jackherd 1.21.0 → 1.23.0

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 What changed for people who use jackherd, newest first.
 
+## 1.23.0
+
+- **`jh lane dev <lane>` starts a lane's dev server in one call.** It splits a pane beside the lane's agent, labels it `<lane> dev :<port>`, runs `PORT=<port> <command>` there and prints one line (pane, label, port, command). The port is `--port` or the port column of the lane's board row (`--board <board.md>` names the board), and a port something listens on is refused. A pane with that label in the lane's tab is reported and left alone. The command is the new `lanes.devCommand` in `.jackherd/config.json`, with `{port}` and `{filter}` (`--filter <package>`) filled in; without it the call refuses and names the key. The coordinator no longer chains `herdr pane split`, `rename` and `run`, which the merge guard asked about; `jh lane dev` passes it like any other `jh` call. Run `jh sync` to get the skill text.
+
+## 1.22.0
+
+- **The approval gate no longer asks about a Bash call that only reads.** In a lane, and for a subagent of the coordinator, a Bash command passes at once, with no request and no question, when every simple command in it (across `;`, `&&`, `||`, `|` and newlines) is a reading command: `cd` inside the working directory, `echo`, `printf`, `cat`, `head`, `tail` (not `-f`), `wc`, `ls`, `grep`, `rg`, `sed -n` with a print script, `git grep`/`show`/`log`/`diff`/`status`/`ls-files`/`ls-tree`/`rev-parse`/`merge-base`/`blame`, `find` without `-exec`/`-delete`/`-fprint*`, `sort`, `uniq`, `cut` and `true`. A plain `NAME=value` assignment and `$NAME` as a command word are followed. Anything the check does not model (command substitution, a redirection to a file, a heredoc, a subshell, an unknown command or variable) keeps today's question. A word with an unquoted `*`, `?`, `[`, `]`, `{` or `}` is not passed either, since the shell would expand it after the check, and an abbreviated long option (`sort --outp=out`) counts as the option it abbreviates. Run `jh sync` to get the hook.
+
 ## 1.21.0
 
 - **`jh init` and `jh sync` prepare the main checkout for the herdr plugin `zerodice0.worktree-bootstrap`.** When herdr lists the plugin as enabled, they write `.herdr/worktree-copy.list` from `lanes.copy`, `.herdr/worktree-setup.json` with `commands.install` (run with the Node version of `.nvmrc` when the checkout has one) and `/.herdr/` into the git exclude file. A second run rewrites nothing. A `lanes.copy` path git does not ignore is named in a warning, since the plugin skips it. Without herdr or the plugin nothing is written. The orchestrate lane setup also names the plugin's `sync` for a worktree that existed before. Run `jh sync` to get the skill text.

package/README.md

@@ -1,9 +1,9 @@
 <p>
-<img alt="jackherd: a black and white Shih Tzu in a turquoise bandana, three lanes running from him to three agent nodes" src="https://unpkg.com/jackherd@1.21.0/assets/branding/jackherd-logo-outline.svg" width="340">
+<img alt="jackherd: a black and white Shih Tzu in a turquoise bandana, three lanes running from him to three agent nodes" src="https://unpkg.com/jackherd@1.23.0/assets/branding/jackherd-logo-outline.svg" width="340">
 <br>
 </p>
 
-[![npm](https://img.shields.io/npm/v/jackherd)](https://www.npmjs.com/package/jackherd) [![license: MIT](https://img.shields.io/npm/l/jackherd)](https://www.npmjs.com/package/jackherd) [![2 dependencies](https://img.shields.io/badge/dependencies-2-brightgreen)](https://www.npmjs.com/package/jackherd?activeTab=dependencies) [![macOS](https://img.shields.io/badge/macOS-supported-brightgreen?logo=apple)](https://unpkg.com/jackherd/INSTALL.md) [![Linux](https://img.shields.io/badge/Linux-supported-brightgreen?logo=linux&logoColor=white)](https://unpkg.com/jackherd/INSTALL.md)<br><img width="1" height="8" alt="" src="https://unpkg.com/jackherd@1.21.0/assets/icons/space.svg">
+[![npm](https://img.shields.io/npm/v/jackherd)](https://www.npmjs.com/package/jackherd) [![license: MIT](https://img.shields.io/npm/l/jackherd)](https://www.npmjs.com/package/jackherd) [![2 dependencies](https://img.shields.io/badge/dependencies-2-brightgreen)](https://www.npmjs.com/package/jackherd?activeTab=dependencies) [![macOS](https://img.shields.io/badge/macOS-supported-brightgreen?logo=apple)](https://unpkg.com/jackherd/INSTALL.md) [![Linux](https://img.shields.io/badge/Linux-supported-brightgreen?logo=linux&logoColor=white)](https://unpkg.com/jackherd/INSTALL.md)<br><img width="1" height="8" alt="" src="https://unpkg.com/jackherd@1.23.0/assets/icons/space.svg">
 
 # Jack herds your coding agents.
 
@@ -15,29 +15,29 @@ For developers who'd rather decide than supervise.
 curl -fsSL https://unpkg.com/jackherd/install.sh | sh
 ```
 
-Then `/jh-start` in a repository, and Jack offers your first plan. → [Quickstart](#quickstart)<br><img width="1" height="8" alt="" src="https://unpkg.com/jackherd@1.21.0/assets/icons/space.svg">
+Then `/jh-start` in a repository, and Jack offers your first plan. → [Quickstart](#quickstart)<br><img width="1" height="8" alt="" src="https://unpkg.com/jackherd@1.23.0/assets/icons/space.svg">
 
 <p>
-<img src="https://unpkg.com/jackherd@1.21.0/docs/workflow-dark.svg" width="720" alt="jackherd in herdr: a lane hits a question, Jack asks you as a choice, you pick, and the lane works on while the herd view counts its progress.">
+<img src="https://unpkg.com/jackherd@1.23.0/docs/workflow-dark.svg" width="720" alt="jackherd in herdr: a lane hits a question, Jack asks you as a choice, you pick, and the lane works on while the herd view counts its progress.">
 <br>
-<sub>Jack and his lanes in <a href="https://herdr.dev/">herdr</a>, a terminal for coding agents (recommended). Without it, one Claude Code session builds with subagents.</sub><br><img width="1" height="8" alt="" src="https://unpkg.com/jackherd@1.21.0/assets/icons/space.svg">
+<sub>Jack and his lanes in <a href="https://herdr.dev/">herdr</a>, a terminal for coding agents (recommended). Without it, one Claude Code session builds with subagents.</sub><br><img width="1" height="8" alt="" src="https://unpkg.com/jackherd@1.23.0/assets/icons/space.svg">
 </p>
 
-<p><img src="https://unpkg.com/jackherd@1.21.0/assets/icons/lanes.svg" width="24" height="34" align="middle" alt=""> <b>Parallel where it pays.</b><br>Phases that don't collide run side by side, each lane on its own branch and worktree. Jack keeps the merge order and has the others rebase.</p>
+<p><img src="https://unpkg.com/jackherd@1.23.0/assets/icons/lanes.svg" width="24" height="34" align="middle" alt=""> <b>Parallel where it pays.</b><br>Phases that don't collide run side by side, each lane on its own branch and worktree. Jack keeps the merge order and has the others rebase.</p>
 
-<p><img src="https://unpkg.com/jackherd@1.21.0/assets/icons/decide.svg" width="24" height="34" align="middle" alt=""> <b>You make the calls.</b><br>Commits, pushes and merges wait for your approval. Jack merges on green checks only where you said so: one pull request, or a plan's for up to 24 hours. The guards catch mistakes, not intent; a hard boundary takes branch protection.</p>
+<p><img src="https://unpkg.com/jackherd@1.23.0/assets/icons/decide.svg" width="24" height="34" align="middle" alt=""> <b>You make the calls.</b><br>Commits, pushes and merges wait for your approval. Jack merges on green checks only where you said so: one pull request, or a plan's for up to 24 hours. The guards catch mistakes, not intent; a hard boundary takes branch protection.</p>
 
-<p><img src="https://unpkg.com/jackherd@1.21.0/assets/icons/bark.svg" width="24" height="34" align="middle" alt=""> <b>Jack barks.</b><br>A lane gets stuck, a check goes red, a decision needs you: Jack steps in and brings you only what's yours to decide. The herd view shows where every lane stands.</p>
+<p><img src="https://unpkg.com/jackherd@1.23.0/assets/icons/bark.svg" width="24" height="34" align="middle" alt=""> <b>Jack barks.</b><br>A lane gets stuck, a check goes red, a decision needs you: Jack steps in and brings you only what's yours to decide. The herd view shows where every lane stands.</p>
 
-<p><img src="https://unpkg.com/jackherd@1.21.0/assets/icons/skills.svg" width="24" height="34" align="middle" alt=""> <b>Works with your skills.</b><br>Keep your own skills: a lane builds with whichever one you pick. Plans written elsewhere run too, once Jack fills in what they're missing.</p>
+<p><img src="https://unpkg.com/jackherd@1.23.0/assets/icons/skills.svg" width="24" height="34" align="middle" alt=""> <b>Works with your skills.</b><br>Keep your own skills: a lane builds with whichever one you pick. Plans written elsewhere run too, once Jack fills in what they're missing.</p>
 
-<p><img src="https://unpkg.com/jackherd@1.21.0/assets/icons/ear.svg" width="24" height="34" align="middle" alt=""> <b>Jack listens.</b><br>Review comments on a lane's pull request go back to that lane, which fixes them with a test. <code>/jh-follow</code> brings in anything a CLI or an API can read as JSON: tickets, error logs, status pages.</p>
+<p><img src="https://unpkg.com/jackherd@1.23.0/assets/icons/ear.svg" width="24" height="34" align="middle" alt=""> <b>Jack listens.</b><br>Review comments on a lane's pull request go back to that lane, which fixes them with a test. <code>/jh-follow</code> brings in anything a CLI or an API can read as JSON: tickets, error logs, status pages.</p>
 
-<p><img src="https://unpkg.com/jackherd@1.21.0/assets/icons/model.svg" width="24" height="34" align="middle" alt=""> <b>The right model for each phase.</b><br>Every phase names its model: the stronger one where a mistake is expensive (data, security, a migration), the cheaper one for the rest. Lanes start on it, and a hook refuses to start a phase's subagent on a weaker one.</p>
+<p><img src="https://unpkg.com/jackherd@1.23.0/assets/icons/model.svg" width="24" height="34" align="middle" alt=""> <b>The right model for each phase.</b><br>Every phase names its model: the stronger one where a mistake is expensive (data, security, a migration), the cheaper one for the rest. Lanes start on it, and a hook refuses to start a phase's subagent on a weaker one.</p>
 
-<p><img src="https://unpkg.com/jackherd@1.21.0/assets/icons/bowl.svg" width="24" height="34" align="middle" alt=""> <b>A crash or a full context doesn't cost you the work.</b><br>Plan, board and a hand-over file hold the state, not the chat: the next session picks up where the last one stopped.</p>
+<p><img src="https://unpkg.com/jackherd@1.23.0/assets/icons/bowl.svg" width="24" height="34" align="middle" alt=""> <b>A crash or a full context doesn't cost you the work.</b><br>Plan, board and a hand-over file hold the state, not the chat: the next session picks up where the last one stopped.</p>
 
-<p><img src="https://unpkg.com/jackherd@1.21.0/assets/icons/plan.svg" width="24" height="34" align="middle" alt=""> <b>Lives in your repository.</b><br>Plans, board and every decision are Markdown, reviewed like code. <code>jh init</code> gives your team the same setup.<br><img width="1" height="8" alt="" src="https://unpkg.com/jackherd@1.21.0/assets/icons/space.svg"></p>
+<p><img src="https://unpkg.com/jackherd@1.23.0/assets/icons/plan.svg" width="24" height="34" align="middle" alt=""> <b>Lives in your repository.</b><br>Plans, board and every decision are Markdown, reviewed like code. <code>jh init</code> gives your team the same setup.<br><img width="1" height="8" alt="" src="https://unpkg.com/jackherd@1.23.0/assets/icons/space.svg"></p>
 
 ## Quickstart
 
@@ -68,22 +68,22 @@ Then `/jh-start` in a repository, and Jack offers your first plan. → [Quicksta
    /jh-orchestrate docs/plans/board-<name>/board.md
    ```
 
-Linux and macOS are supported (Windows through WSL); the requirements are in [INSTALL.md](https://unpkg.com/jackherd/INSTALL.md). By hand (Bun 1.3+): `bun add -g jackherd` or `npm install -g jackherd`, then `jh init --global` for yourself, or `jh init` in a repository to give your team the same skills and guard hooks.<br><img width="1" height="8" alt="" src="https://unpkg.com/jackherd@1.21.0/assets/icons/space.svg">
+Linux and macOS are supported (Windows through WSL); the requirements are in [INSTALL.md](https://unpkg.com/jackherd/INSTALL.md). By hand (Bun 1.3+): `bun add -g jackherd` or `npm install -g jackherd`, then `jh init --global` for yourself, or `jh init` in a repository to give your team the same skills and guard hooks.<br><img width="1" height="8" alt="" src="https://unpkg.com/jackherd@1.23.0/assets/icons/space.svg">
 
 ## Follow anything you can query
 
 Tickets, error logs, status pages: if a command or an API call can read it as JSON with your login, Jack can watch it. Recipes cover Jira, Linear, GitHub issues and Projects, Sentry, Google Calendar and status pages; for anything else, `/jh-follow` writes the command with you. One yes, and every change shows up like this:
 
-<img src="https://unpkg.com/jackherd@1.21.0/docs/follow-dark.svg" width="720" alt="A source (ticket, error log or status page) has a new or changed entry; jh watch reports it to Jack; Jack puts a row into Your turn, prefixed with the source's label; its [ask] button makes Jack ask you, and then a lane works it.">
+<img src="https://unpkg.com/jackherd@1.23.0/docs/follow-dark.svg" width="720" alt="A source (ticket, error log or status page) has a new or changed entry; jh watch reports it to Jack; Jack puts a row into Your turn, prefixed with the source's label; its [ask] button makes Jack ask you, and then a lane works it.">
 
-The herd sums up your sources in one `Sources` line: new entries per source, or its last run, red while it fails; opened, a click opens an entry. One that needs you lands in Your turn under the source's label, [ask] has Jack look at it, and a ticket shows on the lane that works it.<br><img width="1" height="8" alt="" src="https://unpkg.com/jackherd@1.21.0/assets/icons/space.svg">
+The herd sums up your sources in one `Sources` line: new entries per source, or its last run, red while it fails; opened, a click opens an entry. One that needs you lands in Your turn under the source's label, [ask] has Jack look at it, and a ticket shows on the lane that works it.<br><img width="1" height="8" alt="" src="https://unpkg.com/jackherd@1.23.0/assets/icons/space.svg">
 
 ## In detail
 
 <details>
 <summary><b>What Jack does on his own, and what waits for you</b></summary>
 
-<img src="https://unpkg.com/jackherd@1.21.0/docs/lanes-dark.svg" alt="Jack prompts two lanes and asks you for decisions and approvals; the lanes send questions back as text; jh watch reads lane state, pull requests and checks and wakes Jack.">
+<img src="https://unpkg.com/jackherd@1.23.0/docs/lanes-dark.svg" alt="Jack prompts two lanes and asks you for decisions and approvals; the lanes send questions back as text; jh watch reads lane state, pull requests and checks and wakes Jack.">
 
 | On his own | After your approval | Never |
 | --- | --- | --- |
@@ -118,7 +118,7 @@ The guards catch mistakes, not intent; for that, use branch protection. The hook
 
 A **plan** is Markdown with phases, checkbox tasks, a model and a review gate per phase. A **board** lists the lanes of one or more plans: which phases each lane builds, on which model, after what. A **lane** is one agent session in its own git worktree (a second checkout of your repository), and **Jack** is the session in the main checkout that runs `/jh-orchestrate` on a board.
 
-<img src="https://unpkg.com/jackherd@1.21.0/docs/skills-dark.svg" alt="Your own plan or an issue is adopted (Jack adds what is missing, you see the diff) and goes to /jh-orchestrate; /jh-grill hands decisions to /jh-plan; /jh-plan feeds /jh-orchestrate or a single /jh-implement, which your own skill can replace; /jh-implement ends in /jh-pre-commit, which runs the reviewers; /jh-diagnose hands a red command to /jh-implement.">
+<img src="https://unpkg.com/jackherd@1.23.0/docs/skills-dark.svg" alt="Your own plan or an issue is adopted (Jack adds what is missing, you see the diff) and goes to /jh-orchestrate; /jh-grill hands decisions to /jh-plan; /jh-plan feeds /jh-orchestrate or a single /jh-implement, which your own skill can replace; /jh-implement ends in /jh-pre-commit, which runs the reviewers; /jh-diagnose hands a red command to /jh-implement.">
 
 | Skill | Does |
 | --- | --- |

package/dist/config.d.ts

@@ -121,6 +121,7 @@ declare const jackherdConfigSchema: z.ZodObject<{
         lockFile: z.ZodOptional<z.ZodString>;
         minFreeGb: z.ZodOptional<z.ZodNumber>;
         basePort: z.ZodOptional<z.ZodNumber>;
+        devCommand: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
     models: z.ZodDefault<z.ZodRecord<z.ZodEnum<{
         review: "review";

package/dist/config.js

@@ -708,7 +708,9 @@ var jackherdConfigSchema = z2.strictObject({
     /** Free gigabytes the disk must hold before `jh lane space` lets a new lane install its dependencies; 5 when left out. */
     minFreeGb: z2.number().positive().optional(),
     /** The port `jh lane port` starts counting from when it picks a lane's dev-server port; 3100 when left out. */
-    basePort: z2.number().int().min(1).max(65535).optional()
+    basePort: z2.number().int().min(1).max(65535).optional(),
+    /** The command `jh lane dev` runs as `PORT=<port> <command>` in a pane beside the lane's agent; `{port}` and `{filter}` (`--filter <package>`) are filled in. Without it `jh lane dev` refuses. */
+    devCommand: z2.string().min(1).optional()
   }).prefault({}),
   models: z2.record(z2.enum(Object.values(MODEL_ROLE)), modelId).default(DEFAULT_MODELS),
   terminal: z2.strictObject({ adapter: z2.enum(Object.values(TERMINAL_ADAPTER)).default(TERMINAL_ADAPTER.none) }).prefault({}),

package/herdr-plugin/herdr-plugin.toml

@@ -1,6 +1,6 @@
 id = "crossdelta.jackherd"
 name = "jackherd"
-version = "1.21.0"
+version = "1.23.0"
 min_herdr_version = "0.8.2"
 description = "Show the herd, the state of a board's lanes, in a herdr pane"
 platforms = ["linux", "macos"]

package/install.sh

@@ -9,7 +9,7 @@ set -eu
 
 # The default is the version this file ships with. The release bump changes it together with
 # package.json; install.test.ts fails while the two differ. Overridable, but only by a plain release.
-JACKHERD_VERSION="${JACKHERD_VERSION:-1.21.0}"
+JACKHERD_VERSION="${JACKHERD_VERSION:-1.23.0}"
 
 JACKHERD_PACKAGE='jackherd'
 # Test seam: the terminal the wizard asks its questions on.

package/kit/hooks/hooks/approval-gate/read-only-shell.ts

@@ -0,0 +1,310 @@
+import { realpathSync } from 'node:fs'
+import { isAbsolute, relative, resolve } from 'node:path'
+
+type Token = { kind: 'word'; value: string } | { kind: 'variable'; name: string } | { kind: 'separator' }
+
+type PartialWord = { value: string; quoted: boolean }
+
+type Step =
+  | { kind: 'text'; value: string; quoted: boolean; next: number }
+  | { kind: 'blank'; next: number }
+  | { kind: 'separator'; next: number }
+  | { kind: 'variable'; name: string; next: number }
+  | { kind: 'redirect'; next: number }
+
+type Quoted = { value: string; next: number }
+
+/** The directory the check starts in, and the one `cd` has reached since. */
+type Position = { root: string; current: string }
+
+type Rule = (args: string[], position: Position) => boolean
+
+const NAME = /^[A-Za-z_][A-Za-z0-9_]*/
+const ASSIGNMENT = /^([A-Za-z_][A-Za-z0-9_]*)=([\s\S]*)$/
+const BOUNDARY = /^(?:$|[ \t\n;&|])/
+const ALLOWED_REDIRECT = /^>(?:&1|[ \t]*\/dev\/null(?=$|[ \t\n;&|]))/
+const SAFE_EXPANSION = /^[\w./:=,@%+-]+(?: +[\w./:=,@%+-]+)*$/
+const SECRET_NAME = /^\.env|\.(?:pem|key)$|^id_(?:rsa|ed25519)|^Pulumi\..*\.ya?ml$|credentials|secret/i
+const SECRET_DIRECTORY = /(?:^|\/)(?:\.ssh|\.aws|\.gnupg|\.pulumi|\.config\/gh)(?:\/|$)/
+const FORBIDDEN_NAME =
+  /^(?:PATH|IFS|HOME|CDPATH|ENV|BASH.*|SHELLOPTS|PS4|PROMPT_COMMAND|GIT_.*|LD_.*|.*PAGER|EDITOR|LESS.*)$/
+const UNQUOTED_FORBIDDEN = new Set(['`', '(', ')', '<', '\\', '\r', '*', '?', '[', ']', '{', '}'])
+
+const GIT_READ_SUBCOMMANDS = new Set([
+  'grep',
+  'show',
+  'log',
+  'diff',
+  'status',
+  'ls-files',
+  'ls-tree',
+  'rev-parse',
+  'merge-base',
+  'blame',
+])
+const FIND_WRITING_PRIMARIES = new Set([
+  '-exec',
+  '-execdir',
+  '-ok',
+  '-okdir',
+  '-delete',
+  '-fprint',
+  '-fprint0',
+  '-fprintf',
+  '-fls',
+])
+const SED_SCRIPT = /^(?:(?:\d+|\$|\/[^/\\]*\/)(?:,(?:\d+|\$|\+\d+|\/[^/\\]*\/))?)[p=]$/
+const SED_FLAGS = /^-[nEr]+$/
+const SED_FLAGS_WITH_SCRIPT = /^-[nEr]*e$/
+
+const singleQuoted = (text: string, start: number): Quoted | null => {
+  const end = text.indexOf("'", start + 1)
+  return end === -1 ? null : { value: text.slice(start + 1, end), next: end + 1 }
+}
+
+const doubleQuoted = (text: string, start: number): Quoted | null => {
+  const end = text.indexOf('"', start + 1)
+  if (end === -1) return null
+  const value = text.slice(start + 1, end)
+  return /[$`\\]/.test(value) ? null : { value, next: end + 1 }
+}
+
+/** `$NAME` or `${NAME}`, only as a whole word; anything else after a dollar sign is refused. */
+const expansionAt = (text: string, start: number, atWordStart: boolean): Step | null => {
+  if (!atWordStart) return null
+  const braced = text[start + 1] === '{'
+  const nameStart = start + (braced ? 2 : 1)
+  const name = NAME.exec(text.slice(nameStart))?.[0]
+  if (name === undefined) return null
+  const end = nameStart + name.length
+  if (braced && text[end] !== '}') return null
+  const next = braced ? end + 1 : end
+  return BOUNDARY.test(text.slice(next)) ? { kind: 'variable', name, next } : null
+}
+
+/** A redirection to the null device or `2>&1`; the word before it may only be a file descriptor. */
+const redirectAt = (text: string, start: number, word: PartialWord | null): Step | null => {
+  if (word !== null && (word.quoted || (word.value !== '1' && word.value !== '2'))) return null
+  const matched = ALLOWED_REDIRECT.exec(text.slice(start))
+  if (matched === null) return null
+  return { kind: 'redirect', next: start + matched[0].length }
+}
+
+const separatorAt = (text: string, start: number): Step | null => {
+  const char = text[start]
+  const double = text[start + 1] === char
+  if (char === '&' && !double) return null
+  return { kind: 'separator', next: start + (double ? 2 : 1) }
+}
+
+const quotedStep = (text: string, start: number): Step | null => {
+  const quoted = text[start] === "'" ? singleQuoted(text, start) : doubleQuoted(text, start)
+  return quoted === null ? null : { kind: 'text', value: quoted.value, quoted: true, next: quoted.next }
+}
+
+const stepAt = (text: string, start: number, word: PartialWord | null): Step | null => {
+  const char = text[start] as string
+  if (char === ' ' || char === '\t') return { kind: 'blank', next: start + 1 }
+  if (char === '\n' || char === ';') return { kind: 'separator', next: start + 1 }
+  if (char === '&' || char === '|') return separatorAt(text, start)
+  if (char === "'" || char === '"') return quotedStep(text, start)
+  if (char === '$') return expansionAt(text, start, word === null)
+  if (char === '>') return redirectAt(text, start, word)
+  if (UNQUOTED_FORBIDDEN.has(char) || (char === '#' && word === null)) return null
+  return { kind: 'text', value: char, quoted: false, next: start + 1 }
+}
+
+/** Splits the command into words, variable words and separators; null for any construct the check does not model. */
+const tokenize = (text: string): Token[] | null => {
+  const tokens: Token[] = []
+  let word = null as PartialWord | null
+  const flush = () => {
+    if (word !== null) tokens.push({ kind: 'word', value: word.value })
+    word = null
+  }
+  let position = 0
+  while (position < text.length) {
+    const step = stepAt(text, position, word)
+    if (step === null) return null
+    position = step.next
+    if (step.kind === 'text') {
+      word = { value: (word?.value ?? '') + step.value, quoted: (word?.quoted ?? false) || step.quoted }
+      continue
+    }
+    if (step.kind === 'redirect') {
+      word = null
+      continue
+    }
+    flush()
+    if (step.kind === 'separator') tokens.push({ kind: 'separator' })
+    if (step.kind === 'variable') tokens.push({ kind: 'variable', name: step.name })
+  }
+  flush()
+  return tokens
+}
+
+const splitCommands = (tokens: Token[]): Token[][] => {
+  const commands: Token[][] = [[]]
+  for (const token of tokens) {
+    if (token.kind === 'separator') commands.push([])
+    else commands[commands.length - 1]?.push(token)
+  }
+  return commands.filter((command) => command.length > 0)
+}
+
+/** Whether an option is one of the long options, or an abbreviation of one: GNU option parsing takes any unambiguous prefix. */
+const hasLong = (args: string[], names: string[]): boolean =>
+  args.some((arg) => {
+    const option = arg.split('=')[0] as string
+    return option.length > 2 && names.some((name) => name.startsWith(option))
+  })
+
+/** Whether a single-dash option carries one of the letters; a cluster such as `-nO` counts, a value starting with a dash too. */
+const hasShort = (args: string[], letters: string): boolean =>
+  args.some((arg) => /^-[^-]/.test(arg) && [...letters].some((letter) => arg.includes(letter)))
+
+const isInside = (root: string, target: string): boolean => {
+  const path = relative(root, target)
+  return path !== '..' && !path.startsWith('../') && !isAbsolute(path)
+}
+
+const realPathOrNull = (path: string): string | null => {
+  try {
+    return realpathSync(path)
+  } catch {
+    return null
+  }
+}
+
+/** `cd` into an existing directory that, once symbolic links are followed, still lies inside the root. */
+const cdRule: Rule = (args, position) => {
+  const [target] = args
+  if (args.length !== 1 || target === undefined || target.startsWith('-') || target.startsWith('~')) return false
+  const root = realPathOrNull(position.root)
+  const next = realPathOrNull(resolve(position.current, target))
+  if (root === null || next === null || !isInside(root, next)) return false
+  position.current = next
+  return true
+}
+
+const isSedFlag = (arg: string): boolean => arg === '--quiet' || arg === '--silent' || SED_FLAGS.test(arg)
+
+/** The scripts of a `sed` call, from `-e` or the first plain argument; null for an option the check does not know. */
+const sedScripts = (args: string[]): string[] | null => {
+  const scripts: string[] = []
+  let index = 0
+  while (index < args.length) {
+    const arg = args[index++] as string
+    if (SED_FLAGS_WITH_SCRIPT.test(arg)) {
+      const script = args[index++]
+      if (script === undefined) return null
+      scripts.push(script)
+    } else if (arg.startsWith('-') && !isSedFlag(arg)) return null
+    else if (!arg.startsWith('-') && scripts.length === 0) scripts.push(arg)
+  }
+  return scripts
+}
+
+const isSedQuiet = (args: string[]): boolean =>
+  args.some((arg) => (isSedFlag(arg) || SED_FLAGS_WITH_SCRIPT.test(arg)) && (arg.startsWith('--') || arg.includes('n')))
+
+const sedRule: Rule = (args) => {
+  const scripts = sedScripts(args)
+  return (
+    scripts !== null && isSedQuiet(args) && scripts.length > 0 && scripts.every((script) => SED_SCRIPT.test(script))
+  )
+}
+
+const gitRule: Rule = ([subcommand = '', ...rest]) =>
+  GIT_READ_SUBCOMMANDS.has(subcommand) &&
+  !hasLong(rest, ['--output', '--ext-diff', '--open-files-in-pager']) &&
+  !hasShort(rest, 'O')
+
+const RULES: Record<string, Rule> = {
+  cd: cdRule,
+  true: () => true,
+  echo: () => true,
+  printf: () => true,
+  cat: () => true,
+  head: () => true,
+  wc: () => true,
+  ls: () => true,
+  grep: () => true,
+  cut: () => true,
+  tail: (args) => !hasShort(args, 'fF') && !hasLong(args, ['--follow']),
+  sort: (args) => !hasShort(args, 'o') && !hasLong(args, ['--output', '--compress-program']),
+  uniq: (args) => args.filter((arg) => !arg.startsWith('-')).length <= 1,
+  rg: (args) => !hasShort(args, 'z') && !hasLong(args, ['--pre', '--hostname-bin', '--search-zip']),
+  find: (args) => !args.some((arg) => FIND_WRITING_PRIMARIES.has(arg)),
+  sed: sedRule,
+  git: gitRule,
+}
+
+/** The assignment `NAME=value` as a whole command: records it, or null when the name could change how commands run. */
+const assign = (word: string, variables: Map<string, string>): boolean => {
+  const matched = ASSIGNMENT.exec(word)
+  if (matched === null || FORBIDDEN_NAME.test(matched[1] as string)) return false
+  variables.set(matched[1] as string, matched[2] as string)
+  return true
+}
+
+/** The words of the command with a leading `$NAME` replaced by its recorded value; null when anything else expands. */
+const wordsOf = (command: Token[], variables: Map<string, string>): string[] | null => {
+  const [first, ...rest] = command
+  if (rest.some((token) => token.kind !== 'word')) return null
+  const words = rest.map((token) => (token as { value: string }).value)
+  if (first?.kind === 'word') return [first.value, ...words]
+  const value = first?.kind === 'variable' ? variables.get(first.name) : undefined
+  return value !== undefined && SAFE_EXPANSION.test(value) ? [...value.split(' ').filter(Boolean), ...words] : null
+}
+
+const isAssignmentCommand = (command: Token[]): boolean => {
+  const [first] = command
+  return command.length === 1 && first?.kind === 'word' && ASSIGNMENT.test(first.value)
+}
+
+/** The arguments that name a place to read, without the search pattern of `grep`, `rg` and `git grep`. */
+const pathArguments = (name: string, args: string[]): string[] => {
+  const isGitGrep = name === 'git' && args[0] === 'grep'
+  if (name !== 'grep' && name !== 'rg' && !isGitGrep) return args
+  const search = isGitGrep ? args.slice(1) : args
+  const kept: string[] = []
+  let patternGiven = search.some((arg) => arg === '-e' || arg === '--regexp')
+  let skipNext = false
+  for (const arg of search) {
+    const isPatternFlag = arg === '-e' || arg === '--regexp'
+    const isPositionalPattern = !patternGiven && !arg.startsWith('-')
+    patternGiven = patternGiven || isPositionalPattern
+    if (!skipNext && !isPatternFlag && !isPositionalPattern) kept.push(arg)
+    skipNext = isPatternFlag
+  }
+  return isGitGrep ? [...args.slice(0, 1), ...kept] : kept
+}
+
+/** Whether an argument names a file that tends to hold secrets, also behind `--option=`, `rev:` or a glob. */
+const namesSecret = (argument: string): boolean => {
+  const path = argument.replace(/[:=]/g, '/')
+  return SECRET_DIRECTORY.test(path) || path.split('/').some((part) => SECRET_NAME.test(part))
+}
+
+const isReadOnlyCommand = (command: Token[], variables: Map<string, string>, position: Position): boolean => {
+  if (isAssignmentCommand(command)) return assign((command[0] as { value: string }).value, variables)
+  const words = wordsOf(command, variables)
+  const [name = '', ...args] = words ?? []
+  const rule = Object.hasOwn(RULES, name) ? RULES[name] : undefined
+  return rule !== undefined && !pathArguments(name, args).some(namesSecret) && rule(args, position)
+}
+
+/**
+ * Whether a Bash command only reads: every simple command, across `;`, `&&`, `||`, `|` and newlines, is an allowlisted
+ * reading command with arguments that cannot write or run something else. Conservative: a construct this check does not
+ * model (substitution, redirection to a file, heredoc, subshell, unknown variable or command) answers false. `cd` may
+ * only reach a directory inside `cwd`; symbolic links are not followed, so a link inside `cwd` can still lead out.
+ */
+export const isReadOnlyShellCommand = (command: string, cwd: string): boolean => {
+  const tokens = tokenize(command)
+  if (tokens === null) return false
+  const variables = new Map<string, string>()
+  const position: Position = { root: resolve(cwd), current: resolve(cwd) }
+  return splitCommands(tokens).every((simple) => isReadOnlyCommand(simple, variables, position))
+}

package/kit/hooks/hooks/approval-gate/run.ts

@@ -1,10 +1,12 @@
 import { ASK_USER_QUESTION_TOOL } from '../shared/dialog-answers'
 import { isFresh, MS_PER_MINUTE } from '../shared/fresh'
+import { isRecord } from '../shared/json'
 import { isCoordinatorAgent, laneOfAgent } from '../shared/lane'
 import type { PaneAgent } from '../shared/pane-agent'
 import { type StandingLabels, standingGrants } from '../shared/standing-mark'
 import { gateDecision, type GateLabels } from './decision'
 import { type ApprovalRequest, callHash, type GateCall, isStorableInput, newRequest, requestId } from './request'
+import { isReadOnlyShellCommand } from './read-only-shell'
 import { type GateSettings, gateSettingsOf } from './settings'
 import { queryOf, type StandingHistoryEntry } from './standing-history'
 import { ENVIRONMENT_KIND, standingSqlDecision } from './standing-sql'
@@ -154,6 +156,10 @@ const awaitDecision = async (
 /** A question to the user asks for an answer, not for a permission: the lane asks the coordinator in its text instead. */
 const isHeld = ({ tool, input }: ClientCall): boolean => tool !== ASK_USER_QUESTION_TOOL && isStorableInput(input)
 
+/** A Bash call whose command provably only reads passes at once; nobody is asked about it. */
+const isReadOnlyBash = ({ tool, input, cwd }: ClientCall): boolean =>
+  tool === 'Bash' && isRecord(input) && typeof input.command === 'string' && isReadOnlyShellCommand(input.command, cwd)
+
 /**
  * What holds the call: the lane of the pane's agent, else, for a subagent of the coordinator, its own name. The
  * coordinator's session is the one the hook was called for, and the agent of the pane started in the main checkout
@@ -193,6 +199,7 @@ export const runGate = async (
     const settings = gateSettingsOf(dependencies.config(main))
     const lane = holderOf(clientCall, agent, main, settings.worktreeDirectory, dependencies)
     if (!lane) return null
+    if (isReadOnlyBash(clientCall)) return { kind: 'allow' }
     const { cwd, tool, input } = clientCall
     const request = openRequest(main, { lane, cwd, tool, input }, dependencies)
     return await awaitDecision(main, request, texts, settings, dependencies)

package/kit/workflow/skills/orchestrate/references/start-lane.md

@@ -49,12 +49,11 @@ column and the plan's dependency table are met and step 1 finds nothing.
 ## § 3 Dev server
 
 A lane whose phase changes something a user sees (`/implement` Step 4b) gets its server **when the
-lane starts**, not when it asks: the lane looks at its work before the commit question, and you look
-at it before the PR question (§ 5). The command is the project's dev server on the lane's port
-(`PORT=<port> {{kit.command.dev}}`, unless the project supplement names another).
+lane starts**, not when it asks: the lane looks before the commit question, you before the PR question (§ 5).
 
-Never in the lane's shell: the agent would block on it. Split a pane inside the lane's workspace
-and run it there, **beside the agent** (`--direction right`), so the agent keeps its height:
+Never in the lane's shell: the agent would block on it. Start it with `jh lane dev <lane>` (`--port` where the row has
+none, `--filter <package>` for `{filter}` in `lanes.devCommand`): it splits a pane beside the agent, labels it
+`<lane> dev :<port>`, runs the command there; an existing pane stays. Without `lanes.devCommand`, by hand, **beside the agent**:
 
 ```bash
 herdr pane split <lane-pane> --direction right --no-focus

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jackherd",
-  "version": "1.21.0",
+  "version": "1.23.0",
   "keywords": [
     "claude-code",
     "coding-agents",

package/schemas/jackherd.schema.json

@@ -152,6 +152,10 @@
           "type": "integer",
           "minimum": 1,
           "maximum": 65535
+        },
+        "devCommand": {
+          "type": "string",
+          "minLength": 1
         }
       },
       "additionalProperties": false

package/src/config/schema.ts

@@ -605,6 +605,8 @@ export const jackherdConfigSchema = z.strictObject({
       minFreeGb: z.number().positive().optional(),
       /** The port `jh lane port` starts counting from when it picks a lane's dev-server port; 3100 when left out. */
       basePort: z.number().int().min(1).max(65535).optional(),
+      /** The command `jh lane dev` runs as `PORT=<port> <command>` in a pane beside the lane's agent; `{port}` and `{filter}` (`--filter <package>`) are filled in. Without it `jh lane dev` refuses. */
+      devCommand: z.string().min(1).optional(),
     })
     .prefault({}),
   models: z.record(z.enum(Object.values(MODEL_ROLE)), modelId).default(DEFAULT_MODELS),

package/src/lane/command.ts

@@ -7,6 +7,7 @@ const SPACE = 'space'
 const PORT = 'port'
 const SEND = 'send'
 const BASE = 'base'
+const DEV = 'dev'
 
 /** `code` after the call; a call from the main checkout that succeeded adds the hint to the start-lane reference on stderr, so the output a caller captures stays the one value. */
 const withStartLaneHint = (code: number, args: readonly string[], cwd: string): number => {
@@ -16,13 +17,14 @@ const withStartLaneHint = (code: number, args: readonly string[], cwd: string):
 }
 
 /**
- * `jh lane close …` closes a lane, `jh lane space …` checks the disk for a new one, `jh lane port …` names its dev-server port, `jh lane send …` sends its prompt
+ * `jh lane close …` closes a lane, `jh lane space …` checks the disk for a new one, `jh lane port …` names its dev-server port, `jh lane dev …` starts that server beside its agent, `jh lane send …` sends its prompt
  * file, `jh lane base …` names the ref its worktree starts from, everything else is `jh lane prompt …`. `close` must
  * come first; `jh lane --board b.md close x` reaches the prompt parser and is refused there.
  */
 export const run = async (args: string[], cwd: string = process.cwd()): Promise<number> => {
   if (args[0] === SPACE) return (await import('./space-command')).run(args.slice(1), cwd)
   if (args[0] === PORT) return (await import('./port-command')).run(args.slice(1), cwd)
+  if (args[0] === DEV) return (await import('./dev-command')).run(args.slice(1), cwd)
   if (args[0] === SEND) return (await import('./send-command')).run(args.slice(1), cwd)
   if (args[0] === BASE)
     return withStartLaneHint(await (await import('./base-command')).run(args.slice(1), cwd), args.slice(1), cwd)

package/src/lane/dev-command.ts

@@ -0,0 +1,40 @@
+import { readFileSync } from 'node:fs'
+import { resolve } from 'node:path'
+import { parseSprintLanes } from '../plan-format'
+import { terminalSafe } from '../plan-format/terminal-text'
+import { boardFor } from '../plans/board-pick'
+import { mainCheckout, worktreeRoot } from '../plans/git'
+import { readSettings } from '../plans/settings'
+import { asksForHelp } from '../preview/options'
+import { SAFE_LANE_NAME } from '../watch/lane-name'
+import { devCommandOf, devPortOf, LANE_DEV_USAGE, parseDevOptions, startLaneDev } from './dev'
+import { herdrDevPorts } from './dev-herdr'
+
+/**
+ * `jh lane dev <lane> [--board <board.md>] [--port <port>] [--filter <package>]`: starts the lane's dev server in a pane
+ * beside its agent (orchestrate § 3) and prints one line. Exit 0 started or already there, 1 refused.
+ */
+export const run = async (args: string[], cwd: string = process.cwd()): Promise<number> => {
+  if (asksForHelp(args)) {
+    console.log(LANE_DEV_USAGE)
+    return 0
+  }
+  try {
+    const { lane, boardPath, port: portOption, filter } = parseDevOptions(args)
+    if (!SAFE_LANE_NAME.test(lane)) throw new Error(`${lane} is no lane name (letters, digits, . _ -)`)
+    const root = mainCheckout(cwd)
+    const settings = readSettings([root, worktreeRoot(cwd)])
+    const board = boardFor(boardPath === null ? null : resolve(cwd, boardPath), [root], settings, () => [])
+    if (board.notice) console.error(terminalSafe(board.notice))
+    const row = parseSprintLanes(readFileSync(board.file, 'utf8'), settings.planLanguage).find(
+      ({ name, closed }) => name === lane && !closed,
+    )
+    const port = devPortOf(portOption, row?.port ?? null)
+    const outcome = await startLaneDev(herdrDevPorts(), lane, port, devCommandOf(settings.devCommand, port, filter))
+    console.log(terminalSafe(outcome.line))
+    return outcome.exitCode
+  } catch (error) {
+    console.error(terminalSafe(error instanceof Error ? error.message : String(error)))
+    return 1
+  }
+}

package/src/lane/dev-herdr.ts

@@ -0,0 +1,41 @@
+import { paneListOf, splitPaneOf } from '../plans/plan-panes'
+import { isPortListening } from '../plans/port-listening'
+import { herdrBinary } from '../sync/tools'
+import { agentPlaceOf, type DevPorts } from './dev'
+
+type Run = (args: string[]) => { exitCode: number; stdout: string }
+
+const spawnHerdr =
+  (binary: string): Run =>
+  (args) => {
+    const result = Bun.spawnSync([binary, ...args], { stdin: 'ignore', stdout: 'pipe', stderr: 'pipe' })
+    return { exitCode: result.exitCode, stdout: result.stdout.toString() }
+  }
+
+/** The stdout of a herdr call that must succeed; throws with the call's name otherwise. */
+const succeeded = (run: Run, args: string[]): string => {
+  const { exitCode, stdout } = run(args)
+  if (exitCode !== 0) throw new Error(`herdr ${args.slice(0, 2).join(' ')} failed (exit ${exitCode})`)
+  return stdout
+}
+
+/** The start's calls, made with the `herdr` binary; the command line is one argument, no shell reads it before the pane's own. */
+export const herdrDevPorts = (run: Run = spawnHerdr(herdrBinary(process.env))): DevPorts => ({
+  place: (lane) => {
+    const { exitCode, stdout } = run(['agent', 'get', lane])
+    return exitCode === 0 ? agentPlaceOf(stdout) : null
+  },
+  labelsInTab: (tab) =>
+    paneListOf(succeeded(run, ['pane', 'list']))
+      .filter((pane) => pane.tab === tab)
+      .flatMap((pane) => (pane.label === null ? [] : [pane.label])),
+  isListening: isPortListening,
+  split: (pane, cwd) =>
+    splitPaneOf(succeeded(run, ['pane', 'split', pane, '--direction', 'right', '--no-focus', '--cwd', cwd])),
+  rename: (pane, label) => {
+    succeeded(run, ['pane', 'rename', pane, label])
+  },
+  run: (pane, command) => {
+    succeeded(run, ['pane', 'run', pane, command])
+  },
+})

package/src/lane/dev.ts

@@ -0,0 +1,129 @@
+import { isRecord } from '../shared/is-record'
+import { CLI_NAME } from '../version/release'
+import { MAX_PORT } from './port'
+
+/** What `jh lane dev` was asked for; a null stands for an option left out. */
+export type DevOptions = { lane: string; boardPath: string | null; port: number | null; filter: string | null }
+
+/** Where a lane's agent sits: its pane, the tab of that pane and the directory it works in (the worktree). */
+export type AgentPlace = { pane: string; tab: string; cwd: string }
+
+type Awaitable<T> = T | Promise<T>
+
+/** The calls the start makes; the command wires them to `herdr` and to a connection probe. */
+export type DevPorts = {
+  /** Where the lane's agent is, null when herdr knows no such agent. */
+  place: (lane: string) => Awaitable<AgentPlace | null>
+  /** The labels of the panes in the tab. */
+  labelsInTab: (tab: string) => Awaitable<string[]>
+  isListening: (port: number) => Awaitable<boolean>
+  /** Splits a pane beside `pane`, working in `cwd`, and answers the new pane's id. */
+  split: (pane: string, cwd: string) => Awaitable<string>
+  rename: (pane: string, label: string) => Awaitable<void>
+  run: (pane: string, command: string) => Awaitable<void>
+}
+
+export type DevOutcome = { exitCode: 0 | 1; line: string }
+
+const BOARD = '--board'
+const PORT = '--port'
+const FILTER = '--filter'
+
+export const LANE_DEV_USAGE = `usage: ${CLI_NAME} lane dev <lane> [${BOARD} <board.md>] [${PORT} <port>] [${FILTER} <package>]
+
+Starts the lane's dev server in a pane beside its agent: the port is ${PORT} or the port column of the lane's row on the
+board, the command is lanes.devCommand of the config ({port} and {filter} stand for the port and ${FILTER}), run as
+PORT=<port> <command> in a pane labelled "<lane> dev :<port>". A port something listens on is refused; a pane with
+that label in the lane's tab is reported and left alone.`
+
+const FILTER_VALUE = /^[\w@./:-]+$/
+const PORT_PLACEHOLDER = '{port}'
+const FILTER_PLACEHOLDER = '{filter}'
+
+const optionValue = (next: string | undefined): string => {
+  if (next === undefined || next.startsWith('--')) throw new Error(LANE_DEV_USAGE)
+  return next
+}
+
+const portOf = (text: string): number => {
+  const port = Number(text)
+  if (!Number.isInteger(port) || port < 1 || port > MAX_PORT) throw new Error(LANE_DEV_USAGE)
+  return port
+}
+
+/** Reads `<lane> [--board <file>] [--port <port>] [--filter <package>]`; throws with the usage on anything else. */
+export const parseDevOptions = (args: readonly string[]): DevOptions => {
+  const [lane, ...rest] = args
+  if (lane === undefined || lane.startsWith('-')) throw new Error(LANE_DEV_USAGE)
+  const options: DevOptions = { lane, boardPath: null, port: null, filter: null }
+  for (let index = 0; index < rest.length; index += 2) {
+    const option = rest[index]
+    const value = optionValue(rest[index + 1])
+    if (option === BOARD && options.boardPath === null) options.boardPath = value
+    else if (option === PORT && options.port === null) options.port = portOf(value)
+    else if (option === FILTER && options.filter === null) options.filter = value
+    else throw new Error(LANE_DEV_USAGE)
+  }
+  return options
+}
+
+/** The port of the call, else the one in the lane's board row; throws when neither names one. */
+export const devPortOf = (option: number | null, boardPort: number | null): number => {
+  const port = option ?? boardPort
+  if (port === null) throw new Error(`the board row names no port for the lane; pass ${PORT} <port>`)
+  return port
+}
+
+/** The pane label of a lane's dev server. */
+export const devLabelOf = (lane: string, port: number): string => `${lane} dev :${port}`
+
+/**
+ * The shell line for the pane: `PORT=<port>` in front of the configured command with `{port}` and `{filter}` filled.
+ * A filter is a package name, one shell word; anything else is refused.
+ */
+export const devCommandOf = (template: string | null | undefined, port: number, filter: string | null): string => {
+  if (!template) throw new Error('no dev command: set lanes.devCommand in .jackherd/config.json')
+  if (filter !== null && !FILTER_VALUE.test(filter)) throw new Error(`${FILTER} ${filter} is no package name`)
+  if (filter === null && template.includes(FILTER_PLACEHOLDER))
+    throw new Error(`lanes.devCommand names {filter}: pass ${FILTER} <package>`)
+  const command = template.replaceAll(PORT_PLACEHOLDER, String(port)).replaceAll(FILTER_PLACEHOLDER, filter ?? '')
+  return `PORT=${port} ${command}`
+}
+
+/** Pane, tab and directory of the agent in a `herdr agent get` answer; null for an answer of another shape. */
+export const agentPlaceOf = (json: string): AgentPlace | null => {
+  try {
+    const answer: unknown = JSON.parse(json)
+    const result = isRecord(answer) ? answer.result : undefined
+    const agent = isRecord(result) ? result.agent : undefined
+    if (!isRecord(agent)) return null
+    const { pane_id: pane, tab_id: tab, cwd } = agent
+    return typeof pane === 'string' && typeof tab === 'string' && typeof cwd === 'string' ? { pane, tab, cwd } : null
+  } catch {
+    return null
+  }
+}
+
+const failed = (line: string): DevOutcome => ({ exitCode: 1, line })
+
+/**
+ * Starts the dev server beside the lane's agent: refuses a lane without an agent and a port something listens on,
+ * leaves an existing pane of that label alone, else splits, labels and runs. Prints one line.
+ */
+export const startLaneDev = async (
+  ports: DevPorts,
+  lane: string,
+  port: number,
+  command: string,
+): Promise<DevOutcome> => {
+  const place = await ports.place(lane)
+  if (place === null) return failed(`${lane}: herdr knows no agent of that name`)
+  const label = devLabelOf(lane, port)
+  if ((await ports.labelsInTab(place.tab)).includes(label))
+    return { exitCode: 0, line: `${lane}: a pane "${label}" already exists in the tab, nothing started.` }
+  if (await ports.isListening(port)) return failed(`${lane}: something already listens on port ${port}.`)
+  const pane = await ports.split(place.pane, place.cwd)
+  await ports.rename(pane, label)
+  await ports.run(pane, command)
+  return { exitCode: 0, line: `${pane} "${label}" :${port} ${command}` }
+}

package/src/plans/settings.ts

@@ -21,6 +21,8 @@ export type PlansSettings = Pick<
   minFreeGb: number
   /** The port `jh lane port` starts from (`lanes.basePort`). */
   basePort: number
+  /** The command `jh lane dev` starts a lane's dev server with (`lanes.devCommand`); undefined when none is set. */
+  devCommand: string | undefined
   fetchIntervalMinutes: number
   /** Whether the running task of a folded lane shimmers; `NO_COLOR` keeps it still whatever this says. */
   shimmer: boolean
@@ -66,6 +68,7 @@ export const plansSettingsOf = (config: JackherdConfig): PlansSettings => ({
   adapter: config.terminal.adapter,
   minFreeGb: config.lanes.minFreeGb ?? DEFAULT_MIN_FREE_GB,
   basePort: config.lanes.basePort ?? DEFAULT_BASE_PORT,
+  devCommand: config.lanes.devCommand,
   fetchIntervalMinutes: config.plans.fetchIntervalMinutes,
   shimmer: config.plans.shimmer,
   linkKinds: config.plans.linkKinds,