@sealant/mend 0.35.1 → 0.36.0-next.602

package/dist/{chunk-SMH65F6Z.js → chunk-5MPE4D2O.js}

@@ -5,7 +5,7 @@ var __export = (target, all3) => {
 };
 
 // ../../packages/domain/src/workbench/harness-launch.ts
-var EFFORT_LEVELS = ["low", "medium", "high", "xhigh", "max"];
+var EFFORT_LEVELS = ["low", "medium", "high", "xhigh", "max", "ultra"];
 var PERMISSION_MODES = ["bypass", "ask"];
 
 // ../../packages/domain/src/workbench/agent-start.ts
@@ -26442,6 +26442,7 @@ var FollowUpId = Schema_exports.String.pipe(Schema_exports.brand("FollowUpId"));
 var ReferenceId = Schema_exports.String.pipe(Schema_exports.brand("ReferenceId"));
 var ProjectMountId = Schema_exports.String.pipe(Schema_exports.brand("ProjectMountId"));
 var ProjectLinkId = Schema_exports.String.pipe(Schema_exports.brand("ProjectLinkId"));
+var SessionRepositoryId = Schema_exports.String.pipe(Schema_exports.brand("SessionRepositoryId"));
 var SkillId = Schema_exports.String.pipe(Schema_exports.brand("SkillId"));
 var SessionProcessId = Schema_exports.String.pipe(Schema_exports.brand("SessionProcessId"));
 var AgentTurnId = Schema_exports.String.pipe(Schema_exports.brand("AgentTurnId"));
@@ -26456,6 +26457,7 @@ var ProjectEnvironmentVariableId = Schema_exports.String.pipe(
 );
 var ProjectSecretId = Schema_exports.String.pipe(Schema_exports.brand("ProjectSecretId"));
 var ProjectClusterBindingId = Schema_exports.String.pipe(Schema_exports.brand("ProjectClusterBindingId"));
+var SecretFileId = Schema_exports.String.pipe(Schema_exports.brand("SecretFileId"));
 var OrganizationId = Schema_exports.String.pipe(Schema_exports.brand("OrganizationId"));
 var InvitationId = Schema_exports.String.pipe(Schema_exports.brand("InvitationId"));
 var FolderId = Schema_exports.String.pipe(Schema_exports.brand("FolderId"));
@@ -26771,11 +26773,135 @@ var Project = class extends Schema_exports.Class("Project")({
   installCommand: Schema_exports.NullOr(Schema_exports.String).pipe(
     Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(null))
   ),
+  /**
+   * "Automatic install": whether Mend runs the install command above (or the detected one) at
+   * all. Off, neither a session's launch nor the install job runs one; restoring a dependency
+   * tree from saved state or the shared cache is unaffected. Older values decode to on.
+   */
+  installEnabled: Schema_exports.Boolean.pipe(Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(true))),
   createdAt: Timestamp,
   updatedAt: Timestamp
 }) {
 };
 
+// ../../packages/domain/src/workbench/agent-memory.ts
+var AGENT_MEMORY_ROOTS = [
+  { harness: "claude", root: ".claude/projects/-workspace-repo/memory" },
+  { harness: "codex", root: ".codex/memories" },
+  // Mend's own: the first line of each conversation Codex summarised on another machine
+  // (`mend memory import`), so a session can list that conversation for Codex again.
+  { harness: "codex", root: ".mend/codex-threads" }
+];
+var AGENT_MEMORY_FILES = [{ harness: "codex", path: ".codex/memories_1.sqlite" }];
+var CODEX_MEMORY_DATABASE = ".codex/memories_1.sqlite";
+var AGENT_MEMORY_MAX_FILE_BYTES = 1024 * 1024;
+var AGENT_MEMORY_MAX_DATABASE_BYTES = 16 * 1024 * 1024;
+var AGENT_MEMORY_MAX_BYTES = 32 * 1024 * 1024;
+var AgentMemoryFile = class extends Schema_exports.Class("AgentMemoryFile")({
+  path: Schema_exports.String,
+  encoding: Schema_exports.Literals(["utf8", "base64"]),
+  contents: Schema_exports.String
+}) {
+};
+var AgentMemoryEntry = class extends Schema_exports.Class("AgentMemoryEntry")({
+  path: Schema_exports.String,
+  /** Which harness keeps it. */
+  harness: Schema_exports.String,
+  /** Its path under that harness's memory root: what a person calls it. */
+  name: Schema_exports.String,
+  bytes: Schema_exports.Int,
+  digest: Schema_exports.String,
+  updatedAt: Timestamp,
+  /** The session whose agent last wrote it, or null for an import. */
+  updatedBySession: Schema_exports.NullOr(Schema_exports.String)
+}) {
+};
+var AgentMemoryView = class extends Schema_exports.Class("AgentMemoryView")({
+  files: Schema_exports.Array(AgentMemoryEntry)
+}) {
+};
+var AgentMemoryFileView = class extends Schema_exports.Class("AgentMemoryFileView")({
+  entry: AgentMemoryEntry,
+  encoding: Schema_exports.Literals(["utf8", "base64"]),
+  contents: Schema_exports.String
+}) {
+};
+var AgentMemoryImportSource = class extends Schema_exports.Class(
+  "AgentMemoryImportSource"
+)({
+  /** Stable for that checkout on that machine: the CLI's machine id and the checkout's path. */
+  id: Schema_exports.String.check(Schema_exports.isMinLength(1), Schema_exports.isMaxLength(1024)),
+  /** What a merge calls the machine where it has to say so: its host name. */
+  label: Schema_exports.String.check(Schema_exports.isMinLength(1), Schema_exports.isMaxLength(64))
+}) {
+};
+var AgentMemoryImport = class extends Schema_exports.Class("AgentMemoryImport")({
+  files: Schema_exports.Array(AgentMemoryFile),
+  /** Absent from an older CLI: nothing is recorded then, and no merge has a shared version. */
+  source: Schema_exports.optional(AgentMemoryImportSource)
+}) {
+};
+var AgentMemoryImportMerge = class extends Schema_exports.Class(
+  "AgentMemoryImportMerge"
+)({
+  path: Schema_exports.String,
+  /**
+   * - `last-import`: text, three-way against what this machine sent the last time;
+   * - `no-shared-version`: text, both sides' lines with no version to diff against;
+   * - `summaries`: Codex's summary database, each conversation's newer summary from either.
+   */
+  against: Schema_exports.Literals(["last-import", "no-shared-version", "summaries"]),
+  /**
+   * How many of this machine's lines the result does not hold (a line Mend removed since the last
+   * import is not counted). When any, this machine's file is kept whole as a version, and the next
+   * import from there merges it again.
+   */
+  missingLines: Schema_exports.Int,
+  /**
+   * How many of Mend's lines the result does not hold (a line this machine removed since its last
+   * import is not counted). Mend's file is always kept as a version, pinned when it is the only
+   * copy of a line.
+   */
+  storeMissingLines: Schema_exports.Int
+}) {
+};
+var AgentMemoryImported = class extends Schema_exports.Class("AgentMemoryImported")({
+  /** Not in Mend: stored as this machine has it. */
+  added: Schema_exports.Array(Schema_exports.String),
+  /** The same on both sides. */
+  unchanged: Schema_exports.Array(Schema_exports.String),
+  /** Unchanged in Mend since this machine's last import: replaced by this machine's. */
+  updated: Schema_exports.Array(Schema_exports.String),
+  /** Changed on both sides: merged, keeping both sides' lines. */
+  merged: Schema_exports.Array(AgentMemoryImportMerge),
+  /** Unchanged on this machine since its last import and changed in Mend: Mend's stays. */
+  keptStored: Schema_exports.Array(Schema_exports.String),
+  /** Removed in Mend since this machine's last import, unchanged here: not added again. */
+  removedInMend: Schema_exports.Array(Schema_exports.String),
+  /**
+   * Changed on both sides and not mergeable: not text, frontmatter that differs outside the subset
+   * merged by key, too different to align with no earlier import, or merged over the size limit.
+   * Mend's stays, this machine's is kept as a version, and the next import reports it again.
+   */
+  conflicting: Schema_exports.Array(Schema_exports.String),
+  /** Outside the limits (path, size or count): not stored. */
+  skipped: Schema_exports.Array(Schema_exports.String)
+}) {
+};
+var AgentMemoryRemoved = class extends Schema_exports.Class("AgentMemoryRemoved")({
+  removed: Schema_exports.Boolean
+}) {
+};
+var agentMemoryNameOf = (filePath) => {
+  for (const { harness, root } of AGENT_MEMORY_ROOTS) {
+    if (filePath.startsWith(`${root}/`)) return { harness, name: filePath.slice(root.length + 1) };
+  }
+  for (const { harness, path: file } of AGENT_MEMORY_FILES) {
+    if (filePath === file) return { harness, name: file.slice(file.lastIndexOf("/") + 1) };
+  }
+  return null;
+};
+
 // ../../packages/domain/src/workbench/connected-credential.ts
 var CLAUDE_GRANT_SECTION = "claudeAiOauth";
 var narrowCredential = (provider, secret) => {
@@ -26834,6 +26960,155 @@ var sameGrant = (left, right) => {
   return a !== null && b !== null && a === b;
 };
 
+// ../../packages/domain/src/workbench/launch-phase.ts
+var LAUNCH_WAITING_PREFIX = "waiting \xB7 the previous session in this worktree";
+var LAUNCH_WAITING_SAVING = `${LAUNCH_WAITING_PREFIX} is saving`;
+var LAUNCH_BOOTING = "booting";
+var LAUNCH_PREPARING = "preparing the workspace \xB7 no runtime yet \xB7 after an update, building the image takes about 8 minutes";
+var LAUNCH_BUILDING_IMAGE_LEGACY = "building the workspace image (first launch after an update, ~8 min)";
+var LAUNCH_PHASE_PREFIXES = [
+  LAUNCH_WAITING_PREFIX,
+  LAUNCH_BOOTING,
+  LAUNCH_PREPARING,
+  LAUNCH_BUILDING_IMAGE_LEGACY
+];
+var phaseWordsOf = (summary) => {
+  for (const prefix of LAUNCH_PHASE_PREFIXES) {
+    if (summary.startsWith(prefix)) return { at: 0, words: summary };
+    const at = summary.indexOf(` \xB7 ${prefix}`);
+    if (at >= 0) return { at, words: summary.slice(at + 3) };
+  }
+  return null;
+};
+var withoutLaunchPhase = (summary) => {
+  if (summary === null) return null;
+  const phase = phaseWordsOf(summary);
+  if (phase === null) return summary;
+  return phase.at === 0 ? null : summary.slice(0, phase.at);
+};
+var launchPhaseOf = (summary) => {
+  if (summary === null) return null;
+  const phase = phaseWordsOf(summary);
+  if (phase === null) return null;
+  if (phase.words.startsWith(LAUNCH_WAITING_PREFIX)) {
+    return { kind: "waiting-previous", words: phase.words };
+  }
+  if (phase.words.startsWith(LAUNCH_BOOTING)) return { kind: "booting", words: phase.words };
+  return { kind: "preparing", words: phase.words };
+};
+
+// ../../packages/domain/src/workbench/pi-profile.ts
+var PI_PROFILE_AGENT_PATH = "mend/profile";
+var PI_PROFILE_LOCAL_PACKAGES = "packages";
+var PI_PROFILE_DIRECTORIES = ["extensions", "themes", "prompts", "packages"];
+var PI_PROFILE_FILES = [
+  "settings.json",
+  "package.json",
+  "package-lock.json",
+  "root/mcp.json",
+  "root/keybindings.json"
+];
+var PI_PROFILE_MAX_FILES = 4e3;
+var PI_PROFILE_MAX_FILE_BYTES = 8 * 1024 * 1024;
+var PI_PROFILE_MAX_BYTES = 16 * 1024 * 1024;
+var PI_PROFILE_MAX_PATH_LENGTH = 512;
+var PiProfileFile = class extends Schema_exports.Class("PiProfileFile")({
+  /** Profile-relative POSIX path; validated by `validatePiProfileFilePath`. */
+  path: Schema_exports.String,
+  encoding: Schema_exports.Literals(["utf8", "base64"]),
+  contents: Schema_exports.String
+}) {
+};
+var PiProfile = class extends Schema_exports.Class("PiProfile")({
+  fileCount: Schema_exports.Int,
+  bytes: Schema_exports.Int,
+  /** The profile's top-level extensions: each file or directory under `extensions/`. */
+  extensions: Schema_exports.Array(Schema_exports.String),
+  /** The packages its `settings.json` declares, each as its source. */
+  packages: Schema_exports.Array(Schema_exports.String),
+  /** Changes whenever the files do: the tree digest a session compares against. */
+  digest: Schema_exports.String,
+  revision: Schema_exports.Int,
+  updatedAt: Timestamp
+}) {
+};
+var PiProfileView = class extends Schema_exports.Class("PiProfileView")({
+  profile: Schema_exports.NullOr(PiProfile)
+}) {
+};
+var PiProfileUpload = class extends Schema_exports.Class("PiProfileUpload")({
+  files: Schema_exports.Array(PiProfileFile)
+}) {
+};
+var PiProfileSaved = class extends Schema_exports.Class("PiProfileSaved")({
+  profile: PiProfile,
+  changed: Schema_exports.Boolean
+}) {
+};
+var PiProfileRemoved = class extends Schema_exports.Class("PiProfileRemoved")({
+  removed: Schema_exports.Boolean
+}) {
+};
+var piProfileFileBytes = (file) => {
+  if (file.encoding === "utf8") return new TextEncoder().encode(file.contents);
+  if (!/^[A-Za-z0-9+/]*={0,2}$/.test(file.contents) || file.contents.length % 4 !== 0) return null;
+  try {
+    return Uint8Array.from(atob(file.contents), (char) => char.charCodeAt(0));
+  } catch {
+    return null;
+  }
+};
+var validatePiProfileFilePath = (filePath) => {
+  if (filePath.length === 0) return "a file path is required";
+  if (filePath.length > PI_PROFILE_MAX_PATH_LENGTH) {
+    return `${filePath} is longer than ${PI_PROFILE_MAX_PATH_LENGTH} characters`;
+  }
+  if (filePath.startsWith("/") || filePath.includes("\\") || filePath.includes("\0")) {
+    return `${filePath} is not a relative POSIX path`;
+  }
+  const segments = filePath.split("/");
+  if (segments.some((segment) => segment === "" || segment === "." || segment === "..")) {
+    return `${filePath} must not contain empty, "." or ".." segments`;
+  }
+  if (PI_PROFILE_FILES.some((file) => file === filePath)) return null;
+  const top = segments[0] ?? "";
+  if (segments.length > 1 && PI_PROFILE_DIRECTORIES.some((directory) => directory === top)) {
+    return null;
+  }
+  return `${filePath} is not part of a pi profile`;
+};
+var validatePiProfile = (files) => {
+  if (files.length === 0) return "a pi profile needs at least one file";
+  if (files.length > PI_PROFILE_MAX_FILES) {
+    return `a pi profile is capped at ${PI_PROFILE_MAX_FILES} files`;
+  }
+  const seen = /* @__PURE__ */ new Set();
+  let total = 0;
+  for (const file of files) {
+    const pathIssue = validatePiProfileFilePath(file.path);
+    if (pathIssue !== null) return pathIssue;
+    if (seen.has(file.path)) return `${file.path} appears twice`;
+    seen.add(file.path);
+    const bytes = piProfileFileBytes(file);
+    if (bytes === null) return `${file.path} is not valid base64`;
+    if (bytes.byteLength > PI_PROFILE_MAX_FILE_BYTES) {
+      return `${file.path} is over ${PI_PROFILE_MAX_FILE_BYTES / (1024 * 1024)} MB`;
+    }
+    total += bytes.byteLength;
+  }
+  for (const filePath of seen) {
+    const segments = filePath.split("/");
+    for (let depth = 1; depth < segments.length; depth += 1) {
+      const parent = segments.slice(0, depth).join("/");
+      if (seen.has(parent)) return `${parent} is both a file and a directory`;
+    }
+  }
+  if (total > PI_PROFILE_MAX_BYTES) {
+    return `a pi profile is capped at ${PI_PROFILE_MAX_BYTES / (1024 * 1024)} MB in total`;
+  }
+  return null;
+};
+
 // ../../packages/domain/src/workbench/audit.ts
 var AuditAction = Schema_exports.Literals([
   "invitation.created",
@@ -26912,8 +27187,14 @@ var LandedPullRequest = Schema_exports.Struct({
   number: Schema_exports.Int,
   url: Schema_exports.String,
   state: PullRequestState,
+  /** Its title as `gh` last reported it; null when recorded before Mend kept it. */
+  title: Schema_exports.NullOr(Schema_exports.String).pipe(Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(null))),
   observedAt: Timestamp
 });
+var ChangePullRequest = Schema_exports.Struct({
+  ...LandedPullRequest.fields,
+  adopted: Schema_exports.Boolean
+});
 var ChangeLanding = class extends Schema_exports.Class("ChangeLanding")({
   id: ChangeLandingId,
   changeId: ChangeId,
@@ -27102,6 +27383,7 @@ var AgentTurnUsage = Schema_exports.Struct({
   totalTokens: Schema_exports.NullOr(Schema_exports.Int),
   contextWindow: Schema_exports.NullOr(Schema_exports.Int)
 });
+var AgentTurnOrigin = Schema_exports.Literals(["request", "harness"]);
 var AgentTurn = class extends Schema_exports.Class("AgentTurn")({
   id: AgentTurnId,
   sessionId: SessionId,
@@ -27110,6 +27392,10 @@ var AgentTurn = class extends Schema_exports.Class("AgentTurn")({
   ordinal: Schema_exports.Int,
   /** Mend user id, or null for a system-authored follow-up. */
   author: Schema_exports.NullOr(Schema_exports.String),
+  /** What opened the turn. A `harness` turn's input is what the agent was answering. */
+  origin: AgentTurnOrigin.pipe(
+    Schema_exports.withConstructorDefault(Effect_exports.succeed("request"))
+  ),
   input: Schema_exports.String,
   status: AgentTurnStatus,
   providerTurnId: Schema_exports.NullOr(Schema_exports.String),
@@ -27132,6 +27418,24 @@ var AgentTurn = class extends Schema_exports.Class("AgentTurn")({
   landingId: Schema_exports.NullOr(ChangeLandingId).pipe(
     Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
   ),
+  /**
+   * Whose login the turn ran on (`TurnPayer`), recorded when Mend sent it or the harness opened
+   * it. Null on a turn never sent, one recorded before payers were, and where Mend cannot say.
+   */
+  billedUserId: Schema_exports.NullOr(Schema_exports.String).pipe(
+    Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(null)),
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  /** The connected account's id as Core reported it; null until Core reports one. */
+  billedAccountId: Schema_exports.NullOr(Schema_exports.String).pipe(
+    Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(null)),
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  /** The connected account's name when the turn ran (`default`, `work`). */
+  billedAccountName: Schema_exports.NullOr(Schema_exports.String).pipe(
+    Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(null)),
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
   createdAt: Timestamp,
   startedAt: Schema_exports.NullOr(Timestamp),
   endedAt: Schema_exports.NullOr(Timestamp)
@@ -27146,6 +27450,8 @@ var AgentItemKind = Schema_exports.Literals([
   "file-change",
   "tool-call",
   "web-search",
+  /** A background task the agent started: a workflow, a background agent or command. */
+  "task",
   "error",
   "other"
 ]);
@@ -27218,6 +27524,43 @@ var AgentRequest = class extends Schema_exports.Class("AgentRequest")({
   decidedAt: Schema_exports.NullOr(Timestamp)
 }) {
 };
+var AgentTaskStatus = Schema_exports.Literals([
+  "running",
+  "completed",
+  "failed",
+  "stopped",
+  "paused"
+]);
+var AgentTaskAgent = Schema_exports.Struct({
+  index: Schema_exports.Int,
+  label: Schema_exports.String,
+  phaseIndex: Schema_exports.NullOr(Schema_exports.Int),
+  state: Schema_exports.String,
+  model: Schema_exports.NullOr(Schema_exports.String),
+  tokens: Schema_exports.NullOr(Schema_exports.Int),
+  toolCalls: Schema_exports.NullOr(Schema_exports.Int),
+  durationMs: Schema_exports.NullOr(Schema_exports.Int),
+  lastTool: Schema_exports.NullOr(Schema_exports.String),
+  /** The start of the agent's result, or of its error. */
+  preview: Schema_exports.NullOr(Schema_exports.String)
+});
+var AgentTaskData = Schema_exports.Struct({
+  taskId: Schema_exports.String,
+  /** The harness's task type: `local_workflow`, `local_agent`, `local_bash`, … */
+  taskType: Schema_exports.String,
+  /** The workflow's name, when the task is one. */
+  workflow: Schema_exports.NullOr(Schema_exports.String),
+  description: Schema_exports.String,
+  status: AgentTaskStatus,
+  /** The harness's closing line, once the task ended. */
+  summary: Schema_exports.NullOr(Schema_exports.String),
+  error: Schema_exports.NullOr(Schema_exports.String),
+  phases: Schema_exports.Array(Schema_exports.Struct({ index: Schema_exports.Int, title: Schema_exports.String })),
+  agents: Schema_exports.Array(AgentTaskAgent),
+  totalTokens: Schema_exports.NullOr(Schema_exports.Int),
+  toolUses: Schema_exports.NullOr(Schema_exports.Int),
+  durationMs: Schema_exports.NullOr(Schema_exports.Int)
+});
 var AgentEventItem = Schema_exports.Struct({
   providerItemId: Schema_exports.String,
   providerTurnId: Schema_exports.String,
@@ -27243,6 +27586,11 @@ var AgentEvent = Schema_exports.Union([
   Schema_exports.TaggedStruct("turn.started", {
     providerTurnId: Schema_exports.String
   }),
+  /** The agent started a turn nobody sent; `reason` is what it is answering, when known. */
+  Schema_exports.TaggedStruct("harness-turn.started", {
+    providerTurnId: Schema_exports.String,
+    reason: Schema_exports.String
+  }),
   Schema_exports.TaggedStruct("turn.completed", {
     providerTurnId: Schema_exports.String,
     status: Schema_exports.Literals(["completed", "interrupted", "failed", "cancelled"]),
@@ -27371,8 +27719,9 @@ var captureStatusLine = (facts) => {
         ...facts.captureIncompleteReason === CAPTURE_EXECUTOR_RETAINED ? [] : ["workspace kept"]
       ].join(" \xB7 ");
     }
+    const noneQueued = facts.capturePendingBytes === 0 || facts.capturePendingBytes === null && facts.capturePending === 0;
     return [
-      left === null ? "saving" : `saving \xB7 ${left} left`,
+      noneQueued ? "saving \xB7 no uploads pending" : left === null ? "saving" : `saving \xB7 ${left} left`,
       ...overdue === null ? [] : [overdue]
     ].join(" \xB7 ");
   }
@@ -27682,6 +28031,21 @@ var Session = class extends Schema_exports.Class("Session")({
   worktreeId: WorktreeId,
   /** The adapter that launched it: `codex` · `claude` · `opencode` · `custom`. */
   harness: Schema_exports.String,
+  /**
+   * The model the session was started with, as the server resolved it (docs/models-audit.md): the
+   * one the request named, else the harness's catalog default. Null for a harness with no catalog,
+   * before launch, and on rows from before the column. A resume keeps it: the harness continues
+   * the conversation on its own model.
+   */
+  model: Schema_exports.NullOr(Schema_exports.String).pipe(
+    Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(null)),
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
+  /** The effort the session was started with; null is the harness's own default. */
+  effort: Schema_exports.NullOr(Schema_exports.Literals(EFFORT_LEVELS)).pipe(
+    Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(null)),
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
   /** Provider-native session/thread id when the adapter can extract one. */
   providerSessionId: Schema_exports.NullOr(Schema_exports.String),
   /** Optional human label ("reaper retry storm"); sessions have no issue titles. */
@@ -27926,6 +28290,32 @@ var HotWorkspace = class extends Schema_exports.Class("HotWorkspace")({
 }) {
 };
 
+// ../../packages/domain/src/workbench/model-catalog.ts
+var HarnessModel = class extends Schema_exports.Class("HarnessModel")({
+  id: Schema_exports.String,
+  label: Schema_exports.String,
+  /** The model a launch runs when the request names none; one per harness. */
+  isDefault: Schema_exports.Boolean,
+  /** The efforts this model takes when fewer than its harness's; null means the harness's. */
+  efforts: Schema_exports.NullOr(Schema_exports.Array(Schema_exports.Literals(EFFORT_LEVELS)))
+}) {
+};
+var HarnessModelCatalog = class extends Schema_exports.Class("HarnessModelCatalog")({
+  harness: Schema_exports.String,
+  /** In the order the picker shows them; empty when the harness takes no model flag Mend knows. */
+  models: Schema_exports.Array(HarnessModel),
+  /**
+   * The model a launch runs when none is named; null when the list is empty, or when the harness
+   * chooses its own and no row is flagged (`HARNESSES_CHOOSING_THEIR_OWN_MODEL`).
+   */
+  defaultModel: Schema_exports.NullOr(Schema_exports.String),
+  /** What the harness CLI accepts at all; a model may take fewer. */
+  efforts: Schema_exports.Array(Schema_exports.Literals(EFFORT_LEVELS)),
+  /** Whether a launch may ask for priority processing. */
+  fastCapable: Schema_exports.Boolean
+}) {
+};
+
 // ../../packages/domain/src/workbench/notifications.ts
 var NotificationKind = Schema_exports.Literals(["finished", "needs-input", "failed"]);
 var NotificationSettings = class extends Schema_exports.Class(
@@ -27950,6 +28340,26 @@ var DEFAULT_NOTIFICATION_SETTINGS = new NotificationSettings({
 });
 var SlackThreadReach = Schema_exports.Literals(["replies", "status", "none"]);
 
+// ../../packages/domain/src/workbench/host-user-namespaces.ts
+var HOST_USER_NAMESPACE_FILES = [
+  "/proc/sys/kernel/apparmor_restrict_unprivileged_userns",
+  "/sys/module/apparmor/parameters/enabled",
+  "/proc/sys/kernel/unprivileged_userns_clone"
+];
+var HOST_USER_NAMESPACE_SYSCTL_FILE = "/etc/sysctl.d/60-mend-rootless-docker.conf";
+var hostUserNamespacesOf = (readings) => {
+  const restrict = readings.apparmorRestrictUnprivilegedUserns?.trim();
+  const apparmorOff = readings.apparmorEnabled?.trim() === "N";
+  if (restrict === "1" && !apparmorOff) {
+    return { allowed: false, setting: "kernel.apparmor_restrict_unprivileged_userns = 0" };
+  }
+  if (readings.unprivilegedUsernsClone?.trim() === "0") {
+    return { allowed: false, setting: "kernel.unprivileged_userns_clone = 1" };
+  }
+  return { allowed: true };
+};
+var hostUserNamespacesFix = (setting) => `echo '${setting}' | sudo tee ${HOST_USER_NAMESPACE_SYSCTL_FILE} && sudo sysctl --system`;
+
 // ../../packages/domain/src/workbench/link.ts
 var ProjectLink = class extends Schema_exports.Class("ProjectLink")({
   id: ProjectLinkId,
@@ -28004,7 +28414,7 @@ var ProjectClusterBindingsSnapshot = class extends Schema_exports.Class(
 }) {
 };
 
-// ../../node_modules/.pnpm/@sealant+api-contracts@0.38.1_effect@4.0.0-beta.93/node_modules/@sealant/api-contracts/dist/workspace-environment.js
+// ../../node_modules/.pnpm/@sealant+api-contracts-next@0.39.0-next.683_effect@4.0.0-beta.93/node_modules/@sealant/api-contracts-next/dist/workspace-environment.js
 var RESERVED_NAMES = new Map([
   // Identity/process roots the daemon and shells own.
   ...[
@@ -28186,6 +28596,38 @@ var servicesHoldLine = (input) => {
   return input.agentOutcome === null ? hold : `agent ${input.agentOutcome} \xB7 ${hold}`;
 };
 
+// ../../packages/domain/src/workbench/repository.ts
+var SessionRepositoryState = Schema_exports.Literals(["adding", "ready", "failed", "missing"]);
+var SessionRepositoryCapture = Schema_exports.Literals(["nested", "own"]);
+var SessionRepositorySource = Schema_exports.Literals(["origin", "store"]);
+var SessionRepository = class extends Schema_exports.Class("SessionRepository")({
+  id: SessionRepositoryId,
+  sessionId: SessionId,
+  /** The repository's project, never the session's own. */
+  projectId: ProjectId,
+  /** The worktree of that project this session works in. */
+  worktreeId: WorktreeId,
+  /** The directory name under `/workspace/repos/`. */
+  name: Schema_exports.String,
+  /** `repositoryPath(name)`, recorded so the record reads without computing. */
+  path: Schema_exports.String,
+  /** Mirrors of the worktree row, as the session's own `branch` and `baseSha` are. */
+  branch: Schema_exports.String,
+  baseSha: Sha,
+  baseRef: Schema_exports.NullOr(Schema_exports.String),
+  state: SessionRepositoryState,
+  /** Why it `failed` or went `missing`, in the words the person reads. */
+  error: Schema_exports.NullOr(Schema_exports.String),
+  capture: SessionRepositoryCapture,
+  source: SessionRepositorySource,
+  /** The account that asked for it: the session's owner. */
+  addedByUserId: Schema_exports.NullOr(Schema_exports.String),
+  createdAt: Timestamp,
+  updatedAt: Timestamp,
+  readyAt: Schema_exports.NullOr(Timestamp)
+}) {
+};
+
 // ../../packages/domain/src/workbench/review-comment.ts
 var CommentAuthor = Schema_exports.Literals(["reviewer", "mend"]);
 var CommentState = Schema_exports.Literals(["draft", "open", "addressed", "dismissed"]);
@@ -28244,6 +28686,83 @@ var ReviewComment = class extends Schema_exports.Class("ReviewComment")({
 }) {
 };
 
+// ../../packages/domain/src/workbench/secret-file.ts
+var SECRET_FILE_MAX_BYTES = 256 * 1024;
+var SECRET_FILES_MAX_TOTAL_BYTES = 1024 * 1024;
+var SECRET_FILE_MAX_PATH_LENGTH = 512;
+var SECRET_FILE_RESERVED_PATHS = [
+  ".claude",
+  ".claude.json",
+  ".codex",
+  ".pi",
+  ".local/share/opencode",
+  ".local/state/opencode",
+  ".mend"
+];
+var SecretFile = class extends Schema_exports.Class("SecretFile")({
+  id: SecretFileId,
+  /** Home-relative POSIX path, as `validateSecretFilePath` accepts it. */
+  path: Schema_exports.String,
+  /** The last segment of `path`: what a list shows first. */
+  name: Schema_exports.String,
+  bytes: Schema_exports.Int,
+  /** Grows with every replace; the content itself never appears. */
+  revision: Schema_exports.Int,
+  createdAt: Timestamp,
+  updatedAt: Timestamp
+}) {
+};
+var SecretFilesView = class extends Schema_exports.Class("SecretFilesView")({
+  files: Schema_exports.Array(SecretFile)
+}) {
+};
+var SecretFileUpload = class extends Schema_exports.Class("SecretFileUpload")({
+  path: Schema_exports.String,
+  encoding: Schema_exports.Literals(["utf8", "base64"]),
+  contents: Schema_exports.String
+}) {
+};
+var SecretFileSaved = class extends Schema_exports.Class("SecretFileSaved")({
+  file: SecretFile,
+  action: Schema_exports.Literals(["created", "replaced"])
+}) {
+};
+var SecretFileRemoved = class extends Schema_exports.Class("SecretFileRemoved")({
+  removed: Schema_exports.Boolean
+}) {
+};
+var validateSecretFilePath = (filePath) => {
+  const syntax = validateSecretFilePathSyntax(filePath);
+  if (syntax !== null) return syntax;
+  const reserved = reservedSecretFileRoot(filePath);
+  if (reserved !== null) {
+    return `${filePath} is under ${reserved}, which sessions capture`;
+  }
+  return null;
+};
+var reservedSecretFileRoot = (filePath) => SECRET_FILE_RESERVED_PATHS.find(
+  (prefix) => filePath === prefix || filePath.startsWith(`${prefix}/`)
+) ?? null;
+var validateSecretFilePathSyntax = (filePath) => {
+  if (filePath.length === 0) return "a path under the home directory is required";
+  if (filePath.length > SECRET_FILE_MAX_PATH_LENGTH) {
+    return `${filePath} is longer than ${SECRET_FILE_MAX_PATH_LENGTH} characters`;
+  }
+  if (filePath.startsWith("/") || filePath.startsWith("~")) {
+    return `${filePath} must be relative to the home directory, as .aws/credentials is`;
+  }
+  const control = [...filePath].some((char) => {
+    const code = char.codePointAt(0) ?? 0;
+    return code < 32 || code === 127;
+  });
+  if (filePath.includes("\\") || control) return `${filePath} is not a POSIX path`;
+  const segments = filePath.split("/");
+  if (segments.some((segment) => segment === "" || segment === "." || segment === "..")) {
+    return `${filePath} must not contain empty, "." or ".." segments`;
+  }
+  return null;
+};
+
 // ../../packages/domain/src/workbench/service-recipe.ts
 var ServiceRecipe = class extends Schema_exports.Class("ServiceRecipe")({
   name: Schema_exports.String,
@@ -28359,6 +28878,7 @@ var ServiceView = class extends Schema_exports.Class("ServiceView")({
 var SessionControlKind = Schema_exports.Literals([
   "interrupt",
   "terminal-attach",
+  "terminal-watch",
   "shell-open",
   "stop",
   "services-stop",
@@ -28377,6 +28897,7 @@ var SessionControlEvent = class extends Schema_exports.Class("SessionControlEven
   createdAt: Timestamp
 }) {
 };
+var terminalReadOnlyLine = (ownerName) => `This session runs in a terminal. Only ${ownerName} types here; they can continue it as a conversation.`;
 
 // ../../packages/domain/src/workbench/session-run.ts
 var SessionRun = class extends Schema_exports.Class("SessionRun")({
@@ -28577,6 +29098,9 @@ var Worktree = class extends Schema_exports.Class("Worktree")({
 }) {
 };
 
+// ../../packages/domain/src/workbench/worktree-removal.ts
+var WORKTREE_REMOVAL_FORCE_HINT = "or pass force=true to remove it anyway";
+
 // src/shared.ts
 import { spawnSync } from "node:child_process";
 import * as path from "node:path";
@@ -28584,10 +29108,18 @@ var HARNESS_COMMANDS = {
   codex: ["codex"],
   claude: ["claude"],
   opencode: ["opencode"],
+  pi: ["pi"],
   // Not a coding agent: a plain bash session in its own recorded worktree.
   shell: ["bash"]
 };
-var EFFORT_LEVELS2 = ["low", "medium", "high", "xhigh", "max"];
+var EFFORT_LEVELS2 = [
+  "low",
+  "medium",
+  "high",
+  "xhigh",
+  "max",
+  "ultra"
+];
 var PENDING_ID_PREFIX = "pending:";
 var pendingId = () => `${PENDING_ID_PREFIX}${crypto.randomUUID()}`;
 var isPendingId = (id2) => id2.startsWith(PENDING_ID_PREFIX);
@@ -28847,6 +29379,9 @@ var trackBracketedPaste = (output, current) => {
   return on > off;
 };
 var pasteBytes = (text, bracketed) => Buffer.from(bracketed ? `\x1B[200~${text}\x1B[201~` : text, "utf8");
+var firstPositional = (args2, valued) => args2.find(
+  (argument, index2) => !argument.startsWith("--") && (index2 === 0 || !valued.includes(args2[index2 - 1] ?? ""))
+);
 
 // src/server-request.ts
 var MendRequestError = class extends Error {
@@ -28970,12 +29505,30 @@ export {
   RepositoryCloneUrl,
   landingFactsFromWire,
   landingFactLine,
+  AGENT_MEMORY_ROOTS,
+  AGENT_MEMORY_FILES,
+  CODEX_MEMORY_DATABASE,
+  AGENT_MEMORY_MAX_FILE_BYTES,
+  AGENT_MEMORY_MAX_DATABASE_BYTES,
+  agentMemoryNameOf,
   narrowCredential,
   claudeGrantFacts,
   sameGrant,
   normalizeGitAuthor,
   gitAuthorIssue,
+  withoutLaunchPhase,
+  launchPhaseOf,
+  HOST_USER_NAMESPACE_FILES,
+  hostUserNamespacesOf,
+  hostUserNamespacesFix,
+  PI_PROFILE_AGENT_PATH,
+  PI_PROFILE_LOCAL_PACKAGES,
+  PI_PROFILE_MAX_FILE_BYTES,
+  validatePiProfile,
   servicesHoldLine,
+  validateSecretFilePath,
+  terminalReadOnlyLine,
+  WORKTREE_REMOVAL_FORCE_HINT,
   HARNESS_COMMANDS,
   pendingId,
   isPendingId,
@@ -28994,9 +29547,11 @@ export {
   gitOriginUrl,
   gitTopLevel,
   normalizeProjectName,
+  csiUKeysOf,
   isPasteChunk,
   trackBracketedPaste,
   pasteBytes,
+  firstPositional,
   MendRequestError,
   spoken,
   noAnswerError,