@kaoruisaac/pedelec 0.1.17 → 0.1.18

package/README.md

@@ -138,12 +138,12 @@ const assets = await session.listAssets();
 `assets/` is shared by uploads and files written by the agent. `listAssets()` lists only its first level, ordered by filesystem modification time (newest first), and may run while the agent runs. One session can only upload one file at a time, but uploads can run alongside prepare or agent execution.
 
 ```ts
-const text = await session.readAsset("assets/report.txt", "text");
-const json = await session.readAsset<{ ok: boolean }>("assets/result.json", "json");
-const result = await session.readAsset("assets/model.glb", "file");
+const text = await session.readAsset("/report.txt", "text");
+const json = await session.readAsset<{ ok: boolean }>("/result.json", "json");
+const result = await session.readAsset("/model.glb", "file");
 ```
 
-Reads support nested `assets/...` paths up to 100 MiB. `text` and `json` require valid UTF-8; binary content is transferred over a loopback download ticket rather than extension messages.
+Public asset paths use `/...` with `assets/` as their implicit root; nested paths such as `/results/model.glb` are supported up to 100 MiB.
 
 ---
 

package/dist/index.d.ts

@@ -6,7 +6,7 @@ export type JsonPrimitive = string | number | boolean | null;
 export type JsonValue = JsonPrimitive | JsonValue[] | {
     [key: string]: JsonValue;
 };
-export type SandboxAssetPath = `assets/${string}`;
+export type SandboxAssetPath = `/${string}`;
 export type ReadAssetType = "text" | "json" | "file";
 export type SandboxAsset = {
     name: string;
@@ -276,6 +276,7 @@ export declare class PedelecSession<TToolName extends string = string> {
     onTool(handler: GenericToolHandler<TToolName>): () => void;
     onTool<TArgs = unknown, TResult = unknown>(toolName: TToolName, handler: ToolSpecificHandler<TArgs, TResult>): () => void;
     uploadAsset(file: File): Promise<SandboxAssetPath>;
+    uploadAsset(file: File, targetPath: SandboxAssetPath): Promise<SandboxAssetPath>;
     listAssets(): Promise<SandboxAsset[]>;
     readAsset(path: SandboxAssetPath, type: "text"): Promise<string>;
     readAsset<T = JsonValue>(path: SandboxAssetPath, type: "json"): Promise<T>;

package/dist/index.js

@@ -12,7 +12,7 @@ function normalizeListAssetsResponse(response) {
             return invalidListAssetsResponse({ index, asset });
         const { name, path, sizeBytes, modifiedAt } = asset;
         const validName = typeof name === "string" && name.length > 0 && name !== "." && name !== ".." && !name.includes("/") && !name.includes("\\");
-        const validPath = typeof path === "string" && !path.includes("\\") && path === `assets/${name}` && !path.split("/").includes("..");
+        const validPath = typeof path === "string" && path === `/${name}` && isValidAssetPath(path);
         const validNumber = (value) => typeof value === "number" && Number.isFinite(value) && Number.isInteger(value) && value >= 0;
         if (!validName || !validPath || !validNumber(sizeBytes) || !validNumber(modifiedAt)) {
             return invalidListAssetsResponse({ index, asset });
@@ -24,8 +24,8 @@ function invalidListAssetsResponse(details) {
     throw makeError("SDK_PROTOCOL_ERROR", "list_assets response had an invalid shape", { response: details });
 }
 function isValidAssetPath(path) {
-    return typeof path === "string" && path.startsWith("assets/") && path.length > "assets/".length && !path.includes("\\") &&
-        path.split("/").every((part, index) => index === 0 || (part.length > 0 && part !== "." && part !== ".."));
+    return typeof path === "string" && /^\/(?:[^/\\\x00-\x1f]+)(?:\/[^/\\\x00-\x1f]+)*$/.test(path) &&
+        path.split("/").every((part, index) => index === 0 || (part !== "." && part !== ".."));
 }
 const MAX_ASSET_UPLOAD_BYTES = 100 * 1024 * 1024;
 const TOOL_NAME_PATTERN = /^[a-zA-Z][a-zA-Z0-9_.-]*$/;
@@ -559,7 +559,7 @@ export class PedelecSession {
             }
         };
     }
-    uploadAsset(file) {
+    uploadAsset(file, targetPath) {
         if (this.ending || this.status === "ended")
             return Promise.reject(makeError("SESSION_ENDED", "session has ended", { sessionId: this.sessionId }));
         if (this.uploadPromise) {
@@ -570,8 +570,11 @@ export class PedelecSession {
         }
         if (file.size > MAX_ASSET_UPLOAD_BYTES)
             return Promise.reject(makeError("ASSET_TOO_LARGE", "asset exceeds the 100 MiB limit"));
+        if (targetPath !== undefined && !isValidAssetPath(targetPath))
+            return Promise.reject(makeError("ASSET_PATH_INVALID", "asset target path is invalid"));
         this.uploadPromise = this.client.request("create_asset_upload", {
             sessionId: this.sessionId, filename: file.name, sizeBytes: file.size, mimeType: file.type,
+            ...(targetPath === undefined ? {} : { targetPath }),
         }).then(async (ticket) => {
             if (!ticket?.uploadUrl || !ticket.token)
                 throw makeError("SDK_PROTOCOL_ERROR", "asset upload ticket was invalid");
@@ -591,6 +594,8 @@ export class PedelecSession {
                 throw normalizeError(payload?.error, "ASSET_UPLOAD_FAILED", "asset upload failed");
             if (!isValidAssetPath(payload?.path))
                 throw makeError("SDK_PROTOCOL_ERROR", "asset upload response had an invalid path");
+            if (targetPath !== undefined && payload.path !== targetPath)
+                throw makeError("SDK_PROTOCOL_ERROR", "asset upload response path did not match target path");
             return payload.path;
         }).finally(() => { this.uploadPromise = null; });
         return this.uploadPromise;

package/dist/index.type-test.js

@@ -96,6 +96,20 @@ async function listAssetsHasPublicTypes() {
     const path = assets[0].path;
     path;
 }
+async function assetPathsUseAssetsAsAnImplicitRoot() {
+    const pedelec = new Pedelec();
+    const session = await pedelec.resumeSession("thread_1");
+    const file = new File(["asset"], "original.txt", { type: "text/plain" });
+    const generated = await session.uploadAsset(file);
+    generated;
+    const exact = await session.uploadAsset(file, "/img/image.txt");
+    exact;
+    const namedAssetsDirectory = "/assets/image.txt";
+    void namedAssetsDirectory;
+    // @ts-expect-error asset paths must begin with a slash
+    const missingSlash = "assets/image.txt";
+    void missingSlash;
+}
 async function availabilityHasPublicType() {
     const pedelec = new Pedelec();
     const availability = await pedelec.checkAvailability();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kaoruisaac/pedelec",
-  "version": "0.1.17",
+  "version": "0.1.18",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",