@lousy-agents/mcp 5.22.19 → 5.22.20

package/dist/mcp-server.js

@@ -38052,6 +38052,7 @@ const OPERATIONAL_CODE_VALUES = [
     "not-empty",
     "not-found",
     "not-removable",
+    "permission-denied",
     "permission-unverified",
     "read-failed",
     "timeout",
@@ -39606,6 +39607,15 @@ function fileNotFoundError(cause, details) {
 function root_errors_outsideWorkspaceError() {
     return new errors_FsSafeError("outside-workspace", "file is outside workspace root");
 }
+/** Classify raw traversal denials without disguising an established policy failure. */
+function pathTraversalPermissionError(error, targetPath) {
+    if (error instanceof errors_FsSafeError)
+        return error.code === "permission-denied" ? error : undefined;
+    if (!hasNodeErrorCode(error, "EACCES") && !hasNodeErrorCode(error, "EPERM"))
+        return;
+    const deniedPath = path_isNodeError(error) && typeof error.path === "string" ? error.path : targetPath;
+    return new errors_FsSafeError("permission-denied", `permission denied while resolving ${deniedPath}`, errorCauseOptions(error));
+}
 function rootPathChangedError(cause) {
     return new errors_FsSafeError("path-mismatch", "root path changed during operation", { cause });
 }
@@ -47532,6 +47542,9 @@ async function resolvePathInRoot(root, relativePath, options) {
         }
     }
     catch (error) {
+        const permissionError = pathTraversalPermissionError(error, rawAbsolutePath);
+        if (permissionError)
+            throw permissionError;
         if (error instanceof errors_FsSafeError && error.code === "symlink") {
             throw error;
         }
@@ -49992,6 +50005,9 @@ async function resolveGuardedWritePathInRoot(root, params) {
             });
         }
         catch (error) {
+            const permissionError = pathTraversalPermissionError(error, resolvedPath.resolved);
+            if (permissionError)
+                throw permissionError;
             throw new errors_FsSafeError("path-alias", "path alias escape blocked", errorCauseOptions(error));
         }
     }
@@ -52036,7 +52052,6 @@ async function removeStaleSidecarLockIfAllowed(params) {
 }
 
 ;// CONCATENATED MODULE: ../../node_modules/@openclaw/fs-safe/dist/sidecar-lock-policy.js
-
 const sidecar_lock_policy_MAX_TIMER_DELAY_MS = 2 ** 31 - 1;
 function assertFiniteNonNegative(value, label) {
     if (!Number.isFinite(value) || value < 0) {
@@ -52138,16 +52153,16 @@ function sidecarLockPayloadCreatedAtMs(payload) {
     const createdAtMs = Date.parse(createdAt);
     return Number.isFinite(createdAtMs) ? createdAtMs : null;
 }
-async function defaultSidecarLockShouldReclaim(params) {
-    const createdAtMs = sidecarLockPayloadCreatedAtMs(params.payload);
+function defaultSidecarLockShouldReclaim(snapshot, staleMs, nowMs) {
+    const createdAtMs = sidecarLockPayloadCreatedAtMs(snapshot.payload);
     if (createdAtMs !== null)
-        return params.nowMs - createdAtMs > params.staleMs;
-    try {
-        return params.nowMs - external_node_fs_.statSync(params.lockPath).mtimeMs > params.staleMs;
-    }
-    catch {
+        return nowMs - createdAtMs > staleMs;
+    if (!snapshot.stat)
         return true;
-    }
+    // A released pathname may already name another owner; age only the admitted record.
+    const mtimeMs = "mtimeNs" in snapshot.stat
+        ? Number(snapshot.stat.mtimeNs) / 1e6 : snapshot.stat.mtimeMs;
+    return nowMs - mtimeMs > staleMs;
 }
 
 ;// CONCATENATED MODULE: ../../node_modules/@openclaw/fs-safe/dist/sidecar-lock-admission-parser.js
@@ -52365,12 +52380,14 @@ async function handleStaleSidecarAdmission(params) {
             return;
         throw error;
     }
-    const shouldReclaim = staleOptions.shouldReclaim ?? defaultSidecarLockShouldReclaim;
+    const shouldReclaim = staleOptions.shouldReclaim;
     let reclaim;
     try {
         reclaim = await admission.run(async () => {
             assertUnheld();
             try {
+                if (!shouldReclaim)
+                    return defaultSidecarLockShouldReclaim(snapshot, params.staleMs, Date.now());
                 return await Reflect.apply(shouldReclaim, undefined, [{
                         lockPath,
                         normalizedTargetPath,
@@ -59109,6 +59126,9 @@ async function resolvePinnedRootPathInRoot(root, params) {
         resolved = await (params.removalReceipts ? resolveRootPathForRemoval(resolution, params.removalReceipts) : root_path_resolveRootPath(resolution));
     }
     catch (err) {
+        const permissionError = pathTraversalPermissionError(err, params.relativePath);
+        if (permissionError)
+            throw permissionError;
         if (err instanceof errors_FsSafeError && err.code === "symlink")
             throw err;
         throw new errors_FsSafeError("path-alias", "path alias escape blocked", { cause: err });

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@lousy-agents/mcp",
-    "version": "5.22.19",
+    "version": "5.22.20",
     "description": "MCP server for lousy-agents - provides AI coding assistant tools via the Model Context Protocol",
     "type": "module",
     "repository": {