npm - github-issue-tower-defence-management - Versions diffs - 1.128.0 → 1.129.0 - Mend

github-issue-tower-defence-management 1.128.0 → 1.129.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (43) hide show

package/src/adapter/entry-points/console/ui-dist/index.html CHANGED Viewed

@@ -4,7 +4,7 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>TDPM Console</title>
-    <script type="module" crossorigin src="/assets/index-8H0HejYa.js"></script>
+    <script type="module" crossorigin src="/assets/index-Dr5qin37.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-N9M1qhkw.css">
   </head>
   <body>

package/src/adapter/entry-points/console/webServer.test.ts CHANGED Viewed

@@ -6,11 +6,13 @@ import { mock } from 'jest-mock-extended';
 import {
   DEFAULT_WEB_PORT,
   CONSOLE_TOKEN_HEADER,
+  CONSOLE_TOKEN_COOKIE,
   hasDotSegment,
   requiresToken,
   isTokenValid,
   isConsoleAppRoute,
   extractProvidedToken,
+  extractCookieToken,
   resolveFlatInTmuxFilePath,
   resolveDashboardFilePath,
   startWebServer,
@@ -109,16 +111,53 @@ describe('webServer pure helpers', () => {
   describe('extractProvidedToken', () => {
     it('prefers the query token', () => {
-      expect(extractProvidedToken('fromQuery', 'fromHeader')).toBe('fromQuery');
+      expect(
+        extractProvidedToken('fromQuery', 'fromHeader', 'fromCookie'),
+      ).toBe('fromQuery');
     });
-    it('falls back to the header token', () => {
-      expect(extractProvidedToken(null, 'fromHeader')).toBe('fromHeader');
+    it('falls back to the header token before the cookie token', () => {
+      expect(extractProvidedToken(null, 'fromHeader', 'fromCookie')).toBe(
+        'fromHeader',
+      );
+    });
+    it('falls back to the cookie token when query and header are absent', () => {
+      expect(extractProvidedToken(null, undefined, 'fromCookie')).toBe(
+        'fromCookie',
+      );
+    });
+    it('returns null when none is present', () => {
+      expect(extractProvidedToken(null, undefined, null)).toBeNull();
+      expect(extractProvidedToken('', undefined, '')).toBeNull();
+    });
+  });
+  describe('extractCookieToken', () => {
+    it('reads the token cookie value from a cookie header', () => {
+      expect(extractCookieToken(`${CONSOLE_TOKEN_COOKIE}=cookie-value`)).toBe(
+        'cookie-value',
+      );
+    });
+    it('reads the token cookie when other cookies are present', () => {
+      expect(
+        extractCookieToken(
+          `other=1; ${CONSOLE_TOKEN_COOKIE}=cookie-value; a=b`,
+        ),
+      ).toBe('cookie-value');
     });
-    it('returns null when neither is present', () => {
-      expect(extractProvidedToken(null, undefined)).toBeNull();
-      expect(extractProvidedToken('', undefined)).toBeNull();
+    it('decodes a percent-encoded cookie value', () => {
+      expect(extractCookieToken(`${CONSOLE_TOKEN_COOKIE}=a%20b`)).toBe('a b');
+    });
+    it('returns null when the token cookie is absent, empty, or undefined', () => {
+      expect(extractCookieToken('other=1')).toBeNull();
+      expect(extractCookieToken(`${CONSOLE_TOKEN_COOKIE}=`)).toBeNull();
+      expect(extractCookieToken(undefined)).toBeNull();
+      expect(extractCookieToken('')).toBeNull();
     });
   });
 });
@@ -1618,3 +1657,241 @@ describe('webServer image proxy', () => {
     }
   });
 });
+describe('webServer token cookie redirect', () => {
+  const testToken = 'integration-test-token-value';
+  const closeServer = (server: http.Server): Promise<void> =>
+    new Promise((resolve, reject) => {
+      server.close((error) => {
+        if (error) {
+          reject(error);
+          return;
+        }
+        resolve();
+      });
+    });
+  const requestServer = (
+    server: http.Server,
+    requestPath: string,
+    headers: http.OutgoingHttpHeaders = {},
+  ): Promise<{
+    statusCode: number;
+    body: string;
+    location: string | undefined;
+    setCookie: string[] | undefined;
+    referrerPolicy: string | string[] | undefined;
+    cacheControl: string | undefined;
+  }> => {
+    const address = server.address();
+    if (address === null || typeof address === 'string') {
+      throw new Error('server is not listening on a TCP port');
+    }
+    const port = address.port;
+    return new Promise((resolve, reject) => {
+      const httpRequest = http.request(
+        { host: '127.0.0.1', port, path: requestPath, headers },
+        (response) => {
+          const chunks: Uint8Array[] = [];
+          response.on('data', (chunk: Uint8Array) => chunks.push(chunk));
+          response.on('end', () => {
+            resolve({
+              statusCode: response.statusCode ?? 0,
+              body: Buffer.concat(chunks).toString('utf-8'),
+              location: response.headers['location'],
+              setCookie: response.headers['set-cookie'],
+              referrerPolicy: response.headers['referrer-policy'],
+              cacheControl: response.headers['cache-control'],
+            });
+          });
+        },
+      );
+      httpRequest.on('error', reject);
+      httpRequest.end();
+    });
+  };
+  const startWithUiDist = async (): Promise<{
+    server: http.Server;
+    tmpDir: string;
+  }> => {
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'console-server-'));
+    const uiDistDir = path.join(tmpDir, 'ui-dist');
+    fs.mkdirSync(uiDistDir, { recursive: true });
+    fs.writeFileSync(
+      path.join(uiDistDir, 'index.html'),
+      '<!DOCTYPE html><title>spa</title><div id="root"></div>',
+    );
+    const server = await startWebServer({
+      accessToken: testToken,
+      uiDistDir,
+      consoleDataOutputDir: null,
+      inTmuxDataDir: null,
+      dashboardDir: null,
+      dashboardDataDir: null,
+      dashboardProjectNames: [],
+      port: 0,
+    });
+    return { server, tmpDir };
+  };
+  const firstSetCookie = (setCookie: string[] | undefined): string => {
+    expect(setCookie).toBeDefined();
+    expect(setCookie).toHaveLength(1);
+    return (setCookie ?? [''])[0];
+  };
+  it('redirects a per-project app route carrying ?k= to the keyless path and sets an HttpOnly SameSite=Strict cookie', async () => {
+    const { server, tmpDir } = await startWithUiDist();
+    try {
+      const response = await requestServer(
+        server,
+        `/projects/umino?k=${testToken}`,
+      );
+      expect(response.statusCode).toBe(302);
+      expect(response.location).toBe('/projects/umino');
+      expect(response.body).not.toContain(testToken);
+      const cookie = firstSetCookie(response.setCookie);
+      expect(cookie).toContain(`${CONSOLE_TOKEN_COOKIE}=${testToken}`);
+      expect(cookie).toContain('HttpOnly');
+      expect(cookie).toContain('SameSite=Strict');
+      expect(cookie).toContain('Path=/');
+      expect(response.referrerPolicy).toBe('no-referrer');
+    } finally {
+      await closeServer(server);
+      fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  });
+  it('redirects a per-project tab route carrying ?k= and preserves other query parameters', async () => {
+    const { server, tmpDir } = await startWithUiDist();
+    try {
+      const response = await requestServer(
+        server,
+        `/projects/xmile/prs?k=${testToken}&foo=bar`,
+      );
+      expect(response.statusCode).toBe(302);
+      expect(response.location).toBe('/projects/xmile/prs?foo=bar');
+      const cookie = firstSetCookie(response.setCookie);
+      expect(cookie).toContain(`${CONSOLE_TOKEN_COOKIE}=${testToken}`);
+    } finally {
+      await closeServer(server);
+      fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  });
+  it('redirects the root and index.html routes carrying ?k= to a keyless path', async () => {
+    const { server, tmpDir } = await startWithUiDist();
+    try {
+      const root = await requestServer(server, `/?k=${testToken}`);
+      expect(root.statusCode).toBe(302);
+      expect(root.location).toBe('/');
+      expect(firstSetCookie(root.setCookie)).toContain(
+        `${CONSOLE_TOKEN_COOKIE}=${testToken}`,
+      );
+      const indexHtml = await requestServer(
+        server,
+        `/index.html?k=${testToken}`,
+      );
+      expect(indexHtml.statusCode).toBe(302);
+      expect(indexHtml.location).toBe('/index.html');
+    } finally {
+      await closeServer(server);
+      fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  });
+  it('serves the app route without a token and never leaks a token in the URL', async () => {
+    const { server, tmpDir } = await startWithUiDist();
+    try {
+      const response = await requestServer(server, '/projects/umino');
+      expect(response.statusCode).toBe(200);
+      expect(response.body).toContain('spa');
+      expect(response.setCookie).toBeUndefined();
+      expect(response.referrerPolicy).toBe('no-referrer');
+    } finally {
+      await closeServer(server);
+      fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  });
+  it('sets Referrer-Policy: no-referrer on the console HTML responses', async () => {
+    const { server, tmpDir } = await startWithUiDist();
+    try {
+      const root = await requestServer(server, '/');
+      expect(root.statusCode).toBe(200);
+      expect(root.referrerPolicy).toBe('no-referrer');
+      const projectTab = await requestServer(server, '/projects/xmile/prs');
+      expect(projectTab.statusCode).toBe(200);
+      expect(projectTab.referrerPolicy).toBe('no-referrer');
+    } finally {
+      await closeServer(server);
+      fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  });
+  it('authenticates a data list request through the cookie without a token in the URL', async () => {
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'console-server-'));
+    const dataDir = path.join(tmpDir, 'data');
+    const listDir = path.join(dataDir, 'umino', 'prs');
+    fs.mkdirSync(listDir, { recursive: true });
+    fs.writeFileSync(
+      path.join(listDir, 'list.json'),
+      JSON.stringify({ pjcode: 'umino', items: [] }),
+    );
+    const server = await startWebServer({
+      accessToken: testToken,
+      uiDistDir: path.join(tmpDir, 'ui-dist'),
+      consoleDataOutputDir: dataDir,
+      inTmuxDataDir: null,
+      dashboardDir: null,
+      dashboardDataDir: null,
+      dashboardProjectNames: [],
+      port: 0,
+    });
+    try {
+      const withCookie = await requestServer(
+        server,
+        '/projects/umino/prs/list.json',
+        { Cookie: `${CONSOLE_TOKEN_COOKIE}=${testToken}` },
+      );
+      expect(withCookie.statusCode).toBe(200);
+      expect(JSON.parse(withCookie.body)).toEqual({
+        pjcode: 'umino',
+        items: [],
+      });
+    } finally {
+      await closeServer(server);
+      fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  });
+  it('rejects a data or api request when no token and no cookie are present', async () => {
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'console-server-'));
+    const server = await startWebServer({
+      accessToken: testToken,
+      uiDistDir: path.join(tmpDir, 'ui-dist'),
+      consoleDataOutputDir: null,
+      inTmuxDataDir: null,
+      dashboardDir: null,
+      dashboardDataDir: null,
+      dashboardProjectNames: [],
+      port: 0,
+    });
+    try {
+      const noToken = await requestServer(server, '/data/situation.json');
+      expect(noToken.statusCode).toBe(401);
+      const wrongCookie = await requestServer(server, '/api/review', {
+        Cookie: `${CONSOLE_TOKEN_COOKIE}=wrong-token`,
+      });
+      expect(wrongCookie.statusCode).toBe(401);
+    } finally {
+      await closeServer(server);
+      fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  });
+});

package/src/adapter/entry-points/console/webServer.ts CHANGED Viewed

@@ -41,6 +41,8 @@ export const DEFAULT_DASHBOARD_PROJECT_NAMES = DASHBOARD_PROJECT_NAMES;
 export const CONSOLE_TOKEN_HEADER = 'x-pv-token';
+export const CONSOLE_TOKEN_COOKIE = 'pv_token';
 const PLACEHOLDER_INDEX_HTML = `<!DOCTYPE html>
 <html lang="en">
   <head>
@@ -112,9 +114,34 @@ export const isTokenValid = (
   providedToken: string | null,
 ): boolean => providedToken !== null && providedToken === expectedToken;
+export const extractCookieToken = (
+  cookieHeader: string | undefined,
+): string | null => {
+  if (typeof cookieHeader !== 'string' || cookieHeader.length === 0) {
+    return null;
+  }
+  for (const segment of cookieHeader.split(';')) {
+    const separatorIndex = segment.indexOf('=');
+    if (separatorIndex === -1) {
+      continue;
+    }
+    const name = segment.slice(0, separatorIndex).trim();
+    if (name !== CONSOLE_TOKEN_COOKIE) {
+      continue;
+    }
+    const value = segment.slice(separatorIndex + 1).trim();
+    if (value.length === 0) {
+      return null;
+    }
+    return decodeURIComponent(value);
+  }
+  return null;
+};
 export const extractProvidedToken = (
   queryToken: string | string[] | null,
   headerToken: string | string[] | undefined,
+  cookieToken: string | null,
 ): string | null => {
   if (typeof queryToken === 'string' && queryToken.length > 0) {
     return queryToken;
@@ -122,9 +149,24 @@ export const extractProvidedToken = (
   if (typeof headerToken === 'string' && headerToken.length > 0) {
     return headerToken;
   }
+  if (cookieToken !== null && cookieToken.length > 0) {
+    return cookieToken;
+  }
   return null;
 };
+export const buildTokenCookie = (token: string): string =>
+  `${CONSOLE_TOKEN_COOKIE}=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Strict`;
+export const buildKeylessLocation = (requestUrl: URL): string => {
+  const params = new URLSearchParams(requestUrl.searchParams);
+  params.delete('k');
+  const query = params.toString();
+  return query.length > 0
+    ? `${requestUrl.pathname}?${query}`
+    : requestUrl.pathname;
+};
 const contentTypeForPath = (filePath: string): string => {
   const extension = path.extname(filePath).toLowerCase();
   return MIME_TYPES[extension] ?? 'application/octet-stream';
@@ -245,6 +287,7 @@ const serveBootstrapIndex = (response: http.ServerResponse): void => {
   response.writeHead(200, {
     'Content-Type': 'text/html; charset=utf-8',
     'Cache-Control': 'no-store',
+    'Referrer-Policy': 'no-referrer',
   });
   response.end(PLACEHOLDER_INDEX_HTML);
 };
@@ -263,10 +306,25 @@ const serveIndexHtml = (
   response.writeHead(200, {
     'Content-Type': 'text/html; charset=utf-8',
     'Cache-Control': 'no-store',
+    'Referrer-Policy': 'no-referrer',
   });
   response.end(indexContent);
 };
+const redirectStrippingToken = (
+  response: http.ServerResponse,
+  requestUrl: URL,
+  token: string,
+): void => {
+  response.writeHead(302, {
+    Location: buildKeylessLocation(requestUrl),
+    'Set-Cookie': buildTokenCookie(token),
+    'Referrer-Policy': 'no-referrer',
+    'Cache-Control': 'no-store',
+  });
+  response.end();
+};
 const sendJson = (
   response: http.ServerResponse,
   statusCode: number,
@@ -626,6 +684,7 @@ export const handleWebRequest = async (
     const providedToken = extractProvidedToken(
       requestUrl.searchParams.get('k'),
       request.headers[CONSOLE_TOKEN_HEADER],
+      extractCookieToken(request.headers.cookie),
     );
     if (!isTokenValid(options.accessToken, providedToken)) {
       sendUnauthorized(response);
@@ -646,6 +705,11 @@ export const handleWebRequest = async (
     requestPath === '/index.html' ||
     isConsoleAppRoute(requestPath)
   ) {
+    const queryToken = requestUrl.searchParams.get('k');
+    if (queryToken !== null && queryToken.length > 0) {
+      redirectStrippingToken(response, requestUrl, queryToken);
+      return;
+    }
     serveIndexHtml(options, response);
     return;
   }

package/src/domain/entities/WorkflowStatus.ts CHANGED Viewed

@@ -6,6 +6,7 @@ export const PREPARATION_STATUS_NAME = 'Preparation';
 export const FAILED_PREPARATION_STATUS_NAME = 'Failed Preparation';
 export const AWAITING_QUALITY_CHECK_STATUS_NAME = 'Awaiting Quality Check';
 export const TODO_STATUS_NAME = 'Todo by human';
+export const TODO_BY_AGENT_STATUS_NAME = 'Todo by agent';
 export const PC_TODO_STATUS_NAME = 'PC Todo';
 export const IN_TMUX_STATUS_NAME = 'In Tmux by human';
 export const IN_TMUX_BY_AGENT_STATUS_NAME = 'In Tmux by agent';
@@ -47,6 +48,10 @@ export const REQUIRED_WORKFLOW_STATUSES: WorkflowStatusDefinition[] = [
     name: TODO_STATUS_NAME,
     color: 'PINK',
   },
+  {
+    name: TODO_BY_AGENT_STATUS_NAME,
+    color: 'BLUE',
+  },
   {
     name: IN_TMUX_STATUS_NAME,
     color: 'RED',

package/src/domain/usecases/SetupTowerDefenceProjectUseCase.test.ts CHANGED Viewed

@@ -19,6 +19,7 @@ import {
   PC_TODO_STATUS_NAME,
   PREPARATION_STATUS_NAME,
   REQUIRED_WORKFLOW_STATUSES,
+  TODO_BY_AGENT_STATUS_NAME,
   TODO_STATUS_NAME,
 } from '../entities/WorkflowStatus';
@@ -77,7 +78,7 @@ const buildIssue = (overrides: Partial<Issue>): Issue => ({
 });
 describe('SetupTowerDefenceProjectUseCase', () => {
-  it('should define exactly the 10 required statuses in the documented order with the documented colors and no descriptions', () => {
+  it('should define exactly the 11 required statuses in the documented order with the documented colors and no descriptions', () => {
     expect(REQUIRED_WORKFLOW_STATUSES).toEqual([
       { name: DEFAULT_STATUS_NAME, color: 'ORANGE' },
       { name: AWAITING_WORKSPACE_STATUS_NAME, color: 'BLUE' },
@@ -85,6 +86,7 @@ describe('SetupTowerDefenceProjectUseCase', () => {
       { name: FAILED_PREPARATION_STATUS_NAME, color: 'RED' },
       { name: AWAITING_QUALITY_CHECK_STATUS_NAME, color: 'GREEN' },
       { name: TODO_STATUS_NAME, color: 'PINK' },
+      { name: TODO_BY_AGENT_STATUS_NAME, color: 'BLUE' },
       { name: IN_TMUX_STATUS_NAME, color: 'RED' },
       { name: IN_TMUX_BY_AGENT_STATUS_NAME, color: 'YELLOW' },
       { name: DONE_STATUS_NAME, color: 'PURPLE' },
@@ -253,6 +255,12 @@ describe('SetupTowerDefenceProjectUseCase', () => {
           color: 'PINK',
           description: '',
         },
+        {
+          id: null,
+          name: TODO_BY_AGENT_STATUS_NAME,
+          color: 'BLUE',
+          description: '',
+        },
         {
           id: null,
           name: IN_TMUX_STATUS_NAME,
@@ -324,6 +332,7 @@ describe('SetupTowerDefenceProjectUseCase', () => {
       FAILED_PREPARATION_STATUS_NAME,
       AWAITING_QUALITY_CHECK_STATUS_NAME,
       TODO_STATUS_NAME,
+      TODO_BY_AGENT_STATUS_NAME,
       IN_TMUX_STATUS_NAME,
       IN_TMUX_BY_AGENT_STATUS_NAME,
       DONE_STATUS_NAME,
@@ -432,12 +441,90 @@ describe('SetupTowerDefenceProjectUseCase', () => {
     const [, payload] = mockProjectRepository.updateStatusList.mock.calls[0];
     const inTmuxEntry = payload.find((s) => s.name === IN_TMUX_STATUS_NAME);
     expect(inTmuxEntry).toBeDefined();
-    expect(inTmuxEntry?.id).toBe('id-6');
+    expect(inTmuxEntry?.id).toBe('id-7');
     expect(payload.some((s) => s.name === LEGACY_IN_TMUX_STATUS_NAME)).toBe(
       false,
     );
   });
+  it('should create the "Todo by agent" status with blue color when it is missing', async () => {
+    const mockProjectRepository =
+      mock<Pick<ProjectRepository, 'getByUrl' | 'updateStatusList'>>();
+    const mockIssueRepository =
+      mock<Pick<IssueRepository, 'getAllIssues' | 'updateStatus'>>();
+    const statuses = buildCanonicalStatuses().filter(
+      (s) => s.name !== TODO_BY_AGENT_STATUS_NAME,
+    );
+    const project = buildProject(statuses);
+    mockProjectRepository.getByUrl.mockResolvedValue(project);
+    mockProjectRepository.updateStatusList.mockResolvedValue([]);
+    mockIssueRepository.getAllIssues.mockResolvedValue({
+      project: mock<Project>(),
+      issues: [],
+      cacheUsed: false,
+    });
+    const useCase = new SetupTowerDefenceProjectUseCase(
+      mockProjectRepository,
+      mockIssueRepository,
+    );
+    await useCase.run({ projectUrl: project.url });
+    expect(mockProjectRepository.updateStatusList).toHaveBeenCalledTimes(1);
+    const [, payload] = mockProjectRepository.updateStatusList.mock.calls[0];
+    const todoByAgentEntry = payload.find(
+      (s) => s.name === TODO_BY_AGENT_STATUS_NAME,
+    );
+    expect(todoByAgentEntry).toBeDefined();
+    expect(todoByAgentEntry?.id).toBeNull();
+    expect(todoByAgentEntry?.color).toBe('BLUE');
+    const names = payload.map((s) => s.name);
+    expect(names.indexOf(TODO_BY_AGENT_STATUS_NAME)).toBe(
+      names.indexOf(TODO_STATUS_NAME) + 1,
+    );
+  });
+  it('should leave an already-present "Todo by agent" option unchanged by reusing its existing option ID', async () => {
+    const mockProjectRepository =
+      mock<Pick<ProjectRepository, 'getByUrl' | 'updateStatusList'>>();
+    const mockIssueRepository =
+      mock<Pick<IssueRepository, 'getAllIssues' | 'updateStatus'>>();
+    const statuses = buildCanonicalStatuses().map((s) => {
+      if (s.name === TODO_BY_AGENT_STATUS_NAME) {
+        return { ...s, id: 'preexisting-todo-agent-id' };
+      }
+      if (s.name === DEFAULT_STATUS_NAME) {
+        return { ...s, description: 'stale description' };
+      }
+      return s;
+    });
+    const project = buildProject(statuses);
+    mockProjectRepository.getByUrl.mockResolvedValue(project);
+    mockProjectRepository.updateStatusList.mockResolvedValue([]);
+    mockIssueRepository.getAllIssues.mockResolvedValue({
+      project: mock<Project>(),
+      issues: [],
+      cacheUsed: false,
+    });
+    const useCase = new SetupTowerDefenceProjectUseCase(
+      mockProjectRepository,
+      mockIssueRepository,
+    );
+    await useCase.run({ projectUrl: project.url });
+    expect(mockProjectRepository.updateStatusList).toHaveBeenCalledTimes(1);
+    const [, payload] = mockProjectRepository.updateStatusList.mock.calls[0];
+    const todoByAgentEntry = payload.find(
+      (s) => s.name === TODO_BY_AGENT_STATUS_NAME,
+    );
+    expect(todoByAgentEntry?.id).toBe('preexisting-todo-agent-id');
+    expect(todoByAgentEntry?.color).toBe('BLUE');
+    expect(
+      payload.filter((s) => s.name === TODO_BY_AGENT_STATUS_NAME),
+    ).toHaveLength(1);
+  });
   it('should create the "In Tmux by agent" status with yellow color when it is missing', async () => {
     const mockProjectRepository =
       mock<Pick<ProjectRepository, 'getByUrl' | 'updateStatusList'>>();
@@ -627,6 +714,7 @@ describe('SetupTowerDefenceProjectUseCase', () => {
       FAILED_PREPARATION_STATUS_NAME,
       AWAITING_QUALITY_CHECK_STATUS_NAME,
       TODO_STATUS_NAME,
+      TODO_BY_AGENT_STATUS_NAME,
       IN_TMUX_STATUS_NAME,
       IN_TMUX_BY_AGENT_STATUS_NAME,
       DONE_STATUS_NAME,
@@ -764,6 +852,7 @@ describe('SetupTowerDefenceProjectUseCase', () => {
       FAILED_PREPARATION_STATUS_NAME,
       AWAITING_QUALITY_CHECK_STATUS_NAME,
       TODO_STATUS_NAME,
+      TODO_BY_AGENT_STATUS_NAME,
       IN_TMUX_STATUS_NAME,
       IN_TMUX_BY_AGENT_STATUS_NAME,
       DONE_STATUS_NAME,
@@ -917,6 +1006,7 @@ describe('SetupTowerDefenceProjectUseCase', () => {
       FAILED_PREPARATION_STATUS_NAME,
       AWAITING_QUALITY_CHECK_STATUS_NAME,
       TODO_STATUS_NAME,
+      TODO_BY_AGENT_STATUS_NAME,
       IN_TMUX_STATUS_NAME,
       IN_TMUX_BY_AGENT_STATUS_NAME,
       DONE_STATUS_NAME,

package/src/domain/usecases/console/GenerateConsoleListsUseCase.test.ts CHANGED Viewed

@@ -23,6 +23,7 @@ const STATUS_OPTIONS: FieldOption[] = [
   storyOption('st-failed', 'Failed Preparation', 'RED'),
   storyOption('st-aqc', 'Awaiting Quality Check', 'GREEN'),
   storyOption('st-todo', 'Todo by human', 'PINK'),
+  storyOption('st-todo-agent', 'Todo by agent', 'BLUE'),
   storyOption('st-tmux', 'In Tmux by human', 'RED'),
   storyOption('st-tmux-agent', 'In Tmux by agent', 'YELLOW'),
   storyOption('st-done', 'Done', 'PURPLE'),
@@ -430,6 +431,7 @@ describe('GenerateConsoleListsUseCase', () => {
         'Unread',
         'In Tmux by human',
         'In Tmux by agent',
+        'Todo by agent',
       ]) {
         expect(names).not.toContain(excluded);
       }

package/src/domain/usecases/console/GenerateConsoleListsUseCase.ts CHANGED Viewed

@@ -146,6 +146,7 @@ export class GenerateConsoleListsUseCase {
           'unread',
           'in tmux by human',
           'in tmux by agent',
+          'todo by agent',
         ],
       ),
       'todo-by-human': buildStatusTab(

package/types/adapter/entry-points/console/webServer.d.ts CHANGED Viewed

@@ -6,11 +6,15 @@ import { ImageFetcher } from './consoleImageProxy';
 export declare const DEFAULT_WEB_PORT = 9981;
 export declare const DEFAULT_DASHBOARD_PROJECT_NAMES: string[];
 export declare const CONSOLE_TOKEN_HEADER = "x-pv-token";
+export declare const CONSOLE_TOKEN_COOKIE = "pv_token";
 export declare const hasDotSegment: (requestPath: string) => boolean;
 export declare const requiresToken: (requestPath: string) => boolean;
 export declare const isConsoleAppRoute: (requestPath: string) => boolean;
 export declare const isTokenValid: (expectedToken: string, providedToken: string | null) => boolean;
-export declare const extractProvidedToken: (queryToken: string | string[] | null, headerToken: string | string[] | undefined) => string | null;
+export declare const extractCookieToken: (cookieHeader: string | undefined) => string | null;
+export declare const extractProvidedToken: (queryToken: string | string[] | null, headerToken: string | string[] | undefined, cookieToken: string | null) => string | null;
+export declare const buildTokenCookie: (token: string) => string;
+export declare const buildKeylessLocation: (requestUrl: URL) => string;
 export type WebServerOptions = {
     accessToken: string;
     uiDistDir: string;

package/types/adapter/entry-points/console/webServer.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"webServer.d.ts","sourceRoot":"","sources":["../../../../src/adapter/entry-points/console/webServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,6DAA6D,CAAC;AAM9F,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EAQvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,sBAAsB,EACtB,sBAAsB,EAMvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAqB,MAAM,qBAAqB,CAAC;AAOtE,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,eAAO,MAAM,+BAA+B,UAA0B,CAAC;AAEvE,eAAO,MAAM,oBAAoB,eAAe,CAAC;~~AAmCjD~~,eAAO,MAAM,aAAa,GAAI,aAAa,MAAM,KAAG,OAGiB,CAAC;AAEtE,eAAO,MAAM,aAAa,GAAI,aAAa,MAAM,KAAG,OAGrB,CAAC;AAIhC,eAAO,MAAM,iBAAiB,GAAI,aAAa,MAAM,KAAG,OAmBvD,CAAC;AAEF,eAAO,MAAM,YAAY,GACvB,eAAe,MAAM,EACrB,eAAe,MAAM,GAAG,IAAI,KAC3B,OAAoE,CAAC;AAExE,eAAO,MAAM,oBAAoB,GAC/B,YAAY,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,EACpC,aAAa,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,~~KACzC~~,MAAM,GAAG,~~IAQX~~,CAAC;AAuCF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,cAAc,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/C,kBAAkB,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACnD,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACnD,sBAAsB,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;CACxD,CAAC;AAMF,eAAO,MAAM,sBAAsB,cAAc,CAAC;AAElD,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAInD,eAAO,MAAM,wBAAwB,GACnC,cAAc,MAAM,EACpB,aAAa,MAAM,KAClB,MAAM,GAAG,IAWX,CAAC;AAEF,eAAO,MAAM,yBAAyB,GACpC,eAAe,MAAM,EACrB,aAAa,MAAM,KAClB,MAAM,GAAG,IAeX,CAAC;~~AA0VF~~,eAAO,MAAM,uBAAuB,GAClC,SAAS,gBAAgB,EACzB,aAAa,MAAM,KAClB,MAAM,GAAG,IAeX,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAC3B,SAAS,gBAAgB,EACzB,SAAS,IAAI,CAAC,eAAe,EAC7B,UAAU,IAAI,CAAC,cAAc,KAC5B,OAAO,CAAC,IAAI,~~CAwEd~~,CAAC;AAcF,eAAO,MAAM,eAAe,GAAI,SAAS,gBAAgB,KAAG,IAAI,CAAC,MAM7D,CAAC;AAEL,MAAM,MAAM,qBAAqB,GAAG,gBAAgB,GAAG;IACrD,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,eAAO,MAAM,cAAc,GACzB,SAAS,qBAAqB,KAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,CAQlB,CAAC"}
1	+ {"version":3,"file":"webServer.d.ts","sourceRoot":"","sources":["../../../../src/adapter/entry-points/console/webServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,6DAA6D,CAAC;AAM9F,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EAQvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,sBAAsB,EACtB,sBAAsB,EAMvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAqB,MAAM,qBAAqB,CAAC;AAOtE,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,eAAO,MAAM,+BAA+B,UAA0B,CAAC;AAEvE,eAAO,MAAM,oBAAoB,eAAe,CAAC;AAEjD,eAAO,MAAM,oBAAoB,aAAa,CAAC;AAmC/C,eAAO,MAAM,aAAa,GAAI,aAAa,MAAM,KAAG,OAGiB,CAAC;AAEtE,eAAO,MAAM,aAAa,GAAI,aAAa,MAAM,KAAG,OAGrB,CAAC;AAIhC,eAAO,MAAM,iBAAiB,GAAI,aAAa,MAAM,KAAG,OAmBvD,CAAC;AAEF,eAAO,MAAM,YAAY,GACvB,eAAe,MAAM,EACrB,eAAe,MAAM,GAAG,IAAI,KAC3B,OAAoE,CAAC;AAExE,eAAO,MAAM,kBAAkB,GAC7B,cAAc,MAAM,GAAG,SAAS,KAC/B,MAAM,GAAG,IAoBX,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,YAAY,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,EACpC,aAAa,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,EAC1C,aAAa,MAAM,GAAG,IAAI,KACzB,MAAM,GAAG,IAWX,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,OAAO,MAAM,KAAG,MAC0C,CAAC;AAE5F,eAAO,MAAM,oBAAoB,GAAI,YAAY,GAAG,KAAG,MAOtD,CAAC;AAuCF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,cAAc,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/C,kBAAkB,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACnD,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACnD,sBAAsB,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;CACxD,CAAC;AAMF,eAAO,MAAM,sBAAsB,cAAc,CAAC;AAElD,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAInD,eAAO,MAAM,wBAAwB,GACnC,cAAc,MAAM,EACpB,aAAa,MAAM,KAClB,MAAM,GAAG,IAWX,CAAC;AAEF,eAAO,MAAM,yBAAyB,GACpC,eAAe,MAAM,EACrB,aAAa,MAAM,KAClB,MAAM,GAAG,IAeX,CAAC;AA0WF,eAAO,MAAM,uBAAuB,GAClC,SAAS,gBAAgB,EACzB,aAAa,MAAM,KAClB,MAAM,GAAG,IAeX,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAC3B,SAAS,gBAAgB,EACzB,SAAS,IAAI,CAAC,eAAe,EAC7B,UAAU,IAAI,CAAC,cAAc,KAC5B,OAAO,CAAC,IAAI,CA8Ed,CAAC;AAcF,eAAO,MAAM,eAAe,GAAI,SAAS,gBAAgB,KAAG,IAAI,CAAC,MAM7D,CAAC;AAEL,MAAM,MAAM,qBAAqB,GAAG,gBAAgB,GAAG;IACrD,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,eAAO,MAAM,cAAc,GACzB,SAAS,qBAAqB,KAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,CAQlB,CAAC"}