@skaile/workspaces 0.52.0 → 1.0.0

package/dist/factory-assets/connectors/minio.js

@@ -1,21 +1,19 @@
-export { MinIOConnector, createConnector10 as createConnector } from '../../chunk-QLLFCQU5.js';
-import '../../chunk-OVRSNIKJ.js';
-import '../../chunk-VE2UIJ7Y.js';
-import '../../chunk-RAIRWFAN.js';
+export { MinIOConnector, createConnector10 as createConnector } from '../../chunk-WSQ5J7CE.js';
+import '../../chunk-EXNTTJGP.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-SKADPHAM.js';
 import '../../chunk-DEYYRFQU.js';
 import '../../chunk-IFGTRL2I.js';
 import '../../chunk-3KPNDTMR.js';
-import '../../chunk-ZAP2BDHG.js';
 import '../../chunk-W53D5Q52.js';
+import '../../chunk-F3HNW354.js';
+import '../../chunk-K5GBV4SA.js';
+import '../../chunk-ZAP2BDHG.js';
 import '../../chunk-NXC6IEL4.js';
 import '../../chunk-DZCK7GRW.js';
 import '../../chunk-BQCGFPHW.js';
 import '../../chunk-GEEW6SY2.js';
-import '../../chunk-F3HNW354.js';
 import '../../chunk-MENCWIHW.js';
-import '../../chunk-K5GBV4SA.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';
 //# sourceMappingURL=minio.js.map

package/dist/factory-assets/connectors/postgres.js

@@ -1,21 +1,19 @@
-export { PostgresConnector, createConnector11 as createConnector } from '../../chunk-QLLFCQU5.js';
-import '../../chunk-OVRSNIKJ.js';
-import '../../chunk-VE2UIJ7Y.js';
-import '../../chunk-RAIRWFAN.js';
+export { PostgresConnector, createConnector11 as createConnector } from '../../chunk-WSQ5J7CE.js';
+import '../../chunk-EXNTTJGP.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-SKADPHAM.js';
 import '../../chunk-DEYYRFQU.js';
 import '../../chunk-IFGTRL2I.js';
 import '../../chunk-3KPNDTMR.js';
-import '../../chunk-ZAP2BDHG.js';
 import '../../chunk-W53D5Q52.js';
+import '../../chunk-F3HNW354.js';
+import '../../chunk-K5GBV4SA.js';
+import '../../chunk-ZAP2BDHG.js';
 import '../../chunk-NXC6IEL4.js';
 import '../../chunk-DZCK7GRW.js';
 import '../../chunk-BQCGFPHW.js';
 import '../../chunk-GEEW6SY2.js';
-import '../../chunk-F3HNW354.js';
 import '../../chunk-MENCWIHW.js';
-import '../../chunk-K5GBV4SA.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';
 //# sourceMappingURL=postgres.js.map

package/dist/factory-assets/connectors/s3.js

@@ -1,21 +1,19 @@
-export { S3Connector, createConnector12 as createConnector } from '../../chunk-QLLFCQU5.js';
-import '../../chunk-OVRSNIKJ.js';
-import '../../chunk-VE2UIJ7Y.js';
-import '../../chunk-RAIRWFAN.js';
+export { S3Connector, createConnector12 as createConnector } from '../../chunk-WSQ5J7CE.js';
+import '../../chunk-EXNTTJGP.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-SKADPHAM.js';
 import '../../chunk-DEYYRFQU.js';
 import '../../chunk-IFGTRL2I.js';
 import '../../chunk-3KPNDTMR.js';
-import '../../chunk-ZAP2BDHG.js';
 import '../../chunk-W53D5Q52.js';
+import '../../chunk-F3HNW354.js';
+import '../../chunk-K5GBV4SA.js';
+import '../../chunk-ZAP2BDHG.js';
 import '../../chunk-NXC6IEL4.js';
 import '../../chunk-DZCK7GRW.js';
 import '../../chunk-BQCGFPHW.js';
 import '../../chunk-GEEW6SY2.js';
-import '../../chunk-F3HNW354.js';
 import '../../chunk-MENCWIHW.js';
-import '../../chunk-K5GBV4SA.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';
 //# sourceMappingURL=s3.js.map

package/dist/factory-assets/connectors/sharepoint/CONNECTOR.md

@@ -1,181 +1,35 @@
 ---
 name: sharepoint
-description: "SharePoint/OneDrive connector via rclone FUSE."
-version: "0.2.0"
+description: "SharePoint/OneDrive connector for host fleet-managed bind mounts."
+version: "0.3.0"
 entry: ./driver.ts
-fields:
-  - key: auth
-    label: "Bearer token or JSON credential bundle"
-    required: true
-    sensitive: true
-  - key: options.driveId
-    label: "Microsoft Graph drive ID"
-    required: true
-    sensitive: false
-  - key: options.folderPath
-    label: "Path to mount within the drive (e.g. /Shared Documents/project)"
-    required: true
-    sensitive: false
-  - key: options.folderId
-    label: "Graph folder item ID (display only — rclone uses folderPath)"
-    required: false
-    sensitive: false
-  - key: options.basePath
-    label: "Subfolder appended under folderPath"
-    required: false
-    sensitive: false
-  - key: options.cacheMaxSize
-    label: "rclone VFS cache size cap (e.g. '5G'). Default: 5G"
-    required: false
-    sensitive: false
-  - key: options.cacheMaxAge
-    label: "rclone VFS cache age cap (e.g. '168h'). Default: 168h"
-    required: false
-    sensitive: false
-  - key: options.vfsWriteBack
-    label: "rclone VFS write-back delay before upload (e.g. '30s', '1m'). Default: 30s"
-    required: false
-    sensitive: false
-  - key: options.ignoreSizeCheck
-    label: "Skip rclone post-transfer size/checksum verification (SharePoint byte-mutation workaround). Default: false"
-    required: false
-    sensitive: false
+fields: []
 keywords:
   - sharepoint
   - onedrive
   - microsoft
   - graph
   - office365
-  - rclone
+  - fleet
 ---
 
 ## SharePoint Connector
 
-Exposes a SharePoint or OneDrive folder via rclone's FUSE backend. The driver
-delegates the entire data plane (enumeration, download, upload, change
-detection, cache management) to an `rclone mount` subprocess managed by
-`RcloneProcessManager`.
+Exposes a SharePoint or OneDrive folder that has already been mounted by the
+host fleet and bind-mounted into the agent container.
 
-### Configuration
+Package-side SharePoint connectors do not spawn or configure a cloud data plane.
+At connect time the connector id must be listed in `SKAILE_FLEET_MANAGED_MOUNTS`;
+otherwise connect fails with a host fleet-managed mount requirement.
 
 ```yaml
 connectors:
   - id: project-docs
     driver: sharepoint
     access: read-write
-    auth: env:SHAREPOINT_TOKEN
-    mount:
-      source: /Shared Documents/project
-    options:
-      driveId: b!abc123...
-      folderPath: /Shared Documents/project
-      basePath: subfolder/optional
-      cacheMaxSize: 5G
-      cacheMaxAge: 168h
-      vfsWriteBack: 30s
-      ignoreSizeCheck: false   # see "Server-side byte mutation" below
 ```
 
-`vfsWriteBack` controls how long a dirty file sits in the VFS cache before
-rclone starts uploading it (rclone's `--vfs-write-back`). The default was raised
-from rclone's old 5s to **30s** to avoid an active-write race: when the agent
-rewrites a file faster than the write-back delay (e.g. a build script
-regenerating an HTML report every few seconds), a short delay lets an upload
-start mid-write, the source grows during transfer, and rclone aborts with
-`corrupted on transfer: sizes differ` and retries indefinitely. Raise it further
-for workloads that rewrite large files in tight loops.
-
-`folderPath` is required: rclone's onedrive backend addresses content by path,
-not by Graph item ID. Provide the full path within the drive (the platform
-typically derives this from the picker selection).
-
-### Authentication
-
-The `auth` field can be:
-- A plain Bearer token string (rclone has no refresh path; on 401 the next
-  session start re-provisions a fresh token from the platform DB).
-- A JSON object with OAuth refresh support — emitted into the rclone config so
-  rclone can refresh autonomously:
-  ```json
-  {
-    "accessToken": "...",
-    "refreshToken": "...",
-    "expiresAt": 1234567890,
-    "tenantId": "...",
-    "clientId": "...",
-    "clientSecret": "..."
-  }
-  ```
-
-### Implementation: rclone FUSE
-
-- **mount**: Renders an `[skaile-<id>]` rclone config (onedrive backend, drive
-  ID + OAuth token JSON), spawns `rclone mount` with VFS caching, returns once
-  the FUSE mountpoint is confirmed in `/proc/self/mounts`.
-- **VFS cache mode**: `read-only` mounts use `minimal`; `read-write` uses
-  `full` so writes are buffered locally before upload.
-- **Size/checksum verification**: on by default. `options.ignoreSizeCheck:
-  true` appends `--ignore-size --ignore-checksum` — see "Server-side byte
-  mutation" below.
-- **Cache directory**: `/var/cache/skaile/<mountId>` (the parent
-  `/var/cache/skaile` is bind-mounted from the host per session). The cache
-  root is overridable via the `SKAILE_RCLONE_CACHE_BASE` env var.
-- **write-back**: `--vfs-write-back` defaults to 30s (configurable via
-  `options.vfsWriteBack`) so a rapidly-rewritten file settles before rclone
-  uploads it.
-- **sync**: Calls `RcloneProcessManager.flush`, which first waits for the VFS
-  cache dir to go quiescent (no write within a stability window, bounded by a
-  timeout) so close/hibernate doesn't snapshot a half-written file, then POSTs
-  `/vfs/refresh` and waits for the in-use counter to reach zero.
-- **stuck-upload signal**: if the same object fails to upload 3 times in a row,
-  the connector emits an error-level log (`event: sync_status`, `phase: error`)
-  through the `sharepoint+rclone` subkind so a permanently-failing upload — one
-  that would otherwise retry silently every few minutes forever — is surfaced.
-- **unmount**: `RcloneProcessManager.stop` flushes, sends SIGTERM, falls back
-  to SIGKILL + `fusermount3 -u` after a 30s grace.
-- **onHibernate / onSessionClose**: Always flush. Cheap and the right default;
-  no opt-out toggles.
-- **Logs**: rclone subprocess JSON log lines are routed through a child
-  logger with subkind `sharepoint+rclone`, alongside the driver's own
-  `sharepoint` entries — both visible via `skaile session logs --kind mount`.
-
-### Server-side byte mutation (`options.ignoreSizeCheck`)
-
-SharePoint Online normalises some text uploads server-side (observed: `*.html`
-having `LF` rewritten to `CRLF`), so the stored object ends up a different byte
-size — and a different checksum — than the local source. rclone's
-post-transfer verification correctly flags this as `corrupted on transfer:
-sizes differ`, deletes the just-uploaded object ("Removing failed copy"), and
-retries indefinitely. The affected file therefore **never durably lands on the
-remote**, so other sessions sharing the same project never see it. Sibling
-`*.md` / `*.mjs` uploads are unaffected because they aren't normalised.
-
-Setting `options.ignoreSizeCheck: true` appends `--ignore-size
---ignore-checksum` to this mount's `rclone mount` invocation, so rclone accepts
-the upload despite the size/hash drift and the file lands. **This trades
-integrity verification for sync-ability:** a genuinely truncated or corrupted
-upload would no longer be caught for this mount. Leave it `false` unless you
-have confirmed the remote is mutating bytes benignly (e.g. newline
-normalisation) and the alternative is permanently stranded files.
-
-- **Scope:** SharePoint connector only — it is not a global rclone flag and is
-  not exposed by the other rclone-backed connectors.
-- **Off by default:** when unset or `false`, rclone verifies every upload as
-  before.
-
-### Fleet-managed mode (Phase 7B)
-
-When the `SKAILE_FLEET_MANAGED_MOUNTS` env var lists this mount's id, the
-host-side `RcloneFleetService` (in the platform backend) has already
-spawned a shared `rclone mount` process and bind-mounted its FUSE
-mountpoint into the container at the driver's `targetDir`. The driver
-short-circuits its own rclone spawn:
-
-- `mount()` verifies the bind mount is live (`stat` + `readdir` poll up
-  to 3s), then returns a no-op handle with `state.fleetManaged = true`.
-- `unmount()`, `sync()`, `onHibernate()`, `onSessionClose()` all return
-  early — the fleet owns the rclone process and is responsible for
-  flushing and teardown.
-
-The env var is comma-separated; an empty / unset value preserves the
-per-session behaviour described above.
+The host is responsible for authentication, remote configuration, cache
+lifecycle, upload flushing, and health handling. The package driver verifies the
+bind is readable, returns a handle with `mountPath`, and treats sync/hibernate/
+close as no-op success.

package/dist/factory-assets/connectors/sharepoint/driver.d.ts

@@ -1,27 +1,21 @@
 /**
- * SharePointConnector — SharePoint/OneDrive filesystem-face connector backed by rclone FUSE.
+ * SharePointConnector — host fleet-managed SharePoint/OneDrive filesystem connector.
  *
- * The whole data plane (enumeration, download, upload, change detection,
- * cache eviction) is delegated to an `rclone mount` subprocess managed by
- * {@link RcloneProcessManager}. This connector only parses the declaration,
- * renders the rclone config, hands it off, and forwards lifecycle hooks.
+ * Cloud mounts are prepared outside the agent container and exposed through a
+ * bind mount. The package-side driver only verifies the bind and returns a
+ * no-op lifecycle handle.
  */
 import type { ConnectContext, ConnectorDeclaration, ConnectorHandle, FilesystemFace } from "@skaile/workspaces/connectors";
 import { AbstractConnector } from "@skaile/workspaces/connectors";
 /**
- * Filesystem-face connector for SharePoint and OneDrive — delegates the data plane to an
- * `rclone mount` subprocess via `RcloneProcessManager` using the OneDrive backend.
- * Supports OAuth2 access tokens with optional refresh, and fleet-managed mode via
- * `SKAILE_FLEET_MANAGED_MOUNTS`.
+ * Filesystem-face connector for host fleet-managed SharePoint and OneDrive mounts.
  * @docLink packages/factory-assets/concepts#sharepoint-connector
  */
 export declare class SharePointConnector extends AbstractConnector {
     readonly name = "sharepoint";
-    private rclone;
     readonly filesystem: FilesystemFace;
     connect(declaration: ConnectorDeclaration, ctx: ConnectContext): Promise<ConnectorHandle>;
-    disconnect(handle: ConnectorHandle): Promise<void>;
-    private _sync;
+    disconnect(_handle: ConnectorHandle): Promise<void>;
     onHibernate(handle: ConnectorHandle): Promise<string | undefined>;
     onSessionClose(handle: ConnectorHandle): Promise<string | undefined>;
 }

package/dist/factory-assets/connectors/sharepoint/driver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"driver.d.ts","sourceRoot":"","sources":["../../../../factory-assets/connectors/sharepoint/driver.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,cAAc,EAIf,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,iBAAiB,EASlB,MAAM,+BAA+B,CAAC;AAmCvC;;;;;;GAMG;AACH,qBAAa,mBAAoB,SAAQ,iBAAiB;IACxD,QAAQ,CAAC,IAAI,gBAAgB;IAE7B,OAAO,CAAC,MAAM,CAA8B;IAE5C,QAAQ,CAAC,UAAU,EAAE,cAAc,CAKjC;IAEI,OAAO,CAAC,WAAW,EAAE,oBAAoB,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAwJzF,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;YAO1C,KAAK;IAwBJ,WAAW,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAOjE,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAMpF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,mBAAmB,CAErD"}
+{"version":3,"file":"driver.d.ts","sourceRoot":"","sources":["../../../../factory-assets/connectors/sharepoint/driver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,cAAc,EAGf,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,iBAAiB,EAGlB,MAAM,+BAA+B,CAAC;AASvC;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,iBAAiB;IACxD,QAAQ,CAAC,IAAI,gBAAgB;IAE7B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAGjC;IAEI,OAAO,CAAC,WAAW,EAAE,oBAAoB,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAqBzF,UAAU,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAE1C,WAAW,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAKjE,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAIpF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,mBAAmB,CAErD"}

package/dist/factory-assets/connectors/sharepoint.js

@@ -1,21 +1,19 @@
-export { SharePointConnector, createConnector13 as createConnector } from '../../chunk-QLLFCQU5.js';
-import '../../chunk-OVRSNIKJ.js';
-import '../../chunk-VE2UIJ7Y.js';
-import '../../chunk-RAIRWFAN.js';
+export { SharePointConnector, createConnector13 as createConnector } from '../../chunk-WSQ5J7CE.js';
+import '../../chunk-EXNTTJGP.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-SKADPHAM.js';
 import '../../chunk-DEYYRFQU.js';
 import '../../chunk-IFGTRL2I.js';
 import '../../chunk-3KPNDTMR.js';
-import '../../chunk-ZAP2BDHG.js';
 import '../../chunk-W53D5Q52.js';
+import '../../chunk-F3HNW354.js';
+import '../../chunk-K5GBV4SA.js';
+import '../../chunk-ZAP2BDHG.js';
 import '../../chunk-NXC6IEL4.js';
 import '../../chunk-DZCK7GRW.js';
 import '../../chunk-BQCGFPHW.js';
 import '../../chunk-GEEW6SY2.js';
-import '../../chunk-F3HNW354.js';
 import '../../chunk-MENCWIHW.js';
-import '../../chunk-K5GBV4SA.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';
 //# sourceMappingURL=sharepoint.js.map

package/dist/factory-assets/connectors/sqlite.js

@@ -1,21 +1,19 @@
-export { SQLiteConnector, createConnector14 as createConnector } from '../../chunk-QLLFCQU5.js';
-import '../../chunk-OVRSNIKJ.js';
-import '../../chunk-VE2UIJ7Y.js';
-import '../../chunk-RAIRWFAN.js';
+export { SQLiteConnector, createConnector14 as createConnector } from '../../chunk-WSQ5J7CE.js';
+import '../../chunk-EXNTTJGP.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-SKADPHAM.js';
 import '../../chunk-DEYYRFQU.js';
 import '../../chunk-IFGTRL2I.js';
 import '../../chunk-3KPNDTMR.js';
-import '../../chunk-ZAP2BDHG.js';
 import '../../chunk-W53D5Q52.js';
+import '../../chunk-F3HNW354.js';
+import '../../chunk-K5GBV4SA.js';
+import '../../chunk-ZAP2BDHG.js';
 import '../../chunk-NXC6IEL4.js';
 import '../../chunk-DZCK7GRW.js';
 import '../../chunk-BQCGFPHW.js';
 import '../../chunk-GEEW6SY2.js';
-import '../../chunk-F3HNW354.js';
 import '../../chunk-MENCWIHW.js';
-import '../../chunk-K5GBV4SA.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';
 //# sourceMappingURL=sqlite.js.map

package/dist/factory-assets/connectors/static-server.js

@@ -1,21 +1,19 @@
-export { StaticServerConnector, createConnector15 as createConnector } from '../../chunk-QLLFCQU5.js';
-import '../../chunk-OVRSNIKJ.js';
-import '../../chunk-VE2UIJ7Y.js';
-import '../../chunk-RAIRWFAN.js';
+export { StaticServerConnector, createConnector15 as createConnector } from '../../chunk-WSQ5J7CE.js';
+import '../../chunk-EXNTTJGP.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-SKADPHAM.js';
 import '../../chunk-DEYYRFQU.js';
 import '../../chunk-IFGTRL2I.js';
 import '../../chunk-3KPNDTMR.js';
-import '../../chunk-ZAP2BDHG.js';
 import '../../chunk-W53D5Q52.js';
+import '../../chunk-F3HNW354.js';
+import '../../chunk-K5GBV4SA.js';
+import '../../chunk-ZAP2BDHG.js';
 import '../../chunk-NXC6IEL4.js';
 import '../../chunk-DZCK7GRW.js';
 import '../../chunk-BQCGFPHW.js';
 import '../../chunk-GEEW6SY2.js';
-import '../../chunk-F3HNW354.js';
 import '../../chunk-MENCWIHW.js';
-import '../../chunk-K5GBV4SA.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';
 //# sourceMappingURL=static-server.js.map

package/dist/factory-assets/connectors/tunnel.js

@@ -1,21 +1,19 @@
-export { TunnelConnector, createConnector16 as createConnector } from '../../chunk-QLLFCQU5.js';
-import '../../chunk-OVRSNIKJ.js';
-import '../../chunk-VE2UIJ7Y.js';
-import '../../chunk-RAIRWFAN.js';
+export { TunnelConnector, createConnector16 as createConnector } from '../../chunk-WSQ5J7CE.js';
+import '../../chunk-EXNTTJGP.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-SKADPHAM.js';
 import '../../chunk-DEYYRFQU.js';
 import '../../chunk-IFGTRL2I.js';
 import '../../chunk-3KPNDTMR.js';
-import '../../chunk-ZAP2BDHG.js';
 import '../../chunk-W53D5Q52.js';
+import '../../chunk-F3HNW354.js';
+import '../../chunk-K5GBV4SA.js';
+import '../../chunk-ZAP2BDHG.js';
 import '../../chunk-NXC6IEL4.js';
 import '../../chunk-DZCK7GRW.js';
 import '../../chunk-BQCGFPHW.js';
 import '../../chunk-GEEW6SY2.js';
-import '../../chunk-F3HNW354.js';
 import '../../chunk-MENCWIHW.js';
-import '../../chunk-K5GBV4SA.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';
 //# sourceMappingURL=tunnel.js.map

package/dist/factory-assets/connectors/webdav/CONNECTOR.md

@@ -1,139 +1,34 @@
 ---
 name: webdav
-description: "WebDAV server connector via rclone FUSE."
-version: "0.3.0"
+description: "WebDAV connector for host fleet-managed bind mounts."
+version: "0.4.0"
 entry: ./driver.ts
-fields:
-  - key: source
-    label: "WebDAV server URL"
-    required: true
-    sensitive: false
-  - key: auth
-    label: "Credentials (username:password or Bearer token)"
-    required: false
-    sensitive: true
-  - key: options.vendor
-    label: "WebDAV vendor (nextcloud | owncloud | sharepoint | fastmail | other). Default: other"
-    required: false
-    sensitive: false
-  - key: options.basePath
-    label: "Subfolder appended under the WebDAV URL"
-    required: false
-    sensitive: false
-  - key: options.cacheMaxSize
-    label: "rclone VFS cache size cap (e.g. '5G'). Default: 5G"
-    required: false
-    sensitive: false
-  - key: options.cacheMaxAge
-    label: "rclone VFS cache age cap (e.g. '168h'). Default: 168h"
-    required: false
-    sensitive: false
-  - key: options.vfsWriteBack
-    label: "rclone VFS write-back delay before upload (e.g. '30s', '1m'). Default: 30s"
-    required: false
-    sensitive: false
+fields: []
 keywords:
   - webdav
   - nextcloud
   - owncloud
   - fastmail
-  - rclone
+  - fleet
 ---
 
 ## WebDAV Connector
 
-Exposes a WebDAV server directory via rclone's FUSE backend. The driver
-delegates the entire data plane (enumeration, download, upload, change
-detection, cache management) to an `rclone mount` subprocess managed by
-`RcloneProcessManager`.
+Exposes a WebDAV-backed folder that has already been mounted by the host fleet
+and bind-mounted into the agent container.
 
-### Configuration
+Package-side WebDAV connectors do not spawn or configure a cloud data plane. At
+connect time the connector id must be listed in `SKAILE_FLEET_MANAGED_MOUNTS`;
+otherwise connect fails with a host fleet-managed mount requirement.
 
 ```yaml
 connectors:
   - id: shared-docs
     driver: webdav
     access: read-write
-    auth: env:WEBDAV_CREDENTIALS
-    mount:
-      source: https://cloud.example.com/remote.php/dav/files/user
-    options:
-      vendor: nextcloud
-      basePath: Documents/project
-      cacheMaxSize: 5G
-      cacheMaxAge: 168h
-      vfsWriteBack: 30s
 ```
 
-`vfsWriteBack` controls rclone's `--vfs-write-back` — how long a dirty file
-sits before upload. Default raised from 5s to 30s so a rapidly-rewritten file
-settles before transfer instead of aborting with `sizes differ`.
-
-`mount.source` is the WebDAV endpoint URL. `basePath` is an optional subfolder
-appended to that URL when constructing the rclone remote.
-
-### NextCloud / ownCloud
-
-NextCloud and ownCloud expose a standard WebDAV endpoint at
-`https://<host>/remote.php/dav/files/<username>`. Set `vendor: nextcloud`
-(or `owncloud`) so rclone uses the right quirks.
-
-```yaml
-connectors:
-  - id: nextcloud-docs
-    driver: webdav
-    access: read-write
-    auth: env:NEXTCLOUD_CREDENTIALS
-    mount:
-      source: https://nextcloud.example.com/remote.php/dav/files/alice
-    options:
-      vendor: nextcloud
-      basePath: Documents/project
-```
-
-### Authentication
-
-The `auth` field resolves to one of:
-- `username:password` -- Basic/Digest authentication. The first colon
-  separates the two parts; passwords containing colons are preserved.
-- A bare token string -- Bearer token authentication (OAuth WebDAV).
-- Empty / undefined -- anonymous WebDAV (no auth header).
-
-Plaintext passwords are passed through `rclone obscure` before being written
-into the rclone config — rclone's `pass` field is not plaintext.
-
-### Implementation: rclone FUSE
-
-- **mount**: Renders an `[skaile-<id>]` rclone config (webdav backend, URL +
-  vendor + obscured credentials), spawns `rclone mount` with VFS caching,
-  returns once the FUSE mountpoint is confirmed in `/proc/self/mounts`.
-- **VFS cache mode**: `read-only` mounts use `minimal`; `read-write` uses
-  `full` so writes are buffered locally before upload.
-- **Cache directory**: `/var/cache/skaile/<mountId>` (the parent
-  `/var/cache/skaile` is bind-mounted from the host per session).
-- **sync**: Calls `RcloneProcessManager.flush` (POSTs `/vfs/refresh` then waits
-  for the in-use counter to reach zero).
-- **unmount**: `RcloneProcessManager.stop` flushes, sends SIGTERM, falls back
-  to SIGKILL + `fusermount3 -u` after a 30s grace.
-- **onHibernate / onSessionClose**: Always flush. Cheap and the right default;
-  no opt-out toggles.
-- **Logs**: rclone subprocess JSON log lines are routed through a child
-  logger with subkind `webdav+rclone`, alongside the driver's own
-  `webdav` entries — both visible via `skaile session logs --kind mount`.
-
-### Fleet-managed mode (Phase 7B)
-
-When the `SKAILE_FLEET_MANAGED_MOUNTS` env var lists this mount's id, the
-host-side `RcloneFleetService` (in the platform backend) has already
-spawned a shared `rclone mount` process and bind-mounted its FUSE
-mountpoint into the container at the driver's `targetDir`. The driver
-short-circuits its own rclone spawn:
-
-- `mount()` verifies the bind mount is live (`stat` + `readdir` poll up
-  to 3s), then returns a no-op handle with `state.fleetManaged = true`.
-- `unmount()`, `sync()`, `onHibernate()`, `onSessionClose()` all return
-  early — the fleet owns the rclone process and is responsible for
-  flushing and teardown.
-
-The env var is comma-separated; an empty / unset value preserves the
-per-session behaviour described above.
+The host is responsible for authentication, remote configuration, cache
+lifecycle, upload flushing, and health handling. The package driver verifies the
+bind is readable, returns a handle with `mountPath`, and treats sync/hibernate/
+close as no-op success.

package/dist/factory-assets/connectors/webdav/driver.d.ts

@@ -1,30 +1,21 @@
 /**
- * WebDAVConnector -- WebDAV server filesystem-face connector backed by rclone FUSE.
+ * WebDAVConnector — host fleet-managed WebDAV filesystem connector.
  *
- * The whole data plane (enumeration, download, upload, change detection,
- * cache eviction) is delegated to an `rclone mount` subprocess managed by
- * {@link RcloneProcessManager}. This connector only parses the declaration,
- * obscures the password, renders the rclone config, hands it off, and
- * forwards lifecycle hooks.
+ * Cloud mounts are prepared outside the agent container and exposed through a
+ * bind mount. The package-side driver only verifies the bind and returns a
+ * no-op lifecycle handle.
  */
 import type { ConnectContext, ConnectorDeclaration, ConnectorHandle, FilesystemFace } from "@skaile/workspaces/connectors";
 import { AbstractConnector } from "@skaile/workspaces/connectors";
 /**
- * Filesystem-face connector for WebDAV servers (Nextcloud, ownCloud, SharePoint-WebDAV,
- * Fastmail, generic) — delegates the data plane to an `rclone mount` subprocess via
- * `RcloneProcessManager`. Supports fleet-managed mode where the host has pre-mounted
- * the share via `SKAILE_FLEET_MANAGED_MOUNTS`.
+ * Filesystem-face connector for host fleet-managed WebDAV mounts.
  * @docLink packages/factory-assets/concepts#webdav-connector
  */
 export declare class WebDAVConnector extends AbstractConnector {
-    private readonly obscure;
     readonly name = "webdav";
-    private rclone;
-    constructor(obscure?: (plain: string) => Promise<string>);
     readonly filesystem: FilesystemFace;
     connect(declaration: ConnectorDeclaration, ctx: ConnectContext): Promise<ConnectorHandle>;
-    disconnect(handle: ConnectorHandle): Promise<void>;
-    private _sync;
+    disconnect(_handle: ConnectorHandle): Promise<void>;
     onHibernate(handle: ConnectorHandle): Promise<string | undefined>;
     onSessionClose(handle: ConnectorHandle): Promise<string | undefined>;
 }

package/dist/factory-assets/connectors/webdav/driver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"driver.d.ts","sourceRoot":"","sources":["../../../../factory-assets/connectors/webdav/driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,cAAc,EAIf,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,iBAAiB,EAUlB,MAAM,+BAA+B,CAAC;AA0CvC;;;;;;GAMG;AACH,qBAAa,eAAgB,SAAQ,iBAAiB;IAOxC,OAAO,CAAC,QAAQ,CAAC,OAAO;IANpC,QAAQ,CAAC,IAAI,YAAY;IAEzB,OAAO,CAAC,MAAM,CAA8B;gBAIf,OAAO,GAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAmB;IAI1F,QAAQ,CAAC,UAAU,EAAE,cAAc,CAKjC;IAEI,OAAO,CAAC,WAAW,EAAE,oBAAoB,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IA4IzF,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;YAO1C,KAAK;IAwBJ,WAAW,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAOjE,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAMpF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,eAAe,CAEjD"}
+{"version":3,"file":"driver.d.ts","sourceRoot":"","sources":["../../../../factory-assets/connectors/webdav/driver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,cAAc,EAGf,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,iBAAiB,EAGlB,MAAM,+BAA+B,CAAC;AASvC;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,iBAAiB;IACpD,QAAQ,CAAC,IAAI,YAAY;IAEzB,QAAQ,CAAC,UAAU,EAAE,cAAc,CAGjC;IAEI,OAAO,CAAC,WAAW,EAAE,oBAAoB,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAiBzF,UAAU,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAE1C,WAAW,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAKjE,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAIpF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,eAAe,CAEjD"}