agentgui 1.0.397 → 1.0.398

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentgui",
-  "version": "1.0.397",
+  "version": "1.0.398",
   "description": "Multi-agent ACP client with real-time communication",
   "type": "module",
   "main": "server.js",
@@ -17,7 +17,8 @@
   "homepage": "https://github.com/AnEntrypoint/agentgui#readme",
   "scripts": {
     "start": "node server.js",
-    "dev": "node server.js --watch"
+    "dev": "node server.js --watch",
+    "postinstall": "node scripts/patch-fsbrowse.js"
   },
   "dependencies": {
     "@anthropic-ai/claude-code": "^2.1.37",

package/scripts/patch-fsbrowse.js

@@ -0,0 +1,88 @@
+#!/usr/bin/env node
+/**
+ * Patch script to fix Windows path duplication issue in fsbrowse
+ * Fixes: Error ENOENT: no such file or directory, scandir 'C:\C:\dev'
+ */
+
+import fs from 'fs';
+import path from 'path';
+import { fileURLToPath } from 'url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+
+const fsbrowsePath = path.join(__dirname, '..', 'node_modules', 'fsbrowse', 'index.js');
+
+if (!fs.existsSync(fsbrowsePath)) {
+  console.warn('[PATCH] fsbrowse not found, skipping patch');
+  process.exit(0);
+}
+
+try {
+  let content = fs.readFileSync(fsbrowsePath, 'utf8');
+
+  // Check if patch is already applied
+  if (content.includes('sanitizedIsAbsoluteOnDrive')) {
+    console.log('[PATCH] fsbrowse Windows path fix already applied');
+    process.exit(0);
+  }
+
+  // Replace the makeResolver function with the fixed version
+  const oldMakeResolver = `function makeResolver(baseDir) {
+  return function resolveWithBaseDir(relPath) {
+    const sanitized = sanitizePath(relPath);
+    const fullPath = path.resolve(baseDir, sanitized);
+    if (!fullPath.startsWith(baseDir)) {
+      return { ok: false, error: 'EPATHINJECTION' };
+    }
+    return { ok: true, path: fullPath };
+  };
+}`;
+
+  const newMakeResolver = `function makeResolver(baseDir) {
+  const normalizedBase = path.normalize(baseDir);
+  const baseDriveLetter = normalizedBase.match(/^[A-Z]:/i)?.[0];
+
+  return function resolveWithBaseDir(relPath) {
+    const sanitized = sanitizePath(relPath);
+    let fullPath;
+
+    // Extract drive letter from both paths to check for same-drive duplication on Windows
+    const sanitizedDriveLetter = sanitized.match(/^[A-Z]:/i)?.[0];
+    const sanitizedIsAbsoluteOnDrive = /^[A-Z]:/i.test(sanitized);
+
+    // If both paths are on the same Windows drive, strip the drive letter from relPath
+    // to avoid duplication like C:\\C:\\dev
+    if (baseDriveLetter && sanitizedIsAbsoluteOnDrive && sanitizedDriveLetter === baseDriveLetter) {
+      // Remove drive letter and leading slashes to make it relative
+      const relativePath = sanitized.replace(/^[A-Z]:[\/\\]?/i, '');
+      fullPath = path.resolve(normalizedBase, relativePath);
+    } else {
+      fullPath = path.resolve(normalizedBase, sanitized);
+    }
+
+    // Normalize for consistent comparison
+    const normalizedFullPath = path.normalize(fullPath);
+    const normalizedComparisonBase = path.normalize(normalizedBase);
+
+    // Check path injection - convert backslashes to forward slashes for comparison
+    const normalizedCheck = normalizedFullPath.replace(/\\\\/g, '/');
+    const normalizedBaseCheck = normalizedComparisonBase.replace(/\\\\/g, '/');
+
+    if (!normalizedCheck.startsWith(normalizedBaseCheck)) {
+      return { ok: false, error: 'EPATHINJECTION' };
+    }
+    return { ok: true, path: normalizedFullPath };
+  };
+}`;
+
+  if (content.includes(oldMakeResolver)) {
+    content = content.replace(oldMakeResolver, newMakeResolver);
+    fs.writeFileSync(fsbrowsePath, content, 'utf8');
+    console.log('[PATCH] fsbrowse Windows path fix applied successfully');
+  } else {
+    console.warn('[PATCH] Could not find makeResolver function to patch');
+  }
+} catch (err) {
+  console.error('[PATCH] Error applying fsbrowse patch:', err.message);
+  process.exit(1);
+}

package/server.js

@@ -295,8 +295,10 @@ expressApp.use(BASE_URL + '/files/:conversationId', (req, res, next) => {
   if (!conv || !conv.workingDirectory) {
     return res.status(404).json({ error: 'Conversation not found or no working directory' });
   }
+  // Normalize the working directory path to avoid Windows path duplication issues
+  const normalizedWorkingDir = path.resolve(conv.workingDirectory);
   // Create a fresh fsbrowse router for this conversation's directory
-  const router = fsbrowse({ baseDir: conv.workingDirectory, name: 'Files' });
+  const router = fsbrowse({ baseDir: normalizedWorkingDir, name: 'Files' });
   // Strip the conversationId param from the path before passing to fsbrowse
   req.baseUrl = BASE_URL + '/files/' + req.params.conversationId;
   router(req, res, next);
@@ -1073,7 +1075,9 @@ const server = http.createServer(async (req, res) => {
 
     if (pathOnly === '/api/conversations' && req.method === 'POST') {
       const body = await parseBody(req);
-      const conversation = queries.createConversation(body.agentId, body.title, body.workingDirectory || null, body.model || null);
+      // Normalize working directory to avoid Windows path issues
+      const normalizedWorkingDir = body.workingDirectory ? path.resolve(body.workingDirectory) : null;
+      const conversation = queries.createConversation(body.agentId, body.title, normalizedWorkingDir, body.model || null);
       queries.createEvent('conversation.created', { agentId: body.agentId, workingDirectory: conversation.workingDirectory, model: conversation.model }, conversation.id);
       broadcastSync({ type: 'conversation_created', conversation });
             sendJSON(req, res, 201, { conversation });
@@ -1099,6 +1103,10 @@ const server = http.createServer(async (req, res) => {
 
       if (req.method === 'POST' || req.method === 'PUT') {
         const body = await parseBody(req);
+        // Normalize working directory if present to avoid Windows path issues
+        if (body.workingDirectory) {
+          body.workingDirectory = path.resolve(body.workingDirectory);
+        }
         const conv = queries.updateConversation(convMatch[1], body);
         if (!conv) { sendJSON(req, res, 404, { error: 'Conversation not found' }); return; }
         queries.createEvent('conversation.updated', body, convMatch[1]);