@stage-labs/metro 0.1.0-beta.297 → 0.1.0-beta.299

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage-labs/metro",
-  "version": "0.1.0-beta.297",
+  "version": "0.1.0-beta.299",
   "description": "The metro command line: run your agent on this machine, relaying its chat channels and connectors to Claude Code.",
   "license": "MIT",
   "repository": {

package/runtime/marketplace/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "metro",
-  "version": "0.1.0-beta.297",
+  "version": "0.1.0-beta.299",
   "description": "Metro for Claude Code, installed by the metro daemon on this machine: every connector the agent holds as its own MCP server relayed through the daemon, the orchestrator-only guard on the main thread, and the standing rules loaded at each session start. No vendor credential ever sits in a config file.",
   "author": {
     "name": "Bonustrack",

package/runtime/node_modules/@metro-labs/daemon/src/connectors/migration-guard.ts

@@ -8,6 +8,7 @@ import { assertMigrationOutcomeKnown, beginMigrationOperation, drainMigrationLis
 const locked = (phase: string): boolean => phase !== 'rolled_back';
 const retired = (record: NonNullable<ReturnType<typeof migrationRecord>>): boolean => record.move === true || record.phase === 'cutover' || record.phase === 'active' || record.phase === 'rollback';
 const refused = (): ApiError => new ApiError('This local connector is locked while it moves to the organization.', 409);
+const editRefused = (): ApiError => new ApiError('This local connector is locked while it moves to the organization. To change or remove it, open Move to organization and roll back its migration first.', 409);
 
 export function migrationSource(id: string, dir = agentsDir()): ReturnType<typeof migrationRecords>[number] | null {
   const record = migrationRecord(id, dir);
@@ -27,7 +28,7 @@ export function assertLocalMigrationUse(id: string, dir = agentsDir()): void {
 }
 
 export function assertLocalMigrationEdit(id: string, dir = agentsDir()): void {
-  if (migrationRecords(dir).some((record) => locked(record.phase) && record.sourceId === id)) throw refused();
+  if (migrationRecords(dir).some((record) => locked(record.phase) && record.sourceId === id)) throw editRefused();
 }
 
 export function migrationExportableRows<T extends { id: string; name: string }>(rows: readonly T[], dir = agentsDir()): T[] {

package/runtime/node_modules/@metro-labs/daemon/src/connectors/org-runtime-discovery.ts

@@ -98,8 +98,9 @@ export async function discoverOrgGroups(url: string, guard: DiscoveryGuard): Pro
       try {
         return await guardedRequest(input, init, guard, budget);
       } catch (error) {
-        failure.error = orgRuntimeError(error);
-        throw failure.error;
+        const safe = orgRuntimeError(error);
+        if (init?.method !== 'DELETE' || safe.status !== 502) failure.error = safe;
+        throw safe;
       }
     };
     const tools = await listRemoteTools(new URL(url), { kind: 'none' }, send);

package/runtime/node_modules/@metro-labs/daemon/src/connectors/org-runtime.ts

@@ -3,7 +3,7 @@ import { agentsDir } from '../agents/files.js';
 import { assertMigrationOutcomeKnown, beginMigrationOperation, migrationRequestEffectful, type MigrationOperation } from './migration-operations.js';
 import type { FetchLike } from '@metro-labs/core/stations/oauth';
 import type { ToolGroup } from '@metro-labs/core/stations/types';
-import { effectiveConnectorPolicy, type DeliveredConnector } from '@metro-labs/http/connector-delivery';
+import { effectiveConnectorPolicy, type DeliveredConnector, type DeliverySnapshot } from '@metro-labs/http/connector-delivery';
 import type { ApiError } from '@metro-labs/http/api-error';
 import { requestConnectorBlocker, type GateRow } from './gates.js';
 import { publishOrgConnectors } from './publication.js';
@@ -92,7 +92,7 @@ export class OrgConnectorRuntime {
   }
 
   private publish(rows: RuntimeRow[]): void {
-    const metadata: GateRow[] = rows.filter((row) => row.state === 'ready').map((row) => ({
+    const metadata: GateRow[] = rows.map((row) => ({
       id: row.relayId, name: row.relayName,
       config: { policy: effectiveConnectorPolicy(row, this.entries.get(row.id)?.groups ?? {}), toolGroups: { ...this.entries.get(row.id)?.groups } },
     }));
@@ -145,14 +145,13 @@ export class OrgConnectorRuntime {
   private update(): RuntimeRow[] | null {
     try {
       const mapping = this.mapping();
-      const snapshot = this.enabled() || mapping.aliases.length > 0 ? this.sync.read() : null;
-      const rows = this.mappedRows(snapshot?.connectors ?? [], mapping);
+      const wanted = this.enabled() || mapping.aliases.length > 0;
+      const snapshot = wanted ? this.sync.read() : null;
       const epoch = this.sync.epoch();
+      if (this.held(snapshot, wanted, epoch)) return null;
+      const rows = this.mappedRows(snapshot?.connectors ?? [], mapping);
       this.invalidateEntries(rows, epoch, snapshot !== null);
-      for (const row of rows) {
-        if (row.state !== 'ready' || this.entries.has(row.id)) continue;
-        this.entries.set(row.id, { id: row.id, relayId: row.relayId, epoch, stamp: stampOf(row), controller: new AbortController(), groups: {}, scan: null, nextScan: 0, error: null });
-      }
+      this.track(rows, epoch);
       this.publish(rows);
       return snapshot === null ? null : rows;
     } catch {
@@ -162,6 +161,19 @@ export class OrgConnectorRuntime {
     }
   }
 
+  private track(rows: RuntimeRow[], epoch: number): void {
+    for (const row of rows) {
+      if (row.state !== 'ready' || this.entries.has(row.id)) continue;
+      this.entries.set(row.id, { id: row.id, relayId: row.relayId, epoch, stamp: stampOf(row), controller: new AbortController(), groups: {}, scan: null, nextScan: 0, error: null });
+    }
+  }
+
+  private held(snapshot: DeliverySnapshot | null, wanted: boolean, epoch: number): boolean {
+    if (snapshot !== null || !wanted || !this.sync.lapsed()) return false;
+    this.invalidateEntries([], epoch, false);
+    return true;
+  }
+
   refresh(): void {
     this.update();
   }

package/runtime/node_modules/@metro-labs/daemon/src/connectors/org-sync.ts

@@ -5,7 +5,7 @@ import { ApiError } from '@metro-labs/http/api-error';
 import { AGENT_CLOCK_SKEW_MS } from '@metro-labs/http/agent-signature';
 import { CONNECTOR_DELIVERY_LEASE_MS, CONNECTOR_DELIVERY_MAX_BYTES, openConnectorDelivery, type DeliveryContext, type DeliverySnapshot } from '@metro-labs/http/connector-delivery';
 import type { AgentKey } from './agent-key.js';
-import { agentCall, type MetroApi } from './metro-api.js';
+import { agentCall, MetroApiRefusal, type MetroApi } from './metro-api.js';
 
 interface Identity {
   key: AgentKey;
@@ -93,6 +93,12 @@ export class OrgConnectorSync {
     this.expiry = null;
   }
 
+  private refused = false;
+
+  lapsed(): boolean {
+    return !this.refused && (this.receipt.state === 'expired' || this.receipt.state === 'unavailable');
+  }
+
   invalidate(reason: 'waiting' | 'expired' | 'unavailable' = 'waiting'): void {
     this.generation += 1;
     this.controller?.abort();
@@ -147,8 +153,13 @@ export class OrgConnectorSync {
     this.token = identity.token;
     const generation = this.generation;
     this.controller = new AbortController();
-    this.running = this.fetch(identity, refresh, generation, this.controller.signal).catch((err: unknown) => {
-      if (generation === this.generation) this.invalidate('unavailable');
+    this.running = this.fetch(identity, refresh, generation, this.controller.signal).then(() => {
+      this.refused = false;
+    }, (err: unknown) => {
+      if (generation === this.generation) {
+        this.refused = err instanceof MetroApiRefusal && err.upstreamStatus < 500;
+        this.invalidate('unavailable');
+      }
       throw err;
     }).finally(() => { this.running = null; });
     return this.running;

package/runtime/runtime.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.1.0-beta.297"
+  "version": "0.1.0-beta.299"
 }

package/runtime/sdk-runner/runner.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.0-beta.297",
+  "version": "0.1.0-beta.299",
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.3.287",
     "@modelcontextprotocol/sdk": "^1.29.0",