@skaile/workspaces 3.9.1 → 3.10.0

package/dist/{chunk-2KANBOIO.js → chunk-H6KQB6HL.js}

@@ -1,17 +1,17 @@
-import { WorkspacePlugin } from './chunk-6OVS6IAK.js';
+import { WorkspacePlugin } from './chunk-7NRZGSTY.js';
 import { assembleSystemPrompt, buildCapabilitiesPromptSection } from './chunk-W3UDISS2.js';
 import { WebSocketServerTransport } from './chunk-WQ7DE5UC.js';
-import { resolveFlowPath } from './chunk-K7W7HC3C.js';
+import { resolveFlowPath } from './chunk-SI7WZARX.js';
 import { findAiAssetsRoot, deployCatalogEntry, undeployCatalogEntry } from './chunk-GHWJHOYX.js';
-import { registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, ConnectorStartupError, buildSdkConnectorTools, driveOrchestratorTurn, SessionNodeExecutor, SessionSubpromptRunner, SessionInlineSubFlowRunner, buildSdkFlowTools } from './chunk-BO4NC4G7.js';
+import { registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, ConnectorStartupError, buildSdkConnectorTools, driveOrchestratorTurn, SessionNodeExecutor, SessionSubpromptRunner, SessionInlineSubFlowRunner, buildSdkFlowTools } from './chunk-GE3EDS2M.js';
 import { loadConnectorDeclarations, SecretProviderChain, PreMintedSecretProvider, InMemorySecretProvider, resolvedConfigToDeclarations, isKnownSecretRef, deriveSingleMaterializedConnectorDeclaration } from './chunk-3UU3D2Q3.js';
-import { EventNormalizer } from './chunk-32MHUAED.js';
+import { EventNormalizer } from './chunk-QRL23WVA.js';
 import { SUPPORTED_CLOUDS, probeResumeTranscript, CLOUD_SECRET_ENV_KEYS } from './chunk-RUFTB7QN.js';
 import { classifyClaudeSdkError } from './chunk-GAH4YRCI.js';
-import { createDriver } from './chunk-BIA7TJWH.js';
+import { createDriver } from './chunk-OT6V4IE7.js';
 import { loadFlow } from './chunk-OYZIURPH.js';
 import { parseFlowDefinition } from './chunk-HY6CIKFH.js';
-import { renderStimulusPrompt } from './chunk-HGFKNJA5.js';
+import { renderStimulusPrompt } from './chunk-2D5BYAL6.js';
 import { PROTOCOL_VERSION } from './chunk-2KBA5OO2.js';
 import { resolveSettings, resolveApiKey, providerEnvKey } from './chunk-AZPXCHDK.js';
 import { resolveDriverPaths } from './chunk-K5GBV4SA.js';
@@ -3646,6 +3646,28 @@ async function writeClaudeCodeCredentialsFile(home, json) {
   await rename(tmpPath, finalPath);
   return finalPath;
 }
+async function ensureClaudeSettingsDisablesConnectors(home) {
+  const claudeDir = join(home, ".claude");
+  await mkdir(claudeDir, { recursive: true, mode: 448 });
+  const finalPath = join(claudeDir, "settings.json");
+  let settings = {};
+  try {
+    const parsed = JSON.parse(await readFile(finalPath, "utf-8"));
+    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+      settings = parsed;
+    }
+  } catch (err) {
+    const isMissing = err.code === "ENOENT";
+    if (!isMissing && !(err instanceof SyntaxError)) throw err;
+  }
+  if (settings.disableClaudeAiConnectors === true) return finalPath;
+  settings.disableClaudeAiConnectors = true;
+  const tmpPath = `${finalPath}.tmp.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2)}`;
+  await writeFile(tmpPath, `${JSON.stringify(settings, null, 2)}
+`, { mode: 384 });
+  await rename(tmpPath, finalPath);
+  return finalPath;
+}
 async function mergeAndRewriteCredentialsFile(home, accessToken, expiresAt) {
   const credPath = join(home, ".claude", ".credentials.json");
   let merged = {};
@@ -4454,6 +4476,20 @@ async function buildStoreSnapshotReplay(manager, activeFlows) {
   }
   return events;
 }
+async function guardClaudeAiConnectors(home, serverLog) {
+  try {
+    const path5 = await ensureClaudeSettingsDisablesConnectors(home);
+    serverLog.info("claude.ai connectors disabled in user settings", { path: path5 });
+  } catch (err) {
+    serverLog.warn(
+      "failed to disable claude.ai connectors in user settings \u2014 relying on env only",
+      {
+        home,
+        error: err instanceof Error ? err.message : String(err)
+      }
+    );
+  }
+}
 function ensureGitConfigInclude(managedGitconfigPath) {
   const home = process.env.HOME ?? homedir();
   if (!home) return;
@@ -4877,14 +4913,19 @@ async function executeConnectorMutate(cmd, deps) {
         );
         let appliedAny = false;
         const applied = [];
+        const appliedNodeIds = /* @__PURE__ */ new Set();
         for (const decision of toApply) {
           const { op, payload: opPayload } = pendingDecisionOp(decision);
           try {
             await deps.executeOp(entry.connectorId, op, opPayload);
             applied.push(decision.nodeId);
+            appliedNodeIds.add(decision.nodeId);
             appliedAny = true;
           } catch (err) {
-            reconciled.skipped.push({ nodeId: decision.nodeId, reason: "not_parked" });
+            reconciled.skipped.push({
+              nodeId: decision.nodeId,
+              reason: appliedNodeIds.has(decision.nodeId) ? "already_decided" : "payload_invalid"
+            });
             deps.log.warn("flow hydrate reconciliation refused", {
               nodeId: decision.nodeId,
               op,
@@ -5083,6 +5124,7 @@ async function startAgentServer(opts) {
         return result ?? { ok: false, code: "backend-error", message: "no result from host" };
       }
       await mergeAndRewriteCredentialsFile(home, result.token, result.expiresAt ?? null);
+      await guardClaudeAiConnectors(home, serverLog);
       aiCredentialRefreshScheduler.schedule(result.expiresAt ?? null);
       return result;
     } catch (err) {
@@ -5930,6 +5972,7 @@ async function startAgentServer(opts) {
             log(
               `[serve] wrote Claude Code credentials file to ${home}/.claude/.credentials.json (mode 0600)`
             );
+            await guardClaudeAiConnectors(home, serverLog);
           } catch (err) {
             const errMsg = err instanceof Error ? err.message : String(err);
             log(`[serve] failed to write Claude Code credentials file: ${errMsg}`);
@@ -6975,6 +7018,6 @@ function touchSession(state) {
   return { ...state, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
 }
 
-export { CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CapabilityRegistry, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, DEFAULT_FLOW_MUTATE_CONNECTOR_WAIT_MS, MOUNT_LIST_MAX_DEPTH, MOUNT_LIST_MAX_ENTRIES, MOUNT_READ_DEADLINE_FACTOR, MOUNT_TREE_OP_DEADLINE_FACTOR, MarkdownStreamer, PreInitRingSink, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildConnectorTokenMediator, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, buildStoreSnapshotReplay, builtinCapabilities, capabilityLogInstance, clearPreInitRingSink, clearSession, compileComposition, computeCapabilitySignature, connectorRefreshKind, createAgentSession, createFlowConnectorReadiness, createSessionStimulusBus, defineCapability, deleteSession, dispatchRunnerCapabilityInvocation, emitSystemPromptComposed, ensureGitConfigInclude, executeConnectorMutate, extractClaudeAiOauthExpiresAt, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, hasNonTerminalFlow, hostOpResumeStimulus, installPreInitRingSink, isTerminalFlowStatus, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadSession, loadSessionById, mcpAuthSecretKey, newSession, pickRepointedManager, planFlowMutate, reconcilePendingDecisions, registerActiveFlow, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, resetRunnerLogStore, resolveAgentComposition, resolveAgentMixins, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveFlowMutateConnectorWaitMs, resolveMixin, runAgentChat, saveSession, setCurrentSession, setUpFlowConnector, startAgentServer, stimulusFromMetas, touchSession, validateInputResponse, writeClaudeCodeCredentialsFile };
-//# sourceMappingURL=chunk-2KANBOIO.js.map
-//# sourceMappingURL=chunk-2KANBOIO.js.map
+export { CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CapabilityRegistry, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, DEFAULT_FLOW_MUTATE_CONNECTOR_WAIT_MS, MOUNT_LIST_MAX_DEPTH, MOUNT_LIST_MAX_ENTRIES, MOUNT_READ_DEADLINE_FACTOR, MOUNT_TREE_OP_DEADLINE_FACTOR, MarkdownStreamer, PreInitRingSink, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildConnectorTokenMediator, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, buildStoreSnapshotReplay, builtinCapabilities, capabilityLogInstance, clearPreInitRingSink, clearSession, compileComposition, computeCapabilitySignature, connectorRefreshKind, createAgentSession, createFlowConnectorReadiness, createSessionStimulusBus, defineCapability, deleteSession, dispatchRunnerCapabilityInvocation, emitSystemPromptComposed, ensureClaudeSettingsDisablesConnectors, ensureGitConfigInclude, executeConnectorMutate, extractClaudeAiOauthExpiresAt, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, hasNonTerminalFlow, hostOpResumeStimulus, installPreInitRingSink, isTerminalFlowStatus, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadSession, loadSessionById, mcpAuthSecretKey, newSession, pickRepointedManager, planFlowMutate, reconcilePendingDecisions, registerActiveFlow, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, resetRunnerLogStore, resolveAgentComposition, resolveAgentMixins, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveFlowMutateConnectorWaitMs, resolveMixin, runAgentChat, saveSession, setCurrentSession, setUpFlowConnector, startAgentServer, stimulusFromMetas, touchSession, validateInputResponse, writeClaudeCodeCredentialsFile };
+//# sourceMappingURL=chunk-H6KQB6HL.js.map
+//# sourceMappingURL=chunk-H6KQB6HL.js.map