@cloudcli-ai/cloudcli 1.37.2 → 1.37.4

package/dist-server/server/shared/tests/message-unification.test.js

@@ -0,0 +1,174 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { prepareTranscriptMessages } from '../../shared/message-unification.js';
+let nextId = 0;
+const message = (fields) => ({
+    id: `m-${(nextId += 1)}`,
+    sessionId: 'session',
+    timestamp: '2026-08-22T00:00:00.000Z',
+    provider: 'claude',
+    kind: 'text',
+    ...fields,
+});
+const prose = () => message({ kind: 'text', role: 'assistant', content: 'Working on it.' });
+const taskCall = (toolName, toolId, toolInput, toolUseResult) => message({ kind: 'tool_use', toolName, toolId, toolInput, toolResult: { content: 'ok', toolUseResult } });
+const todosOf = (entry) => entry.toolInput.todos
+    .map((todo) => `${todo.status}:${todo.content}`);
+test('Claude task-tracker calls become one evolving checklist', () => {
+    const unified = prepareTranscriptMessages([
+        taskCall('TaskCreate', 't1', { subject: 'Read notes', activeForm: 'Reading notes' }, { task: { id: '1' } }),
+        taskCall('TaskCreate', 't2', { subject: 'Run tests', activeForm: 'Running tests' }, { task: { id: '2' } }),
+        prose(),
+        taskCall('TaskUpdate', 't3', { taskId: '1', status: 'completed' }, { success: true }),
+    ]);
+    const snapshots = unified.filter((entry) => entry.toolName === 'TodoWrite');
+    assert.equal(snapshots.length, 2, 'the two adjacent creates collapse into one snapshot');
+    assert.deepEqual(todosOf(snapshots[0]), ['pending:Read notes', 'pending:Run tests']);
+    assert.deepEqual(todosOf(snapshots[1]), ['completed:Read notes', 'pending:Run tests']);
+    assert.equal(snapshots[0].toolInput.todos[0].activeForm, 'Reading notes');
+});
+test('a task listing keeps the wording each task was created with', () => {
+    const unified = prepareTranscriptMessages([
+        taskCall('TaskCreate', 't1', { subject: 'Read notes', activeForm: 'Reading notes' }, { task: { id: '1' } }),
+        prose(),
+        taskCall('TaskList', 't2', {}, { tasks: [{ id: '1', subject: 'Read notes', status: 'in_progress' }] }),
+    ]);
+    const listed = unified.filter((entry) => entry.toolName === 'TodoWrite').at(-1);
+    assert.deepEqual(todosOf(listed), ['in_progress:Read notes']);
+    assert.equal(listed.toolInput.todos[0].activeForm, 'Reading notes');
+});
+test('a checklist that has not changed since it was last drawn is dropped', () => {
+    const unified = prepareTranscriptMessages([
+        message({ kind: 'tool_use', toolName: 'TodoWrite', toolId: 'w1', toolInput: { todos: [{ content: 'Ship it', status: 'pending' }] } }),
+        prose(),
+        message({ kind: 'tool_use', toolName: 'TodoWrite', toolId: 'w2', toolInput: { todos: [{ content: 'Ship it', status: 'pending' }] } }),
+    ]);
+    assert.deepEqual(unified.map((entry) => entry.toolId), ['w1', undefined]);
+});
+test('a superseded checklist and its result row both go', () => {
+    const unified = prepareTranscriptMessages([
+        message({ kind: 'tool_use', toolName: 'TodoWrite', toolId: 'w1', toolInput: { todos: [{ content: 'One', status: 'pending' }] } }),
+        message({ kind: 'tool_result', toolId: 'w1', content: 'stale' }),
+        message({ kind: 'tool_use', toolName: 'TodoWrite', toolId: 'w2', toolInput: { todos: [{ content: 'One', status: 'completed' }] } }),
+        message({ kind: 'tool_result', toolId: 'w2', content: 'fresh' }),
+    ]);
+    assert.deepEqual(unified.map((entry) => entry.toolId), ['w2']);
+});
+test('a result that names its call is not shipped alongside it', () => {
+    const unified = prepareTranscriptMessages([
+        message({ kind: 'tool_use', toolName: 'Bash', toolId: 'b1', toolInput: { command: 'ls' }, toolResult: { content: 'a\nb' } }),
+        message({ kind: 'tool_result', toolId: 'b1', content: 'a\nb' }),
+    ]);
+    assert.equal(unified.length, 1, 'the result already rides on the call it belongs to');
+    assert.equal(unified[0].kind, 'tool_use');
+    assert.equal(unified[0].toolResult?.content, 'a\nb');
+});
+test('a result with no call to attach to is kept', () => {
+    const unified = prepareTranscriptMessages([
+        message({ kind: 'tool_result', content: 'orphaned output' }),
+    ]);
+    assert.deepEqual(unified.map((entry) => entry.kind), ['tool_result']);
+});
+test("Codex's request_user_input becomes an answered AskUserQuestion", () => {
+    const [unified] = prepareTranscriptMessages([
+        message({
+            provider: 'codex',
+            kind: 'tool_use',
+            toolName: 'request_user_input',
+            toolId: 'call-1',
+            toolInput: JSON.stringify({
+                questions: [{ id: 'season', header: 'Quick test', question: 'Which season?', options: [{ label: 'Summer' }] }],
+            }),
+            toolResult: { content: '{"answers":{"season":{"answers":["Summer"]}}}' },
+        }),
+    ]);
+    assert.equal(unified.toolName, 'AskUserQuestion');
+    assert.deepEqual(unified.toolInput.answers, { 'Which season?': 'Summer' });
+});
+test('a multi-select Codex answer keeps every label it picked', () => {
+    const [unified] = prepareTranscriptMessages([
+        message({
+            provider: 'codex',
+            kind: 'tool_use',
+            toolName: 'request_user_input',
+            toolId: 'call-1',
+            toolInput: JSON.stringify({ questions: [{ id: 'scope', question: 'Which areas?', options: [] }] }),
+            toolResult: { content: '{"answers":{"scope":{"answers":["Providers","Tests"]}}}' },
+        }),
+    ]);
+    assert.deepEqual(unified.toolInput.answers, { 'Which areas?': 'Providers, Tests' });
+});
+test("Claude's AskUserQuestion answer is folded into the question it answers", () => {
+    const [unified] = prepareTranscriptMessages([
+        message({
+            kind: 'tool_use',
+            toolName: 'AskUserQuestion',
+            toolId: 'call-1',
+            toolInput: { questions: [{ question: 'What next?', header: 'Focus', options: [{ label: 'Branch changes' }] }] },
+            toolResult: {
+                content: 'Your questions have been answered.',
+                toolUseResult: { answers: { 'What next?': 'Branch changes' } },
+            },
+        }),
+    ]);
+    assert.deepEqual(unified.toolInput.answers, { 'What next?': 'Branch changes' });
+});
+test('a live Claude answer is recovered from the acknowledgement sentence', () => {
+    const [unified] = prepareTranscriptMessages([
+        message({
+            kind: 'tool_use',
+            toolName: 'AskUserQuestion',
+            toolId: 'call-1',
+            toolInput: { questions: [{ question: 'What next?', options: [] }] },
+            toolResult: {
+                content: 'Your questions have been answered: "What next?"="Branch changes". You can now continue.',
+            },
+        }),
+    ]);
+    assert.deepEqual(unified.toolInput.answers, { 'What next?': 'Branch changes' });
+});
+test('a question that was never answered carries no answers', () => {
+    const [unified] = prepareTranscriptMessages([
+        message({
+            kind: 'tool_use',
+            toolName: 'AskUserQuestion',
+            toolId: 'call-1',
+            toolInput: { questions: [{ question: 'What next?', options: [] }] },
+            toolResult: { content: '<tool_use_error>InputValidationError</tool_use_error>', isError: true },
+        }),
+    ]);
+    assert.equal(unified.toolInput.answers, undefined);
+});
+test('a huge tool output is capped, and says how much it dropped', () => {
+    const body = 'x'.repeat(120_000);
+    const [unified] = prepareTranscriptMessages([
+        message({
+            kind: 'tool_use',
+            toolName: 'Read',
+            toolId: 'r1',
+            toolInput: { file_path: '/tmp/shot.png' },
+            toolResult: { content: body, toolUseResult: { file: { base64: body } } },
+        }),
+    ]);
+    const content = String(unified.toolResult?.content);
+    assert.ok(content.length < body.length / 2, 'the output must not survive at full size');
+    assert.match(content, /… 80000 more characters$/);
+    const nested = (unified.toolResult?.toolUseResult).file.base64;
+    assert.equal(nested, content, 'the structured copy is capped the same way');
+});
+test('a search result keeps every file it found', () => {
+    const filenames = Array.from({ length: 900 }, (_, index) => `/repo/src/file-${index}.ts`);
+    const [unified] = prepareTranscriptMessages([
+        message({
+            kind: 'tool_use',
+            toolName: 'Glob',
+            toolId: 'g1',
+            toolInput: { pattern: '**/*.ts' },
+            toolResult: { content: 'ok', toolUseResult: { numFiles: filenames.length, filenames } },
+        }),
+    ]);
+    const result = unified.toolResult?.toolUseResult;
+    assert.equal(result.numFiles, 900);
+    assert.deepEqual(result.filenames, filenames);
+});
+//# sourceMappingURL=message-unification.test.js.map

package/dist-server/server/shared/tests/message-unification.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-unification.test.js","sourceRoot":"","sources":["../../../../server/shared/tests/message-unification.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAG5E,IAAI,MAAM,GAAG,CAAC,CAAC;AAEf,MAAM,OAAO,GAAG,CAAC,MAAkC,EAAqB,EAAE,CAAC,CAAC;IAC1E,EAAE,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE;IACxB,SAAS,EAAE,SAAS;IACpB,SAAS,EAAE,0BAA0B;IACrC,QAAQ,EAAE,QAAQ;IAClB,IAAI,EAAE,MAAM;IACZ,GAAG,MAAM;CACY,CAAA,CAAC;AAExB,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAE5F,MAAM,QAAQ,GAAG,CACf,QAAgB,EAChB,MAAc,EACd,SAAkC,EAClC,aAAsB,EACtB,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;AAE9G,MAAM,OAAO,GAAG,CAAC,KAAwB,EAAE,EAAE,CAC1C,KAAK,CAAC,SAAmE,CAAC,KAAK;KAC7E,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AAErD,IAAI,CAAC,yDAAyD,EAAE,GAAG,EAAE;IACnE,MAAM,OAAO,GAAG,yBAAyB,CAAC;QACxC,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;QAC3G,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;QAC1G,KAAK,EAAE;QACP,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;KACtF,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;IAC5E,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,qDAAqD,CAAC,CAAC;IACzF,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACrF,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACvF,MAAM,CAAC,KAAK,CACT,SAAS,CAAC,CAAC,CAAC,CAAC,SAAuD,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,EACzF,eAAe,CAChB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,OAAO,GAAG,yBAAyB,CAAC;QACxC,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;QAC3G,KAAK,EAAE;QACP,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;KACvG,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAO,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CACT,MAAO,CAAC,SAAuD,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,EACpF,eAAe,CAChB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,MAAM,OAAO,GAAG,yBAAyB,CAAC;QACxC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACrI,KAAK,EAAE;QACP,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;KACtI,CAAC,CAAC;IAEH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;IAC7D,MAAM,OAAO,GAAG,yBAAyB,CAAC;QACxC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACjI,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAChE,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACnI,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;KACjE,CAAC,CAAC;IAEH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACpE,MAAM,OAAO,GAAG,yBAAyB,CAAC;QACxC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;QAC5H,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;KAChE,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,oDAAoD,CAAC,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;IACtD,MAAM,OAAO,GAAG,yBAAyB,CAAC;QACxC,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;KAC7D,CAAC,CAAC;IAEH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;AACxE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC1E,MAAM,CAAC,OAAO,CAAC,GAAG,yBAAyB,CAAC;QAC1C,OAAO,CAAC;YACN,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,oBAAoB;YAC9B,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC;gBACxB,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;aAC/G,CAAC;YACF,UAAU,EAAE,EAAE,OAAO,EAAE,+CAA+C,EAAE;SACzE,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAClD,MAAM,CAAC,SAAS,CAAE,OAAO,CAAC,SAAkC,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;AACvG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yDAAyD,EAAE,GAAG,EAAE;IACnE,MAAM,CAAC,OAAO,CAAC,GAAG,yBAAyB,CAAC;QAC1C,OAAO,CAAC;YACN,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,oBAAoB;YAC9B,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;YAClG,UAAU,EAAE,EAAE,OAAO,EAAE,yDAAyD,EAAE;SACnF,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,CAAC,SAAS,CAAE,OAAO,CAAC,SAAkC,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAChH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wEAAwE,EAAE,GAAG,EAAE;IAClF,MAAM,CAAC,OAAO,CAAC,GAAG,yBAAyB,CAAC;QAC1C,OAAO,CAAC;YACN,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,iBAAiB;YAC3B,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,EAAE;YAC/G,UAAU,EAAE;gBACV,OAAO,EAAE,oCAAoC;gBAC7C,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE,EAAE;aAC/D;SACF,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,CAAC,SAAS,CAAE,OAAO,CAAC,SAAkC,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAC5G,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,MAAM,CAAC,OAAO,CAAC,GAAG,yBAAyB,CAAC;QAC1C,OAAO,CAAC;YACN,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,iBAAiB;YAC3B,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE;YACnE,UAAU,EAAE;gBACV,OAAO,EAAE,yFAAyF;aACnG;SACF,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,CAAC,SAAS,CAAE,OAAO,CAAC,SAAkC,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAC5G,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACjE,MAAM,CAAC,OAAO,CAAC,GAAG,yBAAyB,CAAC;QAC1C,OAAO,CAAC;YACN,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,iBAAiB;YAC3B,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE;YACnE,UAAU,EAAE,EAAE,OAAO,EAAE,uDAAuD,EAAE,OAAO,EAAE,IAAI,EAAE;SAChG,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAE,OAAO,CAAC,SAAmC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAChF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;IACtE,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,OAAO,CAAC,GAAG,yBAAyB,CAAC;QAC1C,OAAO,CAAC;YACN,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE;YACzC,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;SACzE,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,0CAA0C,CAAC,CAAC;IACxF,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,aAA8C,CAAA,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/F,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,CAAC,CAAC;AAC9E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACrD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,kBAAkB,KAAK,KAAK,CAAC,CAAC;IAC1F,MAAM,CAAC,OAAO,CAAC,GAAG,yBAAyB,CAAC;QAC1C,OAAO,CAAC;YACN,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;YACjC,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE;SACxF,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,aAA0D,CAAC;IAC9F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC"}

package/dist-server/server/shared/tests/read-only-roots.test.js

@@ -0,0 +1,124 @@
+import assert from 'node:assert/strict';
+import { mkdir, mkdtemp, realpath, rm, symlink, writeFile } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import test, { after } from 'node:test';
+import { fileURLToPath } from 'node:url';
+// The Claude projects root is derived from `os.homedir()` when the utils module
+// is first imported, so HOME has to point at the fixture home *before* that
+// import runs. The fixture lives beside this file rather than under the temp
+// directory: a home under `/tmp` would put everything under a read-only root
+// and make the escape tests pass for the wrong reason.
+const testDirectory = path.dirname(fileURLToPath(import.meta.url));
+const fixtureRoot = await realpath(await mkdtemp(path.join(testDirectory, 'read-only-roots-fixture-')));
+const fixtureHome = path.join(fixtureRoot, 'home');
+const claudeProjectsRoot = path.join(fixtureHome, '.claude', 'projects');
+// Under no read-only root: not the temp directory, not the Claude projects dir.
+const outsideDirectory = path.join(fixtureRoot, 'outside');
+await mkdir(claudeProjectsRoot, { recursive: true });
+await mkdir(outsideDirectory);
+const previousHome = process.env.HOME;
+const previousUserProfile = process.env.USERPROFILE;
+process.env.HOME = fixtureHome;
+process.env.USERPROFILE = fixtureHome;
+const { resolvePathUnderRoots, resolveReadOnlyRootPath, validateWorkspacePath } = await import('../../shared/utils.js');
+after(async () => {
+    if (previousHome === undefined) {
+        delete process.env.HOME;
+    }
+    else {
+        process.env.HOME = previousHome;
+    }
+    if (previousUserProfile === undefined) {
+        delete process.env.USERPROFILE;
+    }
+    else {
+        process.env.USERPROFILE = previousUserProfile;
+    }
+    await rm(fixtureRoot, { recursive: true, force: true });
+});
+test('a path under the system temp directory resolves as readable', async () => {
+    const temporaryDirectory = await mkdtemp(path.join(os.tmpdir(), 'read-only-root-'));
+    try {
+        const filePath = path.join(temporaryDirectory, 'agent.output');
+        await writeFile(filePath, 'agent output', 'utf8');
+        // A background command's log is quoted straight out of the transcript, so
+        // this exact shape has to resolve.
+        const resolvedDirectory = await resolveReadOnlyRootPath(temporaryDirectory);
+        assert.ok(resolvedDirectory);
+        assert.equal(await resolveReadOnlyRootPath(filePath), path.join(resolvedDirectory, 'agent.output'));
+    }
+    finally {
+        await rm(temporaryDirectory, { recursive: true, force: true });
+    }
+});
+test('a background agent output link resolves to its transcript under the Claude projects directory', async () => {
+    const temporaryDirectory = await mkdtemp(path.join(os.tmpdir(), 'read-only-root-'));
+    try {
+        // Claude writes `/tmp/claude-<uid>/<project>/<session>/tasks/<task>.output`
+        // as a symlink to the agent's transcript under `~/.claude/projects`.
+        const transcriptDirectory = path.join(claudeProjectsRoot, '-home-user-project', 'session-1', 'subagents');
+        await mkdir(transcriptDirectory, { recursive: true });
+        const transcriptPath = path.join(transcriptDirectory, 'agent-1.jsonl');
+        await writeFile(transcriptPath, '{"type":"assistant"}\n', 'utf8');
+        const tasksDirectory = path.join(temporaryDirectory, 'tasks');
+        await mkdir(tasksDirectory);
+        const outputLink = path.join(tasksDirectory, 'task-1.output');
+        await symlink(transcriptPath, outputLink);
+        assert.equal(await resolveReadOnlyRootPath(outputLink), transcriptPath);
+        assert.equal(await resolveReadOnlyRootPath(transcriptPath), transcriptPath);
+    }
+    finally {
+        await rm(temporaryDirectory, { recursive: true, force: true });
+    }
+});
+test('the temp directory stays read-only: it is still not a valid workspace location', async () => {
+    const temporaryDirectory = await mkdtemp(path.join(os.tmpdir(), 'read-only-root-'));
+    try {
+        // Being browsable must not make it writable — the write policy is
+        // `validateWorkspacePath` and it does not consult the read-only roots.
+        const validation = await validateWorkspacePath(temporaryDirectory);
+        assert.equal(validation.valid, false);
+    }
+    finally {
+        await rm(temporaryDirectory, { recursive: true, force: true });
+    }
+});
+test('paths outside the read-only roots do not resolve', async () => {
+    assert.equal(await resolveReadOnlyRootPath(outsideDirectory), null);
+    assert.equal(await resolveReadOnlyRootPath('/etc/passwd'), null);
+    assert.equal(await resolveReadOnlyRootPath('relative/path'), null);
+    assert.equal(await resolveReadOnlyRootPath(''), null);
+});
+test('a symlink planted in the temp directory cannot read outside every root', async () => {
+    const temporaryDirectory = await mkdtemp(path.join(os.tmpdir(), 'read-only-root-'));
+    try {
+        await writeFile(path.join(outsideDirectory, 'secret.txt'), 'secret', 'utf8');
+        const escapeLink = path.join(temporaryDirectory, 'escape');
+        await symlink(outsideDirectory, escapeLink);
+        // The name is under a read-only root but the file is not, so resolving the
+        // link before comparing is what keeps this closed.
+        assert.equal(await resolveReadOnlyRootPath(escapeLink), null);
+        assert.equal(await resolveReadOnlyRootPath(path.join(escapeLink, 'secret.txt')), null);
+    }
+    finally {
+        await rm(temporaryDirectory, { recursive: true, force: true });
+    }
+});
+test('a root that does not exist does not stop later roots from matching', async () => {
+    const temporaryDirectory = await mkdtemp(path.join(os.tmpdir(), 'read-only-root-'));
+    try {
+        // `/tmp` does not exist on Windows; the temp directory listed after it
+        // must still be checked rather than the whole search giving up.
+        const missingRoot = path.join(fixtureRoot, 'missing');
+        assert.equal(await resolvePathUnderRoots(temporaryDirectory, [missingRoot]), null);
+        assert.equal(await resolvePathUnderRoots(temporaryDirectory, [missingRoot, os.tmpdir()]), await realpath(temporaryDirectory));
+    }
+    finally {
+        await rm(temporaryDirectory, { recursive: true, force: true });
+    }
+});
+test('traversal out of the temp directory does not resolve', async () => {
+    assert.equal(await resolveReadOnlyRootPath(`${os.tmpdir()}/../etc/passwd`), null);
+});
+//# sourceMappingURL=read-only-roots.test.js.map

package/dist-server/server/shared/tests/read-only-roots.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-only-roots.test.js","sourceRoot":"","sources":["../../../../server/shared/tests/read-only-roots.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,gFAAgF;AAChF,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,uDAAuD;AACvD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACnE,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAC;AACxG,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;AACnD,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AACzE,gFAAgF;AAChF,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AAC3D,MAAM,KAAK,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACrD,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE9B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;AACtC,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;AACpD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,WAAW,CAAC;AAC/B,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC;AAEtC,MAAM,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAEpH,KAAK,CAAC,KAAK,IAAI,EAAE;IACf,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAC1B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC;IAClC,CAAC;IACD,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,mBAAmB,CAAC;IAChD,CAAC;IACD,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;IAC7E,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAEpF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;QAC/D,MAAM,SAAS,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QAElD,0EAA0E;QAC1E,mCAAmC;QACnC,MAAM,iBAAiB,GAAG,MAAM,uBAAuB,CAAC,kBAAkB,CAAC,CAAC;QAC5E,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC,CAAC;IACtG,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;IAC/G,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAEpF,IAAI,CAAC;QACH,4EAA4E;QAC5E,qEAAqE;QACrE,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QAC1G,MAAM,KAAK,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;QACvE,MAAM,SAAS,CAAC,cAAc,EAAE,wBAAwB,EAAE,MAAM,CAAC,CAAC;QAElE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,OAAO,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAE1C,MAAM,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,CAAC;QACxE,MAAM,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC,CAAC;IAC9E,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;IAChG,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAEpF,IAAI,CAAC;QACH,kEAAkE;QAClE,uEAAuE;QACvE,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;IAClE,MAAM,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC;IACjE,MAAM,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;IACxF,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAEpF,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,OAAO,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;QAE5C,2EAA2E;QAC3E,mDAAmD;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACzF,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IACpF,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAEpF,IAAI,CAAC;QACH,uEAAuE;QACvE,gEAAgE;QAChE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,MAAM,qBAAqB,CAAC,kBAAkB,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACnF,MAAM,CAAC,KAAK,CACV,MAAM,qBAAqB,CAAC,kBAAkB,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAC3E,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CACnC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;IACtE,MAAM,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,IAAI,CAAC,CAAC;AACpF,CAAC,CAAC,CAAC"}

package/dist-server/server/shared/tests/strip-ansi-sequences.test.js

@@ -0,0 +1,31 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { stripAnsiSequences } from '../../shared/utils.js';
+test('strips the SGR colors a CLI writes around its own warnings', () => {
+    const styled = '\u001B[93m\u001B[1m! \u001B[0m\u001B[0mpermission requested: external_directory';
+    assert.equal(stripAnsiSequences(styled), '! permission requested: external_directory');
+});
+test('strips CSI cursor control, including the 8-bit introducer', () => {
+    assert.equal(stripAnsiSequences('a\u001B[2Kb\u001B[?25lc'), 'abc');
+    assert.equal(stripAnsiSequences('a\u009B31mb'), 'ab');
+});
+test('strips an OSC sequence with either terminator, without eating the rest', () => {
+    assert.equal(stripAnsiSequences('\u001B]0;title\u0007done'), 'done');
+    assert.equal(stripAnsiSequences('\u001B]8;;https://example.com\u001B\\link'), 'link');
+});
+test('strips other ECMA-48 escape sequences such as charset selection', () => {
+    assert.equal(stripAnsiSequences('\u001B(Bplain'), 'plain');
+});
+test('leaves text without escape sequences untouched', () => {
+    assert.equal(stripAnsiSequences('plain [93m-looking text'), 'plain [93m-looking text');
+});
+test('strips a CSI sequence that carries a private parameter byte', () => {
+    assert.equal(stripAnsiSequences('a\u001B[>cb'), 'ab');
+});
+test('stops an unterminated OSC at the next escape, so later styling still strips', () => {
+    assert.equal(stripAnsiSequences('\u001B]0;unterminated\u001B[31mred\u001B[0m'), '0;unterminatedred');
+});
+test('reduces a styling-only chunk to an empty string', () => {
+    assert.equal(stripAnsiSequences('\u001B[0m\u001B[2K'), '');
+});
+//# sourceMappingURL=strip-ansi-sequences.test.js.map

package/dist-server/server/shared/tests/strip-ansi-sequences.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strip-ansi-sequences.test.js","sourceRoot":"","sources":["../../../../server/shared/tests/strip-ansi-sequences.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;IACtE,MAAM,MAAM,GAAG,iFAAiF,CAAC;IACjG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,4CAA4C,CAAC,CAAC;AACzF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE,KAAK,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wEAAwE,EAAE,GAAG,EAAE;IAClF,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,2CAA2C,CAAC,EAAE,MAAM,CAAC,CAAC;AACxF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC1D,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE,yBAAyB,CAAC,CAAC;AACzF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6EAA6E,EAAE,GAAG,EAAE;IACvF,MAAM,CAAC,KAAK,CACV,kBAAkB,CAAC,6CAA6C,CAAC,EACjE,mBAAmB,CACpB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC3D,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC"}

package/dist-server/server/shared/utils.js

@@ -59,6 +59,19 @@ export class AppError extends Error {
         this.details = options.details;
     }
 }
+/**
+ * Flattens a failed `git` invocation into one searchable string: the error
+ * message followed by whatever stderr/stdout the process runner attached.
+ *
+ * Used by the Git routes and the branch compare service to classify git
+ * failures (e.g. "not a git repository", "unknown revision") and to surface
+ * git's own explanation as error `details`. Accepts any thrown value; missing
+ * fields contribute nothing, so the result may be empty.
+ */
+export function getGitErrorDetails(error) {
+    const details = error;
+    return `${details?.message ?? ''} ${details?.stderr ?? ''} ${details?.stdout ?? ''}`.trim();
+}
 // ---------------------------
 //----------------- WORKSPACE PATH VALIDATION UTILITIES ------------
 /**
@@ -100,6 +113,78 @@ export const FORBIDDEN_WORKSPACE_PATHS = [
     'C:\\System Volume Information',
     'C:\\$Recycle.Bin',
 ];
+/**
+ * Roots the file browser and viewer may read from even though they are outside
+ * every project.
+ *
+ * Claude writes a background agent's output file and a background command's log
+ * under the system temp directory, and a transcript quotes those paths
+ * verbatim, so the file browser and the file viewer have to be able to follow
+ * them. `/tmp` is listed literally as well as via `os.tmpdir()` because the two
+ * differ on macOS, where the temp directory is under `/var/folders`.
+ *
+ * A background agent's `.output` file is only a symlink to the agent's
+ * transcript, `~/.claude/projects/<project>/<session>/subagents/agent-<id>.jsonl`.
+ * Symlinks are resolved before the root comparison, so following it needs the
+ * Claude projects directory to be a root as well. Those are the user's own
+ * transcripts, which the sessions API already serves; the directory is located
+ * the same way the session watcher and synchronizer locate it.
+ *
+ * Being a read-only root grants reads only: the file-tree write paths resolve
+ * against the project root alone, so nothing under these can be changed
+ * through the file API. Whether one may become a workspace is decided
+ * separately by `validateWorkspacePath` — the temp directories are on
+ * `FORBIDDEN_WORKSPACE_PATHS`; the Claude projects directory is not, it is
+ * simply wherever `WORKSPACES_ROOT` puts it.
+ */
+const READ_ONLY_ROOTS = [...new Set([
+        '/tmp',
+        os.tmpdir(),
+        path.join(os.homedir(), '.claude', 'projects'),
+    ])];
+/**
+ * Resolves `targetPath` when it lives under one of `roots`, or `null` when it
+ * does not.
+ *
+ * Symlinks are resolved before the comparison, so a link planted under a root
+ * cannot be used to read somewhere else through it. Each root is resolved on
+ * its own, so one that does not exist on this machine — `/tmp` on Windows — is
+ * skipped and the roots after it are still checked.
+ */
+export async function resolvePathUnderRoots(targetPath, roots) {
+    const normalizedTarget = normalizeProjectPath(targetPath);
+    if (!normalizedTarget || !path.isAbsolute(normalizedTarget)) {
+        return null;
+    }
+    let resolvedPath;
+    try {
+        resolvedPath = normalizeProjectPath(await realpath(path.resolve(normalizedTarget)));
+    }
+    catch {
+        // A path that cannot be resolved is not readable through here either.
+        return null;
+    }
+    for (const root of roots) {
+        let resolvedRoot;
+        try {
+            resolvedRoot = normalizeProjectPath(await realpath(root));
+        }
+        catch {
+            continue;
+        }
+        if (resolvedPath === resolvedRoot || resolvedPath.startsWith(`${resolvedRoot}${path.sep}`)) {
+            return resolvedPath;
+        }
+    }
+    return null;
+}
+/**
+ * Resolves a path that is readable because it lives under a read-only root,
+ * or `null` when it does not.
+ */
+export function resolveReadOnlyRootPath(targetPath) {
+    return resolvePathUnderRoots(targetPath, READ_ONLY_ROOTS);
+}
 function stripWindowsLongPathPrefix(inputPath) {
     if (inputPath.startsWith('\\\\?\\UNC\\')) {
         return `\\\\${inputPath.slice('\\\\?\\UNC\\'.length)}`;
@@ -304,6 +389,40 @@ export function createCompleteMessage(opts) {
     });
 }
 // ---------------------------
+//----------------- SUBAGENT TIMELINE UTILITIES ------------
+/**
+ * Longest tool output kept on one subagent activity.
+ *
+ * A subagent's timeline is nested inside a collapsed panel, so it is a preview
+ * of what the agent did, never the primary place its output is read. Sending
+ * every child command's full output made the history payload of an
+ * agent-heavy session grow by megabytes for content almost nobody expands.
+ */
+const MAX_SUBAGENT_ACTIVITY_CONTENT = 4000;
+function truncateForPreview(value) {
+    if (typeof value !== 'string' || value.length <= MAX_SUBAGENT_ACTIVITY_CONTENT) {
+        return value;
+    }
+    const omitted = value.length - MAX_SUBAGENT_ACTIVITY_CONTENT;
+    return `${value.slice(0, MAX_SUBAGENT_ACTIVITY_CONTENT)}\n… ${omitted} more characters`;
+}
+/**
+ * Trims one subagent activity down to what its nested preview can show.
+ *
+ * Used by both provider session adapters so a Claude agent's timeline and a
+ * Codex agent's timeline cost the same to transport.
+ */
+export function truncateSubagentActivity(activity) {
+    const truncatedContent = truncateForPreview(activity.content);
+    const truncatedResult = activity.toolResult
+        ? { ...activity.toolResult, content: truncateForPreview(activity.toolResult.content) }
+        : activity.toolResult;
+    if (truncatedContent === activity.content && truncatedResult === activity.toolResult) {
+        return activity;
+    }
+    return { ...activity, content: truncatedContent, toolResult: truncatedResult };
+}
+// ---------------------------
 //----------------- CONVERSATION HISTORY PAGINATION UTILITIES ------------
 /**
  * Slices one page from the END of a chronologically ordered message list.
@@ -416,6 +535,21 @@ export function buildDefaultProviderCurrentActiveModel(models) {
         model: models.DEFAULT,
     };
 }
+/**
+ * True for a model name a provider fabricated rather than actually ran.
+ *
+ * Claude Code stamps locally-synthesized transcript rows (API-error notices,
+ * usage-limit messages) with `model: "<synthetic>"`. Angle-bracketed values are
+ * placeholders, never real model ids, so neither the active-model lookup nor
+ * the per-message model a reply is labelled with may adopt one.
+ *
+ * Used by the Claude models provider (which walks the transcript backwards for
+ * the session's model) and by the Claude sessions provider (which stamps each
+ * assistant message with the model that answered it).
+ */
+export function isPlaceholderProviderModel(model) {
+    return model.startsWith('<') && model.endsWith('>');
+}
 // ---------------------------
 //----------------- WEBSOCKET PAYLOAD PARSING UTILITIES ------------
 /**
@@ -902,6 +1036,32 @@ export function flattenPromptForWindowsShell(prompt) {
 }
 // ---------------------------
 //----------------- TERMINAL OUTPUT UTILITIES ------------
+/**
+ * Matches the escape sequences a CLI emits when it believes it is writing to a
+ * terminal, in the three shapes those tools actually produce:
+ * - OSC (`ESC ]` … terminated by BEL or ST), used for titles and hyperlinks.
+ * - CSI (`ESC [`, or the 8-bit `\u009B` introducer that stands in for both
+ *   bytes), used for SGR colors and cursor control.
+ * - any other ECMA-48 escape sequence: `ESC`, optional intermediate bytes
+ *   (`0x20`-`0x2F`), one final byte (`0x30`-`0x7E`), such as `ESC ( B`.
+ *
+ * OSC and CSI are listed first so their terminators are consumed by the
+ * specific alternative rather than by the generic one.
+ */
+const ANSI_ESCAPE_SEQUENCE_REGEX = /\u001B\][^\u0007\u001B]*(?:\u0007|\u001B\\)|(?:\u001B\[|\u009B)[0-?]*[ -/]*[@-~]|\u001B[ -/]*[0-~]/g;
+/**
+ * Removes ANSI escape sequences from text captured off a CLI's stdout or
+ * stderr. Provider runtimes, session readers, and the shell WebSocket share
+ * this because every one of them forwards captured process output to a web
+ * client that renders plain text: left in, the escapes show up verbatim
+ * (`[93m[1m!`) instead of as styling.
+ *
+ * The result can be empty when the input was styling only, so callers that
+ * forward the text should re-check for emptiness after cleaning.
+ */
+export function stripAnsiSequences(value) {
+    return value.replace(ANSI_ESCAPE_SEQUENCE_REGEX, '');
+}
 const ANSI_TERMINAL_STYLES = {
     reset: '\x1b[0m',
     bright: '\x1b[1m',