@skaile/workspaces 4.2.0 → 4.4.0

package/dist/{chunk-M3A3K4RL.js → chunk-IFXO3KZT.js}

@@ -1,28 +1,28 @@
-import { WorkspacePlugin } from './chunk-Q3MY2UOM.js';
-import { buildWorkspaceToolDefs } from './chunk-KO6EBWBA.js';
+import { WorkspacePlugin } from './chunk-62ETRVY3.js';
+import { buildWorkspaceToolDefs } from './chunk-EPQHIC6E.js';
 import { findAiAssetsRoot } from './chunk-7IRJ4K4F.js';
 import { WebSocketServerTransport } from './chunk-73ZXUUL6.js';
 import { assembleSystemPrompt, buildCapabilitiesPromptSection } from './chunk-W3UDISS2.js';
 import { prepareNativePolicy, codexInstanceEnvironment, parseCodexCredential, parseCodexRefreshInput, parseCodexRefreshResult } from './chunk-45LLHKQ2.js';
-import { resolveFlowPath } from './chunk-FPUEDTXA.js';
+import { resolveFlowPath } from './chunk-FWDTBQCO.js';
 import { findAiAssetsRoot as findAiAssetsRoot$1, deployCatalogEntry, undeployCatalogEntry } from './chunk-7BUZQVRR.js';
-import { registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, ConnectorStartupError, buildSdkConnectorTools, buildLazySdkFlowTools, describeFlowOperations, buildConnectorToolDefs, buildFlowToolDefs, driveOrchestratorTurn, SessionNodeExecutor, SessionSubpromptRunner, ClassifierSubpromptRunner, SessionInlineSubFlowRunner, buildSdkFlowTools } from './chunk-NS7CRWO6.js';
+import { registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, ConnectorStartupError, buildSdkConnectorTools, buildLazySdkFlowTools, describeFlowOperations, buildConnectorToolDefs, buildFlowToolDefs, driveOrchestratorTurn, SessionNodeExecutor, SessionSubpromptRunner, ClassifierSubpromptRunner, SessionInlineSubFlowRunner, buildSdkFlowTools } from './chunk-O3XVKALH.js';
 import { loadConnectorDeclarations, SecretProviderChain, PreMintedSecretProvider, InMemorySecretProvider, resolvedConfigToDeclarations, isKnownSecretRef, deriveSingleMaterializedConnectorDeclaration } from './chunk-KW7YIRYL.js';
-import { EventNormalizer } from './chunk-SEXKMZHA.js';
+import { EventNormalizer } from './chunk-YDPT2X6G.js';
 import { probeResumeTranscript } from './chunk-WLFRA5RM.js';
 import { CodexNativeStateUnavailable } from './chunk-LOO5CB5M.js';
-import { dispatchCapability } from './chunk-7YNBVDGL.js';
+import { dispatchCapability } from './chunk-TAZQ232B.js';
 import { classifyClaudeSdkError } from './chunk-GAH4YRCI.js';
-import { deriveRegistryFromLegacyApiKeys, createDriver, catalogLayer, providerCredentialEnvName, toMergedRegistry, registryCredentialEnv } from './chunk-6HFEEKCT.js';
-import { loadFlow } from './chunk-5HT5M5HX.js';
+import { createDriver, catalogLayer, providerCredentialEnvName, toMergedRegistry, registryCredentialEnv } from './chunk-JUAC5QL4.js';
+import { loadFlow } from './chunk-NWZQMJTI.js';
 import { parseFlowDefinition } from './chunk-53ORCYPJ.js';
 import { renderStimulusPrompt } from './chunk-2D5BYAL6.js';
-import { withActivityLabelJsonSchema, TOOL_ACTIVITY_PROMPT_SECTION, SESSION_ROOT_CONNECTOR_ID, PROTOCOL_VERSION } from './chunk-DY3R7FYY.js';
-import { resolveSettings, loadProviderRegistry } from './chunk-3VSRJE3M.js';
+import { withActivityLabelJsonSchema, TOOL_ACTIVITY_PROMPT_SECTION, SESSION_ROOT_CONNECTOR_ID, PROTOCOL_VERSION } from './chunk-V2P4ECNY.js';
+import { resolveSettings, loadProviderRegistry } from './chunk-UJPVUN6H.js';
 import { resolveRuntimeAssets } from './chunk-REILIKVM.js';
 import { resolveDriverPaths } from './chunk-K5GBV4SA.js';
 import { resolveSkWorkspaceConfig, resolveAgentDir, stageMaterializedSkills, loadMcpServerDeclarations, COMPACTION_DEFAULTS, validateAssetRecipeAttr, deriveSingleMaterializedMcpDeclaration } from './chunk-K27T47OO.js';
-import { withFsDeadline, fsDeadlineMs, FsDeadlineError, tryWithFsDeadline } from './chunk-MKZOK4JU.js';
+import { withFsDeadline, FsDeadlineError, fsDeadlineMs, tryWithFsDeadline } from './chunk-MKZOK4JU.js';
 import { parseAssetRef } from './chunk-GEEW6SY2.js';
 import { resolveLogStoreConfig, createLogStoreFromConfig, OnLogBridgeSink, WsLogSink } from './chunk-FTG7CRFD.js';
 import { registryEntries, resolveEntryBaseUrl } from './chunk-ILG4BXYE.js';
@@ -31,9 +31,9 @@ import { __require } from './chunk-NSBPE2FW.js';
 import pc from 'picocolors';
 import { Marked } from 'marked';
 import { markedTerminal } from 'marked-terminal';
-import fs4, { readFile, stat, rm, unlink, mkdir, writeFile, readdir, realpath, lstat, rename, readlink, mkdtemp } from 'fs/promises';
+import fs4, { readFile, readdir, lstat, stat, rm, unlink, mkdir, writeFile, realpath, rename, readlink, mkdtemp } from 'fs/promises';
 import { createHash, randomBytes, timingSafeEqual, randomUUID } from 'crypto';
-import path4, { join, resolve, relative, sep, isAbsolute, dirname, basename } from 'path';
+import path4, { join, resolve, relative, sep, isAbsolute, basename, dirname } from 'path';
 import { existsSync, lstatSync, realpathSync, readFileSync, mkdirSync, writeFileSync, watch, chmodSync, accessSync, constants } from 'fs';
 import { homedir } from 'os';
 import * as z7 from 'zod';
@@ -2254,16 +2254,9 @@ async function createAgentSession(config) {
   });
   const driverType = managed ? "codex" : settings.driver ?? "omp";
   const model = managed ? config.model : settings.model;
-  const legacyKeys = managed ? void 0 : deriveRegistryFromLegacyApiKeys(settings.apiKeys, { env: process.env });
-  if (legacyKeys?.deprecation) sessionLog.debug(legacyKeys.deprecation);
-  const registry = loadSessionRegistry(
-    projectDir,
-    config.registry,
-    legacyKeys?.providers,
-    sessionLog
-  );
+  const registry = loadSessionRegistry(projectDir, config.registry, sessionLog);
   const modelRef = config.modelRef?.trim() || model?.trim() || void 0;
-  const credentialEnv = { ...legacyKeys?.credentialEnv, ...config.credentialEnv };
+  const credentialEnv = { ...config.credentialEnv };
   const manifest = agentDir ? await loadAgentManifest(agentDir) : void 0;
   const {
     resourceManager,
@@ -2441,10 +2434,8 @@ function createManagedCodexSubpromptDriver(config, model, cwd, privateDirectory)
     }
   });
 }
-function loadSessionRegistry(projectDir, sessionRegistry, legacyApiKeyProviders, log) {
+function loadSessionRegistry(projectDir, sessionRegistry, log) {
   const extraLayers = [];
-  if (legacyApiKeyProviders && Object.keys(legacyApiKeyProviders).length > 0)
-    extraLayers.push({ layer: "user", providers: legacyApiKeyProviders });
   if (sessionRegistry && Object.keys(sessionRegistry).length > 0)
     extraLayers.push({ layer: "session", providers: sessionRegistry });
   const first = loadProviderRegistry({ projectDir, extraLayers });
@@ -3153,6 +3144,30 @@ function rejectCapabilityOnApprovalDeny(pending, callId, feedback) {
   entry.reject(new Error(feedback ?? "declined by user"));
   return true;
 }
+var ResourceOperationError = class extends Error {
+  constructor(message, code) {
+    super(message);
+    this.code = code;
+    this.name = "ResourceOperationError";
+  }
+  code;
+};
+function unsupportedOperation(operation, target) {
+  return new ResourceOperationError(
+    `Unsupported operation for ${target}: ${operation}`,
+    "unsupported_operation"
+  );
+}
+function errorResponse(command, resourceId, err) {
+  return {
+    type: "resource_response",
+    requestId: command.requestId,
+    resourceId,
+    operation: command.operation,
+    error: err instanceof Error ? err.message : String(err),
+    ...err instanceof ResourceOperationError ? { code: err.code } : {}
+  };
+}
 async function handleResourceRequest(command, manager, emit) {
   const { requestId, connectorId, operation, path: path5, options, content } = command;
   try {
@@ -3182,22 +3197,96 @@ async function handleResourceRequest(command, manager, emit) {
           options
         );
         break;
+      default:
+        throw unsupportedOperation(operation, "connector");
     }
     emit({ type: "resource_response", requestId, resourceId: connectorId, operation, data });
   } catch (err) {
-    emit({
-      type: "resource_response",
-      requestId,
-      resourceId: connectorId,
-      operation,
-      error: err instanceof Error ? err.message : String(err)
-    });
+    emit(errorResponse(command, connectorId, err));
   }
 }
 var MOUNT_LIST_MAX_DEPTH = 32;
 var MOUNT_LIST_MAX_ENTRIES = 1e4;
 var MOUNT_TREE_OP_DEADLINE_FACTOR = 4;
 var MOUNT_READ_DEADLINE_FACTOR = 4;
+var MOUNT_STAT_MAX_ENTRIES = 5e4;
+var MOUNT_STAT_BUDGET_MS = 1e4;
+var MOUNT_STAT_CONCURRENCY = 16;
+function lowerCap(requested, cap) {
+  return typeof requested === "number" && Number.isFinite(requested) && requested > 0 ? Math.min(Math.floor(requested), cap) : cap;
+}
+function isoTime(time) {
+  const ms = time.getTime();
+  return Number.isFinite(ms) && ms > 0 ? time.toISOString() : void 0;
+}
+async function computeDirectoryTotals(root, opts, clock = Date.now) {
+  const deadline = clock() + opts.budgetMs;
+  const totals = { files: 0, directories: 0, bytes: 0, partial: false };
+  const markPartial = (why) => {
+    totals.partial = true;
+    if (why && (!totals.stoppedBy || why !== "depth")) totals.stoppedBy = why;
+  };
+  let stopped = false;
+  let seen = 0;
+  const pending = [{ abs: root, depth: 0 }];
+  while (pending.length > 0 && !stopped) {
+    if (clock() >= deadline) {
+      markPartial("time");
+      break;
+    }
+    const { abs, depth } = pending.pop();
+    let dirents;
+    try {
+      dirents = await withFsDeadline(`readdir ${abs}`, () => readdir(abs, { withFileTypes: true }));
+    } catch (err) {
+      if (err instanceof FsDeadlineError || abs === root) throw err;
+      if (err.code === "ENOENT") {
+        totals.directories--;
+        continue;
+      }
+      totals.unreadable = (totals.unreadable ?? 0) + 1;
+      markPartial();
+      continue;
+    }
+    const files = [];
+    for (const e of dirents) {
+      if (!opts.includeHidden && e.name.startsWith(".")) continue;
+      if (seen >= opts.maxEntries) {
+        markPartial("entries");
+        stopped = true;
+        break;
+      }
+      seen++;
+      if (e.isDirectory()) {
+        totals.directories++;
+        if (depth + 1 > opts.maxDepth) markPartial("depth");
+        else pending.push({ abs: join(abs, e.name), depth: depth + 1 });
+      } else {
+        totals.files++;
+        files.push(join(abs, e.name));
+      }
+    }
+    for (let i = 0; i < files.length; i += MOUNT_STAT_CONCURRENCY) {
+      if (clock() >= deadline) {
+        markPartial("time");
+        stopped = true;
+        break;
+      }
+      const sizes = await Promise.all(
+        files.slice(i, i + MOUNT_STAT_CONCURRENCY).map(async (file) => {
+          try {
+            return (await withFsDeadline(`lstat ${file}`, () => lstat(file))).size;
+          } catch (err) {
+            if (err instanceof FsDeadlineError) throw err;
+            return 0;
+          }
+        })
+      );
+      for (const size of sizes) totals.bytes += size;
+    }
+  }
+  return totals;
+}
 function getMimeType(filename) {
   return mime.getType(filename) ?? "application/octet-stream";
 }
@@ -3223,7 +3312,10 @@ async function handleMountResourceRequest(command, manager, emit) {
     const entry = manager.get(mountId);
     const mountPath = entry.handle.mountPath;
     if (!mountPath) {
-      throw new Error(`Connector "${mountId}" has no projected mount directory`);
+      throw new ResourceOperationError(
+        `Connector "${mountId}" has no projected mount directory`,
+        "unsupported_operation"
+      );
     }
     const targetPath = reqPath ? resolve(mountPath, reqPath) : mountPath;
     const rel = relative(mountPath, targetPath);
@@ -3324,6 +3416,49 @@ async function handleMountResourceRequest(command, manager, emit) {
         data = true;
         break;
       }
+      case "mkdir": {
+        if (rel === "") throw new Error("A folder path is required");
+        const parentDir = dirname(targetPath);
+        await withFsDeadline(`mkdir ${parentDir}`, () => mkdir(parentDir, { recursive: true }));
+        try {
+          await withFsDeadline(`mkdir ${targetPath}`, () => mkdir(targetPath));
+        } catch (mkdirErr) {
+          if (mkdirErr.code === "EEXIST") {
+            throw new ResourceOperationError(
+              `"${rel.split(sep).join("/")}" already exists`,
+              "already_exists"
+            );
+          }
+          throw mkdirErr;
+        }
+        data = true;
+        break;
+      }
+      case "stat": {
+        const statOptions = options;
+        const st = await withFsDeadline(`stat ${targetPath}`, () => stat(targetPath));
+        const isDir = st.isDirectory();
+        const result = {
+          name: rel === "" ? "" : basename(targetPath),
+          path: rel.split(sep).join("/"),
+          type: isDir ? "directory" : "file"
+        };
+        if (!isDir) result.size = st.size;
+        const modifiedAt = isoTime(st.mtime);
+        if (modifiedAt) result.modifiedAt = modifiedAt;
+        const createdAt = isoTime(st.birthtime);
+        if (createdAt) result.createdAt = createdAt;
+        if (isDir && statOptions?.recursive) {
+          result.totals = await computeDirectoryTotals(targetPath, {
+            includeHidden: Boolean(statOptions.includeHidden),
+            maxEntries: lowerCap(statOptions.maxEntries, MOUNT_STAT_MAX_ENTRIES),
+            budgetMs: lowerCap(statOptions.timeoutMs, MOUNT_STAT_BUDGET_MS),
+            maxDepth: MOUNT_LIST_MAX_DEPTH
+          });
+        }
+        data = result;
+        break;
+      }
       case "delete": {
         const st = await withFsDeadline(`stat ${targetPath}`, () => stat(targetPath));
         if (st.isDirectory()) {
@@ -3339,17 +3474,11 @@ async function handleMountResourceRequest(command, manager, emit) {
         break;
       }
       default:
-        throw new Error(`Unsupported operation for mount: ${operation}`);
+        throw unsupportedOperation(operation, "mount");
     }
     emit({ type: "resource_response", requestId, resourceId: mountId, operation, data });
   } catch (err) {
-    emit({
-      type: "resource_response",
-      requestId,
-      resourceId: mountId,
-      operation,
-      error: err instanceof Error ? err.message : String(err)
-    });
+    emit(errorResponse(command, mountId, err));
   }
 }
 var SESSION_ROOT_WRITABLE_FILES = ["skaile.yaml"];
@@ -3410,7 +3539,7 @@ async function handleSessionRootResourceRequest(command, rootDir, emit) {
   const { requestId, connectorId, operation, path: reqPath, content } = command;
   try {
     if (operation !== "write" && operation !== "delete") {
-      throw new Error(`Unsupported operation for the session root: ${operation}`);
+      throw unsupportedOperation(operation, "the session root");
     }
     if (!reqPath) throw new Error("A path is required for the session root");
     if (isAbsolute(reqPath)) throw new Error("Absolute paths are not allowed for the session root");
@@ -3459,13 +3588,7 @@ async function handleSessionRootResourceRequest(command, rootDir, emit) {
     }
     emit({ type: "resource_response", requestId, resourceId: connectorId, operation, data });
   } catch (err) {
-    emit({
-      type: "resource_response",
-      requestId,
-      resourceId: connectorId,
-      operation,
-      error: err instanceof Error ? err.message : String(err)
-    });
+    emit(errorResponse(command, connectorId, err));
   }
 }
 async function dispatchResourceRequest(command, deps) {
@@ -7934,6 +8057,7 @@ async function startAgentServer(opts) {
       let pendingResumeSessionId;
       const cfgResumeSessionId = cfg.resumeSessionId;
       const cfgExpectedSig = cfg.expectedCapabilitySignature;
+      const resumeTargetDriver = managedCodex ? "codex" : opts.driver ?? wireAgentConfig?.driver ?? agentSession?.driverType;
       if (cfgResumeSessionId) {
         const currentSig = computeCapabilitySignature(capabilityRegistry.list());
         if (cfgExpectedSig && cfgExpectedSig !== currentSig) {
@@ -7945,6 +8069,13 @@ async function startAgentServer(opts) {
             resumeSessionId: cfgResumeSessionId,
             reason: "signature_mismatch"
           });
+        } else if (resumeProbe === "jsonl_lost" && resumeTargetDriver === "claude-sdk") {
+          log(`[serve] tier-1 resume skipped: no transcript for ${cfgResumeSessionId}`);
+          sendEvent({
+            type: "resume_failed",
+            resumeSessionId: cfgResumeSessionId,
+            reason: "jsonl_lost"
+          });
         } else {
           log(`[serve] tier-1 resume attempted: resumeSessionId=${cfgResumeSessionId}`);
           sendEvent({
@@ -8669,6 +8800,6 @@ function touchSession(state) {
   return { ...state, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
 }
 
-export { CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CapabilityRegistry, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, DEFAULT_FLOW_MUTATE_CONNECTOR_WAIT_MS, MOUNT_LIST_MAX_DEPTH, MOUNT_LIST_MAX_ENTRIES, MOUNT_READ_DEADLINE_FACTOR, MOUNT_TREE_OP_DEADLINE_FACTOR, MarkdownStreamer, PreInitRingSink, SESSION_ROOT_WRITABLE_DIRS, SESSION_ROOT_WRITABLE_FILES, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildConnectorTokenMediator, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, buildStoreSnapshotReplay, builtinCapabilities, capabilityLogInstance, clearPreInitRingSink, clearSession, compileComposition, computeCapabilitySignature, connectorRefreshKind, createAgentSession, createFlowConnectorReadiness, createManagedCodexSubpromptDriver, createSessionStimulusBus, defineCapability, deleteSession, dispatchResourceRequest, dispatchRunnerCapabilityInvocation, emitSystemPromptComposed, ensureClaudeSettingsDisablesConnectors, ensureGitConfigInclude, executeConnectorMutate, extractClaudeAiOauthExpiresAt, flowStartNeedsDriverRestart, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, handleSessionRootResourceRequest, hasNonTerminalFlow, hostOpResumeStimulus, installPreInitRingSink, isSessionRootPathAllowed, isTerminalFlowStatus, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadManagedCodexHostConfig, loadSession, loadSessionById, mcpAuthSecretKey, newSession, nulTailPaddingLength, pickFlowToolTarget, pickRepointedManager, planFlowMutate, prepareCodexTools, reconcilePendingDecisions, registerActiveFlow, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, resetRunnerLogStore, resolveAgentComposition, resolveAgentMixins, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveFlowMutateConnectorWaitMs, resolveMixin, runAgentChat, saveSession, setCurrentSession, setUpFlowConnector, startAgentServer, stimulusFromMetas, supportsLiveToolUpdates, touchSession, validateInputResponse, writeClaudeCodeCredentialsFile };
-//# sourceMappingURL=chunk-M3A3K4RL.js.map
-//# sourceMappingURL=chunk-M3A3K4RL.js.map
+export { CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CapabilityRegistry, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, DEFAULT_FLOW_MUTATE_CONNECTOR_WAIT_MS, MOUNT_LIST_MAX_DEPTH, MOUNT_LIST_MAX_ENTRIES, MOUNT_READ_DEADLINE_FACTOR, MOUNT_STAT_BUDGET_MS, MOUNT_STAT_MAX_ENTRIES, MOUNT_TREE_OP_DEADLINE_FACTOR, MarkdownStreamer, PreInitRingSink, ResourceOperationError, SESSION_ROOT_WRITABLE_DIRS, SESSION_ROOT_WRITABLE_FILES, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildConnectorTokenMediator, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, buildStoreSnapshotReplay, builtinCapabilities, capabilityLogInstance, clearPreInitRingSink, clearSession, compileComposition, computeCapabilitySignature, computeDirectoryTotals, connectorRefreshKind, createAgentSession, createFlowConnectorReadiness, createManagedCodexSubpromptDriver, createSessionStimulusBus, defineCapability, deleteSession, dispatchResourceRequest, dispatchRunnerCapabilityInvocation, emitSystemPromptComposed, ensureClaudeSettingsDisablesConnectors, ensureGitConfigInclude, executeConnectorMutate, extractClaudeAiOauthExpiresAt, flowStartNeedsDriverRestart, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, handleSessionRootResourceRequest, hasNonTerminalFlow, hostOpResumeStimulus, installPreInitRingSink, isSessionRootPathAllowed, isTerminalFlowStatus, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadManagedCodexHostConfig, loadSession, loadSessionById, mcpAuthSecretKey, newSession, nulTailPaddingLength, pickFlowToolTarget, pickRepointedManager, planFlowMutate, prepareCodexTools, reconcilePendingDecisions, registerActiveFlow, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, resetRunnerLogStore, resolveAgentComposition, resolveAgentMixins, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveFlowMutateConnectorWaitMs, resolveMixin, runAgentChat, saveSession, setCurrentSession, setUpFlowConnector, startAgentServer, stimulusFromMetas, supportsLiveToolUpdates, touchSession, validateInputResponse, writeClaudeCodeCredentialsFile };
+//# sourceMappingURL=chunk-IFXO3KZT.js.map
+//# sourceMappingURL=chunk-IFXO3KZT.js.map