jishushell 0.6.5 → 0.7.3

package/dist/services/core-manager.js

@@ -1,411 +0,0 @@
-/**
- * src/services/core-manager.ts
- *
- * Pure core lifecycle management — OS interaction only, no console.log.
- * Returns typed results; callers (CLI) handle all output and formatting.
- *
- * Supports three run modes (auto-detected):
- *   systemd  — /etc/systemd/system/jishushell.service exists
- *   launchd  — ~/Library/LaunchAgents/com.jishushell.core.plist exists (macOS)
- *   process  — PID file fallback
- */
-import { execSync, execFileSync, spawn } from "child_process";
-import { existsSync, readFileSync, unlinkSync, openSync, closeSync, } from "fs";
-import { join, dirname } from "path";
-import { fileURLToPath } from "url";
-import { homedir } from "os";
-import { JISHUSHELL_HOME, getCoreConfig } from "../config.js";
-import { CORE_DOCKER_WAIT_DEADLINE_SECONDS } from "./macos-launchd.js";
-import { ensureDirHost, writeSecretFile } from "../utils/fs.js";
-// ── Constants ──────────────────────────────────────────────────────────────
-export const PID_FILE = join(JISHUSHELL_HOME, "jishushell.pid");
-export const LOG_FILE = join(JISHUSHELL_HOME, "jishushell.log");
-export const SYSTEMD_SERVICE = "/etc/systemd/system/jishushell.service";
-export const LAUNCHD_PLIST = join(homedir(), "Library/LaunchAgents/com.jishushell.core.plist");
-export const LAUNCHD_LOG_FILE = join(JISHUSHELL_HOME, "jishushell-core.log");
-export const DEFAULT_START_TIMEOUT_MS = 10_000;
-export const SYSTEMD_RESTART_TIMEOUT_MS = 30_000;
-export const LAUNCHD_START_GRACE_MS = 15_000;
-export const LAUNCHD_START_TIMEOUT_MS = (CORE_DOCKER_WAIT_DEADLINE_SECONDS * 1000) + LAUNCHD_START_GRACE_MS;
-export const SYSTEMD_LOG_HINT = "journalctl -u jishushell -n 50";
-const __filename = fileURLToPath(import.meta.url);
-// services/ is one level below the root; cli.js lives at ../cli.js
-export const CLI_PATH = join(dirname(__filename), "../cli.js");
-const DEFAULT_PROCESS_PATH_ENTRIES = [
-    "/opt/homebrew/bin",
-    "/opt/homebrew/sbin",
-    "/usr/local/bin",
-    "/usr/local/sbin",
-    "/usr/bin",
-    "/bin",
-    "/usr/sbin",
-    "/sbin",
-];
-function buildProcessPath(basePath) {
-    return [basePath ?? "", ...DEFAULT_PROCESS_PATH_ENTRIES, dirname(process.execPath)]
-        .flatMap((entry) => entry.split(":"))
-        .map((entry) => entry.trim())
-        .filter(Boolean)
-        .filter((entry, index, entries) => entries.indexOf(entry) === index)
-        .join(":");
-}
-export function getStartupTimeoutMs(mode) {
-    return mode === "launchd" ? LAUNCHD_START_TIMEOUT_MS : DEFAULT_START_TIMEOUT_MS;
-}
-export function getLogHint(mode) {
-    switch (mode) {
-        case "launchd":
-            return LAUNCHD_LOG_FILE;
-        case "process":
-            return LOG_FILE;
-        case "systemd":
-        default:
-            return SYSTEMD_LOG_HINT;
-    }
-}
-function resolveControlPort(mode, requestedPort) {
-    if (mode === "process")
-        return requestedPort ?? getCorePort();
-    return getCorePort();
-}
-export function detectRunMode() {
-    if (process.platform !== "darwin") {
-        if (existsSync(SYSTEMD_SERVICE)) {
-            try {
-                execSync("systemctl --version 2>/dev/null", { stdio: "ignore", timeout: 2000 });
-                return "systemd";
-            }
-            catch { }
-        }
-    }
-    else {
-        if (existsSync(LAUNCHD_PLIST))
-            return "launchd";
-    }
-    return "process";
-}
-// ── Core port resolution ───────────────────────────────────────────────────
-export function getCorePort() {
-    const env = parseInt(process.env.JISHUSHELL_CORE_PORT ?? process.env.JISHUSHELL_PORT ?? "", 10);
-    if (env > 0 && env < 65536)
-        return env;
-    try {
-        const cfg = getCoreConfig();
-        const p = parseInt(String(cfg.core_port ?? ""), 10);
-        if (p > 0 && p < 65536)
-            return p;
-    }
-    catch { }
-    return 8091;
-}
-// ── Process state helpers ──────────────────────────────────────────────────
-export function readAlivePid() {
-    try {
-        const raw = readFileSync(PID_FILE, "utf-8").trim();
-        const pid = parseInt(raw, 10);
-        if (!Number.isInteger(pid) || pid <= 0)
-            return null;
-        process.kill(pid, 0);
-        try {
-            const cmdline = readFileSync(`/proc/${pid}/cmdline`, "utf-8");
-            if (!cmdline.includes("jishushell") && !cmdline.includes("cli.js"))
-                return null;
-        }
-        catch { /* /proc not available (macOS) */ }
-        return pid;
-    }
-    catch {
-        return null;
-    }
-}
-function writePid(pid) {
-    writeSecretFile(PID_FILE, String(pid) + "\n");
-}
-function removePidFile() {
-    try {
-        unlinkSync(PID_FILE);
-    }
-    catch { }
-}
-// ── Port detection ─────────────────────────────────────────────────────────
-export function isPortListening(port) {
-    try {
-        if (process.platform === "darwin") {
-            const out = execFileSync("lsof", ["-iTCP:" + port, "-sTCP:LISTEN", "-t"], {
-                encoding: "utf-8", timeout: 3000, stdio: ["pipe", "pipe", "pipe"],
-            });
-            return out.trim().length > 0;
-        }
-        const out = execFileSync("ss", ["-tlnp"], {
-            encoding: "utf-8", timeout: 3000, stdio: ["pipe", "pipe", "pipe"],
-        });
-        return new RegExp(`[:\\s]${port}\\s`).test(out);
-    }
-    catch {
-        return false;
-    }
-}
-export async function waitForPortFree(port, timeoutMs = 5000) {
-    const deadline = Date.now() + timeoutMs;
-    while (Date.now() < deadline) {
-        if (!isPortListening(port))
-            return;
-        await new Promise((r) => setTimeout(r, 300));
-    }
-}
-export async function waitForPortOpen(port, timeoutMs = 8000) {
-    const deadline = Date.now() + timeoutMs;
-    while (Date.now() < deadline) {
-        if (isPortListening(port))
-            return true;
-        await new Promise((r) => setTimeout(r, 400));
-    }
-    return false;
-}
-export function killPortProcess(port) {
-    try {
-        let pids = [];
-        if (process.platform === "darwin") {
-            const out = execSync(`lsof -ti:${port} 2>/dev/null`, {
-                encoding: "utf-8", timeout: 3000,
-            });
-            pids = out.trim().split("\n").filter(Boolean).map(Number).filter(n => n > 1);
-        }
-        else {
-            const out = execSync("ss -tlnp 2>/dev/null", { encoding: "utf-8", timeout: 3000 });
-            const lines = out.split("\n").filter(l => l.includes(`:${port} `));
-            for (const line of lines) {
-                for (const m of line.matchAll(/pid=(\d+)/g)) {
-                    const n = parseInt(m[1], 10);
-                    if (n > 1)
-                        pids.push(n);
-                }
-            }
-        }
-        pids = [...new Set(pids)];
-        if (pids.length === 0)
-            return false;
-        for (const pid of pids) {
-            try {
-                process.kill(pid, "SIGTERM");
-            }
-            catch { }
-        }
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-// ── systemd helpers ────────────────────────────────────────────────────────
-function systemdExec(action) {
-    let useSudo = true;
-    try {
-        execSync("sudo -n true 2>/dev/null", { stdio: "ignore", timeout: 3000 });
-    }
-    catch {
-        useSudo = false;
-    }
-    if (useSudo) {
-        execFileSync("sudo", ["systemctl", action, "jishushell"], { stdio: "inherit", timeout: 15000 });
-    }
-    else {
-        execFileSync("systemctl", [action, "jishushell"], { stdio: "inherit", timeout: 15000 });
-    }
-}
-export function systemdStatus() {
-    try {
-        return execSync("systemctl is-active jishushell 2>/dev/null", {
-            encoding: "utf-8", timeout: 3000,
-        }).trim();
-    }
-    catch (e) {
-        if (e?.stdout)
-            return e.stdout.trim();
-        return "unknown";
-    }
-}
-function systemdResetFailed() {
-    try {
-        execFileSync("sudo", ["systemctl", "reset-failed", "jishushell"], { stdio: "ignore", timeout: 5000 });
-    }
-    catch {
-        try {
-            execFileSync("systemctl", ["reset-failed", "jishushell"], { stdio: "ignore", timeout: 5000 });
-        }
-        catch { }
-    }
-}
-// ── launchd helpers ────────────────────────────────────────────────────────
-function launchctlExec(action) {
-    const label = "com.jishushell.core";
-    if (action === "start") {
-        try {
-            execFileSync("launchctl", ["load", "-w", LAUNCHD_PLIST], { stdio: "ignore", timeout: 10000 });
-        }
-        catch { }
-    }
-    execFileSync("launchctl", [action, label], { stdio: "inherit", timeout: 10000 });
-}
-// ── process mode helpers ───────────────────────────────────────────────────
-function processStart(port) {
-    ensureDirHost(dirname(LOG_FILE));
-    const logFd = openSync(LOG_FILE, "a");
-    const deterministicPath = buildProcessPath(process.env.PATH);
-    const child = spawn(process.execPath, [CLI_PATH, "serve", "--port", String(port)], {
-        detached: true,
-        stdio: ["ignore", logFd, logFd],
-        env: {
-            PATH: deterministicPath,
-            HOME: process.env.HOME,
-            USER: process.env.USER,
-            LANG: process.env.LANG,
-            NODE_ENV: "production",
-            JISHUSHELL_HOME: process.env.JISHUSHELL_HOME || "",
-            JISHUSHELL_CORE_PORT: process.env.JISHUSHELL_CORE_PORT || "",
-            JISHUSHELL_PORT: process.env.JISHUSHELL_PORT || "",
-            JISHUSHELL_JWT_SECRET: process.env.JISHUSHELL_JWT_SECRET || "",
-            JISHUSHELL_AES_KEY: process.env.JISHUSHELL_AES_KEY || "",
-            NOMAD_ADDR: process.env.NOMAD_ADDR || "",
-            NOMAD_TOKEN: process.env.NOMAD_TOKEN || "",
-        },
-    });
-    child.unref();
-    closeSync(logFd);
-    writePid(child.pid);
-}
-async function processStop() {
-    const pid = readAlivePid();
-    if (pid === null) {
-        removePidFile();
-        throw new Error("No running process found (PID file missing or stale).");
-    }
-    try {
-        process.kill(pid, "SIGTERM");
-    }
-    catch (e) {
-        if (e.code === "EPERM") {
-            throw new Error(`Permission denied to stop PID ${pid}. Try: sudo jishushell stop`);
-        }
-        removePidFile();
-        throw e;
-    }
-    const deadline = Date.now() + 5000;
-    while (Date.now() < deadline) {
-        await new Promise((r) => setTimeout(r, 300));
-        try {
-            process.kill(pid, 0);
-        }
-        catch {
-            removePidFile();
-            return;
-        }
-    }
-    try {
-        process.kill(pid, "SIGKILL");
-    }
-    catch { }
-    removePidFile();
-}
-export async function startCore(port) {
-    const mode = detectRunMode();
-    const resolvedPort = resolveControlPort(mode, port);
-    const startupTimeoutMs = getStartupTimeoutMs(mode);
-    const logHint = getLogHint(mode);
-    if (isPortListening(resolvedPort)) {
-        return {
-            mode,
-            port: resolvedPort,
-            alreadyRunning: true,
-            started: true,
-            startupTimeoutMs,
-            logHint,
-        };
-    }
-    switch (mode) {
-        case "systemd":
-            systemdResetFailed();
-            systemdExec("start");
-            break;
-        case "launchd":
-            launchctlExec("start");
-            break;
-        case "process":
-            if (readAlivePid() !== null)
-                removePidFile(); // stale PID
-            processStart(resolvedPort);
-            break;
-    }
-    const listening = await waitForPortOpen(resolvedPort, startupTimeoutMs);
-    return {
-        mode,
-        port: resolvedPort,
-        alreadyRunning: false,
-        started: listening,
-        startupTimeoutMs,
-        logHint,
-    };
-}
-export async function stopCore() {
-    const port = getCorePort();
-    const mode = detectRunMode();
-    switch (mode) {
-        case "systemd":
-            systemdExec("stop");
-            break;
-        case "launchd":
-            launchctlExec("stop");
-            break;
-        case "process":
-            await processStop();
-            break;
-    }
-    await waitForPortFree(port, 5000);
-    return { mode };
-}
-export async function restartCore(port) {
-    const mode = detectRunMode();
-    const resolvedPort = resolveControlPort(mode, port);
-    const startupTimeoutMs = getStartupTimeoutMs(mode);
-    const logHint = getLogHint(mode);
-    if (mode === "systemd") {
-        systemdResetFailed();
-        systemdExec("restart");
-        const started = await waitForPortOpen(resolvedPort, SYSTEMD_RESTART_TIMEOUT_MS);
-        return {
-            mode,
-            port: resolvedPort,
-            alreadyRunning: false,
-            started,
-            startupTimeoutMs: SYSTEMD_RESTART_TIMEOUT_MS,
-            logHint,
-        };
-    }
-    // Non-systemd: explicit stop → start
-    if (mode === "launchd") {
-        try {
-            launchctlExec("stop");
-        }
-        catch { }
-    }
-    else {
-        if (readAlivePid() !== null) {
-            try {
-                await processStop();
-            }
-            catch { }
-        }
-        else {
-            removePidFile();
-        }
-    }
-    if (isPortListening(resolvedPort)) {
-        killPortProcess(resolvedPort);
-        await waitForPortFree(resolvedPort, 5000);
-    }
-    if (isPortListening(resolvedPort)) {
-        throw new Error(`Port ${resolvedPort} is still occupied after stop. Try \`jishushell stop\` first.`);
-    }
-    return startCore(resolvedPort);
-}
-//# sourceMappingURL=core-manager.js.map

package/dist/services/core-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"core-manager.js","sourceRoot":"","sources":["../../src/services/core-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EACL,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,GAC1D,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,iCAAiC,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEhE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,QAAQ,GAAU,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;AACvE,MAAM,CAAC,MAAM,QAAQ,GAAU,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;AACvE,MAAM,CAAC,MAAM,eAAe,GAAG,wCAAwC,CAAC;AACxE,MAAM,CAAC,MAAM,aAAa,GAAK,IAAI,CAAC,OAAO,EAAE,EAAE,gDAAgD,CAAC,CAAC;AACjG,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC;AAC7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AACjD,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAC7C,MAAM,CAAC,MAAM,wBAAwB,GACnC,CAAC,iCAAiC,GAAG,IAAI,CAAC,GAAG,sBAAsB,CAAC;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAAG,gCAAgC,CAAC;AAEjE,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,mEAAmE;AACnE,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;AAC/D,MAAM,4BAA4B,GAAG;IACnC,mBAAmB;IACnB,oBAAoB;IACpB,gBAAgB;IAChB,iBAAiB;IACjB,UAAU;IACV,MAAM;IACN,WAAW;IACX,OAAO;CACC,CAAC;AAEX,SAAS,gBAAgB,CAAC,QAA4B;IACpD,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,GAAG,4BAA4B,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;SAChF,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;SACpC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;SACnE,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAMD,MAAM,UAAU,mBAAmB,CAAC,IAAa;IAC/C,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,wBAAwB,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAa;IACtC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,gBAAgB,CAAC;QAC1B,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC;QAClB,KAAK,SAAS,CAAC;QACf;YACE,OAAO,gBAAgB,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAa,EAAE,aAAsB;IAC/D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,aAAa,IAAI,WAAW,EAAE,CAAC;IAC9D,OAAO,WAAW,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,QAAQ,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChF,OAAO,SAAS,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,UAAU,CAAC,aAAa,CAAC;YAAE,OAAO,SAAS,CAAC;IAClD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAE9E,MAAM,UAAU,WAAW;IACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAChG,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,KAAK;QAAE,OAAO,GAAG,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK;YAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAE9E,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,GAAG,UAAU,EAAE,OAAO,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC,CAAC,iCAAiC,CAAC,CAAC;QAC7C,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,aAAa;IACpB,IAAI,CAAC;QAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACxC,CAAC;AAED,8EAA8E;AAE9E,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,QAAQ,GAAG,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE;gBACxE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAClE,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE;YACxC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAClE,CAAC,CAAC;QACH,OAAO,IAAI,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,SAAS,GAAG,IAAI;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO;QACnC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,SAAS,GAAG,IAAI;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,IAAI,IAAI,GAAa,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,IAAI,cAAc,EAAE;gBACnD,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI;aACjC,CAAC,CAAC;YACH,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,QAAQ,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;YACnE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC5C,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC7B,IAAI,CAAC,GAAG,CAAC;wBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QAChD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E,SAAS,WAAW,CAAC,MAAc;IACjC,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,CAAC;QACH,QAAQ,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,GAAG,KAAK,CAAC;IAAC,CAAC;IAE5B,IAAI,OAAO,EAAE,CAAC;QACZ,YAAY,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAClG,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,4CAA4C,EAAE;YAC5D,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI;SACjC,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM;YAAE,OAAQ,CAAC,CAAC,MAAiB,CAAC,IAAI,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,YAAY,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACxG,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YAAC,YAAY,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACjH,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,KAAK,GAAG,qBAAqB,CAAC;IACpC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,YAAY,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IACD,YAAY,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,8EAA8E;AAE9E,SAAS,YAAY,CAAC,IAAY;IAChC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE;QACjF,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;QAC/B,GAAG,EAAE;YACH,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;YACtB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;YACtB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;YACtB,QAAQ,EAAE,YAAY;YACtB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE;YAClD,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE;YAC5D,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE;YAClD,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE;YAC9D,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE;YACxD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE;YACxC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE;SAC3C;KACF,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,SAAS,CAAC,KAAK,CAAC,CAAC;IACjB,QAAQ,CAAC,KAAK,CAAC,GAAI,CAAC,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,aAAa,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAK,CAA2B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,6BAA6B,CAAC,CAAC;QACrF,CAAC;QACD,aAAa,EAAE,CAAC;QAChB,MAAM,CAAC,CAAC;IACV,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACnC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,aAAa,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAC9C,aAAa,EAAE,CAAC;AAClB,CAAC;AAiBD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAa;IAC3C,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAEjC,IAAI,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,YAAY;YAClB,cAAc,EAAE,IAAI;YACpB,OAAO,EAAE,IAAI;YACb,gBAAgB;YAChB,OAAO;SACR,CAAC;IACJ,CAAC;IAED,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,kBAAkB,EAAE,CAAC;YACrB,WAAW,CAAC,OAAO,CAAC,CAAC;YACrB,MAAM;QACR,KAAK,SAAS;YACZ,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM;QACR,KAAK,SAAS;YACZ,IAAI,YAAY,EAAE,KAAK,IAAI;gBAAE,aAAa,EAAE,CAAC,CAAC,YAAY;YAC1D,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,MAAM;IACV,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IACxE,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,YAAY;QAClB,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,SAAS;QAClB,gBAAgB;QAChB,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAE7B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YAAE,WAAW,CAAC,MAAM,CAAC,CAAC;YAAC,MAAM;QAC3C,KAAK,SAAS;YAAE,aAAa,CAAC,MAAM,CAAC,CAAC;YAAC,MAAM;QAC7C,KAAK,SAAS;YAAE,MAAM,WAAW,EAAE,CAAC;YAAC,MAAM;IAC7C,CAAC;IAED,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAa;IAC7C,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAEjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,kBAAkB,EAAE,CAAC;QACrB,WAAW,CAAC,SAAS,CAAC,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,YAAY,EAAE,0BAA0B,CAAC,CAAC;QAChF,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,YAAY;YAClB,cAAc,EAAE,KAAK;YACrB,OAAO;YACP,gBAAgB,EAAE,0BAA0B;YAC5C,OAAO;SACR,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC;YAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,IAAI,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC;gBAAC,MAAM,WAAW,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,aAAa,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;QAClC,eAAe,CAAC,YAAY,CAAC,CAAC;QAC9B,MAAM,eAAe,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,QAAQ,YAAY,+DAA+D,CACpF,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC,YAAY,CAAC,CAAC;AACjC,CAAC"}

package/dist/services/external-mounts.js

@@ -1,187 +0,0 @@
-/**
- * External mounts — let any host directory appear as a virtual subtree
- * inside ~/.jishushell/files/ (M3 W4 PR-4).
- *
- * Design choice: virtualize at the FilesManager layer rather than
- * planting a symlink under FILES_ROOT.
- *
- *   1. The W1 symlink-defense rejects ALL symlinks anywhere in the
- *      path chain. We don't want to whitelist symlinks generally;
- *      the alias check must be code-explicit.
- *   2. Symlinks behave inconsistently across docker bind mounts,
- *      WebDAV clients, and macOS APFS firmlinks. A virtual layer
- *      sidesteps the entire mess.
- *   3. Listing the FILES_ROOT directory cannot include a symlink
- *      that points outside (the listing helper hides them); a
- *      virtual entry is just a synthesized DirEntry.
- *
- * The user-visible model:
- *   files/                     ← real POSIX root
- *   ├── notes/                 ← real subdirectory
- *   ├── photos/                ← real subdirectory
- *   └── Documents/             ← VIRTUAL — host_path = /Users/me/Documents
- *
- * From every layer's perspective (panel UI, /api/files/*, WebDAV,
- * Agent drive shim), Documents/ behaves like any other directory.
- * Mode "ro" is enforced uniformly.
- *
- * Sensitive paths flagged by sanity-check (caller can override):
- *   /etc, /proc, /sys, /dev, /var/log, ~/.ssh, ~/.aws, ~/.gnupg,
- *   anywhere inside JISHUSHELL_HOME (would create recursion)
- */
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { homedir } from "node:os";
-import { JISHUSHELL_HOME, FILES_ROOT } from "../config.js";
-const ALIAS_RE = /^[a-zA-Z0-9_][a-zA-Z0-9_.-]{0,63}$/;
-const DENY_PREFIXES = [
-    "/etc",
-    "/proc",
-    "/sys",
-    "/dev",
-    "/run",
-    "/boot",
-    "/var/log",
-    "/var/lib",
-];
-const SUSPICIOUS_HIDDEN = [".ssh", ".aws", ".gnupg", ".config/gh"];
-/**
- * Reserved aliases that cannot be used because they collide with
- * panel-internal directories or W1.5 / W2 conventions.
- */
-const RESERVED_ALIASES = new Set([
-    ".trash",
-    "agent-data",
-    "legacy",
-    "skills",
-    "memory",
-    ".knowledge",
-]);
-/**
- * Validate a single mount candidate. Returns {ok, errors, warnings};
- * warnings flag sensitive paths (e.g. ~/.ssh) but do NOT block the
- * caller — that call is the user's policy decision.
- */
-export function validateMount(m, existing = []) {
-    const errors = [];
-    const warnings = [];
-    // alias
-    if (!m.alias || typeof m.alias !== "string") {
-        errors.push({ field: "alias", message: "required string" });
-    }
-    else if (!ALIAS_RE.test(m.alias)) {
-        errors.push({
-            field: "alias",
-            message: "must match [a-zA-Z0-9_.-]+ (no slashes), <= 64 chars",
-        });
-    }
-    else if (RESERVED_ALIASES.has(m.alias)) {
-        errors.push({ field: "alias", message: `"${m.alias}" is a reserved alias` });
-    }
-    else if (existing.some((e) => e.alias === m.alias)) {
-        errors.push({ field: "alias", message: `"${m.alias}" already in use` });
-    }
-    // mode
-    if (m.mode !== "ro" && m.mode !== "rw") {
-        errors.push({ field: "mode", message: 'must be "ro" or "rw"' });
-    }
-    // host_path
-    if (!m.host_path || typeof m.host_path !== "string") {
-        errors.push({ field: "host_path", message: "required absolute path" });
-    }
-    else if (!path.isAbsolute(m.host_path)) {
-        errors.push({ field: "host_path", message: "must be absolute" });
-    }
-    else {
-        // Resolve any ~ expansion the caller forgot
-        const resolved = m.host_path.startsWith("~")
-            ? path.join(homedir(), m.host_path.slice(1))
-            : path.resolve(m.host_path);
-        if (!fs.existsSync(resolved)) {
-            errors.push({
-                field: "host_path",
-                message: `path does not exist: ${resolved}`,
-            });
-        }
-        else {
-            try {
-                const stat = fs.lstatSync(resolved);
-                if (stat.isSymbolicLink()) {
-                    errors.push({
-                        field: "host_path",
-                        message: "must be a real directory, not a symlink",
-                    });
-                }
-                else if (!stat.isDirectory()) {
-                    errors.push({
-                        field: "host_path",
-                        message: "must be a directory",
-                    });
-                }
-            }
-            catch (e) {
-                errors.push({
-                    field: "host_path",
-                    message: `cannot stat: ${e.message}`,
-                });
-            }
-            // Recursion guard: must not be inside FILES_ROOT or JISHUSHELL_HOME
-            if (resolved === FILES_ROOT ||
-                resolved.startsWith(FILES_ROOT + path.sep) ||
-                resolved === JISHUSHELL_HOME ||
-                resolved.startsWith(JISHUSHELL_HOME + path.sep)) {
-                errors.push({
-                    field: "host_path",
-                    message: "cannot mount a path inside ~/.jishushell — would cause recursion",
-                });
-            }
-            // Sensitive prefix warnings (do not block)
-            for (const prefix of DENY_PREFIXES) {
-                if (resolved === prefix || resolved.startsWith(prefix + "/")) {
-                    warnings.push(`host_path is under ${prefix} — system directory, mode=ro is strongly recommended`);
-                    break;
-                }
-            }
-            for (const hidden of SUSPICIOUS_HIDDEN) {
-                if (resolved.includes(`/${hidden}`) || resolved.includes(`\\${hidden}`)) {
-                    warnings.push(`host_path contains "${hidden}" — likely holds credentials, mode=ro recommended`);
-                    break;
-                }
-            }
-        }
-    }
-    return { ok: errors.length === 0, errors, warnings };
-}
-/**
- * Resolve a files/-relative path that MIGHT start with an external
- * mount alias to its true host filesystem path. Returns null when the
- * path doesn't begin with a registered alias — caller falls back to
- * `FILES_ROOT/<rel>`.
- *
- * Symlink defense and path-safety MUST run on the returned absolute
- * path against `mount.host_path` (not FILES_ROOT) — caller's job.
- */
-export function resolveAcrossMounts(rel, mounts) {
-    if (!rel)
-        return null;
-    const slash = rel.indexOf("/");
-    const first = slash < 0 ? rel : rel.slice(0, slash);
-    const remainder = slash < 0 ? "" : rel.slice(slash + 1);
-    const m = mounts.find((x) => x.alias === first);
-    if (!m)
-        return null;
-    const expanded = m.host_path.startsWith("~")
-        ? path.join(homedir(), m.host_path.slice(1))
-        : path.resolve(m.host_path);
-    const abs = remainder ? path.join(expanded, remainder) : expanded;
-    return { abs, mount: m, remainder };
-}
-/**
- * Returns true if the given files/-relative path lands inside a
- * read-only mount (any operation that mutates must reject early).
- */
-export function isReadOnlyTarget(rel, mounts) {
-    const m = resolveAcrossMounts(rel, mounts);
-    return !!(m && m.mount.mode === "ro");
-}
-//# sourceMappingURL=external-mounts.js.map

package/dist/services/external-mounts.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"external-mounts.js","sourceRoot":"","sources":["../../src/services/external-mounts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAoB3D,MAAM,QAAQ,GAAG,oCAAoC,CAAC;AAEtD,MAAM,aAAa,GAAG;IACpB,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,UAAU;IACV,UAAU;CACX,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AAEnE;;;GAGG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,YAAY;CACb,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,CAAyB,EACzB,WAA4B,EAAE;IAE9B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,QAAQ;IACR,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC9D,CAAC;SAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,uBAAuB,EAAE,CAAC,CAAC;IAC/E,CAAC;SAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,kBAAkB,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO;IACP,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,YAAY;IACZ,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;IACzE,CAAC;SAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;YAC1C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAE9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,wBAAwB,QAAQ,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACpC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;oBAC1B,MAAM,CAAC,IAAI,CAAC;wBACV,KAAK,EAAE,WAAW;wBAClB,OAAO,EAAE,yCAAyC;qBACnD,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC/B,MAAM,CAAC,IAAI,CAAC;wBACV,KAAK,EAAE,WAAW;wBAClB,OAAO,EAAE,qBAAqB;qBAC/B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,gBAAgB,CAAC,CAAC,OAAO,EAAE;iBACrC,CAAC,CAAC;YACL,CAAC;YAED,oEAAoE;YACpE,IACE,QAAQ,KAAK,UAAU;gBACvB,QAAQ,CAAC,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC;gBAC1C,QAAQ,KAAK,eAAe;gBAC5B,QAAQ,CAAC,UAAU,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,EAC/C,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,kEAAkE;iBAC5E,CAAC,CAAC;YACL,CAAC;YAED,2CAA2C;YAC3C,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;gBACnC,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;oBAC7D,QAAQ,CAAC,IAAI,CACX,sBAAsB,MAAM,sDAAsD,CACnF,CAAC;oBACF,MAAM;gBACR,CAAC;YACH,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;gBACvC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,EAAE,CAAC,EAAE,CAAC;oBACxE,QAAQ,CAAC,IAAI,CACX,uBAAuB,MAAM,mDAAmD,CACjF,CAAC;oBACF,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,MAAuB;IAEvB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACxD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAClE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAW,EACX,MAAuB;IAEvB,MAAM,CAAC,GAAG,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACxC,CAAC"}