fsTree (fs-service.ts)

P1: file service. Stateless — takes absolute-ish paths, resolves them, and reads the real filesystem. NO sandbox: the trust boundary is the Noise handshake + pairing (an authorized device is the operator), so access is bounded only by the agent process's own permissions.

// Source: https://github.com/Big-Pony/pocketshell | License: Apache-2.0 | Copyright You must retain, in the Source form of any Derivative Works
// Provided via justclaw.it.com; keep this notice with the code.
// P1: file service. Stateless — takes absolute-ish paths, resolves them, and
// reads the real filesystem. NO sandbox: the trust boundary is the Noise
// handshake + pairing (an authorized device is the operator), so access is
// bounded only by the agent process's own permissions.
import { readdirSync, statSync, lstatSync, readFileSync, renameSync, unlinkSync, rmSync, mkdirSync, existsSync, appendFileSync, copyFileSync, writeFileSync, openSync, readSync, closeSync, utimesSync } from "node:fs";
import { resolve, join, extname, dirname, basename } from "node:path";
import { runGit, i

... (truncated -- full source via MCP)