@melra/file-runtime 0.3.0-alpha.4 → 0.3.0-alpha.5

package/README.md

@@ -0,0 +1,29 @@
+# @melra/file-runtime
+
+Confined filesystem operations for [MELRA](https://github.com/XAGI-Lab/melra):
+list, read, stat, hash, write, move, delete, and mkdir, all rooted inside one
+workspace.
+
+```bash
+npm install @melra/file-runtime
+```
+
+```ts
+import { FileRuntime } from "@melra/file-runtime";
+
+const files = await FileRuntime.create({ root: workspaceRoot, maxFileBytes });
+```
+
+Every path is resolved and checked against the root before the operation runs,
+following symlinks first — so a link pointing outside the workspace is refused
+rather than followed. Relative paths resolve against the root; absolute paths
+outside it are an error, not a fallback.
+
+`maxFileBytes` bounds how much a single read pulls into memory. It is a
+resource limit rather than a permission check: an unbounded read of a huge file
+takes the host down regardless of who was allowed to read it.
+
+Requires Node.js 22 or newer. Full documentation:
+[github.com/XAGI-Lab/melra](https://github.com/XAGI-Lab/melra)
+
+Apache-2.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@melra/file-runtime",
-  "version": "0.3.0-alpha.4",
+  "version": "0.3.0-alpha.5",
   "description": "Workspace-confined file execution runtime for MELRA.",
   "license": "Apache-2.0",
   "repository": {
@@ -21,7 +21,7 @@
     "dist"
   ],
   "dependencies": {
-    "@melra/protocol": "0.3.0-alpha.4"
+    "@melra/protocol": "0.3.0-alpha.5"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",