@skaile/workspaces 5.17.0 → 5.18.0

package/dist/{chunk-V5CDPKDA.js → chunk-EELKR2WP.js}

@@ -1,25 +1,25 @@
 import { declaredConnectErrorKind, ClassifiedConnectError, withConnectErrorKind } from './chunk-YIF2IJUA.js';
-import { readUnavailableMarker, OAuthRequiredError, ConnectorFieldMissingError, LegacyAuthGrammarError, ConnectorStartupError, resolveAuthRef } from './chunk-FSSRBWYL.js';
-import { EventNormalizer } from './chunk-QW534EZB.js';
-import { resolveModelTier } from './chunk-ZPCABSSW.js';
-import { createDriver } from './chunk-LQT2IKYY.js';
+import { readUnavailableMarker, OAuthRequiredError, ConnectorFieldMissingError, LegacyAuthGrammarError, ConnectorStartupError, resolveAuthRef } from './chunk-WJCQFNF6.js';
+import { EventNormalizer } from './chunk-L6IFN6ER.js';
+import { resolveModelTier } from './chunk-L5XUEC2W.js';
+import { createDriver } from './chunk-X54YR4AW.js';
 import { pluginRegistry } from './chunk-6E6PKKAD.js';
 import { computeStimulus } from './chunk-IFGTRL2I.js';
-import { resolveFlowOutputFields, interpolateNodeInstruction, resolveNodeBindings, validateConsumedNodeOutput, appendAttempt, resolveTerminalFailureStatus, remainingActiveExecutionMs, deriveCheckEvidence, computeFlowStateFromSnapshots, availableRouterFrontier, evaluateRouterSelection, routerSelectionOutput, planRouterSkips, unsettledRouterBranchIds, countFailedAttempts, hasAutomaticRetryBudget, persistedRouterSelection } from './chunk-SPV2CXJ3.js';
-import { undeclaredSubFlowOutputReads, mismatchedSubFlowOutputTypes, INPUT_SCHEMA_SHAPES_HINT, coerceInputSchema } from './chunk-LNFKL23K.js';
-import { parseFlowDefinition } from './chunk-X3RMRJNR.js';
+import { resolveFlowOutputFields, interpolateNodeInstruction, resolveNodeBindings, validateConsumedNodeOutput, appendAttempt, resolveTerminalFailureStatus, remainingActiveExecutionMs, deriveCheckEvidence, computeFlowStateFromSnapshots, availableRouterFrontier, evaluateRouterSelection, routerSelectionOutput, planRouterSkips, unsettledRouterBranchIds, countFailedAttempts, hasAutomaticRetryBudget, persistedRouterSelection } from './chunk-D6UBEYQH.js';
 import { describeStimulus, buildOrchestratorPrompt, renderSubpromptPrompt, renderStimulusPrompt } from './chunk-M3WPBTGJ.js';
 import { deterministicNodeKindLabel, nodeInstruction, flowDefaults, isAgentNode, isGateNode, isCheckNode, nodeRequiresApproval, isSubFlowNode, isActiveRuntimeNode, isFunctionNode, isSubpromptNode, isRouterNode, nodeIsOptional, nodeLabel, nodeAssets } from './chunk-7RGTAEG6.js';
-import { classifierDecision, getConsumedOutputSchema, withoutReservedClassifierFields, FLOW_CAPTURE_CHANNELS, captureDestinationFieldName, invalidCaptureDestinationMessage } from './chunk-NUELZWCF.js';
 import { withActivityLabelDefs } from './chunk-Y56YIT6J.js';
-import { loadDriverSdk } from './chunk-PIC23DDE.js';
+import { undeclaredSubFlowOutputReads, mismatchedSubFlowOutputTypes, INPUT_SCHEMA_SHAPES_HINT, coerceInputSchema } from './chunk-LNFKL23K.js';
+import { parseFlowDefinition } from './chunk-X3RMRJNR.js';
+import { classifierDecision, getConsumedOutputSchema, withoutReservedClassifierFields, FLOW_CAPTURE_CHANNELS, captureDestinationFieldName, invalidCaptureDestinationMessage } from './chunk-NUELZWCF.js';
+import { loadDriverSdk } from './chunk-T2TQAH2X.js';
 import { processAlive } from './chunk-4GY63JU6.js';
-import { isInsideProject } from './chunk-ZVZTCDUN.js';
-import { withFsDeadline, FsDeadlineError, fsDeadlineMs, tryWithFsDeadline } from './chunk-YW2BNDSE.js';
+import { symlinkEscapeOfProject, isInsideProject } from './chunk-2NOLF7B2.js';
+import { withFsDeadline, FsDeadlineError, fsDeadlineMs, tryWithFsDeadline } from './chunk-GOCWM7FN.js';
 import { portableSpawn } from './chunk-ICSCSM5D.js';
 import { createLogger, redactCredentials } from './chunk-BOFL7GIF.js';
 import { resolve, relative, sep, isAbsolute, join, dirname } from 'path';
-import { mkdir, stat, cp, writeFile, readFile, chmod, rename, readdir, rmdir, rm, realpath } from 'fs/promises';
+import { mkdir, stat, cp, writeFile, readFile, chmod, realpath, rename, readdir, rmdir, rm } from 'fs/promises';
 import * as z4 from 'zod';
 import { execFile } from 'child_process';
 import { promisify } from 'util';
@@ -7862,27 +7862,32 @@ var XStateStoreConnector = class extends AbstractConnector {
       executeOp: (handle, operation, args) => this._executeOp(handle, operation, args)
     };
   }
-  async connect(declaration, _ctx) {
+  async connect(declaration, ctx) {
     this.log.info("connect", { id: declaration.id });
-    const { createStore } = await import('@xstate/store');
+    const { createStore } = await loadDriverSdk(
+      "@xstate/store",
+      ctx.projectDir ?? process.cwd(),
+      () => import('@xstate/store'),
+      "the xstate-store connector needs @xstate/store, which is"
+    );
     const initial = declaration.options?.initial ?? {};
     const store = createStore({
       context: { ...initial },
       on: {
-        set: (ctx, event) => ({
-          ...ctx,
+        set: (ctx2, event) => ({
+          ...ctx2,
           [event.key]: event.value
         }),
-        merge: (ctx, event) => ({
-          ...ctx,
+        merge: (ctx2, event) => ({
+          ...ctx2,
           ...event.data
         }),
-        delete: (ctx, event) => {
-          const next = { ...ctx };
+        delete: (ctx2, event) => {
+          const next = { ...ctx2 };
           delete next[event.key];
           return next;
         },
-        reset: (_ctx2, event) => ({
+        reset: (_ctx, event) => ({
           ...event.initial ?? initial
         })
       }
@@ -8695,6 +8700,13 @@ var ConnectorManager = class {
         "config"
       );
     }
+    const escapesTo = symlinkEscapeOfProject(source, this.workspaceDir);
+    if (escapesTo !== null) {
+      throw new ClassifiedConnectError(
+        `mountPath ${source} is a symlink to ${escapesTo}, outside the project ${this.workspaceDir}; point mountPath at the real directory`,
+        "config"
+      );
+    }
     if (!isInsideProject(source, this.workspaceDir)) {
       this.mgrLog.warn(
         `connector "${declaration.id}": mountPath ${source} is outside the project ${this.workspaceDir}; the agent reads${declaration.access === "read-write" ? " and writes" : ""} there`,
@@ -8759,6 +8771,7 @@ var ConnectorManager = class {
       throw new ClassifiedConnectError(missingTokenMediatorMessage(declaration.id), "config");
     }
     const ctx = {
+      projectDir: this.workspaceDir,
       secrets: this.chain ?? this.secrets,
       // Both filesystem and tool faces use this for the auth: backend initial-mint path.
       tokenMediator: this.buildWrappedMediator(declaration),
@@ -10829,20 +10842,24 @@ async function createFsWatcher(rootDir, callback, options) {
       minimumSafe: MIN_SAFE_BUN_FS_WATCH
     });
   }
-  const gitignorePatterns = await parseGitignore(rootDir);
+  const realRoot = await realpath(rootDir).catch(() => rootDir);
+  const gitignorePatterns = await parseGitignore(realRoot);
   const optionsIgnored = (options?.ignored ?? []).map(
     (entry) => typeof entry === "string" ? globToMatcher(entry) : entry
   );
   const ignored = [
-    generatedDirMatcher(rootDir),
+    generatedDirMatcher(realRoot),
     ...DEFAULT_IGNORED,
     ...gitignorePatterns,
     ...optionsIgnored
   ];
   const debounceMs = options?.debounceMs ?? DEFAULT_DEBOUNCE_MS;
-  const watcher = chokidar.watch(rootDir, {
+  const watcher = chokidar.watch(realRoot, {
     ignoreInitial: true,
     ignored,
+    // A symlink in the tree is one entry, never a door to files outside it (p1170): requests
+    // refuse `lnk/...`, so events must not name paths below it either.
+    followSymlinks: false,
     awaitWriteFinish: { stabilityThreshold: debounceMs, pollInterval: 50 },
     usePolling: false
   });
@@ -10862,7 +10879,7 @@ async function createFsWatcher(rootDir, callback, options) {
     watcher.on(
       chokidarEvent,
       (fullPath) => {
-        const rel = relative(rootDir, fullPath);
+        const rel = relative(realRoot, fullPath);
         if (!rel || rel.startsWith("..")) return;
         const normalizedPath = rel.split("\\").join("/");
         callback({ path: normalizedPath, action, source: "filesystem" });
@@ -13608,5 +13625,5 @@ function describeFlowOperations() {
 }
 
 export { AbstractConnector, BUILTIN_CONNECTOR_CATALOG, BoxConnector, CONNECT_FAILURE_CARRY_OVER_TTL_MS, ClassifierSubpromptRunner, ConnectFailureCarryOver, ConnectorManager, DeployConnector, DevServerConnector, FlowAdapter, GitConnector, GmailConnector, GoogleDriveConnector, LocalConnector, LogBuffer, ManagedGitconfigCollisionError, MattermostConnector, MemoryConnector, MinIOConnector, NO_ACTIVE_FLOW_ERROR, PortPool, PostgresConnector, S3Connector, S3FetchStoppedError, S3PresignedRequestError, S3_PRESIGN_BATCH, SQLiteConnector, SessionInlineSubFlowRunner, SessionNodeExecutor, SessionSubpromptRunner, SharePointConnector, StaticServerConnector, SubFlowContractError, TunnelConnector, WebDAVConnector, XStateConnector, XStateStoreConnector, atomicReplaceCredential, buildConnectorListPayload, buildConnectorPromptSection, buildConnectorToolDefs, buildFlowPromptEvent, buildFlowToolDefs, buildLazyFlowToolDefs, buildLazySdkFlowTools, buildSdkConnectorTools, buildSdkFlowTools, checkFleetMountLiveness, classifierQuestion, classifyConnectError, createConnector, createConnector10, createConnector11, createConnector12, createConnector13, createConnector14, createConnector15, createConnector16, createConnector17, createConnector18, createConnector19, createConnector2, createConnector20, createConnector3, createConnector4, createConnector5, createConnector6, createConnector7, createConnector8, createConnector9, createFsWatcher, createWorktree, defaultSpawn, describeFlowOperations, driveOrchestratorTurn, ensureDirMode, ensureFleetMounted, ensureRefreshAttemptStamp, findGitRoot, findMissingPackages, getConnector, installNpmPackages, isFleetManaged, isPackageResolvable, listConnectors, listWorktrees, missingTokenMediatorMessage, normalizeRuntimeFlow, parseListObjectsV2, presignScopePrefix, presignableKey, readGitSyncStatus, registerBuiltinConnectors, removeMountBlock, removeUnavailableMountBlock, renderCredentialHelperScript, resolveAccessPolicy, tryGetConnector, worktreeRegistry, writeHelperScript, writeMountBlock, writeUnavailableMountBlock };
-//# sourceMappingURL=chunk-V5CDPKDA.js.map
-//# sourceMappingURL=chunk-V5CDPKDA.js.map
+//# sourceMappingURL=chunk-EELKR2WP.js.map
+//# sourceMappingURL=chunk-EELKR2WP.js.map