From ac8db11eafb74a4a6c283ce4c2e7553627723eb8 Mon Sep 17 00:00:00 2001
From: konard <drakonard@gmail.com>
Date: Mon, 8 Jun 2026 07:55:37 +0000
Subject: [PATCH 1/2] Initial commit with task details

Adding .gitkeep for PR creation (default mode).
This file will be removed when the task is complete.

Issue: https://github.com/ProverCoderAI/docker-git/issues/383
---
 .gitkeep | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 .gitkeep

diff --git a/.gitkeep b/.gitkeep
new file mode 100644
index 00000000..223c2faf
--- /dev/null
+++ b/.gitkeep
@@ -0,0 +1 @@
+# .gitkeep file auto-generated at 2026-06-08T07:55:37.526Z for PR creation at branch issue-383-173b143467d9 for issue https://github.com/ProverCoderAI/docker-git/issues/383
\ No newline at end of file

From 31bcdc61f5aebc6782b818b4241150e2cacd26c6 Mon Sep 17 00:00:00 2001
From: konard <drakonard@gmail.com>
Date: Wed, 10 Jun 2026 10:23:11 +0000
Subject: [PATCH 2/2] fix(api): hide browser-connection MCP helpers from task
 manager

The Rust browser MCP helpers (`browser-connection` /
`docker-git-browser-connection`) run on an allocated pty, so
`hasInteractiveTty` classified each one as a visible `ssh` terminal.
That flooded the container task manager with many identical
`browser-connection --project ... --network container:...` rows
(issue #383).

Classify these helper processes as internal `system` tasks so they are
hidden by default (includeDefault=false) and only shown when system
processes are explicitly requested.

Fixes #383
---
 .gitkeep                                      |  1 -
 .../api/src/services/container-tasks-core.ts  | 12 +++++++++-
 .../api/tests/container-tasks-core.test.ts    | 24 +++++++++++++++++++
 3 files changed, 35 insertions(+), 2 deletions(-)
 delete mode 100644 .gitkeep

diff --git a/.gitkeep b/.gitkeep
deleted file mode 100644
index 223c2faf..00000000
--- a/.gitkeep
+++ /dev/null
@@ -1 +0,0 @@
-# .gitkeep file auto-generated at 2026-06-08T07:55:37.526Z for PR creation at branch issue-383-173b143467d9 for issue https://github.com/ProverCoderAI/docker-git/issues/383
\ No newline at end of file
diff --git a/packages/api/src/services/container-tasks-core.ts b/packages/api/src/services/container-tasks-core.ts
index 1b9850fd..7945aee4 100644
--- a/packages/api/src/services/container-tasks-core.ts
+++ b/packages/api/src/services/container-tasks-core.ts
@@ -27,6 +27,13 @@ const commandSuggestsSsh = (command: string): boolean => command.startsWith("ssh
 const commandSuggestsAgent = (command: string): boolean =>
   interactiveAgentPattern.test(command) || command.includes("docker-git-agent-")
 
+// Rust browser MCP helpers (`browser-connection`, `docker-git-browser-connection`)
+// run on an allocated pty, so without this they would be misclassified as visible
+// `ssh` terminals and flood the task manager (issue #383).
+const browserConnectionPattern = /(?:^|\/)(?:docker-git-browser-connection|browser-connection)\b/u
+
+const commandSuggestsBrowserHelper = (command: string): boolean => browserConnectionPattern.test(command)
+
 const resolveAncestorManagedId = (
   process: RawContainerProcess,
   pidToProcess: ReadonlyMap<number, RawContainerProcess>,
@@ -49,6 +56,9 @@ const classifyProcess = (
   process: RawContainerProcess,
   managedId: string | undefined
 ): ContainerTaskKind => {
+  if (commandSuggestsBrowserHelper(process.command)) {
+    return "system"
+  }
   if (managedId !== undefined || commandSuggestsAgent(process.command)) {
     return "agent"
   }
@@ -78,7 +88,7 @@ const compareTasks = (left: ContainerTask, right: ContainerTask): number => {
 // FORMAT THEOREM: forall p in Processes: classify(p) in ContainerTaskKind
 // PURITY: CORE
 // EFFECT: none
-// INVARIANT: includeDefault=false excludes only baseline system processes
+// INVARIANT: includeDefault=false excludes system processes (baseline + browser helpers)
 // COMPLEXITY: O(n * h) where h is maximum process ancestry depth
 export const buildContainerTasks = (
   processes: ReadonlyArray<RawContainerProcess>,
diff --git a/packages/api/tests/container-tasks-core.test.ts b/packages/api/tests/container-tasks-core.test.ts
index a9404ac9..fe8c1c89 100644
--- a/packages/api/tests/container-tasks-core.test.ts
+++ b/packages/api/tests/container-tasks-core.test.ts
@@ -31,6 +31,30 @@ describe("container task classification", () => {
       .toHaveLength(1)
   })
 
+  it("hides browser-connection MCP helpers as internal system tasks", () => {
+    const browserCommand =
+      "browser-connection --project dg-docker-git-issue-376 --network container:dg-docker-git-issue-376"
+    const visible = buildContainerTasks(
+      [
+        processOf({ command: browserCommand, pid: 11502, ppid: 5142, tty: "pts/1" }),
+        processOf({ command: "/usr/local/bin/docker-git-browser-connection start", pid: 11600, ppid: 5142, tty: "pts/1" }),
+        processOf({ command: "node server.js", pid: 20, ppid: 1, tty: "pts/2" })
+      ],
+      [],
+      false
+    )
+
+    expect(visible.map((task) => task.pid)).toEqual([20])
+
+    const withSystem = buildContainerTasks(
+      [processOf({ command: browserCommand, pid: 11502, ppid: 5142, tty: "pts/1" })],
+      [],
+      true
+    )
+
+    expect(withSystem.map((task) => [task.pid, task.kind])).toEqual([[11502, "system"]])
+  })
+
   it("marks descendants of managed agent pid as agent tasks", () => {
     const tasks = buildContainerTasks(
       [