@sealant/mend 0.32.1 → 0.34.2

package/dist/{chunk-J3TR4UAG.js → chunk-JJ66V76Y.js}

@@ -26460,7 +26460,12 @@ var DEFAULT_WORKSPACE_PACKAGES = [
   "jq",
   "ripgrep",
   "fd",
-  "fzf"
+  "fzf",
+  "starship",
+  "zsh-autosuggestions",
+  "zsh-syntax-highlighting",
+  "zsh-history-substring-search",
+  "direnv"
 ];
 var workspaceImageServices = Schema_exports.Struct({
   docker: Schema_exports.Boolean.pipe(Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(true)))
@@ -26495,7 +26500,7 @@ var defaultWorkspaceImage = {
   mode: "family",
   os: "arch",
   packages: [...DEFAULT_WORKSPACE_PACKAGES],
-  shell: "bash",
+  shell: "zsh",
   services: { docker: true }
 };
 var workspaceImageWithDefault = WorkspaceImage.pipe(
@@ -26533,8 +26538,9 @@ var MendSettings = class extends Schema_exports.Class("MendSettings")({
   /**
    * Review automation defaults — the machine-side prep that runs when a
    * session settles, so review opens ready. Each switch is overridable per
-   * project (`inherit` follows these): the cascade is settings → project,
-   * resolved per session at settle.
+   * organization and per project: the cascade is instance → organization →
+   * project (`organizationDefaults`, then `resolveAutomation`), resolved per
+   * session at settle.
    */
   /** Compose the tour when a session settles — description and walkthrough ready before review opens. */
   autoTour: onByDefault,
@@ -26569,6 +26575,25 @@ var defaultSettings = new MendSettings({
   workspaceImage: defaultWorkspaceImage,
   backgroundSessions: true
 });
+var OrganizationSettings = class extends Schema_exports.Class(
+  "OrganizationSettings"
+)({
+  workspaceImage: Schema_exports.NullOr(WorkspaceImage),
+  autoTour: Schema_exports.NullOr(Schema_exports.Boolean),
+  autoSuggest: Schema_exports.NullOr(Schema_exports.Boolean),
+  autoName: Schema_exports.NullOr(Schema_exports.Boolean),
+  autoLand: Schema_exports.NullOr(Schema_exports.Boolean),
+  backgroundSessions: Schema_exports.NullOr(Schema_exports.Boolean)
+}) {
+};
+var inheritedOrganizationSettings = new OrganizationSettings({
+  workspaceImage: null,
+  autoTour: null,
+  autoSuggest: null,
+  autoName: null,
+  autoLand: null,
+  backgroundSessions: null
+});
 
 // ../../packages/domain/src/timestamp.ts
 var Timestamp = Schema_exports.Union([
@@ -26700,6 +26725,12 @@ var Project = class extends Schema_exports.Class("Project")({
    * "does this project want them applied".
    */
   applyDotfiles: Schema_exports.Boolean,
+  /**
+   * Whether a launch into a zsh workspace writes Mend's default shell profile (`~/.zshrc`,
+   * `~/.config/starship.toml`) where the owner's dotfiles left no file. Never overwrites. Older
+   * values decode to on, the column's default.
+   */
+  defaultShellProfile: Schema_exports.Boolean.pipe(Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(true))),
   /**
    * Whether sessions receive skills from the launching user's library. Project skills always
    * remain enabled and override inherited user skills with the same name. Older values decode to
@@ -26798,9 +26829,13 @@ var AuditAction = Schema_exports.Literals([
   "reference.removed",
   "session.shared_control_on",
   "session.shared_control_off",
+  // The owner ended a session's workspace with captures still pending: work was discarded.
+  "session.unsaved_discarded",
   "member.password_reset_issued",
   "organization.created",
   "organization.renamed",
+  // An owner changed the defaults every project in the organization inherits.
+  "organization.settings_changed",
   "recovery.owner_granted",
   "recovery.password_reset_issued",
   // docs/adr/0006-slack.md, "Audit".
@@ -26833,7 +26868,8 @@ var AuditEvent = class extends Schema_exports.Class("AuditEvent")({
   action: AuditAction,
   /**
    * What the action touched: `member`, `invitation`, `project`, `session`, `folder`, `reference`,
-   * `slack` (the organization's Slack app) or `change` (a landing).
+   * `organization` (its name or defaults), `slack` (the organization's Slack app) or `change` (a
+   * landing).
    */
   subjectType: Schema_exports.String,
   subjectId: Schema_exports.String,
@@ -26897,7 +26933,7 @@ var ChangeLanding = class extends Schema_exports.Class("ChangeLanding")({
   createdAt: Timestamp
 }) {
 };
-var RequestIntent = Schema_exports.Literals(["change", "question"]);
+var RequestIntent = Schema_exports.Literals(["change", "question", "land"]);
 var RequestIntentSource = Schema_exports.Literals(["read", "option", "unread"]);
 var RequestIntentReading = Schema_exports.Union([
   Schema_exports.Struct({ intent: RequestIntent, source: Schema_exports.Literals(["read", "option"]) }),
@@ -26905,12 +26941,23 @@ var RequestIntentReading = Schema_exports.Union([
 ]);
 var LANDING_GUARD = [
   "--- How this work is published ---",
-  "Mend publishes the changes this session makes: it pushes the branch and opens or updates the pull request.",
+  "Mend publishes this session's change, not you: after a turn that asked for a change, Mend pushes the branch and opens or updates the pull request.",
   "- If the request is a question, answer it and change no files.",
   "- Change code only when the request asks for a change.",
-  "- Never push and never open a pull request. Committing is fine.",
+  "- If the user asks you to land, push, publish or open a pull request, run `mend land` and report the lines it prints as they are. It lands as the change's owner, or says why it did not.",
+  "- Never push and never open a pull request yourself. Committing is fine.",
   "--- End of how this work is published ---"
 ].join("\n");
+var EARLIER_LANDING_GUARDS = [
+  [
+    "--- How this work is published ---",
+    "Mend publishes the changes this session makes: it pushes the branch and opens or updates the pull request.",
+    "- If the request is a question, answer it and change no files.",
+    "- Change code only when the request asks for a change.",
+    "- Never push and never open a pull request. Committing is fine.",
+    "--- End of how this work is published ---"
+  ].join("\n")
+];
 var NotLandedReason = Schema_exports.Literals([
   /** The request read as a question. */
   "question",
@@ -26919,7 +26966,17 @@ var NotLandedReason = Schema_exports.Literals([
   /** Automatic landing is off for the session. */
   "off",
   /** Someone other than the owner sent the turn under shared control. */
-  "not-owner"
+  "not-owner",
+  /** The request asked for a change or a landing, and the change is empty. */
+  "no-change",
+  /** The request asked for a change or a landing, and the last landing already pushed it all. */
+  "nothing-new",
+  /**
+   * The executor's captures never caught up with the turn (`capture.flush` refused, timed out
+   * or partial however often Mend asked), so the change Mend can read may be stale. Mend does not
+   * land it, and does not call it empty either.
+   */
+  "not-captured"
 ]);
 var TurnLanding = Schema_exports.Literals([
   "attempted",
@@ -26927,6 +26984,9 @@ var TurnLanding = Schema_exports.Literals([
   "option",
   "off",
   "not-owner",
+  "no-change",
+  "nothing-new",
+  "not-captured",
   "skipped"
 ]);
 var LandingFact = Schema_exports.Union([
@@ -26971,11 +27031,15 @@ var observedAgo = (at, now2) => {
   return `${Math.floor(seconds2 / 86400)} d ago`;
 };
 var NOT_LANDED = {
-  question: "the request read as a question",
-  option: "the request said autopr=false",
-  off: "automatic landing is off",
-  "not-owner": "the turn was not sent by the owner"
-};
+  question: "changes not landed \xB7 the request read as a question",
+  option: "changes not landed \xB7 the request said autopr=false",
+  off: "changes not landed \xB7 automatic landing is off",
+  "not-owner": "changes not landed \xB7 the turn was not sent by the owner",
+  "no-change": "not landed \xB7 the change is empty",
+  "nothing-new": "not landed \xB7 nothing new since the last landing",
+  "not-captured": "not landed \xB7 the change was not captured"
+};
+var notLandedLine = (reason) => NOT_LANDED[reason];
 var landingFactLine = (fact, now2) => {
   switch (fact._tag) {
     case "pushed":
@@ -26995,7 +27059,7 @@ var landingFactLine = (fact, now2) => {
     case "agent-push":
       return fact.sha === null ? `deleted by the agent \xB7 ${fact.ref}` : `pushed by the agent \xB7 ${fact.ref} \xB7 ${shortSha(fact.sha)}`;
     case "not-landed":
-      return `changes not landed \xB7 ${NOT_LANDED[fact.reason]}`;
+      return notLandedLine(fact.reason);
     case "intent-not-read":
       return "intent not read";
   }
@@ -27177,6 +27241,139 @@ var AgentEvent = Schema_exports.Union([
   Schema_exports.TaggedStruct("runtime.error", { message: Schema_exports.String })
 ]);
 
+// ../../packages/domain/src/workbench/capture-drain.ts
+var CaptureDrainReason = Schema_exports.Literals(["stop", "relaunch", "replacement"]);
+var FALLBACK_REPLACEMENT_AGE_SECONDS = 7 * 60 * 60 + 30 * 60;
+var CAPTURE_EXECUTOR_RETAINED = "retained";
+var CAPTURE_COMPLETION_UNREPORTED = "unreported";
+var captureDurationWords = (ms) => {
+  const seconds2 = Math.max(0, Math.floor(ms / 1e3));
+  if (seconds2 < 60) return `${seconds2} s`;
+  const minutes2 = Math.floor(seconds2 / 60);
+  if (minutes2 < 60) return `${minutes2} min`;
+  const rest = minutes2 % 60;
+  return `${Math.floor(minutes2 / 60)} h${rest === 0 ? "" : ` ${rest} min`}`;
+};
+var captureOverdueWords = (overdue) => [
+  "capture step overdue",
+  overdue.step.trim() === "" ? "a capture step" : clipped(overdue.step),
+  ...overdue.runningMs === null ? [] : [`running ${captureDurationWords(overdue.runningMs)}`],
+  ...overdue.boundMs === null ? [] : [`bound ${captureDurationWords(overdue.boundMs)}`]
+].join(" \xB7 ");
+var DETAIL_MAX = 200;
+var clipped = (text) => {
+  const flat = text.replace(/\s+/g, " ").trim();
+  return flat.length <= DETAIL_MAX ? flat : `${flat.slice(0, DETAIL_MAX - 1)}\u2026`;
+};
+var captureIncompleteWords = (reason) => {
+  switch (reason) {
+    case void 0:
+    case null:
+    case "pending":
+    case "in-progress":
+      return null;
+    case CAPTURE_COMPLETION_UNREPORTED:
+      return "final flush not reported";
+    case "not-final":
+      return "final flush not supported";
+    case "processes-remain":
+      return "processes remain";
+    case "sweep-unavailable":
+      return "process sweep unavailable";
+    case "snapshot-failed":
+      return "snapshot failed";
+    case "unreadable":
+      return "unreadable paths";
+    case "fenced":
+      return "fenced";
+    case "conflict":
+      return "conflict";
+    case "deadline":
+      return "deadline passed";
+    case "ship-failed":
+      return "upload failed";
+    case "sealing":
+      return "final seal not confirmed";
+    case "changed":
+      return "changed after the final flush";
+    case "unwatched":
+      return "a capture class is polled, currency not observed";
+    case "store-fidelity":
+      return "the store does not read every manifest feature this executor writes";
+    case "internal":
+      return "executor error";
+    case CAPTURE_EXECUTOR_RETAINED:
+      return "executor kept for recovery";
+    default:
+      return reason;
+  }
+};
+var UNITS = ["B", "KB", "MB", "GB", "TB"];
+var captureBytesWords = (bytes) => {
+  let value3 = Math.max(0, bytes);
+  let unit = 0;
+  while (value3 >= 1e3 && unit < UNITS.length - 1) {
+    value3 /= 1e3;
+    unit += 1;
+  }
+  const shown = unit === 0 || value3 >= 10 ? Math.round(value3).toString() : value3.toFixed(1);
+  return `${shown} ${UNITS[unit]}`;
+};
+var leftWords = (facts) => {
+  if (facts.capturePendingBytes !== null) return captureBytesWords(facts.capturePendingBytes);
+  if (facts.capturePending !== null) return `${facts.capturePending}`;
+  return null;
+};
+var utcTime = (at) => `${at.toISOString().slice(11, 19)} UTC`;
+var timeOf = (at) => {
+  if (at === null || at === void 0) return null;
+  const date2 = typeof at === "string" ? new Date(at) : at;
+  return Number.isNaN(date2.getTime()) ? null : date2;
+};
+var captureStatusLine = (facts) => {
+  const left = leftWords(facts);
+  const step = facts.captureOverdueStep ?? null;
+  const overdue = step === null ? null : captureOverdueWords({
+    step,
+    runningMs: facts.captureOverdueRunningMs ?? null,
+    boundMs: facts.captureOverdueBoundMs ?? null
+  });
+  if (facts.captureDrain !== null) {
+    if (facts.captureNotSavedAt !== null) {
+      const why = captureIncompleteWords(facts.captureIncompleteReason);
+      const detail = facts.captureIncompleteDetail ?? null;
+      return [
+        "not saved",
+        ...why === null ? [] : [why],
+        ...detail === null || detail === "" ? [] : [detail],
+        ...overdue === null ? [] : [overdue],
+        ...left === null ? [] : [`${left} pending`],
+        ...facts.captureIncompleteReason === CAPTURE_EXECUTOR_RETAINED ? [] : ["workspace kept"]
+      ].join(" \xB7 ");
+    }
+    return [
+      left === null ? "saving" : `saving \xB7 ${left} left`,
+      ...overdue === null ? [] : [overdue]
+    ].join(" \xB7 ");
+  }
+  if (overdue !== null) return overdue;
+  const failingSince = timeOf(facts.captureFailingSince);
+  if (failingSince !== null) {
+    const error = facts.captureFailingError ?? null;
+    return [
+      `capture failing since ${utcTime(failingSince)}`,
+      ...error === null || error === "" ? [] : [error]
+    ].join(" \xB7 ");
+  }
+  if ((facts.captureRefused ?? 0) > 0) return `not saved \xB7 ${facts.captureRefused} refused`;
+  const discardedAt = timeOf(facts.captureDiscardedAt);
+  if (discardedAt !== null) {
+    const by = facts.captureDiscardedBy ?? null;
+    return `unsaved work discarded${by === null || by === "" ? "" : ` by ${by}`} at ${utcTime(discardedAt)}`;
+  }
+  return null;
+};
+
 // ../../packages/domain/src/workbench/change.ts
 var Change = class extends Schema_exports.Class("WorkbenchChange")({
   id: ChangeId,
@@ -27451,6 +27648,7 @@ var SessionStatus = Schema_exports.Literals([
   "running",
   "waiting",
   "idle",
+  "stopping",
   "completed",
   "failed",
   "stopped"
@@ -27533,6 +27731,116 @@ var Session = class extends Schema_exports.Class("Session")({
    * boot sweep has not classified yet).
    */
   hasTranscript: Schema_exports.NullOr(Schema_exports.Boolean),
+  /**
+   * When Mend stopped the session's protocol agent for idleness (MEND_PROTOCOL_IDLE_STOP_MINUTES,
+   * `protocolIdleReading`), and the claim that stops it once across workers. Null again once the
+   * session reopens.
+   */
+  idleStoppedAt: Schema_exports.NullOr(Timestamp).pipe(Schema_exports.withConstructorDefault(Effect_exports.succeed(null))),
+  /**
+   * Capture mode (docs/adr/0002-session-capture-store.md, "Stop drains, then terminates"): what
+   * the session's executor last answered to a flush — captures staged and not yet registered
+   * (bulk included), the bytes left once sealantd reports them, captures its byte quota refused —
+   * when Mend asked, and the chain head's registration time as seen then. Null until asked.
+   */
+  capturePending: Schema_exports.NullOr(Schema_exports.Int).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  capturePendingBytes: Schema_exports.NullOr(Schema_exports.Number).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  captureRefused: Schema_exports.NullOr(Schema_exports.Int).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  captureRegisteredAt: Schema_exports.NullOr(Timestamp).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  captureObservedAt: Schema_exports.NullOr(Timestamp).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  /**
+   * A drain under way: why (a stop, a relaunch, a replacement before the platform's cap), since
+   * when, the last time anything moved, and when it stopped moving (`not saved · workspace kept`).
+   * The intent is durable: a Mend restart takes the drain up again. All null once the workspace
+   * is saved and terminated, or discarded by its owner.
+   */
+  captureDrain: Schema_exports.NullOr(CaptureDrainReason).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  captureDrainRequestedAt: Schema_exports.NullOr(Timestamp).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  captureDrainProgressAt: Schema_exports.NullOr(Timestamp).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  captureNotSavedAt: Schema_exports.NullOr(Timestamp).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  /**
+   * Why the executor's last final flush did not complete, in sealantd's words
+   * (`captureIncompleteReasonOf`): what `not saved · … · workspace kept` names. Null once one
+   * completed, and outside a drain.
+   */
+  captureIncompleteReason: Schema_exports.NullOr(Schema_exports.String).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  /**
+   * What sealantd named behind that reason (`captureSnapDetailOf`): the snap's error, the first
+   * path it could not read. Null when it named nothing, and outside a drain.
+   */
+  captureIncompleteDetail: Schema_exports.NullOr(Schema_exports.String).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  /**
+   * A running executor whose snaps are failing (`capture failing since … · <error>`): since when,
+   * as sealantd said or as Mend first observed it, and sealantd's last error. Both null once a
+   * reading shows its snaps succeed again.
+   */
+  captureFailingSince: Schema_exports.NullOr(Timestamp).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  captureFailingError: Schema_exports.NullOr(Schema_exports.String).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  /**
+   * A capture step the executor reported still running past its bound (sealantd `overdue`, e2e8):
+   * what it is, when it started, how long it had run and the bound it passed, as last observed.
+   * All null once a reading reports none, and once the executor is gone. Not a failure, and never
+   * idle or saved while it lasts.
+   */
+  captureOverdueStep: Schema_exports.NullOr(Schema_exports.String).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  captureOverdueSince: Schema_exports.NullOr(Timestamp).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  captureOverdueRunningMs: Schema_exports.NullOr(Schema_exports.Number).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  captureOverdueBoundMs: Schema_exports.NullOr(Schema_exports.Number).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  /**
+   * The owner's "discard unsaved and stop" ended this executor with work not saved: when, and
+   * who (their display name). Null until then, and again once the session runs again.
+   */
+  captureDiscardedAt: Schema_exports.NullOr(Timestamp).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  captureDiscardedBy: Schema_exports.NullOr(Schema_exports.String).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  /**
+   * When the session's current executor started — what the platform's cap counts from, not the
+   * latest run. Null before launch and for rows from before the column.
+   */
+  executorStartedAt: Schema_exports.NullOr(Timestamp).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  /** Removal asked while the workspace was still up: the row goes once the workspace has. */
+  removalRequestedAt: Schema_exports.NullOr(Timestamp).pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
   status: SessionStatus,
   /** What the harness reported at settle, when anything. */
   summary: Schema_exports.NullOr(Schema_exports.String),
@@ -27656,7 +27964,7 @@ var ProjectClusterBindingsSnapshot = class extends Schema_exports.Class(
 }) {
 };
 
-// ../../node_modules/.pnpm/@sealant+api-contracts@0.37.1_effect@4.0.0-beta.93/node_modules/@sealant/api-contracts/dist/workspace-environment.js
+// ../../node_modules/.pnpm/@sealant+api-contracts@0.38.0_effect@4.0.0-beta.93/node_modules/@sealant/api-contracts/dist/workspace-environment.js
 var RESERVED_NAMES = new Map([
   // Identity/process roots the daemon and shells own.
   ...[
@@ -27755,6 +28063,80 @@ var ProjectSecretsSnapshot = class extends Schema_exports.Class(
 }) {
 };
 
+// ../../packages/domain/src/workbench/session-process.ts
+var SessionProcessKind = Schema_exports.Literals([
+  "shell",
+  "agent-pty",
+  "agent-protocol",
+  "agent-external",
+  "service"
+]);
+var SessionProcessStatus = Schema_exports.Literals([
+  "starting",
+  "running",
+  "reachable",
+  "unreachable",
+  "exited",
+  "stopped"
+]);
+var ProtocolLaunchOptions = Schema_exports.Struct({
+  model: Schema_exports.NullOr(Schema_exports.String),
+  effort: Schema_exports.NullOr(Schema_exports.Literals(EFFORT_LEVELS)),
+  permissionMode: Schema_exports.Literals(PERMISSION_MODES)
+});
+var SessionProcess = class extends Schema_exports.Class("SessionProcess")({
+  id: SessionProcessId,
+  sessionId: SessionId,
+  /** The workspace incarnation this process ran in; processes never migrate. */
+  sealantWorkspaceId: SealantWorkspaceId,
+  /** The platform interactive-session id — the attach handle. Null for adopted Services (no process of ours). */
+  sealantSessionId: Schema_exports.NullOr(Schema_exports.String),
+  /** The run recording this process — its record outlives the process AND the workspace. */
+  sealantRunId: Schema_exports.NullOr(SealantRunId),
+  /** Server-owned launch intent used to reconcile retries after process acceptance. */
+  launchCorrelationId: Schema_exports.NullOr(Schema_exports.String),
+  /** Stable Service identity when this process is one Service attempt. */
+  serviceId: Schema_exports.NullOr(ServiceId),
+  /** Monotonic within one Service; null for non-Service and legacy projection rows. */
+  attemptOrdinal: Schema_exports.NullOr(Schema_exports.Int),
+  kind: SessionProcessKind,
+  /**
+   * Agent processes: the adapter that launched this process — `codex` · `claude` · `opencode` ·
+   * `shell` (an open-workbench launch inside an agent session). Null for shells and Services.
+   */
+  harness: Schema_exports.NullOr(Schema_exports.String),
+  /**
+   * Agent processes: the harness's OWN session id, harvested when the process ends (or known
+   * up front for a native resume). Resume addresses the latest agent process's id.
+   */
+  providerSessionId: Schema_exports.NullOr(Schema_exports.String),
+  /** agent-protocol rows: the persisted adapter options; null for every other kind and legacy rows. */
+  protocolOptions: Schema_exports.NullOr(ProtocolLaunchOptions),
+  /** Human name for pickers and lists ("claude", "shell", "web"). */
+  label: Schema_exports.NullOr(Schema_exports.String),
+  argv: Schema_exports.Array(Schema_exports.String),
+  status: SessionProcessStatus,
+  /** Observed exit code, when the platform reported one. */
+  exitCode: Schema_exports.NullOr(Schema_exports.Int),
+  /** Services: the port the process listens on INSIDE the workspace. */
+  workspacePort: Schema_exports.NullOr(Schema_exports.Int),
+  /** Services: declared transport. UDP relays datagrams; there is no probe. */
+  protocol: Schema_exports.Literals(["tcp", "udp"]),
+  /** Services: the host port Mend binds on its private interfaces. */
+  hostPort: Schema_exports.NullOr(Schema_exports.Int),
+  createdAt: Timestamp,
+  exitedAt: Schema_exports.NullOr(Timestamp),
+  updatedAt: Timestamp
+}) {
+};
+
+// ../../packages/domain/src/workbench/session-fold.ts
+var servicesHoldLine = (input) => {
+  if (input.agentLive || input.liveServices <= 0) return null;
+  const hold = input.liveServices === 1 ? "1 service keeps the workspace up" : `${input.liveServices} services keep the workspace up`;
+  return input.agentOutcome === null ? hold : `agent ${input.agentOutcome} \xB7 ${hold}`;
+};
+
 // ../../packages/domain/src/workbench/review-comment.ts
 var CommentAuthor = Schema_exports.Literals(["reviewer", "mend"]);
 var CommentState = Schema_exports.Literals(["draft", "open", "addressed", "dismissed"]);
@@ -27831,73 +28213,6 @@ var ServiceRecipe = class extends Schema_exports.Class("ServiceRecipe")({
 }) {
 };
 
-// ../../packages/domain/src/workbench/session-process.ts
-var SessionProcessKind = Schema_exports.Literals([
-  "shell",
-  "agent-pty",
-  "agent-protocol",
-  "agent-external",
-  "service"
-]);
-var SessionProcessStatus = Schema_exports.Literals([
-  "starting",
-  "running",
-  "reachable",
-  "unreachable",
-  "exited",
-  "stopped"
-]);
-var ProtocolLaunchOptions = Schema_exports.Struct({
-  model: Schema_exports.NullOr(Schema_exports.String),
-  effort: Schema_exports.NullOr(Schema_exports.Literals(EFFORT_LEVELS)),
-  permissionMode: Schema_exports.Literals(PERMISSION_MODES)
-});
-var SessionProcess = class extends Schema_exports.Class("SessionProcess")({
-  id: SessionProcessId,
-  sessionId: SessionId,
-  /** The workspace incarnation this process ran in; processes never migrate. */
-  sealantWorkspaceId: SealantWorkspaceId,
-  /** The platform interactive-session id — the attach handle. Null for adopted Services (no process of ours). */
-  sealantSessionId: Schema_exports.NullOr(Schema_exports.String),
-  /** The run recording this process — its record outlives the process AND the workspace. */
-  sealantRunId: Schema_exports.NullOr(SealantRunId),
-  /** Server-owned launch intent used to reconcile retries after process acceptance. */
-  launchCorrelationId: Schema_exports.NullOr(Schema_exports.String),
-  /** Stable Service identity when this process is one Service attempt. */
-  serviceId: Schema_exports.NullOr(ServiceId),
-  /** Monotonic within one Service; null for non-Service and legacy projection rows. */
-  attemptOrdinal: Schema_exports.NullOr(Schema_exports.Int),
-  kind: SessionProcessKind,
-  /**
-   * Agent processes: the adapter that launched this process — `codex` · `claude` · `opencode` ·
-   * `shell` (an open-workbench launch inside an agent session). Null for shells and Services.
-   */
-  harness: Schema_exports.NullOr(Schema_exports.String),
-  /**
-   * Agent processes: the harness's OWN session id, harvested when the process ends (or known
-   * up front for a native resume). Resume addresses the latest agent process's id.
-   */
-  providerSessionId: Schema_exports.NullOr(Schema_exports.String),
-  /** agent-protocol rows: the persisted adapter options; null for every other kind and legacy rows. */
-  protocolOptions: Schema_exports.NullOr(ProtocolLaunchOptions),
-  /** Human name for pickers and lists ("claude", "shell", "web"). */
-  label: Schema_exports.NullOr(Schema_exports.String),
-  argv: Schema_exports.Array(Schema_exports.String),
-  status: SessionProcessStatus,
-  /** Observed exit code, when the platform reported one. */
-  exitCode: Schema_exports.NullOr(Schema_exports.Int),
-  /** Services: the port the process listens on INSIDE the workspace. */
-  workspacePort: Schema_exports.NullOr(Schema_exports.Int),
-  /** Services: declared transport. UDP relays datagrams; there is no probe. */
-  protocol: Schema_exports.Literals(["tcp", "udp"]),
-  /** Services: the host port Mend binds on its private interfaces. */
-  hostPort: Schema_exports.NullOr(Schema_exports.Int),
-  createdAt: Timestamp,
-  exitedAt: Schema_exports.NullOr(Timestamp),
-  updatedAt: Timestamp
-}) {
-};
-
 // ../../packages/domain/src/workbench/service.ts
 var ServiceDeclarationSource = Schema_exports.Literals([
   "explicit-run",
@@ -27991,13 +28306,6 @@ var ServiceView = class extends Schema_exports.Class("ServiceView")({
 }) {
 };
 
-// ../../packages/domain/src/workbench/session-fold.ts
-var servicesHoldLine = (input) => {
-  if (input.agentLive || input.liveServices <= 0) return null;
-  const hold = input.liveServices === 1 ? "1 service keeps the workspace up" : `${input.liveServices} services keep the workspace up`;
-  return input.agentOutcome === null ? hold : `agent ${input.agentOutcome} \xB7 ${hold}`;
-};
-
 // ../../packages/domain/src/workbench/session-control.ts
 var SessionControlKind = Schema_exports.Literals([
   "interrupt",
@@ -28005,8 +28313,10 @@ var SessionControlKind = Schema_exports.Literals([
   "shell-open",
   "stop",
   "services-stop",
+  "idle-stop",
   "shared-control-on",
-  "shared-control-off"
+  "shared-control-off",
+  "discard-unsaved-stop"
 ]);
 var SessionControlEvent = class extends Schema_exports.Class("SessionControlEvent")({
   id: SessionControlEventId,
@@ -28125,7 +28435,8 @@ var SlackSessionState = Schema_exports.Literals([
   "waiting",
   "completed",
   "failed",
-  "stopped"
+  "stopped",
+  "idle-stopped"
 ]);
 var SlackPendingFile = Schema_exports.Struct({
   id: Schema_exports.String,
@@ -28385,6 +28696,26 @@ var servicesHoldOf = (session, currentAgent, liveServices) => servicesHoldLine({
   agentOutcome: agentOutcome(currentAgent),
   liveServices
 });
+var captureLineOf = (session) => {
+  const drain = session.captureDrain;
+  return captureStatusLine({
+    capturePending: session.capturePending ?? null,
+    capturePendingBytes: session.capturePendingBytes ?? null,
+    captureRefused: session.captureRefused ?? null,
+    captureDrain: drain === "stop" || drain === "relaunch" || drain === "replacement" ? drain : null,
+    captureNotSavedAt: session.captureNotSavedAt ?? null,
+    captureIncompleteReason: session.captureIncompleteReason ?? null,
+    captureIncompleteDetail: session.captureIncompleteDetail ?? null,
+    captureFailingSince: session.captureFailingSince ?? null,
+    captureFailingError: session.captureFailingError ?? null,
+    captureOverdueStep: session.captureOverdueStep ?? null,
+    captureOverdueSince: session.captureOverdueSince ?? null,
+    captureOverdueRunningMs: session.captureOverdueRunningMs ?? null,
+    captureOverdueBoundMs: session.captureOverdueBoundMs ?? null,
+    captureDiscardedAt: session.captureDiscardedAt ?? null,
+    captureDiscardedBy: session.captureDiscardedBy ?? null
+  });
+};
 var normalizeRemoteUrl = (raw) => {
   if (raw === null) return null;
   const trimmed = raw.trim();
@@ -28537,6 +28868,7 @@ export {
   agentIsLive,
   agentOutcome,
   servicesHoldOf,
+  captureLineOf,
   normalizeRemoteUrl,
   matchProjectByCwd,
   cwdFacts,