@snowyroad/braid 0.88.0 → 0.89.1

package/dist/{chunk-JALMGUEK.js → chunk-EST67K7A.js}

@@ -389,7 +389,7 @@ var InviteExpiredError = class extends Error {
   }
 };
 async function redeemInvite(relayHttpUrl, code) {
-  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-6KFDTGLV.js");
+  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-HQIELMJB.js");
   const r = await boundedJsonFetch2(`${relayHttpUrl.replace(/\/$/, "")}/invites/redeem`, {
     method: "POST",
     headers: { "content-type": "application/json" },
@@ -478,7 +478,7 @@ function validateReplacementToken(newToken, currentToken, nowMs = Date.now()) {
   return { ok: true };
 }
 async function mintAccessToken(relayHttpUrl, agentKey, fetchFn = fetch, dpopProof) {
-  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-6KFDTGLV.js");
+  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-HQIELMJB.js");
   const r = await boundedJsonFetch2(`${relayHttpUrl.replace(/\/$/, "")}/agents/token`, {
     method: "POST",
     headers: {
@@ -1340,6 +1340,17 @@ function buildAcpEnv(base, extra, stripKeys) {
   return merged;
 }
 var STOP_DRAIN_MS = 3e3;
+var WARMUP_CEILING_MS = 12e4;
+var WarmupCeilingError = class extends Error {
+  constructor(ceilingMs) {
+    super(
+      `ACP agent warm-up timed out after ${ceilingMs}ms \u2014 the agent process started but never completed the initialize/session handshake (commonly a stalled login/auth prompt, or a slow first-run adapter download). Aborted.`
+    );
+    this.ceilingMs = ceilingMs;
+    this.name = "WarmupCeilingError";
+  }
+  ceilingMs;
+};
 function killProcessGroup(child, signal) {
   const pid = child.pid;
   try {
@@ -1371,17 +1382,19 @@ function safeAcpToolName(tc) {
   return tc?.kind ?? "unknown";
 }
 var AcpClient = class {
-  constructor(launch, scopeWrap, afterChildExitHook, telemetry) {
+  constructor(launch, scopeWrap, afterChildExitHook, telemetry, warmupCeilingMs = WARMUP_CEILING_MS) {
     this.launch = launch;
     this.scopeWrap = scopeWrap;
     this.afterChildExitHook = afterChildExitHook;
     this.telemetry = telemetry;
+    this.warmupCeilingMs = warmupCeilingMs;
     this.policy = launch.policy ?? { mode: "readonly", configDirAbs: configDir(process.env) };
   }
   launch;
   scopeWrap;
   afterChildExitHook;
   telemetry;
+  warmupCeilingMs;
   /** The tool permission policy; defaults FAIL-SAFE to readonly (never to approval). */
   policy;
   child = null;
@@ -1449,13 +1462,31 @@ var AcpClient = class {
     this.currentTurnOverrideMode = void 0;
     this.exitRejecters.clear();
     try {
-      await this.startInner();
+      await this.withWarmupCeiling(this.startInner());
     } catch (err) {
       await this.stop().catch(() => {
       });
       throw err;
     }
   }
+  /** Race the warm-up against the fixed ceiling so start() can never hang unbounded
+   *  (G1). On timeout it rejects with WarmupCeilingError; the caller's catch reaps the
+   *  subprocess (G2). The timer is cleared on every path (no leak), and a late inner
+   *  rejection after the ceiling already won is swallowed so it cannot surface as an
+   *  unhandledRejection. */
+  async withWarmupCeiling(inner) {
+    inner.catch(() => {
+    });
+    let timer;
+    const ceiling = new Promise((_, reject) => {
+      timer = setTimeout(() => reject(new WarmupCeilingError(this.warmupCeilingMs)), this.warmupCeilingMs);
+    });
+    try {
+      await Promise.race([inner, ceiling]);
+    } finally {
+      if (timer) clearTimeout(timer);
+    }
+  }
   async startInner() {
     const spec = this.scopeWrap ? await this.scopeWrap(this.launch) : this.launch;
     const child = spawn(spec.command, spec.args, {

package/dist/cli.js

@@ -70,7 +70,7 @@ import {
   toolStatusLine,
   validateRelayWsUrl,
   wsToHttp
-} from "./chunk-JALMGUEK.js";
+} from "./chunk-EST67K7A.js";
 import {
   externalSourceLabel,
   externalUntrustedPreamble,

package/dist/{http-6KFDTGLV.js → http-HQIELMJB.js}

@@ -4,7 +4,7 @@ import {
   boundedJsonFetch,
   resetHttpMetricsForTest,
   snapshotHttpMetrics
-} from "./chunk-JALMGUEK.js";
+} from "./chunk-EST67K7A.js";
 import "./chunk-BDOF72CL.js";
 export {
   assertHttpEndpoint,

package/dist/mcp/server.js

@@ -118,6 +118,9 @@ function artifactErrorMessage(e, brokerStatusFn) {
     if (relayCode === "demo_sealed" || msg.includes("demo_sealed")) {
       return "Artifact writes are not allowed in demo channels.";
     }
+    if (relayCode === "app_artifacts_disabled" || msg.includes("app_artifacts_disabled")) {
+      return "Interactive app artifacts are disabled for this channel's organization. An organization admin can enable them in the organization's settings on the website.";
+    }
     return "Artifact write forbidden (403).";
   }
   if (status === 404) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@snowyroad/braid",
-  "version": "0.88.0",
+  "version": "0.89.1",
   "description": "Braid: connect your own coding agent (Claude Code, Codex, Gemini, Grok) to a Braid channel and collaborate with other agents and humans.",
   "license": "SEE LICENSE IN LICENSE.md",
   "author": "SnowyRoad",
@@ -51,7 +51,7 @@
     "@anthropic-ai/sandbox-runtime": "0.0.63",
     "@anthropic-ai/sdk": "0.104.1",
     "@modelcontextprotocol/sdk": "1.29.0",
-    "@snowyroad/braid-tui": "0.0.25",
+    "@snowyroad/braid-tui": "0.0.26",
     "canonicalize": "^3.0.0",
     "jose": "^6.2.3",
     "ws": "8.21.0",

package/service-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@snowyroad/braid",
-  "version": "0.88.0",
+  "version": "0.89.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@snowyroad/braid",
-      "version": "0.88.0",
+      "version": "0.89.1",
       "license": "SEE LICENSE IN LICENSE.md",
       "dependencies": {
         "@agentclientprotocol/sdk": "0.25.1",
@@ -14,7 +14,7 @@
         "@anthropic-ai/sandbox-runtime": "0.0.63",
         "@anthropic-ai/sdk": "0.104.1",
         "@modelcontextprotocol/sdk": "1.29.0",
-        "@snowyroad/braid-tui": "0.0.25",
+        "@snowyroad/braid-tui": "0.0.26",
         "canonicalize": "^3.0.0",
         "jose": "^6.2.3",
         "ws": "8.21.0",
@@ -1183,9 +1183,9 @@
       ]
     },
     "node_modules/@snowyroad/braid-tui": {
-      "version": "0.0.25",
-      "resolved": "https://registry.npmjs.org/@snowyroad/braid-tui/-/braid-tui-0.0.25.tgz",
-      "integrity": "sha512-HXtqJ0FBPAOTdR5bZ9zFb3Rcew+1ZlDU44AeOz/PxrDW5a1D+TAdrfVSby32mUk9Z5dVUgWZ2wrnGdbyIX725g==",
+      "version": "0.0.26",
+      "resolved": "https://registry.npmjs.org/@snowyroad/braid-tui/-/braid-tui-0.0.26.tgz",
+      "integrity": "sha512-FTXVV0BB5Ko/gRfbzMjLoh1wG+j7aiBWjEhXp+k0cI67gUuQgxMaykV5gELWepVofUh8t3ZAsRgthZoWoqFVPw==",
       "license": "SEE LICENSE IN LICENSE.md",
       "dependencies": {
         "ink": "^5.2.0",
@@ -1373,9 +1373,9 @@
       }
     },
     "node_modules/acorn": {
-      "version": "8.17.0",
-      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.17.0.tgz",
-      "integrity": "sha512-xRQbDb9BnwDafYNn6Vwl839DYVjqXYb1XVGtWAZ1kcDc6iwAL4hg3B1dZlRiuENFeO2H53gFG3in621AdERVAg==",
+      "version": "8.18.0",
+      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.18.0.tgz",
+      "integrity": "sha512-lGq+9yr1/GuAWaVYIHRjvvySG5/4VfKIvC8EWxStPdcDh/Ka7FG3twP6v4d5BkravUilhIAsG4Qj83t02LWUPQ==",
       "dev": true,
       "license": "MIT",
       "bin": {
@@ -2144,9 +2144,9 @@
       "license": "Unlicense"
     },
     "node_modules/fast-uri": {
-      "version": "3.1.4",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.4.tgz",
-      "integrity": "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==",
+      "version": "3.1.5",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.5.tgz",
+      "integrity": "sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==",
       "funding": [
         {
           "type": "github",
@@ -2338,9 +2338,9 @@
       }
     },
     "node_modules/hono": {
-      "version": "4.12.32",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.32.tgz",
-      "integrity": "sha512-XcuyW9qE2kJn07PkecMOBd5Vq/hMy7mmGw+idz1yblbg9N17ijJODrvPkn7/dwL3Kulj8LcRJ69DLOWf91dRUg==",
+      "version": "4.12.33",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.33.tgz",
+      "integrity": "sha512-+SwvkaiJtxsiPjhy9LivY/1m7UsNqCJetM1BrZl9A5DkQhlbHQDU730mMiDPWjnoCYOM8Chf3WrCJw27kNTPFQ==",
       "license": "MIT",
       "engines": {
         "node": ">=16.9.0"
@@ -2449,9 +2449,9 @@
       }
     },
     "node_modules/ip-address": {
-      "version": "10.3.1",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.3.1.tgz",
-      "integrity": "sha512-1e9d3kb97NHJTIJDZW9rKqW2h6+dFa50Dy0fpPSMQp2ADje5gvKsXmdiK6dwY5t76TaTt5+P5N1Y/LoToIxP6g==",
+      "version": "10.4.0",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.4.0.tgz",
+      "integrity": "sha512-oSK96Grm3aP6OrS263xVxbNDGVL7rzBtYdpGqlDG8iQdoenDoTs/nkki+DflYbAEE8Xl6o5YxhxlrKvI3nqKXQ==",
       "license": "MIT",
       "engines": {
         "node": ">= 12"
@@ -2506,9 +2506,9 @@
       "license": "ISC"
     },
     "node_modules/jose": {
-      "version": "6.2.4",
-      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.4.tgz",
-      "integrity": "sha512-N8acGzVsQy6M/fjFcxtysNc4Q379TcM5dM/qKkNtsHFji88yANnXTr7BLeP75iPnFwBfQzM/jg2BZ9+HZrHCZA==",
+      "version": "6.2.6",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.6.tgz",
+      "integrity": "sha512-HwMtbJjMw8rC8dUTwCNilHJD+fxTeKM3JV1eprSmTjS41qwXSSt6exJXgyPK1QOu0jB9eDYLESRDkB3qaT3jnw==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/panva"
@@ -2913,9 +2913,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.23",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.23.tgz",
-      "integrity": "sha512-g50586zr4bZmwFiTlflMu8E0bDTb5I5gertgwAKmsdUlTQIhZtunzUlD1WSzwcVWPoAVpsrA6vlfCD7oXvRwgg==",
+      "version": "8.5.25",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.25.tgz",
+      "integrity": "sha512-DTPx3RWSSnWyzLxQnlH0rJP+EW5ekl16ZU4/psbIhA0e53kJfdgaN5vKM+xP7yJtXVu+nfdVFmlgFDEKAe4Pyw==",
       "dev": true,
       "funding": [
         {