refactor(admin): 重构挂载和端口映射输入交互

- 挂载/端口映射改为行内输入模式，虚线框包裹所有输入行
- 用户填写后可直接提交/保存，无需点击"增加"按钮确认
- "增加映射"按钮改为 w-full block 样式，点击新增一行空输入
- 路径自动完成支持 Tab 补全唯一项
- 端口映射默认 TCP，移除协议选择器
- 必填字段标记改为红色
- 禁用 ~/ 前缀（宿主机和容器的 ~ 语义不同）

Author: ZaneL1u

internal/controlplane/http/admin_host_files_test.go

@@ -122,7 +122,7 @@ func TestAdminHostFiles_EmptyPath(t *testing.T) {
 
 func TestAdminHostFiles_RelativePath(t *testing.T) {
 	h := NewAdminHostFilesHandler(slog.Default())
-	for _, path := range []string{"foo/bar", "tmp", "./etc"} {
+	for _, path := range []string{"foo/bar", "tmp", "./etc", "~", "~/foo"} {
 		req := httptest.NewRequest(http.MethodGet, "/v1/admin/host-files?path="+path, nil)
 		rr := httptest.NewRecorder()
 		h.List().ServeHTTP(rr, req)

internal/controlplane/http/admin_hosts.go

@@ -23,6 +23,10 @@ import (
 	"github.com/zanel1u/cloud-cli-proxy/internal/store/repository"
 )
 
+func expandHostMountSources(mounts repository.HostMounts) repository.HostMounts {
+	return mounts
+}
+
 type AdminHostStore interface {
 	ListHostsWithUsername(context.Context) ([]repository.HostWithUsername, error)
 	GetHostDetail(context.Context, string) (repository.HostDetail, error)
@@ -234,7 +238,7 @@ func (h *AdminHostsHandler) Create() nethttp.Handler {
 				MemoryLimitMB:    body.MemoryLimitMB,
 				CPULimit:         body.CPULimit,
 				DiskLimitGB:      body.DiskLimitGB,
-				HostMounts:       body.HostMounts,
+				HostMounts:       expandHostMountSources(body.HostMounts),
 				HostPorts:        body.HostPorts,
 			})
 			if err == nil {
@@ -1048,11 +1052,12 @@ func (h *AdminHostsHandler) UpdateMounts() nethttp.Handler {
 				return
 			}
 			if !strings.HasPrefix(m.Source, "/") || !strings.HasPrefix(m.Target, "/") {
-				writeJSON(w, nethttp.StatusBadRequest, map[string]string{"error": "paths must be absolute (start with /)"})
+				writeJSON(w, nethttp.StatusBadRequest, map[string]string{"error": "paths must be absolute"})
 				return
 			}
 		}
-		if err := h.store.UpdateHostMounts(r.Context(), hostID, body.Mounts); err != nil {
+		expandedMounts := expandHostMountSources(body.Mounts)
+		if err := h.store.UpdateHostMounts(r.Context(), hostID, expandedMounts); err != nil {
 			h.logger.Error("update host mounts failed", "host_id", hostID, "error", err)
 			writeJSON(w, nethttp.StatusInternalServerError, map[string]string{"error": "update mounts failed"})
 			return

internal/runtime/runtime_service.go

@@ -7,6 +7,7 @@ import (
 	"fmt"
 	"log/slog"
 	"os"
+	"path/filepath"
 	"strings"
 
 	"github.com/jackc/pgx/v5"
@@ -15,6 +16,20 @@ import (
 	"github.com/zanel1u/cloud-cli-proxy/internal/store/repository"
 )
 
+func expandBindMountSource(src string) string {
+	if !strings.HasPrefix(src, "~/") && src != "~" {
+		return src
+	}
+	home, err := os.UserHomeDir()
+	if err != nil {
+		return src
+	}
+	if src == "~" {
+		return home
+	}
+	return filepath.Join(home, src[2:])
+}
+
 const (
 	DefaultImageLockPath      = "deploy/docker/managed-user/image.lock"
 	defaultRebuildMode        = "preserve-home"
@@ -168,7 +183,7 @@ func (s *Service) QueueHostAction(ctx context.Context, hostID string, action age
 		request.BindMounts = make([]agentapi.BindMount, 0, len(host.HostMounts))
 		for _, hm := range host.HostMounts {
 			request.BindMounts = append(request.BindMounts, agentapi.BindMount{
-				Source:   hm.Source,
+				Source:   expandBindMountSource(hm.Source),
 				Target:   hm.Target,
 				ReadOnly: hm.ReadOnly,
 			})