aicodeman 1.34.0 → 1.35.0

package/dist/web/routes/session-routes.js

@@ -47,6 +47,7 @@ import { dataPath, getDataDir } from '../../config/instance.js';
 import { checkRemoteTmuxAvailable, readRemoteCases, readRemoteHosts, rehydrateRemoteHostFields, toAttachedSessionRemote, toSessionRemote, } from '../../remote-hosts.js';
 import { checkDockerAvailable, checkDockerConfigDrift, probeAdoptableContainer, checkDockerTmuxAvailable, ensureAgentBaseImage, DEFAULT_AGENT_IMAGE, persistDockerCaseClaudeSessionId, readDockerCases, readDockerHosts, toSessionDocker, } from '../../docker-hosts.js';
 import { LRUMap } from '../../utils/lru-map.js';
+import { describeUnknownPath, probePathKind } from '../../utils/index.js';
 import { findLatestOmpSessionId } from '../../utils/omp-session-resolver.js';
 import { scanOmpSessionsHistory } from '../../omp-transcript.js';
 import { scanCodexSessionsHistory, codexThreadBySessionId } from '../../codex-transcript.js';
@@ -760,17 +761,20 @@ options = {}) {
         if (!isWorkingDirAllowed(getAuthUser(req), workingDir)) {
             return createErrorResponse(ApiErrorCode.FORBIDDEN, 'workingDir is outside your workspace');
         }
-        // Validate workingDir exists and is a directory
+        // Validate workingDir exists and is a directory. Bounded: a workingDir on a
+        // network mount that stopped answering must not freeze the event loop, and
+        // "did not answer" is reported as such, never as "does not exist".
         if (body.workingDir) {
-            try {
-                const stat = statSync(workingDir);
-                if (!stat.isDirectory()) {
-                    return createErrorResponse(ApiErrorCode.INVALID_INPUT, 'workingDir is not a directory');
-                }
+            const kind = await probePathKind(workingDir, { pastCap: true });
+            if (kind === 'unknown') {
+                return createErrorResponse(ApiErrorCode.OPERATION_FAILED, describeUnknownPath('workingDir', workingDir, { pastCap: true }));
             }
-            catch {
+            if (kind === 'absent') {
                 return createErrorResponse(ApiErrorCode.INVALID_INPUT, 'workingDir does not exist');
             }
+            if (kind !== 'directory') {
+                return createErrorResponse(ApiErrorCode.INVALID_INPUT, 'workingDir is not a directory');
+            }
         }
         // envOverrides flow through Session → tmux setenv (ephemeral, per-session).
         //
@@ -3175,9 +3179,17 @@ options = {}) {
         if (!remote && !isWorkingDirAllowed(getAuthUser(req), resolvedCasePath)) {
             return createErrorResponse(ApiErrorCode.FORBIDDEN, 'case path is outside your workspace');
         }
+        // Bounded probe of a local case folder: a linked case can sit on a network mount
+        // that stopped answering, and a synchronous check there froze the whole server.
+        // Only a DEFINITE absence may scaffold a new case; "did not answer" must not
+        // create one over the top of where the real case is mounted.
+        const localCaseState = remote || docker ? undefined : await probePathKind(resolvedCasePath, { pastCap: true });
+        if (localCaseState === 'unknown') {
+            return createErrorResponse(ApiErrorCode.OPERATION_FAILED, describeUnknownPath('Case folder', resolvedCasePath, { pastCap: true }));
+        }
         // Create case folder and CLAUDE.md if it doesn't exist (only for non-linked, non-remote,
         // non-docker cases — docker workspaces are scaffolded in their own block below)
-        if (!remote && !docker && !existsSync(resolvedCasePath)) {
+        if (localCaseState === 'absent') {
             try {
                 mkdirSync(resolvedCasePath, { recursive: true });
                 mkdirSync(join(resolvedCasePath, 'src'), { recursive: true });