agentgui 1.0.992 → 1.0.993

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentgui",
-  "version": "1.0.992",
+  "version": "1.0.993",
   "description": "Multi-agent ACP client with real-time communication",
   "type": "module",
   "main": "electron/main.js",

package/lib/plugins/files-plugin.js

@@ -1,114 +0,0 @@
-// Files plugin - file browser, upload handler, drag-drop support
-
-import path from 'path';
-import fs from 'fs';
-import { confineToRoots, fsAllowRoots } from '../http-handler.js';
-
-export default {
-  name: 'files',
-  version: '1.0.0',
-  dependencies: ['database'],
-
-  async init(config, plugins) {
-    const db = plugins.get('database');
-    const uploadedFiles = new Map();
-
-    const browseDirectory = (dir) => {
-      const conf = confineToRoots(dir, fsAllowRoots());
-      if (!conf.ok) return [];
-      try {
-        const entries = fs.readdirSync(conf.realPath);
-        return entries.map(entry => {
-          const fullPath = path.join(conf.realPath, entry);
-          try {
-            const stat = fs.statSync(fullPath);
-            return {
-              name: entry,
-              path: fullPath,
-              isDirectory: stat.isDirectory(),
-              size: stat.size,
-            };
-          } catch (_) {
-            return null;
-          }
-        }).filter(Boolean);
-      } catch (e) {
-        return [];
-      }
-    };
-
-    return {
-      routes: [
-        {
-          method: 'GET',
-          path: '/files/:conversationId',
-          handler: (req, res) => {
-            const { conversationId } = req.params;
-            const { dir } = req.query;
-            const requestedDir = dir || process.cwd();
-            const conf = confineToRoots(requestedDir, fsAllowRoots());
-            if (!conf.ok) {
-              return res.status(403).json({ error: 'Path not allowed' });
-            }
-            const entries = browseDirectory(conf.realPath);
-            res.json({ entries, currentDir: conf.realPath });
-          },
-        },
-        {
-          method: 'POST',
-          path: '/api/upload/:conversationId',
-          handler: async (req, res) => {
-            const { conversationId } = req.params;
-            uploadedFiles.set(conversationId, Date.now());
-            res.json({ success: true, conversationId });
-          },
-        },
-        {
-          method: 'POST',
-          path: '/api/folders',
-          handler: async (req, res) => {
-            const { path: folderPath } = req.body;
-            if (!folderPath || typeof folderPath !== 'string') {
-              return res.status(400).json({ error: 'path is required' });
-            }
-            // Sanitize each path component - reject traversal attempts
-            const parts = folderPath.split(/[/\\]/);
-            for (const part of parts) {
-              if (part === '..' || part === '.' || /[<>:"|?*\x00-\x1f]/.test(part)) {
-                return res.status(400).json({ error: 'Invalid path component' });
-              }
-            }
-            const conf = confineToRoots(folderPath, fsAllowRoots());
-            if (!conf.ok && conf.reason !== 'not found') {
-              return res.status(403).json({ error: 'Path not allowed' });
-            }
-            // For mkdir, path may not exist yet; re-check parent is confined
-            const parentConf = confineToRoots(path.dirname(folderPath), fsAllowRoots());
-            if (!parentConf.ok) {
-              return res.status(403).json({ error: 'Path not allowed' });
-            }
-            try {
-              fs.mkdirSync(folderPath, { recursive: true });
-              res.json({ success: true, path: folderPath });
-            } catch (e) {
-              res.status(400).json({ error: e.message });
-            }
-          },
-        },
-      ],
-      wsHandlers: {},
-      api: {
-        browseDirectory,
-      },
-      stop: async () => {
-        uploadedFiles.clear();
-      },
-    };
-  },
-
-  async reload(state) {
-    return state;
-  },
-
-  async stop() {},
-};