@lousy-agents/mcp 5.22.1 → 5.22.3

package/dist/mcp-server.js

@@ -6559,7 +6559,7 @@ function escapeJsonPtr(str) {
 
 
 },
-4010(__unused_rspack_module, __unused_rspack___webpack_exports__, __webpack_require__) {
+7046(__unused_rspack_module, __unused_rspack___webpack_exports__, __webpack_require__) {
 // NAMESPACE OBJECT: ../../node_modules/micromark/lib/constructs.js
 var constructs_namespaceObject = {};
 __webpack_require__.r(constructs_namespaceObject);
@@ -39087,6 +39087,47 @@ function errorCauseOptions(error) {
 
 // EXTERNAL MODULE: external "node:os"
 var external_node_os_ = __webpack_require__(8161);
+;// CONCATENATED MODULE: ../../node_modules/@openclaw/fs-safe/dist/windows-appcontainer.js
+
+
+/** The native owner caches immutable primary-token membership across Workers. */
+function isWindowsAppContainer(binding) {
+    if (!binding.isWindowsAppContainer)
+        return undefined;
+    try {
+        const membership = binding.isWindowsAppContainer();
+        if (typeof membership !== "boolean")
+            throw new Error("Invalid AppContainer membership");
+        return membership;
+    }
+    catch (cause) {
+        throw new errors_FsSafeError("permission-unverified", "Windows process token membership could not be verified", { cause });
+    }
+}
+function windows_appcontainer_assertWindowsHelperAllowed() {
+    if (process.platform !== "win32")
+        return;
+    const binding = native_getNativeBinding();
+    if (binding && isWindowsAppContainer(binding)) {
+        // Current libuv can hang while creating child-process pipes in a lowbox.
+        throw new errors_FsSafeError("helper-unavailable", "External Windows security helpers are unavailable inside an AppContainer");
+    }
+}
+function assertWindowsAclRemediationAllowed() {
+    if (process.platform !== "win32")
+        return;
+    let binding;
+    try {
+        binding = getNativeBinding();
+    }
+    catch {
+        return;
+    } // Command formatting remains available without an addon.
+    if (binding && isWindowsAppContainer(binding)) {
+        throw new FsSafeError("helper-unavailable", "Windows ACL reset commands are unavailable inside an AppContainer");
+    }
+}
+
 ;// CONCATENATED MODULE: ../../node_modules/@openclaw/fs-safe/dist/realpath.js
 
 
@@ -39094,9 +39135,41 @@ var external_node_os_ = __webpack_require__(8161);
 
 
 
+
 const runtimePlatform = process.versions.bun ? (0,external_node_os_.platform)() : undefined;
 const bunPosix = runtimePlatform === "darwin" || runtimePlatform === "linux" ? runtimePlatform : undefined;
 function realpath_resolve(input, native) {
+    if (native && process.platform === "win32") {
+        try {
+            return external_node_fs_.realpathSync.native(input);
+        }
+        catch (error) {
+            if (error.code !== "EPERM" || error.syscall !== "realpath")
+                throw error;
+            let binding;
+            try {
+                binding = native_getNativeBinding();
+            }
+            catch {
+                binding = undefined;
+            }
+            if (!binding || !isWindowsAppContainer(binding))
+                throw error;
+            if (!binding?.resolveWindowsCanonicalPath) {
+                throw new errors_FsSafeError("helper-unavailable", "Windows canonicalization after a denied DOS-name query requires the native binding", { cause: error });
+            }
+            let resolved;
+            try {
+                resolved = binding.resolveWindowsCanonicalPath(input);
+            }
+            catch (cause) {
+                throw new errors_FsSafeError("path-mismatch", "Windows canonical path cannot be verified safely", { cause });
+            }
+            if (resolved === null)
+                throw error;
+            return resolved;
+        }
+    }
     if (bunPosix) {
         // Bun 1.4.2 normalizes native path components and opens the leaf for reads.
         // The Rust OS resolver preserves permissions, locks and physical spelling.
@@ -40798,6 +40871,7 @@ function shortPath(value) {
 
 
 
+
 const execFileAsync = (0,external_node_util_.promisify)(external_node_child_process_.execFile);
 const DEFAULT_PERMISSION_EXEC_TIMEOUT_MS = 30_000;
 function formatPermissionErrorDetail(value) {
@@ -40975,6 +41049,7 @@ function getPermissionCommandFailure(error, command, durationMs) {
     return { command, durationMs: Math.round(durationMs), ...detail };
 }
 async function executePermissionCommand(command, args, timeoutMs = DEFAULT_PERMISSION_EXEC_TIMEOUT_MS) {
+    assertWindowsHelperAllowed();
     const startedAt = performance.now();
     try {
         return (await execFileAsync(command, args, {
@@ -40998,6 +41073,7 @@ async function executePermissionCommand(command, args, timeoutMs = DEFAULT_PERMI
 ;// CONCATENATED MODULE: ../../node_modules/@openclaw/fs-safe/dist/windows-security-facts.js
 
 const SID_RE = /^s-\d+-\d+(?:-\d+)+$/;
+const APP_CONTAINER_SID_RE = /^s-1-15-2(?:-\d+){7,}$/;
 const SYSTEM_SID = "s-1-5-18";
 const ADMINISTRATORS_SID = "s-1-5-32-544";
 const WORLD_SIDS = new Set([
@@ -41032,6 +41108,7 @@ function validateAce(value, allowUnknownFlags) {
 function validateDescriptor(value, allowUnknownFlags) {
     if (!windows_security_facts_record(value) || typeof value.ownerSid !== "string" || !SID_RE.test(value.ownerSid) ||
         typeof value.currentUserSid !== "string" || !SID_RE.test(value.currentUserSid) ||
+        (value.currentAppContainerSid != null && (typeof value.currentAppContainerSid !== "string" || !APP_CONTAINER_SID_RE.test(value.currentAppContainerSid))) ||
         typeof value.daclPresent !== "boolean" || typeof value.isLocal !== "boolean" ||
         typeof value.aceListComplete !== "boolean" || !Array.isArray(value.unsupportedAceTypes) ||
         !value.unsupportedAceTypes.every(windows_security_facts_uint32) || !Array.isArray(value.aces) ||
@@ -41057,6 +41134,8 @@ function summarize(facts) {
     let groupReadable = false;
     let groupWritable = false;
     const trusted = new Set([facts.currentUserSid, SYSTEM_SID, ADMINISTRATORS_SID]);
+    if (facts.currentAppContainerSid)
+        trusted.add(facts.currentAppContainerSid);
     for (const ace of facts.aces) {
         if (ace.aceType !== "allow" || ace.flags.inheritOnly || trusted.has(ace.sid))
             continue;
@@ -41125,6 +41204,7 @@ function windows_security_helper_explainWindowsSecurityHelperFailure(error) {
 
 
 
+
 const MAX_OUTPUT_BYTES = 1024 * 1024;
 const TERMINATION_GRACE_MS = 1_000;
 const FULL_IDENTITY = /^[0-9a-f]{16}:[0-9a-f]{32}$/;
@@ -41227,6 +41307,7 @@ function explainHelperFailure(error, file) {
     }
 }
 function executeSync(operation, params) {
+    assertWindowsHelperAllowed();
     const { file, args, env } = windows_security_command_command(operation, params);
     const startedAt = performance.now();
     const result = spawnSync(file, args, {
@@ -41299,6 +41380,7 @@ function hasUnsettledWindowsSecurityCommand(error) {
 }
 function ignoreLateError() { }
 async function execute(operation, params, request) {
+    windows_appcontainer_assertWindowsHelperAllowed();
     const selected = request ?? windows_security_command_command(operation, params);
     const { file, args, env, input, timeoutMs = (/* inlined export .DEFAULT_PERMISSION_EXEC_TIMEOUT_MS */30000), maxOutputBytes = MAX_OUTPUT_BYTES } = selected;
     const startedAt = performance.now();
@@ -42725,7 +42807,7 @@ class AtomicFile {
     }
     *readFile(sizeHint) {
         if (typeof this.resource !== "number")
-            return yield* atomic_io_wait(this.resource.readFile());
+            return yield* atomic_io_wait(readFileHandleBounded(this.resource, Infinity));
         if (sizeHint === undefined)
             return this.io.syncFs.readFileSync(this.resource);
         const fd = this.resource;
@@ -53121,6 +53203,7 @@ function publishThroughPlaceholder(params, assertCurrent) {
 
 
 
+
 
 
 async function runPinnedStagedWrite(params, parentPath, parentGuard) {
@@ -53239,7 +53322,7 @@ async function runPinnedStagedWrite(params, parentPath, parentGuard) {
                 const expectedHash = sha256Hex(params.input.data, params.input.encoding);
                 readHandle = await promises_.open(targetPath, read_open_flags_resolveReadOpenFlags());
                 const readHandleStat = external_node_fs_.fstatSync(readHandle.fd, { bigint: true });
-                const actualHash = sha256Hex(await readHandle.readFile());
+                const actualHash = sha256Hex(await readFileHandleBounded(readHandle, Infinity));
                 if (actualHash !== expectedHash) {
                     throw new errors_FsSafeError("path-mismatch", "fallback target changed during write");
                 }
@@ -53990,9 +54073,7 @@ async function read_opened_file_readOpenedFileSafely(params) {
     if (maxBytes !== undefined && params.opened.stat.size > maxBytes) {
         throw new errors_FsSafeError("too-large", `file exceeds limit of ${maxBytes} bytes (got ${params.opened.stat.size})`);
     }
-    const buffer = maxBytes === undefined
-        ? await params.opened.handle.readFile()
-        : await readFileHandleBoundedWithSize(params.opened.handle, maxBytes, params.opened.stat.size);
+    const buffer = await readFileHandleBoundedWithSize(params.opened.handle, maxBytes ?? Infinity, params.opened.stat.size);
     return {
         buffer,
         containment: params.opened.containment,
@@ -108598,4 +108679,4 @@ if (installedChunkData !== 0) { // 0 means "already installed".'
 // module factories are used so entry inlining is disabled
 // startup
 // Load entry module and return exports
-var __webpack_exports__ = __webpack_require__(4010);
+var __webpack_exports__ = __webpack_require__(7046);

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@lousy-agents/mcp",
-    "version": "5.22.1",
+    "version": "5.22.3",
     "description": "MCP server for lousy-agents - provides AI coding assistant tools via the Model Context Protocol",
     "type": "module",
     "repository": {