agor-live 0.6.2 → 0.6.4

package/dist/core/config/index.cjs

@@ -230,11 +230,6 @@ async function getDaemonUrl() {
   const envPort = process.env.PORT ? Number.parseInt(process.env.PORT, 10) : void 0;
   const port = envPort || config.daemon?.port || defaults.daemon?.port || 3030;
   const host = config.daemon?.host || defaults.daemon?.host || "localhost";
-  const codespaceName = process.env.CODESPACE_NAME;
-  const codespacesDomain = process.env.GITHUB_CODESPACES_PORT_FORWARDING_DOMAIN;
-  if (codespaceName && codespacesDomain) {
-    return `https://${codespaceName}-${port}.${codespacesDomain}`;
-  }
   return `http://${host}:${port}`;
 }
 function loadConfigSync() {

package/dist/core/config/index.d.cts

@@ -69,10 +69,14 @@ declare function unsetConfigValue(key: string): Promise<void>;
 /**
  * Get daemon URL from config
  *
- * Reads daemon host and port from config (with env var overrides).
- * Automatically detects GitHub Codespaces environment if DAEMON_URL not explicitly set.
+ * Returns internal daemon URL for backend-to-backend communication.
+ * Always returns localhost-based URL since all backend components (daemon, CLI, SDKs)
+ * run in the same environment.
  *
- * @returns Daemon URL (e.g., "http://localhost:3030" or Codespaces URL)
+ * For external access (browser UI), use frontend's getDaemonUrl() which detects
+ * the appropriate public URL via window.location.
+ *
+ * @returns Daemon URL (e.g., "http://localhost:3030")
  */
 declare function getDaemonUrl(): Promise<string>;
 /**

package/dist/core/config/index.d.ts

@@ -69,10 +69,14 @@ declare function unsetConfigValue(key: string): Promise<void>;
 /**
  * Get daemon URL from config
  *
- * Reads daemon host and port from config (with env var overrides).
- * Automatically detects GitHub Codespaces environment if DAEMON_URL not explicitly set.
+ * Returns internal daemon URL for backend-to-backend communication.
+ * Always returns localhost-based URL since all backend components (daemon, CLI, SDKs)
+ * run in the same environment.
  *
- * @returns Daemon URL (e.g., "http://localhost:3030" or Codespaces URL)
+ * For external access (browser UI), use frontend's getDaemonUrl() which detects
+ * the appropriate public URL via window.location.
+ *
+ * @returns Daemon URL (e.g., "http://localhost:3030")
  */
 declare function getDaemonUrl(): Promise<string>;
 /**

package/dist/core/config/index.js

@@ -156,11 +156,6 @@ async function getDaemonUrl() {
   const envPort = process.env.PORT ? Number.parseInt(process.env.PORT, 10) : void 0;
   const port = envPort || config.daemon?.port || defaults.daemon?.port || 3030;
   const host = config.daemon?.host || defaults.daemon?.host || "localhost";
-  const codespaceName = process.env.CODESPACE_NAME;
-  const codespacesDomain = process.env.GITHUB_CODESPACES_PORT_FORWARDING_DOMAIN;
-  if (codespaceName && codespacesDomain) {
-    return `https://${codespaceName}-${port}.${codespacesDomain}`;
-  }
   return `http://${host}:${port}`;
 }
 function loadConfigSync() {

package/dist/core/db/index.cjs

@@ -2112,6 +2112,47 @@ var MessagesRepository = class {
 // src/db/repositories/repos.ts
 var import_drizzle_orm8 = require("drizzle-orm");
 init_ids();
+
+// src/db/repositories/merge-utils.ts
+function isPlainObject(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) && !(value instanceof Date) && Object.getPrototypeOf(value) === Object.prototype;
+}
+function deepMerge(target, source) {
+  const result = { ...target };
+  for (const key in source) {
+    if (!Object.hasOwn(source, key)) {
+      continue;
+    }
+    const sourceValue = source[key];
+    const targetValue = target[key];
+    if (sourceValue === void 0) {
+      continue;
+    }
+    if (sourceValue === null) {
+      result[key] = null;
+      continue;
+    }
+    if (Array.isArray(sourceValue)) {
+      result[key] = sourceValue;
+      continue;
+    }
+    if (isPlainObject(sourceValue)) {
+      if (isPlainObject(targetValue)) {
+        result[key] = deepMerge(
+          targetValue,
+          sourceValue
+        );
+      } else {
+        result[key] = sourceValue;
+      }
+      continue;
+    }
+    result[key] = sourceValue;
+  }
+  return result;
+}
+
+// src/db/repositories/repos.ts
 var RepoRepository = class {
   constructor(db) {
     this.db = db;
@@ -2250,27 +2291,29 @@ var RepoRepository = class {
     return this.findAll();
   }
   /**
-   * Update repo by ID
+   * Update repo by ID (atomic with database-level transaction)
+   *
+   * Uses a transaction to ensure read-merge-write is atomic, preventing race conditions
+   * when multiple updates happen concurrently (e.g., permission_config updates).
    */
   async update(id, updates) {
     try {
       const fullId = await this.resolveId(id);
-      const current = await this.findById(fullId);
-      if (!current) {
-        throw new EntityNotFoundError("Repo", id);
-      }
-      const merged = { ...current, ...updates };
-      const insert = this.repoToInsert(merged);
-      await this.db.update(repos).set({
-        slug: insert.slug,
-        updated_at: /* @__PURE__ */ new Date(),
-        data: insert.data
-      }).where((0, import_drizzle_orm8.eq)(repos.repo_id, fullId));
-      const updated = await this.findById(fullId);
-      if (!updated) {
-        throw new RepositoryError("Failed to retrieve updated repo");
-      }
-      return updated;
+      return await this.db.transaction(async (tx) => {
+        const currentRow = await tx.select().from(repos).where((0, import_drizzle_orm8.eq)(repos.repo_id, fullId)).get();
+        if (!currentRow) {
+          throw new EntityNotFoundError("Repo", id);
+        }
+        const current = this.rowToRepo(currentRow);
+        const merged = deepMerge(current, updates);
+        const insert = this.repoToInsert(merged);
+        await tx.update(repos).set({
+          slug: insert.slug,
+          updated_at: /* @__PURE__ */ new Date(),
+          data: insert.data
+        }).where((0, import_drizzle_orm8.eq)(repos.repo_id, fullId));
+        return merged;
+      });
     } catch (error) {
       if (error instanceof RepositoryError) throw error;
       if (error instanceof EntityNotFoundError) throw error;
@@ -2580,45 +2623,37 @@ var SessionRepository = class {
     }
   }
   /**
-   * Update session by ID
+   * Update session by ID (atomic with database-level transaction)
+   *
+   * Uses a transaction to ensure read-merge-write is atomic, preventing race conditions
+   * when multiple updates happen concurrently (e.g., user changes settings while permission
+   * hook is saving allowedTools).
    */
   async update(id, updates) {
     try {
       const fullId = await this.resolveId(id);
-      const current = await this.findById(fullId);
-      if (!current) {
-        throw new EntityNotFoundError("Session", id);
-      }
-      const merged = {
-        ...current,
-        ...updates
-      };
-      if (updates.permission_config) {
-        console.log(`\u{1F4DD} [SessionRepository] Merging permission_config update`);
-        console.log(
-          `   Before merge - current.permission_config: ${JSON.stringify(current.permission_config)}`
-        );
-        console.log(`   Update permission_config: ${JSON.stringify(updates.permission_config)}`);
-        console.log(
-          `   After merge - merged.permission_config: ${JSON.stringify(merged.permission_config)}`
-        );
-      }
-      const insert = this.sessionToInsert(merged);
-      console.log(`\u{1F5C4}\uFE0F  [SessionRepository] Writing to DB:`);
-      console.log(
-        `   insert.data.permission_config: ${JSON.stringify(insert.data.permission_config)}`
-      );
-      await this.db.update(sessions).set({
-        status: insert.status,
-        updated_at: /* @__PURE__ */ new Date(),
-        data: insert.data
-      }).where((0, import_drizzle_orm9.eq)(sessions.session_id, fullId));
-      console.log(`\u2705 [SessionRepository] DB update complete`);
-      const updated = await this.findById(fullId);
-      if (!updated) {
-        throw new RepositoryError("Failed to retrieve updated session");
-      }
-      return updated;
+      return await this.db.transaction(async (tx) => {
+        const currentRow = await tx.select().from(sessions).where((0, import_drizzle_orm9.eq)(sessions.session_id, fullId)).get();
+        if (!currentRow) {
+          throw new EntityNotFoundError("Session", id);
+        }
+        const current = this.rowToSession(currentRow);
+        const merged = deepMerge(current, updates);
+        if (updates.permission_config) {
+          console.log(`\u{1F4DD} [SessionRepository] Merging permission_config update (atomic tx)`);
+          console.log(`   Before merge: ${JSON.stringify(current.permission_config)}`);
+          console.log(`   Update: ${JSON.stringify(updates.permission_config)}`);
+          console.log(`   After merge: ${JSON.stringify(merged.permission_config)}`);
+        }
+        const insert = this.sessionToInsert(merged);
+        await tx.update(sessions).set({
+          status: insert.status,
+          updated_at: /* @__PURE__ */ new Date(),
+          data: insert.data
+        }).where((0, import_drizzle_orm9.eq)(sessions.session_id, fullId));
+        console.log(`\u2705 [SessionRepository] Atomic update complete`);
+        return merged;
+      });
     } catch (error) {
       if (error instanceof RepositoryError) throw error;
       if (error instanceof EntityNotFoundError) throw error;
@@ -2982,9 +3017,7 @@ var TaskRepository = class {
       const inserts = taskList.map((task) => this.taskToInsert(task));
       await this.db.insert(tasks).values(inserts);
       const taskIds = inserts.map((t) => t.task_id);
-      const rows = await this.db.select().from(tasks).where(
-        import_drizzle_orm11.sql`${tasks.task_id} IN ${import_drizzle_orm11.sql.raw(`(${taskIds.map((id) => `'${id}'`).join(",")})`)}`
-      );
+      const rows = await this.db.select().from(tasks).where(import_drizzle_orm11.sql`${tasks.task_id} IN ${import_drizzle_orm11.sql.raw(`(${taskIds.map((id) => `'${id}'`).join(",")})`)}`);
       return rows.map((row) => this.rowToTask(row));
     } catch (error) {
       throw new RepositoryError(
@@ -3067,27 +3100,29 @@ var TaskRepository = class {
     }
   }
   /**
-   * Update task by ID
+   * Update task by ID (atomic with database-level transaction)
+   *
+   * Uses a transaction to ensure read-merge-write is atomic, preventing race conditions
+   * when multiple updates happen concurrently (e.g., task status + message_range updates).
    */
   async update(id, updates) {
     try {
       const fullId = await this.resolveId(id);
-      const current = await this.findById(fullId);
-      if (!current) {
-        throw new EntityNotFoundError("Task", id);
-      }
-      const merged = { ...current, ...updates };
-      const insert = this.taskToInsert(merged);
-      await this.db.update(tasks).set({
-        status: insert.status,
-        completed_at: insert.completed_at,
-        data: insert.data
-      }).where((0, import_drizzle_orm11.eq)(tasks.task_id, fullId));
-      const updated = await this.findById(fullId);
-      if (!updated) {
-        throw new RepositoryError("Failed to retrieve updated task");
-      }
-      return updated;
+      return await this.db.transaction(async (tx) => {
+        const currentRow = await tx.select().from(tasks).where((0, import_drizzle_orm11.eq)(tasks.task_id, fullId)).get();
+        if (!currentRow) {
+          throw new EntityNotFoundError("Task", id);
+        }
+        const current = this.rowToTask(currentRow);
+        const merged = deepMerge(current, updates);
+        const insert = this.taskToInsert(merged);
+        await tx.update(tasks).set({
+          status: insert.status,
+          completed_at: insert.completed_at,
+          data: insert.data
+        }).where((0, import_drizzle_orm11.eq)(tasks.task_id, fullId));
+        return merged;
+      });
     } catch (error) {
       if (error instanceof RepositoryError) throw error;
       if (error instanceof EntityNotFoundError) throw error;
@@ -3240,24 +3275,37 @@ var WorktreeRepository = class {
     return rows.map((row) => this.rowToWorktree(row));
   }
   /**
-   * Update worktree by ID
+   * Update worktree by ID (atomic with database-level transaction)
+   *
+   * Uses a transaction to ensure read-merge-write is atomic, preventing race conditions
+   * when multiple updates happen concurrently (e.g., schedule config + environment updates).
    */
   async update(id, updates) {
     const existing = await this.findById(id);
     if (!existing) {
       throw new EntityNotFoundError("Worktree", id);
     }
-    const merged = {
-      ...existing,
-      ...updates,
-      worktree_id: existing.worktree_id,
-      repo_id: existing.repo_id,
-      created_at: existing.created_at,
-      updated_at: (/* @__PURE__ */ new Date()).toISOString()
-    };
-    const insert = this.worktreeToInsert(merged);
-    const [row] = await this.db.update(worktrees).set(insert).where((0, import_drizzle_orm12.eq)(worktrees.worktree_id, existing.worktree_id)).returning();
-    return this.rowToWorktree(row);
+    return await this.db.transaction(async (tx) => {
+      const currentRow = await tx.select().from(worktrees).where((0, import_drizzle_orm12.eq)(worktrees.worktree_id, existing.worktree_id)).get();
+      if (!currentRow) {
+        throw new EntityNotFoundError("Worktree", id);
+      }
+      const current = this.rowToWorktree(currentRow);
+      const merged = deepMerge(current, {
+        ...updates,
+        worktree_id: current.worktree_id,
+        // Never change ID
+        repo_id: current.repo_id,
+        // Never change repo
+        created_at: current.created_at,
+        // Never change created timestamp
+        updated_at: (/* @__PURE__ */ new Date()).toISOString()
+        // Always update timestamp
+      });
+      const insert = this.worktreeToInsert(merged);
+      const [row] = await tx.update(worktrees).set(insert).where((0, import_drizzle_orm12.eq)(worktrees.worktree_id, current.worktree_id)).returning();
+      return this.rowToWorktree(row);
+    });
   }
   /**
    * Delete worktree by ID

package/dist/core/db/index.d.cts

@@ -2,8 +2,8 @@ export { and, desc, eq, inArray, like, or, sql } from 'drizzle-orm';
 import bcryptjs from 'bcryptjs';
 import { d as Database } from '../client-B7p2_7Ut.cjs';
 export { H as BoardCommentInsert, G as BoardCommentRow, p as BoardInsert, F as BoardObjectInsert, E as BoardObjectRow, B as BoardRow, e as DEFAULT_DB_PATH, a as DatabaseConnectionError, D as DbConfig, z as MCPServerInsert, y as MCPServerRow, o as MessageInsert, M as MessageRow, q as RepoInsert, R as RepoRow, l as SessionInsert, C as SessionMCPServerInsert, A as SessionMCPServerRow, S as SessionRow, n as TaskInsert, T as TaskRow, x as UserInsert, U as UserRow, v as WorktreeInsert, W as WorktreeRow, k as boardComments, i as boardObjects, g as boards, c as createDatabase, b as createDatabaseAsync, f as createLocalDatabase, h as mcpServers, m as messages, r as repos, j as sessionMcpServers, s as sessions, t as tasks, u as users, w as worktrees } from '../client-B7p2_7Ut.cjs';
-import { B as BaseRepository } from '../worktrees-Df_shHCZ.cjs';
-export { A as AmbiguousIdError, E as EntityNotFoundError, M as MCPServerRepository, a as MessagesRepository, b as RepoRepository, R as RepositoryError, S as SessionMCPServerRepository, c as SessionRepository, W as WorktreeRepository } from '../worktrees-Df_shHCZ.cjs';
+import { B as BaseRepository } from '../worktrees-BEIruvGs.cjs';
+export { A as AmbiguousIdError, E as EntityNotFoundError, M as MCPServerRepository, a as MessagesRepository, b as RepoRepository, R as RepositoryError, S as SessionMCPServerRepository, c as SessionRepository, W as WorktreeRepository } from '../worktrees-BEIruvGs.cjs';
 import { B as BoardComment } from '../board-comment-CaUiaZB5.cjs';
 import { B as BoardID, W as WorktreeID } from '../id-DMqyogFB.cjs';
 import { a as BoardEntityObject, e as Board, d as BoardObject } from '../board-Oa2OJ-K3.cjs';
@@ -506,7 +506,10 @@ declare class TaskRepository implements BaseRepository<Task, Partial<Task>> {
      */
     findByStatus(status: Task['status']): Promise<Task[]>;
     /**
-     * Update task by ID
+     * Update task by ID (atomic with database-level transaction)
+     *
+     * Uses a transaction to ensure read-merge-write is atomic, preventing race conditions
+     * when multiple updates happen concurrently (e.g., task status + message_range updates).
      */
     update(id: string, updates: Partial<Task>): Promise<Task>;
     /**

package/dist/core/db/index.d.ts

@@ -2,8 +2,8 @@ export { and, desc, eq, inArray, like, or, sql } from 'drizzle-orm';
 import bcryptjs from 'bcryptjs';
 import { d as Database } from '../client-CklMhh5V.js';
 export { H as BoardCommentInsert, G as BoardCommentRow, p as BoardInsert, F as BoardObjectInsert, E as BoardObjectRow, B as BoardRow, e as DEFAULT_DB_PATH, a as DatabaseConnectionError, D as DbConfig, z as MCPServerInsert, y as MCPServerRow, o as MessageInsert, M as MessageRow, q as RepoInsert, R as RepoRow, l as SessionInsert, C as SessionMCPServerInsert, A as SessionMCPServerRow, S as SessionRow, n as TaskInsert, T as TaskRow, x as UserInsert, U as UserRow, v as WorktreeInsert, W as WorktreeRow, k as boardComments, i as boardObjects, g as boards, c as createDatabase, b as createDatabaseAsync, f as createLocalDatabase, h as mcpServers, m as messages, r as repos, j as sessionMcpServers, s as sessions, t as tasks, u as users, w as worktrees } from '../client-CklMhh5V.js';
-import { B as BaseRepository } from '../worktrees-DCLpNeje.js';
-export { A as AmbiguousIdError, E as EntityNotFoundError, M as MCPServerRepository, a as MessagesRepository, b as RepoRepository, R as RepositoryError, S as SessionMCPServerRepository, c as SessionRepository, W as WorktreeRepository } from '../worktrees-DCLpNeje.js';
+import { B as BaseRepository } from '../worktrees-Dv8M5-3U.js';
+export { A as AmbiguousIdError, E as EntityNotFoundError, M as MCPServerRepository, a as MessagesRepository, b as RepoRepository, R as RepositoryError, S as SessionMCPServerRepository, c as SessionRepository, W as WorktreeRepository } from '../worktrees-Dv8M5-3U.js';
 import { B as BoardComment } from '../board-comment-BCrDUioT.js';
 import { B as BoardID, W as WorktreeID } from '../id-DMqyogFB.js';
 import { a as BoardEntityObject, e as Board, d as BoardObject } from '../board-ava4cdq5.js';
@@ -506,7 +506,10 @@ declare class TaskRepository implements BaseRepository<Task, Partial<Task>> {
      */
     findByStatus(status: Task['status']): Promise<Task[]>;
     /**
-     * Update task by ID
+     * Update task by ID (atomic with database-level transaction)
+     *
+     * Uses a transaction to ensure read-merge-write is atomic, preventing race conditions
+     * when multiple updates happen concurrently (e.g., task status + message_range updates).
      */
     update(id: string, updates: Partial<Task>): Promise<Task>;
     /**