@mtreeai/msapling-cli 2.3.6-beta.2 → 2.3.6-beta.3

package/dist/index.js

@@ -7016,12 +7016,15 @@ var init_Storage = __esm({
        * This ensures:
        * 1. Only one process writes at a time (file lock)
        * 2. Partial writes don't corrupt the JSON (atomic rename)
+       *
+       * CLI-LSTAT-HISTORY-01: Pass realpath:false so lockfile never calls lstat on a
+       * path that may not exist yet (first run before any history has been written).
        */
       async saveHistory(history) {
         const path2 = join14(this.baseDir, "history", "shell_history.json");
         let release2;
         try {
-          release2 = await lockfile.lock(path2, { retries: 5, retryWait: 50 });
+          release2 = await lockfile.lock(path2, { retries: 5, retryWait: 50, realpath: false });
           await this.historyMutex.run(async () => {
             const tmpPath = `${path2}.tmp`;
             const content = JSON.stringify(history, null, 2);
@@ -7042,7 +7045,7 @@ var init_Storage = __esm({
         } finally {
           if (release2) {
             try {
-              await lockfile.unlock(path2, { skipStale: true });
+              await lockfile.unlock(path2, { skipStale: true, realpath: false });
             } catch (e) {
               console.warn(`Failed to unlock history file: ${e}`);
             }
@@ -7053,23 +7056,41 @@ var init_Storage = __esm({
        * SYNC-01: Serialised history read with file-based locking.
        * Reads are gated behind the file lock so a read that overlaps with an
        * in-progress write from another process always sees a complete, valid JSON.
+       *
+       * CLI-LSTAT-HISTORY-01: Short-circuit before locking when the file is absent
+       * so lockfile never calls lstat/realpath on a nonexistent path (ENOENT crash
+       * on fresh install).  Corrupt JSON is caught, backed up, and treated as empty
+       * rather than propagating a parse error.
        */
       async loadHistory() {
         const path2 = join14(this.baseDir, "history", "shell_history.json");
+        if (!existsSync13(path2)) {
+          return [];
+        }
         let release2;
         try {
-          release2 = await lockfile.lock(path2, { retries: 5, retryWait: 50 });
-          return this.historyMutex.run(async () => {
-            if (existsSync13(path2)) {
-              const text = await readFile12(path2, "utf8");
+          release2 = await lockfile.lock(path2, { retries: 5, retryWait: 50, realpath: false });
+          return await this.historyMutex.run(async () => {
+            if (!existsSync13(path2)) {
+              return [];
+            }
+            const text = await readFile12(path2, "utf8");
+            try {
               return JSON.parse(text);
+            } catch {
+              console.warn("[msapling] shell_history.json is corrupt; resetting to empty history.");
+              const backupPath = `${path2}.corrupt.${Date.now()}.bak`;
+              try {
+                renameSync2(path2, backupPath);
+              } catch {
+              }
+              return [];
             }
-            return [];
           });
         } finally {
           if (release2) {
             try {
-              await lockfile.unlock(path2, { skipStale: true });
+              await lockfile.unlock(path2, { skipStale: true, realpath: false });
             } catch (e) {
               console.warn(`Failed to unlock history file: ${e}`);
             }
@@ -7078,12 +7099,13 @@ var init_Storage = __esm({
       }
       /**
        * SYNC-01: Serialised permissions write with file-based locking.
+       * CLI-LSTAT-HISTORY-01: realpath:false prevents ENOENT lstat on first run.
        */
       async savePermissions(permissions) {
         const path2 = join14(this.baseDir, "vault", "permissions.json");
         let release2;
         try {
-          release2 = await lockfile.lock(path2, { retries: 5, retryWait: 50 });
+          release2 = await lockfile.lock(path2, { retries: 5, retryWait: 50, realpath: false });
           await this.permissionsMutex.run(async () => {
             const tmpPath = `${path2}.tmp`;
             const content = JSON.stringify(permissions, null, 2);
@@ -7104,7 +7126,7 @@ var init_Storage = __esm({
         } finally {
           if (release2) {
             try {
-              await lockfile.unlock(path2, { skipStale: true });
+              await lockfile.unlock(path2, { skipStale: true, realpath: false });
             } catch (e) {
               console.warn(`Failed to unlock permissions file: ${e}`);
             }
@@ -7113,23 +7135,28 @@ var init_Storage = __esm({
       }
       /**
        * SYNC-01: Serialised permissions read with file-based locking.
+       * CLI-LSTAT-HISTORY-01: Short-circuit on missing file; realpath:false avoids
+       * lstat on a path that may not exist yet on a fresh install.
        */
       async loadPermissions() {
         const path2 = join14(this.baseDir, "vault", "permissions.json");
+        if (!existsSync13(path2)) {
+          return { trustedCommands: [], trustedPaths: [] };
+        }
         let release2;
         try {
-          release2 = await lockfile.lock(path2, { retries: 5, retryWait: 50 });
-          return this.permissionsMutex.run(async () => {
-            if (existsSync13(path2)) {
-              const text = await readFile12(path2, "utf8");
-              return JSON.parse(text);
+          release2 = await lockfile.lock(path2, { retries: 5, retryWait: 50, realpath: false });
+          return await this.permissionsMutex.run(async () => {
+            if (!existsSync13(path2)) {
+              return { trustedCommands: [], trustedPaths: [] };
             }
-            return { trustedCommands: [], trustedPaths: [] };
+            const text = await readFile12(path2, "utf8");
+            return JSON.parse(text);
           });
         } finally {
           if (release2) {
             try {
-              await lockfile.unlock(path2, { skipStale: true });
+              await lockfile.unlock(path2, { skipStale: true, realpath: false });
             } catch (e) {
               console.warn(`Failed to unlock permissions file: ${e}`);
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mtreeai/msapling-cli",
-  "version": "2.3.6-beta.2",
+  "version": "2.3.6-beta.3",
   "description": "MSapling CLI — React/Ink terminal client for the MSapling backend (chat, projects, MDrive, agent tools). Proprietary, see LICENSE.",
   "license": "SEE LICENSE IN LICENSE",
   "author": "MSapling Team",