Release v1.24.1 — sanitized source snapshot (2026-07-24)

Author: marmutapp

CHANGELOG.md

@@ -2,6 +2,56 @@
 
 All notable changes to SuperBased Observer are documented here.
 
+## [1.24.1] — 2026-07-24
+
+### Added
+
+- **feat(terminal): generic terminal→session correlation sweep.** Closes the
+  Session Cockpit gap where only claude-code (out-of-band, 0.95 confidence)
+  and codex (rollout discovery, 0.75) could link a dashboard-launched
+  terminal to its observer session — every other launcher stayed
+  uncorrelated. A 10s daemon-side, tool-agnostic discovery pass
+  (`termsvc.Correlate`) now links any LIVE uncorrelated run to a UNIQUE
+  candidate session (matched on tool + project root + a launch-time window
+  of [−5s, +30m]) at `SourceDiscovered` 0.75 confidence — unique-or-abstain
+  with a 2-tick dwell before committing a link, and tick-wide abstention on
+  any unsound tick (hit caps, transient failures) rather than a partial or
+  best-guess link. Both sides are revalidated immediately before a link
+  commits; store queries use julianday-precise window arithmetic;
+  dashboard-handoff runs are resolved via the source session's own project
+  root; a new integration reverse map (launcher-verb → tool) normalizes the
+  match. Open Session Cockpit panels self-heal through the existing 15s
+  link poll — no frontend change needed.
+- **feat(dashboard): themed tooltips.** Finished the migration to the
+  existing floating-ui `Tooltip` primitive across the sidebar collapsed
+  rail, terminal toolbars (⊙ Session/Files/Git, focus/grid/minimize/close,
+  size-mode, standing-secret), the Launch Dock, and the New Terminal
+  dialog — aria-labels preserved or added throughout, and the Playwright
+  specs flipped from `title` to `aria-label` assertions in lockstep. Native
+  `<option>` titles are deliberately kept as-is, and the terminal-resize
+  modal hint deliberately stays a native `title` (a persistent tooltip
+  hovering a live terminal is worse than a native one).
+- **feat(dashboard): Tailscale setup flow.** The Configuration card's "Pair
+  a device" action now gates on tailnet reachability: disabled with the
+  exact missing step plus a "Go to Tailscale setup" scroll-link when the
+  tailnet is known-unreachable, and enabled-with-caution when serve status
+  can't be detected on older Tailscale CLIs. Device-side guidance was added
+  to the serve-active step and the QR reveal ("install Tailscale on your
+  phone/device and sign into the same tailnet", with iOS/Android/download
+  links). The HTTPS-consent (`enable_url`) path now states plainly that
+  approval alone does not start serving, and offers a Retry serve action.
+  `docs/remote-access.md` updated to match.
+
+### Notes
+
+- Adversarial review: two codex GPT-5.6 passes (all findings fixed) plus an
+  independent Claude Opus pass (verdict SHIP; its remaining findings —
+  bounding the forward correlation window at 30 minutes, reconciling the
+  remote-language e2e case, reverting the resize-hint tooltip, and a
+  watcher-lag accessibility fix — were all applied). codex usage stayed
+  capped through this work (resets 2026-07-28); the Opus substitution was
+  operator-approved.
+
 ## [1.24.0] — 2026-07-24
 
 ### Added

browser-extension/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "SuperBased Observer — Browser Capture",
-  "version": "1.24.0",
+  "version": "1.24.1",
   "description": "Opt-in, passive observability of your own AI chatbot web usage (ChatGPT, Claude, Perplexity, Gemini, Copilot). Captures per-turn metadata + estimated tokens locally; nothing leaves your machine except to your local observer daemon.",
   "minimum_chrome_version": "111",
   "permissions": [

cmd/observer/attach_standalone.go

@@ -7,10 +7,12 @@ import (
 	"log/slog"
 	"os"
 	"path/filepath"
+	"sync"
 	"time"
 
 	"github.com/marmutapp/superbased-observer/internal/attachsock"
 	"github.com/marmutapp/superbased-observer/internal/config"
+	"github.com/marmutapp/superbased-observer/internal/git"
 	"github.com/marmutapp/superbased-observer/internal/intelligence/dashboard"
 	"github.com/marmutapp/superbased-observer/internal/remotenotify"
 	"github.com/marmutapp/superbased-observer/internal/store"
@@ -230,6 +232,52 @@ func buildTerminalStack(cfg config.Config, database *sql.DB, logger *slog.Logger
 	// mutually referential — the same shape as the OnExit/scanHub closures).
 	launcher.correlate = svc.Correlate
 
+	// Generic terminal-run discovery sweep (Session Cockpit part C). A
+	// daemon-resident, tool-AGNOSTIC pass that periodically links a LIVE
+	// uncorrelated run to a UNIQUE candidate observer session — agreeing on tool +
+	// git root + launch time, unique-or-abstain, held across a dwell — at
+	// termrun.SourceDiscovered (0.75). It closes the correlation gap for every
+	// launcher that has no OOB id echo (only claude-code and codex correlate
+	// today; every other launcher's Session Cockpit otherwise waits forever). It
+	// reads the SAME svc seams the OOB path uses (HandleForRun = liveness truth;
+	// ProjectRoot = the validated launch dir; Correlate = the one scored-link
+	// seam) so a stale crash-orphan run from a previous boot simply misses the
+	// live-handle lookup and is skipped. Gated on a wired DB, and run on its OWN
+	// context so the stack's close func can stop it FIRST — before the H2 shutdown
+	// stamps and mgr.Shutdown() — so no in-flight tick write can race the
+	// defer-LIFO DB close (the same ordering discipline the H2 stamps rely on).
+	stopDiscover := func() {}
+	if database != nil {
+		disc := newTerminalDiscoverer(
+			store.New(database),
+			svc.HandleForRun,
+			svc.SessionLinkForRun,
+			svc.ProjectRoot,
+			svc.Correlate,
+			func(dir string) string {
+				info, gerr := git.Resolve(dir)
+				if gerr != nil {
+					return dir // unreadable dir: fall back to the raw path (store filter still applies)
+				}
+				return info.Root
+			},
+			nil, // now → time.Now (the link timestamp is now().UTC())
+			logger,
+			defaultTerminalDiscoverConfig(),
+		)
+		dctx, dcancel := context.WithCancel(context.Background())
+		var dwg sync.WaitGroup
+		dwg.Add(1)
+		go func() {
+			defer dwg.Done()
+			disc.run(dctx)
+		}()
+		stopDiscover = func() {
+			dcancel()
+			dwg.Wait()
+		}
+	}
+
 	// F4 agent-status hub: fuses the feed (OSC hints + OOB/lifecycle) with
 	// termsession output-recency/exit into a per-run status. Gated by
 	// [terminal.status].enabled; when off, no provider is wired (endpoints 503).
@@ -320,6 +368,11 @@ func buildTerminalStack(cfg config.Config, database *sql.DB, logger *slog.Logger
 		resumeAuthority:  resumeAuthority,
 		reclaimOnInput:   cfg.Terminal.Attach.ReclaimOnInput,
 		close: func() {
+			// Stop the discovery sweep FIRST — before ANY DB write below and before
+			// mgr.Shutdown() — and WAIT for its goroutine to drain, so no in-flight
+			// tick's Correlate write can race the defer-LIFO DB close that start.go
+			// runs after this. No-op when no DB was wired.
+			stopDiscover()
 			// H2: stamp every LIVE attach run 'daemon_shutdown' SYNCHRONOUSLY,
 			// BEFORE mgr.Shutdown() kills the PTYs (whose async OnExit would
 			// otherwise race the DB close) and before start.go's defer-LIFO closes