npm - coxpit - Versions diffs - 2.8.0 → 3.0.0 - Mend

coxpit 2.8.0 → 3.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (6) hide show

package/README.md CHANGED Viewed

@@ -71,6 +71,7 @@ Your keys and login never touch coxpit's config or database.
 | `COXPIT_AGENT_REAL` | — | `1` = real agent CLI by default (credits!) |
 | `COXPIT_AGENT_BIN` | `claude` | agent command |
 | `COXPIT_AGENT_PERM` | `acceptEdits` | headless permission mode passed to the agent |
+| `COXPIT_WEBHOOK_URL` | — | POSTs `{event:"run.settled",run:{...}}` when a run finishes — wire it to Telegram, Slack, anything |
 Running on the open internet? Put it behind your own front door (Tailscale, Cloudflare Access, a reverse proxy with TLS) and keep basic auth on — it exposes shells.
@@ -88,7 +89,7 @@ One daemon, one SQLite file, zero external services. Machines are reached over S
 ## Status
-`v2.0` — agent fleet (P1), compare/review + terminal (P2), and Design Mode (P3) are implemented and tested. Roadmap: richer review tooling, more agent providers, packaging (Docker/npm).
+`v3.0` — fleet, compare/merge, terminal, Design Mode, run destinations (merge · export · PR), swarm (plan fan-out + integrate with conflict-resolving agents), AI review, and sessions (work/ask + notifications) — all shipped and e2e-tested. Roadmap: ROADMAP.md.
 ## License

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "coxpit",
-  "version": "2.8.0",
+  "version": "3.0.0",
   "description": "Self-hosted cockpit for running a fleet of AI coding agents across your own machines — parallel worktree runs, live board, compare & merge, web terminal, design capture.",
   "type": "module",
   "license": "MIT",

package/src/board.ts CHANGED Viewed

@@ -263,6 +263,18 @@ export const BOARD_HTML = /* html */ `<!doctype html>
   .cmp-f .msg{font-family:var(--mono);font-size:11px;color:var(--muted);flex:1;
     white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
+  /* ── AI review panel (compare) ── */
+  .cmp-review{border-bottom:1px solid var(--line);background:var(--surface2);padding:14px 20px;
+    max-height:42vh;overflow:auto;font-size:13px;line-height:1.65;color:var(--muted)}
+  .cmp-review[hidden]{display:none}
+  .cmp-review h2{font-size:13px;color:var(--brand);margin:14px 0 6px;letter-spacing:.02em}
+  .cmp-review h3{font-size:12.5px;color:var(--ink);margin:12px 0 4px}
+  .cmp-review ul{margin:4px 0 8px;padding-left:18px}
+  .cmp-review li{margin-bottom:3px}
+  .cmp-review strong{color:var(--ink)}
+  .cmp-review code{font-family:var(--mono);font-size:.9em;background:#0e1118;padding:1px 5px;border-radius:4px;color:var(--brand)}
+  .cmp-review p{margin:0 0 8px}
   /* ── terminal ───────────────────────────── */
   .term-body{flex:1;min-height:0;background:#0b0d12;padding:8px 4px 4px 10px}
   #xterm{width:100%;height:100%}
@@ -280,6 +292,7 @@ export const BOARD_HTML = /* html */ `<!doctype html>
 <header>
   <div class="brand"><span class="mark">coxpit</span><span class="sub">fleet console</span></div>
   <div class="ws"><span class="dot" id="wsdot"></span><span id="wstext">connecting</span></div>
+  <button class="btn-ghost sm" id="bell" title="notify when a run settles">🔕</button>
   <div class="machines" id="machines"></div>
 </header>
 <div class="layout">
@@ -370,14 +383,19 @@ export const BOARD_HTML = /* html */ `<!doctype html>
       </div>
     </div>
     <div class="modal-f" id="steerRow" style="border-top:1px solid var(--line)">
-      <input id="steerInput" placeholder="Send follow-up instructions — continues in the same session &amp; worktree…" style="flex:1" />
-      <button class="btn sm" id="steerSend">Steer</button>
+      <div class="seg" style="flex:0 0 132px" id="steerModeSeg">
+        <button type="button" class="seg-opt on" data-mode="work">Work</button>
+        <button type="button" class="seg-opt" data-mode="ask">Ask</button>
+      </div>
+      <input id="steerInput" placeholder="Next instruction — same session &amp; worktree…" style="flex:1" />
+      <button class="btn sm" id="steerSend">Send</button>
     </div>
     <div class="modal-f">
       <button class="btn-ghost sm" id="mTerm">Terminal</button>
       <button class="btn-ghost sm" id="mRefreshDiff">Refresh diff</button>
       <button class="btn-ghost sm" id="mCompare">Compare runs</button>
       <button class="btn-ghost sm" id="mExport">Export files…</button>
+      <button class="btn-ghost sm" id="mSync">Sync base</button>
       <span class="spacer"></span>
       <button class="btn-danger sm" id="mStop">Stop</button>
       <button class="btn-ghost sm" id="mCleanup">Cleanup</button>
@@ -390,9 +408,11 @@ export const BOARD_HTML = /* html */ `<!doctype html>
   <div class="modal wide">
     <div class="modal-h">
       <span class="title" id="cmpTitle">Compare</span>
+      <button class="btn sm" id="cmpAI">AI review</button>
       <button class="btn-ghost sm" id="cmpRefresh">Refresh</button>
       <button class="x" id="cmpClose" aria-label="close">×</button>
     </div>
+    <div class="cmp-review" id="cmpReview" hidden></div>
     <div class="cmp" id="cmpBody"></div>
   </div>
 </div>
@@ -578,20 +598,51 @@ $('cfmOk').addEventListener('click', ()=>cfmClose(true));
 $('cfmCancel').addEventListener('click', ()=>cfmClose(false));
 $('cfmOverlay').addEventListener('click',(e)=>{ if(e.target===$('cfmOverlay')) cfmClose(false); });
-function summarize(kind, payload){
+/* 이벤트 인간화 — JSON 원문 대신 사람이 읽는 한 줄로. null = 표시 생략(노이즈). */
+function humanize(e){
+  const kind = e.kind, payload = e.payload;
+  if (kind === 'rate_limit_event') return null;
+  if (kind === 'steer') return { k:'steer', t:'→ '+payload };
+  if (kind === 'ask') return { k:'ask', t:'? '+payload };
+  if (kind === 'sync') return { k:'sync', t:payload };
+  if (kind === 'export'){ try{ const o=JSON.parse(payload); return { k:'export', t:o.copied+' file(s) → '+o.dest }; }catch{ return { k:'export', t:payload }; } }
+  if (kind === 'pr') return { k:'pr', t:payload };
+  if (kind === 'stderr') return { k:'stderr', t:payload };
   try{
     const o = JSON.parse(payload);
+    if (o.type === 'system') return { k:'session', t:'started · '+(o.model||o.subtype||'') };
+    if (o.type === 'user') return null; // tool 결과 회신 — 노이즈
     if (o.type === 'assistant' && o.message){
-      const c = (o.message.content||[]).map(x => x.type==='text' ? x.text : (x.type==='tool_use' ? '['+x.name+']' : '')).join(' ');
-      return c || '(assistant)';
+      const parts = [];
+      for (const x of (o.message.content||[])){
+        if (x.type === 'text' && x.text) parts.push({ k:'said', t:x.text });
+        else if (x.type === 'tool_use'){
+          const i = x.input || {};
+          const arg = i.file_path || i.command || i.path || i.pattern || '';
+          parts.push({ k:'tool', t:'▸ '+x.name+(arg?' — '+String(arg).split('/').slice(-2).join('/').slice(0,60):'') });
+        }
+      }
+      return parts.length ? parts : null;
     }
-    if (o.type === 'assistant' && o.text) return o.text;
-    if (o.type === 'result') return o.result || '(result)';
-    if (o.type === 'user') return '(tool result)';
-    if (o.type === 'system') return o.subtype || 'system';
-    if (kind === 'meta') return 'worktree ' + (o.worktree||'');
-    return kind;
-  }catch{ return payload; }
+    if (o.type === 'assistant' && o.text) return { k:'said', t:o.text };
+    if (o.type === 'result') return { k:'done', t:o.result || 'finished' };
+    if (kind === 'meta') return { k:'start', t:'worktree '+String(o.worktree||'').split('/').slice(-2).join('/') };
+    return { k:kind, t:payload.slice(0,140) };
+  }catch{ return { k:kind, t:payload }; }
+}
+function humanLines(events){
+  const out = [];
+  for (const e of (events||[])){
+    const h = humanize(e);
+    if (!h) continue;
+    if (Array.isArray(h)) out.push(...h); else out.push(h);
+  }
+  return out;
+}
+function summarize(kind, payload){
+  const h = humanize({kind, payload});
+  if (!h) return '';
+  return Array.isArray(h) ? h.map(x=>x.t).join(' · ') : h.t;
 }
 function diffHTML(text){
   if (!text.trim()) return '<span style="color:var(--faint)">no changes</span>';
@@ -667,8 +718,8 @@ function cardHTML(r){
   const closed = task && task.status==='closed';
   const title = (task ? esc(task.title) : ('task ' + (r.taskId ?? '?')))
     + (closed ? ' <span class="closed">· closed</span>' : '');
-  const evs = (r.events||[]).slice(-8).map(e =>
-    '<div class="ev"><span class="k">'+esc(e.kind)+'</span><span class="t">'+esc(summarize(e.kind,e.payload)).slice(0,140)+'</span></div>'
+  const evs = humanLines(r.events).slice(-8).map(h =>
+    '<div class="ev"><span class="k">'+esc(h.k)+'</span><span class="t">'+esc(h.t).slice(0,140)+'</span></div>'
   ).join('') || '<div class="ev"><span class="t" style="color:var(--faint)">waiting…</span></div>';
   const selCls = (selectMode?' selmode':'') + (selected.has(r.id)?' selected':'');
   return '<div class="card'+selCls+'" id="card-'+r.id+'">'
@@ -743,6 +794,33 @@ $('repos').addEventListener('click', async (e)=>{
   else toast('remove: '+(j.detail||res.status), 'error');
 });
+/* ── 완료 알림(브라우저) — 벨 토글, run 정착 시 통지 ── */
+let notifyOn = false;
+try { notifyOn = localStorage.getItem('coxpit.notify') === '1' && Notification.permission === 'granted'; } catch {}
+function paintBell(){ $('bell').textContent = notifyOn ? '🔔' : '🔕'; }
+$('bell').addEventListener('click', async ()=>{
+  if (!('Notification' in window)){ toast('this browser has no notification support', 'error'); return; }
+  if (!notifyOn){
+    const perm = await Notification.requestPermission();
+    if (perm !== 'granted'){ toast('notification permission denied', 'error'); return; }
+    notifyOn = true;
+  } else notifyOn = false;
+  try { localStorage.setItem('coxpit.notify', notifyOn ? '1' : '0'); } catch {}
+  paintBell();
+  toast(notifyOn ? 'will notify when runs settle' : 'notifications off', 'ok');
+});
+paintBell();
+function notifySettleUI(ev){
+  if (!notifyOn) return;
+  const t = tasks.get(ev.taskId ?? (runs.get(ev.runId)||{}).taskId);
+  try {
+    new Notification('coxpit · r'+ev.runId+' '+ev.status, {
+      body: (t ? t.title+' — ' : '') + (ev.filesChanged??0)+' file(s) changed',
+      tag: 'coxpit-r'+ev.runId,
+    });
+  } catch {}
+}
 function connectWS(){
   const proto = location.protocol==='https:'?'wss':'ws';
   const ws = new WebSocket(proto+'://'+location.host+'/ws');
@@ -758,6 +836,7 @@ function connectWS(){
       render(); flash(ev.runId ?? ev.id); paintModal();
       if (openRunId===(ev.runId??ev.id) && ['done','failed','error','stopped'].includes(ev.status)) loadDiff();
       if (cmpTaskId!=null && ['done','failed','error','stopped','merged'].includes(ev.status)) paintCompare();
+      if (['done','failed','error','stopped'].includes(ev.status)) notifySettleUI(ev);
     } else if (ev.type==='event'){
       const r = runs.get(ev.runId); if(!r){ hydrate(); return; }
       r.events = r.events||[]; r.events.push({ kind:ev.kind, payload:ev.payload });
@@ -787,8 +866,8 @@ function paintModal(){
   $('mStop').style.display = (r.status==='running'||r.status==='preparing'||r.status==='pending') ? '' : 'none';
   // steer 는 정착한 real run 에서만 의미(드라이런은 세션 없음 — 서버가 사유와 함께 거절)
   $('steerRow').style.display = ['done','failed','stopped'].includes(r.status) ? '' : 'none';
-  $('mTimeline').innerHTML = (r.events||[]).map(e =>
-    '<div class="ev"><span class="k">'+esc(e.kind)+'</span><span class="t">'+esc(summarize(e.kind,e.payload))+'</span></div>'
+  $('mTimeline').innerHTML = humanLines(r.events).map(h =>
+    '<div class="ev"><span class="k">'+esc(h.k)+'</span><span class="t">'+esc(h.t)+'</span></div>'
   ).join('') || '<span style="color:var(--faint)">no events yet</span>';
 }
 async function loadDiff(){
@@ -870,14 +949,34 @@ $('expOk').addEventListener('click', doExport);
 $('expDest').addEventListener('keydown',(e)=>{ if(e.key==='Enter'){ e.preventDefault(); doExport(); } });
 $('expCancel').addEventListener('click', ()=>$('expOverlay').classList.remove('open'));
 $('expOverlay').addEventListener('click',(e)=>{ if(e.target===$('expOverlay')) $('expOverlay').classList.remove('open'); });
+let steerMode = 'work';
+document.querySelectorAll('#steerModeSeg .seg-opt').forEach(b=>{
+  b.addEventListener('click', ()=>{
+    steerMode = b.dataset.mode;
+    document.querySelectorAll('#steerModeSeg .seg-opt').forEach(x=>x.classList.toggle('on', x===b));
+    $('steerInput').placeholder = steerMode==='ask'
+      ? 'Ask the session — status, decisions, anything (no file changes)…'
+      : 'Next instruction — same session & worktree…';
+  });
+});
 async function sendSteer(){
   if (openRunId==null) return;
   const msg = $('steerInput').value.trim(); if(!msg) return;
   const res = await fetch('/api/runs/'+openRunId+'/steer',{method:'POST',
-    headers:{'content-type':'application/json'}, body:JSON.stringify({message:msg})});
-  if (res.ok){ $('steerInput').value=''; toast('steering — the agent resumes in its worktree', 'ok'); }
+    headers:{'content-type':'application/json'}, body:JSON.stringify({message:msg, mode:steerMode})});
+  if (res.ok){
+    $('steerInput').value='';
+    toast(steerMode==='ask' ? 'asking — answer lands in the timeline' : 'working — same session & worktree', 'ok');
+  }
   else { const j = await res.json().catch(()=>({})); toast('steer: '+(j.detail||res.status), 'error'); }
 }
+$('mSync').addEventListener('click', async ()=>{
+  if (openRunId==null) return;
+  const res = await fetch('/api/runs/'+openRunId+'/sync',{method:'POST'});
+  const j = await res.json().catch(()=>({}));
+  if (res.ok){ toast('base merged into session worktree', 'ok'); loadDiff(); }
+  else toast('sync: '+(j.detail||res.status), 'error');
+});
 $('steerSend').addEventListener('click', sendSteer);
 $('steerInput').addEventListener('keydown',(e)=>{ if(e.key==='Enter') sendSteer(); });
 $('mStop').addEventListener('click', async ()=>{
@@ -908,6 +1007,7 @@ $('mCloseTask').addEventListener('click', async ()=>{
 let cmpTaskId = null;
 async function openCompare(taskId){
   cmpTaskId = taskId;
+  $('cmpReview').hidden = true; $('cmpReview').innerHTML = '';
   $('cmpOverlay').classList.add('open');
   $('cmpBody').innerHTML = '<div class="empty" style="flex:1">loading…</div>';
   await paintCompare();
@@ -969,6 +1069,34 @@ $('cmpBody').addEventListener('click', async (e)=>{
 $('cmpClose').addEventListener('click', ()=>{ cmpTaskId=null; $('cmpOverlay').classList.remove('open'); });
 $('cmpOverlay').addEventListener('click',(e)=>{ if(e.target===$('cmpOverlay')){ cmpTaskId=null; $('cmpOverlay').classList.remove('open'); } });
 $('cmpRefresh').addEventListener('click', paintCompare);
+/* 초경량 md 렌더 (리뷰 표시용) */
+function mdLite(src){
+  let s = esc(src);
+  s = s.replace(/\`\`\`[a-z]*\\n([\\s\\S]*?)\`\`\`/g, (m,c)=>'<pre style="background:#0e1118;border:1px solid var(--line);border-radius:7px;padding:8px 10px;overflow-x:auto">'+c+'</pre>');
+  s = s.replace(/^### (.+)$/gm, '<h3>$1</h3>');
+  s = s.replace(/^## (.+)$/gm, '<h2>$1</h2>');
+  s = s.replace(/\\*\\*([^*]+)\\*\\*/g, '<strong>$1</strong>');
+  s = s.replace(/\`([^\`]+)\`/g, '<code>$1</code>');
+  s = s.replace(/^[-*] (.+)$/gm, '<li>$1</li>');
+  s = s.replace(/(<li>[\\s\\S]*?<\\/li>)(?!\\s*<li>)/g, '<ul>$1</ul>');
+  s = s.split(/\\n{2,}/).map(b => /^<(h2|h3|ul|pre)/.test(b.trim()) ? b : (b.trim()? '<p>'+b.replace(/\\n/g,'<br>')+'</p>':'' )).join('');
+  return s;
+}
+$('cmpAI').addEventListener('click', async ()=>{
+  if (cmpTaskId==null) return;
+  const yes = await confirmUI('Run an AI review of these implementations?',
+    { sub: 'A reviewer agent reads every diff and summarizes each approach, pros/cons, and a recommendation — so you judge instead of reading all the code. Real agent, spends credits (~1–2 min).', okLabel: 'Review' });
+  if (!yes) return;
+  const btn = $('cmpAI');
+  btn.disabled = true; btn.textContent = 'Reviewing…';
+  try{
+    const res = await fetch('/api/tasks/'+cmpTaskId+'/review',{method:'POST',
+      headers:{'content-type':'application/json'}, body:JSON.stringify({real:true})});
+    const j = await res.json().catch(()=>({}));
+    if (res.ok){ $('cmpReview').innerHTML = mdLite(j.review||''); $('cmpReview').hidden = false; }
+    else toast('review: '+(j.detail||res.status), 'error');
+  } finally { btn.disabled = false; btn.textContent = 'AI review'; }
+});
 $('mCompare').addEventListener('click', ()=>{
   if (openRunId==null) return;
   const r = runs.get(openRunId); if(!r) return;

package/src/config.ts CHANGED Viewed

@@ -21,6 +21,8 @@ export const config = {
   dbPath: process.env.COXPIT_DB ?? './coxpit.db',
   // 원격 머신 SSH 개인키 경로(선택). 없으면 ssh 기본 키/에이전트 사용.
   sshKey: process.env.COXPIT_SSH_KEY ?? '',
+  // run 정착 시 POST 할 웹훅(선택) — 텔레그램 브릿지 등 사용자 연결용.
+  webhookUrl: process.env.COXPIT_WEBHOOK_URL ?? '',
   agent: {
     // 기본 드라이런(모의 에이전트). 실제 CLI 실행은 켤 때만(크레딧 소모).
     real: process.env.COXPIT_AGENT_REAL === '1',

package/src/orchestrator.ts CHANGED Viewed

@@ -186,19 +186,35 @@ async function runAgentChild(runId: number, machine: MachineTarget, wtPath: stri
   const filesChanged = stat.ok ? parseInt(stat.stdout.trim(), 10) || 0 : 0;
   const wasStopped = stoppedRuns.delete(runId);
-  await setRun(runId, {
-    status: wasStopped ? 'stopped' : code === 0 ? 'done' : 'failed',
-    endedAt: new Date(),
-    filesChanged,
-    exitSummary: wasStopped ? 'stopped by user' : lastResult ? lastResult.slice(0, 500) : `exit ${code}`,
-  });
+  const status = wasStopped ? 'stopped' : code === 0 ? 'done' : 'failed';
+  const exitSummary = wasStopped ? 'stopped by user' : lastResult ? lastResult.slice(0, 500) : `exit ${code}`;
+  await setRun(runId, { status, endedAt: new Date(), filesChanged, exitSummary });
+  void notifySettle(runId, status, filesChanged, exitSummary);
+}
+/** run 정착 웹훅(선택) — COXPIT_WEBHOOK_URL 로 JSON POST. 실패는 무해. */
+async function notifySettle(runId: number, status: string, filesChanged: number, exitSummary: string): Promise<void> {
+  if (!config.webhookUrl) return;
+  try {
+    const rr = await db.select().from(agentRuns).where(eq(agentRuns.id, runId)).limit(1);
+    const tr = rr[0] ? await db.select().from(tasks).where(eq(tasks.id, rr[0].taskId)).limit(1) : [];
+    await fetch(config.webhookUrl, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({
+        event: 'run.settled',
+        run: { id: runId, status, filesChanged, exitSummary: exitSummary.slice(0, 300), task: tr[0]?.title ?? '' },
+      }),
+      signal: AbortSignal.timeout(8000),
+    });
+  } catch { /* 웹훅 실패는 조용히 */ }
 }
 /**
  * 후속 지시(steer) — 정착한 run 의 세션을 --resume 으로 이어 같은 worktree 에서 계속.
  * fire-and-forget. 진행 중 run 은 거부(개입은 터미널로).
  */
-export async function steerRun(runId: number, message: string): Promise<{ ok: boolean; detail: string }> {
+export async function steerRun(runId: number, message: string, mode: 'work' | 'ask' = 'work'): Promise<{ ok: boolean; detail: string }> {
   const ctx = await loadContext(runId);
   const rr = await db.select().from(agentRuns).where(eq(agentRuns.id, runId)).limit(1);
   const run = rr[0];
@@ -213,11 +229,16 @@ export async function steerRun(runId: number, message: string): Promise<{ ok: bo
   if (!exists.stdout.includes('yes')) return { ok: false, detail: 'worktree missing on machine' };
   await setRun(runId, { status: 'running', endedAt: null });
-  await recordEvent(runId, 'steer', message.slice(0, 2000));
+  await recordEvent(runId, mode === 'ask' ? 'ask' : 'steer', message.slice(0, 2000));
+  // Ask 모드 — 세션에 질문만: 파일 수정 없이 답변만 하도록 래핑
+  const finalMessage = mode === 'ask'
+    ? `Question about your work in this session (do NOT modify any files, do NOT run write commands — answer concisely):\n${message}`
+    : message;
   const isRemote = ctx.machine.kind !== 'local' && ctx.machine.address !== '';
   const pidPrefix = isRemote ? `printf '%s' "$$" > .coxpit-agent.pid && ` : '';
-  const resume = `${config.agent.bin} -p --resume ${shq(run.sessionId)} ${shq(message)}` +
+  const resume = `${config.agent.bin} -p --resume ${shq(run.sessionId)} ${shq(finalMessage)}` +
     ` --output-format stream-json --verbose --permission-mode ${config.agent.perm}`;
   const cmd = `cd ${shq(wt)} && ${pidPrefix}{ ${resume}; }`;
   void runAgentChild(runId, ctx.machine, wt, cmd);
@@ -285,6 +306,31 @@ export async function getRunDiff(runId: number): Promise<{ ok: boolean; diff: st
   return { ok: true, stat: stat.trim(), diff: diff.slice(0, 200_000) };
 }
+/**
+ * base 동기화 — 오래 사는 세션의 worktree 에 base 브랜치 최신을 머지한다.
+ * 충돌 시 자동 abort — 그땐 steer 로 에이전트에게 머지를 맡기라고 안내.
+ */
+export async function syncRun(runId: number): Promise<{ ok: boolean; detail: string; conflict?: boolean }> {
+  const ctx = await loadContext(runId);
+  const rr = await db.select().from(agentRuns).where(eq(agentRuns.id, runId)).limit(1);
+  const run = rr[0];
+  if (!ctx || !run || !run.worktreePath) return { ok: false, detail: 'no worktree' };
+  if (liveChildren.has(runId)) return { ok: false, detail: 'still running — wait for it to settle' };
+  const wt = shq(run.worktreePath);
+  const ident = `-c user.name='coxpit' -c user.email='coxpit@local'`;
+  // 미커밋 변경 먼저 커밋(머지 가능 상태로)
+  const c1 = await runShellOn(ctx.machine,
+    `cd ${wt} && git add -A && (git diff --cached --quiet || git ${ident} -c commit.gpgsign=false commit -m ${shq(`coxpit r${runId}: checkpoint before base sync`)})`, 20000);
+  if (!c1.ok) return { ok: false, detail: 'checkpoint commit failed' };
+  const mg = await runShellOn(ctx.machine,
+    `cd ${wt} && git ${ident} -c commit.gpgsign=false merge --no-edit ${shq(ctx.baseBranch)} 2>&1 || (git merge --abort 2>/dev/null; echo COXPIT_SYNC_CONFLICT)`, 30000);
+  if (mg.stdout.includes('COXPIT_SYNC_CONFLICT')) {
+    return { ok: false, conflict: true, detail: `conflict with ${ctx.baseBranch} — steer the agent: "merge ${ctx.baseBranch} and resolve conflicts"` };
+  }
+  await recordEvent(runId, 'sync', `merged ${ctx.baseBranch} into session worktree`);
+  return { ok: true, detail: mg.stdout.trim().split('\n').slice(-1)[0] ?? 'synced' };
+}
 /**
  * 승자 run 머지 — worktree 미커밋 변경을 자동 커밋 후 run 브랜치를
  * repo 기본 브랜치에 merge. 본 repo 가 기본 브랜치+클린일 때만, 충돌 시 abort.
@@ -400,6 +446,62 @@ export async function planFanout(repoId: number, goal: string, real: boolean): P
   return { ok: true, detail: `${created.length} task(s) launched`, tasks: created };
 }
+/**
+ * AI 리뷰(심판) — 태스크의 정착 run diff 들을 리뷰 에이전트가 읽고
+ * 접근 방식·장단점·리스크·추천을 요약한다. 사람은 코드 전수가 아니라
+ * 판단만 하면 되도록. (read-only, 워크트리 불필요)
+ */
+export async function reviewTask(taskId: number, real: boolean): Promise<{ ok: boolean; detail: string; review?: string }> {
+  const tr = await db.select().from(tasks).where(eq(tasks.id, taskId)).limit(1);
+  const task = tr[0];
+  if (!task) return { ok: false, detail: 'task not found' };
+  const rp = await db.select().from(repos).where(eq(repos.id, task.repoId)).limit(1);
+  const repo = rp[0];
+  if (!repo) return { ok: false, detail: 'repo not found' };
+  const mr = await db.select().from(machines).where(eq(machines.id, repo.machineId)).limit(1);
+  const m = mr[0];
+  if (!m) return { ok: false, detail: 'machine not found' };
+  const machine: MachineTarget = { slug: m.slug, kind: m.kind, address: m.address, sshUser: m.sshUser };
+  const trs = (await db.select().from(agentRuns).where(eq(agentRuns.taskId, taskId)))
+    .filter((r) => ['done', 'failed', 'stopped', 'merged'].includes(r.status));
+  if (trs.length < 2) return { ok: false, detail: 'need at least 2 settled runs to review' };
+  const sections: string[] = [];
+  for (const r of trs) {
+    const d = await getRunDiff(r.id);
+    const diff = (d.ok ? d.diff : '(worktree gone — diff unavailable)').slice(0, 15000);
+    sections.push(`### run r${r.id} (status: ${r.status})\nAgent's own summary: ${(r.exitSummary || '-').slice(0, 300)}\n\nDiff:\n\`\`\`diff\n${diff}\n\`\`\``);
+  }
+  if (!real) {
+    return {
+      ok: true, detail: 'rehearsal review',
+      review: `## AI Review (rehearsal)\n\n${trs.map((r) => `**r${r.id}** — approach: (dry-run placeholder)\n- pros: n/a\n- cons: n/a`).join('\n\n')}\n\n**Recommendation**: run with Real agent for an actual review.`,
+    };
+  }
+  const prompt =
+    `You are reviewing ${trs.length} competing implementations of the same task.\n` +
+    `Task: ${task.title}\nOriginal prompt: ${task.prompt.slice(0, 800)}\n\n` +
+    sections.join('\n\n') +
+    `\n\nWrite a review in markdown, in the language of the task prompt (Korean if the prompt is Korean):\n` +
+    `1. For EACH run: one-line approach summary, then pros (max 3) and cons (max 3) as bullets.\n` +
+    `2. '## 추천' section: which run to merge and WHY, in 2-3 sentences. If combining both is better, say exactly what to steer.\n` +
+    `Judge correctness, simplicity, consistency with the existing codebase, and risk. Be decisive. Respond with ONLY the markdown.`;
+  const cmd = `cd ${shq(repo.path)} && ${config.agent.bin} -p ${shq(prompt)} --output-format json`;
+  const r = await runShellOn(machine, cmd, 300000);
+  if (!r.ok) return { ok: false, detail: 'reviewer failed: ' + (r.stderr || r.stdout).trim().slice(0, 300) };
+  try {
+    const envelope = JSON.parse(r.stdout.trim()) as { result?: string };
+    const review = (envelope.result ?? '').trim();
+    if (!review) throw new Error('empty review');
+    return { ok: true, detail: 'reviewed', review };
+  } catch (e) {
+    return { ok: false, detail: 'could not parse review: ' + String(e).slice(0, 200) };
+  }
+}
 export interface IntegrateResult {
   runId: number;
   status: 'merged' | 'conflict' | 'skipped';

package/src/server.ts CHANGED Viewed

@@ -12,7 +12,7 @@ import { db } from './db';
 import { machines, repos, tasks, agentRuns, agentEvents, designCaptures } from './db/schema';
 import { BOOKMARKLET_JS } from './design';
 import { runShellOn, shq } from './exec';
-import { launchRun, cleanupRun, stopRun, getRunDiff, mergeRun, getRunTermInfo, steerRun, exportRun, prRun, integrateRuns, planFanout } from './orchestrator';
+import { launchRun, cleanupRun, stopRun, getRunDiff, mergeRun, getRunTermInfo, steerRun, exportRun, prRun, integrateRuns, planFanout, reviewTask, syncRun } from './orchestrator';
 import { openTerm } from './term';
 import { addSink, removeSink, broadcast } from './hub';
 import { BOARD_HTML } from './board';
@@ -32,7 +32,7 @@ export async function buildServer(): Promise<FastifyInstance> {
   app.addHook('onRequest', authGate);
   // 무인증 헬스(외부 감시용)
-  app.get('/api/health', async () => ({ ok: true, name: 'coxpit', version: '2.8.0' }));
+  app.get('/api/health', async () => ({ ok: true, name: 'coxpit', version: '3.0.0' }));
   // 플릿 보드(단일 페이지). 인증 게이트 적용됨.
   app.get('/', async (_req, reply) => reply.type('text/html').send(BOARD_HTML));
@@ -325,6 +325,17 @@ export async function buildServer(): Promise<FastifyInstance> {
     return reply.code(202).send({ ok: true, runs: created.map((r) => ({ id: r.id, status: r.status })) });
   });
+  // AI 리뷰 — 심판 에이전트가 run diff 들을 읽고 접근/장단점/추천을 요약.
+  app.post('/api/tasks/:id/review', async (req, reply) => {
+    const id = Number((req.params as { id: string }).id);
+    const b = (req.body ?? {}) as { real?: boolean };
+    const tr = await db.select().from(tasks).where(eq(tasks.id, id)).limit(1);
+    if (!tr[0]) return reply.code(404).send({ error: 'task not found' });
+    const res = await reviewTask(id, b.real === true);
+    if (!res.ok) return reply.code(422).send(res);
+    return res;
+  });
   // 비교 뷰 — 태스크의 모든 run + 각 diff 를 한 방에 (승자 고르기용).
   app.get('/api/tasks/:id/compare', async (req, reply) => {
     const id = Number((req.params as { id: string }).id);
@@ -391,16 +402,26 @@ export async function buildServer(): Promise<FastifyInstance> {
   // 후속 지시(steer) — 정착한 run 을 같은 세션(--resume)·같은 worktree 로 계속.
   app.post('/api/runs/:id/steer', async (req, reply) => {
     const id = Number((req.params as { id: string }).id);
-    const b = (req.body ?? {}) as { message?: string };
+    const b = (req.body ?? {}) as { message?: string; mode?: string };
     const message = (b.message ?? '').trim();
     if (!message) return reply.code(400).send({ error: 'message required' });
     const rr = await db.select().from(agentRuns).where(eq(agentRuns.id, id)).limit(1);
     if (!rr[0]) return reply.code(404).send({ error: 'not found' });
-    const res = await steerRun(id, message);
+    const res = await steerRun(id, message, b.mode === 'ask' ? 'ask' : 'work');
     if (!res.ok) return reply.code(409).send(res);
     return reply.code(202).send(res);
   });
+  // base 동기화 — 오래 사는 세션 worktree 에 base 최신 머지.
+  app.post('/api/runs/:id/sync', async (req, reply) => {
+    const id = Number((req.params as { id: string }).id);
+    const rr = await db.select().from(agentRuns).where(eq(agentRuns.id, id)).limit(1);
+    if (!rr[0]) return reply.code(404).send({ error: 'not found' });
+    const res = await syncRun(id);
+    if (!res.ok) return reply.code(409).send(res);
+    return res;
+  });
   // Plan fan-out — 목표 하나 → 플래너가 태스크 분해 → 전부 자동 발사.
   // (real 플래너는 repo 를 읽고 계획하느라 1~3분 걸릴 수 있음 — 클라이언트는 대기)
   app.post('/api/plan', async (req, reply) => {
@@ -470,7 +491,7 @@ export async function buildServer(): Promise<FastifyInstance> {
   // 라이브 스트림 좌석 — 오케스트레이터가 run/event 를 여기로 broadcast.
   app.get('/ws', { websocket: true }, (socket) => {
     addSink(socket);
-    socket.send(JSON.stringify({ type: 'hello', name: 'coxpit-fleet', version: '2.8.0' }));
+    socket.send(JSON.stringify({ type: 'hello', name: 'coxpit-fleet', version: '3.0.0' }));
     socket.on('close', () => removeSink(socket));
   });