@skaile/workspaces 4.39.0 → 5.1.0

package/dist/{chunk-5RWL4L3X.js → chunk-QFZFZXQW.js}

@@ -1,19 +1,19 @@
 import { declaredConnectErrorKind, ClassifiedConnectError, withConnectErrorKind } from './chunk-KC3OF6B2.js';
-import { OAuthRequiredError, ConnectorFieldMissingError, LegacyAuthGrammarError, resolveAuthRef, readUnavailableMarker, ConnectorStartupError } from './chunk-YQEF36D5.js';
-import { EventNormalizer } from './chunk-M7GPCWEV.js';
-import { resolveModelTier } from './chunk-WCWFS36P.js';
-import { createDriver } from './chunk-TSVRKUGV.js';
+import { OAuthRequiredError, ConnectorFieldMissingError, LegacyAuthGrammarError, resolveAuthRef, readUnavailableMarker, ConnectorStartupError } from './chunk-WKIOWDLQ.js';
+import { EventNormalizer } from './chunk-YIVB7GIP.js';
+import { resolveModelTier } from './chunk-P5UQ56RA.js';
+import { createDriver } from './chunk-RDTHJSGY.js';
 import { pluginRegistry } from './chunk-6E6PKKAD.js';
 import { computeStimulus } from './chunk-IFGTRL2I.js';
-import { interpolateNodeInstruction, resolveNodeBindings, validateConsumedNodeOutput, appendAttempt, resolveTerminalFailureStatus, remainingActiveExecutionMs, deriveCheckEvidence, computeFlowStateFromSnapshots, availableRouterFrontier, evaluateRouterSelection, routerSelectionOutput, planRouterSkips, unsettledRouterBranchIds, countFailedAttempts, hasAutomaticRetryBudget, persistedRouterSelection } from './chunk-7RC37XFW.js';
-import { INPUT_SCHEMA_SHAPES_HINT, coerceInputSchema } from './chunk-YYH5EVPM.js';
-import { parseFlowDefinition } from './chunk-DIQDYNXZ.js';
-import { describeStimulus, buildOrchestratorPrompt, renderSubpromptPrompt, renderStimulusPrompt } from './chunk-K3IBZ2UZ.js';
-import { deterministicNodeKindLabel, nodeInstruction, flowDefaults, isAgentNode, isGateNode, isCheckNode, nodeRequiresApproval, isSubFlowNode, isActiveRuntimeNode, isFunctionNode, isSubpromptNode, isRouterNode, nodeIsOptional, nodeLabel, nodeAssets } from './chunk-UDFWBALP.js';
-import { classifierDecision, getConsumedOutputSchema, withoutReservedClassifierFields, FLOW_CAPTURE_CHANNELS, captureDestinationFieldName, invalidCaptureDestinationMessage } from './chunk-ORH2BZEM.js';
+import { resolveFlowOutputFields, interpolateNodeInstruction, resolveNodeBindings, validateConsumedNodeOutput, appendAttempt, resolveTerminalFailureStatus, remainingActiveExecutionMs, deriveCheckEvidence, computeFlowStateFromSnapshots, availableRouterFrontier, evaluateRouterSelection, routerSelectionOutput, planRouterSkips, unsettledRouterBranchIds, countFailedAttempts, hasAutomaticRetryBudget, persistedRouterSelection } from './chunk-UMSWQKCY.js';
+import { undeclaredSubFlowOutputReads, INPUT_SCHEMA_SHAPES_HINT, coerceInputSchema } from './chunk-JUXQUZOQ.js';
+import { parseFlowDefinition } from './chunk-QZLWJETK.js';
+import { describeStimulus, buildOrchestratorPrompt, renderSubpromptPrompt, renderStimulusPrompt } from './chunk-XUUYAS3Z.js';
+import { deterministicNodeKindLabel, nodeInstruction, flowDefaults, isAgentNode, isGateNode, isCheckNode, nodeRequiresApproval, isSubFlowNode, isActiveRuntimeNode, isFunctionNode, isSubpromptNode, isRouterNode, nodeIsOptional, nodeLabel, nodeAssets } from './chunk-NFGRW3L7.js';
+import { classifierDecision, getConsumedOutputSchema, withoutReservedClassifierFields, FLOW_CAPTURE_CHANNELS, captureDestinationFieldName, invalidCaptureDestinationMessage } from './chunk-QCI6D7E4.js';
 import { withActivityLabelDefs } from './chunk-IDEA6CYI.js';
 import { processAlive } from './chunk-4GY63JU6.js';
-import { withFsDeadline, tryWithFsDeadline, FsDeadlineError, fsDeadlineMs } from './chunk-5K2VT6E2.js';
+import { withFsDeadline, tryWithFsDeadline, FsDeadlineError, fsDeadlineMs } from './chunk-DXUQCMVT.js';
 import { portableSpawn } from './chunk-ICSCSM5D.js';
 import { createLogger, redactCredentials } from './chunk-BOFL7GIF.js';
 import { resolve, relative, sep, isAbsolute, join, dirname } from 'path';
@@ -96,6 +96,14 @@ function childDefinition(request, authored) {
     }
   };
 }
+function childSnapshots(execution) {
+  return new Map(
+    Object.entries(execution.nodes).map(([id, node]) => [
+      id,
+      { status: node.status, output: node.output }
+    ])
+  );
+}
 function terminalError(execution) {
   const failed = Object.values(execution.nodes).find((node) => node.status === "failed");
   if (failed?.error) return failed.error;
@@ -181,6 +189,12 @@ var SessionInlineSubFlowRunner = class {
         ].join(" -> ")}`
       );
     }
+    const undeclared = undeclaredSubFlowOutputReads(request.parentFlow, request.node.id, authored);
+    if (undeclared.length > 0) {
+      throw new Error(
+        `flow ${request.parentFlow.id} node ${request.node.id} reads output field ${undeclared.join(", ")}, which flow ${authored.id} does not return (declare it in output.schema and bind it in output.bindings)`
+      );
+    }
     const flow = childDefinition(request, authored);
     const adapter = new FlowAdapter();
     const handle = await adapter.connect(
@@ -267,11 +281,25 @@ var SessionInlineSubFlowRunner = class {
         const execution = session.adapter.getExecution(session.handle);
         if (execution.done || execution.status === "complete") {
           await this.dispose(session);
+          let fields;
+          try {
+            fields = resolveFlowOutputFields(session.flow, childSnapshots(execution));
+          } catch (error) {
+            return {
+              status: "failed",
+              error: {
+                message: error instanceof Error ? error.message : String(error),
+                recoverable: false,
+                at: (/* @__PURE__ */ new Date()).toISOString()
+              }
+            };
+          }
           return {
             status: "complete",
             output: {
               summary: `Inline child flow ${session.flow.id} completed`,
-              artifacts: []
+              artifacts: [],
+              ...fields !== void 0 ? { fields } : {}
             }
           };
         }
@@ -8099,6 +8127,7 @@ function buildSkillBody(descriptor, ops, shellAccess) {
   }
   return lines.join("\n");
 }
+var MOUNT_HEALTH_RANK = { ok: 0, stale: 1, failed: 2 };
 var ConnectorManager = class {
   /**
    * @param workspaceDir - Absolute (or relative) working directory. Filesystem-face
@@ -8133,6 +8162,11 @@ var ConnectorManager = class {
    * that will never sync. See {@link listFailedConnectors}.
    */
   failedConnectors = /* @__PURE__ */ new Map();
+  /**
+   * Last verdict the host fleet wrote for each connector id. Kept across a
+   * reconnect: the host re-sends a bad verdict only every few minutes.
+   */
+  fleetHealthVerdicts = /* @__PURE__ */ new Map();
   /** Kind of each failed bulk-connect attempt, so a carried failure replays it. */
   attemptErrorKinds = /* @__PURE__ */ new Map();
   // Allocated absolute mount target → owning connector id; collisions rejected at setup, released on disconnect.
@@ -8611,10 +8645,16 @@ var ConnectorManager = class {
     return { id: decl.id, connected: false, error, access: decl.access };
   }
   /**
-   * Compatibility no-op for the removed in-container fleet health gate. Host
-   * fleet-managed cloud mounts are verified at connect time by their drivers.
+   * Record the host fleet's verdict for a connector (from the
+   * `.skaile/fleet-health/<id>` flag). Report-only: it never gates writes;
+   * `checkMountHealth` folds it into what `connector_list` shows the agent.
    */
-  async reportFleetHealth(_connectorId, _verdict) {
+  async reportFleetHealth(connectorId, verdict) {
+    this.fleetHealthVerdicts.set(connectorId, { verdict, at: (/* @__PURE__ */ new Date()).toISOString() });
+  }
+  /** Forget the host verdict for a connector (its flag file was removed). */
+  clearFleetHealth(connectorId) {
+    this.fleetHealthVerdicts.delete(connectorId);
   }
   /**
    * Compatibility no-op for the removed deferred rclone mount path.
@@ -8953,13 +8993,75 @@ var ConnectorManager = class {
    *   carries no `fleetManaged: true`).
    */
   async checkMountLiveness(id) {
+    if (!this.isFleetManagedMount(id)) return null;
+    return checkFleetMountLiveness(this.active.get(id).handle.mountPath);
+  }
+  /**
+   * Whether `id` is a connected, host fleet-managed mount: the mounts that
+   * `checkMountLiveness` and `checkMountHealth` apply to.
+   */
+  isFleetManagedMount(id) {
     const entry = this.active.get(id);
-    if (!entry || entry.handle.status !== "connected") return null;
-    const mountPath = entry.handle.mountPath;
-    if (!mountPath) return null;
+    if (!entry || entry.handle.status !== "connected") return false;
+    if (!entry.handle.mountPath) return false;
     const state = entry.handle.state;
-    if (state?.fleetManaged !== true) return null;
-    return checkFleetMountLiveness(mountPath);
+    return state?.fleetManaged === true;
+  }
+  /**
+   * Current health of a connected fleet mount: the in-container liveness probe
+   * plus the host's last verdict, the worse of the two winning. Read-only; it
+   * never remounts and never blocks writes.
+   *
+   * @returns `null` when neither signal applies (unknown id, not connected,
+   *   not fleet-managed and no host verdict).
+   */
+  async checkMountHealth(id) {
+    const entry = this.active.get(id);
+    if (!entry || entry.handle.status !== "connected") return null;
+    const host = this.fleetHealthVerdicts.get(id);
+    const liveness = await this.checkMountLiveness(id);
+    if (!liveness && !host) return null;
+    const now2 = (/* @__PURE__ */ new Date()).toISOString();
+    const candidates = [];
+    if (liveness?.state === "dead") {
+      candidates.push({
+        status: "failed",
+        errorClass: "mount_gone",
+        detail: liveness.reason,
+        checkedAt: now2
+      });
+    } else if (liveness?.state === "unresponsive") {
+      candidates.push({
+        status: "stale",
+        errorClass: "mount_unresponsive",
+        detail: liveness.reason,
+        checkedAt: now2
+      });
+    } else if (liveness) {
+      candidates.push({ status: "ok", checkedAt: now2 });
+    }
+    if (host?.verdict === "error") {
+      candidates.push({ status: "failed", errorClass: "host_error", checkedAt: host.at });
+    } else if (host?.verdict === "degraded") {
+      candidates.push({ status: "stale", errorClass: "host_degraded", checkedAt: host.at });
+    } else if (host && !liveness) {
+      candidates.push({ status: "ok", checkedAt: host.at });
+    }
+    return candidates.reduce(
+      (worst, c) => MOUNT_HEALTH_RANK[c.status] > MOUNT_HEALTH_RANK[worst.status] ? c : worst
+    );
+  }
+  /**
+   * `listConnectors()` with a `health` field on each mount `checkMountHealth`
+   * applies to. Probes run in parallel, each bounded by the liveness deadline.
+   */
+  async listConnectorsWithHealth() {
+    return Promise.all(
+      this.listConnectors().map(async (c) => {
+        const health = await this.checkMountHealth(c.id);
+        return health ? { ...c, health } : c;
+      })
+    );
   }
   /**
    * Pull the latest remote state for all connected filesystem-face connectors.
@@ -9197,6 +9299,18 @@ function readFailedConnectors(manager) {
     return [];
   }
 }
+async function buildConnectorListPayload(manager) {
+  const connected = typeof manager.listConnectorsWithHealth === "function" ? await manager.listConnectorsWithHealth() : manager.listConnectors();
+  const payload = { connected, failed: readFailedConnectors(manager) };
+  const unhealthy = connected.flatMap(
+    (c) => c.health && c.health.status !== "ok" ? [{ id: c.id, health: c.health }] : []
+  );
+  if (unhealthy.length > 0) {
+    const names = unhealthy.map((c) => `${c.id} (${c.health.status}, ${c.health.errorClass ?? "unknown"})`).join(", ");
+    payload.notice = `Mount not healthy: ${names}. Tell the user; do not write to it.`;
+  }
+  return payload;
+}
 async function buildSdkConnectorTools(manager, options) {
   let sdk = options?.sdk;
   if (!sdk) {
@@ -9231,14 +9345,11 @@ function buildConnectorToolDefs(manager, options) {
   const tools = [];
   tools.push({
     name: "connector_list",
-    description: "List connectors as {connected, failed}. `connected` holds the usable connectors with their id, driver, access mode, and available operations; `failed` holds connectors that did not connect this session, with the failure reason \u2014 their mount paths are dead directories, not synced workspaces. Use this to discover connectors that may have been added after session start (e.g. shared-state stores like 'presence' or 'session' pushed by the host).",
+    description: "List connectors as {connected, failed, notice?}. `connected` holds the usable connectors with their id, driver, access mode, and available operations; a host-managed mount also carries `health` {status: ok|stale|failed, errorClass, checkedAt}, checked live on each call. `failed` holds connectors that did not connect this session, with the failure reason \u2014 their mount paths are dead directories, not synced workspaces. Call this after a write fails under a mount, and before a long write session: if a mount's health is not ok, tell the user and do not write to it. Also use it to discover connectors added after session start (e.g. shared-state stores like 'presence' or 'session' pushed by the host).",
     inputSchema: {},
     handler: async () => {
       try {
-        const entries = {
-          connected: manager.listConnectors(),
-          failed: readFailedConnectors(manager)
-        };
+        const entries = await buildConnectorListPayload(manager);
         return { content: [{ type: "text", text: JSON.stringify(entries, null, 2) }] };
       } catch (err) {
         return {
@@ -9629,9 +9740,23 @@ function buildFilesystemSection(manager, fsConnectors) {
       "> **Unavailable mounts are read-only at the filesystem layer.** A mount marked `unavailable (syncing / failed)` is not live yet \u2014 its directory is mounted read-only, so writes fail. Do not create files there: the contents are not the real workspace, and anything you write would be a phantom that diverges from the remote once it mounts. Wait for it to become writable (watch the connector status)."
     );
   }
+  if (fsConnectors.some((c) => isFleetManaged2(manager, c.id))) {
+    lines.push("");
+    lines.push(
+      "If a write under a mount fails, or before a long write session, call `connector_list`: for a mount whose `health.status` is not `ok`, tell the user; do not write to it."
+    );
+  }
   appendGitAuthNotes(lines, manager, fsConnectors);
   return lines.join("\n");
 }
+function isFleetManaged2(manager, id) {
+  if (typeof manager.isFleetManagedMount !== "function") return false;
+  try {
+    return manager.isFleetManagedMount(id);
+  } catch {
+    return false;
+  }
+}
 function appendGitAuthNotes(lines, manager, fsConnectors) {
   const fsConnectorIds = new Set(fsConnectors.map((c) => c.id));
   const gitConnectors = manager.listGitConnectors().filter((g) => fsConnectorIds.has(g.id));
@@ -12009,6 +12134,24 @@ var FlowAdapter = class extends AbstractConnector {
           this.projectInlineInteraction(handle, node.id, result.projection);
           continue;
         }
+        if (result.status === "complete") {
+          const validation = validateConsumedNodeOutput(
+            state.flowDef,
+            node.id,
+            result.output?.fields
+          );
+          if (!validation.valid) {
+            result = {
+              status: "failed",
+              error: {
+                message: `Sub-flow node ${node.id} failed: output does not match its consumed schema: ${validation.issues.join("; ")}`,
+                recoverable: false,
+                at: now()
+              },
+              output: result.output
+            };
+          }
+        }
         let subFlowRetrying = false;
         this.mutate(
           handle,
@@ -13140,6 +13283,6 @@ function describeFlowOperations() {
   return new FlowAdapter().tools.describeOperations({ access: "read-write" });
 }
 
-export { AbstractConnector, BUILTIN_CONNECTOR_CATALOG, BoxConnector, CONNECT_FAILURE_CARRY_OVER_TTL_MS, ClassifierSubpromptRunner, ConnectFailureCarryOver, ConnectorManager, DeployConnector, DevServerConnector, FlowAdapter, GitConnector, GmailConnector, GoogleDriveConnector, LocalConnector, LogBuffer, MAX_REARM_MS, MIN_REFRESH_DELAY_MS, ManagedGitconfigCollisionError, MattermostConnector, MemoryConnector, MinIOConnector, NO_ACTIVE_FLOW_ERROR, PortPool, PostgresConnector, REFRESH_LEAD_MS, S3Connector, S3FetchStoppedError, S3PresignedRequestError, S3_PRESIGN_BATCH, SQLiteConnector, SessionInlineSubFlowRunner, SessionNodeExecutor, SessionSubpromptRunner, SharePointConnector, StaticServerConnector, TunnelConnector, WebDAVConnector, XStateConnector, XStateStoreConnector, __test, atomicReplaceCredential, buildConnectorPromptSection, buildConnectorToolDefs, buildFlowPromptEvent, buildFlowToolDefs, buildLazyFlowToolDefs, buildLazySdkFlowTools, buildSdkConnectorTools, buildSdkFlowTools, checkFleetMountLiveness, classifierQuestion, classifyConnectError, createConnector, createConnector10, createConnector11, createConnector12, createConnector13, createConnector14, createConnector15, createConnector16, createConnector17, createConnector18, createConnector19, createConnector2, createConnector20, createConnector3, createConnector4, createConnector5, createConnector6, createConnector7, createConnector8, createConnector9, createFsWatcher, createWorktree, defaultSpawn, describeFlowOperations, driveOrchestratorTurn, ensureDirMode, ensureFleetMounted, ensureRefreshAttemptStamp, findGitRoot, findMissingPackages, getConnector, installNpmPackages, isFleetManaged, isPackageResolvable, listConnectors, listWorktrees, missingTokenMediatorMessage, parseListObjectsV2, presignScopePrefix, presignableKey, readGitSyncStatus, registerBuiltinConnectors, removeMountBlock, removeUnavailableMountBlock, renderCredentialHelperScript, tryGetConnector, worktreeRegistry, writeHelperScript, writeMountBlock, writeUnavailableMountBlock };
-//# sourceMappingURL=chunk-5RWL4L3X.js.map
-//# sourceMappingURL=chunk-5RWL4L3X.js.map
+export { AbstractConnector, BUILTIN_CONNECTOR_CATALOG, BoxConnector, CONNECT_FAILURE_CARRY_OVER_TTL_MS, ClassifierSubpromptRunner, ConnectFailureCarryOver, ConnectorManager, DeployConnector, DevServerConnector, FlowAdapter, GitConnector, GmailConnector, GoogleDriveConnector, LocalConnector, LogBuffer, MAX_REARM_MS, MIN_REFRESH_DELAY_MS, ManagedGitconfigCollisionError, MattermostConnector, MemoryConnector, MinIOConnector, NO_ACTIVE_FLOW_ERROR, PortPool, PostgresConnector, REFRESH_LEAD_MS, S3Connector, S3FetchStoppedError, S3PresignedRequestError, S3_PRESIGN_BATCH, SQLiteConnector, SessionInlineSubFlowRunner, SessionNodeExecutor, SessionSubpromptRunner, SharePointConnector, StaticServerConnector, TunnelConnector, WebDAVConnector, XStateConnector, XStateStoreConnector, __test, atomicReplaceCredential, buildConnectorListPayload, buildConnectorPromptSection, buildConnectorToolDefs, buildFlowPromptEvent, buildFlowToolDefs, buildLazyFlowToolDefs, buildLazySdkFlowTools, buildSdkConnectorTools, buildSdkFlowTools, checkFleetMountLiveness, classifierQuestion, classifyConnectError, createConnector, createConnector10, createConnector11, createConnector12, createConnector13, createConnector14, createConnector15, createConnector16, createConnector17, createConnector18, createConnector19, createConnector2, createConnector20, createConnector3, createConnector4, createConnector5, createConnector6, createConnector7, createConnector8, createConnector9, createFsWatcher, createWorktree, defaultSpawn, describeFlowOperations, driveOrchestratorTurn, ensureDirMode, ensureFleetMounted, ensureRefreshAttemptStamp, findGitRoot, findMissingPackages, getConnector, installNpmPackages, isFleetManaged, isPackageResolvable, listConnectors, listWorktrees, missingTokenMediatorMessage, parseListObjectsV2, presignScopePrefix, presignableKey, readGitSyncStatus, registerBuiltinConnectors, removeMountBlock, removeUnavailableMountBlock, renderCredentialHelperScript, tryGetConnector, worktreeRegistry, writeHelperScript, writeMountBlock, writeUnavailableMountBlock };
+//# sourceMappingURL=chunk-QFZFZXQW.js.map
+//# sourceMappingURL=chunk-QFZFZXQW.js.map