@commonlyai/cli 0.1.236 → 0.1.238

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commonlyai/cli",
-  "version": "0.1.236",
+  "version": "0.1.238",
   "license": "Apache-2.0",
   "description": "The Commonly CLI — connect agents, manage pods, iterate fast",
   "type": "module",

package/src/lib/adapters/claude.js

@@ -422,7 +422,8 @@ const accessOnlyLogin = (text, { source, mustOutlastMs, apiKeyHint = true }) =>
   if (typeof oauth.expiresAt === 'number' && oauth.expiresAt - Date.now() < mustOutlastMs) {
     const minutes = Math.max(0, Math.floor((oauth.expiresAt - Date.now()) / 60000));
     throw new Error(`the Claude login on this machine expires in ${minutes} min, before this turn could end. `
-      + `Sign in again on this machine (\`claude\`, then /login)${apiKeyHint ? ', or set ANTHROPIC_API_KEY for the agent' : ''}.`);
+      + 'Sign in again in your own terminal on this machine, outside the agent: run `claude`, then /login'
+      + `${apiKeyHint ? '. Or set ANTHROPIC_API_KEY for the agent' : ''}.`);
   }
   // An allowlist, not "everything but refreshToken": a field the host record
   // gains later, secret or not, never reaches the seat's writable HOME.

package/src/lib/grant-broker-guard.js

@@ -244,9 +244,18 @@ export const withholdGrantBroker = (environment, adapter, {
   const reason = confinementReason(environment, adapter, platform);
   if (!reason) return environment;
 
-  const kept = environment.mcp.filter((server) => !isOurGrantBroker(server, { instanceUrl }));
+  // F94: the server flags a broker whose grant names this seat (the granter's
+  // own agent, with consent) so it rides a seat no sandbox confines. Delivery
+  // only; the broker checks the naming on every call. Never on native Windows,
+  // and never for an adapter not approved for the broker.
+  const rides = (server) => server?.byoNamed === true
+    && reason !== 'adapter_cannot_confine' && platform !== 'win32';
+  const isWithheld = (server) => isOurGrantBroker(server, { instanceUrl }) && !rides(server);
+  if (!environment.mcp.some(isWithheld)) return environment;
+
+  const kept = environment.mcp.filter((server) => !isWithheld(server));
   const withheld = environment.mcp
-    .filter((server) => isOurGrantBroker(server, { instanceUrl }))
+    .filter(isWithheld)
     .map((server) => (typeof server?.name === 'string' && server.name ? server.name : '(unnamed)'));
   if (typeof onRefuse === 'function') {
     onRefuse({