执行外部命令来自配置/变量
packages/controller/src/docker.ts:22
const child = spawn(file, args, {stdio: ['pipe', 'pipe', 'pipe'], windowsHide: true, env: options.env ?? minimalEnv()})读取本地文件
packages/controller/src/docker.ts:34
export async function assertTrustedExecutable(file: string): Promise<void> { await assertNoSymlinkComponents(file); const info = await lstat(file); if读取本地文件
packages/controller/src/docker.ts:35
export async function assertDockerSocket(host: string): Promise<void> { const socket = host.slice('unix://'.length); await assertNoSymlinkComponents(s发起网络请求
packages/controller/src/docker.ts:64
async call(request: RemoteCall, signal?: AbortSignal): Promise<unknown> { const url = new URL(this.config.url); if (url.protocol !== 'https:' || url.u读取本地文件
packages/controller/src/file-lock.ts:20
const info = await lstat(file)删除本地文件
packages/controller/src/file-lock.ts:58
await unlink(candidate)读取本地文件
packages/controller/src/file-lock.ts:66
const current = await lstat(target)删除本地文件
packages/controller/src/file-lock.ts:67
if (current.dev === candidateDevice && current.ino === candidateInode) await unlink(target)删除本地文件
packages/controller/src/file-lock.ts:70
try { await unlink(candidate) } catch (cleanupError) { if ((cleanupError as NodeJS.ErrnoException).code !== 'ENOENT') throw cleanupError }读取本地文件
packages/controller/src/file-lock.ts:75
const before = await lstat(target)读取本地文件
packages/controller/src/file-lock.ts:78
const current = await lstat(target)写入本地文件
packages/controller/src/file-lock.ts:82
await rename(target, stale); await syncDirectory(root); await unlink(stale); await syncDirectory(root)删除本地文件
packages/controller/src/file-lock.ts:82
await rename(target, stale); await syncDirectory(root); await unlink(stale); await syncDirectory(root)读取本地文件
packages/controller/src/file-lock.ts:93
const assertOwnership = async () => { const info = await lstat(target); if (info.dev !== ownedDevice || info.ino !== ownedInode || (await readLock(tar删除本地文件
packages/controller/src/file-lock.ts:102
if (current.token === token) { await unlink(target); await syncDirectory(root) }读取本地文件
packages/controller/src/main.ts:16
try { const info = await lstat(config.socketPath); if (!info.isSocket() || info.isSymbolicLink() || (typeof process.getuid === 'function' && info.uid 删除本地文件
packages/controller/src/main.ts:16
try { const info = await lstat(config.socketPath); if (!info.isSocket() || info.isSymbolicLink() || (typeof process.getuid === 'function' && info.uid 读取本地文件
packages/controller/src/main.ts:19
const socketMode=config.socketMode??0o600;server.once('listening',async()=>{const info=await lstat(config.socketPath);if(!info.isSocket()||(typeof pro读取本地文件
packages/controller/src/security.ts:17
export async function assertNoSymlinkComponents(target: string): Promise<void> { for (const component of await components(target)) { try { if ((await 读取本地文件
packages/controller/src/security.ts:18
export async function ensureOwnedRoot(root: string): Promise<void> { if (!patterns.absolute.test(root)) throw new Error('writable root must be absolut写入本地文件
packages/controller/src/security.ts:18
export async function ensureOwnedRoot(root: string): Promise<void> { if (!patterns.absolute.test(root)) throw new Error('writable root must be absolut读取本地文件
packages/controller/src/security.ts:19
export async function assertOwnedRegularFile(file: string, maximumBytes = 64 * 1024): Promise<void> { await assertNoSymlinkComponents(file); const inf读取本地文件
packages/controller/src/security.ts:21
export async function durableAtomicWrite(target: string, contents: string | Buffer, mode = 0o600): Promise<void> { await assertNoSymlinkComponents(pat写入本地文件
packages/controller/src/security.ts:21
export async function durableAtomicWrite(target: string, contents: string | Buffer, mode = 0o600): Promise<void> { await assertNoSymlinkComponents(pat读取本地文件
packages/controller/src/security.ts:123
log(request: string, error: unknown): Promise<void> { const protectedDetails = safeCommandDetails(error); const source = error instanceof Error ? `${e写入本地文件
packages/controller/src/security.ts:123
log(request: string, error: unknown): Promise<void> { const protectedDetails = safeCommandDetails(error); const source = error instanceof Error ? `${e读取本地文件
packages/controller/src/state.ts:49
private async target(secret: SecretDefinition): Promise<string> { const target = path.resolve(secret.target); const root = path.resolve(this.root); if读取本地文件
packages/controller/src/state.ts:50
async status(secret: SecretDefinition): Promise<{configured: boolean; updatedAt: string | null}> { const target = await this.target(secret); try { con发起网络请求
packages/plugin/src/client.ts:10
const req = http.request({socketPath: this.socketPath, path: route, method: options.method ?? 'GET', headers: payload ? {'content-type': 'application/发起网络请求
packages/plugin/src/index.ts:15
const call = (route: string, options?: {method?: string; body?: unknown; signal?: AbortSignal}): any => contained(transport.request(route, options))读取本地文件
packages/proxy/src/main.ts:8
const config = parseProxyConfig(JSON.parse(await readFile(path, 'utf8')))读取本地文件
packages/proxy/src/proxy.ts:47
const info = await lstat(component)读取本地文件
packages/proxy/src/proxy.ts:51
const info = await lstat(component)读取本地文件
packages/proxy/src/proxy.ts:57
const info = await lstat(file)读取本地文件
packages/proxy/src/proxy.ts:79
if ((await lstat(file)).isSymbolicLink()) throw new Error('proxy key file is a symlink')发起网络请求
packages/proxy/src/proxy.ts:130
const request = http.request({agent, host: 'controller.local', method: 'GET', path: '/v1/proxy-handshake', headers: {'x-dsh-proxy-assertion': assertio写入本地文件
packages/proxy/src/proxy.ts:167
await mkdir(path.dirname(config.socketPath), {recursive: true, mode: 0o700}); await trustedParents(config.socketPath)读取本地文件
packages/proxy/src/proxy.ts:168
const existing = await lstat(config.socketPath).catch(() => undefined)删除本地文件
packages/proxy/src/proxy.ts:170
if (existing) await rm(config.socketPath)读取本地文件
packages/proxy/src/proxy.ts:179
const info = await lstat(config.socketPath)发起网络请求
packages/proxy/src/proxy.ts:209
upstream = http.request({agent: lane.agent, host: 'controller.local', path: target, method, headers}, response => {删除本地文件
packages/proxy/src/proxy.ts:242
await rm(config.socketPath, {force: true})