Randalix 63aafdf274 fix(files): serve remote-case attachments, the path a click takes outside the case ...

A clicked path that points OUTSIDE the case directory goes through the attachment
routes (the frontend's `_isExternalPreviewPath` sends every absolute path not under
`workingDir` to `POST /attachments`), and those had the same local-`fs` assumption
as file-raw: `realpathSync`/`fs.stat` on a path that only exists on the remote host,
so the file never opened — the case the #415 report was actually about.

- `registerExternalAttachment()` accepts `remote` and resolves through
  `remoteProbePaths` (canonical path, size/mtime, kind, plus the workspace root for
  the confinement check). Everything around it — blocklist, extension allowlist,
  workspace confinement, registry/dedupe — is now shared by both branches, so the
  remote path cannot drift from the local one.
- The by-id routes (`raw`, `preview`, `thumbnail`), the metadata poll and the
  attachment history list resolve over ssh too. `raw` streams with the same
  Range contract as file-raw; `preview` (office) and `thumbnail` answer 400 for a
  remote record; an unreachable host answers 502, a vanished file 404.
- Which host a record is read from follows the SESSION, never the path string: the
  same absolute path is a different file on each host, and a remote session never
  falls back to a local file with that name.
- Codex generated artifacts keep force-workspace confinement for a remote case: the
  well-known artifact directories are anchored at THIS host's home, so only a file
  inside the remote workspace is trusted.

Still local-only by design: writes, office conversion, thumbnails, the file
tree/picker and tail-file.

2026-09-14 17:06:42 +02:00

..

index.ts

fix(test): guard the CASES_DIR delete + harden the data-dir teardown

2026-09-02 20:41:24 -05:00

mock-route-context.ts

fix(omp): retire the old row on resume, and let DELETE remove persisted-only sessions

2026-08-28 11:32:30 -05:00

mock-session.ts

fix(files): serve remote-case attachments, the path a click takes outside the case

2026-09-14 17:06:42 +02:00

mock-state-store.ts

test: add shared mock infrastructure and route tests (phase 7)

2026-03-01 14:33:18 +01:00

test-helpers.ts

docs(test): name the real reason the suite could reach ~/.codeman

2026-09-04 13:50:22 +02:00