@cotal-ai/connector-claude-code 0.70.0 → 0.71.0

package/dist/index.js

@@ -18,10 +18,13 @@ import {
 } from "@cotal-ai/core";
 
 // ../connector-core/dist/config.js
-import { DEFAULT_SERVER, DEV_OWNER, LAUNCH_MATERIAL_ENV, discardLaunchMaterial, assertLifecycleToken, assertValidChannel, channelInAllow, credsClaims, eventChannel, idFromCreds, isConcreteChannel, loadAgentFile, parseJoinLink, readLaunchMaterial, resolveReadAcl } from "@cotal-ai/core";
+import { DEFAULT_SERVER, DEV_OWNER, LAUNCH_MATERIAL_ENV as LAUNCH_MATERIAL_ENV2, discardLaunchMaterial, assertLifecycleToken, assertValidChannel, channelInAllow, credsClaims, eventChannel, idFromCreds, isConcreteChannel, loadAgentFile, parseJoinLink, resolveReadAcl } from "@cotal-ai/core";
+
+// ../connector-core/dist/session-env.js
+import { LAUNCH_MATERIAL_ENV, readLaunchMaterial } from "@cotal-ai/core/launch-material";
 
 // ../connector-core/dist/agent.js
-import { normalizeMentions, RUN_LAUNCH_DEADLINE_MS, subjectMatches, isConcreteChannel as isConcreteChannel2, assertValidChannel as assertValidChannel2, channelInAllow as channelInAllow2, resolvePeer as resolvePeerInRoster, peerLabel as peerLabel2, CotalEndpoint, BASELINE_LIFECYCLE_ENDPOINT as BASELINE_LIFECYCLE_ENDPOINT2, BIND_SPLIT_REISSUES, assertLifecycleToken as assertLifecycleToken3, EpEnvelopeError, isPublishPermissionDenied, unansweredRequest, renderLifecycleBlocked, controlReplyFrom, bearerCommandFailure, partsToText, routeToken } from "@cotal-ai/core";
+import { normalizeMentions, RUN_LAUNCH_DEADLINE_MS, subjectMatches, isConcreteChannel as isConcreteChannel2, assertValidChannel as assertValidChannel2, channelInAllow as channelInAllow2, resolvePeer as resolvePeerInRoster, peerLabel as peerLabel2, CotalEndpoint, BASELINE_LIFECYCLE_ENDPOINT as BASELINE_LIFECYCLE_ENDPOINT2, BIND_SPLIT_REISSUES, assertLifecycleToken as assertLifecycleToken3, EpEnvelopeError, isPublishPermissionDenied, unansweredRequest, renderLifecycleBlocked, controlReplyFrom, runAgentBearer, partsToText, assertValidRole } from "@cotal-ai/core";
 
 // ../connector-core/dist/framing.js
 import { peerLabel } from "@cotal-ai/core";
@@ -46,7 +49,7 @@ function controlEndpoint(space, name, token = randomBytes(32).toString("base64ur
 }
 
 // ../connector-core/dist/launch.js
-import { eventChannel as eventChannel2, LAUNCH_MATERIAL_ENV as LAUNCH_MATERIAL_ENV2, parsePrincipalKey, principalKey, writeLaunchMaterial } from "@cotal-ai/core";
+import { eventChannel as eventChannel2, LAUNCH_MATERIAL_ENV as LAUNCH_MATERIAL_ENV3, parsePrincipalKey, principalKey, writeLaunchMaterial } from "@cotal-ai/core";
 import { EVENT_CHANNEL_PREFIX, eventChannel as eventChannel3, eventChannelPrincipal, isEventChannel } from "@cotal-ai/core";
 var OS_ENV_ALLOW = [
   "PATH",
@@ -115,6 +118,11 @@ var OPERATOR_ENV_KEEP = [
   "COTAL_ORCA_BIN"
 ];
 function launchEnv(opts = {}) {
+  for (const k of opts.envAllow ?? []) {
+    const name = k.toUpperCase();
+    if (name.startsWith("COTAL_") && !OPERATOR_ENV_KEEP.some((keep) => keep === name))
+      throw new Error(`spawn.env cannot list "${k}": the launcher sets COTAL_ names for each seat, and only the machine-wide ones such as COTAL_HOME cross from the spawning process`);
+  }
   const env = {};
   const sourceKey = /* @__PURE__ */ new Map();
   for (const k of Object.keys(process.env))
@@ -175,7 +183,7 @@ function materialEnv(opts) {
     material.userAuth = opts.userAuth;
   if (Object.keys(material).length === 0)
     return {};
-  return { [LAUNCH_MATERIAL_ENV2]: writeLaunchMaterial(material) };
+  return { [LAUNCH_MATERIAL_ENV3]: writeLaunchMaterial(material) };
 }
 var ENV_REFERENCE = /\$\{([A-Za-z_][A-Za-z0-9_]*)(?::-[^}]*)?\}/g;
 function mcpServerEnvKeys(servers) {