@skaile/workspaces 0.47.3 → 0.48.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.48.0
+
+### Minor Changes
+
+- [#230](https://github.com/skaile-ai/workspaces/pull/230) [`334bdc8`](https://github.com/skaile-ai/workspaces/commit/334bdc83ae000c3c6c9ec9bc0d99a32687701d12) Thanks [@peteralbert](https://github.com/peteralbert)! - Runner: wire a live connector token-refresh mediator so a backend-auth git mount's token rotates via `host.refresh_credential` (passing the provider link id) instead of failing `not-configured`. Previously the runner pre-minted the token once at wake and never supplied the refresh mediator, so the agent's `git push` 401'd ~1h after each wake.
+
 ## 0.47.3
 
 ### Patch Changes

package/dist/asset-manager/index.js

@@ -1,4 +1,4 @@
-export { AssetManager, MissingManifestError, NON_DEPLOYABLE_KINDS, parseCanonicalLockKey } from '../chunk-4Y2WPHUE.js';
+export { AssetManager, MissingManifestError, NON_DEPLOYABLE_KINDS, parseCanonicalLockKey } from '../chunk-7UYT3SNF.js';
 export { createScaffold, deployAll, installAgent, removeAsset } from '../chunk-4VPRAG35.js';
 import '../chunk-G3GODNHM.js';
 import '../chunk-ZAP2BDHG.js';

package/dist/{chunk-ZA3F3A76.js → chunk-2RVTJJWY.js}

@@ -6003,7 +6003,11 @@ var ConnectorManager = class {
   /**
    * Wrap the user-supplied `TokenMediator` so `reason: 'initial'` calls for an
    * `auth: backend` connector first consult the pre-minted credentials. Falls
-   * back to the original mediator for refresh / retry-401 paths.
+   * back to the original mediator for refresh / retry-401 paths. On that
+   * fall-through it attaches the connector's `driver` + `providerLinkId` taken
+   * from the `declaration` (authoritative routing — a connector cannot override
+   * them per call) so the runner mediator can pick the platform refresh `kind`
+   * and `id`.
    *
    * Namespace fallback: when no `connector:<id>` pre-mint entry exists, the
    * lookup retries under the legacy `mount:<id>` key. This is a defence-in-depth
@@ -6012,9 +6016,12 @@ var ConnectorManager = class {
    * When the fallback fires, a `warn` log signals that the platform writer is
    * filing credentials under the pre-unified namespace key.
    */
-  buildWrappedMediator() {
+  buildWrappedMediator(declaration) {
     const original = this.tokenMediator;
     const preMinted = this.preMintedSecrets;
+    const driver = declaration.driver;
+    const optionsLink = declaration.options?.providerLinkId;
+    const providerLinkId = declaration.providerLinkId ?? (typeof optionsLink === "string" ? optionsLink : void 0);
     if (!preMinted) return original;
     return async ({ connectorId, reason }) => {
       if (reason === "initial") {
@@ -6047,7 +6054,7 @@ var ConnectorManager = class {
           message: `Connector '${connectorId}' requested ${reason} token but no pre-mint is available and no runner-side mediator is wired.`
         };
       }
-      return original({ connectorId, reason });
+      return original({ connectorId, reason, driver, providerLinkId });
     };
   }
   /**
@@ -6133,7 +6140,7 @@ var ConnectorManager = class {
     const ctx = {
       secrets: this.chain ?? this.secrets,
       // Both filesystem and tool faces use this for the auth: backend initial-mint path.
-      tokenMediator: this.buildWrappedMediator(),
+      tokenMediator: this.buildWrappedMediator(declaration),
       abortSignal: this.disposeController.signal
     };
     if (this.chain && connector.describeFields && declaration.auth !== "backend") {
@@ -8775,5 +8782,5 @@ function createConnector() {
 }
 
 export { AbstractConnector, BUILTIN_CONNECTOR_CATALOG, ConnectorFieldMissingError, ConnectorManager, ConnectorStartupError, DEFAULT_REACTIVE_COOLDOWN_MS, DeployConnector, DevServerConnector, FleetHealthGate, FlowAdapter, GitConnector, GmailConnector, GoogleDriveConnector, LocalConnector, LogBuffer, ManagedGitconfigCollisionError, MattermostConnector, MemoryConnector, MinIOConnector, NOT_READY_SENTINEL, PROACTIVE_RCLONE_REFRESH_MARGIN_MS, PostgresConnector, RoMountPlaceholderBarrier, S3Connector, SQLiteConnector, SharePointConnector, StaticServerConnector, TunnelConnector, WebDAVConnector, XStateConnector, XStateStoreConnector, __test, atomicReplaceCredential, buildConnectorPromptSection, buildSdkConnectorTools, createConnector, createConnector10, createConnector11, createConnector12, createConnector13, createConnector14, createConnector15, createConnector16, createConnector17, createConnector18, createConnector19, createConnector2, createConnector3, createConnector4, createConnector5, createConnector6, createConnector7, createConnector8, createConnector9, createRcloneTokenRefresh, createWorktree, defaultMountPlaceholderBarrier, defaultSpawn, ensureFleetMounted, findGitRoot, findMissingPackages, getConnector, installNpmPackages, isFleetManaged, isPackageResolvable, listConnectors, listWorktrees, probeFleetHealth, readGitSyncStatus, registerBuiltinConnectors, removeMountBlock, renderCredentialHelperScript, tryGetConnector, worktreeRegistry, writeHelperScript, writeMountBlock };
-//# sourceMappingURL=chunk-ZA3F3A76.js.map
-//# sourceMappingURL=chunk-ZA3F3A76.js.map
+//# sourceMappingURL=chunk-2RVTJJWY.js.map
+//# sourceMappingURL=chunk-2RVTJJWY.js.map