@agimon-ai/po-file-edit 0.0.0-alpha.32 → 0.0.0-alpha.34

package/dist/extensions/server.cjs

@@ -47,6 +47,7 @@ ignore = __toESM(ignore, 1);
 let node_os = require("node:os");
 node_os = __toESM(node_os, 1);
 let _agimon_ai_po_config = require("@agimon-ai/po-config");
+let _agimon_ai_po_core_platform = require("@agimon-ai/po-core/platform");
 let hono = require("hono");
 //#region src/constants/editPresence.ts
 const PRESENCE_NOTE_TITLE = "[Po: other active agents edited files in this result]";
@@ -1396,17 +1397,44 @@ function describe(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 /** Reads the file as the source view will show it, or says why it cannot. */
-async function readWorking(filePath) {
+async function readWorking(filePath, opened, allowedRoot) {
+	let handle = opened;
 	let raw;
 	try {
-		raw = await node_fs_promises.default.readFile(filePath);
+		handle ??= await (0, _agimon_ai_po_core_platform.openGuardedFile)(filePath, { root: allowedRoot });
+		const stats = await handle.stat();
+		if (!stats.isFile()) return {
+			content: "",
+			hash: "",
+			unavailable: true,
+			reason: "the file is not a regular file"
+		};
+		const named = await node_fs_promises.default.lstat(filePath);
+		if (!named.isFile() || stats.dev !== named.dev || stats.ino !== named.ino || allowedRoot !== void 0 && !await isRealPathInside(allowedRoot, filePath)) return {
+			content: "",
+			hash: "",
+			unavailable: true,
+			reason: "the file path changed or leaves its readable directory"
+		};
+		raw = Buffer.alloc(1048577);
+		if (stats.size <= 1048576) {
+			let offset = 0;
+			while (offset < raw.length) {
+				const { bytesRead } = await handle.read(raw, offset, raw.length - offset, offset);
+				if (bytesRead === 0) break;
+				offset += bytesRead;
+			}
+			raw = raw.subarray(0, offset);
+		}
 	} catch {
 		return {
 			content: "",
 			hash: "",
 			unavailable: true,
-			reason: "the file no longer exists"
+			reason: "the file no longer exists or cannot be safely read"
 		};
+	} finally {
+		if (opened === void 0) await handle?.close();
 	}
 	if (raw.byteLength > 1048576) return {
 		content: "",
@@ -1579,7 +1607,7 @@ function createFileEditsApi(options = {}) {
 		const versions = await recordedVersions(requested);
 		if (versions === void 0 || requested === void 0) return context.json({ error: "This session recorded no changes to that file." }, 404);
 		const filePath = node_path.default.resolve(cwd, requested);
-		const working = await readWorking(filePath);
+		const working = await readWorking(filePath, void 0, cwd !== "" && isInside(node_path.default.resolve(cwd), filePath) ? node_path.default.resolve(cwd) : void 0);
 		const body = {
 			path: filePath,
 			relPath: cwd === "" ? filePath : node_path.default.relative(cwd, filePath),
@@ -1607,11 +1635,12 @@ function createFileEditsApi(options = {}) {
 		const root = node_path.default.resolve(cwd);
 		const filePath = node_path.default.resolve(root, requested);
 		const inSession = await isInsideSession(filePath);
-		if (!inSession && await readableRootOf(filePath) === void 0) return context.json({ error: "The path leaves the session directory." }, 403);
+		const allowedRoot = inSession ? root : await readableRootOf(filePath);
+		if (allowedRoot === void 0) return context.json({ error: "The path leaves the session directory." }, 403);
 		const body = {
 			path: filePath,
 			relPath: inSession ? node_path.default.relative(root, filePath) : filePath,
-			working: await readWorking(filePath)
+			working: await readWorking(filePath, void 0, allowedRoot)
 		};
 		return context.json(body);
 	});
@@ -1622,19 +1651,41 @@ function createFileEditsApi(options = {}) {
 		} catch {
 			return context.json({ error: "The save body is not JSON." }, 400);
 		}
-		if (typeof request.path !== "string" || typeof request.content !== "string") return context.json({ error: "A save names a path and the content to write." }, 400);
-		if (await recordedVersions(request.path) === void 0) return context.json({ error: "This session recorded no changes to that file." }, 404);
-		const filePath = node_path.default.resolve(cwd, request.path);
+		if (typeof request !== "object" || request === null || Array.isArray(request) || !("path" in request) || typeof request.path !== "string" || !("content" in request) || typeof request.content !== "string" || !("expectedHash" in request) || typeof request.expectedHash !== "string") return context.json({ error: "A save names a path, the content to write and the hash it was read at." }, 400);
+		const { path: requested, content, expectedHash } = request;
+		if (await recordedVersions(requested) === void 0) return context.json({ error: "This session recorded no changes to that file." }, 404);
+		const filePath = node_path.default.resolve(cwd, requested);
 		if (!await isInsideSession(filePath)) return context.json({ error: "Files outside the session directory are read-only." }, 403);
-		const current = await readWorking(filePath);
-		if (current.unavailable) return context.json({ error: current.reason ?? "The file cannot be read." }, 409);
-		if (current.hash !== request.expectedHash) return context.json({
-			error: "The file changed since it was opened.",
-			hash: current.hash
-		}, 409);
-		await node_fs_promises.default.writeFile(filePath, request.content, "utf8");
-		const body = { hash: hashOf(request.content) };
-		return context.json(body);
+		if (Buffer.byteLength(content, "utf8") > 1048576) return context.json({ error: `The file is larger than ${MAX_WORKING_BYTES} bytes.` }, 413);
+		try {
+			const canonical = await node_fs_promises.default.realpath(filePath);
+			return await _agimon_ai_po_core_platform.fileMutationRunner.forKey(canonical)(async () => {
+				const handle = await (0, _agimon_ai_po_core_platform.openGuardedFile)(filePath, {
+					write: true,
+					root: node_path.default.resolve(cwd)
+				});
+				try {
+					if (await node_fs_promises.default.realpath(filePath) !== canonical) return context.json({ error: "The file changed before it could be written." }, 409);
+					const current = await readWorking(filePath, handle, node_path.default.resolve(cwd));
+					if (current.unavailable) return context.json({ error: current.reason ?? "The file cannot be read." }, 409);
+					if (current.hash !== expectedHash) return context.json({
+						error: "The file changed since it was opened.",
+						hash: current.hash
+					}, 409);
+					const opened = await handle.stat();
+					const named = await node_fs_promises.default.lstat(filePath);
+					if (!opened.isFile() || opened.nlink !== 1 || !named.isFile() || named.nlink !== 1 || opened.dev !== named.dev || opened.ino !== named.ino || await node_fs_promises.default.realpath(filePath) !== canonical || !await isInsideSession(filePath)) return context.json({ error: "The file changed before it could be written." }, 409);
+					await handle.writeFile(content, "utf8");
+					await handle.truncate(Buffer.byteLength(content, "utf8"));
+					const body = { hash: hashOf(content) };
+					return context.json(body);
+				} finally {
+					await handle.close();
+				}
+			});
+		} catch {
+			return context.json({ error: "The file cannot be safely written." }, 409);
+		}
 	});
 	app.delete(routes.remove.path, async (context) => {
 		const requested = context.req.query(PATH_QUERY_PARAM);
@@ -1642,7 +1693,15 @@ function createFileEditsApi(options = {}) {
 		const filePath = node_path.default.resolve(cwd, requested);
 		if (!await isInsideSession(filePath)) return context.json({ error: "Files outside the session directory are read-only." }, 403);
 		try {
-			await node_fs_promises.default.unlink(filePath);
+			const canonical = await node_fs_promises.default.realpath(filePath).catch((error) => {
+				if (hasCode(error, "ENOENT")) return filePath;
+				throw error;
+			});
+			return await _agimon_ai_po_core_platform.fileMutationRunner.forKey(canonical)(async () => {
+				if (!await isInsideSession(filePath)) return context.json({ error: "Files outside the session directory are read-only." }, 403);
+				await node_fs_promises.default.unlink(filePath);
+				return context.body(null, 204);
+			});
 		} catch (error) {
 			if (!hasCode(error, "ENOENT")) return context.json({ error: `The file could not be deleted: ${describe(error)}` }, 409);
 		}
@@ -1654,14 +1713,17 @@ function createFileEditsApi(options = {}) {
 const api = {
 	basePath: API_BASE_PATH,
 	start(context) {
-		const environment = context.environment ?? process.env;
+		const environment = context.environment ?? {};
 		const cwd = context.cwd;
 		const app = createFileEditsApi({
-			paths: new FileEditPaths(context.environment),
+			paths: new FileEditPaths({
+				...environment,
+				HOME: context.homeDirectory ?? environment.HOME
+			}),
 			...context.sessionId === void 0 ? {} : { sessionId: context.sessionId },
 			...cwd === void 0 ? {} : {
 				cwd,
-				readableRoots: () => plansRoots(cwd, environment)
+				readableRoots: () => plansRoots(cwd, environment, context.homeDirectory)
 			}
 		});
 		return {
@@ -1675,8 +1737,8 @@ const api = {
 * a plan link in the transcript opens in the file view. A config that cannot be
 * read admits nothing extra rather than failing the preview.
 */
-function plansRoots(cwd, environment) {
-	const home = environment.HOME ?? node_os.default.homedir();
+function plansRoots(cwd, environment, homeDirectory) {
+	const home = homeDirectory ?? environment.HOME ?? node_os.default.homedir();
 	try {
 		const configured = (0, _agimon_ai_po_config.loadPoConfig)(cwd, home, environment).modes?.planning?.plansDirectory;
 		return [(0, _agimon_ai_po_config.resolvePlanningPlansDirectory)(configured, cwd, home)];