@kubb/studio 5.11.1 → 5.11.3

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { D as InstalledExtensions, P as PublishedSnapshot, W as SnapshotUploadMetadata, a as AgentConnectInfo, c as AgentPermissions, d as ConfigEditOutcome, s as AgentPermission, u as ConfigEdit } from "./protocol-CrMJymjT.cjs";
+import { D as InstalledExtensions, P as PublishedSnapshot, W as SnapshotUploadMetadata, a as AgentConnectInfo, c as AgentPermissions, d as ConfigEditOutcome, s as AgentPermission, u as ConfigEdit } from "./protocol-DpxvWX9E.cjs";
 import { Config, Hookable, KubbHooks } from "@kubb/core";
 //#region src/connect.d.ts
 /**

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { D as InstalledExtensions, P as PublishedSnapshot, W as SnapshotUploadMetadata, a as AgentConnectInfo, c as AgentPermissions, d as ConfigEditOutcome, s as AgentPermission, u as ConfigEdit } from "./protocol-CrMJymjT.js";
+import { D as InstalledExtensions, P as PublishedSnapshot, W as SnapshotUploadMetadata, a as AgentConnectInfo, c as AgentPermissions, d as ConfigEditOutcome, s as AgentPermission, u as ConfigEdit } from "./protocol-DpxvWX9E.js";
 import { Config, Hookable, KubbHooks } from "@kubb/core";
 //#region src/connect.d.ts
 /**

package/dist/index.js

@@ -1,4 +1,4 @@
-import { AGENT_INSTANCE_HEADER, AGENT_SOCKET_PATH, AgentCloseCode, AgentMessage, AgentPermission, FileSource, MAX_PAGE_LINES, MAX_SNAPSHOT_BYTES, generationEventTypes } from "./protocol.js";
+import { AGENT_INSTANCE_HEADER, AGENT_SOCKET_PATH, AgentCloseCode, AgentMessage, AgentPermission, FileSource, MAX_SNAPSHOT_BYTES, generationEventTypes } from "./protocol.js";
 import { createRequire } from "node:module";
 import { createHash, hash, randomUUID } from "node:crypto";
 import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
@@ -116,6 +116,27 @@ async function read(path) {
 	if (runtime.isBun) return Bun.file(path).text();
 	return readFile(path, { encoding: "utf8" });
 }
+/**
+* Resolves to `true` when `path` is `parent` itself or nested inside it. Both sides are resolved
+* to absolute paths first, so relative and `..`-containing inputs compare correctly.
+*
+* Guards a destructive or an out-of-tree operation: before wiping an output directory, check that
+* it does not contain the project root, and before loading a path a caller supplied, check that it
+* did not escape the directory it is allowed to read from.
+*
+* @example
+* isPathInside('./src/gen', '.')   // true  — nested inside the root
+* isPathInside('.', '.')           // true  — the same directory counts as inside
+* isPathInside('.', './src/gen')   // false — the root is not inside its own output
+* isPathInside('../other', '.')    // false — escapes the root
+*/
+function isPathInside(path, parent) {
+	const resolvedPath = resolve(path);
+	const resolvedParent = resolve(parent);
+	if (resolvedPath === resolvedParent) return true;
+	const rel = relative(resolvedParent, resolvedPath);
+	return rel !== "" && !rel.startsWith("..") && !isAbsolute(rel);
+}
 //#endregion
 //#region ../../internals/utils/src/promise.ts
 /**
@@ -154,7 +175,7 @@ function getElapsedMs(hrStart) {
 }
 //#endregion
 //#region package.json
-var version = "5.11.1";
+var version = "5.11.3";
 //#endregion
 //#region src/resolveConfig.ts
 /**
@@ -459,6 +480,33 @@ async function mergePlugins({ diskPlugins, studioPlugins, extensions = /* @__PUR
 	})];
 }
 /**
+* Throws `KUBB_PATH_TRAVERSAL` when a plugin would write outside the config's output folder to a path
+* the disk config does not set. Studio can change `output.path`, also inside `override`, and add
+* plugins, so without this check any member of the Studio organization could write any file the agent
+* can reach, including `node_modules` code the next run imports. A path from the config file stays
+* allowed, since a monorepo may write outside its root.
+*/
+function assertOutputPaths({ plugins, diskPlugins, root, outputPath }) {
+	const base = path.resolve(root, outputPath);
+	const targetsOf = (plugin) => {
+		const { output, override } = plugin.options ?? {};
+		return [output, ...Array.isArray(override) ? override.map((entry) => entry?.options?.output) : []].flatMap((entry) => typeof entry?.path === "string" ? [path.resolve(base, entry.path)] : []);
+	};
+	const diskTargets = new Set(diskPlugins.flatMap(targetsOf));
+	for (const plugin of plugins) {
+		const target = targetsOf(plugin).find((resolved) => !diskTargets.has(resolved) && !isPathInside(resolved, base));
+		if (!target) continue;
+		throw new Diagnostics.Error({
+			code: Diagnostics.code.pathTraversal,
+			severity: "error",
+			message: `Plugin "${plugin.name}" would write to "${target}", outside the output folder "${base}". Studio can only set an output path inside it.`,
+			help: "Choose an output path inside the output folder, or set this path in the config file.",
+			location: { kind: "config" },
+			plugin: plugin.name
+		});
+	}
+}
+/**
 * Re-invokes the factory behind a disk adapter or parser with Studio's options merged over its own.
 * An instance carries live functions (`parse`, `print`, ...) that cannot survive JSON, so Studio's
 * options are a patch, not a replacement, and the factory is found from the disk instance itself: the
@@ -1401,6 +1449,33 @@ async function listDisk({ root, outputPath, maxFiles }) {
 		paths: new Set(paths)
 	};
 }
+async function readDiskFiles({ files: disk, paths, cursor = 0, limit }) {
+	const files = {};
+	const pages = {};
+	await inParallel({
+		items: paths.filter((path) => disk.paths.has(path)),
+		limit: READ_CONCURRENCY,
+		run: async (path) => {
+			const content = await disk.storage.readItem(resolve(disk.root, path));
+			if (content === null) return;
+			if (limit === void 0) {
+				files[path] = content;
+				return;
+			}
+			const lines = content.split(/\r\n|\r|\n/);
+			const end = Math.min(cursor + limit, lines.length);
+			files[path] = lines.slice(cursor, end).join("\n");
+			pages[path] = {
+				nextCursor: end < lines.length ? end : null,
+				totalLines: lines.length
+			};
+		}
+	});
+	return limit === void 0 ? { files } : {
+		files,
+		pages
+	};
+}
 /**
 * Keeps recent generations by job id in `storage`, with an index next to them so a store on disk
 * survives a restart. A generation is only ever looked up by its job id, so on a pooled sandbox one
@@ -1424,7 +1499,7 @@ function createGenerationStore({ storage, maxCount, maxMb, ttlMs, now = Date.now
 	/**
 	* Copies `files` into the store as one set of `jobId`. Above `maxSetMb` only the hashes are kept.
 	*/
-	async function keep({ jobId, source, files, maxSetMb }) {
+	async function keep({ jobId, source, files, maxSetMb, normalize = source === FileSource.OUTPUT }) {
 		const maxSetBytes = maxSetMb * MB;
 		const hashes = {};
 		let bytes = 0;
@@ -1435,8 +1510,8 @@ function createGenerationStore({ storage, maxCount, maxMb, ttlMs, now = Date.now
 				if (path.split("/").includes("..")) return;
 				const content = await files.storage.readItem(resolve(files.root, path));
 				if (content === null) return;
-				if (source === FileSource.OUTPUT && !content.trim()) return;
-				hashes[path] = hashOf(source === FileSource.OUTPUT ? `${content.trim()}\n` : content);
+				if (normalize && !content.trim()) return;
+				hashes[path] = hashOf(normalize ? `${content.trim()}\n` : content);
 				bytes += Buffer.byteLength(content);
 				if (bytes <= maxSetBytes) await storage.writeItem(`${dirOf(jobId)}${source}/${path}`, content);
 			}
@@ -1900,8 +1975,12 @@ var Agent = class extends RpcTarget {
 			this.#readConfigFileView(source),
 			this.#installedExtensions(source)
 		]);
+		const output = await this.#readDiskOutput(config).catch(async (error) => {
+			await this.#warn({ message: `Could not read the output directory: ${getErrorMessage(error)}` });
+		});
 		this.#session.connected.resolve(info);
 		return {
+			output,
 			versions: {
 				kubb: version,
 				agent: version$1
@@ -1938,6 +2017,16 @@ var Agent = class extends RpcTarget {
 			permissions: this.#permissions
 		};
 	}
+	async #readDiskOutput(config) {
+		if (this.#sandbox || !this.#permissions.allowRead || this.#session.active) return void 0;
+		const files = await listDisk({
+			root: this.#options.root,
+			outputPath: config.output.path,
+			maxFiles: DISK_SNAPSHOT_MAX_FILES
+		});
+		if (!files) return void 0;
+		return { files: [...files.paths] };
+	}
 	startGeneration(input) {
 		const stream = createGenerationStream(this.#options.hooks, input.jobId);
 		const controller = new AbortController();
@@ -1963,7 +2052,7 @@ var Agent = class extends RpcTarget {
 			severity: "error",
 			message: "Connection is closed"
 		});
-		if (this.#session.active) return this.#refuse({ message: "A generation is already in progress, please wait for it to finish" });
+		if (this.#session.active) return this.#refuse({ message: AgentMessage.GENERATION_IN_PROGRESS });
 		const settled = Promise.withResolvers();
 		this.#session.active = {
 			jobId: input.jobId,
@@ -1990,16 +2079,25 @@ var Agent = class extends RpcTarget {
 			settled.resolve();
 		}
 	}
+	/** Merges Studio's config over the disk config, refuses output paths outside the output folder, then generates in `root`. */
 	async #generate({ input, root, signal }) {
 		const { jobId, config: patch } = input;
 		const studioInput = this.#sandbox ? patch?.input : void 0;
-		if (this.#sandbox && (typeof studioInput !== "string" || !studioInput.trim() || getInputKind(studioInput) !== "inline")) return this.#refuse({ message: "A sandbox agent generates only from the OpenAPI document content Studio sends, not from a file path or URL" });
+		if (this.#sandbox && (typeof studioInput !== "string" || !studioInput.trim() || getInputKind(studioInput) !== "inline")) return this.#refuse({ message: AgentMessage.SANDBOX_INPUT_ONLY });
 		const [config, extensions] = await Promise.all([this.#options.loadConfig(), this.#installedExtensions()]);
 		const [plugins, adapter, parsers] = await Promise.all([
 			mergePlugins({
 				diskPlugins: config.plugins,
 				studioPlugins: patch?.plugins,
 				extensions
+			}).then((merged) => {
+				assertOutputPaths({
+					plugins: merged ?? [],
+					diskPlugins: config.plugins,
+					root,
+					outputPath: config.output.path
+				});
+				return merged;
 			}),
 			mergeAdapter(config.adapter, patch?.adapter, extensions),
 			mergeParsers({
@@ -2118,7 +2216,7 @@ var Agent = class extends RpcTarget {
 			message: AgentMessage.READ_AST_NOT_ALLOWED,
 			permission: AgentPermission.READ_AST
 		});
-		if (typeof input.jobId !== "string" || !input.jobId) return this.#refuse({ message: "The request must name a job" });
+		if (typeof input.jobId !== "string" || !input.jobId) return this.#refuse({ message: AgentMessage.JOB_REQUIRED });
 		const generation = await this.#generations.get(input.jobId);
 		if (!generation) return this.#refuse({ message: AgentMessage.GENERATION_GONE });
 		const kept = generation.inputBytes ? await this.#generations.readInput(input.jobId) : void 0;
@@ -2135,14 +2233,32 @@ var Agent = class extends RpcTarget {
 			message: AgentMessage.READ_NOT_ALLOWED,
 			permission: AgentPermission.READ
 		});
-		if (!Array.isArray(input.paths) || typeof input.jobId !== "string" || !input.jobId) return this.#refuse({ message: "The request must name a job and carry paths" });
+		if (!Array.isArray(input.paths) || typeof input.jobId !== "string" || !input.jobId || !["generation", "currentDisk"].includes(input.jobType)) return this.#refuse({ message: AgentMessage.FILE_REQUEST_INVALID });
 		const { paths } = input;
-		if (paths.length > 50) return this.#refuse({ message: `At most 50 paths may be requested at once` });
+		if (paths.length > 50) return this.#refuse({ message: AgentMessage.TOO_MANY_FILES });
+		if (!isValidPage(input)) return this.#refuse({ message: AgentMessage.INVALID_PAGE });
+		if (input.jobType === "currentDisk") {
+			if (this.#sandbox) return this.#refuse({ message: AgentMessage.SANDBOX_DISK_UNAVAILABLE });
+			const config = await this.#options.loadConfig();
+			const disk = await listDisk({
+				root: this.#options.root,
+				outputPath: config.output.path,
+				maxFiles: DISK_SNAPSHOT_MAX_FILES
+			});
+			if (!disk) return this.#refuse({ message: AgentMessage.GENERATION_GONE });
+			const result = await readDiskFiles({
+				files: disk,
+				paths,
+				cursor: input.cursor,
+				limit: input.limit
+			});
+			await this.#logCommand("readFiles", `read ${Object.keys(result.files).length}/${paths.length} requested file${paths.length === 1 ? "" : "s"}`);
+			return result;
+		}
 		const generation = await this.#generations.get(input.jobId);
 		if (!generation) return this.#refuse({ message: AgentMessage.GENERATION_GONE });
-		if (!isValidPage(input)) return this.#refuse({ message: `The cursor must be a whole line from 0 and come with a limit of 1 to ${MAX_PAGE_LINES} lines` });
 		const source = input.source === FileSource.DISK ? FileSource.DISK : FileSource.OUTPUT;
-		if (!generation[source]) return this.#refuse({ message: "This agent kept no snapshot of the files on disk for that job" });
+		if (!generation[source]) return this.#refuse({ message: AgentMessage.NO_DISK_SNAPSHOT });
 		const result = await this.#generations.read({
 			generation,
 			source,
@@ -2163,15 +2279,15 @@ var Agent = class extends RpcTarget {
 			permission: AgentPermission.READ
 		});
 		const { jobId, path, base, cursor = 0, limit } = input;
-		if (typeof jobId !== "string" || !jobId || typeof path !== "string" || !path || typeof base?.jobId !== "string" || !base.jobId) return this.#refuse({ message: "The request must name a job, a base, and a path" });
+		if (typeof jobId !== "string" || !jobId || typeof path !== "string" || !path || typeof base?.jobId !== "string" || !base.jobId) return this.#refuse({ message: AgentMessage.DIFF_REQUEST_INVALID });
 		if (!isValidPage({
 			cursor,
 			limit
-		})) return this.#refuse({ message: `The cursor must be a whole line from 0 and come with a limit of 1 to ${MAX_PAGE_LINES} lines` });
+		})) return this.#refuse({ message: AgentMessage.INVALID_PAGE });
 		const [generation, baseGeneration] = await Promise.all([this.#generations.get(jobId), this.#generations.get(base.jobId)]);
 		if (!generation || !baseGeneration) return this.#refuse({ message: AgentMessage.GENERATION_GONE });
 		const baseSource = base.source === FileSource.DISK ? FileSource.DISK : FileSource.OUTPUT;
-		if (!baseGeneration[baseSource]) return this.#refuse({ message: "This agent kept no snapshot of the files on disk for that job" });
+		if (!baseGeneration[baseSource]) return this.#refuse({ message: AgentMessage.NO_DISK_SNAPSHOT });
 		const [after, before] = await Promise.all([this.#generations.read({
 			generation,
 			source: FileSource.OUTPUT,
@@ -2182,7 +2298,7 @@ var Agent = class extends RpcTarget {
 			paths: [path]
 		})]);
 		const afterContent = after.files[path];
-		if (afterContent === void 0 && path in generation.output.hashes) return this.#refuse({ message: "This agent kept only the hashes of that job" });
+		if (afterContent === void 0 && path in generation.output.hashes) return this.#refuse({ message: AgentMessage.HASHES_ONLY });
 		const beforeContent = before.files[path];
 		if (beforeContent === void 0) return {
 			hunks: [],