osborn 0.9.155 → 0.9.159

package/dist/claude-llm.js

@@ -140,10 +140,17 @@ function ensureCompactionSettings() {
         else {
             mkdirSync(claudeDir, { recursive: true });
         }
+        let dirty = false;
         if (settings.autoCompactWindow !== 1_000_000) {
             settings.autoCompactWindow = 1_000_000;
+            dirty = true;
+        }
+        if (settings.cleanupPeriodDays !== 3650) {
+            settings.cleanupPeriodDays = 3650;
+            dirty = true;
+        }
+        if (dirty) {
             writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
-            console.log('🪟 autoCompactWindow set to 1,000,000 in', settingsPath);
         }
     }
     catch (err) {

package/dist/config.js

@@ -595,7 +595,7 @@ async function extractCwd(filePath) {
  *
  * @param limit - Max sessions to return (default 100, sorted by recency)
  */
-export async function listAllClaudeSessions(limit = 100) {
+export async function listAllClaudeSessions(limit = 2000) {
     const projectsDir = getClaudeProjectsDir();
     if (!existsSync(projectsDir))
         return [];

package/dist/index.js

@@ -267,6 +267,42 @@ let codeServerStartHook = null;
 // code-server runs on 127.0.0.1:8300; the agent proxies it through its own
 // public HTTP server so no Cloudflare tunnel is needed.
 const IDE_TARGET = 'http://127.0.0.1:8300';
+const OSBORN_API_PORT = parseInt(process.env.OSBORN_API_PORT || '8741', 10);
+// Dev-domain wildcard subdomain routing.
+// When DEV_DOMAIN is set (e.g. "dev.voice-native.com"), requests arriving with
+// Host: PORT-APPNAME.dev.voice-native.com are proxied to localhost:PORT at root.
+// The fleet router (apps/dev-router) handles TLS + fly-replay to reach this machine;
+// the agent only needs to detect the pattern and forward.
+const DEV_DOMAIN = process.env.DEV_DOMAIN || '';
+function parseDevSubdomainPort(req) {
+    if (!DEV_DOMAIN)
+        return null;
+    // Primary: Host header — preserved through fly-replay by Fly
+    const hostname = (req.headers.host || '').split(':')[0].toLowerCase();
+    const suffix = '.' + DEV_DOMAIN;
+    if (hostname.endsWith(suffix)) {
+        const label = hostname.slice(0, -suffix.length); // e.g. "3000-osborn-abc"
+        const dashIdx = label.indexOf('-');
+        if (dashIdx > 0) {
+            const port = parseInt(label.slice(0, dashIdx), 10);
+            if (!isNaN(port) && port > 1024 && port < 65536 && port !== 8300 && port !== OSBORN_API_PORT) {
+                return port;
+            }
+        }
+    }
+    // Fallback: fly-replay-src state field — fleet router encodes "state=port:PORT"
+    const replaySrc = req.headers['fly-replay-src'];
+    if (replaySrc) {
+        const m = replaySrc.match(/state=port:(\d+)/);
+        if (m) {
+            const port = parseInt(m[1], 10);
+            if (!isNaN(port) && port > 1024 && port < 65536 && port !== 8300 && port !== OSBORN_API_PORT) {
+                return port;
+            }
+        }
+    }
+    return null;
+}
 // Route prefixes that belong to the agent itself. The proxy fall-through checks
 // this list FIRST so it never intercepts an agent API path.
 const AGENT_ROUTE_PREFIXES = [
@@ -1498,21 +1534,44 @@ function startApiServer(workingDir, port) {
         // 3 s until ready.
         if (url.pathname === '/editor' && req.method === 'GET') {
             // AUTH GATE (future): validate key / signed session before minting the cookie
+            // Optional ?folder= param: must be an absolute path under /workspace with no
+            // directory-traversal sequences. If absent or invalid, fall back to bare '/'.
+            const rawFolder = url.searchParams.get('folder') ?? '';
+            const folderParam = (() => {
+                if (!rawFolder)
+                    return '';
+                // Must be absolute, start with /workspace, no traversal sequences
+                if (!rawFolder.startsWith('/workspace') ||
+                    rawFolder.includes('..') ||
+                    rawFolder.includes('\0'))
+                    return '';
+                // Normalise and re-check (catches encoded or doubled slashes resolving outside /workspace)
+                const normalised = rawFolder.replace(/\/+/g, '/');
+                if (!normalised.startsWith('/workspace'))
+                    return '';
+                return normalised;
+            })();
             if (ideProxyEnabled && ideSessionToken) {
-                // code-server is up — set cookie and redirect to root (code-server's asset base)
+                // code-server is up — set cookie and redirect into the requested folder (if valid)
+                // or to root if no valid folder was supplied.
+                const location = folderParam ? `/?folder=${encodeURIComponent(folderParam)}` : '/';
                 res.writeHead(302, {
                     'Set-Cookie': `osborn_ide=${ideSessionToken}; Path=/; HttpOnly; SameSite=Lax`,
-                    'Location': '/',
+                    'Location': location,
                 });
                 res.end();
             }
             else {
-                // Not yet running — kick off start in the background, show "Starting…" page
+                // Not yet running — kick off start in the background, show "Starting…" page.
+                // Preserve ?folder= in the refresh URL so it survives the polling loop.
                 if (codeServerStartHook) {
                     codeServerStartHook().catch((err) => {
                         console.error('❌ startCodeServer() from /editor failed:', err);
                     });
                 }
+                const refreshTarget = folderParam
+                    ? `/editor?folder=${encodeURIComponent(folderParam)}`
+                    : '/editor';
                 res.writeHead(200, {
                     'Content-Type': 'text/html; charset=utf-8',
                     'Cache-Control': 'no-store, must-revalidate',
@@ -1520,7 +1579,7 @@ function startApiServer(workingDir, port) {
                 });
                 res.end(`<!DOCTYPE html><html><head>
 <meta charset="utf-8">
-<meta http-equiv="refresh" content="3;url=/editor">
+<meta http-equiv="refresh" content="3;url=${refreshTarget}">
 <title>Starting editor…</title>
 <style>body{font-family:sans-serif;display:flex;align-items:center;justify-content:center;height:100vh;margin:0;background:#1e1e1e;color:#ccc}</style>
 </head><body><p>Starting your editor…</p></body></html>`);
@@ -1528,6 +1587,32 @@ function startApiServer(workingDir, port) {
             return;
         }
         // ────────────────────────────────────────────────────────────────────────
+        // ── Dev-domain subdomain proxy: PORT-slug.dev.voice-native.com → localhost:PORT/* ──
+        // Fly replay routes the request here from the fleet router; the app lives at root
+        // so the full path is forwarded unchanged (no basePath prefix needed).
+        const devPort = parseDevSubdomainPort(req);
+        if (devPort !== null) {
+            ideLastProxiedActivity = Date.now();
+            const devProxyOptions = {
+                hostname: '127.0.0.1',
+                port: devPort,
+                path: url.pathname + (url.search || ''),
+                method: req.method,
+                headers: { ...req.headers, host: `127.0.0.1:${devPort}` },
+            };
+            const devProxyReq = httpRequest(devProxyOptions, (devProxyRes) => {
+                res.writeHead(devProxyRes.statusCode || 502, devProxyRes.headers);
+                devProxyRes.pipe(res);
+            });
+            devProxyReq.on('error', () => {
+                if (!res.headersSent) {
+                    res.writeHead(502);
+                    res.end('Dev port proxy error');
+                }
+            });
+            req.pipe(devProxyReq);
+            return;
+        }
         // ── Port proxy: /proxy/PORT/* → localhost:PORT/proxy/PORT/* ─────────────
         // Forwards to a local dev server while PRESERVING the full path so that
         // basePath-aware apps (e.g. Next.js with basePath: '/proxy/3000') receive
@@ -1536,7 +1621,7 @@ function startApiServer(workingDir, port) {
         const portProxyMatch = url.pathname.match(/^\/proxy\/(\d+)(\/.*)?$/);
         if (portProxyMatch) {
             const targetPort = parseInt(portProxyMatch[1]);
-            if (targetPort > 1024 && targetPort < 65536 && targetPort !== 8300 && targetPort !== parseInt(process.env.OSBORN_API_PORT || '8741', 10)) {
+            if (targetPort > 1024 && targetPort < 65536 && targetPort !== 8300 && targetPort !== OSBORN_API_PORT) {
                 const portProxyOptions = {
                     hostname: '127.0.0.1',
                     port: targetPort,
@@ -1635,6 +1720,13 @@ function startApiServer(workingDir, port) {
     // — this must work for the integrated terminal to connect.
     // Reject all other upgrades (meeting audio moved to polling in 0.9.xx).
     server.on('upgrade', (req, socket, head) => {
+        // Dev-domain subdomain WebSocket proxy (same pattern as HTTP handler above)
+        const wsDevPort = parseDevSubdomainPort(req);
+        if (wsDevPort !== null) {
+            ideLastProxiedActivity = Date.now();
+            wsProxy.ws(req, socket, head, { target: `http://127.0.0.1:${wsDevPort}` });
+            return;
+        }
         const upgradePath = new URL(req.url || '/', `http://localhost`).pathname;
         const isAgentRoute = AGENT_ROUTE_PREFIXES.some(p => upgradePath === p || upgradePath.startsWith(p + '/'));
         if (ideProxyEnabled && hasValidIdeCookie(req) && !isAgentRoute) {
@@ -5137,7 +5229,7 @@ async function main() {
             let readySent = false;
             const provider = sessionVoiceMode === 'realtime' ? realtimeConfig.provider : 'claude';
             // Fetch full session list for startup session browser (all Claude projects)
-            const allSessions = await listAllClaudeSessions(50);
+            const allSessions = await listAllClaudeSessions();
             const recentSessionId = allSessions.length > 0 ? allSessions[0].sessionId : null;
             const hasRecentSession = allSessions.length > 0;
             // Prepare sessions for frontend (up to 50)
@@ -5391,7 +5483,7 @@ async function main() {
                 // List available sessions across all Claude projects
                 console.log('📋 Listing available sessions (all projects)...');
                 try {
-                    const sessions = await listAllClaudeSessions(100);
+                    const sessions = await listAllClaudeSessions();
                     await sendToFrontend({
                         type: 'sessions_list',
                         // See `/sessions` HTTP handler — baseCwd is the agent's
@@ -6220,7 +6312,7 @@ async function main() {
                 let resolvedSessionId = targetSessionId;
                 if (!resolvedSessionId) {
                     // Pick the most recently modified session, excluding the focused one.
-                    const allSess = await listAllClaudeSessions(50);
+                    const allSess = await listAllClaudeSessions();
                     const focusedId = currentLLM?.sessionId || currentResumeSessionId || null;
                     const candidate = allSess.find(s => s.sessionId !== focusedId);
                     resolvedSessionId = candidate?.sessionId ?? undefined;
@@ -6294,8 +6386,9 @@ async function main() {
                             // Process exited between readdir and read — skip it
                         }
                     }
-                    // Sort by resident memory descending, cap at 40 entries
+                    // Sort by resident memory descending, cap table at 40 but keep real total
                     processes.sort((a, b) => b.rssMb - a.rssMb);
+                    const totalCount = processes.length;
                     const topProcesses = processes.slice(0, 40);
                     // Reuse the existing os module memory totals (same source as /health endpoint)
                     const totalMb = Math.round(totalmem() / 1024 / 1024);
@@ -6304,6 +6397,7 @@ async function main() {
                     await sendToFrontend({
                         type: 'process_list',
                         processes: topProcesses,
+                        totalCount,
                         memory: { usedMb, totalMb, freeMb },
                     });
                 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "osborn",
-  "version": "0.9.155",
+  "version": "0.9.159",
   "description": "Voice AI coding assistant - local agent that connects to Osborn frontend",
   "type": "module",
   "bin": {