@skaile/workspaces 0.11.0 → 0.11.2

package/CHANGELOG.md

@@ -1,5 +1,48 @@
 # Changelog
 
+## 0.11.2
+
+### Patch Changes
+
+- 4d91d69: fix(bridge): self-heal expired Claude OAuth credentials that surface as "Not logged in"
+
+  The claude-sdk driver's credential self-heal (`onAuthError`) failed to fire in two
+  cases, leaving sessions stuck on a misleading `Not logged in · Please run /login`
+  error after the OAuth access token expired:
+  - **Classification**: the bare `Not logged in · Please run /login` string the
+    Claude Code CLI emits (no JSON body) fell through to `category: "unknown"`, so it
+    was never promoted to `AuthError` and the self-heal never triggered. It is now
+    classified as `auth`.
+  - **Retry budget**: a stale-resume retry ("No conversation found with session ID")
+    consumed the single shared retry slot, so a subsequent auth failure on the
+    fresh-session retry could not reach the self-heal branch. Each recovery path
+    (stale-resume, poisoned-transcript, auth) now owns an independent one-shot budget.
+
+  Together these let the runner re-mint the credential and continue the turn instead
+  of dead-ending. Surfaced by a prod cloud session (2026-05-21).
+
+## 0.11.1
+
+### Patch Changes
+
+- ae93713: `webdav` and `sharepoint` connectors now `chmod 0o770` on every directory
+  they `mkdir` (mount target, vfs cache, cache root) via a new local
+  `ensureDirMode()` helper. `RcloneProcessManager.spawn()` does the same on
+  the mountPoint and cacheDir it creates.
+
+  `mkdirSync(mode:)` is masked by the process umask — default 022 yields
+  mode 0750 and strips the group-write bit `fusermount3` requires on the
+  mountpoint and rclone needs on the vfs cache. Explicit `chmod` is
+  umask-immune. EPERM on chmod is swallowed: a foreign-uid pre-create is
+  recovered by the platform's agent container entrypoint (see
+  skaile-ai/platform#139), so the runner staying quiet here is intentional
+  defence in depth rather than a swallowed failure.
+
+  Fixes the production symptom where a Nextcloud-backed session failed
+  after a platform restart with `fusermount3: user has no write access to
+mountpoint /skaile/.mounts/workspace` and
+  `mkdir /var/cache/skaile/.../vfs/skaile-workspace: permission denied`.
+
 ## 0.11.0
 
 ### Minor Changes

package/dist/asset-manager/index.js

@@ -1,8 +1,8 @@
-export { AssetManager } from '../chunk-FEBLE7QX.js';
+export { AssetManager } from '../chunk-EARKGKKB.js';
 export { createScaffold, deployAll, removeAsset } from '../chunk-M2NLRGIX.js';
 export { appendHistory, clearHistory, getRecentHistory, loadHistory } from '../chunk-KTBKW2FI.js';
 import '../chunk-UQ6LFBPZ.js';
-export { listTemplates, scaffoldWorkspace, setTemplatesDir } from '../chunk-OQIBHB4F.js';
+export { listTemplates, scaffoldWorkspace, setTemplatesDir } from '../chunk-YHXBQLXX.js';
 import '../chunk-DIKFRNCS.js';
 import '../chunk-4RUVG5GX.js';
 import '../chunk-JKNWJ64A.js';

package/dist/asset-manager/scaffold.js

@@ -1,4 +1,4 @@
-export { applyBaseLayer, applyConnectorsLayer, applyContainerLayer, applyDriverTargetLayer, applyHooksLayer, applySkillsLayer, applyTemplateLayer, listTemplates, loadTemplate, resolveTemplatePath, scaffoldWorkspace, setTemplatesDir } from '../chunk-OQIBHB4F.js';
+export { applyBaseLayer, applyConnectorsLayer, applyContainerLayer, applyDriverTargetLayer, applyHooksLayer, applySkillsLayer, applyTemplateLayer, listTemplates, loadTemplate, resolveTemplatePath, scaffoldWorkspace, setTemplatesDir } from '../chunk-YHXBQLXX.js';
 export { applyAgentsLayer } from '../chunk-DIKFRNCS.js';
 import '../chunk-4RUVG5GX.js';
 import '../chunk-JKNWJ64A.js';

package/dist/base-assets/connectors/deploy.js

@@ -1,6 +1,6 @@
-export { DeployConnector, createConnector20 as createConnector } from '../../chunk-UHSC75L7.js';
+export { DeployConnector, createConnector20 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/devserver.js

@@ -1,6 +1,6 @@
-export { DevServerConnector, createConnector17 as createConnector } from '../../chunk-UHSC75L7.js';
+export { DevServerConnector, createConnector17 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/flow/adapter.js

@@ -1,6 +1,6 @@
-export { FlowAdapter, createConnector } from '../../../chunk-UHSC75L7.js';
+export { FlowAdapter, createConnector } from '../../../chunk-EAJKY27M.js';
 import '../../../chunk-W75ASXH4.js';
-import '../../../chunk-EBMFCF4P.js';
+import '../../../chunk-6MB7CRME.js';
 import '../../../chunk-GCRKAFH7.js';
 export { isBlocking } from '../../../chunk-ICS76R4T.js';
 import '../../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/flow/run-flow.js

@@ -1,9 +1,9 @@
-export { resumeFlow, runFlow } from '../../../chunk-ZLLUIIZR.js';
+export { resumeFlow, runFlow } from '../../../chunk-DDVKNST3.js';
 import '../../../chunk-GCJXPUHG.js';
 import '../../../chunk-IPUYL6TD.js';
-import '../../../chunk-UHSC75L7.js';
+import '../../../chunk-EAJKY27M.js';
 import '../../../chunk-W75ASXH4.js';
-import '../../../chunk-EBMFCF4P.js';
+import '../../../chunk-6MB7CRME.js';
 import '../../../chunk-GCRKAFH7.js';
 import '../../../chunk-ICS76R4T.js';
 import '../../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/flow.js

@@ -1,6 +1,6 @@
-export { FlowAdapter, createConnector } from '../../chunk-UHSC75L7.js';
+export { FlowAdapter, createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/git.js

@@ -1,6 +1,6 @@
-export { GitConnector, createConnector2 as createConnector } from '../../chunk-UHSC75L7.js';
+export { GitConnector, createConnector2 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/gmail.js

@@ -1,6 +1,6 @@
-export { GmailConnector, createConnector15 as createConnector } from '../../chunk-UHSC75L7.js';
+export { GmailConnector, createConnector15 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/local.js

@@ -1,6 +1,6 @@
-export { LocalConnector, createConnector3 as createConnector } from '../../chunk-UHSC75L7.js';
+export { LocalConnector, createConnector3 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/mattermost.js

@@ -1,6 +1,6 @@
-export { MattermostConnector, createConnector16 as createConnector } from '../../chunk-UHSC75L7.js';
+export { MattermostConnector, createConnector16 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/memory.js

@@ -1,6 +1,6 @@
-export { MemoryConnector, createConnector7 as createConnector } from '../../chunk-UHSC75L7.js';
+export { MemoryConnector, createConnector7 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/minio.js

@@ -1,6 +1,6 @@
-export { MinIOConnector, createConnector11 as createConnector } from '../../chunk-UHSC75L7.js';
+export { MinIOConnector, createConnector11 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/postgres.js

@@ -1,6 +1,6 @@
-export { PostgresConnector, createConnector8 as createConnector } from '../../chunk-UHSC75L7.js';
+export { PostgresConnector, createConnector8 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/redis.js

@@ -1,6 +1,6 @@
-export { RedisConnector, createConnector9 as createConnector } from '../../chunk-UHSC75L7.js';
+export { RedisConnector, createConnector9 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/s3.js

@@ -1,6 +1,6 @@
-export { S3Connector, createConnector4 as createConnector } from '../../chunk-UHSC75L7.js';
+export { S3Connector, createConnector4 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/sharepoint/driver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"driver.d.ts","sourceRoot":"","sources":["../../../../base-assets/connectors/sharepoint/driver.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,cAAc,EAIf,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,iBAAiB,EAIlB,MAAM,+BAA+B,CAAC;AAyEvC;;;;;;GAMG;AACH,qBAAa,mBAAoB,SAAQ,iBAAiB;IACxD,QAAQ,CAAC,IAAI,gBAAgB;IAE7B,OAAO,CAAC,MAAM,CAA8B;IAE5C,QAAQ,CAAC,UAAU,EAAE,cAAc,CAIjC;IAEI,OAAO,CAAC,WAAW,EAAE,oBAAoB,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAkGzF,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;YAM1C,KAAK;IAwBJ,WAAW,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAOjE,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAMpF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,mBAAmB,CAErD"}
+{"version":3,"file":"driver.d.ts","sourceRoot":"","sources":["../../../../base-assets/connectors/sharepoint/driver.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,cAAc,EAIf,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,iBAAiB,EAKlB,MAAM,+BAA+B,CAAC;AAyEvC;;;;;;GAMG;AACH,qBAAa,mBAAoB,SAAQ,iBAAiB;IACxD,QAAQ,CAAC,IAAI,gBAAgB;IAE7B,OAAO,CAAC,MAAM,CAA8B;IAE5C,QAAQ,CAAC,UAAU,EAAE,cAAc,CAIjC;IAEI,OAAO,CAAC,WAAW,EAAE,oBAAoB,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAoGzF,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;YAM1C,KAAK;IAwBJ,WAAW,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAOjE,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAMpF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,mBAAmB,CAErD"}

package/dist/base-assets/connectors/sharepoint.js

@@ -1,6 +1,6 @@
-export { SharePointConnector, createConnector6 as createConnector } from '../../chunk-UHSC75L7.js';
+export { SharePointConnector, createConnector6 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/sqlite.js

@@ -1,6 +1,6 @@
-export { SQLiteConnector, createConnector10 as createConnector } from '../../chunk-UHSC75L7.js';
+export { SQLiteConnector, createConnector10 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/static-server.js

@@ -1,6 +1,6 @@
-export { StaticServerConnector, createConnector18 as createConnector } from '../../chunk-UHSC75L7.js';
+export { StaticServerConnector, createConnector18 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/tunnel.js

@@ -1,6 +1,6 @@
-export { TunnelConnector, createConnector19 as createConnector } from '../../chunk-UHSC75L7.js';
+export { TunnelConnector, createConnector19 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/webdav/driver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"driver.d.ts","sourceRoot":"","sources":["../../../../base-assets/connectors/webdav/driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,cAAc,EAIf,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,iBAAiB,EAKlB,MAAM,+BAA+B,CAAC;AA6EvC;;;;;;GAMG;AACH,qBAAa,eAAgB,SAAQ,iBAAiB;IACpD,QAAQ,CAAC,IAAI,YAAY;IAEzB,OAAO,CAAC,MAAM,CAA8B;IAE5C,QAAQ,CAAC,UAAU,EAAE,cAAc,CAIjC;IAEI,OAAO,CAAC,WAAW,EAAE,oBAAoB,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAkGzF,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;YAM1C,KAAK;IAwBJ,WAAW,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAOjE,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAMpF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,eAAe,CAEjD"}
+{"version":3,"file":"driver.d.ts","sourceRoot":"","sources":["../../../../base-assets/connectors/webdav/driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,cAAc,EAIf,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,iBAAiB,EAMlB,MAAM,+BAA+B,CAAC;AA6EvC;;;;;;GAMG;AACH,qBAAa,eAAgB,SAAQ,iBAAiB;IACpD,QAAQ,CAAC,IAAI,YAAY;IAEzB,OAAO,CAAC,MAAM,CAA8B;IAE5C,QAAQ,CAAC,UAAU,EAAE,cAAc,CAIjC;IAEI,OAAO,CAAC,WAAW,EAAE,oBAAoB,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAoGzF,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;YAM1C,KAAK;IAwBJ,WAAW,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAOjE,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAMpF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,eAAe,CAEjD"}

package/dist/base-assets/connectors/webdav.js

@@ -1,6 +1,6 @@
-export { WebDAVConnector, createConnector5 as createConnector } from '../../chunk-UHSC75L7.js';
+export { WebDAVConnector, createConnector5 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/xstate-store.js

@@ -1,6 +1,6 @@
-export { XStateStoreConnector, createConnector13 as createConnector } from '../../chunk-UHSC75L7.js';
+export { XStateStoreConnector, createConnector13 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/xstate.js

@@ -1,6 +1,6 @@
-export { XStateConnector, createConnector12 as createConnector } from '../../chunk-UHSC75L7.js';
+export { XStateConnector, createConnector12 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/base-assets/connectors/yjs.js

@@ -1,6 +1,6 @@
-export { YjsConnector, createConnector14 as createConnector } from '../../chunk-UHSC75L7.js';
+export { YjsConnector, createConnector14 as createConnector } from '../../chunk-EAJKY27M.js';
 import '../../chunk-W75ASXH4.js';
-import '../../chunk-EBMFCF4P.js';
+import '../../chunk-6MB7CRME.js';
 import '../../chunk-GCRKAFH7.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';

package/dist/bridge/drivers/claude-sdk.js

@@ -1,7 +1,7 @@
-import { classifyClaudeSdkError, AuthError } from '../../chunk-EWP5HZBV.js';
+import { AuthError, classifyClaudeSdkError } from '../../chunk-DQWREFRQ.js';
 import { fetchProviderModels } from '../../chunk-KOVLSBXK.js';
 import { dispatchCapability } from '../../chunk-RRVQAE5D.js';
-import { registerDriver, DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-YOFKTALB.js';
+import { registerDriver, DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-4ACWI5YT.js';
 import '../../chunk-24UIWON4.js';
 import '../../chunk-NSBPE2FW.js';
 import { spawnSync } from 'child_process';
@@ -215,6 +215,9 @@ if (typeof globalThis.require === "undefined") {
   } catch {
   }
 }
+function freshRetryBudget() {
+  return { staleResume: false, poison: false, auth: false };
+}
 var ClaudeSdkDriver = class extends AgentDriver {
   driverInfo = {
     id: "claude-sdk",
@@ -238,16 +241,15 @@ var ClaudeSdkDriver = class extends AgentDriver {
   /** Guards against duplicate agent_end emissions per turn. */
   turnCompleted = false;
   /**
-   * Mirror of the `_retryCount` argument of the in-flight {@link prompt} call.
-   * Read by {@link failTurn} to decide whether to defer the `agent-event:
-   * error` emission for a self-healable auth error. `0` means "first
-   * attempt"; `prompt()` increments to `1` before recursing on its
-   * `onAuthError` self-heal branch.
+   * Mirror of the in-flight {@link prompt} call's auth retry budget: `false`
+   * while the `onAuthError` self-heal is still available, `true` once it has
+   * been spent. Read by {@link failTurn} to decide whether to defer the
+   * `agent-event: error` emission for a self-healable auth error.
    *
    * Set unconditionally at the top of every {@link prompt} invocation; never
    * reset elsewhere — the next call's set is the only legitimate transition.
    */
-  currentRetryCount = 0;
+  authSelfHealUsed = false;
   /** Tracks whether a session has been started (for continue: true). */
   hasSession = false;
   /** Session ID from the SDK — used for streamInput messages. */
@@ -323,11 +325,12 @@ var ClaudeSdkDriver = class extends AgentDriver {
    * "No conversation found with session ID …" — a recoverable stale-resume error that
    * occurs after a container crash that prevented the SDK from flushing its session file.
    */
-  async prompt(message, _retryCount = 0) {
-    this.currentRetryCount = _retryCount;
+  async prompt(message, _budget = freshRetryBudget()) {
+    this.authSelfHealUsed = _budget.auth;
     if (!this.sdk) await this.start();
     let retrying = false;
-    if (_retryCount === 0) this._lastTokens = null;
+    const isFirstAttempt = !_budget.staleResume && !_budget.poison && !_budget.auth;
+    if (isFirstAttempt) this._lastTokens = null;
     this.running = true;
     this.prevText = "";
     this.turnCompleted = false;
@@ -352,7 +355,7 @@ var ClaudeSdkDriver = class extends AgentDriver {
       await turnPromise;
     } catch (err) {
       const errMsg = err instanceof Error ? err.message : String(err);
-      const isStaleResume = _retryCount === 0 && /No conversation found with session ID/i.test(errMsg);
+      const isStaleResume = !_budget.staleResume && /No conversation found with session ID/i.test(errMsg);
       if (isStaleResume) {
         const staleId = this.config.resumeSessionId || this.sessionId || "unknown";
         this.log.warn("stale Claude Code session, retrying with a fresh session", { staleId });
@@ -374,9 +377,9 @@ var ClaudeSdkDriver = class extends AgentDriver {
         this.turnReject = null;
         this.running = false;
         retrying = true;
-        return this.prompt(message, _retryCount + 1);
+        return this.prompt(message, { ..._budget, staleResume: true });
       }
-      const isPoisonedHistory = _retryCount === 0 && /invalid_request_error/i.test(errMsg) && /media[_ ]?type|could not process image|image exceeds|cache_control/i.test(errMsg);
+      const isPoisonedHistory = !_budget.poison && /invalid_request_error/i.test(errMsg) && /media[_ ]?type|could not process image|image exceeds|cache_control/i.test(errMsg);
       const poisonSessionId = this.config.resumeSessionId || this.sessionId;
       if (isPoisonedHistory && poisonSessionId) {
         const scrub = scrubPoisonedTranscript({
@@ -416,14 +419,14 @@ var ClaudeSdkDriver = class extends AgentDriver {
           this.turnReject = null;
           this.running = false;
           retrying = true;
-          return this.prompt(message, _retryCount + 1);
+          return this.prompt(message, { ..._budget, poison: true });
         }
         this.log.warn("poisoned-transcript error but scrub found nothing to repair", {
           sessionId: poisonSessionId,
           filePath: scrub.filePath
         });
       }
-      const isAuthError = err instanceof AuthError && _retryCount === 0;
+      const isAuthError = err instanceof AuthError && !_budget.auth;
       if (isAuthError && this.config.onAuthError) {
         this.log.info("auth error caught; invoking onAuthError refresh callback");
         let refreshed = false;
@@ -449,7 +452,7 @@ var ClaudeSdkDriver = class extends AgentDriver {
           this.turnReject = null;
           this.running = false;
           retrying = true;
-          return this.prompt(message, _retryCount + 1);
+          return this.prompt(message, { ..._budget, auth: true });
         }
         try {
           this.emit("agent-event", {
@@ -785,16 +788,16 @@ var ClaudeSdkDriver = class extends AgentDriver {
    * caller transitions even if the listener chain misbehaves; the emit is
    * wrapped in try/catch so a listener failure cannot leak out.
    *
-   * Self-heal deferral: when the failure is an {@link AuthError} on the
-   * first attempt (`currentRetryCount === 0`) AND the caller wired an
-   * `onAuthError` callback, the downstream `agent-event: error` emission
-   * is deferred. The rejected turn promise still travels to {@link prompt}'s
-   * catch block where the self-heal runs; if the retry succeeds the user
-   * never sees a 401, if the retry fails the second `failTurn` call (now
-   * with `currentRetryCount === 1`) emits the error normally. This stops
-   * the historical "401 flashes in the UI even though self-heal worked"
-   * misbehaviour where the bridge emitted the error event before the
-   * retry decision was known.
+   * Self-heal deferral: when the failure is an {@link AuthError} and the auth
+   * self-heal budget is still available (`!authSelfHealUsed`) AND the caller
+   * wired an `onAuthError` callback, the downstream `agent-event: error`
+   * emission is deferred. The rejected turn promise still travels to
+   * {@link prompt}'s catch block where the self-heal runs; if the retry
+   * succeeds the user never sees a 401, if the retry fails the second
+   * `failTurn` call (now with `authSelfHealUsed === true`) emits the error
+   * normally. This stops the historical "401 flashes in the UI even though
+   * self-heal worked" misbehaviour where the bridge emitted the error event
+   * before the retry decision was known.
    *
    * Spec: `_devlog/specs/2026-05-07-unified-credential-mediation.md`
    * § "Runner-side handling on 401" (the AI 401 mediation path that
@@ -807,7 +810,7 @@ var ClaudeSdkDriver = class extends AgentDriver {
       this.turnReject = null;
     }
     this.turnCompleted = true;
-    const willSelfHeal = err instanceof AuthError && this.currentRetryCount === 0 && this.config.onAuthError != null;
+    const willSelfHeal = err instanceof AuthError && !this.authSelfHealUsed && this.config.onAuthError != null;
     if (willSelfHeal) {
       this.log.info("deferring auth-error event; self-heal will attempt refresh");
       return;