@skaile/workspaces 1.9.0 → 1.10.0

package/dist/{chunk-DTZ7JUZY.js → chunk-YNEJXDCZ.js}

@@ -1,12 +1,12 @@
-import { WorkspacePlugin } from './chunk-MWZGGCMF.js';
+import { WorkspacePlugin } from './chunk-2ZP6KIIQ.js';
 import { WebSocketServerTransport } from './chunk-WQ7DE5UC.js';
 import { assembleSystemPrompt, buildCapabilitiesPromptSection } from './chunk-W3UDISS2.js';
-import { EventNormalizer } from './chunk-HKX5VSWQ.js';
+import { EventNormalizer } from './chunk-LVQO4X4U.js';
 import { SUPPORTED_CLOUDS, CLOUD_SECRET_ENV_KEYS } from './chunk-ISQWMBKD.js';
 import { classifyClaudeSdkError } from './chunk-GAH4YRCI.js';
-import { createDriver } from './chunk-TNSCHS4I.js';
+import { createDriver } from './chunk-APHTT5GE.js';
 import { deployCatalogEntry, undeployCatalogEntry } from './chunk-LV2HPH3C.js';
-import { registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, ConnectorStartupError, buildSdkConnectorTools } from './chunk-4DFBHEXQ.js';
+import { registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, ConnectorStartupError, buildSdkConnectorTools, buildSdkFlowTools } from './chunk-2257NSNY.js';
 import { loadConnectorDeclarations, SecretProviderChain, PreMintedSecretProvider, InMemorySecretProvider, resolvedConfigToDeclarations, deriveSingleMaterializedConnectorDeclaration } from './chunk-Y6FV73IH.js';
 import { renderStimulusPrompt, buildOrchestratorPrompt } from './chunk-DEYYRFQU.js';
 import { PROTOCOL_VERSION } from './chunk-XJOPAGZX.js';
@@ -3292,6 +3292,137 @@ function rewriteFileChangedPath(event, cwd, mounts) {
   }
   return event;
 }
+function parseFleetHealthBody(body) {
+  const trimmed = body.trim().toLowerCase();
+  if (trimmed === "healthy") return "healthy";
+  if (trimmed === "degraded") return "degraded";
+  return "error";
+}
+async function dispatchFleetHealthFlag(dir, fileName, manager, log) {
+  if (!manager) return;
+  const connectorId = fileName;
+  if (!connectorId || connectorId.startsWith(".")) return;
+  let verdict;
+  try {
+    verdict = parseFleetHealthBody(await readFile(join(dir, connectorId), "utf8"));
+  } catch {
+    verdict = "error";
+  }
+  try {
+    await manager.reportFleetHealth(connectorId, verdict);
+    log.debug("fleet-health flag dispatched", { connectorId, verdict });
+  } catch (err) {
+    log.warn("fleet-health flag dispatch failed", {
+      connectorId,
+      error: err instanceof Error ? err.message : String(err)
+    });
+  }
+}
+
+// runner/src/refresh-flag-dispatcher.ts
+async function dispatchRefreshToExposedGitMounts(manager, log) {
+  if (!manager) return;
+  let gitConnectors;
+  try {
+    gitConnectors = manager.listGitConnectors();
+  } catch (err) {
+    log.warn("listGitConnectors failed during refresh-flag dispatch", {
+      error: err instanceof Error ? err.message : String(err)
+    });
+    return;
+  }
+  const eligible = gitConnectors.filter(
+    (m) => m.exposeAccessToken === true && m.auth === "backend"
+  );
+  if (eligible.length === 0) {
+    log.debug("refresh-flag fired but no eligible git connectors (Tier-2 backend) found");
+    return;
+  }
+  log.info("refresh-flag fired -- dispatching backend mediation", {
+    connectorIds: eligible.map((m) => m.id)
+  });
+  await Promise.all(
+    eligible.map(async (m) => {
+      try {
+        const entry = manager.get(m.id);
+        if (typeof entry.connector.refreshExposedCredential !== "function") {
+          log.debug("connector lacks refreshExposedCredential -- skipping", {
+            connectorId: m.id
+          });
+          return;
+        }
+        await entry.connector.refreshExposedCredential(m.id, entry.handle);
+      } catch (err) {
+        log.warn("refresh-flag dispatch failed for connector", {
+          connectorId: m.id,
+          error: err instanceof Error ? err.message : String(err)
+        });
+      }
+    })
+  );
+}
+var CLAUDE_CODE_CREDENTIALS_KEY = "CLAUDE_CODE_CREDENTIALS_JSON";
+async function writeClaudeCodeCredentialsFile(home, json) {
+  const claudeDir = join(home, ".claude");
+  await mkdir(claudeDir, { recursive: true, mode: 448 });
+  const finalPath = join(claudeDir, ".credentials.json");
+  const tmpPath = `${finalPath}.tmp.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2)}`;
+  await writeFile(tmpPath, json, { mode: 384 });
+  await rename(tmpPath, finalPath);
+  return finalPath;
+}
+async function mergeAndRewriteCredentialsFile(home, accessToken, expiresAt) {
+  const credPath = join(home, ".claude", ".credentials.json");
+  let merged = {};
+  if (existsSync(credPath)) {
+    try {
+      merged = JSON.parse(readFileSync(credPath, "utf-8"));
+    } catch {
+      merged = {};
+    }
+  }
+  const oauthBlock = merged.claudeAiOauth ?? {};
+  oauthBlock.accessToken = accessToken;
+  if (expiresAt) oauthBlock.expiresAt = expiresAt;
+  merged.claudeAiOauth = oauthBlock;
+  merged.accessToken = accessToken;
+  return writeClaudeCodeCredentialsFile(home, JSON.stringify(merged));
+}
+function extractClaudeAiOauthExpiresAt(json) {
+  let parsed;
+  try {
+    parsed = JSON.parse(json);
+  } catch {
+    return null;
+  }
+  if (!parsed || typeof parsed !== "object") return null;
+  const obj = parsed;
+  const oauth = obj.claudeAiOauth;
+  const raw = oauth?.expiresAt ?? obj.expiresAt;
+  if (raw == null) return null;
+  if (typeof raw === "string") {
+    const t = Date.parse(raw);
+    return Number.isFinite(t) ? new Date(t).toISOString() : null;
+  }
+  if (typeof raw === "number" && Number.isFinite(raw)) {
+    return new Date(raw).toISOString();
+  }
+  return null;
+}
+function readCurrentClaudeAccessToken(home) {
+  const credPath = join(home, ".claude", ".credentials.json");
+  if (!existsSync(credPath)) return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync(credPath, "utf-8"));
+  } catch {
+    return null;
+  }
+  if (!parsed || typeof parsed !== "object") return null;
+  const obj = parsed;
+  const raw = obj.claudeAiOauth?.accessToken ?? obj.accessToken;
+  return typeof raw === "string" && raw.length > 0 ? raw : null;
+}
 
 // runner/src/lifecycle-handler.ts
 function buildLifecycleHandler(deps) {
@@ -3534,75 +3665,6 @@ function buildMcpRuntimeHandlers(deps) {
     }
   };
 }
-function parseFleetHealthBody(body) {
-  const trimmed = body.trim().toLowerCase();
-  if (trimmed === "healthy") return "healthy";
-  if (trimmed === "degraded") return "degraded";
-  return "error";
-}
-async function dispatchFleetHealthFlag(dir, fileName, manager, log) {
-  if (!manager) return;
-  const connectorId = fileName;
-  if (!connectorId || connectorId.startsWith(".")) return;
-  let verdict;
-  try {
-    verdict = parseFleetHealthBody(await readFile(join(dir, connectorId), "utf8"));
-  } catch {
-    verdict = "error";
-  }
-  try {
-    await manager.reportFleetHealth(connectorId, verdict);
-    log.debug("fleet-health flag dispatched", { connectorId, verdict });
-  } catch (err) {
-    log.warn("fleet-health flag dispatch failed", {
-      connectorId,
-      error: err instanceof Error ? err.message : String(err)
-    });
-  }
-}
-
-// runner/src/refresh-flag-dispatcher.ts
-async function dispatchRefreshToExposedGitMounts(manager, log) {
-  if (!manager) return;
-  let gitConnectors;
-  try {
-    gitConnectors = manager.listGitConnectors();
-  } catch (err) {
-    log.warn("listGitConnectors failed during refresh-flag dispatch", {
-      error: err instanceof Error ? err.message : String(err)
-    });
-    return;
-  }
-  const eligible = gitConnectors.filter(
-    (m) => m.exposeAccessToken === true && m.auth === "backend"
-  );
-  if (eligible.length === 0) {
-    log.debug("refresh-flag fired but no eligible git connectors (Tier-2 backend) found");
-    return;
-  }
-  log.info("refresh-flag fired -- dispatching backend mediation", {
-    connectorIds: eligible.map((m) => m.id)
-  });
-  await Promise.all(
-    eligible.map(async (m) => {
-      try {
-        const entry = manager.get(m.id);
-        if (typeof entry.connector.refreshExposedCredential !== "function") {
-          log.debug("connector lacks refreshExposedCredential -- skipping", {
-            connectorId: m.id
-          });
-          return;
-        }
-        await entry.connector.refreshExposedCredential(m.id, entry.handle);
-      } catch (err) {
-        log.warn("refresh-flag dispatch failed for connector", {
-          connectorId: m.id,
-          error: err instanceof Error ? err.message : String(err)
-        });
-      }
-    })
-  );
-}
 var RUNNER_CAP_ORIGIN = { kind: "framework" };
 function notImplemented(name) {
   return {
@@ -3823,67 +3885,68 @@ function buildRunnerCapabilities(handlers) {
     })
   ];
 }
-var CLAUDE_CODE_CREDENTIALS_KEY = "CLAUDE_CODE_CREDENTIALS_JSON";
-async function writeClaudeCodeCredentialsFile(home, json) {
-  const claudeDir = join(home, ".claude");
-  await mkdir(claudeDir, { recursive: true, mode: 448 });
-  const finalPath = join(claudeDir, ".credentials.json");
-  const tmpPath = `${finalPath}.tmp.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2)}`;
-  await writeFile(tmpPath, json, { mode: 384 });
-  await rename(tmpPath, finalPath);
-  return finalPath;
-}
-async function mergeAndRewriteCredentialsFile(home, accessToken, expiresAt) {
-  const credPath = join(home, ".claude", ".credentials.json");
-  let merged = {};
-  if (existsSync(credPath)) {
-    try {
-      merged = JSON.parse(readFileSync(credPath, "utf-8"));
-    } catch {
-      merged = {};
-    }
-  }
-  const oauthBlock = merged.claudeAiOauth ?? {};
-  oauthBlock.accessToken = accessToken;
-  if (expiresAt) oauthBlock.expiresAt = expiresAt;
-  merged.claudeAiOauth = oauthBlock;
-  merged.accessToken = accessToken;
-  return writeClaudeCodeCredentialsFile(home, JSON.stringify(merged));
-}
-function extractClaudeAiOauthExpiresAt(json) {
-  let parsed;
-  try {
-    parsed = JSON.parse(json);
-  } catch {
-    return null;
-  }
-  if (!parsed || typeof parsed !== "object") return null;
-  const obj = parsed;
-  const oauth = obj.claudeAiOauth;
-  const raw = oauth?.expiresAt ?? obj.expiresAt;
-  if (raw == null) return null;
-  if (typeof raw === "string") {
-    const t = Date.parse(raw);
-    return Number.isFinite(t) ? new Date(t).toISOString() : null;
-  }
-  if (typeof raw === "number" && Number.isFinite(raw)) {
-    return new Date(raw).toISOString();
-  }
-  return null;
-}
-function readCurrentClaudeAccessToken(home) {
-  const credPath = join(home, ".claude", ".credentials.json");
-  if (!existsSync(credPath)) return null;
-  let parsed;
-  try {
-    parsed = JSON.parse(readFileSync(credPath, "utf-8"));
-  } catch {
-    return null;
+
+// runner/src/session-capability-wiring.ts
+function wireSessionCapabilities(deps) {
+  const {
+    capabilityRegistry,
+    remoteCapabilityInvoker,
+    getResourceManager,
+    getPreMintedSecrets,
+    emitResourcesAvailable,
+    driverPicksUpToolsLive,
+    getOrCreateMcpManager,
+    getCompactionOrchestrator,
+    getProjectDir,
+    attachSkillInstance,
+    log
+  } = deps;
+  capabilityRegistry.setRemoteInvoker(remoteCapabilityInvoker);
+  const { attachConnectorInstance, ...resourceCaps } = buildSessionResourceHandlers({
+    getResourceManager,
+    getPreMintedSecrets,
+    emitResourcesAvailable,
+    log,
+    getProjectDir
+  });
+  const mcpHandlers = buildMcpRuntimeHandlers({
+    getOrCreateMcpManager,
+    getPreMintedSecrets: () => getPreMintedSecrets() ?? null,
+    driverPicksUpToolsLive,
+    emitResourcesAvailable,
+    log,
+    getProjectDir
+  });
+  const runnerCaps = buildRunnerCapabilities({
+    ...resourceCaps,
+    ...mcpHandlers,
+    // attach_instance routes by kind: skills stage-then-fast-restart,
+    // connectors materialize-then-connect; everything else stays on the
+    // MCP attach path.
+    attachInstance: async (input) => {
+      if (input.kind === "skill") {
+        return attachSkillInstance(input.name);
+      }
+      if (input.kind === "connector") {
+        return attachConnectorInstance(input.name, input.preMintedToken);
+      }
+      return mcpHandlers.attachInstance ? mcpHandlers.attachInstance(input) : {
+        ok: false,
+        code: "not_implemented",
+        message: "attach_instance handler not configured"
+      };
+    },
+    // setLogLevel left undefined (the cap self-falls-back to getLogStore);
+    // setState remains a stub (not resource hot-plug).
+    lifecycle: buildLifecycleHandler({
+      getCompactionOrchestrator,
+      getResourceManager,
+      log
+    })
+  });
+  for (const cap of runnerCaps) {
+    capabilityRegistry.register(cap, "agent");
   }
-  if (!parsed || typeof parsed !== "object") return null;
-  const obj = parsed;
-  const raw = obj.claudeAiOauth?.accessToken ?? obj.accessToken;
-  return typeof raw === "string" && raw.length > 0 ? raw : null;
 }
 
 // runner/src/session-stimulus.ts
@@ -4536,6 +4599,15 @@ async function startAgentServer(opts) {
     captureBakedMcpServers();
   }
   let resourceManager = secretsMode === "env" ? agentSession.resourceManager : null;
+  const driverPicksUpToolsLive = () => agentSession?.driverType !== "claude-sdk";
+  const emitResourcesAvailable = () => sendEvent(
+    buildResourcesAvailablePayload(
+      resourceManager,
+      agentSession?.getExternalMcpManager(),
+      driverPicksUpToolsLive(),
+      bakedMcpServerIds
+    )
+  );
   if (secretsMode === "env") {
     if (!agentSession.provider) {
       log(
@@ -4807,9 +4879,21 @@ async function startAgentServer(opts) {
         state
       });
     });
+    if ("seed" in seedOrExecution) {
+      sendEvent({
+        type: "state_changed",
+        store: `flow:${runId}`,
+        state: adapter.getExecution(handle)
+      });
+    }
+    driver.config.flowTestDriver = {
+      getState: () => adapter.getExecution(handle),
+      execute: (op, args) => adapter.executeOp(handle, op, args)
+    };
     if (agentSession?.driverType === "claude-sdk") {
       try {
         const server = await buildSdkConnectorTools(resourceManager, { z: z });
+        const flowServer = await buildSdkFlowTools(resourceManager, connectorId, { z: z });
         if (server) {
           if (driverStarted) {
             const prevSessionId = driver.runtimeSessionId;
@@ -4818,8 +4902,10 @@ async function startAgentServer(opts) {
             );
             await recreateAgentSession({ resumeSessionId: prevSessionId });
           }
-          driver.config.mcpServers = { "skaile-connectors": server };
-          log(`[serve] rebuilt MCP connector tools for flow ${connectorId}`);
+          driver.config.mcpServers = flowServer ? { "skaile-connectors": server, "skaile-flow": flowServer } : { "skaile-connectors": server };
+          log(
+            `[serve] rebuilt MCP connector tools for flow ${connectorId}` + (flowServer ? " (+ skaile-flow agent tools)" : "")
+          );
         } else {
           log(`[serve] buildSdkConnectorTools returned null for flow ${connectorId}`);
         }
@@ -5000,6 +5086,7 @@ async function startAgentServer(opts) {
       cloudSecrets,
       fallbackConnectorDeclarations
     );
+    let needsWireFallbackRecreate = false;
     if (!agentSession) {
       agentSession = await createAgentSession(sessionConfig);
       emitSystemPromptComposed(agentSession, sendEvent);
@@ -5007,72 +5094,30 @@ async function startAgentServer(opts) {
       driver = agentSession.driver;
       rebuildCompactionOrchestrator();
       registerSessionComposition(agentSession);
-      const driverPicksUpToolsLive = () => agentSession?.driverType !== "claude-sdk";
-      const emitResourcesAvailable = () => sendEvent(
-        buildResourcesAvailablePayload(
-          resourceManager,
-          agentSession?.getExternalMcpManager(),
-          driverPicksUpToolsLive(),
-          bakedMcpServerIds
-        )
-      );
       captureBakedMcpServers();
       emitResourcesAvailable();
       agentSession.startWatching();
-      capabilityRegistry.setRemoteInvoker(remoteCapabilityInvoker);
-      const { attachConnectorInstance, ...resourceCaps } = buildSessionResourceHandlers({
-        getResourceManager: () => resourceManager,
-        getPreMintedSecrets: () => preMintedSecrets,
-        emitResourcesAvailable,
-        log,
-        getProjectDir: () => opts.projectDir
-      });
-      const mcpHandlers = buildMcpRuntimeHandlers({
-        getOrCreateMcpManager: () => agentSession?.getOrCreateExternalMcpManager() ?? null,
-        getPreMintedSecrets: () => preMintedSecrets ?? null,
-        driverPicksUpToolsLive,
-        emitResourcesAvailable,
-        log,
-        getProjectDir: () => opts.projectDir
-      });
-      const runnerCaps = buildRunnerCapabilities({
-        ...resourceCaps,
-        ...mcpHandlers,
-        // attach_instance routes by kind: skills stage-then-fast-restart,
-        // connectors materialize-then-connect; everything else stays on the
-        // MCP attach path.
-        attachInstance: async (input) => {
-          if (input.kind === "skill") {
-            return attachSkillInstance(input.name);
-          }
-          if (input.kind === "connector") {
-            return attachConnectorInstance(input.name, input.preMintedToken);
-          }
-          return mcpHandlers.attachInstance ? mcpHandlers.attachInstance(input) : {
-            ok: false,
-            code: "not_implemented",
-            message: "attach_instance handler not configured"
-          };
-        },
-        // setLogLevel left undefined (the cap self-falls-back to getLogStore);
-        // setState remains a stub (not resource hot-plug).
-        lifecycle: buildLifecycleHandler({
-          getCompactionOrchestrator: () => compactionOrchestrator,
-          getResourceManager: () => resourceManager,
-          log
-        })
-      });
-      for (const cap of runnerCaps) {
-        capabilityRegistry.register(cap, "agent");
-      }
       log("[serve] session built from session_init envelope");
     } else if ((fallbackConnectorDeclarations?.length ?? 0) > 0 && !agentSession.resourceManager) {
       log(
         `[serve] session_init: recreating eagerly-built session to apply ${fallbackConnectorDeclarations.length} wire connector declaration(s) (no disk declarations)`
       );
-      return { needsWireFallbackRecreate: true };
+      needsWireFallbackRecreate = true;
     }
-    return { needsWireFallbackRecreate: false };
+    wireSessionCapabilities({
+      capabilityRegistry,
+      remoteCapabilityInvoker,
+      getResourceManager: () => resourceManager,
+      getPreMintedSecrets: () => preMintedSecrets,
+      emitResourcesAvailable,
+      driverPicksUpToolsLive,
+      getOrCreateMcpManager: () => agentSession?.getOrCreateExternalMcpManager() ?? null,
+      getCompactionOrchestrator: () => compactionOrchestrator,
+      getProjectDir: () => opts.projectDir,
+      attachSkillInstance,
+      log
+    });
+    return { needsWireFallbackRecreate };
   }
   async function recreateAgentSession(overrides) {
     const disposedManager = agentSession.resourceManager;
@@ -5534,6 +5579,16 @@ async function startAgentServer(opts) {
             runId: entry.runId,
             flowId: plan.flowDef.id
           });
+          const startStimulus = { kind: "flow_started" };
+          void getOrCreateStimulusBus().signal(entry.connectorId, {
+            promptFragment: renderStimulusPrompt(startStimulus),
+            meta: { kind: startStimulus.kind, runId: entry.runId }
+          }).catch((err) => {
+            serverLog.warn("flow_started turn failed", {
+              runId: entry.runId,
+              error: err instanceof Error ? err.message : String(err)
+            });
+          });
           return;
         }
         case "create-hydrate": {
@@ -5659,7 +5714,7 @@ async function startAgentServer(opts) {
   }
   async function handleDebug(cmd) {
     if (!await awaitSessionReadyOrFail()) return;
-    log(`[serve] debug query=${cmd.query}`);
+    serverLog.debug(`[serve] debug query=${cmd.query}`);
     let result;
     try {
       result = await computeDebugResult(cmd);
@@ -6009,5 +6064,5 @@ function touchSession(state) {
 }
 
 export { CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CapabilityRegistry, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, MarkdownStreamer, PreInitRingSink, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildConnectorTokenMediator, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, builtinCapabilities, capabilityLogInstance, clearPreInitRingSink, clearSession, compileComposition, computeCapabilitySignature, connectorRefreshKind, createAgentSession, createSessionStimulusBus, defineCapability, deleteSession, dispatchRunnerCapabilityInvocation, emitSystemPromptComposed, ensureGitConfigInclude, extractClaudeAiOauthExpiresAt, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, installPreInitRingSink, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadSession, loadSessionById, mcpAuthSecretKey, newSession, pickRepointedManager, planFlowMutate, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, resetRunnerLogStore, resolveAgentComposition, resolveAgentMixins, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveMixin, runAgentChat, saveSession, setCurrentSession, startAgentServer, touchSession, writeClaudeCodeCredentialsFile };
-//# sourceMappingURL=chunk-DTZ7JUZY.js.map
-//# sourceMappingURL=chunk-DTZ7JUZY.js.map
+//# sourceMappingURL=chunk-YNEJXDCZ.js.map
+//# sourceMappingURL=chunk-YNEJXDCZ.js.map