Rebuild NTFS mounting core and add native macOS menu bar app

.github/workflows/checks.yml

@@ -0,0 +1,61 @@
+name: Checks
+on:
+  push:
+  pull_request:
+permissions:
+  contents: read
+jobs:
+  core:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Shell syntax and regression simulations
+        run: |
+          for script in mountfs.sh scripts/build-app.sh tests/core_tests.sh tests/macos_metadata.sh tests/ntfs_identity_tests.sh tests/media_identity_tests.sh tests/macos_media_identity.sh tests/macos_helper_service.sh tests/mount_state_tests.sh; do bash -n "$script"; done
+          bash tests/core_tests.sh
+          bash tests/ntfs_identity_tests.sh
+          bash tests/media_identity_tests.sh
+          bash tests/mount_state_tests.sh
+          cc -Wall -Wextra -Werror -I Sources/MountFSSystemTools/include Sources/MountFSSystemTools/Tools.c tests/tool_runner_tests.c -o /tmp/mountfs-tool-tests
+          /tmp/mountfs-tool-tests
+          bash mountfs.sh --help
+          test "$(bash mountfs.sh --version)" = 0.3.4
+      - name: ShellCheck
+        if: runner.os == 'Linux'
+        run: shellcheck mountfs.sh scripts/build-app.sh tests/core_tests.sh tests/macos_metadata.sh tests/ntfs_identity_tests.sh tests/media_identity_tests.sh tests/macos_media_identity.sh tests/macos_helper_service.sh tests/mount_state_tests.sh
+      - name: Check actual macOS plist schema and Swift metadata tests
+        if: runner.os == 'macOS'
+        run: |
+          bash tests/macos_metadata.sh
+          swift test
+      - name: Build local menu bar app
+        if: runner.os == 'macOS'
+        run: |
+          mkdir -p dist/mouNTFS.app/Contents/Resources
+          touch dist/mouNTFS.app/Contents/Resources/stale-build-marker
+          bash scripts/build-app.sh
+          test ! -e dist/mouNTFS.app/Contents/Resources/stale-build-marker
+          bash tests/macos_media_identity.sh
+          bash tests/macos_helper_service.sh
+          bash tests/macos_sandbox_mapping.sh
+          bash tests/macos_execution_boundary.sh
+          VERSION=$(bash mountfs.sh --version)
+          codesign --verify --deep --strict "dist/mouNTFS.app"
+          test -f "dist/mouNTFS.app/Contents/Resources/mountfs.sh"
+          test -s "dist/mouNTFS.app/Contents/Resources/AppIcon.icns"
+          ARCHIVE="dist/mouNTFS-$VERSION-dev-$(uname -m).zip"
+          unzip -Z1 "$ARCHIVE" > /tmp/mountfs-archive-entries.txt
+          grep -E '^mouNTFS\.app/Contents/Info\.plist$' /tmp/mountfs-archive-entries.txt
+          ! grep -E '^mouNTFS-[^/]+\.app/' /tmp/mountfs-archive-entries.txt
+          echo "MOUNTFS_VERSION=$VERSION" >> "$GITHUB_ENV"
+      - name: Upload development app
+        if: runner.os == 'macOS'
+        uses: actions/upload-artifact@v4
+        with:
+          name: mouNTFS-${{ env.MOUNTFS_VERSION }}-development-app
+          path: dist/mouNTFS-*-dev-*.zip
+          retention-days: 14

.github/workflows/documentation-images.yml

@@ -0,0 +1,22 @@
+name: Documentation images
+on:
+  workflow_dispatch:
+  push:
+    paths:
+      - scripts/capture-docs.sh
+      - .github/workflows/documentation-images.yml
+      - Sources/MountFSApp/**
+permissions:
+  contents: read
+jobs:
+  capture:
+    runs-on: macos-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Capture native UI with sample volumes
+        run: bash scripts/capture-docs.sh docs/images
+      - uses: actions/upload-artifact@v4
+        with:
+          name: documentation-ui-screenshots
+          path: docs/images/*.png
+          retention-days: 14

.gitignore

@@ -34,4 +34,9 @@ Temporary Items
 # iCloud generated files
 *.icloud
 
-# End of https://www.toptal.com/developers/gitignore/api/macos
+# End of https://www.toptal.com/developers/gitignore/api/macos
+
+# Local Swift builds and development app bundles
+.build/
+.swiftpm/
+dist/

CONTRIBUTING.md

@@ -0,0 +1,86 @@
+# Contributing
+
+## Local development
+
+App builds require macOS 13+ and Xcode Command Line Tools. From this checkout:
+
+```bash
+bash scripts/build-app.sh
+open dist/mouNTFS.app
+swift test
+```
+
+After building the native identity executable, the Bash 3.2-compatible core can also be used from this checkout:
+
+```bash
+bash mountfs.sh --list
+bash mountfs.sh --diagnose
+bash mountfs.sh --device disk4s1
+bash mountfs.sh --cli --device disk4s1
+```
+
+`disk4s1` is an example; identify the actual partition before acting. Run as the
+normal user: CLI mode requests sudo itself. The app/script do not install drivers.
+Mounting requires the bundled or checkout-built native identity executable for
+protected execution and system-wide locking. The script alone supports read-only
+listing/diagnosis, not mounting. Exit codes: 0 success, 1 failure, 2 cancellation/invalid input,
+130 interruption.
+
+## Checks and boundaries
+
+```bash
+bash -n mountfs.sh
+bash tests/core_tests.sh
+bash tests/ntfs_identity_tests.sh
+bash tests/media_identity_tests.sh
+bash tests/mount_state_tests.sh
+```
+
+macOS CI adds real metadata parsing, Swift tests, signing pins and disposable root
+launchd status checks. The helper test is intentionally restricted to GitHub Actions
+runners; do not run it on a daily-use Mac. Automated tests do not establish NTFS
+hardware compatibility, SMAppService approval or biometric behavior.
+See [VALIDATION.md](docs/VALIDATION.md) for remaining physical tests and
+[AUTHORIZATION.md](docs/AUTHORIZATION.md) for signing and privileged boundaries.
+
+## Documentation structure
+
+| Audience | English | Simplified Chinese |
+|---|---|---|
+| Project overview | README.md | README.zh-CN.md |
+| Setup/use/troubleshooting | docs/USAGE.en.md | docs/USAGE.zh-CN.md |
+
+Keep paired documents aligned in section order, functionality, commands, limitations,
+image captions and links. Each pair has a language switch at the top. The application
+UI is currently English; translated docs do not imply a localized UI.
+
+Development documents are English-only: ROADMAP.md, CONTRIBUTING.md,
+docs/AUTHORIZATION.md, docs/VALIDATION.md and docs/PROMOTION.md. The promotion guide
+maintains aligned bilingual copy, artwork and brand rules. Explain user-visible behavior in user
+docs; put implementation choices, experiments and specific test history in the
+appropriate developer document. Planned work belongs in the roadmap.
+
+## Native UI captures
+
+```bash
+bash scripts/capture-docs.sh docs/images
+```
+
+Requires a macOS GUI session and screen-capture access. The script copies the sources
+into a temporary directory and builds the actual app with documentation-only sample
+volumes and an example report. It reuses the production menu builder, branded header
+and report window. It bypasses disk scanning, helper setup, driver execution and
+authorization. No screenshot mode is added to the distributed app.
+
+The **Documentation images** workflow produces the PNGs as an artifact. Review images
+before checking them into docs/images. Both language versions use the same screenshots
+and disclose sample data. Capture all four states together after relevant UI changes:
+read-only, writable, progress and the diagnostic report. Do not present these images
+as evidence of a successful real-drive mount or helper setup.
+
+## Safety reviews
+
+Focus on device identity, bounded authorization, exclusive write probes and
+same-volume recovery. No forced NTFS recovery or clearing hibernation is supported.
+Keep arbitrary shell commands and caller-selected executables out of the privileged
+API. Distinguish simulation results from independently confirmed physical behavior.

Package.swift

@@ -0,0 +1,19 @@
+// swift-tools-version: 5.9
+import PackageDescription
+
+let package = Package(
+    name: "MountFS",
+    platforms: [.macOS(.v13)],
+    products: [.executable(name: "MountFS", targets: ["MountFSApp"]),
+               .executable(name: "MountFSIdentity", targets: ["MountFSIdentity"]),
+               .executable(name: "MountFSHelper", targets: ["MountFSHelper"])],
+    targets: [
+        .target(name: "MountFSCore"),
+        .target(name: "MountFSSystemTools"),
+        .target(name: "MountFSPrivileged", dependencies: ["MountFSSystemTools"]),
+        .executableTarget(name: "MountFSHelper", dependencies: ["MountFSPrivileged"]),
+        .executableTarget(name: "MountFSIdentity", dependencies: ["MountFSPrivileged", "MountFSSystemTools"], path: "Sources/MountFSIdentity"),
+        .executableTarget(name: "MountFSApp", dependencies: ["MountFSCore", "MountFSPrivileged"], path: "Sources/MountFSApp"),
+        .testTarget(name: "MountFSCoreTests", dependencies: ["MountFSCore", "MountFSPrivileged"])
+    ]
+)