fix: gate artifact downloads to Linux

Author: Waishnav

docs/artifact-exchange.md

@@ -38,5 +38,6 @@ parents are rejected.
 
 Downloads are streamed under `DEVSPACE_ARTIFACT_MAX_FILE_BYTES` and published as
 owner-only files without overwriting an existing destination. The tool is
-available on Linux, macOS, FreeBSD, OpenBSD, and NetBSD; it is not registered on
-Windows.
+currently available on Linux. It is not registered on macOS, Windows, or BSD
+because Node.js does not expose the required descriptor-relative filesystem
+operations there.

docs/configuration.md

@@ -48,9 +48,9 @@ an attached or generated file into an already-open workspace:
 DEVSPACE_ARTIFACTS=1 npx @waishnav/devspace serve
 ```
 
-This feature currently supports Linux, macOS, FreeBSD, OpenBSD, and NetBSD. It
-is not registered on Windows because the secure publication path depends on
-descriptor-anchored directory operations.
+This feature currently supports Linux. It is not registered on macOS, Windows,
+or BSD because the secure publication path depends on traversable,
+descriptor-anchored directory paths provided by Linux procfs.
 
 | Variable | Default | Purpose |
 | --- | --- | --- |

src/artifact-download.test.ts

@@ -99,10 +99,10 @@ function testOneToolContract(): void {
 
 function testPlatformSupportContract(): void {
   assert.equal(isArtifactDownloadSupportedPlatform("linux"), true);
-  assert.equal(isArtifactDownloadSupportedPlatform("darwin"), true);
-  assert.equal(isArtifactDownloadSupportedPlatform("freebsd"), true);
-  assert.equal(isArtifactDownloadSupportedPlatform("openbsd"), true);
-  assert.equal(isArtifactDownloadSupportedPlatform("netbsd"), true);
+  assert.equal(isArtifactDownloadSupportedPlatform("darwin"), false);
+  assert.equal(isArtifactDownloadSupportedPlatform("freebsd"), false);
+  assert.equal(isArtifactDownloadSupportedPlatform("openbsd"), false);
+  assert.equal(isArtifactDownloadSupportedPlatform("netbsd"), false);
   assert.equal(isArtifactDownloadSupportedPlatform("win32"), false);
 }
 

src/artifact-tools.ts

@@ -35,13 +35,7 @@ const PARTIAL_PREFIX = ".devspace-download-";
 const PARTIAL_SUFFIX = ".partial";
 const STALE_PARTIAL_AGE_MS = 24 * 60 * 60 * 1_000;
 const MAX_STALE_PARTIAL_CLEANUP = 32;
-const ARTIFACT_DOWNLOAD_PLATFORMS = new Set<NodeJS.Platform>([
-  "linux",
-  "darwin",
-  "freebsd",
-  "openbsd",
-  "netbsd",
-]);
+const ARTIFACT_DOWNLOAD_PLATFORMS = new Set<NodeJS.Platform>(["linux"]);
 
 const openAIFileReferenceInputSchema = z.strictObject({
   download_url: z.string(),
@@ -375,10 +369,7 @@ async function assertDirectoryHandle(handle: FileHandle): Promise<void> {
 }
 
 function descriptorDirectoryPath(handle: FileHandle): string {
-  if (process.platform === "linux") return `/proc/self/fd/${handle.fd}`;
-  if (isArtifactDownloadSupportedPlatform()) {
-    return `/dev/fd/${handle.fd}`;
-  }
+  if (isArtifactDownloadSupportedPlatform()) return `/proc/self/fd/${handle.fd}`;
   throw new ArtifactError(
     "artifact_platform_unsupported",
     "Native file download requires descriptor-anchored directory operations on this platform.",