@cabane/companion 0.6.16 → 0.6.18

package/dist/cli.js

@@ -7199,7 +7199,12 @@ var Dispatcher = class {
   // clear is durable (CT93 outbox, last-writer-wins per pair), so a terminal
   // failure here just logs and the server age-sweep backstops it.
   async concludeBeforeRun(payload, turnLog, startedAt, reason, errorReason) {
-    const body = { activeRunStartedAt: null };
+    const body = {
+      activeRunStartedAt: null,
+      // CT1046: this dispatch is over before it ran — retire its evidence so it
+      // can't authorize a turn-token mint afterwards.
+      settledMessageId: payload.messageId
+    };
     if (errorReason) body.errorReason = errorReason.slice(0, 200);
     try {
       await this.opts.api.setActiveRun(
@@ -7959,7 +7964,12 @@ ${reason}`,
         // CT277: the server keys the turn-end metadata UPDATE (ended_at + tokens)
         // off this turn id, so the settle PATCH must carry it — the start PATCH
         // isn't enough. Always sent (every settle closes a real turn).
-        turnId
+        turnId,
+        // CT1046: and the trigger this turn answered, so the server retires the
+        // dispatch that authorized it. Always sent, unlike `lastSeenMessageId`
+        // below (which is a success-only catch-up advance): a failed or cancelled
+        // turn is just as over, and its evidence must die with it.
+        settledMessageId: payload.messageId
       };
       if (turnUsage) {
         body.usage = turnUsage;

package/dist/runtime.js

@@ -6852,7 +6852,12 @@ var Dispatcher = class {
   // clear is durable (CT93 outbox, last-writer-wins per pair), so a terminal
   // failure here just logs and the server age-sweep backstops it.
   async concludeBeforeRun(payload, turnLog, startedAt, reason, errorReason) {
-    const body = { activeRunStartedAt: null };
+    const body = {
+      activeRunStartedAt: null,
+      // CT1046: this dispatch is over before it ran — retire its evidence so it
+      // can't authorize a turn-token mint afterwards.
+      settledMessageId: payload.messageId
+    };
     if (errorReason) body.errorReason = errorReason.slice(0, 200);
     try {
       await this.opts.api.setActiveRun(
@@ -7612,7 +7617,12 @@ ${reason}`,
         // CT277: the server keys the turn-end metadata UPDATE (ended_at + tokens)
         // off this turn id, so the settle PATCH must carry it — the start PATCH
         // isn't enough. Always sent (every settle closes a real turn).
-        turnId
+        turnId,
+        // CT1046: and the trigger this turn answered, so the server retires the
+        // dispatch that authorized it. Always sent, unlike `lastSeenMessageId`
+        // below (which is a success-only catch-up advance): a failed or cancelled
+        // turn is just as over, and its evidence must die with it.
+        settledMessageId: payload.messageId
       };
       if (turnUsage) {
         body.usage = turnUsage;

package/dist/static/index.html

@@ -17,8 +17,18 @@
       <header class="topbar">
         <div class="brand">
           <svg class="logo" viewBox="0 0 24 18" fill="none" aria-hidden="true">
-            <path d="M 1.26 16.74 L 12 1.26" stroke="currentColor" stroke-width="2.52" stroke-linecap="round" />
-            <path d="M 12 1.26 L 22.74 16.74" stroke="currentColor" stroke-width="2.52" stroke-linecap="round" />
+            <path
+              d="M 1.26 16.74 L 12 1.26"
+              stroke="currentColor"
+              stroke-width="2.52"
+              stroke-linecap="round"
+            />
+            <path
+              d="M 12 1.26 L 22.74 16.74"
+              stroke="currentColor"
+              stroke-width="2.52"
+              stroke-linecap="round"
+            />
           </svg>
           <span id="status-dot" class="dot dot--unknown" aria-hidden="true"></span>
           <h1 id="status-title">Cabane Companion</h1>
@@ -39,9 +49,8 @@
         <div id="harness-empty" class="harness-empty" hidden>
           <p class="harness-empty-title">Cabane can’t run anything on this device yet.</p>
           <p class="harness-empty-body">
-            Install and sign in to a harness — Claude Code, Codex, or opencode —
-            then it’ll appear here as ready. Until then, agents assigned to this
-            device have nothing to run on.
+            Install and sign in to a harness — Claude Code, Codex, or opencode — then it’ll appear
+            here as ready. Until then, agents assigned to this device have nothing to run on.
           </p>
         </div>
         <ul id="harness-list" class="harness-list"></ul>
@@ -52,8 +61,8 @@
         <h2>Connected workspaces <span id="connected-count" class="count"></span></h2>
         <ul id="connected-list" class="ws-list"></ul>
         <p id="connected-empty" class="empty" hidden>
-          No agents assigned yet. In a workspace, open Settings → Agents and assign
-          an agent to a connector on this device.
+          No agents assigned yet. In a workspace, open Settings → Agents and assign an agent to a
+          connector on this device.
         </p>
       </section>
 
@@ -104,9 +113,7 @@
         </div>
       </section>
 
-      <p class="version">
-        companion <span id="ver-companion">—</span>
-      </p>
+      <p class="version">companion <span id="ver-companion">—</span></p>
     </main>
 
     <div id="toast" class="toast" hidden></div>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cabane/companion",
-  "version": "0.6.16",
+  "version": "0.6.18",
   "type": "module",
   "description": "The Cabane Companion (headless): connect a coding agent on your machine to your Cabane workspace as a responder — drive work against your own codebase, files, and MCP servers without putting any of it in Cabane.",
   "license": "UNLICENSED",