@skaile/workspaces 0.35.0 → 0.36.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.36.0
+
+### Minor Changes
+
+- [#143](https://github.com/skaile-ai/workspaces/pull/143) [`987613d`](https://github.com/skaile-ai/workspaces/commit/987613da9a77b3a4d8ceb3e47a0763cf2806af36) Thanks [@peteralbert](https://github.com/peteralbert)! - feat: live MCP hot-plug-on-assign — new `runner.add_mcp_server` capability (connect a remote/stdio MCP server to a running session and register its `mcp__<id>__*` tools with no restart) and MCP servers are now reported in the `resources_available` event (`mcp_servers: McpServerInfo[]`) so the platform can show a truthful Live/Restart badge.
+
+### Patch Changes
+
+- [#141](https://github.com/skaile-ai/workspaces/pull/141) [`ffc110e`](https://github.com/skaile-ai/workspaces/commit/ffc110eabb97e19d8f2f76f0354fdd5108da7083) Thanks [@Frozen666](https://github.com/Frozen666)! - fix(bridge): classify a 401 that recurs after a successful credential refresh as an `account` failure, not `auth`
+
+  When Anthropic returns 401 for a non-auth reason (hidden-tier rate limit, billing block, anti-abuse throttle on OAuth tokens), the bridge refreshed the credential, retried, hit the same 401, and surfaced "Invalid authentication credentials" — a wrong, non-actionable message. The driver now downgrades a post-refresh 401 (`this.authSelfHealUsed === true`) from `auth` to a new `account` category and surfaces `AccountUnavailableError` (not an `AuthError`, so the self-heal does not loop). Applied on both the thrown-exception (`handleConsumerError`) and `is_error`-result (`handleResultErrorPayload`) paths. Adds `"account"` to `ErrorCategory` in `@skaile/workspaces/types`.
+
 ## 0.35.0
 
 ### Minor Changes

package/dist/asset-manager/index.js

@@ -1,4 +1,4 @@
-export { AssetManager, parseCanonicalLockKey } from '../chunk-7B3CL5JT.js';
+export { AssetManager, parseCanonicalLockKey } from '../chunk-ZE5WYJVU.js';
 export { createScaffold, deployAll, installAgent, removeAsset } from '../chunk-WEQN6EWW.js';
 import '../chunk-2Q6OY3SU.js';
 import '../chunk-5DPQ766L.js';

package/dist/bridge/drivers/claude-sdk.js

@@ -1,7 +1,7 @@
 import { dispatchCapability } from '../../chunk-RRVQAE5D.js';
 import { fetchProviderModels } from '../../chunk-BMQKMOQY.js';
-import { AuthError, classifyClaudeSdkError } from '../../chunk-NGJ6E344.js';
-import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-CIFTUSBV.js';
+import { AuthError, classifyClaudeSdkError, reclassifyAuthAsAccountUnavailable, AccountUnavailableError } from '../../chunk-GAH4YRCI.js';
+import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-KM6DCR7A.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';
@@ -796,16 +796,17 @@ var ClaudeSdkDriver = class extends AgentDriver {
       this.log.info("aborted");
       return;
     }
-    const detail = classifyClaudeSdkError({
+    const rawDetail = classifyClaudeSdkError({
       errors: [error.message],
       oauthCredential: this.usingOauthCredential
     });
+    const detail = rawDetail.category === "auth" && this.authSelfHealUsed ? reclassifyAuthAsAccountUnavailable(rawDetail) : rawDetail;
     this.log.error("consumer error", {
       message: error.message,
       category: detail.category,
       retryable: detail.retryable
     });
-    const surfaced = detail.category === "auth" ? new AuthError(detail) : error;
+    const surfaced = detail.category === "auth" ? new AuthError(detail) : detail.category === "account" ? new AccountUnavailableError(detail) : error;
     this.failTurn(surfaced, detail);
   }
   /**
@@ -1067,12 +1068,13 @@ var ClaudeSdkDriver = class extends AgentDriver {
    * empty errors defer to the consumer-error catch.
    */
   handleResultErrorPayload(msg, errors) {
-    const detail = classifyClaudeSdkError({
+    const rawDetail = classifyClaudeSdkError({
       errors,
       terminalReason: msg.terminal_reason,
       subtype: msg.subtype,
       oauthCredential: this.usingOauthCredential
     });
+    const detail = rawDetail.category === "auth" && this.authSelfHealUsed ? reclassifyAuthAsAccountUnavailable(rawDetail) : rawDetail;
     this.log.error("turn ended with error", {
       subtype: msg.subtype,
       terminalReason: msg.terminal_reason,
@@ -1083,6 +1085,8 @@ var ClaudeSdkDriver = class extends AgentDriver {
     const errorText = errors.join("; ") || `Agent stopped: ${msg.subtype}`;
     if (detail.category === "auth") {
       this.failTurn(new AuthError({ ...detail, message: errorText }), detail);
+    } else if (detail.category === "account") {
+      this.failTurn(new AccountUnavailableError({ ...detail, message: errorText }), detail);
     } else if (errors.length > 0) {
       this.emit("agent-event", {
         type: "error",