@tea-agent/loop-agent 0.16.18 → 0.16.19

package/CHANGELOG.md

@@ -24,6 +24,12 @@
 - Pi SDK 执行长推理或大段结构化输出时不再把高频流式增量事件无界累积到内存；同一响应在多个生命周期事件中重复出现的 Token 用量只统计一次，避免 `Invalid string length` 和成本数据虚高。
 - 后端测试复合执行节点继续保持 clean environment、失败分类和 fail-closed outcome，并为 initial/final Result、repair eligibility、traceability 与 Observe 投影保留结构化运行证据。
 
+## [0.16.19] - 2026-07-20
+
+### 修复
+
+- frontend-test result 物化在比较 evidence 路径前先 `realpath` 仓库与 evidence 根，避免 macOS `/var`→`/private/var` 导致的 `evidence realpath escapes its allowed root` 误拦。
+
 ## [0.16.18] - 2026-07-20
 
 ### 修复

package/dist/workflows/dag/frontend-test-result-contract.js

@@ -75,27 +75,32 @@ async function readEvidenceFile(repoRoot, evidenceRoot, relative) {
     if (!safeRelativePathSchema.safeParse(relative).success) {
         throw new Error(`unsafe evidence path: ${relative}`);
     }
+    // Resolve roots first so macOS /var vs /private/var does not look like an escape.
+    const repoRootResolved = await realpath(repoRoot);
+    const evidenceRootResolved = await realpath(evidenceRoot);
+    assertInside(repoRootResolved, evidenceRootResolved, "evidenceDir");
     // Accept either evidence-root-relative paths or repo-relative paths under the case evidence root.
     const normalized = relative.replaceAll("\\", "/");
-    const evidenceRootRel = path.relative(repoRoot, evidenceRoot).replaceAll("\\", "/");
+    const evidenceRootRel = path.relative(repoRootResolved, evidenceRootResolved).replaceAll("\\", "/");
     let candidate = normalized;
     if (normalized === evidenceRootRel || normalized.startsWith(`${evidenceRootRel}/`)) {
-        candidate = path.relative(evidenceRoot, path.resolve(repoRoot, normalized)).replaceAll("\\", "/");
+        candidate = path.relative(evidenceRootResolved, path.resolve(repoRootResolved, normalized)).replaceAll("\\", "/");
     }
     else if (normalized.startsWith("testcase/frontend/evidence/")) {
-        candidate = path.relative(evidenceRoot, path.resolve(repoRoot, normalized)).replaceAll("\\", "/");
+        candidate = path.relative(evidenceRootResolved, path.resolve(repoRootResolved, normalized)).replaceAll("\\", "/");
     }
-    if (!candidate || candidate.startsWith("..")) {
+    if (!candidate || candidate.startsWith("..") || path.isAbsolute(candidate)) {
         throw new Error(`evidence path escapes evidence root: ${relative}`);
     }
-    const absolute = path.resolve(evidenceRoot, candidate);
-    assertInside(evidenceRoot, absolute, "evidence path");
+    const absolute = path.resolve(evidenceRootResolved, candidate);
+    assertInside(evidenceRootResolved, absolute, "evidence path");
     const resolved = await realpath(absolute);
-    assertInside(repoRoot, resolved, "evidence realpath");
+    assertInside(repoRootResolved, resolved, "evidence realpath");
+    assertInside(evidenceRootResolved, resolved, "evidence realpath under case root");
     const info = await lstat(resolved);
     if (!info.isFile())
         throw new Error(`evidence is not a file: ${relative}`);
-    const storedPath = path.relative(repoRoot, resolved).replaceAll("\\", "/");
+    const storedPath = path.relative(repoRootResolved, resolved).replaceAll("\\", "/");
     return { path: storedPath, sha256: sha256(await readFile(resolved)) };
 }
 export async function materializeFrontendTestResult(input) {
@@ -129,8 +134,9 @@ export async function materializeFrontendTestResult(input) {
                 throw new Error(`unknown AC in manifest: ${acId}`);
             covered.add(acId);
         }
-        const evidenceRoot = path.resolve(input.workspaceRoot, item.evidenceDir);
-        assertInside(input.workspaceRoot, evidenceRoot, "evidenceDir");
+        const workspaceRootResolved = await realpath(input.workspaceRoot);
+        const evidenceRoot = path.resolve(workspaceRootResolved, item.evidenceDir);
+        assertInside(workspaceRootResolved, evidenceRoot, "evidenceDir");
         const resultRaw = JSON.parse(await readFile(path.join(evidenceRoot, "case-result.json"), "utf-8"));
         const status = caseStatusSchema.parse(resultRaw.status);
         if (resultRaw.caseId !== item.caseId || !Array.isArray(resultRaw.evidencePaths))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tea-agent/loop-agent",
-  "version": "0.16.18",
+  "version": "0.16.19",
   "type": "module",
   "bin": {
     "loop-agent": "bin/loop-agent.js",