@runfusion/fusion 0.56.0 → 0.56.1

package/dist/bin.js

@@ -58148,7 +58148,7 @@ ${newTask.description}
           const sourceIsLegacy = COLUMNS.includes(task.column);
           const isEvacuation = options?.recoveryRehome === true && !sourceIsLegacy && COLUMNS.includes(toColumn);
           if (!isEvacuation) {
-            const validTargets = VALID_TRANSITIONS[task.column] ?? [];
+            const validTargets = sourceIsLegacy ? VALID_TRANSITIONS[task.column] ?? [] : resolveAllowedColumns(this.resolveTaskWorkflowIrSync(id), task.column);
             if (!validTargets.includes(toColumn)) {
               throw new Error(
                 `Invalid transition: '${task.column}' \u2192 '${toColumn}'. Valid targets: ${validTargets.join(", ") || "none"}`
@@ -93702,8 +93702,7 @@ async function refreshAnthropicOAuthCredential(credential) {
       body: JSON.stringify({
         grant_type: "refresh_token",
         refresh_token: refresh,
-        client_id: ANTHROPIC_OAUTH_CLIENT_ID,
-        scope: scopes.join(" ")
+        client_id: ANTHROPIC_OAUTH_CLIENT_ID
       }),
       signal: controller.signal
     });
@@ -94125,7 +94124,14 @@ var init_auth_storage = __esm({
     ANTHROPIC_SUBSCRIPTION_PROVIDER_ID = "anthropic-subscription";
     ANTHROPIC_TOKEN_ENDPOINT = "https://platform.claude.com/v1/oauth/token";
     ANTHROPIC_OAUTH_CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
-    ANTHROPIC_DEFAULT_SCOPES = ["user:profile"];
+    ANTHROPIC_DEFAULT_SCOPES = [
+      "org:create_api_key",
+      "user:profile",
+      "user:inference",
+      "user:sessions:claude_code",
+      "user:mcp_servers",
+      "user:file_upload"
+    ];
     OAUTH_REFRESH_TIMEOUT_MS = 1e4;
     OAUTH_REFRESH_FAILURE_COOLDOWN_MS = 3e4;
   }
@@ -301167,6 +301173,36 @@ var init_register_auth_routes = __esm({
         }
         return Date.now() >= credential.expires;
       }
+      const ANTHROPIC_INFERENCE_SCOPES = /* @__PURE__ */ new Set([
+        "user:inference",
+        "user:developer",
+        "user:ccr_inference",
+        "user:voice",
+        "org:service_key_inference",
+        "workspace:developer",
+        "workspace:inference"
+      ]);
+      function isAnthropicOauthProviderId(providerId) {
+        return providerId === ANTHROPIC_OAUTH_PROVIDER_ID2 || providerId === ANTHROPIC_SUBSCRIPTION_PROVIDER_ID5;
+      }
+      function isInferenceIncapableAnthropicOauth(providerId, storage) {
+        if (!isAnthropicOauthProviderId(providerId)) {
+          return false;
+        }
+        const credential = getOauthStatusCredential(providerId, storage);
+        if (!credential) {
+          return false;
+        }
+        const rawScopes = credential.scopes;
+        if (!Array.isArray(rawScopes)) {
+          return false;
+        }
+        const scopes = rawScopes.filter((scope) => typeof scope === "string" && scope.trim().length > 0);
+        if (scopes.length === 0) {
+          return false;
+        }
+        return !scopes.some((scope) => ANTHROPIC_INFERENCE_SCOPES.has(scope));
+      }
       const loginInProgress = /* @__PURE__ */ new Map();
       const lastLoginError = /* @__PURE__ */ new Map();
       const OAUTH_SESSION_TTL_MS = 5 * 60 * 1e3;
@@ -301427,15 +301463,17 @@ var init_register_auth_routes = __esm({
               hasAuth = storage.hasAuth(storageProviderId);
               expired = hasAuth && isExpiredOauthCredential(storageProviderId, storage);
             }
+            const missingInferenceScope = hasAuth && !expired && isInferenceIncapableAnthropicOauth(storageProviderId, storage);
+            const scopeLoginError = missingInferenceScope ? "This Anthropic login is missing the model-access (inference) scope, so model calls will fail. Re-login to grant full access." : void 0;
             return {
               id: statusProvider.id,
               name: statusProvider.name,
-              authenticated: hasAuth && !expired,
+              authenticated: hasAuth && !expired && !missingInferenceScope,
               type: "oauth",
-              expired,
+              expired: expired || missingInferenceScope,
               loginInProgress: loginInProgress.has(statusProvider.id),
               requiresManualCode: getManualCodeConfig(toOauthLoginProviderId(statusProvider.id), origin) !== void 0 || void 0,
-              loginError: lastLoginError.get(statusProvider.id)
+              loginError: lastLoginError.get(statusProvider.id) ?? scopeLoginError
             };
           }));
           if (storage.getApiKeyProviders) {