feat(cloud-agent): add workspace terminal support

[eshurakov]

Summary

• Adds workspace terminal tabs and a terminal dock to cloud-agent chat sessions.
• Adds web, tRPC, cloud-agent service, and wrapper routes for creating and proxying PTY terminal sessions.
• Adds access checks, terminal error handling, and regression coverage for wrapper/client/session behavior.

Verification

• Manual verification

Visual Changes

Reviewer Notes

• Main review areas: WebSocket close/retry behavior, session access checks, and wrapper PTY proxying.
• The branch is ready for review.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Executive Summary

Incremental diff adds slash-command support (discriminated payload union through tRPC → orchestrator → wrapper), devcontainer session routing with secure env-file injection for secrets, and devcontainer admin guard — all reviewed with no new issues found.

Changes Reviewed in This Update

New code reviewed:

• services/cloud-agent-next/src/execution/wrapper-call.ts: New dispatch module branches prompt vs command payload to the correct wrapper API (✅)
• services/cloud-agent-next/src/execution/types.ts: ExecutionPayload discriminated union (PromptExecutionPayload | CommandExecutionPayload), ExistingSessionMetadata.devcontainer shape (✅)
• services/cloud-agent-next/src/execution/orchestrator.ts: ensureDevContainerHandleIfNeeded, buildRuntimeEnv plumbing, dispatchToWrapper integration (✅)
• services/cloud-agent-next/src/kilo/wrapper-client.ts: Devcontainer exec command builder, env-file injection with cleanup on failure, shellQuote migration, WrapperNotReadyError.cause propagation, fixedPort port-retry skip (✅)
• services/cloud-agent-next/src/persistence/CloudAgentSession.ts: kiloCommands, devcontainer, initialPayload fields; setAvailableCommands/getAvailableCommands; command-payload mode/model validation bypass; stopWrapper devcontainer aware (✅)
• services/cloud-agent-next/src/router/schemas.ts: SendMessageV2Payload discriminated union, PrepareSessionInput.devcontainer + initialPayload + kiloCommands, UpdateSessionInput.kiloCommands (✅)
• services/cloud-agent-next/wrapper/src/server.ts: Command handler mirrors prompt handler's connection-open + setActive lifecycle (✅)
• services/cloud-agent-next/wrapper/src/kilo-api.ts: listCommands (filters out skill source), sendCommand now forwards messageId (✅)
• apps/web/src/routers/cloud-agent-next-schemas.ts: sendMessageNextPayloadSchema discriminated union, devcontainer field (✅)
• apps/web/src/routers/cloud-agent-next-router.ts: devcontainer admin guard (✅)
• apps/web/src/routers/organizations/organization-cloud-agent-next-router.ts: same guard + payload forwarding (✅)
• apps/web/src/components/cloud-agent-next/CloudChatPage.tsx: handleSendSlashCommand callback (✅)
• apps/web/src/lib/cloud-agent-next/cloud-agent-client.ts: devcontainer field on PrepareSessionInput type (✅)

Files Reviewed (33 files)

• apps/web/src/components/cloud-agent-next/CloudAgentTerminalDock.tsx
• apps/web/src/components/cloud-agent-next/CloudAgentWorkspaceTabs.tsx
• apps/web/src/components/cloud-agent-next/CloudChatPage.tsx
• apps/web/src/components/cloud-agent-next/terminal-tabs.ts
• apps/web/src/components/cloud-agent-next/terminal-utils.ts
• apps/web/src/components/cloud-agent-next/useCloudAgentTerminal.ts
• apps/web/src/lib/cloud-agent-next/cloud-agent-client.ts
• apps/web/src/lib/cloud-agent-next/terminal-errors.ts
• apps/web/src/lib/cloud-agent/stream-ticket.ts
• apps/web/src/routers/cloud-agent-next-schemas.ts ✅
• apps/web/src/routers/cloud-agent-next-router.ts ✅
• apps/web/src/routers/cloud-agent-router.test.ts
• apps/web/src/routers/organizations/organization-cloud-agent-next-router.ts ✅
• apps/web/src/routers/organizations/organization-cloud-agent-router.test.ts
• services/cloud-agent-next/src/auth.ts
• services/cloud-agent-next/src/execution/orchestrator.ts ✅
• services/cloud-agent-next/src/execution/types.ts ✅
• services/cloud-agent-next/src/execution/wrapper-call.ts ✅
• services/cloud-agent-next/src/kilo/wrapper-client.ts ✅
• services/cloud-agent-next/src/kilo/wrapper-client.test.ts
• services/cloud-agent-next/src/persistence/CloudAgentSession.ts ✅
• services/cloud-agent-next/src/router.ts
• services/cloud-agent-next/src/router.test.ts
• services/cloud-agent-next/src/router/handlers/session-terminal.ts
• services/cloud-agent-next/src/router/schemas.ts ✅
• services/cloud-agent-next/src/server.ts
• services/cloud-agent-next/src/server.test.ts
• services/cloud-agent-next/src/terminal/access.ts
• services/cloud-agent-next/src/terminal/access.test.ts
• services/cloud-agent-next/test/unit/wrapper/kilo-api.test.ts
• services/cloud-agent-next/wrapper/src/kilo-api.ts ✅
• services/cloud-agent-next/wrapper/src/server.ts ✅
• services/cloud-agent-next/wrapper/src/main.ts

---

_{Reviewed by claude-4.6-sonnet-20260217 · 4,625,502 tokens}

_{Review guidance: REVIEW.md from base branch main}