@skaile/workspaces 5.7.0 → 5.9.0

package/dist/{chunk-SZWRPEF7.js → chunk-TTRYE6AC.js}

@@ -1,19 +1,19 @@
-import { declaredConnectErrorKind, ClassifiedConnectError, withConnectErrorKind } from './chunk-FK6HPLQA.js';
-import { OAuthRequiredError, ConnectorFieldMissingError, LegacyAuthGrammarError, readUnavailableMarker, ConnectorStartupError, resolveAuthRef } from './chunk-PSA6ONFB.js';
-import { EventNormalizer } from './chunk-34C42MJX.js';
-import { resolveModelTier } from './chunk-GWXFSLBK.js';
-import { createDriver } from './chunk-BTK7ECLH.js';
+import { declaredConnectErrorKind, ClassifiedConnectError, withConnectErrorKind } from './chunk-X4BAYGMT.js';
+import { readUnavailableMarker, OAuthRequiredError, ConnectorFieldMissingError, LegacyAuthGrammarError, ConnectorStartupError, resolveAuthRef } from './chunk-FVJK4QWM.js';
+import { EventNormalizer } from './chunk-MR5HBOUF.js';
+import { resolveModelTier } from './chunk-J7U3PIOE.js';
+import { createDriver } from './chunk-5NNNV76P.js';
 import { pluginRegistry } from './chunk-6E6PKKAD.js';
 import { computeStimulus } from './chunk-IFGTRL2I.js';
-import { resolveFlowOutputFields, interpolateNodeInstruction, resolveNodeBindings, validateConsumedNodeOutput, appendAttempt, resolveTerminalFailureStatus, remainingActiveExecutionMs, deriveCheckEvidence, computeFlowStateFromSnapshots, availableRouterFrontier, evaluateRouterSelection, routerSelectionOutput, planRouterSkips, unsettledRouterBranchIds, countFailedAttempts, hasAutomaticRetryBudget, persistedRouterSelection } from './chunk-LBQ4BBX4.js';
-import { undeclaredSubFlowOutputReads, mismatchedSubFlowOutputTypes, INPUT_SCHEMA_SHAPES_HINT, coerceInputSchema } from './chunk-37FTLYFP.js';
-import { parseFlowDefinition } from './chunk-QZLWJETK.js';
-import { describeStimulus, buildOrchestratorPrompt, renderSubpromptPrompt, renderStimulusPrompt } from './chunk-XUUYAS3Z.js';
-import { deterministicNodeKindLabel, nodeInstruction, flowDefaults, isAgentNode, isGateNode, isCheckNode, nodeRequiresApproval, isSubFlowNode, isActiveRuntimeNode, isFunctionNode, isSubpromptNode, isRouterNode, nodeIsOptional, nodeLabel, nodeAssets } from './chunk-NFGRW3L7.js';
-import { classifierDecision, getConsumedOutputSchema, withoutReservedClassifierFields, FLOW_CAPTURE_CHANNELS, captureDestinationFieldName, invalidCaptureDestinationMessage } from './chunk-QCI6D7E4.js';
-import { withActivityLabelDefs } from './chunk-DMLDYFDS.js';
+import { resolveFlowOutputFields, interpolateNodeInstruction, resolveNodeBindings, validateConsumedNodeOutput, appendAttempt, resolveTerminalFailureStatus, remainingActiveExecutionMs, deriveCheckEvidence, computeFlowStateFromSnapshots, availableRouterFrontier, evaluateRouterSelection, routerSelectionOutput, planRouterSkips, unsettledRouterBranchIds, countFailedAttempts, hasAutomaticRetryBudget, persistedRouterSelection } from './chunk-FZNG4V4J.js';
+import { undeclaredSubFlowOutputReads, mismatchedSubFlowOutputTypes, INPUT_SCHEMA_SHAPES_HINT, coerceInputSchema } from './chunk-LNFKL23K.js';
+import { parseFlowDefinition } from './chunk-MGGFBZWA.js';
+import { describeStimulus, buildOrchestratorPrompt, renderSubpromptPrompt, renderStimulusPrompt } from './chunk-M3WPBTGJ.js';
+import { deterministicNodeKindLabel, nodeInstruction, flowDefaults, isAgentNode, isGateNode, isCheckNode, nodeRequiresApproval, isSubFlowNode, isActiveRuntimeNode, isFunctionNode, isSubpromptNode, isRouterNode, nodeIsOptional, nodeLabel, nodeAssets } from './chunk-7RGTAEG6.js';
+import { classifierDecision, getConsumedOutputSchema, withoutReservedClassifierFields, FLOW_CAPTURE_CHANNELS, captureDestinationFieldName, invalidCaptureDestinationMessage } from './chunk-NUELZWCF.js';
+import { withActivityLabelDefs } from './chunk-F4NJDSR7.js';
 import { processAlive } from './chunk-4GY63JU6.js';
-import { withFsDeadline, FsDeadlineError, fsDeadlineMs, tryWithFsDeadline } from './chunk-TTPSDC2G.js';
+import { withFsDeadline, FsDeadlineError, fsDeadlineMs, tryWithFsDeadline } from './chunk-GTILM2CI.js';
 import { portableSpawn } from './chunk-ICSCSM5D.js';
 import { createLogger, redactCredentials } from './chunk-BOFL7GIF.js';
 import { resolve, relative, sep, isAbsolute, join, dirname } from 'path';
@@ -185,30 +185,30 @@ var SessionInlineSubFlowRunner = class {
         ].join(" -> ")}`
       );
     }
-    const authored = await this.options.resolveFlow(request.flowId);
-    if (request.ancestry.includes(authored.id)) {
+    const resolved = normalizeRuntimeFlow(await this.options.resolveFlow(request.flowId));
+    if (request.ancestry.includes(resolved.id)) {
       throw new Error(
         `Inline sub-flow cycle detected after resolving ${request.flowId}: ${[
           ...request.ancestry,
-          authored.id
+          resolved.id
         ].join(" -> ")}`
       );
     }
-    const undeclared = undeclaredSubFlowOutputReads(request.parentFlow, request.node.id, authored);
+    const undeclared = undeclaredSubFlowOutputReads(request.parentFlow, request.node.id, resolved);
     if (undeclared.length > 0) {
       throw new SubFlowContractError(
-        `flow ${request.parentFlow.id} node ${request.node.id} reads output field ${undeclared.join(", ")}, which flow ${authored.id} does not return (declare it in output.schema and bind it in output.bindings)`
+        `flow ${request.parentFlow.id} node ${request.node.id} reads output field ${undeclared.join(", ")}, which flow ${resolved.id} does not return (declare it in output.schema and bind it in output.bindings)`
       );
     }
-    const mismatched = mismatchedSubFlowOutputTypes(request.parentFlow, request.node.id, authored);
+    const mismatched = mismatchedSubFlowOutputTypes(request.parentFlow, request.node.id, resolved);
     if (mismatched.length > 0) {
       throw new SubFlowContractError(
         mismatched.map(
-          ({ path, parentType, childType }) => `flow ${request.parentFlow.id} node ${request.node.id} reads output field ${path} as ${parentType.join(" | ")}, but flow ${authored.id} returns it as ${childType.join(" | ")}`
+          ({ path, parentType, childType }) => `flow ${request.parentFlow.id} node ${request.node.id} reads output field ${path} as ${parentType.join(" | ")}, but flow ${resolved.id} returns it as ${childType.join(" | ")}`
         ).join("; ")
       );
     }
-    const flow = childDefinition(request, authored);
+    const flow = childDefinition(request, resolved);
     const adapter = new FlowAdapter();
     const handle = await adapter.connect(
       {
@@ -779,6 +779,17 @@ function runIsolatedPrompt(driver, prompt) {
   });
 }
 
+// connectors/src/access-policy.ts
+function resolveAccessPolicy(decl) {
+  const writable = decl.access === "read-write";
+  return {
+    writable,
+    enforcedReadOnly: decl.access === "read-only" && decl.accessDefaulted !== true,
+    required: writable && decl.mount != null && !readUnavailableMarker(decl.unavailable),
+    watch: decl.mount?.watch ?? decl.access !== "read-only"
+  };
+}
+
 // connectors/src/classify-connect-error.ts
 function classifyConnectError(err) {
   const declared = declaredConnectErrorKind(err);
@@ -2320,7 +2331,7 @@ function applyReadOnly(config, options) {
 }
 function resolveMountConfig(declaration) {
   const options = declaration.options;
-  const readOnly = declaration.access === "read-only" && declaration.accessDefaulted !== true;
+  const readOnly = resolveAccessPolicy(declaration).enforcedReadOnly;
   const resolved = resolveGitConfig({ mode: declaration.mode, options });
   return { readOnly, ...readOnly ? applyReadOnly(resolved, options) : resolved };
 }
@@ -8640,7 +8651,7 @@ var ConnectorManager = class {
       ...decl.mount?.source !== void 0 ? { source: redactCredentials(decl.mount.source) } : {},
       ...mountPath !== void 0 ? { mountPath } : {},
       // A host-declared unavailable connector is never fail-fast material.
-      required: unavailable === void 0 && decl.access === "read-write" && decl.mount != null,
+      required: resolveAccessPolicy(decl).required,
       // Redacted here as well as at the callers: every failure record reaches
       // the agent through `connector_list`, whoever wrote the text.
       error: redactCredentials(error),
@@ -8776,7 +8787,7 @@ var ConnectorManager = class {
       const declById = new Map(declarations.map((d) => [d.id, d]));
       const failedRw = results.filter((r) => {
         const decl = declById.get(r.id);
-        return !r.connected && r.access === "read-write" && decl?.mount != null && !readUnavailableMarker(decl.unavailable);
+        return !r.connected && decl !== void 0 && resolveAccessPolicy(decl).required;
       }).map((r) => ({ id: r.id, error: r.error ?? "unknown error" }));
       for (const f of failedRw) {
         const decl = declById.get(f.id);
@@ -9013,8 +9024,7 @@ var ConnectorManager = class {
     const allMountPaths = [...this.active.values()].map((e) => e.handle.mountPath).filter((p) => p != null);
     for (const [id, entry] of this.active) {
       if (!entry.connector.watch) continue;
-      const shouldWatch = entry.declaration.mount?.watch ?? entry.declaration.access !== "read-only";
-      if (!shouldWatch) continue;
+      if (!resolveAccessPolicy(entry.declaration).watch) continue;
       let mergedOptions = options;
       const myPath = entry.handle.mountPath;
       if (myPath) {
@@ -13509,6 +13519,6 @@ function describeFlowOperations() {
   return new FlowAdapter().tools.describeOperations({ access: "read-write" });
 }
 
-export { AbstractConnector, BUILTIN_CONNECTOR_CATALOG, BoxConnector, CONNECT_FAILURE_CARRY_OVER_TTL_MS, ClassifierSubpromptRunner, ConnectFailureCarryOver, ConnectorManager, DeployConnector, DevServerConnector, FlowAdapter, GitConnector, GmailConnector, GoogleDriveConnector, LocalConnector, LogBuffer, ManagedGitconfigCollisionError, MattermostConnector, MemoryConnector, MinIOConnector, NO_ACTIVE_FLOW_ERROR, PortPool, PostgresConnector, S3Connector, S3FetchStoppedError, S3PresignedRequestError, S3_PRESIGN_BATCH, SQLiteConnector, SessionInlineSubFlowRunner, SessionNodeExecutor, SessionSubpromptRunner, SharePointConnector, StaticServerConnector, SubFlowContractError, TunnelConnector, WebDAVConnector, XStateConnector, XStateStoreConnector, atomicReplaceCredential, buildConnectorListPayload, buildConnectorPromptSection, buildConnectorToolDefs, buildFlowPromptEvent, buildFlowToolDefs, buildLazyFlowToolDefs, buildLazySdkFlowTools, buildSdkConnectorTools, buildSdkFlowTools, checkFleetMountLiveness, classifierQuestion, classifyConnectError, createConnector, createConnector10, createConnector11, createConnector12, createConnector13, createConnector14, createConnector15, createConnector16, createConnector17, createConnector18, createConnector19, createConnector2, createConnector20, createConnector3, createConnector4, createConnector5, createConnector6, createConnector7, createConnector8, createConnector9, createFsWatcher, createWorktree, defaultSpawn, describeFlowOperations, driveOrchestratorTurn, ensureDirMode, ensureFleetMounted, ensureRefreshAttemptStamp, findGitRoot, findMissingPackages, getConnector, installNpmPackages, isFleetManaged, isPackageResolvable, listConnectors, listWorktrees, missingTokenMediatorMessage, parseListObjectsV2, presignScopePrefix, presignableKey, readGitSyncStatus, registerBuiltinConnectors, removeMountBlock, removeUnavailableMountBlock, renderCredentialHelperScript, tryGetConnector, worktreeRegistry, writeHelperScript, writeMountBlock, writeUnavailableMountBlock };
-//# sourceMappingURL=chunk-SZWRPEF7.js.map
-//# sourceMappingURL=chunk-SZWRPEF7.js.map
+export { AbstractConnector, BUILTIN_CONNECTOR_CATALOG, BoxConnector, CONNECT_FAILURE_CARRY_OVER_TTL_MS, ClassifierSubpromptRunner, ConnectFailureCarryOver, ConnectorManager, DeployConnector, DevServerConnector, FlowAdapter, GitConnector, GmailConnector, GoogleDriveConnector, LocalConnector, LogBuffer, ManagedGitconfigCollisionError, MattermostConnector, MemoryConnector, MinIOConnector, NO_ACTIVE_FLOW_ERROR, PortPool, PostgresConnector, S3Connector, S3FetchStoppedError, S3PresignedRequestError, S3_PRESIGN_BATCH, SQLiteConnector, SessionInlineSubFlowRunner, SessionNodeExecutor, SessionSubpromptRunner, SharePointConnector, StaticServerConnector, SubFlowContractError, TunnelConnector, WebDAVConnector, XStateConnector, XStateStoreConnector, atomicReplaceCredential, buildConnectorListPayload, buildConnectorPromptSection, buildConnectorToolDefs, buildFlowPromptEvent, buildFlowToolDefs, buildLazyFlowToolDefs, buildLazySdkFlowTools, buildSdkConnectorTools, buildSdkFlowTools, checkFleetMountLiveness, classifierQuestion, classifyConnectError, createConnector, createConnector10, createConnector11, createConnector12, createConnector13, createConnector14, createConnector15, createConnector16, createConnector17, createConnector18, createConnector19, createConnector2, createConnector20, createConnector3, createConnector4, createConnector5, createConnector6, createConnector7, createConnector8, createConnector9, createFsWatcher, createWorktree, defaultSpawn, describeFlowOperations, driveOrchestratorTurn, ensureDirMode, ensureFleetMounted, ensureRefreshAttemptStamp, findGitRoot, findMissingPackages, getConnector, installNpmPackages, isFleetManaged, isPackageResolvable, listConnectors, listWorktrees, missingTokenMediatorMessage, normalizeRuntimeFlow, parseListObjectsV2, presignScopePrefix, presignableKey, readGitSyncStatus, registerBuiltinConnectors, removeMountBlock, removeUnavailableMountBlock, renderCredentialHelperScript, resolveAccessPolicy, tryGetConnector, worktreeRegistry, writeHelperScript, writeMountBlock, writeUnavailableMountBlock };
+//# sourceMappingURL=chunk-TTRYE6AC.js.map
+//# sourceMappingURL=chunk-TTRYE6AC.js.map