@myagentroam/node 0.9.113 → 0.9.115

package/dist/service/workspace-file-service.js

@@ -1,5 +1,6 @@
 import { tmpdir } from 'node:os';
-import { isAbsolute, win32 } from 'node:path';
+import { isAbsolute, relative, resolve, win32 } from 'node:path';
+import { realpath } from 'node:fs/promises';
 import { listWorkspaceFiles, mutateWorkspaceFile, normalizeFilePreviewPath, readAllowedFileContentRange, readWorkspaceFileContentRange, readAllowedTextFile, readWorkspaceTextFile, writeWorkspaceTextFile, WorkspaceFileIndex } from '../workspace.js';
 const INDEX_CACHE_LIMIT = 32;
 export class WorkspaceFileService {
@@ -52,6 +53,19 @@ export class WorkspaceFileService {
         const path = normalizeFilePreviewPath(input.path);
         if (workspacePath !== workspace.path && isFilePreviewAbsolutePath(path))
             throw new Error('FILE_PATH_ESCAPE');
+        if (input.previewDirectory !== undefined) {
+            if (typeof input.previewDirectory !== 'string' ||
+                isFilePreviewAbsolutePath(path) ||
+                isFilePreviewAbsolutePath(input.previewDirectory))
+                throw new Error('FILE_PATH_ESCAPE');
+            const root = await realpath(resolve(workspacePath, input.previewDirectory));
+            const target = await realpath(resolve(workspacePath, path));
+            const suffix = relative(root, target);
+            if (suffix === '..' ||
+                suffix.startsWith(`..${process.platform === 'win32' ? '\\' : '/'}`) ||
+                isAbsolute(suffix))
+                throw new Error('FILE_PATH_ESCAPE');
+        }
         const offset = typeof input.offset === 'number' ? input.offset : 0;
         const limit = typeof input.limit === 'number' ? input.limit : 512 * 1024;
         return isFilePreviewAbsolutePath(path)

package/dist/service/workspace-workbench-service.js

@@ -150,7 +150,8 @@ export class WorkspaceWorkbenchService {
         const workspace = this.options.requireWorkspace(input.workspaceId);
         const repository = await this.fileRepository(workspace, input);
         return {
-            file: await this.options.files.readContent(workspace, input, repository)
+            file: await this.options.files.readContent(workspace, input, repository),
+            ...(input.previewDirectory === undefined ? {} : { previewBoundaryVerified: true })
         };
     }
     async directFileMetadata(input) {

package/dist/workspace.js

@@ -385,7 +385,18 @@ class RankedCandidateHeap {
 }
 function fuzzyPathScore(path, query) {
     const source = path.toLocaleLowerCase();
-    const needle = query.trim().toLocaleLowerCase();
+    const terms = query.trim().toLocaleLowerCase().split(/\s+/u);
+    const name = source.slice(source.lastIndexOf('/') + 1);
+    let total = 0;
+    for (const needle of terms) {
+        const score = fuzzyTermScore(source, name, needle);
+        if (score < 0)
+            return -1;
+        total += score;
+    }
+    return total - path.length / 1_000;
+}
+function fuzzyTermScore(source, name, needle) {
     let cursor = 0;
     let score = 0;
     let previous = -2;
@@ -399,12 +410,11 @@ function fuzzyPathScore(path, query) {
         previous = index;
         cursor = index + 1;
     }
-    const name = path.slice(path.lastIndexOf('/') + 1).toLocaleLowerCase();
     if (name.includes(needle))
         score += 40;
     else if (source.includes(needle))
         score += 16;
-    return score - path.length / 1_000;
+    return score;
 }
 /**
  * Lists directory names only for the Workspace picker. Browsing begins at the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@myagentroam/node",
-  "version": "0.9.113",
+  "version": "0.9.115",
   "description": "MyAgentRoam Node runtime CLI.",
   "license": "Apache-2.0 AND GPL-2.0-or-later",
   "type": "module",
@@ -30,9 +30,9 @@
     "npm": "11.12.1",
     "ws": "^8.21.3",
     "zod": "4.4.3",
-    "@myagentroam/agent": "0.9.113",
-    "@myagentroam/code-navigation": "0.9.113",
-    "@myagentroam/protocol": "0.9.113"
+    "@myagentroam/agent": "0.9.115",
+    "@myagentroam/protocol": "0.9.115",
+    "@myagentroam/code-navigation": "0.9.115"
   },
   "devDependencies": {
     "@types/ws": "^8.18.1"