@lousy-agents/agent-shell 5.8.5 → 5.8.6

package/dist/index.js

@@ -567,6 +567,13 @@ function isWithinProjectRoot(resolvedPath, projectRoot) {
     // Outside the root if: empty, exact "..", starts with "../" (or "..\"), or is absolute (different drive on Windows)
     return rel !== "" && rel !== ".." && !rel.startsWith(`..${external_node_path_namespaceObject.sep}`) && !(0,external_node_path_namespaceObject.isAbsolute)(rel);
 }
+function isPathNotFoundError(err) {
+    if (typeof err === "object" && err !== null && "code" in err) {
+        const { code } = err;
+        return code === "ENOENT" || code === "ENOTDIR";
+    }
+    return false;
+}
 
 ;// CONCATENATED MODULE: ../../node_modules/zod/v4/core/core.js
 /** A special constant with type `never` */
@@ -14408,8 +14415,27 @@ async function resolveReadEventsDir(env, deps) {
     const defaultDir = (0,external_node_path_namespaceObject.join)(projectRoot, ".agent-shell", "events");
     const logDir = env.AGENTSHELL_LOG_DIR;
     if (logDir !== undefined && logDir !== "") {
-        const resolved = await deps.realpath(logDir);
-        if (!isWithinProjectRoot(resolved, projectRoot)) {
+        const projectRootReal = await deps.realpath(projectRoot);
+        const candidate = (0,external_node_path_namespaceObject.resolve)(projectRoot, logDir);
+        if (!isWithinProjectRoot(candidate, projectRoot) && !isWithinProjectRoot(candidate, projectRootReal)) {
+            return {
+                dir: "",
+                error: "AGENTSHELL_LOG_DIR resolves outside project root"
+            };
+        }
+        let resolved;
+        try {
+            resolved = await deps.realpath(candidate);
+        } catch (err) {
+            if (isPathNotFoundError(err)) {
+                return {
+                    dir: "",
+                    error: "AGENTSHELL_LOG_DIR does not exist or is not a directory"
+                };
+            }
+            throw err;
+        }
+        if (!isWithinProjectRoot(resolved, projectRootReal)) {
             return {
                 dir: "",
                 error: "AGENTSHELL_LOG_DIR resolves outside project root"
@@ -14874,13 +14900,6 @@ function evaluatePolicy(policy, command) {
         return `\\x${ch.charCodeAt(0).toString(16).padStart(2, "0")}`;
     });
 }
-function isPolicyFileNotFound(error) {
-    if (typeof error === "object" && error !== null && "code" in error) {
-        const { code } = error;
-        return code === "ENOENT" || code === "ENOTDIR";
-    }
-    return false;
-}
 function resolvePolicyPath(env, repoRoot) {
     const override = env.AGENTSHELL_POLICY_PATH;
     if (override !== undefined && override !== "") {
@@ -14910,7 +14929,7 @@ async function loadPolicy(env, deps) {
     try {
         resolvedPath = await deps.realpath(candidatePath);
     } catch (error) {
-        if (isPolicyFileNotFound(error)) {
+        if (isPathNotFoundError(error)) {
             if (isOverride) {
                 throw new Error(`Policy override path does not exist: ${sanitizePath(candidatePath)}`);
             }
@@ -14925,7 +14944,7 @@ async function loadPolicy(env, deps) {
     try {
         content = await deps.readFile(resolvedPath, "utf-8");
     } catch (error) {
-        if (isPolicyFileNotFound(error)) {
+        if (isPathNotFoundError(error)) {
             if (isOverride) {
                 throw new Error(`Policy override path does not exist: ${sanitizePath(resolvedPath)}`);
             }
@@ -15091,13 +15110,6 @@ function captureTags(env) {
 
 const SESSION_ID_PATTERN = /^[a-zA-Z0-9_-]+$/;
 const DEFAULT_EVENTS_SUBDIR = ".agent-shell/events";
-function isPathNotFoundError(err) {
-    if (typeof err === "object" && err !== null && "code" in err) {
-        const code = err.code;
-        return code === "ENOENT" || code === "ENOTDIR";
-    }
-    return false;
-}
 async function realpathExistingAncestor(targetPath, deps) {
     let current = targetPath;
     while(true){