baa-conductor

feat: enhance watchdog logging for a11y_msg and check cycles

- a11y_msg.sh: log START/OK/FAIL with tab name, message content, and
  exit codes; detect tab-not-found and keystroke failures separately
- watchdog.sh: log full CHECK state (status, idle, timeout, tab, wake_at,
  max_wake) every cycle; capture a11y_msg.sh exit code on renewal

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: add tonight sprint plan for 3-AI BAA integration

feat: add watchdog with heartbeat, timed wake, fallback and progress tracking

docs: add a11y gui control plan

docs: add conductor ui module requirements

Merge branch 'feat/code-file-serving'

Merge branch 'feat/gemini-delivery-adapter'

fix: block .git paths in code file serving

feat: serve code files from conductor local api

feat: add Gemini delivery adapter for DOM-based message injection

Add gemini platform config to PLATFORM_ADAPTERS with selectors targeting
Gemini's rich-text-field/Quill editor, send button via aria-label, and
stop/cancel indicators for send confirmation.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: refresh handoff and progress status

docs: add handoff and update progress for 2026-03-29

19 tasks completed, 3 remaining (T-S048, T-S049, T-S051)
2 pending manual verification (T-BUG-029, T-BUG-031)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: add BUG-026 and BUG-027 reports

docs: update task overview and status summary with all completed tasks

19 tasks completed, 3 remaining (T-S048, T-S049, T-S051)
T-BUG-029 and T-BUG-031 pending manual Firefox verification

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge remote-tracking branch 'origin/bug/chatgpt-thinking-final-message'

fix: reload open ai tabs after extension restart

fix: recover chatgpt final-message after aborted sse

docs: update T-BUG-029 with root cause from diagnostic logs

Root cause identified via T-S054 plugin logs:
1. Main SSE stream (/backend-api/f/conversation) is aborted, chunks discarded
2. isRelevantStreamUrl too broad, matches auxiliary endpoints
3. Need to extract candidate from chunks even on abort

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: forward plugin diagnostic logs to conductor

feat: integrate stagit for static git repository browsing

Add scripts/git-snapshot.sh to generate static HTML from git repos using
stagit with incremental caching. Add /artifact/repo/:repo_name/* route
to conductor local-api to serve the generated pages. Extend the path
matcher to support wildcard (*) trailing segments.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: add T-S054 forward plugin diagnostic logs to conductor via WS

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: add diagnostic logging to Firefox plugin for final-message debugging

Add [BAA]/[BAA-CS] console.log in page-interceptor.js and content-script.js
for Browser Console visibility. Add [NET]/[SSE]/[FM-NET]/[FM-SSE] diagnostic
logs in controller.js for tab tracking, network events, and final-message
observer status. Export isRelevantStreamUrl from final-message.js. Increase
LOG_LIMIT from 160 to 500.

Closes T-S053

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: expose recent session urls in describe

docs: add T-BUG-031 auto-refresh AI tabs after plugin reload

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: add requirements #10 (history sync) and #11 (completion push interception)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: add T-S053 plugin diagnostic logging enhancement

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: wire conductor D1 sync launchd config

fix: accept baa fences with attributes

docs: add T-BUG-030 fix baa fence with attributes not extracted

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge remote-tracking branch 'origin/feat/ingest-logging'

feat: add ingest JSONL logging and fix files/read kind marker

Write browser.final_message payloads and ingest results to
logs/baa-ingest/YYYY-MM-DD.jsonl for post-hoc debugging.
Fix /v1/files/read capability kind from "write" to "read".

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: add T-S052 create new D1 database and initialize

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: record D1 database not yet created in T-S042 remaining risks

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: add next wave requirements and task cards T-S046 through T-S051

- NEXT_WAVE_REQUIREMENTS.md: 9 requirements from discussion (P0-P3)
- T-S046: ingest logging + files/read kind fix
- T-BUG-029: ChatGPT thinking mode final-message extraction bug
- T-S047: cross-session continuity entry point
- T-S048: Gemini delivery adapter
- T-S049: open browser.chatgpt and browser.gemini targets
- T-S050: stagit git static pages
- T-S051: code file direct serving
- Update TASK_OVERVIEW with execution order and dependencies

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Merge remote-tracking branch 'origin/bug/query-routes-and-ask-timeout'

fix: harden sync SQL and transport shutdown

fix: add conversation_id filter to sessions endpoint and fix askStream timeout race

Sessions query endpoint was missing conversation_id filtering that messages
and executions already supported. Also added clearTimeout in askStream's
resolve/reject wrappers to prevent timeout timer from firing after normal
completion.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: add T-BUG-027 and T-BUG-028 for code review fixes

- T-BUG-027: SQL injection, D1 schema FK, daemon.stop() await, listener leaks
- T-BUG-028: sessions query missing conversation_id, ask timeout race condition

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: record pnpm environment validation

fix: stabilize conductor local api test snapshots

docs: add T-BUG-026 fix conductor-daemon test localApiBase undefined

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: wire artifact-db writes to D1 sync queue

ArtifactStore now accepts an optional SyncEnqueuer (via setSyncQueue)
and enqueues a sync record after each successful insertMessage,
insertExecution, and upsertSession. D1SyncWorker exposes getQueue()
so ConductorRuntime can inject the queue at startup. The worker also
purges old synced records after each poll cycle (keeping 1000 by default).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: add T-S045 artifact-db to D1 sync queue integration task

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: add D1 async adapter and sync queue package

New @baa-conductor/d1-client package with:
- Async D1 HTTP API client (fetch-based, replaces old curl/execSync approach)
- Local SQLite sync queue (d1_sync_queue table) for buffering writes
- Background sync worker with exponential backoff (1s-5min, max 10 retries)
- Factory function (createD1SyncWorker) for zero-config integration
- D1 remote database setup script (d1-setup.sql)
- 11 unit tests covering client, queue, worker lifecycle

Integrated into conductor-daemon: sync worker starts/stops with the runtime
when D1_DATABASE_ID, D1_ACCOUNT_ID, and CLOUDFLARE_API_TOKEN are set.
Silently skipped when D1 is not configured.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: add artifact query routes for messages, executions, and sessions

Add 6 read-only query routes to the conductor HTTP server:
- GET /v1/messages, /v1/messages/{id}
- GET /v1/executions, /v1/executions/{id}
- GET /v1/sessions, /v1/sessions/latest

All routes support pagination (limit/offset) and filtering. List endpoints
return summaries with artifact URLs; detail endpoints include full content.
Routes are registered in /describe/business and /v1/capabilities.

Closes T-S041.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: add claude-coded daemon for Claude Code CLI duplex integration

Implement a new independent daemon (apps/claude-coded) that spawns and
manages a Claude Code CLI child process via stdio stream-json duplex
protocol, exposing an HTTP API for prompt submission and status reads.

Architecture mirrors codexd: daemon → stream-json-transport → local-service
→ cli → index. The child process runs with -p --input-format stream-json
--output-format stream-json --verbose --permission-mode bypassPermissions.

HTTP surface:
- GET /healthz — health probe
- GET /describe — service discovery
- GET /v1/claude-coded/status — daemon + child state
- POST /v1/claude-coded/ask — synchronous prompt → response
- POST /v1/claude-coded/ask/stream — SSE streamed events

Also adds conductor proxy routes (/v1/claude-coded, /v1/claude-coded/ask),
runtime service registration in common.sh, launchd plist template, and
install-claude-coded.sh convenience script.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: wire artifact persistence into baa pipeline

Merge remote-tracking branch 'origin/feat/artifact-foundation'

feat: add artifact-db package with static file generation and HTTP routes

- New packages/artifact-db: SQLite store for messages, executions, sessions
- Schema with 3 tables, 6 indexes, foreign key constraints
- Synchronous dual-format static file generation (.txt frontmatter + .json)
- Transaction safety with file rollback on failure
- /artifact/:scope/:file route with Content-Type handling
- /robots.txt route (Allow: /artifact/)
- Path security validation preventing traversal
- Full test coverage (53/53 passing)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: task cards only push, never merge — merger handles merge separately

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: add push step to task template, add T-S044 pnpm env fix

- Task template now explicitly requires pushing branch to remote
- Separate "完成后提交与推送" from "合并步骤（由合并者执行）"
- T-S044: install pnpm to PATH (blocker found during T-S039)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: add issue tracking section to all active task cards

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: add issue tracking section to task template

Tasks now have an "执行过程中遇到的问题" section for recording
blockers, environment issues, and workarounds during execution.
Merger decides whether to fix or create follow-up tasks.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: add T-S043 Claude Code CLI duplex integration task card

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: mark T-S039 in progress, add recommended executor field to template

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: add recommended AI executor to task cards

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: add artifact static service task cards T-S039 through T-S042

- T-S039: Foundation (DB + static file gen + /artifact/ route)
- T-S040: Pipeline integration (ingest/executor write + truncation)
- T-S041: Query routes (/v1/messages, /v1/executions, /v1/sessions)
- T-S042: D1 async adapter and sync queue
- Update TASK_OVERVIEW with execution order and dependencies

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: add artifact static service plan, update task template and progress

- Add ARTIFACT_STATIC_SERVICE.md: complete design for persisting messages
  and execution results to SQLite/D1 with static URL generation
- Update task template: enforce worktree isolation, add lifecycle tracking
  (status, executor, timestamps, summary, risks)
- Update STATUS_SUMMARY: next milestone is artifact static service
- Update TASK_OVERVIEW: P0 is artifact service, close OPT-006
- Update BAA_INSTRUCTION_ROADMAP: reference artifact service as next phase
- Close OPT-006: data never expires, no auto-cleanup needed
- Archive OPT-006 to bugs/archive/

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs: archive legacy plugin delivery plan

docs: split current baa contract from roadmap

test: build conductor dist before browser smoke

chore: archive completed proxy delivery tasks

fix: dedupe in-page conductor overlay

feat: route browser delivery through proxy requests

fix: suppress stale ChatGPT final-message relay

feat: add page-level conductor pause controls

docs: require worktree isolation for t-s037

feat: add in-page conductor control overlay

chore: archive completed Claude live-tab bug task

docs: add baa quickstart for ai agents

docs: add bug 023 task tracking

fix: restore Claude final-message capture in live tabs

docs(claude): BUG-023 Claude final-message not captured in real Firefox — runtime/injection issue

chore: archive completed phase1 browser target task

feat: add phase1 browser claude target

docs: add task card for missing 003

chore: archive completed Claude relay task

fix: relay Claude final messages

docs: add task card for bug 022

chore: archive completed baa bug tasks

fix: keep buffered SSE full_text text-only

fix: harden baa extraction and in-memory dedupe

fix: keep baa batches running after denied preflight

fix: tolerate controller bootstrap handshake failure

docs(claude): BUG-022 final-message.js missing Claude platform — critical blocker for BAA instruction loop

feat: switch browser delivery to text-only flow

docs(claude): BUG-021 buffered SSE full_text metadata pollution

docs(claude): BAA instruction system review — BUG-018/019/020, MISSING-001/002/003, OPT-002~006

docs: code review of BAA instruction system — BUG-018/019/020 + improvements

docs: add next baa delivery tasks and sync progress

feat: add baa execution persistence and delivery bridge

feat: add live instruction ingest and artifact center core

feat: add browser final message relay and baa instruction center

docs: add baa next-wave plan and task splits

feat: finalize stale lease sweeping and chatgpt relay

docs: add baa instruction system v5

docs: add next browser follow-up task docs

docs: replace PROPOSAL-BAA-INSTRUCTION-V3 with BAA_INSTRUCTION_SYSTEM (final merged spec)

fix: resolve BUG-013 and BUG-017

fix: resolve BUG-011 BUG-012 and BUG-014

docs: add bug fix task docs

docs: sync progress docs and bug status from code review

docs: add BUG-015/016/017 with FIX cards — SSE stream, custom headers, buffered SSE parsing

docs: add BUG-014, FIX-BUG-014, OPT-001 and update bugs README

docs: refine BUG-014/FIX-BUG-014 and update bugs README

docs: add BUG-014, FIX-BUG-014, OPT-001 and update bugs README

fix: restore managed firefox shell tabs on startup

feat: close browser control runtime loop

docs: add FIX-BUG-011/012/013 fix cards for codex

docs: add BUG-011/012/013 and code review discuss

docs: add browser control closure task

feat: complete browser relay control path

docs: record browser bridge delivery order

feat: advance browser bridge control integration

docs: add browser bridge development tasks

docs: add planning discussion notes

docs: refine firefox bridge planning

feat: persist browser bridge metadata

docs: add browser bridge persistence tasks

docs: prioritize browser bridge persistence

docs: refresh status and dependency decisions

merge: land T-S013 to T-S016

chore: add next-wave task docs

merge: land T-S011 and T-S012

merge: land T-S009 and T-S010

merge: land T-S006 and T-S008

chore: add next-wave task docs

merge: land T-S005 and T-S007

merge: land T-S001 to T-S004

chore: align task docs format

chore: drop plans workflow doc

chore: prune completed task docs

chore: rename coordination to plans

chore: reconcile coordination status after merged fixes

Merge branch 'fix/tcc-exec-result-shape'

# Conflicts:
#	apps/conductor-daemon/src/index.test.js
#	docs/api/local-host-ops.md

Merge branch 'fix/exec-cwd-enoent-message'

# Conflicts:
#	packages/host-ops/src/index.test.js

chore: move desktop bugs and browser-control tasks into coordination/

Move from Desktop to version-controlled coordination/ directory:
- bugs/ -> coordination/bugs/ (BUG-008, BUG-009, BUG-010 + FIX cards)
- baa-conductor-browser-control-tasks/ -> coordination/tasks/browser-control/

Also rename BUG-009 codexd turn status bug to BUG-010 to avoid
collision with BUG-009 conductor-daemon test listener leak.

fix(runtime): add proxy env vars to codexd launchd template

launchd background processes do not inherit macOS system proxy settings.
App-server HTTPS connections to OpenAI were unstable due to missing proxy.

Add HTTPS_PROXY, HTTP_PROXY, ALL_PROXY pointing to 127.0.0.1:7890
so the codex app-server child process routes traffic through the local
proxy and maintains stable streaming connections.

docs: add browser control smoke coverage

merge: land BRW003 conductor browser http surface

merge: land BRW002 claude page automation http

feat(conductor-daemon): add browser http surface

feat(firefox): add claude page http runtime bridge

feat(conductor-daemon): add firefox ws command broker

fix(codexd): keep retrying turns in progress

fix(runtime): wire conductor to codexd launchd env

feat: add codexd describe surface

feat(runtime): add shared token generator

Add codexd e2e smoke coverage

Align codexd runtime surface with sessions and turns

feat(runtime): make codexd a first-class launchd service

docs(codexd): remove leftover merge markers

docs(codexd): clarify app-server-only product surface

feat(conductor-daemon): proxy codex routes to codexd

fix(firefox): restore tracked tab and credential panels

fix(firefox): default to local mini endpoints

feat(codexd): add local service surface

fix(host-ops): secure and normalize local host operations

test(conductor-daemon): tidy exec failure regression coverage

fix(host-ops): normalize exec failure result shape

fix(host-ops): narrow TCC preflight to cwd

fix(host-ops): restrict exec environment

fix(conductor-daemon): require shared token for host ops

feat(codexd): add local service surface

docs(codexd): require standalone daemon

fix(host-ops): clarify invalid exec cwd errors

fix(conductor-daemon): stabilize exec failure result shape

fix(runtime): recover conductor after launchd reload

fix(host-ops): fail fast on macOS TCC protected exec paths

feat(codexd): add daemon scaffold

feat(codex-exec): add fallback exec adapter

feat(codex-app-server): add app-server adapter package

Merge feat/remove-worker-and-cutover

docs: retain codexd while removing worker surface

feat: remove worker control plane surface

docs(runtime): define codexd around app-server

feat(conductor-daemon): expose local host ops over http

feat(firefox): default local ws bridge

docs(api): add business and control describe guides

feat(conductor-daemon): add local firefox ws bridge

Mark first local API batch tasks done

feat(host-ops): add local host operations package

feat(conductor-daemon): serve local control API

docs: unify local api cutover guidance

Fix extension access to control API

feat(firefox): auto-retry control api sync

Add describe and read-only control API surfaces

Add hand and shell migration plan

fix(firefox): disable legacy ws by default

Allow Firefox plugin to reach live control API

fix(firefox): derive live tab and credential counts from current state

Fix status-api live truth source

Use system Firefox profile for manual plugin workflow

Add mini runtime management and Firefox launcher scripts

Migrate legacy controller base URL to live control API

Simplify control API auth for temporary mini setup

Remove HA and historical artifacts

Simplify deployment target to mini single-node

Vendor baa-firefox into plugin subdirectory

Archive T-029 stability regression

Merge branch 'feat/T-029-stability-regression'

feat: record T-029 live stability regression

Archive T-028 real rollout

Merge feat/T-028-real-rollout-v2 into main

Update T-028 task card

Complete T-028 real rollout

Archive T-028 unblock task

Merge feat/T-028-unblock-tailscale-listen into main

docs: finalize T-028 unblock task card

feat: unblock T-028 tailscale listen

Create final-stage rollout tasks

Archive fifth-wave tasks

Merge feat/T-027-node-verification into main

Merge feat/T-025-failover-rehearsal into main

Merge feat/T-024-e2e-smoke into main

Merge feat/T-023-control-api-smoke into main

feat(smoke): add e2e smoke harness

chore(coordination): update T-026 task card

feat: add failover rehearsal runbooks

feat(runtime): add on-node node verification checks

feat(control-api): add local d1 smoke harness

Create fifth-wave task board

Archive fourth-wave tasks

Merge branch 'integration/fourth-wave-20260322'

Merge remote-tracking branch 'origin/feat/T-019-conductor-http' into integration/fourth-wave-20260322

Integrate T-021 runtime bootstrap

Merge remote-tracking branch 'origin/feat/T-020-status-host' into integration/fourth-wave-20260322

Merge remote-tracking branch 'origin/feat/T-022-ops-automation' into integration/fourth-wave-20260322

Merge remote-tracking branch 'origin/feat/T-018-control-api-deploy' into integration/fourth-wave-20260322

chore(coordination): update T-022 task log

feat(ops): add nginx and cloudflare dns automation helpers

feat(control-api-worker): add cloudflare deployment template

feat(status-api): add local host process

feat(conductor-daemon): add local http probes

Create fourth-wave task board

Archive third-wave tasks

Merge branch 'integration/third-wave-20260322'

Merge remote-tracking branch 'origin/feat/T-016-worker-persistence' into integration/third-wave-20260322

Merge remote-tracking branch 'origin/feat/T-015-conductor-runtime' into integration/third-wave-20260322

# Conflicts:
#	apps/conductor-daemon/package.json

Merge remote-tracking branch 'origin/feat/T-017-status-runtime' into integration/third-wave-20260322

# Conflicts:
#	apps/status-api/package.json

Merge remote-tracking branch 'origin/feat/T-014-control-api-runtime' into integration/third-wave-20260322

Merge remote-tracking branch 'origin/feat/T-013-build-runtime' into integration/third-wave-20260322

feat(conductor-daemon): wire runtime entry

feat: wire control api runtime

Clarify public vs Tailscale internal routing

style(worker-runner): fix lifecycle event indentation

feat(worker-runner): persist local run files

feat: add runtime dist builds for apps

feat: add status api runtime entry

Create third-wave task cards

Archive second-wave task cards

Merge branch 'feat/T-010-status-api'

Merge branch 'feat/T-009-firefox-pause'

Merge branch 'feat/T-006-checkpointing'

Merge branch 'feat/T-004-conductor-lease'

Merge branch 'feat/T-003-control-api'

feat: add conductor lease heartbeat skeleton

feat: scaffold control api worker

feat: scaffold checkpoint manager for worker runner

feat: scaffold status api surface

docs: define firefox pause resume protocol

Refresh second-wave base commit

Document second-wave startup baseline

Archive first-wave task cards

Merge first-wave task outputs into main

Merge branch 'feat/T-012-auth-model'

Merge branch 'feat/T-011-launchd-runtime'

Merge branch 'feat/T-008-ops-nginx'

Merge branch 'feat/T-007-planner'

Merge branch 'feat/T-005-worker-runner'

Merge branch 'feat/T-002-d1-schema'

Define auth roles and token model

Implement D1 schema and db skeleton

feat: scaffold worker runner logging contracts

docs: define launchd runtime layout

feat: add planner abstractions and templates

feat: add nginx and VPS ops configuration

Simplify task status workflow

Initial scaffold and collaboration docs