@skaile/workspaces 0.25.0 → 0.27.0

package/dist/{chunk-BJWUSHC4.js → chunk-MZDXEFXF.js}

@@ -1,26 +1,26 @@
-import { WorkspacePlugin } from './chunk-4QVFQEY2.js';
+import { WorkspacePlugin } from './chunk-UAW7VRAL.js';
 import { WebSocketServerTransport } from './chunk-WQ7DE5UC.js';
 import { assembleSystemPrompt, buildCapabilitiesPromptSection } from './chunk-W3UDISS2.js';
 import { PROTOCOL_VERSION } from './chunk-TDSRLMDB.js';
-import { EventNormalizer } from './chunk-M5TE6YI5.js';
-import { classifyClaudeSdkError } from './chunk-DQWREFRQ.js';
-import { createDriver } from './chunk-6VTG73UY.js';
+import { EventNormalizer } from './chunk-AKSR434V.js';
+import { classifyClaudeSdkError } from './chunk-PAYAFNXG.js';
+import { createDriver } from './chunk-ZEKWHJBB.js';
 import { deployCatalogEntry, undeployCatalogEntry } from './chunk-LV2HPH3C.js';
-import { registerBuiltinConnectors, findMissingPackages, installNpmPackages, ConnectorManager, ConnectorStartupError, buildConnectorPromptSection, buildSdkConnectorTools } from './chunk-XMP6XTMF.js';
-import { loadConnectorDeclarations, PreMintedSecretProvider, InMemorySecretProvider } from './chunk-SETTLPBD.js';
-import { renderStimulusPrompt, buildOrchestratorPrompt } from './chunk-GZWJGNNN.js';
-import { resolveSettings, resolveApiKey, providerEnvKey } from './chunk-XVL22AWE.js';
+import { registerBuiltinConnectors, findMissingPackages, installNpmPackages, ConnectorManager, ConnectorStartupError, buildConnectorPromptSection, buildSdkConnectorTools } from './chunk-XHBPQ7QP.js';
+import { loadConnectorDeclarations, PreMintedSecretProvider, InMemorySecretProvider } from './chunk-DGM74UP4.js';
+import { renderStimulusPrompt, buildOrchestratorPrompt } from './chunk-DEYYRFQU.js';
+import { resolveSettings, resolveApiKey, providerEnvKey } from './chunk-M4KLIEIJ.js';
+import { resolveRuntimeAssets } from './chunk-FWHOU3CX.js';
+import { resolveSkWorkspaceConfig, resolveAgentDir, stageMaterializedSkills, loadMcpServerDeclarations, COMPACTION_DEFAULTS, validateAssetRecipeAttr } from './chunk-3QQSSRYN.js';
+import { parseAssetRef } from './chunk-IEJ5IOC3.js';
 import { resolveDriverPaths } from './chunk-K5GBV4SA.js';
-import { resolveRuntimeAssets } from './chunk-UD4ZLXGS.js';
-import { resolveSkWorkspaceConfig, resolveAgentDir, stageMaterializedSkills, loadMcpServerDeclarations, COMPACTION_DEFAULTS, validateAssetRecipeAttr } from './chunk-3QTZWPGH.js';
-import { parseAssetRef } from './chunk-WIAHJOMG.js';
 import { getLogStore, resolveLogStoreConfig, createLogStoreFromConfig, OnLogBridgeSink, WsLogSink, registerLogStore, resetLogStore, createLogger } from './chunk-24UIWON4.js';
 import { __require } from './chunk-NSBPE2FW.js';
 import pc from 'picocolors';
 import { Marked } from 'marked';
 import { markedTerminal } from 'marked-terminal';
 import { readdirSync, existsSync, readFileSync, unlinkSync, mkdirSync, writeFileSync, statSync, watch, openSync, readSync, closeSync } from 'fs';
-import path4, { join, resolve, dirname, basename, relative } from 'path';
+import path4, { join, resolve, relative, sep, isAbsolute, dirname, basename } from 'path';
 import { homedir } from 'os';
 import * as z5 from 'zod';
 import { z } from 'zod';
@@ -1660,7 +1660,8 @@ function handleMountResourceRequest(command, manager, emit) {
       throw new Error(`Connector "${mountId}" has no projected mount directory`);
     }
     const targetPath = reqPath ? resolve(mountPath, reqPath) : mountPath;
-    if (!targetPath.startsWith(mountPath)) {
+    const rel = relative(mountPath, targetPath);
+    if (rel === ".." || rel.startsWith(`..${sep}`) || isAbsolute(rel)) {
       throw new Error("Path traversal outside mount");
     }
     let data;
@@ -1930,7 +1931,7 @@ var CapabilityRegistry = class {
         `Capability '${name}' invoked remotely but no remote invoker is wired. Call CapabilityRegistry.setRemoteInvoker(...) before dispatch.`
       );
     }
-    return this.remoteInvoker(name, input);
+    return this.remoteInvoker(name, input, this.byName.get(name)?.callTimeoutMs);
   }
   /**
    * Register a capability. Validates that the registering `source` is
@@ -2899,7 +2900,7 @@ var FRAMEWORK_PACKAGES = [
   "@skaile/workspaces/bridge",
   "@skaile/workspaces/core",
   "@skaile/workspaces/types",
-  "@skaile/workspaces/base-assets",
+  "@skaile/workspaces/factory-assets",
   "@skaile/workspaces/connectors",
   "@skaile/workspaces/resolver",
   "@skaile/workspaces/transport",
@@ -3051,7 +3052,7 @@ async function startAgentServer(opts) {
   );
   bootstrapCapabilityRegistry(capabilityRegistry);
   const pendingCapabilityCalls = /* @__PURE__ */ new Map();
-  const remoteCapabilityInvoker = (name, input) => {
+  const remoteCapabilityInvoker = (name, input, timeoutMs) => {
     const callId = typeof crypto?.randomUUID === "function" ? crypto.randomUUID() : `rcap-${Date.now()}-${Math.floor(Math.random() * 1e9)}`;
     return new Promise((resolve3, reject) => {
       if (!transport.connected) {
@@ -3061,7 +3062,7 @@ async function startAgentServer(opts) {
       const timer = setTimeout(() => {
         pendingCapabilityCalls.delete(callId);
         reject(new Error(`Remote capability ${name} (callId=${callId}) timed out`));
-      }, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS);
+      }, timeoutMs ?? DEFAULT_CAPABILITY_CALL_TIMEOUT_MS);
       pendingCapabilityCalls.set(callId, { resolve: resolve3, reject, timer });
       transport.send({
         type: "capability_invoked",
@@ -3264,7 +3265,16 @@ async function startAgentServer(opts) {
     const { skillsDir } = resolveDriverPaths({
       driver: opts.driver ?? wsConfig.agent_config?.default?.driver ?? "claude-sdk"
     });
-    const stagedSkills = stageMaterializedSkills(opts.projectDir, skillsDir);
+    const strict = process.env.SKAILE_STRICT_YAML === "true";
+    const declared = strict ? (wsConfig.dependencies ?? []).flatMap((dep) => {
+      try {
+        const ref = parseAssetRef(dep);
+        return ref.kind === "skill" ? [ref.name] : [];
+      } catch {
+        return [];
+      }
+    }) : [];
+    const stagedSkills = stageMaterializedSkills(opts.projectDir, skillsDir, { strict, declared });
     if (stagedSkills.length > 0) {
       log(
         `[serve] staged ${stagedSkills.length} materialized skill(s): ${stagedSkills.join(", ")}`
@@ -4510,5 +4520,5 @@ function touchSession(state) {
 }
 
 export { CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CapabilityRegistry, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, MarkdownStreamer, PreInitRingSink, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildContextSection, buildEnvironmentSection, builtinCapabilities, clearPreInitRingSink, clearSession, compileComposition, computeCapabilitySignature, createAgentSession, createSessionStimulusBus, defineCapability, deleteSession, emitSystemPromptComposed, ensureGitConfigInclude, extractClaudeAiOauthExpiresAt, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, installPreInitRingSink, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadSession, loadSessionById, newSession, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, resetRunnerLogStore, resolveAgentComposition, resolveAgentMixins, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveMixin, runAgentChat, saveSession, setCurrentSession, startAgentServer, touchSession, writeClaudeCodeCredentialsFile };
-//# sourceMappingURL=chunk-BJWUSHC4.js.map
-//# sourceMappingURL=chunk-BJWUSHC4.js.map
+//# sourceMappingURL=chunk-MZDXEFXF.js.map
+//# sourceMappingURL=chunk-MZDXEFXF.js.map