feat(macrod): ratatui control panel serving in-process

[ehayes2000]

Adds macrod tui: the serving core runs inside a terminal control panel with pairing, live sessions, comment-preserving config editing, self-retirement, and logs, backed by new HarnessOnly self endpoints. Stacked on #6030.

---

Note

Medium Risk
Changes touch harness authentication, session ownership, and cross-harness isolation on control APIs; incorrect binding logic could block legitimate daemons or leave a gap, though tests cover the new harness owner and serve-session checks.

Overview
macrod is now a single terminal control panel that runs the webhook/feed-reconcile serving core in-process (no separate login subcommand). The UI shows harness registration, bound agents, live sessions, comment-preserving macro.toml editing, in-panel pairing (p), self-removal, and ring-buffer logs; pairing and registration errors point users to re-pair in the TUI instead of macrod login.

Storage adds harness-authenticated self endpoints for the daemon: GET/DELETE /harnesses/me, plus GET /harnesses/me/sessions (recent sessions for bots bound to that harness, backed by a new SQLx query). OpenAPI/Orval/Zod clients pick up HarnessSession and the new routes.

Harness session authorization is tightened. Session create for harness callers always uses the verified acting user (forwarded header), not an unverified owner in the body; the daemon sends that header when opening sessions from mentions. Control, delete, and sandbox resize require harness callers to match session_harness (bot bound to their harness) so one harness cannot drive another user’s sessions on a different machine. Runtime registry exposes bound_harness for that resolution.

Webhook verification rejects empty signing secrets so a daemon with no feed secret cannot accept forged deliveries after the feed is cleared.

^{Reviewed by Cursor Bugbot for commit 4b4f095. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Team

Run ID: 6873a509-2b1c-462f-82f9-24313cc6a63b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Preview: https://eric-hayes-macrod-tui-nzatnw.preview.macro.com/app (b871506)

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 5a7f650. Configure here.}

[cursor]

Reconcile task leaks on start failure

High Severity

Daemon::start spawns the feed reconcile loop before binding the webhook port, and a bind failure returns without calling cancel(). Dropping a CancellationToken does not cancel it, so the loop keeps reconciling feeds for the rest of the TUI process. Re-pairing then leaves that leftover loop maintaining the previous harness's feed against a listener that is not running.

 

^{Reviewed by Cursor Bugbot for commit 5a7f650. Configure here.}