@skaile/workspaces 5.10.0 → 5.12.0

package/dist/{chunk-NRDSGLCQ.js → chunk-N5M2EISA.js}

@@ -1,36 +1,36 @@
-import { WorkspacePlugin } from './chunk-5QI2JYJC.js';
-import { buildWorkspaceToolDefs } from './chunk-FRPBSUFH.js';
-import { findAiAssetsRoot } from './chunk-Y63UQZ7P.js';
-import { WebSocketServerTransport } from './chunk-5LKOAX7I.js';
+import { WorkspacePlugin } from './chunk-YQU2BPQD.js';
+import { buildWorkspaceToolDefs } from './chunk-X6LKA3TJ.js';
+import { findAiAssetsRoot } from './chunk-QCEKGYHF.js';
+import { WebSocketServerTransport } from './chunk-OQ5MKDS3.js';
 import { assembleSystemPrompt, buildCapabilitiesPromptSection } from './chunk-W3UDISS2.js';
-import { prepareNativePolicy, codexInstanceEnvironment, parseCodexCredential, parseCodexRefreshInput, parseCodexRefreshResult } from './chunk-NWDSLXOX.js';
-import { resolveFlowPath } from './chunk-IJHH4DSW.js';
-import { findAiAssetsRoot as findAiAssetsRoot$1, deployCatalogEntry, undeployCatalogEntry } from './chunk-HOHUEKES.js';
-import { ConnectFailureCarryOver, registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, buildSdkConnectorTools, buildLazySdkFlowTools, describeFlowOperations, buildConnectorToolDefs, buildFlowToolDefs, SessionNodeExecutor, SessionSubpromptRunner, ClassifierSubpromptRunner, SessionInlineSubFlowRunner, driveOrchestratorTurn, buildSdkFlowTools } from './chunk-7CR6HT2X.js';
-import { loadYamlConnectorDeclarations, withMaterializedConnectorDeclarations, SecretProviderChain, ConnectorStartupError, isKnownSecretRef, EnvSecretProvider, PreMintedSecretProvider, InMemorySecretProvider, resolvedConfigToDeclarations, deriveSingleMaterializedConnectorDeclaration } from './chunk-V5TZH4GF.js';
-import { EventNormalizer } from './chunk-OBVJ7RPW.js';
-import { probeResumeTranscript, transcriptStoreForRuntime } from './chunk-QG3HOJEK.js';
+import { prepareNativePolicy, codexInstanceEnvironment, parseCodexCredential, parseCodexRefreshInput, parseCodexRefreshResult } from './chunk-PHRNUTSG.js';
+import { resolveFlowPath } from './chunk-2X3JBVGD.js';
+import { findAiAssetsRoot as findAiAssetsRoot$1, deployCatalogEntry, undeployCatalogEntry } from './chunk-DCHQ6BAZ.js';
+import { ConnectFailureCarryOver, registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, buildSdkConnectorTools, buildLazySdkFlowTools, describeFlowOperations, buildConnectorToolDefs, buildFlowToolDefs, SessionNodeExecutor, SessionSubpromptRunner, ClassifierSubpromptRunner, SessionInlineSubFlowRunner, driveOrchestratorTurn, buildSdkFlowTools } from './chunk-27L6BBAT.js';
+import { loadYamlConnectorDeclarations, withMaterializedConnectorDeclarations, SecretProviderChain, ConnectorStartupError, isKnownSecretRef, EnvSecretProvider, PreMintedSecretProvider, InMemorySecretProvider, resolvedConfigToDeclarations, deriveSingleMaterializedConnectorDeclaration } from './chunk-ICIYSJBQ.js';
+import { EventNormalizer } from './chunk-NDF24LYP.js';
+import { probeResumeTranscript, transcriptStoreForRuntime } from './chunk-2JFIFDDO.js';
 import { CodexNativeStateUnavailable } from './chunk-LOO5CB5M.js';
 import { dispatchCapability } from './chunk-2H73V6XR.js';
 import { classifyClaudeSdkError } from './chunk-B4X2N7JQ.js';
 import { agentExecRequested } from './chunk-YROR332M.js';
-import { driverCapabilities, toAgentEffort, createDriver, catalogLayer, providerCredentialEnvName, toMergedRegistry, registryCredentialEnv, AI_PROVIDER_PRESETS, supportsLiveToolUpdates } from './chunk-HJ5MCB3L.js';
-import { loadFlow } from './chunk-7I5VRVDP.js';
-import { parseFlowDefinition } from './chunk-MGGFBZWA.js';
+import { unresolvedProviderCredentials, driverCapabilities, toAgentEffort, createDriver, catalogLayer, providerCredentialEnvName, toMergedRegistry, registryCredentialEnv, AI_PROVIDER_PRESETS, supportsLiveToolUpdates } from './chunk-MF54ZHWT.js';
+import { loadFlow } from './chunk-7XWUJC3A.js';
+import { parseFlowDefinition } from './chunk-X3RMRJNR.js';
 import { renderStimulusPrompt } from './chunk-M3WPBTGJ.js';
 import { TERMINAL_AGENT_RUN_STATUSES, withActivityLabelJsonSchema, TOOL_ACTIVITY_PROMPT_SECTION, SESSION_ROOT_CONNECTOR_ID, PLATFORM_BLOCKS_RUNTIME_FEATURE, PROTOCOL_VERSION, deliveryClassOf } from './chunk-F4NJDSR7.js';
-import { knowledgeKindProvider, scanLibraryRoot } from './chunk-3BEY4WK3.js';
-import { createDefaultKindRegistry } from './chunk-GEWAIQZ5.js';
-import { BindingSchema, effectiveComposes, AgentManifestSchema, AgentTriggerSchema } from './chunk-32XKCNCL.js';
-import { readLock, buildAgentPromptSections, resolveSettings, loadProviderRegistry, resolveLibraryDir } from './chunk-2FMEGSBN.js';
-import { resolveRuntimeAssets } from './chunk-GFCXNFTW.js';
+import { knowledgeKindProvider, scanLibraryRoot } from './chunk-C3BMXXTN.js';
+import { createDefaultKindRegistry } from './chunk-7CR2OZPA.js';
+import { BindingSchema, effectiveComposes, AgentManifestSchema, AgentTriggerSchema } from './chunk-6VLHITAM.js';
+import { readLock, buildAgentPromptSections, resolveSettings, loadProviderRegistry, resolveLibraryDir } from './chunk-T5TSLSRO.js';
+import { resolveRuntimeAssets } from './chunk-SHQMPGOL.js';
 import { DEFAULT_DRIVER_ID, resolveDriverPaths } from './chunk-5BEFNLOR.js';
-import { matchPin, DEFAULT_AGENT_INSTANCE_ID, effectiveAgentInstances, resolveSkWorkspaceConfig, resolveAgentDir, loadMcpServerDeclarations, COMPACTION_DEFAULTS, resolveCompactionThresholdPercent, getGlobalCacheDir, sourceCacheKey, resolveAgentDefinitionDir, AgentRefResolutionError, validateAssetRecipeAttr, deriveSingleMaterializedMcpDeclaration, stageMaterializedSkills, readSkillAllowList, isStagedSkillMarkerFor, unstageSkill, STAGED_SKILL_MARKER } from './chunk-JZCSNEHK.js';
+import { matchPin, DEFAULT_AGENT_INSTANCE_ID, effectiveAgentInstances, resolveSkWorkspaceConfig, resolveAgentDir, loadMcpServerDeclarations, COMPACTION_DEFAULTS, resolveCompactionThresholdPercent, getGlobalCacheDir, sourceCacheKey, resolveAgentDefinitionDir, AgentRefResolutionError, validateAssetRecipeAttr, deriveSingleMaterializedMcpDeclaration, stageMaterializedSkills, readSkillAllowList, isStagedSkillMarkerFor, unstageSkill, STAGED_SKILL_MARKER } from './chunk-PNOGX36L.js';
 import { globalSkaileDir } from './chunk-L5VSIPQD.js';
 import { driverTargetForDriver, SUPPORTED_DRIVER_TARGETS, DRIVER_TARGETS } from './chunk-CPSIPIX7.js';
-import { withFsDeadline, FsDeadlineError, fsDeadlineMs, parseFrontmatter, tryWithFsDeadline } from './chunk-Y34MSWEZ.js';
-import { parseAssetRef } from './chunk-4OV5DSBB.js';
-import { resolveLogStoreConfig, createLogStoreFromConfig, OnLogBridgeSink, WsLogSink, resolveLogsRetention, enforceLogsRetention } from './chunk-DALV4HHP.js';
+import { withFsDeadline, FsDeadlineError, fsDeadlineMs, parseFrontmatter, tryWithFsDeadline } from './chunk-XTVSNWLL.js';
+import { parseAssetRef } from './chunk-PNTXHTBC.js';
+import { resolveLogStoreConfig, createLogStoreFromConfig, OnLogBridgeSink, WsLogSink, resolveLogsRetention, enforceLogsRetention } from './chunk-DKXNKFKP.js';
 import { pickRegistryEntries, registryEntries, resolveEntryBaseUrl, parseModelRef, isEntryEnabled, parseCredentialRef } from './chunk-MJHSLODD.js';
 import { getLogStore, registerLogStore, createLogger, resetLogStore, isUnwritableStreamError, markStreamBroken, isBrokenPipeError, redactCredentials } from './chunk-BOFL7GIF.js';
 import { __require } from './chunk-NSBPE2FW.js';
@@ -61,6 +61,39 @@ import mime from 'mime';
 import { homedir } from 'os';
 import { Worker } from 'worker_threads';
 
+// runner/src/final-text.ts
+function messageText(message) {
+  if (!message) return "";
+  if (typeof message.content === "string") return message.content;
+  if (!Array.isArray(message.content)) return "";
+  return message.content.filter((block) => block.type === "text" && block.text).map((block) => block.text).join("");
+}
+function createFinalTextFallback(write) {
+  let streamed = false;
+  return (event) => {
+    if (event.type === "message_start") {
+      streamed = false;
+    } else if (event.type === "message_update") {
+      if (event._textDelta) streamed = true;
+    } else if (event.type === "message_end") {
+      const hadStream = streamed;
+      streamed = false;
+      if (hadStream || event.message?.role !== "assistant") return;
+      const text2 = messageText(event.message);
+      if (text2) write(text2);
+    }
+  };
+}
+
+// runner/src/credential-notice.ts
+function unresolvedCredentialNotices(session) {
+  if (session.driverType !== "omp") return [];
+  return unresolvedProviderCredentials(session.registry, {
+    env: { ...process.env, ...session.credentialEnv }
+  }).map(
+    (u) => `provider '${u.providerId}' is not used: ${u.reason}; omp falls back to its own login (check with \`skaile providers test ${u.providerId}\`)`
+  );
+}
 var PreInitRingSink = class {
   ring = [];
   cap;
@@ -1138,12 +1171,31 @@ async function resolveItem(item, binding, source, compileManifest, runSnapshot,
         item.ref
       );
     }
+    if (implicit) await assertConventionItemUnedited(item, compiled2, source);
     return asResolved(item, binding, compiled2, "compiled");
   }
-  if (binding === "discoverable" && compiled2)
+  if (binding === "discoverable" && compiled2) {
+    if (implicit) await assertConventionItemUnedited(item, compiled2, source);
     return asResolved(item, binding, compiled2, "compiled");
+  }
   return fromSource(item, binding, source);
 }
+async function assertConventionItemUnedited(item, compiled2, source) {
+  let live;
+  try {
+    live = await source.load(item.ref, item.kind);
+  } catch (err) {
+    if (err instanceof CompositionError && err.code === "composition_asset_missing") return;
+    throw err;
+  }
+  if (live.sha256 === compiled2.hash) return;
+  throw new CompositionError(
+    "composition_conflict",
+    "hash_mismatch",
+    `"${item.ref}" (${item.kind}): the file hashes to ${live.sha256.slice(0, 12)}\u2026 but compile_manifest.json records ${compiled2.hash.slice(0, 12)}\u2026 \u2014 it was edited after \`skaile rebuild\`; run \`skaile rebuild\` to pin the edit or restore the file with \`skaile install\``,
+    item.ref
+  );
+}
 async function resolveSubagentItem(item, binding, source, compileManifest, runSnapshot) {
   const captured = findEntry(runSnapshot?.items, item, void 0);
   if (captured) return asResolved(item, binding, captured, "run-snapshot");
@@ -3671,7 +3723,11 @@ function nestedLauncher(deps) {
       agentDir: target.agentDir,
       sessionId: ctx.run.sessionId,
       ...Number.isFinite(maxTurns) ? { maxTurns } : {},
-      ...modelPreferred ? { modelRef: modelPreferred } : {}
+      // `model` is what the primary session hands the driver (`--model`); a registry
+      // session resolves `modelRef` first. Both are set, so the role runs on its own
+      // `model.preferred` whether or not a provider registry is configured, not on the
+      // parent's model or the driver default.
+      ...modelPreferred ? { model: modelPreferred, modelRef: modelPreferred } : {}
     });
     const release2 = async () => {
       session.driver.kill();
@@ -3869,9 +3925,12 @@ async function createStandaloneAgentSurface(opts) {
 
 // runner/src/composition/prompt-sections.ts
 function buildRunnerAgentSections(resolved, promptExtensions) {
+  const blocks = resolved?.inlineBlocks ?? [];
+  const duties = blocks.filter((block) => block.implicit && block.kind === "prompt").map((block) => block.content.trim()).filter(Boolean).join("\n\n");
   return buildAgentPromptSections({
     memory: resolved?.memoryBlocks ?? [],
-    composed: (resolved?.inlineBlocks ?? []).filter((block) => !block.implicit).map((block) => ({ text: block.content, source: block.ref })),
+    duties,
+    composed: blocks.filter((block) => !block.implicit).map((block) => ({ text: block.content, source: block.ref })),
     promptExtensions: promptExtensions.map((e) => ({ text: e.value, source: e.source }))
   });
 }
@@ -3918,6 +3977,9 @@ function buildContextSection(context) {
   return lines.join("\n");
 }
 var execFileAsync = promisify(execFile);
+function runsInContainer() {
+  return existsSync("/.dockerenv") || existsSync("/run/.containerenv") || process.env.KUBERNETES_SERVICE_HOST !== void 0;
+}
 var PROBE_TIMEOUT_MS = 1500;
 var VERSION_PROBES = [
   { label: "Python", bin: "python3", args: ["--version"] },
@@ -3976,7 +4038,7 @@ async function buildEnvironmentSection(projectDir) {
   const lines = [
     "## Environment",
     "",
-    "You are running inside an isolated container with the following tools available:",
+    runsInContainer() ? "You are running inside an isolated container with the following tools available:" : "You are running on the user's machine with the following tools available:",
     ""
   ];
   if (runtimes.length > 0) {
@@ -6477,20 +6539,26 @@ async function runAgentChat(opts) {
     throw error;
   }
   const driver = agentSession.driver;
+  for (const notice of unresolvedCredentialNotices(agentSession)) {
+    console.error(`  ${pc.yellow("!")} ${notice}`);
+  }
   await driver.start();
   let firstChunk = true;
   const mdStream = new MarkdownStreamer();
+  const writeText = (text2) => {
+    if (firstChunk) {
+      process.stdout.write(PROMPT_AGENT);
+      firstChunk = false;
+    }
+    mdStream.write(text2);
+  };
+  const printUnstreamed = createFinalTextFallback(writeText);
   driver.on("agent-event", (event) => {
     opts.onEvent?.(event);
+    printUnstreamed(event);
     if (event.type === "message_update") {
       const delta = event._textDelta;
-      if (delta) {
-        if (firstChunk) {
-          process.stdout.write(PROMPT_AGENT);
-          firstChunk = false;
-        }
-        mdStream.write(delta);
-      }
+      if (delta) writeText(delta);
     } else if (event.type === "message_retract") {
       mdStream.retract(event.text);
     }
@@ -6503,14 +6571,17 @@ ${message}`;
   }
   try {
     await new Promise((resolve4, reject) => {
+      let settled = false;
       const onEvent = (event) => {
         if (event.type === "agent_end") {
+          settled = true;
           driver.off("agent-event", onEvent);
           mdStream.end();
           process.stdout.write("\n");
           driver.kill();
           resolve4();
         } else if (event.type === "error" && event.retrying !== true) {
+          settled = true;
           driver.off("agent-event", onEvent);
           const err = Object.assign(new Error(String(event.error)), {
             detail: event.detail
@@ -6522,6 +6593,8 @@ ${message}`;
       };
       driver.on("agent-event", onEvent);
       driver.prompt(message).catch((err) => {
+        if (settled) return;
+        settled = true;
         driver.off("agent-event", onEvent);
         chatLog.error("prompt failed", err);
         driver.kill();
@@ -6671,6 +6744,38 @@ function deliveryFor(item, binding, target) {
   }
   return "unsupported";
 }
+
+// runner/src/composition/verify.ts
+async function verifyConventionItems(opts) {
+  const compileManifest = await loadCompileManifestFromDir(opts.agentDir);
+  if (!compileManifest) return [];
+  const files = await hashAgentFiles(opts.agentDir);
+  const items = effectiveComposes(
+    [],
+    files.map((f) => f.path)
+  );
+  const source = createCompositionContentSource({
+    agentDir: opts.agentDir,
+    projectDir: opts.projectDir,
+    registry: opts.registry
+  });
+  const drifted = [];
+  for (const item of items) {
+    const binding = resolveBinding(item);
+    if (binding === "inline-live") continue;
+    const compiled2 = compileManifest.entries.find(
+      (e) => e.asset_ref === item.ref && e.kind === item.kind && e.binding === binding
+    );
+    if (!compiled2) continue;
+    try {
+      await assertConventionItemUnedited(item, compiled2, source);
+    } catch (err) {
+      if (err instanceof CompositionError) drifted.push(err);
+      else throw err;
+    }
+  }
+  return drifted;
+}
 var ResourceOperationError = class extends Error {
   constructor(message, code) {
     super(message);
@@ -7393,6 +7498,20 @@ async function handleSessionRootResourceRequest(command, rootDir, emit) {
 }
 async function dispatchResourceRequest(command, deps) {
   const { resourceManager, projectDir, emit } = deps;
+  if (typeof command.connectorId !== "string" && "resourceId" in command) {
+    const aliased = command.resourceId;
+    if (typeof aliased === "string") command = { ...command, connectorId: aliased };
+  }
+  if (typeof command.connectorId !== "string" || command.connectorId.length === 0) {
+    emit({
+      type: "resource_response",
+      requestId: command.requestId,
+      resourceId: "",
+      operation: command.operation,
+      error: "resource_request needs a string `connectorId` (the connector or mount id)"
+    });
+    return;
+  }
   if (command.connectorId === SESSION_ROOT_CONNECTOR_ID) {
     await handleSessionRootResourceRequest(command, projectDir, emit);
     return;
@@ -7793,6 +7912,38 @@ function movedOffBlockedSeat(blockedConfigId, outcome) {
   return outcome.configId !== blockedConfigId;
 }
 
+// runner/src/usage-limit-turn-hold.ts
+var UNKNOWN_RESET_HOLD_MS = 60 * 60 * 1e3;
+function holdUntil(nowMs, resetsAt) {
+  if (resetsAt !== void 0 && resetsAt > 1e9 && resetsAt < 1e11) {
+    return resetsAt * 1e3;
+  }
+  return nowMs + UNKNOWN_RESET_HOLD_MS;
+}
+function createUsageLimitTurnHold(opts = {}) {
+  const now = opts.now ?? Date.now;
+  let heldUntil = null;
+  const isHeld = () => {
+    if (heldUntil !== null && now() >= heldUntil) heldUntil = null;
+    return heldUntil !== null;
+  };
+  return {
+    noteLimitFailover: (switched, resetsAt) => {
+      heldUntil = switched ? null : holdUntil(now(), resetsAt);
+    },
+    release: () => {
+      heldUntil = null;
+    },
+    admit: (stimulus) => {
+      if (!isHeld()) return true;
+      if (stimulus.kind === "state_changed") return false;
+      heldUntil = null;
+      return true;
+    },
+    isHeld
+  };
+}
+
 // runner/src/provider-quota-forwarder.ts
 function createProviderQuotaForwarder(deps) {
   const now = deps.now ?? (() => /* @__PURE__ */ new Date());
@@ -12428,6 +12579,7 @@ async function startAgentServer(opts) {
     projectDir: opts.projectDir,
     yamlBlock: wsConfig.logging,
     onLog: opts.onLog,
+    ...opts.stdout === void 0 ? {} : { stdout: opts.stdout },
     // Broker mode has no host-side trim of this file; see logging-bootstrap.ts.
     enforceRetention: true
   });
@@ -12440,6 +12592,11 @@ async function startAgentServer(opts) {
   serverLog.info("ws auth token", {
     source: opts.authToken ? "caller" : takenAuthToken.source
   });
+  if (!opts.transport && !authToken) {
+    serverLog.warn(
+      `WARNING: the WebSocket server on port ${opts.port ?? 8080} listens on ${opts.host ?? "all interfaces"} without authentication: any host that can reach the port can drive this agent. Set SKAILE_WS_AUTH_TOKEN, or bind 127.0.0.1 with --host.`
+    );
+  }
   if (takenAuthToken.unlinkError)
     serverLog.warn("ws auth token file could not be removed", {
       code: takenAuthToken.unlinkError
@@ -12470,7 +12627,12 @@ async function startAgentServer(opts) {
   } else {
     serverLog.warn("no agent definition found in skaile.yaml");
   }
-  const transport = opts.transport ?? new WebSocketServerTransport({ port, onLog: log, ...authToken ? { authToken } : {} });
+  const transport = opts.transport ?? new WebSocketServerTransport({
+    port,
+    onLog: log,
+    ...opts.host ? { host: opts.host } : {},
+    ...authToken ? { authToken } : {}
+  });
   logStore.addSink(
     new WsLogSink({
       send: (event) => {
@@ -12597,6 +12759,7 @@ async function startAgentServer(opts) {
       return { ok: false, code: "backend-error", message: errMsg };
     }
   }
+  const usageLimitTurnHold = createUsageLimitTurnHold();
   const providerQuotaForwarder = createProviderQuotaForwarder({
     getConfigId: () => aiProviderConfigId,
     send: sendEvent,
@@ -12608,6 +12771,7 @@ async function startAgentServer(opts) {
     setConfigId: (next) => {
       aiProviderConfigId = next;
       providerQuotaForwarder.reset();
+      usageLimitTurnHold.release();
       const live = sessionConfig;
       if (live) live.aiProviderConfigId = next;
     },
@@ -12630,8 +12794,10 @@ async function startAgentServer(opts) {
       rejection: "usage-limit"
     });
     if (outcome.switched || movedOffBlockedSeat(ctx.configId, outcome)) {
+      usageLimitTurnHold.noteLimitFailover(true);
       return { switched: true, ...outcome.configId ? { configId: outcome.configId } : {} };
     }
+    usageLimitTurnHold.noteLimitFailover(false, ctx.resetsAt);
     return {
       switched: false,
       ...outcome.configId ? { configId: outcome.configId } : {},
@@ -13382,6 +13548,12 @@ async function startAgentServer(opts) {
           return;
         }
         const stimulus = stimulusFromMetas(metas);
+        if (!usageLimitTurnHold.admit(stimulus)) {
+          serverLog.warn("flow turn held: the last turn hit a usage limit no seat covers", {
+            runId: entry.runId
+          });
+          return;
+        }
         await entry.adapter.drainRuntimeNodes(entry.handle);
         const execution = entry.adapter.getExecution(entry.handle);
         if (!entry.adapter.shouldDriveAgentTurn(entry.handle, stimulus)) return;
@@ -14216,9 +14388,11 @@ async function startAgentServer(opts) {
         agentVersion: PROTOCOL_VERSION,
         platformVersion: cmd.protocolVersion
       });
+      runtimeRejected = true;
       await cleanup();
       teardownProcessHandlers();
       disposeLogStore();
+      await transport.close();
       return;
     }
     try {
@@ -14589,6 +14763,7 @@ async function startAgentServer(opts) {
           }
         }
         sendEvent({ type: "status", phase: "thinking" });
+        usageLimitTurnHold.release();
         const carried = pendingFlowPlatformBlocks.splice(0);
         const blocks = [
           ...carried,
@@ -14975,6 +15150,19 @@ async function startAgentServer(opts) {
       case "capability_approve":
         handleCapabilityApprove(cmd);
         break;
+      default: {
+        const raw = cmd;
+        const unknownType = typeof raw === "object" && raw !== null && "type" in raw ? raw.type : void 0;
+        const label = typeof unknownType === "string" ? `"${unknownType}"` : "(no type)";
+        const hint = unknownType === "state_action" ? " `state_action` was removed in protocol v3; use the runner.set_state capability." : "";
+        log(`[serve] dropping unknown command ${label}`);
+        sendEvent({
+          type: "error",
+          fatal: false,
+          category: "validation",
+          message: `Unknown command ${label}: this runner does not handle it.${hint}`
+        });
+      }
     }
   }
   transport.onCommand((cmd) => {
@@ -14990,6 +15178,20 @@ async function startAgentServer(opts) {
       replayed: true
     });
   });
+  transport.onConnect(() => {
+    if (managedHost && !managedBootstrapClosed)
+      sendEvent({
+        type: "protocol_info",
+        version: PROTOCOL_VERSION,
+        runtimeFeatures: supportedRuntimeFeatures
+      });
+    else if (initAcknowledged && sessionReadyOutcome !== "rejected")
+      sendEvent({
+        type: "protocol_info",
+        version: PROTOCOL_VERSION,
+        runtimeFeatures: supportedRuntimeFeatures
+      });
+  });
   transport.onConnect(() => {
     if (!eventGapBuffer.hasPending) return;
     if (!initAcknowledged || sessionReadyOutcome === "rejected") {
@@ -15012,20 +15214,6 @@ async function startAgentServer(opts) {
     if (!initAcknowledged || managedCodex || aiProviderConfigId === void 0) return;
     aiCredentialRefreshScheduler.ensureArmed();
   });
-  transport.onConnect(() => {
-    if (managedHost && !managedBootstrapClosed)
-      sendEvent({
-        type: "protocol_info",
-        version: PROTOCOL_VERSION,
-        runtimeFeatures: supportedRuntimeFeatures
-      });
-    else if (initAcknowledged && sessionReadyOutcome !== "rejected")
-      sendEvent({
-        type: "protocol_info",
-        version: PROTOCOL_VERSION,
-        runtimeFeatures: supportedRuntimeFeatures
-      });
-  });
   await transport.listen();
   if (secretsMode === "env" && agentSession) {
     agentSession.startWatching();
@@ -15232,6 +15420,6 @@ function touchSession(state) {
   return { ...state, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
 }
 
-export { AgentRunError, CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CONNECTOR_MUTATE_NOT_READY, CapabilityRegistry, CompileManifestEntrySchema, CompositionError, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, DEFAULT_FLOW_MUTATE_CONNECTOR_WAIT_MS, DEFAULT_MAX_FINISHED_TREES, DEFAULT_RUN_LIMITS, MOUNT_LIST_MAX_DEPTH, MOUNT_LIST_MAX_ENTRIES, MOUNT_READ_DEADLINE_FACTOR, MOUNT_READ_MAX_CHUNK_BYTES, MOUNT_STAT_BUDGET_MS, MOUNT_STAT_MAX_ENTRIES, MOUNT_TREE_OP_DEADLINE_FACTOR, MOUNT_WRITE_MAX_CHUNK_BYTES, MarkdownStreamer, PreInitRingSink, ResourceOperationError, SESSION_ROOT_WRITABLE_DIRS, SESSION_ROOT_WRITABLE_FILES, UnknownCompositionKindError, WRITE_RANGE_PARTIAL_TTL_MS, WS_AUTH_TOKEN_ENV, WS_AUTH_TOKEN_FILE_ENV, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildCompositionRunSnapshot, buildConnectorTokenMediator, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, buildRunnerAgentSections, buildStoreSnapshotReplay, builtinCapabilities, canonicalJson, capabilityLogInstance, capabilitySignatureInputs, clearPreInitRingSink, clearSession, compileComposition, compositionRunSnapshotPath, computeCapabilitySignature, computeDirectoryTotals, computeRevisionHash, connectorRefreshKind, createAgentSession, createCompositionContentSource, createFlowConnectorReadiness, createInMemoryRunStore, createManagedCodexSubpromptDriver, createRunController, createSessionStimulusBus, defineCapability, deleteSession, describeComposition, dispatchResourceRequest, dispatchRunnerCapabilityInvocation, driverActiveAfterTurnEnd, emitSystemPromptComposed, ensureClaudeSettingsDisablesConnectors, ensureGitConfigInclude, executeConnectorMutate, extractClaudeAiOauthExpiresAt, flowStartNeedsDriverRestart, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, handleSessionRootResourceRequest, hasNonTerminalFlow, hashAgentFiles, hashContent, hostOpResumeStimulus, installPreInitRingSink, instanceForSession, isCompositionError, isEmptyKnowledgeIndex, isSessionRootPathAllowed, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadCompositionRunSnapshot, loadKnowledgeDir, loadManagedCodexHostConfig, loadSession, loadSessionById, mcpAuthSecretKey, newSession, nulTailPaddingLength, pickChatFlowTarget, pickFlowToolTarget, pickRepointedManager, planFlowMutate, prepareCodexTools, reconcilePendingDecisions, reconnectedRunNeedsAgentTurn, recreateKeepingLiveFlows, registerActiveFlow, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, rejectPendingCapabilityCallsOnDisconnect, resetRunnerLogStore, resolveAgentInstance, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveFlowMutateConnectorWaitMs, resolveMixin, restoredRunHasWorkToResume, runAgentChat, saveCompositionRunSnapshot, saveSession, setCurrentSession, setUpFlowConnector, startAgentServer, stimulusFromMetas, stripFrontmatter, takeRunnerWsAuthToken, toActiveFlowTarget, touchSession, validateInputResponse, writeClaudeCodeCredentialsFile, writeRangeChunk, writeRangePartialPath };
-//# sourceMappingURL=chunk-NRDSGLCQ.js.map
-//# sourceMappingURL=chunk-NRDSGLCQ.js.map
+export { AgentRunError, CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CONNECTOR_MUTATE_NOT_READY, CapabilityRegistry, CompileManifestEntrySchema, CompositionError, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, DEFAULT_FLOW_MUTATE_CONNECTOR_WAIT_MS, DEFAULT_MAX_FINISHED_TREES, DEFAULT_RUN_LIMITS, MOUNT_LIST_MAX_DEPTH, MOUNT_LIST_MAX_ENTRIES, MOUNT_READ_DEADLINE_FACTOR, MOUNT_READ_MAX_CHUNK_BYTES, MOUNT_STAT_BUDGET_MS, MOUNT_STAT_MAX_ENTRIES, MOUNT_TREE_OP_DEADLINE_FACTOR, MOUNT_WRITE_MAX_CHUNK_BYTES, MarkdownStreamer, PreInitRingSink, ResourceOperationError, SESSION_ROOT_WRITABLE_DIRS, SESSION_ROOT_WRITABLE_FILES, UnknownCompositionKindError, WRITE_RANGE_PARTIAL_TTL_MS, WS_AUTH_TOKEN_ENV, WS_AUTH_TOKEN_FILE_ENV, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildCompositionRunSnapshot, buildConnectorTokenMediator, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, buildRunnerAgentSections, buildStoreSnapshotReplay, builtinCapabilities, canonicalJson, capabilityLogInstance, capabilitySignatureInputs, clearPreInitRingSink, clearSession, compileComposition, compositionRunSnapshotPath, computeCapabilitySignature, computeDirectoryTotals, computeRevisionHash, connectorRefreshKind, createAgentSession, createCompositionContentSource, createFinalTextFallback, createFlowConnectorReadiness, createInMemoryRunStore, createManagedCodexSubpromptDriver, createRunController, createSessionStimulusBus, defineCapability, deleteSession, describeComposition, dispatchResourceRequest, dispatchRunnerCapabilityInvocation, driverActiveAfterTurnEnd, emitSystemPromptComposed, ensureClaudeSettingsDisablesConnectors, ensureGitConfigInclude, executeConnectorMutate, extractClaudeAiOauthExpiresAt, flowStartNeedsDriverRestart, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, handleSessionRootResourceRequest, hasNonTerminalFlow, hashAgentFiles, hashContent, hostOpResumeStimulus, installPreInitRingSink, instanceForSession, isCompositionError, isEmptyKnowledgeIndex, isSessionRootPathAllowed, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadCompositionRunSnapshot, loadKnowledgeDir, loadManagedCodexHostConfig, loadSession, loadSessionById, mcpAuthSecretKey, newSession, nulTailPaddingLength, pickChatFlowTarget, pickFlowToolTarget, pickRepointedManager, planFlowMutate, prepareCodexTools, reconcilePendingDecisions, reconnectedRunNeedsAgentTurn, recreateKeepingLiveFlows, registerActiveFlow, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, rejectPendingCapabilityCallsOnDisconnect, resetRunnerLogStore, resolveAgentInstance, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveFlowMutateConnectorWaitMs, resolveMixin, restoredRunHasWorkToResume, runAgentChat, saveCompositionRunSnapshot, saveSession, setCurrentSession, setUpFlowConnector, startAgentServer, stimulusFromMetas, stripFrontmatter, takeRunnerWsAuthToken, toActiveFlowTarget, touchSession, unresolvedCredentialNotices, validateInputResponse, verifyConventionItems, writeClaudeCodeCredentialsFile, writeRangeChunk, writeRangePartialPath };
+//# sourceMappingURL=chunk-N5M2EISA.js.map
+//# sourceMappingURL=chunk-N5M2EISA.js.map