@vincentt-xr/cli 0.10.0 → 0.11.0

package/dist/cli/index.js

@@ -540,7 +540,7 @@ async function preview() {
         orgName: await activeOrgName(),
         targetUrl: `http://localhost:${running.appPort}`,
         url: running.url,
-        consoleUrl: await projectConsoleUrl(cwd),
+        consoleUrl: await projectConsoleUrl(cwd, running.sessionId),
         qr,
         expiresInHours: 12,
     })) {
@@ -657,14 +657,26 @@ async function projectDisplayName(cwd) {
  * `consoleVerbCommand` deep-links to. The console redirects it to the org-scoped
  * address, so the CLI does not need the org slug and cannot print a stale one — a
  * folder can outlive the org binding the machine config happens to hold.
+ *
+ * `sessionId` deep-links PAST the project's default tab to the running preview
+ * itself (`?tab=preview&session=<id>`), which is the surface the creator is being
+ * handed this link to watch. Omitted when there is no session — the bare project
+ * page is right for `link`/`create`, and a session parameter naming nothing would
+ * land on an empty workspace.
  */
-async function projectConsoleUrl(cwd) {
+async function projectConsoleUrl(cwd, sessionId) {
     const located = await locateProjectBinding(cwd);
     if (!located)
         return undefined;
     const cfg = await loadMachineConfig();
     const base = (cfg.consoleUrl ?? DEFAULT_CONSOLE_URL).replace(/\/$/, "");
-    return `${base}/projects/${located.binding.projectId}`;
+    const url = `${base}/projects/${located.binding.projectId}`;
+    if (!sessionId)
+        return url;
+    // encodeURIComponent on BOTH: the ids are server-minted and hex today, and a
+    // future id shape carrying a reserved character must not become a second
+    // parameter.
+    return `${url}?tab=preview&session=${encodeURIComponent(sessionId)}`;
 }
 /**
  * Map a mint failure to its screen. Each cause has a DISTINCT first line so the

package/dist/preview/copy.d.ts

@@ -99,9 +99,18 @@ export declare function stopped(ranMs: number, totalConnections: number): string
  *
  * The claim is exactly what the wire supports: `stopped` is produced by one
  * route, authorized by the compound key {_id, userId}, so the actor is ALWAYS
- * the same account as the reader. Never a teammate, never an admin. It does not
- * say WHICH window, because another terminal, another machine and a future
- * console control are all the same 410.
+ * the same account as the reader. Never a teammate, never an admin.
+ *
+ * IT NAMES NO SURFACE, and that is the whole design of this screen. `endReason`
+ * carries ONE value for every actor on that route — this CLI's own stop, another
+ * terminal, another machine, the console's Stop control, and any surface added
+ * later. The API does not learn which one called and must not: deriving it would
+ * mean guessing a surface from a credential kind (a PAT-driven script is not "a
+ * terminal") and reporting the guess to the creator as fact. That is the
+ * over-claim class that produced the abandoned→hard_max defect.
+ *
+ * So the headline states only the event, and the second line describes the actor
+ * exactly as far as the compound key supports: the same account, not this window.
  *
  * `✓`, not `✗`: someone with the authority to stop it stopped it.
  */

package/dist/preview/copy.js

@@ -205,16 +205,25 @@ export function stopped(ranMs, totalConnections) {
  *
  * The claim is exactly what the wire supports: `stopped` is produced by one
  * route, authorized by the compound key {_id, userId}, so the actor is ALWAYS
- * the same account as the reader. Never a teammate, never an admin. It does not
- * say WHICH window, because another terminal, another machine and a future
- * console control are all the same 410.
+ * the same account as the reader. Never a teammate, never an admin.
+ *
+ * IT NAMES NO SURFACE, and that is the whole design of this screen. `endReason`
+ * carries ONE value for every actor on that route — this CLI's own stop, another
+ * terminal, another machine, the console's Stop control, and any surface added
+ * later. The API does not learn which one called and must not: deriving it would
+ * mean guessing a surface from a credential kind (a PAT-driven script is not "a
+ * terminal") and reporting the guess to the creator as fact. That is the
+ * over-claim class that produced the abandoned→hard_max defect.
+ *
+ * So the headline states only the event, and the second line describes the actor
+ * exactly as far as the compound key supports: the same account, not this window.
  *
  * `✓`, not `✗`: someone with the authority to stop it stopped it.
  */
 export function stoppedElsewhere() {
     return [
         "",
-        "✓ Preview stopped from another terminal. The link no longer works.",
+        "✓ Preview stopped. The link no longer works.",
         "",
         "  It was stopped on your account, not by this window. Nothing is wrong here.",
         "",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vincentt-xr/cli",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Vincentt CLI — the vincentt command-line dev loop (login, create, publish, preview, diagnostics, feedback, relay)",
   "license": "UNLICENSED",
   "type": "module",