Shard tui_gateway/server.py (god-file decomposition)

[andrexibiza]

Type: Refactoring / Architecture
Guideline Match: "Refactor god-files into clean modules." / "Extend, don't duplicate. Design one shared interface."

Description:
tui_gateway/server.py is a god file: 13,905 lines on main (42708f8bb3). Repo-wide policy (2026-08): all god files are sharded, never reverted — the only correct answer is to shard the entire thing. Precedent: gateway/run.py (#54962) — sharding SHIPPED via 38 extraction PRs (all individually linked on the epic #78647). Nothing here is a request to revert, shrink-truncate, or abandon the file.

Proposed Changes:

• Graph-gated decomposition (gate 1 first): model the whole module (not pre-seeded clusters) with double-blind independent trees, merge to one typed graph under agreement provenance (≥4/5 agreed = load-bearing), then quality-gate the graph before any cut.
• One PR per clean cluster/mixin, in waves: byte-verbatim moves (docstrings, comments, exclusive constants), identity-preserving re-exports (<module>.<name> stays green), Part of linkage to this issue, suite-green on current main before open.
• Zero behavior change. No reverts. Full shard or untouched — partial "just extract this one class" escapes are not the policy.
• Test contracts move with the code: monkeypatch/logger patch targets and source-scanning tests that read this file get their targets updated in the same extraction PR.

Tracking: consolidated under the repo-wide god-file epic (meta issue, created with this series).

[andrexibiza]

Tracking epic: #78647 — repo-wide god-file sharding (20 files, this file included). Scoreboard updates land here per shipped slice.

[andrexibiza]

tui_gateway/server.py scoreboard — wave 1 complete (5 slices)

All 5 slices double-blind reviewed (2 blind analysts -> consensus -> implementer -> 2 blind re-reviewers, all APPROVED), golden-sha verified, DCO, on current upstream base.

Slice	PR	Module	Window	Evidence
R1	#79259	slash_worker_client.py + session_db.py	158-162/326-459 + 1301-1508	63+523 tests, 14/14 seam
R2	#79260	change_watcher.py	3179-3451	63 tests, cycle-permutation proven
R3	#79261	pet_payload.py (23 members)	7989-8282	47 tests, golden sha at both pins
R4	#79262	methods_config.py (config.set)	10471-11162	config parity + aggressive tests
R5	#79263	methods_projects.py (18 defs)	11171-11641	11+43+3 tests, 350/3 pre-existing

Part of #78647. Remaining for this file: the mid-region clusters (turn lifecycle, _run_prompt_submit, voice) per the region consensus — next wave.

[andrexibiza]

🔒 KILL LOCK — tui_gateway/server.py (13,908 lines)

Anchored to Kill All Gods meta-issue: #78647. Permanent record: shards, mess, fixers.

The former whole

One 13,908-line file carrying the TUI gateway: RPC dispatch, session lifecycle, change watching, pet payloads, projects, config, voice. The mess it caused:

• TUI gateway: WebSocket frame stalls >10s causing desktop freeze and "request timed out" toasts #60654 — WebSocket frame stalls >10s → desktop freezes with "request timed out" toasts (the WS-stall plague class)
• Desktop/TUI cold-start stalls ~14s on GIL pressure during backend initialization — event loop stalled before first prompt #60800 — cold-start stalls ~14s on GIL pressure during backend init
• fix: shell injection in tui_gateway/server.py (ISSUE-001) #33503 — shell injection in tui_gateway/server.py (ISSUE-001, security)
• hermes project bind-board binds a board slug that does not exist (no validation, exit 0) #76285 — board-slug validation hole in bind-board
• tui_gateway: session.resume abandons the profile SessionDB it opens #76701 — session.resume abandons the profile SessionDB it opens
• FIPS crashes (hashlib.sha1 without usedforsecurity=False)

The kill — 5 shards, one wave, all double-blind reviewed

PR	Slice	Module
#79259	R1 _SlashWorker + session-db	slash_worker_client.py + session_db.py
#79260	R2 change-watcher	change_watcher.py
#79261	R3 pet-payload (23 members)	pet_payload.py
#79262	R4 config.set	methods_config.py
#79263	R5 projects CRUD + repo discovery	methods_projects.py

The mess-fixers (all open PRs still fighting this surface)

#72370 #76366 #67628 #58339 #77391 #66874 #77745 #72231 #62598 #33503 #74408 #74350 #65192 #77860 #76298 #78036 #74701 #72295 #73800 #76131 #68468 #51596 #53373 #76701 #70226

Lock chain (both ways)

• Every shard PR above references this lock and [COMPLETE] Large-file decomposition: 20/20 done #78647
• This lock references every issue and every PR listed above
• The Kill All Gods meta-issue [COMPLETE] Large-file decomposition: 20/20 done #78647 indexes this lock