@sealant/mend 0.36.0-next.663 → 0.36.0-next.675

package/dist/{chunk-VOP6USOZ.js → chunk-TP4A72RF.js}

@@ -27627,6 +27627,7 @@ var AgentEvent = Schema_exports.Union([
 var CaptureDrainReason = Schema_exports.Literals(["stop", "relaunch", "replacement"]);
 var FALLBACK_REPLACEMENT_AGE_SECONDS = 7 * 60 * 60 + 30 * 60;
 var CAPTURE_EXECUTOR_RETAINED = "retained";
+var CAPTURE_SEAL_UNRESTORABLE = "unrestorable";
 var CAPTURE_COMPLETION_UNREPORTED = "unreported";
 var captureDurationWords = (ms) => {
   const seconds2 = Math.max(0, Math.floor(ms / 1e3));
@@ -27686,6 +27687,8 @@ var captureIncompleteWords = (reason) => {
       return "executor error";
     case CAPTURE_EXECUTOR_RETAINED:
       return "executor kept for recovery";
+    case CAPTURE_SEAL_UNRESTORABLE:
+      return "final seal refused \xB7 git section failed verification";
     default:
       return reason;
   }
@@ -27788,6 +27791,18 @@ var CheckpointTrigger = Schema_exports.Literals([
   "review-open",
   "user-mark"
 ]);
+var CheckpointSourceKind = Schema_exports.Literals(["stop-final", "stop-reading"]);
+var CheckpointSource = class extends Schema_exports.Class("CheckpointSource")({
+  kind: CheckpointSourceKind,
+  captureN: Schema_exports.NullOr(Schema_exports.Int),
+  observedAt: Timestamp
+}) {
+};
+var checkpointSourceWords = (source, at) => [
+  source.kind === "stop-final" ? "from the Stop's final save" : "from a Stop reading that did not save",
+  ...source.captureN === null ? [] : [`capture ${source.captureN}`],
+  at
+].join(" \xB7 ");
 var Checkpoint = class extends Schema_exports.Class("Checkpoint")({
   id: CheckpointId,
   worktreeId: WorktreeId,
@@ -27810,7 +27825,9 @@ var Checkpoint = class extends Schema_exports.Class("Checkpoint")({
   /** Record sequence the supervisor had seen when the snapshot was taken. */
   seq: SequenceNumber,
   trigger: CheckpointTrigger,
-  createdAt: Timestamp
+  createdAt: Timestamp,
+  /** Absent when the checkpoint observed the executor itself (`CheckpointSource`). */
+  source: Schema_exports.optionalKey(CheckpointSource)
 }) {
 };
 
@@ -28227,6 +28244,19 @@ var Session = class extends Schema_exports.Class("Session")({
     Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(null)),
     Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
   ),
+  /**
+   * Who launched the session's executor: the owner of the session whose own launch made it
+   * (`SessionsRepo.executorSessionOf`), which a joined session is not. Remote-SSH into the workspace
+   * admits that person only (docs/adr/0016), in either harness layout, so an editor asks before it
+   * opens. Filled on every API read that hands sessions out (the session list, retained additions
+   * included, the session view and the project view): the view reads in their own statement, the
+   * plain reads from one batched read (`SessionsRepo.launchersOf`). Null with no executor, on the
+   * repository's other reads, and from older servers.
+   */
+  workspaceLauncherUserId: Schema_exports.NullOr(Schema_exports.String).pipe(
+    Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(null)),
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
   /**
    * Whether the harness left a conversation behind — a transcript Mend captured at settle or
    * found in the live harness home. False is a dead end: nothing to resume, nothing to hand
@@ -28371,6 +28401,7 @@ var HotWorkspaceEnvironment = Schema_exports.Struct({
   clusterBindingNames: Schema_exports.optional(Schema_exports.Array(Schema_exports.String)),
   clusterServiceAccount: Schema_exports.optional(Schema_exports.NullOr(Schema_exports.String))
 });
+var RemoteSsh = Schema_exports.Literals(["owner", "unbound", "not-taken"]);
 var HotWorkspace = class extends Schema_exports.Class("HotWorkspace")({
   id: SessionId,
   projectId: ProjectId,
@@ -28397,6 +28428,13 @@ var HotWorkspace = class extends Schema_exports.Class("HotWorkspace")({
    * `shared`.
    */
   harnessLayout: HarnessLayout,
+  /**
+   * Who Remote-SSH into the standby runs as (docs/adr/0016, decision 10), decided at its create and
+   * kept for its claim: `owner` its owner's own user; `unbound` root, because Core could not bind
+   * the owner's person; `not-taken` root, because Core runs no SSH session as a user. Rows from
+   * before it are `not-taken`.
+   */
+  remoteSsh: RemoteSsh,
   /** Worktree directory name inside the project's store (derived from `id`). */
   worktree: Schema_exports.NullOr(Schema_exports.String),
   /** The pre-created session branch the worktree is on. */
@@ -28544,7 +28582,7 @@ var ProjectClusterBindingsSnapshot = class extends Schema_exports.Class(
 }) {
 };
 
-// ../../node_modules/.pnpm/@sealant+api-contracts-next@0.39.0-next.707_effect@4.0.0-beta.93/node_modules/@sealant/api-contracts-next/dist/workspace-environment.js
+// ../../node_modules/.pnpm/@sealant+api-contracts-next@0.39.0-next.712_effect@4.0.0-beta.93/node_modules/@sealant/api-contracts-next/dist/workspace-environment.js
 var RESERVED_NAMES = new Map([
   // Identity/process roots the daemon and shells own.
   ...[
@@ -29013,6 +29051,7 @@ var ServiceView = class extends Schema_exports.Class("ServiceView")({
   previousEndpoints: Schema_exports.Array(ServiceEndpoint)
 }) {
 };
+var serviceStartCorrelation = (serviceId, startId) => `service-start:${serviceId}:${startId}`;
 
 // ../../packages/domain/src/workbench/session-control.ts
 var SessionControlKind = Schema_exports.Literals([
@@ -29875,6 +29914,7 @@ export {
   AGENT_MEMORY_MAX_FILE_BYTES,
   AGENT_MEMORY_MAX_DATABASE_BYTES,
   agentMemoryNameOf,
+  checkpointSourceWords,
   narrowCredential,
   claudeGrantFacts,
   sameGrant,
@@ -29891,6 +29931,7 @@ export {
   validatePiProfile,
   servicesHoldLine,
   validateSecretFilePath,
+  serviceStartCorrelation,
   terminalReadOnlyLine,
   sharedControlLine,
   sharedControlConfirm,

package/dist/{dashboard-CEJN6IOO.js → dashboard-RAZDVFR7.js}

@@ -5,6 +5,7 @@ import {
   agentIsLive,
   agentOutcome,
   captureLineOf,
+  checkpointSourceWords,
   createSseParser,
   cwdFacts,
   eventFamilies,
@@ -23,7 +24,7 @@ import {
   workspaceReadsOf,
   worktreeJoinLine,
   wrapWords
-} from "./chunk-VOP6USOZ.js";
+} from "./chunk-TP4A72RF.js";
 
 // src/dashboard.tsx
 import { CliRenderEvents, createCliRenderer } from "@opentui/core";
@@ -1120,6 +1121,7 @@ var SYNTAX_FUNCTION = "#ffcd66";
 
 // src/review.tsx
 import { Fragment, jsx, jsxs } from "@opentui/react/jsx-runtime";
+var clockOf = (iso) => new Date(iso).toLocaleTimeString([], { hour: "2-digit", minute: "2-digit", hour12: false });
 var REVIEW_KEY = (changeId) => ["review", changeId];
 var EDITOR_KEY_BINDINGS = [{ name: "return", ctrl: true, action: "submit" }];
 var syntaxStyle = SyntaxStyle.fromStyles({
@@ -1165,6 +1167,7 @@ var fetchReview = async (ctx, changeId) => {
     sliceId: pinned.slice.id,
     checkpointAId: pinned.checkpointA.id,
     checkpointBId: pinned.checkpointB.id,
+    checkpointSource: pinned.checkpointB.source ?? null,
     diffDigest: pinned.slice.diffDigest,
     anchorFiles: pinned.anchorFiles,
     files: buildReviewFiles(wire.diff, wire.files),
@@ -1998,7 +2001,10 @@ function ReviewScreen({
             session.id.slice(0, 8)
           ] }),
           isFetching ? /* @__PURE__ */ jsx("span", { fg: FAINT, children: " \xB7 syncing" }) : null,
-          /* @__PURE__ */ jsx("span", { fg: checkpointState === "failed" ? MUTED : FAINT, children: checkpointState === "recording" ? " \xB7 checkpointing" : checkpointState === "failed" ? " \xB7 checkpoint incomplete" : " \xB7 checkpoint recorded" })
+          /* @__PURE__ */ jsx("span", { fg: checkpointState === "failed" ? MUTED : FAINT, children: checkpointState === "recording" ? " \xB7 checkpointing" : checkpointState === "failed" ? " \xB7 checkpoint incomplete" : data.checkpointSource === null ? " \xB7 checkpoint recorded" : ` \xB7 checkpoint ${checkpointSourceWords(
+            data.checkpointSource,
+            clockOf(data.checkpointSource.observedAt)
+          )}` })
         ] }),
         /* @__PURE__ */ jsxs("text", { height: 1, bg: "transparent", children: [
           /* @__PURE__ */ jsxs("span", { fg: FAINT, children: [