@skaile/workspaces 5.13.0 → 5.15.0

package/dist/{chunk-HBZD3MIW.js → chunk-SRKU7QUG.js}

@@ -1,35 +1,37 @@
-import { WorkspacePlugin } from './chunk-J4DB5G36.js';
-import { buildWorkspaceToolDefs } from './chunk-NDUYFYJB.js';
-import { findAiAssetsRoot } from './chunk-2BIESC6S.js';
-import { WebSocketServerTransport } from './chunk-OQ5MKDS3.js';
+import { WorkspacePlugin } from './chunk-AVUJBSFA.js';
+import { buildWorkspaceToolDefs } from './chunk-KUB4HFGK.js';
+import { findAiAssetsRoot } from './chunk-SZPE55SB.js';
+import { startModelEndpoint } from './chunk-RTYDYSUV.js';
+import { WebSocketServerTransport } from './chunk-NOF73BUH.js';
 import { assembleSystemPrompt, buildCapabilitiesPromptSection } from './chunk-W3UDISS2.js';
 import { prepareNativePolicy, codexInstanceEnvironment, parseCodexCredential, parseCodexRefreshInput, parseCodexRefreshResult } from './chunk-PHRNUTSG.js';
-import { resolveFlowPath } from './chunk-GMDSRSGI.js';
-import { findAiAssetsRoot as findAiAssetsRoot$1, deployCatalogEntry, undeployCatalogEntry } from './chunk-ZU24LWBI.js';
-import { ConnectFailureCarryOver, registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, buildSdkConnectorTools, buildLazySdkFlowTools, describeFlowOperations, buildConnectorToolDefs, buildFlowToolDefs, SessionNodeExecutor, SessionSubpromptRunner, ClassifierSubpromptRunner, SessionInlineSubFlowRunner, driveOrchestratorTurn, buildSdkFlowTools } from './chunk-Y4Z7LGSH.js';
-import { loadYamlConnectorDeclarations, withMaterializedConnectorDeclarations, SecretProviderChain, ConnectorStartupError, isKnownSecretRef, EnvSecretProvider, PreMintedSecretProvider, InMemorySecretProvider, resolvedConfigToDeclarations, deriveSingleMaterializedConnectorDeclaration } from './chunk-5SKVCMRC.js';
-import { EventNormalizer } from './chunk-6NQDDCIL.js';
-import { probeResumeTranscript, transcriptStoreForRuntime } from './chunk-YTZFSKWL.js';
+import { resolveFlowPath } from './chunk-SCUEPCSJ.js';
+import { findAiAssetsRoot as findAiAssetsRoot$1, deployCatalogEntry, undeployCatalogEntry } from './chunk-LEOXPIC6.js';
+import { ConnectFailureCarryOver, registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, buildSdkConnectorTools, buildLazySdkFlowTools, describeFlowOperations, buildConnectorToolDefs, buildFlowToolDefs, SessionNodeExecutor, SessionSubpromptRunner, ClassifierSubpromptRunner, SessionInlineSubFlowRunner, driveOrchestratorTurn, buildSdkFlowTools } from './chunk-DP6YRAPZ.js';
+import { loadYamlConnectorDeclarations, withMaterializedConnectorDeclarations, SecretProviderChain, ConnectorStartupError, isKnownSecretRef, EnvSecretProvider, PreMintedSecretProvider, InMemorySecretProvider, resolvedConfigToDeclarations, deriveSingleMaterializedConnectorDeclaration } from './chunk-MKTJZLQM.js';
+import { EventNormalizer } from './chunk-PQF5QHVS.js';
+import { probeResumeTranscript, transcriptStoreForRuntime } from './chunk-TCWECSEB.js';
 import { CodexNativeStateUnavailable } from './chunk-LOO5CB5M.js';
-import { dispatchCapability } from './chunk-2H73V6XR.js';
+import { dispatchCapability } from './chunk-PW3TYWOI.js';
 import { classifyClaudeSdkError } from './chunk-B4X2N7JQ.js';
 import { agentExecRequested } from './chunk-YROR332M.js';
-import { unresolvedProviderCredentials, driverCapabilities, toAgentEffort, createDriver, catalogLayer, providerCredentialEnvName, toMergedRegistry, registryCredentialEnv, AI_PROVIDER_PRESETS, supportsLiveToolUpdates } from './chunk-BVJU2GKE.js';
-import { loadFlow } from './chunk-XBYSURMK.js';
+import { toAgentEffort, toMergedRegistry } from './chunk-4AKR4XPQ.js';
+import { unresolvedProviderCredentials, driverCapabilities, createDriver, catalogLayer, providerCredentialEnvName, registryCredentialEnv, AI_PROVIDER_PRESETS, supportsLiveToolUpdates } from './chunk-GQ5OYFVD.js';
+import { loadFlow } from './chunk-N36S36OZ.js';
 import { parseFlowDefinition } from './chunk-X3RMRJNR.js';
 import { renderStimulusPrompt } from './chunk-M3WPBTGJ.js';
-import { TERMINAL_AGENT_RUN_STATUSES, withActivityLabelJsonSchema, TOOL_ACTIVITY_PROMPT_SECTION, SESSION_ROOT_CONNECTOR_ID, PLATFORM_BLOCKS_RUNTIME_FEATURE, PROTOCOL_VERSION, deliveryClassOf } from './chunk-F4NJDSR7.js';
-import { knowledgeKindProvider, scanLibraryRoot } from './chunk-DKGEV6SQ.js';
-import { createDefaultKindRegistry } from './chunk-NVO6WECE.js';
-import { BindingSchema, effectiveComposes, AgentManifestSchema, AgentTriggerSchema } from './chunk-57SF6W6E.js';
-import { readLock, buildAgentPromptSections, resolveSettings, loadProviderRegistry, resolveLibraryDir } from './chunk-BF422IDP.js';
-import { resolveRuntimeAssets } from './chunk-QO7CR3KB.js';
+import { TERMINAL_AGENT_RUN_STATUSES, withActivityLabelJsonSchema, TOOL_ACTIVITY_PROMPT_SECTION, SESSION_ROOT_CONNECTOR_ID, PLATFORM_BLOCKS_RUNTIME_FEATURE, PROTOCOL_VERSION, deliveryClassOf } from './chunk-D5WTOVLG.js';
+import { knowledgeKindProvider, scanLibraryRoot } from './chunk-OOQ5Q75W.js';
+import { createDefaultKindRegistry } from './chunk-NKDSU4Q7.js';
+import { BindingSchema, effectiveComposes, AgentManifestSchema, AgentTriggerSchema } from './chunk-MGM5EJQQ.js';
+import { readLock, buildAgentPromptSections, resolveSettings, loadProviderRegistry, resolveLibraryDir } from './chunk-4QINFQ27.js';
+import { resolveRuntimeAssets } from './chunk-X7DIT65W.js';
 import { DEFAULT_DRIVER_ID, resolveDriverPaths } from './chunk-5BEFNLOR.js';
-import { matchPin, DEFAULT_AGENT_INSTANCE_ID, effectiveAgentInstances, resolveSkWorkspaceConfig, resolveAgentDir, loadMcpServerDeclarations, COMPACTION_DEFAULTS, resolveCompactionThresholdPercent, getGlobalCacheDir, sourceCacheKey, resolveAgentDefinitionDir, AgentRefResolutionError, validateAssetRecipeAttr, deriveSingleMaterializedMcpDeclaration, stageMaterializedSkills, readSkillAllowList, isStagedSkillMarkerFor, unstageSkill, STAGED_SKILL_MARKER } from './chunk-L3ZGYSWY.js';
+import { matchPin, DEFAULT_AGENT_INSTANCE_ID, effectiveAgentInstances, resolveSkWorkspaceConfig, resolveAgentDir, loadMcpServerDeclarations, COMPACTION_DEFAULTS, resolveCompactionThresholdPercent, getGlobalCacheDir, sourceCacheKey, resolveAgentDefinitionDir, AgentRefResolutionError, validateAssetRecipeAttr, deriveSingleMaterializedMcpDeclaration, stageMaterializedSkills, readSkillAllowList, isStagedSkillMarkerFor, unstageSkill, STAGED_SKILL_MARKER } from './chunk-J76LDUDS.js';
 import { globalSkaileDir } from './chunk-L5VSIPQD.js';
 import { driverTargetForDriver, SUPPORTED_DRIVER_TARGETS, DRIVER_TARGETS } from './chunk-IG5LZ3WU.js';
-import { withFsDeadline, FsDeadlineError, fsDeadlineMs, parseFrontmatter, tryWithFsDeadline } from './chunk-M3P4BYRK.js';
-import { parseAssetRef } from './chunk-J4OYIYFQ.js';
+import { withFsDeadline, FsDeadlineError, fsDeadlineMs, parseFrontmatter, tryWithFsDeadline } from './chunk-SP5NGNBV.js';
+import { parseAssetRef } from './chunk-VY6NTFE7.js';
 import { resolveLogStoreConfig, createLogStoreFromConfig, OnLogBridgeSink, WsLogSink, resolveLogsRetention, enforceLogsRetention } from './chunk-DKXNKFKP.js';
 import { pickRegistryEntries, registryEntries, resolveEntryBaseUrl, parseModelRef, isEntryEnabled, parseCredentialRef } from './chunk-MJHSLODD.js';
 import { getLogStore, registerLogStore, createLogger, resetLogStore, isUnwritableStreamError, markStreamBroken, isBrokenPipeError, redactCredentials } from './chunk-BOFL7GIF.js';
@@ -43,7 +45,7 @@ import * as z5 from 'zod';
 import { z } from 'zod';
 import fs8, { readFile, readdir, lstat, stat, rm, unlink, mkdir, writeFile, realpath, rename, open, readlink, mkdtemp } from 'fs/promises';
 import { parse } from 'yaml';
-import { constants, unlinkSync, readFileSync, readdirSync, statSync, existsSync, lstatSync, realpathSync, mkdirSync, writeFileSync, watch, chmodSync, accessSync } from 'fs';
+import { constants, unlinkSync, readFileSync, readdirSync, statSync, existsSync, lstatSync, realpathSync, mkdirSync, writeFileSync, watch, chmodSync, accessSync, rmSync } from 'fs';
 import { Ajv2020 } from 'ajv/dist/2020.js';
 import { execFile } from 'child_process';
 import { promisify } from 'util';
@@ -5728,7 +5730,9 @@ async function buildAgentResources(projectDir, driverType, _onLog, watch, secret
         s3Presigner
       );
     }
-    const resourcePromptSection = resourceManager ? buildConnectorPromptSection(resourceManager) : "";
+    const resourcePromptSection = resourceManager ? buildConnectorPromptSection(resourceManager, {
+      toolsMounted: inProcessMcp || sessionMeta?.managedCodex === true
+    }) : "";
     let mcpServers;
     let workspacePluginToShutdown = null;
     let externalMcpManager = null;
@@ -5920,7 +5924,7 @@ async function buildInProcessMcpServers(resourceManager, projectDir, driverType,
   if (resourceManager) {
     const connectorsLog = createLogger({ kind: "mcp", subkind: "skaile-connectors" });
     try {
-      const server = await buildSdkConnectorTools(resourceManager, { z: z });
+      const server = await buildSdkConnectorTools(resourceManager, { z: z, projectDir });
       if (server) {
         mcpServers = { "skaile-connectors": server };
         connectorsLog.info("server constructed", {
@@ -6059,6 +6063,94 @@ function toSdkMcpServerConfig(decl, secrets) {
   }
   return null;
 }
+var MODEL_ENDPOINT_PROVIDER_ID = "skaile-endpoint";
+var MODEL_ENDPOINT_URL_ENV = "SKAILE_MODEL_ENDPOINT_URL";
+var MODEL_ENDPOINT_TOKEN_ENV = "SKAILE_MODEL_ENDPOINT_TOKEN";
+function modelEndpointEnv({ url, token }) {
+  return {
+    [MODEL_ENDPOINT_URL_ENV]: url,
+    [MODEL_ENDPOINT_TOKEN_ENV]: token,
+    [providerCredentialEnvName(MODEL_ENDPOINT_PROVIDER_ID)]: token
+  };
+}
+function modelEndpointLayer({ url }) {
+  return {
+    layer: "catalog",
+    providers: {
+      [MODEL_ENDPOINT_PROVIDER_ID]: {
+        kind: "llm",
+        surface: "openai-completions",
+        base_url: url,
+        credential: { kind: "bearer", ref: `env:${MODEL_ENDPOINT_TOKEN_ENV}` },
+        label: "Skaile model endpoint",
+        enabled: true
+      }
+    }
+  };
+}
+function withoutEndpointEntry(registry) {
+  if (!registry.providers[MODEL_ENDPOINT_PROVIDER_ID]) return registry;
+  return pickRegistryEntries(
+    registry,
+    registry.order.filter((id) => id !== MODEL_ENDPOINT_PROVIDER_ID)
+  );
+}
+function modelEndpointFile(projectDir) {
+  return join(projectDir, ".skaile", "model-endpoint.json");
+}
+function writeModelEndpointFile(projectDir, address) {
+  const file = modelEndpointFile(projectDir);
+  mkdirSync(join(projectDir, ".skaile"), { recursive: true });
+  rmSync(file, { force: true });
+  writeFileSync(file, `${JSON.stringify({ ...address, pid: process.pid }, null, 2)}
+`, {
+    mode: 384,
+    flag: "wx"
+  });
+}
+function removeModelEndpointFile(projectDir) {
+  rmSync(modelEndpointFile(projectDir), { force: true });
+}
+async function startRunnerModelEndpoint(options) {
+  const token = process.env[MODEL_ENDPOINT_TOKEN_ENV] || randomBytes(32).toString("hex");
+  const host = options.config.host ?? "127.0.0.1";
+  const handle = await startModelEndpoint({
+    getRegistry: () => withoutEndpointEntry(options.getRegistry()),
+    getLookupEnv: options.getLookupEnv,
+    ...options.getRoles ? { getRoles: options.getRoles } : {},
+    token,
+    host,
+    port: options.config.port ?? 0,
+    log: options.log
+  });
+  if (!isLoopbackHost(host)) {
+    options.log(
+      `WARNING: bound to non-loopback host ${host}: anyone who can reach it and holds the token spends this session's provider credentials`
+    );
+  }
+  const address = { url: handle.url, token };
+  try {
+    writeModelEndpointFile(options.projectDir, address);
+  } catch (error) {
+    await handle.close();
+    throw error;
+  }
+  let closed;
+  return {
+    ...address,
+    close: () => {
+      closed ??= (async () => {
+        removeModelEndpointFile(options.projectDir);
+        await handle.close();
+      })();
+      return closed;
+    }
+  };
+}
+function isLoopbackHost(host) {
+  const bare = host.replace(/^\[|\]$/g, "").toLowerCase();
+  return bare === "localhost" || bare === "::1" || /^127(\.\d{1,3}){3}$/.test(bare);
+}
 
 // runner/src/session-builder.ts
 async function createAgentSession(config) {
@@ -6104,9 +6196,18 @@ async function createAgentSession(config) {
   });
   const driverType = (managed ? config.driver : settings.driver) ?? DEFAULT_DRIVER_ID;
   const model = managed ? config.model : settings.model;
-  const registry = loadSessionRegistry(projectDir, config.registry, config.providers, sessionLog);
+  const registry = loadSessionRegistry(
+    projectDir,
+    config.registry,
+    config.providers,
+    sessionLog,
+    config.modelEndpoint
+  );
   const modelRef = config.modelRef?.trim() || model?.trim() || void 0;
-  const credentialEnv = { ...config.credentialEnv };
+  const credentialEnv = {
+    ...config.credentialEnv,
+    ...config.modelEndpoint ? modelEndpointEnv(config.modelEndpoint) : {}
+  };
   const manifest = agentDir ? await loadAgentManifest(agentDir) : void 0;
   const {
     resourceManager,
@@ -6314,10 +6415,11 @@ function createManagedCodexSubpromptDriver(config, model, cwd, privateDirectory)
     }
   });
 }
-function loadSessionRegistry(projectDir, sessionRegistry, providers, log) {
+function loadSessionRegistry(projectDir, sessionRegistry, providers, log, modelEndpoint) {
   const extraLayers = [];
   if (sessionRegistry && Object.keys(sessionRegistry).length > 0)
     extraLayers.push({ layer: "session", providers: sessionRegistry });
+  if (modelEndpoint) extraLayers.push(modelEndpointLayer(modelEndpoint));
   const first = loadProviderRegistry({ projectDir, extraLayers });
   const catalog = catalogLayer(first.patches);
   const final = Object.keys(catalog.providers).length === 0 ? first : loadProviderRegistry({ projectDir, extraLayers: [...extraLayers, catalog] });
@@ -6326,14 +6428,17 @@ function loadSessionRegistry(projectDir, sessionRegistry, providers, log) {
     if (diagnostic.severity === "error") log.error(message, void 0, { code: diagnostic.code });
     else log.warn(message, { code: diagnostic.code });
   }
-  if (providers === void 0 || providers.length === 0) return final.registry;
-  for (const id of providers) {
+  const picked = providers === void 0 || providers.length === 0 ? final.registry : pickRegistryEntries(
+    final.registry,
+    modelEndpoint ? [...providers, MODEL_ENDPOINT_PROVIDER_ID] : providers
+  );
+  for (const id of providers ?? []) {
     if (final.registry.providers[id] === void 0)
       log.warn(`providers registry: --providers names '${id}' which no layer defines`, {
         code: "unknown_provider"
       });
   }
-  return pickRegistryEntries(final.registry, providers);
+  return picked.order.every((id) => id === MODEL_ENDPOINT_PROVIDER_ID) ? withoutEndpointEntry(picked) : picked;
 }
 async function loadPromptExtensions(paths, projectDir, log) {
   if (!paths?.length) return [];
@@ -9129,11 +9234,12 @@ function awaitAgentEnd(driver, prompt, timeoutMs) {
 // runner/src/event-gap-buffer.ts
 var EVENT_GAP_BUFFER_MAX_EVENTS = 1e4;
 var EVENT_GAP_BUFFER_MAX_BYTES = 16 * 1024 * 1024;
-var UNBUFFERED_TYPES = /* @__PURE__ */ new Set([
-  "session_init_ack",
-  "log_entry",
-  "capability_result"
-]);
+var UNBUFFERED_TYPES = {
+  session_init_ack: true,
+  log_entry: true,
+  capability_result: true,
+  status: true
+};
 function measure(event) {
   try {
     const json = JSON.stringify(event);
@@ -9173,7 +9279,7 @@ var EventGapBuffer = class _EventGapBuffer {
   }
   /** Whether {@link push} would hold this event type at all. */
   static accepts(event) {
-    return !UNBUFFERED_TYPES.has(event.type);
+    return !Object.hasOwn(UNBUFFERED_TYPES, event.type);
   }
   /**
    * Append an event, evicting the oldest past either cap. An event larger than
@@ -11765,12 +11871,12 @@ function takeRunnerWsAuthToken(env = process.env, fs9 = nodeFs) {
 }
 
 // runner/src/ws-auth-warning.ts
-function isLoopbackHost(host) {
+function isLoopbackHost2(host) {
   const h = host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
   return h === "localhost" || h === "::1" || /^127(?:\.\d{1,3}){3}$/.test(h);
 }
 function wsNoAuthWarning(port, host) {
-  if (host !== void 0 && isLoopbackHost(host)) {
+  if (host !== void 0 && isLoopbackHost2(host)) {
     return `WARNING: the WebSocket server on port ${port} listens on ${host}; local processes can drive this agent. Set SKAILE_WS_AUTH_TOKEN for a token.`;
   }
   return `WARNING: the WebSocket server on port ${port} listens on ${host ?? "all interfaces"} without authentication: any host that can reach the port can drive this agent. Set SKAILE_WS_AUTH_TOKEN, or bind 127.0.0.1 with --host.`;
@@ -13068,6 +13174,8 @@ async function startAgentServer(opts) {
       // secrets map, keyed by the `SKAILE_AIP_<ID>_KEY` name each registry
       // entry references. Omitted entirely when nothing resolved.
       ...credentialEnv && Object.keys(credentialEnv).length > 0 ? { credentialEnv } : {},
+      // The runner's loopback model endpoint: registry entry + child env.
+      ...modelEndpoint ? { modelEndpoint: { url: modelEndpoint.url, token: modelEndpoint.token } } : {},
       ...wireAgentConfig?.thinking ? { thinking: wireAgentConfig.thinking } : {},
       ...wireEffort ? { effort: wireEffort } : {},
       // Every claude-sdk driver carries the flow tools, so a run can start mid-turn.
@@ -13158,6 +13266,7 @@ async function startAgentServer(opts) {
   });
   let sessionConfig;
   let agentSession;
+  let modelEndpoint;
   const contextWindows = new ContextWindowResolver({
     seat: () => aiProviderConfigId,
     warn: (line) => serverLog.warn(line)
@@ -13264,16 +13373,39 @@ async function startAgentServer(opts) {
     liveAttachedMcpDeclarations.set(decl.id, decl);
     bakedMcpServerIds = /* @__PURE__ */ new Set([...bakedMcpServerIds, decl.id]);
   };
+  const modelEndpointConfig = {
+    ...wsConfig.model_endpoint,
+    ...opts.modelEndpoint
+  };
+  if (!managedHost && modelEndpointConfig.enabled === true) {
+    const bootRegistry = loadProviderRegistry({ projectDir: opts.projectDir }).registry;
+    modelEndpoint = await startRunnerModelEndpoint({
+      projectDir: opts.projectDir,
+      config: modelEndpointConfig,
+      // agentSession is reassigned at every (re)build, so a session_init swap
+      // is picked up on the next request.
+      getRegistry: () => agentSession?.registry ?? bootRegistry,
+      getLookupEnv: () => ({ ...process.env, ...agentSession?.credentialEnv }),
+      getRoles: () => wsConfig.roles,
+      log: (line) => log(`[model-endpoint] ${line}`)
+    });
+    log(`[serve] model endpoint listening on ${modelEndpoint.url}`);
+  }
   if (secretsMode === "provisioned") {
     log("[serve] secrets mode: provisioned \u2014 waiting for provision_secrets command");
   } else {
-    sessionConfig = buildSessionConfig(new EnvSecretProvider());
-    await refreshAgentSurface(null);
-    agentSession = await createAgentSession(sessionConfig);
-    emitSystemPromptComposed(agentSession, sendEvent);
-    noteAgentSessionBuilt(sessionConfig.resumeSessionId);
-    registerSessionComposition(agentSession);
-    await refreshAgentSurface(agentSession);
+    try {
+      sessionConfig = buildSessionConfig(new EnvSecretProvider());
+      await refreshAgentSurface(null);
+      agentSession = await createAgentSession(sessionConfig);
+      emitSystemPromptComposed(agentSession, sendEvent);
+      noteAgentSessionBuilt(sessionConfig.resumeSessionId);
+      registerSessionComposition(agentSession);
+      await refreshAgentSurface(agentSession);
+    } catch (error) {
+      await modelEndpoint?.close();
+      throw error;
+    }
     resolveSessionReady();
     captureBakedMcpServers();
   }
@@ -13517,7 +13649,8 @@ async function startAgentServer(opts) {
   }
   async function buildPermanentFlowMcpServers() {
     const server = await buildLazySdkFlowTools(describeFlowOperations(), resolveFlowToolTarget, {
-      z: z
+      z: z,
+      projectDir: opts.projectDir
     });
     flowToolsBaked = server !== null;
     return server ? { "skaile-flow": server } : void 0;
@@ -13889,6 +14022,8 @@ async function startAgentServer(opts) {
       } catch {
       }
     }
+    await modelEndpoint?.close().catch(() => {
+    });
   }
   async function awaitSessionReadyOrFail() {
     try {
@@ -14431,6 +14566,8 @@ async function startAgentServer(opts) {
         platformVersion: cmd.protocolVersion
       });
       runtimeRejected = true;
+      if (opts.incompatibleProtocolExitCode !== void 0)
+        process.exitCode = opts.incompatibleProtocolExitCode;
       await cleanup();
       teardownProcessHandlers();
       disposeLogStore();
@@ -15097,6 +15234,27 @@ async function startAgentServer(opts) {
   }
   async function handleCommand(cmd) {
     if (runtimeRejected || managedHost && managedBootstrapClosed) return;
+    const rawCmd = cmd;
+    if (rawCmd === null || typeof rawCmd !== "object") {
+      log(`[serve] dropping malformed command (not a JSON object)`);
+      sendEvent({
+        type: "error",
+        fatal: false,
+        category: "validation",
+        message: "Invalid command: expected a JSON object with a `type`."
+      });
+      return;
+    }
+    if (cmd.type === "prompt" && typeof cmd.prompt !== "string") {
+      log(`[serve] dropping prompt without a string \`prompt\``);
+      sendEvent({
+        type: "error",
+        fatal: false,
+        category: "validation",
+        message: "Invalid prompt: `prompt` must be a string."
+      });
+      return;
+    }
     if (isCredentialRotatedSignal(cmd)) {
       if (managedCodex) return;
       await handleCredentialRotatedSignal({
@@ -15257,7 +15415,12 @@ async function startAgentServer(opts) {
     if (!initAcknowledged || managedCodex || aiProviderConfigId === void 0) return;
     aiCredentialRefreshScheduler.ensureArmed();
   });
-  await transport.listen();
+  try {
+    await transport.listen();
+  } catch (error) {
+    await modelEndpoint?.close();
+    throw error;
+  }
   if (secretsMode === "env" && agentSession) {
     agentSession.startWatching();
   }
@@ -15400,6 +15563,25 @@ async function loadSessionById(projectDir, runId) {
     return null;
   }
 }
+async function resolveSessionId(projectDir, idOrPrefix) {
+  if (!idOrPrefix || /[\\/]/.test(idOrPrefix) || idOrPrefix.includes("..")) return null;
+  let files;
+  try {
+    files = await fs8.readdir(sessionsDir(projectDir));
+  } catch {
+    return null;
+  }
+  const ids = files.filter((f) => f.endsWith(".json")).map((f) => f.slice(0, -".json".length));
+  if (ids.includes(idOrPrefix)) return idOrPrefix;
+  const matches = ids.filter((id) => id.startsWith(idOrPrefix)).sort();
+  if (matches.length === 0) return null;
+  if (matches.length > 1) {
+    throw new Error(
+      `Session id prefix "${idOrPrefix}" is ambiguous: matches ${matches.join(", ")}. Use more characters.`
+    );
+  }
+  return matches[0];
+}
 async function listSessions(projectDir) {
   await migrateLegacySession(projectDir);
   const dir = sessionsDir(projectDir);
@@ -15463,6 +15645,6 @@ function touchSession(state) {
   return { ...state, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
 }
 
-export { AgentRunError, CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CONNECTOR_MUTATE_NOT_READY, CapabilityRegistry, CompileManifestEntrySchema, CompositionError, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, DEFAULT_FLOW_MUTATE_CONNECTOR_WAIT_MS, DEFAULT_MAX_FINISHED_TREES, DEFAULT_RUN_LIMITS, MOUNT_LIST_MAX_DEPTH, MOUNT_LIST_MAX_ENTRIES, MOUNT_READ_DEADLINE_FACTOR, MOUNT_READ_MAX_CHUNK_BYTES, MOUNT_STAT_BUDGET_MS, MOUNT_STAT_MAX_ENTRIES, MOUNT_TREE_OP_DEADLINE_FACTOR, MOUNT_WRITE_MAX_CHUNK_BYTES, MarkdownStreamer, PreInitRingSink, ResourceOperationError, SESSION_ROOT_WRITABLE_DIRS, SESSION_ROOT_WRITABLE_FILES, UnknownCompositionKindError, WRITE_RANGE_PARTIAL_TTL_MS, WS_AUTH_TOKEN_ENV, WS_AUTH_TOKEN_FILE_ENV, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildCompositionRunSnapshot, buildConnectorTokenMediator, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, buildRunnerAgentSections, buildStoreSnapshotReplay, builtinCapabilities, canonicalJson, capabilityLogInstance, capabilitySignatureInputs, clearPreInitRingSink, clearSession, compileComposition, compositionRunSnapshotPath, computeCapabilitySignature, computeDirectoryTotals, computeRevisionHash, connectorRefreshKind, createAgentSession, createCompositionContentSource, createFinalTextFallback, createFlowConnectorReadiness, createInMemoryRunStore, createManagedCodexSubpromptDriver, createRunController, createSessionStimulusBus, defineCapability, deleteSession, describeComposition, dispatchResourceRequest, dispatchRunnerCapabilityInvocation, driverActiveAfterTurnEnd, emitSystemPromptComposed, ensureClaudeSettingsDisablesConnectors, ensureGitConfigInclude, executeConnectorMutate, extractClaudeAiOauthExpiresAt, flowStartNeedsDriverRestart, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, handleSessionRootResourceRequest, hasNonTerminalFlow, hashAgentFiles, hashContent, hostOpResumeStimulus, installPreInitRingSink, instanceForSession, isCompositionError, isEmptyKnowledgeIndex, isSessionRootPathAllowed, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadCompositionRunSnapshot, loadKnowledgeDir, loadManagedCodexHostConfig, loadSession, loadSessionById, mcpAuthSecretKey, newSession, nulTailPaddingLength, pickChatFlowTarget, pickFlowToolTarget, pickRepointedManager, planFlowMutate, prepareCodexTools, reconcilePendingDecisions, reconnectedRunNeedsAgentTurn, recreateKeepingLiveFlows, registerActiveFlow, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, rejectPendingCapabilityCallsOnDisconnect, resetRunnerLogStore, resolveAgentInstance, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveFlowMutateConnectorWaitMs, resolveMixin, restoredRunHasWorkToResume, runAgentChat, saveCompositionRunSnapshot, saveSession, setCurrentSession, setUpFlowConnector, startAgentServer, stimulusFromMetas, stripFrontmatter, takeRunnerWsAuthToken, toActiveFlowTarget, touchSession, unresolvedCredentialNotices, validateInputResponse, verifyConventionItems, writeClaudeCodeCredentialsFile, writeRangeChunk, writeRangePartialPath };
-//# sourceMappingURL=chunk-HBZD3MIW.js.map
-//# sourceMappingURL=chunk-HBZD3MIW.js.map
+export { AgentRunError, CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CONNECTOR_MUTATE_NOT_READY, CapabilityRegistry, CompileManifestEntrySchema, CompositionError, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, DEFAULT_FLOW_MUTATE_CONNECTOR_WAIT_MS, DEFAULT_MAX_FINISHED_TREES, DEFAULT_RUN_LIMITS, MOUNT_LIST_MAX_DEPTH, MOUNT_LIST_MAX_ENTRIES, MOUNT_READ_DEADLINE_FACTOR, MOUNT_READ_MAX_CHUNK_BYTES, MOUNT_STAT_BUDGET_MS, MOUNT_STAT_MAX_ENTRIES, MOUNT_TREE_OP_DEADLINE_FACTOR, MOUNT_WRITE_MAX_CHUNK_BYTES, MarkdownStreamer, PreInitRingSink, ResourceOperationError, SESSION_ROOT_WRITABLE_DIRS, SESSION_ROOT_WRITABLE_FILES, UnknownCompositionKindError, WRITE_RANGE_PARTIAL_TTL_MS, WS_AUTH_TOKEN_ENV, WS_AUTH_TOKEN_FILE_ENV, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildCompositionRunSnapshot, buildConnectorTokenMediator, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, buildRunnerAgentSections, buildStoreSnapshotReplay, builtinCapabilities, canonicalJson, capabilityLogInstance, capabilitySignatureInputs, clearPreInitRingSink, clearSession, compileComposition, compositionRunSnapshotPath, computeCapabilitySignature, computeDirectoryTotals, computeRevisionHash, connectorRefreshKind, createAgentSession, createCompositionContentSource, createFinalTextFallback, createFlowConnectorReadiness, createInMemoryRunStore, createManagedCodexSubpromptDriver, createRunController, createSessionStimulusBus, defineCapability, deleteSession, describeComposition, dispatchResourceRequest, dispatchRunnerCapabilityInvocation, driverActiveAfterTurnEnd, emitSystemPromptComposed, ensureClaudeSettingsDisablesConnectors, ensureGitConfigInclude, executeConnectorMutate, extractClaudeAiOauthExpiresAt, flowStartNeedsDriverRestart, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, handleSessionRootResourceRequest, hasNonTerminalFlow, hashAgentFiles, hashContent, hostOpResumeStimulus, installPreInitRingSink, instanceForSession, isCompositionError, isEmptyKnowledgeIndex, isSessionRootPathAllowed, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadCompositionRunSnapshot, loadKnowledgeDir, loadManagedCodexHostConfig, loadSession, loadSessionById, mcpAuthSecretKey, newSession, nulTailPaddingLength, pickChatFlowTarget, pickFlowToolTarget, pickRepointedManager, planFlowMutate, prepareCodexTools, reconcilePendingDecisions, reconnectedRunNeedsAgentTurn, recreateKeepingLiveFlows, registerActiveFlow, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, rejectPendingCapabilityCallsOnDisconnect, resetRunnerLogStore, resolveAgentInstance, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveFlowMutateConnectorWaitMs, resolveMixin, resolveSessionId, restoredRunHasWorkToResume, runAgentChat, saveCompositionRunSnapshot, saveSession, setCurrentSession, setUpFlowConnector, startAgentServer, stimulusFromMetas, stripFrontmatter, takeRunnerWsAuthToken, toActiveFlowTarget, touchSession, unresolvedCredentialNotices, validateInputResponse, verifyConventionItems, writeClaudeCodeCredentialsFile, writeRangeChunk, writeRangePartialPath };
+//# sourceMappingURL=chunk-SRKU7QUG.js.map
+//# sourceMappingURL=chunk-SRKU7QUG.js.map