@cmmd-center/forge 0.13.103 → 0.13.105

package/dist/bin.cjs

@@ -17846,6 +17846,7 @@ const OrchestrationThread = require_Schema$1.Struct({
 	status: ThreadStatus.pipe(require_Schema$1.withDecodingDefault(require_Schema$1.succeed("idle"))),
 	workerRole: require_Schema$1.NullOr(WorkerRole).pipe(require_Schema$1.withDecodingDefault(require_Schema$1.succeed(null))),
 	workSessionId: require_Schema$1.optionalKey(require_Schema$1.NullOr(require_Schema$1.String)),
+	workSessionBoundAt: require_Schema$1.optionalKey(require_Schema$1.NullOr(require_Schema$1.String)),
 	pendingAutoCreatePrompt: require_Schema$1.optional(require_Schema$1.NullOr(AutoCreateTaskPrompt)).pipe(require_Schema$1.withDecodingDefault(require_Schema$1.succeed(null))),
 	goal: require_Schema$1.NullOr(TrimmedNonEmptyString).pipe(require_Schema$1.withDecodingDefault(require_Schema$1.succeed(null))),
 	titleRegeneration: require_Schema$1.NullOr(ThreadTitleRegeneration).pipe(require_Schema$1.withDecodingDefault(require_Schema$1.succeed(null))),
@@ -18455,6 +18456,7 @@ const ThreadCreatedPayload$1 = require_Schema$1.Struct({
 	anchorKind: CmmdAnchorKind.pipe(require_Schema$1.withDecodingDefault(require_Schema$1.succeed("scratch"))),
 	anchorCmmdId: require_Schema$1.NullOr(require_Schema$1.String).pipe(require_Schema$1.withDecodingDefault(require_Schema$1.succeed(null))),
 	workSessionId: require_Schema$1.optionalKey(require_Schema$1.NullOr(require_Schema$1.String)),
+	workSessionBoundAt: require_Schema$1.optionalKey(require_Schema$1.NullOr(require_Schema$1.String)),
 	goal: require_Schema$1.optionalKey(require_Schema$1.NullOr(TrimmedNonEmptyString)),
 	linkedPullRequest: require_Schema$1.optionalKey(require_Schema$1.NullOr(LinkedPullRequest)),
 	kind: ThreadKind.pipe(require_Schema$1.withDecodingDefault(require_Schema$1.succeed("master"))),
@@ -18497,6 +18499,7 @@ const ThreadMetaUpdatedPayload$1 = require_Schema$1.Struct({
 	parentThreadId: require_Schema$1.optional(require_Schema$1.NullOr(ThreadId)),
 	workerRole: require_Schema$1.optional(require_Schema$1.NullOr(WorkerRole)),
 	workSessionId: require_Schema$1.optional(require_Schema$1.NullOr(require_Schema$1.String)),
+	workSessionBoundAt: require_Schema$1.optional(require_Schema$1.String),
 	goal: require_Schema$1.optional(require_Schema$1.NullOr(TrimmedNonEmptyString)),
 	linkedPullRequest: require_Schema$1.optional(require_Schema$1.NullOr(LinkedPullRequest)),
 	regenerateTitle: require_Schema$1.optional(require_Schema$1.Literal(true)),
@@ -66332,7 +66335,7 @@ function normalizeNumberish(value) {
 }
 //#endregion
 //#region package.json
-var version$1 = "0.13.103";
+var version$1 = "0.13.105";
 //#endregion
 //#region src/sentry.ts
 const SERVER_APP_NAME = "forge-server";
@@ -116049,7 +116052,7 @@ const postgresSchemaStatements = [
 	"CREATE TABLE IF NOT EXISTS checkpoint_diff_blobs (\n      thread_id TEXT NOT NULL,\n      from_turn_count INTEGER NOT NULL,\n      to_turn_count INTEGER NOT NULL,\n      diff TEXT NOT NULL,\n      created_at TEXT NOT NULL,\n      UNIQUE (thread_id, from_turn_count, to_turn_count)\n    )",
 	"CREATE TABLE IF NOT EXISTS provider_session_runtime (\n      thread_id TEXT PRIMARY KEY,\n      provider_name TEXT NOT NULL,\n      adapter_key TEXT NOT NULL,\n      runtime_mode TEXT NOT NULL DEFAULT 'full-access',\n      status TEXT NOT NULL,\n      last_seen_at TEXT NOT NULL,\n      resume_cursor_json TEXT,\n      runtime_payload_json TEXT\n    )",
 	"CREATE TABLE IF NOT EXISTS projection_projects (\n      project_id TEXT PRIMARY KEY,\n      title TEXT NOT NULL,\n      workspace_root TEXT NOT NULL,\n      scripts_json TEXT NOT NULL,\n      created_at TEXT NOT NULL,\n      updated_at TEXT NOT NULL,\n      deleted_at TEXT\n    , default_model_selection_json TEXT, default_thread_env_mode TEXT, cmmd_registration_json TEXT)",
-	"CREATE TABLE IF NOT EXISTS projection_threads (\n      thread_id TEXT PRIMARY KEY,\n      project_id TEXT NOT NULL,\n      title TEXT NOT NULL,\n      branch TEXT,\n      worktree_path TEXT,\n      latest_turn_id TEXT,\n      created_at TEXT NOT NULL,\n      updated_at TEXT NOT NULL,\n      deleted_at TEXT\n    , runtime_mode TEXT NOT NULL DEFAULT 'full-access', interaction_mode TEXT NOT NULL DEFAULT 'default', model_selection_json TEXT, archived_at TEXT, latest_user_message_at TEXT, pending_approval_count INTEGER NOT NULL DEFAULT 0, pending_user_input_count INTEGER NOT NULL DEFAULT 0, has_actionable_proposed_plan INTEGER NOT NULL DEFAULT 0, kind TEXT NOT NULL DEFAULT 'master', parent_thread_id TEXT, status TEXT NOT NULL DEFAULT 'idle', anchor_kind TEXT NOT NULL DEFAULT 'scratch', anchor_cmmd_id TEXT, worker_role TEXT DEFAULT NULL, goal TEXT, pending_auto_create_prompt_json TEXT, title_regeneration_json TEXT, rate_limit_status_json TEXT, linked_pull_request_json TEXT, settled_at TEXT, settled_override TEXT, work_session_id TEXT)",
+	"CREATE TABLE IF NOT EXISTS projection_threads (\n      thread_id TEXT PRIMARY KEY,\n      project_id TEXT NOT NULL,\n      title TEXT NOT NULL,\n      branch TEXT,\n      worktree_path TEXT,\n      latest_turn_id TEXT,\n      created_at TEXT NOT NULL,\n      updated_at TEXT NOT NULL,\n      deleted_at TEXT\n    , runtime_mode TEXT NOT NULL DEFAULT 'full-access', interaction_mode TEXT NOT NULL DEFAULT 'default', model_selection_json TEXT, archived_at TEXT, latest_user_message_at TEXT, pending_approval_count INTEGER NOT NULL DEFAULT 0, pending_user_input_count INTEGER NOT NULL DEFAULT 0, has_actionable_proposed_plan INTEGER NOT NULL DEFAULT 0, kind TEXT NOT NULL DEFAULT 'master', parent_thread_id TEXT, status TEXT NOT NULL DEFAULT 'idle', anchor_kind TEXT NOT NULL DEFAULT 'scratch', anchor_cmmd_id TEXT, worker_role TEXT DEFAULT NULL, goal TEXT, pending_auto_create_prompt_json TEXT, title_regeneration_json TEXT, rate_limit_status_json TEXT, linked_pull_request_json TEXT, settled_at TEXT, settled_override TEXT, work_session_id TEXT, work_session_bound_at TEXT)",
 	"CREATE TABLE IF NOT EXISTS projection_thread_messages (\n      message_id TEXT PRIMARY KEY,\n      thread_id TEXT NOT NULL,\n      turn_id TEXT,\n      role TEXT NOT NULL,\n      text TEXT NOT NULL,\n      is_streaming INTEGER NOT NULL,\n      created_at TEXT NOT NULL,\n      updated_at TEXT NOT NULL\n    , attachments_json TEXT)",
 	"CREATE TABLE IF NOT EXISTS projection_thread_activities (\n      activity_id TEXT PRIMARY KEY,\n      thread_id TEXT NOT NULL,\n      turn_id TEXT,\n      tone TEXT NOT NULL,\n      kind TEXT NOT NULL,\n      summary TEXT NOT NULL,\n      payload_json TEXT NOT NULL,\n      created_at TEXT NOT NULL\n    , sequence INTEGER)",
 	"CREATE TABLE IF NOT EXISTS projection_thread_sessions (\n      thread_id TEXT PRIMARY KEY,\n      status TEXT NOT NULL,\n      provider_name TEXT,\n      provider_session_id TEXT,\n      provider_thread_id TEXT,\n      active_turn_id TEXT,\n      last_error TEXT,\n      updated_at TEXT NOT NULL\n    , runtime_mode TEXT NOT NULL DEFAULT 'full-access')",
@@ -116371,7 +116374,8 @@ const postgresUpgradeMigrations = new Map([
         )
         WHERE model_selection_json IS NULL`
 	]],
-	[77, [`ALTER TABLE projection_threads ADD COLUMN IF NOT EXISTS work_session_id TEXT`]]
+	[77, [`ALTER TABLE projection_threads ADD COLUMN IF NOT EXISTS work_session_id TEXT`]],
+	[78, [`ALTER TABLE projection_threads ADD COLUMN IF NOT EXISTS work_session_bound_at TEXT`]]
 ]);
 function requirePostgresUpgradeStatements(version) {
 	const statements = postgresUpgradeMigrations.get(version);
@@ -116397,15 +116401,15 @@ const runPostgresMigrations = require_Schema$1.fn("runPostgresMigrations")(funct
         ORDER BY version DESC
         LIMIT 1
       `)[0]?.version ?? 0;
-		if (currentVersion > 77) return yield* require_Schema$1.die(/* @__PURE__ */ new Error(`Forge Postgres schema ${currentVersion} is newer than server schema 77.`));
+		if (currentVersion > 78) return yield* require_Schema$1.die(/* @__PURE__ */ new Error(`Forge Postgres schema ${currentVersion} is newer than server schema 78.`));
 		if (currentVersion === 0) {
 			for (const statement of postgresSchemaStatements) yield* sql.unsafe(statement);
 			yield* sql`
           INSERT INTO forge_schema_migrations (version)
-          VALUES (${77})
+          VALUES (${78})
           ON CONFLICT (version) DO NOTHING
         `;
-		} else for (let version = currentVersion + 1; version <= 77; version += 1) {
+		} else for (let version = currentVersion + 1; version <= 78; version += 1) {
 			const statements = yield* require_Schema$1.sync(() => requirePostgresUpgradeStatements(version));
 			for (const statement of statements) yield* sql.unsafe(statement);
 			yield* sql`
@@ -119202,6 +119206,18 @@ var _077_ProjectionThreadWorkSessionId_default = require_Schema$1.gen(function*
     `;
 });
 //#endregion
+//#region src/persistence/Migrations/078_ProjectionThreadWorkSessionBoundAt.ts
+/** Stores the timestamp of the last Work Session binding on a thread (forge#3597). */
+var _078_ProjectionThreadWorkSessionBoundAt_default = require_Schema$1.gen(function* () {
+	const sql = yield* require_SqlError.SqlClient;
+	if (!(yield* sql`
+    PRAGMA table_info(projection_threads)
+  `).some((column) => column.name === "work_session_bound_at")) yield* sql`
+      ALTER TABLE projection_threads
+      ADD COLUMN work_session_bound_at TEXT
+    `;
+});
+//#endregion
 //#region src/persistence/Migrations.ts
 /**
 * MigrationsLive - Migration runner with inline loader
@@ -119607,6 +119623,11 @@ const migrationEntries = [
 		77,
 		"ProjectionThreadWorkSessionId",
 		_077_ProjectionThreadWorkSessionId_default
+	],
+	[
+		78,
+		"ProjectionThreadWorkSessionBoundAt",
+		_078_ProjectionThreadWorkSessionBoundAt_default
 	]
 ];
 const makeMigrationLoader = (throughId) => fromRecord(Object.fromEntries(migrationEntries.filter(([id]) => throughId === void 0 || id <= throughId).map(([id, name, migration]) => [`${id}_${name}`, migration])));
@@ -288914,6 +288935,7 @@ const ProjectionThread = require_Schema$1.Struct({
 	anchorKind: CmmdAnchorKind.pipe(require_Schema$1.withDecodingDefault(require_Schema$1.succeed("scratch"))),
 	anchorCmmdId: require_Schema$1.NullOr(require_Schema$1.String).pipe(require_Schema$1.withDecodingDefault(require_Schema$1.succeed(null))),
 	workSessionId: require_Schema$1.optionalKey(require_Schema$1.NullOr(require_Schema$1.String)),
+	workSessionBoundAt: require_Schema$1.optionalKey(require_Schema$1.NullOr(require_Schema$1.String)),
 	linkedPullRequest: require_Schema$1.optionalKey(require_Schema$1.NullOr(LinkedPullRequest)),
 	status: ThreadStatus.pipe(require_Schema$1.withDecodingDefault(require_Schema$1.succeed("idle"))),
 	workerRole: require_Schema$1.NullOr(WorkerRole).pipe(require_Schema$1.withDecodingDefault(require_Schema$1.succeed(null))),
@@ -293698,6 +293720,15 @@ const make$7 = require_Schema$1.gen(function* () {
 	* (FOR-2605).
 	*/
 	const threadSessionAccountIds = /* @__PURE__ */ new Map();
+	/**
+	* The Work Session id each LIVE provider session was started for.
+	*
+	* A Retry creates a new Work Session B on a thread whose session ran for A.
+	* The reactor sees `thread.workSessionId === B` while the session still holds
+	* A's egress credential. Tracking the start-time value lets the reactor
+	* detect the mismatch and restart, dropping A's cached token (forge#3597).
+	*/
+	const threadSessionWorkSessionIds = /* @__PURE__ */ new Map();
 	const appendProviderFailureActivity = (input) => orchestrationEngine.dispatch({
 		type: "thread.activity.append",
 		commandId: serverCommandId$2("provider-failure-activity"),
@@ -293766,6 +293797,7 @@ const make$7 = require_Schema$1.gen(function* () {
 			runtimeMode: desiredRuntimeMode
 		}), () => require_Schema$1.sync(() => {
 			threadSessionAccountIds.set(threadId, readProviderAccountId(desiredModelSelection));
+			threadSessionWorkSessionIds.set(threadId, thread.workSessionId ?? null);
 		}));
 		const bindSessionToThread = (session) => setThreadSession({
 			threadId,
@@ -293804,7 +293836,18 @@ const make$7 = require_Schema$1.gen(function* () {
 			const desiredAccountId = readProviderAccountId(desiredModelSelection);
 			const activeAccountId = threadSessionAccountIds.get(threadId);
 			const shouldRestartForAccountChange = threadSessionAccountIds.has(threadId) && activeAccountId !== desiredAccountId;
-			if (!runtimeModeChanged && !providerChanged && !shouldRestartForModelChange && !shouldRestartForModelSelectionChange && !shouldRestartForAccountChange) return existingSessionThreadId;
+			/**
+			* A Retry creates a new Work Session B on a thread whose session was
+			* running for A. Once the projector applies the rebind event,
+			* `thread.workSessionId` is B. The session's egress credential was
+			* issued for A and CMMD rejects it with `session_ended` on the first
+			* tool call. Restarting the session drops the cached credential so the
+			* new session mints one bound to B (forge#3597).
+			*/
+			const currentWorkSessionId = thread.workSessionId ?? null;
+			const sessionWorkSessionId = threadSessionWorkSessionIds.get(threadId);
+			const shouldRestartForWorkSessionChange = threadSessionWorkSessionIds.has(threadId) && sessionWorkSessionId !== currentWorkSessionId;
+			if (!runtimeModeChanged && !providerChanged && !shouldRestartForModelChange && !shouldRestartForModelSelectionChange && !shouldRestartForAccountChange && !shouldRestartForWorkSessionChange) return existingSessionThreadId;
 			const resumeCursor = providerChanged || shouldRestartForModelChange ? void 0 : activeSession?.resumeCursor ?? void 0;
 			yield* require_Schema$1.logInfo("provider command reactor restarting provider session", {
 				threadId,
@@ -293819,9 +293862,10 @@ const make$7 = require_Schema$1.gen(function* () {
 				shouldRestartForModelChange,
 				shouldRestartForModelSelectionChange,
 				shouldRestartForAccountChange,
+				shouldRestartForWorkSessionChange,
 				hasResumeCursor: resumeCursor !== void 0
 			});
-			if (shouldRestartForAccountChange || providerChanged) yield* providerService.stopSession({
+			if (shouldRestartForAccountChange || shouldRestartForWorkSessionChange || providerChanged) yield* providerService.stopSession({
 				threadId,
 				preserveResumeState: true
 			});
@@ -300297,7 +300341,7 @@ function resolveBuildCommitFromEnv(env) {
 * environment descriptor down instead of reporting an honest "unknown".
 */
 function readBakedBuildCommit() {
-	return "f4f070acefe07be6602f75334f311f7b63bbecab";
+	return "52da43d14c8834d5585c39f2faed4463ed5c8132";
 }
 async function resolveServerBuildCommit(input) {
 	if (isFullCommitSha(input.baked)) return input.baked;
@@ -304164,6 +304208,7 @@ const decideOrchestrationCommand = require_Schema$1.fn("decideOrchestrationComma
 					anchorKind: anchor.anchorKind,
 					anchorCmmdId: anchor.anchorCmmdId,
 					workSessionId: command.workSessionId ?? null,
+					...command.workSessionId != null ? { workSessionBoundAt: command.createdAt } : {},
 					goal: command.goal ?? null,
 					linkedPullRequest: command.linkedPullRequest ?? null,
 					kind,
@@ -304473,8 +304518,13 @@ const decideOrchestrationCommand = require_Schema$1.fn("decideOrchestrationComma
 			const providerSwitchSelection = command.modelSelection !== void 0 && command.modelSelection.provider !== targetThread.modelSelection.provider ? command.modelSelection : void 0;
 			const accountSelection = turnAccountSelection(targetThread.modelSelection, command.modelSelection);
 			const turnModelSelection = providerSwitchSelection ?? accountSelection;
+			if (command.workSessionId !== void 0 && command.workSessionId !== null && command.workSessionId !== targetThread.workSessionId && targetThread.workSessionBoundAt !== void 0 && targetThread.workSessionBoundAt !== null && command.createdAt <= targetThread.workSessionBoundAt) return yield* new OrchestrationCommandInvariantError({
+				commandType: command.type,
+				detail: `Stale Work Session rebind: kick for session ${String(command.workSessionId)} at ${command.createdAt} is not after workSessionBoundAt ${String(targetThread.workSessionBoundAt)} on thread ${command.threadId}. Thread stays bound to ${String(targetThread.workSessionId)}.`
+			});
 			const shouldRebindWorkSession = command.workSessionId !== void 0 && command.workSessionId !== null && command.workSessionId !== targetThread.workSessionId;
-			if (!shouldUpdateAnchor && !turnModelSelection && !shouldRebindWorkSession) return [userMessageEvent, turnStartRequestedEvent];
+			const shouldAdvanceBoundTimestamp = !shouldRebindWorkSession && command.workSessionId !== void 0 && command.workSessionId !== null && command.workSessionId === targetThread.workSessionId && (targetThread.workSessionBoundAt === null || targetThread.workSessionBoundAt === void 0 || command.createdAt > targetThread.workSessionBoundAt);
+			if (!shouldUpdateAnchor && !turnModelSelection && !shouldRebindWorkSession && !shouldAdvanceBoundTimestamp) return [userMessageEvent, turnStartRequestedEvent];
 			return [
 				{
 					...withEventBase({
@@ -304489,7 +304539,10 @@ const decideOrchestrationCommand = require_Schema$1.fn("decideOrchestrationComma
 						anchorKind: nextAnchor.anchorKind,
 						anchorCmmdId: nextAnchor.anchorCmmdId,
 						...turnModelSelection ? { modelSelection: turnModelSelection } : {},
-						...shouldRebindWorkSession ? { workSessionId: command.workSessionId } : {},
+						...shouldRebindWorkSession ? {
+							workSessionId: command.workSessionId,
+							workSessionBoundAt: command.createdAt
+						} : shouldAdvanceBoundTimestamp ? { workSessionBoundAt: command.createdAt } : {},
 						updatedAt: command.createdAt
 					}
 				},
@@ -305060,6 +305113,7 @@ function projectEvent(model, event) {
 				anchorKind: payload.anchorKind,
 				anchorCmmdId: payload.anchorCmmdId,
 				workSessionId: payload.workSessionId ?? null,
+				workSessionBoundAt: payload.workSessionBoundAt ?? null,
 				goal: payload.goal ?? null,
 				linkedPullRequest: payload.linkedPullRequest ?? null,
 				titleRegeneration: null,
@@ -305141,6 +305195,7 @@ function projectEvent(model, event) {
 				...payload.linkedPullRequest !== void 0 ? { linkedPullRequest: payload.linkedPullRequest } : {},
 				...payload.titleRegeneration !== void 0 ? { titleRegeneration: payload.titleRegeneration } : {},
 				...payload.workSessionId !== void 0 ? { workSessionId: payload.workSessionId } : {},
+				...payload.workSessionBoundAt !== void 0 ? { workSessionBoundAt: payload.workSessionBoundAt } : {},
 				updatedAt: payload.updatedAt
 			})
 		})));
@@ -306206,6 +306261,7 @@ const makeProjectionThreadRepository = require_Schema$1.gen(function* () {
           anchor_kind,
           anchor_cmmd_id,
           work_session_id,
+          work_session_bound_at,
           linked_pull_request_json,
           status,
           worker_role,
@@ -306239,6 +306295,7 @@ const makeProjectionThreadRepository = require_Schema$1.gen(function* () {
           ${row.anchorKind},
           ${row.anchorCmmdId},
           ${row.workSessionId ?? null},
+          ${row.workSessionBoundAt ?? null},
           ${row.linkedPullRequest == null ? null : JSON.stringify(row.linkedPullRequest)},
           ${row.status},
           ${row.workerRole},
@@ -306272,6 +306329,7 @@ const makeProjectionThreadRepository = require_Schema$1.gen(function* () {
           anchor_kind = excluded.anchor_kind,
           anchor_cmmd_id = excluded.anchor_cmmd_id,
           work_session_id = excluded.work_session_id,
+          work_session_bound_at = excluded.work_session_bound_at,
           linked_pull_request_json = excluded.linked_pull_request_json,
           status = excluded.status,
           worker_role = excluded.worker_role,
@@ -306310,6 +306368,7 @@ const makeProjectionThreadRepository = require_Schema$1.gen(function* () {
           anchor_kind AS "anchorKind",
           anchor_cmmd_id AS "anchorCmmdId",
           work_session_id AS "workSessionId",
+          work_session_bound_at AS "workSessionBoundAt",
           linked_pull_request_json AS "linkedPullRequest",
           status,
           worker_role AS "workerRole",
@@ -306350,6 +306409,7 @@ const makeProjectionThreadRepository = require_Schema$1.gen(function* () {
           anchor_kind AS "anchorKind",
           anchor_cmmd_id AS "anchorCmmdId",
           work_session_id AS "workSessionId",
+          work_session_bound_at AS "workSessionBoundAt",
           linked_pull_request_json AS "linkedPullRequest",
           status,
           worker_role AS "workerRole",
@@ -306706,6 +306766,7 @@ const makeOrchestrationProjectionPipeline = require_Schema$1.fn("makeOrchestrati
 					anchorKind: event.payload.anchorKind,
 					anchorCmmdId: event.payload.anchorCmmdId,
 					workSessionId: projectedWorkSessionId(event.payload.workSessionId),
+					workSessionBoundAt: event.payload.workSessionBoundAt ?? null,
 					linkedPullRequest: event.payload.linkedPullRequest ?? null,
 					status: event.payload.status,
 					workerRole: event.payload.workerRole,
@@ -306745,6 +306806,7 @@ const makeOrchestrationProjectionPipeline = require_Schema$1.fn("makeOrchestrati
 					anchorKind: thread.anchorKind,
 					anchorCmmdId: thread.anchorCmmdId,
 					workSessionId: projectedWorkSessionId(thread.workSessionId),
+					workSessionBoundAt: thread.workSessionBoundAt ?? null,
 					linkedPullRequest: thread.linkedPullRequest ?? null,
 					status: thread.status,
 					workerRole: thread.workerRole,
@@ -306814,6 +306876,7 @@ const makeOrchestrationProjectionPipeline = require_Schema$1.fn("makeOrchestrati
 					...event.payload.linkedPullRequest !== void 0 ? { linkedPullRequest: event.payload.linkedPullRequest } : {},
 					...event.payload.titleRegeneration !== void 0 ? { titleRegeneration: event.payload.titleRegeneration } : {},
 					...event.payload.workSessionId !== void 0 ? { workSessionId: projectedWorkSessionId(event.payload.workSessionId) } : {},
+					...event.payload.workSessionBoundAt !== void 0 ? { workSessionBoundAt: event.payload.workSessionBoundAt } : {},
 					updatedAt: event.payload.updatedAt
 				});
 				return;
@@ -307824,6 +307887,13 @@ function toPersistenceSqlOrDecodeError(sqlOperation, decodeOperation) {
 function workSessionIdField(workSessionId) {
 	return workSessionId !== void 0 ? { workSessionId } : {};
 }
+/**
+* `{ workSessionBoundAt }` when the row carries one, an empty object when absent.
+* Mirrors `workSessionIdField` so `exactOptionalPropertyTypes` is satisfied. See forge#3611.
+*/
+function workSessionBoundAtField(workSessionBoundAt) {
+	return workSessionBoundAt !== void 0 ? { workSessionBoundAt } : {};
+}
 const makeProjectionSnapshotQuery = require_Schema$1.gen(function* () {
 	const sql = yield* require_SqlError.SqlClient;
 	const repositoryIdentityResolver = yield* RepositoryIdentityResolver;
@@ -307877,6 +307947,7 @@ const makeProjectionSnapshotQuery = require_Schema$1.gen(function* () {
           anchor_kind AS "anchorKind",
           anchor_cmmd_id AS "anchorCmmdId",
           work_session_id AS "workSessionId",
+          work_session_bound_at AS "workSessionBoundAt",
           linked_pull_request_json AS "linkedPullRequest",
           status,
           worker_role AS "workerRole",
@@ -307916,6 +307987,7 @@ const makeProjectionSnapshotQuery = require_Schema$1.gen(function* () {
           anchor_kind AS "anchorKind",
           anchor_cmmd_id AS "anchorCmmdId",
           work_session_id AS "workSessionId",
+          work_session_bound_at AS "workSessionBoundAt",
           linked_pull_request_json AS "linkedPullRequest",
           status,
           worker_role AS "workerRole",
@@ -308021,6 +308093,7 @@ const makeProjectionSnapshotQuery = require_Schema$1.gen(function* () {
           anchor_kind AS "anchorKind",
           anchor_cmmd_id AS "anchorCmmdId",
           work_session_id AS "workSessionId",
+          work_session_bound_at AS "workSessionBoundAt",
           linked_pull_request_json AS "linkedPullRequest",
           status,
           worker_role AS "workerRole",
@@ -308354,6 +308427,7 @@ const makeProjectionSnapshotQuery = require_Schema$1.gen(function* () {
           anchor_kind AS "anchorKind",
           anchor_cmmd_id AS "anchorCmmdId",
           work_session_id AS "workSessionId",
+          work_session_bound_at AS "workSessionBoundAt",
           linked_pull_request_json AS "linkedPullRequest",
           status,
           worker_role AS "workerRole",
@@ -308667,6 +308741,7 @@ const makeProjectionSnapshotQuery = require_Schema$1.gen(function* () {
 			anchorKind: row.anchorKind,
 			anchorCmmdId: row.anchorCmmdId,
 			...workSessionIdField(row.workSessionId),
+			...workSessionBoundAtField(row.workSessionBoundAt),
 			linkedPullRequest: row.linkedPullRequest,
 			kind: row.kind,
 			parentThreadId: row.parentThreadId,
@@ -308917,6 +308992,7 @@ const makeProjectionSnapshotQuery = require_Schema$1.gen(function* () {
 			anchorKind: threadRow.value.anchorKind,
 			anchorCmmdId: threadRow.value.anchorCmmdId,
 			...workSessionIdField(threadRow.value.workSessionId),
+			...workSessionBoundAtField(threadRow.value.workSessionBoundAt),
 			linkedPullRequest: threadRow.value.linkedPullRequest,
 			kind: threadRow.value.kind,
 			parentThreadId: threadRow.value.parentThreadId,
@@ -312295,6 +312371,20 @@ registerProxyRoute({
 	orgIdSource: "none",
 	responseShape: "unwrapData"
 });
+registerProxyRoute({
+	forgePath: "/api/cmmd/user/settings/:namespace",
+	method: "GET",
+	cmmdPath: "/api/forge/context/user/settings/:namespace",
+	orgIdSource: "none",
+	responseShape: "unwrapData"
+});
+registerProxyRoute({
+	forgePath: "/api/cmmd/user/settings/:namespace",
+	method: "PUT",
+	cmmdPath: "/api/forge/context/user/settings/:namespace",
+	orgIdSource: "none",
+	responseShape: "unwrapData"
+});
 registerProxyRoute({
 	forgePath: "/api/cmmd/devices",
 	method: "GET",