParams, A as AuthenticatedUser, b as AuthenticationResult, B as BaseService, C as CreateHookContext, H as HookContext, Q as QueryParams, R as RBACParams, S as ServiceWithEvents } from './feathers-B0zjReEk.js';
+export { a as AuthenticatedParams, A as AuthenticatedUser, b as AuthenticationResult, B as BaseService, C as CreateHookContext, H as HookContext, Q as QueryParams, R as RBACParams, S as ServiceWithEvents } from './feathers-CYMJeMWB.js';
 export { ActiveUser, CreateInput, CursorLeaveEvent, CursorMoveEvent, CursorMovedEvent, DeepReadonly, FileDetail, FileListItem, FileListResponse, FilePath, FlattenObject, PaginatedResult, PartialKeys, RemoteCursor, RequireKeys, SessionViewMode, UpdateInput, isDefined, isNonEmptyString } from './types/index.js';
-export { C as ChannelType, b as GatewayAgenticConfig, c as GatewayChannel, G as GatewayChannelID, d as ThreadSessionMap, T as ThreadSessionMapID, a as ThreadStatus } from './gateway-Dy9fVyiS.js';
+export { C as ChannelType, b as GatewayAgenticConfig, c as GatewayChannel, G as GatewayChannelID, d as ThreadSessionMap, T as ThreadSessionMapID, a as ThreadStatus } from './gateway-B4CaePYV.js';
 export { A as AgenticToolID, B as BoardID, C as CommentID, I as IDPrefix, M as MessageID, R as RepoID, a as SessionID, S as ShortID, T as TaskID, U as UUID, b as UserID, W as WorktreeID } from './id-BwPJtWxW.js';
 export { C as CreateMCPServerInput, J as JSONSchema, d as MCPAuth, h as MCPCapabilities, l as MCPConfigFile, g as MCPPrompt, f as MCPResource, b as MCPScope, i as MCPServer, j as MCPServerFilters, M as MCPServerID, m as MCPServersConfig, c as MCPSource, k as MCPTestResult, e as MCPTool, a as MCPTransport, P as PromptArgument, S as SessionMCPServer, T as ToolPermission, U as UpdateMCPServerInput } from './mcp-Bm9HwvDf.js';
 export { C as ContentBlock, e as Message, f as MessageCreate, M as MessageRole, a as MessageStatus, b as MessageType, d as PermissionRequestContent, P as PermissionScope, c as PermissionStatus, S as StreamingEventType, T as ToolUse } from './message-CrqsdxNE.js';
 export { b as Repo, h as RepoEnvironmentConfig, R as RepoSlug, a as RepoType, d as Worktree, c as WorktreeConfig, g as WorktreeEnvironmentInstance, W as WorktreeName, e as WorktreePermissionLevel, f as WorktreeScheduleConfig } from './worktree-BR7Inm0-.js';
 export { b as Report, R as ReportPath, a as ReportTemplate, c as Task, T as TaskStatus } from './task-D0i_mU9u.js';
-export { A as AudioPreferences, B as BaseUserFields, C as ChimeSound, e as CreateUserInput, b as DefaultAgenticConfig, a as DefaultAgenticToolConfig, D as DefaultModelConfig, E as EventStreamPreferences, f as UpdateUserInput, d as User, c as UserPreferences, U as UserRole } from './user-DT1Qzfep.js';
+export { A as AudioPreferences, B as BaseUserFields, C as ChimeSound, e as CreateUserInput, b as DefaultAgenticConfig, a as DefaultAgenticToolConfig, D as DefaultModelConfig, E as EventStreamPreferences, f as UpdateUserInput, d as User, c as UserPreferences, U as UserRole } from './user-B77oCF14.js';
 export { AGOR_DEFAULT_SHELL, AGOR_HOME_BASE, AGOR_USERS_GROUP, AGOR_WORKTREES_DIR, AGOR_ZELLIJ_CONFIG, BuildSpawnArgsOptions, CommandError, CommandExecutor, CommandResult, CreateExecutorOptions, DirectExecutor, DryRunExecutor, EnvironmentCommandType, ExecWithInputOptions, ImpersonationResult, LoggingExecutor, NoOpExecutor, REPO_GIT_PERMISSION_MODE, ResolveImpersonationOptions, RunAsUserOptions, SpawnEnvironmentCommandOptions, SudoCliExecutor, SudoCliExecutorConfig, SudoDirectExecutor, SymlinkCommands, ThrowingExecutor, UnixGroupCommands, UnixIntegrationConfig, UnixIntegrationService, UnixOperationResult, UnixUserCommands, UnixUserMode, UnixUserNotFoundError, WorktreePermissionModes, WorktreeSymlinkInfo, buildSpawnArgs, buildSymlinkInfo, checkAsUser, createAdminExecutor, createExecutor, escapeShellArg, generateRepoGroupName, generateUnixUsername, generateWorktreeGroupName, getGidFromGroupName, getUidFromUsername, getUserHomeDir, getUserWorktreesDir, getWorktreePermissionMode, getWorktreeSymlinkPath, isAutoGeneratedUsername, isValidRepoGroupName, isValidUnixUsername, isValidWorktreeGroupName, parseRepoGroupName, parseUnixUsername, parseWorktreeGroupName, resolveUnixUserForImpersonation, runAsUser, spawnEnvironmentCommand, unixUserExists, validateResolvedUnixUser } from './unix/index.js';
 export { patchConsole, unpatchConsole } from './utils/logger.js';
 export { default as authenticationClient } from '@feathersjs/authentication-client';
 export { SQL, and, asc, desc, eq, inArray, like, or, sql } from 'drizzle-orm';
-export { v as BoardCommentInsert, u as BoardCommentRow, k as BoardInsert, t as BoardObjectInsert, s as BoardObjectRow, B as BoardRow, e as DEFAULT_DB_PATH, d as Database, a as DatabaseConnectionError, D as DbConfig, w as GatewayChannelInsert, G as GatewayChannelRow, p as MCPServerInsert, o as MCPServerRow, j as MessageInsert, M as MessageRow, l as RepoInsert, R as RepoRow, h as SessionInsert, r as SessionMCPServerInsert, q as SessionMCPServerRow, S as SessionRow, i as TaskInsert, T as TaskRow, y as ThreadSessionMapInsert, x as ThreadSessionMapRow, n as UserInsert, U as UserRow, m as WorktreeInsert, W as WorktreeRow, c as createDatabase, b as createDatabaseAsync, f as createLocalDatabase, g as getDatabaseUrl } from './client-CGO13BG6.js';
+export { v as BoardCommentInsert, u as BoardCommentRow, k as BoardInsert, t as BoardObjectInsert, s as BoardObjectRow, B as BoardRow, e as DEFAULT_DB_PATH, d as Database, a as DatabaseConnectionError, D as DbConfig, w as GatewayChannelInsert, G as GatewayChannelRow, p as MCPServerInsert, o as MCPServerRow, j as MessageInsert, M as MessageRow, l as RepoInsert, R as RepoRow, h as SessionInsert, r as SessionMCPServerInsert, q as SessionMCPServerRow, S as SessionRow, i as TaskInsert, T as TaskRow, y as ThreadSessionMapInsert, x as ThreadSessionMapRow, n as UserInsert, U as UserRow, m as WorktreeInsert, W as WorktreeRow, c as createDatabase, b as createDatabaseAsync, f as createLocalDatabase, g as getDatabaseUrl, z as sessionsRelations, A as worktreesRelations } from './client-BoLj-jqT.js';
 export { simpleGit } from 'simple-git';
 export { Id, NullableId, Paginated, Params, Service, ServiceMethods } from '@feathersjs/feathers';
 import 'socket.io-client';

package/dist/core/index.js

@@ -143,6 +143,7 @@ __export(config_manager_exports, {
   ensureCodexHome: () => ensureCodexHome,
   expandHomePath: () => expandHomePath,
   getAgorHome: () => getAgorHome,
+  getBaseUrl: () => getBaseUrl,
   getConfigPath: () => getConfigPath,
   getConfigValue: () => getConfigValue,
   getCredential: () => getCredential,
@@ -365,6 +366,32 @@ async function getDaemonUrl() {
   const host = config.daemon?.host || defaults.daemon?.host || DAEMON.DEFAULT_HOST;
   return `http://${host}:${port}`;
 }
+function validateBaseUrl(url) {
+  const trimmed = url.trim().replace(/\/$/, "");
+  if (!trimmed.startsWith("http://") && !trimmed.startsWith("https://")) {
+    throw new Error(`Invalid base URL: "${url}". Must start with http:// or https://`);
+  }
+  try {
+    new URL(trimmed);
+  } catch {
+    throw new Error(`Invalid base URL format: "${url}". Must be a valid HTTP(S) URL.`);
+  }
+  return trimmed;
+}
+async function getBaseUrl() {
+  if (process.env.AGOR_BASE_URL) {
+    return validateBaseUrl(process.env.AGOR_BASE_URL);
+  }
+  const config = await loadConfig();
+  if (config.daemon?.base_url) {
+    return validateBaseUrl(config.daemon.base_url);
+  }
+  const defaults = getDefaultConfig();
+  const envPort = process.env.PORT ? Number.parseInt(process.env.PORT, 10) : void 0;
+  const port = envPort || config.daemon?.port || defaults.daemon?.port || DAEMON.DEFAULT_PORT;
+  const host = config.daemon?.host || defaults.daemon?.host || DAEMON.DEFAULT_HOST;
+  return `http://${host}:${port}`;
+}
 function loadConfigSync() {
   const configPath = getConfigPath();
   try {
@@ -686,13 +713,15 @@ __export(schema_postgres_exports, {
   repos: () => repos,
   sessionMcpServers: () => sessionMcpServers,
   sessions: () => sessions,
+  sessionsRelations: () => sessionsRelations,
   tasks: () => tasks,
   threadSessionMap: () => threadSessionMap,
   users: () => users,
   worktreeOwners: () => worktreeOwners,
-  worktrees: () => worktrees
+  worktrees: () => worktrees,
+  worktreesRelations: () => worktreesRelations
 });
-import { sql as sql2 } from "drizzle-orm";
+import { relations, sql as sql2 } from "drizzle-orm";
 import {
   bigint,
   boolean,
@@ -706,7 +735,7 @@ import {
   uniqueIndex,
   varchar
 } from "drizzle-orm/pg-core";
-var t, sessions, tasks, messages, boards, repos, worktrees, worktreeOwners, users, mcpServers, boardObjects, sessionMcpServers, boardComments, gatewayChannels, threadSessionMap;
+var t, sessions, tasks, messages, boards, repos, worktrees, worktreeOwners, users, mcpServers, boardObjects, sessionMcpServers, boardComments, gatewayChannels, threadSessionMap, sessionsRelations, worktreesRelations;
 var init_schema_postgres = __esm({
   "src/db/schema.postgres.ts"() {
     "use strict";
@@ -1193,6 +1222,15 @@ var init_schema_postgres = __esm({
         channelStatusIdx: index("idx_thread_map_channel_status").on(table.channel_id, table.status)
       })
     );
+    sessionsRelations = relations(sessions, ({ one }) => ({
+      worktree: one(worktrees, {
+        fields: [sessions.worktree_id],
+        references: [worktrees.worktree_id]
+      })
+    }));
+    worktreesRelations = relations(worktrees, ({ many }) => ({
+      sessions: many(sessions)
+    }));
   }
 });
 
@@ -1208,13 +1246,15 @@ __export(schema_sqlite_exports, {
   repos: () => repos2,
   sessionMcpServers: () => sessionMcpServers2,
   sessions: () => sessions2,
+  sessionsRelations: () => sessionsRelations2,
   tasks: () => tasks2,
   threadSessionMap: () => threadSessionMap2,
   users: () => users2,
   worktreeOwners: () => worktreeOwners2,
-  worktrees: () => worktrees2
+  worktrees: () => worktrees2,
+  worktreesRelations: () => worktreesRelations2
 });
-import { sql as sql3 } from "drizzle-orm";
+import { relations as relations2, sql as sql3 } from "drizzle-orm";
 import {
   index as index2,
   integer as integer2,
@@ -1223,7 +1263,7 @@ import {
   text as text2,
   uniqueIndex as uniqueIndex2
 } from "drizzle-orm/sqlite-core";
-var t2, sessions2, tasks2, messages2, boards2, repos2, worktrees2, worktreeOwners2, users2, mcpServers2, boardObjects2, sessionMcpServers2, boardComments2, gatewayChannels2, threadSessionMap2;
+var t2, sessions2, tasks2, messages2, boards2, repos2, worktrees2, worktreeOwners2, users2, mcpServers2, boardObjects2, sessionMcpServers2, boardComments2, gatewayChannels2, threadSessionMap2, sessionsRelations2, worktreesRelations2;
 var init_schema_sqlite = __esm({
   "src/db/schema.sqlite.ts"() {
     "use strict";
@@ -1711,6 +1751,15 @@ var init_schema_sqlite = __esm({
         channelStatusIdx: index2("idx_thread_map_channel_status").on(table.channel_id, table.status)
       })
     );
+    sessionsRelations2 = relations2(sessions2, ({ one }) => ({
+      worktree: one(worktrees2, {
+        fields: [sessions2.worktree_id],
+        references: [worktrees2.worktree_id]
+      })
+    }));
+    worktreesRelations2 = relations2(worktrees2, ({ many }) => ({
+      sessions: many(sessions2)
+    }));
   }
 });
 
@@ -2778,18 +2827,8 @@ async function checkMigrationStatus(db) {
       );
       appliedHashes = result.map((row) => String(row.hash));
     }
-    const normalizedAppliedHashes = appliedHashes;
-    const numExpected = expectedMigrations.length;
-    const numApplied = normalizedAppliedHashes.length;
-    if (numApplied >= numExpected) {
-      return {
-        hasPending: false,
-        pending: [],
-        applied: expectedMigrations.map((m) => m.tag)
-      };
-    }
-    const pending = expectedMigrations.filter((m) => !normalizedAppliedHashes.includes(m.hash)).map((m) => m.tag);
-    const appliedTags = expectedMigrations.filter((m) => normalizedAppliedHashes.includes(m.hash)).map((m) => m.tag);
+    const pending = expectedMigrations.filter((m) => !appliedHashes.includes(m.hash)).map((m) => m.tag);
+    const appliedTags = expectedMigrations.filter((m) => appliedHashes.includes(m.hash)).map((m) => m.tag);
     return {
       hasPending: pending.length > 0,
       pending,
@@ -3493,9 +3532,25 @@ var BoardObjectRepository = class {
 
 // src/db/repositories/boards.ts
 init_esm_shims();
+init_config_manager();
 init_ids();
 import { and as and2, eq as eq5, like as like2, ne } from "drizzle-orm";
 import * as yaml3 from "js-yaml";
+
+// src/utils/url.ts
+init_esm_shims();
+init_ids();
+function getSessionUrl(sessionId, boardId, boardSlug, baseUrl) {
+  if (!boardId) return null;
+  const boardParam = boardSlug || shortId(boardId);
+  return `${baseUrl}/b/${boardParam}/${shortId(sessionId)}`;
+}
+function getBoardUrl(boardId, boardSlug, baseUrl) {
+  const boardParam = boardSlug || shortId(boardId);
+  return `${baseUrl}/b/${boardParam}`;
+}
+
+// src/db/repositories/boards.ts
 init_database_wrapper();
 init_schema();
 var BoardRepository = class {
@@ -3504,16 +3559,23 @@ var BoardRepository = class {
   }
   /**
    * Convert database row to Board type
+   *
+   * @param row - Database row
+   * @param baseUrl - Base URL for generating board URLs
    */
-  rowToBoard(row) {
+  rowToBoard(row, baseUrl) {
     const data = row.data;
+    const boardId = row.board_id;
+    const slug = row.slug !== null ? row.slug : void 0;
+    const url = baseUrl ? getBoardUrl(boardId, slug, baseUrl) : "";
     return {
-      board_id: row.board_id,
+      board_id: boardId,
       name: row.name,
-      slug: row.slug !== null ? row.slug : void 0,
+      slug,
       created_at: new Date(row.created_at).toISOString(),
       last_updated: row.updated_at ? new Date(row.updated_at).toISOString() : new Date(row.created_at).toISOString(),
       created_by: row.created_by,
+      url,
       ...data
     };
   }
@@ -3593,6 +3655,7 @@ var BoardRepository = class {
   async create(data) {
     try {
       const boardId = data.board_id ?? generateId();
+      const baseUrl = await getBaseUrl();
       let finalSlug;
       if (data.slug === null) {
         finalSlug = void 0;
@@ -3615,7 +3678,7 @@ var BoardRepository = class {
       if (!row) {
         throw new RepositoryError("Failed to retrieve created board");
       }
-      return this.rowToBoard(row);
+      return this.rowToBoard(row, baseUrl);
     } catch (error) {
       if (error instanceof RepositoryError) throw error;
       throw new RepositoryError(
@@ -3630,8 +3693,9 @@ var BoardRepository = class {
   async findById(id) {
     try {
       const fullId = await this.resolveId(id);
+      const baseUrl = await getBaseUrl();
       const row = await select(this.db).from(boards3).where(eq5(boards3.board_id, fullId)).one();
-      return row ? this.rowToBoard(row) : null;
+      return row ? this.rowToBoard(row, baseUrl) : null;
     } catch (error) {
       if (error instanceof EntityNotFoundError) return null;
       if (error instanceof AmbiguousIdError) throw error;
@@ -3646,8 +3710,9 @@ var BoardRepository = class {
    */
   async findBySlug(slug) {
     try {
+      const baseUrl = await getBaseUrl();
       const row = await select(this.db).from(boards3).where(eq5(boards3.slug, slug)).one();
-      return row ? this.rowToBoard(row) : null;
+      return row ? this.rowToBoard(row, baseUrl) : null;
     } catch (error) {
       throw new RepositoryError(
         `Failed to find board by slug: ${error instanceof Error ? error.message : String(error)}`,
@@ -3672,8 +3737,9 @@ var BoardRepository = class {
    */
   async findAll() {
     try {
+      const baseUrl = await getBaseUrl();
       const rows = await select(this.db).from(boards3).all();
-      return rows.map((row) => this.rowToBoard(row));
+      return rows.map((row) => this.rowToBoard(row, baseUrl));
     } catch (error) {
       throw new RepositoryError(
         `Failed to find all boards: ${error instanceof Error ? error.message : String(error)}`,
@@ -4023,7 +4089,14 @@ function decryptConfig(config) {
     if (typeof decrypted[field] === "string" && decrypted[field]) {
       try {
         decrypted[field] = decryptApiKey(decrypted[field]);
-      } catch {
+      } catch (error) {
+        console.error(
+          `[gateway-channels] Failed to decrypt ${field}:`,
+          error instanceof Error ? error.message : String(error)
+        );
+        console.error(
+          "[gateway-channels] Channel credentials may be corrupted or master secret changed"
+        );
       }
     }
   }
@@ -4164,6 +4237,15 @@ var GatewayChannelRepository = class {
         throw new EntityNotFoundError("GatewayChannel", id);
       }
       const merged = { ...current, ...updates };
+      if (updates.config) {
+        const mergedConfig = { ...current.config, ...updates.config };
+        for (const field of SENSITIVE_CONFIG_FIELDS) {
+          if (!updates.config[field] && current.config[field]) {
+            mergedConfig[field] = current.config[field];
+          }
+        }
+        merged.config = mergedConfig;
+      }
       const insertData = this.channelToInsert(merged);
       await update(this.db, gatewayChannels3).set({
         name: insertData.name,
@@ -5159,32 +5241,30 @@ function isNonEmptyString(value) {
 init_esm_shims();
 
 // src/db/repositories/sessions.ts
+init_config_manager();
 init_ids();
+import { and as and4, desc, eq as eq10, inArray, isNotNull, isNull as isNull2, like as like6, or, sql as sql6 } from "drizzle-orm";
 init_database_wrapper();
 init_schema();
-import {
-  and as and4,
-  desc,
-  eq as eq10,
-  getTableColumns,
-  inArray,
-  isNotNull,
-  isNull as isNull2,
-  like as like6,
-  or,
-  sql as sql6
-} from "drizzle-orm";
 var SessionRepository = class {
   constructor(db) {
     this.db = db;
   }
   /**
    * Convert database row to Session type
+   *
+   * @param row - Database row
+   * @param worktreeBoardId - Board ID from worktree (if JOINed)
+   * @param boardSlug - Board slug from boards table (if JOINed)
+   * @param baseUrl - Base URL for generating session URLs
    */
-  rowToSession(row) {
+  rowToSession(row, worktreeBoardId, boardSlug, baseUrl) {
     const genealogyData = row.data.genealogy || { children: [] };
+    const sessionId = row.session_id;
+    const boardId = worktreeBoardId ?? null;
+    const url = baseUrl ? getSessionUrl(sessionId, boardId, boardSlug, baseUrl) : null;
     return {
-      session_id: row.session_id,
+      session_id: sessionId,
       status: row.status,
       agentic_tool: row.agentic_tool,
       created_at: new Date(row.created_at).toISOString(),
@@ -5192,6 +5272,8 @@ var SessionRepository = class {
       created_by: row.created_by,
       unix_username: row.unix_username || null,
       worktree_id: row.worktree_id,
+      worktree_board_id: boardId,
+      url,
       ...row.data,
       tasks: row.data.tasks.map((id) => id),
       genealogy: {
@@ -5304,11 +5386,15 @@ var SessionRepository = class {
     try {
       const insertData = this.sessionToInsert(data);
       await insert(this.db, sessions3).values(insertData).run();
-      const row = await select(this.db).from(sessions3).where(eq10(sessions3.session_id, insertData.session_id)).one();
-      if (!row) {
+      const baseUrl = await getBaseUrl();
+      const result = await select(this.db).from(sessions3).leftJoin(worktrees3, eq10(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(boards3, eq10(worktrees3.board_id, boards3.board_id)).where(eq10(sessions3.session_id, insertData.session_id)).one();
+      if (!result) {
         throw new RepositoryError("Failed to retrieve created session");
       }
-      return this.rowToSession(row);
+      const sessionRow = result.sessions;
+      const boardId = result.worktrees?.board_id ?? null;
+      const boardSlug = result.boards?.slug ?? null;
+      return this.rowToSession(sessionRow, boardId, boardSlug, baseUrl);
     } catch (error) {
       if (error instanceof RepositoryError) throw error;
       throw new RepositoryError(
@@ -5319,12 +5405,22 @@ var SessionRepository = class {
   }
   /**
    * Find session by ID (supports short ID)
+   *
+   * Automatically LEFT JOINs with worktrees table to populate worktree_board_id and url.
+   * This avoids N+1 queries when URL generation is needed.
    */
   async findById(id) {
     try {
       const fullId = await this.resolveId(id);
-      const row = await select(this.db).from(sessions3).where(eq10(sessions3.session_id, fullId)).one();
-      return row ? this.rowToSession(row) : null;
+      const baseUrl = await getBaseUrl();
+      const result = await select(this.db).from(sessions3).leftJoin(worktrees3, eq10(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(boards3, eq10(worktrees3.board_id, boards3.board_id)).where(eq10(sessions3.session_id, fullId)).one();
+      if (!result) {
+        return null;
+      }
+      const sessionRow = result.sessions;
+      const boardId = result.worktrees?.board_id ?? null;
+      const boardSlug = result.boards?.slug ?? null;
+      return this.rowToSession(sessionRow, boardId, boardSlug, baseUrl);
     } catch (error) {
       if (error instanceof EntityNotFoundError) return null;
       if (error instanceof AmbiguousIdError) throw error;
@@ -5336,11 +5432,21 @@ var SessionRepository = class {
   }
   /**
    * Find all sessions
+   *
+   * LEFT JOINs with worktrees to populate board_id and url in a single query.
    */
   async findAll() {
     try {
-      const rows = await select(this.db).from(sessions3).all();
-      return rows.map((row) => this.rowToSession(row));
+      const baseUrl = await getBaseUrl();
+      const results = await select(this.db).from(sessions3).leftJoin(worktrees3, eq10(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(boards3, eq10(worktrees3.board_id, boards3.board_id)).all();
+      return results.map(
+        (result) => {
+          const sessionRow = result.sessions;
+          const boardId = result.worktrees?.board_id ?? null;
+          const boardSlug = result.boards?.slug ?? null;
+          return this.rowToSession(sessionRow, boardId, boardSlug, baseUrl);
+        }
+      );
     } catch (error) {
       throw new RepositoryError(
         `Failed to find all sessions: ${error instanceof Error ? error.message : String(error)}`,
@@ -5350,11 +5456,21 @@ var SessionRepository = class {
   }
   /**
    * Find sessions by status
+   *
+   * LEFT JOINs with worktrees to populate board_id and url.
    */
   async findByStatus(status) {
     try {
-      const rows = await select(this.db).from(sessions3).where(eq10(sessions3.status, status)).all();
-      return rows.map((row) => this.rowToSession(row));
+      const baseUrl = await getBaseUrl();
+      const results = await select(this.db).from(sessions3).leftJoin(worktrees3, eq10(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(boards3, eq10(worktrees3.board_id, boards3.board_id)).where(eq10(sessions3.status, status)).all();
+      return results.map(
+        (result) => {
+          const sessionRow = result.sessions;
+          const boardId = result.worktrees?.board_id ?? null;
+          const boardSlug = result.boards?.slug ?? null;
+          return this.rowToSession(sessionRow, boardId, boardSlug, baseUrl);
+        }
+      );
     } catch (error) {
       throw new RepositoryError(
         `Failed to find sessions by status: ${error instanceof Error ? error.message : String(error)}`,
@@ -5364,11 +5480,22 @@ var SessionRepository = class {
   }
   /**
    * Find sessions by board ID
+   *
+   * Uses materialized board_id column for O(1) indexed lookup.
+   * LEFT JOINs with worktrees to populate url (board_id already known from filter).
    */
   async findByBoard(boardId) {
     try {
-      const rows = await select(this.db).from(sessions3).where(eq10(sessions3.board_id, boardId)).all();
-      return rows.map((row) => this.rowToSession(row));
+      const baseUrl = await getBaseUrl();
+      const results = await select(this.db).from(sessions3).leftJoin(worktrees3, eq10(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(boards3, eq10(worktrees3.board_id, boards3.board_id)).where(eq10(sessions3.board_id, boardId)).all();
+      return results.map(
+        (result) => {
+          const sessionRow = result.sessions;
+          const board_id = result.worktrees?.board_id ?? null;
+          const boardSlug = result.boards?.slug ?? null;
+          return this.rowToSession(sessionRow, board_id, boardSlug, baseUrl);
+        }
+      );
     } catch (error) {
       throw new RepositoryError(
         `Failed to find sessions by board: ${error instanceof Error ? error.message : String(error)}`,
@@ -5378,18 +5505,28 @@ var SessionRepository = class {
   }
   /**
    * Find child sessions (forked or spawned from this session)
+   *
+   * LEFT JOINs with worktrees to populate board_id and url.
    */
   async findChildren(sessionId) {
     try {
       const fullId = await this.resolveId(sessionId);
+      const baseUrl = await getBaseUrl();
       const { jsonExtract: jsonExtract2 } = await Promise.resolve().then(() => (init_database_wrapper(), database_wrapper_exports));
-      const rows = await select(this.db).from(sessions3).where(
+      const results = await select(this.db).from(sessions3).leftJoin(worktrees3, eq10(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(boards3, eq10(worktrees3.board_id, boards3.board_id)).where(
         or(
           sql6`${jsonExtract2(this.db, sessions3.data, "genealogy.parent_session_id")} = ${fullId}`,
           sql6`${jsonExtract2(this.db, sessions3.data, "genealogy.forked_from_session_id")} = ${fullId}`
         )
       ).all();
-      return rows.map((row) => this.rowToSession(row));
+      return results.map(
+        (result) => {
+          const sessionRow = result.sessions;
+          const boardId = result.worktrees?.board_id ?? null;
+          const boardSlug = result.boards?.slug ?? null;
+          return this.rowToSession(sessionRow, boardId, boardSlug, baseUrl);
+        }
+      );
     } catch (error) {
       throw new RepositoryError(
         `Failed to find child sessions: ${error instanceof Error ? error.message : String(error)}`,
@@ -5442,14 +5579,18 @@ var SessionRepository = class {
   async update(id, updates) {
     try {
       const fullId = await this.resolveId(id);
+      const baseUrl = await getBaseUrl();
       const statusInfo = updates.status ? ` (status: ${updates.status}, ready_for_prompt: ${updates.ready_for_prompt})` : "";
       console.debug(`\u{1F504} [SessionRepo] Updating session ${fullId.substring(0, 8)}${statusInfo}`);
       const result = await this.db.transaction(async (tx) => {
-        const currentRow = await select(tx).from(sessions3).where(eq10(sessions3.session_id, fullId)).one();
-        if (!currentRow) {
+        const currentResult = await select(tx).from(sessions3).leftJoin(worktrees3, eq10(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(boards3, eq10(worktrees3.board_id, boards3.board_id)).where(eq10(sessions3.session_id, fullId)).one();
+        if (!currentResult) {
           throw new EntityNotFoundError("Session", id);
         }
-        const current = this.rowToSession(currentRow);
+        const currentRow = currentResult.sessions;
+        const boardId = currentResult.worktrees?.board_id ?? null;
+        const boardSlug = currentResult.boards?.slug ?? null;
+        const current = this.rowToSession(currentRow, boardId, boardSlug, baseUrl);
         const merged = deepMerge(current, updates);
         const insertData = this.sessionToInsert(merged);
         await update(tx, sessions3).set({
@@ -5516,15 +5657,18 @@ var SessionRepository = class {
    * instead of N+1. Returns sessions where user is a worktree owner OR worktree.others_can
    * allows at least 'view' access.
    *
+   * Also populates board_id and url via the worktrees JOIN.
+   *
    * NOTE: This method should only be called when RBAC is enabled. When RBAC is disabled,
    * the scopeSessionQuery hook is not registered, so default Feathers query is used
    * (which returns all sessions without filtering).
    *
    * @param userId - User ID to check access for
-   * @returns Array of accessible sessions
+   * @returns Array of accessible sessions with urls populated
    */
   async findAccessibleSessions(userId) {
-    const rows = await select(this.db, getTableColumns(sessions3)).from(sessions3).innerJoin(worktrees3, eq10(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(
+    const baseUrl = await getBaseUrl();
+    const results = await select(this.db).from(sessions3).innerJoin(worktrees3, eq10(sessions3.worktree_id, worktrees3.worktree_id)).leftJoin(boards3, eq10(worktrees3.board_id, boards3.board_id)).leftJoin(
       worktreeOwners3,
       and4(
         eq10(worktreeOwners3.worktree_id, worktrees3.worktree_id),
@@ -5536,7 +5680,14 @@ var SessionRepository = class {
         inArray(worktrees3.others_can, ["view", "prompt", "all"])
       )
     ).all();
-    return rows.map((row) => this.rowToSession(row));
+    return results.map(
+      (result) => {
+        const sessionRow = result.sessions;
+        const boardId = result.worktrees?.board_id ?? null;
+        const boardSlug = result.boards?.slug ?? null;
+        return this.rowToSession(sessionRow, boardId, boardSlug, baseUrl);
+      }
+    );
   }
   /**
    * Enrich a single session with last assistant message
@@ -5585,7 +5736,7 @@ var SessionRepository = class {
             fullText = messageData.content.filter((block) => block.type === "text" && block.text).map((block) => block.text).join("\n");
           }
           if (fullText.length > truncationLength) {
-            fullText = fullText.substring(0, truncationLength) + "...";
+            fullText = `${fullText.substring(0, truncationLength)}...`;
           }
           lastMessageBySession.set(sessionId, fullText);
         }
@@ -6372,6 +6523,20 @@ var ThreadSessionMapRepository = class {
       );
     }
   }
+  /**
+   * Find all mappings for a worktree (for UI filtering gateway sessions)
+   */
+  async findByWorktree(worktreeId) {
+    try {
+      const rows = await select(this.db).from(threadSessionMap3).where(eq13(threadSessionMap3.worktree_id, worktreeId)).all();
+      return rows.map((row) => this.rowToMapping(row));
+    } catch (error) {
+      throw new RepositoryError(
+        `Failed to find mappings by worktree: ${error instanceof Error ? error.message : String(error)}`,
+        error
+      );
+    }
+  }
 };
 
 // src/db/repositories/users.ts
@@ -6691,7 +6856,7 @@ import {
   and as and7,
   desc as desc2,
   eq as eq15,
-  getTableColumns as getTableColumns2,
+  getTableColumns,
   inArray as inArray2,
   isNotNull as isNotNull2,
   isNull as isNull3,
@@ -7010,7 +7175,7 @@ var WorktreeRepository = class {
    * @returns Array of accessible worktrees
    */
   async findAccessibleWorktrees(userId) {
-    const rows = await select(this.db, getTableColumns2(worktrees3)).from(worktrees3).leftJoin(
+    const rows = await select(this.db, getTableColumns(worktrees3)).from(worktrees3).leftJoin(
       worktreeOwners3,
       and7(
         eq15(worktreeOwners3.worktree_id, worktrees3.worktree_id),
@@ -7159,7 +7324,7 @@ var WorktreeRepository = class {
             fullText = messageData.content.filter((block) => block.type === "text" && block.text).map((block) => block.text).join("\n");
           }
           if (fullText.length > truncationLength) {
-            fullText = fullText.substring(0, truncationLength) + "...";
+            fullText = `${fullText.substring(0, truncationLength)}...`;
           }
           lastMessageBySession.set(sessionId, fullText);
         }
@@ -7170,7 +7335,7 @@ var WorktreeRepository = class {
         const sessionId = row.session_id;
         let lastMessage = lastMessageBySession.get(sessionId) || "";
         if (lastMessage.length > truncationLength) {
-          lastMessage = lastMessage.substring(0, truncationLength) + "...truncated";
+          lastMessage = `${lastMessage.substring(0, truncationLength)}...truncated`;
         }
         const sessionData = row.data;
         const messageCount = sessionData?.message_count ?? 0;
@@ -10346,6 +10511,7 @@ export {
   generateUnixUsername,
   generateWorktreeGroupName,
   getAgorHome,
+  getBaseUrl,
   getCommentAttachmentType,
   getConfigPath,
   getConfigValue,