@sema-agent/core 2.8.0 → 2.9.0

package/dist/tools/fs/fs-shared.js

@@ -52,7 +52,10 @@ export const BASH_MAX_TIMEOUT_SEC = 600;
 export const BASH_DEFAULT_TIMEOUT_MS = BASH_DEFAULT_TIMEOUT_SEC * 1000;
 export const BASH_MAX_TIMEOUT_MS = BASH_MAX_TIMEOUT_SEC * 1000;
 function validTimeoutMs(n) {
-    return n !== undefined && Number.isFinite(n) && n > 0 ? Math.floor(n) : undefined;
+    if (n === undefined || !Number.isFinite(n))
+        return undefined;
+    const floored = Math.floor(n);
+    return floored >= 1 ? floored : undefined;
 }
 export function resolveBashTimeoutCaps(opts) {
     const defaultMs = validTimeoutMs(opts?.bashDefaultTimeoutMs) ??
@@ -80,7 +83,7 @@ export function clipShellOutput(s) {
     return clipWithFilePointer(s, bashMaxOutputChars());
 }
 export async function writeShellOverflowFile(env, stdout, stderr) {
-    const tf = await env.createTempFile({ prefix: "bash-output-", suffix: ".log" });
+    const tf = await env.createTempFile({ prefix: SHELL_OVERFLOW_FILE_PREFIX, suffix: SHELL_OVERFLOW_FILE_SUFFIX });
     if (!tf.ok)
         return undefined;
     const body = stderr.length > 0 ? `${stdout}${stdout.length > 0 && !stdout.endsWith("\n") ? "\n" : ""}--- stderr ---\n${stderr}` : stdout;
@@ -90,6 +93,45 @@ export async function writeShellOverflowFile(env, stdout, stderr) {
     const canon = await env.canonicalPath(tf.value);
     return canon.ok ? canon.value : tf.value;
 }
+const SHELL_OVERFLOW_FILE_PREFIX = "bash-output-";
+const SHELL_OVERFLOW_FILE_SUFFIX = ".log";
+function toPosixPathKey(p) {
+    return p.replace(/\\/g, "/").replace(/(.)\/+$/, "$1");
+}
+function isShellOverflowFileName(base) {
+    if (!base.startsWith(SHELL_OVERFLOW_FILE_PREFIX) || !base.endsWith(SHELL_OVERFLOW_FILE_SUFFIX))
+        return false;
+    const middle = base.slice(SHELL_OVERFLOW_FILE_PREFIX.length, base.length - SHELL_OVERFLOW_FILE_SUFFIX.length);
+    return /^[0-9A-Za-z][0-9A-Za-z._-]*$/.test(middle);
+}
+export function createShellOverflowSpoolFence(env) {
+    let tempArea;
+    const learnTempArea = async () => {
+        const probe = await env.createTempDir();
+        if (!probe.ok)
+            return undefined;
+        const canon = await env.canonicalPath(probe.value);
+        const resolved = toPosixPathKey(canon.ok ? canon.value : probe.value);
+        await env.remove(probe.value, { recursive: true, force: true });
+        const cut = resolved.lastIndexOf("/");
+        return cut > 0 ? resolved.slice(0, cut) : undefined;
+    };
+    return async (path) => {
+        const target = toPosixPathKey(path);
+        const cut = target.lastIndexOf("/");
+        if (cut <= 0 || !isShellOverflowFileName(target.slice(cut + 1)))
+            return false;
+        tempArea ??= learnTempArea();
+        const area = await tempArea;
+        if (area === undefined)
+            return false;
+        const parent = target.slice(0, cut);
+        if (parent === area)
+            return true;
+        const up = parent.lastIndexOf("/");
+        return up > 0 && parent.slice(0, up) === area;
+    };
+}
 export function shellRecoveryHint(path, readOnly) {
     const quoted = shellQuote(path);
     const example = readOnly ? `tail -c 50000 ${quoted}` : `sed -n 'START,ENDp' ${quoted}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "2.8.0",
+  "version": "2.9.0",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",