docs: rewrite README for v2.0 pure Swift + FSKit architecture

Author: ebreen

README.md

@@ -1,138 +1,109 @@
-# CloudMount — Mount cloud storage as native macOS drives.
+# CloudMount -- Mount cloud storage as native macOS volumes.
 
-macOS 12+ menu bar app that mounts Backblaze B2 buckets as local FUSE volumes in Finder. Browse, read, write, and delete files as if they were on a local disk. Native SwiftUI interface, Rust FUSE daemon, no Electron. Free and open source alternative to Mountain Duck.
+Pure Swift macOS 26+ menu bar app that mounts Backblaze B2 buckets as local Finder volumes using Apple's FSKit framework. Browse, read, write, and delete files as if they were on a local disk. No FUSE, no kernel extensions, no Electron.
 
 <!-- <img src="screenshot.png" alt="CloudMount menu bar screenshot" width="520" /> -->
 
 ## Install
 
 ### Requirements
-- macOS 12+ (Monterey)
-- [macFUSE](https://osxfuse.github.io/) (CloudMount will guide you through installation on first launch)
+- macOS 26 (Tahoe) or later
+- Enable the FSKit extension after install: System Settings -> General -> Login Items & Extensions -> CloudMount
 
-### Build from source
-
-**Swift UI app:**
+### Homebrew
 ```bash
-swift build
+brew install ebreen/cloudmount/cloudmount
 ```
 
-**Rust FUSE daemon:**
+### GitHub Releases
+Download the latest DMG: <https://github.com/ebreen/cloudmount/releases>
+
+Open the DMG and drag CloudMount to Applications.
+
+### Build from source
 ```bash
-cd Daemon/CloudMountDaemon
-cargo build --release
+brew install xcodegen create-dmg
+xcodegen generate
+xcodebuild archive \
+  -project CloudMount.xcodeproj \
+  -scheme CloudMount \
+  -configuration Release \
+  -archivePath build/CloudMount.xcarchive
 ```
 
 ### First run
-- Launch CloudMount — it appears in your menu bar (no Dock icon).
-- If macFUSE isn't installed, you'll see a guided installation dialog.
-- Open Settings → Credentials and add your Backblaze B2 application key ID + key.
-- Add a bucket in Settings → Buckets with name and mount point.
-- Click Mount from the menu bar. Your bucket appears in Finder under `/Volumes/`.
+- Launch CloudMount -- it appears in your menu bar (no Dock icon).
+- If the FSKit extension isn't enabled, an onboarding screen guides you to System Settings.
+- Open Settings -> Credentials and add your Backblaze B2 application key ID + key.
+- Add a bucket in Settings -> Buckets, choose a mount point (default: `/Volumes/<bucket>`).
+- Click Mount. Your bucket appears in Finder.
+
+### CLI
+```bash
+mount -t b2 b2://my-bucket /Volumes/my-bucket
+diskutil unmount /Volumes/my-bucket
+```
 
 ## Features
-- Mount B2 buckets as native macOS volumes visible in Finder.
-- Browse directories, open files, drag-and-drop — it's just a folder.
-- Write files locally, upload to B2 on close (write-on-close strategy).
+- Mount B2 buckets as native macOS volumes visible in Finder and `diskutil`.
+- Browse directories, open files, drag-and-drop -- it's a regular folder.
+- Read files on open, write back to B2 on close (download-on-open / write-on-close).
 - Delete files and create directories through Finder.
-- Metadata caching with Moka reduces B2 API calls by 80%+.
-- Secure credential storage in macOS Keychain — never in config files.
-- Bucket configuration persists between restarts (`~/Library/Application Support/CloudMount/`).
-- Retry with exponential backoff for transient network failures.
-- macOS metadata file suppression (`.DS_Store`, `._*`) to minimize API calls.
+- On-disk file cache with LRU eviction (default 1 GB, `~/Library/Caches/CloudMount/`).
+- In-memory metadata cache reduces B2 API calls (default 5 min TTL).
+- macOS metadata suppression (`.DS_Store`, `._*`, `.Spotlight-V100`, etc.) to minimize API noise.
+- Secure credential storage in macOS Keychain -- never in config files.
+- Automatic B2 token refresh with retry on auth expiry.
+- Upload retry with fresh upload URL on transient failures.
+- Sparkle auto-updates -- checks for new versions automatically.
+- Launch at Login option in Settings.
+- Signed, notarized, and stapled for Gatekeeper.
 - No Dock icon, minimal UI, lives entirely in the menu bar.
 
 ## Architecture
 
-CloudMount is a dual-process architecture:
+CloudMount is a three-target Xcode project generated by XcodeGen:
 
 ```
-┌─────────────────────┐         Unix Socket         ┌──────────────────────┐
-│   Swift/SwiftUI     │ ◄──── JSON Protocol ────►   │   Rust Daemon        │
-│                     │    /tmp/cloudmount.sock      │                      │
-│  • Menu bar UI      │                              │  • FUSE filesystem   │
-│  • Settings window  │                              │  • B2 API client     │
-│  • Credential mgmt  │                              │  • Metadata cache    │
-│  • Daemon client    │                              │  • Mount manager     │
-└─────────────────────┘                              └──────────────────────┘
+CloudMount.app
+├── CloudMount              Menu bar app (SwiftUI)
+│   Manages accounts, settings, mount/unmount via Process,
+│   monitors volume events via NSWorkspace notifications.
+│
+├── CloudMountExtension     FSKit filesystem extension (XPC)
+│   Implements FSUnaryFileSystem for the b2:// URL scheme.
+│   Handles all file operations: lookup, enumerate, read,
+│   write, create, delete, rename. Runs sandboxed.
+│
+└── CloudMountKit           Shared framework
+    B2 API client, auth manager, credential store,
+    metadata cache, file cache, shared config.
 ```
 
-- **Swift app** (`Sources/CloudMount/`) — SwiftUI MenuBarExtra, settings, Keychain access, daemon communication via actor-based `DaemonClient`.
-- **Rust daemon** (`Daemon/CloudMountDaemon/`) — fuser-based FUSE filesystem, B2 API client with reqwest, Moka metadata cache, Unix socket IPC server.
-- **IPC** — JSON protocol over Unix domain socket. Commands: `Mount`, `Unmount`, `GetStatus`. 2-second polling for status updates.
-
-## How it works
-
-1. Swift app sends `Mount` command via Unix socket with bucket name, credentials, and mount point.
-2. Rust daemon authenticates with B2 API (`b2_authorize_account`).
-3. Daemon creates a FUSE filesystem and mounts it at the requested path.
-4. Finder sees the mount as a native volume.
-5. File operations (read/write/delete) are handled by FUSE callbacks that proxy to B2 API calls.
-6. Metadata is cached (10min for attrs, 5min for directories) to keep Finder responsive.
+The extension runs as an XPC service managed by macOS. When you mount a `b2://` URL, the kernel routes filesystem operations to the extension. No daemon process, no socket IPC, no polling -- it's native.
 
 ## File operations
 
-| Operation | Strategy | Notes |
-|-----------|----------|-------|
-| Read | Download + local cache | Cached for performance |
-| Write | Buffer locally, upload on close | Avoids partial uploads |
-| Delete | Permanent delete | B2 versioning ignored for MVP |
-| Mkdir | Create empty `.bzEmpty` marker | B2 has no real directories |
-| Rename | Server-side copy + delete | B2 has no rename API |
-| Dir rename | Not supported | Returns `ENOSYS` (MVP limitation) |
+| Operation | Strategy |
+|-----------|----------|
+| Read | Download to local staging on open, read from disk |
+| Write | Write to local staging, upload to B2 on close |
+| Delete | `b2_delete_file_version` (permanent) |
+| Mkdir | Zero-byte marker with `application/x-directory` content type |
+| Rename | Server-side copy + delete original |
+| Dir rename | Not supported (B2 limitation) |
 
-## Project structure
-
-```
-Sources/CloudMount/
-├── CloudMountApp.swift      # Main app, BucketConfigStore, persistence
-├── DaemonClient.swift       # Actor-based IPC client
-├── CredentialStore.swift    # Keychain storage
-├── MacFUSEDetector.swift    # macFUSE installation detection
-├── MenuContentView.swift    # Menu bar with mount controls
-└── SettingsView.swift       # Credentials + Buckets tabs
-
-Daemon/CloudMountDaemon/src/
-├── main.rs                  # Daemon entry point
-├── b2/
-│   ├── client.rs            # B2 API client (auth, list, upload, delete)
-│   └── types.rs             # B2 API types with serde
-├── cache/
-│   └── metadata.rs          # Moka-based metadata cache
-├── fs/
-│   ├── b2fs.rs              # FUSE filesystem implementation
-│   └── inode.rs             # Stable path-to-inode mapping
-├── ipc/
-│   ├── protocol.rs          # JSON protocol definitions
-│   └── server.rs            # Unix socket IPC server
-└── mount/
-    └── manager.rs           # Mount lifecycle management
-```
+## Known limitations
+- **Backblaze B2 only** -- S3-compatible providers planned.
+- **Directory rename not supported** -- B2 has no rename primitive; file rename uses copy+delete.
+- **No symlinks or hard links** -- B2 is a flat object store.
 
-## Known limitations (v1.0)
-- **Backblaze B2 only** — generic S3 support planned for v2.
-- **Disk usage shows N/A** — B2 has no bucket size API; protocol is wired for when computation is added.
-- **Directory rename not supported** — complex operation deferred.
-- **Single-bucket mount** — multi-bucket simultaneous mount planned for v2.
-- **No auto-mount** — manual mount from menu bar required each session.
-
-## Roadmap
-- **v1.1** — Multi-bucket support, auto-mount on startup, connection status indicators.
-- **v2.0** — Generic S3 provider support (AWS S3, Wasabi, DigitalOcean Spaces), custom endpoints.
-
-## Tech stack
-- **Swift/SwiftUI** — Native menu bar app, Keychain integration
-- **Rust** — FUSE daemon, async I/O with Tokio
-- **fuser 0.16** — FUSE filesystem trait implementation
-- **reqwest** — HTTP client for B2 API
-- **moka** — High-performance concurrent cache (sync mode for FUSE compatibility)
-- **serde** — JSON serialization for IPC protocol and B2 API types
-- **tracing** — Structured logging
+## Privacy
+CloudMount reads/writes only to the Keychain (credentials), App Group UserDefaults (mount configs), and your chosen mount points. No telemetry, no analytics, no network calls except to the B2 API and Sparkle update feed.
 
 ## Related
-- [Mountain Duck](https://mountainduck.io/) — Commercial alternative ($39) that inspired this project.
-- [macFUSE](https://osxfuse.github.io/) — Required kernel extension for userspace filesystems on macOS.
-- [rclone](https://rclone.org/) — CLI tool for cloud storage (different approach — sync, not mount).
+- [Mountain Duck](https://mountainduck.io/) -- Commercial alternative that inspired this project.
+- [rclone](https://rclone.org/) -- CLI tool for cloud storage (sync approach, not native mount).
 
 ## License
-MIT — Eirik Breen ([ebreen](https://github.com/ebreen))
+MIT -- Eirik Breen ([ebreen](https://github.com/ebreen))