@yadsh/dsh-qa-surface 0.15.1 → 0.15.3

package/lib/client/workspace-paths.js

@@ -0,0 +1,55 @@
+/**
+ * The answer a person reads names a file; it does not say where the deployment
+ * keeps the account that owns it.
+ *
+ * A model quoting a path it was handed prints it verbatim, and a QA deployment
+ * gives every account its own directory under one parent, so a path printed
+ * with an account identifier is a sentence about the server's layout — and
+ * stand dialogs below the signature line can be read by other accounts of the
+ * same server. The document tools report workspace-relative names, which is
+ * the fix at the source; this is the repair for what still arrives, because a
+ * model can rebuild a path from the working directory it is told, and because
+ * an answer written before this change is durable history that replays.
+ */
+/** Characters a literal path may carry into a regular expression. */
+function escapeForRegex(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/gu, String.raw `\$&`);
+}
+/** One or two separators, either convention, as a regular-expression source. */
+const SEPARATOR = String.raw `[\\\/]+`;
+const TRAILING_SEPARATOR = String.raw `[\\\/]?`;
+/**
+ * The workspace root spelled so either separator convention matches it: a
+ * container records forward slashes, a browser on Windows may print backslashes
+ * at the same position, and a mask that only reads one of them leaks on the
+ * other. A leading separator is kept, so what replaces the root reads as a name
+ * inside the workspace rather than as a path leading out of nowhere.
+ */
+function rootPattern(workspaceRoot) {
+    const segments = workspaceRoot
+        .split(/[/\\]/u)
+        .filter((segment) => segment !== "")
+        .map((segment) => escapeForRegex(segment));
+    const leading = /^[/\\]/u.test(workspaceRoot) ? SEPARATOR : "";
+    return new RegExp(`${leading}${segments.join(SEPARATOR)}${TRAILING_SEPARATOR}`, "gu");
+}
+/**
+ * Rewrite an answer so a file is named, not located.
+ *
+ * The chat's own workspace directory is removed, leaving the spelling the
+ * producing tool reports and the workspace reads take. The per-account
+ * partition is removed the same way even when the root is unknown or the answer
+ * quotes a different chat's file, because the identifier inside it is the part
+ * that must not be printed. A path that is neither of those is left alone: a
+ * reader told about `/etc/hosts` is not being shown this deployment's layout.
+ */
+export function toWorkspaceRelativeText(text, workspaceRoot) {
+    if (!text.includes("/") && !text.includes("\\"))
+        return text;
+    const root = workspaceRoot?.trim();
+    const masked = root === undefined || root === ""
+        ? text
+        : text.replace(rootPattern(root), "");
+    return masked.replace(/[/\\](?:[^/\\\s]+[/\\])*?\.qa-users[/\\][^/\\\s]+[/\\]/gu, "");
+}
+//# sourceMappingURL=workspace-paths.js.map

package/lib/client/workspace-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-paths.js","sourceRoot":"","sources":["../../src/client/workspace-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,qEAAqE;AACrE,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC,GAAG,CAAA,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,gFAAgF;AAChF,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAA,SAAS,CAAC;AACtC,MAAM,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAA,SAAS,CAAC;AAE/C;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,aAAqB;IACxC,MAAM,QAAQ,GAAG,aAAa;SAC3B,KAAK,CAAC,QAAQ,CAAC;SACf,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,CAAC;SACnC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,OAAO,IAAI,MAAM,CACf,GAAG,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,kBAAkB,EAAE,EAC5D,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,aAAiC;IAEjC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,IAAI,GAAG,aAAa,EAAE,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GACV,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;QAC/B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,OAAO,CACnB,0DAA0D,EAC1D,EAAE,CACH,CAAC;AACJ,CAAC"}