@cydm/happy-elves 0.1.0-beta.46 → 0.1.0-beta.47

package/apps/daemon/dist/session/directory.js

@@ -1,10 +1,11 @@
 import fs from "node:fs/promises";
+import os from "node:os";
 import path from "node:path";
 import { claimCommandRequest, sendCommandResponse } from "../relay/send.js";
-import { assertPathInsideWorkspace, pathInsideRoot, workspaceRealRoots } from "./workspace-paths.js";
+import { isUncPath, workspaceRealRoots } from "./workspace-paths.js";
 const directoryEntryLimit = 500;
 const directoryStatConcurrency = 16;
-async function findRepoRoot(startPath, workspaceRoots) {
+async function findRepoRoot(startPath) {
     let current = startPath;
     while (true) {
         try {
@@ -15,16 +16,42 @@ async function findRepoRoot(startPath, workspaceRoots) {
             const parent = path.dirname(current);
             if (parent === current)
                 return null;
-            if (!workspaceRoots.some((root) => pathInsideRoot(root, parent)))
-                return null;
             current = parent;
         }
     }
 }
+async function directoryRoots(workspaceRoots, currentPath) {
+    const roots = [];
+    const seen = new Set();
+    async function add(candidate, label) {
+        if (!candidate || isUncPath(candidate))
+            return;
+        try {
+            const real = await fs.realpath(path.resolve(candidate));
+            if (seen.has(real))
+                return;
+            seen.add(real);
+            roots.push({ name: (label ?? path.basename(real)) || real, path: real });
+        }
+        catch {
+            // Optional navigation shortcuts should not break directory listing.
+        }
+    }
+    for (const root of workspaceRoots)
+        await add(root);
+    await add(os.homedir(), "home");
+    await add(path.parse(currentPath).root);
+    const homeRoot = path.parse(os.homedir()).root;
+    if (homeRoot !== path.parse(currentPath).root)
+        await add(homeRoot);
+    return roots;
+}
 export async function buildDirectoryList(config, requestedPath) {
+    if (requestedPath && isUncPath(requestedPath)) {
+        throw Object.assign(new Error("UNC paths are not supported for directory browsing."), { code: "DIRECTORY_UNSUPPORTED_PATH" });
+    }
     const resolvedPath = path.resolve(requestedPath || process.cwd());
     const realPath = await fs.realpath(resolvedPath);
-    await assertPathInsideWorkspace(realPath);
     const workspaceRoots = await workspaceRealRoots();
     const entries = [];
     let truncated = false;
@@ -66,13 +93,12 @@ export async function buildDirectoryList(config, requestedPath) {
         return a.name.localeCompare(b.name);
     });
     const parentPath = path.dirname(realPath);
-    const parentInsideWorkspace = parentPath !== realPath && workspaceRoots.some((root) => pathInsideRoot(root, parentPath));
     return {
         machineId: config.machineId,
         path: realPath,
-        parentPath: parentInsideWorkspace ? parentPath : null,
-        repoRoot: await findRepoRoot(realPath, workspaceRoots),
-        roots: workspaceRoots.map((root) => ({ name: path.basename(root) || root, path: root })),
+        parentPath: parentPath !== realPath ? parentPath : null,
+        repoRoot: await findRepoRoot(realPath),
+        roots: await directoryRoots(workspaceRoots, realPath),
         entries: sortedEntries,
         truncated,
         entryLimit: directoryEntryLimit,

package/apps/daemon/dist/session/file-preview.js

@@ -2,7 +2,7 @@ import fs from "node:fs/promises";
 import path from "node:path";
 import { appendAudit } from "../audit.js";
 import { claimCommandRequest, sendCommandResponse } from "../relay/send.js";
-import { assertRootInsideWorkspace, isUncPath, pathInsideRoot } from "./workspace-paths.js";
+import { isUncPath, pathInsideRoot } from "./workspace-paths.js";
 const textLimitBytes = 256 * 1024;
 const textHardLimitBytes = 1024 * 1024;
 const imageLimitBytes = 16 * 1024 * 1024;
@@ -60,7 +60,6 @@ export async function buildFilePreview(config, rootPath, requestedPath, mode = "
         ? requestedPath
         : path.resolve(rootAbsolutePath, requestedPath);
     const rootRealPath = await fs.realpath(rootAbsolutePath);
-    await assertRootInsideWorkspace(rootRealPath);
     const targetRealPath = await fs.realpath(targetPath);
     assertInsideRoot(rootRealPath, targetRealPath);
     const stat = await fs.stat(targetRealPath);

package/apps/daemon/dist/session/workspace-paths.d.ts

@@ -1,5 +1,3 @@
 export declare function workspaceRealRoots(): Promise<string[]>;
-export declare function assertPathInsideWorkspace(realPath: string): Promise<void>;
-export declare function assertRootInsideWorkspace(rootRealPath: string): Promise<void>;
 export declare function pathInsideRoot(rootPath: string, targetPath: string): boolean;
 export declare function isUncPath(input: string): boolean;

package/apps/daemon/dist/session/workspace-paths.js

@@ -16,23 +16,11 @@ export async function workspaceRealRoots() {
             roots.push(real);
         }
         catch {
-            // A stale session cwd should not widen or break the daemon workspace boundary.
+            // A stale session cwd should not break directory root shortcuts.
         }
     }
     return roots;
 }
-export async function assertPathInsideWorkspace(realPath) {
-    const roots = await workspaceRealRoots();
-    if (roots.some((root) => pathInsideRoot(root, realPath)))
-        return;
-    throw Object.assign(new Error("Path must stay inside a known workspace."), { code: "WORKSPACE_PATH_FORBIDDEN" });
-}
-export async function assertRootInsideWorkspace(rootRealPath) {
-    const roots = await workspaceRealRoots();
-    if (roots.some((root) => pathInsideRoot(root, rootRealPath)))
-        return;
-    throw Object.assign(new Error("Root path must stay inside a known workspace."), { code: "WORKSPACE_ROOT_FORBIDDEN" });
-}
 export function pathInsideRoot(rootPath, targetPath) {
     const relative = path.relative(rootPath, targetPath);
     return relative === "" || (!relative.startsWith("..") && !path.isAbsolute(relative));

package/apps/daemon/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cydm/happy-elves-daemon",
-  "version": "0.1.0-beta.46",
+  "version": "0.1.0-beta.47",
   "private": true,
   "type": "module"
 }

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@cydm/happy-elves",
-  "version": "0.1.0-beta.46",
+  "version": "0.1.0-beta.47",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@cydm/happy-elves",
-      "version": "0.1.0-beta.46",
+      "version": "0.1.0-beta.47",
       "license": "Apache-2.0",
       "dependencies": {
         "@fastify/cors": "11.2.0",
@@ -799,9 +799,9 @@
       }
     },
     "node_modules/bare-os": {
-      "version": "3.9.1",
-      "resolved": "https://registry.npmjs.org/bare-os/-/bare-os-3.9.1.tgz",
-      "integrity": "sha512-6M5XjcnsygQNPMCMPXSK379xrJFiZ/AEMNBmFEmQW8d/789VQATvriyi5r0HYTL9TkQ26rn3kgdTG3aisbrXkQ==",
+      "version": "3.9.3",
+      "resolved": "https://registry.npmjs.org/bare-os/-/bare-os-3.9.3.tgz",
+      "integrity": "sha512-fF4Q7QsyKVF5Rj0qvI8BgUNjqzC2JvQlpTaPLjVJVxYVUX5Zr9un+y3w1HmA4nNKdFmRBT8z/WmrjvXzXVerKQ==",
       "license": "Apache-2.0",
       "engines": {
         "bare": ">=1.14.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cydm/happy-elves",
-  "version": "0.1.0-beta.46",
+  "version": "0.1.0-beta.47",
   "description": "Remote controller for local coding agents with hosted or self-hosted relay support.",
   "type": "module",
   "bin": {