[rita-aga]

Port of nerdsane/temper 118bb6f (nerdsane#537, 19 Oct): temper serve --bind <ip> chooses the listen address. The default stays 0.0.0.0.

What it does

• --bind 127.0.0.1 (or TEMPER_BIND_ADDR, when the flag is absent) makes the server listen on loopback only. The precedence matches the storage and actor-runtime options.
• Only 0.0.0.0 and 127.0.0.1 are accepted. Temper's own callers (the Observe UI proxy, WASM self-calls, the blob endpoint, the Discord transport) reach the API at 127.0.0.1, and a host name is refused.
• Observe UI and the auto-started local sandbox follow the chosen address.
• The option resolvers moved to serve/options.rs and the Observe UI start to serve/observe_ui.rs, so main.rs and serve/mod.rs stay under the readability limit.

Port notes

It merged into arni-labs main (c8f92d3) with two conflicts in serve/mod.rs, both resolved to keep arni-labs' code:

• The router keeps the Turso Sync copy wrapper (sync_copy::answer_after_copy) and binds SocketAddr::from((bind, port)).
• The state-timer re-arm (rearm_state_timers, ADR-0056) still runs before serving. The banner prints the chosen address.

Merge after tonight's kernel binary is cut, so the roll's contents stay as reviewed.

Checks

• GitHub CI.
• End to end (to follow in a comment): temper serve with no flag, with --bind 127.0.0.1, with TEMPER_BIND_ADDR=127.0.0.1, and with a bad value. Each time, read what is listening with lsof.

🤖 Generated with Claude Code

Confidence Score: 4/5

The kernel-only requirement in previous finding 1 still needs to be satisfied before merging.

Findings

1.  Agent code extends outside temperpaw ▶

Fix with agent prompt

### Issue 1
os-apps/temper-agent/sandbox/local_sandbox.py:138-141
Adding `--host` extends the agent sandbox in this repository. The repository guide says kernel code belongs here and app and agent logic belongs in temperpaw. Put this helper change in temperpaw and connect the CLI to that maintained helper. This repository requirement must be satisfied before merging.

Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

Summary

Adds temper serve --bind and TEMPER_BIND_ADDR, while keeping the default address unchanged.

• Temper can keep its API and local helpers on loopback.
• Serve keeps storage and runtime settings in a separate options module.

No new findings were accepted. The merge bases differ, so the full PR diff was reviewed as changes since the last review.

_{Reviews (2) · Last reviewed commit: "Merge arni-labs/main (client spans and l..." · Reviewed by Greptile}

[greptile-apps]

Agent code extends outside temperpaw

Adding --host extends the agent sandbox in this repository. The repository guide says kernel code belongs here and app and agent logic belongs in temperpaw. Put this helper change in temperpaw and connect the CLI to that maintained helper. This repository requirement must be satisfied before merging.

Context Used: CLAUDE.md (source)

Prompt To Fix With AI

This is a comment left during a code review.
Path: os-apps/temper-agent/sandbox/local_sandbox.py
Line: 138-141

Comment:
**Agent code extends outside temperpaw**

Adding `--host` extends the agent sandbox in this repository. The repository guide says kernel code belongs here and app and agent logic belongs in temperpaw. Put this helper change in temperpaw and connect the CLI to that maintained helper. This repository requirement must be satisfied before merging.

**Context Used:** CLAUDE.md ([source](https://github.com/arni-labs/temper/blob/main/CLAUDE.md))

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!

[rita-aga]

End-to-end check, 21 Oct 00:05 UTC, debug build of ed90da4 on macOS (port 37461, --no-observe, each run in a fresh directory). "Listening" is read with lsof; "LAN" is a request to the Mac's en0 address (192.168.1.190).

Run	Listening	Banner	127.0.0.1 /healthz	LAN /healthz
no flag	*:37461	http://0.0.0.0:37461	200	200
--bind 127.0.0.1	127.0.0.1:37461	http://127.0.0.1:37461	200	refused
TEMPER_BIND_ADDR=127.0.0.1	127.0.0.1:37461	http://127.0.0.1:37461	200	refused
env 127.0.0.1 plus --bind 0.0.0.0	*:37461 (the flag wins)	http://0.0.0.0:37461	200	200
--bind 192.168.1.5	none; exits 1
TEMPER_BIND_ADDR=localhost	none; exits 1

The two refused runs print, in order: Error: --bind must be 0.0.0.0 (all interfaces) or 127.0.0.1 (loopback only); got "192.168.1.5" and Error: TEMPER_BIND_ADDR must be 0.0.0.0 (all interfaces) or 127.0.0.1 (loopback only); got "localhost".