@papercraneai/sandbox-agent 0.1.6 → 0.1.7

package/dist/index.js

@@ -4,7 +4,7 @@ import { createServer } from "http";
 import { WebSocketServer, WebSocket } from "ws";
 import { Tail } from "tail";
 import { query, tool, createSdkMcpServer } from "@anthropic-ai/claude-agent-sdk";
-import { readdir, stat, mkdir, readFile, writeFile, access, unlink } from "fs/promises";
+import { readdir, stat, mkdir, readFile, writeFile, access, unlink, rm } from "fs/promises";
 import { join, dirname, resolve } from "path";
 import { fileURLToPath } from "url";
 import { spawn, execSync } from "child_process";
@@ -837,13 +837,17 @@ app.delete("/files/delete", async (req, res) => {
             res.status(403).json({ error: "Access denied: path outside project directory" });
             return;
         }
-        // Check if file exists and is not a directory
+        // Prevent deleting the project root itself
+        if (resolvedPath === resolvedProject) {
+            res.status(400).json({ error: "Cannot delete the project root directory" });
+            return;
+        }
+        const recursive = req.query.recursive === "true" || req.body?.recursive === true;
+        // Check if path exists
+        let isDirectory = false;
         try {
             const stats = await stat(fullPath);
-            if (stats.isDirectory()) {
-                res.status(400).json({ error: "Cannot delete a directory, only files", path: sanitizedPath });
-                return;
-            }
+            isDirectory = stats.isDirectory();
         }
         catch (error) {
             if (error.code === "ENOENT") {
@@ -852,8 +856,17 @@ app.delete("/files/delete", async (req, res) => {
             }
             throw error;
         }
-        // Delete the file
-        await unlink(fullPath);
+        if (isDirectory && !recursive) {
+            res.status(400).json({ error: "Cannot delete a directory without recursive flag", path: sanitizedPath });
+            return;
+        }
+        // Delete file or directory
+        if (isDirectory) {
+            await rm(fullPath, { recursive: true });
+        }
+        else {
+            await unlink(fullPath);
+        }
         log.info({ path: sanitizedPath }, "File deleted");
         res.json({
             success: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@papercraneai/sandbox-agent",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "description": "Claude Agent SDK server for sandbox environments",
   "license": "MIT",
   "type": "module",