@skaile/workspaces 0.52.0 → 1.0.0

package/dist/connectors/src/rclone-config/googledrive.d.ts

@@ -1,59 +0,0 @@
-/**
- * Render an rclone INI config snippet for a single Google Drive remote.
- *
- * Pure helper — no IO, no logging — so it can be unit-tested by string compare.
- * The output is the full text for one `[<remoteName>]` section using rclone's
- * `drive` backend. The OAuth `token` field is a single-line JSON literal as
- * rclone expects, in the same shape used by the OneDrive renderer.
- *
- * Lives in `@skaile/workspaces/connectors/rclone-config` so both consumers can
- * reach it: the in-container `googledrive` mount driver
- * (`factory-assets/connectors/googledrive/driver.ts`) and the platform-side
- * `RcloneFleetService` (`platform/backend/libs/session/`) which renders the
- * same INI on the host before spawning a shared rclone process.
- */
-/**
- * Google Drive OAuth scope values accepted by rclone's `drive` backend.
- * `drive` = full read/write, `drive.readonly` = read-only, `drive.file` =
- * only files created/opened by the app, `drive.appfolder` = the app's hidden
- * data folder, `drive.metadata.readonly` = metadata only.
- * @docLink packages/connectors/api-reference#google-drive-scope
- */
-export type GoogleDriveScope = "drive" | "drive.readonly" | "drive.file" | "drive.appfolder" | "drive.metadata.readonly";
-/**
- * Options for `renderGoogleDriveConfig`. Carries OAuth token, optional client
- * credentials, optional scope and root/shared-drive restrictions.
- * @docLink packages/connectors/api-reference#render-google-drive-config-options
- */
-export interface RenderGoogleDriveConfigOptions {
-    /** The rclone remote section name (e.g. `skaile-gdrive`). */
-    remoteName: string;
-    /** Current OAuth access token. */
-    accessToken: string;
-    /** Long-lived refresh token (embedded in the rclone `token` JSON field). */
-    refreshToken?: string | null;
-    /** Expiry of the access token as a Unix timestamp in milliseconds. */
-    expiresAtMs?: number | null;
-    /** OAuth client (application) ID. */
-    clientId?: string | null;
-    /** OAuth client secret. */
-    clientSecret?: string | null;
-    /** OAuth scope. Defaults to `"drive"` (full access). */
-    scope?: GoogleDriveScope;
-    /** Optional Drive folder ID to mount as the remote root. */
-    rootFolderId?: string | null;
-    /** Optional Shared Drive (Team Drive) ID. */
-    teamDrive?: string | null;
-    /** Optional path to a service account JSON file (used instead of OAuth). */
-    serviceAccountFile?: string | null;
-}
-/**
- * Render an rclone INI config section for a Google Drive remote. Pure — no IO, no side effects.
- * The `token` field is serialised as a single-line JSON literal as rclone expects.
- * All interpolated values are stripped of CR/LF to prevent INI injection.
- * @param opts - Remote name, OAuth token, optional client credentials and scope/root restrictions.
- * @returns Full INI text for one `[<remoteName>]` rclone section.
- * @docLink packages/connectors/api-reference#render-google-drive-config
- */
-export declare function renderGoogleDriveConfig(opts: RenderGoogleDriveConfigOptions): string;
-//# sourceMappingURL=googledrive.d.ts.map

package/dist/connectors/src/rclone-config/googledrive.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"googledrive.d.ts","sourceRoot":"","sources":["../../../../connectors/src/rclone-config/googledrive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GACxB,OAAO,GACP,gBAAgB,GAChB,YAAY,GACZ,iBAAiB,GACjB,yBAAyB,CAAC;AAE9B;;;;GAIG;AACH,MAAM,WAAW,8BAA8B;IAC7C,6DAA6D;IAC7D,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,2BAA2B;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,wDAAwD;IACxD,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAID;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,8BAA8B,GAAG,MAAM,CA0BpF"}

package/dist/connectors/src/rclone-config/index.d.ts

@@ -1,9 +0,0 @@
-/**
- * rclone INI rendering helpers — pure string-template functions for one
- * `[remote]` section per backend. Consumed by both the in-container mount
- * drivers and the platform-side fleet service.
- */
-export { type GoogleDriveScope, type RenderGoogleDriveConfigOptions, renderGoogleDriveConfig, } from "./googledrive.js";
-export { type RenderOneDriveConfigOptions, renderOneDriveConfig } from "./onedrive.js";
-export { type RenderWebDAVConfigOptions, renderWebDAVConfig, type WebDAVVendor, } from "./webdav.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/connectors/src/rclone-config/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../connectors/src/rclone-config/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,8BAA8B,EACnC,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,2BAA2B,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACvF,OAAO,EACL,KAAK,yBAAyB,EAC9B,kBAAkB,EAClB,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC"}

package/dist/connectors/src/rclone-config/onedrive.d.ts

@@ -1,48 +0,0 @@
-/**
- * Render an rclone INI config snippet for a single OneDrive/SharePoint remote.
- *
- * Pure helper — no IO, no logging — so it can be unit-tested by string compare.
- * The output is the full text for one `[<remoteName>]` section using rclone's
- * `onedrive` backend. The OAuth `token` field is a single-line JSON literal as
- * rclone expects.
- *
- * Lives in `@skaile/workspaces/connectors/rclone-config` so both consumers can
- * reach it: the in-container `sharepoint` mount driver
- * (`ai-assets-skaile/mounts/sharepoint/driver.ts`) and the platform-side
- * `RcloneFleetService` (`platform/backend/libs/session/`) which renders the
- * same INI on the host before spawning a shared rclone process.
- */
-/**
- * Options for `renderOneDriveConfig`. Carries OAuth token, drive ID, and optional tenant/client credentials.
- * @docLink packages/connectors/api-reference#render-one-drive-config-options
- */
-export interface RenderOneDriveConfigOptions {
-    /** The rclone remote section name (e.g. `skaile-sharepoint`). */
-    remoteName: string;
-    /** Current OAuth access token. */
-    accessToken: string;
-    /** Long-lived refresh token (embedded in the rclone `token` JSON field). */
-    refreshToken?: string | null;
-    /** Expiry of the access token as a Unix timestamp in milliseconds. */
-    expiresAtMs?: number | null;
-    /** Azure tenant ID for MSAL authentication. */
-    tenantId?: string | null;
-    /** OAuth client (application) ID. */
-    clientId?: string | null;
-    /** OAuth client secret. */
-    clientSecret?: string | null;
-    /** OneDrive drive ID (required by the rclone `onedrive` backend). */
-    driveId: string;
-    /** Drive type. Defaults to `"business"`. */
-    driveType?: "business" | "personal" | "documentLibrary";
-}
-/**
- * Render an rclone INI config section for a OneDrive / SharePoint remote. Pure — no IO, no side effects.
- * The `token` field is serialised as a single-line JSON literal as rclone expects.
- * All interpolated values are stripped of CR/LF to prevent INI injection.
- * @param opts - Remote name, OAuth token, drive ID, and optional tenant/client credentials.
- * @returns Full INI text for one `[<remoteName>]` rclone section.
- * @docLink packages/connectors/api-reference#render-one-drive-config
- */
-export declare function renderOneDriveConfig(opts: RenderOneDriveConfigOptions): string;
-//# sourceMappingURL=onedrive.d.ts.map

package/dist/connectors/src/rclone-config/onedrive.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"onedrive.d.ts","sourceRoot":"","sources":["../../../../connectors/src/rclone-config/onedrive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,2BAA2B;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,iBAAiB,CAAC;CACzD;AAID;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,2BAA2B,GAAG,MAAM,CAqB9E"}

package/dist/connectors/src/rclone-config/sanitize.d.ts

@@ -1,9 +0,0 @@
-/**
- * Strip CR/LF from a value before interpolating it into an rclone INI line.
- * Without this, a value containing `\n` would smuggle an extra `key = ...`
- * pair — or even a new `[section]` — into the rendered config.
- *
- * Used by every renderer in `@skaile/workspaces/connectors/rclone-config`.
- */
-export declare function sanitizeIniValue(value: string): string;
-//# sourceMappingURL=sanitize.d.ts.map

package/dist/connectors/src/rclone-config/sanitize.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../../../connectors/src/rclone-config/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD"}

package/dist/connectors/src/rclone-config/webdav.d.ts

@@ -1,50 +0,0 @@
-/**
- * Render an rclone INI config snippet for a single WebDAV remote.
- *
- * Pure helper -- no IO, no logging -- so it can be unit-tested by string compare.
- * The output is the full text for one `[<remoteName>]` section using rclone's
- * `webdav` backend.
- *
- * NOTE: rclone's `pass` field is not plaintext; it must already be passed
- * through `rclone obscure` by the caller. See the driver's `obscurePassword`
- * helper for the spawn that produces it.
- *
- * Lives in `@skaile/workspaces/connectors/rclone-config` so both consumers can
- * reach it: the in-container `webdav` mount driver
- * (`ai-assets-skaile/mounts/webdav/driver.ts`) and the platform-side
- * `RcloneFleetService` (`platform/backend/libs/session/`) which renders the
- * same INI on the host before spawning a shared rclone process.
- */
-/**
- * Supported WebDAV vendor identifiers for the rclone `webdav` backend.
- * @docLink packages/connectors/api-reference#web-dav-vendor
- */
-export type WebDAVVendor = "nextcloud" | "owncloud" | "sharepoint" | "fastmail" | "other";
-/**
- * Options for `renderWebDAVConfig`. Carries remote name, URL, vendor, and credentials.
- * @docLink packages/connectors/api-reference#render-web-dav-config-options
- */
-export interface RenderWebDAVConfigOptions {
-    /** The rclone remote section name (e.g. `skaile-docs`). */
-    remoteName: string;
-    /** Base URL of the WebDAV server. */
-    url: string;
-    /** WebDAV vendor; drives rclone's `vendor =` field. */
-    vendor: WebDAVVendor;
-    /** Basic-auth username. */
-    username?: string | null;
-    /** Already passed through `rclone obscure`. */
-    obscuredPassword?: string | null;
-    /** OAuth bearer token (used instead of basic-auth for SharePoint). */
-    bearerToken?: string | null;
-}
-/**
- * Render an rclone INI config section for a WebDAV remote. Pure — no IO, no side effects.
- * The `obscuredPassword` field must already have been processed through `rclone obscure`.
- * All interpolated values are stripped of CR/LF to prevent INI injection.
- * @param opts - Remote name, URL, vendor, and credentials.
- * @returns Full INI text for one `[<remoteName>]` rclone section.
- * @docLink packages/connectors/api-reference#render-web-dav-config
- */
-export declare function renderWebDAVConfig(opts: RenderWebDAVConfigOptions): string;
-//# sourceMappingURL=webdav.d.ts.map

package/dist/connectors/src/rclone-config/webdav.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"webdav.d.ts","sourceRoot":"","sources":["../../../../connectors/src/rclone-config/webdav.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,UAAU,GAAG,YAAY,GAAG,UAAU,GAAG,OAAO,CAAC;AAE1F;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,2DAA2D;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,uDAAuD;IACvD,MAAM,EAAE,YAAY,CAAC;IACrB,2BAA2B;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAID;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,yBAAyB,GAAG,MAAM,CAW1E"}

package/dist/connectors/src/rclone-process-manager.d.ts

@@ -1,316 +0,0 @@
-/**
- * RcloneProcessManager — supervises an rclone FUSE subprocess per mount.
- *
- * Responsibilities:
- *   - Spawn rclone with a per-mount config + cache dir, wait for the FUSE
- *     mountpoint to appear, then return a handle.
- *   - Pipe rclone's JSON-formatted log lines into the parent driver's
- *     {@link Logger} via a child source `${driverName}+rclone`.
- *   - Coordinate graceful stop (flush → SIGTERM → fusermount fallback).
- *   - Expose `flush` (POST /vfs/refresh + poll /vfs/stats), `statSize`
- *     (operations/stat → authoritative remote size, backing the read-path
- *     stale-tail gate) and `status` (process liveness + cache-dir size).
- *
- * Cross-link: see `workspaces/core/CLAUDE.md` § Logging for the
- * `createLogger` / `LogStore` contract, and
- * `_devlog/specs/2026-05-01-debug-logging-design.md` for the source taxonomy.
- */
-import type { Logger } from "@skaile/workspaces/types";
-/** Default rclone `--vfs-write-back` delay; raised from 5s so a rapidly-rewritten file settles before upload (avoids mid-write "sizes differ" aborts). */
-export declare const DEFAULT_VFS_WRITE_BACK = "30s";
-/** Consecutive failed upload retries for one object before a stuck-upload error is surfaced. */
-export declare const DEFAULT_UPLOAD_STUCK_THRESHOLD = 3;
-/**
- * Spawn-time configuration for a single rclone FUSE mount.
- * @docLink packages/connectors/api-reference#rclone-spawn-config
- */
-export interface RcloneSpawnConfig {
-    /** Logical mount id; used as `instance` and as part of the rclone config filename. */
-    mountId: string;
-    /**
-     * Driver name (e.g. "sharepoint", "webdav"); used to derive the rclone
-     * subprocess child logger subkind: `${driverName}+rclone`.
-     */
-    driverName: string;
-    /** Absolute path inside the container where rclone will FUSE-mount. Created if missing. */
-    mountPoint: string;
-    /** Absolute path inside the container for the vfs cache. Created if missing. */
-    cacheDir: string;
-    /** Full INI text for rclone.conf (one [remote] section, named `skaile-<mountId>`). */
-    rcloneConfig: string;
-    /** Remote spec, e.g. `skaile-foo:/Clients/KADK`. */
-    remote: string;
-    /** rclone --vfs-cache-mode value. */
-    vfsCacheMode: "minimal" | "writes" | "full";
-    /** Per-mount cache size cap. Default: '5G'. */
-    cacheMaxSize?: string;
-    /** Per-mount cache age cap. Default: '168h'. */
-    cacheMaxAge?: string;
-    /**
-     * Skip rclone's post-transfer size + checksum verification by appending
-     * `--ignore-size --ignore-checksum`. Default: false (verification on).
-     *
-     * Escape hatch for remotes that mutate uploaded bytes server-side (notably
-     * SharePoint Online normalising LF→CRLF on text/html), which makes the
-     * remote object a different size/hash than the local source. rclone reads
-     * that as `corrupted on transfer`, deletes the upload, and retries forever,
-     * so the file never durably lands. Enabling this trades integrity
-     * verification for sync-ability and must only be set by drivers that have
-     * confirmed the mutation is benign. Off-by-default; wired per-driver, never
-     * globally.
-     */
-    ignoreSizeCheck?: boolean;
-    /**
-     * rclone `--vfs-write-back` delay (e.g. '30s', '1m'). Controls how long a
-     * dirty file sits before rclone starts uploading it. Default:
-     * {@link DEFAULT_VFS_WRITE_BACK}. Raise it when the agent rewrites files
-     * faster than they upload, to avoid mid-write "sizes differ" aborts.
-     */
-    vfsWriteBack?: string;
-    /**
-     * Consecutive upload retries for one object before {@link onUploadStuck}
-     * fires. Default: {@link DEFAULT_UPLOAD_STUCK_THRESHOLD}.
-     */
-    uploadStuckThreshold?: number;
-    /**
-     * Optional hook invoked once per object when its upload has failed
-     * `uploadStuckThreshold` times in a row. spawn() always also logs an
-     * error-level entry through the `${driverName}+rclone` child logger; this
-     * hook lets callers surface the stranded file elsewhere (e.g. a sync event).
-     */
-    onUploadStuck?: (object: string, tries: number) => void;
-    /**
-     * Optional hook invoked when rclone reports an OAuth auth failure (notably
-     * `invalid_client` / `couldn't fetch token`, the symptom of an expired
-     * access token that rclone cannot self-refresh). Wired by the mount driver
-     * to the reactive arm of its token-refresh controller. Fires per matching
-     * log line; the controller dedupes via its in-flight guard + cooldown.
-     */
-    onAuthError?: () => void;
-    /**
-     * Parent driver Logger — already tagged
-     * `{kind:"mount", subkind:<driver>, instance:<mountId>}` by ConnectorManager.
-     * Used for manager-level events; rclone subprocess events go through the
-     * derived `child({subkind: \`${driverName}+rclone\`})` logger.
-     */
-    log: Logger;
-}
-/**
- * Handle returned by `RcloneProcessManager.spawn()` once the FUSE mountpoint is confirmed.
- * @docLink packages/connectors/api-reference#rclone-handle
- */
-export interface RcloneHandle {
-    /** OS process id of the rclone subprocess. */
-    pid: number;
-    /** Confirmed FUSE mountpoint (echo of input). */
-    mountPoint: string;
-    /** Cache directory (echo of input). */
-    cacheDir: string;
-    /** The local rc API address rclone is bound to, e.g. '127.0.0.1:54321'. */
-    rcAddr: string;
-}
-/**
- * Manages rclone FUSE subprocesses for mount drivers. Stateless across instances —
- * the internal handle registry is module-scoped so a fresh `RcloneProcessManager`
- * can still find handles created by a previous instance.
- * @docLink packages/connectors/api-reference#rclone-process-manager
- */
-export declare class RcloneProcessManager {
-    private readonly now;
-    /**
-     * @param now Injectable clock (ms) used only to timestamp the quarantine dir
-     * on a poisoned-cache reset, so the move-aside name is deterministic in tests.
-     */
-    constructor(now?: () => number);
-    /**
-     * Spawn an rclone FUSE mount with one-shot poisoned-cache recovery. Delegates
-     * to {@link spawnOnce}; if that fails specifically because the persistent VFS
-     * cache was poisoned (a prior container SIGKILLed mid-write left `vfs`/`vfsMeta`
-     * referencing missing backing files), quarantine the cache and retry the mount
-     * exactly once on a clean rebuild from the authoritative remote.
-     *
-     * The retry is single-shot and bounded: if the fresh-cache mount also fails the
-     * cause is connectivity/token (not the cache), so the error propagates without
-     * a second reset — never a reset/respawn loop. A non-poison failure, or a
-     * poison failure with nothing to quarantine, propagates immediately.
-     */
-    spawn(config: RcloneSpawnConfig): Promise<RcloneHandle>;
-    /**
-     * Spawn an rclone FUSE mount. Resolves once the mountpoint is confirmed
-     * present in `/proc/self/mounts`. Throws on timeout, on early exit, or
-     * if invariants are violated. A readiness-timeout accompanied by the
-     * poisoned-cache log signature throws {@link CachePoisonedMountError} so the
-     * public {@link spawn} can apply its quarantine-and-retry recovery.
-     */
-    protected spawnOnce(config: RcloneSpawnConfig): Promise<RcloneHandle>;
-    /**
-     * Stop an rclone subprocess. Attempts a flush first, then SIGTERM, then
-     * SIGKILL + fusermount3 if `graceMs` elapses without the mountpoint
-     * disappearing.
-     *
-     * `graceMs` bounds both the flush stabilization gate and the SIGTERM→SIGKILL
-     * window — it is *not* a single total wall-clock cap: the flush also waits on
-     * rclone's `/vfs/stats` drain (its own 60s ceiling) between the two.
-     */
-    stop(handle: RcloneHandle, opts?: {
-        graceMs?: number;
-    }): Promise<void>;
-    /**
-     * Apply a freshly-rendered rclone INI to a running mount by recycling the
-     * process: flush + stop the current rclone, then re-spawn at the same
-     * mountpoint/cacheDir with the new config. Returns the new handle.
-     *
-     * rclone holds the OAuth token in memory (baked into the config at spawn);
-     * there is no rc command to swap it on a live `onedrive` backend, so a
-     * recycle is the reliable way to apply a refreshed token. The vfs cache dir
-     * is reused, so the remount revalidates rather than re-downloads. During the
-     * brief unmount window the read-only mount-placeholder barrier underneath is
-     * exposed (writes fail with EROFS, not EIO) — see ConnectorManager's
-     * read-only-until-ready guarantee.
-     */
-    reconfigure(handle: RcloneHandle, rcloneConfig: string): Promise<RcloneHandle>;
-    /**
-     * Force rclone to upload pending writes, then wait until the in-use
-     * counter reaches zero.
-     *
-     * Before issuing the refresh it waits for the vfs cache dir to go quiescent
-     * (no write for `stabilityThresholdMs`, bounded by `stabilizeTimeoutMs`) so a
-     * close/hibernate-triggered flush doesn't snapshot a half-written file and
-     * trigger rclone's mid-write "sizes differ" abort. Pass `stabilize: false`
-     * to skip the gate.
-     */
-    flush(handle: RcloneHandle, opts?: {
-        stabilize?: boolean;
-        stabilityThresholdMs?: number;
-        stabilizeTimeoutMs?: number;
-    }): Promise<void>;
-    /**
-     * Authoritative remote byte size for a mount-relative path, via rclone's
-     * `operations/stat` rc endpoint. Backs the mount read-path stale-tail gate:
-     * `operations/stat` hits the backend object directly, so it returns the true
-     * remote size even when the VFS cache is serving a non-truncated item (and
-     * `statSync` on the FUSE mount reports the inflated length). Returns `null`
-     * when the handle is unknown, the object is missing / a directory, or the
-     * call fails — the caller then trusts the on-disk bytes.
-     */
-    statSize(handle: RcloneHandle, relPath: string): Promise<number | null>;
-    /** Liveness + cache-dir size. */
-    status(handle: RcloneHandle): Promise<{
-        alive: boolean;
-        cacheBytes: number;
-    }>;
-}
-/**
- * Per-process state threaded through {@link _routeRcloneLogLine} so it can
- * detect a sustained upload failure (the same object failing to upload K times
- * in a row) and surface it exactly once, instead of letting rclone retry
- * silently at INFO level forever.
- */
-export interface RcloneLogRouteContext {
-    /** Consecutive retries for one object before {@link onUploadStuck} fires. */
-    stuckThreshold?: number;
-    /** Objects already alerted on, to fire once and not on every later retry. */
-    alertedObjects?: Set<string>;
-    /** Per-object consecutive `itemNotFound` count; escalates at {@link stuckThreshold}. */
-    itemNotFoundCounts?: Map<string, number>;
-    /** Called the first time an object crosses {@link stuckThreshold}. */
-    onUploadStuck?: (object: string, tries: number) => void;
-    /** Called when a line matches an OAuth auth-failure pattern. */
-    onAuthError?: () => void;
-}
-/**
- * Thrown by {@link RcloneProcessManager.spawnOnce} when a mount-readiness
- * failure was accompanied by the {@link CACHE_POISON_RE} signature, so
- * {@link RcloneProcessManager.spawn} knows the failure is a recoverable
- * poisoned cache (quarantine + single retry) rather than a connectivity/token
- * fault. Its `message` is the full mount-failure detail (including the stderr
- * tail), so surfacing it directly when recovery declines loses no diagnostics.
- */
-export declare class CachePoisonedMountError extends Error {
-    constructor(message: string);
-}
-/**
- * @internal
- * True when an rclone log line carries the poisoned-VFS-cache signature
- * ({@link CACHE_POISON_RE}). Exported for tests; not part of the public API.
- */
-export declare function _isCachePoisonLine(line: string): boolean;
-/**
- * Move a poisoned rclone VFS cache aside so the next spawn rebuilds a clean one
- * from the authoritative remote. Moves `<cacheDir>/vfs` + `<cacheDir>/vfsMeta`
- * (whichever exist) into `<cacheDir>/.corrupt-<ISO>` — a move-aside, never a
- * delete, so any (junk) un-uploaded bytes stay recoverable for forensics. The
- * quarantine dir is nested inside `cacheDir` (not a sibling) so it lives within
- * the per-session cache dir the platform removes wholesale on session close —
- * bounding its lifetime to the session — and rclone only reads its own
- * `vfs`/`vfsMeta` subdirs, so the dotted sibling is inert to the live mount.
- * (A bounded retain-N/reap-after-M GC of repeated resets within one long-lived
- * session is a follow-up; session-close cleanup covers the common case.)
- *
- * Returns the quarantine dir path when anything was moved, else `null` (nothing
- * to quarantine — the failure was not a poisoned cache). `nowMs` is injected for
- * deterministic test timestamps. Exported for tests; not part of the public API.
- */
-export declare function quarantineCacheDir(cacheDir: string, nowMs: number): Promise<string | null>;
-/**
- * @internal
- * Route a single rclone log line (JSON or raw) to the appropriate Logger
- * call. Exported for tests; not part of the public API. When `ctx` is
- * supplied, also tracks consecutive upload failures per object and invokes
- * `ctx.onUploadStuck` once the retry count for an object reaches the threshold.
- */
-export declare function _routeRcloneLogLine(line: string, log: Logger, ctx?: RcloneLogRouteContext): void;
-/**
- * @internal
- * Build the `rclone mount` argv from a spawn config. Extracted from spawn() so
- * the flag wiring (notably `--vfs-write-back` and the conditional
- * `--ignore-size --ignore-checksum`) is unit-testable without actually
- * launching rclone. Exported for tests; not part of the public API.
- */
-export declare function _buildRcloneArgs(config: RcloneSpawnConfig, io: {
-    configPath: string;
-    rcAddr: string;
-}): string[];
-/**
- * @internal
- * Split an rclone mount `remote` (`skaile-<id>:/base/path`) plus a
- * mount-relative path into the `{fs, remote}` pair rclone's `operations/stat`
- * rc command expects: `fs` is the backend root (`skaile-<id>:`) and `remote` is
- * the object path within it. Leading/trailing slashes are normalised away so
- * the join is stable regardless of how either side is slashed. Exported for
- * tests; not part of the public API.
- */
-export declare function _operationsStatTarget(remote: string, relPath: string): {
-    fs: string;
-    remote: string;
-};
-/**
- * Query rclone's `operations/stat` rc endpoint for the authoritative remote
- * size of `relPath` under `remote`. Returns the byte size, or `null` when the
- * object is missing, is a directory, the call fails, or the size is absent.
- *
- * Unlike a `statSync` on the FUSE mount, `operations/stat` resolves the object
- * against the backend directly, so it is not subject to the VFS cache's
- * non-truncated stale tail. Pass `fetchImpl` to test without a live rc server.
- */
-export declare function fetchAuthoritativeSize(rcAddr: string, remote: string, relPath: string, fetchImpl?: typeof fetch): Promise<number | null>;
-/**
- * Poll `dir` until its newest file mtime is at least `thresholdMs` in the past
- * (no write for that long), or `timeoutMs` elapses. Returns true if it went
- * quiescent, false on timeout. An empty/missing dir counts as quiescent.
- */
-export declare function awaitQuiescent(dir: string, opts: {
-    thresholdMs: number;
-    timeoutMs: number;
-    pollMs: number;
-}): Promise<boolean>;
-/**
- * @internal
- * Returns true if a FUSE mount is present at `mountPoint` in the given
- * /proc/self/mounts text. The fstype check (field 3, `fuse.*`) is essential:
- * the deferred-mount barrier leaves a `tmpfs` mounted at the same path, so a
- * path-only match would report the *barrier* as the confirmed mount and mask a
- * dead rclone process. Exported for tests; not part of the public API.
- */
-export declare function _fuseMountPresent(procMountsText: string, mountPoint: string): boolean;
-//# sourceMappingURL=rclone-process-manager.d.ts.map

package/dist/connectors/src/rclone-process-manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rclone-process-manager.d.ts","sourceRoot":"","sources":["../../../connectors/src/rclone-process-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAkBH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAQvD,0JAA0J;AAC1J,eAAO,MAAM,sBAAsB,QAAQ,CAAC;AAE5C,gGAAgG;AAChG,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAYhD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,2FAA2F;IAC3F,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,YAAY,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,YAAY,EAAE,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC5C,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;OAYG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACxD;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IACzB;;;;;OAKG;IACH,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;CAChB;AAqBD;;;;;GAKG;AACH,qBAAa,oBAAoB;IAKnB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAJhC;;;OAGG;gBAC0B,GAAG,GAAE,MAAM,MAAiB;IAEzD;;;;;;;;;;;OAWG;IACG,KAAK,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IA+B7D;;;;;;OAMG;cACa,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IA0J3E;;;;;;;;OAQG;IACG,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAoD5E;;;;;;;;;;;;OAYG;IACG,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAapF;;;;;;;;;OASG;IACG,KAAK,CACT,MAAM,EAAE,YAAY,EACpB,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,GACzF,OAAO,CAAC,IAAI,CAAC;IAgDhB;;;;;;;;OAQG;IACG,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAM7E,iCAAiC;IAC3B,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CASpF;AAWD;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,wFAAwF;IACxF,kBAAkB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,sEAAsE;IACtE,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACxD,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;CAC1B;AAoCD;;;;;;;GAOG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuChG;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,qBAAqB,GAAG,IAAI,CA0DhG;AAqED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,iBAAiB,EACzB,EAAE,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzC,MAAM,EAAE,CAkDV;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAShC;AAED;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAgBxB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/D,OAAO,CAAC,OAAO,CAAC,CAQlB;AA8CD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAerF"}

package/dist/connectors/src/rclone-token-refresh.d.ts

@@ -1,84 +0,0 @@
-/**
- * Proactive + reactive OAuth token refresh for rclone-backed mounts.
- * See `connectors/CLAUDE.md` § Rclone Process Manager → Token refresh.
- */
-import type { TokenMediator } from "./connector-types.js";
-import type { RcloneHandle } from "./rclone-process-manager.js";
-/**
- * Safety margin between the scheduled refresh and the token's declared expiry.
- * Default 5 minutes: long enough that any in-flight read/write at fire time
- * still has a usable token through the recycle, short enough that a server
- * clock skew of a few seconds does not push the fire-time past expiry. Matches
- * the AI-credential and git-mount refresh leads.
- */
-export declare const PROACTIVE_RCLONE_REFRESH_MARGIN_MS: number;
-/** Default cooldown suppressing reactive triggers right after a refresh. */
-export declare const DEFAULT_REACTIVE_COOLDOWN_MS: number;
-/**
- * Minimal slice of `RcloneProcessManager` the refresh controller needs: swap
- * the live mount onto a freshly-rendered INI (`reconfigure`), and stop a
- * process the controller spawned but can no longer own (`stop`, used to clean
- * up when `disconnect()` races a mid-recycle spawn).
- */
-export interface RcloneReconfigurable {
-    reconfigure(handle: RcloneHandle, rcloneConfig: string): Promise<RcloneHandle>;
-    stop(handle: RcloneHandle): Promise<void>;
-}
-/**
- * Caller-supplied dependencies for {@link createRcloneTokenRefresh}.
- *
- * - `tokenMediator` runs the actual backend mint round-trip.
- * - `renderConfig(token)` re-renders the rclone INI for the freshly-minted
- *   access token (driver-specific: onedrive vs webdav backend shape).
- * - `rclone.reconfigure` recycles the process onto the new INI.
- * - `handleRef.current` is the live rclone handle; the controller updates it
- *   in place on every successful recycle so the driver's `disconnect()` stops
- *   the current process.
- * - `now` / `setTimeoutImpl` / `clearTimeoutImpl` are injected for tests.
- */
-export interface RcloneTokenRefreshDeps {
-    connectorId: string;
-    tokenMediator: TokenMediator;
-    renderConfig: (token: string) => string | Promise<string>;
-    rclone: RcloneReconfigurable;
-    handleRef: {
-        current: RcloneHandle | null;
-    };
-    log: (line: string) => void;
-    now?: () => number;
-    setTimeoutImpl?: (handler: () => void, ms: number) => {
-        unref?: () => void;
-    };
-    clearTimeoutImpl?: (handle: {
-        unref?: () => void;
-    }) => void;
-    marginMs?: number;
-    reactiveCooldownMs?: number;
-}
-export interface RcloneTokenRefreshController {
-    /**
-     * Arm the timer for `expiresAtIso - marginMs`. Cancels any prior pending
-     * fire. `null` / `undefined` / unparseable cancels without re-arming
-     * (static-credential / standalone semantics). A past fire-time refreshes on
-     * the next tick.
-     */
-    schedule(expiresAtIso: string | null | undefined): void;
-    /**
-     * Reactive safety net: invoke when rclone reports an auth failure. Triggers
-     * an immediate refresh unless one is already in flight or the last refresh
-     * was within the cooldown window (prevents a stream of failure lines from
-     * spinning the recycle loop).
-     */
-    onAuthError(): void;
-    /** Cancel any pending fire. Idempotent. */
-    cancel(): void;
-    /** Whether a proactive timer is currently armed. Exposed for tests. */
-    isPending(): boolean;
-}
-/**
- * Build a refresh controller bound to one rclone mount. One controller per
- * connect — the driver constructs it after the initial spawn and disposes it
- * via `cancel()` in `disconnect()`.
- */
-export declare function createRcloneTokenRefresh(deps: RcloneTokenRefreshDeps): RcloneTokenRefreshController;
-//# sourceMappingURL=rclone-token-refresh.d.ts.map

package/dist/connectors/src/rclone-token-refresh.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rclone-token-refresh.d.ts","sourceRoot":"","sources":["../../../connectors/src/rclone-token-refresh.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,kCAAkC,QAAgB,CAAC;AAEhE,4EAA4E;AAC5E,eAAO,MAAM,4BAA4B,QAAY,CAAC;AAStD;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,aAAa,CAAC;IAC7B,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,EAAE,oBAAoB,CAAC;IAC7B,SAAS,EAAE;QAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;KAAE,CAAC;IAC5C,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK;QAAE,KAAK,CAAC,EAAE,MAAM,IAAI,CAAA;KAAE,CAAC;IAC7E,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,IAAI,CAAA;KAAE,KAAK,IAAI,CAAC;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,4BAA4B;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAAC;IACxD;;;;;OAKG;IACH,WAAW,IAAI,IAAI,CAAC;IACpB,2CAA2C;IAC3C,MAAM,IAAI,IAAI,CAAC;IACf,uEAAuE;IACvE,SAAS,IAAI,OAAO,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,sBAAsB,GAC3B,4BAA4B,CA+J9B"}