agent-tower 0.5.3 → 0.5.4-beta.1

package/dist/routes/__tests__/previews.test.js

@@ -1,8 +1,11 @@
 import { describe, expect, it } from 'vitest';
-import { rewriteLocationHeader, rewritePreviewBody } from '../previews.js';
+import { PREVIEW_SANDBOX_CSP, previewCorsHeaders, proxyResponseHeaders, rewriteLocationHeader, rewritePreviewBody, } from '../previews.js';
+import { buildPreviewPathPrefix, parsePreviewPath } from '../../utils/preview-path.js';
 describe('rewritePreviewBody', () => {
     const workspaceId = 'workspace-1';
     const prefix = `/view/${workspaceId}`;
+    const previewToken = 'pv1.d29ya3NwYWNlLTE.123.nonce.signature';
+    const tokenPrefix = `/view/${workspaceId}/__agent_tower_preview/${previewToken}`;
     it('rewrites SPA router basename defaults without touching internal root path comparisons', () => {
         const body = [
             'function stripBasename(pathname, basename) {',
@@ -58,6 +61,18 @@ describe('rewritePreviewBody', () => {
         expect(rewritten).not.toContain(`${prefix}${prefix}`);
         expect(rewritten).not.toContain(`${prefix}/socket.io${prefix}`);
     });
+    it('rewrites preview API and WebSocket paths through the tokenized preview prefix', () => {
+        const body = [
+            'fetch("/api/echo");',
+            'new WebSocket("/ws");',
+            'const socketPath = "/socket.io/";',
+        ].join('\n');
+        const rewritten = rewritePreviewBody(body, workspaceId, 'application/javascript', previewToken);
+        expect(rewritten).toContain(`fetch("${tokenPrefix}/api/echo")`);
+        expect(rewritten).toContain(`new WebSocket("${tokenPrefix}/ws")`);
+        expect(rewritten).toContain(`const socketPath = "${tokenPrefix}/socket.io/"`);
+        expect(rewritten).not.toContain(`${tokenPrefix}${tokenPrefix}`);
+    });
     it('still rewrites HTML and CSS absolute asset paths', () => {
         const html = '<script src="/assets/app.js"></script><link href="/styles/app.css" rel="stylesheet">';
         const css = 'body { background: url("/images/bg.png"); }';
@@ -85,5 +100,92 @@ describe('rewriteLocationHeader', () => {
         const external = 'https://example.com/view/workspace-1/foo?bar=1#section';
         expect(rewriteLocationHeader(external, workspaceId, target)).toBe(external);
     });
+    it('rewrites same-origin locations into the tokenized preview prefix', () => {
+        const token = 'pv1.d29ya3NwYWNlLTE.123.nonce.signature';
+        expect(rewriteLocationHeader('/foo?bar=1#section', workspaceId, target, token))
+            .toBe(`/view/workspace-1/__agent_tower_preview/${token}/foo?bar=1#section`);
+    });
+});
+describe('parsePreviewPath', () => {
+    it('parses legacy preview paths', () => {
+        expect(parsePreviewPath('/view/workspace-1/api/echo?x=1')).toEqual({
+            workspaceId: 'workspace-1',
+            previewToken: null,
+            suffix: '/api/echo',
+            search: '?x=1',
+        });
+    });
+    it('parses tokenized preview paths and removes the token marker from the proxy suffix', () => {
+        const token = 'pv1.d29ya3NwYWNlLTE.123.nonce.signature';
+        expect(parsePreviewPath(`/view/workspace-1/__agent_tower_preview/${token}/api/echo?x=1`)).toEqual({
+            workspaceId: 'workspace-1',
+            previewToken: token,
+            suffix: '/api/echo',
+            search: '?x=1',
+        });
+    });
+    it('builds a tokenized prefix without treating normal app paths as tokens', () => {
+        const token = 'pv1.d29ya3NwYWNlLTE.123.nonce.signature';
+        expect(buildPreviewPathPrefix('workspace-1', token))
+            .toBe(`/view/workspace-1/__agent_tower_preview/${token}`);
+        expect(parsePreviewPath('/view/workspace-1/__agent_tower_preview/not-a-token/api')).toEqual({
+            workspaceId: 'workspace-1',
+            previewToken: null,
+            suffix: '/__agent_tower_preview/not-a-token/api',
+            search: '',
+        });
+    });
+});
+describe('proxyResponseHeaders', () => {
+    const workspaceId = 'workspace-1';
+    const target = {
+        target: 'http://127.0.0.1:3000',
+        origin: 'http://127.0.0.1:3000',
+        basePath: '',
+    };
+    it('adds a sandbox CSP without allow-same-origin to isolate preview pages from the main API', () => {
+        const headers = proxyResponseHeaders({
+            'content-type': 'text/html',
+            'content-security-policy': "default-src 'self'",
+        }, workspaceId, target);
+        expect(headers['content-security-policy']).toBe(PREVIEW_SANDBOX_CSP);
+        expect(String(headers['content-security-policy'])).toContain('sandbox');
+        expect(String(headers['content-security-policy'])).not.toContain('allow-same-origin');
+        expect(headers['referrer-policy']).toBe('no-referrer');
+    });
+    it('does not forward preview target CORS policy and allows sandboxed preview resources to load', () => {
+        const headers = proxyResponseHeaders({
+            'access-control-allow-origin': 'http://127.0.0.1:3000',
+            'access-control-allow-credentials': 'true',
+            'cross-origin-resource-policy': 'same-origin',
+        }, workspaceId, target, {
+            'access-control-request-headers': 'content-type, x-preview-token',
+        });
+        expect(headers['access-control-allow-origin']).toBe('*');
+        expect(headers['access-control-allow-methods']).toContain('POST');
+        expect(headers['access-control-allow-headers']).toBe('content-type, x-preview-token');
+        expect(headers['access-control-allow-credentials']).toBeUndefined();
+        expect(headers['cross-origin-resource-policy']).toBe('cross-origin');
+    });
+    it('uses default CORS allow headers when a preview request has no preflight header list', () => {
+        const headers = proxyResponseHeaders({}, workspaceId, target);
+        expect(headers['access-control-allow-origin']).toBe('*');
+        expect(headers['access-control-allow-methods']).toContain('OPTIONS');
+        expect(String(headers['access-control-allow-headers'])).toContain('Content-Type');
+        expect(headers.vary).toContain('Access-Control-Request-Headers');
+    });
+});
+describe('previewCorsHeaders', () => {
+    it('echoes requested preflight headers without enabling credentialed CORS', () => {
+        const headers = previewCorsHeaders({
+            origin: 'null',
+            'access-control-request-method': 'POST',
+            'access-control-request-headers': 'content-type, x-custom-header',
+        });
+        expect(headers['access-control-allow-origin']).toBe('*');
+        expect(headers['access-control-allow-methods']).toContain('POST');
+        expect(headers['access-control-allow-headers']).toBe('content-type, x-custom-header');
+        expect(headers['access-control-allow-credentials']).toBeUndefined();
+    });
 });
 //# sourceMappingURL=previews.test.js.map

package/dist/routes/__tests__/previews.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"previews.test.js","sourceRoot":"","sources":["../../../src/routes/__tests__/previews.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAE3E,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,WAAW,GAAG,aAAa,CAAC;IAClC,MAAM,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;IAEtC,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,MAAM,IAAI,GAAG;YACX,8CAA8C;YAC9C,0CAA0C;YAC1C,oBAAoB;YACpB,GAAG;YACH,8CAA8C;YAC9C,oBAAoB;YACpB,GAAG;YACH,iDAAiD;YACjD,oBAAoB;YACpB,GAAG;YACH,4CAA4C;YAC5C,aAAa;YACb,GAAG;YACH,wBAAwB;YACxB,2BAA2B;YAC3B,+BAA+B;YAC/B,+BAA+B;YAC/B,eAAe;SAChB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC;QAElF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAChD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,eAAe,MAAM,GAAG,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,yBAAyB,MAAM,GAAG,CAAC,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,eAAe,MAAM,GAAG,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,kBAAkB,MAAM,GAAG,CAAC,CAAC;QACzD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,qBAAqB,MAAM,GAAG,CAAC,CAAC;QAC5D,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,yBAAyB,MAAM,GAAG,CAAC,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,yBAAyB,MAAM,GAAG,CAAC,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,IAAI,GAAG,0EAA0E,CAAC;QAExF,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC;QAElF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,IAAI,MAAM,OAAO,CAAC,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,MAAM,eAAe,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,MAAM,IAAI,GAAG;YACX,yBAAyB;YACzB,mCAAmC;YACnC,8BAA8B,MAAM,iBAAiB;YACrD,iCAAiC,MAAM,eAAe;SACvD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC;QAElF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,UAAU,MAAM,iBAAiB,CAAC,CAAC;QAC/D,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,uBAAuB,MAAM,cAAc,CAAC,CAAC;QACzE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,8BAA8B,MAAM,gBAAgB,CAAC,CAAC;QAClF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,iCAAiC,MAAM,cAAc,CAAC,CAAC;QACnF,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,aAAa,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG,sFAAsF,CAAC;QACpG,MAAM,GAAG,GAAG,6CAA6C,CAAC;QAE1D,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,gBAAgB,CAAC,CAAC;QAChG,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,iBAAiB,CAAC,CAAC;QACjG,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,MAAM,kBAAkB,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,MAAM,WAAW,GAAG,aAAa,CAAC;IAClC,MAAM,MAAM,GAA4B;QACtC,MAAM,EAAE,uBAAuB;QAC/B,MAAM,EAAE,uBAAuB;QAC/B,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,qBAAqB,CAAC,oBAAoB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;aACrE,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,qBAAqB,CAAC,qCAAqC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;aACtF,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kGAAkG,EAAE,GAAG,EAAE;QAC1G,MAAM,QAAQ,GAAG,wDAAwD,CAAC;QAE1E,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"previews.test.js","sourceRoot":"","sources":["../../../src/routes/__tests__/previews.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEvF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,WAAW,GAAG,aAAa,CAAC;IAClC,MAAM,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;IACtC,MAAM,YAAY,GAAG,yCAAyC,CAAC;IAC/D,MAAM,WAAW,GAAG,SAAS,WAAW,0BAA0B,YAAY,EAAE,CAAC;IAEjF,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,MAAM,IAAI,GAAG;YACX,8CAA8C;YAC9C,0CAA0C;YAC1C,oBAAoB;YACpB,GAAG;YACH,8CAA8C;YAC9C,oBAAoB;YACpB,GAAG;YACH,iDAAiD;YACjD,oBAAoB;YACpB,GAAG;YACH,4CAA4C;YAC5C,aAAa;YACb,GAAG;YACH,wBAAwB;YACxB,2BAA2B;YAC3B,+BAA+B;YAC/B,+BAA+B;YAC/B,eAAe;SAChB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC;QAElF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAChD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,eAAe,MAAM,GAAG,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,yBAAyB,MAAM,GAAG,CAAC,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,eAAe,MAAM,GAAG,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,kBAAkB,MAAM,GAAG,CAAC,CAAC;QACzD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,qBAAqB,MAAM,GAAG,CAAC,CAAC;QAC5D,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,yBAAyB,MAAM,GAAG,CAAC,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,yBAAyB,MAAM,GAAG,CAAC,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,IAAI,GAAG,0EAA0E,CAAC;QAExF,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC;QAElF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,IAAI,MAAM,OAAO,CAAC,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,MAAM,eAAe,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,MAAM,IAAI,GAAG;YACX,yBAAyB;YACzB,mCAAmC;YACnC,8BAA8B,MAAM,iBAAiB;YACrD,iCAAiC,MAAM,eAAe;SACvD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC;QAElF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,UAAU,MAAM,iBAAiB,CAAC,CAAC;QAC/D,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,uBAAuB,MAAM,cAAc,CAAC,CAAC;QACzE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,8BAA8B,MAAM,gBAAgB,CAAC,CAAC;QAClF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,iCAAiC,MAAM,cAAc,CAAC,CAAC;QACnF,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,aAAa,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,IAAI,GAAG;YACX,qBAAqB;YACrB,uBAAuB;YACvB,mCAAmC;SACpC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,EAAE,YAAY,CAAC,CAAC;QAEhG,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,UAAU,WAAW,aAAa,CAAC,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,kBAAkB,WAAW,OAAO,CAAC,CAAC;QAClE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,uBAAuB,WAAW,cAAc,CAAC,CAAC;QAC9E,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,WAAW,GAAG,WAAW,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG,sFAAsF,CAAC;QACpG,MAAM,GAAG,GAAG,6CAA6C,CAAC;QAE1D,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,gBAAgB,CAAC,CAAC;QAChG,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,iBAAiB,CAAC,CAAC;QACjG,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,MAAM,kBAAkB,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,MAAM,WAAW,GAAG,aAAa,CAAC;IAClC,MAAM,MAAM,GAA4B;QACtC,MAAM,EAAE,uBAAuB;QAC/B,MAAM,EAAE,uBAAuB;QAC/B,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,qBAAqB,CAAC,oBAAoB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;aACrE,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,qBAAqB,CAAC,qCAAqC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;aACtF,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kGAAkG,EAAE,GAAG,EAAE;QAC1G,MAAM,QAAQ,GAAG,wDAAwD,CAAC;QAE1E,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,KAAK,GAAG,yCAAyC,CAAC;QAExD,MAAM,CAAC,qBAAqB,CAAC,oBAAoB,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;aAC5E,IAAI,CAAC,2CAA2C,KAAK,oBAAoB,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,gBAAgB,CAAC,gCAAgC,CAAC,CAAC,CAAC,OAAO,CAAC;YACjE,WAAW,EAAE,aAAa;YAC1B,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,KAAK,GAAG,yCAAyC,CAAC;QAExD,MAAM,CAAC,gBAAgB,CAAC,2CAA2C,KAAK,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;YAChG,WAAW,EAAE,aAAa;YAC1B,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,KAAK,GAAG,yCAAyC,CAAC;QAExD,MAAM,CAAC,sBAAsB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;aACjD,IAAI,CAAC,2CAA2C,KAAK,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,gBAAgB,CAAC,yDAAyD,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1F,WAAW,EAAE,aAAa;YAC1B,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,wCAAwC;YAChD,MAAM,EAAE,EAAE;SACX,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,MAAM,WAAW,GAAG,aAAa,CAAC;IAClC,MAAM,MAAM,GAA4B;QACtC,MAAM,EAAE,uBAAuB;QAC/B,MAAM,EAAE,uBAAuB;QAC/B,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,cAAc,EAAE,WAAW;YAC3B,yBAAyB,EAAE,oBAAoB;SAChD,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAExB,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACxE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACtF,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,6BAA6B,EAAE,uBAAuB;YACtD,kCAAkC,EAAE,MAAM;YAC1C,8BAA8B,EAAE,aAAa;SAC9C,EAAE,WAAW,EAAE,MAAM,EAAE;YACtB,gCAAgC,EAAE,+BAA+B;SAClE,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACtF,MAAM,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACpE,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,OAAO,GAAG,oBAAoB,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAE9D,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAClF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,OAAO,GAAG,kBAAkB,CAAC;YACjC,MAAM,EAAE,MAAM;YACd,+BAA+B,EAAE,MAAM;YACvC,gCAAgC,EAAE,+BAA+B;SAClE,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACtF,MAAM,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/routes/__tests__/team-runs-merge.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=team-runs-merge.test.d.ts.map

package/dist/routes/__tests__/team-runs-merge.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-runs-merge.test.d.ts","sourceRoot":"","sources":["../../../src/routes/__tests__/team-runs-merge.test.ts"],"names":[],"mappings":""}

package/dist/routes/__tests__/team-runs-merge.test.js

@@ -0,0 +1,156 @@
+import Fastify from 'fastify';
+import { describe, expect, it, vi } from 'vitest';
+import { ServiceError } from '../../errors.js';
+import { teamRunRoutes } from '../team-runs.js';
+function buildWorkspaceService(overrides = {}) {
+    return {
+        listTeamRunMergeableWorkspaces: vi.fn(async (teamRunId) => ({
+            teamRunId,
+            taskId: 'task-1',
+            projectId: 'project-1',
+            mainWorkspace: {
+                id: 'main-workspace',
+                branchName: 'team-main',
+                status: 'ACTIVE',
+                hasActiveWriteSession: false,
+            },
+            generatedAt: '2026-01-01T00:00:00.000Z',
+            workspaces: [],
+        })),
+        resolveInvocationMemberForTeamRun: vi.fn(async () => ({
+            teamRunId: 'team-run-1',
+            memberId: 'member-from-invocation',
+            invocationId: 'invocation-1',
+        })),
+        mergeTeamRunMembers: vi.fn(async () => ({
+            teamRunId: 'team-run-1',
+            taskId: 'task-1',
+            projectId: 'project-1',
+            mainWorkspaceId: 'main-workspace',
+            dryRun: false,
+            stopOnConflict: false,
+            summary: {
+                requested: 0,
+                considered: 0,
+                merged: 0,
+                alreadyMerged: 0,
+                wouldMerge: 0,
+                skipped: 0,
+                conflicts: 0,
+                failed: 0,
+            },
+            results: [],
+        })),
+        ...overrides,
+    };
+}
+async function buildTestApp(workspaceService) {
+    const app = Fastify();
+    await app.register(teamRunRoutes, {
+        prefix: '/api',
+        workspaceService: workspaceService,
+    });
+    return app;
+}
+describe('TeamRun merge routes', () => {
+    it('returns mergeable workspace readiness envelope', async () => {
+        const workspaceService = buildWorkspaceService();
+        const app = await buildTestApp(workspaceService);
+        try {
+            const response = await app.inject({
+                method: 'GET',
+                url: '/api/team-runs/team-run-1/mergeable-workspaces',
+            });
+            expect(response.statusCode).toBe(200);
+            expect(response.json()).toMatchObject({
+                teamRunId: 'team-run-1',
+                taskId: 'task-1',
+                projectId: 'project-1',
+                mainWorkspace: { id: 'main-workspace' },
+                workspaces: [],
+            });
+            expect(workspaceService.listTeamRunMergeableWorkspaces).toHaveBeenCalledWith('team-run-1');
+        }
+        finally {
+            await app.close();
+        }
+    });
+    it('uses invocation identity for batch merge and ignores client member identity', async () => {
+        const workspaceService = buildWorkspaceService();
+        const app = await buildTestApp(workspaceService);
+        try {
+            const response = await app.inject({
+                method: 'POST',
+                url: '/api/team-runs/team-run-1/merge-members',
+                headers: {
+                    'x-agent-tower-invocation-id': 'invocation-1',
+                },
+                payload: {
+                    workspaceIds: ['workspace-1'],
+                    dryRun: true,
+                    requesterMemberId: 'client-forged-member',
+                },
+            });
+            expect(response.statusCode).toBe(200);
+            expect(workspaceService.resolveInvocationMemberForTeamRun).toHaveBeenCalledWith('team-run-1', 'invocation-1');
+            expect(workspaceService.mergeTeamRunMembers).toHaveBeenCalledWith('team-run-1', expect.objectContaining({
+                workspaceIds: ['workspace-1'],
+                dryRun: true,
+                invocationId: 'invocation-1',
+                requesterMemberId: 'member-from-invocation',
+            }));
+        }
+        finally {
+            await app.close();
+        }
+    });
+    it('preserves explicit empty workspaceIds for batch merge', async () => {
+        const workspaceService = buildWorkspaceService();
+        const app = await buildTestApp(workspaceService);
+        try {
+            const response = await app.inject({
+                method: 'POST',
+                url: '/api/team-runs/team-run-1/merge-members',
+                headers: {
+                    'x-agent-tower-invocation-id': 'invocation-1',
+                },
+                payload: {
+                    workspaceIds: [],
+                },
+            });
+            expect(response.statusCode).toBe(200);
+            expect(workspaceService.mergeTeamRunMembers).toHaveBeenCalledWith('team-run-1', expect.objectContaining({
+                workspaceIds: [],
+                invocationId: 'invocation-1',
+                requesterMemberId: 'member-from-invocation',
+            }));
+        }
+        finally {
+            await app.close();
+        }
+    });
+    it('returns 403 when batch merge service rejects missing or invalid invocation', async () => {
+        const workspaceService = buildWorkspaceService({
+            resolveInvocationMemberForTeamRun: vi.fn(async () => null),
+            mergeTeamRunMembers: vi.fn(async () => {
+                throw new ServiceError('TeamRun member merge requires an agent invocation identity', 'TEAM_RUN_MERGE_INVOCATION_REQUIRED', 403);
+            }),
+        });
+        const app = await buildTestApp(workspaceService);
+        try {
+            const response = await app.inject({
+                method: 'POST',
+                url: '/api/team-runs/team-run-1/merge-members',
+                payload: {},
+            });
+            expect(response.statusCode).toBe(403);
+            expect(response.json()).toMatchObject({
+                code: 'TEAM_RUN_MERGE_INVOCATION_REQUIRED',
+            });
+        }
+        finally {
+            await app.close();
+        }
+    });
+});
+//# sourceMappingURL=team-runs-merge.test.js.map

package/dist/routes/__tests__/team-runs-merge.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-runs-merge.test.js","sourceRoot":"","sources":["../../../src/routes/__tests__/team-runs-merge.test.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,SAAS,qBAAqB,CAAC,YAAqC,EAAE;IACpE,OAAO;QACL,8BAA8B,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,SAAiB,EAAE,EAAE,CAAC,CAAC;YAClE,SAAS;YACT,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,WAAW;YACtB,aAAa,EAAE;gBACb,EAAE,EAAE,gBAAgB;gBACpB,UAAU,EAAE,WAAW;gBACvB,MAAM,EAAE,QAAQ;gBAChB,qBAAqB,EAAE,KAAK;aAC7B;YACD,WAAW,EAAE,0BAA0B;YACvC,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;QACH,iCAAiC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACpD,SAAS,EAAE,YAAY;YACvB,QAAQ,EAAE,wBAAwB;YAClC,YAAY,EAAE,cAAc;SAC7B,CAAC,CAAC;QACH,mBAAmB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACtC,SAAS,EAAE,YAAY;YACvB,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,WAAW;YACtB,eAAe,EAAE,gBAAgB;YACjC,MAAM,EAAE,KAAK;YACb,cAAc,EAAE,KAAK;YACrB,OAAO,EAAE;gBACP,SAAS,EAAE,CAAC;gBACZ,UAAU,EAAE,CAAC;gBACb,MAAM,EAAE,CAAC;gBACT,aAAa,EAAE,CAAC;gBAChB,UAAU,EAAE,CAAC;gBACb,OAAO,EAAE,CAAC;gBACV,SAAS,EAAE,CAAC;gBACZ,MAAM,EAAE,CAAC;aACV;YACD,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QACH,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,gBAA0D;IACpF,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,gBAAgB,EAAE,gBAAuB;KAC1C,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,gBAAgB,GAAG,qBAAqB,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,gDAAgD;aACtD,CAAC,CAAC;YAEH,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC;gBACpC,SAAS,EAAE,YAAY;gBACvB,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,WAAW;gBACtB,aAAa,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE;gBACvC,UAAU,EAAE,EAAE;aACf,CAAC,CAAC;YACH,MAAM,CAAC,gBAAgB,CAAC,8BAA8B,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC7F,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,gBAAgB,GAAG,qBAAqB,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,yCAAyC;gBAC9C,OAAO,EAAE;oBACP,6BAA6B,EAAE,cAAc;iBAC9C;gBACD,OAAO,EAAE;oBACP,YAAY,EAAE,CAAC,aAAa,CAAC;oBAC7B,MAAM,EAAE,IAAI;oBACZ,iBAAiB,EAAE,sBAAsB;iBAC1C;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,CAAC,gBAAgB,CAAC,iCAAiC,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;YAC9G,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,MAAM,CAAC,gBAAgB,CAAC;gBACtG,YAAY,EAAE,CAAC,aAAa,CAAC;gBAC7B,MAAM,EAAE,IAAI;gBACZ,YAAY,EAAE,cAAc;gBAC5B,iBAAiB,EAAE,wBAAwB;aAC5C,CAAC,CAAC,CAAC;QACN,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,gBAAgB,GAAG,qBAAqB,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,yCAAyC;gBAC9C,OAAO,EAAE;oBACP,6BAA6B,EAAE,cAAc;iBAC9C;gBACD,OAAO,EAAE;oBACP,YAAY,EAAE,EAAE;iBACjB;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,MAAM,CAAC,gBAAgB,CAAC;gBACtG,YAAY,EAAE,EAAE;gBAChB,YAAY,EAAE,cAAc;gBAC5B,iBAAiB,EAAE,wBAAwB;aAC5C,CAAC,CAAC,CAAC;QACN,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;YAC7C,iCAAiC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;YAC1D,mBAAmB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;gBACpC,MAAM,IAAI,YAAY,CACpB,4DAA4D,EAC5D,oCAAoC,EACpC,GAAG,CACJ,CAAC;YACJ,CAAC,CAAC;SACH,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,yCAAyC;gBAC9C,OAAO,EAAE,EAAE;aACZ,CAAC,CAAC;YAEH,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC;gBACpC,IAAI,EAAE,oCAAoC;aAC3C,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/routes/__tests__/team-runs-private-messages.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=team-runs-private-messages.test.d.ts.map

package/dist/routes/__tests__/team-runs-private-messages.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-runs-private-messages.test.d.ts","sourceRoot":"","sources":["../../../src/routes/__tests__/team-runs-private-messages.test.ts"],"names":[],"mappings":""}

package/dist/routes/__tests__/team-runs-private-messages.test.js

@@ -0,0 +1,82 @@
+import Fastify from 'fastify';
+import { describe, expect, it, vi } from 'vitest';
+import { teamRunRoutes } from '../team-runs.js';
+function buildTeamRunService(overrides = {}) {
+    return {
+        createPrivateRoomMessage: vi.fn(async (_teamRunId, input) => ({
+            id: 'message-1',
+            teamRunId: 'team-run-1',
+            senderType: input.senderType,
+            senderId: input.senderId ?? null,
+            senderInvocationId: input.senderInvocationId ?? null,
+            kind: 'work_request',
+            visibility: 'PRIVATE',
+            content: input.content,
+            mentions: [],
+            workRequestIds: ['work-request-1'],
+            artifactRefs: [],
+            attachmentIds: [],
+            recipientMemberIds: input.recipientMemberIds,
+            participantMemberIds: input.recipientMemberIds,
+            participants: [],
+            createdAt: '2026-01-01T00:00:00.000Z',
+        })),
+        getTeamRunById: vi.fn(async () => ({
+            id: 'team-run-1',
+            mode: 'CONFIRM',
+        })),
+        resolveAgentInvocationIdentity: vi.fn(async () => null),
+        ...overrides,
+    };
+}
+async function buildTestApp(service) {
+    const app = Fastify();
+    await app.register(teamRunRoutes, {
+        prefix: '/api',
+        service: service,
+        scheduler: {
+            startNextSessions: vi.fn(),
+            approveWorkRequestAndStartNext: vi.fn(),
+            rejectWorkRequest: vi.fn(),
+            cancelWorkRequest: vi.fn(),
+            stopMemberWork: vi.fn(),
+        },
+        workspaceService: {},
+    });
+    return app;
+}
+describe('TeamRun private message routes', () => {
+    it('passes target commit metadata to the TeamRun service', async () => {
+        const service = buildTeamRunService();
+        const app = await buildTestApp(service);
+        const target = {
+            kind: 'WORKSPACE_COMMIT',
+            purpose: 'TEST',
+            sourceWorkspaceId: 'source-workspace-1',
+            headSha: 'a'.repeat(40),
+            branchName: 'feature/source',
+            planItemId: 'plan-1',
+        };
+        try {
+            const response = await app.inject({
+                method: 'POST',
+                url: '/api/team-runs/team-run-1/private-messages',
+                payload: {
+                    content: 'Run targeted tests',
+                    recipientMemberIds: ['tester-1'],
+                    target,
+                },
+            });
+            expect(response.statusCode).toBe(201);
+            expect(service.createPrivateRoomMessage).toHaveBeenCalledWith('team-run-1', expect.objectContaining({
+                content: 'Run targeted tests',
+                recipientMemberIds: ['tester-1'],
+                target,
+            }));
+        }
+        finally {
+            await app.close();
+        }
+    });
+});
+//# sourceMappingURL=team-runs-private-messages.test.js.map

package/dist/routes/__tests__/team-runs-private-messages.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-runs-private-messages.test.js","sourceRoot":"","sources":["../../../src/routes/__tests__/team-runs-private-messages.test.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,SAAS,mBAAmB,CAAC,YAAqC,EAAE;IAClE,OAAO;QACL,wBAAwB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,UAAkB,EAAE,KAAU,EAAE,EAAE,CAAC,CAAC;YACzE,EAAE,EAAE,WAAW;YACf,SAAS,EAAE,YAAY;YACvB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;YACpD,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,EAAE;YACZ,cAAc,EAAE,CAAC,gBAAgB,CAAC;YAClC,YAAY,EAAE,EAAE;YAChB,aAAa,EAAE,EAAE;YACjB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,oBAAoB,EAAE,KAAK,CAAC,kBAAkB;YAC9C,YAAY,EAAE,EAAE;YAChB,SAAS,EAAE,0BAA0B;SACtC,CAAC,CAAC;QACH,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACjC,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;QACH,8BAA8B,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;QACvD,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAA+C;IACzE,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,OAAc;QACvB,SAAS,EAAE;YACT,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;YAC1B,8BAA8B,EAAE,EAAE,CAAC,EAAE,EAAE;YACvC,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;YAC1B,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;YAC1B,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;SACjB;QACR,gBAAgB,EAAE,EAAS;KAC5B,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,MAAM;YACf,iBAAiB,EAAE,oBAAoB;YACvC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,UAAU,EAAE,gBAAgB;YAC5B,UAAU,EAAE,QAAQ;SACrB,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,4CAA4C;gBACjD,OAAO,EAAE;oBACP,OAAO,EAAE,oBAAoB;oBAC7B,kBAAkB,EAAE,CAAC,UAAU,CAAC;oBAChC,MAAM;iBACP;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,oBAAoB,CAC3D,YAAY,EACZ,MAAM,CAAC,gBAAgB,CAAC;gBACtB,OAAO,EAAE,oBAAoB;gBAC7B,kBAAkB,EAAE,CAAC,UAAU,CAAC;gBAChC,MAAM;aACP,CAAC,CACH,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/routes/access-auth.d.ts

@@ -0,0 +1,3 @@
+import type { FastifyInstance } from 'fastify';
+export declare function accessAuthRoutes(app: FastifyInstance): Promise<void>;
+//# sourceMappingURL=access-auth.d.ts.map

package/dist/routes/access-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-auth.d.ts","sourceRoot":"","sources":["../../src/routes/access-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,SAAS,CAAC;AAyC7D,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,eAAe,iBAoE1D"}

package/dist/routes/access-auth.js

@@ -0,0 +1,89 @@
+import { z, ZodError } from 'zod';
+import { ServiceError } from '../errors.js';
+import { AccessAuthService } from '../services/access-auth.service.js';
+const loginSchema = z.object({
+    password: z.string().min(1),
+});
+const updateSettingsSchema = z.object({
+    enabled: z.boolean().optional(),
+    currentPassword: z.string().optional(),
+    newPassword: z.string().optional(),
+});
+function handleError(error, reply) {
+    if (error instanceof ZodError) {
+        reply.code(400);
+        return {
+            error: 'Validation failed',
+            code: 'VALIDATION_ERROR',
+            details: error.errors,
+        };
+    }
+    if (error instanceof ServiceError) {
+        reply.code(error.statusCode);
+        return {
+            error: error.message,
+            code: error.code,
+        };
+    }
+    reply.log.error(error);
+    reply.code(500);
+    return {
+        error: 'Internal server error',
+        code: 'INTERNAL_ERROR',
+    };
+}
+export async function accessAuthRoutes(app) {
+    app.get('/access-auth/status', async (request) => {
+        const cookieToken = request.cookies[AccessAuthService.cookieName]
+            ?? AccessAuthService.extractCookieFromHeader(request.headers.cookie);
+        return AccessAuthService.getPublicStatus(cookieToken);
+    });
+    app.post('/access-auth/login', async (request, reply) => {
+        try {
+            const { password } = loginSchema.parse(request.body);
+            const result = await AccessAuthService.login(password, request.ip);
+            if (result.sessionToken) {
+                reply.setCookie(AccessAuthService.cookieName, result.sessionToken, AccessAuthService.getCookieOptions(request));
+            }
+            return result.status;
+        }
+        catch (error) {
+            return handleError(error, reply);
+        }
+    });
+    app.post('/access-auth/logout', async (request, reply) => {
+        reply.clearCookie(AccessAuthService.cookieName, AccessAuthService.getClearCookieOptions(request));
+        const cookieToken = request.cookies[AccessAuthService.cookieName]
+            ?? AccessAuthService.extractCookieFromHeader(request.headers.cookie);
+        const status = await AccessAuthService.getPublicStatus(cookieToken);
+        return {
+            enabled: status.enabled,
+            authenticated: !status.enabled,
+        };
+    });
+    app.get('/access-auth/settings', async (_request, reply) => {
+        try {
+            return await AccessAuthService.getSettings();
+        }
+        catch (error) {
+            return handleError(error, reply);
+        }
+    });
+    app.put('/access-auth/settings', async (request, reply) => {
+        try {
+            const data = updateSettingsSchema.parse(request.body);
+            const result = await AccessAuthService.updateSettings(data);
+            if (result.clearSession) {
+                reply.clearCookie(AccessAuthService.cookieName, AccessAuthService.getClearCookieOptions(request));
+            }
+            else if (result.sessionToken) {
+                reply.setCookie(AccessAuthService.cookieName, result.sessionToken, AccessAuthService.getCookieOptions(request));
+            }
+            return result.settings;
+        }
+        catch (error) {
+            return handleError(error, reply);
+        }
+    });
+}
+//# sourceMappingURL=access-auth.js.map

package/dist/routes/access-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-auth.js","sourceRoot":"","sources":["../../src/routes/access-auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAEvE,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAEH,SAAS,WAAW,CAAC,KAAc,EAAE,KAAmB;IACtD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO;YACL,KAAK,EAAE,mBAAmB;YAC1B,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,KAAK,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC7B,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,OAAO;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO;QACL,KAAK,EAAE,uBAAuB;QAC9B,IAAI,EAAE,gBAAgB;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAoB;IACzD,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,UAAU,CAAC;eAC5D,iBAAiB,CAAC,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvE,OAAO,iBAAiB,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACtD,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACnE,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxB,KAAK,CAAC,SAAS,CACb,iBAAiB,CAAC,UAAU,EAC5B,MAAM,CAAC,YAAY,EACnB,iBAAiB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAC5C,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvD,KAAK,CAAC,WAAW,CACf,iBAAiB,CAAC,UAAU,EAC5B,iBAAiB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CACjD,CAAC;QAEF,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,UAAU,CAAC;eAC5D,iBAAiB,CAAC,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACpE,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,aAAa,EAAE,CAAC,MAAM,CAAC,OAAO;SAC/B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QACzD,IAAI,CAAC;YACH,OAAO,MAAM,iBAAiB,CAAC,WAAW,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxB,KAAK,CAAC,WAAW,CACf,iBAAiB,CAAC,UAAU,EAC5B,iBAAiB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CACjD,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC/B,KAAK,CAAC,SAAS,CACb,iBAAiB,CAAC,UAAU,EAC5B,MAAM,CAAC,YAAY,EACnB,iBAAiB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAC5C,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/routes/files.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/routes/files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAwK/C,wBAAsB,WAAW,CAAC,GAAG,EAAE,eAAe,iBA0KrD"}
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/routes/files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAoN/C,wBAAsB,WAAW,CAAC,GAAG,EAAE,eAAe,iBA+KrD"}

package/dist/routes/files.js

@@ -2,6 +2,7 @@ import { z, ZodError } from 'zod';
 import * as fs from 'node:fs/promises';
 import * as fssync from 'node:fs';
 import * as path from 'node:path';
+import { resolveDataDir } from '../utils/data-dir.js';
 const IMAGE_EXTENSIONS = new Set([
     '.png', '.jpg', '.jpeg', '.gif', '.bmp', '.webp', '.svg', '.ico', '.avif',
 ]);
@@ -36,6 +37,10 @@ function handleError(error, reply) {
     }
     if (error && typeof error === 'object' && 'code' in error) {
         const code = error.code;
+        if (code === 'INTERNAL_PATH_FORBIDDEN') {
+            reply.code(403);
+            return { error: 'Internal Agent Tower files are not accessible', code: 'INTERNAL_PATH_FORBIDDEN' };
+        }
         if (code === 'ENOENT') {
             reply.code(404);
             return { error: 'Not found', code: 'NOT_FOUND' };
@@ -69,8 +74,44 @@ function assertNoTraversalSegments(relPath) {
         ]);
     }
 }
+function isSameOrChildPath(candidate, base) {
+    const relative = path.relative(base, candidate);
+    return relative === '' || (!!relative && !relative.startsWith('..') && !path.isAbsolute(relative));
+}
+async function resolveExistingPath(candidate) {
+    try {
+        return await fs.realpath(candidate);
+    }
+    catch {
+        return null;
+    }
+}
+async function getProtectedInternalRoots() {
+    const configuredDataDir = path.resolve(resolveDataDir());
+    const roots = [configuredDataDir];
+    const realDataDir = await resolveExistingPath(configuredDataDir);
+    if (realDataDir && realDataDir !== configuredDataDir)
+        roots.push(realDataDir);
+    return roots;
+}
+async function assertNotInternalPath(...candidates) {
+    const roots = await getProtectedInternalRoots();
+    for (const candidate of candidates) {
+        if (!candidate)
+            continue;
+        const resolved = path.resolve(candidate);
+        const real = await resolveExistingPath(resolved);
+        const paths = real && real !== resolved ? [resolved, real] : [resolved];
+        if (paths.some((item) => roots.some((root) => isSameOrChildPath(item, root)))) {
+            const err = new Error('Internal Agent Tower files are not accessible');
+            err.code = 'INTERNAL_PATH_FORBIDDEN';
+            throw err;
+        }
+    }
+}
 async function resolveInWorkingDir(workingDir, userPath) {
     const baseReal = await fs.realpath(workingDir);
+    await assertNotInternalPath(baseReal);
     const rel = normalizeUserPath(userPath);
     assertNoTraversalSegments(rel);
     const abs = path.resolve(baseReal, rel);
@@ -164,6 +205,7 @@ export async function filesRoutes(app) {
             }
             const { baseReal, abs } = await resolveInWorkingDir(workingDir, userPath);
             const dirReal = await fs.realpath(abs);
+            await assertNotInternalPath(dirReal);
             const relative = path.relative(baseReal, dirReal);
             if (relative.startsWith('..') || path.isAbsolute(relative)) {
                 reply.code(400);
@@ -216,6 +258,7 @@ export async function filesRoutes(app) {
             }
             const { baseReal, abs } = await resolveInWorkingDir(workingDir, userFilePath);
             const fileReal = await fs.realpath(abs);
+            await assertNotInternalPath(fileReal);
             const relative = path.relative(baseReal, fileReal);
             if (relative.startsWith('..') || path.isAbsolute(relative)) {
                 reply.code(400);
@@ -252,6 +295,8 @@ export async function filesRoutes(app) {
             // Ensure parent dir exists and is within workingDir (mitigate symlink escapes)
             const parent = path.dirname(abs);
             const parentReal = await fs.realpath(parent);
+            const targetReal = await resolveExistingPath(abs);
+            await assertNotInternalPath(parentReal, targetReal, abs);
             const parentRel = path.relative(baseReal, parentReal);
             if (parentRel.startsWith('..') || path.isAbsolute(parentRel)) {
                 reply.code(400);
@@ -281,6 +326,7 @@ export async function filesRoutes(app) {
             }
             const { baseReal, abs } = await resolveInWorkingDir(workingDir, userFilePath);
             const fileReal = await fs.realpath(abs);
+            await assertNotInternalPath(fileReal);
             const relative = path.relative(baseReal, fileReal);
             if (relative.startsWith('..') || path.isAbsolute(relative)) {
                 reply.code(400);