jishushell 0.6.5 → 0.7.3

package/dist/services/connections/transactor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transactor.js","sourceRoot":"","sources":["../../../src/services/connections/transactor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEpE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAE5F,OAAO,EAAE,8BAA8B,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAExE,OAAO,KAAK,kBAAkB,MAAM,6BAA6B,CAAC;AAGlE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAIhE,MAAM,WAAW,GAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;AAiCxE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAsB;IAC3D,oFAAoF;IACpF,sEAAsE;IACtE,kEAAkE;IAClE,0DAA0D;IAC1D,OAAO,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,KAAsB;IACxD,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAElG,yEAAyE;IACzE,sEAAsE;IACtE,uEAAuE;IACvE,mBAAmB;IACnB,MAAM,SAAS,GAAgB;QAC7B,GAAG,QAAQ;QACX,WAAW,EAAE,cAAc;KAC5B,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAEpE,yEAAyE;IACzE,oEAAoE;IACpE,sEAAsE;IACtE,+CAA+C;IAC/C,iDAAiD;IACjD,qEAAqE;IACrE,kEAAkE;IAClE,MAAM,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAE1C,yEAAyE;IACzE,wEAAwE;IACxE,6DAA6D;IAC7D,MAAM,QAAQ,GAAuB;QACnC,YAAY,EAAE,MAAM,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,KAAK,EAAE,uBAAuB,CAC5B,WAAW,EAAE,6BAA6B,EAAE,CAAC;YAC3C,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,8BAA8B,CAAC;SACvD,CAAC,IAAI,EAAE,CACT;KACF,CAAC;IAEF,yEAAyE;IACzE,sEAAsE;IACtE,yEAAyE;IACzE,wEAAwE;IACxE,sEAAsE;IACtE,uEAAuE;IACvE,qEAAqE;IACrE,4BAA4B;IAC5B,MAAM,mBAAmB,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,WAAW,IAAI,EAAE,CAA4B,CAAC;IAClG,MAAM,WAAW,GAA8C,EAAE,CAAC;IAClE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAChE,IAAI,KAAK,IAAI,IAAI;YAAE,SAAS,CAAC,kCAAkC;QAC/D,MAAM,IAAI,GAAI,cAA0C,EAAE,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,IAAI,IAAI,IAAI;YAAE,SAAS,CAAC,qDAAqD;QACjF,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,GAAG,EAAE,UAAU,IAAI,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,MAAM,SAAS,GAAG,YAAY,IAAI,eAAe,CAAC,YAAY,CAAC;YAC7D,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,8BAA8B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5E,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,IAAI,WAAW,IAAI,SAAS,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,yEAAyE;IACzE,MAAM,GAAG,GAAG,gBAAgB,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAChE,MAAM,YAAY,GAAyB,EAAE,CAAC;IAC9C,IAAI,CAAC;QACH,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,oEAAoE;QACpE,oEAAoE;QACpE,sEAAsE;QACtE,mDAAmD;QACnD,KAAK,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,OAAO,CAAC,IAAI,CACV,qCAAqC,QAAQ,IAAI,IAAI,QAAQ,QAAQ,CAAC,EAAE,YAAY,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CACtG,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,WAAW,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;oBAAE,SAAS;gBAC5C,MAAM,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACpC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC,YAAY,eAAe;YAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,eAAe,CACvB,yBAAyB,EACzB,GAAG,EACH,4BAA4B,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,EAC7C,EAAE,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAC7C,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,sEAAsE;IACtE,kEAAkE;IAClE,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC5C,GAAG,GAAG;YACN,WAAW,EAAE,cAAc;SAC5B,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChC,MAAM,IAAI,eAAe,CACvB,2BAA2B,EAC3B,GAAG,EACH,kCAAkC,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CACpD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAGzB;IACC,OAAO;QACL,QAAQ,EAAE,kBAAkB;QAC5B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,CAAC,kBAAkB,CAAC,QAAQ,EAAE,GAAG;YACpC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAC1C,IAAI,IAAI,CAAC,WAAW,IAAI,OAAO,IAAI,CAAC,WAAW,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;gBAClF,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YACD,yEAAyE;YACzE,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACjD,GAAG,GAAG;gBACN,iBAAiB,EAAE;oBACjB,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;oBACjC,GAAG,GAAG;iBACP;aACF,CAAC,CAAC,CAAC;QACN,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,uBAAuB,EAAE,CAAC,KAAe,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC;IAC5E,kBAAkB,EAAE,CAAC,SAAyB,EAAE,EAAE,CAAC,kBAAkB,CAAC,SAAS,CAAC;IAChF,yBAAyB,EAAE,CAAC,QAA8B,EAAE,EAAE,CAAC,yBAAyB,CAAC,QAAQ,CAAC;CACnG,CAAC;AAEF;;;;;;;;GAQG;AACH,KAAK,UAAU,yBAAyB,CAAC,QAA8B;IACrE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAElC,MAAM,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CACtE,uCAAuC,CACxC,CAAC;IACF,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC9E,MAAM,EAAE,4BAA4B,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAEzF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAA4B,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpC,wEAAwE;YACxE,kFAAkF;YAClF,+DAA+D;YAC/D,sEAAsE;YACtE,IAAI,YAAY,GAAQ,IAAI,CAAC;YAC7B,MAAM,SAAS,GAAG,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC7D,IAAI,SAAS,EAAE,CAAC;gBACd,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,YAAY,GAAG,4BAA4B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAChE,CAAC;YAED,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,gEAAgE;gBAChE,kEAAkE;gBAClE,gEAAgE;gBAChE,iEAAiE;gBACjE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC1D,MAAM,IAAI,eAAe,CACvB,6BAA6B,EAC7B,GAAG,EACH,aAAa,KAAK,CAAC,UAAU,2FAA2F,EACxH;oBACE,kBAAkB,EAAE,KAAK,CAAC,UAAU;oBACpC,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,MAAM,EAAE,uBAAuB;iBAChC,CACF,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YACpE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,8DAA8D;gBAC9D,kEAAkE;gBAClE,kEAAkE;gBAClE,iEAAiE;gBACjE,kEAAkE;gBAClE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC1D,MAAM,IAAI,eAAe,CACvB,6BAA6B,EAC7B,GAAG,EACH,aAAa,KAAK,CAAC,UAAU,2CAA2C,KAAK,CAAC,UAAU,GAAG,EAC3F;oBACE,kBAAkB,EAAE,KAAK,CAAC,UAAU;oBACpC,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,MAAM,EAAE,wBAAwB;iBACjC,CACF,CAAC;YACJ,CAAC;YACD,0BAA0B,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,KAAe;IAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnD,mFAAmF;gBACnF,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,oDAAoD,IAAI,KAAK,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC7F,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,SAAyB;IACnD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,iDAAiD,IAAI,CAAC,IAAI,6BAA6B,CAAC,CAAC;YACtG,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBACxB,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;gBACnC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,4DAA4D,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,KAAsB,EAAE,QAA4B;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,wEAAwE;IACxE,sEAAsE;IACtE,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEnC,IAAI,CAAC;QACH,qEAAqE;QACrE,6DAA6D;QAC7D,MAAM,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC"}

package/dist/services/files/bootstrap.d.ts

@@ -0,0 +1,7 @@
+export declare const DEFAULT_PHOTO_LIBRARY_RELATIVE_PATH = "photos/library";
+/**
+ * Ensure the stable user-owned files layout that Core services and apps may
+ * reference. These directories are not owned by any app lifecycle and must
+ * survive app uninstall or failed app installation.
+ */
+export declare function ensureDefaultFilesLayout(filesRoot?: string): void;

package/dist/services/files/bootstrap.js

@@ -0,0 +1,16 @@
+import { join } from "path";
+import { FILES_ROOT } from "../../config.js";
+import { ensureDirContainer } from "../../utils/fs.js";
+export const DEFAULT_PHOTO_LIBRARY_RELATIVE_PATH = "photos/library";
+/**
+ * Ensure the stable user-owned files layout that Core services and apps may
+ * reference. These directories are not owned by any app lifecycle and must
+ * survive app uninstall or failed app installation.
+ */
+export function ensureDefaultFilesLayout(filesRoot = FILES_ROOT) {
+    const photosRoot = join(filesRoot, "photos");
+    ensureDirContainer(filesRoot);
+    ensureDirContainer(photosRoot);
+    ensureDirContainer(join(filesRoot, DEFAULT_PHOTO_LIBRARY_RELATIVE_PATH));
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/services/files/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../../src/services/files/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,MAAM,CAAC,MAAM,mCAAmC,GAAG,gBAAgB,CAAC;AAEpE;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAS,GAAG,UAAU;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC7C,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC9B,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/B,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,mCAAmC,CAAC,CAAC,CAAC;AAC3E,CAAC"}

package/dist/services/files/external-mounts.js

@@ -0,0 +1,187 @@
+/**
+ * External mounts — let any host directory appear as a virtual subtree
+ * inside ~/.jishushell/files/ (M3 W4 PR-4).
+ *
+ * Design choice: virtualize at the FilesManager layer rather than
+ * planting a symlink under FILES_ROOT.
+ *
+ *   1. The W1 symlink-defense rejects ALL symlinks anywhere in the
+ *      path chain. We don't want to whitelist symlinks generally;
+ *      the alias check must be code-explicit.
+ *   2. Symlinks behave inconsistently across docker bind mounts,
+ *      WebDAV clients, and macOS APFS firmlinks. A virtual layer
+ *      sidesteps the entire mess.
+ *   3. Listing the FILES_ROOT directory cannot include a symlink
+ *      that points outside (the listing helper hides them); a
+ *      virtual entry is just a synthesized DirEntry.
+ *
+ * The user-visible model:
+ *   files/                     ← real POSIX root
+ *   ├── notes/                 ← real subdirectory
+ *   ├── photos/                ← real subdirectory
+ *   └── Documents/             ← VIRTUAL — host_path = /Users/me/Documents
+ *
+ * From every layer's perspective (panel UI, /api/files/*, WebDAV,
+ * Agent drive shim), Documents/ behaves like any other directory.
+ * Mode "ro" is enforced uniformly.
+ *
+ * Sensitive paths flagged by sanity-check (caller can override):
+ *   /etc, /proc, /sys, /dev, /var/log, ~/.ssh, ~/.aws, ~/.gnupg,
+ *   anywhere inside JISHUSHELL_HOME (would create recursion)
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { homedir } from "node:os";
+import { JISHUSHELL_HOME, FILES_ROOT } from "../../config.js";
+const ALIAS_RE = /^[a-zA-Z0-9_][a-zA-Z0-9_.-]{0,63}$/;
+const DENY_PREFIXES = [
+    "/etc",
+    "/proc",
+    "/sys",
+    "/dev",
+    "/run",
+    "/boot",
+    "/var/log",
+    "/var/lib",
+];
+const SUSPICIOUS_HIDDEN = [".ssh", ".aws", ".gnupg", ".config/gh"];
+/**
+ * Reserved aliases that cannot be used because they collide with
+ * panel-internal directories or W1.5 / W2 conventions.
+ */
+const RESERVED_ALIASES = new Set([
+    ".trash",
+    "agent-data",
+    "legacy",
+    "skills",
+    "memory",
+    ".knowledge",
+]);
+/**
+ * Validate a single mount candidate. Returns {ok, errors, warnings};
+ * warnings flag sensitive paths (e.g. ~/.ssh) but do NOT block the
+ * caller — that call is the user's policy decision.
+ */
+export function validateMount(m, existing = []) {
+    const errors = [];
+    const warnings = [];
+    // alias
+    if (!m.alias || typeof m.alias !== "string") {
+        errors.push({ field: "alias", message: "required string" });
+    }
+    else if (!ALIAS_RE.test(m.alias)) {
+        errors.push({
+            field: "alias",
+            message: "must match [a-zA-Z0-9_.-]+ (no slashes), <= 64 chars",
+        });
+    }
+    else if (RESERVED_ALIASES.has(m.alias)) {
+        errors.push({ field: "alias", message: `"${m.alias}" is a reserved alias` });
+    }
+    else if (existing.some((e) => e.alias === m.alias)) {
+        errors.push({ field: "alias", message: `"${m.alias}" already in use` });
+    }
+    // mode
+    if (m.mode !== "ro" && m.mode !== "rw") {
+        errors.push({ field: "mode", message: 'must be "ro" or "rw"' });
+    }
+    // host_path
+    if (!m.host_path || typeof m.host_path !== "string") {
+        errors.push({ field: "host_path", message: "required absolute path" });
+    }
+    else if (!path.isAbsolute(m.host_path)) {
+        errors.push({ field: "host_path", message: "must be absolute" });
+    }
+    else {
+        // Resolve any ~ expansion the caller forgot
+        const resolved = m.host_path.startsWith("~")
+            ? path.join(homedir(), m.host_path.slice(1))
+            : path.resolve(m.host_path);
+        if (!fs.existsSync(resolved)) {
+            errors.push({
+                field: "host_path",
+                message: `path does not exist: ${resolved}`,
+            });
+        }
+        else {
+            try {
+                const stat = fs.lstatSync(resolved);
+                if (stat.isSymbolicLink()) {
+                    errors.push({
+                        field: "host_path",
+                        message: "must be a real directory, not a symlink",
+                    });
+                }
+                else if (!stat.isDirectory()) {
+                    errors.push({
+                        field: "host_path",
+                        message: "must be a directory",
+                    });
+                }
+            }
+            catch (e) {
+                errors.push({
+                    field: "host_path",
+                    message: `cannot stat: ${e.message}`,
+                });
+            }
+            // Recursion guard: must not be inside FILES_ROOT or JISHUSHELL_HOME
+            if (resolved === FILES_ROOT ||
+                resolved.startsWith(FILES_ROOT + path.sep) ||
+                resolved === JISHUSHELL_HOME ||
+                resolved.startsWith(JISHUSHELL_HOME + path.sep)) {
+                errors.push({
+                    field: "host_path",
+                    message: "cannot mount a path inside ~/.jishushell — would cause recursion",
+                });
+            }
+            // Sensitive prefix warnings (do not block)
+            for (const prefix of DENY_PREFIXES) {
+                if (resolved === prefix || resolved.startsWith(prefix + "/")) {
+                    warnings.push(`host_path is under ${prefix} — system directory, mode=ro is strongly recommended`);
+                    break;
+                }
+            }
+            for (const hidden of SUSPICIOUS_HIDDEN) {
+                if (resolved.includes(`/${hidden}`) || resolved.includes(`\\${hidden}`)) {
+                    warnings.push(`host_path contains "${hidden}" — likely holds credentials, mode=ro recommended`);
+                    break;
+                }
+            }
+        }
+    }
+    return { ok: errors.length === 0, errors, warnings };
+}
+/**
+ * Resolve a files/-relative path that MIGHT start with an external
+ * mount alias to its true host filesystem path. Returns null when the
+ * path doesn't begin with a registered alias — caller falls back to
+ * `FILES_ROOT/<rel>`.
+ *
+ * Symlink defense and path-safety MUST run on the returned absolute
+ * path against `mount.host_path` (not FILES_ROOT) — caller's job.
+ */
+export function resolveAcrossMounts(rel, mounts) {
+    if (!rel)
+        return null;
+    const slash = rel.indexOf("/");
+    const first = slash < 0 ? rel : rel.slice(0, slash);
+    const remainder = slash < 0 ? "" : rel.slice(slash + 1);
+    const m = mounts.find((x) => x.alias === first);
+    if (!m)
+        return null;
+    const expanded = m.host_path.startsWith("~")
+        ? path.join(homedir(), m.host_path.slice(1))
+        : path.resolve(m.host_path);
+    const abs = remainder ? path.join(expanded, remainder) : expanded;
+    return { abs, mount: m, remainder };
+}
+/**
+ * Returns true if the given files/-relative path lands inside a
+ * read-only mount (any operation that mutates must reject early).
+ */
+export function isReadOnlyTarget(rel, mounts) {
+    const m = resolveAcrossMounts(rel, mounts);
+    return !!(m && m.mount.mode === "ro");
+}
+//# sourceMappingURL=external-mounts.js.map

package/dist/services/files/external-mounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-mounts.js","sourceRoot":"","sources":["../../../src/services/files/external-mounts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAoB9D,MAAM,QAAQ,GAAG,oCAAoC,CAAC;AAEtD,MAAM,aAAa,GAAG;IACpB,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,UAAU;IACV,UAAU;CACX,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AAEnE;;;GAGG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,YAAY;CACb,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,CAAyB,EACzB,WAA4B,EAAE;IAE9B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,QAAQ;IACR,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC9D,CAAC;SAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,uBAAuB,EAAE,CAAC,CAAC;IAC/E,CAAC;SAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,kBAAkB,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO;IACP,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,YAAY;IACZ,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;IACzE,CAAC;SAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;YAC1C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAE9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,wBAAwB,QAAQ,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACpC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;oBAC1B,MAAM,CAAC,IAAI,CAAC;wBACV,KAAK,EAAE,WAAW;wBAClB,OAAO,EAAE,yCAAyC;qBACnD,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC/B,MAAM,CAAC,IAAI,CAAC;wBACV,KAAK,EAAE,WAAW;wBAClB,OAAO,EAAE,qBAAqB;qBAC/B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,gBAAgB,CAAC,CAAC,OAAO,EAAE;iBACrC,CAAC,CAAC;YACL,CAAC;YAED,oEAAoE;YACpE,IACE,QAAQ,KAAK,UAAU;gBACvB,QAAQ,CAAC,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC;gBAC1C,QAAQ,KAAK,eAAe;gBAC5B,QAAQ,CAAC,UAAU,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,EAC/C,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,kEAAkE;iBAC5E,CAAC,CAAC;YACL,CAAC;YAED,2CAA2C;YAC3C,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;gBACnC,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;oBAC7D,QAAQ,CAAC,IAAI,CACX,sBAAsB,MAAM,sDAAsD,CACnF,CAAC;oBACF,MAAM;gBACR,CAAC;YACH,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;gBACvC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,EAAE,CAAC,EAAE,CAAC;oBACxE,QAAQ,CAAC,IAAI,CACX,uBAAuB,MAAM,mDAAmD,CACjF,CAAC;oBACF,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,MAAuB;IAEvB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACxD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAClE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAW,EACX,MAAuB;IAEvB,MAAM,CAAC,GAAG,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACxC,CAAC"}

package/dist/services/files/files-manager.d.ts

@@ -0,0 +1,265 @@
+import { Readable } from "node:stream";
+import { isHidden } from "../../utils/path-safety.js";
+import { type ExternalMount } from "./external-mounts.js";
+export interface DirEntry {
+    name: string;
+    is_dir: boolean;
+    size: number;
+    mtime: number;
+    etag: string;
+    mime?: string;
+    child_count?: number;
+}
+export interface DirListing {
+    path: string;
+    entries: DirEntry[];
+    quota_mb: number;
+    used_mb: number;
+    available_mb: number;
+}
+export interface FileStat {
+    is_dir: boolean;
+    size: number;
+    mtime: number;
+    etag: string;
+    mime?: string;
+}
+export interface ReadStreamResult {
+    /** Lazy: opens the file only when called. Avoids leaking fds in 304 paths. */
+    openStream: () => Readable;
+    etag: string;
+    mime: string;
+    size: number;
+    mtime: number;
+}
+export interface ReadSmallResult {
+    buf: Buffer;
+    etag: string;
+    mime: string;
+    truncated: boolean;
+    size: number;
+}
+export interface WriteOptions {
+    ifMatch?: string;
+    overwrite?: boolean;
+    expectedSize?: number;
+}
+export interface WriteResult {
+    etag: string;
+    size: number;
+    mime: string;
+}
+export interface QuotaInfo {
+    quota_mb: number;
+    used_mb: number;
+    available_mb: number;
+    trash_mb: number;
+}
+export interface FilesManagerConfig {
+    filesRoot?: string;
+    trashRoot?: string;
+    auditLog?: string;
+    quotaMb?: number;
+    maxUploadMb?: number;
+    textPreviewMaxKb?: number;
+    blockedExtensions?: Set<string>;
+    /**
+     * External mount points — virtual subtrees of files/ that resolve
+     * to host paths outside FILES_ROOT. Validated by the caller (typically
+     * loaded from core.json:external_mounts).
+     */
+    externalMounts?: ExternalMount[];
+}
+export declare class FilesError extends Error {
+    code: string;
+    httpStatus: number;
+    constructor(message: string, code: string, httpStatus: number);
+}
+export interface SidecarMeta {
+    schema_version: 1;
+    sha256: string;
+    size: number;
+    mtime: number;
+    indexed_at: number;
+    tags?: string[];
+    summary?: string;
+    links?: Array<{
+        path: string;
+        rel: string;
+    }>;
+    agent_notes?: string;
+    [key: string]: any;
+}
+export interface SearchHit {
+    path: string;
+    sha256: string;
+    snippet: string;
+    score: number;
+}
+export interface ReindexResult {
+    indexed: number;
+    skipped: number;
+    errors: number;
+}
+export declare class FilesManager {
+    private filesRoot;
+    private trashRoot;
+    private auditLog;
+    private quotaMb;
+    private maxUploadMb;
+    private textPreviewMaxKb;
+    private blockedExtensions;
+    private externalMounts;
+    private _indexDb;
+    private _indexDbRegistered;
+    constructor(cfg?: FilesManagerConfig);
+    /**
+     * Replace the current external-mount set; used when core.json is
+     * mutated through routes/external-mounts.ts so a new mount becomes
+     * visible without restarting the server.
+     */
+    setExternalMounts(mounts: ExternalMount[]): void;
+    list(relPath: string, opts?: {
+        showHidden?: boolean;
+    }): Promise<DirListing>;
+    stat(relPath: string): Promise<FileStat>;
+    readStream(relPath: string): Promise<ReadStreamResult>;
+    readSmall(relPath: string, maxBytes: number): Promise<ReadSmallResult>;
+    writeStream(relPath: string, source: Readable, opts?: WriteOptions): Promise<WriteResult>;
+    /**
+     * Copy one file through the same path, mount, quota, extension, symlink,
+     * atomic-write, and audit boundary used by ordinary file writes.
+     */
+    copy(fromRel: string, toRel: string, overwrite?: boolean): Promise<WriteResult>;
+    mkdir(relPath: string): Promise<void>;
+    move(fromRel: string, toRel: string, overwrite?: boolean): Promise<void>;
+    remove(relPath: string): Promise<void>;
+    private removeInternal;
+    /**
+     * Resolve a files/-relative path to its absolute host filesystem path.
+     *
+     * Why a public API: the drive-shim (and the agents that call it via MCP)
+     * needs to hand the resulting absolute path to IM channel plugins
+     * (Feishu / WeChat / Telegram / ...) that send files. Those plugins read
+     * from the local filesystem, not via HTTP. The OpenClaw container runs
+     * with host==container bind mounts (see buildVolumes in
+     * src/services/integrations/openclaw/integration.ts), so the same absolute
+     * string is valid on both sides; raw_exec / process service managers
+     * run the agent natively on the host, where the path is also directly
+     * usable.
+     *
+     * External mounts: a path whose first segment is an external mount
+     * alias resolves into the mount's host_path. The returned abs_path
+     * points at the real host location; external_mount is set so the
+     * caller can warn the user that this is outside files/. mode is
+     * propagated so writers know if it's read-only.
+     *
+     * Symlink policy: if the path resolves to a symlink we still surface
+     * the abs_path (callers may legitimately want to know where it points
+     * conceptually), but exists is reported as false to discourage handing
+     * symlinks to channel plugins.
+     */
+    resolveLocalPath(relPath: string): Promise<{
+        abs_path: string;
+        exists: boolean;
+        external_mount?: string;
+        external_mount_mode?: "ro" | "rw";
+        is_dir?: boolean;
+        size?: number;
+        mtime?: number;
+    }>;
+    quota(): Promise<QuotaInfo>;
+    private assertQuotaAvailable;
+    audit(op: string, relPath: string, meta?: Record<string, any>): void;
+    /**
+     * Resolve a files/-relative path. If the first segment matches a
+     * registered external mount alias the path is virtualized into the
+     * mount's host_path; otherwise the path resolves under FILES_ROOT.
+     *
+     * Symlink defense (assertNoSymlinkInAncestors) and lstat checks in
+     * the calling op still run on the absolute path returned here, so
+     * symlinks INSIDE an external mount are still rejected.
+     */
+    private resolve;
+    private resolveOp;
+    /**
+     * Refuse mutations that target a read-only external mount. Called by
+     * write / move / delete / mkdir before any fs work.
+     */
+    private assertWritable;
+    /**
+     * Defense layer 3 (per path-safety.ts header): refuse symlinks at the
+     * target path AND refuse paths that traverse a symlink in their parent
+     * chain inside the trust root.
+     *
+     * For external mounts the trust root is the mount's host_path (the
+     * user explicitly chose that directory; symlinks inside it are their
+     * own filesystem and not an attack we need to defend against). For
+     * regular files/ paths the trust root is FILES_ROOT.
+     */
+    private statOrThrow;
+    /**
+     * Walk up from `abs` toward the relevant trust root and refuse if any
+     * intermediate component is a symlink. Trust root is FILES_ROOT for
+     * regular paths and the matching external-mount host_path for paths
+     * that fall inside an external mount.
+     */
+    private assertNoSymlinkInAncestors;
+    /**
+     * Find the trust root for an absolute path: either an external mount's
+     * host_path (if abs is inside one) or FILES_ROOT.
+     */
+    private trustRootFor;
+    private checkExtension;
+    /**
+     * Returns the knowledge directory path (does NOT create it).
+     */
+    private get knowledgeDir();
+    /**
+     * Returns the SQLite DB path.
+     */
+    private get indexDbPath();
+    /**
+     * Returns the sidecar path for a given sha256.
+     */
+    private sidecarPath;
+    /**
+     * Creates ~/.jishushell/files/.knowledge/ (mode 0700) and, on first
+     * creation only, writes a README.md explaining the directory is
+     * panel-private metadata. README is idempotent: only written when the
+     * file doesn't already exist, never overwritten.
+     */
+    private ensureKnowledgeDir;
+    /**
+     * Lazy-initialize the SQLite FTS5 handle. Creates the .knowledge dir
+     * and the schema on first call.
+     */
+    private getIndexDb;
+    /**
+     * Search the FTS5 index.
+     */
+    searchIndex(query: string, opts?: {
+        limit?: number;
+        pathPrefix?: string;
+    }): Promise<SearchHit[]>;
+    /**
+     * Read a sidecar JSON for a file identified by sha256 or path.
+     */
+    getMeta(args: {
+        sha256?: string;
+        path?: string;
+    }): Promise<SidecarMeta | null>;
+    /**
+     * Write (merge or replace) a sidecar for a given sha256.
+     */
+    setMeta(sha256: string, payload: Partial<SidecarMeta>, opts?: {
+        merge?: boolean;
+    }): Promise<SidecarMeta>;
+    /**
+     * Walk the file tree and upsert text-indexable files into the FTS5 index.
+     */
+    reindex(opts?: {
+        pathPrefix?: string;
+    }): Promise<ReindexResult>;
+}
+export { isHidden };