SSE status projection drops checkoutProvenance and checkoutPreparation

[marcusrbrown]

Problem

Contract 1.7.0 added checkoutProvenance to OperatorRunStatus, and 1.8.0 added checkoutPreparation. toOperatorRunStatus populates both. The SSE status projection then rebuilds the frame from a fixed field list that predates both, so neither field ever reaches operator stream consumers.

packages/gateway/src/web/sse/projection.ts (projectRunObservation):

// Copy only the contract fields; never spread runState or read its details.
const result: OperatorRunStatus = {
  runId: base.runId,
  entityRef: base.entityRef,
  surface: base.surface,
  phase: base.phase,
  status: overlaidStatus,
  startedAt: base.startedAt,
  stale: base.stale,
  ...(base.failureKind === undefined ? {} : {failureKind: base.failureKind}),
}

base is the deny-gated result of projectRunStatus, which already carries both fields when present. They are dropped here. This is unchanged from v0.118.1 through current main.

Why it matters

The checkout update/recovery plan (docs/plans/2026-09-24-001-feat-workspace-checkout-update-recovery-plan.md) says:

• line 50: "the web surface only displays the new contract fields in this plan"
• line 437 (Unit 6 goal): "Carry the preparation result through the gateway and to operators"
• line 614: "refusals and failures are persisted with checkoutPreparation; the operator surface shows them"

The run stream is the operator surface's only channel for OperatorRunStatus; run summaries are a separate, leaner DTO. As shipped, a run refused by checkout preparation reaches the operator as a bare FAILED with no failureKind and no preparation record, and a run that started has no visible provenance. Dashboard consumers adopting 1.8.0 have nothing to render.

Expected

The projection copies checkoutProvenance and checkoutPreparation from base, conditionally like failureKind, so the deny gate still applies first. A projection test pins that both fields appear on the status frame when present and are absent otherwise.

[fro-bot]

Triage: confirmed

The SSE projection consistently drops checkout metadata, hiding starting-checkout provenance and actionable preparation-failure reasons from operators.

Root cause: packages/gateway/src/operator-contract/run-status.ts:280–300 validates and includes both fields. The deny-gated bridge preserves them, but packages/gateway/src/web/sse/projection.ts:80–91 rebuilds the DTO without either. The SSE manager then uses that stripped result as the status-frame data (manager.ts:969).

Reproduction: Called the real projectRunStatus and projectRunObservation functions with an injected, non-denied binding lookup:

Run fixture	Bridge output	SSE projection output
EXECUTING, observed provenance	checkoutProvenance present	Field absent
FAILED, dirty-checkout refusal	checkoutPreparation present	Field absent; bare failed status
FAILED, fetch-timeout preparation	checkoutPreparation present	Field absent; bare failed status

Denied runs still returned null; legacy records omitted both fields. This confirms the projection-level bug without a deployed dashboard. Missing failureKind on these preparation failures is not another dropped field: it was absent from the bridge too.

Coverage gap: Existing projection and contract-mapper suites pass 80/80 tests. Checkout metadata is tested in the mapper, but not its passage through the SSE projection.

Recommended next steps:

1. Conditionally copy base.checkoutProvenance and base.checkoutPreparation, following the existing failureKind pattern and retaining the explicit allowlist and deny-gate ordering.
2. Add projection regression tests for populated and absent fields, approval overlays, and denied records carrying checkout metadata.
3. Add a status-frame integration assertion through the SSE manager, then run the affected gateway tests and type checks. These fields already belong to contract 1.8.0; no new contract field is needed.

No implementation changes were made during triage.

---

Run Summary

Field	Value
Event	issues
Repository	fro-bot/agent
Run ID	37552455171
Cache	hit
Session	ses_eec393aefffesDntfUsJUla5Em