amalgm 0.1.64 → 0.1.65

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "amalgm",
-  "version": "0.1.64",
+  "version": "0.1.65",
   "description": "Amalgm local computer runtime: login, MCP, chat, events, previews, and tunnels.",
   "license": "UNLICENSED",
   "private": false,

package/runtime/scripts/amalgm-mcp/fs/rest.js

@@ -29,6 +29,10 @@ const fileWatchers = new Map();
 const uploadWatchers = new Map();
 let uploadsPublishTimer = null;
 
+function isHiddenFilesystemEntry(name) {
+  return typeof name === 'string' && name.startsWith('.');
+}
+
 function expandHome(targetPath) {
   if (targetPath === '~') return os.homedir();
   if (typeof targetPath === 'string' && targetPath.startsWith('~/')) {
@@ -280,16 +284,12 @@ function classifyFile(targetPath) {
 
 function directorySnapshot(targetPath) {
   const entries = fs.readdirSync(targetPath, { withFileTypes: true });
-  const files = entries.map((entry) => {
-    const fullPath = path.join(targetPath, entry.name);
-    const stats = fs.lstatSync(fullPath);
-    return {
+  const files = entries
+    .filter((entry) => !isHiddenFilesystemEntry(entry.name))
+    .map((entry) => ({
       name: entry.name,
-      isDir: stats.isDirectory(),
-      size: stats.size,
-      modTime: stats.mtime.toISOString(),
-    };
-  });
+      isDir: entry.isDirectory(),
+    }));
 
   files.sort((a, b) => {
     if (a.isDir !== b.isDir) return a.isDir ? -1 : 1;

package/runtime/scripts/amalgm-mcp/tests/files-resource.test.js

@@ -0,0 +1,27 @@
+'use strict';
+
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+
+const { buildFilesResource } = require('../fs/rest')._private;
+
+test('files resource omits dot-prefixed filesystem entries', (t) => {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'amalgm-files-resource-'));
+  t.after(() => fs.rmSync(dir, { recursive: true, force: true }));
+
+  fs.mkdirSync(path.join(dir, 'visible-dir'));
+  fs.mkdirSync(path.join(dir, '.hidden-dir'));
+  fs.writeFileSync(path.join(dir, 'visible.txt'), 'hello');
+  fs.writeFileSync(path.join(dir, '.env'), 'SECRET=value');
+
+  const snapshot = buildFilesResource(dir, { watch: false });
+
+  assert.deepEqual(
+    snapshot.files.map((file) => file.name),
+    ['visible-dir', 'visible.txt'],
+  );
+  assert.equal(snapshot.files.some((file) => file.name.startsWith('.')), false);
+});