fix(gastown): gate triage header fallback on dev, wire inReview through alarm status

- Gate X-Gastown-Agent-Id header fallback in handleResolveTriage on
  ENVIRONMENT === 'development' to prevent header spoofing in production
- Add inReview to AlarmStatusOutput tRPC schema, router.d.ts types,
  and TerminalBar UI so the new bead count is visible in the status pane

Author: jrf0110

cloudflare-gastown/src/handlers/rig-triage.handler.ts

@@ -31,8 +31,11 @@ const ResolveTriageBody = z.object({
 export async function handleResolveTriage(c: Context<GastownEnv>, _params: { rigId: string }) {
   // In production, agentId comes from the verified JWT. In development
   // (where authMiddleware is skipped), fall back to the identity header
-  // the container client sends with every request.
-  const agentId = getEnforcedAgentId(c) || c.req.header('X-Gastown-Agent-Id');
+  // the container client sends with every request. The fallback is gated
+  // on ENVIRONMENT to prevent header spoofing in production.
+  const agentId =
+    getEnforcedAgentId(c) ||
+    (c.env.ENVIRONMENT === 'development' ? c.req.header('X-Gastown-Agent-Id') : null);
   if (!agentId) {
     return c.json(resError('Agent authentication required'), 401);
   }

cloudflare-gastown/src/trpc/schemas.ts

@@ -204,6 +204,7 @@ const AlarmStatusOutput = z.object({
   beads: z.object({
     open: z.number(),
     inProgress: z.number(),
+    inReview: z.number(),
     failed: z.number(),
     triageRequests: z.number(),
   }),

src/components/gastown/TerminalBar.tsx

@@ -148,7 +148,13 @@ export function TerminalBar({ townId }: TerminalBarProps) {
 type AlarmStatus = {
   alarm: { nextFireAt: string | null; intervalMs: number; intervalLabel: string };
   agents: { working: number; idle: number; stalled: number; dead: number; total: number };
-  beads: { open: number; inProgress: number; failed: number; triageRequests: number };
+  beads: {
+    open: number;
+    inProgress: number;
+    inReview: number;
+    failed: number;
+    triageRequests: number;
+  };
   patrol: {
     guppWarnings: number;
     guppEscalations: number;
@@ -372,6 +378,11 @@ function AlarmStatusPane({ townId }: { townId: string }) {
               value={data.beads.inProgress}
               highlight={data.beads.inProgress > 0}
             />
+            <StatusRow
+              label="In Review"
+              value={data.beads.inReview}
+              highlight={data.beads.inReview > 0}
+            />
             <StatusRow label="Failed" value={data.beads.failed} warn={data.beads.failed > 0} />
             <StatusRow
               label="Triage"

src/lib/gastown/types/router.d.ts

@@ -316,6 +316,7 @@ export declare const gastownRouter: import('@trpc/server').TRPCBuiltRouter<
         beads: {
           open: number;
           inProgress: number;
+          inReview: number;
           failed: number;
           triageRequests: number;
         };
@@ -914,6 +915,7 @@ export declare const wrappedGastownRouter: import('@trpc/server').TRPCBuiltRoute
             beads: {
               open: number;
               inProgress: number;
+              inReview: number;
               failed: number;
               triageRequests: number;
             };