@skaile/workspaces 1.12.2 → 1.13.1

package/dist/{chunk-UFGWIXRA.js → chunk-AYGPD6WX.js}

@@ -11,7 +11,7 @@ import * as zNS from 'zod';
 import { execSync } from 'child_process';
 import { createServer } from 'http';
 import mime from 'mime';
-import { stat, readdir, mkdir, chmod } from 'fs/promises';
+import { stat, readdir, mkdir, chmod, readFile, realpath } from 'fs/promises';
 import { createRequire } from 'module';
 import { pathToFileURL } from 'url';
 import { createConnection } from 'net';
@@ -6387,14 +6387,39 @@ printf 'password=%s\\n' "$pass"
 printf '\\n'
 `;
 }
+var MOUNTINFO_PATH = "/proc/self/mountinfo";
+function testMountinfoOverride() {
+  return process.env.VITEST ? process.env.SKAILE_FLEET_MOUNTINFO_PATH : void 0;
+}
 function isFleetManaged(connectorId) {
   const raw = process.env.SKAILE_FLEET_MANAGED_MOUNTS ?? "";
   if (raw.length === 0) return false;
   return raw.split(",").map((segment) => segment.trim()).filter((segment) => segment.length > 0).includes(connectorId);
 }
+function decodeMountinfoPath(field) {
+  return field.replace(
+    /\\(\d{3})/g,
+    (_, octal) => String.fromCharCode(Number.parseInt(octal, 8))
+  );
+}
+async function isMountpoint(dir, mountinfoPath) {
+  let table;
+  try {
+    table = await readFile(mountinfoPath, "utf8");
+  } catch {
+    return null;
+  }
+  const target = await realpath(dir);
+  for (const line of table.split("\n")) {
+    const mountPoint = line.split(" ")[4];
+    if (mountPoint !== void 0 && decodeMountinfoPath(mountPoint) === target) return true;
+  }
+  return false;
+}
 async function ensureFleetMounted(dir, log, options) {
   const timeoutMs = options?.timeoutMs ?? 3e3;
   const pollIntervalMs = options?.pollIntervalMs ?? 100;
+  const mountinfoPath = options?.mountinfoPath ?? testMountinfoOverride() ?? MOUNTINFO_PATH;
   const deadline = Date.now() + timeoutMs;
   let lastErr = null;
   while (Date.now() < deadline) {
@@ -6404,6 +6429,11 @@ async function ensureFleetMounted(dir, log, options) {
         throw new Error(`fleet mountpoint ${dir} is not a directory`);
       }
       await readdir(dir);
+      if (await isMountpoint(dir, mountinfoPath) === false) {
+        throw new Error(
+          `fleet mountpoint ${dir} is a plain directory, not a mount \u2014 the host bind is absent or landed on a different path`
+        );
+      }
       log.info("fleet bind mount verified", { dir });
       return;
     } catch (err) {
@@ -7868,5 +7898,5 @@ function createConnector() {
 }
 
 export { AbstractConnector, BUILTIN_CONNECTOR_CATALOG, BoxConnector, ConnectorFieldMissingError, ConnectorManager, ConnectorStartupError, DeployConnector, DevServerConnector, FlowAdapter, GitConnector, GmailConnector, GoogleDriveConnector, LocalConnector, LogBuffer, ManagedGitconfigCollisionError, MattermostConnector, MemoryConnector, MinIOConnector, PortPool, PostgresConnector, S3Connector, SQLiteConnector, SharePointConnector, StaticServerConnector, TunnelConnector, WebDAVConnector, XStateConnector, XStateStoreConnector, __test, atomicReplaceCredential, buildConnectorPromptSection, buildSdkConnectorTools, buildSdkFlowTools, createConnector, createConnector10, createConnector11, createConnector12, createConnector13, createConnector14, createConnector15, createConnector16, createConnector17, createConnector18, createConnector19, createConnector2, createConnector20, createConnector3, createConnector4, createConnector5, createConnector6, createConnector7, createConnector8, createConnector9, createFsWatcher, createWorktree, defaultSpawn, ensureDirMode, ensureFleetMounted, findGitRoot, findMissingPackages, getConnector, installNpmPackages, isFleetManaged, isPackageResolvable, listConnectors, listWorktrees, readGitSyncStatus, registerBuiltinConnectors, removeMountBlock, renderCredentialHelperScript, tryGetConnector, worktreeRegistry, writeHelperScript, writeMountBlock };
-//# sourceMappingURL=chunk-UFGWIXRA.js.map
-//# sourceMappingURL=chunk-UFGWIXRA.js.map
+//# sourceMappingURL=chunk-AYGPD6WX.js.map
+//# sourceMappingURL=chunk-AYGPD6WX.js.map