@remcp/runtime 0.2.209 → 0.2.211

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remcp/runtime",
-  "version": "0.2.209",
+  "version": "0.2.211",
   "description": "First-party ReMCP local device runtime: filesystem, terminal, computer-use, browser, diagnostics and document tools over MCP.",
   "type": "module",
   "license": "MIT",

package/src/error-classes.mjs

@@ -5,6 +5,7 @@ const PERMISSION_CODES = new Set(['EACCES', 'EPERM']);
 const MISSING_CODES = new Set(['ENOENT', 'ENOTDIR']);
 const TIMEOUT_CODES = new Set(['ETIMEDOUT', 'ETIME']);
 const CONNECTION_CODES = new Set(['ECONNREFUSED', 'ECONNRESET', 'EHOSTUNREACH']);
+const STORAGE_CODES = new Set(['ENOSPC', 'EDQUOT']);
 
 export function classifyRuntimeToolError(error, toolName = '') {
   const code = typeof error?.code === 'string' ? error.code.toUpperCase() : '';
@@ -12,6 +13,8 @@ export function classifyRuntimeToolError(error, toolName = '') {
   const browserTool = typeof toolName === 'string' && toolName.startsWith('browser_');
   if (PERMISSION_CODES.has(code)) return 'permission';
   if (MISSING_CODES.has(code)) return 'not_found';
+  if (STORAGE_CODES.has(code)) return 'resource_exhausted';
+  if (code === 'EBUSY') return 'busy';
   if (TIMEOUT_CODES.has(code)) return 'timeout';
   if (browserTool && CONNECTION_CODES.has(code)) return 'browser_unavailable';
   if (browserTool && code === 'BROWSER_TARGET_DISAPPEARED') return 'browser_target_stale';
@@ -37,6 +40,7 @@ export function classifyRuntimeToolError(error, toolName = '') {
     }
   }
   if (/permission denied|access is denied|not authorized|not authorised|accessibility permission/.test(message)) return 'permission';
+  if (/\b(?:file|path|source) not found\b|\bis not a directory\b/.test(message)) return 'not_found';
   if (/timed out|timeout after|time limit exceeded/.test(message)) return 'timeout';
   if (/element not found|no element matches|no matching ui window|target not found|not found in the current/.test(message)) return 'not_found';
   if (/requires .*|must be (?:a |an |positive |between )|invalid (?:argument|selector|field|parameter)/.test(message)) return 'invalid_input';

package/src/permissions.mjs

@@ -19,15 +19,17 @@ export function macosProtectedLocation(target, { platform = process.platform, ho
   if (platform !== 'darwin') return null;
   const value = typeof target === 'string' ? target.trim() : '';
   if (!value) return null;
-  const resolved = path.resolve(value);
-  if (resolved === '/Volumes' || resolved.startsWith(`/Volumes${path.sep}`)) return 'an external or network volume';
+  // Evaluate macOS paths with POSIX semantics even when diagnostics/tests run on
+  // Windows. Using the host path module turns /Users/... into a Windows path.
+  const resolved = path.posix.resolve(value);
+  if (resolved === '/Volumes' || resolved.startsWith('/Volumes/')) return 'an external or network volume';
   // The kernel reports the absolute path, so a folder can be recognised even when it belongs to
   // another account: every /Users/<name>/Desktop is somebody's Desktop, and it is protected for the
   // process that is asking, whatever this runtime's own home directory is.
-  const segments = resolved.split(path.sep);
-  const relative = home ? path.relative(path.resolve(home), resolved) : '';
-  const insideHome = relative && !relative.startsWith('..') && !path.isAbsolute(relative);
-  const candidate = insideHome ? relative.split(path.sep) : segments[0] === '' && segments[1] === 'Users' ? segments.slice(3) : null;
+  const segments = resolved.split(path.posix.sep);
+  const relative = home ? path.posix.relative(path.posix.resolve(home), resolved) : '';
+  const insideHome = relative && !relative.startsWith('..') && !path.posix.isAbsolute(relative);
+  const candidate = insideHome ? relative.split(path.posix.sep) : segments[0] === '' && segments[1] === 'Users' ? segments.slice(3) : null;
   if (!candidate?.length) return null;
   const [first, second] = candidate;
   if (MACOS_HOME_FOLDERS.includes(first)) return `~/${first}`;
@@ -63,6 +65,9 @@ export function filesystemErrorExplanation(error, options = {}) {
   const code = typeof error?.code === 'string' ? error.code : '';
   const where = typeof target === 'string' && target.trim() ? target.trim() : 'that path';
   if (code === 'ENOSPC') return 'The disk is full (ENOSPC). Free some space or write to another volume.';
+  if (code === 'EDQUOT') return 'The disk or temporary-file quota is exhausted (EDQUOT). Free quota space or select another writable volume.';
+  if (code === 'ENOENT') return `The file or folder does not exist (ENOENT): ${where}. Check its name and drive letter.`;
+  if (code === 'ENOTDIR') return `A component of ${where} is a file instead of a directory (ENOTDIR). Check the parent path.`;
   if (code === 'EROFS') return `${where} is on a read-only file system (EROFS). Write somewhere else, or remount it read-write.`;
   if (code === 'EBUSY') return `${where} is in use by another program (EBUSY). Close whatever holds it and try again.`;
   if (!PERMISSION_CODES.has(code)) return null;

package/src/tools/files-bulk-operations.mjs

@@ -399,7 +399,11 @@ export async function moveFileTool(args) {
 export async function copyFileTool(args) {
   const source = await resolveSafePath(args.source, 'source');
   const destination = await resolveSafePath(args.destination, 'destination');
-  if (source === destination) fail('source and destination are the same path');
+  // Windows paths normally refer to the same file irrespective of case.
+  // Refuse to overwrite the still-open source via a differently cased name.
+  if (source === destination || (process.platform === 'win32' && source.toLowerCase() === destination.toLowerCase())) {
+    fail('source and destination are the same path');
+  }
   const overwrite = args.overwrite !== false;
   let info;
   await withExistingParent(source, async anchoredSource => {

package/src/tools/files-read-traversal.mjs

@@ -309,6 +309,14 @@ export async function openPathForInfo(absolute) {
     }
     if (!canTryFile) throw directoryError;
   }
+  // Metadata on Windows must not require opening a file for reading. Another
+  // process may deny FILE_SHARE_READ while lstat still succeeds (e.g. Office).
+  // lstat also does not traverse a final symbolic link or junction.
+  if (process.platform === 'win32') {
+    const info = await lstat(absolute);
+    if (info.isSymbolicLink()) fail('Path is a symbolic link');
+    if (info.isFile()) return { info, close: async () => {} };
+  }
   const opened = await openEntryAtPath(absolute, READ_NOFOLLOW_NONBLOCK);
   try {
     return { info: await opened.handle.stat(), close: opened.close };