@cabane/companion 0.6.17 → 0.6.18

package/dist/cli.js

@@ -7199,7 +7199,12 @@ var Dispatcher = class {
   // clear is durable (CT93 outbox, last-writer-wins per pair), so a terminal
   // failure here just logs and the server age-sweep backstops it.
   async concludeBeforeRun(payload, turnLog, startedAt, reason, errorReason) {
-    const body = { activeRunStartedAt: null };
+    const body = {
+      activeRunStartedAt: null,
+      // CT1046: this dispatch is over before it ran — retire its evidence so it
+      // can't authorize a turn-token mint afterwards.
+      settledMessageId: payload.messageId
+    };
     if (errorReason) body.errorReason = errorReason.slice(0, 200);
     try {
       await this.opts.api.setActiveRun(
@@ -7959,7 +7964,12 @@ ${reason}`,
         // CT277: the server keys the turn-end metadata UPDATE (ended_at + tokens)
         // off this turn id, so the settle PATCH must carry it — the start PATCH
         // isn't enough. Always sent (every settle closes a real turn).
-        turnId
+        turnId,
+        // CT1046: and the trigger this turn answered, so the server retires the
+        // dispatch that authorized it. Always sent, unlike `lastSeenMessageId`
+        // below (which is a success-only catch-up advance): a failed or cancelled
+        // turn is just as over, and its evidence must die with it.
+        settledMessageId: payload.messageId
       };
       if (turnUsage) {
         body.usage = turnUsage;

package/dist/runtime.js

@@ -6852,7 +6852,12 @@ var Dispatcher = class {
   // clear is durable (CT93 outbox, last-writer-wins per pair), so a terminal
   // failure here just logs and the server age-sweep backstops it.
   async concludeBeforeRun(payload, turnLog, startedAt, reason, errorReason) {
-    const body = { activeRunStartedAt: null };
+    const body = {
+      activeRunStartedAt: null,
+      // CT1046: this dispatch is over before it ran — retire its evidence so it
+      // can't authorize a turn-token mint afterwards.
+      settledMessageId: payload.messageId
+    };
     if (errorReason) body.errorReason = errorReason.slice(0, 200);
     try {
       await this.opts.api.setActiveRun(
@@ -7612,7 +7617,12 @@ ${reason}`,
         // CT277: the server keys the turn-end metadata UPDATE (ended_at + tokens)
         // off this turn id, so the settle PATCH must carry it — the start PATCH
         // isn't enough. Always sent (every settle closes a real turn).
-        turnId
+        turnId,
+        // CT1046: and the trigger this turn answered, so the server retires the
+        // dispatch that authorized it. Always sent, unlike `lastSeenMessageId`
+        // below (which is a success-only catch-up advance): a failed or cancelled
+        // turn is just as over, and its evidence must die with it.
+        settledMessageId: payload.messageId
       };
       if (turnUsage) {
         body.usage = turnUsage;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cabane/companion",
-  "version": "0.6.17",
+  "version": "0.6.18",
   "type": "module",
   "description": "The Cabane Companion (headless): connect a coding agent on your machine to your Cabane workspace as a responder — drive work against your own codebase, files, and MCP servers without putting any of it in Cabane.",
   "license": "UNLICENSED",