@cabane/companion 0.6.164 → 0.6.165

package/dist/cli.js

@@ -15403,6 +15403,12 @@ var DeviceApi = class {
   getAssignments() {
     return this.request("GET", "/api/companion/assignments");
   }
+  // Ask again for the credential of an agent assigned to this device, when the saved copy is
+  // gone. The previous credential stops working; any agent not assigned here is a 404, and a
+  // second ask inside a minute a 429.
+  reissueAgentCredential(agentId) {
+    return this.request("POST", `/api/companion/agents/${encodeURIComponent(agentId)}/credential`);
+  }
   getRuns(cursor) {
     const query = new URLSearchParams({ limit: "100", order: "asc" });
     if (cursor) query.set("cursor", cursor);
@@ -17608,6 +17614,7 @@ var CompanionSupervisor = class {
         for (const it of items) {
           if (it.credential) setCredential(device.id, it.agentId, it.credential);
         }
+        items = await this.restoreMissingCredentials(device.id, items);
         const byWorkspace = /* @__PURE__ */ new Map();
         for (const it of items) {
           const list = byWorkspace.get(it.workspaceId) ?? [];
@@ -17640,6 +17647,42 @@ var CompanionSupervisor = class {
       this.inFlightRefresh = null;
     }
   }
+  // An assigned agent whose saved credential is gone (the file wiped or edited, a crash between
+  // delivery and write) gets it back here, before reconciling. A runner still holding it in
+  // memory writes it back; otherwise Cabane is asked for a new one, which revokes the old. The
+  // result rides the item as a fresh delivery, so reconcile builds the runner on it. A refused
+  // ask leaves the item as it was, and reconcile reports the agent can't run.
+  async restoreMissingCredentials(deviceId, items) {
+    const restored = [];
+    for (const it of items) {
+      if (it.credential || getCredential(deviceId, it.agentId)) {
+        restored.push(it);
+        continue;
+      }
+      const held = this.workspaces.get(it.workspaceId)?.agents.get(it.agentId)?.credential;
+      if (held) {
+        setCredential(deviceId, it.agentId, held);
+        restored.push(it);
+        continue;
+      }
+      try {
+        const { credential } = await this.deviceApi.reissueAgentCredential(it.agentId);
+        setCredential(deviceId, it.agentId, credential);
+        this.log.info(
+          { agentId: it.agentId, agentName: it.agentDisplayName },
+          `Restored ${it.agentDisplayName}'s sign-in to Cabane: it was missing on this device.`
+        );
+        restored.push({ ...it, credential });
+      } catch (err) {
+        this.log.warn(
+          { agentId: it.agentId, agentName: it.agentDisplayName, ...apiErrorLogFields(err) },
+          `Couldn't restore ${it.agentDisplayName}'s sign-in to Cabane.`
+        );
+        restored.push(it);
+      }
+    }
+    return restored;
+  }
   // ---- reconciliation ----
   reconcileWorkspace(deviceId, workspaceId, list) {
     const first = list[0];

package/dist/runtime.js

@@ -2496,6 +2496,12 @@ var DeviceApi = class {
   getAssignments() {
     return this.request("GET", "/api/companion/assignments");
   }
+  // Ask again for the credential of an agent assigned to this device, when the saved copy is
+  // gone. The previous credential stops working; any agent not assigned here is a 404, and a
+  // second ask inside a minute a 429.
+  reissueAgentCredential(agentId) {
+    return this.request("POST", `/api/companion/agents/${encodeURIComponent(agentId)}/credential`);
+  }
   getRuns(cursor) {
     const query = new URLSearchParams({ limit: "100", order: "asc" });
     if (cursor) query.set("cursor", cursor);
@@ -14174,6 +14180,7 @@ var CompanionSupervisor = class {
         for (const it of items) {
           if (it.credential) setCredential(device.id, it.agentId, it.credential);
         }
+        items = await this.restoreMissingCredentials(device.id, items);
         const byWorkspace = /* @__PURE__ */ new Map();
         for (const it of items) {
           const list = byWorkspace.get(it.workspaceId) ?? [];
@@ -14206,6 +14213,42 @@ var CompanionSupervisor = class {
       this.inFlightRefresh = null;
     }
   }
+  // An assigned agent whose saved credential is gone (the file wiped or edited, a crash between
+  // delivery and write) gets it back here, before reconciling. A runner still holding it in
+  // memory writes it back; otherwise Cabane is asked for a new one, which revokes the old. The
+  // result rides the item as a fresh delivery, so reconcile builds the runner on it. A refused
+  // ask leaves the item as it was, and reconcile reports the agent can't run.
+  async restoreMissingCredentials(deviceId, items) {
+    const restored = [];
+    for (const it of items) {
+      if (it.credential || getCredential(deviceId, it.agentId)) {
+        restored.push(it);
+        continue;
+      }
+      const held = this.workspaces.get(it.workspaceId)?.agents.get(it.agentId)?.credential;
+      if (held) {
+        setCredential(deviceId, it.agentId, held);
+        restored.push(it);
+        continue;
+      }
+      try {
+        const { credential } = await this.deviceApi.reissueAgentCredential(it.agentId);
+        setCredential(deviceId, it.agentId, credential);
+        this.log.info(
+          { agentId: it.agentId, agentName: it.agentDisplayName },
+          `Restored ${it.agentDisplayName}'s sign-in to Cabane: it was missing on this device.`
+        );
+        restored.push({ ...it, credential });
+      } catch (err) {
+        this.log.warn(
+          { agentId: it.agentId, agentName: it.agentDisplayName, ...apiErrorLogFields(err) },
+          `Couldn't restore ${it.agentDisplayName}'s sign-in to Cabane.`
+        );
+        restored.push(it);
+      }
+    }
+    return restored;
+  }
   // ---- reconciliation ----
   reconcileWorkspace(deviceId, workspaceId, list) {
     const first = list[0];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cabane/companion",
-  "version": "0.6.164",
+  "version": "0.6.165",
   "type": "module",
   "description": "The Cabane Companion (headless): connect an agent on your machine to your Cabane workspace as a responder — drive work against your own codebase, files, and MCP servers without putting any of it in Cabane.",
   "license": "UNLICENSED",