@almadar/workspace 0.11.4 → 0.11.5

package/dist/internal/path-layout.d.ts

@@ -50,7 +50,11 @@ export declare function workspaceIndexManifestFile(workDir: string): string;
  * Resolve a user-supplied relative path within the sandbox. Rejects
  * absolute paths, `..` traversal, and any path that resolves outside
  * `workDir`. Returns the absolute resolved path on success.
+ *
+ * When `mounts` is supplied, path prefixes like `@std/…` resolve against
+ * the mount's absolute root instead of `workDir`. Mounts bypass the
+ * `workDir` traversal guard but enforce their own.
  */
-export declare function sandboxedPath(workDir: string, relPath: string): string;
+export declare function sandboxedPath(workDir: string, relPath: string, mounts?: ReadonlyMap<string, string>): string;
 /** Validate an orbital logical name — no path separators, no `..`. */
 export declare function assertOrbitalName(name: string): void;

package/dist/service.d.ts

@@ -7,7 +7,7 @@
  * @packageDocumentation
  */
 import type { JsonObject, JsonValue } from '@almadar/core';
-import type { FileTreeNode, GitHubConfig, GitStatusInfo, InstantiateWorkspaceSeed, SnapshotMeta, WorkspaceArchiveBackend, WorkspaceObserver, WorkspaceService, WorkspaceWatchEvent } from './types.js';
+import type { FileTreeNode, GitHubConfig, GitStatusInfo, InstantiateWorkspaceSeed, MountEntry, SnapshotMeta, WorkspaceArchiveBackend, WorkspaceObserver, WorkspaceService, WorkspaceWatchEvent } from './types.js';
 import type { WorkspaceBackend } from './internal/types.js';
 import { SinkManager } from './internal/sink-manager.js';
 import { GitClient } from './internal/git-client.js';
@@ -21,6 +21,7 @@ interface ServiceCtorArgs {
     git?: GitClient;
     github?: GitHubConfig;
     archiveBackend?: WorkspaceArchiveBackend;
+    mounts?: MountEntry[];
 }
 export declare class WorkspaceServiceImpl implements WorkspaceService {
     readonly workDir: string;
@@ -32,6 +33,8 @@ export declare class WorkspaceServiceImpl implements WorkspaceService {
     private readonly archiveBackend;
     /** Per-absolute-path serial queue. */
     private readonly writeQueue;
+    /** Mount prefix → resolved absolute directory. Built from constructor `mounts` + runtime `mountReadonly`. */
+    private readonly mountMap;
     readonly index: WorkspaceIndex;
     constructor(args: ServiceCtorArgs);
     get appId(): string | undefined;
@@ -86,6 +89,12 @@ export declare class WorkspaceServiceImpl implements WorkspaceService {
     removeFile(relPath: string): Promise<void>;
     listTree(relPath?: string): Promise<FileTreeNode[]>;
     exists(relPath: string): Promise<boolean>;
+    mountReadonly(prefix: string, absPath: string): void;
+    isMounted(relPath: string): boolean;
+    /** Resolve a sandboxed path through mounts. */
+    private sandbox;
+    /** Throw if relPath resolves to a mount (write/remove are blocked). */
+    private assertNotMounted;
     commitAndPush(opts: {
         message: string;
         tags?: string[];

package/dist/types.d.ts

@@ -173,6 +173,13 @@ export interface FileTreeNode {
     /** Byte size for files; `0` for directories. */
     size: number;
 }
+/** Read-only mount entry — makes an external absolute directory available under a workspace-prefix path. */
+export interface MountEntry {
+    /** Workspace-relative prefix, e.g. `@std`. Must not contain path separators or `..`. */
+    prefix: string;
+    /** Absolute path to the backing directory on the local filesystem. */
+    absPath: string;
+}
 /**
  * Factory input. Lifecycle resolution order: `adopt` → resume-from-disk →
  * `restore` backend → `github` clone → mint fresh.
@@ -213,6 +220,13 @@ export interface OpenWorkspaceOptions {
     create?: boolean;
     /** Storage selector. `'memory'` is for tests; `'local'` is default. */
     backend?: 'local' | 'memory';
+    /**
+     * Read-only mounts — expose external absolute directories under
+     * workspace-relative path prefixes (e.g. `@std` → `/path/to/std`).
+     * ReadFile / listTree / exists resolve through mounts transparently;
+     * writeFile / removeFile reject mounted paths.
+     */
+    mounts?: MountEntry[];
     /** Optional project name baked into the mint-time schema template. */
     projectName?: string;
     /**
@@ -329,6 +343,14 @@ export interface WorkspaceService {
     removeFile(relPath: string): Promise<void>;
     listTree(relPath?: string): Promise<FileTreeNode[]>;
     exists(relPath: string): Promise<boolean>;
+    /**
+     * Add a read-only mount at runtime — makes an external absolute directory
+     * available under a workspace-path prefix. ReadFile / listTree / exists
+     * resolve through the mount transparently; writeFile / removeFile reject it.
+     */
+    mountReadonly(prefix: string, absPath: string): void;
+    /** True when `relPath` resolves to a read-only mount. */
+    isMounted(relPath: string): boolean;
     commitAndPush(opts: {
         message: string;
         tags?: string[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@almadar/workspace",
-  "version": "0.11.4",
+  "version": "0.11.5",
   "description": "Storage-agnostic workspace primitives shared by Almadar consumers. One service, six exports, hidden paths, single observer. See docs/Almadar_Workspace.md.",
   "type": "module",
   "main": "./dist/index.js",
@@ -25,13 +25,13 @@
   },
   "license": "BUSL-1.1",
   "dependencies": {
-    "@almadar/core": ">=9.6.1",
-    "@almadar/llm": "^2.16.0",
+    "@almadar/core": "^10.26.0",
+    "@almadar/llm": "^2.31.0",
     "dugite": "^3.2.2",
     "typescript": "^5.4.0"
   },
   "devDependencies": {
-    "@almadar/eslint-plugin": ">=2.7.0",
+    "@almadar/eslint-plugin": "^2.14.0",
     "@types/node": "^22.0.0",
     "@typescript-eslint/parser": "8.56.0",
     "eslint": "^10.0.0",