@skaile/workspaces 0.8.5

package/dist/connectors/index.js

@@ -0,0 +1,20 @@
+export { AbstractConnectorAdapter, AbstractMountDriver, ConnectorFieldMissingError, ConnectorManager, FlowAdapter, LogBuffer, ManagedGitconfigCollisionError, MountManager, MountStartupError, atomicReplaceCredential, buildConnectorPromptSection, buildMountPromptSection, buildSdkConnectorTools, createFsWatcher, createWorktree, defaultSpawn, findGitRoot, findMissingPackages, getConnectorAdapter, getMountDriver, installNpmPackages, isPackageResolvable, listConnectorAdapters, listMountDrivers, listWorktrees, registerBuiltinConnectorAdapters, registerBuiltinMountDrivers, registerConnectorAdapter, registerMountDriver, removeMountBlock, renderCredentialHelperScript, tryGetConnectorAdapter, tryGetMountDriver, worktreeRegistry, writeHelperScript, writeMountBlock } from '../chunk-3W7Z74ZP.js';
+export { EnvSecretProvider, ForgeSecretProvider, InMemorySecretProvider, LegacyAuthGrammarError, LockedSecretProvider, OAuthRequiredError, PreMintedSecretProvider, SecretProviderChain, createCliSecretProviderChain, createForgeSecretProviderChain, loadConnectorDeclarations, loadMountDeclarations, resolveAuth, resolveAuthRef, resolveBackendAuthFor } from '../chunk-Q5URN24L.js';
+export { PortPool, RcloneProcessManager } from '../chunk-7H7EOIRH.js';
+export { renderOneDriveConfig, renderWebDAVConfig } from '../chunk-GCRKAFH7.js';
+import '../chunk-ZUQIXLRJ.js';
+import '../chunk-GZWJGNNN.js';
+import '../chunk-FVTV7M76.js';
+import '../chunk-65CYXYUW.js';
+import '../chunk-JKNWJ64A.js';
+import '../chunk-O4JH3KUE.js';
+import '../chunk-K5GBV4SA.js';
+import '../chunk-KLNL7QHN.js';
+import '../chunk-XEGHWFAX.js';
+import '../chunk-CSUBFKAN.js';
+import '../chunk-BVHFSUFM.js';
+import '../chunk-JLPC4YWT.js';
+import '../chunk-V37HONL7.js';
+import '../chunk-NSBPE2FW.js';
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/connectors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js"}

package/dist/connectors/rclone-config.js

@@ -0,0 +1,4 @@
+export { renderOneDriveConfig, renderWebDAVConfig } from '../chunk-GCRKAFH7.js';
+import '../chunk-NSBPE2FW.js';
+//# sourceMappingURL=rclone-config.js.map
+//# sourceMappingURL=rclone-config.js.map

package/dist/connectors/rclone-config.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"rclone-config.js"}

package/dist/connectors/rclone.js

@@ -0,0 +1,4 @@
+export { RcloneProcessManager, _routeRcloneLogLine } from '../chunk-7H7EOIRH.js';
+import '../chunk-NSBPE2FW.js';
+//# sourceMappingURL=rclone.js.map
+//# sourceMappingURL=rclone.js.map

package/dist/connectors/rclone.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"rclone.js"}

package/dist/connectors/src/adapters/base.d.ts

@@ -0,0 +1,66 @@
+/**
+ * AbstractConnectorAdapter — base class for connector adapters.
+ *
+ * Extend this class to register with ConnectorManager via registerConnectorAdapter().
+ * Provides default no-op implementations for optional lifecycle methods and a
+ * default watch() that emits nothing.
+ *
+ * Subclasses MUST implement: connect, disconnect, describeOperations, executeOp.
+ * Base CRUD methods throw by default — override what makes sense.
+ */
+import type { Logger } from "@skaile/workspaces/types";
+import type { ConnectorAdapter, ConnectorChangeEvent, ConnectorDeclaration, ConnectorHandle, OperationDescriptor } from "../connector-types.js";
+import type { SecretProvider } from "../secrets.js";
+import type { ConnectorContent, ConnectorEntry, ListOptions, SearchOptions, SearchResult, WatchHandle, WatchOptions } from "../shared-types.js";
+export declare abstract class AbstractConnectorAdapter implements ConnectorAdapter {
+    abstract readonly name: string;
+    /**
+     * Per-instance logger. Initialised to a placeholder; replaced by
+     * ConnectorManager via setLogger() with
+     * `{ kind:"connector", subkind:<driver>, instance:<id> }` once the
+     * declaration is known. Use `this.log.info/warn/error/debug` from any
+     * adapter method.
+     */
+    protected log: Logger;
+    setLogger(logger: Logger): void;
+    /**
+     * Callback set by the default watch() implementation. Call
+     * `this.emitChange?.({ path, action, source: 'operation' })` after mutations
+     * to emit change events to ConnectorManager.watchAll() subscribers.
+     */
+    protected emitChange?: (event: ConnectorChangeEvent) => void;
+    abstract connect(declaration: ConnectorDeclaration, secrets?: SecretProvider, resolvedFields?: Record<string, string>): Promise<ConnectorHandle>;
+    abstract disconnect(handle: ConnectorHandle): Promise<void>;
+    abstract describeOperations(handle: ConnectorHandle): OperationDescriptor[];
+    abstract executeOp(handle: ConnectorHandle, operation: string, args: Record<string, unknown>): Promise<string>;
+    /**
+     * @throws {Error} Always — override in subclasses that support read.
+     */
+    read(_handle: ConnectorHandle, _path: string): Promise<ConnectorContent | null>;
+    /**
+     * @throws {Error} Always — override in subclasses that support write.
+     */
+    write(_handle: ConnectorHandle, _path: string, _content: ConnectorContent): Promise<void>;
+    /**
+     * @throws {Error} Always — override in subclasses that support delete.
+     */
+    delete(_handle: ConnectorHandle, _path: string): Promise<boolean>;
+    /**
+     * @throws {Error} Always — override in subclasses that support list.
+     */
+    list(_handle: ConnectorHandle, _path?: string, _options?: ListOptions): Promise<ConnectorEntry[]>;
+    /**
+     * @throws {Error} Always — override in subclasses that support search.
+     */
+    search(_handle: ConnectorHandle, _query: string, _options?: SearchOptions): Promise<SearchResult[]>;
+    /**
+     * Default watch implementation. Stores the callback in emitChange so subclasses
+     * can call `this.emitChange?.({ path, action, source })` after mutations.
+     * Returns a no-op WatchHandle that clears emitChange on close.
+     */
+    watch(_handle: ConnectorHandle, callback: (event: ConnectorChangeEvent) => void, _options?: WatchOptions): WatchHandle;
+    onHibernate(_handle: ConnectorHandle): Promise<string | undefined>;
+    onSessionClose(_handle: ConnectorHandle): Promise<string | undefined>;
+    protected makeHandle(declaration: ConnectorDeclaration, state: unknown): ConnectorHandle;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/connectors/src/adapters/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../connectors/src/adapters/base.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,aAAa,EACb,YAAY,EACZ,WAAW,EACX,YAAY,EACb,MAAM,oBAAoB,CAAC;AAE5B,8BAAsB,wBAAyB,YAAW,gBAAgB;IACxE,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAE/B;;;;;;OAMG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,CAA2D;IAEhF,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI/B;;;;OAIG;IACH,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAE7D,QAAQ,CAAC,OAAO,CACd,WAAW,EAAE,oBAAoB,EACjC,OAAO,CAAC,EAAE,cAAc,EACxB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACtC,OAAO,CAAC,eAAe,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3D,QAAQ,CAAC,kBAAkB,CAAC,MAAM,EAAE,eAAe,GAAG,mBAAmB,EAAE;IAC3E,QAAQ,CAAC,SAAS,CAChB,MAAM,EAAE,eAAe,EACvB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,MAAM,CAAC;IAElB;;OAEG;IACG,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAGrF;;OAEG;IACG,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAG/F;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAGvE;;OAEG;IACG,IAAI,CACR,OAAO,EAAE,eAAe,EACxB,KAAK,CAAC,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,cAAc,EAAE,CAAC;IAG5B;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,aAAa,GACvB,OAAO,CAAC,YAAY,EAAE,CAAC;IAI1B;;;;OAIG;IACH,KAAK,CACH,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,EAC/C,QAAQ,CAAC,EAAE,YAAY,GACtB,WAAW;IASR,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAGlE,cAAc,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAI3E,SAAS,CAAC,UAAU,CAAC,WAAW,EAAE,oBAAoB,EAAE,KAAK,EAAE,OAAO,GAAG,eAAe;CASzF"}

package/dist/connectors/src/cli.d.ts

@@ -0,0 +1,16 @@
+#!/usr/bin/env bun
+/**
+ * CLI entry point for `skaile res` — resource operations from the command line.
+ *
+ * Usage:
+ *   skaile res list                          — list all resources
+ *   skaile res <id> --ops                    — list operations for a resource
+ *   skaile res <id> read <path>              — base read
+ *   skaile res <id> write <path> <content>   — base write
+ *   skaile res <id> list [path]              — base list
+ *   skaile res <id> search <query>           — base search
+ *   skaile res <id> delete <path>            — base delete
+ *   skaile res <id> <operation> [args...]     — custom operation
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/connectors/src/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../connectors/src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;GAYG"}

package/dist/connectors/src/config.d.ts

@@ -0,0 +1,125 @@
+/**
+ * Load mount and connector declarations from skaile.yaml.
+ */
+import type { ConnectorDeclaration } from "./connector-types.js";
+import type { MountDeclaration } from "./mount-types.js";
+/**
+ * Read `skaile.yaml` in `projectDir` and return all declared mounts as `MountDeclaration[]`.
+ * @param projectDir - Root of the workspace (directory containing `skaile.yaml`).
+ * @returns Array of mount declarations, or an empty array if none are declared.
+ * @docLink packages/connectors/api-reference#load-mount-declarations
+ */
+export declare function loadMountDeclarations(projectDir: string): MountDeclaration[];
+/**
+ * Read `skaile.yaml` in `projectDir` and return all declared connectors as `ConnectorDeclaration[]`.
+ * @param projectDir - Root of the workspace (directory containing `skaile.yaml`).
+ * @returns Array of connector declarations, or an empty array if none are declared.
+ * @docLink packages/connectors/api-reference#load-connector-declarations
+ */
+export declare function loadConnectorDeclarations(projectDir: string): ConnectorDeclaration[];
+import type { ForgeSecretProvider, SecretProvider } from "./secrets.js";
+import { SecretProviderChain } from "./secrets.js";
+/**
+ * Build a `SecretProviderChain` for Forge session context.
+ * `OAuthSecretProvider` is not wired here — it must be provided externally
+ * (the Forge session manager constructs it and passes it in).
+ * @param forgeProvider - The Forge-provisioned secret store.
+ * @param extraProviders - Additional providers prepended to the chain (e.g. an OAuth provider).
+ * @returns A chain that routes `forge:` refs to the Forge store and `env:` refs to process.env.
+ * @docLink packages/connectors/api-reference#create-forge-secret-provider-chain
+ */
+export declare function createForgeSecretProviderChain(forgeProvider: ForgeSecretProvider, extraProviders?: SecretProvider[]): SecretProviderChain;
+/**
+ * Build a `SecretProviderChain` for CLI/standalone context.
+ * `EnvSecretProvider` takes priority; `extraSecrets` are loaded into an `InMemorySecretProvider`.
+ * @param extraSecrets - Inline secrets injected into memory (e.g. tokens passed via CLI flags).
+ * @returns A chain that resolves `env:` refs from process.env plus any inline extras.
+ * @docLink packages/connectors/api-reference#create-cli-secret-provider-chain
+ */
+export declare function createCliSecretProviderChain(extraSecrets?: Record<string, string>): SecretProviderChain;
+/**
+ * Resolve a credential reference using a `SecretProvider`, or fall back to `env:NAME` lookup.
+ * @param auth - Credential reference (e.g. `"env:GIT_TOKEN"`).
+ * @param secrets - Optional provider; falls back to `process.env` if omitted.
+ * @returns Resolved secret value or `undefined`.
+ * @deprecated Use `SecretProviderChain.resolve()` instead.
+ * @docLink packages/connectors/api-reference#resolve-auth
+ */
+export declare function resolveAuth(auth: string | undefined, secrets?: import("./secrets.js").SecretProvider): string | undefined;
+/**
+ * Provider kind for a mount auth ref.
+ *
+ * Two values are accepted:
+ *   - `pat`     — static personal access token resolved via the secrets chain
+ *                 (standalone CLI / non-platform contexts).
+ *   - `backend` — token minted by the platform's credential mediator over the
+ *                 transport (`request_access_token` round-trip). Provider
+ *                 dispatch (OAuth, GitHub App, ...) lives backend-side; the
+ *                 runner stays provider-agnostic.
+ *
+ * @docLink packages/connectors/api-reference#mount-auth-kind
+ */
+export type MountAuthKind = "pat" | "backend";
+/**
+ * Parsed mount `auth:` field.
+ *
+ *   - `pat`     → `value` is the inner secret ref (e.g. `env:NAME`).
+ *   - `backend` → `value` is empty (sentinel only); the runner asks the
+ *                 backend for tokens via `request_access_token`.
+ *
+ * @docLink packages/connectors/api-reference#mount-auth-ref
+ */
+export interface MountAuthRef {
+    kind: MountAuthKind;
+    /** Prefix-stripped payload — see kind for shape. Empty for `backend`. */
+    value: string;
+    /** Original auth string from the declaration, kept for diagnostics. */
+    raw: string;
+}
+/**
+ * Thrown when a mount declaration's `auth:` field uses the legacy bare `env:NAME` grammar
+ * or any other unrecognized form. Migrate to `pat:env:NAME` (standalone) or `backend`
+ * (platform-mediated).
+ * @docLink packages/connectors/api-reference#legacy-auth-grammar-error
+ */
+export declare class LegacyAuthGrammarError extends Error {
+    readonly auth: string;
+    constructor(auth: string, mountId?: string);
+}
+/**
+ * Resolve the `auth: backend` initial mint for a given mount or connector id
+ * by querying the secrets chain with a `${kind}:${id}` ref. Returns the
+ * resolved bearer token or `undefined` if no pre-minted credential is
+ * available.
+ *
+ * Used by the runner when wiring `MountManager` / `ConnectorManager` to
+ * answer initial-mint requests from `PreMintedSecretProvider` without
+ * round-tripping to the platform. Drivers continue to receive a
+ * `tokenMediator` for refresh + retry-401 paths.
+ *
+ * @param kind Resource family (`mount` or `connector`).
+ * @param id Resource declaration id.
+ * @param chain Secrets chain. Pass `undefined` to return `undefined`.
+ * @returns The pre-minted token, or `undefined` if not stored on the chain.
+ * @docLink packages/connectors/api-reference#resolve-backend-auth-for
+ */
+export declare function resolveBackendAuthFor(kind: "mount" | "connector", id: string, chain: import("./secrets.js").SecretProvider | undefined): string | undefined;
+/**
+ * Parse a mount-side auth ref into a typed `MountAuthRef`.
+ *
+ * Accepted forms:
+ *   - `backend`      — platform-mediated mint via `request_access_token`.
+ *   - `pat:env:NAME` — static PAT resolved from the secrets chain.
+ *
+ * Rejects bare `env:NAME` (legacy) and provider-prefixed grammars (`oauth:`,
+ * `github-app:`) — those moved backend-side as part of Tier-2 mediation.
+ * Returns `undefined` when `auth` is absent or empty.
+ *
+ * @param auth - Raw `auth:` value from the mount declaration.
+ * @param mountId - Optional mount id included in error messages.
+ * @returns Parsed `MountAuthRef` or `undefined`.
+ * @throws {LegacyAuthGrammarError} for any unrecognized grammar.
+ * @docLink packages/connectors/api-reference#resolve-auth-ref
+ */
+export declare function resolveAuthRef(auth: string | undefined, mountId?: string): MountAuthRef | undefined;
+//# sourceMappingURL=config.d.ts.map

package/dist/connectors/src/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../connectors/src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAI5E;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,oBAAoB,EAAE,CAIpF;AA2BD,OAAO,KAAK,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAA6C,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAE9F;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAC5C,aAAa,EAAE,mBAAmB,EAClC,cAAc,GAAE,cAAc,EAAO,GACpC,mBAAmB,CAErB;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACxC,mBAAmB,CAMrB;AAED;;;;;;;GAOG;AAEH,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,CAAC,EAAE,OAAO,cAAc,EAAE,cAAc,GAC9C,MAAM,GAAG,SAAS,CAQpB;AAID;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,SAAS,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,aAAa,CAAC;IACpB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;GAKG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACV,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;CAY3C;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,OAAO,GAAG,WAAW,EAC3B,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,cAAc,EAAE,cAAc,GAAG,SAAS,GACvD,MAAM,GAAG,SAAS,CAGpB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,CAAC,EAAE,MAAM,GACf,YAAY,GAAG,SAAS,CAa1B"}

package/dist/connectors/src/connector-manager.d.ts

@@ -0,0 +1,147 @@
+/**
+ * ConnectorManager — central coordinator for connector lifecycle, dispatch,
+ * and tool generation. Connectors do not mount to the filesystem; for
+ * filesystem projection use `MountManager` instead.
+ *
+ * @docLink packages/connectors/concepts#connector-manager
+ */
+import type { CatalogEntry } from "@skaile/workspaces/core";
+import type { TelemetryProvider, Trace } from "@skaile/workspaces/telemetry";
+import type { ConnectorStatusEvent } from "@skaile/workspaces/types";
+import type { ConnectorAdapter, ConnectorChangeEvent, ConnectorDeclaration, ConnectorHandle, ConnectorInfo, ConnectorReport, RuntimeSkillDescriptor } from "./connector-types.js";
+import type { SecretProvider, SecretProviderChain } from "./secrets.js";
+import type { ConnectorContent, ConnectorEntry, ListOptions, OperationDescriptor, SearchOptions, SearchResult, WatchHandle, WatchOptions } from "./shared-types.js";
+interface ConnectedConnector {
+    adapter: ConnectorAdapter;
+    handle: ConnectorHandle;
+    declaration: ConnectorDeclaration;
+    watchHandle?: WatchHandle;
+}
+interface LifecycleResult {
+    id: string;
+    ok: boolean;
+    error?: string;
+    detail?: string;
+}
+/**
+ * Options for `ConnectorManager`. Pass as the second argument to the constructor.
+ *
+ * @example
+ * ```typescript
+ * const manager = new ConnectorManager(chain, {
+ *   onStatusChange: (event) => transport.send(event),
+ * });
+ * ```
+ */
+export interface ConnectorManagerOptions {
+    /**
+     * Called whenever a connector's connection state changes.
+     *
+     * Fired from both the bulk `connectAll()` path and the hot-plug `connect()` path.
+     * Status values: `"connecting"` → `"connected"` | `"error"`, and `"disconnected"`
+     * after `disconnect()` / `disconnectAll()`.
+     */
+    onStatusChange?: (event: ConnectorStatusEvent) => void;
+    /** Optional telemetry provider for span instrumentation. */
+    telemetry?: TelemetryProvider;
+    /** Optional active trace to attach connector spans to. */
+    trace?: Trace;
+    /** Catalog entries for dynamic adapter resolution (registry-first, catalog-fallback). */
+    catalogEntries?: CatalogEntry[];
+}
+/**
+ * Manages connection lifecycle, CRUD dispatch, skill catalog, and tool generation
+ * for all connectors declared in `skaile.yaml`. Resolves adapters from the registry
+ * or catalog. Accepts an optional `onStatusChange` callback for live status updates.
+ * @docLink packages/connectors/concepts#connector-manager
+ */
+export declare class ConnectorManager {
+    private readonly opts;
+    private connectors;
+    private readonly chain?;
+    /** @deprecated Pass SecretProviderChain instead */
+    private readonly secrets?;
+    private readonly catalogEntries;
+    private readonly mgrLog;
+    /**
+     * @param chain - Optional SecretProviderChain (or legacy SecretProvider) for resolving
+     *   credential references. Pass a SecretProviderChain to enable field resolution via
+     *   describeFields(); a bare SecretProvider is accepted for backwards compatibility.
+     * @param opts - Optional manager options, e.g. onStatusChange callback.
+     */
+    constructor(chain?: SecretProviderChain | SecretProvider, opts?: ConnectorManagerOptions);
+    private resolveAdapter;
+    private connectAdapter;
+    private withSpan;
+    /**
+     * Connect all declared connectors. resolveFields() is called automatically for
+     * adapters that implement describeFields().
+     *
+     * @returns ConnectorReport with per-connector success/error status.
+     */
+    connectAll(declarations: ConnectorDeclaration[]): Promise<ConnectorReport>;
+    /** Disconnect all connectors and stop all watchers. */
+    disconnectAll(): Promise<void>;
+    /**
+     * Connect a single connector (hot-plug). Resolves fields if the adapter declares them.
+     *
+     * @returns The ConnectorHandle for subsequent operations.
+     */
+    connect(declaration: ConnectorDeclaration): Promise<ConnectorHandle>;
+    /**
+     * Disconnect a single connector by ID.
+     *
+     * @throws {Error} if the connector is not found
+     */
+    disconnect(id: string): Promise<void>;
+    /**
+     * Start filesystem/operation watchers for all connected connectors.
+     *
+     * @returns Array of WatchHandle for cleanup (managed internally; use unwatchAll() to stop).
+     */
+    watchAll(callback: (connectorId: string, event: ConnectorChangeEvent) => void, options?: WatchOptions): void;
+    /** Stop all active watchers. */
+    unwatchAll(): Promise<void>;
+    hibernateAll(): Promise<LifecycleResult[]>;
+    closeAll(): Promise<LifecycleResult[]>;
+    private runLifecycleHook;
+    /**
+     * Return the ConnectorHandle for a connected connector.
+     *
+     * @returns The handle or undefined if not connected (internal; callers use get() which throws).
+     * @throws {Error} if the connector is not found
+     */
+    get(id: string): ConnectedConnector;
+    has(id: string): boolean;
+    /**
+     * Return summary info for all currently connected connectors.
+     *
+     * @returns Array of ConnectorInfo
+     */
+    listConnectors(): ConnectorInfo[];
+    getOperations(id: string): OperationDescriptor[];
+    /**
+     * Return RuntimeSkillDescriptors for all connected adapters that implement describeSkill().
+     * Adapters without describeSkill() receive a default descriptor built from id + driver.
+     *
+     * @returns Descriptors for all connected adapters.
+     */
+    listSkills(): RuntimeSkillDescriptor[];
+    /**
+     * Return the rendered skill body for a single connector.
+     *
+     * @param id - Connector ID.
+     * @param shellAccess - When true, the adapter has access to shell tools; affects
+     *   the rendered CLI vs SDK tool call style in the skill body.
+     * @throws {Error} if not connected or adapter doesn't implement describeSkill
+     */
+    loadSkill(id: string, shellAccess?: boolean): string;
+    read(id: string, path: string): Promise<ConnectorContent | null>;
+    write(id: string, path: string, content: ConnectorContent): Promise<void>;
+    delete(id: string, path: string): Promise<boolean>;
+    list(id: string, path?: string, options?: ListOptions): Promise<ConnectorEntry[]>;
+    search(id: string, query: string, options?: SearchOptions): Promise<SearchResult[]>;
+    executeOp(id: string, operation: string, args: Record<string, unknown>): Promise<string>;
+}
+export {};
+//# sourceMappingURL=connector-manager.d.ts.map

package/dist/connectors/src/connector-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-manager.d.ts","sourceRoot":"","sources":["../../../connectors/src/connector-manager.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,KAAK,EAAE,oBAAoB,EAAU,MAAM,0BAA0B,CAAC;AAE7E,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EAEpB,eAAe,EACf,aAAa,EACb,eAAe,EACf,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,YAAY,EACb,MAAM,mBAAmB,CAAC;AAI3B,UAAU,kBAAkB;IAC1B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,MAAM,EAAE,eAAe,CAAC;IACxB,WAAW,EAAE,oBAAoB,CAAC;IAClC,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,UAAU,eAAe;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAyHD;;;;;;;;;GASG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAEvD,4DAA4D;IAC5D,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,0DAA0D;IAC1D,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,yFAAyF;IACzF,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC;CACjC;AAID;;;;;GAKG;AACH,qBAAa,gBAAgB;IAiBzB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAhBvB,OAAO,CAAC,UAAU,CAAyC;IAC3D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAsB;IAC7C,mDAAmD;IAEnD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC;;;;;OAKG;gBAED,KAAK,CAAC,EAAE,mBAAmB,GAAG,cAAc,EAC3B,IAAI,GAAE,uBAA4B;YAcvC,cAAc;YA4Bd,cAAc;YAad,QAAQ;IA8BtB;;;;;OAKG;IACG,UAAU,CAAC,YAAY,EAAE,oBAAoB,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC;IAiDhF,uDAAuD;IACjD,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAqBpC;;;;OAIG;IACG,OAAO,CAAC,WAAW,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IAqC1E;;;;OAIG;IACG,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA4B3C;;;;OAIG;IACH,QAAQ,CACN,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,KAAK,IAAI,EACpE,OAAO,CAAC,EAAE,YAAY,GACrB,IAAI;IAeP,gCAAgC;IAC1B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAe3B,YAAY,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAI1C,QAAQ,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAI9B,gBAAgB;IA4B9B;;;;;OAKG;IACH,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,kBAAkB;IAMnC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAIxB;;;;OAIG;IACH,cAAc,IAAI,aAAa,EAAE;IASjC,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,mBAAmB,EAAE;IAOhD;;;;;OAKG;IACH,UAAU,IAAI,sBAAsB,EAAE;IAQtC;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,UAAO,GAAG,MAAM;IAa3C,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAahE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBzE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBlD,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAajF,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAenF,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;CA0B/F"}

package/dist/connectors/src/connector-registry.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Connector adapter registry.
+ *
+ * Built-in adapters from `@skaile/base-assets` are pre-registered here via
+ * static ESM imports of their subpath exports so they are bundled into any
+ * `bun --compile`'d agent binary AND any tsup-emitted ESM tarball. The
+ * catalog path in `ConnectorManager.resolveAdapter`
+ * (`await import(adapterPath)` of raw TS) is a dev-only fallback for
+ * project-local third-party adapters — it cannot work inside a compiled
+ * binary because bun cannot share its bundled symbol graph with
+ * externally-loaded TS files (the import silently hangs while trying to
+ * resolve `@skaile/workspaces/connectors` against an absent `node_modules`).
+ *
+ * **Static import discipline.** Every subpath specifier below must be a
+ * string-literal `from "@skaile/workspaces/base-assets/connectors/<name>"` —
+ * never aliased through a variable. Indirection defeats `bun --compile`'s
+ * static analysis and silently drops the module from the binary.
+ * Regression test: `tests/connector-tools-regression.test.ts`.
+ */
+import type { ConnectorAdapter, ConnectorAdapterFactory } from "./connector-types.js";
+/**
+ * Register a connector adapter factory under `name`. Overwrites any existing registration.
+ * @param name - Adapter key used in `skaile.yaml` `driver:` fields (e.g. `"postgres"`, `"redis"`).
+ * @param factory - Factory function that returns a fresh adapter instance.
+ * @docLink packages/connectors/api-reference#register-connector-adapter
+ */
+export declare function registerConnectorAdapter(name: string, factory: ConnectorAdapterFactory): void;
+/**
+ * Get a connector adapter by name, calling its factory.
+ * @param name - Adapter key (e.g. `"postgres"`).
+ * @returns A fresh adapter instance.
+ * @throws {Error} when no adapter is registered under `name`.
+ * @docLink packages/connectors/api-reference#get-connector-adapter
+ */
+export declare function getConnectorAdapter(name: string): ConnectorAdapter;
+/**
+ * Get a connector adapter by name, or return `undefined` if not registered.
+ * @param name - Adapter key.
+ * @returns A fresh adapter instance or `undefined`.
+ * @docLink packages/connectors/api-reference#try-get-connector-adapter
+ */
+export declare function tryGetConnectorAdapter(name: string): ConnectorAdapter | undefined;
+/**
+ * Return the names of all currently registered connector adapters.
+ * @returns Array of adapter keys (e.g. `["postgres", "redis", "memory"]`).
+ * @docLink packages/connectors/api-reference#list-connector-adapters
+ */
+export declare function listConnectorAdapters(): string[];
+/**
+ * Register every built-in connector adapter from `@skaile/base-assets`.
+ *
+ * Factories close over the statically-imported `createAdapter` functions
+ * at the top of this file. Both `bun --compile` and tsup follow the
+ * string-literal `import ... from "@skaile/workspaces/base-assets/connectors/..."`
+ * specifiers at build time and bundle the adapter plus its transitive
+ * `@skaile/*` deps. This sidesteps the catalog path's runtime TS-import hang.
+ */
+export declare function registerBuiltinConnectorAdapters(): void;
+//# sourceMappingURL=connector-registry.d.ts.map

package/dist/connectors/src/connector-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-registry.d.ts","sourceRoot":"","sources":["../../../connectors/src/connector-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAsBtF;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAE7F;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAQlE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAGjF;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAEhD;AAID;;;;;;;;GAQG;AACH,wBAAgB,gCAAgC,IAAI,IAAI,CAsBvD"}

package/dist/connectors/src/connector-tools.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Tool generation — builds agent tools from ConnectorManager state.
+ *
+ * Two outputs:
+ *   1. SDK tool definitions (for Claude Agent SDK via createSdkMcpServer)
+ *   2. System prompt section (for all agent frameworks)
+ *
+ * Fixed 7-tool surface (+ optional connector_exec when shell unavailable):
+ *   connector_list        — enumerate live connectors with id, driver, access, ops
+ *   connector_load_skill  — load full instructions for one connector
+ *   connector_read        — read at path
+ *   connector_write       — write at path
+ *   connector_list_entries — list entries
+ *   connector_search      — search
+ *   connector_delete      — delete at path
+ *   connector_exec        — execute custom op (only when shellAccess=false)
+ */
+import type { ConnectorManager } from "./connector-manager.js";
+/**
+ * Options for `buildSdkConnectorTools`. Allows injecting a pre-loaded SDK and Zod instance,
+ * and controls whether `connector_exec` is included when shell access is unavailable.
+ * @docLink packages/connectors/api-reference#connector-tool-options
+ */
+export interface ConnectorToolOptions {
+    /** Pre-loaded `@anthropic-ai/claude-agent-sdk` instance (optional; auto-imported if absent). */
+    sdk?: any;
+    /** Pre-loaded `zod` namespace (optional; uses static import if absent). */
+    z?: any;
+    /** Whether the agent has shell access. Defaults to true. When true, `connector_exec` is omitted. */
+    shellAccess?: boolean;
+}
+/**
+ * Options for `buildConnectorPromptSection`.
+ * @docLink packages/connectors/api-reference#connector-prompt-options
+ */
+export interface ConnectorPromptOptions {
+    /** Override driver type label shown in the prompt. */
+    driverType?: string;
+    /** Whether the agent has shell access. Defaults to true. Affects CLI vs SDK tool examples. */
+    shellAccess?: boolean;
+}
+/**
+ * Build an in-process MCP server exposing connector tools for the Claude Agent SDK.
+ * Returns the server config to pass as `mcpServers` in the SDK query options.
+ * Returns `null` if `@anthropic-ai/claude-agent-sdk` is not available.
+ * @param manager - Connected `ConnectorManager`.
+ * @param options - Optional SDK/Zod overrides and shell access flag.
+ * @returns MCP server config object or `null`.
+ * @docLink packages/connectors/api-reference#build-sdk-connector-tools
+ */
+export declare function buildSdkConnectorTools(manager: ConnectorManager, options?: ConnectorToolOptions): Promise<unknown | null>;
+/**
+ * Build a markdown section describing available connectors for the agent's system prompt.
+ * Included for all agent frameworks (SDK and CLI). Adapts tool call syntax based on `shellAccess`.
+ * @param manager - Connected `ConnectorManager`.
+ * @param options - Optional driver type label and shell access flag.
+ * @returns Markdown string or an empty string when no connectors are active.
+ * @docLink packages/connectors/api-reference#build-connector-prompt-section
+ */
+export declare function buildConnectorPromptSection(manager: ConnectorManager, options?: ConnectorPromptOptions | string): string;
+//# sourceMappingURL=connector-tools.d.ts.map

package/dist/connectors/src/connector-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-tools.d.ts","sourceRoot":"","sources":["../../../connectors/src/connector-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAQH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAM/D;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,gGAAgG;IAChG,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,2EAA2E;IAC3E,CAAC,CAAC,EAAE,GAAG,CAAC;IACR,oGAAoG;IACpG,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8FAA8F;IAC9F,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAID;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAwNzB;AAID;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,sBAAsB,GAAG,MAAM,GACxC,MAAM,CA2CR"}