Move to threads based system.

AGENTS.md

@@ -5,7 +5,9 @@
 - `apps/next`: Next.js 16 frontend.
 - `apps/agent-worker`: optional server-side coding-agent worker. It polls
   Convex for queued jobs and may control Docker/Podman to run ephemeral job
-  containers.
+  containers. It also exposes a server-only HTTP API, defaulting to port 3921,
+  that Next route handlers proxy to for active workspace files, diffs,
+  messages, commands, and draft PR actions.
 - `apps/expo`: Expo scaffold; only work here when explicitly requested.
 - `packages/backend/convex`: self-hosted Convex functions, schema, and auth.
 - `packages/ui`: shared shadcn-based UI components.
@@ -37,6 +39,9 @@
   UseSend, `SITE_URL`, `SPOON_WORKER_TOKEN`, encryption, and Convex Auth signing
   variables from Infisical into the selected Convex deployment. Backend
   dev/setup scripts run it before `convex dev`.
+- Agent workspace proxy env uses `SPOON_AGENT_WORKER_URL`,
+  `SPOON_AGENT_WORKER_HTTP_PORT`, and `SPOON_AGENT_WORKER_INTERNAL_TOKEN`.
+  Keep these server-only; the browser must never receive worker tokens.
 - CI uses Gitea-injected secrets or `CI_ENV_FILE` and must not call Infisical.
 - CI must provide Convex deployment env for codegen, either
   `CONVEX_SELF_HOSTED_URL` plus `CONVEX_SELF_HOSTED_ADMIN_KEY`, or