@fabrika/canvas-kernel 0.1.45 → 0.3.1

package/src/engine/file-admission.ts

@@ -0,0 +1,25 @@
+import { readFileSync, realpathSync } from 'node:fs'
+import { resolve } from 'node:path'
+
+export type AssertReadable = (path: string) => void
+
+export class CanvasFileAdmissionError extends Error {
+	constructor() {
+		super('Canvas file access refused')
+	}
+}
+
+export function assertCanvasFileReadable(path: string, assertReadable?: AssertReadable): void {
+	if (!assertReadable) return
+	try {
+		assertReadable(resolve(path))
+		assertReadable(realpathSync(path))
+	} catch {
+		throw new CanvasFileAdmissionError()
+	}
+}
+
+export function readCanvasFile(path: string, assertReadable?: AssertReadable): string {
+	assertCanvasFileReadable(path, assertReadable)
+	return readFileSync(path, 'utf-8')
+}

package/src/engine/paths.ts

@@ -1,6 +1,6 @@
-import { join } from "path";
-import { tmpdir, homedir } from "os";
-import { mkdirSync } from "fs";
+import { mkdirSync } from 'fs'
+import { homedir, tmpdir } from 'os'
+import { join } from 'path'
 
 /**
  * On-disk layout for one canvas host (agent-canvas, fabrika, …).
@@ -10,54 +10,54 @@ import { mkdirSync } from "fs";
  * coexist in one process (tests rely on this).
  */
 export interface CanvasPaths {
-  /** Persistent root — survives reboots. */
-  dataDir: string;
-  /** Session + revision store. */
-  sessionsDir: string;
-  /** Ephemeral root — may be lost on reboot. */
-  tempDir: string;
-  /** Daemon PID file. */
-  pidFile: string;
-  /** Scratch space for JSX compilation. */
-  compileTempDir: string;
-  /** Uploaded annotation images. */
-  uploadsDir: string;
+	/** Persistent root — survives reboots. */
+	dataDir: string
+	/** Session + revision store. */
+	sessionsDir: string
+	/** Ephemeral root — may be lost on reboot. */
+	tempDir: string
+	/** Daemon PID file. */
+	pidFile: string
+	/** Scratch space for JSX compilation. */
+	compileTempDir: string
+	/** Uploaded annotation images. */
+	uploadsDir: string
 }
 
 export interface CanvasPathsConfig {
-  /** Namespace for on-disk locations, e.g. `"agent-canvas"` or `"fabrika"`. */
-  appName: string;
-  /**
-   * Persistent root. Defaults to `~/.claude/<appName>`. Hosts that keep data
-   * elsewhere — or that migrate from a legacy location — resolve it themselves
-   * and pass the result; the kernel holds no migration policy.
-   */
-  dataDir?: string;
-  /** Ephemeral root. Defaults to `<tmpdir>/<appName>`. */
-  tempDir?: string;
-  /** Create the directories. Pass `false` when only the strings are needed. */
-  ensure?: boolean;
+	/** Namespace for on-disk locations, e.g. `"agent-canvas"` or `"fabrika"`. */
+	appName: string
+	/**
+	 * Persistent root. Defaults to `~/.claude/<appName>`. Hosts that keep data
+	 * elsewhere — or that migrate from a legacy location — resolve it themselves
+	 * and pass the result; the kernel holds no migration policy.
+	 */
+	dataDir?: string
+	/** Ephemeral root. Defaults to `<tmpdir>/<appName>`. */
+	tempDir?: string
+	/** Create the directories. Pass `false` when only the strings are needed. */
+	ensure?: boolean
 }
 
 export function createCanvasPaths(config: CanvasPathsConfig): CanvasPaths {
-  const { appName, ensure = true } = config;
-  const dataDir = config.dataDir ?? join(homedir(), ".claude", appName);
-  const tempDir = config.tempDir ?? join(tmpdir(), appName);
+	const { appName, ensure = true } = config
+	const dataDir = config.dataDir ?? join(homedir(), '.claude', appName)
+	const tempDir = config.tempDir ?? join(tmpdir(), appName)
 
-  const paths: CanvasPaths = {
-    dataDir,
-    sessionsDir: join(dataDir, "sessions"),
-    tempDir,
-    pidFile: join(tempDir, "daemon.pid"),
-    compileTempDir: join(tempDir, "compile"),
-    uploadsDir: join(tempDir, "uploads"),
-  };
+	const paths: CanvasPaths = {
+		dataDir,
+		sessionsDir: join(dataDir, 'sessions'),
+		tempDir,
+		pidFile: join(tempDir, 'daemon.pid'),
+		compileTempDir: join(tempDir, 'compile'),
+		uploadsDir: join(tempDir, 'uploads'),
+	}
 
-  if (ensure) {
-    mkdirSync(paths.sessionsDir, { recursive: true });
-    mkdirSync(paths.compileTempDir, { recursive: true });
-    mkdirSync(paths.uploadsDir, { recursive: true });
-  }
+	if (ensure) {
+		mkdirSync(paths.sessionsDir, { recursive: true })
+		mkdirSync(paths.compileTempDir, { recursive: true })
+		mkdirSync(paths.uploadsDir, { recursive: true })
+	}
 
-  return paths;
+	return paths
 }