@svenroth-ai/shipwright 0.28.0 → 0.29.1

package/server/dist/core/session-file/access.js

@@ -0,0 +1,143 @@
+/*
+ * Decision core of GET /tasks/:id/session-file: may this task read this path?
+ *
+ *   project scope — the path lies inside the REGISTERED project root (the client-supplied task cwd is never a root):
+ *     the existing Smart-Viewer posture (pathGuard + realPathGuard, DO-NOT #10);
+ *     a symlink that leaves the root is REJECTED, never retried as "session".
+ *   session scope — outside the root, but THIS session evidences the path
+ *     (core/session-file/evidence.ts), and so its realpath if that differs.
+ *
+ * The WebUI is reachable over Tailscale: "any file on the machine" would expose
+ * ~/.ssh, tokens and .env, hence the evidence rule plus the sensitive-location
+ * denylist. Existence is only disclosed AFTER evidence is proven (an unevidenced
+ * path answers 403 whether or not it exists). No directory is ever served.
+ */
+import { lstat, realpath } from "node:fs/promises";
+import path from "node:path";
+import { pathGuard, realPathGuard } from "../path-guard.js";
+import { evidenceKey } from "./evidence.js";
+import { isSensitivePath } from "./sensitive.js";
+const deny = (status, error, detail) => ({ ok: false, status, error, detail });
+export const MAX_PATH_CHARS = 4096;
+const BACKSLASH = String.fromCharCode(92);
+export const WIN_DEVICE = /^(con|prn|aux|nul|com[0-9¹²³]|lpt[0-9¹²³]|conin\$|conout\$)[. ]*(\..*)?$/i;
+/**
+ * The registered root that lexically contains `abs`, decided by the shared pathGuard (DO-NOT #10) on the
+ * root-relative form: a sibling prefix, `..` hop, other drive (or UNC) all come back !ok. Selection only; the
+ * authorising check is realPathGuard below.
+ */
+function containingRoot(roots, abs) {
+    return roots.find((r) => pathGuard(r, path.relative(path.resolve(r), abs)).ok);
+}
+/**
+ * The guard folds "missing" into symlink_escape. 404 only when the deepest EXISTING ancestor still lies inside the
+ * root; a path that hops out through a link answers 400 whether or not its target exists (no existence oracle
+ * outside the project, not even through a dangling link).
+ */
+async function classifyProjectMiss(root, realRoot, absolute) {
+    let probe = absolute;
+    for (;;) {
+        try {
+            const real = await realpath(probe);
+            return realPathGuard(root, real, realRoot).ok ? deny(404, "not_found") : deny(400, "path_traversal", "symlink_escape");
+        }
+        catch (err) {
+            // A dangling link (leaf or ancestor) points somewhere we must not describe: treat it as an escape.
+            if (await lstat(probe).then((st) => st.isSymbolicLink(), () => false))
+                return deny(400, "path_traversal", "symlink_escape");
+            const parent = path.dirname(probe);
+            const code = err?.code;
+            if ((code !== "ENOENT" && code !== "ENOTDIR") || parent === probe)
+                return deny(400, "path_traversal", "symlink_escape");
+            probe = parent;
+        }
+    }
+}
+export async function decideSessionFileAccess(args) {
+    const { roots, requested } = args;
+    if (!requested)
+        return deny(400, "path_required");
+    if (requested.length > MAX_PATH_CHARS || requested.includes("\0"))
+        return deny(400, "invalid_path");
+    // UNC / device namespaces would reach network shares and raw devices.
+    if (process.platform === "win32" && /^[/\x5c]{2}/.test(requested))
+        return deny(400, "invalid_path", "unc_or_device");
+    // A foreign drive-letter path is meaningless on a POSIX host (it would resolve as a relative name).
+    // (path.win32.isAbsolute is true for "/tmp/x" too, so match the drive-letter form explicitly.)
+    if (process.platform !== "win32" && /^[A-Za-z]:([/\\]|$)/.test(requested))
+        return deny(400, "invalid_path", "foreign_absolute");
+    // Windows device names would make realpath/CreateFileW touch the device itself.
+    if (process.platform === "win32" && WIN_DEVICE.test(path.win32.basename(requested.replaceAll("/", BACKSLASH)))) {
+        return deny(400, "invalid_path", "device_name");
+    }
+    let absolute;
+    const deviceLike = (p) => process.platform === "win32" && WIN_DEVICE.test(path.win32.basename(p));
+    if (path.isAbsolute(requested)) {
+        absolute = path.resolve(requested);
+    }
+    else {
+        // Only a relative path needs a project root; an absolute one can still be session-evidenced.
+        if (roots.length === 0)
+            return deny(400, "project_path_unavailable");
+        const g = pathGuard(roots[0], requested);
+        if (!g.ok)
+            return deny(400, g.reason === "traversal" ? "path_traversal" : g.reason, g.reason);
+        absolute = g.absolute;
+    }
+    if (deviceLike(absolute))
+        return deny(400, "invalid_path", "device_name"); // spellings like "COM1\." only surface after resolve
+    const root = containingRoot(roots, absolute);
+    if (root) {
+        let realRoot;
+        try {
+            realRoot = await realpath(root);
+        }
+        catch {
+            return deny(400, "path_traversal", "symlink_escape");
+        }
+        // Authorise ONLY the native canonical path (the one safe-read compares against, and the same flavour as
+        // realRoot): case, 8.3, subst/mapped-drive and trailing-dot spellings are all judged as the file they really
+        // are, through the shared symlink-aware guard (DO-NOT #10, not a re-implementation).
+        let canon;
+        try {
+            canon = await realpath(absolute);
+        }
+        catch {
+            return classifyProjectMiss(root, realRoot, absolute);
+        }
+        if (!realPathGuard(root, canon, realRoot).ok)
+            return deny(400, "path_traversal", "symlink_escape");
+        // Unmistakable secret names stay refused even inside a (possibly broad) project root; ordinary project files are untouched.
+        const relInRoot = path.relative(realRoot, canon);
+        if (relInRoot !== "" && isSensitivePath(relInRoot, "project"))
+            return deny(403, "sensitive_location");
+        return { ok: true, absolute: canon, scope: "project" };
+    }
+    // Outside every root: session evidence required. Sensitive locations never qualify.
+    if (isSensitivePath(absolute))
+        return deny(403, "sensitive_location");
+    // Evidence FIRST: an unevidenced path never reaches the filesystem (no network-drive touch, no timing oracle).
+    const first = await args.findEvidence([absolute]);
+    if (!first.found.has(evidenceKey(absolute))) {
+        return deny(403, "path_not_evidenced", first.incomplete ? "evidence_window_truncated" : undefined);
+    }
+    let real;
+    try {
+        real = await realpath(absolute);
+    }
+    catch {
+        return deny(404, "not_found");
+    }
+    // A symlink/junction hop: the session must have named where it really leads.
+    if (evidenceKey(real) !== evidenceKey(absolute)) {
+        const hop = await args.findEvidence([real]);
+        if (!hop.found.has(evidenceKey(real)))
+            return deny(403, "path_not_evidenced", "symlink_target");
+    }
+    // Residual risk (recorded, accepted): a file REPLACED at an evidenced path is served as-is.
+    if (isSensitivePath(real))
+        return deny(403, "sensitive_location");
+    // The real target might sit inside a root that the lexical path did not (a link INTO the project): fine, still evidenced.
+    return { ok: true, absolute: real, scope: "session" };
+}
+//# sourceMappingURL=access.js.map

package/server/dist/core/session-file/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../../src/core/session-file/access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAiBjD,MAAM,IAAI,GAAG,CAAC,MAA8B,EAAE,KAAa,EAAE,MAAe,EAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AACxI,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AACnC,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAC1C,MAAM,CAAC,MAAM,UAAU,GAAG,2EAA2E,CAAC;AAEtG;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAe,EAAE,GAAW;IAClD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,QAAgB,EAAE,QAAgB;IACjF,IAAI,KAAK,GAAG,QAAQ,CAAC;IACrB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACzH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mGAAmG;YACnG,IAAI,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;YAC5H,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;YAClD,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC,IAAI,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;YACxH,KAAK,GAAG,MAAM,CAAC;QACjB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAgB;IAC5D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAClC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAClD,IAAI,SAAS,CAAC,MAAM,GAAG,cAAc,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACpG,sEAAsE;IACtE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;IACrH,oGAAoG;IACpG,+FAA+F;IAC/F,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAEhI,gFAAgF;IAChF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/G,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,QAAgB,CAAC;IACrB,MAAM,UAAU,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1G,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,6FAA6F;QAC7F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QAC9F,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IACxB,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,qDAAqD;IAChI,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACvD,CAAC;QACD,wGAAwG;QACxG,6GAA6G;QAC7G,qFAAqF;QACrF,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,mBAAmB,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACnG,4HAA4H;QAC5H,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,SAAS,KAAK,EAAE,IAAI,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QACtG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACzD,CAAC;IAED,oFAAoF;IACpF,IAAI,eAAe,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACtE,+GAA+G;IAC/G,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC,GAAG,EAAE,oBAAoB,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChC,CAAC;IACD,6EAA6E;IAC7E,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;IAClG,CAAC;IACD,4FAA4F;IAC5F,IAAI,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAClE,0HAA0H;IAC1H,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACxD,CAAC"}

package/server/dist/core/session-file/asset-access.d.ts

@@ -0,0 +1,15 @@
+import { type AccessArgs, type AccessDecision } from "./access.js";
+/** Served with `?assetOf=`. A frozen literal on purpose: widening it widens what an evidenced page can read. */
+export declare const ASSET_MIME_BY_EXTENSION: Readonly<Record<string, string>>;
+/**
+ * A folder too broad to be "the page's own folder": a filesystem root, the home directory or any ancestor of it
+ * (the parent of all user profiles), the temp directory itself, or one of the catch-all folders directly under home.
+ */
+export declare function isBroadFolder(dir: string): boolean;
+/** Test hook: forget every memoized owner decision. */
+export declare function resetOwnerMemo(): void;
+export declare function decideAssetAccess(args: AccessArgs & {
+    owner: string;
+    memoKey?: string;
+}): Promise<AccessDecision>;
+//# sourceMappingURL=asset-access.d.ts.map

package/server/dist/core/session-file/asset-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset-access.d.ts","sourceRoot":"","sources":["../../../src/core/session-file/asset-access.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAuD,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAGxH,gHAAgH;AAChH,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUnE,CAAC;AAWH;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAQlD;AA4BD,uDAAuD;AACvD,wBAAgB,cAAc,IAAI,IAAI,CAErC;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CA0CvH"}

package/server/dist/core/session-file/asset-access.js

@@ -0,0 +1,141 @@
+/*
+ * Decision core of GET /tasks/:id/session-file?path=<asset>&assetOf=<html page>.
+ *
+ * A rendered HTML page that lives OUTSIDE the project is served only because the session evidences it
+ * (access.ts). Its relative images / stylesheets / fonts are NOT individually named in the transcript, so
+ * the per-path evidence rule refuses every one of them and the page renders without pictures. This is the
+ * one extra link in that chain: an asset is served when
+ *   - the owner page itself passes the normal decision (evidenced, not sensitive) and is a .html/.htm file,
+ *   - the asset is an image / stylesheet / font (ASSET_MIME_BY_EXTENSION) - never a script, page, text or data file,
+ *   - it lies inside the owner's own directory tree, by its lexical path AND by its realpath (a symlink that
+ *     leaves the folder is refused), and that folder is not a filesystem root, the home directory or an ancestor of
+ *     it, the temp directory, or Desktop / Documents / Downloads / Pictures (a page dropped there must not open a
+ *     whole drive / profile to its images),
+ *   - no path segment starts with "." (.git, .ssh, .env, hidden folders) and it is not a sensitive location.
+ * Existence is disclosed only after the owner's evidence is proven, like the rest of the route. Pure
+ * extension + containment checks run before any filesystem access beyond the owner's.
+ */
+import { realpath } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { WIN_DEVICE, decideSessionFileAccess, MAX_PATH_CHARS } from "./access.js";
+import { isSensitivePath } from "./sensitive.js";
+/** Served with `?assetOf=`. A frozen literal on purpose: widening it widens what an evidenced page can read. */
+export const ASSET_MIME_BY_EXTENSION = Object.freeze({
+    png: "image/png",
+    jpg: "image/jpeg",
+    jpeg: "image/jpeg",
+    gif: "image/gif",
+    webp: "image/webp",
+    svg: "image/svg+xml",
+    css: "text/plain; charset=utf-8",
+    woff: "font/woff",
+    woff2: "font/woff2",
+});
+const deny = (status, error) => ({ ok: false, status, error });
+const BACKSLASH = String.fromCharCode(92);
+const HTML_PAGE = /\.html?$/i;
+const within = (rel) => rel !== "" && rel !== ".." && !rel.startsWith(".." + path.sep) && !path.isAbsolute(rel);
+/** Catch-all folders directly under the home directory: a page dropped there must not open everything below it. */
+const BROAD_HOME_CHILDREN = new Set(["desktop", "documents", "downloads", "pictures", "onedrive", "dropbox"]);
+/**
+ * A folder too broad to be "the page's own folder": a filesystem root, the home directory or any ancestor of it
+ * (the parent of all user profiles), the temp directory itself, or one of the catch-all folders directly under home.
+ */
+export function isBroadFolder(dir) {
+    if (path.parse(dir).root === dir)
+        return true;
+    const home = os.homedir();
+    const homeFromDir = path.relative(dir, home);
+    if (homeFromDir === "" || within(homeFromDir))
+        return true; // dir is home, or home lies below it
+    if (path.relative(dir, os.tmpdir()) === "")
+        return true;
+    const fromHome = path.relative(home, dir);
+    return within(fromHome) && !fromHome.includes(path.sep) && BROAD_HOME_CHILDREN.has(fromHome.toLowerCase());
+}
+const hasDotSegment = (rel) => rel.split(path.sep).some((seg) => seg.startsWith("."));
+/**
+ * The owner page's evidence decision is the expensive part (an uncached, process-serialized transcript scan) and a page
+ * with many images asks for it once per image. A short-lived memo of POSITIVE decisions, shared by a burst of requests
+ * (the in-flight promise is stored, so concurrent requests join it), keeps that to one scan. Evidence in an append-only
+ * transcript is never withdrawn; a failed decision is never kept, so the next request re-checks.
+ */
+const OWNER_TTL_MS = 15_000;
+const OWNER_MEMO_MAX = 64;
+const ownerMemo = new Map();
+function decideOwner(args) {
+    const run = () => decideSessionFileAccess({ roots: args.roots, requested: args.owner, findEvidence: args.findEvidence });
+    const key = args.memoKey ? `${args.memoKey}\0${args.owner}` : null;
+    if (!key)
+        return run();
+    const hit = ownerMemo.get(key);
+    if (hit && Date.now() - hit.at < OWNER_TTL_MS)
+        return hit.decision;
+    const decision = run();
+    if (ownerMemo.size >= OWNER_MEMO_MAX)
+        ownerMemo.delete(ownerMemo.keys().next().value);
+    ownerMemo.set(key, { at: Date.now(), decision });
+    void decision.then((d) => {
+        if (!d.ok && ownerMemo.get(key)?.decision === decision)
+            ownerMemo.delete(key);
+    }, () => ownerMemo.delete(key));
+    return decision;
+}
+/** Test hook: forget every memoized owner decision. */
+export function resetOwnerMemo() {
+    ownerMemo.clear();
+}
+export async function decideAssetAccess(args) {
+    const { requested, owner } = args;
+    if (!requested)
+        return deny(400, "path_required");
+    if (requested.length > MAX_PATH_CHARS || requested.includes("\0") || owner.length > MAX_PATH_CHARS || owner.includes("\0")) {
+        return deny(400, "invalid_path");
+    }
+    const ext = path.extname(requested).toLowerCase().slice(1);
+    if (!Object.hasOwn(ASSET_MIME_BY_EXTENSION, ext))
+        return deny(403, "asset_type_not_allowed");
+    if (!path.isAbsolute(owner) || !HTML_PAGE.test(owner))
+        return deny(403, "asset_owner_invalid");
+    if (!path.isAbsolute(requested))
+        return deny(403, "asset_outside_page_folder");
+    // UNC / device namespaces would reach network shares and raw devices.
+    if (process.platform === "win32" && (/^[/\x5c]{2}/.test(requested) || WIN_DEVICE.test(path.win32.basename(requested.replaceAll("/", BACKSLASH))))) {
+        return deny(400, "invalid_path");
+    }
+    // An NTFS alternate data stream (`notes.txt:evil.png`) would pass the extension check: no ':' after the drive letter.
+    if (process.platform === "win32" && requested.replace(/^[a-zA-Z]:/, "").includes(":"))
+        return deny(400, "invalid_path");
+    const page = await decideOwner(args);
+    if (!page.ok)
+        return page;
+    const pageDir = path.dirname(page.absolute); // already a realpath
+    if (isBroadFolder(pageDir))
+        return deny(403, "asset_page_folder_too_broad");
+    const abs = path.resolve(requested);
+    // The requested spelling is the client's lexical one: when the page's folder is reached through a symlink / junction
+    // / subst drive it differs from the realpath `pageDir`, so either spelling of the folder may contain it. The
+    // authority is the realpath containment below.
+    let lexical = path.relative(pageDir, abs);
+    if (!within(lexical))
+        lexical = path.relative(path.dirname(path.resolve(owner)), abs);
+    if (!within(lexical))
+        return deny(403, "asset_outside_page_folder");
+    if (hasDotSegment(lexical))
+        return deny(403, "asset_hidden_path");
+    let real;
+    try {
+        real = await realpath(abs);
+    }
+    catch {
+        return deny(404, "not_found");
+    }
+    const actual = path.relative(pageDir, real);
+    if (!within(actual))
+        return deny(403, "asset_outside_page_folder");
+    if (hasDotSegment(actual) || isSensitivePath(real))
+        return deny(403, "sensitive_location");
+    return { ok: true, absolute: real, scope: "session" };
+}
+//# sourceMappingURL=asset-access.js.map

package/server/dist/core/session-file/asset-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset-access.js","sourceRoot":"","sources":["../../../src/core/session-file/asset-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,cAAc,EAAwC,MAAM,aAAa,CAAC;AACxH,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,gHAAgH;AAChH,MAAM,CAAC,MAAM,uBAAuB,GAAqC,MAAM,CAAC,MAAM,CAAC;IACrF,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,2BAA2B;IAChC,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,YAAY;CACpB,CAAC,CAAC;AAEH,MAAM,IAAI,GAAG,CAAC,MAAuB,EAAE,KAAa,EAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AACxG,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAC1C,MAAM,SAAS,GAAG,WAAW,CAAC;AAE9B,MAAM,MAAM,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAEjI,mHAAmH;AACnH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAE9G;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,WAAW,KAAK,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,qCAAqC;IACjG,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AAC7G,CAAC;AACD,MAAM,aAAa,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAEvG;;;;;GAKG;AACH,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,SAAS,GAAG,IAAI,GAAG,EAA6D,CAAC;AAEvF,SAAS,WAAW,CAAC,IAAsD;IACzE,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,uBAAuB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACzH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,YAAY;QAAE,OAAO,GAAG,CAAC,QAAQ,CAAC;IACnE,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC;IACvB,IAAI,SAAS,CAAC,IAAI,IAAI,cAAc;QAAE,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;IAChG,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjD,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,KAAK,QAAQ;YAAE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChF,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,cAAc;IAC5B,SAAS,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAsD;IAC5F,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAClC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAClD,IAAI,SAAS,CAAC,MAAM,GAAG,cAAc,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3H,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IAC7F,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC/F,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;IAC/E,sEAAsE;IACtE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClJ,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACnC,CAAC;IAED,sHAAsH;IACtH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAExH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,qBAAqB;IAClE,IAAI,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,qHAAqH;IACrH,6GAA6G;IAC7G,+CAA+C;IAC/C,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;IACpE,IAAI,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAElE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;IACnE,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC3F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACxD,CAAC"}

package/server/dist/core/session-file/evidence.d.ts

@@ -0,0 +1,25 @@
+import { type SessionInfoDeps } from "../session-info/session-info.js";
+import type { JsonlLocation } from "../session-watcher.js";
+/** Comparison key: Windows paths are case-insensitive and may use either slash. */
+export declare const evidenceKey: (p: string) => string;
+/** True when `hay` names `needle` as a complete path (see file header). */
+export declare function mentionsWholePath(hay: string, needle: string): boolean;
+export interface EvidenceDeps {
+    infoDeps?: SessionInfoDeps;
+}
+/**
+ * The subset of `candidates` (absolute paths) this session evidences (as
+ * evidenceKey()s), plus whether the search window was incomplete. The window is
+ * the newest SESSION_SCAN_BYTES (48 MB) of the session file; older mentions are
+ * a documented false negative (fail closed), reported as `incomplete` so the
+ * caller can tell "not evidenced" from "not searched". An unreadable/missing
+ * session evidences nothing. Evidence is bound to ONE session: the task's own
+ * sessionUuid, located by the watcher — no other transcript is ever consulted.
+ */
+export interface EvidenceResult {
+    found: Set<string>;
+    /** The transcript was larger than the scan window: older history was NOT searched. */
+    incomplete: boolean;
+}
+export declare function findSessionEvidence(sessionUuid: string, loc: JsonlLocation | null, candidates: string[], deps?: EvidenceDeps): Promise<EvidenceResult>;
+//# sourceMappingURL=evidence.d.ts.map

package/server/dist/core/session-file/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../../src/core/session-file/evidence.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAuC,KAAK,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAC5G,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D,mFAAmF;AACnF,eAAO,MAAM,WAAW,GAAI,GAAG,MAAM,KAAG,MAAyD,CAAC;AAWlG,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAetE;AAyDD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACnB,sFAAsF;IACtF,UAAU,EAAE,OAAO,CAAC;CACrB;AAaD,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,aAAa,GAAG,IAAI,EACzB,UAAU,EAAE,MAAM,EAAE,EACpB,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,cAAc,CAAC,CAgBzB"}

package/server/dist/core/session-file/evidence.js

@@ -0,0 +1,201 @@
+/*
+ * Session evidence for GET /tasks/:id/session-file: which absolute paths did
+ * THIS session itself touch or name? A path is evidenced when
+ *   1. it is an Output (Write/Edit/NotebookEdit/MultiEdit target, incl. its
+ *      subagents) per core/session-info, or
+ *   2. it is named, as a whole path, in a chat text block or in a tool_use
+ *      input of the session JSONL.
+ * tool_result bodies, attachments and thinking are NEVER evidence: they quote
+ * arbitrary file content and command output, not the session's intent.
+ *
+ * Stateless (CLAUDE.md rule 4): every call is a fresh bounded positional scan
+ * via scanLines; the only cache is session-info's pure per-file memo.
+ * Read-only (DO-NOT #1). A whole-path match means the char before is not a path
+ * character and the char after does not continue the path, so a mention of a
+ * directory never evidences its children and `/a/b` never evidences `/a/b.txt`.
+ */
+import path from "node:path";
+import { scanLines } from "../session-info/line-scan.js";
+import { SESSION_SCAN_BYTES, readSessionInfo } from "../session-info/session-info.js";
+const CI = process.platform === "win32";
+/** Comparison key: Windows paths are case-insensitive and may use either slash. */
+export const evidenceKey = (p) => (CI ? p.replace(/\//g, "\\").toLowerCase() : p);
+// Before-set: '=' is left out on purpose so `--out=/x/y.md` still evidences /x/y.md.
+// ')' '}' '*' ':' end shell expressions / remote specs (`$(pwd)/x`, `host:/x`): the path after them is a suffix, not a mention.
+const BEFORE_BAD = /[\p{L}\p{N}_\-./\x5c~+@%#$)}*:]/u;
+// '~', '+', '@', '%', '#', '$', '=' are valid filename characters: they continue a path, never end it.
+// (A space inside a quoted filename stays ambiguous; the extension allowlist bounds that residual.)
+const AFTER_BAD = /[\p{L}\p{N}_\-/\x5c~+@%#$=]/u;
+const MAX_STRINGS_PER_LINE = 2000;
+const MAX_DEPTH = 8;
+/** True when `hay` names `needle` as a complete path (see file header). */
+export function mentionsWholePath(hay, needle) {
+    if (!needle)
+        return false;
+    const h = CI ? hay.replace(/\//g, "\\").toLowerCase() : hay;
+    const n = evidenceKey(needle);
+    for (let i = h.indexOf(n); i !== -1; i = h.indexOf(n, i + 1)) {
+        const before = i > 0 ? h[i - 1] : "";
+        if (before && BEFORE_BAD.test(before))
+            continue;
+        const end = i + n.length;
+        const after = h[end] ?? "";
+        if (after && AFTER_BAD.test(after))
+            continue;
+        // A '.' ends a sentence, unless it starts an extension ("a.txt" vs "a.txt.bak").
+        if (after === "." && h[end + 1] !== undefined && AFTER_BAD.test(h[end + 1]))
+            continue;
+        return true;
+    }
+    return false;
+}
+function collectStrings(v, out, depth = 0) {
+    if (out.length >= MAX_STRINGS_PER_LINE || depth > MAX_DEPTH)
+        return;
+    if (typeof v === "string")
+        out.push(v);
+    else if (Array.isArray(v))
+        for (const x of v)
+            collectStrings(x, out, depth + 1);
+    else if (v && typeof v === "object")
+        for (const x of Object.values(v))
+            collectStrings(x, out, depth + 1);
+}
+// Command output AND harness-generated wrappers the CLI echoes into user records: none of it is something the
+// user typed or the assistant chose to name (a file or background agent could smuggle a path through them).
+const OUTPUT_SECTIONS = [
+    "bash-stdout", "bash-stderr", "local-command-stdout", "local-command-stderr", "command-stdout", "command-stderr",
+    "system-reminder", "task-notification", "user-prompt-submit-hook", "tool-use-error",
+];
+/** Drop `<name>…</name>` sections (command output echoed into user records) by plain string search. */
+function stripSections(text, names) {
+    let out = text;
+    for (const name of names) {
+        const open = `<${name}>`;
+        const close = `</${name}>`;
+        for (let s = out.indexOf(open); s !== -1; s = out.indexOf(open)) {
+            const e = out.indexOf(close, s);
+            out = out.slice(0, s) + (e === -1 ? "" : out.slice(e + close.length));
+        }
+    }
+    return out;
+}
+/** Text a user could have SEEN or the assistant DID: chat text + tool_use inputs. Never command output or injected meta. */
+function evidenceStrings(rec) {
+    if (rec.type !== "user" && rec.type !== "assistant")
+        return [];
+    if (rec.isMeta === true || rec.isCompactSummary === true)
+        return [];
+    // A user record that answers a tool call (or carries its structured result) is tool output, not a prompt.
+    if (rec.type === "user" && (rec.toolUseResult !== undefined || rec.sourceToolUseID !== undefined))
+        return [];
+    const msg = rec.message;
+    const content = msg?.content;
+    const out = [];
+    if (typeof content === "string")
+        out.push(stripSections(content, OUTPUT_SECTIONS));
+    else if (Array.isArray(content)) {
+        for (const b of content) {
+            if (!b || typeof b !== "object")
+                continue;
+            if (b.type === "text" && typeof b.text === "string")
+                out.push(stripSections(b.text, OUTPUT_SECTIONS));
+            else if (b.type === "tool_use")
+                collectStrings(b.input, out);
+        }
+    }
+    return out;
+}
+/** Cheap raw-line pre-filter token: the basename, unless JSON could have escaped it. */
+function prefilterToken(candidate) {
+    const base = path.win32.basename(candidate.replace(/\//g, "\\"));
+    if (!base || [...base].some((ch) => ch === '"' || ch === "\x5c" || ch.charCodeAt(0) < 32))
+        return null;
+    return CI ? base.toLowerCase() : base;
+}
+/**
+ * Scans are serialized process-wide: each is synchronous JSON work over up to 48 MB, and a burst of
+ * concurrent requests must queue rather than starve the event loop (terminal WS, transcript polls).
+ * A promise chain, not a cache - nothing is remembered between requests (CLAUDE.md rule 4).
+ */
+let scanQueue = Promise.resolve();
+const SCAN_TIMEOUT_MS = 20_000;
+const MAX_PENDING_SCANS = 8;
+let pendingScans = 0;
+export function findSessionEvidence(sessionUuid, loc, candidates, deps = {}) {
+    // Bounded backlog: a burst of unevidenced requests must not queue unbounded full scans (fail closed, incomplete).
+    if (pendingScans >= MAX_PENDING_SCANS)
+        return Promise.resolve({ found: new Set(), incomplete: true });
+    pendingScans++;
+    const release = () => {
+        pendingScans--;
+    };
+    // The backlog slot is held until the scan itself has stopped, not merely until the caller stopped waiting
+    // (a timed-out scan keeps running, so releasing on timeout would let stalled scans pile up past the cap).
+    const run = scanQueue.then(() => {
+        const scan = scanForEvidence(sessionUuid, loc, candidates, deps);
+        void scan.then(release, release);
+        return withTimeout(scan);
+    });
+    scanQueue = run.catch(() => undefined);
+    return run;
+}
+/** A stalled read must not hold the queue forever: give up (fail closed, incomplete) and move on. */
+function withTimeout(p) {
+    let timer;
+    const timeout = new Promise((resolve) => {
+        timer = setTimeout(() => resolve({ found: new Set(), incomplete: true }), SCAN_TIMEOUT_MS);
+    });
+    return Promise.race([p, timeout]).finally(() => clearTimeout(timer));
+}
+async function scanForEvidence(sessionUuid, loc, candidates, deps) {
+    const found = new Set();
+    let incomplete = false;
+    if (!loc || candidates.length === 0)
+        return { found, incomplete };
+    const wanted = new Map(candidates.map((c) => [evidenceKey(c), c]));
+    try {
+        const info = await readSessionInfo(sessionUuid, loc, deps.infoDeps);
+        for (const o of info.outputs)
+            if (wanted.has(evidenceKey(o.path)))
+                found.add(evidenceKey(o.path));
+    }
+    catch {
+        /* fall through to the raw scan; never widen access on error */
+    }
+    const tokens = candidates.map(prefilterToken);
+    const pending = () => candidates.filter((c) => !found.has(evidenceKey(c)));
+    const onLine = (line) => {
+        if (pending().length === 0)
+            return;
+        if (!line.includes('"user"') && !line.includes('"assistant"'))
+            return;
+        const probe = CI ? line.toLowerCase() : line;
+        const live = candidates.filter((c, i) => !found.has(evidenceKey(c)) && (tokens[i] === null || probe.includes(tokens[i])));
+        if (live.length === 0)
+            return;
+        let rec;
+        try {
+            const parsed = JSON.parse(line);
+            if (!parsed || typeof parsed !== "object")
+                return;
+            rec = parsed;
+        }
+        catch {
+            return;
+        }
+        const strings = evidenceStrings(rec);
+        for (const c of live)
+            if (strings.some((s) => mentionsWholePath(s, c)))
+                found.add(evidenceKey(c));
+    };
+    try {
+        incomplete = (await scanLines(loc.path, SESSION_SCAN_BYTES, onLine)).truncated;
+    }
+    catch {
+        /* unreadable session: only what structured outputs already proved */
+        incomplete = true;
+    }
+    return { found, incomplete };
+}
+//# sourceMappingURL=evidence.js.map

package/server/dist/core/session-file/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../src/core/session-file/evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAwB,MAAM,iCAAiC,CAAC;AAG5G,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AACxC,mFAAmF;AACnF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAElG,qFAAqF;AACrF,gIAAgI;AAChI,MAAM,UAAU,GAAG,kCAAkC,CAAC;AACtD,uGAAuG;AACvG,oGAAoG;AACpG,MAAM,SAAS,GAAG,8BAA8B,CAAC;AACjD,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,MAAc;IAC3D,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5D,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,IAAI,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,SAAS;QAChD,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACzB,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QAC7C,iFAAiF;QACjF,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAE,CAAC;YAAE,SAAS;QACvF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,CAAU,EAAE,GAAa,EAAE,KAAK,GAAG,CAAC;IAC1D,IAAI,GAAG,CAAC,MAAM,IAAI,oBAAoB,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO;IACpE,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SAClC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,KAAK,MAAM,CAAC,IAAI,CAAC;YAAE,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;SAC3E,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED,8GAA8G;AAC9G,4GAA4G;AAC5G,MAAM,eAAe,GAAG;IACtB,aAAa,EAAE,aAAa,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,gBAAgB;IAChH,iBAAiB,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,gBAAgB;CACpF,CAAC;AAEF,uGAAuG;AACvG,SAAS,aAAa,CAAC,IAAY,EAAE,KAAe;IAClD,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,IAAI,GAAG,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,IAAI,GAAG,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAChC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4HAA4H;AAC5H,SAAS,eAAe,CAAC,GAA4B;IACnD,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC;IAC/D,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACpE,0GAA0G;IAC1G,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7G,MAAM,GAAG,GAAG,GAAG,CAAC,OAA8C,CAAC;IAC/D,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,CAAC;IAC7B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;SAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,OAAoC,EAAE,CAAC;YACrD,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,SAAS;YAC1C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;iBACjG,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;gBAAE,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wFAAwF;AACxF,SAAS,cAAc,CAAC,SAAiB;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACvG,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC;AAqBD;;;;GAIG;AACH,IAAI,SAAS,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;AAEpD,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,IAAI,YAAY,GAAG,CAAC,CAAC;AAErB,MAAM,UAAU,mBAAmB,CACjC,WAAmB,EACnB,GAAyB,EACzB,UAAoB,EACpB,OAAqB,EAAE;IAEvB,kHAAkH;IAClH,IAAI,YAAY,IAAI,iBAAiB;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACtG,YAAY,EAAE,CAAC;IACf,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,YAAY,EAAE,CAAC;IACjB,CAAC,CAAC;IACF,0GAA0G;IAC1G,0GAA0G;IAC1G,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE;QAC9B,MAAM,IAAI,GAAG,eAAe,CAAC,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QACjE,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qGAAqG;AACrG,SAAS,WAAW,CAAC,CAA0B;IAC7C,IAAI,KAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,EAAE;QACtD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,WAAmB,EACnB,GAAyB,EACzB,UAAoB,EACpB,IAAkB;IAElB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEnE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;IACjE,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,CAAC,IAAY,EAAQ,EAAE;QACpC,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACnC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,OAAO;QACtE,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;QAC3H,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,IAAI,GAA4B,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO;YAClD,GAAG,GAAG,MAAiC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACpG,CAAC,CAAC;IACF,IAAI,CAAC;QACH,UAAU,GAAG,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAC/B,CAAC"}

package/server/dist/core/session-file/probe.d.ts

@@ -0,0 +1,16 @@
+import { type AccessArgs } from "./access.js";
+export declare const MAX_PROBE_PATHS = 40;
+export type ProbeReason = "not_found" | "not_a_file" | "not_previewable" | "unavailable";
+export interface ProbeResult {
+    openable: boolean;
+    reason?: ProbeReason;
+}
+export interface ProbeArgs extends Pick<AccessArgs, "roots" | "findEvidence"> {
+    paths: string[];
+    /** The viewer can only render allow-listed types (same MIME allowlist as the read route). */
+    /** The Viewer refuses files above this size (413); probe them as not openable too. */
+    maxBytes?: number;
+    previewable: (absolute: string) => boolean;
+}
+export declare function probeOpenable(args: ProbeArgs): Promise<ProbeResult[]>;
+//# sourceMappingURL=probe.d.ts.map

package/server/dist/core/session-file/probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../../src/core/session-file/probe.ts"],"names":[],"mappings":"AAaA,OAAO,EAA2C,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAIvF,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,YAAY,GAAG,iBAAiB,GAAG,aAAa,CAAC;AACzF,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,SAAU,SAAQ,IAAI,CAAC,UAAU,EAAE,OAAO,GAAG,cAAc,CAAC;IAC3E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,6FAA6F;IAC7F,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;CAC5C;AAyBD,wBAAsB,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAsB3E"}