@hunterzhu/pulse-adapters 0.1.11 → 0.2.1

package/dist/tools/windows-read-policy.js

@@ -0,0 +1,28 @@
+import { readdir } from 'node:fs/promises';
+import { join, relative, isAbsolute, sep } from 'node:path';
+function within(path, root) {
+    const rel = relative(root, path);
+    return rel === '' || (rel !== '..' && !rel.startsWith(`..${sep}`) && !isAbsolute(rel));
+}
+/** Keep denied subtrees off the ancestors Git must stat to reach an allowed workspace. */
+export async function carveWindowsReadDenies(denied, allowed) {
+    const result = new Set();
+    const visited = new Set();
+    const visit = async (path) => {
+        if (visited.has(path) || allowed.some(root => within(path, root)))
+            return;
+        visited.add(path);
+        if (!allowed.some(root => within(root, path))) {
+            result.add(path);
+            return;
+        }
+        // Windows inherited DENY ACEs are not POSIX allow-within-deny rules.
+        // Deny siblings along the allowed path, keeping only ancestor metadata
+        // accessible. An enumeration failure aborts setup rather than dropping a deny.
+        for (const entry of await readdir(path))
+            await visit(join(path, entry));
+    };
+    for (const path of denied)
+        await visit(path);
+    return [...result];
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hunterzhu/pulse-adapters",
-  "version": "0.1.11",
+  "version": "0.2.1",
   "repository": {
     "type": "git",
     "url": "https://github.com/zhuhengtan/Pulse"
@@ -16,7 +16,10 @@
     "registry": "https://registry.npmjs.org"
   },
   "dependencies": {
-    "@hunterzhu/pulse-runtime": "0.1.11",
-    "@hunterzhu/pulse-tool-sdk": "0.1.11"
+    "@anthropic-ai/sandbox-runtime": "0.0.77",
+    "@hunterzhu/pulse-runtime": "0.2.1",
+    "@hunterzhu/pulse-tool-sdk": "0.2.1",
+    "exceljs": "4.4.0",
+    "pdfjs-dist": "4.10.38"
   }
 }