@skaile/workspaces 4.16.1 → 4.16.3

package/dist/{chunk-VE2KMHG6.js → chunk-OWMHVP6Q.js}

@@ -1,19 +1,19 @@
-import { WorkspacePlugin } from './chunk-WDBEHNOJ.js';
+import { WorkspacePlugin } from './chunk-7GCOHM2S.js';
 import { buildWorkspaceToolDefs } from './chunk-PQE2MYB6.js';
 import { findAiAssetsRoot } from './chunk-7IH3RKKK.js';
 import { WebSocketServerTransport } from './chunk-73ZXUUL6.js';
 import { assembleSystemPrompt, buildCapabilitiesPromptSection } from './chunk-W3UDISS2.js';
 import { prepareNativePolicy, codexInstanceEnvironment, parseCodexCredential, parseCodexRefreshInput, parseCodexRefreshResult } from './chunk-PE3A6FFW.js';
-import { resolveFlowPath } from './chunk-K2S4ECDJ.js';
+import { resolveFlowPath } from './chunk-5OAMRXJZ.js';
 import { findAiAssetsRoot as findAiAssetsRoot$1, deployCatalogEntry, undeployCatalogEntry } from './chunk-Q6NDQ6BH.js';
-import { registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, buildSdkConnectorTools, buildLazySdkFlowTools, describeFlowOperations, buildConnectorToolDefs, buildFlowToolDefs, driveOrchestratorTurn, SessionNodeExecutor, SessionSubpromptRunner, ClassifierSubpromptRunner, SessionInlineSubFlowRunner, buildSdkFlowTools } from './chunk-MY5TANRN.js';
+import { registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, buildSdkConnectorTools, buildLazySdkFlowTools, describeFlowOperations, buildConnectorToolDefs, buildFlowToolDefs, driveOrchestratorTurn, SessionNodeExecutor, SessionSubpromptRunner, ClassifierSubpromptRunner, SessionInlineSubFlowRunner, buildSdkFlowTools } from './chunk-UBDQFZZH.js';
 import { loadYamlConnectorDeclarations, withMaterializedConnectorDeclarations, SecretProviderChain, ConnectorStartupError, PreMintedSecretProvider, InMemorySecretProvider, resolvedConfigToDeclarations, isKnownSecretRef, deriveSingleMaterializedConnectorDeclaration } from './chunk-MC2MF4U5.js';
-import { EventNormalizer } from './chunk-TEQDWOBS.js';
+import { EventNormalizer } from './chunk-LPPRZAO5.js';
 import { probeResumeTranscript } from './chunk-4SIMGJIU.js';
 import { CodexNativeStateUnavailable } from './chunk-LOO5CB5M.js';
 import { dispatchCapability } from './chunk-TOXPRXAK.js';
-import { classifyClaudeSdkError } from './chunk-GAH4YRCI.js';
-import { createDriver, catalogLayer, providerCredentialEnvName, toMergedRegistry, registryCredentialEnv, AI_PROVIDER_PRESETS } from './chunk-CJGNYHPG.js';
+import { classifyClaudeSdkError } from './chunk-BGY4KTU6.js';
+import { createDriver, catalogLayer, providerCredentialEnvName, toMergedRegistry, registryCredentialEnv, AI_PROVIDER_PRESETS } from './chunk-ZCKQQJ7K.js';
 import { loadFlow } from './chunk-KTCMBEEB.js';
 import { parseFlowDefinition } from './chunk-ALLCAFHQ.js';
 import { renderStimulusPrompt } from './chunk-RQLL7L72.js';
@@ -34,7 +34,7 @@ import { Marked } from 'marked';
 import { markedTerminal } from 'marked-terminal';
 import fs4, { readFile, readdir, lstat, stat, rm, unlink, mkdir, writeFile, realpath, rename, open, readlink, mkdtemp } from 'fs/promises';
 import { createHash, randomBytes, timingSafeEqual, randomUUID } from 'crypto';
-import { existsSync, lstatSync, realpathSync, readFileSync, mkdirSync, writeFileSync, watch, chmodSync, accessSync, constants } from 'fs';
+import { unlinkSync, readFileSync, existsSync, lstatSync, realpathSync, mkdirSync, writeFileSync, watch, chmodSync, accessSync, constants } from 'fs';
 import { homedir } from 'os';
 import * as z7 from 'zod';
 import { z } from 'zod';
@@ -2219,7 +2219,7 @@ function parsePresignResult(raw, op) {
 }
 
 // runner/src/resources.ts
-async function buildAgentResources(projectDir, driverType, _onLog, watch, secretProvider, sessionMeta, tokenMediator, preMintedSecrets, deferFilesystemMounts, capabilityRegistry, fallbackConnectorDeclarations, extraMcpDeclarations) {
+async function buildAgentResources(projectDir, driverType, _onLog, watch, secretProvider, sessionMeta, tokenMediator, preMintedSecrets, deferFilesystemMounts, capabilityRegistry, fallbackConnectorDeclarations, extraMcpDeclarations, s3Presigner) {
   const managedProjectMcp = sessionMeta?.managedCodex ? await resolveExternalMcpDeclarations(projectDir, sessionMeta.sessionId, true) : void 0;
   const resLog = createLogger({
     kind: "runner",
@@ -2273,7 +2273,8 @@ async function buildAgentResources(projectDir, driverType, _onLog, watch, secret
         deferFilesystemMounts,
         watch,
         resLog,
-        capabilityRegistry
+        capabilityRegistry,
+        s3Presigner
       );
     }
     const resourcePromptSection = resourceManager ? buildConnectorPromptSection(resourceManager) : "";
@@ -2420,18 +2421,16 @@ function logConnectorReport(results, resLog) {
     }
   }
 }
-async function connectAllConnectors(connectorDeclarations, projectDir, runtimeAssets, secretProvider, tokenMediator, preMintedSecrets, deferFilesystemMounts, watch, resLog, capabilityRegistry) {
+async function connectAllConnectors(connectorDeclarations, projectDir, runtimeAssets, secretProvider, tokenMediator, preMintedSecrets, deferFilesystemMounts, watch, resLog, capabilityRegistry, s3Presigner) {
+  const presigner = s3Presigner ?? (capabilityRegistry ? buildS3Presigner({
+    invokeRemote: (name, input) => capabilityRegistry.invokeRemote(name, input),
+    log: (line) => resLog.warn(line)
+  }) : void 0);
   const resourceManager = new ConnectorManager(projectDir, {
     secrets: secretProvider,
     catalogEntries: runtimeAssets.catalogEntries,
     tokenMediator,
-    // Serve mode only: `auth: backend` S3 mounts read through `host.s3_presign`.
-    ...capabilityRegistry ? {
-      s3Presigner: buildS3Presigner({
-        invokeRemote: (name, input) => capabilityRegistry.invokeRemote(name, input),
-        log: (line) => resLog.warn(line)
-      })
-    } : {},
+    ...presigner ? { s3Presigner: presigner } : {},
     preMintedSecrets,
     onStatusChange: watch?.onConnectorStatus
   });
@@ -2652,7 +2651,8 @@ async function createAgentSession(config) {
     config.deferFilesystemMounts,
     config.capabilityRegistry,
     config.fallbackConnectorDeclarations,
-    config.getExtraMcpDeclarations?.()
+    config.getExtraMcpDeclarations?.(),
+    config.s3Presigner
   );
   const wsConfig = managedWorkspaceConfig ?? wsConfigOverride ?? resolveSkWorkspaceConfig(projectDir);
   const contextSection = buildContextSection(wsConfig.agent?.context);
@@ -6474,6 +6474,37 @@ var TurnStatusTracker = class {
     return { type: "status", phase: this.phase ?? "idle" };
   }
 };
+var WS_AUTH_TOKEN_ENV = "SKAILE_WS_AUTH_TOKEN";
+var WS_AUTH_TOKEN_FILE_ENV = "SKAILE_WS_AUTH_TOKEN_FILE";
+var nodeFs = { readFileSync: readFileSync, unlinkSync };
+function takeRunnerWsAuthToken(env = process.env, fs5 = nodeFs) {
+  const filePath = env[WS_AUTH_TOKEN_FILE_ENV];
+  const envToken = env[WS_AUTH_TOKEN_ENV];
+  delete env[WS_AUTH_TOKEN_FILE_ENV];
+  delete env[WS_AUTH_TOKEN_ENV];
+  if (filePath) {
+    let token;
+    try {
+      token = fs5.readFileSync(filePath, "utf8").trim();
+    } catch (err) {
+      const code = err.code ?? "unknown";
+      throw new Error(`${WS_AUTH_TOKEN_FILE_ENV} is set but the file cannot be read (${code})`);
+    }
+    if (!token) throw new Error(`${WS_AUTH_TOKEN_FILE_ENV} names an empty file`);
+    try {
+      fs5.unlinkSync(filePath);
+      return { token, source: "file" };
+    } catch (err) {
+      return {
+        token,
+        source: "file",
+        unlinkError: err.code ?? String(err)
+      };
+    }
+  }
+  if (envToken) return { token: envToken, source: "env" };
+  return { source: "none" };
+}
 
 // runner/src/serve.ts
 function getSessionCatalogEntries(session) {
@@ -7183,7 +7214,9 @@ async function startAgentServer(opts) {
   const managedHost = opts.managedCodex ? validateManagedCodexHost(opts.managedCodex, opts.projectDir) : void 0;
   if (managedHost && opts.sessionId && opts.sessionId !== managedHost.sessionId)
     throw new Error("CODEX_MANAGED_BOOTSTRAP_INVALID");
-  const authToken = opts.authToken ?? process.env.SKAILE_WS_AUTH_TOKEN;
+  const freshIntake = takeRunnerWsAuthToken();
+  const takenAuthToken = opts.authTokenIntake ?? freshIntake;
+  const authToken = opts.authToken ?? takenAuthToken.token;
   if (managedHost && !opts.transport && !authToken)
     throw new Error("CODEX_MANAGED_BOOTSTRAP_INVALID");
   const supportedRuntimeFeatures = managedHost ? ["codex-app-server-v1"] : [];
@@ -7208,6 +7241,13 @@ async function startAgentServer(opts) {
     instance: sessionId
   });
   const log = (line) => serverLog.info(line);
+  serverLog.info("ws auth token", {
+    source: opts.authToken ? "caller" : takenAuthToken.source
+  });
+  if (takenAuthToken.unlinkError)
+    serverLog.warn("ws auth token file could not be removed", {
+      code: takenAuthToken.unlinkError
+    });
   const logPhase = (phase, startedAt, data) => serverLog.info(`[serve] phase ${phase}`, { ...data, phase, elapsedMs: Date.now() - startedAt });
   const exitOnBrokenPipe = opts.exitOnBrokenPipe ?? false;
   const stopOutputWatch = watchOutputStream({ exitOnBrokenPipe });
@@ -7387,10 +7427,20 @@ async function startAgentServer(opts) {
     invokeRemote: (name, input) => capabilityRegistry.invokeRemote(name, input),
     log
   });
-  const connectorS3Presigner = buildS3Presigner({
+  const invokeS3Presign = buildS3Presigner({
     invokeRemote: (name, input) => capabilityRegistry.invokeRemote(name, input),
     log
   });
+  const connectorS3Presigner = async (request) => {
+    if (!hostRuntimeCapabilities.has(S3_PRESIGN_CAPABILITY) && !capabilityRegistry.resolve(S3_PRESIGN_CAPABILITY)) {
+      return {
+        ok: false,
+        code: "capability-unavailable",
+        message: `${S3_PRESIGN_CAPABILITY} is not registered by this host`
+      };
+    }
+    return invokeS3Presign(request);
+  };
   const aiCredentialRefreshScheduler = createAiCredentialRefreshScheduler({
     refresh: async () => {
       const { mint: result } = await aiProviderConfigSwitcher.repull({
@@ -7560,6 +7610,7 @@ async function startAgentServer(opts) {
       // connectors in-process; connector refresh (refresh / retry-401) now routes
       // through `host.refresh_credential` via this mediator.
       tokenMediator: connectorTokenMediator,
+      s3Presigner: connectorS3Presigner,
       ...preMintedSecrets ? { preMintedSecrets } : {},
       ...aiProviderConfigId ? { aiProviderConfigId } : {},
       // Disk-first fallback: only consumed when skaile.yaml + materialized
@@ -8747,6 +8798,7 @@ async function startAgentServer(opts) {
       return;
     }
     registerInitClientCapabilities(cmd.capabilities ?? []);
+    capabilityRegistry.setRemoteInvoker(remoteCapabilityInvoker);
     sendEvent({
       type: "protocol_info",
       version: PROTOCOL_VERSION,
@@ -9561,6 +9613,6 @@ function touchSession(state) {
   return { ...state, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
 }
 
-export { CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CapabilityRegistry, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, DEFAULT_FLOW_MUTATE_CONNECTOR_WAIT_MS, MOUNT_LIST_MAX_DEPTH, MOUNT_LIST_MAX_ENTRIES, MOUNT_READ_DEADLINE_FACTOR, MOUNT_STAT_BUDGET_MS, MOUNT_STAT_MAX_ENTRIES, MOUNT_TREE_OP_DEADLINE_FACTOR, MarkdownStreamer, PreInitRingSink, ResourceOperationError, SESSION_ROOT_WRITABLE_DIRS, SESSION_ROOT_WRITABLE_FILES, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildConnectorTokenMediator, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, buildStoreSnapshotReplay, builtinCapabilities, capabilityLogInstance, clearPreInitRingSink, clearSession, compileComposition, computeCapabilitySignature, computeDirectoryTotals, connectorRefreshKind, createAgentSession, createFlowConnectorReadiness, createManagedCodexSubpromptDriver, createSessionStimulusBus, defineCapability, deleteSession, dispatchResourceRequest, dispatchRunnerCapabilityInvocation, emitSystemPromptComposed, ensureClaudeSettingsDisablesConnectors, ensureGitConfigInclude, executeConnectorMutate, extractClaudeAiOauthExpiresAt, flowStartNeedsDriverRestart, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, handleSessionRootResourceRequest, hasNonTerminalFlow, hostOpResumeStimulus, installPreInitRingSink, isSessionRootPathAllowed, isTerminalFlowStatus, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadManagedCodexHostConfig, loadSession, loadSessionById, mcpAuthSecretKey, newSession, nulTailPaddingLength, pickFlowToolTarget, pickRepointedManager, planFlowMutate, prepareCodexTools, reconcilePendingDecisions, registerActiveFlow, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, resetRunnerLogStore, resolveAgentComposition, resolveAgentMixins, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveFlowMutateConnectorWaitMs, resolveMixin, runAgentChat, saveSession, setCurrentSession, setUpFlowConnector, startAgentServer, stimulusFromMetas, supportsLiveToolUpdates, touchSession, validateInputResponse, writeClaudeCodeCredentialsFile };
-//# sourceMappingURL=chunk-VE2KMHG6.js.map
-//# sourceMappingURL=chunk-VE2KMHG6.js.map
+export { CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CapabilityRegistry, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, DEFAULT_FLOW_MUTATE_CONNECTOR_WAIT_MS, MOUNT_LIST_MAX_DEPTH, MOUNT_LIST_MAX_ENTRIES, MOUNT_READ_DEADLINE_FACTOR, MOUNT_STAT_BUDGET_MS, MOUNT_STAT_MAX_ENTRIES, MOUNT_TREE_OP_DEADLINE_FACTOR, MarkdownStreamer, PreInitRingSink, ResourceOperationError, SESSION_ROOT_WRITABLE_DIRS, SESSION_ROOT_WRITABLE_FILES, WS_AUTH_TOKEN_ENV, WS_AUTH_TOKEN_FILE_ENV, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildConnectorTokenMediator, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, buildStoreSnapshotReplay, builtinCapabilities, capabilityLogInstance, clearPreInitRingSink, clearSession, compileComposition, computeCapabilitySignature, computeDirectoryTotals, connectorRefreshKind, createAgentSession, createFlowConnectorReadiness, createManagedCodexSubpromptDriver, createSessionStimulusBus, defineCapability, deleteSession, dispatchResourceRequest, dispatchRunnerCapabilityInvocation, emitSystemPromptComposed, ensureClaudeSettingsDisablesConnectors, ensureGitConfigInclude, executeConnectorMutate, extractClaudeAiOauthExpiresAt, flowStartNeedsDriverRestart, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, handleSessionRootResourceRequest, hasNonTerminalFlow, hostOpResumeStimulus, installPreInitRingSink, isSessionRootPathAllowed, isTerminalFlowStatus, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadManagedCodexHostConfig, loadSession, loadSessionById, mcpAuthSecretKey, newSession, nulTailPaddingLength, pickFlowToolTarget, pickRepointedManager, planFlowMutate, prepareCodexTools, reconcilePendingDecisions, registerActiveFlow, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, resetRunnerLogStore, resolveAgentComposition, resolveAgentMixins, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveFlowMutateConnectorWaitMs, resolveMixin, runAgentChat, saveSession, setCurrentSession, setUpFlowConnector, startAgentServer, stimulusFromMetas, supportsLiveToolUpdates, takeRunnerWsAuthToken, touchSession, validateInputResponse, writeClaudeCodeCredentialsFile };
+//# sourceMappingURL=chunk-OWMHVP6Q.js.map
+//# sourceMappingURL=chunk-OWMHVP6Q.js.map