cyrus-edge-worker 0.0.40 → 0.2.0-rc

package/dist/EdgeWorker.d.ts

@@ -18,7 +18,8 @@ export declare class EdgeWorker extends EventEmitter {
     private repositories;
     private agentSessionManagers;
     private linearClients;
-    private ndjsonClients;
+    private linearEventTransport;
+    private configUpdater;
     private persistenceManager;
     private sharedApplicationServer;
     private cyrusHome;
@@ -26,12 +27,15 @@ export declare class EdgeWorker extends EventEmitter {
     private procedureRouter;
     private configWatcher?;
     private configPath?;
-    private tokenToRepoIds;
     constructor(config: EdgeWorkerConfig);
     /**
      * Start the edge worker
      */
     start(): Promise<void>;
+    /**
+     * Initialize and register components (routes) before server starts
+     */
+    private initializeComponents;
     /**
      * Stop the edge worker
      */
@@ -40,11 +44,6 @@ export declare class EdgeWorker extends EventEmitter {
      * Set the config file path for dynamic reloading
      */
     setConfigPath(configPath: string): void;
-    /**
-     * Get fresh list of repositories for a given Linear token
-     * This ensures webhook handlers always work with current repository state
-     */
-    private getRepositoriesForToken;
     /**
      * Handle resuming a parent session when a child session completes
      * This is the core logic used by the resume parent session callback
@@ -83,26 +82,6 @@ export declare class EdgeWorker extends EventEmitter {
      * Remove deleted repositories
      */
     private removeDeletedRepositories;
-    /**
-     * Set up webhook listener for a repository
-     */
-    private setupWebhookListener;
-    /**
-     * Reconnect webhook when token changes
-     */
-    private reconnectWebhook;
-    /**
-     * Clean up webhook listener if no other repositories use the token
-     */
-    private cleanupWebhookIfUnused;
-    /**
-     * Handle connection established
-     */
-    private handleConnect;
-    /**
-     * Handle disconnection
-     */
-    private handleDisconnect;
     /**
      * Handle errors
      */
@@ -239,10 +218,10 @@ export declare class EdgeWorker extends EventEmitter {
      */
     getConnectionStatus(): Map<string, boolean>;
     /**
-     * Get NDJSON client by token (for testing purposes)
+     * Get event transport (for testing purposes)
      * @internal
      */
-    _getClientByToken(token: string): any;
+    _getClientByToken(_token: string): any;
     /**
      * Start OAuth flow using the shared application server
      */

package/dist/EdgeWorker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EdgeWorker.d.ts","sourceRoot":"","sources":["../src/EdgeWorker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,EAGN,KAAK,KAAK,IAAI,WAAW,EACzB,MAAM,aAAa,CAAC;AAoBrB,OAAO,KAAK,EACX,iBAAiB,EACjB,gBAAgB,EAahB,gBAAgB,EAChB,2BAA2B,EAG3B,MAAM,YAAY,CAAC;AAapB,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAe/D,OAAO,KAAK,EAAE,gBAAgB,EAA0B,MAAM,YAAY,CAAC;AAE3E,MAAM,CAAC,OAAO,WAAW,UAAU;IAClC,EAAE,CAAC,CAAC,SAAS,MAAM,gBAAgB,EAClC,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAC3B,IAAI,CAAC;IACR,IAAI,CAAC,CAAC,SAAS,MAAM,gBAAgB,EACpC,KAAK,EAAE,CAAC,EACR,GAAG,IAAI,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GACtC,OAAO,CAAC;CACX;AAED;;;;;GAKG;AACH,qBAAa,UAAW,SAAQ,YAAY;IAC3C,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,YAAY,CAA4C;IAChE,OAAO,CAAC,oBAAoB,CAA+C;IAC3E,OAAO,CAAC,aAAa,CAAwC;IAC7D,OAAO,CAAC,aAAa,CACV;IACX,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,uBAAuB,CAA0B;IACzD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,yBAAyB,CAAkC;IACnE,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,aAAa,CAAC,CAAY;IAClC,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,cAAc,CAAoC;gBAE9C,MAAM,EAAE,gBAAgB;IA4PpC;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAiF5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA4C3B;;OAEG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIvC;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAY/B;;;;OAIG;YACW,yBAAyB;IA2GvC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;OAEG;YACW,kBAAkB;IAoChC;;OAEG;YACW,gBAAgB;IAuD9B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAkC/B;;OAEG;IACH,OAAO,CAAC,SAAS;IAIjB;;OAEG;YACW,kBAAkB;IAyDhC;;OAEG;YACW,0BAA0B;IAgExC;;OAEG;YACW,yBAAyB;IAgFvC;;OAEG;YACW,oBAAoB;IAyElC;;OAEG;YACW,gBAAgB;IAa9B;;OAEG;YACW,sBAAsB;IAqBpC;;OAEG;IACH,OAAO,CAAC,aAAa;IAOrB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAUxB;;OAEG;IACH,OAAO,CAAC,WAAW;IAKnB;;OAEG;YACW,aAAa;IAiE3B;;OAEG;YACW,4BAA4B;IAgB1C;;;;OAIG;YACW,wBAAwB;IAuItC;;OAEG;YACW,uBAAuB;IAqCrC;;;;;;;OAOG;YACW,wBAAwB;IAmFtC;;;;;OAKG;YACW,gCAAgC;IAoR9C;;;;;OAKG;YACW,6BAA6B;IAuO3C;;;;OAIG;YACW,qBAAqB;IA0CnC;;OAEG;YACW,mBAAmB;IAejC;;;OAGG;YACW,iBAAiB;IAI/B;;OAEG;YACW,gBAAgB;IAa9B;;OAEG;YACW,+BAA+B;IAwE7C;;;;;;;OAOG;YACW,qBAAqB;IAwJnC;;;;;;;;OAQG;YACW,kBAAkB;IAoDhC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAUzB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAwB3B;;OAEG;YACW,YAAY;IA2B1B;;OAEG;YACW,mBAAmB;IAmDjC;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAUhC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAI1B;;;;OAIG;YACW,oBAAoB;IAmFlC;;;;;;;;OAQG;YACW,uBAAuB;IA4LrC;;OAEG;IACH,mBAAmB,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC;IAQ3C;;;OAGG;IACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG;IAUrC;;OAEG;IACG,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAChD,WAAW,EAAE,MAAM,CAAC;QACpB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,mBAAmB,EAAE,MAAM,CAAC;KAC5B,CAAC;IAKF;;OAEG;IACH,aAAa,IAAI,MAAM;IAIvB;;OAEG;IACH,mBAAmB,IAAI,MAAM;IAI7B;;;;OAIG;YAEW,uBAAuB;IAiFrC;;OAEG;IAeH;;OAEG;YACW,WAAW;IAsBzB;;OAEG;IASH;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAY7B;;;;;OAKG;YACW,wBAAwB;IA0JtC;;OAEG;YACW,kBAAkB;IAuDhC;;;;;;OAMG;YACW,0BAA0B;IAwFxC;;OAEG;YACW,mBAAmB;IASjC;;OAEG;IACH,OAAO,CAAC,6BAA6B;IA8CrC;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAoFlC;;OAEG;IACH,OAAO,CAAC,cAAc;IAsLtB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAoBzB;;;;;;;;;;;OAWG;YACW,kBAAkB;IAsChC;;;OAGG;YACW,cAAc;IAiB5B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAuB5B;;OAEG;YACW,qBAAqB;IAqGnC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAmC/B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAgB3B;;;OAGG;YACW,oBAAoB;IA0BlC;;OAEG;YACW,sBAAsB;IAsBpC;;OAEG;YACW,gCAAgC;IAW9C;;OAEG;YACW,kCAAkC;IA2ChD;;OAEG;IACH,OAAO,CAAC,uBAAuB;IA+G/B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA8C5B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAuDzB;;OAEG;IACI,wBAAwB,CAC9B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GAClB,GAAG,EAAE;IASR;;OAEG;YACW,kBAAkB;IAchC;;OAEG;YACW,kBAAkB;IAYhC;;OAEG;IACI,iBAAiB,IAAI,2BAA2B;IA8BvD;;OAEG;IACI,eAAe,CAAC,KAAK,EAAE,2BAA2B,GAAG,IAAI;IAoChE;;OAEG;YACW,yBAAyB;IAwCvC;;OAEG;YACW,8BAA8B;IAwC5C;;;OAGG;YACW,0BAA0B;IA0CxC;;;;;;;;;;;;;;;;;;OAkBG;YACW,8BAA8B;IAsE5C;;OAEG;YACW,gCAAgC;IA2G9C;;;;;;;;;;OAUG;IACG,mBAAmB,CACxB,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,gBAAgB,EAC5B,4BAA4B,EAAE,MAAM,EACpC,mBAAmB,EAAE,mBAAmB,EACxC,UAAU,EAAE,MAAM,EAClB,kBAAkB,GAAE,MAAW,EAC/B,YAAY,GAAE,OAAe,EAC7B,4BAA4B,GAAE,MAAM,EAAO,EAC3C,QAAQ,CAAC,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,EACtB,gBAAgB,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC;IAmHhB;;OAEG;YACW,iCAAiC;IA6C/C;;OAEG;IACU,qBAAqB,CACjC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GAClB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;CAqC9B"}
+{"version":3,"file":"EdgeWorker.d.ts","sourceRoot":"","sources":["../src/EdgeWorker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,EAGN,KAAK,KAAK,IAAI,WAAW,EACzB,MAAM,aAAa,CAAC;AAqBrB,OAAO,KAAK,EACX,iBAAiB,EACjB,gBAAgB,EAahB,gBAAgB,EAChB,2BAA2B,EAG3B,MAAM,YAAY,CAAC;AAcpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAe/D,OAAO,KAAK,EAAE,gBAAgB,EAA0B,MAAM,YAAY,CAAC;AAE3E,MAAM,CAAC,OAAO,WAAW,UAAU;IAClC,EAAE,CAAC,CAAC,SAAS,MAAM,gBAAgB,EAClC,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAC3B,IAAI,CAAC;IACR,IAAI,CAAC,CAAC,SAAS,MAAM,gBAAgB,EACpC,KAAK,EAAE,CAAC,EACR,GAAG,IAAI,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GACtC,OAAO,CAAC;CACX;AAED;;;;;GAKG;AACH,qBAAa,UAAW,SAAQ,YAAY;IAC3C,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,YAAY,CAA4C;IAChE,OAAO,CAAC,oBAAoB,CAA+C;IAC3E,OAAO,CAAC,aAAa,CAAwC;IAC7D,OAAO,CAAC,oBAAoB,CAAqC;IACjE,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,uBAAuB,CAA0B;IACzD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,yBAAyB,CAAkC;IACnE,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,aAAa,CAAC,CAAY;IAClC,OAAO,CAAC,UAAU,CAAC,CAAS;gBAEhB,MAAM,EAAE,gBAAgB;IAkLpC;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB5B;;OAEG;YACW,oBAAoB;IA8DlC;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA2C3B;;OAEG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIvC;;;;OAIG;YACW,yBAAyB;IA2GvC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;OAEG;YACW,kBAAkB;IAoChC;;OAEG;YACW,gBAAgB;IAuD9B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAkC/B;;OAEG;IACH,OAAO,CAAC,SAAS;IAIjB;;OAEG;YACW,kBAAkB;IAiEhC;;OAEG;YACW,0BAA0B;IA+DxC;;OAEG;YACW,yBAAyB;IAoEvC;;OAEG;IACH,OAAO,CAAC,WAAW;IAKnB;;OAEG;YACW,aAAa;IAiE3B;;OAEG;YACW,4BAA4B;IAgB1C;;;;OAIG;YACW,wBAAwB;IAuItC;;OAEG;YACW,uBAAuB;IAqCrC;;;;;;;OAOG;YACW,wBAAwB;IAmFtC;;;;;OAKG;YACW,gCAAgC;IAoR9C;;;;;OAKG;YACW,6BAA6B;IAuO3C;;;;OAIG;YACW,qBAAqB;IA0CnC;;OAEG;YACW,mBAAmB;IAejC;;;OAGG;YACW,iBAAiB;IAI/B;;OAEG;YACW,gBAAgB;IAa9B;;OAEG;YACW,+BAA+B;IAwE7C;;;;;;;OAOG;YACW,qBAAqB;IAwJnC;;;;;;;;OAQG;YACW,kBAAkB;IAoDhC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAUzB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAwB3B;;OAEG;YACW,YAAY;IA2B1B;;OAEG;YACW,mBAAmB;IAmDjC;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAUhC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAI1B;;;;OAIG;YACW,oBAAoB;IAmFlC;;;;;;;;OAQG;YACW,uBAAuB;IA4LrC;;OAEG;IACH,mBAAmB,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC;IAY3C;;;OAGG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG;IAKtC;;OAEG;IACG,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAChD,WAAW,EAAE,MAAM,CAAC;QACpB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,mBAAmB,EAAE,MAAM,CAAC;KAC5B,CAAC;IAKF;;OAEG;IACH,aAAa,IAAI,MAAM;IAIvB;;OAEG;IACH,mBAAmB,IAAI,MAAM;IAI7B;;;;OAIG;YAEW,uBAAuB;IAiFrC;;OAEG;IAeH;;OAEG;YACW,WAAW;IAsBzB;;OAEG;IASH;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAY7B;;;;;OAKG;YACW,wBAAwB;IA0JtC;;OAEG;YACW,kBAAkB;IAuDhC;;;;;;OAMG;YACW,0BAA0B;IAwFxC;;OAEG;YACW,mBAAmB;IASjC;;OAEG;IACH,OAAO,CAAC,6BAA6B;IA8CrC;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAoFlC;;OAEG;IACH,OAAO,CAAC,cAAc;IAsLtB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAoBzB;;;;;;;;;;;OAWG;YACW,kBAAkB;IAsChC;;;OAGG;YACW,cAAc;IAiB5B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAuB5B;;OAEG;YACW,qBAAqB;IAqGnC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAmC/B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAgB3B;;;OAGG;YACW,oBAAoB;IA0BlC;;OAEG;YACW,sBAAsB;IAsBpC;;OAEG;YACW,gCAAgC;IAW9C;;OAEG;YACW,kCAAkC;IA2ChD;;OAEG;IACH,OAAO,CAAC,uBAAuB;IA+G/B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA8C5B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAuDzB;;OAEG;IACI,wBAAwB,CAC9B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GAClB,GAAG,EAAE;IASR;;OAEG;YACW,kBAAkB;IAchC;;OAEG;YACW,kBAAkB;IAYhC;;OAEG;IACI,iBAAiB,IAAI,2BAA2B;IA8BvD;;OAEG;IACI,eAAe,CAAC,KAAK,EAAE,2BAA2B,GAAG,IAAI;IAoChE;;OAEG;YACW,yBAAyB;IAwCvC;;OAEG;YACW,8BAA8B;IAwC5C;;;OAGG;YACW,0BAA0B;IA0CxC;;;;;;;;;;;;;;;;;;OAkBG;YACW,8BAA8B;IAsE5C;;OAEG;YACW,gCAAgC;IA2G9C;;;;;;;;;;OAUG;IACG,mBAAmB,CACxB,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,gBAAgB,EAC5B,4BAA4B,EAAE,MAAM,EACpC,mBAAmB,EAAE,mBAAmB,EACxC,UAAU,EAAE,MAAM,EAClB,kBAAkB,GAAE,MAAW,EAC/B,YAAY,GAAE,OAAe,EAC7B,4BAA4B,GAAE,MAAM,EAAO,EAC3C,QAAQ,CAAC,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,EACtB,gBAAgB,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC;IAmHhB;;OAEG;YACW,iCAAiC;IA6C/C;;OAEG;IACU,qBAAqB,CACjC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GAClB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;CAqC9B"}

package/dist/EdgeWorker.js

@@ -5,9 +5,9 @@ import { fileURLToPath } from "node:url";
 import { LinearClient, } from "@linear/sdk";
 import { watch as chokidarWatch } from "chokidar";
 import { ClaudeRunner, createCyrusToolsServer, createImageToolsServer, createSoraToolsServer, getAllTools, getCoordinatorTools, getReadOnlyTools, getSafeTools, } from "cyrus-claude-runner";
-import { isAgentSessionCreatedWebhook, isAgentSessionPromptedWebhook, isIssueAssignedWebhook, isIssueCommentMentionWebhook, isIssueNewCommentWebhook, isIssueUnassignedWebhook, PersistenceManager, } from "cyrus-core";
-import { LinearWebhookClient } from "cyrus-linear-webhook-client";
-import { NdjsonClient } from "cyrus-ndjson-client";
+import { ConfigUpdater } from "cyrus-config-updater";
+import { DEFAULT_PROXY_URL, isAgentSessionCreatedWebhook, isAgentSessionPromptedWebhook, isIssueAssignedWebhook, isIssueCommentMentionWebhook, isIssueNewCommentWebhook, isIssueUnassignedWebhook, PersistenceManager, resolvePath, } from "cyrus-core";
+import { LinearEventTransport } from "cyrus-linear-event-transport";
 import { fileTypeFromBuffer } from "file-type";
 import { AgentSessionManager } from "./AgentSessionManager.js";
 import { ProcedureRouter, } from "./procedures/index.js";
@@ -23,7 +23,8 @@ export class EdgeWorker extends EventEmitter {
     repositories = new Map(); // repository 'id' (internal, stored in config.json) mapped to the full repo config
     agentSessionManagers = new Map(); // Maps repository ID to AgentSessionManager, which manages ClaudeRunners for a repo
     linearClients = new Map(); // one linear client per 'repository'
-    ndjsonClients = new Map(); // listeners for webhook events, one per linear token
+    linearEventTransport = null; // Single event transport for webhook delivery
+    configUpdater = null; // Single config updater for configuration updates
     persistenceManager;
     sharedApplicationServer;
     cyrusHome;
@@ -31,7 +32,6 @@ export class EdgeWorker extends EventEmitter {
     procedureRouter; // Intelligent workflow routing
     configWatcher; // File watcher for config.json
     configPath; // Path to config.json file
-    tokenToRepoIds = new Map(); // Maps Linear token to repository IDs using that token
     constructor(config) {
         super();
         this.config = config;
@@ -48,15 +48,28 @@ export class EdgeWorker extends EventEmitter {
         // Initialize shared application server
         const serverPort = config.serverPort || config.webhookPort || 3456;
         const serverHost = config.serverHost || "localhost";
-        this.sharedApplicationServer = new SharedApplicationServer(serverPort, serverHost, config.ngrokAuthToken, config.proxyUrl);
-        // Register OAuth callback handler if provided
-        if (config.handlers?.onOAuthCallback) {
-            this.sharedApplicationServer.registerOAuthCallbackHandler(config.handlers.onOAuthCallback);
-        }
-        // Initialize repositories
+        this.sharedApplicationServer = new SharedApplicationServer(serverPort, serverHost);
+        // Initialize repositories with path resolution
         for (const repo of config.repositories) {
             if (repo.isActive !== false) {
-                this.repositories.set(repo.id, repo);
+                // Resolve paths that may contain tilde (~) prefix
+                const resolvedRepo = {
+                    ...repo,
+                    repositoryPath: resolvePath(repo.repositoryPath),
+                    workspaceBaseDir: resolvePath(repo.workspaceBaseDir),
+                    mcpConfigPath: Array.isArray(repo.mcpConfigPath)
+                        ? repo.mcpConfigPath.map(resolvePath)
+                        : repo.mcpConfigPath
+                            ? resolvePath(repo.mcpConfigPath)
+                            : undefined,
+                    promptTemplatePath: repo.promptTemplatePath
+                        ? resolvePath(repo.promptTemplatePath)
+                        : undefined,
+                    openaiOutputDirectory: repo.openaiOutputDirectory
+                        ? resolvePath(repo.openaiOutputDirectory)
+                        : undefined,
+                };
+                this.repositories.set(repo.id, resolvedRepo);
                 // Create Linear client for this repository's workspace
                 const linearClient = new LinearClient({
                     accessToken: repo.linearToken,
@@ -123,77 +136,7 @@ export class EdgeWorker extends EventEmitter {
                 this.agentSessionManagers.set(repo.id, agentSessionManager);
             }
         }
-        // Group repositories by token to minimize NDJSON connections
-        const tokenToRepos = new Map();
-        for (const repo of this.repositories.values()) {
-            const repos = tokenToRepos.get(repo.linearToken) || [];
-            repos.push(repo);
-            tokenToRepos.set(repo.linearToken, repos);
-            // Track token-to-repo-id mapping for dynamic config updates
-            const repoIds = this.tokenToRepoIds.get(repo.linearToken) || [];
-            if (!repoIds.includes(repo.id)) {
-                repoIds.push(repo.id);
-            }
-            this.tokenToRepoIds.set(repo.linearToken, repoIds);
-        }
-        // Create one NDJSON client per unique token using shared application server
-        for (const [token, repos] of tokenToRepos) {
-            if (!repos || repos.length === 0)
-                continue;
-            const firstRepo = repos[0];
-            if (!firstRepo)
-                continue;
-            const primaryRepoId = firstRepo.id;
-            // Determine which client to use based on environment variable
-            const useLinearDirectWebhooks = process.env.LINEAR_DIRECT_WEBHOOKS?.toLowerCase().trim() === "true";
-            const clientConfig = {
-                proxyUrl: config.proxyUrl,
-                token: token,
-                name: repos.map((r) => r.name).join(", "), // Pass repository names
-                transport: "webhook",
-                // Use shared application server instead of individual servers
-                useExternalWebhookServer: true,
-                externalWebhookServer: this.sharedApplicationServer,
-                webhookPort: serverPort, // All clients use same port
-                webhookPath: "/webhook",
-                webhookHost: serverHost,
-                ...(config.baseUrl && { webhookBaseUrl: config.baseUrl }),
-                // Legacy fallback support
-                ...(!config.baseUrl &&
-                    config.webhookBaseUrl && { webhookBaseUrl: config.webhookBaseUrl }),
-                onConnect: () => this.handleConnect(primaryRepoId, repos),
-                onDisconnect: (reason) => this.handleDisconnect(primaryRepoId, repos, reason),
-                onError: (error) => this.handleError(error),
-            };
-            // Create the appropriate client based on configuration
-            const ndjsonClient = useLinearDirectWebhooks
-                ? new LinearWebhookClient({
-                    ...clientConfig,
-                    onWebhook: (payload) => {
-                        // Get fresh repositories for this token to avoid stale closures
-                        const freshRepos = this.getRepositoriesForToken(token);
-                        this.handleWebhook(payload, freshRepos);
-                    },
-                })
-                : new NdjsonClient(clientConfig);
-            // Set up webhook handler for NdjsonClient (LinearWebhookClient uses onWebhook in constructor)
-            if (!useLinearDirectWebhooks) {
-                ndjsonClient.on("webhook", (data) => {
-                    // Get fresh repositories for this token to avoid stale closures
-                    const freshRepos = this.getRepositoriesForToken(token);
-                    this.handleWebhook(data, freshRepos);
-                });
-            }
-            // Optional heartbeat logging (only for NdjsonClient)
-            if (process.env.DEBUG_EDGE === "true" && !useLinearDirectWebhooks) {
-                ndjsonClient.on("heartbeat", () => {
-                    console.log(`❤️ Heartbeat received for token ending in ...${token.slice(-4)}`);
-                });
-            }
-            // Store with the first repo's ID as the key (for error messages)
-            // But also store the token mapping for lookup
-            this.ndjsonClients.set(primaryRepoId, ndjsonClient);
-        }
+        // Components will be initialized and registered in start() method before server starts
     }
     /**
      * Start the edge worker
@@ -205,52 +148,53 @@ export class EdgeWorker extends EventEmitter {
         if (this.configPath) {
             this.startConfigWatcher();
         }
-        // Start shared application server first
+        // Initialize and register components BEFORE starting server (routes must be registered before listen())
+        await this.initializeComponents();
+        // Start shared application server (this also starts Cloudflare tunnel if CLOUDFLARE_TOKEN is set)
         await this.sharedApplicationServer.start();
-        // Connect all NDJSON clients
-        const connections = Array.from(this.ndjsonClients.entries()).map(async ([repoId, client]) => {
-            try {
-                await client.connect();
-            }
-            catch (error) {
-                const repoConfig = this.config.repositories.find((r) => r.id === repoId);
-                const repoName = repoConfig?.name || repoId;
-                // Check if it's an authentication error
-                if (error.isAuthError || error.code === "LINEAR_AUTH_FAILED") {
-                    console.error(`\n❌ Linear authentication failed for repository: ${repoName}`);
-                    console.error(`   Workspace: ${repoConfig?.linearWorkspaceName || repoConfig?.linearWorkspaceId || "Unknown"}`);
-                    console.error(`   Error: ${error.message}`);
-                    console.error(`\n   To fix this issue:`);
-                    console.error(`   1. Run: cyrus refresh-token`);
-                    console.error(`   2. Complete the OAuth flow in your browser`);
-                    console.error(`   3. The configuration will be automatically updated\n`);
-                    console.error(`   You can also check all tokens with: cyrus check-tokens\n`);
-                    // Continue with other repositories instead of failing completely
-                    return { repoId, success: false, error };
-                }
-                // For other errors, still log but with less guidance
-                console.error(`\n❌ Failed to connect repository: ${repoName}`);
-                console.error(`   Error: ${error.message}\n`);
-                return { repoId, success: false, error };
-            }
-            return { repoId, success: true };
+    }
+    /**
+     * Initialize and register components (routes) before server starts
+     */
+    async initializeComponents() {
+        // Get the first active repository for configuration
+        const firstRepo = Array.from(this.repositories.values())[0];
+        if (!firstRepo) {
+            throw new Error("No active repositories configured");
+        }
+        // 1. Create and register LinearEventTransport
+        const useDirectWebhooks = process.env.LINEAR_DIRECT_WEBHOOKS?.toLowerCase() === "true";
+        const verificationMode = useDirectWebhooks ? "direct" : "proxy";
+        // Get appropriate secret based on mode
+        const secret = useDirectWebhooks
+            ? process.env.LINEAR_WEBHOOK_SECRET || ""
+            : process.env.CYRUS_API_KEY || "";
+        this.linearEventTransport = new LinearEventTransport({
+            fastifyServer: this.sharedApplicationServer.getFastifyInstance(),
+            verificationMode,
+            secret,
         });
-        const results = await Promise.all(connections);
-        const failures = results.filter((r) => !r.success);
-        if (failures.length === this.ndjsonClients.size) {
-            // All connections failed
-            throw new Error("Failed to connect any repositories. Please check your configuration and Linear tokens.");
-        }
-        else if (failures.length > 0) {
-            // Some connections failed
-            console.warn(`\n⚠️  Connected ${results.length - failures.length} out of ${results.length} repositories`);
-            console.warn(`   The following repositories could not be connected:`);
-            failures.forEach((f) => {
-                const repoConfig = this.config.repositories.find((r) => r.id === f.repoId);
-                console.warn(`   - ${repoConfig?.name || f.repoId}`);
-            });
-            console.warn(`\n   Cyrus will continue running with the available repositories.\n`);
-        }
+        // Listen for webhook events
+        this.linearEventTransport.on("webhook", (payload) => {
+            // Get all active repositories for webhook handling
+            const repos = Array.from(this.repositories.values());
+            this.handleWebhook(payload, repos);
+        });
+        // Listen for errors
+        this.linearEventTransport.on("error", (error) => {
+            this.handleError(error);
+        });
+        // Register the /webhook endpoint
+        this.linearEventTransport.register();
+        console.log(`✅ Linear event transport registered (${verificationMode} mode)`);
+        console.log(`   Webhook endpoint: ${this.sharedApplicationServer.getWebhookUrl()}`);
+        // 2. Create and register ConfigUpdater
+        this.configUpdater = new ConfigUpdater(this.sharedApplicationServer.getFastifyInstance(), this.cyrusHome, process.env.CYRUS_API_KEY || "");
+        // Register config update routes
+        this.configUpdater.register();
+        console.log("✅ Config updater registered");
+        console.log("   Routes: /api/update/cyrus-config, /api/update/cyrus-env,");
+        console.log("           /api/update/repository, /api/test-mcp, /api/configure-mcp");
     }
     /**
      * Stop the edge worker
@@ -285,11 +229,10 @@ export class EdgeWorker extends EventEmitter {
                 }
             }
         }
-        // Disconnect all NDJSON clients
-        for (const client of this.ndjsonClients.values()) {
-            client.disconnect();
-        }
-        // Stop shared application server
+        // Clear event transport (no explicit cleanup needed, routes are removed when server stops)
+        this.linearEventTransport = null;
+        this.configUpdater = null;
+        // Stop shared application server (this also stops Cloudflare tunnel if running)
         await this.sharedApplicationServer.stop();
     }
     /**
@@ -298,21 +241,6 @@ export class EdgeWorker extends EventEmitter {
     setConfigPath(configPath) {
         this.configPath = configPath;
     }
-    /**
-     * Get fresh list of repositories for a given Linear token
-     * This ensures webhook handlers always work with current repository state
-     */
-    getRepositoriesForToken(token) {
-        const repoIds = this.tokenToRepoIds.get(token) || [];
-        const repos = [];
-        for (const repoId of repoIds) {
-            const repo = this.repositories.get(repoId);
-            if (repo) {
-                repos.push(repo);
-            }
-        }
-        return repos;
-    }
     /**
      * Handle resuming a parent session when a child session completes
      * This is the core logic used by the resume parent session callback
@@ -521,8 +449,25 @@ export class EdgeWorker extends EventEmitter {
             }
             try {
                 console.log(`➕ Adding repository: ${repo.name} (${repo.id})`);
+                // Resolve paths that may contain tilde (~) prefix
+                const resolvedRepo = {
+                    ...repo,
+                    repositoryPath: resolvePath(repo.repositoryPath),
+                    workspaceBaseDir: resolvePath(repo.workspaceBaseDir),
+                    mcpConfigPath: Array.isArray(repo.mcpConfigPath)
+                        ? repo.mcpConfigPath.map(resolvePath)
+                        : repo.mcpConfigPath
+                            ? resolvePath(repo.mcpConfigPath)
+                            : undefined,
+                    promptTemplatePath: repo.promptTemplatePath
+                        ? resolvePath(repo.promptTemplatePath)
+                        : undefined,
+                    openaiOutputDirectory: repo.openaiOutputDirectory
+                        ? resolvePath(repo.openaiOutputDirectory)
+                        : undefined,
+                };
                 // Add to internal map
-                this.repositories.set(repo.id, repo);
+                this.repositories.set(repo.id, resolvedRepo);
                 // Create Linear client
                 const linearClient = new LinearClient({
                     accessToken: repo.linearToken,
@@ -536,14 +481,6 @@ export class EdgeWorker extends EventEmitter {
                 }, undefined, // No resumeNextSubroutine callback for dynamically added repos
                 this.procedureRouter, this.sharedApplicationServer);
                 this.agentSessionManagers.set(repo.id, agentSessionManager);
-                // Update token-to-repo mapping
-                const repoIds = this.tokenToRepoIds.get(repo.linearToken) || [];
-                if (!repoIds.includes(repo.id)) {
-                    repoIds.push(repo.id);
-                }
-                this.tokenToRepoIds.set(repo.linearToken, repoIds);
-                // Set up webhook listener
-                await this.setupWebhookListener(repo);
                 console.log(`✅ Repository added successfully: ${repo.name}`);
             }
             catch (error) {
@@ -563,8 +500,25 @@ export class EdgeWorker extends EventEmitter {
                     continue;
                 }
                 console.log(`🔄 Updating repository: ${repo.name} (${repo.id})`);
+                // Resolve paths that may contain tilde (~) prefix
+                const resolvedRepo = {
+                    ...repo,
+                    repositoryPath: resolvePath(repo.repositoryPath),
+                    workspaceBaseDir: resolvePath(repo.workspaceBaseDir),
+                    mcpConfigPath: Array.isArray(repo.mcpConfigPath)
+                        ? repo.mcpConfigPath.map(resolvePath)
+                        : repo.mcpConfigPath
+                            ? resolvePath(repo.mcpConfigPath)
+                            : undefined,
+                    promptTemplatePath: repo.promptTemplatePath
+                        ? resolvePath(repo.promptTemplatePath)
+                        : undefined,
+                    openaiOutputDirectory: repo.openaiOutputDirectory
+                        ? resolvePath(repo.openaiOutputDirectory)
+                        : undefined,
+                };
                 // Update stored config
-                this.repositories.set(repo.id, repo);
+                this.repositories.set(repo.id, resolvedRepo);
                 // If token changed, recreate Linear client
                 if (oldRepo.linearToken !== repo.linearToken) {
                     console.log(`  🔑 Token changed, recreating Linear client`);
@@ -572,22 +526,6 @@ export class EdgeWorker extends EventEmitter {
                         accessToken: repo.linearToken,
                     });
                     this.linearClients.set(repo.id, linearClient);
-                    // Update token mapping
-                    const oldRepoIds = this.tokenToRepoIds.get(oldRepo.linearToken) || [];
-                    const filteredOldIds = oldRepoIds.filter((id) => id !== repo.id);
-                    if (filteredOldIds.length > 0) {
-                        this.tokenToRepoIds.set(oldRepo.linearToken, filteredOldIds);
-                    }
-                    else {
-                        this.tokenToRepoIds.delete(oldRepo.linearToken);
-                    }
-                    const newRepoIds = this.tokenToRepoIds.get(repo.linearToken) || [];
-                    if (!newRepoIds.includes(repo.id)) {
-                        newRepoIds.push(repo.id);
-                    }
-                    this.tokenToRepoIds.set(repo.linearToken, newRepoIds);
-                    // Reconnect webhook if needed
-                    await this.reconnectWebhook(oldRepo, repo);
                 }
                 // If active status changed
                 if (oldRepo.isActive !== repo.isActive) {
@@ -596,7 +534,6 @@ export class EdgeWorker extends EventEmitter {
                     }
                     else {
                         console.log(`  ▶️  Repository reactivated`);
-                        await this.setupWebhookListener(repo);
                     }
                 }
                 console.log(`✅ Repository updated successfully: ${repo.name}`);
@@ -651,17 +588,6 @@ export class EdgeWorker extends EventEmitter {
                 this.repositories.delete(repo.id);
                 this.linearClients.delete(repo.id);
                 this.agentSessionManagers.delete(repo.id);
-                // Update token mapping
-                const repoIds = this.tokenToRepoIds.get(repo.linearToken) || [];
-                const filteredIds = repoIds.filter((id) => id !== repo.id);
-                if (filteredIds.length > 0) {
-                    this.tokenToRepoIds.set(repo.linearToken, filteredIds);
-                }
-                else {
-                    this.tokenToRepoIds.delete(repo.linearToken);
-                }
-                // Clean up webhook listener if no other repos use the same token
-                await this.cleanupWebhookIfUnused(repo);
                 console.log(`✅ Repository removed successfully: ${repo.name}`);
             }
             catch (error) {
@@ -669,115 +595,6 @@ export class EdgeWorker extends EventEmitter {
             }
         }
     }
-    /**
-     * Set up webhook listener for a repository
-     */
-    async setupWebhookListener(repo) {
-        // Check if we already have a client for this token
-        const existingRepoIds = this.tokenToRepoIds.get(repo.linearToken) || [];
-        const existingClient = existingRepoIds.length > 0
-            ? this.ndjsonClients.get(existingRepoIds[0] || "")
-            : null;
-        if (existingClient) {
-            console.log(`  ℹ️  Reusing existing webhook connection for token ...${repo.linearToken.slice(-4)}`);
-            return;
-        }
-        // Create new NDJSON client for this token
-        const serverPort = this.config.serverPort || this.config.webhookPort || 3456;
-        const serverHost = this.config.serverHost || "localhost";
-        const useLinearDirectWebhooks = process.env.LINEAR_DIRECT_WEBHOOKS?.toLowerCase().trim() === "true";
-        const clientConfig = {
-            proxyUrl: this.config.proxyUrl,
-            token: repo.linearToken,
-            name: repo.name,
-            transport: "webhook",
-            useExternalWebhookServer: true,
-            externalWebhookServer: this.sharedApplicationServer,
-            webhookPort: serverPort,
-            webhookPath: "/webhook",
-            webhookHost: serverHost,
-            ...(this.config.baseUrl && { webhookBaseUrl: this.config.baseUrl }),
-            ...(!this.config.baseUrl &&
-                this.config.webhookBaseUrl && {
-                webhookBaseUrl: this.config.webhookBaseUrl,
-            }),
-            onConnect: () => this.handleConnect(repo.id, [repo]),
-            onDisconnect: (reason) => this.handleDisconnect(repo.id, [repo], reason),
-            onError: (error) => this.handleError(error),
-        };
-        const ndjsonClient = useLinearDirectWebhooks
-            ? new LinearWebhookClient({
-                ...clientConfig,
-                onWebhook: (payload) => {
-                    // Get fresh repositories for this token to avoid stale closures
-                    const freshRepos = this.getRepositoriesForToken(repo.linearToken);
-                    this.handleWebhook(payload, freshRepos);
-                },
-            })
-            : new NdjsonClient(clientConfig);
-        if (!useLinearDirectWebhooks) {
-            ndjsonClient.on("webhook", (data) => {
-                // Get fresh repositories for this token to avoid stale closures
-                const freshRepos = this.getRepositoriesForToken(repo.linearToken);
-                this.handleWebhook(data, freshRepos);
-            });
-        }
-        this.ndjsonClients.set(repo.id, ndjsonClient);
-        // Connect the client
-        try {
-            await ndjsonClient.connect();
-            console.log(`  ✅ Webhook listener connected for ${repo.name}`);
-        }
-        catch (error) {
-            console.error(`  ❌ Failed to connect webhook listener:`, error);
-        }
-    }
-    /**
-     * Reconnect webhook when token changes
-     */
-    async reconnectWebhook(oldRepo, newRepo) {
-        console.log(`  🔌 Reconnecting webhook due to token change`);
-        // Disconnect old client if no other repos use it
-        await this.cleanupWebhookIfUnused(oldRepo);
-        // Set up new connection
-        await this.setupWebhookListener(newRepo);
-    }
-    /**
-     * Clean up webhook listener if no other repositories use the token
-     */
-    async cleanupWebhookIfUnused(repo) {
-        const repoIds = this.tokenToRepoIds.get(repo.linearToken) || [];
-        const otherRepos = repoIds.filter((id) => id !== repo.id);
-        if (otherRepos.length === 0) {
-            // No other repos use this token, safe to disconnect
-            const client = this.ndjsonClients.get(repo.id);
-            if (client) {
-                console.log(`  🔌 Disconnecting webhook for token ...${repo.linearToken.slice(-4)}`);
-                client.disconnect();
-                this.ndjsonClients.delete(repo.id);
-            }
-        }
-        else {
-            console.log(`  ℹ️  Token still used by ${otherRepos.length} other repository(ies), keeping connection`);
-        }
-    }
-    /**
-     * Handle connection established
-     */
-    handleConnect(clientId, repos) {
-        // Get the token for backward compatibility with events
-        const token = repos[0]?.linearToken || clientId;
-        this.emit("connected", token);
-        // Connection logged by CLI app event handler
-    }
-    /**
-     * Handle disconnection
-     */
-    handleDisconnect(clientId, repos, reason) {
-        // Get the token for backward compatibility with events
-        const token = repos[0]?.linearToken || clientId;
-        this.emit("disconnected", token, reason);
-    }
     /**
      * Handle errors
      */
@@ -1949,29 +1766,28 @@ ${newComment ? `New comment to address:\n${newComment.body}\n\n` : ""}Please ana
      */
     getConnectionStatus() {
         const status = new Map();
-        for (const [repoId, client] of this.ndjsonClients) {
-            status.set(repoId, client.isConnected());
+        // Single event transport is "connected" if it exists
+        if (this.linearEventTransport) {
+            // Mark all repositories as connected since they share the single transport
+            for (const repoId of this.repositories.keys()) {
+                status.set(repoId, true);
+            }
         }
         return status;
     }
     /**
-     * Get NDJSON client by token (for testing purposes)
+     * Get event transport (for testing purposes)
      * @internal
      */
-    _getClientByToken(token) {
-        for (const [repoId, client] of this.ndjsonClients) {
-            const repo = this.repositories.get(repoId);
-            if (repo?.linearToken === token) {
-                return client;
-            }
-        }
-        return undefined;
+    _getClientByToken(_token) {
+        // Return the single shared event transport
+        return this.linearEventTransport;
     }
     /**
      * Start OAuth flow using the shared application server
      */
     async startOAuthFlow(proxyUrl) {
-        const oauthProxyUrl = proxyUrl || this.config.proxyUrl;
+        const oauthProxyUrl = proxyUrl || this.config.proxyUrl || DEFAULT_PROXY_URL;
         return this.sharedApplicationServer.startOAuthFlow(oauthProxyUrl);
     }
     /**