@tequila99/githuman 0.4.2 → 0.6.0

package/README.md

@@ -20,7 +20,7 @@ staged/unstaged diff, сравнение веток и коммитов, бра
   файлов в репозитории — удобно смотреть, как редактирует код AI-агент.
   После перезапуска `serve` уже открытые вкладки перезагружаются сами.
 - Чаты с ACP-агентами (Claude Code, Cursor, Codex, pi): до 5 чатов во
-  вкладках, контекст — diff, файл целиком, ревью, вложения и `@`-файлы из
+  вкладках, контекст — diff, файл целиком, ревью, вложения и `@`-файлы и папки из
   репозитория. Подробнее — в разделе «Агенты» ниже.
 - Ручной/авто выбор тёмной-светлой темы.
 - CLI: `serve` (поднять сервер), `list`/`export` (быстрый доступ к
@@ -77,7 +77,13 @@ node dist/cli/index.js export last --format markdown -o review.md
 репозитория; нужные адаптеры подтягиваются через `npx` при первом запуске.
 
 - **Контекст.** «Add to chat» в меню файла и diff, кнопка у активного
-  ревью; в поле ввода `@` + часть имени + Tab вставляет файл из репозитория.
+  ревью; в поле ввода `@` + часть имени + Tab вставляет файл или папку из репозитория.
+  Кнопка микрофона в поле ввода — голосовой ввод: держите её и говорите,
+  после отпускания текст попадает в поле (отправка — как обычно). Работает
+  через Web Speech API браузера: в Chrome и Edge звук обрабатывает облачный
+  сервис браузера. В Firefox кнопки нет, как и на странице по обычному
+  `http` с другой машины (`--host 0.0.0.0`): микрофону нужен защищённый
+  контекст (`localhost` или `https`). Язык — в строке настроек чата.
   Shift+Tab переключает режим агента, модель и режим выбираются под полем.
 - **Подтверждения.** Запросы разрешений приходят карточкой в чат. Для
   отдельного чата можно включить автоподтверждение (кнопка-щит) — агент
@@ -171,3 +177,13 @@ pnpm run build       # server (tsc) + web (quasar build) → dist/
 ## Лицензия
 
 MIT, см. [LICENSE](LICENSE).
+
+## Встроенный терминал
+
+При запуске на loopback кнопка **Terminal** в шапке и меню открывает терминал в корне репозитория. ``Ctrl+Shift+` `` открывает или сворачивает окно. Окно можно перетаскивать и сворачивать; «+» добавляет вкладку, до восьми терминалов. Закрытие вкладки требует подтверждения и останавливает shell с его командами. Команда `exit` закрывает вкладку сразу.
+
+Сессии переживают обновление страницы и доступны из нескольких страниц браузера. История ограничена 5000 строками scrollback; после остановки сервера она теряется. Без подписчиков простаивающая сессия завершается через 15 минут, работающая или с неизвестным состоянием — не позднее часа.
+
+Если платформенный бинарник PTY недоступен, терминал работает в ограниченном режиме с баннером: команды вводятся в поле под выводом, Ctrl+C прерывает команду, Ctrl+D закрывает shell. `vim`, `less` и другие интерактивные программы требуют PTY. В LAN терминал отключён. Переключатель исходных цветов отключает минимальный контраст для программ со своей палитрой.
+
+Для разработки на другом порту backend можно передать `GITHUMAN_DEV_API=http://localhost:3848` при запуске Quasar dev-сервера.

package/dist/cli/index.js

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { errorMessage } from "../shared/utils/error-message.js";
 import { writeFileSync } from 'node:fs';
 import { parseServeArgs } from "./config.js";
 import { startServer, resolveRepositoryPath, resolveReviewsDbPath } from "./server-runtime.js";
@@ -7,6 +8,8 @@ import { parseListArgs, runList } from "./commands/list.js";
 import { parseExportArgs, runExport } from "./commands/export.js";
 import { createFileDatabase } from "../server/db/index.js";
 import { getAppVersion } from "../server/app-version.js";
+// Force exit when a graceful close hangs. It must exceed the terminal kill time: ps timeout plus grace.
+const SHUTDOWN_TIMEOUT_MS = 5000;
 /** Opens the reviews DB for the repo at cwd, shared by `list` and `export`. */
 async function openReviewsDb(dbPrefix) {
     const repositoryPath = await resolveRepositoryPath(process.cwd());
@@ -21,7 +24,29 @@ async function main(argv) {
     switch (command) {
         case 'serve': {
             const options = parseServeArgs(rest);
-            const { url } = await startServer(options);
+            const { app, url } = await startServer(options);
+            let stopping = false;
+            const shutdown = () => {
+                if (stopping)
+                    return;
+                stopping = true;
+                // Do not wait for a stuck connection forever. Unref lets a clean close end the process by itself.
+                const deadline = setTimeout(() => process.exit(1), SHUTDOWN_TIMEOUT_MS);
+                deadline.unref();
+                void app
+                    .close()
+                    .then(() => {
+                    clearTimeout(deadline);
+                    process.exitCode = 0;
+                    return undefined;
+                })
+                    .catch(error => {
+                    console.error(errorMessage(error));
+                    process.exitCode = 1;
+                });
+            };
+            process.once('SIGINT', shutdown);
+            process.once('SIGTERM', shutdown);
             console.log(formatStartupMessage(url, options.host));
             return;
         }
@@ -50,6 +75,6 @@ async function main(argv) {
     }
 }
 main(process.argv.slice(2)).catch((error) => {
-    console.error(error instanceof Error ? error.message : error);
+    console.error(errorMessage(error));
     process.exitCode = 1;
 });

package/dist/cli/server-runtime.js

@@ -64,6 +64,7 @@ export async function startServer(options) {
         db,
         watchFiles: true,
         apiDocs: options.apiDocs === true,
+        terminalEnabled: isLoopbackHost(options.host),
         // Agents can run commands, so they are only offered on a loopback bind.
         ...(isLoopbackHost(options.host)
             ? {

package/dist/server/app.js

@@ -4,6 +4,10 @@ import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import Fastify from 'fastify';
 import fastifyStatic from '@fastify/static';
+import fastifyWebsocket from '@fastify/websocket';
+import { terminalRoutes, TERMINAL_WEBSOCKET_OPTIONS } from "./routes/terminal.js";
+import { TerminalRegistry } from "./services/terminal/registry.js";
+import { loadPty, terminalSupported } from "./services/terminal/backend.js";
 import fastifySwagger from '@fastify/swagger';
 import fastifySwaggerUi from '@fastify/swagger-ui';
 // @fastify/sse's published types declare an ESM default export that doesn't match
@@ -32,6 +36,10 @@ export function buildApp(options = {}) {
     const repositoryPath = options.repositoryPath ?? process.cwd();
     const db = options.db ?? createTestDatabase();
     const eventBus = options.eventBus ?? createEventBus();
+    // Windows includes a PTY binary, but the shell and process list are Unix-only.
+    const terminalEnabled = options.terminalEnabled === true && terminalSupported();
+    if (terminalEnabled)
+        app.register(fastifyWebsocket, TERMINAL_WEBSOCKET_OPTIONS);
     app.register(fastifySse);
     // The spec collects routes as they are added, so it comes before them.
     app.register(fastifySwagger, openApiOptions());
@@ -40,7 +48,12 @@ export function buildApp(options = {}) {
     }
     app.register(openApiRoutes);
     app.register(healthRoutes);
-    app.register(appInfoRoutes);
+    app.register(appInfoRoutes, {
+        terminalCapability: async () => ({
+            available: terminalEnabled,
+            mode: terminalEnabled ? ((await loadPty()) ? 'pty' : 'pipe') : null
+        })
+    });
     app.register(diffRoutes, { repositoryPath });
     app.register(gitRoutes, { repositoryPath });
     app.register(reviewRoutes, { repositoryPath, db, eventBus });
@@ -50,6 +63,14 @@ export function buildApp(options = {}) {
         eventBus,
         instanceId: options.instanceId ?? randomUUID()
     });
+    if (terminalEnabled)
+        app.register(terminalRoutes, {
+            registry: options.terminalRegistry ??
+                new TerminalRegistry({
+                    repositoryPath,
+                    onLifecycle: event => app.log.info({ terminal: event }, 'Terminal lifecycle')
+                })
+        });
     if (options.agentPresets) {
         app.register(agentRoutes, {
             registry: createSessionRegistry({

package/dist/server/errors/git.js

@@ -0,0 +1,2 @@
+import createError from '@fastify/error';
+export const GitFileNotFoundError = createError('GHT_GIT_FILE_NOT_FOUND', '%s', 404);

package/dist/server/errors/terminal.js

@@ -0,0 +1,4 @@
+import createError from '@fastify/error';
+export const TerminalError = createError('GHT_TERMINAL', '%s', 409);
+export const TerminalNotFoundError = createError('GHT_TERMINAL_NOT_FOUND', '%s', 404);
+export const TerminalLimitError = createError('GHT_TERMINAL_LIMIT', '%s', 409);

package/dist/server/hooks/terminal/local-origin.js

@@ -0,0 +1,25 @@
+import { isLoopbackHost } from "../../../shared/network/loopback.js";
+import { ForbiddenError } from "../../errors/http.js";
+// Returns false on any malformed value: an invalid URL means an invalid origin.
+function isTerminalOrigin(host, origin) {
+    if (!host || !origin)
+        return false;
+    try {
+        const source = new URL(origin);
+        const target = new URL(`http://${host}`);
+        return (isLoopbackHost(target.hostname) &&
+            target.host === host &&
+            source.host === target.host &&
+            source.protocol === 'http:' &&
+            source.origin === origin &&
+            !target.username &&
+            !target.password);
+    }
+    catch {
+        return false;
+    }
+}
+export async function requireTerminalOrigin(request) {
+    if (!isTerminalOrigin(request.headers.host, request.headers.origin))
+        throw new ForbiddenError('Terminal endpoints only accept requests from this local server. Open the app via localhost.');
+}

package/dist/server/routes/agent.js

@@ -198,7 +198,7 @@ export async function agentRoutes(app, opts) {
     typedApp.get('/api/agent/files', {
         schema: {
             tags: TAGS,
-            summary: 'Find repository files for the context picker',
+            summary: 'Find repository files and directories for the context picker',
             querystring: FileSearchQuery,
             response: {
                 200: AgentFileSearchResponseSchema,
@@ -206,7 +206,7 @@ export async function agentRoutes(app, opts) {
             }
         }
     }, async (request) => ({
-        files: await fileIndex.search(request.query.q ?? '', request.query.limit ?? DEFAULT_FILE_SEARCH_LIMIT)
+        paths: await fileIndex.search(request.query.q ?? '', request.query.limit ?? DEFAULT_FILE_SEARCH_LIMIT)
     }));
     // One stream for every chat (ADR 0024): browsers allow ~6 connections per
     // origin over HTTP/1.1, so a stream per session would starve the page's own
@@ -257,6 +257,12 @@ export async function agentRoutes(app, opts) {
                 safeSend(reply.sse, { event: 'sessions', data: {} });
             }
         }, Number.isInteger(lastEventId) ? lastEventId : 0);
+        // The replay can close a stream whose queue is full. `onClose` callbacks
+        // have run then, so the listener is removed here.
+        if (!reply.sse.isConnected) {
+            unsubscribe();
+            return;
+        }
         reply.sse.onClose(unsubscribe);
     });
 }

package/dist/server/routes/app-info.js

@@ -1,6 +1,6 @@
 import { getAppVersion } from "../app-version.js";
 import { AppInfoSchema } from "../../shared/app/schemas.js";
-export async function appInfoRoutes(app) {
+export async function appInfoRoutes(app, options) {
     app.withTypeProvider().get('/api/app-info', {
         schema: {
             tags: ['app'],
@@ -8,6 +8,9 @@ export async function appInfoRoutes(app) {
             response: { 200: AppInfoSchema }
         }
     }, async () => {
-        return { version: getAppVersion() };
+        return {
+            version: getAppVersion(),
+            terminal: await options.terminalCapability()
+        };
     });
 }

package/dist/server/routes/git.js

@@ -1,4 +1,5 @@
 import { BadRequestError } from "../errors/http.js";
+import { GitFileNotFoundError } from "../errors/git.js";
 import { getRepositoryInfo, stagePaths, unstagePaths, discardPaths, getFilesAtRef, getFileAtRef } from "../services/git.service.js";
 import { DiscardBody, FileContentQuery, FileContentResponseSchema, FileParams, FileTreeResponseSchema, OkSchema, OptionalPathsBody, RepositoryInfoSchema, TreeParams } from "../../shared/git/schemas.js";
 import { ERROR_RESPONSES } from "../../shared/http/schemas.js";
@@ -95,7 +96,7 @@ export async function gitRoutes(app, opts) {
         }
     }, async (request) => {
         const filePath = request.params['*'];
-        const { ref } = request.query;
+        const { ref, strict } = request.query;
         if (!filePath) {
             throw new BadRequestError('File path is required');
         }
@@ -103,9 +104,11 @@ export async function gitRoutes(app, opts) {
         let isBinary;
         try {
             ;
-            ({ content, isBinary } = await getFileAtRef(repositoryPath, ref, filePath));
+            ({ content, isBinary } = await getFileAtRef(repositoryPath, ref, filePath, strict));
         }
         catch (err) {
+            if (err instanceof GitFileNotFoundError)
+                throw err;
             const message = err instanceof Error ? err.message : 'Failed to read file';
             throw new BadRequestError(message, { cause: err });
         }

package/dist/server/routes/terminal.js

@@ -0,0 +1,63 @@
+import { Type } from '@sinclair/typebox';
+import { TerminalTokenSchema } from "../../shared/terminal/schemas.js";
+import { TERMINAL_FRAME_BYTES } from "../../shared/terminal/constants.js";
+import { ForbiddenError } from "../errors/http.js";
+import { requireTerminalOrigin } from "../hooks/terminal/local-origin.js";
+import { TerminalTokens } from "../services/terminal/tokens.js";
+import { attachTerminalSocket } from "../services/terminal/socket.js";
+// Reject oversized values early. A real token has 43 characters.
+const MAX_TOKEN_LENGTH = 64;
+// Leave room for the JSON envelope around an input frame.
+const MAX_PAYLOAD_BYTES = TERMINAL_FRAME_BYTES * 2;
+// Apply the same frame limit to every terminal upgrade.
+export const TERMINAL_WEBSOCKET_OPTIONS = {
+    options: { maxPayload: MAX_PAYLOAD_BYTES }
+};
+export async function terminalRoutes(app, options) {
+    const tokens = new TerminalTokens();
+    const connections = new Set();
+    app.addHook('onError', async (_request, _reply, error) => {
+        // Request URLs contain credentials, so log only the rejection code.
+        app.log.warn({ code: error.code }, 'Terminal request rejected');
+    });
+    const api = app.withTypeProvider();
+    api.post('/api/terminal/token', {
+        onRequest: requireTerminalOrigin,
+        schema: {
+            tags: ['terminal'],
+            summary: 'Issue a terminal connection token',
+            response: { 200: TerminalTokenSchema }
+        }
+    }, async (request) => ({ token: tokens.issue(request.headers.origin ?? '') }));
+    api.get('/api/terminal/ws', {
+        websocket: true,
+        schema: {
+            hide: true,
+            querystring: Type.Object({
+                token: Type.String({
+                    maxLength: MAX_TOKEN_LENGTH,
+                    description: 'One-use connection credential.'
+                })
+            }, {
+                additionalProperties: false,
+                description: 'Terminal upgrade credential.'
+            })
+        },
+        onRequest: requireTerminalOrigin,
+        preValidation: async (request) => {
+            if (!tokens.consume(request.query.token, request.headers.origin ?? ''))
+                throw new ForbiddenError('Terminal connection token is invalid or expired.');
+        }
+    }, socket => {
+        const connection = attachTerminalSocket(socket, options.registry, {
+            onDisconnect: () => connections.delete(connection)
+        });
+        connections.add(connection);
+    });
+    app.addHook('onClose', async () => {
+        for (const connection of connections)
+            connection.close();
+        tokens.clear();
+        await options.registry.dispose();
+    });
+}

package/dist/server/services/agent/agent-session.js

@@ -11,7 +11,8 @@ import * as acp from '@agentclientprotocol/sdk';
 import { mapConfigOptions, mapPermissionRequest, mapSessionUpdate } from "../../adapters/agents/event-mapper.js";
 /** `npx` may have to download the adapter first. */
 const START_TIMEOUT_MS = 90_000;
-const MAX_BUFFERED_EVENTS = 5_000;
+/** Events that one session keeps for a client that joins late or reconnects. */
+export const MAX_BUFFERED_EVENTS = 5_000;
 const STDERR_TAIL_CHARS = 2_000;
 /** How long a closed connection waits for the `exit` event that carries the reason. */
 const EXIT_GRACE_MS = 500;

package/dist/server/services/agent/context-builder.js

@@ -2,10 +2,11 @@ import { MAX_ATTACHMENT_BYTES } from "../../../shared/agents/constants.js";
 import { AgentContextError } from "../../errors/agents.js";
 import { errorMessage } from "../../../shared/utils/error-message.js";
 import { formatDiffFile } from "../../../shared/agents/context-format.js";
+import { withoutTrailingSlash } from "../../../shared/agents/mention-paths.js";
 import { randomUUID } from 'node:crypto';
 import { pathToFileURL } from 'node:url';
-import { mkdir, stat, writeFile } from 'node:fs/promises';
-import { join } from 'node:path';
+import { mkdir, realpath, stat, writeFile } from 'node:fs/promises';
+import { join, relative, resolve, sep } from 'node:path';
 import { getStagedDiff, getUnstagedDiff } from "../diff.service.js";
 import { exportAsMarkdown } from "../export.service.js";
 import { resolveWithinRepo } from "../git.service.js";
@@ -57,6 +58,19 @@ async function buildDiffItem(item, deps) {
     }
     return embed(deps, `githuman://diff/${item.source}/${item.path ?? ''}`, `Diff (${item.source}${item.path === undefined ? '' : `, ${item.path}`}):`, 'text/x-diff', selected.map(formatDiffFile).join('\n'));
 }
+/**
+ * `resolveWithinRepo` checks the path as text, but `stat` follows a symbolic
+ * link. A link that points out of the repository must not reach the agent.
+ */
+async function assertRealPathInRepo(repositoryPath, absolute, path) {
+    const [root, target] = await Promise.all([
+        realpath(repositoryPath),
+        realpath(absolute)
+    ]);
+    if (target !== root && !target.startsWith(root + sep)) {
+        throw new AgentContextError(`"${path}" points out of the repository`);
+    }
+}
 async function buildFileItem(item, deps) {
     let absolute;
     try {
@@ -69,12 +83,42 @@ async function buildFileItem(item, deps) {
     if (!info?.isFile()) {
         throw new AgentContextError(`"${item.path}" is not a file in the repository`);
     }
+    await assertRealPathInRepo(deps.repositoryPath, absolute, item.path);
     return {
         type: 'resource_link',
         uri: pathToFileURL(absolute).href,
         name: item.path
     };
 }
+async function buildDirectoryItem(item, deps) {
+    const path = withoutTrailingSlash(item.path);
+    let absolute;
+    try {
+        absolute = resolveWithinRepo(deps.repositoryPath, path);
+    }
+    catch (error) {
+        throw asContextError(error);
+    }
+    // The agent runs in the repository root already, so a link to it says nothing.
+    if (absolute === resolve(deps.repositoryPath)) {
+        throw new AgentContextError('The repository root cannot be a context item');
+    }
+    const info = await stat(absolute).catch(() => null);
+    if (!info?.isDirectory()) {
+        throw new AgentContextError(`"${path}" is not a directory in the repository`);
+    }
+    await assertRealPathInRepo(deps.repositoryPath, absolute, path);
+    // ACP has no type for a directory link. The trailing `/` in the URI and the
+    // name is the only sign for the agent that the link names a directory.
+    const name = relative(resolve(deps.repositoryPath), absolute)
+        .split(sep)
+        .join('/');
+    return {
+        type: 'resource_link',
+        uri: pathToFileURL(absolute + sep).href,
+        name: `${name}/`
+    };
+}
 async function buildReviewItem(item, deps) {
     let markdown;
     try {
@@ -125,6 +169,9 @@ function buildItem(item, deps) {
     if (item.kind === 'file') {
         return buildFileItem(item, deps);
     }
+    if (item.kind === 'directory') {
+        return buildDirectoryItem(item, deps);
+    }
     if (item.kind === 'attachment') {
         return buildAttachmentItem(item, deps);
     }

package/dist/server/services/agent/file-index.js

@@ -2,9 +2,10 @@ import { existsSync } from 'node:fs';
 import { join } from 'node:path';
 import { getFilesAtRef } from "../git.service.js";
 import { DEFAULT_FILE_SEARCH_LIMIT } from "../../../shared/agents/constants.js";
-import { rankFiles } from "../../../shared/agents/file-search.js";
+import { rankPaths } from "../../../shared/agents/file-search.js";
+import { withDirectories } from "../../../shared/agents/mention-paths.js";
 /**
- * The repository's file list for `@` mentions. Read once from `git ls-files`
+ * The repository's file and directory list for `@` mentions. Read once from `git ls-files`
  * and filtered in memory — the query never reaches a git argument — and
  * dropped whenever the working tree changes.
  */
@@ -26,6 +27,7 @@ export function createFileIndex(repositoryPath, eventBus) {
         if (!loading) {
             const started = generation;
             loading = getFilesAtRef(repositoryPath, 'WORKTREE')
+                .then(withDirectories)
                 .then(list => {
                 if (started === generation) {
                     cached = list;
@@ -40,10 +42,11 @@ export function createFileIndex(repositoryPath, eventBus) {
     }
     return {
         async search(query, limit = DEFAULT_FILE_SEARCH_LIMIT) {
-            const ranked = rankFiles(await files(), query);
+            const ranked = rankPaths(await files(), query);
             const found = [];
             for (const path of ranked) {
-                // `ls-files --cached` still lists files deleted from the working tree.
+                // `ls-files --cached` still lists files deleted from the working tree,
+                // so a directory can also be gone.
                 if (existsSync(join(repositoryPath, path))) {
                     found.push(path);
                     if (found.length >= limit) {

package/dist/server/services/git.service.js

@@ -1,8 +1,9 @@
 import { execFile, spawn } from 'node:child_process';
 import { promisify } from 'node:util';
 import { readFile } from 'node:fs/promises';
-import { basename, resolve, sep } from 'node:path';
+import { basename, posix, resolve, sep } from 'node:path';
 import { simpleGit } from 'simple-git';
+import { GitFileNotFoundError } from "../errors/git.js";
 import { isBinaryBuffer } from "../utils/text.js";
 const execFileAsync = promisify(execFile);
 /**
@@ -48,6 +49,31 @@ function objectSpecFor(ref, path) {
     // the injection this would otherwise guard against.
     return ref === 'INDEX' ? `:${path}` : `${ref}:${path}`;
 }
+/** `ENOENT` and `ENOTDIR` both mean that the file does not exist. */
+function isMissingPathError(error) {
+    return (!!error &&
+        typeof error === 'object' &&
+        'code' in error &&
+        (error.code === 'ENOENT' || error.code === 'ENOTDIR'));
+}
+/**
+ * Checks one path with `ls-tree` instead of listing the whole tree. A failing
+ * `ls-tree` means the ref is invalid, so the path is reported as present and
+ * the caller keeps the original error.
+ */
+async function pathExistsAtRef(repoPath, ref, path) {
+    const normalized = posix.normalize(path);
+    try {
+        const args = ref === 'INDEX'
+            ? ['ls-files', '-z', '--', `:(literal)${normalized}`]
+            : ['ls-tree', '-z', ref, '--', normalized];
+        const { stdout } = await execFileAsync('git', args, { cwd: repoPath });
+        return stdout.length > 0;
+    }
+    catch {
+        return true;
+    }
+}
 /**
  * Reads a file's content at a given git ref.
  *
@@ -58,7 +84,7 @@ function objectSpecFor(ref, path) {
  * HEAD version), returns empty content rather than throwing — the caller
  * treats this as "the file did not exist on this side of the diff".
  */
-export async function getFileAtRef(repoPath, ref, path) {
+export async function getFileAtRef(repoPath, ref, path, strict = false) {
     if (ref === 'WORKTREE') {
         try {
             const absolutePath = resolveWithinRepo(repoPath, path);
@@ -66,7 +92,14 @@ export async function getFileAtRef(repoPath, ref, path) {
             const isBinary = isBinaryBuffer(buffer);
             return { content: isBinary ? '' : buffer.toString('utf-8'), isBinary };
         }
-        catch {
+        catch (error) {
+            if (strict) {
+                if (isMissingPathError(error))
+                    throw new GitFileNotFoundError('File was deleted or moved', {
+                        cause: error
+                    });
+                throw error;
+            }
             return { content: '', isBinary: false };
         }
     }
@@ -83,7 +116,14 @@ export async function getFileAtRef(repoPath, ref, path) {
             isBinary
         };
     }
-    catch {
+    catch (error) {
+        if (strict) {
+            if (!(await pathExistsAtRef(repoPath, ref, path)))
+                throw new GitFileNotFoundError('File was deleted or moved', {
+                    cause: error
+                });
+            throw error;
+        }
         return { content: '', isBinary: false };
     }
 }