Feature/macos vfs

.beads/.gitignore

@@ -0,0 +1,11 @@
+# Database
+*.db
+*.db-shm
+*.db-wal
+
+# Lock files
+*.lock
+
+# Temporary
+last-touched
+*.tmp

.beads/config.yaml

@@ -0,0 +1,4 @@
+# Beads Project Configuration
+# issue_prefix: bd
+# default_priority: 2
+# default_type: task

.beads/metadata.json

@@ -0,0 +1,4 @@
+{
+  "database": "beads.db",
+  "jsonl_export": "issues.jsonl"
+}

.envrc

@@ -0,0 +1,10 @@
+# Automatically load environment variables from .env when entering this directory
+# Requires direnv (brew install direnv) and `eval "$(direnv hook zsh)"` in your ~/.zshrc
+
+# Load variables from .env (use plain `dotenv` for compatibility with older direnv versions)
+dotenv .env
+
+# High-performance Craft/CMake defaults for this project
+export CRAFT_TARGET=macos-clang-arm64
+export MAKEFLAGS="-j$(sysctl -n hw.ncpu)"
+export CMAKE_BUILD_PARALLEL_LEVEL=$(sysctl -n hw.ncpu)

.gitattributes

@@ -3,3 +3,4 @@
 .gitattributes          export-ignore
 .commit-template        export-ignore
 binary/                 export-ignore
+.mulch/expertise/*.jsonl merge=union

.github/workflows/main.yml

@@ -182,7 +182,6 @@ jobs:
         & "${env:GITHUB_WORKSPACE}/.github/workflows/.craft.ps1" -c --run python3 -m clang_html "$([System.IO.Path]::GetTempPath())/clang-tidy.log" -o "${env:GITHUB_WORKSPACE}/binaries/clang-tidy.html"
 
     - name: Package
-      if: matrix.target  != 'macos-clang-arm64'
       run: |
         & "${env:GITHUB_WORKSPACE}/.github/workflows/.craft.ps1" -c --no-cache --package opencloud/opencloud-desktop
 

.gitignore

@@ -27,6 +27,7 @@ t1.cfg
 *.user
 *.sln.docstates
 .drone-secrets.env
+.env
 
 # Build results
 [Dd]ebug/
@@ -178,3 +179,6 @@ FakesAssemblies/
 test/gui/config.ini
 test/gui/reports
 */**/__pycache__/
+tools/crash_reports/
+.claude
+*/**/.claude

.mulch/README.md

@@ -0,0 +1,21 @@
+# .mulch/
+
+This directory is managed by [mulch](https://github.com/jayminwest/mulch) — a structured expertise layer for coding agents.
+
+## Key Commands
+
+- `mulch init`      — Initialize a .mulch directory
+- `mulch add`       — Add a new domain
+- `mulch record`    — Record an expertise record
+- `mulch edit`      — Edit an existing record
+- `mulch query`     — Query expertise records
+- `mulch prime [domain]` — Output a priming prompt (optionally scoped to one domain)
+- `mulch search`   — Search records across domains
+- `mulch status`    — Show domain statistics
+- `mulch validate`  — Validate all records against the schema
+- `mulch prune`     — Remove expired records
+
+## Structure
+
+- `mulch.config.yaml` — Configuration file
+- `expertise/`        — JSONL files, one per domain

.mulch/expertise/debugging.jsonl

@@ -0,0 +1,6 @@
+{"type":"guide","name":"macOS log show for FileProvider debugging","description":"Use: /usr/bin/log show --predicate 'process CONTAINS \"OpenCloud\" OR process CONTAINS \"FileProviderExt\"' --last 30s --debug --info. Filter with grep -E for specific events. Key patterns: 'configureAccount|authenticate|token' for auth, 'enumerate|Parsed|PROPFIND' for listing, 'fetchContents|GET|Downloaded' for downloads, 'PUT|modify|upload' for uploads, 'XPC|invalidat' for connection issues. Note: Swift logger.info() messages with string interpolation are redacted by macOS privacy - use NSLog for always-visible debug output.","classification":"foundational","recorded_at":"2026-02-17T02:47:03.474Z","tags":["logging","macos","debug"],"id":"mx-438643"}
+{"type":"convention","content":"When FileProvider extension has cached error states from previous bugs, clearing domains is required to reset: pkill -x OpenCloud, then run OpenCloud --clear-fileprovider-domains, then relaunch. The app must NOT be running when clearing domains or it fails with 'Already running'.","classification":"tactical","recorded_at":"2026-02-17T02:47:06.780Z","tags":["fileprovider","reset","domains"],"id":"mx-e8295b"}
+{"type":"convention","content":"Keychain credentials are per-account. Check with: security find-generic-password -s OpenCloud. Config at ~/Library/Preferences/OpenCloud/opencloud.cfg stores account URL and UUID. Credential key format: OpenCloud_credentials:<server>:<uuid>:<user>. If keychain entry is missing for the configured account, app shows signed out.","classification":"tactical","recorded_at":"2026-02-17T02:47:09.850Z","tags":["keychain","credentials","account"],"id":"mx-bae798"}
+{"type":"guide","name":"FileProvider system inspection commands","description":"fileproviderctl dump - show FileProvider domain state. pluginkit -m -v 2>&1 | grep opencloud - check registered plugins. ls ~/Library/CloudStorage/ - check mount points. ls /System/Volumes/Data/.FileProviderStorage/ - check FP storage. otool -L binary | grep OpenCloud - check dylib linkage. otool -l binary | grep -A2 LC_RPATH - extract rpath load commands.","classification":"tactical","recorded_at":"2026-02-17T02:48:01.108Z","tags":["fileprovider","debugging","tools"],"id":"mx-0c43f0"}
+{"type":"failure","description":"NSLog messages with string interpolation appear as '(Foundation) <private>' in macOS unified logging due to privacy redaction. logger.info() with interpolation is also redacted. Cannot see actual values in log show output.","resolution":"Use os_log with explicit public format specifiers, or use strings without interpolation for debugging. For quick checks, use /usr/bin/strings on the binary to verify fix strings are compiled in.","classification":"foundational","recorded_at":"2026-02-17T03:43:39.079Z","tags":["nslog","privacy","redaction","logging"],"id":"mx-fa1b26"}
+{"type":"failure","description":"set -euo pipefail in cleanup-fileprovider.sh caused silent script death: 'rm -rf ... 2>/dev/null' hides stderr but still returns non-zero exit code, triggering set -e. Also '[ cond1 ] && [ cond2 ] && echo ...' returns non-zero when cond2 is false, killing the script.","resolution":"Use '|| true' after rm commands that may fail, and use proper 'if ... then' blocks instead of && chains for conditional output.","classification":"tactical","recorded_at":"2026-02-18T06:27:36.300Z","id":"mx-999f58"}