@skaile/workspaces 6.9.0 → 6.10.0

package/dist/{chunk-WPLZGT5Z.js → chunk-4Z4RULWQ.js}

@@ -1,41 +1,41 @@
-import { WorkspacePlugin } from './chunk-PTJZCOBH.js';
-import { buildWorkspaceToolDefs } from './chunk-3EPRTMXY.js';
-import { findAiAssetsRoot } from './chunk-HQAPUPBE.js';
-import { startModelEndpoint, ModelEndpointError } from './chunk-T5EIWWEJ.js';
-import { WebSocketServerTransport } from './chunk-U3FI4DVT.js';
+import { WorkspacePlugin } from './chunk-6O7VDKX3.js';
+import { buildWorkspaceToolDefs } from './chunk-5KQFR4D7.js';
+import { findAiAssetsRoot } from './chunk-V2VDTQ7A.js';
+import { startModelEndpoint, ModelEndpointError } from './chunk-IMO4EHND.js';
+import { WebSocketServerTransport } from './chunk-7K73MCI6.js';
 import { assembleSystemPrompt, buildCapabilitiesPromptSection } from './chunk-W3UDISS2.js';
-import { prepareNativePolicy, codexInstanceEnvironment, parseCodexCredential, parseCodexRefreshInput, parseCodexRefreshResult } from './chunk-GYPPVANR.js';
-import { resolveFlowPath } from './chunk-XPKUFOS3.js';
-import { findAiAssetsRoot as findAiAssetsRoot$1, deployCatalogEntry, undeployCatalogEntry } from './chunk-USSP43U3.js';
-import { ConnectFailureCarryOver, registerBuiltinConnectors, listConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, buildSdkConnectorTools, fleetMountConnectingMessage, buildLazySdkFlowTools, describeFlowOperations, buildConnectorToolDefs, writeUserGitconfigInclude, buildFlowToolDefs, SessionNodeExecutor, SessionSubpromptRunner, ClassifierSubpromptRunner, SessionInlineSubFlowRunner, driveOrchestratorTurn, buildSdkFlowTools } from './chunk-MPRWVZXF.js';
-import { loadYamlConnectorDeclarations, withMaterializedConnectorDeclarations, SecretProviderChain, ConnectorStartupError, isKnownSecretRef, EnvSecretProvider, PreMintedSecretProvider, InMemorySecretProvider, resolvedConfigToDeclarations, deriveSingleMaterializedConnectorDeclaration } from './chunk-LMADWO4Q.js';
-import { EventNormalizer } from './chunk-AVRTZAH2.js';
-import { sessionSurfaceNotice, approvalCardOf, APPROVE_ONCE, DENY, probeResumeTranscript, transcriptStoreForRuntime } from './chunk-V2CONXKD.js';
-import { codexLoginFallbackNotice } from './chunk-GYBDWW6K.js';
-import { CodexNativeStateUnavailable } from './chunk-LOO5CB5M.js';
+import { resolveFlowPath } from './chunk-2D6HZAO5.js';
+import { findAiAssetsRoot as findAiAssetsRoot$1, deployCatalogEntry, undeployCatalogEntry } from './chunk-LQWOU7S2.js';
+import { ConnectFailureCarryOver, registerBuiltinConnectors, listConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, buildSdkConnectorTools, fleetMountConnectingMessage, buildLazySdkFlowTools, describeFlowOperations, buildConnectorToolDefs, TRUSTED_GIT_CA_ENV, writeUserGitconfigInclude, buildFlowToolDefs, SessionNodeExecutor, SessionSubpromptRunner, ClassifierSubpromptRunner, SessionInlineSubFlowRunner, driveOrchestratorTurn, buildSdkFlowTools } from './chunk-SKG6G4HO.js';
+import { loadYamlConnectorDeclarations, withMaterializedConnectorDeclarations, SecretProviderChain, ConnectorStartupError, isKnownSecretRef, EnvSecretProvider, PreMintedSecretProvider, InMemorySecretProvider, resolvedConfigToDeclarations, deriveSingleMaterializedConnectorDeclaration } from './chunk-SBAUZ7XH.js';
+import { EventNormalizer } from './chunk-NTFP2XF4.js';
+import { sessionSurfaceNotice, approvalCardOf, APPROVE_ONCE, DENY, probeResumeTranscript, transcriptStoreForRuntime } from './chunk-PSPFWTJI.js';
+import { codexLoginFallbackNotice, prepareNativePolicy, codexInstanceEnvironment, parseCodexCredential, parseCodexRefreshInput, parseCodexRefreshResult } from './chunk-HLFLET7S.js';
+import { CodexNativeStateUnavailable } from './chunk-5KSGZP3E.js';
 import { dispatchCapability } from './chunk-YEOG7CWQ.js';
 import { classifyClaudeSdkError } from './chunk-5DE3DGVR.js';
 import { agentExecRequested } from './chunk-7DN6JKP2.js';
-import { toAgentEffort, toMergedRegistry } from './chunk-CFTTXUM2.js';
-import { unresolvedProviderCredentials, harnessCapabilities, createHarness, providerCredentialEnvName, registryCredentialEnv, supportsLiveToolUpdates } from './chunk-SQMDFM4N.js';
+import { toAgentEffort, toMergedRegistry } from './chunk-NFFBYG2W.js';
+import { unresolvedProviderCredentials, harnessCapabilities, createHarness, providerCredentialEnvName, registryCredentialEnv, supportsLiveToolUpdates } from './chunk-KE5HDORU.js';
 import { catalogLayer, AI_PROVIDER_PRESETS } from './chunk-6UP2EDFN.js';
-import { loadFlow } from './chunk-5J6JWGY4.js';
+import { loadFlow } from './chunk-WDG5IVEA.js';
 import { renderStimulusPrompt } from './chunk-WD3L5QSU.js';
 import { TURN_VISIBILITY_EVENT_TYPES, withActivityLabelJsonSchema, TOOL_ACTIVITY_PROMPT_SECTION, TERMINAL_AGENT_RUN_STATUSES, SESSION_ROOT_CONNECTOR_ID, PLATFORM_BLOCKS_RUNTIME_FEATURE, TURN_VISIBILITY_RUNTIME_FEATURE, PROTOCOL_VERSION, deliveryClassOf } from './chunk-7NN3P6VF.js';
-import { knowledgeKindProvider, scanLibraryRoot, LocalIndex } from './chunk-GZL6RN4Z.js';
-import { createDefaultKindRegistry } from './chunk-5KWQMCH7.js';
+import { knowledgeKindProvider, scanLibraryRoot, LocalIndex } from './chunk-FXBKBOI5.js';
+import { createDefaultKindRegistry } from './chunk-RZ5R6GDJ.js';
 import { parseFlowDefinition } from './chunk-JRN5QF4C.js';
 import { BindingSchema, effectiveComposes, AgentManifestSchema, AgentTriggerSchema, ANTHROPIC_MODEL_ALIASES } from './chunk-WS3BOCAT.js';
-import { readLock, buildAgentPromptSections, resolveSettings, loadProviderRegistry, resolveLibraryDir } from './chunk-4KPQ6ILH.js';
-import { resolveRuntimeAssets } from './chunk-4ROXSQEG.js';
+import { readLock, buildAgentPromptSections, resolveSettings, loadProviderRegistry, resolveLibraryDir } from './chunk-MEU2HHGV.js';
+import { resolveRuntimeAssets } from './chunk-CJO3XKO7.js';
 import { DEFAULT_HARNESS_ID, resolveHarnessPaths } from './chunk-C5HFK34M.js';
-import { matchPin, DEFAULT_AGENT_INSTANCE_ID, effectiveAgentInstances, resolveAgentDefinitionDir, AgentRefResolutionError, resolveSkWorkspaceConfig, resolveAgentDir, agentSourceCacheDir, loadMcpServerDeclarations, COMPACTION_DEFAULTS, resolveCompactionThresholdPercent, getGlobalCacheDir, sourceCacheKey, validateAssetRecipeAttr, deriveSingleMaterializedMcpDeclaration, stageMaterializedSkills, readSkillAllowList, isStagedSkillMarkerFor, unstageSkill, STAGED_SKILL_MARKER } from './chunk-FZO64PLQ.js';
+import { matchPin, DEFAULT_AGENT_INSTANCE_ID, effectiveAgentInstances, resolveAgentDefinitionDir, AgentRefResolutionError, resolveSkWorkspaceConfig, resolveAgentDir, agentSourceCacheDir, loadMcpServerDeclarations, COMPACTION_DEFAULTS, resolveCompactionThresholdPercent, getGlobalCacheDir, sourceCacheKey, validateAssetRecipeAttr, deriveSingleMaterializedMcpDeclaration, stageMaterializedSkills, readSkillAllowList, isStagedSkillMarkerFor, unstageSkill, STAGED_SKILL_MARKER } from './chunk-BNLXZXZN.js';
 import { globalSkaileDir, globalCacheRoot } from './chunk-L5VSIPQD.js';
 import { harnessNameForHarnessId, SUPPORTED_HARNESSES, HARNESS_TARGETS } from './chunk-VTETQCR6.js';
-import { withFsDeadline, FsDeadlineError, fsDeadlineMs, parseFrontmatter, tryWithFsDeadline } from './chunk-GNUA7XT2.js';
-import { parseAssetRef } from './chunk-V5KG6CCV.js';
+import { withFsDeadline, FsDeadlineError, fsDeadlineMs, parseFrontmatter, tryWithFsDeadline } from './chunk-VS6XC5JE.js';
+import { parseAssetRef } from './chunk-7HRZACI4.js';
+import { portableSpawnSync } from './chunk-VSX2G7LA.js';
 import { pickRegistryEntries, registryEntries, resolveEntryBaseUrl, parseModelRef, isEntryEnabled, parseCredentialRef } from './chunk-RXGPFAMN.js';
-import { resolveLogStoreConfig, createLogStoreFromConfig, OnLogBridgeSink, WsLogSink, resolveLogsRetention, enforceLogsRetention, ensureRunStateIgnored, scrubLogText } from './chunk-MDCI4RSG.js';
+import { resolveLogStoreConfig, createLogStoreFromConfig, OnLogBridgeSink, WsLogSink, resolveLogsRetention, enforceLogsRetention, ensureRunStateIgnored, scrubLogText } from './chunk-RZL4TOK3.js';
 import { getLogStore, registerLogStore, createLogger, resetLogStore, isUnwritableStreamError, markStreamBroken, isBrokenPipeError, redactCredentials } from './chunk-BOFL7GIF.js';
 import { __require } from './chunk-NSBPE2FW.js';
 import { createInterface } from 'readline';
@@ -9710,11 +9710,14 @@ var TurnScheduler = class {
     };
   }
   async runPrompt(turn, leaveQueue) {
+    if (turn.cancelled?.()) return { kind: "dropped" };
     if (!await turn.admit()) return { kind: "abandoned" };
     await this.swaps.awaitSwap();
     if (!await this.awaitCompactionIdle("prompt")) return { kind: "abandoned" };
+    if (turn.cancelled?.()) return { kind: "dropped" };
     const handOff = await turn.route();
     if (handOff === false) return { kind: "abandoned" };
+    if (handOff && turn.cancelled?.()) return { kind: "dropped" };
     if (handOff) {
       leaveQueue();
       try {
@@ -9751,6 +9754,11 @@ var TurnScheduler = class {
       this.deps.logPhase("harness_start", startedAt, { ok, attempts });
     }
     if (!endTurn) return { kind: "abandoned" };
+    if (turn.cancelled?.()) {
+      endTurn();
+      this.reportIdleIfDrained("turn");
+      return { kind: "dropped" };
+    }
     this.deps.turnVisibility?.enter(turn.visibility ?? null);
     this.deps.turnEnd?.begin();
     const endsBefore = this.turnEndReports;
@@ -13225,13 +13233,33 @@ function userGitconfigsToInclude(managedGitconfigPath) {
   }
   return found;
 }
+function userCaInfoPath() {
+  const home = process.env.HOME || homedir();
+  if (!home) return void 0;
+  const xdg = process.env.XDG_CONFIG_HOME;
+  const xdgDir = xdg && isAbsolute(xdg) ? xdg : join(home, ".config");
+  let found;
+  for (const userPath of [join(xdgDir, "git", "config"), join(home, ".gitconfig")]) {
+    if (!existsSync(userPath)) continue;
+    const res = portableSpawnSync(
+      ["git", "config", "--file", userPath, "--type=path", "--get", "http.sslCAInfo"],
+      { timeoutMs: 5e3 }
+    );
+    const value = res.exitCode === 0 ? res.stdout.trim() : "";
+    if (value && isAbsolute(value)) found = value;
+  }
+  return found;
+}
 function setupManagedGitconfig(projectDir, serverLog, includeInHome) {
   const managedGitconfigPath = join(resolve(projectDir), ".skaile", "managed-gitconfig");
   process.env.GIT_CONFIG_GLOBAL = managedGitconfigPath;
+  const userCaInfo = userCaInfoPath();
+  if (userCaInfo) process.env[TRUSTED_GIT_CA_ENV] = userCaInfo;
   try {
     writeUserGitconfigInclude({
       gitconfigPath: managedGitconfigPath,
-      userGitconfigPaths: includeInHome ? void 0 : userGitconfigsToInclude(managedGitconfigPath)
+      userGitconfigPaths: includeInHome ? void 0 : userGitconfigsToInclude(managedGitconfigPath),
+      userCaInfo
     });
   } catch (err) {
     serverLog.warn("failed to write managed-gitconfig \u2014 the agent's git has no global config", {
@@ -16105,6 +16133,7 @@ async function startAgentServer(opts) {
       owner: input.owner,
       visibility: input.visibility ?? null,
       ...input.onStart ? { onStart: input.onStart } : {},
+      ...input.isAborted ? { cancelled: input.isAborted } : {},
       // The turn ahead may be paused on a question it can only leave through
       // this harness's rule for a new prompt; apply it now, not after that turn.
       onQueued: () => harness?.supersedePendingQuestion?.(),
@@ -16155,9 +16184,9 @@ async function startAgentServer(opts) {
           refuse("Prompt refused: a private message cannot stay private while a flow runs.");
           return false;
         }
-        if (Array.isArray(input.platformBlocks))
-          pendingFlowPlatformBlocks.push(...input.platformBlocks);
         return async () => {
+          if (Array.isArray(input.platformBlocks))
+            pendingFlowPlatformBlocks.push(...input.platformBlocks);
           sendEvent({ type: "status", phase: "thinking" });
           try {
             const bus = getOrCreateStimulusBus();
@@ -16183,7 +16212,6 @@ async function startAgentServer(opts) {
         };
       },
       dispatch: async () => {
-        if (input.isAborted?.()) return;
         const restricted = input.toolAllowlist !== void 0;
         if (restricted) {
           const refusal = toolAllowlistRefusal(input.toolAllowlist, harness);
@@ -16924,5 +16952,5 @@ function touchSession(state) {
 }
 
 export { AgentRunError, CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CONNECTOR_MUTATE_NOT_READY, CapabilityRegistry, CompileManifestEntrySchema, CompositionError, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, DEFAULT_FLOW_MUTATE_CONNECTOR_WAIT_MS, DEFAULT_MAX_FINISHED_TREES, DEFAULT_RUN_LIMITS, MOUNT_LIST_MAX_DEPTH, MOUNT_LIST_MAX_ENTRIES, MOUNT_READ_DEADLINE_FACTOR, MOUNT_READ_MAX_CHUNK_BYTES, MOUNT_STAT_BUDGET_MS, MOUNT_STAT_MAX_ENTRIES, MOUNT_TREE_OP_DEADLINE_FACTOR, MOUNT_WRITE_MAX_CHUNK_BYTES, MarkdownStreamer, PreInitRingSink, ResourceOperationError, SESSION_ROOT_WRITABLE_DIRS, SESSION_ROOT_WRITABLE_FILES, UnknownCompositionKindError, WRITE_RANGE_PARTIAL_TTL_MS, WS_AUTH_TOKEN_ENV, WS_AUTH_TOKEN_FILE_ENV, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildCompositionRunSnapshot, buildConnectorTokenMediator, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, buildRunnerAgentSections, buildStoreSnapshotReplay, builtinCapabilities, canonicalJson, capabilityLogInstance, capabilitySignatureInputs, clearPreInitRingSink, clearSession, compileComposition, compositionRunSnapshotPath, computeCapabilitySignature, computeDirectoryTotals, computeRevisionHash, connectorRefreshKind, createAgentSession, createCompositionContentSource, createFinalTextFallback, createFlowConnectorReadiness, createInMemoryRunStore, createManagedCodexSubpromptHarness, createRunController, createSessionStimulusBus, defineCapability, deleteSession, describeComposition, dispatchResourceRequest, dispatchRunnerCapabilityInvocation, emitSystemPromptComposed, ensureClaudeSettingsDisablesConnectors, ensureGitConfigInclude, executeConnectorMutate, extractClaudeAiOauthExpiresAt, flowStartNeedsHarnessRestart, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, handleSessionRootResourceRequest, harnessActiveAfterTurnEnd, hasNonTerminalFlow, hashAgentFiles, hashContent, hostOpResumeStimulus, installPreInitRingSink, instanceForSession, instanceSessionOverrides, isCompilePinCurrent, isCompositionError, isEmptyKnowledgeIndex, isSessionRootPathAllowed, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadCompositionRunSnapshot, loadKnowledgeDir, loadManagedCodexHostConfig, loadSession, loadSessionById, logConnectorReport, manifestModelForHarness, mcpAuthSecretKey, modelForHarness, newSession, nulTailPaddingLength, pickChatFlowTarget, pickFlowToolTarget, pickRepointedManager, planFlowMutate, prepareCodexTools, reconcilePendingDecisions, reconnectedRunNeedsAgentTurn, recreateKeepingLiveFlows, registerActiveFlow, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, rejectPendingCapabilityCallsOnDisconnect, resetRunnerLogStore, resolveAgentInstance, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveFlowMutateConnectorWaitMs, resolveInstanceAgentDir, resolveMixin, resolveSessionId, restoredRunHasWorkToResume, runAgentChat, saveCompositionRunSnapshot, saveSession, setCurrentSession, setUpFlowConnector, startAgentServer, stimulusFromMetas, stripFrontmatter, takeRunnerWsAuthToken, toActiveFlowTarget, touchSession, unresolvedCredentialNotices, validateInputResponse, verifyConventionItems, writeClaudeCodeCredentialsFile, writeRangeChunk, writeRangePartialPath };
-//# sourceMappingURL=chunk-WPLZGT5Z.js.map
-//# sourceMappingURL=chunk-WPLZGT5Z.js.map
+//# sourceMappingURL=chunk-4Z4RULWQ.js.map
+//# sourceMappingURL=chunk-4Z4RULWQ.js.map