@sealant/mend 0.29.2 → 0.31.0

package/dist/{chunk-AIW6XFT5.js → chunk-J3TR4UAG.js}

@@ -4,64 +4,6 @@ var __export = (target, all3) => {
     __defProp(target, name, { get: all3[name], enumerable: true });
 };
 
-// ../../packages/domain/src/workbench/connected-credential.ts
-var CLAUDE_GRANT_SECTION = "claudeAiOauth";
-var narrowCredential = (provider, secret) => {
-  if (provider !== "claude") return { kind: "unchanged", secret };
-  const parsed = parseDocument(secret);
-  if (parsed === null) return { kind: "unchanged", secret };
-  const grant = parsed[CLAUDE_GRANT_SECTION];
-  if (grant === void 0) return { kind: "unchanged", secret };
-  const dropped = Object.keys(parsed).filter((key) => key !== CLAUDE_GRANT_SECTION).toSorted();
-  return {
-    kind: "narrowed",
-    // Two spaces and a trailing newline: the shape Claude Code writes, so a round trip through
-    // Mend leaves a file a person can still read.
-    secret: `${JSON.stringify({ [CLAUDE_GRANT_SECTION]: grant }, null, 2)}
-`,
-    dropped
-  };
-};
-var parseDocument = (secret) => {
-  const trimmed = secret.trim();
-  if (!trimmed.startsWith("{")) return null;
-  try {
-    const value3 = JSON.parse(trimmed);
-    return typeof value3 === "object" && value3 !== null && !Array.isArray(value3) ? value3 : null;
-  } catch {
-    return null;
-  }
-};
-var claudeGrantFacts = (secret) => {
-  const parsed = parseDocument(secret);
-  const grant = parsed?.[CLAUDE_GRANT_SECTION];
-  if (typeof grant !== "object" || grant === null) return null;
-  const record3 = { ...grant };
-  const refreshToken = record3["refreshToken"];
-  return {
-    accessExpiresAt: asDate(record3["expiresAt"]),
-    refreshExpiresAt: asDate(record3["refreshTokenExpiresAt"]),
-    subscriptionType: typeof record3["subscriptionType"] === "string" ? record3["subscriptionType"] : null,
-    hasRefreshToken: typeof refreshToken === "string" && refreshToken !== ""
-  };
-};
-var asDate = (value3) => {
-  if (typeof value3 !== "number" || !Number.isFinite(value3) || value3 <= 0) return null;
-  const date2 = new Date(value3);
-  return Number.isNaN(date2.getTime()) ? null : date2;
-};
-var sameGrant = (left, right) => {
-  const token = (secret) => {
-    const grant = parseDocument(secret)?.[CLAUDE_GRANT_SECTION];
-    if (typeof grant !== "object" || grant === null) return null;
-    const value3 = grant["refreshToken"];
-    return typeof value3 === "string" && value3 !== "" ? value3 : null;
-  };
-  const a = token(left);
-  const b = token(right);
-  return a !== null && b !== null && a === b;
-};
-
 // ../../node_modules/.pnpm/effect@4.0.0-beta.93/node_modules/effect/dist/Pipeable.js
 var pipeArguments = (self, args2) => {
   switch (args2.length) {
@@ -26499,10 +26441,12 @@ var InvitationId = Schema_exports.String.pipe(Schema_exports.brand("InvitationId
 var FolderId = Schema_exports.String.pipe(Schema_exports.brand("FolderId"));
 var AuditEventId = Schema_exports.String.pipe(Schema_exports.brand("AuditEventId"));
 var SessionControlEventId = Schema_exports.String.pipe(Schema_exports.brand("SessionControlEventId"));
+var ChangeLandingId = Schema_exports.String.pipe(Schema_exports.brand("ChangeLandingId"));
 
 // ../../packages/domain/src/settings.ts
 var PrMode = Schema_exports.Literals(["draft-immediately", "pr-on-approval"]);
 var onByDefault = Schema_exports.Boolean.pipe(Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(true)));
+var offByDefault = Schema_exports.Boolean.pipe(Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(false)));
 var WorkspaceImageOs = Schema_exports.Literals(["fedora", "arch", "nix", "ubuntu"]);
 var DEFAULT_WORKSPACE_PACKAGES = [
   "pnpm",
@@ -26598,6 +26542,12 @@ var MendSettings = class extends Schema_exports.Class("MendSettings")({
   autoSuggest: onByDefault,
   /** Name the session from its first prompt — a label appears in lists while it still runs. */
   autoName: onByDefault,
+  /**
+   * Land the change when a turn completes (docs/adr/0007-landing.md, "Automatic landing"): push
+   * the branch and open or update its pull request. Off by default for sessions people run
+   * themselves; Slack sessions follow the Slack app's own setting instead.
+   */
+  autoLand: offByDefault,
   /** Base operating system and additional tools baked into every new session workspace. */
   workspaceImage: workspaceImageWithDefault,
   /**
@@ -26615,6 +26565,7 @@ var defaultSettings = new MendSettings({
   autoTour: true,
   autoSuggest: true,
   autoName: true,
+  autoLand: false,
   workspaceImage: defaultWorkspaceImage,
   backgroundSessions: true
 });
@@ -26726,6 +26677,13 @@ var Project = class extends Schema_exports.Class("Project")({
   autoSuggest: AutomationChoice,
   /** Override of the Settings default: name the session from its first prompt. */
   autoName: AutomationChoice,
+  /**
+   * Override of the Settings default: land the change when a turn completes (docs/adr/0007). `off`
+   * also stops sessions started from Slack.
+   */
+  autoLand: AutomationChoice.pipe(
+    Schema_exports.withDecodingDefaultKey(Effect_exports.succeed("inherit"))
+  ),
   /**
    * Override of the Settings default: sessions keep running when every client
    * disconnects. Resolved by the launching CLI (flag → project → settings) —
@@ -26767,6 +26725,64 @@ var Project = class extends Schema_exports.Class("Project")({
 }) {
 };
 
+// ../../packages/domain/src/workbench/connected-credential.ts
+var CLAUDE_GRANT_SECTION = "claudeAiOauth";
+var narrowCredential = (provider, secret) => {
+  if (provider !== "claude") return { kind: "unchanged", secret };
+  const parsed = parseDocument(secret);
+  if (parsed === null) return { kind: "unchanged", secret };
+  const grant = parsed[CLAUDE_GRANT_SECTION];
+  if (grant === void 0) return { kind: "unchanged", secret };
+  const dropped = Object.keys(parsed).filter((key) => key !== CLAUDE_GRANT_SECTION).toSorted();
+  return {
+    kind: "narrowed",
+    // Two spaces and a trailing newline: the shape Claude Code writes, so a round trip through
+    // Mend leaves a file a person can still read.
+    secret: `${JSON.stringify({ [CLAUDE_GRANT_SECTION]: grant }, null, 2)}
+`,
+    dropped
+  };
+};
+var parseDocument = (secret) => {
+  const trimmed = secret.trim();
+  if (!trimmed.startsWith("{")) return null;
+  try {
+    const value3 = JSON.parse(trimmed);
+    return typeof value3 === "object" && value3 !== null && !Array.isArray(value3) ? value3 : null;
+  } catch {
+    return null;
+  }
+};
+var claudeGrantFacts = (secret) => {
+  const parsed = parseDocument(secret);
+  const grant = parsed?.[CLAUDE_GRANT_SECTION];
+  if (typeof grant !== "object" || grant === null) return null;
+  const record3 = { ...grant };
+  const refreshToken = record3["refreshToken"];
+  return {
+    accessExpiresAt: asDate(record3["expiresAt"]),
+    refreshExpiresAt: asDate(record3["refreshTokenExpiresAt"]),
+    subscriptionType: typeof record3["subscriptionType"] === "string" ? record3["subscriptionType"] : null,
+    hasRefreshToken: typeof refreshToken === "string" && refreshToken !== ""
+  };
+};
+var asDate = (value3) => {
+  if (typeof value3 !== "number" || !Number.isFinite(value3) || value3 <= 0) return null;
+  const date2 = new Date(value3);
+  return Number.isNaN(date2.getTime()) ? null : date2;
+};
+var sameGrant = (left, right) => {
+  const token = (secret) => {
+    const grant = parseDocument(secret)?.[CLAUDE_GRANT_SECTION];
+    if (typeof grant !== "object" || grant === null) return null;
+    const value3 = grant["refreshToken"];
+    return typeof value3 === "string" && value3 !== "" ? value3 : null;
+  };
+  const a = token(left);
+  const b = token(right);
+  return a !== null && b !== null && a === b;
+};
+
 // ../../packages/domain/src/workbench/audit.ts
 var AuditAction = Schema_exports.Literals([
   "invitation.created",
@@ -26786,7 +26802,24 @@ var AuditAction = Schema_exports.Literals([
   "organization.created",
   "organization.renamed",
   "recovery.owner_granted",
-  "recovery.password_reset_issued"
+  "recovery.password_reset_issued",
+  // docs/adr/0006-slack.md, "Audit".
+  "slack.installed",
+  "slack.replaced",
+  "slack.removed",
+  "slack.settings_changed",
+  "slack.link_created",
+  "slack.link_removed",
+  "slack.session_started",
+  "slack.channel_default_set",
+  "slack.channel_default_cleared",
+  // docs/adr/0007-landing.md, "What Mend records and shows": the owner's credentials pushed, and
+  // `gh` spoke as them.
+  "change.landed",
+  "change.pull_request_refreshed",
+  "change.bundle_downloaded",
+  // A pull request opened outside Mend was read with the owner's `gh` and recorded.
+  "change.pull_request_adopted"
 ]);
 var AuditData = Schema_exports.Record(
   Schema_exports.String,
@@ -26798,7 +26831,10 @@ var AuditEvent = class extends Schema_exports.Class("AuditEvent")({
   /** The account that acted. */
   actorUserId: Schema_exports.String,
   action: AuditAction,
-  /** What the action touched: `member`, `invitation`, `project`, `session`, `folder` or `reference`. */
+  /**
+   * What the action touched: `member`, `invitation`, `project`, `session`, `folder`, `reference`,
+   * `slack` (the organization's Slack app) or `change` (a landing).
+   */
   subjectType: Schema_exports.String,
   subjectId: Schema_exports.String,
   data: AuditData,
@@ -26806,6 +26842,165 @@ var AuditEvent = class extends Schema_exports.Class("AuditEvent")({
 }) {
 };
 
+// ../../packages/domain/src/workbench/landing.ts
+var LandingTrigger = Schema_exports.Literals(["manual", "automatic", "adopted"]);
+var LandingOutcome = Schema_exports.Literals([
+  "pushed",
+  "pull-request",
+  "refused",
+  "failed",
+  "adopted"
+]);
+var PullRequestState = Schema_exports.Literals(["open", "closed", "merged"]);
+var LandedPullRequest = Schema_exports.Struct({
+  number: Schema_exports.Int,
+  url: Schema_exports.String,
+  state: PullRequestState,
+  observedAt: Timestamp
+});
+var ChangeLanding = class extends Schema_exports.Class("ChangeLanding")({
+  id: ChangeLandingId,
+  changeId: ChangeId,
+  /** The session that landed; null once that session is deleted. */
+  sessionId: Schema_exports.NullOr(SessionId),
+  projectId: ProjectId,
+  /** The landed checkpoint; null when it was since removed, or never taken. */
+  checkpointId: Schema_exports.NullOr(CheckpointId),
+  checkpointRef: Schema_exports.NullOr(Schema_exports.String),
+  checkpointSha: Schema_exports.NullOr(Sha),
+  /** The commit Mend wrote for work the agent left uncommitted; null when it wrote none. */
+  commitSha: Schema_exports.NullOr(Sha),
+  /** The branch on origin, `mend/<name>` unless the owner named another. */
+  remoteBranch: Schema_exports.String,
+  /** What origin's branch was moved to; null when nothing was pushed. */
+  pushedSha: Schema_exports.NullOr(Sha),
+  trigger: LandingTrigger,
+  pullRequest: Schema_exports.NullOr(LandedPullRequest),
+  /**
+   * The pull request's head is in another repository (a fork): Mend pushes to origin only, so it
+   * never updates such a pull request. Older servers omit it.
+   */
+  pullRequestCrossRepository: Schema_exports.Boolean.pipe(
+    Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(false)),
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(false))
+  ),
+  /** Who owns the repository the pull request's head is in, as `gh` reported it; null unknown. */
+  pullRequestHeadOwner: Schema_exports.NullOr(Schema_exports.String).pipe(
+    Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(null)),
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  outcome: LandingOutcome,
+  /** The remote's or `gh`'s own words for a refusal or a failure; null otherwise. */
+  message: Schema_exports.NullOr(Schema_exports.String),
+  /** The change's owner (`changeOwnerOf`), whose key pushed and who speaks on GitHub. */
+  userId: Schema_exports.String,
+  createdAt: Timestamp
+}) {
+};
+var RequestIntent = Schema_exports.Literals(["change", "question"]);
+var RequestIntentSource = Schema_exports.Literals(["read", "option", "unread"]);
+var RequestIntentReading = Schema_exports.Union([
+  Schema_exports.Struct({ intent: RequestIntent, source: Schema_exports.Literals(["read", "option"]) }),
+  Schema_exports.Struct({ intent: Schema_exports.Null, source: Schema_exports.Literals(["unread"]) })
+]);
+var LANDING_GUARD = [
+  "--- How this work is published ---",
+  "Mend publishes the changes this session makes: it pushes the branch and opens or updates the pull request.",
+  "- If the request is a question, answer it and change no files.",
+  "- Change code only when the request asks for a change.",
+  "- Never push and never open a pull request. Committing is fine.",
+  "--- End of how this work is published ---"
+].join("\n");
+var NotLandedReason = Schema_exports.Literals([
+  /** The request read as a question. */
+  "question",
+  /** The request said `autopr=false`. */
+  "option",
+  /** Automatic landing is off for the session. */
+  "off",
+  /** Someone other than the owner sent the turn under shared control. */
+  "not-owner"
+]);
+var TurnLanding = Schema_exports.Literals([
+  "attempted",
+  "question",
+  "option",
+  "off",
+  "not-owner",
+  "skipped"
+]);
+var LandingFact = Schema_exports.Union([
+  /** A landing moved origin's branch to this sha. */
+  Schema_exports.TaggedStruct("pushed", { branch: Schema_exports.String, sha: Sha }),
+  /** The landing's pull request, as `gh` last reported it. */
+  Schema_exports.TaggedStruct("pull-request", {
+    number: Schema_exports.Int,
+    state: PullRequestState,
+    observedAt: Timestamp,
+    /** Opened outside Mend and adopted. Older servers omit it. */
+    outside: Schema_exports.Boolean.pipe(Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(false))),
+    /** The fork's owner when its head is in another repository; null for origin's own. */
+    fork: Schema_exports.NullOr(Schema_exports.String).pipe(Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(null)))
+  }),
+  /** A fetch found commits on origin's branch that Mend's branch does not have. */
+  Schema_exports.TaggedStruct("origin-moved", { branch: Schema_exports.String, commits: Schema_exports.Int }),
+  /** The worktree moved past the landed checkpoint. */
+  Schema_exports.TaggedStruct("changed-since-landing", { files: Schema_exports.Int }),
+  /** The latest landing's push was refused, in the remote's words. */
+  Schema_exports.TaggedStruct("refused", { branch: Schema_exports.String, message: Schema_exports.String }),
+  /** The latest landing failed before it pushed. */
+  Schema_exports.TaggedStruct("failed", { message: Schema_exports.String }),
+  /** The latest landing pushed, and its pull request step failed. */
+  Schema_exports.TaggedStruct("pull-request-failed", { message: Schema_exports.String }),
+  /** A push the agent made itself, through the workspace's git transport. Not a landing. */
+  Schema_exports.TaggedStruct("agent-push", { ref: Schema_exports.String, sha: Schema_exports.NullOr(Sha) }),
+  /** A completed turn left changes that did not land. */
+  Schema_exports.TaggedStruct("not-landed", { reason: NotLandedReason }),
+  /** The request's intent could not be read, so it was treated as a change. */
+  Schema_exports.TaggedStruct("intent-not-read", {})
+]);
+var decodeWireFacts = Schema_exports.decodeUnknownSync(Schema_exports.toCodecJson(Schema_exports.Array(LandingFact)));
+var landingFactsFromWire = (wire) => decodeWireFacts(wire);
+var shortSha = (sha) => sha.slice(0, 7);
+var plural = (count, one, many) => `${count} ${count === 1 ? one : many}`;
+var observedAgo = (at, now2) => {
+  const seconds2 = Math.max(0, Math.floor((now2.getTime() - at.getTime()) / 1e3));
+  if (seconds2 < 60) return `${seconds2} s ago`;
+  if (seconds2 < 3600) return `${Math.floor(seconds2 / 60)} min ago`;
+  if (seconds2 < 86400) return `${Math.floor(seconds2 / 3600)} h ago`;
+  return `${Math.floor(seconds2 / 86400)} d ago`;
+};
+var NOT_LANDED = {
+  question: "the request read as a question",
+  option: "the request said autopr=false",
+  off: "automatic landing is off",
+  "not-owner": "the turn was not sent by the owner"
+};
+var landingFactLine = (fact, now2) => {
+  switch (fact._tag) {
+    case "pushed":
+      return `pushed \xB7 ${fact.branch} \xB7 ${shortSha(fact.sha)} \xB7 observed`;
+    case "pull-request":
+      return `pull request #${fact.number} \xB7 ${fact.state} \xB7 observed ${observedAgo(fact.observedAt, now2)}` + (fact.outside ? " \xB7 opened outside Mend" : "") + (fact.fork === null ? "" : ` \xB7 from ${fact.fork === "" ? "a fork" : `${fact.fork}'s fork`}`);
+    case "origin-moved":
+      return `origin has moved \xB7 ${fact.branch} has ${plural(fact.commits, "commit", "commits")} Mend has not seen`;
+    case "changed-since-landing":
+      return `changed since landing \xB7 ${plural(fact.files, "file", "files")}`;
+    case "refused":
+      return `push refused \xB7 ${fact.branch} \xB7 ${fact.message}`;
+    case "failed":
+      return `landing failed \xB7 ${fact.message}`;
+    case "pull-request-failed":
+      return `pull request step failed \xB7 ${fact.message}`;
+    case "agent-push":
+      return fact.sha === null ? `deleted by the agent \xB7 ${fact.ref}` : `pushed by the agent \xB7 ${fact.ref} \xB7 ${shortSha(fact.sha)}`;
+    case "not-landed":
+      return `changes not landed \xB7 ${NOT_LANDED[fact.reason]}`;
+    case "intent-not-read":
+      return "intent not read";
+  }
+};
+
 // ../../packages/domain/src/workbench/agent-protocol.ts
 var AgentLaunchMode = Schema_exports.Literals(["pty", "protocol"]);
 var AgentTurnStatus = Schema_exports.Literals([
@@ -26836,6 +27031,23 @@ var AgentTurn = class extends Schema_exports.Class("AgentTurn")({
   providerTurnId: Schema_exports.NullOr(Schema_exports.String),
   error: Schema_exports.NullOr(Schema_exports.String),
   usage: Schema_exports.NullOr(AgentTurnUsage),
+  /**
+   * What the request asked for (docs/adr/0007-landing.md, "Questions do not open pull requests"):
+   * null until Mend reads it, and null with source `unread` when it could not.
+   */
+  intent: Schema_exports.NullOr(RequestIntent).pipe(Schema_exports.withConstructorDefault(Effect_exports.succeed(null))),
+  intentSource: Schema_exports.NullOr(RequestIntentSource).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  /**
+   * What Mend decided about landing once the turn ended ("When a completed turn lands"): null
+   * until it decides, or for a turn that ended before automatic landing existed.
+   */
+  landing: Schema_exports.NullOr(TurnLanding).pipe(Schema_exports.withConstructorDefault(Effect_exports.succeed(null))),
+  /** The automatic landing this turn started, when it `attempted` one and the row remains. */
+  landingId: Schema_exports.NullOr(ChangeLandingId).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
   createdAt: Timestamp,
   startedAt: Schema_exports.NullOr(Timestamp),
   endedAt: Schema_exports.NullOr(Timestamp)
@@ -27071,6 +27283,37 @@ var FolderFile = class extends Schema_exports.Class("FolderFile")({
 var FOLDER_MAX_FILE_BYTES = 1024 * 1024;
 var FOLDER_MAX_REQUEST_BYTES = 4 * 1024 * 1024;
 
+// ../../packages/domain/src/workbench/git-author.ts
+var GitAuthorSource = Schema_exports.Literals(["setting", "account"]);
+var GitAuthor = class extends Schema_exports.Class("GitAuthor")({
+  name: Schema_exports.String,
+  email: Schema_exports.String
+}) {
+};
+var ResolvedGitAuthor = class extends Schema_exports.Class("ResolvedGitAuthor")({
+  name: Schema_exports.String,
+  email: Schema_exports.String,
+  source: GitAuthorSource
+}) {
+};
+var GIT_AUTHOR_MAX_LENGTH = 200;
+var normalizeGitAuthor = (author) => new GitAuthor({ name: author.name.trim(), email: author.email.trim() });
+var gitAuthorIssue = (author) => {
+  const { name, email } = normalizeGitAuthor(author);
+  if (name === "") return "the name is empty";
+  if (email === "") return "the email is empty";
+  if (name.length > GIT_AUTHOR_MAX_LENGTH) {
+    return `the name is longer than ${GIT_AUTHOR_MAX_LENGTH} characters`;
+  }
+  if (email.length > GIT_AUTHOR_MAX_LENGTH) {
+    return `the email is longer than ${GIT_AUTHOR_MAX_LENGTH} characters`;
+  }
+  if (/[<>\r\n]/.test(name)) return "the name contains <, > or a line break";
+  if (!/^[^\s<>@]+@[^\s<>@]+$/.test(email))
+    return "the email is not an address like you@example.com";
+  return null;
+};
+
 // ../../packages/domain/src/workbench/review-slice.ts
 var DiffDigest = Schema_exports.String.pipe(
   Schema_exports.check(Schema_exports.isPattern(/^[0-9a-f]{64}$/)),
@@ -27186,6 +27429,10 @@ var SessionReferenceMount = class extends Schema_exports.Class(
 };
 
 // ../../packages/domain/src/workbench/session.ts
+var SessionDotfilesNotApplied = Schema_exports.Struct({
+  source: Schema_exports.Literals(["repository", "snapshot"]),
+  reason: Schema_exports.String
+});
 var SessionDotfiles = Schema_exports.Struct({
   repository: Schema_exports.NullOr(
     Schema_exports.Struct({
@@ -27193,7 +27440,11 @@ var SessionDotfiles = Schema_exports.Struct({
       ref: Schema_exports.NullOr(Schema_exports.String)
     })
   ),
-  snapshotSha: Schema_exports.NullOr(Schema_exports.String)
+  snapshotSha: Schema_exports.NullOr(Schema_exports.String),
+  /** Rows stamped before this field decode as nothing left out. */
+  notApplied: Schema_exports.Array(SessionDotfilesNotApplied).pipe(
+    Schema_exports.withDecodingDefaultKey(Effect_exports.succeed([]))
+  )
 });
 var SessionStatus = Schema_exports.Literals([
   "starting",
@@ -27204,6 +27455,7 @@ var SessionStatus = Schema_exports.Literals([
   "failed",
   "stopped"
 ]);
+var SessionOrigin = Schema_exports.Literals(["mend", "slack"]);
 var NativeIngestCursor = Schema_exports.Struct({
   providerSessionId: Schema_exports.String,
   lastEntryUuid: Schema_exports.NullOr(Schema_exports.String),
@@ -27256,6 +27508,14 @@ var Session = class extends Schema_exports.Class("Session")({
   dotfiles: Schema_exports.NullOr(SessionDotfiles),
   /** Who provisioned the session — whose dotfiles apply. Null for pre-column rows. */
   ownerUserId: Schema_exports.NullOr(Schema_exports.String),
+  /** Where it was started from (docs/adr/0006-slack.md). */
+  origin: SessionOrigin.pipe(Schema_exports.withConstructorDefault(Effect_exports.succeed("mend"))),
+  /**
+   * The session's own automatic-landing override (docs/adr/0007-landing.md), set at start: the
+   * composer's or `mend`'s `--land` / `--no-land`, or a Slack request's `autopr=`. Null follows the
+   * project and Settings.
+   */
+  autoLand: Schema_exports.NullOr(Schema_exports.Boolean).pipe(Schema_exports.withConstructorDefault(Effect_exports.succeed(null))),
   /**
    * Shared control (docs/adr/0003-organizations-and-tenancy.md): when set, anyone who can see the
    * session may steer it, still on the owner's credentials. Who turned it on, and when.
@@ -27359,13 +27619,14 @@ var ProjectLink = class extends Schema_exports.Class("ProjectLink")({
 
 // ../../packages/domain/src/workbench/pass.ts
 var PassKind = Schema_exports.Literals(["tour", "read", "suggest"]);
-var PassStatus = Schema_exports.Literals(["running", "completed", "failed"]);
+var PassStatus = Schema_exports.Literals(["queued", "running", "completed", "failed"]);
 var ChangePass = class extends Schema_exports.Class("ChangePass")({
   changeId: ChangeId,
   kind: PassKind,
   status: PassStatus,
   detail: Schema_exports.NullOr(Schema_exports.String),
   findings: Schema_exports.NullOr(Schema_exports.Int),
+  /** When it began running; for a `queued` row, when it was queued. */
   startedAt: Timestamp,
   finishedAt: Schema_exports.NullOr(Timestamp)
 }) {
@@ -27395,7 +27656,7 @@ var ProjectClusterBindingsSnapshot = class extends Schema_exports.Class(
 }) {
 };
 
-// ../../node_modules/.pnpm/@sealant+api-contracts@0.37.0_effect@4.0.0-beta.93/node_modules/@sealant/api-contracts/dist/workspace-environment.js
+// ../../node_modules/.pnpm/@sealant+api-contracts@0.37.1_effect@4.0.0-beta.93/node_modules/@sealant/api-contracts/dist/workspace-environment.js
 var RESERVED_NAMES = new Map([
   // Identity/process roots the daemon and shells own.
   ...[
@@ -27730,12 +27991,20 @@ var ServiceView = class extends Schema_exports.Class("ServiceView")({
 }) {
 };
 
+// ../../packages/domain/src/workbench/session-fold.ts
+var servicesHoldLine = (input) => {
+  if (input.agentLive || input.liveServices <= 0) return null;
+  const hold = input.liveServices === 1 ? "1 service keeps the workspace up" : `${input.liveServices} services keep the workspace up`;
+  return input.agentOutcome === null ? hold : `agent ${input.agentOutcome} \xB7 ${hold}`;
+};
+
 // ../../packages/domain/src/workbench/session-control.ts
 var SessionControlKind = Schema_exports.Literals([
   "interrupt",
   "terminal-attach",
   "shell-open",
   "stop",
+  "services-stop",
   "shared-control-on",
   "shared-control-off"
 ]);
@@ -27825,6 +28094,73 @@ var SkillWithFiles = class extends Schema_exports.Class("SkillWithFiles")({
 var SKILL_MAX_FILE_BYTES = 512 * 1024;
 var SKILL_MAX_BYTES = 2 * 1024 * 1024;
 
+// ../../packages/domain/src/workbench/slack.ts
+var SlackInstallSettings = Schema_exports.Struct({
+  defaultHarness: Schema_exports.String,
+  /** The plan, closing messages and questions, as well as status, reactions and links. */
+  showAgentMessages: Schema_exports.Boolean,
+  /** The diff of each changed file, as well as the file list and line counts. */
+  showDiffs: Schema_exports.Boolean,
+  /** Whether the two settings above also apply in Slack Connect channels. */
+  externalChannels: Schema_exports.Boolean,
+  /**
+   * "Land automatically" (docs/adr/0007-landing.md): a session started from Slack pushes its
+   * branch and opens its pull request when a turn completes. On unless an owner turned it off;
+   * a request's `autopr=` and the project's own `off` win over it.
+   */
+  landAutomatically: Schema_exports.Boolean.pipe(Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(true)))
+});
+var SlackProjectSource = Schema_exports.Literals([
+  "message",
+  "thread-session",
+  "thread-link",
+  "thread-inference",
+  "channel-default",
+  "personal-default",
+  "picked"
+]);
+var SlackSessionState = Schema_exports.Literals([
+  "starting",
+  "running",
+  "waiting",
+  "completed",
+  "failed",
+  "stopped"
+]);
+var SlackPendingFile = Schema_exports.Struct({
+  id: Schema_exports.String,
+  name: Schema_exports.NullOr(Schema_exports.String),
+  mimetype: Schema_exports.NullOr(Schema_exports.String),
+  urlPrivate: Schema_exports.NullOr(Schema_exports.String),
+  size: Schema_exports.NullOr(Schema_exports.Number)
+});
+var SlackPendingMention = Schema_exports.Struct({
+  channelId: Schema_exports.String,
+  /** The mention itself: the message Mend reacts to. */
+  messageTs: Schema_exports.String,
+  /** The thread it was written in; null when the mention is the thread's first message. */
+  threadTs: Schema_exports.NullOr(Schema_exports.String),
+  text: Schema_exports.String,
+  /**
+   * Whether the channel is a Slack Connect channel, as the event said. Absent on codes minted
+   * before Mend recorded it, which the reporter treats as external.
+   */
+  external: Schema_exports.optional(Schema_exports.Boolean),
+  /** The files on the mention itself. Absent on codes minted before Mend recorded them. */
+  files: Schema_exports.optional(Schema_exports.Array(SlackPendingFile))
+});
+var SlackLinkedMentionJob = Schema_exports.Struct({
+  organizationId: OrganizationId,
+  teamId: Schema_exports.String,
+  /** The mention's author in Slack. */
+  slackUserId: Schema_exports.String,
+  /** The Mend account they linked, the session's owner. */
+  userId: Schema_exports.String,
+  request: SlackPendingMention,
+  /** ISO time of the link, so the runner can leave a stale request alone. */
+  linkedAt: Schema_exports.String
+});
+
 // ../../packages/domain/src/workbench/tour.ts
 var TourStop = class extends Schema_exports.Class("TourStop")({
   title: Schema_exports.String,
@@ -27907,6 +28243,8 @@ var LAUNCH_ERROR = {
   fast: false,
   detach: false,
   foreground: false,
+  noTunnel: false,
+  autoLand: null,
   custom: []
 };
 var parseLaunchArgs = (args2) => {
@@ -27924,6 +28262,9 @@ var parseLaunchArgs = (args2) => {
   let fast = false;
   let detach = false;
   let foreground = false;
+  let noTunnel = false;
+  let land = false;
+  let noLand = false;
   for (let index2 = 0; index2 < flagArgs.length; index2 += 1) {
     const arg = flagArgs[index2] ?? "";
     if (arg === "--ask") {
@@ -27942,6 +28283,18 @@ var parseLaunchArgs = (args2) => {
       foreground = true;
       continue;
     }
+    if (arg === "--no-tunnel") {
+      noTunnel = true;
+      continue;
+    }
+    if (arg === "--land") {
+      land = true;
+      continue;
+    }
+    if (arg === "--no-land") {
+      noLand = true;
+      continue;
+    }
     if (arg === "--project" || arg === "--model" || arg === "--effort" || arg === "--base" || arg === "--name" || arg === "--worktree") {
       const value3 = flagArgs[index2 + 1];
       if (value3 === void 0) return { ...LAUNCH_ERROR, error: `${arg} needs a value` };
@@ -27974,6 +28327,9 @@ var parseLaunchArgs = (args2) => {
   if (detach && foreground) {
     return { ...LAUNCH_ERROR, error: "--detach and --foreground contradict \u2014 pick one" };
   }
+  if (land && noLand) {
+    return { ...LAUNCH_ERROR, error: "--land and --no-land contradict \u2014 pick one" };
+  }
   if (workName !== null && joinWorktree !== null) {
     return {
       ...LAUNCH_ERROR,
@@ -27992,6 +28348,8 @@ var parseLaunchArgs = (args2) => {
     fast,
     detach,
     foreground,
+    noTunnel,
+    autoLand: land ? true : noLand ? false : null,
     custom,
     error: null
   };
@@ -28022,6 +28380,11 @@ var agentOutcome = (currentAgent) => {
   if (currentAgent.harness === "shell") return "completed";
   return currentAgent.exitCode === null || currentAgent.exitCode === 0 ? "completed" : "failed";
 };
+var servicesHoldOf = (session, currentAgent, liveServices) => servicesHoldLine({
+  agentLive: agentIsLive(session, currentAgent),
+  agentOutcome: agentOutcome(currentAgent),
+  liveServices
+});
 var normalizeRemoteUrl = (raw) => {
   if (raw === null) return null;
   const trimmed = raw.trim();
@@ -28105,12 +28468,65 @@ var trackBracketedPaste = (output, current) => {
 };
 var pasteBytes = (text, bracketed) => Buffer.from(bracketed ? `\x1B[200~${text}\x1B[201~` : text, "utf8");
 
+// src/workbench-events.ts
+var createSseParser = () => {
+  let buffer = "";
+  return {
+    push: (chunk) => {
+      buffer += chunk;
+      const payloads = [];
+      for (; ; ) {
+        const boundary = buffer.indexOf("\n\n");
+        if (boundary === -1) break;
+        const frame = buffer.slice(0, boundary);
+        buffer = buffer.slice(boundary + 2);
+        const data = frame.split("\n").filter((line) => line.startsWith("data:")).map((line) => line.slice("data:".length).replace(/^ /, "")).join("\n");
+        if (data !== "") payloads.push(data);
+      }
+      return payloads;
+    }
+  };
+};
+var eventFamilies = (payload) => {
+  let parsed;
+  try {
+    parsed = JSON.parse(payload);
+  } catch {
+    return [];
+  }
+  if (typeof parsed !== "object" || parsed === null || !("type" in parsed)) return [];
+  switch (parsed.type) {
+    case "project":
+    case "worktree":
+    case "session-process":
+      return ["workbench"];
+    // Settlement refreshes the final transcript immediately. Conversation
+    // items can arrive many times per second; the live preview's bounded
+    // polling reads those instead of repeatedly fetching the whole record.
+    case "session":
+      return ["workbench", "review", "transcript"];
+    case "agent-conversation":
+      return ["workbench", "review"];
+    // A comment moves the review AND the dashboard's open-comment counts.
+    case "session-change":
+    case "review-comment":
+      return ["workbench", "review"];
+    default:
+      return [];
+  }
+};
+
 export {
+  repositoryCloneUrlIssue,
+  RepositoryCloneUrl,
+  landingFactsFromWire,
+  landingFactLine,
   narrowCredential,
   claudeGrantFacts,
   sameGrant,
-  repositoryCloneUrlIssue,
-  RepositoryCloneUrl,
+  normalizeGitAuthor,
+  gitAuthorIssue,
+  servicesHoldLine,
   HARNESS_COMMANDS,
   pendingId,
   isPendingId,
@@ -28120,6 +28536,8 @@ export {
   LIVE_STATUSES,
   agentIsLive,
   agentOutcome,
+  servicesHoldOf,
+  normalizeRemoteUrl,
   matchProjectByCwd,
   cwdFacts,
   gitCurrentBranch,
@@ -28128,5 +28546,7 @@ export {
   normalizeProjectName,
   isPasteChunk,
   trackBracketedPaste,
-  pasteBytes
+  pasteBytes,
+  createSseParser,
+  eventFamilies
 };