@stanco323/oh-my-claude-code 4.10.3

package/dist/lib/worktree-paths.js

@@ -0,0 +1,643 @@
+/**
+ * Worktree Path Enforcement
+ *
+ * Provides strict path validation and resolution for .omc/ paths,
+ * ensuring all operations stay within the worktree boundary.
+ *
+ * Supports OMC_STATE_DIR environment variable for centralized state storage.
+ * When set, state is stored at $OMC_STATE_DIR/{project-identifier}/ instead
+ * of {worktree}/.omc/. This preserves state across worktree deletions.
+ */
+import { createHash } from 'crypto';
+import { execSync } from 'child_process';
+import { existsSync, mkdirSync, realpathSync, readdirSync } from 'fs';
+import { homedir } from 'os';
+import { resolve, normalize, relative, sep, join, isAbsolute, basename, dirname } from 'path';
+/** Standard .omc subdirectories */
+export const OmcPaths = {
+    ROOT: '.omc',
+    STATE: '.omc/state',
+    SESSIONS: '.omc/state/sessions',
+    PLANS: '.omc/plans',
+    RESEARCH: '.omc/research',
+    NOTEPAD: '.omc/notepad.md',
+    PROJECT_MEMORY: '.omc/project-memory.json',
+    DRAFTS: '.omc/drafts',
+    NOTEPADS: '.omc/notepads',
+    LOGS: '.omc/logs',
+    SCIENTIST: '.omc/scientist',
+    AUTOPILOT: '.omc/autopilot',
+    SKILLS: '.omc/skills',
+    SHARED_MEMORY: '.omc/state/shared-memory',
+    DEEPINIT_MANIFEST: '.omc/deepinit-manifest.json',
+};
+/**
+ * LRU cache for worktree root lookups to avoid repeated git subprocess calls.
+ * Bounded to MAX_WORKTREE_CACHE_SIZE entries to prevent memory growth when
+ * alternating between many different cwds (cache thrashing).
+ */
+const MAX_WORKTREE_CACHE_SIZE = 8;
+const worktreeCacheMap = new Map();
+/**
+ * Get the git worktree root for the current or specified directory.
+ * Returns null if not in a git repository.
+ */
+export function getWorktreeRoot(cwd) {
+    const effectiveCwd = cwd || process.cwd();
+    // Return cached value if present (LRU: move to end on access)
+    if (worktreeCacheMap.has(effectiveCwd)) {
+        const root = worktreeCacheMap.get(effectiveCwd);
+        // Refresh insertion order for LRU eviction
+        worktreeCacheMap.delete(effectiveCwd);
+        worktreeCacheMap.set(effectiveCwd, root);
+        return root || null;
+    }
+    try {
+        const root = execSync('git rev-parse --show-toplevel', {
+            cwd: effectiveCwd,
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+            timeout: 5000,
+        }).trim();
+        // Evict oldest entry when at capacity
+        if (worktreeCacheMap.size >= MAX_WORKTREE_CACHE_SIZE) {
+            const oldest = worktreeCacheMap.keys().next().value;
+            if (oldest !== undefined) {
+                worktreeCacheMap.delete(oldest);
+            }
+        }
+        worktreeCacheMap.set(effectiveCwd, root);
+        return root;
+    }
+    catch {
+        // Not in a git repository - do NOT cache fallback
+        // so that if directory becomes a git repo later, we re-detect
+        return null;
+    }
+}
+/**
+ * Validate that a path is safe (no traversal attacks).
+ *
+ * @throws Error if path contains traversal sequences
+ */
+export function validatePath(inputPath) {
+    // Reject explicit path traversal
+    if (inputPath.includes('..')) {
+        throw new Error(`Invalid path: path traversal not allowed (${inputPath})`);
+    }
+    // Reject absolute paths - use isAbsolute() for cross-platform coverage
+    // Covers: /unix, ~/home, C:\windows, D:/windows, \\UNC
+    if (inputPath.startsWith('~') || isAbsolute(inputPath)) {
+        throw new Error(`Invalid path: absolute paths not allowed (${inputPath})`);
+    }
+}
+// ============================================================================
+// OMC_STATE_DIR SUPPORT (Issue #1014)
+// ============================================================================
+/** Track which dual-dir warnings have been logged to avoid repeated warnings */
+const dualDirWarnings = new Set();
+/**
+ * Clear the dual-directory warning cache (useful for testing).
+ * @internal
+ */
+export function clearDualDirWarnings() {
+    dualDirWarnings.clear();
+}
+/**
+ * Get a stable project identifier for centralized state storage.
+ *
+ * Uses a hybrid strategy:
+ * 1. Git remote URL hash (stable across worktrees and clones of the same repo)
+ * 2. Fallback to worktree root path hash (for local-only repos without remotes)
+ *
+ * Format: `{dirName}-{hash}` where hash is first 16 chars of SHA-256.
+ * Example: `my-project-a1b2c3d4e5f6g7h8`
+ *
+ * @param worktreeRoot - Optional worktree root path
+ * @returns A stable project identifier string
+ */
+export function getProjectIdentifier(worktreeRoot) {
+    const root = worktreeRoot || getWorktreeRoot() || process.cwd();
+    let source;
+    try {
+        const remoteUrl = execSync('git remote get-url origin', {
+            cwd: root,
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        source = remoteUrl || root;
+    }
+    catch {
+        // No git remote (local-only repo or not a git repo) — use path
+        source = root;
+    }
+    const hash = createHash('sha256').update(source).digest('hex').slice(0, 16);
+    const dirName = basename(root).replace(/[^a-zA-Z0-9_-]/g, '_');
+    return `${dirName}-${hash}`;
+}
+/**
+ * Get the .omc root directory path.
+ *
+ * When OMC_STATE_DIR is set, returns $OMC_STATE_DIR/{project-identifier}/
+ * instead of {worktree}/.omc/. This allows centralized state storage that
+ * survives worktree deletion.
+ *
+ * @param worktreeRoot - Optional worktree root
+ * @returns Absolute path to the omc root directory
+ */
+export function getOmcRoot(worktreeRoot) {
+    const customDir = process.env.OMC_STATE_DIR;
+    if (customDir) {
+        const root = worktreeRoot || getWorktreeRoot() || process.cwd();
+        const projectId = getProjectIdentifier(root);
+        const centralizedPath = join(customDir, projectId);
+        // Log notice if both legacy .omc/ and new centralized dir exist
+        const legacyPath = join(root, OmcPaths.ROOT);
+        const warningKey = `${legacyPath}:${centralizedPath}`;
+        if (!dualDirWarnings.has(warningKey) && existsSync(legacyPath) && existsSync(centralizedPath)) {
+            dualDirWarnings.add(warningKey);
+            console.warn(`[omc] Both legacy state dir (${legacyPath}) and centralized state dir (${centralizedPath}) exist. ` +
+                `Using centralized dir. Consider migrating data from the legacy dir and removing it.`);
+        }
+        return centralizedPath;
+    }
+    const root = worktreeRoot || getWorktreeRoot() || process.cwd();
+    return join(root, OmcPaths.ROOT);
+}
+/**
+ * Resolve a relative path under .omc/ to an absolute path.
+ * Validates the path is within the omc boundary.
+ *
+ * @param relativePath - Path relative to .omc/ (e.g., "state/ralph.json")
+ * @param worktreeRoot - Optional worktree root (auto-detected if not provided)
+ * @returns Absolute path
+ * @throws Error if path would escape omc boundary
+ */
+export function resolveOmcPath(relativePath, worktreeRoot) {
+    validatePath(relativePath);
+    const omcDir = getOmcRoot(worktreeRoot);
+    const fullPath = normalize(resolve(omcDir, relativePath));
+    // Verify resolved path is still under omc directory
+    const relativeToOmc = relative(omcDir, fullPath);
+    if (relativeToOmc.startsWith('..') || relativeToOmc.startsWith(sep + '..')) {
+        throw new Error(`Path escapes omc boundary: ${relativePath}`);
+    }
+    return fullPath;
+}
+/**
+ * Resolve a state file path.
+ *
+ * State files follow the naming convention: {mode}-state.json
+ * Examples: ralph-state.json, ultrawork-state.json, autopilot-state.json
+ *
+ * @param stateName - State name (e.g., "ralph", "ultrawork", or "ralph-state")
+ * @param worktreeRoot - Optional worktree root
+ * @returns Absolute path to state file
+ */
+export function resolveStatePath(stateName, worktreeRoot) {
+    // Normalize: ensure -state suffix is present, then add .json
+    const normalizedName = stateName.endsWith('-state') ? stateName : `${stateName}-state`;
+    return resolveOmcPath(`state/${normalizedName}.json`, worktreeRoot);
+}
+/**
+ * Ensure a directory exists under .omc/.
+ * Creates parent directories as needed.
+ *
+ * @param relativePath - Path relative to .omc/
+ * @param worktreeRoot - Optional worktree root
+ * @returns Absolute path to the created directory
+ */
+export function ensureOmcDir(relativePath, worktreeRoot) {
+    const fullPath = resolveOmcPath(relativePath, worktreeRoot);
+    if (!existsSync(fullPath)) {
+        mkdirSync(fullPath, { recursive: true });
+    }
+    return fullPath;
+}
+/**
+ * Get the absolute path to the notepad file.
+ * NOTE: Named differently from hooks/notepad/getNotepadPath which takes `directory` (required).
+ * This version auto-detects worktree root.
+ */
+export function getWorktreeNotepadPath(worktreeRoot) {
+    return join(getOmcRoot(worktreeRoot), 'notepad.md');
+}
+/**
+ * Get the absolute path to the project memory file.
+ */
+export function getWorktreeProjectMemoryPath(worktreeRoot) {
+    return join(getOmcRoot(worktreeRoot), 'project-memory.json');
+}
+/**
+ * Resolve a plan file path.
+ * @param planName - Plan name (without .md extension)
+ */
+export function resolvePlanPath(planName, worktreeRoot) {
+    validatePath(planName);
+    return join(getOmcRoot(worktreeRoot), 'plans', `${planName}.md`);
+}
+/**
+ * Resolve a research directory path.
+ * @param name - Research folder name
+ */
+export function resolveResearchPath(name, worktreeRoot) {
+    validatePath(name);
+    return join(getOmcRoot(worktreeRoot), 'research', name);
+}
+/**
+ * Resolve the logs directory path.
+ */
+export function resolveLogsPath(worktreeRoot) {
+    return join(getOmcRoot(worktreeRoot), 'logs');
+}
+/**
+ * Resolve a wisdom/plan-scoped notepad directory path.
+ * @param planName - Plan name for the scoped notepad
+ */
+export function resolveWisdomPath(planName, worktreeRoot) {
+    validatePath(planName);
+    return join(getOmcRoot(worktreeRoot), 'notepads', planName);
+}
+/**
+ * Check if an absolute path is under the .omc directory.
+ * @param absolutePath - Absolute path to check
+ */
+export function isPathUnderOmc(absolutePath, worktreeRoot) {
+    const omcRoot = getOmcRoot(worktreeRoot);
+    const normalizedPath = normalize(absolutePath);
+    const normalizedOmc = normalize(omcRoot);
+    return normalizedPath.startsWith(normalizedOmc + sep) || normalizedPath === normalizedOmc;
+}
+/**
+ * Ensure all standard .omc subdirectories exist.
+ */
+export function ensureAllOmcDirs(worktreeRoot) {
+    const omcRoot = getOmcRoot(worktreeRoot);
+    const subdirs = ['', 'state', 'plans', 'research', 'logs', 'notepads', 'drafts'];
+    for (const subdir of subdirs) {
+        const fullPath = subdir ? join(omcRoot, subdir) : omcRoot;
+        if (!existsSync(fullPath)) {
+            mkdirSync(fullPath, { recursive: true });
+        }
+    }
+}
+/**
+ * Clear the worktree cache (useful for testing).
+ */
+export function clearWorktreeCache() {
+    worktreeCacheMap.clear();
+}
+// ============================================================================
+// SESSION-SCOPED STATE PATHS
+// ============================================================================
+/** Regex for valid session IDs: alphanumeric, hyphens, underscores, max 256 chars */
+const SESSION_ID_REGEX = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,255}$/;
+// ============================================================================
+// AUTOMATIC PROCESS SESSION ID (Issue #456)
+// ============================================================================
+/**
+ * Auto-generated session ID for the current process.
+ * Uses PID + process start timestamp to be unique even if PIDs are reused.
+ * Generated once at module load time and stable for the process lifetime.
+ */
+let processSessionId = null;
+/**
+ * Get or generate a unique session ID for the current process.
+ *
+ * Format: `pid-{PID}-{startTimestamp}`
+ * Example: `pid-12345-1707350400000`
+ *
+ * This prevents concurrent Claude Code instances in the same repo from
+ * sharing state files (Issue #456). The ID is stable for the process
+ * lifetime and unique across concurrent processes.
+ *
+ * @returns A unique session ID for the current process
+ */
+export function getProcessSessionId() {
+    if (!processSessionId) {
+        // process.pid is unique among concurrent processes.
+        // Adding a timestamp handles PID reuse after process exit.
+        const pid = process.pid;
+        const startTime = Date.now();
+        processSessionId = `pid-${pid}-${startTime}`;
+    }
+    return processSessionId;
+}
+/**
+ * Reset the process session ID (for testing only).
+ * @internal
+ */
+export function resetProcessSessionId() {
+    processSessionId = null;
+}
+/**
+ * Validate a session ID to prevent path traversal attacks.
+ *
+ * @param sessionId - The session ID to validate
+ * @throws Error if session ID is invalid
+ */
+export function validateSessionId(sessionId) {
+    if (!sessionId) {
+        throw new Error('Session ID cannot be empty');
+    }
+    if (sessionId.includes('..') || sessionId.includes('/') || sessionId.includes('\\')) {
+        throw new Error(`Invalid session ID: path traversal not allowed (${sessionId})`);
+    }
+    if (!SESSION_ID_REGEX.test(sessionId)) {
+        throw new Error(`Invalid session ID: must be alphanumeric with hyphens/underscores, max 256 chars (${sessionId})`);
+    }
+}
+/**
+ * Validate a transcript path to prevent arbitrary file reads.
+ * Transcript files should only be read from known Claude directories.
+ *
+ * @param transcriptPath - The transcript path to validate
+ * @returns true if path is valid, false otherwise
+ */
+export function isValidTranscriptPath(transcriptPath) {
+    if (!transcriptPath || typeof transcriptPath !== 'string') {
+        return false;
+    }
+    // Reject path traversal
+    if (transcriptPath.includes('..')) {
+        return false;
+    }
+    // Must be absolute
+    if (!isAbsolute(transcriptPath) && !transcriptPath.startsWith('~')) {
+        return false;
+    }
+    // Expand home directory if present
+    let expandedPath = transcriptPath;
+    if (transcriptPath.startsWith('~')) {
+        expandedPath = join(homedir(), transcriptPath.slice(1));
+    }
+    // Normalize and check it's within allowed directories
+    const normalized = normalize(expandedPath);
+    const home = homedir();
+    // Allowed: ~/.claude/..., ~/.omc/..., /tmp/...
+    const allowedPrefixes = [
+        join(home, '.claude'),
+        join(home, '.omc'),
+        '/tmp',
+        '/var/folders', // macOS temp
+    ];
+    return allowedPrefixes.some(prefix => normalized.startsWith(prefix));
+}
+/**
+ * Resolve a session-scoped state file path.
+ * Path: {omcRoot}/state/sessions/{sessionId}/{mode}-state.json
+ *
+ * @param stateName - State name (e.g., "ralph", "ultrawork")
+ * @param sessionId - Session identifier
+ * @param worktreeRoot - Optional worktree root
+ * @returns Absolute path to session-scoped state file
+ */
+export function resolveSessionStatePath(stateName, sessionId, worktreeRoot) {
+    validateSessionId(sessionId);
+    const normalizedName = stateName.endsWith('-state') ? stateName : `${stateName}-state`;
+    return resolveOmcPath(`state/sessions/${sessionId}/${normalizedName}.json`, worktreeRoot);
+}
+/**
+ * Get the session state directory path.
+ * Path: {omcRoot}/state/sessions/{sessionId}/
+ *
+ * @param sessionId - Session identifier
+ * @param worktreeRoot - Optional worktree root
+ * @returns Absolute path to session state directory
+ */
+export function getSessionStateDir(sessionId, worktreeRoot) {
+    validateSessionId(sessionId);
+    return join(getOmcRoot(worktreeRoot), 'state', 'sessions', sessionId);
+}
+/**
+ * List all session IDs that have state directories.
+ *
+ * @param worktreeRoot - Optional worktree root
+ * @returns Array of session IDs
+ */
+export function listSessionIds(worktreeRoot) {
+    const sessionsDir = join(getOmcRoot(worktreeRoot), 'state', 'sessions');
+    if (!existsSync(sessionsDir)) {
+        return [];
+    }
+    try {
+        const entries = readdirSync(sessionsDir, { withFileTypes: true });
+        return entries
+            .filter(entry => entry.isDirectory() && SESSION_ID_REGEX.test(entry.name))
+            .map(entry => entry.name);
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Ensure the session state directory exists.
+ *
+ * @param sessionId - Session identifier
+ * @param worktreeRoot - Optional worktree root
+ * @returns Absolute path to the session state directory
+ */
+export function ensureSessionStateDir(sessionId, worktreeRoot) {
+    const sessionDir = getSessionStateDir(sessionId, worktreeRoot);
+    if (!existsSync(sessionDir)) {
+        mkdirSync(sessionDir, { recursive: true });
+    }
+    return sessionDir;
+}
+/**
+ * Resolve a directory path to its git worktree root.
+ *
+ * Walks up from `directory` using `git rev-parse --show-toplevel`.
+ * Falls back to `getWorktreeRoot(process.cwd())`, then `process.cwd()`.
+ *
+ * This ensures .omc/ state is always written at the worktree root,
+ * even when called from a subdirectory (fixes #576).
+ *
+ * @param directory - Any directory inside a git worktree (optional)
+ * @returns The worktree root (never a subdirectory)
+ */
+export function resolveToWorktreeRoot(directory) {
+    if (directory) {
+        const resolved = resolve(directory);
+        const root = getWorktreeRoot(resolved);
+        if (root)
+            return root;
+        console.error('[worktree] non-git directory provided, falling back to process root', {
+            directory: resolved,
+        });
+    }
+    // Fallback: derive from process CWD (the MCP server / CLI entry point)
+    return getWorktreeRoot(process.cwd()) || process.cwd();
+}
+// ============================================================================
+// TRANSCRIPT PATH RESOLUTION (Issue #1094)
+// ============================================================================
+/**
+ * Resolve a Claude Code transcript path that may be mismatched in worktree sessions.
+ *
+ * When Claude Code runs inside a worktree (.claude/worktrees/X), it encodes the
+ * worktree CWD into the project directory path, creating a transcript_path like:
+ *   ~/.claude/projects/-path-to-project--claude-worktrees-X/<session>.jsonl
+ *
+ * But the actual transcript lives at the original project's path:
+ *   ~/.claude/projects/-path-to-project/<session>.jsonl
+ *
+ * Claude Code encodes `/` as `-` (dots are preserved). The `.claude/worktrees/`
+ * segment becomes `-claude-worktrees-`, preceded by a `-` from the path
+ * separator, yielding the distinctive `--claude-worktrees-` pattern in the
+ * encoded directory name.
+ *
+ * This function detects the mismatch and resolves to the correct path.
+ *
+ * @param transcriptPath - The transcript_path from Claude Code hook input
+ * @param cwd - Optional CWD for fallback detection
+ * @returns The resolved transcript path (original if already correct or no resolution found)
+ */
+export function resolveTranscriptPath(transcriptPath, cwd) {
+    if (!transcriptPath)
+        return undefined;
+    // Fast path: if the file already exists, no resolution needed
+    if (existsSync(transcriptPath))
+        return transcriptPath;
+    // Strategy 1: Detect worktree-encoded segment in the transcript path itself.
+    // The pattern `--claude-worktrees-` appears when Claude Code encodes a CWD
+    // containing `/.claude/worktrees/` (separator `/` → `-`, dot `.` → `-`).
+    // Strip everything from this pattern to the next `/` to recover the original
+    // project directory encoding.
+    const worktreeSegmentPattern = /--claude-worktrees-[^/\\]+/;
+    if (worktreeSegmentPattern.test(transcriptPath)) {
+        const resolved = transcriptPath.replace(worktreeSegmentPattern, '');
+        if (existsSync(resolved))
+            return resolved;
+    }
+    // Strategy 2: Use CWD to detect worktree and reconstruct the path.
+    // When the CWD contains `/.claude/worktrees/`, we can derive the main
+    // project root and look for the transcript there.
+    const effectiveCwd = cwd || process.cwd();
+    const worktreeMarker = '.claude/worktrees/';
+    const markerIdx = effectiveCwd.indexOf(worktreeMarker);
+    if (markerIdx !== -1) {
+        // Adjust index to exclude the preceding path separator
+        const mainProjectRoot = effectiveCwd.substring(0, markerIdx > 0 && effectiveCwd[markerIdx - 1] === sep ? markerIdx - 1 : markerIdx);
+        // Extract session filename from the original path
+        const lastSep = transcriptPath.lastIndexOf('/');
+        const sessionFile = lastSep !== -1 ? transcriptPath.substring(lastSep + 1) : '';
+        if (sessionFile) {
+            // The projects directory is under the Claude config dir
+            const configDir = process.env.CLAUDE_CONFIG_DIR || join(homedir(), '.claude');
+            const projectsDir = join(configDir, 'projects');
+            if (existsSync(projectsDir)) {
+                // Encode the main project root the same way Claude Code does:
+                // replace path separators with `-`, replace dots with `-`.
+                const encodedMain = mainProjectRoot.replace(/[/\\]/g, '-');
+                const resolvedPath = join(projectsDir, encodedMain, sessionFile);
+                if (existsSync(resolvedPath))
+                    return resolvedPath;
+            }
+        }
+    }
+    // Strategy 3: Detect native git worktree via git-common-dir.
+    // When CWD is a linked worktree (created by `git worktree add`), the
+    // transcript path encodes the worktree CWD, but the file lives under
+    // the main repo's encoded path. Use `git rev-parse --git-common-dir`
+    // to find the main repo root and re-encode.
+    try {
+        const gitCommonDir = execSync('git rev-parse --git-common-dir', {
+            cwd: effectiveCwd,
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        const absoluteCommonDir = resolve(effectiveCwd, gitCommonDir);
+        const mainRepoRoot = dirname(absoluteCommonDir);
+        const worktreeTop = execSync('git rev-parse --show-toplevel', {
+            cwd: effectiveCwd,
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        if (mainRepoRoot !== worktreeTop) {
+            const lastSep = transcriptPath.lastIndexOf('/');
+            const sessionFile = lastSep !== -1 ? transcriptPath.substring(lastSep + 1) : '';
+            if (sessionFile) {
+                const configDir = process.env.CLAUDE_CONFIG_DIR || join(homedir(), '.claude');
+                const projectsDir = join(configDir, 'projects');
+                if (existsSync(projectsDir)) {
+                    const encodedMain = mainRepoRoot.replace(/[/\\]/g, '-');
+                    const resolvedPath = join(projectsDir, encodedMain, sessionFile);
+                    if (existsSync(resolvedPath))
+                        return resolvedPath;
+                }
+            }
+        }
+    }
+    catch {
+        // Not in a git repo or git not available — skip
+    }
+    // No resolution found — return original path.
+    // Callers should handle non-existent paths gracefully.
+    return transcriptPath;
+}
+/**
+ * Validate that a workingDirectory is within the trusted worktree root.
+ * The trusted root is derived from process.cwd(), NOT from user input.
+ *
+ * Always returns a git worktree root — never a subdirectory.
+ * This prevents .omc/state/ from being created in subdirectories (#576).
+ *
+ * @param workingDirectory - User-supplied working directory
+ * @returns The validated worktree root
+ * @throws Error if workingDirectory is outside trusted root
+ */
+export function validateWorkingDirectory(workingDirectory) {
+    const trustedRoot = getWorktreeRoot(process.cwd()) || process.cwd();
+    if (!workingDirectory) {
+        return trustedRoot;
+    }
+    // Resolve to absolute
+    const resolved = resolve(workingDirectory);
+    let trustedRootReal;
+    try {
+        trustedRootReal = realpathSync(trustedRoot);
+    }
+    catch {
+        trustedRootReal = trustedRoot;
+    }
+    // Try to resolve the provided directory to a git worktree root.
+    const providedRoot = getWorktreeRoot(resolved);
+    if (providedRoot) {
+        // Git resolution succeeded — require exact worktree identity.
+        let providedRootReal;
+        try {
+            providedRootReal = realpathSync(providedRoot);
+        }
+        catch {
+            throw new Error(`workingDirectory '${workingDirectory}' does not exist or is not accessible.`);
+        }
+        if (providedRootReal !== trustedRootReal) {
+            console.error('[worktree] workingDirectory resolved to different git worktree root, using trusted root', {
+                workingDirectory: resolved,
+                providedRoot: providedRootReal,
+                trustedRoot: trustedRootReal,
+            });
+            return trustedRoot;
+        }
+        return providedRoot;
+    }
+    // Git resolution failed (lock contention, env issues, non-repo dir).
+    // Validate that the raw directory is under the trusted root before falling
+    // back — otherwise reject it as truly outside (#576).
+    let resolvedReal;
+    try {
+        resolvedReal = realpathSync(resolved);
+    }
+    catch {
+        throw new Error(`workingDirectory '${workingDirectory}' does not exist or is not accessible.`);
+    }
+    const rel = relative(trustedRootReal, resolvedReal);
+    if (rel.startsWith('..') || isAbsolute(rel)) {
+        throw new Error(`workingDirectory '${workingDirectory}' is outside the trusted worktree root '${trustedRoot}'.`);
+    }
+    // Directory is under trusted root but git failed — return trusted root,
+    // never the subdirectory, to prevent .omc/ creation in subdirs (#576).
+    return trustedRoot;
+}
+//# sourceMappingURL=worktree-paths.js.map

package/dist/lib/worktree-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-paths.js","sourceRoot":"","sources":["../../src/lib/worktree-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE9F,mCAAmC;AACnC,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,YAAY;IACnB,QAAQ,EAAE,qBAAqB;IAC/B,KAAK,EAAE,YAAY;IACnB,QAAQ,EAAE,eAAe;IACzB,OAAO,EAAE,iBAAiB;IAC1B,cAAc,EAAE,0BAA0B;IAC1C,MAAM,EAAE,aAAa;IACrB,QAAQ,EAAE,eAAe;IACzB,IAAI,EAAE,WAAW;IACjB,SAAS,EAAE,gBAAgB;IAC3B,SAAS,EAAE,gBAAgB;IAC3B,MAAM,EAAE,aAAa;IACrB,aAAa,EAAE,0BAA0B;IACzC,iBAAiB,EAAE,6BAA6B;CACxC,CAAC;AAEX;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAClC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEnD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,YAAY,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1C,8DAA8D;IAC9D,IAAI,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAE,CAAC;QACjD,2CAA2C;QAC3C,gBAAgB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtC,gBAAgB,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,IAAI,IAAI,CAAC;IACtB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,+BAA+B,EAAE;YACrD,GAAG,EAAE,YAAY;YACjB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,IAAI;SACd,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,sCAAsC;QACtC,IAAI,gBAAgB,CAAC,IAAI,IAAI,uBAAuB,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YACpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;QAClD,8DAA8D;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,iCAAiC;IACjC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,6CAA6C,SAAS,GAAG,CAAC,CAAC;IAC7E,CAAC;IAED,uEAAuE;IACvE,uDAAuD;IACvD,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,6CAA6C,SAAS,GAAG,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,sCAAsC;AACtC,+EAA+E;AAE/E,gFAAgF;AAChF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;AAE1C;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,eAAe,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,YAAqB;IACxD,MAAM,IAAI,GAAG,YAAY,IAAI,eAAe,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEhE,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,QAAQ,CAAC,2BAA2B,EAAE;YACtD,GAAG,EAAE,IAAI;YACT,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,GAAG,SAAS,IAAI,IAAI,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;QAC/D,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CAAC,YAAqB;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC5C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,YAAY,IAAI,eAAe,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChE,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAEnD,gEAAgE;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,GAAG,UAAU,IAAI,eAAe,EAAE,CAAC;QACtD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAC9F,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAChC,OAAO,CAAC,IAAI,CACV,gCAAgC,UAAU,gCAAgC,eAAe,WAAW;gBACpG,qFAAqF,CACtF,CAAC;QACJ,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,IAAI,eAAe,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAChE,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,YAAoB,EAAE,YAAqB;IACxE,YAAY,CAAC,YAAY,CAAC,CAAC;IAE3B,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IAE1D,oDAAoD;IACpD,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,8BAA8B,YAAY,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,YAAqB;IACvE,6DAA6D;IAC7D,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,QAAQ,CAAC;IACvF,OAAO,cAAc,CAAC,SAAS,cAAc,OAAO,EAAE,YAAY,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,YAAqB;IACtE,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAE5D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,YAAqB;IAC1D,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAAC,YAAqB;IAChE,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,YAAqB;IACrE,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,GAAG,QAAQ,KAAK,CAAC,CAAC;AACnE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,YAAqB;IACrE,YAAY,CAAC,IAAI,CAAC,CAAC;IACnB,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,YAAqB;IACnD,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,YAAqB;IACvE,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,YAAoB,EAAE,YAAqB;IACxE,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,cAAc,CAAC,UAAU,CAAC,aAAa,GAAG,GAAG,CAAC,IAAI,cAAc,KAAK,aAAa,CAAC;AAC5F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAAqB;IACpD,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACjF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,mCAAmC,CAAC;AAE7D,+EAA+E;AAC/E,4CAA4C;AAC5C,+EAA+E;AAE/E;;;;GAIG;AACH,IAAI,gBAAgB,GAAkB,IAAI,CAAC;AAE3C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,oDAAoD;QACpD,2DAA2D;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,gBAAgB,GAAG,OAAO,GAAG,IAAI,SAAS,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,gBAAgB,GAAG,IAAI,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,mDAAmD,SAAS,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,qFAAqF,SAAS,GAAG,CAAC,CAAC;IACrH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,cAAsB;IAC1D,IAAI,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,wBAAwB;IACxB,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mBAAmB;IACnB,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mCAAmC;IACnC,IAAI,YAAY,GAAG,cAAc,CAAC;IAClC,IAAI,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,sDAAsD;IACtD,MAAM,UAAU,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IAEvB,+CAA+C;IAC/C,MAAM,eAAe,GAAG;QACtB,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QACrB,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QAClB,MAAM;QACN,cAAc,EAAE,aAAa;KAC9B,CAAC;IAEF,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACvE,CAAC;AAGD;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,SAAiB,EAAE,YAAqB;IACjG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAE7B,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,QAAQ,CAAC;IACvF,OAAO,cAAc,CAAC,kBAAkB,SAAS,IAAI,cAAc,OAAO,EAAE,YAAY,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,YAAqB;IACzE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,YAAqB;IAClD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAExE,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,OAAO;aACX,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;aACzE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB,EAAE,YAAqB;IAC5E,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAE/D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAkB;IACtD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAEtB,OAAO,CAAC,KAAK,CAAC,qEAAqE,EAAE;YACnF,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;IACL,CAAC;IACD,uEAAuE;IACvE,OAAO,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AACzD,CAAC;AAED,+EAA+E;AAC/E,2CAA2C;AAC3C,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,qBAAqB,CAAC,cAAkC,EAAE,GAAY;IACpF,IAAI,CAAC,cAAc;QAAE,OAAO,SAAS,CAAC;IAEtC,8DAA8D;IAC9D,IAAI,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,cAAc,CAAC;IAEtD,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,6EAA6E;IAC7E,8BAA8B;IAC9B,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;IAC5D,IAAI,sBAAsB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;IAC5C,CAAC;IAED,mEAAmE;IACnE,sEAAsE;IACtE,kDAAkD;IAClD,MAAM,YAAY,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1C,MAAM,cAAc,GAAG,oBAAoB,CAAC;IAC5C,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACvD,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,uDAAuD;QACvD,MAAM,eAAe,GAAG,YAAY,CAAC,SAAS,CAC5C,CAAC,EACD,SAAS,GAAG,CAAC,IAAI,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CACjF,CAAC;QAEF,kDAAkD;QAClD,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,IAAI,WAAW,EAAE,CAAC;YAChB,wDAAwD;YACxD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;YAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAEhD,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5B,8DAA8D;gBAC9D,2DAA2D;gBAC3D,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAC3D,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;gBACjE,IAAI,UAAU,CAAC,YAAY,CAAC;oBAAE,OAAO,YAAY,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,qEAAqE;IACrE,qEAAqE;IACrE,qEAAqE;IACrE,4CAA4C;IAC5C,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,QAAQ,CAAC,gCAAgC,EAAE;YAC9D,GAAG,EAAE,YAAY;YACjB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,MAAM,iBAAiB,GAAG,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAEhD,MAAM,WAAW,GAAG,QAAQ,CAAC,+BAA+B,EAAE;YAC5D,GAAG,EAAE,YAAY;YACjB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;gBAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBAChD,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC5B,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;oBACxD,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;oBACjE,IAAI,UAAU,CAAC,YAAY,CAAC;wBAAE,OAAO,YAAY,CAAC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;IAED,8CAA8C;IAC9C,uDAAuD;IACvD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,gBAAyB;IAChE,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEpE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,sBAAsB;IACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE3C,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,eAAe,GAAG,WAAW,CAAC;IAChC,CAAC;IAED,gEAAgE;IAChE,MAAM,YAAY,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE/C,IAAI,YAAY,EAAE,CAAC;QACjB,8DAA8D;QAC9D,IAAI,gBAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,gBAAgB,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,qBAAqB,gBAAgB,wCAAwC,CAAC,CAAC;QACjG,CAAC;QAED,IAAI,gBAAgB,KAAK,eAAe,EAAE,CAAC;YACzC,OAAO,CAAC,KAAK,CAAC,yFAAyF,EAAE;gBACvG,gBAAgB,EAAE,QAAQ;gBAC1B,YAAY,EAAE,gBAAgB;gBAC9B,WAAW,EAAE,eAAe;aAC7B,CAAC,CAAC;YACH,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,qEAAqE;IACrE,2EAA2E;IAC3E,sDAAsD;IACtD,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,qBAAqB,gBAAgB,wCAAwC,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,GAAG,GAAG,QAAQ,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IACpD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,qBAAqB,gBAAgB,2CAA2C,WAAW,IAAI,CAAC,CAAC;IACnH,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/mcp/__tests__/prompt-injection.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=prompt-injection.test.d.ts.map

package/dist/mcp/__tests__/prompt-injection.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-injection.test.d.ts","sourceRoot":"","sources":["../../../src/mcp/__tests__/prompt-injection.test.ts"],"names":[],"mappings":""}