@skaile/workspaces 0.47.2 → 0.48.0

package/dist/{chunk-VATPY6IM.js → chunk-7KCG5LBG.js}

@@ -1,4 +1,4 @@
-import { WorkspacePlugin } from './chunk-DDSL5XUT.js';
+import { WorkspacePlugin } from './chunk-UEHPL3KU.js';
 import { WebSocketServerTransport } from './chunk-WQ7DE5UC.js';
 import { assembleSystemPrompt, buildCapabilitiesPromptSection } from './chunk-W3UDISS2.js';
 import { PROTOCOL_VERSION } from './chunk-EVZKWY5J.js';
@@ -6,8 +6,8 @@ import { EventNormalizer } from './chunk-5C3QJSOD.js';
 import { classifyClaudeSdkError } from './chunk-GAH4YRCI.js';
 import { createDriver } from './chunk-OCAQH66V.js';
 import { deployCatalogEntry, undeployCatalogEntry } from './chunk-LV2HPH3C.js';
-import { registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, ConnectorStartupError, buildSdkConnectorTools } from './chunk-GWJLWRHB.js';
-import { loadConnectorDeclarations, SecretProviderChain, PreMintedSecretProvider, InMemorySecretProvider, deriveSingleMaterializedConnectorDeclaration } from './chunk-DDR4OSSM.js';
+import { registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, ConnectorStartupError, buildSdkConnectorTools } from './chunk-2RVTJJWY.js';
+import { loadConnectorDeclarations, SecretProviderChain, PreMintedSecretProvider, InMemorySecretProvider, deriveSingleMaterializedConnectorDeclaration } from './chunk-T2CIVTTC.js';
 import { renderStimulusPrompt, buildOrchestratorPrompt } from './chunk-DEYYRFQU.js';
 import { resolveSettings, resolveApiKey, providerEnvKey } from './chunk-G3GODNHM.js';
 import { resolveRuntimeAssets } from './chunk-3VBQJZYL.js';
@@ -3930,6 +3930,7 @@ function splitConnectorsForWire(manager) {
       mounts.push({
         id: c.id,
         driver: c.driver,
+        ...c.label ? { label: c.label } : {},
         access: c.access,
         mountPath: c.mountPath,
         // A deferred (background) mount is pre-registered with its path but
@@ -3942,6 +3943,7 @@ function splitConnectorsForWire(manager) {
       connectors.push({
         id: c.id,
         driver: c.driver,
+        ...c.label ? { label: c.label } : {},
         access: c.access,
         operations: manager.getOperations(c.id).map((op) => op.name)
       });
@@ -4009,6 +4011,57 @@ function setupManagedGitconfig(projectDir, serverLog) {
     });
   }
 }
+function connectorRefreshKind(driver) {
+  return driver === "git" ? "git-mount" : null;
+}
+function buildConnectorTokenMediator(deps) {
+  return async ({ connectorId, reason, driver, providerLinkId }) => {
+    if (!deps.isConnected()) {
+      return {
+        ok: false,
+        code: "not-configured",
+        message: "standalone runner cannot mediate connector refresh"
+      };
+    }
+    const kind = connectorRefreshKind(driver);
+    if (!kind) {
+      return {
+        ok: false,
+        code: "not-configured",
+        message: `connector '${connectorId}' (driver=${driver ?? "unknown"}) has no backend refresh path`
+      };
+    }
+    if (!providerLinkId) {
+      return {
+        ok: false,
+        code: "not-configured",
+        message: `connector '${connectorId}' is missing a providerLinkId; cannot refresh`
+      };
+    }
+    try {
+      const raw = await deps.invokeRemote("host.refresh_credential", {
+        kind,
+        id: providerLinkId,
+        reason
+      });
+      if (typeof raw?.ok !== "boolean" || raw.ok && typeof raw.token !== "string") {
+        deps.log(
+          `[serve] connector refresh returned a malformed mint (id=${connectorId}, kind=${kind})`
+        );
+        return { ok: false, code: "backend-error", message: "malformed mint from host" };
+      }
+      if (!raw.ok) {
+        deps.log(
+          `[serve] connector refresh failed (id=${connectorId}, kind=${kind}, code=${raw.code})`
+        );
+      }
+      return raw;
+    } catch (err) {
+      const m = err instanceof Error ? err.message : String(err);
+      return { ok: false, code: "backend-error", message: m };
+    }
+  };
+}
 async function startAgentServer(opts) {
   const port = opts.port ?? 8080;
   const sessionId = opts.sessionId ?? process.env.SKAILE_SESSION_ID ?? "session-unknown";
@@ -4115,6 +4168,11 @@ async function startAgentServer(opts) {
       return { ok: false, code: "backend-error", message: errMsg };
     }
   }
+  const connectorTokenMediator = buildConnectorTokenMediator({
+    isConnected: () => transport.connected,
+    invokeRemote: (name, input) => capabilityRegistry.invokeRemote(name, input),
+    log
+  });
   const aiCredentialRefreshScheduler = createAiCredentialRefreshScheduler({
     refresh: async () => {
       const result = await mintAndPersistAiCredential({ reason: "refresh" });
@@ -4254,10 +4312,10 @@ async function startAgentServer(opts) {
       // registered as `mcp`-origin capabilities — works on every driver, no
       // dependence on the claude-agent-sdk `mcpServers` query option.
       capabilityRegistry,
-      // v3: pre-minted credentials replace the tokenMediator for initial mints.
-      // Refresh routes through `host.refresh_credential` (invoked from the
-      // bridge driver's onAuthError callback). The legacy `tokenMediator`
-      // wire is gone.
+      // v3: pre-minted credentials satisfy the initial mint of `auth: backend`
+      // connectors in-process; connector refresh (refresh / retry-401) now routes
+      // through `host.refresh_credential` via this mediator.
+      tokenMediator: connectorTokenMediator,
       ...preMintedSecrets ? { preMintedSecrets } : {},
       ...aiProviderConfigId ? { aiProviderConfigId } : {}
     };
@@ -4529,7 +4587,8 @@ async function startAgentServer(opts) {
     if (!resourceManager) {
       registerBuiltinConnectors();
       resourceManager = new ConnectorManager(opts.projectDir, {
-        catalogEntries: getSessionCatalogEntries(agentSession)
+        catalogEntries: getSessionCatalogEntries(agentSession),
+        tokenMediator: connectorTokenMediator
       });
       log("[serve] created ConnectorManager for flow execution (no other connectors declared)");
     }
@@ -4839,7 +4898,8 @@ async function startAgentServer(opts) {
     try {
       registerBuiltinConnectors();
       resourceManager = new ConnectorManager(opts.projectDir, {
-        catalogEntries: getSessionCatalogEntries(agentSession)
+        catalogEntries: getSessionCatalogEntries(agentSession),
+        tokenMediator: connectorTokenMediator
       });
       log("[serve] created ConnectorManager for sharedState (no connectors were declared)");
       return true;
@@ -5727,6 +5787,6 @@ function touchSession(state) {
   return { ...state, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
 }
 
-export { CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CapabilityRegistry, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, MarkdownStreamer, PreInitRingSink, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, builtinCapabilities, clearPreInitRingSink, clearSession, compileComposition, computeCapabilitySignature, createAgentSession, createSessionStimulusBus, defineCapability, deleteSession, dispatchRunnerCapabilityInvocation, emitSystemPromptComposed, ensureGitConfigInclude, extractClaudeAiOauthExpiresAt, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, installPreInitRingSink, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadSession, loadSessionById, mcpAuthSecretKey, newSession, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, resetRunnerLogStore, resolveAgentComposition, resolveAgentMixins, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveMixin, runAgentChat, saveSession, setCurrentSession, startAgentServer, touchSession, writeClaudeCodeCredentialsFile };
-//# sourceMappingURL=chunk-VATPY6IM.js.map
-//# sourceMappingURL=chunk-VATPY6IM.js.map
+export { CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CapabilityRegistry, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, MarkdownStreamer, PreInitRingSink, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildConnectorTokenMediator, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, builtinCapabilities, clearPreInitRingSink, clearSession, compileComposition, computeCapabilitySignature, connectorRefreshKind, createAgentSession, createSessionStimulusBus, defineCapability, deleteSession, dispatchRunnerCapabilityInvocation, emitSystemPromptComposed, ensureGitConfigInclude, extractClaudeAiOauthExpiresAt, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, installPreInitRingSink, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadSession, loadSessionById, mcpAuthSecretKey, newSession, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, resetRunnerLogStore, resolveAgentComposition, resolveAgentMixins, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveMixin, runAgentChat, saveSession, setCurrentSession, startAgentServer, touchSession, writeClaudeCodeCredentialsFile };
+//# sourceMappingURL=chunk-7KCG5LBG.js.map
+//# sourceMappingURL=chunk-7KCG5LBG.js.map