@skaile/workspaces 0.24.0 → 0.26.0

package/dist/{chunk-HIIARTRZ.js → chunk-YDTW4GT6.js}

@@ -1,22 +1,22 @@
-import { resolveAuthRef, resolveAuth } from './chunk-ODPII24X.js';
+import { resolveAuthRef, resolveAuth } from './chunk-ZYDE52WE.js';
 import { createFsWatcher, RcloneProcessManager, ensureDirMode, PortPool } from './chunk-QMONOHXT.js';
-import { renderWebDAVConfig, renderOneDriveConfig, renderGoogleDriveConfig } from './chunk-QAVZOJCV.js';
+import { renderWebDAVConfig, renderOneDriveConfig, renderGoogleDriveConfig } from './chunk-OVRSNIKJ.js';
 import { pluginRegistry } from './chunk-6E6PKKAD.js';
-import { computeFlowStateFromSnapshots } from './chunk-ICS76R4T.js';
-import { renderStimulusPrompt } from './chunk-GZWJGNNN.js';
-import { computeStimulus } from './chunk-FVTV7M76.js';
-import { portableSpawn } from './chunk-Z3M5K67G.js';
+import { computeFlowStateFromSnapshots } from './chunk-W7W66MDZ.js';
+import { renderStimulusPrompt } from './chunk-DEYYRFQU.js';
+import { computeStimulus } from './chunk-IFGTRL2I.js';
+import { portableSpawn } from './chunk-KL2MQ6WI.js';
 import { createLogger } from './chunk-24UIWON4.js';
 import { existsSync, mkdirSync, renameSync, writeFileSync, readFileSync, cpSync, statSync, createReadStream, readdirSync, openSync, writeSync, closeSync, chmodSync } from 'fs';
-import { join, dirname, resolve, sep } from 'path';
+import path, { join, dirname, resolve, sep } from 'path';
 import * as zNS from 'zod';
-import { execFile, execSync } from 'child_process';
+import { execFile, execSync, spawn } from 'child_process';
 import { promisify } from 'util';
 import { createServer } from 'http';
 import mime from 'mime';
+import { stat, readdir, mkdir, writeFile, chmod, rm } from 'fs/promises';
 import { createRequire } from 'module';
 import { pathToFileURL } from 'url';
-import { stat, readdir } from 'fs/promises';
 
 // connectors/src/connector-base.ts
 var AbstractConnector = class {
@@ -148,6 +148,9 @@ var GitConnector = class extends AbstractConnector {
       this.log.error("connect failed: missing mount.source URL", void 0);
       throw new Error("Git connector requires a mount.source URL");
     }
+    if (!isValidGitRefOrSha(branch)) {
+      throw new Error(`Git connector: invalid branch name "${branch}"`);
+    }
     this.log.info("mount start", { url, branch, targetDir });
     const initial = await this.acquireInitialToken(declaration, secrets, tokenMediator);
     const session = parseSessionConfig(opts);
@@ -197,6 +200,9 @@ var GitConnector = class extends AbstractConnector {
     }
     if (session.enabled && !session.isMain && session.slug) {
       const sessionBranch = `${session.branchPrefix}${session.slug}`;
+      if (!isValidGitRefOrSha(sessionBranch)) {
+        throw new Error(`Git connector: invalid session branch name "${sessionBranch}"`);
+      }
       try {
         git(`rev-parse --verify origin/${sessionBranch}`, targetDir);
         git(`checkout -B ${sessionBranch} origin/${sessionBranch}`, targetDir);
@@ -389,12 +395,19 @@ var GitConnector = class extends AbstractConnector {
       this.resetAutoCommitTimer(s, handle.mountPath);
     };
     let fsWatcher = null;
+    let closed = false;
     const ignored = [...options?.ignored ?? [], "**/.git/**"];
     createFsWatcher(handle.mountPath, s.emitChange, { ...options, ignored }).then((w) => {
-      fsWatcher = w;
+      if (closed) void w.close();
+      else fsWatcher = w;
+    }).catch((err) => {
+      this.log.warn("watcher creation failed", {
+        error: err instanceof Error ? err.message : String(err)
+      });
     });
     return {
       close: async () => {
+        closed = true;
         s.emitChange = void 0;
         await fsWatcher?.close();
       }
@@ -1033,11 +1046,18 @@ var LocalConnector = class extends AbstractConnector {
   }
   watch(handle, callback, options) {
     let fsWatcher = null;
+    let closed = false;
     createFsWatcher(handle.mountPath, callback, options).then((w) => {
-      fsWatcher = w;
+      if (closed) void w.close();
+      else fsWatcher = w;
+    }).catch((err) => {
+      this.log.warn("watcher creation failed", {
+        error: err instanceof Error ? err.message : String(err)
+      });
     });
     return {
       close: async () => {
+        closed = true;
         await fsWatcher?.close();
       }
     };
@@ -1090,7 +1110,7 @@ var S3Connector = class extends AbstractConnector {
     if (endpoint) clientConfig.endpoint = endpoint;
     const profile = resolveAuth(declaration.auth, secrets);
     if (profile) {
-      process.env.AWS_PROFILE = profile;
+      clientConfig.profile = profile;
     }
     const client = new S3Client(clientConfig);
     const state = { client, bucket, prefix, region };
@@ -1147,15 +1167,18 @@ var S3Connector = class extends AbstractConnector {
       continuationToken = resp.IsTruncated ? resp.NextContinuationToken : void 0;
     } while (continuationToken);
     let filesWritten = 0;
+    let bytesTransferred = 0;
     for (const { key, relPath } of entries) {
       try {
         const resp = await client.send(new s3Mod.GetObjectCommand({ Bucket: bucket, Key: key }));
-        const body = await resp.Body?.transformToString();
-        if (body == null) continue;
+        const bytes = await resp.Body?.transformToByteArray();
+        if (bytes == null) continue;
+        const body = Buffer.from(bytes);
         const localPath = join(targetDir, relPath);
         mkdirSync(dirname(localPath), { recursive: true });
         writeFileSync(localPath, body);
         filesWritten++;
+        bytesTransferred += body.byteLength;
       } catch (err) {
         this.log.warn("object download failed", {
           key,
@@ -1163,7 +1186,7 @@ var S3Connector = class extends AbstractConnector {
         });
       }
     }
-    return { filesWritten, filesDeleted: 0, bytesTransferred: 0 };
+    return { filesWritten, filesDeleted: 0, bytesTransferred };
   }
 };
 function createConnector4(sdkOverride) {
@@ -1343,7 +1366,7 @@ async function obscurePassword(plain) {
   }
 }
 
-// base-assets/connectors/sharepoint/driver.ts
+// factory-assets/connectors/sharepoint/driver.ts
 var DEFAULT_CACHE_BASE = "/var/cache/skaile";
 function cacheBase() {
   return process.env.SKAILE_RCLONE_CACHE_BASE ?? DEFAULT_CACHE_BASE;
@@ -1528,7 +1551,7 @@ function buildRemotePath(folderPath, basePath) {
   return joined.length > 0 ? `/${joined}` : "/";
 }
 
-// base-assets/connectors/googledrive/driver.ts
+// factory-assets/connectors/googledrive/driver.ts
 var CACHE_BASE2 = "/var/cache/skaile";
 var ALLOWED_SCOPES = /* @__PURE__ */ new Set([
   "drive",
@@ -1707,17 +1730,17 @@ function parseAuthBlob2(raw, log) {
   }
 }
 
-// base-assets/connectors/memory/adapter.ts
+// factory-assets/connectors/memory/adapter.ts
 var MemoryConnector = class extends AbstractConnector {
   name = "memory";
   tools;
   constructor() {
     super();
     this.tools = {
-      read: (handle, path) => this._read(handle, path),
-      write: (handle, path, content) => this._write(handle, path, content),
-      delete: (handle, path) => this._delete(handle, path),
-      list: (handle, path, options) => this._list(handle, path, options),
+      read: (handle, path2) => this._read(handle, path2),
+      write: (handle, path2, content) => this._write(handle, path2, content),
+      delete: (handle, path2) => this._delete(handle, path2),
+      list: (handle, path2, options) => this._list(handle, path2, options),
       search: (handle, query, options) => this._search(handle, query, options),
       describeOperations: (handle) => this._describeOperations(handle),
       executeOp: (handle, operation, args) => this._executeOp(handle, operation, args)
@@ -1736,26 +1759,26 @@ var MemoryConnector = class extends AbstractConnector {
   store(handle) {
     return handle.state.store;
   }
-  async _read(handle, path) {
-    const value = this.store(handle).get(path);
+  async _read(handle, path2) {
+    const value = this.store(handle).get(path2);
     if (value === void 0) return null;
     return { data: value, contentType: "application/json" };
   }
-  async _write(handle, path, content) {
-    const isNew = !this.store(handle).has(path);
+  async _write(handle, path2, content) {
+    const isNew = !this.store(handle).has(path2);
     this.store(handle).set(
-      path,
+      path2,
       typeof content.data === "string" ? content.data : content.data.toString("utf-8")
     );
-    this.emitChange?.({ path, action: isNew ? "create" : "edit", source: "operation" });
+    this.emitChange?.({ path: path2, action: isNew ? "create" : "edit", source: "operation" });
   }
-  async _delete(handle, path) {
-    const deleted = this.store(handle).delete(path);
-    if (deleted) this.emitChange?.({ path, action: "delete", source: "operation" });
+  async _delete(handle, path2) {
+    const deleted = this.store(handle).delete(path2);
+    if (deleted) this.emitChange?.({ path: path2, action: "delete", source: "operation" });
     return deleted;
   }
-  async _list(handle, path, options) {
-    const prefix = path ?? "";
+  async _list(handle, path2, options) {
+    const prefix = path2 ?? "";
     const entries = [];
     for (const key of this.store(handle).keys()) {
       if (prefix && !key.startsWith(prefix)) continue;
@@ -1853,22 +1876,26 @@ var MemoryConnector = class extends AbstractConnector {
   }
 };
 function matchGlob(str, pattern) {
-  const regex = new RegExp(`^${pattern.replace(/\*/g, ".*").replace(/\?/g, ".")}$`);
+  const escaped = pattern.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const regex = new RegExp(`^${escaped.replace(/\\\*/g, ".*").replace(/\\\?/g, ".")}$`);
   return regex.test(str);
 }
 function createConnector8() {
   return new MemoryConnector();
 }
 
-// base-assets/connectors/postgres/adapter.ts
+// factory-assets/connectors/postgres/adapter.ts
+function quoteIdent(ident) {
+  return ident.replace(/"/g, '""');
+}
 var PostgresConnector = class extends AbstractConnector {
   name = "postgres";
   tools;
   constructor() {
     super();
     this.tools = {
-      read: (handle, path) => this._read(handle, path),
-      list: (handle, path, options) => this._list(handle, path, options),
+      read: (handle, path2) => this._read(handle, path2),
+      list: (handle, path2, options) => this._list(handle, path2, options),
       search: (handle, query, options) => this._search(handle, query, options),
       describeOperations: (handle) => this._describeOperations(handle),
       executeOp: (handle, operation, args) => this._executeOp(handle, operation, args),
@@ -1947,8 +1974,8 @@ var PostgresConnector = class extends AbstractConnector {
     return handle.state.pool;
   }
   // Base ops map to table/row access via path convention: <table>/<pk>
-  async _read(handle, path) {
-    const parts = path.split("/");
+  async _read(handle, path2) {
+    const parts = path2.split("/");
     if (parts.length === 1) {
       const table2 = parts[0];
       const result2 = await this.pool(handle).query(
@@ -1960,14 +1987,15 @@ var PostgresConnector = class extends AbstractConnector {
       return { data: JSON.stringify(result2.rows, null, 2), contentType: "application/json" };
     }
     const [table, pk] = parts;
-    const result = await this.pool(handle).query(`SELECT * FROM "${table}" WHERE id = $1 LIMIT 1`, [
-      pk
-    ]);
+    const result = await this.pool(handle).query(
+      `SELECT * FROM "${quoteIdent(table)}" WHERE id = $1 LIMIT 1`,
+      [pk]
+    );
     if (result.rows.length === 0) return null;
     return { data: JSON.stringify(result.rows[0], null, 2), contentType: "application/json" };
   }
-  async _list(handle, path, options) {
-    if (!path) {
+  async _list(handle, path2, options) {
+    if (!path2) {
       const result2 = await this.pool(handle).query(
         `SELECT table_name FROM information_schema.tables
          WHERE table_schema = 'public' ORDER BY table_name`
@@ -1979,10 +2007,12 @@ var PostgresConnector = class extends AbstractConnector {
       }));
     }
     const limit = options?.limit ?? 100;
-    const result = await this.pool(handle).query(`SELECT * FROM "${path}" LIMIT $1`, [limit]);
+    const result = await this.pool(handle).query(`SELECT * FROM "${quoteIdent(path2)}" LIMIT $1`, [
+      limit
+    ]);
     return result.rows.map((row, i) => ({
       name: String(row.id ?? i),
-      path: `${path}/${row.id ?? i}`,
+      path: `${path2}/${row.id ?? i}`,
       type: "row"
     }));
   }
@@ -1999,9 +2029,9 @@ var PostgresConnector = class extends AbstractConnector {
           [table.name]
         );
         if (cols.rows.length === 0) continue;
-        const conditions = cols.rows.map((c) => `"${c.column_name}"::text ILIKE $1`).join(" OR ");
+        const conditions = cols.rows.map((c) => `"${quoteIdent(String(c.column_name))}"::text ILIKE $1`).join(" OR ");
         const searchResult = await this.pool(handle).query(
-          `SELECT * FROM "${table.name}" WHERE ${conditions} LIMIT $2`,
+          `SELECT * FROM "${quoteIdent(table.name)}" WHERE ${conditions} LIMIT $2`,
           [`%${query}%`, maxResults - results.length]
         );
         for (const row of searchResult.rows) {
@@ -2124,14 +2154,17 @@ var PostgresConnector = class extends AbstractConnector {
 function createConnector9() {
   return new PostgresConnector();
 }
+function quoteIdent2(ident) {
+  return ident.replace(/"/g, '""');
+}
 var SQLiteConnector = class extends AbstractConnector {
   name = "sqlite";
   tools;
   constructor() {
     super();
     this.tools = {
-      read: (handle, path) => this._read(handle, path),
-      list: (handle, path, options) => this._list(handle, path, options),
+      read: (handle, path2) => this._read(handle, path2),
+      list: (handle, path2, options) => this._list(handle, path2, options),
       search: (handle, query, options) => this._search(handle, query, options),
       describeOperations: (handle) => this._describeOperations(handle),
       executeOp: (handle, operation, args) => this._executeOp(handle, operation, args)
@@ -2215,23 +2248,25 @@ var SQLiteConnector = class extends AbstractConnector {
     const changes = db.getRowsModified();
     return changes;
   }
-  async _read(handle, path) {
-    const parts = path.split("/");
+  async _read(handle, path2) {
+    const parts = path2.split("/");
     if (parts.length === 1) {
       const table2 = parts[0];
-      const info = this.queryRows(this.db(handle), `PRAGMA table_info("${table2}")`);
+      const info = this.queryRows(this.db(handle), `PRAGMA table_info("${quoteIdent2(table2)}")`);
       if (info.length === 0) return null;
       return { data: JSON.stringify(info, null, 2), contentType: "application/json" };
     }
     const [table, rowid] = parts;
-    const rows = this.queryRows(this.db(handle), `SELECT * FROM "${table}" WHERE rowid = ?`, [
-      rowid
-    ]);
+    const rows = this.queryRows(
+      this.db(handle),
+      `SELECT * FROM "${quoteIdent2(table)}" WHERE rowid = ?`,
+      [rowid]
+    );
     if (rows.length === 0) return null;
     return { data: JSON.stringify(rows[0], null, 2), contentType: "application/json" };
   }
-  async _list(handle, path, options) {
-    if (!path) {
+  async _list(handle, path2, options) {
+    if (!path2) {
       const tables = this.queryRows(
         this.db(handle),
         "SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%' ORDER BY name"
@@ -2243,10 +2278,14 @@ var SQLiteConnector = class extends AbstractConnector {
       }));
     }
     const limit = options?.limit ?? 100;
-    const rows = this.queryRows(this.db(handle), `SELECT rowid, * FROM "${path}" LIMIT ?`, [limit]);
+    const rows = this.queryRows(
+      this.db(handle),
+      `SELECT rowid, * FROM "${quoteIdent2(path2)}" LIMIT ?`,
+      [limit]
+    );
     return rows.map((row) => ({
       name: String(row.rowid ?? row.id ?? "?"),
-      path: `${path}/${row.rowid ?? row.id ?? "?"}`,
+      path: `${path2}/${row.rowid ?? row.id ?? "?"}`,
       type: "row"
     }));
   }
@@ -2257,15 +2296,18 @@ var SQLiteConnector = class extends AbstractConnector {
     for (const table of tables) {
       if (results.length >= maxResults) break;
       try {
-        const info = this.queryRows(this.db(handle), `PRAGMA table_info("${table.name}")`);
+        const info = this.queryRows(
+          this.db(handle),
+          `PRAGMA table_info("${quoteIdent2(table.name)}")`
+        );
         const textCols = info.filter((c) => /text|varchar|char/i.test(String(c.type ?? "")));
         if (textCols.length === 0) continue;
-        const conditions = textCols.map((c) => `"${c.name}" LIKE ?`).join(" OR ");
+        const conditions = textCols.map((c) => `"${quoteIdent2(String(c.name))}" LIKE ?`).join(" OR ");
         const params = textCols.map(() => `%${query}%`);
         params.push(maxResults - results.length);
         const rows = this.queryRows(
           this.db(handle),
-          `SELECT rowid, * FROM "${table.name}" WHERE ${conditions} LIMIT ?`,
+          `SELECT rowid, * FROM "${quoteIdent2(table.name)}" WHERE ${conditions} LIMIT ?`,
           params
         );
         for (const row of rows) {
@@ -2332,7 +2374,7 @@ var SQLiteConnector = class extends AbstractConnector {
       case "schema": {
         const table = args.table ? String(args.table) : void 0;
         if (table) {
-          const info = this.queryRows(db, `PRAGMA table_info("${table}")`);
+          const info = this.queryRows(db, `PRAGMA table_info("${quoteIdent2(table)}")`);
           return JSON.stringify(info, null, 2);
         }
         const tables = this.queryRows(
@@ -2341,7 +2383,10 @@ var SQLiteConnector = class extends AbstractConnector {
         );
         const result = {};
         for (const t of tables) {
-          result[t.name] = this.queryRows(db, `PRAGMA table_info("${t.name}")`);
+          result[t.name] = this.queryRows(
+            db,
+            `PRAGMA table_info("${quoteIdent2(String(t.name))}")`
+          );
         }
         return JSON.stringify(result, null, 2);
       }
@@ -2363,15 +2408,15 @@ function createConnector10() {
   return new SQLiteConnector();
 }
 
-// base-assets/connectors/minio/adapter.ts
+// factory-assets/connectors/minio/adapter.ts
 var MinIOConnector = class extends AbstractConnector {
   name = "minio";
   tools;
   constructor() {
     super();
     this.tools = {
-      list: (handle, path) => this._list(handle, path),
-      read: (handle, path) => this._read(handle, path),
+      list: (handle, path2) => this._list(handle, path2),
+      read: (handle, path2) => this._read(handle, path2),
       describeOperations: (handle) => this._describeOperations(handle),
       executeOp: (handle, operation, args) => this._executeOp(handle, operation, args),
       describeSkill: (handle, declaration) => this._describeSkill(handle, declaration)
@@ -2549,10 +2594,10 @@ var MinIOConnector = class extends AbstractConnector {
     }
     return ops;
   }
-  async _list(handle, path) {
+  async _list(handle, path2, recursive = false) {
     const { client, bucket } = handle.state;
     const entries = [];
-    const stream = client.listObjects(bucket, path ?? "", false);
+    const stream = client.listObjects(bucket, path2 ?? "", recursive);
     return new Promise((resolve5, reject) => {
       stream.on("data", (obj) => {
         entries.push({
@@ -2567,10 +2612,10 @@ var MinIOConnector = class extends AbstractConnector {
       stream.on("error", reject);
     });
   }
-  async _read(handle, path) {
+  async _read(handle, path2) {
     const { client, bucket } = handle.state;
     const chunks = [];
-    const stream = await client.getObject(bucket, path);
+    const stream = await client.getObject(bucket, path2);
     return new Promise((resolve5, reject) => {
       stream.on("data", (chunk) => chunks.push(chunk));
       stream.on("end", () => resolve5({ data: Buffer.concat(chunks).toString() }));
@@ -2581,7 +2626,11 @@ var MinIOConnector = class extends AbstractConnector {
     const { client, bucket } = handle.state;
     switch (operation) {
       case "list_objects":
-        return JSON.stringify(await this._list(handle, String(args.prefix ?? "")), null, 2);
+        return JSON.stringify(
+          await this._list(handle, String(args.prefix ?? ""), Boolean(args.recursive)),
+          null,
+          2
+        );
       case "get_object": {
         const content = await this._read(handle, String(args.key));
         return content?.data?.toString() ?? "(empty)";
@@ -2619,8 +2668,8 @@ var XStateConnector = class extends AbstractConnector {
   constructor() {
     super();
     this.tools = {
-      read: (handle, path) => this._read(handle, path),
-      list: (handle, path, options) => this._list(handle, path, options),
+      read: (handle, path2) => this._read(handle, path2),
+      list: (handle, path2, options) => this._list(handle, path2, options),
       search: (handle, query) => this._search(handle, query),
       describeOperations: (handle) => this._describeOperations(handle),
       executeOp: (handle, operation, args) => this._executeOp(handle, operation, args)
@@ -2722,15 +2771,15 @@ var XStateConnector = class extends AbstractConnector {
     this.s(handle).onChange = cb;
   }
   // ── Tool face methods (private, wired in constructor) ─────────────────────
-  async _read(handle, path) {
+  async _read(handle, path2) {
     const snapshot = this.s(handle).actor.getSnapshot();
-    if (path === "" || path === "state") {
+    if (path2 === "" || path2 === "state") {
       return { data: JSON.stringify(snapshot.value), contentType: "application/json" };
     }
-    if (path === "context") {
+    if (path2 === "context") {
       return { data: JSON.stringify(snapshot.context, null, 2), contentType: "application/json" };
     }
-    const value = snapshot.context?.[path];
+    const value = snapshot.context?.[path2];
     if (value === void 0) return null;
     return { data: JSON.stringify(value), contentType: "application/json" };
   }
@@ -2917,17 +2966,17 @@ function createConnector12() {
   return new XStateConnector();
 }
 
-// base-assets/connectors/xstate-store/adapter.ts
+// factory-assets/connectors/xstate-store/adapter.ts
 var XStateStoreConnector = class extends AbstractConnector {
   name = "xstate-store";
   tools;
   constructor() {
     super();
     this.tools = {
-      read: (handle, path) => this._read(handle, path),
-      write: (handle, path, content) => this._write(handle, path, content),
-      delete: (handle, path) => this._delete(handle, path),
-      list: (handle, path, options) => this._list(handle, path, options),
+      read: (handle, path2) => this._read(handle, path2),
+      write: (handle, path2, content) => this._write(handle, path2, content),
+      delete: (handle, path2) => this._delete(handle, path2),
+      list: (handle, path2, options) => this._list(handle, path2, options),
       search: (handle, query, options) => this._search(handle, query, options),
       describeOperations: (handle) => this._describeOperations(handle),
       executeOp: (handle, operation, args) => this._executeOp(handle, operation, args)
@@ -2981,17 +3030,17 @@ var XStateStoreConnector = class extends AbstractConnector {
     handle.state.onChange = cb;
   }
   // ── Tool face methods (private, wired in constructor) ─────────────────────
-  async _read(handle, path) {
+  async _read(handle, path2) {
     const ctx = this.context(handle);
-    if (path === "*") {
+    if (path2 === "*") {
       if (Object.keys(ctx).length === 0) return null;
       return { data: JSON.stringify(ctx, null, 2), contentType: "application/json" };
     }
-    const value = ctx[path];
+    const value = ctx[path2];
     if (value === void 0) return null;
     return { data: JSON.stringify(value), contentType: "application/json" };
   }
-  async _write(handle, path, content) {
+  async _write(handle, path2, content) {
     const data = typeof content.data === "string" ? content.data : content.data.toString("utf-8");
     let value;
     try {
@@ -2999,21 +3048,22 @@ var XStateStoreConnector = class extends AbstractConnector {
     } catch {
       value = data;
     }
-    this.storeState(handle).store.send({ type: "set", key: path, value });
-    this._recordHistory(handle, "set", { key: path, value });
+    this.storeState(handle).store.send({ type: "set", key: path2, value });
+    this._recordHistory(handle, "set", { key: path2, value });
   }
-  async _delete(handle, path) {
+  async _delete(handle, path2) {
     const ctx = this.context(handle);
-    if (!(path in ctx)) return false;
-    this.storeState(handle).store.send({ type: "delete", key: path });
-    this._recordHistory(handle, "delete", { key: path });
+    if (!(path2 in ctx)) return false;
+    this.storeState(handle).store.send({ type: "delete", key: path2 });
+    this._recordHistory(handle, "delete", { key: path2 });
     return true;
   }
   async _list(handle, _path, options) {
     const ctx = this.context(handle);
     let keys = Object.keys(ctx);
     if (options?.glob) {
-      const regex = new RegExp(`^${options.glob.replace(/\*/g, ".*")}$`);
+      const escaped = options.glob.replace(/[.+?^${}()|[\]\\]/g, "\\$&");
+      const regex = new RegExp(`^${escaped.replace(/\*/g, ".*")}$`);
       keys = keys.filter((k) => regex.test(k));
     }
     if (options?.limit) keys = keys.slice(0, options.limit);
@@ -3183,7 +3233,7 @@ function createConnector13() {
   return new XStateStoreConnector();
 }
 
-// base-assets/connectors/gmail/adapter.ts
+// factory-assets/connectors/gmail/adapter.ts
 var GmailConnector = class extends AbstractConnector {
   name = "gmail";
   tools;
@@ -3390,15 +3440,15 @@ function createConnector14() {
   return new GmailConnector();
 }
 
-// base-assets/connectors/mattermost/adapter.ts
+// factory-assets/connectors/mattermost/adapter.ts
 var MattermostConnector = class extends AbstractConnector {
   name = "mattermost";
   tools;
   constructor() {
     super();
     this.tools = {
-      read: (handle, path) => this._read(handle, path),
-      write: (handle, path, content) => this._write(handle, path, content),
+      read: (handle, path2) => this._read(handle, path2),
+      write: (handle, path2, content) => this._write(handle, path2, content),
       describeOperations: (handle) => this._describeOperations(handle),
       executeOp: (handle, operation, args) => this._executeOp(handle, operation, args),
       describeSkill: (handle, declaration) => this._describeSkill(handle, declaration)
@@ -3470,22 +3520,23 @@ var MattermostConnector = class extends AbstractConnector {
     handle.status = "disconnected";
   }
   // ── Tool face methods (private, wired in constructor) ─────────────────────
-  async _read(handle, path) {
+  async _read(handle, path2) {
     const state = handle.state;
     try {
-      const post = await this._apiGet(state.url, state.token, `/api/v4/posts/${path}`);
+      const post = await this._apiGet(state.url, state.token, `/api/v4/posts/${path2}`);
+      this._assertChannelAccess(String(post.channel_id ?? ""), state.channelFilter);
       return { data: JSON.stringify(post, null, 2), contentType: "application/json" };
     } catch {
       return null;
     }
   }
-  async _write(handle, path, content) {
+  async _write(handle, path2, content) {
     if (handle.access === "read-only")
       throw new Error("MattermostConnector: write denied \u2014 read-only");
     const state = handle.state;
     const message = typeof content === "string" ? content : String(content.data ?? "");
-    await this._apiPut(state.url, state.token, `/api/v4/posts/${path}`, { id: path, message });
-    this.emitChange?.({ path, action: "edit", source: "operation" });
+    await this._apiPut(state.url, state.token, `/api/v4/posts/${path2}`, { id: path2, message });
+    this.emitChange?.({ path: path2, action: "edit", source: "operation" });
   }
   _describeSkill(handle, declaration) {
     const state = handle.state;
@@ -3652,12 +3703,20 @@ var MattermostConnector = class extends AbstractConnector {
           2
         );
       }
-      case "get_thread":
+      case "get_thread": {
+        const postId = String(args.post_id);
+        const post = await this._apiGet(
+          state.url,
+          state.token,
+          `/api/v4/posts/${postId}`
+        );
+        this._assertChannelAccess(String(post.channel_id ?? ""), state.channelFilter);
         return JSON.stringify(
-          await this._apiGet(state.url, state.token, `/api/v4/posts/${args.post_id}/thread`),
+          await this._apiGet(state.url, state.token, `/api/v4/posts/${postId}/thread`),
           null,
           2
         );
+      }
       case "search_posts": {
         const body = { terms: String(args.terms), is_or_search: false };
         if (args.team_id) body.team_id = String(args.team_id);
@@ -3735,31 +3794,31 @@ var MattermostConnector = class extends AbstractConnector {
       return typeof id === "string" && filter.has(id);
     });
   }
-  async _apiGet(baseUrl, token, path) {
-    const res = await fetch(baseUrl + path, { headers: { Authorization: `Bearer ${token}` } });
+  async _apiGet(baseUrl, token, path2) {
+    const res = await fetch(baseUrl + path2, { headers: { Authorization: `Bearer ${token}` } });
     if (!res.ok) {
       const body = await res.text();
-      this.log.warn("REST error", { method: "GET", endpoint: path, status: res.status });
-      throw new Error(`Mattermost GET ${path}: ${res.status} ${body}`);
+      this.log.warn("REST error", { method: "GET", endpoint: path2, status: res.status });
+      throw new Error(`Mattermost GET ${path2}: ${res.status} ${body}`);
     }
     return res.json();
   }
-  async _apiPost(baseUrl, token, path, body) {
-    const res = await fetch(baseUrl + path, {
+  async _apiPost(baseUrl, token, path2, body) {
+    const res = await fetch(baseUrl + path2, {
       method: "POST",
       headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
       body: JSON.stringify(body)
     });
-    if (!res.ok) throw new Error(`Mattermost POST ${path}: ${res.status} ${await res.text()}`);
+    if (!res.ok) throw new Error(`Mattermost POST ${path2}: ${res.status} ${await res.text()}`);
     return res.json();
   }
-  async _apiPut(baseUrl, token, path, body) {
-    const res = await fetch(baseUrl + path, {
+  async _apiPut(baseUrl, token, path2, body) {
+    const res = await fetch(baseUrl + path2, {
       method: "PUT",
       headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
       body: JSON.stringify(body)
     });
-    if (!res.ok) throw new Error(`Mattermost PUT ${path}: ${res.status} ${await res.text()}`);
+    if (!res.ok) throw new Error(`Mattermost PUT ${path2}: ${res.status} ${await res.text()}`);
     return res.json();
   }
 };
@@ -3767,7 +3826,7 @@ function createConnector15() {
   return new MattermostConnector();
 }
 
-// base-assets/connectors/devserver/adapter.ts
+// factory-assets/connectors/devserver/adapter.ts
 function isPidAlive(pid) {
   try {
     process.kill(pid, 0);
@@ -4446,7 +4505,7 @@ function createConnector17() {
   return new StaticServerConnector();
 }
 
-// base-assets/connectors/tunnel/adapter.ts
+// factory-assets/connectors/tunnel/adapter.ts
 var TunnelConnector = class extends AbstractConnector {
   name = "tunnel";
   tools;
@@ -4646,10 +4705,14 @@ async function spawnCloudflaredTunnel(port) {
           return;
         }
       }
+      proc.kill();
       reject(new Error("cloudflared: failed to parse public URL"));
     };
     readLoop().catch(reject);
-    setTimeout(() => reject(new Error("cloudflared: timed out")), 3e4);
+    setTimeout(() => {
+      proc.kill();
+      reject(new Error("cloudflared: timed out"));
+    }, 3e4);
   });
 }
 async function spawnNgrokTunnel(port) {
@@ -5009,6 +5072,157 @@ var ConnectorStartupError = class extends Error {
     this.failedReadWrite = failedReadWrite;
   }
 };
+function isFleetManaged(connectorId) {
+  const raw = process.env.SKAILE_FLEET_MANAGED_MOUNTS ?? "";
+  if (raw.length === 0) return false;
+  return raw.split(",").map((segment) => segment.trim()).filter((segment) => segment.length > 0).includes(connectorId);
+}
+async function ensureFleetMounted(dir, log, options) {
+  const timeoutMs = options?.timeoutMs ?? 3e3;
+  const pollIntervalMs = options?.pollIntervalMs ?? 100;
+  const deadline = Date.now() + timeoutMs;
+  let lastErr = null;
+  while (Date.now() < deadline) {
+    try {
+      const st = await stat(dir);
+      if (!st.isDirectory()) {
+        throw new Error(`fleet mountpoint ${dir} is not a directory`);
+      }
+      await readdir(dir);
+      log.info("fleet bind mount verified", { dir });
+      return;
+    } catch (err) {
+      lastErr = err;
+      await new Promise((resolve5) => setTimeout(resolve5, pollIntervalMs));
+    }
+  }
+  throw new Error(
+    `fleet mount ${dir} not ready after ${timeoutMs}ms \u2014 check SKAILE_FLEET_MANAGED_MOUNTS env var and host bind: ${lastErr instanceof Error ? lastErr.message : String(lastErr)}`
+  );
+}
+var NOT_READY_SENTINEL = ".skaile-workspace-not-ready";
+var SENTINEL_BODY = [
+  "This workspace is backed by a remote mount that is not live yet.",
+  "It is mounted read-only on purpose: writing here would create a phantom",
+  "workspace that diverges from the remote once the mount comes up.",
+  "Wait for the mount to finish syncing (watch connector_status) before writing.",
+  ""
+].join("\n");
+var defaultRunner = (cmd, args) => new Promise((resolve5, reject) => {
+  const proc = spawn(cmd, args, { stdio: "ignore" });
+  proc.once("error", reject);
+  proc.once("close", (code, signal) => {
+    if (code === 0) resolve5();
+    else reject(new Error(`${cmd} ${args.join(" ")} exited ${code ?? `signal ${signal}`}`));
+  });
+});
+var RoMountPlaceholderBarrier = class {
+  run;
+  modes = /* @__PURE__ */ new Map();
+  constructor(opts) {
+    this.run = opts?.run ?? defaultRunner;
+  }
+  async establish(target, log) {
+    if (this.modes.has(target)) return;
+    await mkdir(target, { recursive: true });
+    let tmpfsMounted = false;
+    try {
+      await this.run("mount", [
+        "-t",
+        "tmpfs",
+        "-o",
+        "mode=0755,size=1m",
+        "skaile-not-ready",
+        target
+      ]);
+      tmpfsMounted = true;
+      await writeFile(path.join(target, NOT_READY_SENTINEL), SENTINEL_BODY);
+      await this.run("mount", ["-o", "remount,ro", target]);
+      this.modes.set(target, "mount");
+      log?.info("deferred mount barrier established (read-only tmpfs)", { target });
+    } catch (err) {
+      if (tmpfsMounted) await this.run("umount", [target]).catch(() => {
+      });
+      await this.chmodFallback(target, err, log);
+    }
+  }
+  async onMountLive(target, log) {
+    const mode = this.modes.get(target);
+    if (mode === "mount") {
+      log?.debug("deferred mount live; placeholder shadowed", { target });
+      return;
+    }
+    if (mode === "chmod" || mode === "unprotected") {
+      if (mode === "chmod") await chmod(target, 493).catch(() => {
+      });
+      await rm(path.join(target, NOT_READY_SENTINEL), { force: true }).catch(() => {
+      });
+      log?.debug("deferred mount live; degraded barrier lifted", { target, mode });
+    }
+  }
+  async remove(target, log) {
+    const mode = this.modes.get(target);
+    if (!mode) return;
+    this.modes.delete(target);
+    if (mode === "mount") {
+      let unmounted = false;
+      try {
+        await this.run("umount", [target]);
+        unmounted = true;
+      } catch {
+        await this.run("umount", ["-l", target]).then(
+          () => {
+            unmounted = true;
+          },
+          () => {
+          }
+        );
+      }
+      if (unmounted) {
+        log?.debug("deferred mount barrier removed (tmpfs unmounted)", { target });
+      } else {
+        log?.error(
+          "deferred mount barrier: umount and umount -l both failed \u2014 tmpfs may be leaked",
+          void 0,
+          { target }
+        );
+      }
+      return;
+    }
+    if (mode === "chmod") await chmod(target, 493).catch(() => {
+    });
+    await rm(path.join(target, NOT_READY_SENTINEL), { force: true }).catch(() => {
+    });
+    log?.debug(
+      mode === "chmod" ? "deferred mount barrier removed (chmod restored)" : "deferred mount barrier removed (was never enforced \u2014 target stayed writable)",
+      { target }
+    );
+  }
+  async chmodFallback(target, cause, log) {
+    await writeFile(path.join(target, NOT_READY_SENTINEL), SENTINEL_BODY).catch(() => {
+    });
+    const chmodOk = await chmod(target, 365).then(
+      () => true,
+      () => false
+    );
+    this.modes.set(target, chmodOk ? "chmod" : "unprotected");
+    const detail = { target, error: cause instanceof Error ? cause.message : String(cause) };
+    if (chmodOk) {
+      log?.error(
+        "deferred mount read-only barrier degraded to chmod (mount unavailable) \u2014 a write by the owning uid could bypass it",
+        void 0,
+        detail
+      );
+    } else {
+      log?.error(
+        "deferred mount read-only barrier FAILED (mount and chmod both unavailable) \u2014 target is WRITABLE",
+        void 0,
+        detail
+      );
+    }
+  }
+};
+var defaultMountPlaceholderBarrier = new RoMountPlaceholderBarrier();
 
 // connectors/src/connector-manager.ts
 var KNOWN_PREFIXES = ["env:", "forge:", "op:", "kp:", "oauth:"];
@@ -5111,6 +5325,7 @@ var ConnectorManager = class {
     this.catalogEntries = opts.catalogEntries ?? [];
     this.tokenMediator = opts.tokenMediator;
     this.preMintedSecrets = opts.preMintedSecrets;
+    this.placeholderBarrier = opts.placeholderBarrier ?? defaultMountPlaceholderBarrier;
     const secrets = opts.secrets;
     if (secrets && typeof secrets === "object" && "prepareRef" in secrets) {
       this.chain = secrets;
@@ -5131,6 +5346,7 @@ var ConnectorManager = class {
   catalogEntries;
   tokenMediator;
   preMintedSecrets;
+  placeholderBarrier;
   mgrLog;
   /** Set once `disconnectAll()` starts, so in-flight deferred mounts bail. */
   disposed = false;
@@ -5337,7 +5553,7 @@ var ConnectorManager = class {
     }
     if (deferred.length > 0) {
       for (const { decl, connector } of deferred) {
-        this.preRegisterDeferred(decl, connector);
+        await this.preRegisterDeferred(decl, connector);
       }
       const prior = this.deferredConnect;
       this.deferredConnect = (async () => {
@@ -5405,7 +5621,12 @@ var ConnectorManager = class {
         } catch {
         }
       }
-      this.active.set(decl.id, { connector, handle, declaration: decl });
+      this.active.set(decl.id, {
+        connector,
+        handle,
+        declaration: decl,
+        placeholderTarget: previous?.placeholderTarget
+      });
       this.opts.onStatusChange?.({
         type: "connector_status",
         connectorId: decl.id,
@@ -5437,12 +5658,26 @@ var ConnectorManager = class {
   /**
    * Register a provisional entry for a deferred filesystem-face connector so
    * its (deterministic) mount path shows up in `listConnectors()` / the system
-   * prompt before the background mount completes. The empty target dir is
-   * created up front so the agent can `ls` it while it is still syncing.
+   * prompt before the background mount completes.
+   *
+   * Before exposing the target, a read-only barrier is established so the agent
+   * cannot write a phantom workspace into a not-yet-mounted remote. Fleet-managed
+   * mounts are skipped: the host already bound the live share at the target, so a
+   * barrier on top would shadow real content.
    */
-  preRegisterDeferred(decl, connector) {
+  async preRegisterDeferred(decl, connector) {
     const mountTarget = this.resolveMountTarget(decl);
     if (!existsSync(mountTarget)) mkdirSync(mountTarget, { recursive: true });
+    const fleetManaged = isFleetManaged(decl.id);
+    let placeholderTarget;
+    if (!fleetManaged) {
+      try {
+        await this.placeholderBarrier.establish(mountTarget, this.mgrLog);
+        placeholderTarget = mountTarget;
+      } catch (err) {
+        this.mgrLog.error("deferred mount barrier establish failed", err, { id: decl.id });
+      }
+    }
     const handle = {
       id: decl.id,
       driver: connector.name ?? decl.driver,
@@ -5454,7 +5689,7 @@ var ConnectorManager = class {
       // returns cleanly instead of dereferencing null state.
       state: {}
     };
-    this.active.set(decl.id, { connector, handle, declaration: decl });
+    this.active.set(decl.id, { connector, handle, declaration: decl, placeholderTarget });
   }
   /** Drive all deferred mounts concurrently; resolves when every one settles. */
   async connectDeferred(deferred) {
@@ -5473,10 +5708,15 @@ var ConnectorManager = class {
     if (this.disposed) return;
     const result = await this.attemptConnect(decl, connector);
     if (!result.connected) {
-      const entry = this.active.get(decl.id);
-      if (entry && entry.handle.status === "connecting") entry.handle.status = "error";
+      const entry2 = this.active.get(decl.id);
+      if (entry2 && entry2.handle.status === "connecting") entry2.handle.status = "error";
       return;
     }
+    const entry = this.active.get(decl.id);
+    if (entry?.placeholderTarget) {
+      await this.placeholderBarrier.onMountLive(entry.placeholderTarget, this.mgrLog).catch(() => {
+      });
+    }
     if (this.disposed && this.active.has(decl.id)) {
       await this.disconnect(decl.id).catch(() => {
       });
@@ -5509,6 +5749,10 @@ var ConnectorManager = class {
         await entry.connector.disconnect(entry.handle);
       } catch {
       }
+      if (entry.placeholderTarget) {
+        await this.placeholderBarrier.remove(entry.placeholderTarget, this.mgrLog).catch(() => {
+        });
+      }
       this.opts.onStatusChange?.({
         type: "connector_status",
         connectorId: id,
@@ -5523,6 +5767,10 @@ var ConnectorManager = class {
    * Connect a single connector (hot-plug). Resolves fields and allocates
    * mount target if the connector has a filesystem face.
    *
+   * This path connects immediately and does NOT establish the read-only
+   * deferred-mount barrier — bring `deferMount` (rclone-backed) connectors up
+   * through `connectAll({ deferMounts: true })` so the not-ready guarantee holds.
+   *
    * @returns The `ConnectorHandle` for subsequent operations.
    */
   async connect(declaration) {
@@ -5591,6 +5839,10 @@ var ConnectorManager = class {
         try {
           await entry.connector.disconnect(entry.handle);
         } finally {
+          if (entry.placeholderTarget) {
+            await this.placeholderBarrier.remove(entry.placeholderTarget, this.mgrLog).catch(() => {
+            });
+          }
           this.active.delete(id);
           this.opts.onStatusChange?.({
             type: "connector_status",
@@ -5764,7 +6016,7 @@ var ConnectorManager = class {
     }
     return entry.connector.tools;
   }
-  async read(id, path) {
+  async read(id, path2) {
     const entry = this.get(id);
     const tools = this.requireToolFace(id, entry);
     if (!tools.read) {
@@ -5777,10 +6029,10 @@ var ConnectorManager = class {
         "skaile.connector.driver": entry.connector.name,
         "skaile.connector.operation": "read"
       },
-      () => tools.read(entry.handle, path)
+      () => tools.read(entry.handle, path2)
     );
   }
-  async write(id, path, content) {
+  async write(id, path2, content) {
     const entry = this.get(id);
     if (entry.declaration.access === "read-only") {
       throw new Error(`Connector "${id}" is read-only`);
@@ -5796,10 +6048,10 @@ var ConnectorManager = class {
         "skaile.connector.driver": entry.connector.name,
         "skaile.connector.operation": "write"
       },
-      () => tools.write(entry.handle, path, content)
+      () => tools.write(entry.handle, path2, content)
     );
   }
-  async delete(id, path) {
+  async delete(id, path2) {
     const entry = this.get(id);
     if (entry.declaration.access === "read-only") {
       throw new Error(`Connector "${id}" is read-only`);
@@ -5815,10 +6067,10 @@ var ConnectorManager = class {
         "skaile.connector.driver": entry.connector.name,
         "skaile.connector.operation": "delete"
       },
-      () => tools.delete(entry.handle, path)
+      () => tools.delete(entry.handle, path2)
     );
   }
-  async list(id, path, options) {
+  async list(id, path2, options) {
     const entry = this.get(id);
     const tools = this.requireToolFace(id, entry);
     if (!tools.list) {
@@ -5831,7 +6083,7 @@ var ConnectorManager = class {
         "skaile.connector.driver": entry.connector.name,
         "skaile.connector.operation": "list"
       },
-      () => tools.list(entry.handle, path, options)
+      () => tools.list(entry.handle, path2, options)
     );
   }
   async search(id, query, options) {
@@ -5972,9 +6224,9 @@ async function buildSdkConnectorTools(manager, options) {
       connector_id: z4.string().describe("Connector ID"),
       path: z4.string().describe("Path within the connector")
     },
-    handler: async ({ connector_id, path }) => {
+    handler: async ({ connector_id, path: path2 }) => {
       try {
-        const content = await manager.read(connector_id, path);
+        const content = await manager.read(connector_id, path2);
         return {
           content: [{ type: "text", text: content?.data?.toString() ?? "(empty)" }]
         };
@@ -5996,11 +6248,11 @@ async function buildSdkConnectorTools(manager, options) {
     },
     handler: async ({
       connector_id,
-      path,
+      path: path2,
       content
     }) => {
       try {
-        await manager.write(connector_id, path, { data: content });
+        await manager.write(connector_id, path2, { data: content });
         return { content: [{ type: "text", text: "Written." }] };
       } catch (err) {
         return {
@@ -6020,11 +6272,11 @@ async function buildSdkConnectorTools(manager, options) {
     },
     handler: async ({
       connector_id,
-      path,
+      path: path2,
       recursive
     }) => {
       try {
-        const entries = await manager.list(connector_id, path, { recursive });
+        const entries = await manager.list(connector_id, path2, { recursive });
         return { content: [{ type: "text", text: JSON.stringify(entries, null, 2) }] };
       } catch (err) {
         return {
@@ -6060,9 +6312,9 @@ async function buildSdkConnectorTools(manager, options) {
       connector_id: z4.string().describe("Connector ID"),
       path: z4.string().describe("Path to delete")
     },
-    handler: async ({ connector_id, path }) => {
+    handler: async ({ connector_id, path: path2 }) => {
       try {
-        const ok = await manager.delete(connector_id, path);
+        const ok = await manager.delete(connector_id, path2);
         return { content: [{ type: "text", text: ok ? "Deleted." : "Not found." }] };
       } catch (err) {
         return {
@@ -6124,9 +6376,24 @@ function buildConnectorPromptSection(manager, options) {
       "| Mount | Driver | Path | Access |",
       "|---|---|---|---|"
     ];
+    let anyUnavailable = false;
     for (const c of fsConnectors) {
       const mountPath = c.mountPath ?? "(unmounted)";
-      lines.push(`| ${c.id} | ${c.driver} | \`${mountPath}/\` | ${c.access} |`);
+      if (c.status === "connected") {
+        lines.push(`| ${c.id} | ${c.driver} | \`${mountPath}/\` | ${c.access} |`);
+      } else {
+        anyUnavailable = true;
+        const state = c.status === "error" ? "failed" : "syncing";
+        lines.push(
+          `| ${c.id} | ${c.driver} | \`${mountPath}/\` | unavailable (${state}) \u2014 read-only, do not write |`
+        );
+      }
+    }
+    if (anyUnavailable) {
+      lines.push("");
+      lines.push(
+        "> **Unavailable mounts are read-only at the filesystem layer.** A mount marked `unavailable (syncing / failed)` is not live yet \u2014 its directory is mounted read-only, so writes fail. Do not create files there: the contents are not the real workspace, and anything you write would be a phantom that diverges from the remote once it mounts. Wait for it to become writable (watch the connector status)."
+      );
     }
     const fsConnectorIds = new Set(fsConnectors.map((c) => c.id));
     const gitConnectors = manager.listGitConnectors().filter((g) => fsConnectorIds.has(g.id));
@@ -6307,13 +6574,19 @@ line=$(grep -F " $TAG" "$CRED_FILE" 2>/dev/null | tail -n 1)
 
 # Strip the trailing ' <TAG>' from the URL.
 url=\${line% *}
-# Extract user:pass between scheme:// and @host.
+# Extract user:pass between scheme:// and @host. The token (pass) was
+# percent-encoded at write time (buildCredentialLine), so any literal '@' in it
+# stays encoded here -- the rightmost '@' is unambiguously the host delimiter.
 # scheme://user:pass@host  -> user:pass
 userinfo=\${url#*://}
 userinfo=\${userinfo%@*}
 user=\${userinfo%%:*}
 pass=\${userinfo#*:}
 
+# Percent-decode the token (encodeURIComponent inverse). '%XX' -> byte; no '+'
+# handling needed since encodeURIComponent emits '%20' for spaces.
+pass=$(printf '%b' "$(printf '%s' "$pass" | sed 's/%/\\\\x/g')")
+
 # git wants line-oriented key=value pairs followed by a blank line.
 printf 'username=%s\\n' "$user"
 printf 'password=%s\\n' "$pass"
@@ -6337,19 +6610,19 @@ var ManagedGitconfigCollisionError = class extends Error {
 var blockStart = (mountId) => `# skaile-mount: ${mountId}`;
 var blockEnd = (mountId) => `# skaile-mount: ${mountId} (end)`;
 var credentialTag = (mountId) => `# skaile-mount: ${mountId}`;
-function readFileOrEmpty(path) {
+function readFileOrEmpty(path2) {
   try {
-    return readFileSync(path, "utf-8");
+    return readFileSync(path2, "utf-8");
   } catch {
     return "";
   }
 }
-function atomicWrite(path, content, mode) {
-  const dir = dirname(path);
+function atomicWrite(path2, content, mode) {
+  const dir = dirname(path2);
   if (!existsSync(dir)) {
     mkdirSync(dir, { recursive: true, mode: 448 });
   }
-  const tmp = `${path}.tmp.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2)}`;
+  const tmp = `${path2}.tmp.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2)}`;
   const fd = openSync(tmp, "w", mode);
   try {
     writeSync(fd, content);
@@ -6357,7 +6630,7 @@ function atomicWrite(path, content, mode) {
     closeSync(fd);
   }
   chmodSync(tmp, mode);
-  renameSync(tmp, path);
+  renameSync(tmp, path2);
 }
 function parseBlocks(text) {
   const blocks = [];
@@ -6414,15 +6687,16 @@ function buildCredentialLine(urlPrefix, token, mountId) {
   const u = new URL(urlPrefix);
   const host = u.host;
   const scheme = u.protocol.replace(/:$/, "");
-  return `${scheme}://x-access-token:${token}@${host} ${credentialTag(mountId)}`;
+  const encodedToken = encodeURIComponent(token);
+  return `${scheme}://x-access-token:${encodedToken}@${host} ${credentialTag(mountId)}`;
 }
-function readCredentialLines(path) {
-  return readFileOrEmpty(path).split("\n").filter((l) => l.length > 0);
+function readCredentialLines(path2) {
+  return readFileOrEmpty(path2).split("\n").filter((l) => l.length > 0);
 }
-function writeCredentialLines(path, lines) {
+function writeCredentialLines(path2, lines) {
   const content = lines.length > 0 ? `${lines.join("\n")}
 ` : "";
-  atomicWrite(path, content, 416);
+  atomicWrite(path2, content, 416);
 }
 function findExistingBlock(blocks, mountId) {
   return blocks.find((b) => b.mountId === mountId);
@@ -6526,55 +6800,27 @@ function isPackageResolvable(pkg, projectDir) {
 function findMissingPackages(packages, projectDir) {
   return packages.filter((p) => !isPackageResolvable(p, projectDir));
 }
-function isFleetManaged(connectorId) {
-  const raw = process.env.SKAILE_FLEET_MANAGED_MOUNTS ?? "";
-  if (raw.length === 0) return false;
-  return raw.split(",").map((segment) => segment.trim()).filter((segment) => segment.length > 0).includes(connectorId);
-}
-async function ensureFleetMounted(dir, log, options) {
-  const timeoutMs = options?.timeoutMs ?? 3e3;
-  const pollIntervalMs = options?.pollIntervalMs ?? 100;
-  const deadline = Date.now() + timeoutMs;
-  let lastErr = null;
-  while (Date.now() < deadline) {
-    try {
-      const st = await stat(dir);
-      if (!st.isDirectory()) {
-        throw new Error(`fleet mountpoint ${dir} is not a directory`);
-      }
-      await readdir(dir);
-      log.info("fleet bind mount verified", { dir });
-      return;
-    } catch (err) {
-      lastErr = err;
-      await new Promise((resolve5) => setTimeout(resolve5, pollIntervalMs));
-    }
-  }
-  throw new Error(
-    `fleet mount ${dir} not ready after ${timeoutMs}ms \u2014 check SKAILE_FLEET_MANAGED_MOUNTS env var and host bind: ${lastErr instanceof Error ? lastErr.message : String(lastErr)}`
-  );
-}
 var WorktreeRegistryImpl = class {
   entries = /* @__PURE__ */ new Map();
-  register(path, owner) {
-    let owners = this.entries.get(path);
+  register(path2, owner) {
+    let owners = this.entries.get(path2);
     if (!owners) {
       owners = /* @__PURE__ */ new Set();
-      this.entries.set(path, owners);
+      this.entries.set(path2, owners);
     }
     owners.add(owner);
   }
-  deregister(path, owner) {
-    const owners = this.entries.get(path);
+  deregister(path2, owner) {
+    const owners = this.entries.get(path2);
     if (!owners) return;
     owners.delete(owner);
-    if (owners.size === 0) this.entries.delete(path);
+    if (owners.size === 0) this.entries.delete(path2);
   }
-  isInUse(path) {
-    return (this.entries.get(path)?.size ?? 0) > 0;
+  isInUse(path2) {
+    return (this.entries.get(path2)?.size ?? 0) > 0;
   }
-  owners(path) {
-    return [...this.entries.get(path) ?? []];
+  owners(path2) {
+    return [...this.entries.get(path2) ?? []];
   }
 };
 var worktreeRegistry = new WorktreeRegistryImpl();
@@ -6638,7 +6884,7 @@ async function listWorktrees(repoRoot) {
   return trees;
 }
 
-// base-assets/connectors/flow/adapter.ts
+// factory-assets/connectors/flow/adapter.ts
 var now = () => (/* @__PURE__ */ new Date()).toISOString();
 function emptyNode(nodeId) {
   return {
@@ -6703,8 +6949,8 @@ var FlowAdapter = class extends AbstractConnector {
   constructor() {
     super();
     this.tools = {
-      read: (handle, path) => this.read(handle, path),
-      list: (handle, path, options) => this.list(handle, path, options),
+      read: (handle, path2) => this.read(handle, path2),
+      list: (handle, path2, options) => this.list(handle, path2, options),
       search: (handle, query, options) => this.search(handle, query, options),
       describeOperations: (handle) => this.describeOperations(handle),
       executeOp: (handle, operation, args) => this.executeOp(handle, operation, args)
@@ -6748,16 +6994,16 @@ var FlowAdapter = class extends AbstractConnector {
     s.execution = this.recompute(s);
   }
   // ── Base operations (private — wired into tools face in constructor) ──
-  async read(handle, path) {
+  async read(handle, path2) {
     const s = this.s(handle);
-    if (path === "" || path === "state") {
+    if (path2 === "" || path2 === "state") {
       return {
         data: JSON.stringify(s.execution, null, 2),
         contentType: "application/json"
       };
     }
-    if (path.startsWith("node/")) {
-      const nodeId = path.slice(5);
+    if (path2.startsWith("node/")) {
+      const nodeId = path2.slice(5);
       const node = s.flowDef.nodes.find((n) => n.id === nodeId);
       if (!node) return null;
       const exec = s.execution.nodes[nodeId];
@@ -7456,9 +7702,6 @@ var FlowAdapter = class extends AbstractConnector {
       if (existing.status === "not_started" && ns.status === "available") {
         nodes[ns.nodeId] = { ...existing, status: "available" };
       }
-      if (existing.status === "available" && ns.status === "blocked") {
-        nodes[ns.nodeId] = { ...existing, status: "blocked" };
-      }
     }
     let flowStatus = s.execution.status;
     if (flowStatus !== "cancelled") {
@@ -7552,6 +7795,6 @@ function createConnector() {
   return new FlowAdapter();
 }
 
-export { AbstractConnector, BUILTIN_CONNECTOR_CATALOG, ConnectorFieldMissingError, ConnectorManager, ConnectorStartupError, DeployConnector, DevServerConnector, FlowAdapter, GitConnector, GmailConnector, GoogleDriveConnector, LocalConnector, LogBuffer, ManagedGitconfigCollisionError, MattermostConnector, MemoryConnector, MinIOConnector, PostgresConnector, S3Connector, SQLiteConnector, SharePointConnector, StaticServerConnector, TunnelConnector, WebDAVConnector, XStateConnector, XStateStoreConnector, atomicReplaceCredential, buildConnectorPromptSection, buildSdkConnectorTools, createConnector, createConnector10, createConnector11, createConnector12, createConnector13, createConnector14, createConnector15, createConnector16, createConnector17, createConnector18, createConnector19, createConnector2, createConnector3, createConnector4, createConnector5, createConnector6, createConnector7, createConnector8, createConnector9, createWorktree, defaultSpawn, ensureFleetMounted, findGitRoot, findMissingPackages, getConnector, installNpmPackages, isFleetManaged, isPackageResolvable, listConnectors, listWorktrees, parseAuthBlob2 as parseAuthBlob, registerBuiltinConnectors, removeMountBlock, renderCredentialHelperScript, tryGetConnector, worktreeRegistry, writeHelperScript, writeMountBlock };
-//# sourceMappingURL=chunk-HIIARTRZ.js.map
-//# sourceMappingURL=chunk-HIIARTRZ.js.map
+export { AbstractConnector, BUILTIN_CONNECTOR_CATALOG, ConnectorFieldMissingError, ConnectorManager, ConnectorStartupError, DeployConnector, DevServerConnector, FlowAdapter, GitConnector, GmailConnector, GoogleDriveConnector, LocalConnector, LogBuffer, ManagedGitconfigCollisionError, MattermostConnector, MemoryConnector, MinIOConnector, NOT_READY_SENTINEL, PostgresConnector, RoMountPlaceholderBarrier, S3Connector, SQLiteConnector, SharePointConnector, StaticServerConnector, TunnelConnector, WebDAVConnector, XStateConnector, XStateStoreConnector, atomicReplaceCredential, buildConnectorPromptSection, buildSdkConnectorTools, createConnector, createConnector10, createConnector11, createConnector12, createConnector13, createConnector14, createConnector15, createConnector16, createConnector17, createConnector18, createConnector19, createConnector2, createConnector3, createConnector4, createConnector5, createConnector6, createConnector7, createConnector8, createConnector9, createWorktree, defaultMountPlaceholderBarrier, defaultSpawn, ensureFleetMounted, findGitRoot, findMissingPackages, getConnector, installNpmPackages, isFleetManaged, isPackageResolvable, listConnectors, listWorktrees, parseAuthBlob2 as parseAuthBlob, registerBuiltinConnectors, removeMountBlock, renderCredentialHelperScript, tryGetConnector, worktreeRegistry, writeHelperScript, writeMountBlock };
+//# sourceMappingURL=chunk-YDTW4GT6.js.map
+//# sourceMappingURL=chunk-YDTW4GT6.js.map