@skaile/workspaces 0.33.0 → 0.35.0

package/dist/cli/src/asset-feeds.d.ts

@@ -11,7 +11,7 @@
  * - **Remote store** — the configured catalog source when `catalog.url` is
  *   not `local`. Failures are non-fatal — they surface as notes.
  */
-import { type CatalogEntry } from "@skaile/workspaces/core";
+import { type CatalogDomain, type CatalogEntry } from "@skaile/workspaces/core";
 /** One non-fatal note returned to the caller for surfacing in the UI. */
 export interface FeedNote {
     feed: "sources" | "libraries" | "store";
@@ -32,6 +32,13 @@ export interface OriginEntry {
 }
 export interface AssetFeedResult {
     entries: OriginEntry[];
+    /**
+     * Display-only domain metadata, keyed (by the consumer) on `slug`. Populated
+     * from the store's `catalog.listDomains` when the connected catalog source
+     * exposes it; empty otherwise. The manage TUI joins `entry.domainSlug` → a
+     * domain for grouping headers, descriptions, and relation badges.
+     */
+    domains: CatalogDomain[];
     notes: FeedNote[];
 }
 /**

package/dist/cli/src/asset-feeds.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"asset-feeds.d.ts","sourceRoot":"","sources":["../../../cli/src/asset-feeds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,EAAkB,KAAK,YAAY,EAAY,MAAM,yBAAyB,CAAC;AAEtF,yEAAyE;AACzE,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,SAAS,GAAG,WAAW,GAAG,OAAO,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC;AAEzD,iEAAiE;AACjE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,YAAY,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,EAAE,QAAQ,EAAE,CAAC;CACnB;AAuGD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,YAAY,EAAE,CAAA;CAAE,EACpC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,CAAC,CAU1B"}
+{"version":3,"file":"asset-feeds.d.ts","sourceRoot":"","sources":["../../../cli/src/asset-feeds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,YAAY,EAElB,MAAM,yBAAyB,CAAC;AAEjC,yEAAyE;AACzE,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,SAAS,GAAG,WAAW,GAAG,OAAO,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC;AAEzD,iEAAiE;AACjE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,YAAY,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB;;;;;OAKG;IACH,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,KAAK,EAAE,QAAQ,EAAE,CAAC;CACnB;AAoHD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,YAAY,EAAE,CAAA;CAAE,EACpC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,CAAC,CAW1B"}

package/dist/cli/src/commands/manage.d.ts

@@ -4,16 +4,18 @@
  * Tabs: [Assets] [Sources] [Libraries] [Pending] [Sync]
  *
  *   - Assets    — browse and queue install/remove for assets, grouped in a
- *                 `origin → publisher → repo → asset` tree. `origin` is the feed
+ *                 `origin → publisher → domain → asset` tree. `origin` is the feed
  *                 the asset came from (Library / Sources / Store), the outermost
  *                 collapsible band so it's clear where each skill comes from.
+ *                 `domain` is the sidecar `DOMAIN.md` grouping (display-only).
  *   - Sources   — third-party github repos registered via `skaile source add`.
  *   - Libraries — user authoring places registered via `skaile library init`.
  *   - Pending   — staged adds/removes (rich rendering deferred to AF-LIB-TUI-RICH).
  *   - Sync      — bulk sync sources + libraries (deferred to AF-LIB-TUI-RICH).
  *
  * Keys: ↑↓/jk navigate, ←/→ collapse/expand, space/+/- select, a/Enter apply,
- *       1/2/3 filter to one origin · 0 clear, s sync, i info, Tab switch, q/Esc quit
+ *       d domain info, 1/2/3 filter to one origin · 0 clear, s sync, i info,
+ *       Tab switch, q/Esc quit
  *
  * NOTE: rich rendering (status glyphs, behind/ahead counters, in-line sync) for
  * the Sources/Libraries/Pending/Sync tabs is deferred to AF-LIB-TUI-RICH (see
@@ -24,32 +26,38 @@ import { Command } from "commander";
 import type { AssetOrigin } from "../asset-feeds.ts";
 /**
  * A single row in the manage TUI asset list: an origin header, a publisher
- * header, a repo header, or an individual asset entry.
+ * header, a domain header, a domain info line, or an individual asset entry.
  *
- * The tree is `origin → publisher → repo → asset`. `origin` (the feed the asset
- * was gathered from — store / source / library) is the outermost band and is
- * carried on **every** row, because the same `publisher` can appear under more
- * than one origin and must not collapse together. `source` holds the
- * **publisher** namespace (`CatalogEntry.publisher`). `repo` holds the
- * `"<org>/<repo>"` GitHub coordinate. An asset whose entry has no `repo`
- * (a local library with no git remote) hangs directly under its publisher with
- * no intervening repo header.
+ * The tree is `origin → publisher → domain → asset`. `origin` (the feed the
+ * asset was gathered from — store / source / library) is the outermost band and
+ * is carried on **every** row, because the same `publisher` can appear under
+ * more than one origin and must not collapse together. `source` holds the
+ * **publisher** namespace (`CatalogEntry.publisher`). `domainSlug` is the
+ * navigational group from a sidecar `DOMAIN.md` (`""` = the synthetic "no
+ * domain" group). A `repo` (`"<org>/<repo>"`) is no longer a grouping axis —
+ * it rides on the asset row as a dim provenance badge only.
+ *
+ * A `domain-header` is **navigational**: it collapses/expands and toggles its
+ * info region, but never bulk-installs (unlike origin/publisher headers).
  *
  * @docLink cli/commands/manage#make-manage-command
  */
 export interface AssetRow {
-    type: "origin-header" | "publisher-header" | "repo-header" | "asset";
+    type: "origin-header" | "publisher-header" | "domain-header" | "domain-info" | "asset";
     origin?: AssetOrigin;
     source?: string;
+    domainSlug?: string;
     repo?: string;
     entry?: CatalogEntry;
     installed?: boolean;
+    underDomain?: boolean;
+    seq?: number;
 }
 /**
  * Filter the full asset row list to only rows that should be visible given the
- * current collapsed origin / publisher / repo sets and the active origin filter.
- * The tree is flat: `origin → publisher → repo → asset` (repo is an
- * `"<org>/<repo>"` slug, not a nested path), so collapse checks are exact set
+ * current collapsed origin / publisher / domain sets, the per-domain info-expand
+ * set, and the active origin filter. The tree is flat (`origin → publisher →
+ * domain → asset`, domain slugs not nested), so collapse checks are exact set
  * membership — no prefix walking. Collapse keys are origin-namespaced so the
  * same publisher under two origins collapses independently.
  *
@@ -57,20 +65,23 @@ export interface AssetRow {
  *   doesn't match it.
  * - An `origin-header` is otherwise always visible.
  * - A `publisher-header` is hidden when its origin is collapsed.
- * - A `repo-header` is hidden when its origin or its `"origin:publisher"` key
+ * - A `domain-header` is hidden when its origin or its `"origin:publisher"` key
  *   is collapsed.
- * - An asset is hidden when its origin, its publisher, or — when it has a repo —
- *   its `"origin:publisher:<org>/<repo>"` key is collapsed.
+ * - A `domain-info` line follows the same rule as the domain's assets (shown
+ *   when the band is open). The `[d]` toggle changes only how it *renders*
+ *   (truncated ↔ full), not whether it shows.
+ * - An asset under a real domain is hidden when that `"…:dom:<slug>"` key is
+ *   collapsed; a "no domain" asset only depends on its origin + publisher.
  *
  * @param rows - Complete flat list of asset rows.
  * @param collapsedOrigins - Set of origins whose children are hidden.
  * @param collapsedSources - Set of `"origin:publisher"` keys whose children are hidden.
- * @param collapsedRepos - Set of `"origin:publisher:<org>/<repo>"` keys whose assets are hidden.
+ * @param collapsedDomains - Set of `"origin:publisher:dom:<slug>"` keys whose assets are hidden.
  * @param originFilter - When set, only rows of this origin are kept.
  * @returns Filtered array of visible rows.
  * @docLink cli/commands/manage#make-manage-command
  */
-export declare function buildVisibleRows(rows: AssetRow[], collapsedOrigins: Set<AssetOrigin>, collapsedSources: Set<string>, collapsedRepos: Set<string>, originFilter?: AssetOrigin | null): AssetRow[];
+export declare function buildVisibleRows(rows: AssetRow[], collapsedOrigins: Set<AssetOrigin>, collapsedSources: Set<string>, collapsedDomains: Set<string>, originFilter?: AssetOrigin | null): AssetRow[];
 /**
  * Return `kind:name` refs for all asset rows belonging to a specific origin.
  *
@@ -79,11 +90,11 @@ export declare function buildVisibleRows(rows: AssetRow[], collapsedOrigins: Set
 export declare function originAssetRefs(rows: AssetRow[], origin: AssetOrigin): string[];
 /**
  * Return `kind:name` refs for all asset rows belonging to a specific
- * origin + publisher + repo.
+ * origin + publisher + domain slug (`""` = the "no domain" group).
  *
  * @docLink cli/commands/manage#make-manage-command
  */
-export declare function repoAssetRefs(rows: AssetRow[], origin: AssetOrigin, publisher: string, repo: string): string[];
+export declare function domainAssetRefs(rows: AssetRow[], origin: AssetOrigin, publisher: string, slug: string): string[];
 /**
  * Return `kind:name` refs for all asset rows belonging to a specific
  * origin + publisher (across its repos).

package/dist/cli/src/commands/manage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manage.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/manage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAKrD;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,eAAe,GAAG,kBAAkB,GAAG,aAAa,GAAG,OAAO,CAAC;IACrE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAsGD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,QAAQ,EAAE,EAChB,gBAAgB,EAAE,GAAG,CAAC,WAAW,CAAC,EAClC,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,EAC7B,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,EAC3B,YAAY,GAAE,WAAW,GAAG,IAAW,GACtC,QAAQ,EAAE,CAeZ;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,GAAG,MAAM,EAAE,CAE/E;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,QAAQ,EAAE,EAChB,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,MAAM,EAAE,CAEV;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAE/F;AAmgCD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAO3C"}
+{"version":3,"file":"manage.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/manage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,EAGL,KAAK,YAAY,EAElB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAKrD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,eAAe,GAAG,kBAAkB,GAAG,eAAe,GAAG,aAAa,GAAG,OAAO,CAAC;IACvF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA8ID;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,QAAQ,EAAE,EAChB,gBAAgB,EAAE,GAAG,CAAC,WAAW,CAAC,EAClC,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,EAC7B,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,EAC7B,YAAY,GAAE,WAAW,GAAG,IAAW,GACtC,QAAQ,EAAE,CAmBZ;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,GAAG,MAAM,EAAE,CAE/E;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,QAAQ,EAAE,EAChB,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,MAAM,EAAE,CAEV;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAE/F;AA+nCD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAO3C"}

package/dist/connectors/config.js

@@ -1,10 +1,10 @@
-export { LegacyAuthGrammarError, MountTokenMediatorError, createCliSecretProviderChain, createForgeSecretProviderChain, loadConnectorDeclarations, resolveAuth, resolveAuthRef, resolveBackendAuthFor, resolveMountCredential, resolveMountCredentialString } from '../chunk-LRFZNLB2.js';
-import '../chunk-PKPUVQJP.js';
-import '../chunk-RQG5TXIR.js';
-import '../chunk-AZODLVKH.js';
-import '../chunk-H5YXL4KI.js';
-import '../chunk-4AGIEU7V.js';
-import '../chunk-LFDZYCEO.js';
+export { LegacyAuthGrammarError, MountTokenMediatorError, createCliSecretProviderChain, createForgeSecretProviderChain, loadConnectorDeclarations, resolveAuth, resolveAuthRef, resolveBackendAuthFor, resolveMountCredential, resolveMountCredentialString } from '../chunk-52HINMW4.js';
+import '../chunk-2Q6OY3SU.js';
+import '../chunk-5DPQ766L.js';
+import '../chunk-56YT6CWS.js';
+import '../chunk-SAXDHVJZ.js';
+import '../chunk-MAPRKFBD.js';
+import '../chunk-BM7XANVN.js';
 import '../chunk-XGCXFX7X.js';
 import '../chunk-O4JH3KUE.js';
 import '../chunk-K5GBV4SA.js';

package/dist/connectors/index.js

@@ -1,17 +1,17 @@
-export { AbstractConnector, BUILTIN_CONNECTOR_CATALOG, ConnectorFieldMissingError, ConnectorManager, ConnectorStartupError, DEFAULT_REACTIVE_COOLDOWN_MS, FlowAdapter, LogBuffer, ManagedGitconfigCollisionError, NOT_READY_SENTINEL, PROACTIVE_RCLONE_REFRESH_MARGIN_MS, RoMountPlaceholderBarrier, atomicReplaceCredential, buildConnectorPromptSection, buildSdkConnectorTools, createRcloneTokenRefresh, createWorktree, defaultMountPlaceholderBarrier, defaultSpawn, ensureFleetMounted, findGitRoot, findMissingPackages, getConnector, installNpmPackages, isFleetManaged, isPackageResolvable, listConnectors, listWorktrees, registerBuiltinConnectors, removeMountBlock, renderCredentialHelperScript, tryGetConnector, worktreeRegistry, writeHelperScript, writeMountBlock } from '../chunk-362QBS57.js';
+export { AbstractConnector, BUILTIN_CONNECTOR_CATALOG, ConnectorFieldMissingError, ConnectorManager, ConnectorStartupError, DEFAULT_REACTIVE_COOLDOWN_MS, FleetHealthGate, FlowAdapter, LogBuffer, ManagedGitconfigCollisionError, NOT_READY_SENTINEL, PROACTIVE_RCLONE_REFRESH_MARGIN_MS, RoMountPlaceholderBarrier, atomicReplaceCredential, buildConnectorPromptSection, buildSdkConnectorTools, createRcloneTokenRefresh, createWorktree, defaultMountPlaceholderBarrier, defaultSpawn, ensureFleetMounted, findGitRoot, findMissingPackages, getConnector, installNpmPackages, isFleetManaged, isPackageResolvable, listConnectors, listWorktrees, probeFleetHealth, registerBuiltinConnectors, removeMountBlock, renderCredentialHelperScript, tryGetConnector, worktreeRegistry, writeHelperScript, writeMountBlock } from '../chunk-NAMD4AIK.js';
 export { renderGoogleDriveConfig, renderOneDriveConfig, renderWebDAVConfig } from '../chunk-OVRSNIKJ.js';
-export { EnvSecretProvider, ForgeSecretProvider, InMemorySecretProvider, LegacyAuthGrammarError, LockedSecretProvider, MountTokenMediatorError, OAuthRequiredError, PreMintedSecretProvider, SecretProviderChain, createCliSecretProviderChain, createForgeSecretProviderChain, loadConnectorDeclarations, resolveAuth, resolveAuthRef, resolveBackendAuthFor, resolveMountCredential, resolveMountCredentialString } from '../chunk-LRFZNLB2.js';
+export { EnvSecretProvider, ForgeSecretProvider, InMemorySecretProvider, LegacyAuthGrammarError, LockedSecretProvider, MountTokenMediatorError, OAuthRequiredError, PreMintedSecretProvider, SecretProviderChain, createCliSecretProviderChain, createForgeSecretProviderChain, loadConnectorDeclarations, resolveAuth, resolveAuthRef, resolveBackendAuthFor, resolveMountCredential, resolveMountCredentialString } from '../chunk-52HINMW4.js';
 export { PortPool, RcloneProcessManager, createFsWatcher, ensureDirMode } from '../chunk-XT6AZWK3.js';
 import '../chunk-6E6PKKAD.js';
 import '../chunk-X46FY45B.js';
 import '../chunk-DEYYRFQU.js';
 import '../chunk-IFGTRL2I.js';
-import '../chunk-PKPUVQJP.js';
-import '../chunk-RQG5TXIR.js';
-import '../chunk-AZODLVKH.js';
-import '../chunk-H5YXL4KI.js';
-import '../chunk-4AGIEU7V.js';
-import '../chunk-LFDZYCEO.js';
+import '../chunk-2Q6OY3SU.js';
+import '../chunk-5DPQ766L.js';
+import '../chunk-56YT6CWS.js';
+import '../chunk-SAXDHVJZ.js';
+import '../chunk-MAPRKFBD.js';
+import '../chunk-BM7XANVN.js';
 import '../chunk-XGCXFX7X.js';
 import '../chunk-O4JH3KUE.js';
 import '../chunk-K5GBV4SA.js';

package/dist/connectors/src/connector-manager.d.ts

@@ -10,6 +10,8 @@ import type { CatalogEntry } from "@skaile/workspaces/core";
 import type { TelemetryProvider, Trace } from "@skaile/workspaces/telemetry";
 import type { ConnectorStatusEvent } from "@skaile/workspaces/types";
 import type { Connector, ConnectorChangeEvent, ConnectorDeclaration, ConnectorHandle, ConnectorStartupReport, RuntimeSkillDescriptor, TokenMediator } from "./connector-types.js";
+import { FleetHealthGate } from "./fleet-health-gate.js";
+import { type FleetHealthVerdict } from "./fleet-utils.js";
 import { type MountPlaceholderBarrier } from "./mount-placeholder.js";
 import type { PreMintedSecretProvider, SecretProvider, SecretProviderChain } from "./secrets.js";
 import type { ConnectorContent, ConnectorEntry, ListOptions, OperationDescriptor, SearchOptions, SearchResult, SyncOptions, SyncResult, WatchHandle, WatchOptions } from "./shared-types.js";
@@ -27,6 +29,14 @@ interface ActiveConnector {
      * when the connector is disconnected.
      */
     placeholderTarget?: string;
+    /**
+     * Set for a fleet-managed deferred mount. Unlike `placeholderTarget` (a static
+     * boot-time barrier), this gate dynamically establishes/removes the barrier as
+     * the fleet mount's health flips — closing the window where a wedged fleet
+     * mount stays writable. Removed on teardown after the connector is gone.
+     */
+    fleetHealthTarget?: string;
+    fleetHealthGate?: FleetHealthGate;
 }
 interface LifecycleResult {
     id: string;
@@ -39,6 +49,14 @@ export interface SyncConnectorResult {
     ok: boolean;
     error?: string;
 }
+/**
+ * Resolve the local fleet-health probe interval from `SKAILE_FLEET_HEALTH_POLL_MS`.
+ * A finite non-negative number is honoured (`0` disables the probe). Anything
+ * unparseable (`Number("disabled") → NaN`) or negative falls back to the default,
+ * so an invalid value never produces a `NaN` interval — `setInterval(fn, NaN)` is
+ * treated as `setInterval(fn, 0)` and would saturate the event loop.
+ */
+export declare function parseFleetHealthPollMs(raw?: string | undefined): number;
 /**
  * Options for the unified `ConnectorManager`. Pass as the second argument to the constructor.
  *
@@ -84,6 +102,14 @@ export interface ConnectorManagerOptions {
      * tests inject a hermetic implementation. See `mount-placeholder.ts`.
      */
     placeholderBarrier?: MountPlaceholderBarrier;
+    /**
+     * Local fleet-health poll interval (ms) for the read-only health gate on
+     * fleet-managed mounts. `0` disables the local probe (health is then driven
+     * solely by `reportFleetHealth` / the platform signal). Defaults to the
+     * `SKAILE_FLEET_HEALTH_POLL_MS` env var, else 5000. Tests pass a small value
+     * (or 0 + manual `reportFleetHealth`) to stay hermetic.
+     */
+    fleetHealthPollMs?: number;
 }
 /**
  * `ConnectorManager` — manages the full lifecycle of all connectors declared
@@ -112,6 +138,10 @@ export declare class ConnectorManager {
     private readonly disposeController;
     /** Tracks the background task driving deferred (rclone-backed) mounts. */
     private deferredConnect?;
+    /** Periodic local fleet-health probe; runs only while a fleet gate is active. */
+    private fleetHealthTimer?;
+    /** Local fleet-health poll interval (ms). 0 disables the local probe. */
+    private readonly fleetHealthPollMs;
     /**
      * @param workspaceDir - Absolute (or relative) working directory. Filesystem-face
      *   connectors mount into `<workspaceDir>/.mounts/<id>/` by default.
@@ -197,11 +227,34 @@ export declare class ConnectorManager {
      * prompt before the background mount completes.
      *
      * Before exposing the target, a read-only barrier is established so the agent
-     * cannot write a phantom workspace into a not-yet-mounted remote. Fleet-managed
-     * mounts are skipped: the host already bound the live share at the target, so a
-     * barrier on top would shadow real content.
+     * cannot write a phantom workspace into a not-yet-mounted remote.
+     *
+     * Fleet-managed mounts skip the *static* boot-time barrier (the host already
+     * bound the live share at the target — a static barrier would shadow real
+     * content) but instead get a *dynamic* health gate: while the host fleet rclone
+     * is healthy the target stays writable exactly as before; when it wedges, the
+     * gate establishes the same read-only barrier until the mount recovers.
      */
     private preRegisterDeferred;
+    /**
+     * Start the periodic local fleet-health probe if it is not already running and
+     * the poll interval is enabled. Each tick `stat`+`readdir`s every fleet target
+     * and feeds the verdict to its gate (hysteresis lives in the gate). The probe
+     * only catches directly-detectable failures (EIO / dead bind); silent
+     * degradation is covered by the platform signal via `reportFleetHealth`.
+     */
+    private ensureFleetHealthPoll;
+    private runFleetHealthProbe;
+    /**
+     * Feed an externally-derived fleet-health verdict for a connector into its gate.
+     *
+     * This is the consume side of the platform fleet-health signal: the host fleet
+     * health poll knows `core/stats.errors` and can detect a *silently-empty-but-
+     * writable* degraded mount that the local probe cannot. The runner watches the
+     * `<workspace>/.skaile/fleet-health/<connectorId>` flag and forwards its verdict
+     * here. Unknown / non-fleet ids are ignored.
+     */
+    reportFleetHealth(connectorId: string, verdict: FleetHealthVerdict): Promise<void>;
     /** Drive all deferred mounts concurrently; resolves when every one settles. */
     private connectDeferred;
     /**

package/dist/connectors/src/connector-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connector-manager.d.ts","sourceRoot":"","sources":["../../../connectors/src/connector-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAG5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,KAAK,EAAE,oBAAoB,EAAU,MAAM,0BAA0B,CAAC;AAG7E,OAAO,KAAK,EAEV,SAAS,EACT,oBAAoB,EACpB,oBAAoB,EAEpB,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,aAAa,EAEd,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,uBAAuB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACjG,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,UAAU,EACV,WAAW,EACX,YAAY,EACb,MAAM,mBAAmB,CAAC;AAI3B;;GAEG;AACH,UAAU,eAAe;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;IACxB,WAAW,EAAE,oBAAoB,CAAC;IAClC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,UAAU,eAAe;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAmID;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,OAAO,CAAC,EAAE,mBAAmB,GAAG,cAAc,CAAC;IAE/C;;OAEG;IACH,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC;IAEhC;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAE3C;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAEvD,4DAA4D;IAC5D,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAE9B,0DAA0D;IAC1D,KAAK,CAAC,EAAE,KAAK,CAAC;IAEd;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,uBAAuB,CAAC;CAC9C;AAID;;;;;;;;;GASG;AACH,qBAAa,gBAAgB;IA0BzB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAzBvB,OAAO,CAAC,MAAM,CAAsC;IACpD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAsB;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAgB;IAC/C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAA0B;IAC5D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA0B;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAS;IACzB,iFAAiF;IACjF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAyB;IAC3D,0EAA0E;IAC1E,OAAO,CAAC,eAAe,CAAC,CAAgB;IAExC;;;;;OAKG;gBAED,YAAY,EAAE,MAAM,EACH,IAAI,GAAE,uBAA4B;IAyBrD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB;IA8C5B;;OAEG;YACW,gBAAgB;IA2C9B;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAa1B;;;OAGG;YACW,mBAAmB;IA2BjC;;OAEG;YACW,QAAQ;IA8BtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,UAAU,CACd,YAAY,EAAE,oBAAoB,EAAE,EACpC,OAAO,CAAC,EAAE;QAAE,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,GAClE,OAAO,CAAC,sBAAsB,CAAC;IAuFlC;;;;OAIG;YACW,cAAc;IAiF5B;;;;;;;;;OASG;YACW,mBAAmB;IAkCjC,+EAA+E;YACjE,eAAe;IAQ7B;;;;;;OAMG;YACW,kBAAkB;IA0BhC;;;;OAIG;IACG,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC;IAIhD,gGAAgG;IAC1F,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAyCpC;;;;;;;;;OASG;IACG,OAAO,CAAC,WAAW,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IA+C1E;;;;OAIG;IACG,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAwC3C;;;OAGG;IACH,QAAQ,CACN,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,KAAK,IAAI,EACpE,OAAO,CAAC,EAAE,YAAY,GACrB,IAAI;IA4CP,gCAAgC;IAC1B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAe3B,YAAY,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAI1C,QAAQ,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAI9B,gBAAgB;IAkC9B;;;;OAIG;IACH,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe;IAMhC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAIxB;;OAEG;IACH,cAAc,IAAI,KAAK,CAAC;QACtB,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,WAAW,GAAG,YAAY,CAAC;QACnC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;KACnC,CAAC;IAYF;;;OAGG;IACH,iBAAiB,IAAI,KAAK,CAAC;QACzB,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,iBAAiB,EAAE,OAAO,CAAC;QAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IAkBF;;;;OAIG;IACG,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAQlE;;;OAGG;IACG,OAAO,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAqBpE;;OAEG;IACH,OAAO,CAAC,eAAe;IAOjB,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAiBhE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBzE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAoBlD,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAiBjF,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAmBzF;;;;;OAKG;IACG,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IA4B9F;;;OAGG;IACH,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,mBAAmB,EAAE;IAOhD;;;OAGG;IACH,UAAU,IAAI,sBAAsB,EAAE;IAStC;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,UAAO,GAAG,MAAM;CAUlD"}
+{"version":3,"file":"connector-manager.d.ts","sourceRoot":"","sources":["../../../connectors/src/connector-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAG5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,KAAK,EAAE,oBAAoB,EAAU,MAAM,0BAA0B,CAAC;AAG7E,OAAO,KAAK,EAEV,SAAS,EACT,oBAAoB,EACpB,oBAAoB,EAEpB,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,aAAa,EAEd,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,kBAAkB,EAAoC,MAAM,kBAAkB,CAAC;AAC7F,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,uBAAuB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACjG,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,UAAU,EACV,WAAW,EACX,YAAY,EACb,MAAM,mBAAmB,CAAC;AAI3B;;GAEG;AACH,UAAU,eAAe;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;IACxB,WAAW,EAAE,oBAAoB,CAAC;IAClC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,UAAU,eAAe;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAQD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,MAAM,GAAG,SAAmD,GAChE,MAAM,CAIR;AA+HD;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,OAAO,CAAC,EAAE,mBAAmB,GAAG,cAAc,CAAC;IAE/C;;OAEG;IACH,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC;IAEhC;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAE3C;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAEvD,4DAA4D;IAC5D,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAE9B,0DAA0D;IAC1D,KAAK,CAAC,EAAE,KAAK,CAAC;IAEd;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,uBAAuB,CAAC;IAE7C;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAID;;;;;;;;;GASG;AACH,qBAAa,gBAAgB;IA8BzB,OAAO,CAAC,QAAQ,CAAC,IAAI;IA7BvB,OAAO,CAAC,MAAM,CAAsC;IACpD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAsB;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAgB;IAC/C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAA0B;IAC5D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA0B;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAS;IACzB,iFAAiF;IACjF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAyB;IAC3D,0EAA0E;IAC1E,OAAO,CAAC,eAAe,CAAC,CAAgB;IACxC,iFAAiF;IACjF,OAAO,CAAC,gBAAgB,CAAC,CAAiC;IAC1D,yEAAyE;IACzE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAE3C;;;;;OAKG;gBAED,YAAY,EAAE,MAAM,EACH,IAAI,GAAE,uBAA4B;IA0BrD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB;IA8C5B;;OAEG;YACW,gBAAgB;IA2C9B;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAa1B;;;OAGG;YACW,mBAAmB;IA2BjC;;OAEG;YACW,QAAQ;IA8BtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,UAAU,CACd,YAAY,EAAE,oBAAoB,EAAE,EACpC,OAAO,CAAC,EAAE;QAAE,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,GAClE,OAAO,CAAC,sBAAsB,CAAC;IAuFlC;;;;OAIG;YACW,cAAc;IAoF5B;;;;;;;;;;;;;OAaG;YACW,mBAAmB;IAiDjC;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;YASf,mBAAmB;IAqBjC;;;;;;;;OAQG;IACG,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMxF,+EAA+E;YACjE,eAAe;IAQ7B;;;;;;OAMG;YACW,kBAAkB;IA0BhC;;;;OAIG;IACG,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC;IAIhD,gGAAgG;IAC1F,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IA+CpC;;;;;;;;;OASG;IACG,OAAO,CAAC,WAAW,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IA+C1E;;;;OAIG;IACG,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyC3C;;;OAGG;IACH,QAAQ,CACN,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,KAAK,IAAI,EACpE,OAAO,CAAC,EAAE,YAAY,GACrB,IAAI;IA4CP,gCAAgC;IAC1B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAe3B,YAAY,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAI1C,QAAQ,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAI9B,gBAAgB;IAkC9B;;;;OAIG;IACH,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe;IAMhC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAIxB;;OAEG;IACH,cAAc,IAAI,KAAK,CAAC;QACtB,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,WAAW,GAAG,YAAY,CAAC;QACnC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;KACnC,CAAC;IAYF;;;OAGG;IACH,iBAAiB,IAAI,KAAK,CAAC;QACzB,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,iBAAiB,EAAE,OAAO,CAAC;QAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IAkBF;;;;OAIG;IACG,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAQlE;;;OAGG;IACG,OAAO,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAqBpE;;OAEG;IACH,OAAO,CAAC,eAAe;IAOjB,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAiBhE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBzE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAoBlD,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAiBjF,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAmBzF;;;;;OAKG;IACG,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IA4B9F;;;OAGG;IACH,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,mBAAmB,EAAE;IAOhD;;;OAGG;IACH,UAAU,IAAI,sBAAsB,EAAE;IAStC;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,UAAO,GAAG,MAAM;CAUlD"}

package/dist/connectors/src/fleet-health-gate.d.ts

@@ -0,0 +1,86 @@
+/**
+ * FleetHealthGate — health-aware read-only gating for a single fleet-managed mount.
+ *
+ * Why this exists: a fleet-managed mount is bound live by the host fleet rclone,
+ * so it is excluded from the boot-time no-phantom-workspace barrier (the host
+ * already put real content at the target — a static barrier would shadow it).
+ * That exclusion is only safe while the fleet rclone is healthy. When it wedges —
+ * returning `EIO`, or degrading to an empty-but-writable view — the agent cannot
+ * tell "empty because broken" from "empty workspace" and writes a phantom
+ * workspace that diverges from the remote (the 2026-06-04 incident, except fleet
+ * mounts sit outside the barrier).
+ *
+ * This gate closes that window. It dynamically drives a `MountPlaceholderBarrier`
+ * over the *live* fleet target:
+ *   - gate   = `establish(target)` — read-only tmpfs shadows the bind, blocking
+ *              writes for every uid (the agent runs as uid 1001 and could chmod a
+ *              bit back; a `ro` mount it cannot).
+ *   - ungate = `remove(target)` — unmounts the tmpfs, restoring the live bind.
+ *
+ * Invariants:
+ *   - FAIL-CLOSED: if `establish` throws, the mount is treated as gated. A known-
+ *     unhealthy fleet mount is never left writable.
+ *   - HYSTERESIS: gate trips only after `unhealthyThreshold` consecutive unhealthy
+ *     observations and lifts only after `healthyThreshold` consecutive healthy
+ *     ones, so a single transient stat blip does not flap `ro ↔ rw`.
+ *   - IDEMPOTENT: establish/remove fire only on an actual state change, so steady-
+ *     state polling does no mount work.
+ */
+import type { Logger } from "@skaile/workspaces/types";
+import type { FleetHealthVerdict } from "./fleet-utils.js";
+import type { MountPlaceholderBarrier } from "./mount-placeholder.js";
+export interface FleetHealthGateOptions {
+    /** Consecutive unhealthy observations required to gate (default 2). */
+    unhealthyThreshold?: number;
+    /** Consecutive healthy observations required to ungate (default 2). */
+    healthyThreshold?: number;
+}
+/**
+ * Per-target health gate. Construct one per fleet-managed mount target; feed it
+ * verdicts via `observe()`; tear it down with `dispose()` (removes the gate if
+ * currently established, so teardown leaves nothing un-writable that should not
+ * be — caller controls ordering relative to connector disconnect).
+ */
+export declare class FleetHealthGate {
+    private readonly target;
+    private readonly barrier;
+    private readonly log?;
+    private readonly unhealthyThreshold;
+    private readonly healthyThreshold;
+    /** True while the read-only barrier is established over the target. */
+    private gated;
+    /**
+     * The gate state that the most recently *enqueued* transition will settle on.
+     * Hysteresis is measured against this, not `gated`, so that verdicts arriving
+     * while a (slow, async) establish/remove is still in flight are counted toward
+     * the post-transition state rather than the stale pre-transition one. Without
+     * this, fast healthy verdicts arriving during a slow `establish()` could meet
+     * `healthyThreshold` before the gate finished tripping, ungating it on the
+     * first healthy verdict afterwards and defeating the threshold.
+     */
+    private pendingGated;
+    /** Consecutive same-verdict run length, signed by the *current* run's verdict. */
+    private unhealthyRun;
+    private healthyRun;
+    /** Serialises establish/remove so overlapping observe() calls can't race. */
+    private transition;
+    constructor(target: string, barrier: MountPlaceholderBarrier, log?: Logger | undefined, opts?: FleetHealthGateOptions);
+    /** True while the read-only barrier is established (test/observability hook). */
+    get isGated(): boolean;
+    /**
+     * Feed one health verdict. Applies hysteresis, then establishes or removes the
+     * barrier on a state change. Resolves once the (possibly no-op) transition is
+     * applied. Never throws — a failed establish is treated as gated (fail-closed).
+     */
+    observe(verdict: FleetHealthVerdict): Promise<void>;
+    /**
+     * Tear the gate down. If currently gated, removes the barrier so a leftover
+     * read-only tmpfs is not leaked. Call only after the connector above the target
+     * is disconnected (top-down, no leaked mount).
+     */
+    dispose(): Promise<void>;
+    private enqueue;
+    private gate;
+    private ungate;
+}
+//# sourceMappingURL=fleet-health-gate.d.ts.map

package/dist/connectors/src/fleet-health-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-health-gate.d.ts","sourceRoot":"","sources":["../../../connectors/src/fleet-health-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEtE,MAAM,WAAW,sBAAsB;IACrC,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;GAKG;AACH,qBAAa,eAAe;IAuBxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;IAxBvB,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAE1C,uEAAuE;IACvE,OAAO,CAAC,KAAK,CAAS;IACtB;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY,CAAS;IAC7B,kFAAkF;IAClF,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,UAAU,CAAK;IACvB,6EAA6E;IAC7E,OAAO,CAAC,UAAU,CAAoC;gBAGnC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,uBAAuB,EAChC,GAAG,CAAC,EAAE,MAAM,YAAA,EAC7B,IAAI,CAAC,EAAE,sBAAsB;IAM/B,iFAAiF;IACjF,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;OAIG;IACH,OAAO,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBnD;;;;OAIG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAUxB,OAAO,CAAC,OAAO;YAKD,IAAI;YAwBJ,MAAM;CAkBrB"}

package/dist/connectors/src/fleet-utils.d.ts

@@ -29,4 +29,20 @@ export declare function ensureFleetMounted(dir: string, log: {
     timeoutMs?: number;
     pollIntervalMs?: number;
 }): Promise<void>;
+/** Local health verdict for a fleet mount target. */
+export type FleetHealthVerdict = "healthy" | "error";
+/**
+ * Locally probe a fleet mount target's health without any host signal.
+ *
+ * `stat` + `readdir` directly surface a wedged FUSE bind: `EIO`, `ENOTCONN`
+ * ("transport endpoint not connected" — the host rclone died after bind), or a
+ * non-directory target all read as `"error"`. This catches the directly-
+ * detectable degradation (the Getec / EIO case) entirely in-container.
+ *
+ * It does NOT catch a *silently-empty-but-writable* degraded mount — an empty
+ * `readdir` is indistinguishable from a legitimately empty workspace, so that
+ * case is left to the platform health signal (`reportFleetHealth`). A `"healthy"`
+ * verdict here therefore means only "readable", not "has content".
+ */
+export declare function probeFleetHealth(dir: string): Promise<FleetHealthVerdict>;
 //# sourceMappingURL=fleet-utils.d.ts.map

package/dist/connectors/src/fleet-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fleet-utils.d.ts","sourceRoot":"","sources":["../../../connectors/src/fleet-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAQ3D;AAED;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,EACnD,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GACxD,OAAO,CAAC,IAAI,CAAC,CAwBf"}
+{"version":3,"file":"fleet-utils.d.ts","sourceRoot":"","sources":["../../../connectors/src/fleet-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAQ3D;AAED;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,EACnD,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GACxD,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED,qDAAqD;AACrD,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,CAAC;AAErD;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAS/E"}

package/dist/connectors/src/index.d.ts

@@ -27,7 +27,10 @@ export type { ConnectContext, Connector, ConnectorChangeEvent, ConnectorDeclarat
 export { ConnectorFieldMissingError, ConnectorStartupError } from "./connector-types.js";
 export type { RenderHelperOpts } from "./credential-helper-script.js";
 export { renderCredentialHelperScript } from "./credential-helper-script.js";
-export { ensureFleetMounted, isFleetManaged } from "./fleet-utils.js";
+export type { FleetHealthGateOptions } from "./fleet-health-gate.js";
+export { FleetHealthGate } from "./fleet-health-gate.js";
+export type { FleetHealthVerdict } from "./fleet-utils.js";
+export { ensureFleetMounted, isFleetManaged, probeFleetHealth } from "./fleet-utils.js";
 export { ensureDirMode } from "./fs-utils.js";
 export { LogBuffer } from "./log-buffer.js";
 export type { AtomicReplaceCredentialOptions, RemoveMountBlockOptions, WriteMountBlockOptions, } from "./managed-gitconfig.js";

package/dist/connectors/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../connectors/src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAQH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,YAAY,EACV,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,mDAAmD,CAAC;AAChF,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,4BAA4B,EAC5B,8BAA8B,EAC9B,sBAAsB,EACtB,yBAAyB,EACzB,uBAAuB,EACvB,WAAW,EACX,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC3D,YAAY,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,YAAY,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,yBAAyB,EACzB,YAAY,EACZ,cAAc,EACd,yBAAyB,EACzB,eAAe,GAChB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,cAAc,EACd,SAAS,EACT,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,mBAAmB,EACnB,QAAQ,GACT,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACzF,YAAY,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,YAAY,EACV,8BAA8B,EAC9B,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,uBAAuB,EACvB,8BAA8B,EAC9B,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACrF,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE9F,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,EAC9B,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,YAAY,GAClB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,YAAY,EACV,oBAAoB,EACpB,4BAA4B,EAC5B,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,kCAAkC,GACnC,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,2BAA2B,EAC3B,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,aAAa,EACb,YAAY,EACZ,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../connectors/src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAQH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,YAAY,EACV,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,mDAAmD,CAAC;AAChF,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,4BAA4B,EAC5B,8BAA8B,EAC9B,sBAAsB,EACtB,yBAAyB,EACzB,uBAAuB,EACvB,WAAW,EACX,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC3D,YAAY,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,YAAY,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,yBAAyB,EACzB,YAAY,EACZ,cAAc,EACd,yBAAyB,EACzB,eAAe,GAChB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,cAAc,EACd,SAAS,EACT,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,mBAAmB,EACnB,QAAQ,GACT,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACzF,YAAY,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,YAAY,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,YAAY,EACV,8BAA8B,EAC9B,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,uBAAuB,EACvB,8BAA8B,EAC9B,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACrF,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE9F,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,EAC9B,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,YAAY,GAClB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,YAAY,EACV,oBAAoB,EACpB,4BAA4B,EAC5B,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,kCAAkC,GACnC,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,2BAA2B,EAC3B,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,aAAa,EACb,YAAY,EACZ,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC"}

package/dist/connectors/src/mount-placeholder.d.ts

@@ -45,6 +45,12 @@ export interface MountPlaceholderBarrier {
 }
 /** Runs an external command, rejecting on non-zero exit or spawn error. */
 export type CommandRunner = (cmd: string, args: string[]) => Promise<void>;
+/**
+ * Creates the target directory. Injectable so tests can simulate a live/broken
+ * FUSE mountpoint (EEXIST / ENOTCONN) deterministically; defaults to a recursive
+ * `mkdir`.
+ */
+export type MkdirFn = (target: string) => Promise<void>;
 /**
  * Default barrier: a read-only tmpfs over the target, with a `chmod 0o555`
  * fallback when mounting is unavailable. The tmpfs root is left mode 0o755
@@ -54,9 +60,11 @@ export type CommandRunner = (cmd: string, args: string[]) => Promise<void>;
  */
 export declare class RoMountPlaceholderBarrier implements MountPlaceholderBarrier {
     private readonly run;
+    private readonly mkdirFn;
     private readonly modes;
     constructor(opts?: {
         run?: CommandRunner;
+        mkdirFn?: MkdirFn;
     });
     establish(target: string, log?: Logger): Promise<void>;
     onMountLive(target: string, log?: Logger): Promise<void>;

package/dist/connectors/src/mount-placeholder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mount-placeholder.d.ts","sourceRoot":"","sources":["../../../connectors/src/mount-placeholder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAEvD,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,gCAAgC,CAAC;AAUhE;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,4EAA4E;IAC5E,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD;;;;OAIG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,iFAAiF;IACjF,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD;AASD,2EAA2E;AAC3E,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAc3E;;;;;;GAMG;AACH,qBAAa,yBAA0B,YAAW,uBAAuB;IACvE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAgB;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;gBAE5C,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,aAAa,CAAA;KAAE;IAIpC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BtD,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBxD,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAyC3C,aAAa;CAwB5B;AAED,oFAAoF;AACpF,eAAO,MAAM,8BAA8B,EAAE,uBACZ,CAAC"}
+{"version":3,"file":"mount-placeholder.d.ts","sourceRoot":"","sources":["../../../connectors/src/mount-placeholder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAEvD,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,gCAAgC,CAAC;AA2BhE;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,4EAA4E;IAC5E,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD;;;;OAIG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,iFAAiF;IACjF,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD;AASD,2EAA2E;AAC3E,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAE3E;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAkBxD;;;;;;GAMG;AACH,qBAAa,yBAA0B,YAAW,uBAAuB;IACvE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAgB;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;gBAE5C,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,aAAa,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE;IAKvD,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqDtD,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBxD,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAyC3C,aAAa;CAwB5B;AAED,oFAAoF;AACpF,eAAO,MAAM,8BAA8B,EAAE,uBACZ,CAAC"}

package/dist/core/index.js

@@ -1,9 +1,9 @@
-export { ALL_PROVIDERS, ManifestYamlEditor, SETTINGS_DEFAULTS, WorkspaceYamlEditor, applyPatch, buildLockFile, computeHash, detectEnvApiKeys, extractForPatch, generatePatch, globalSettingsPath, listPatches, loadSettings, mapLegacyFields, maskApiKey, migrateSettings, portableSpawn, portableSpawnSync, projectSettingsPath, providerEnvKey, readLock, readPatch, readPluginsLockSlice, resolveAllKeys, resolveApiKey, resolveSettings, savePatch, saveSettings, verifyLock, walkForSettings, writeLock, writePluginsLockSlice } from '../chunk-PKPUVQJP.js';
-export { FACTORY_ASSETS_REPO_NAME, factoryAssetRoots, resolveFactoryAssetsRoot, resolveFactoryAssetsRootOrNull, resolvePackagedAssetsDir, resolveRuntimeAssets, resolveWorkspacesPackageRoot } from '../chunk-RQG5TXIR.js';
-export { COMPACTION_DEFAULTS, CanonicalRefConflictError, DEFAULT_RECIPE_ATTR, SK_WORKSPACE_DEFAULT_NAME, SK_WORKSPACE_SUFFIX, buildProvenanceIndex, checkRepoStatus, checkoutPin, cloneRepo, decodeSkaileYaml, encodeSkaileYaml, ensureRepo, findWorkspaceRoot, getGlobalCacheDir, getRepoCommit, linkRepo, listSkWorkspaceConfigs, loadMcpServerDeclarations, loadSkWorkspaceConfig, mergeSkWorkspaceConfigs, normalizeConfig, pullRepo, readLinks, resolveAgentDir, resolveAll, resolveAsset, resolveSkWorkspaceConfig, saveSkWorkspaceConfig, scanRepo, stageMaterializedSkills, unlinkRepo, validateAssetRecipeAttr, validateAssetRecipeFlake, workspaceConfigFilename, writeLinks } from '../chunk-AZODLVKH.js';
-export { SKAILE_MANIFEST_FILENAME, decodeSkaileManifest, encodeSkaileManifest, loadSkPublishManifest, saveSkPublishManifest } from '../chunk-H5YXL4KI.js';
-export { bundleDepRefs, fromAgentMd, fromAgentYaml, fromBundleYaml, fromConnectorMd, fromContractMd, fromFlowYaml, fromMcpServerMd, fromPromptMd, fromSkillMd, parseFrontmatter, parseRequires, scanDirectory, walkDir } from '../chunk-4AGIEU7V.js';
-export { ASSET_KINDS, ASSET_NAME_HINT, INDIVIDUAL_KINDS, assetRefToDep, assetRefToStr, depToStr, entryFromRaw, entryToRaw, isValidAssetName, parseAssetRef, parseDep, repositoryFromRaw, repositoryToRaw } from '../chunk-LFDZYCEO.js';
+export { ALL_PROVIDERS, ManifestYamlEditor, SETTINGS_DEFAULTS, WorkspaceYamlEditor, applyPatch, buildLockFile, computeHash, detectEnvApiKeys, extractForPatch, generatePatch, globalSettingsPath, listPatches, loadSettings, mapLegacyFields, maskApiKey, migrateSettings, portableSpawn, portableSpawnSync, projectSettingsPath, providerEnvKey, readLock, readPatch, readPluginsLockSlice, resolveAllKeys, resolveApiKey, resolveSettings, savePatch, saveSettings, verifyLock, walkForSettings, writeLock, writePluginsLockSlice } from '../chunk-2Q6OY3SU.js';
+export { FACTORY_ASSETS_REPO_NAME, factoryAssetRoots, resolveFactoryAssetsRoot, resolveFactoryAssetsRootOrNull, resolvePackagedAssetsDir, resolveRuntimeAssets, resolveWorkspacesPackageRoot } from '../chunk-5DPQ766L.js';
+export { COMPACTION_DEFAULTS, CanonicalRefConflictError, DEFAULT_RECIPE_ATTR, SK_WORKSPACE_DEFAULT_NAME, SK_WORKSPACE_SUFFIX, buildProvenanceIndex, checkRepoStatus, checkoutPin, cloneRepo, decodeSkaileYaml, encodeSkaileYaml, ensureRepo, findWorkspaceRoot, getGlobalCacheDir, getRepoCommit, linkRepo, listSkWorkspaceConfigs, loadMcpServerDeclarations, loadSkWorkspaceConfig, mergeSkWorkspaceConfigs, normalizeConfig, pullRepo, readLinks, resolveAgentDir, resolveAll, resolveAsset, resolveSkWorkspaceConfig, saveSkWorkspaceConfig, scanRepo, stageMaterializedSkills, unlinkRepo, validateAssetRecipeAttr, validateAssetRecipeFlake, workspaceConfigFilename, writeLinks } from '../chunk-56YT6CWS.js';
+export { SKAILE_MANIFEST_FILENAME, decodeSkaileManifest, encodeSkaileManifest, loadSkPublishManifest, saveSkPublishManifest } from '../chunk-SAXDHVJZ.js';
+export { bundleDepRefs, fromAgentMd, fromAgentYaml, fromBundleYaml, fromConnectorMd, fromContractMd, fromFlowYaml, fromMcpServerMd, fromPromptMd, fromSkillMd, parseFrontmatter, parseRequires, scanDirectory, walkDir } from '../chunk-MAPRKFBD.js';
+export { ASSET_KINDS, ASSET_NAME_HINT, INDIVIDUAL_KINDS, assetRefToDep, assetRefToStr, depToStr, entryFromRaw, entryToRaw, isValidAssetName, parseAssetRef, parseDep, repositoryFromRaw, repositoryToRaw } from '../chunk-BM7XANVN.js';
 export { deployedBase, deployedDir, isDeployed } from '../chunk-XGCXFX7X.js';
 export { DRIVER_TARGETS, SUPPORTED_DRIVER_TARGETS } from '../chunk-O4JH3KUE.js';
 export { DRIVER_DEFAULTS, resolveDriverPaths } from '../chunk-K5GBV4SA.js';

package/dist/core/manifest.js

@@ -1,5 +1,5 @@
-export { bundleDepRefs, fromAgentMd, fromAgentYaml, fromBundleYaml, fromConnectorMd, fromContractMd, fromFlowYaml, fromKnowledgeYaml, fromMcpServerMd, fromPromptMd, fromSkillMd, parseFrontmatter, parseRequires, scanDirectory, walkDir } from '../chunk-4AGIEU7V.js';
-import '../chunk-LFDZYCEO.js';
+export { bundleDepRefs, fromAgentMd, fromAgentYaml, fromBundleYaml, fromConnectorMd, fromContractMd, fromFlowYaml, fromKnowledgeYaml, fromMcpServerMd, fromPromptMd, fromSkillMd, parseFrontmatter, parseRequires, scanDirectory, walkDir } from '../chunk-MAPRKFBD.js';
+import '../chunk-BM7XANVN.js';
 import '../chunk-NSBPE2FW.js';
 //# sourceMappingURL=manifest.js.map
 //# sourceMappingURL=manifest.js.map

package/dist/core/models.js

@@ -1,4 +1,4 @@
-export { ASSET_KINDS, ASSET_NAME_HINT, INDIVIDUAL_KINDS, assetRefToDep, assetRefToStr, depToStr, entryFromRaw, entryToRaw, isValidAssetName, parseAssetRef, parseDep, repositoryFromRaw, repositoryToRaw } from '../chunk-LFDZYCEO.js';
+export { ASSET_KINDS, ASSET_NAME_HINT, INDIVIDUAL_KINDS, assetRefToDep, assetRefToStr, depToStr, entryFromRaw, entryToRaw, isValidAssetName, parseAssetRef, parseDep, repositoryFromRaw, repositoryToRaw } from '../chunk-BM7XANVN.js';
 import '../chunk-NSBPE2FW.js';
 //# sourceMappingURL=models.js.map
 //# sourceMappingURL=models.js.map

package/dist/core/publish-manifest.js

@@ -1,5 +1,5 @@
-export { SKAILE_MANIFEST_FILENAME, decodeSkaileManifest, encodeSkaileManifest, loadSkPublishManifest, saveSkPublishManifest } from '../chunk-H5YXL4KI.js';
-import '../chunk-LFDZYCEO.js';
+export { SKAILE_MANIFEST_FILENAME, decodeSkaileManifest, encodeSkaileManifest, loadSkPublishManifest, saveSkPublishManifest } from '../chunk-SAXDHVJZ.js';
+import '../chunk-BM7XANVN.js';
 import '../chunk-NSBPE2FW.js';
 //# sourceMappingURL=publish-manifest.js.map
 //# sourceMappingURL=publish-manifest.js.map

package/dist/core/runtime-assets.js

@@ -1,8 +1,8 @@
-export { FACTORY_ASSETS_REPO_NAME, factoryAssetRoots, resolveFactoryAssetsRoot, resolveFactoryAssetsRootOrNull, resolvePackagedAssetsDir, resolveRuntimeAssets, resolveWorkspacesPackageRoot } from '../chunk-RQG5TXIR.js';
-import '../chunk-AZODLVKH.js';
-import '../chunk-H5YXL4KI.js';
-import '../chunk-4AGIEU7V.js';
-import '../chunk-LFDZYCEO.js';
+export { FACTORY_ASSETS_REPO_NAME, factoryAssetRoots, resolveFactoryAssetsRoot, resolveFactoryAssetsRootOrNull, resolvePackagedAssetsDir, resolveRuntimeAssets, resolveWorkspacesPackageRoot } from '../chunk-5DPQ766L.js';
+import '../chunk-56YT6CWS.js';
+import '../chunk-SAXDHVJZ.js';
+import '../chunk-MAPRKFBD.js';
+import '../chunk-BM7XANVN.js';
 import '../chunk-NSBPE2FW.js';
 //# sourceMappingURL=runtime-assets.js.map
 //# sourceMappingURL=runtime-assets.js.map

package/dist/core/src/index.d.ts

@@ -21,7 +21,7 @@ export * from "./logging/index.js";
 export type { FrontmatterResult } from "./manifest.js";
 export { bundleDepRefs, fromAgentMd, fromAgentYaml, fromBundleYaml, fromConnectorMd, fromContractMd, fromFlowYaml, fromMcpServerMd, fromPromptMd, fromSkillMd, parseFrontmatter, parseRequires, scanDirectory, walkDir, } from "./manifest.js";
 export { ManifestYamlEditor } from "./manifest-yaml-editor.js";
-export type { AgentManifest, AssetKind, AssetRef, CatalogEntry, Dependency, LockEntry, LockFile, LockFileEntry, LockPluginEntry, LockSourceEntry, Repository, } from "./models.js";
+export type { AgentManifest, AssetKind, AssetRef, CatalogDomain, CatalogEntry, Dependency, DomainRelation, LockEntry, LockFile, LockFileEntry, LockPluginEntry, LockSourceEntry, Repository, } from "./models.js";
 export { ASSET_KINDS, ASSET_NAME_HINT, assetRefToDep, assetRefToStr, depToStr, entryFromRaw, entryToRaw, INDIVIDUAL_KINDS, isValidAssetName, parseAssetRef, parseDep, repositoryFromRaw, repositoryToRaw, } from "./models.js";
 export { applyPatch, extractForPatch, generatePatch, listPatches, readPatch, savePatch, } from "./patch.js";
 export type { AssetEntry, ManifestDecodeResult, ManifestFileEntry, ManifestProvenance, ManifestSource, SkPublishManifest, } from "./publish-manifest.js";