@skaile/workspaces 0.9.1 → 0.10.0

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 0.10.0
+
+### Minor Changes
+
+- eb14ab2: Add runtime support for agent-to-agent (session-to-session) communication:
+  - New `a2a_message` event kind in the agent event union.
+  - `SessionDispatcher.onceNextFinished` — a one-shot hook that resolves on the
+    session's next finished assistant turn, used to capture a peer's answer to a
+    synchronous `ask`.
+  - `SessionDispatcher.deliverPrompt` — delivers a turn-triggering prompt without
+    persisting it to the message store (A2A message persistence is owned by the
+    caller).
+  - Per-capability `callTimeoutMs` on the capability definition + wire format, so
+    a long-running capability call (e.g. a 5-minute `ask_session`) can exceed the
+    default capability-call timeout.
+  - `buildLinkedPeersPromptSection` — renders a `<LINKED_PEERS>` system-prompt
+    block from a session's linked peers, exported via the new
+    `@skaile/workspaces/runner/prompt-assembly` subpath.
+  - `PROTOCOL_VERSION` bumped to `3.3.0` for the additive A2A wire surface
+    (`a2a_message` event + capability `callTimeoutMs`); also backfills the
+    `3.2.0` changelog entry for the previously-undocumented resume cascade.
+
 ## 0.9.1
 
 ### Patch Changes

package/dist/base-assets/connectors/flow/run-flow.js

@@ -1,4 +1,4 @@
-export { resumeFlow, runFlow } from '../../../chunk-DTL7S57T.js';
+export { resumeFlow, runFlow } from '../../../chunk-NPNRWHCU.js';
 import '../../../chunk-GCJXPUHG.js';
 import '../../../chunk-IPUYL6TD.js';
 import '../../../chunk-EPGHAOEU.js';

package/dist/bridge/drivers/claude-sdk.js

@@ -1,7 +1,7 @@
 import { classifyClaudeSdkError, AuthError } from '../../chunk-EWP5HZBV.js';
 import { fetchProviderModels } from '../../chunk-KOVLSBXK.js';
 import { dispatchCapability } from '../../chunk-RRVQAE5D.js';
-import { registerDriver, DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-AE6GCXGL.js';
+import { registerDriver, DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-S7RACIZI.js';
 import '../../chunk-24UIWON4.js';
 import '../../chunk-NSBPE2FW.js';
 import { spawnSync } from 'child_process';
@@ -367,9 +367,8 @@ var ClaudeSdkDriver = class extends AgentDriver {
       const isPoisonedHistory = _retryCount === 0 && /invalid_request_error/i.test(errMsg) && /media[_ ]?type|could not process image|image exceeds|cache_control/i.test(errMsg);
       const poisonSessionId = this.config.resumeSessionId || this.sessionId;
       if (isPoisonedHistory && poisonSessionId) {
-        const configDir = this.config.env?.CLAUDE_CONFIG_DIR || process.env.CLAUDE_CONFIG_DIR || join(homedir(), ".claude");
         const scrub = scrubPoisonedTranscript({
-          configDir,
+          configDir: this.resolveClaudeConfigDir(),
           sessionId: poisonSessionId,
           log: this.log
         });
@@ -450,8 +449,59 @@ var ClaudeSdkDriver = class extends AgentDriver {
       }
     }
   }
+  /**
+   * Resolve the Claude Code config directory — the parent of `projects/` — from
+   * the driver config, the process environment, or the `~/.claude` default.
+   */
+  resolveClaudeConfigDir() {
+    return this.config.env?.CLAUDE_CONFIG_DIR || process.env.CLAUDE_CONFIG_DIR || join(homedir(), ".claude");
+  }
+  /**
+   * Preventively repair the on-disk SDK transcript before a resume.
+   *
+   * The reactive {@link scrubPoisonedTranscript} pass in `prompt()` only fires
+   * *after* a turn has already failed with a `400 invalid_request_error`,
+   * costing a wasted round-trip and surfacing a scary (if non-fatal) error to
+   * the user. A transcript poisoned in a prior driver lifetime — most commonly
+   * an image block whose `media_type` does not match its bytes, produced by the
+   * Claude Code `Read` tool on a PDF with embedded JPEGs (anthropics/claude-code
+   * #55338) — would otherwise 400 on the very first resumed turn.
+   *
+   * Running the same magic-byte scrub *before* handing the transcript to the
+   * SDK means a known poison class never reaches the API, so recovery is
+   * invisible. This is regex-free (unlike the reactive gate) and idempotent: a
+   * clean transcript is left byte-for-byte untouched. The reactive path remains
+   * the safety net for poison introduced mid-turn within the current lifetime.
+   */
+  preventivelyScrubTranscript() {
+    const sessionId = this.config.resumeSessionId || this.sessionId;
+    if (!sessionId) {
+      return;
+    }
+    try {
+      const scrub = scrubPoisonedTranscript({
+        configDir: this.resolveClaudeConfigDir(),
+        sessionId,
+        log: this.log
+      });
+      if (scrub.changed) {
+        this.log.warn("preventively scrubbed poisoned Claude Code transcript before resume", {
+          sessionId,
+          corrected: scrub.corrected,
+          stubbed: scrub.stubbed,
+          cacheStripped: scrub.cacheStripped
+        });
+      }
+    } catch (err) {
+      this.log.warn("preventive transcript scrub failed; continuing", {
+        sessionId,
+        error: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
   async startQuery(message) {
     this.abortController = new AbortController();
+    this.preventivelyScrubTranscript();
     const apiKey = this.config.apiKeys?.anthropic || this.config.env?.ANTHROPIC_API_KEY || process.env.ANTHROPIC_API_KEY;
     this.usingOauthCredential = !apiKey;
     const claudePath = this.findClaudeBinary();