@skaile/workspaces 0.43.0 → 0.43.1

package/dist/{chunk-F5Q2RMH4.js → chunk-U2XHHLE3.js}

@@ -8,13 +8,13 @@ import { computeStimulus } from './chunk-IFGTRL2I.js';
 import { portableSpawn } from './chunk-KYQNWFJV.js';
 import { createLogger } from './chunk-JB35MVBN.js';
 import { existsSync, mkdirSync, renameSync, writeFileSync, readFileSync, cpSync, statSync, createReadStream, readdirSync, openSync, writeSync, closeSync, chmodSync } from 'fs';
-import path, { join, dirname, resolve, sep } from 'path';
+import path2, { join, dirname, resolve, sep } from 'path';
 import * as zNS from 'zod';
 import { execFile, execSync, spawn } from 'child_process';
 import { createServer } from 'http';
 import mime from 'mime';
 import { promisify } from 'util';
-import { stat, readdir, writeFile, chmod, rm, mkdir } from 'fs/promises';
+import { stat, readdir, writeFile, chmod, rm, mkdir, readFile } from 'fs/promises';
 import { createRequire } from 'module';
 import { pathToFileURL } from 'url';
 
@@ -2260,8 +2260,8 @@ var MattermostConnector = class extends AbstractConnector {
   constructor() {
     super();
     this.tools = {
-      read: (handle, path2) => this._read(handle, path2),
-      write: (handle, path2, content) => this._write(handle, path2, content),
+      read: (handle, path3) => this._read(handle, path3),
+      write: (handle, path3, content) => this._write(handle, path3, content),
       describeOperations: (handle) => this._describeOperations(handle),
       executeOp: (handle, operation, args) => this._executeOp(handle, operation, args),
       describeSkill: (handle, declaration) => this._describeSkill(handle, declaration)
@@ -2333,23 +2333,23 @@ var MattermostConnector = class extends AbstractConnector {
     handle.status = "disconnected";
   }
   // ── Tool face methods (private, wired in constructor) ─────────────────────
-  async _read(handle, path2) {
+  async _read(handle, path3) {
     const state = handle.state;
     try {
-      const post = await this._apiGet(state.url, state.token, `/api/v4/posts/${path2}`);
+      const post = await this._apiGet(state.url, state.token, `/api/v4/posts/${path3}`);
       this._assertChannelAccess(String(post.channel_id ?? ""), state.channelFilter);
       return { data: JSON.stringify(post, null, 2), contentType: "application/json" };
     } catch {
       return null;
     }
   }
-  async _write(handle, path2, content) {
+  async _write(handle, path3, content) {
     if (handle.access === "read-only")
       throw new Error("MattermostConnector: write denied \u2014 read-only");
     const state = handle.state;
     const message = typeof content === "string" ? content : String(content.data ?? "");
-    await this._apiPut(state.url, state.token, `/api/v4/posts/${path2}`, { id: path2, message });
-    this.emitChange?.({ path: path2, action: "edit", source: "operation" });
+    await this._apiPut(state.url, state.token, `/api/v4/posts/${path3}`, { id: path3, message });
+    this.emitChange?.({ path: path3, action: "edit", source: "operation" });
   }
   _describeSkill(handle, declaration) {
     const state = handle.state;
@@ -2607,31 +2607,31 @@ var MattermostConnector = class extends AbstractConnector {
       return typeof id === "string" && filter.has(id);
     });
   }
-  async _apiGet(baseUrl, token, path2) {
-    const res = await fetch(baseUrl + path2, { headers: { Authorization: `Bearer ${token}` } });
+  async _apiGet(baseUrl, token, path3) {
+    const res = await fetch(baseUrl + path3, { headers: { Authorization: `Bearer ${token}` } });
     if (!res.ok) {
       const body = await res.text();
-      this.log.warn("REST error", { method: "GET", endpoint: path2, status: res.status });
-      throw new Error(`Mattermost GET ${path2}: ${res.status} ${body}`);
+      this.log.warn("REST error", { method: "GET", endpoint: path3, status: res.status });
+      throw new Error(`Mattermost GET ${path3}: ${res.status} ${body}`);
     }
     return res.json();
   }
-  async _apiPost(baseUrl, token, path2, body) {
-    const res = await fetch(baseUrl + path2, {
+  async _apiPost(baseUrl, token, path3, body) {
+    const res = await fetch(baseUrl + path3, {
       method: "POST",
       headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
       body: JSON.stringify(body)
     });
-    if (!res.ok) throw new Error(`Mattermost POST ${path2}: ${res.status} ${await res.text()}`);
+    if (!res.ok) throw new Error(`Mattermost POST ${path3}: ${res.status} ${await res.text()}`);
     return res.json();
   }
-  async _apiPut(baseUrl, token, path2, body) {
-    const res = await fetch(baseUrl + path2, {
+  async _apiPut(baseUrl, token, path3, body) {
+    const res = await fetch(baseUrl + path3, {
       method: "PUT",
       headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
       body: JSON.stringify(body)
     });
-    if (!res.ok) throw new Error(`Mattermost PUT ${path2}: ${res.status} ${await res.text()}`);
+    if (!res.ok) throw new Error(`Mattermost PUT ${path3}: ${res.status} ${await res.text()}`);
     return res.json();
   }
 };
@@ -2646,10 +2646,10 @@ var MemoryConnector = class extends AbstractConnector {
   constructor() {
     super();
     this.tools = {
-      read: (handle, path2) => this._read(handle, path2),
-      write: (handle, path2, content) => this._write(handle, path2, content),
-      delete: (handle, path2) => this._delete(handle, path2),
-      list: (handle, path2, options) => this._list(handle, path2, options),
+      read: (handle, path3) => this._read(handle, path3),
+      write: (handle, path3, content) => this._write(handle, path3, content),
+      delete: (handle, path3) => this._delete(handle, path3),
+      list: (handle, path3, options) => this._list(handle, path3, options),
       search: (handle, query, options) => this._search(handle, query, options),
       describeOperations: (handle) => this._describeOperations(handle),
       executeOp: (handle, operation, args) => this._executeOp(handle, operation, args)
@@ -2668,26 +2668,26 @@ var MemoryConnector = class extends AbstractConnector {
   store(handle) {
     return handle.state.store;
   }
-  async _read(handle, path2) {
-    const value = this.store(handle).get(path2);
+  async _read(handle, path3) {
+    const value = this.store(handle).get(path3);
     if (value === void 0) return null;
     return { data: value, contentType: "application/json" };
   }
-  async _write(handle, path2, content) {
-    const isNew = !this.store(handle).has(path2);
+  async _write(handle, path3, content) {
+    const isNew = !this.store(handle).has(path3);
     this.store(handle).set(
-      path2,
+      path3,
       typeof content.data === "string" ? content.data : content.data.toString("utf-8")
     );
-    this.emitChange?.({ path: path2, action: isNew ? "create" : "edit", source: "operation" });
+    this.emitChange?.({ path: path3, action: isNew ? "create" : "edit", source: "operation" });
   }
-  async _delete(handle, path2) {
-    const deleted = this.store(handle).delete(path2);
-    if (deleted) this.emitChange?.({ path: path2, action: "delete", source: "operation" });
+  async _delete(handle, path3) {
+    const deleted = this.store(handle).delete(path3);
+    if (deleted) this.emitChange?.({ path: path3, action: "delete", source: "operation" });
     return deleted;
   }
-  async _list(handle, path2, options) {
-    const prefix = path2 ?? "";
+  async _list(handle, path3, options) {
+    const prefix = path3 ?? "";
     const entries = [];
     for (const key of this.store(handle).keys()) {
       if (prefix && !key.startsWith(prefix)) continue;
@@ -2800,8 +2800,8 @@ var MinIOConnector = class extends AbstractConnector {
   constructor() {
     super();
     this.tools = {
-      list: (handle, path2) => this._list(handle, path2),
-      read: (handle, path2) => this._read(handle, path2),
+      list: (handle, path3) => this._list(handle, path3),
+      read: (handle, path3) => this._read(handle, path3),
       describeOperations: (handle) => this._describeOperations(handle),
       executeOp: (handle, operation, args) => this._executeOp(handle, operation, args),
       describeSkill: (handle, declaration) => this._describeSkill(handle, declaration)
@@ -2979,10 +2979,10 @@ var MinIOConnector = class extends AbstractConnector {
     }
     return ops;
   }
-  async _list(handle, path2, recursive = false) {
+  async _list(handle, path3, recursive = false) {
     const { client, bucket } = handle.state;
     const entries = [];
-    const stream = client.listObjects(bucket, path2 ?? "", recursive);
+    const stream = client.listObjects(bucket, path3 ?? "", recursive);
     return new Promise((resolve5, reject) => {
       stream.on("data", (obj) => {
         entries.push({
@@ -2997,10 +2997,10 @@ var MinIOConnector = class extends AbstractConnector {
       stream.on("error", reject);
     });
   }
-  async _read(handle, path2) {
+  async _read(handle, path3) {
     const { client, bucket } = handle.state;
     const chunks = [];
-    const stream = await client.getObject(bucket, path2);
+    const stream = await client.getObject(bucket, path3);
     return new Promise((resolve5, reject) => {
       stream.on("data", (chunk) => chunks.push(chunk));
       stream.on("end", () => resolve5({ data: Buffer.concat(chunks).toString() }));
@@ -3058,8 +3058,8 @@ var PostgresConnector = class extends AbstractConnector {
   constructor() {
     super();
     this.tools = {
-      read: (handle, path2) => this._read(handle, path2),
-      list: (handle, path2, options) => this._list(handle, path2, options),
+      read: (handle, path3) => this._read(handle, path3),
+      list: (handle, path3, options) => this._list(handle, path3, options),
       search: (handle, query, options) => this._search(handle, query, options),
       describeOperations: (handle) => this._describeOperations(handle),
       executeOp: (handle, operation, args) => this._executeOp(handle, operation, args),
@@ -3147,8 +3147,8 @@ var PostgresConnector = class extends AbstractConnector {
     return handle.state.pool;
   }
   // Base ops map to table/row access via path convention: <table>/<pk>
-  async _read(handle, path2) {
-    const parts = path2.split("/");
+  async _read(handle, path3) {
+    const parts = path3.split("/");
     if (parts.length === 1) {
       const table2 = parts[0];
       const result2 = await this.pool(handle).query(
@@ -3167,8 +3167,8 @@ var PostgresConnector = class extends AbstractConnector {
     if (result.rows.length === 0) return null;
     return { data: JSON.stringify(result.rows[0], null, 2), contentType: "application/json" };
   }
-  async _list(handle, path2, options) {
-    if (!path2) {
+  async _list(handle, path3, options) {
+    if (!path3) {
       const result2 = await this.pool(handle).query(
         `SELECT table_name FROM information_schema.tables
          WHERE table_schema = 'public' ORDER BY table_name`
@@ -3180,12 +3180,12 @@ var PostgresConnector = class extends AbstractConnector {
       }));
     }
     const limit = options?.limit ?? 100;
-    const result = await this.pool(handle).query(`SELECT * FROM "${quoteIdent(path2)}" LIMIT $1`, [
+    const result = await this.pool(handle).query(`SELECT * FROM "${quoteIdent(path3)}" LIMIT $1`, [
       limit
     ]);
     return result.rows.map((row, i) => ({
       name: String(row.id ?? i),
-      path: `${path2}/${row.id ?? i}`,
+      path: `${path3}/${row.id ?? i}`,
       type: "row"
     }));
   }
@@ -3685,8 +3685,8 @@ var SQLiteConnector = class extends AbstractConnector {
   constructor() {
     super();
     this.tools = {
-      read: (handle, path2) => this._read(handle, path2),
-      list: (handle, path2, options) => this._list(handle, path2, options),
+      read: (handle, path3) => this._read(handle, path3),
+      list: (handle, path3, options) => this._list(handle, path3, options),
       search: (handle, query, options) => this._search(handle, query, options),
       describeOperations: (handle) => this._describeOperations(handle),
       executeOp: (handle, operation, args) => this._executeOp(handle, operation, args)
@@ -3770,8 +3770,8 @@ var SQLiteConnector = class extends AbstractConnector {
     const changes = db.getRowsModified();
     return changes;
   }
-  async _read(handle, path2) {
-    const parts = path2.split("/");
+  async _read(handle, path3) {
+    const parts = path3.split("/");
     if (parts.length === 1) {
       const table2 = parts[0];
       const info = this.queryRows(this.db(handle), `PRAGMA table_info("${quoteIdent2(table2)}")`);
@@ -3787,8 +3787,8 @@ var SQLiteConnector = class extends AbstractConnector {
     if (rows.length === 0) return null;
     return { data: JSON.stringify(rows[0], null, 2), contentType: "application/json" };
   }
-  async _list(handle, path2, options) {
-    if (!path2) {
+  async _list(handle, path3, options) {
+    if (!path3) {
       const tables = this.queryRows(
         this.db(handle),
         "SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%' ORDER BY name"
@@ -3802,12 +3802,12 @@ var SQLiteConnector = class extends AbstractConnector {
     const limit = options?.limit ?? 100;
     const rows = this.queryRows(
       this.db(handle),
-      `SELECT rowid, * FROM "${quoteIdent2(path2)}" LIMIT ?`,
+      `SELECT rowid, * FROM "${quoteIdent2(path3)}" LIMIT ?`,
       [limit]
     );
     return rows.map((row) => ({
       name: String(row.rowid ?? row.id ?? "?"),
-      path: `${path2}/${row.rowid ?? row.id ?? "?"}`,
+      path: `${path3}/${row.rowid ?? row.id ?? "?"}`,
       type: "row"
     }));
   }
@@ -4633,8 +4633,8 @@ var XStateConnector = class extends AbstractConnector {
   constructor() {
     super();
     this.tools = {
-      read: (handle, path2) => this._read(handle, path2),
-      list: (handle, path2, options) => this._list(handle, path2, options),
+      read: (handle, path3) => this._read(handle, path3),
+      list: (handle, path3, options) => this._list(handle, path3, options),
       search: (handle, query) => this._search(handle, query),
       describeOperations: (handle) => this._describeOperations(handle),
       executeOp: (handle, operation, args) => this._executeOp(handle, operation, args)
@@ -4736,15 +4736,15 @@ var XStateConnector = class extends AbstractConnector {
     this.s(handle).onChange = cb;
   }
   // ── Tool face methods (private, wired in constructor) ─────────────────────
-  async _read(handle, path2) {
+  async _read(handle, path3) {
     const snapshot = this.s(handle).actor.getSnapshot();
-    if (path2 === "" || path2 === "state") {
+    if (path3 === "" || path3 === "state") {
       return { data: JSON.stringify(snapshot.value), contentType: "application/json" };
     }
-    if (path2 === "context") {
+    if (path3 === "context") {
       return { data: JSON.stringify(snapshot.context, null, 2), contentType: "application/json" };
     }
-    const value = snapshot.context?.[path2];
+    const value = snapshot.context?.[path3];
     if (value === void 0) return null;
     return { data: JSON.stringify(value), contentType: "application/json" };
   }
@@ -4938,10 +4938,10 @@ var XStateStoreConnector = class extends AbstractConnector {
   constructor() {
     super();
     this.tools = {
-      read: (handle, path2) => this._read(handle, path2),
-      write: (handle, path2, content) => this._write(handle, path2, content),
-      delete: (handle, path2) => this._delete(handle, path2),
-      list: (handle, path2, options) => this._list(handle, path2, options),
+      read: (handle, path3) => this._read(handle, path3),
+      write: (handle, path3, content) => this._write(handle, path3, content),
+      delete: (handle, path3) => this._delete(handle, path3),
+      list: (handle, path3, options) => this._list(handle, path3, options),
       search: (handle, query, options) => this._search(handle, query, options),
       describeOperations: (handle) => this._describeOperations(handle),
       executeOp: (handle, operation, args) => this._executeOp(handle, operation, args)
@@ -4995,17 +4995,17 @@ var XStateStoreConnector = class extends AbstractConnector {
     handle.state.onChange = cb;
   }
   // ── Tool face methods (private, wired in constructor) ─────────────────────
-  async _read(handle, path2) {
+  async _read(handle, path3) {
     const ctx = this.context(handle);
-    if (path2 === "*") {
+    if (path3 === "*") {
       if (Object.keys(ctx).length === 0) return null;
       return { data: JSON.stringify(ctx, null, 2), contentType: "application/json" };
     }
-    const value = ctx[path2];
+    const value = ctx[path3];
     if (value === void 0) return null;
     return { data: JSON.stringify(value), contentType: "application/json" };
   }
-  async _write(handle, path2, content) {
+  async _write(handle, path3, content) {
     const data = typeof content.data === "string" ? content.data : content.data.toString("utf-8");
     let value;
     try {
@@ -5013,14 +5013,14 @@ var XStateStoreConnector = class extends AbstractConnector {
     } catch {
       value = data;
     }
-    this.storeState(handle).store.send({ type: "set", key: path2, value });
-    this._recordHistory(handle, "set", { key: path2, value });
+    this.storeState(handle).store.send({ type: "set", key: path3, value });
+    this._recordHistory(handle, "set", { key: path3, value });
   }
-  async _delete(handle, path2) {
+  async _delete(handle, path3) {
     const ctx = this.context(handle);
-    if (!(path2 in ctx)) return false;
-    this.storeState(handle).store.send({ type: "delete", key: path2 });
-    this._recordHistory(handle, "delete", { key: path2 });
+    if (!(path3 in ctx)) return false;
+    this.storeState(handle).store.send({ type: "delete", key: path3 });
+    this._recordHistory(handle, "delete", { key: path3 });
     return true;
   }
   async _list(handle, _path, options) {
@@ -5370,6 +5370,10 @@ var FleetHealthGate = class {
   get currentSurface() {
     return this.surface;
   }
+  /** The mount target this gate guards (recovery-probe lookup). */
+  get mountTarget() {
+    return this.target;
+  }
   /**
    * Feed one health verdict. Applies hysteresis, then drives the barrier toward
    * the target surface on a change. Resolves once the (possibly no-op)
@@ -5486,6 +5490,24 @@ async function probeFleetHealth(dir) {
     return "error";
   }
 }
+async function probeFleetMountTablePresent(dir) {
+  try {
+    const text = await readFile("/proc/self/mounts", "utf8");
+    const resolved = path2.resolve(dir);
+    for (const raw of text.split("\n")) {
+      if (raw.length === 0) continue;
+      const fields = raw.split(/\s+/);
+      const mp = fields[1];
+      const fstype = fields[2];
+      if (!mp || !fstype) continue;
+      if (mp.replace(/\\040/g, " ") !== resolved) continue;
+      if (fstype !== "tmpfs") return true;
+    }
+    return false;
+  } catch {
+    return false;
+  }
+}
 var NOT_READY_SENTINEL = ".skaile-workspace-not-ready";
 var TARGET_ALREADY_PRESENT_CODES = /* @__PURE__ */ new Set(["EEXIST", "ENOTCONN", "EBUSY", "ENOTDIR"]);
 function errnoCode(err) {
@@ -5543,7 +5565,7 @@ var RoMountPlaceholderBarrier = class {
         target
       ]);
       tmpfsMounted = true;
-      await writeFile(path.join(target, NOT_READY_SENTINEL), SENTINEL_BODY);
+      await writeFile(path2.join(target, NOT_READY_SENTINEL), SENTINEL_BODY);
       await this.run("mount", ["-o", "remount,ro", target]);
       this.modes.set(target, "mount");
       log?.info("deferred mount barrier established (read-only tmpfs)", { target });
@@ -5594,7 +5616,7 @@ var RoMountPlaceholderBarrier = class {
     if (mode === "chmod" || mode === "unprotected") {
       if (mode === "chmod") await chmod(target, 493).catch(() => {
       });
-      await rm(path.join(target, NOT_READY_SENTINEL), { force: true }).catch(() => {
+      await rm(path2.join(target, NOT_READY_SENTINEL), { force: true }).catch(() => {
       });
       log?.debug("deferred mount live; degraded barrier lifted", { target, mode });
     }
@@ -5640,6 +5662,9 @@ var RoMountPlaceholderBarrier = class {
       );
     }
   }
+  isOpaque(target) {
+    return this.modes.get(target) === "mount";
+  }
   async remove(target, log) {
     const mode = this.modes.get(target);
     if (!mode) return;
@@ -5671,7 +5696,7 @@ var RoMountPlaceholderBarrier = class {
     }
     if (mode === "chmod") await chmod(target, 493).catch(() => {
     });
-    await rm(path.join(target, NOT_READY_SENTINEL), { force: true }).catch(() => {
+    await rm(path2.join(target, NOT_READY_SENTINEL), { force: true }).catch(() => {
     });
     log?.debug(
       mode === "chmod" ? "deferred mount barrier removed (chmod restored)" : "deferred mount barrier removed (was never enforced \u2014 target stayed writable)",
@@ -5679,7 +5704,7 @@ var RoMountPlaceholderBarrier = class {
     );
   }
   async chmodFallback(target, cause, log) {
-    await writeFile(path.join(target, NOT_READY_SENTINEL), SENTINEL_BODY).catch(() => {
+    await writeFile(path2.join(target, NOT_READY_SENTINEL), SENTINEL_BODY).catch(() => {
     });
     const chmodOk = await chmod(target, 365).then(
       () => true,
@@ -5816,6 +5841,7 @@ var ConnectorManager = class {
     this.preMintedSecrets = opts.preMintedSecrets;
     this.placeholderBarrier = opts.placeholderBarrier ?? defaultMountPlaceholderBarrier;
     this.fleetHealthPollMs = opts.fleetHealthPollMs ?? parseFleetHealthPollMs();
+    this.fleetMountRecoveryProbe = opts.fleetMountRecoveryProbe ?? probeFleetMountTablePresent;
     const secrets = opts.secrets;
     if (secrets && typeof secrets === "object" && "prepareRef" in secrets) {
       this.chain = secrets;
@@ -5850,6 +5876,8 @@ var ConnectorManager = class {
   fleetHealthTimer;
   /** Local fleet-health poll interval (ms). 0 disables the local probe. */
   fleetHealthPollMs;
+  /** Host-mount recovery detector under an opaque placeholder (injectable for tests). */
+  fleetMountRecoveryProbe;
   // ── Private helpers ──────────────────────────────────────────────────────────
   /**
    * Wrap the user-supplied `TokenMediator` so `reason: 'initial'` calls for an
@@ -5972,8 +6000,8 @@ var ConnectorManager = class {
   }
   /** Release every mount target owned by `id` (on disconnect). */
   releaseMountTarget(id) {
-    for (const [path2, owner] of [...this.mountTargets]) {
-      if (owner === id) this.mountTargets.delete(path2);
+    for (const [path3, owner] of [...this.mountTargets]) {
+      if (owner === id) this.mountTargets.delete(path3);
     }
   }
   /**
@@ -6241,10 +6269,11 @@ var ConnectorManager = class {
   }
   /**
    * Start the periodic local fleet-health probe if it is not already running and
-   * the poll interval is enabled. Each tick `stat`+`readdir`s every fleet target
-   * and feeds the verdict to its gate (hysteresis lives in the gate). The probe
-   * only catches directly-detectable failures (EIO / dead bind); silent
-   * degradation is covered by the platform signal via `reportFleetHealth`.
+   * the poll interval is enabled. Each tick probes every fleet target and feeds
+   * the verdict to its gate (hysteresis lives in the gate). The probe catches both
+   * directly-detectable failures (EIO / dead bind) AND host-mount recovery while a
+   * placeholder is up; silent degradation is covered by the platform signal via
+   * `reportFleetHealth`.
    */
   ensureFleetHealthPoll() {
     if (this.fleetHealthTimer || this.fleetHealthPollMs <= 0 || this.disposed) return;
@@ -6260,13 +6289,26 @@ var ConnectorManager = class {
     );
     await Promise.all(
       gates.map(async (e) => {
-        if (e.fleetHealthGate.isGated) return;
-        const verdict = await probeFleetHealth(e.fleetHealthTarget);
+        const verdict = e.fleetHealthGate.isGated ? await this.probeGatedRecovery(e.fleetHealthGate) : await probeFleetHealth(e.fleetHealthTarget);
         await e.fleetHealthGate.observe(verdict).catch(() => {
         });
       })
     );
   }
+  /**
+   * Detect host-mount RECOVERY for an already-gated target so the placeholder lifts
+   * edge-triggered (no restart). Over an opaque mask a stat/readdir reads the 0555
+   * mask and falsely reads healthy, so recovery is detected via the mount table;
+   * non-opaque surfaces hold their current surface until the platform signal lifts.
+   * Rationale: `_devlog/notes/2026-06-17-fleet-gate-edge-triggered-recovery.md`.
+   */
+  async probeGatedRecovery(gate) {
+    const target = gate.mountTarget;
+    if (!(this.placeholderBarrier.isOpaque?.(target) ?? false)) {
+      return gate.currentSurface === "ro" ? "degraded" : "error";
+    }
+    return await this.fleetMountRecoveryProbe(target) ? "healthy" : "error";
+  }
   /**
    * Feed an externally-derived fleet-health verdict for a connector into its gate.
    *
@@ -6651,7 +6693,7 @@ var ConnectorManager = class {
     }
     return entry.connector.tools;
   }
-  async read(id, path2) {
+  async read(id, path3) {
     const entry = this.get(id);
     const tools = this.requireToolFace(id, entry);
     if (!tools.read) {
@@ -6664,10 +6706,10 @@ var ConnectorManager = class {
         "skaile.connector.driver": entry.connector.name,
         "skaile.connector.operation": "read"
       },
-      () => tools.read(entry.handle, path2)
+      () => tools.read(entry.handle, path3)
     );
   }
-  async write(id, path2, content) {
+  async write(id, path3, content) {
     const entry = this.get(id);
     if (entry.declaration.access === "read-only") {
       throw new Error(`Connector "${id}" is read-only`);
@@ -6683,10 +6725,10 @@ var ConnectorManager = class {
         "skaile.connector.driver": entry.connector.name,
         "skaile.connector.operation": "write"
       },
-      () => tools.write(entry.handle, path2, content)
+      () => tools.write(entry.handle, path3, content)
     );
   }
-  async delete(id, path2) {
+  async delete(id, path3) {
     const entry = this.get(id);
     if (entry.declaration.access === "read-only") {
       throw new Error(`Connector "${id}" is read-only`);
@@ -6702,10 +6744,10 @@ var ConnectorManager = class {
         "skaile.connector.driver": entry.connector.name,
         "skaile.connector.operation": "delete"
       },
-      () => tools.delete(entry.handle, path2)
+      () => tools.delete(entry.handle, path3)
     );
   }
-  async list(id, path2, options) {
+  async list(id, path3, options) {
     const entry = this.get(id);
     const tools = this.requireToolFace(id, entry);
     if (!tools.list) {
@@ -6718,7 +6760,7 @@ var ConnectorManager = class {
         "skaile.connector.driver": entry.connector.name,
         "skaile.connector.operation": "list"
       },
-      () => tools.list(entry.handle, path2, options)
+      () => tools.list(entry.handle, path3, options)
     );
   }
   async search(id, query, options) {
@@ -6859,9 +6901,9 @@ async function buildSdkConnectorTools(manager, options) {
       connector_id: z4.string().describe("Connector ID"),
       path: z4.string().describe("Path within the connector")
     },
-    handler: async ({ connector_id, path: path2 }) => {
+    handler: async ({ connector_id, path: path3 }) => {
       try {
-        const content = await manager.read(connector_id, path2);
+        const content = await manager.read(connector_id, path3);
         return {
           content: [{ type: "text", text: content?.data?.toString() ?? "(empty)" }]
         };
@@ -6883,11 +6925,11 @@ async function buildSdkConnectorTools(manager, options) {
     },
     handler: async ({
       connector_id,
-      path: path2,
+      path: path3,
       content
     }) => {
       try {
-        await manager.write(connector_id, path2, { data: content });
+        await manager.write(connector_id, path3, { data: content });
         return { content: [{ type: "text", text: "Written." }] };
       } catch (err) {
         return {
@@ -6907,11 +6949,11 @@ async function buildSdkConnectorTools(manager, options) {
     },
     handler: async ({
       connector_id,
-      path: path2,
+      path: path3,
       recursive
     }) => {
       try {
-        const entries = await manager.list(connector_id, path2, { recursive });
+        const entries = await manager.list(connector_id, path3, { recursive });
         return { content: [{ type: "text", text: JSON.stringify(entries, null, 2) }] };
       } catch (err) {
         return {
@@ -6947,9 +6989,9 @@ async function buildSdkConnectorTools(manager, options) {
       connector_id: z4.string().describe("Connector ID"),
       path: z4.string().describe("Path to delete")
     },
-    handler: async ({ connector_id, path: path2 }) => {
+    handler: async ({ connector_id, path: path3 }) => {
       try {
-        const ok = await manager.delete(connector_id, path2);
+        const ok = await manager.delete(connector_id, path3);
         return { content: [{ type: "text", text: ok ? "Deleted." : "Not found." }] };
       } catch (err) {
         return {
@@ -7265,19 +7307,19 @@ var ManagedGitconfigCollisionError = class extends Error {
 var blockStart = (mountId) => `# skaile-mount: ${mountId}`;
 var blockEnd = (mountId) => `# skaile-mount: ${mountId} (end)`;
 var credentialTag = (mountId) => `# skaile-mount: ${mountId}`;
-function readFileOrEmpty(path2) {
+function readFileOrEmpty(path3) {
   try {
-    return readFileSync(path2, "utf-8");
+    return readFileSync(path3, "utf-8");
   } catch {
     return "";
   }
 }
-function atomicWrite(path2, content, mode) {
-  const dir = dirname(path2);
+function atomicWrite(path3, content, mode) {
+  const dir = dirname(path3);
   if (!existsSync(dir)) {
     mkdirSync(dir, { recursive: true, mode: 448 });
   }
-  const tmp = `${path2}.tmp.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2)}`;
+  const tmp = `${path3}.tmp.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2)}`;
   const fd = openSync(tmp, "w", mode);
   try {
     writeSync(fd, content);
@@ -7285,7 +7327,7 @@ function atomicWrite(path2, content, mode) {
     closeSync(fd);
   }
   chmodSync(tmp, mode);
-  renameSync(tmp, path2);
+  renameSync(tmp, path3);
 }
 function appendForeignLine(blocks, line) {
   const last = blocks[blocks.length - 1];
@@ -7351,13 +7393,13 @@ function buildCredentialLine(urlPrefix, token, mountId) {
   const encodedToken = encodeURIComponent(token);
   return `${scheme}://x-access-token:${encodedToken}@${host} ${credentialTag(mountId)}`;
 }
-function readCredentialLines(path2) {
-  return readFileOrEmpty(path2).split("\n").filter((l) => l.length > 0);
+function readCredentialLines(path3) {
+  return readFileOrEmpty(path3).split("\n").filter((l) => l.length > 0);
 }
-function writeCredentialLines(path2, lines) {
+function writeCredentialLines(path3, lines) {
   const content = lines.length > 0 ? `${lines.join("\n")}
 ` : "";
-  atomicWrite(path2, content, 416);
+  atomicWrite(path3, content, 416);
 }
 function findExistingBlock(blocks, mountId) {
   return blocks.find((b) => b.mountId === mountId);
@@ -7592,25 +7634,25 @@ function createRcloneTokenRefresh(deps) {
 }
 var WorktreeRegistryImpl = class {
   entries = /* @__PURE__ */ new Map();
-  register(path2, owner) {
-    let owners = this.entries.get(path2);
+  register(path3, owner) {
+    let owners = this.entries.get(path3);
     if (!owners) {
       owners = /* @__PURE__ */ new Set();
-      this.entries.set(path2, owners);
+      this.entries.set(path3, owners);
     }
     owners.add(owner);
   }
-  deregister(path2, owner) {
-    const owners = this.entries.get(path2);
+  deregister(path3, owner) {
+    const owners = this.entries.get(path3);
     if (!owners) return;
     owners.delete(owner);
-    if (owners.size === 0) this.entries.delete(path2);
+    if (owners.size === 0) this.entries.delete(path3);
   }
-  isInUse(path2) {
-    return (this.entries.get(path2)?.size ?? 0) > 0;
+  isInUse(path3) {
+    return (this.entries.get(path3)?.size ?? 0) > 0;
   }
-  owners(path2) {
-    return [...this.entries.get(path2) ?? []];
+  owners(path3) {
+    return [...this.entries.get(path3) ?? []];
   }
 };
 var worktreeRegistry = new WorktreeRegistryImpl();
@@ -7739,8 +7781,8 @@ var FlowAdapter = class extends AbstractConnector {
   constructor() {
     super();
     this.tools = {
-      read: (handle, path2) => this.read(handle, path2),
-      list: (handle, path2, options) => this.list(handle, path2, options),
+      read: (handle, path3) => this.read(handle, path3),
+      list: (handle, path3, options) => this.list(handle, path3, options),
       search: (handle, query, options) => this.search(handle, query, options),
       describeOperations: (handle) => this.describeOperations(handle),
       executeOp: (handle, operation, args) => this.executeOp(handle, operation, args)
@@ -7784,16 +7826,16 @@ var FlowAdapter = class extends AbstractConnector {
     s.execution = this.recompute(s);
   }
   // ── Base operations (private — wired into tools face in constructor) ──
-  async read(handle, path2) {
+  async read(handle, path3) {
     const s = this.s(handle);
-    if (path2 === "" || path2 === "state") {
+    if (path3 === "" || path3 === "state") {
       return {
         data: JSON.stringify(s.execution, null, 2),
         contentType: "application/json"
       };
     }
-    if (path2.startsWith("node/")) {
-      const nodeId = path2.slice(5);
+    if (path3.startsWith("node/")) {
+      const nodeId = path3.slice(5);
       const node = s.flowDef.nodes.find((n) => n.id === nodeId);
       if (!node) return null;
       const exec = s.execution.nodes[nodeId];
@@ -8611,5 +8653,5 @@ function createConnector() {
 }
 
 export { AbstractConnector, BUILTIN_CONNECTOR_CATALOG, ConnectorFieldMissingError, ConnectorManager, ConnectorStartupError, DEFAULT_REACTIVE_COOLDOWN_MS, DeployConnector, DevServerConnector, FleetHealthGate, FlowAdapter, GitConnector, GmailConnector, GoogleDriveConnector, LocalConnector, LogBuffer, ManagedGitconfigCollisionError, MattermostConnector, MemoryConnector, MinIOConnector, NOT_READY_SENTINEL, PROACTIVE_RCLONE_REFRESH_MARGIN_MS, PostgresConnector, RoMountPlaceholderBarrier, S3Connector, SQLiteConnector, SharePointConnector, StaticServerConnector, TunnelConnector, WebDAVConnector, XStateConnector, XStateStoreConnector, __test, atomicReplaceCredential, buildConnectorPromptSection, buildSdkConnectorTools, createConnector, createConnector10, createConnector11, createConnector12, createConnector13, createConnector14, createConnector15, createConnector16, createConnector17, createConnector18, createConnector19, createConnector2, createConnector3, createConnector4, createConnector5, createConnector6, createConnector7, createConnector8, createConnector9, createRcloneTokenRefresh, createWorktree, defaultMountPlaceholderBarrier, defaultSpawn, ensureFleetMounted, findGitRoot, findMissingPackages, getConnector, installNpmPackages, isFleetManaged, isPackageResolvable, listConnectors, listWorktrees, probeFleetHealth, registerBuiltinConnectors, removeMountBlock, renderCredentialHelperScript, tryGetConnector, worktreeRegistry, writeHelperScript, writeMountBlock };
-//# sourceMappingURL=chunk-F5Q2RMH4.js.map
-//# sourceMappingURL=chunk-F5Q2RMH4.js.map
+//# sourceMappingURL=chunk-U2XHHLE3.js.map
+//# sourceMappingURL=chunk-U2XHHLE3.js.map