@sealant/mend 0.36.0-next.658 → 0.36.0-next.665

package/dist/{chunk-GKRTZRV7.js → chunk-K5WNRH4V.js}

@@ -28227,6 +28227,19 @@ var Session = class extends Schema_exports.Class("Session")({
     Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(null)),
     Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
   ),
+  /**
+   * Who launched the session's executor: the owner of the session whose own launch made it
+   * (`SessionsRepo.executorSessionOf`), which a joined session is not. Remote-SSH into the workspace
+   * admits that person only (docs/adr/0016), in either harness layout, so an editor asks before it
+   * opens. Filled on every API read that hands sessions out (the session list, retained additions
+   * included, the session view and the project view): the view reads in their own statement, the
+   * plain reads from one batched read (`SessionsRepo.launchersOf`). Null with no executor, on the
+   * repository's other reads, and from older servers.
+   */
+  workspaceLauncherUserId: Schema_exports.NullOr(Schema_exports.String).pipe(
+    Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(null)),
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
   /**
    * Whether the harness left a conversation behind — a transcript Mend captured at settle or
    * found in the live harness home. False is a dead end: nothing to resume, nothing to hand
@@ -29369,6 +29382,7 @@ var LAUNCH_ERROR = {
   foreground: false,
   noTunnel: false,
   autoLand: null,
+  json: false,
   custom: []
 };
 var parseLaunchArgs = (args2) => {
@@ -29389,6 +29403,7 @@ var parseLaunchArgs = (args2) => {
   let noTunnel = false;
   let land = false;
   let noLand = false;
+  let json2 = false;
   for (let index2 = 0; index2 < flagArgs.length; index2 += 1) {
     const arg = flagArgs[index2] ?? "";
     if (arg === "--ask") {
@@ -29419,6 +29434,10 @@ var parseLaunchArgs = (args2) => {
       noLand = true;
       continue;
     }
+    if (arg === "--json") {
+      json2 = true;
+      continue;
+    }
     if (arg === "--project" || arg === "--model" || arg === "--effort" || arg === "--base" || arg === "--name" || arg === "--worktree") {
       const value3 = flagArgs[index2 + 1];
       if (value3 === void 0) return { ...LAUNCH_ERROR, error: `${arg} needs a value` };
@@ -29474,6 +29493,7 @@ var parseLaunchArgs = (args2) => {
     foreground,
     noTunnel,
     autoLand: land ? true : noLand ? false : null,
+    json: json2,
     custom,
     error: null
   };
@@ -29614,6 +29634,17 @@ var pasteBytes = (text, bracketed) => Buffer.from(bracketed ? `\x1B[200~${text}\
 var firstPositional = (args2, valued) => args2.find(
   (argument, index2) => !argument.startsWith("--") && (index2 === 0 || !valued.includes(args2[index2 - 1] ?? ""))
 );
+var redactCredentials = (text) => text.replace(
+  // Greedy up to the last `@` before the authority ends: a literal `@` in a password is userinfo.
+  /\b([a-z][a-z0-9+.-]*):\/\/([^/?#"<>`]*)@/giu,
+  (_whole, scheme, userinfo) => {
+    if (/^(git\+)?ssh$/iu.test(scheme)) {
+      const user = userinfo.split(":")[0] ?? "";
+      if (/^[a-z0-9._~-]+$/iu.test(user)) return `${scheme}://${user}@`;
+    }
+    return `${scheme}://`;
+  }
+);
 
 // src/server-request.ts
 var MendRequestError = class extends Error {
@@ -29902,6 +29933,7 @@ export {
   trackBracketedPaste,
   pasteBytes,
   firstPositional,
+  redactCredentials,
   MendRequestError,
   spoken,
   noAnswerError,

package/dist/{dashboard-IBHSVQ5S.js → dashboard-DQB5RNXJ.js}

@@ -23,7 +23,7 @@ import {
   workspaceReadsOf,
   worktreeJoinLine,
   wrapWords
-} from "./chunk-GKRTZRV7.js";
+} from "./chunk-K5WNRH4V.js";
 
 // src/dashboard.tsx
 import { CliRenderEvents, createCliRenderer } from "@opentui/core";