chore(security): add local dev worker group

Author: jeanduplessis

apps/web/.env.development.local.example

@@ -16,6 +16,12 @@ AUTO_FIX_URL=http://localhost:8792
 # @url cloudflare-auto-triage-infra
 AUTO_TRIAGE_URL=http://localhost:8791
 
+# @url cloudflare-security-sync
+SECURITY_SYNC_WORKER_URL=http://localhost:8812
+
+# @url cloudflare-security-auto-analysis
+SECURITY_AUTO_ANALYSIS_WORKER_URL=http://localhost:8797
+
 # @url cloudflare-app-builder
 APP_BUILDER_URL=http://localhost:8790
 

dev/local/cli.ts

@@ -592,8 +592,8 @@ Usage:
   dev:env --check         Validate env vars (CI mode)
   dev:env -y              Sync without confirmation
 
-Targets: app, app-builder, agents, mobile, all, or any service/group name
-Multiple targets can be specified: dev:start kiloclaw agents`);
+Targets: app, app-builder, agents, security-agent, mobile, all, or any service/group name
+Multiple targets can be specified: dev:start kiloclaw security-agent`);
 }
 
 // ---------------------------------------------------------------------------

dev/local/services.ts

@@ -40,6 +40,12 @@ const groups: ServiceGroup[] = [
     sectionBreakBefore: true,
   },
   { id: 'auto-fix', label: 'Auto Fix', alwaysOn: false, groupDependsOn: ['cloud-agent'] },
+  {
+    id: 'security-agent',
+    label: 'Security Agent',
+    alwaysOn: false,
+    groupDependsOn: ['cloud-agent'],
+  },
   { id: 'deploy', label: 'Deploy', alwaysOn: false },
   { id: 'observability', label: 'Observability', alwaysOn: false },
   { id: 'mobile', label: 'Mobile', alwaysOn: false, sectionBreakBefore: true },
@@ -135,6 +141,23 @@ const serviceMeta: Record<string, ServiceMeta> = {
     dependsOn: ['cloud-agent-next', 'nextjs'],
     dir: 'services/auto-fix-infra',
   },
+  // security-agent
+  'cloudflare-security-sync': {
+    group: 'security-agent',
+    dependsOn: ['postgres', 'cloudflare-git-token-service'],
+    dir: 'services/security-sync',
+  },
+  'cloudflare-security-auto-analysis': {
+    group: 'security-agent',
+    dependsOn: [
+      'postgres',
+      'nextjs',
+      'cloud-agent-next',
+      'cloudflare-git-token-service',
+      'cloudflare-session-ingest',
+    ],
+    dir: 'services/security-auto-analysis',
+  },
   // deploy
   'cloudflare-deploy-builder': {
     group: 'deploy',

services/security-sync/wrangler.jsonc

@@ -9,8 +9,14 @@
   "observability": {
     "enabled": true,
   },
+  "routes": [
+    {
+      "pattern": "security-sync.kilosessions.ai",
+      "custom_domain": true,
+    },
+  ],
   "dev": {
-    "port": 8796,
+    "port": 8812,
     "local_protocol": "http",
     "ip": "0.0.0.0",
   },