fix: stage config-profile mounts as directories so ~/.config stays writable

- Switch apply_resolved_profile from per-file bind mounts to one
  directory-level bind mount per ResolvedMount target.
- Stage all configured files under instance_dir/mounts/<sanitized_target>
  and bind-mount that directory, so Docker no longer creates a root-owned
  parent directory such as ~/.config.
- Propagate read-only mode ('ro') as the 'readonly' flag on volume entries.
- Update unit tests to expect directory-level mounts and add coverage for
  readonly/writable flags.

Quality gates: python3 -m py_compile, pytest (313 passed, 34 skipped),
npm run typecheck, npm run lint.

This commit is contained in:

Developer

2026-06-13 11:56:48 +00:00

parent d78ca8a9d5

commit d395aaf574

21 changed files with 206 additions and 53 deletions

									
										openspec/changes/config-profile-directory-mounts/.openspec.yaml
									
		+4
		
												View File
												
				@@ -0,0 +1,4 @@

				name: config-profile-directory-mounts

				status: completed

				completed_at: 2026-06-13

				started_at: 2026-06-13