fix: address PR review comments and security issues

- Fix command injection in bb-init.mjs by using execFileSync with argument arrays
- Fix parser.ts skipAgentFilter option not being respected
- Fix src/app/globals.css truncated CSS rule causing parse errors
- Fix status-badge.tsx BeadStatus type import from canonical source
- Fix agent-registry.ts missing 'agent' prefix in callBdAgentShow
- Fix tools/bb.ts null data access for activity-lease command
- Fix src/app/api/sessions/route.ts projectRoot not passed to listAgents
- Update package.json test script to include all test files
- Fix tailwind.config.ts content glob missing UI components
- Remove .beadboard/agent/runtime/existing-agent.pid and add .gitignore rule

Co-authored-by: openhands <openhands@all-hands.dev>

src/app/api/sessions/route.ts

@@ -16,7 +16,7 @@ export async function GET(request: Request): Promise<Response> {
     const communication = await getCommunicationSummary();
     const livenessMap = await getAgentLivenessMap(projectRoot, activity);
     const incursions = await calculateIncursions();
-    const agentsResult = await listAgents({});
+    const agentsResult = await listAgents({}, { projectRoot });
 
     const feed = buildSessionTaskFeed(issues, activity, communication, livenessMap);
 

src/app/globals.css

@@ -296,4 +296,3 @@ body::after {
   filter: drop-shadow(0 0 10px rgba(56, 189, 248, 0.6));
 }
 
-.workflow-graph-flow .workflow-edge-cycle .react-f

src/components/shared/status-badge.tsx

@@ -1,7 +1,7 @@
 import { Badge } from '@/components/ui/badge';
 import { cn } from '@/lib/utils';
+import type { BeadStatus } from '@/lib/types';
 
-type BeadStatus = 'ready' | 'in_progress' | 'blocked' | 'closed';
 type BadgeSize = 'sm' | 'md';
 
 interface StatusBadgeProps {
@@ -9,11 +9,14 @@ interface StatusBadgeProps {
   size?: BadgeSize;
 }
 
-const STATUS_CLASSES: Record<BeadStatus, string> = {
-  ready: 'border-teal-500/30 bg-teal-500/15 text-teal-200',
+const STATUS_CLASSES: Partial<Record<BeadStatus, string>> = {
+  open: 'border-teal-500/30 bg-teal-500/15 text-teal-200',
   in_progress: 'border-green-500/30 bg-green-500/15 text-green-200',
   blocked: 'border-amber-500/30 bg-amber-500/15 text-amber-200',
+  deferred: 'border-slate-500/30 bg-slate-500/15 text-slate-300',
   closed: 'border-slate-500/30 bg-slate-500/15 text-slate-300',
+  pinned: 'border-purple-500/30 bg-purple-500/15 text-purple-200',
+  hooked: 'border-cyan-500/30 bg-cyan-500/15 text-cyan-200',
 };
 
 const SIZE_CLASSES: Record<BadgeSize, string> = {
@@ -21,24 +24,30 @@ const SIZE_CLASSES: Record<BadgeSize, string> = {
   md: 'text-xs px-2.5 py-0.5',
 };
 
-const STATUS_LABELS: Record<BeadStatus, string> = {
-  ready: 'Ready',
+const STATUS_LABELS: Partial<Record<BeadStatus, string>> = {
+  open: 'Open',
   in_progress: 'In Progress',
   blocked: 'Blocked',
+  deferred: 'Deferred',
   closed: 'Closed',
+  pinned: 'Pinned',
+  hooked: 'Hooked',
 };
 
 export function StatusBadge({ status, size = 'md' }: StatusBadgeProps) {
+  const statusClass = STATUS_CLASSES[status] || 'border-slate-500/30 bg-slate-500/15 text-slate-300';
+  const statusLabel = STATUS_LABELS[status] || status;
+  
   return (
     <Badge
       variant="outline"
       className={cn(
         'rounded-md border font-semibold',
-        STATUS_CLASSES[status],
+        statusClass,
         SIZE_CLASSES[size]
       )}
     >
-      {STATUS_LABELS[status]}
+      {statusLabel}
     </Badge>
   );
 }

src/lib/agent-registry.ts

@@ -121,7 +121,7 @@ function trimOrEmpty(value: unknown): string {
 async function callBdAgentShow(beadId: string, projectRoot: string): Promise<AgentRecord | null> {
   const showResult = await runBdCommand({
     projectRoot,
-    args: ['show', beadId, '--json'],
+    args: ['agent', 'show', beadId, '--json'],
   });
 
   if (!showResult.success) {

src/lib/parser.ts

@@ -83,7 +83,7 @@ export function parseIssuesJsonl(text: string, options: ParseIssuesOptions = {})
       }
 
       // Exclude agent identities from standard mission lists
-      if (normalized.labels.includes('gt:agent')) {
+      if (!options.skipAgentFilter && normalized.labels.includes('gt:agent')) {
         continue;
       }