refactor: consolidate ~70 scattered constants into 6 new config files (phase 6)

Create 6 domain-focused config files in src/config/ to centralize operational
tuning knobs that were scattered across 15+ source files:

- server-timing.ts: SSE batching, state debounce, scheduled runs, error recovery
- auth-config.ts: session TTL, rate limits, hook timeout
- tunnel-config.ts: QR token rotation, tunnel process lifecycle
- terminal-limits.ts: input length, terminal cols/rows, session name
- ai-defaults.ts: AI model string, idle/plan context limits
- team-config.ts: poll interval, cache sizes

Eliminates all cross-file duplicates:
- AI model string: 5 occurrences → 1 (config only)
- STATS_COLLECTION_INTERVAL_MS: 2 → 1
- timeout: 10000 in hooks-config: 6 → 0 (now HOOK_TIMEOUT_MS)
- MAX_TRACKED_AGENTS shadow: removed, imports from map-limits

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/ai-idle-checker.ts

@@ -30,6 +30,7 @@ import {
   type AiCheckerResultBase,
   type AiCheckerStateBase,
 } from './ai-checker-base.js';
+import { AI_CHECK_MODEL, AI_IDLE_CHECK_MAX_CONTEXT } from './config/ai-defaults.js';
 
 // ========== Types ==========
 
@@ -45,8 +46,8 @@ export type AiCheckState = AiCheckerStateBase<AiCheckVerdict>;
 
 const DEFAULT_AI_CHECK_CONFIG: AiIdleCheckConfig = {
   enabled: true,
-  model: 'claude-opus-4-5-20251101',
-  maxContextChars: 16000,
+  model: AI_CHECK_MODEL,
+  maxContextChars: AI_IDLE_CHECK_MAX_CONTEXT,
   checkTimeoutMs: 90000,
   cooldownMs: 180000,
   errorCooldownMs: 60000,

src/ai-plan-checker.ts

@@ -29,6 +29,7 @@ import {
   type AiCheckerResultBase,
   type AiCheckerStateBase,
 } from './ai-checker-base.js';
+import { AI_CHECK_MODEL, AI_PLAN_CHECK_MAX_CONTEXT } from './config/ai-defaults.js';
 
 // ========== Types ==========
 
@@ -44,8 +45,8 @@ export type AiPlanCheckState = AiCheckerStateBase<AiPlanCheckVerdict>;
 
 const DEFAULT_PLAN_CHECK_CONFIG: AiPlanCheckConfig = {
   enabled: true,
-  model: 'claude-opus-4-5-20251101',
-  maxContextChars: 8000,
+  model: AI_CHECK_MODEL,
+  maxContextChars: AI_PLAN_CHECK_MAX_CONTEXT,
   checkTimeoutMs: 60000,
   cooldownMs: 30000,
   errorCooldownMs: 30000,

src/config/ai-defaults.ts

@@ -0,0 +1,18 @@
+/**
+ * @fileoverview Default model and context limits for AI-powered checkers.
+ *
+ * Centralizes the AI model identifier and context window sizes used by
+ * the idle checker, plan checker, respawn controller defaults, and
+ * respawn route fallbacks. Change the model here when upgrading.
+ *
+ * @module config/ai-defaults
+ */
+
+/** Default model for AI idle and plan checkers */
+export const AI_CHECK_MODEL = 'claude-opus-4-5-20251101';
+
+/** Max context chars for idle checker (~4k tokens) */
+export const AI_IDLE_CHECK_MAX_CONTEXT = 16000;
+
+/** Max context chars for plan checker (~2k tokens, plan mode UI is compact) */
+export const AI_PLAN_CHECK_MAX_CONTEXT = 8000;

src/config/auth-config.ts

@@ -0,0 +1,35 @@
+/**
+ * @fileoverview Authentication, rate limiting, and hook security constants.
+ *
+ * Controls auth session lifecycle, brute-force protection,
+ * and Claude Code hook timeouts.
+ *
+ * @module config/auth-config
+ */
+
+// ============================================================================
+// Session Cookies
+// ============================================================================
+
+/** Auth session cookie TTL — matches autonomous run length (ms) */
+export const AUTH_SESSION_TTL_MS = 24 * 60 * 60 * 1000;
+
+/** Max concurrent auth sessions per server */
+export const MAX_AUTH_SESSIONS = 100;
+
+// ============================================================================
+// Rate Limiting
+// ============================================================================
+
+/** Max failed auth attempts per IP before 429 rejection */
+export const AUTH_FAILURE_MAX = 10;
+
+/** Failed auth attempt tracking window (ms) */
+export const AUTH_FAILURE_WINDOW_MS = 15 * 60 * 1000;
+
+// ============================================================================
+// Hooks
+// ============================================================================
+
+/** Timeout for Claude Code hook curl commands (ms) */
+export const HOOK_TIMEOUT_MS = 10000;

src/config/map-limits.ts

@@ -47,6 +47,15 @@ export const MAX_TODOS_PER_SESSION = 500;
 // Pending Tool Calls Limits
 // ============================================================================
 
+// ============================================================================
+// Agent Tracking Limits
+// ============================================================================
+
+/**
+ * Maximum agents to track across all sessions (LRU eviction when exceeded).
+ */
+export const MAX_TRACKED_AGENTS = 500;
+
 /**
  * Maximum pending tool calls to track per subagent.
  * Entries should be cleaned up on tool_result, but this prevents leaks.

src/config/server-timing.ts

@@ -0,0 +1,68 @@
+/**
+ * @fileoverview Web server performance and scheduling constants.
+ *
+ * Controls terminal batching throughput, SSE health checking,
+ * state persistence debouncing, and scheduled run timing.
+ *
+ * @module config/server-timing
+ */
+
+// ============================================================================
+// Terminal & SSE Performance
+// ============================================================================
+
+/** Terminal data batching interval — targets 60fps (ms) */
+export const TERMINAL_BATCH_INTERVAL = 16;
+
+/** Immediate flush threshold for terminal batches (bytes).
+ * Set high (32KB) to allow effective batching; avg Ink events are ~14KB. */
+export const BATCH_FLUSH_THRESHOLD = 32 * 1024;
+
+/** Task event batching interval (ms) */
+export const TASK_UPDATE_BATCH_INTERVAL = 100;
+
+/** SSE client health check interval (ms) */
+export const SSE_HEALTH_CHECK_INTERVAL = 30 * 1000;
+
+// ============================================================================
+// State Persistence
+// ============================================================================
+
+/** State update debounce — batches expensive toDetailedState() calls (ms) */
+export const STATE_UPDATE_DEBOUNCE_INTERVAL = 500;
+
+/** Sessions list cache TTL — avoids re-serializing on every SSE init (ms) */
+export const SESSIONS_LIST_CACHE_TTL = 1000;
+
+// ============================================================================
+// Scheduled Runs
+// ============================================================================
+
+/** Scheduled runs cleanup check interval (ms) */
+export const SCHEDULED_CLEANUP_INTERVAL = 5 * 60 * 1000;
+
+/** Completed scheduled run max age before cleanup (ms) */
+export const SCHEDULED_RUN_MAX_AGE = 60 * 60 * 1000;
+
+/** Session limit retry wait before retrying (ms) */
+export const SESSION_LIMIT_WAIT_MS = 5000;
+
+/** Pause between scheduled run iterations (ms) */
+export const ITERATION_PAUSE_MS = 2000;
+
+// ============================================================================
+// Mux Stats
+// ============================================================================
+
+/** Mux stats collection interval (ms) */
+export const STATS_COLLECTION_INTERVAL_MS = 2000;
+
+// ============================================================================
+// Process Error Recovery
+// ============================================================================
+
+/** Max consecutive unhandled errors before auto-restart */
+export const MAX_CONSECUTIVE_ERRORS = 5;
+
+/** Error counter reset interval — forgives errors after quiet period (ms) */
+export const ERROR_RESET_MS = 60_000;

src/config/team-config.ts

@@ -0,0 +1,18 @@
+/**
+ * @fileoverview Agent Teams polling and cache configuration.
+ *
+ * Controls how frequently TeamWatcher polls ~/.claude/teams/
+ * and how many teams/tasks are cached in memory.
+ *
+ * @module config/team-config
+ */
+
+/** Team directory poll interval (ms) */
+export const TEAM_POLL_INTERVAL_MS = 30_000;
+
+/** Max cached team configs (LRU eviction) */
+export const MAX_CACHED_TEAMS = 50;
+
+/** Max cached team tasks and inbox messages (LRU eviction).
+ * Used for both teamTasks and inboxCache maps. */
+export const MAX_CACHED_TASKS = 200;

src/config/terminal-limits.ts

@@ -0,0 +1,21 @@
+/**
+ * @fileoverview Terminal dimension and input validation limits.
+ *
+ * Used by API routes to validate resize, input, and session
+ * creation requests. Separate from buffer-limits.ts which
+ * controls memory buffer sizes.
+ *
+ * @module config/terminal-limits
+ */
+
+/** Max input length per API request (bytes) */
+export const MAX_INPUT_LENGTH = 64 * 1024;
+
+/** Max terminal columns for resize requests */
+export const MAX_TERMINAL_COLS = 500;
+
+/** Max terminal rows for resize requests */
+export const MAX_TERMINAL_ROWS = 200;
+
+/** Max session name length (chars) */
+export const MAX_SESSION_NAME_LENGTH = 128;

src/config/tunnel-config.ts

@@ -0,0 +1,44 @@
+/**
+ * @fileoverview Cloudflare tunnel and QR authentication constants.
+ *
+ * Controls QR token rotation timing, rate limiting,
+ * and tunnel process lifecycle.
+ *
+ * @module config/tunnel-config
+ */
+
+// ============================================================================
+// QR Token Rotation
+// ============================================================================
+
+/** QR token auto-rotation interval (ms) */
+export const QR_TOKEN_TTL_MS = 60_000;
+
+/** Grace period — previous token still valid during rotation (ms) */
+export const QR_TOKEN_GRACE_MS = 90_000;
+
+/** Length of the short code in QR URL path (chars) */
+export const SHORT_CODE_LENGTH = 6;
+
+// ============================================================================
+// QR Rate Limiting
+// ============================================================================
+
+/** Global rate limit for QR auth attempts across all IPs */
+export const QR_RATE_LIMIT_MAX = 30;
+
+/** QR rate limit reset window (ms) */
+export const QR_RATE_LIMIT_WINDOW_MS = 60_000;
+
+// ============================================================================
+// Tunnel Process Lifecycle
+// ============================================================================
+
+/** Max time to wait for cloudflared URL before timeout (ms) */
+export const URL_TIMEOUT_MS = 30_000;
+
+/** Restart delay after unexpected tunnel exit (ms) */
+export const RESTART_DELAY_MS = 5_000;
+
+/** SIGTERM → SIGKILL escalation timeout (ms) */
+export const FORCE_KILL_MS = 5_000;

src/hooks-config.ts

@@ -13,6 +13,7 @@ import { readFile, writeFile, mkdir } from 'node:fs/promises';
 import { join } from 'node:path';
 
 import type { HookEventType } from './types.js';
+import { HOOK_TIMEOUT_MS } from './config/auth-config.js';
 
 /**
  * Generates the hooks section for .claude/settings.local.json
@@ -38,30 +39,30 @@ export function generateHooksConfig(): { hooks: Record<string, unknown[]> } {
       Notification: [
         {
           matcher: 'idle_prompt',
-          hooks: [{ type: 'command', command: curlCmd('idle_prompt'), timeout: 10000 }],
+          hooks: [{ type: 'command', command: curlCmd('idle_prompt'), timeout: HOOK_TIMEOUT_MS }],
         },
         {
           matcher: 'permission_prompt',
-          hooks: [{ type: 'command', command: curlCmd('permission_prompt'), timeout: 10000 }],
+          hooks: [{ type: 'command', command: curlCmd('permission_prompt'), timeout: HOOK_TIMEOUT_MS }],
         },
         {
           matcher: 'elicitation_dialog',
-          hooks: [{ type: 'command', command: curlCmd('elicitation_dialog'), timeout: 10000 }],
+          hooks: [{ type: 'command', command: curlCmd('elicitation_dialog'), timeout: HOOK_TIMEOUT_MS }],
         },
       ],
       Stop: [
         {
-          hooks: [{ type: 'command', command: curlCmd('stop'), timeout: 10000 }],
+          hooks: [{ type: 'command', command: curlCmd('stop'), timeout: HOOK_TIMEOUT_MS }],
         },
       ],
       TeammateIdle: [
         {
-          hooks: [{ type: 'command', command: curlCmd('teammate_idle'), timeout: 10000 }],
+          hooks: [{ type: 'command', command: curlCmd('teammate_idle'), timeout: HOOK_TIMEOUT_MS }],
         },
       ],
       TaskCompleted: [
         {
-          hooks: [{ type: 'command', command: curlCmd('task_completed'), timeout: 10000 }],
+          hooks: [{ type: 'command', command: curlCmd('task_completed'), timeout: HOOK_TIMEOUT_MS }],
         },
       ],
     },

src/index.ts

@@ -14,10 +14,10 @@ import { program } from './cli.js';
 // In web mode, we should NOT exit on transient errors — log and continue
 const isWebMode = process.argv.includes('web');
 
+import { MAX_CONSECUTIVE_ERRORS, ERROR_RESET_MS } from './config/server-timing.js';
+
 // Track consecutive unhandled errors in web mode — restart after too many
 let consecutiveErrors = 0;
-const MAX_CONSECUTIVE_ERRORS = 5;
-const ERROR_RESET_MS = 60000; // Reset counter after 1 minute of no errors
 let errorResetTimer: ReturnType<typeof setTimeout> | null = null;
 
 function trackError(): void {

src/respawn-controller.ts

@@ -53,6 +53,7 @@ import {
 import { RespawnAdaptiveTiming } from './respawn-adaptive-timing.js';
 import { RespawnCycleMetricsTracker } from './respawn-metrics.js';
 import { calculateHealthScore, shouldSkipClear, type HealthInputs } from './respawn-health.js';
+import { AI_CHECK_MODEL, AI_IDLE_CHECK_MAX_CONTEXT, AI_PLAN_CHECK_MAX_CONTEXT } from './config/ai-defaults.js';
 import type {
   RespawnCycleMetrics,
   RespawnAggregateMetrics,
@@ -547,13 +548,13 @@ const DEFAULT_CONFIG: RespawnConfig = {
   autoAcceptPrompts: true, // auto-accept plan mode prompts (not questions)
   autoAcceptDelayMs: 8000, // 8 seconds before auto-accepting
   aiIdleCheckEnabled: true, // use AI to confirm idle state
-  aiIdleCheckModel: 'claude-opus-4-5-20251101',
-  aiIdleCheckMaxContext: 16000, // ~4k tokens
+  aiIdleCheckModel: AI_CHECK_MODEL,
+  aiIdleCheckMaxContext: AI_IDLE_CHECK_MAX_CONTEXT,
   aiIdleCheckTimeoutMs: 90000, // 90 seconds (thinking can be slow)
   aiIdleCheckCooldownMs: 180000, // 3 minutes after WORKING verdict
   aiPlanCheckEnabled: true, // use AI to confirm plan mode before auto-accept
-  aiPlanCheckModel: 'claude-opus-4-5-20251101',
-  aiPlanCheckMaxContext: 8000, // ~2k tokens (plan mode UI is compact)
+  aiPlanCheckModel: AI_CHECK_MODEL,
+  aiPlanCheckMaxContext: AI_PLAN_CHECK_MAX_CONTEXT,
   aiPlanCheckTimeoutMs: 60000, // 60 seconds (thinking can be slow)
   aiPlanCheckCooldownMs: 30000, // 30 seconds after NOT_PLAN_MODE
   stuckStateDetectionEnabled: true, // detect stuck states

src/subagent-watcher.ts

@@ -13,7 +13,7 @@ import { homedir } from 'node:os';
 import { join, basename } from 'node:path';
 import { execFile } from 'node:child_process';
 import { readFile, readdir, stat as statAsync } from 'node:fs/promises';
-import { PENDING_TOOL_CALL_TTL_MS, MAX_PENDING_TOOL_CALLS } from './config/map-limits.js';
+import { PENDING_TOOL_CALL_TTL_MS, MAX_PENDING_TOOL_CALLS, MAX_TRACKED_AGENTS } from './config/map-limits.js';
 import { CleanupManager, KeyedDebouncer } from './utils/index.js';
 
 // ========== Types ==========
@@ -134,7 +134,6 @@ const FILE_ALIVE_THRESHOLD_MS = 30000; // File mtime within 30s = agent alive (p
 const STALE_COMPLETED_MAX_AGE_MS = 60 * 60 * 1000; // Remove completed agents older than 1 hour
 const STALE_IDLE_MAX_AGE_MS = 4 * 60 * 60 * 1000; // Remove idle agents older than 4 hours
 const STARTUP_MAX_FILE_AGE_MS = 4 * 60 * 60 * 1000; // Only load files modified in last 4 hours on startup
-const MAX_TRACKED_AGENTS = 500; // Maximum agents to track (LRU eviction when exceeded)
 
 // Internal Claude Code agent patterns to filter out (not real user-initiated subagents)
 const INTERNAL_AGENT_PATTERNS = [

src/team-watcher.ts

@@ -17,12 +17,7 @@ import { watch as chokidarWatch, type FSWatcher as ChokidarWatcher } from 'choki
 
 import type { TeamConfig, TeamMember, TeamTask, InboxMessage } from './types.js';
 import { LRUMap } from './utils/lru-map.js';
-
-// ========== Constants ==========
-
-const POLL_INTERVAL_MS = 30000;
-const MAX_CACHED_TEAMS = 50;
-const MAX_CACHED_TASKS = 200;
+import { TEAM_POLL_INTERVAL_MS, MAX_CACHED_TEAMS, MAX_CACHED_TASKS } from './config/team-config.js';
 
 // ========== TeamWatcher Class ==========
 
@@ -52,7 +47,7 @@ export class TeamWatcher extends EventEmitter {
   start(): void {
     if (this.pollTimer) return;
     this.poll();
-    this.pollTimer = setInterval(() => this.poll(), POLL_INTERVAL_MS);
+    this.pollTimer = setInterval(() => this.poll(), TEAM_POLL_INTERVAL_MS);
     this.setupFsWatchers();
   }
 

src/tunnel-manager.ts

@@ -19,6 +19,16 @@ import { existsSync } from 'node:fs';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
 import { randomBytes } from 'node:crypto';
+import {
+  QR_TOKEN_TTL_MS,
+  QR_TOKEN_GRACE_MS,
+  SHORT_CODE_LENGTH,
+  QR_RATE_LIMIT_MAX,
+  QR_RATE_LIMIT_WINDOW_MS,
+  URL_TIMEOUT_MS,
+  RESTART_DELAY_MS,
+  FORCE_KILL_MS,
+} from './config/tunnel-config.js';
 
 // ========== Types ==========
 
@@ -34,19 +44,6 @@ interface QrTokenRecord {
   consumed: boolean; // single-use flag
 }
 
-// ========== Constants ==========
-
-/** QR token auto-rotation interval */
-const QR_TOKEN_TTL_MS = 60_000;
-/** Grace period for previous token (scan-during-rotation race) */
-const QR_TOKEN_GRACE_MS = 90_000;
-/** Length of short code in QR URL path */
-const SHORT_CODE_LENGTH = 6;
-/** Global rate limit for QR attempts across all IPs */
-const QR_RATE_LIMIT_MAX = 30;
-/** Global rate limit reset window */
-const QR_RATE_LIMIT_WINDOW_MS = 60_000;
-
 /** Rejection-sampled base62 short code — no modulo bias */
 function generateShortCode(): string {
   const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
@@ -60,20 +57,9 @@ function generateShortCode(): string {
   return result.join('');
 }
 
-// ========== Constants (Tunnel) ==========
-
 /** Regex to extract the trycloudflare.com URL from cloudflared output */
 const TUNNEL_URL_REGEX = /https:\/\/[a-z0-9-]+\.trycloudflare\.com/;
 
-/** Max time to wait for URL before considering it a timeout (ms) */
-const URL_TIMEOUT_MS = 30_000;
-
-/** Restart delay after unexpected exit (ms) */
-const RESTART_DELAY_MS = 5_000;
-
-/** Force-kill timeout after SIGTERM (ms) */
-const FORCE_KILL_MS = 5_000;
-
 // ========== TunnelManager Class ==========
 
 export class TunnelManager extends EventEmitter {

src/web/middleware/auth.ts

@@ -12,17 +12,15 @@ import { FastifyInstance } from 'fastify';
 import { randomBytes, timingSafeEqual } from 'node:crypto';
 import { StaleExpirationMap } from '../../utils/index.js';
 import type { AuthSessionRecord } from '../ports/auth-port.js';
+import {
+  AUTH_SESSION_TTL_MS,
+  MAX_AUTH_SESSIONS,
+  AUTH_FAILURE_MAX,
+  AUTH_FAILURE_WINDOW_MS,
+} from '../../config/auth-config.js';
 
-// Auth session cookie TTL (24h — matches autonomous run length)
-const AUTH_SESSION_TTL_MS = 24 * 60 * 60 * 1000;
 // Auth session cookie name
 export const AUTH_COOKIE_NAME = 'codeman_session';
-// Max concurrent auth sessions
-const MAX_AUTH_SESSIONS = 100;
-// Max failed auth attempts per IP before rate-limiting
-const AUTH_FAILURE_MAX = 10;
-// Failed auth attempt tracking window (15 minutes)
-const AUTH_FAILURE_WINDOW_MS = 15 * 60 * 1000;
 
 /** State returned from registerAuthMiddleware for cleanup in server stop() */
 export interface AuthState {

src/web/routes/mux-routes.ts

@@ -5,9 +5,7 @@
 
 import { FastifyInstance } from 'fastify';
 import type { InfraPort } from '../ports/index.js';
-
-// Stats collection interval (2 seconds) — matches server.ts constant
-const STATS_COLLECTION_INTERVAL_MS = 2000;
+import { STATS_COLLECTION_INTERVAL_MS } from '../../config/server-timing.js';
 
 export function registerMuxRoutes(app: FastifyInstance, ctx: InfraPort): void {
   app.get('/api/mux-sessions', async () => {

src/web/routes/respawn-routes.ts

@@ -10,6 +10,7 @@ import { RespawnConfigSchema, InteractiveRespawnSchema, RespawnEnableSchema } fr
 import { findSessionOrFail, autoConfigureRalph } from '../route-helpers.js';
 import type { SessionPort, EventPort, RespawnPort, ConfigPort, InfraPort } from '../ports/index.js';
 import { getLifecycleLog } from '../../session-lifecycle-log.js';
+import { AI_CHECK_MODEL, AI_IDLE_CHECK_MAX_CONTEXT, AI_PLAN_CHECK_MAX_CONTEXT } from '../../config/ai-defaults.js';
 
 /** No-op EventPort used to suppress broadcasts during pre-start ralph configuration. */
 const noopEventPort: EventPort = {
@@ -170,13 +171,15 @@ export function registerRespawnRoutes(
       autoAcceptPrompts: config.autoAcceptPrompts ?? currentConfig?.autoAcceptPrompts ?? true,
       autoAcceptDelayMs: config.autoAcceptDelayMs ?? currentConfig?.autoAcceptDelayMs ?? 8000,
       aiIdleCheckEnabled: config.aiIdleCheckEnabled ?? currentConfig?.aiIdleCheckEnabled ?? true,
-      aiIdleCheckModel: config.aiIdleCheckModel ?? currentConfig?.aiIdleCheckModel ?? 'claude-opus-4-5-20251101',
-      aiIdleCheckMaxContext: config.aiIdleCheckMaxContext ?? currentConfig?.aiIdleCheckMaxContext ?? 16000,
+      aiIdleCheckModel: config.aiIdleCheckModel ?? currentConfig?.aiIdleCheckModel ?? AI_CHECK_MODEL,
+      aiIdleCheckMaxContext:
+        config.aiIdleCheckMaxContext ?? currentConfig?.aiIdleCheckMaxContext ?? AI_IDLE_CHECK_MAX_CONTEXT,
       aiIdleCheckTimeoutMs: config.aiIdleCheckTimeoutMs ?? currentConfig?.aiIdleCheckTimeoutMs ?? 90000,
       aiIdleCheckCooldownMs: config.aiIdleCheckCooldownMs ?? currentConfig?.aiIdleCheckCooldownMs ?? 180000,
       aiPlanCheckEnabled: config.aiPlanCheckEnabled ?? currentConfig?.aiPlanCheckEnabled ?? true,
-      aiPlanCheckModel: config.aiPlanCheckModel ?? currentConfig?.aiPlanCheckModel ?? 'claude-opus-4-5-20251101',
-      aiPlanCheckMaxContext: config.aiPlanCheckMaxContext ?? currentConfig?.aiPlanCheckMaxContext ?? 8000,
+      aiPlanCheckModel: config.aiPlanCheckModel ?? currentConfig?.aiPlanCheckModel ?? AI_CHECK_MODEL,
+      aiPlanCheckMaxContext:
+        config.aiPlanCheckMaxContext ?? currentConfig?.aiPlanCheckMaxContext ?? AI_PLAN_CHECK_MAX_CONTEXT,
       aiPlanCheckTimeoutMs: config.aiPlanCheckTimeoutMs ?? currentConfig?.aiPlanCheckTimeoutMs ?? 60000,
       aiPlanCheckCooldownMs: config.aiPlanCheckCooldownMs ?? currentConfig?.aiPlanCheckCooldownMs ?? 30000,
       durationMinutes: currentConfig?.durationMinutes,

src/web/routes/session-routes.ts

@@ -41,11 +41,12 @@ import type { SessionPort, EventPort, ConfigPort, InfraPort, AuthPort } from '..
 import { MAX_CONCURRENT_SESSIONS } from '../../config/map-limits.js';
 import { RunSummaryTracker } from '../../run-summary.js';
 
-// Constants
-const MAX_INPUT_LENGTH = 64 * 1024;
-const MAX_TERMINAL_COLS = 500;
-const MAX_TERMINAL_ROWS = 200;
-const MAX_SESSION_NAME_LENGTH = 128;
+import {
+  MAX_INPUT_LENGTH,
+  MAX_TERMINAL_COLS,
+  MAX_TERMINAL_ROWS,
+  MAX_SESSION_NAME_LENGTH,
+} from '../../config/terminal-limits.js';
 
 // Pre-compiled regex for terminal buffer cleaning (avoids per-request compilation)
 // eslint-disable-next-line no-control-regex

src/web/server.ts

@@ -89,10 +89,19 @@ import {
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 
-// Batch terminal data for performance - collect for 16ms (60fps) before sending
-const TERMINAL_BATCH_INTERVAL = 16;
-// Batch task:updated events for 100ms
-const TASK_UPDATE_BATCH_INTERVAL = 100;
+import {
+  TERMINAL_BATCH_INTERVAL,
+  TASK_UPDATE_BATCH_INTERVAL,
+  STATE_UPDATE_DEBOUNCE_INTERVAL,
+  SESSIONS_LIST_CACHE_TTL,
+  SCHEDULED_CLEANUP_INTERVAL,
+  SCHEDULED_RUN_MAX_AGE,
+  SSE_HEALTH_CHECK_INTERVAL,
+  SESSION_LIMIT_WAIT_MS,
+  ITERATION_PAUSE_MS,
+  BATCH_FLUSH_THRESHOLD,
+  STATS_COLLECTION_INTERVAL_MS,
+} from '../config/server-timing.js';
 
 // DEC mode 2026 - Synchronized Output
 // When terminal supports this, it buffers all output between start/end markers
@@ -100,25 +109,6 @@ const TASK_UPDATE_BATCH_INTERVAL = 100;
 // Supported by: WezTerm, Kitty, Ghostty, iTerm2 3.5+, Windows Terminal, VSCode terminal
 const DEC_SYNC_START = '\x1b[?2026h'; // Begin synchronized update
 const DEC_SYNC_END = '\x1b[?2026l'; // End synchronized update (flush to screen)
-// State update debounce interval (batch expensive toDetailedState() calls)
-const STATE_UPDATE_DEBOUNCE_INTERVAL = 500;
-// Cache TTL for getLightSessionsState() — avoids re-serializing all sessions on every SSE init / /api/sessions call
-const SESSIONS_LIST_CACHE_TTL = 1000;
-// Scheduled runs cleanup interval (check every 5 minutes)
-const SCHEDULED_CLEANUP_INTERVAL = 5 * 60 * 1000;
-// Completed scheduled runs max age (1 hour)
-const SCHEDULED_RUN_MAX_AGE = 60 * 60 * 1000;
-// SSE client health check interval (every 30 seconds)
-const SSE_HEALTH_CHECK_INTERVAL = 30 * 1000;
-// Session limit wait time before retrying (5 seconds)
-const SESSION_LIMIT_WAIT_MS = 5000;
-// Pause between scheduled run iterations (2 seconds)
-const ITERATION_PAUSE_MS = 2000;
-// Terminal batch flush threshold - flush immediately if batch exceeds this size
-// Set high (32KB) to allow effective batching; avg Ink events are ~14KB
-const BATCH_FLUSH_THRESHOLD = 32 * 1024;
-// Stats collection interval (2 seconds)
-const STATS_COLLECTION_INTERVAL_MS = 2000;
 
 /**
  * Get or generate a self-signed TLS certificate for HTTPS.