@skaile/workspaces 1.8.1 → 1.9.1

package/dist/{chunk-VBRXFLIP.js → chunk-JCKGYBWY.js}

@@ -1231,7 +1231,6 @@ var GitConnector = class extends AbstractConnector {
   async refreshExposedCredential(connectorId, handle) {
     const s = handle.state;
     if (!s.managedGitconfig || !s.tokenMediator) return;
-    const { credentialsPath, urlPrefix } = s.managedGitconfig;
     const result = await s.tokenMediator({ connectorId, reason: "retry-401" });
     if (!result.ok) {
       this.log.warn("refresh-flag-driven mediation failed", {
@@ -1241,6 +1240,8 @@ var GitConnector = class extends AbstractConnector {
       });
       return;
     }
+    if (!s.managedGitconfig) return;
+    const { credentialsPath, urlPrefix } = s.managedGitconfig;
     atomicReplaceCredential({
       mountId: connectorId,
       urlPrefix,
@@ -6216,7 +6217,7 @@ function renderCredentialHelperScript(opts) {
   return `#!/bin/sh
 # Generated by skaile-runner -- do not edit.
 # Tier-2 git credential helper: serves the latest cached token and triggers a
-# wake-mid-401 refresh when the credentials file is older than ${triggerAgeSec}s.
+# wake-mid-401 refresh when the credentials file is empty or older than ${triggerAgeSec}s.
 # Spec: _devlog/specs/2026-05-07-unified-credential-mediation.md
 
 set -u
@@ -6235,10 +6236,6 @@ TAG='${tag}'
 # file already keys by URL prefix via the helper's gitconfig block.
 cat > /dev/null 2>&1 || true
 
-# Bail silently if the credentials file is missing or empty: git falls
-# through to the next helper or its own prompt.
-[ -s "$CRED_FILE" ] || exit 0
-
 # Cross-platform mtime in epoch seconds: GNU stat -c first (Linux), then BSD
 # stat -f (macOS), then 0 if neither is present (in which case we skip the
 # refresh-flag dance entirely and just serve what we have).
@@ -6250,12 +6247,23 @@ now=$(date +%s 2>/dev/null || echo 0)
 mtime=$(get_mtime "$CRED_FILE")
 age=$((now - mtime))
 
-if [ "$age" -gt ${triggerAgeSec} ]; then
+# Emptiness is its own trigger: a truncated file has a recent mtime, so the age
+# check alone would leave it empty forever.
+started_empty=0
+[ -s "$CRED_FILE" ] || started_empty=1
+
+if [ "$started_empty" -eq 1 ] || [ "$age" -gt ${triggerAgeSec} ]; then
   # Touch the refresh-flag (atomic open+close emits 'change' to fs.watch).
   : > "$FLAG_FILE" 2>/dev/null || true
 
   # Poll for the credentials file mtime to advance. usleep gives sub-second
-  # resolution where available; sleep 1 is the portable fallback.
+  # resolution where available; sleep 1 is the portable fallback. Resolve which
+  # once, up front, rather than probing PATH on every iteration.
+  if command -v usleep >/dev/null 2>&1; then
+    have_usleep=1
+  else
+    have_usleep=0
+  fi
   end=$((now + ${waitTimeoutSec}))
   while :; do
     cur=$(date +%s 2>/dev/null || echo 0)
@@ -6266,7 +6274,12 @@ if [ "$age" -gt ${triggerAgeSec} ]; then
     if [ "$new_mtime" -gt "$mtime" ]; then
       break
     fi
-    if command -v usleep >/dev/null 2>&1; then
+    # A same-second rewrite doesn't advance the second-resolution mtime, so an
+    # empty file that gained content must break on content, not on mtime.
+    if [ "$started_empty" -eq 1 ] && [ -s "$CRED_FILE" ]; then
+      break
+    fi
+    if [ "$have_usleep" -eq 1 ]; then
       usleep 200000
     else
       sleep 1
@@ -6549,11 +6562,6 @@ function atomicReplaceCredential(opts) {
   const lines = readCredentialLines(credentialsPath);
   const tag = credentialTag(mountId);
   const without = lines.filter((l) => !l.endsWith(tag));
-  if (without.length === lines.length) {
-    throw new Error(
-      `atomicReplaceCredential: no existing credential line for mount '${mountId}' in ${credentialsPath}`
-    );
-  }
   without.push(buildCredentialLine(urlPrefix, token, mountId));
   writeCredentialLines(credentialsPath, without);
 }
@@ -7776,5 +7784,5 @@ function createConnector() {
 }
 
 export { AbstractConnector, BUILTIN_CONNECTOR_CATALOG, BoxConnector, ConnectorFieldMissingError, ConnectorManager, ConnectorStartupError, DeployConnector, DevServerConnector, FlowAdapter, GitConnector, GmailConnector, GoogleDriveConnector, LocalConnector, LogBuffer, ManagedGitconfigCollisionError, MattermostConnector, MemoryConnector, MinIOConnector, PortPool, PostgresConnector, S3Connector, SQLiteConnector, SharePointConnector, StaticServerConnector, TunnelConnector, WebDAVConnector, XStateConnector, XStateStoreConnector, __test, atomicReplaceCredential, buildConnectorPromptSection, buildSdkConnectorTools, createConnector, createConnector10, createConnector11, createConnector12, createConnector13, createConnector14, createConnector15, createConnector16, createConnector17, createConnector18, createConnector19, createConnector2, createConnector20, createConnector3, createConnector4, createConnector5, createConnector6, createConnector7, createConnector8, createConnector9, createFsWatcher, createWorktree, defaultSpawn, ensureDirMode, ensureFleetMounted, findGitRoot, findMissingPackages, getConnector, installNpmPackages, isFleetManaged, isPackageResolvable, listConnectors, listWorktrees, readGitSyncStatus, registerBuiltinConnectors, removeMountBlock, renderCredentialHelperScript, tryGetConnector, worktreeRegistry, writeHelperScript, writeMountBlock };
-//# sourceMappingURL=chunk-VBRXFLIP.js.map
-//# sourceMappingURL=chunk-VBRXFLIP.js.map
+//# sourceMappingURL=chunk-JCKGYBWY.js.map
+//# sourceMappingURL=chunk-JCKGYBWY.js.map