codecartographer-pi 0.19.5 → 0.19.6

package/dist/extensions/codecarto/dashboard-writer.js

@@ -2,9 +2,9 @@
 // HTML to `.codecarto/dashboard.html`. Best-effort — failures are swallowed
 // and never escalate to a phase error the user sees, mirroring the
 // recordUsage discipline at extensions/codecarto/index.ts.
-import { readdir, readFile, rename, writeFile } from "node:fs/promises";
+import { readdir, readFile } from "node:fs/promises";
 import { join } from "node:path";
-import { DASHBOARD_RELATIVE_PATH, getWorkspaceState, loadUsage, NARRATION_CACHE_RELATIVE_PATH, parseSimpleYaml, pathExists, renderDashboard, } from "../../core/index.js";
+import { atomicWriteFile, DASHBOARD_RELATIVE_PATH, getWorkspaceState, loadUsage, NARRATION_CACHE_RELATIVE_PATH, parseSimpleYaml, pathExists, renderDashboard, } from "../../core/index.js";
 const CLOSEOUT_FILENAME_RE = /^(\d{4}-\d{2}-\d{2})-(.+)\.md$/;
 /**
  * Render and atomically replace `.codecarto/dashboard.html`.
@@ -36,10 +36,7 @@ export async function writeDashboard(cwd, packageVersion) {
             narration,
         };
         const html = renderDashboard(inputs);
-        const path = join(workspaceDir, DASHBOARD_RELATIVE_PATH);
-        const tempPath = `${path}.${process.pid}.${Date.now()}.tmp`;
-        await writeFile(tempPath, html, "utf8");
-        await rename(tempPath, path);
+        await atomicWriteFile(join(workspaceDir, DASHBOARD_RELATIVE_PATH), html);
         return true;
     }
     catch {

package/dist/extensions/codecarto/index.js

@@ -11,7 +11,7 @@ import { parseNextFlags } from "./next-flags.js";
 import { buildPiGuideMessage } from "./guide-framing.js";
 import { isCtxLive, notifyCtx } from "./notify.js";
 import { phaseCompactionExtension } from "./phase-compaction.js";
-import { applyAmendment, buildPhasePrompt, buildSkillPrompt, buildValidationSummary, canonicalPath, copyPackagedWorkspace, computePerPhaseTotals, computeTotals, ConfidentialityMismatchError, createEmptyStatus, DEFAULT_PIPELINE_PATH, describeScaffoldStaleness, deriveSlug, discoverLibrary, getNextEligiblePhase, getPipelineLabel, getWorkspaceState, isWithinPathResolved, BROADSIDE_LENS_IDS, BROADSIDE_SKILL_NAME, BroadsideCancelledError, broadsideDirFor, collectResultText, estimateSubmitText, getLens, listAmendmentNames, listBatchModels, listGuideTopics, listScaffoldRefreshFiles, listSkillNames, loadAmendmentFile, loadBroadsideConfig, modelsText, runBroadsideCollect, runBroadsideStatus, runBroadsideSubmit, statusText, loadCodecartoConfig, loadUsage, loadYamlFile, normalizeForComparison, packagedWorkspaceDir, pathExists, PACKAGE_VERSION, readBroadsideSkill, readGuide, refreshScaffold, PhasePreflightError, PIPELINE_ALIASES, publishEntry, resolvePhase, resolvePipelineChoice, resolvePublishSourceRepo, SourceRepoMismatchError, runPhasePreflight, SCAFFOLD_REFRESH_PROTECTED, seedOrchestratorFiles, stringifySimpleYaml, switchPipeline, validatePhaseOutput, writeLibraryConfig, } from "../../core/index.js";
+import { applyAmendment, buildPhasePrompt, buildSkillPrompt, buildValidationSummary, canonicalPath, copyPackagedWorkspace, computePerPhaseTotals, computeTotals, ConfidentialityMismatchError, createEmptyStatus, DEFAULT_PIPELINE_PATH, describeScaffoldStaleness, deriveSlug, discoverLibrary, getNextEligiblePhase, getPipelineLabel, getWorkspaceState, isWithinPath, resolveExistingPrefix, BROADSIDE_LENS_IDS, BROADSIDE_SKILL_NAME, BroadsideCancelledError, broadsideDirFor, collectResultText, estimateSubmitText, getLens, listAmendmentNames, listBatchModels, listGuideTopics, listScaffoldRefreshFiles, listSkillNames, loadAmendmentFile, loadBroadsideConfig, modelsText, runBroadsideCollect, runBroadsideStatus, runBroadsideSubmit, statusText, loadCodecartoConfig, loadUsage, loadYamlFile, normalizeForComparison, packagedWorkspaceDir, pathExists, PACKAGE_VERSION, readBroadsideSkill, readGuide, refreshScaffold, PhasePreflightError, PIPELINE_ALIASES, publishEntry, resolvePhase, resolvePipelineChoice, resolvePublishSourceRepo, SourceRepoMismatchError, runPhasePreflight, SCAFFOLD_REFRESH_PROTECTED, seedOrchestratorFiles, stringifySimpleYaml, switchPipeline, validatePhaseOutput, writeLibraryConfig, } from "../../core/index.js";
 import { initLibrary } from "../../core/library.js";
 import { resolveUserConfigPath } from "../../core/orchestrator-config.js";
 const STATUS_WIDGET_ID = "codecarto-widget";
@@ -343,13 +343,17 @@ export default function codeCartographerExtension(pi) {
         if (event.toolName === "edit" || event.toolName === "write") {
             const inputPath = typeof event.input.path === "string" ? event.input.path : "";
             const strippedPath = inputPath.startsWith("@") ? inputPath.slice(1) : inputPath;
-            const targetPath = await canonicalPath(resolve(ctx.cwd, strippedPath));
+            // Resolve through whatever already exists on disk — symlinks included —
+            // before appending the unborn tail. `resolve()` would collapse
+            // `link/..` lexically and `realpath()` throws on a file that is not
+            // there yet, and either gap let a write escape the workspace (#223).
+            const targetPath = await resolveExistingPrefix(strippedPath, ctx.cwd);
             const allowedRoots = [await canonicalPath(workspaceDir)];
             const config = await loadCodecartoConfig(workspaceDir);
             if (config.library.path && await discoverLibrary(config.library.path)) {
                 allowedRoots.push(await canonicalPath(config.library.path));
             }
-            const withinAllowed = await Promise.all(allowedRoots.map((allowedRoot) => isWithinPathResolved(targetPath, allowedRoot)));
+            const withinAllowed = allowedRoots.map((allowedRoot) => isWithinPath(targetPath, allowedRoot));
             if (!withinAllowed.some((result) => result)) {
                 notifyCtx(ctx, `Blocked ${event.toolName} outside .codecarto/ or configured library: ${inputPath}`, "warning");
                 return { block: true, reason: `CodeCartographer mode only allows ${event.toolName} within .codecarto/ or the configured CodeCartographer library.` };
@@ -447,7 +451,8 @@ export default function codeCartographerExtension(pi) {
                 await copyPackagedWorkspace(targetWorkspaceDir);
             }
             const rawStatusPath = join(targetWorkspaceDir, "workflow", "status.yaml");
-            const rawStatus = (await loadYamlFile(rawStatusPath)) ?? {};
+            // Absent on a fresh copy: the template ships no status.yaml.
+            const rawStatus = (await pathExists(rawStatusPath)) ? ((await loadYamlFile(rawStatusPath)) ?? {}) : {};
             const selectedPipelinePath = pipelineChoice ?? rawStatus.pipeline?.trim() ?? DEFAULT_PIPELINE_PATH;
             const resolvedPipelinePath = join(targetWorkspaceDir, selectedPipelinePath);
             if (!(await pathExists(resolvedPipelinePath))) {

package/dist/extensions/codecarto/phase-compaction.js

@@ -1,7 +1,7 @@
-import { mkdir, rename, writeFile } from "node:fs/promises";
-import { join, resolve } from "node:path";
+import { mkdir } from "node:fs/promises";
+import { join } from "node:path";
 import { compact } from "@earendil-works/pi-coding-agent";
-import { canonicalPath, getWorkspaceState, isWithinPath } from "../../core/index.js";
+import { atomicWriteFile, canonicalPath, getWorkspaceState, isWithinPath, resolveExistingPrefix } from "../../core/index.js";
 const PHASE_SESSION_PREFIX = "CodeCartographer phase: ";
 export function phaseIdFromSessionName(sessionName) {
     if (!sessionName?.startsWith(PHASE_SESSION_PREFIX))
@@ -29,7 +29,6 @@ export function buildPhaseCompactionInstructions(phaseId, primaryOutput) {
 export async function writePhaseCheckpoint(cwd, phaseId, summary, tokensBefore) {
     const dir = join(cwd, ".codecarto", "scratch", "checkpoints");
     const target = join(dir, `${phaseId}.md`);
-    const temp = `${target}.${process.pid}.${Date.now()}.tmp`;
     await mkdir(dir, { recursive: true });
     const content = [
         "---",
@@ -44,8 +43,7 @@ export async function writePhaseCheckpoint(cwd, phaseId, summary, tokensBefore)
         summary.trim(),
         "",
     ].join("\n");
-    await writeFile(temp, content, "utf8");
-    await rename(temp, target);
+    await atomicWriteFile(target, content);
     return target;
 }
 /**
@@ -64,7 +62,9 @@ export function phaseCompactionExtension(pi) {
         if (event.toolName === "edit" || event.toolName === "write") {
             const inputPath = typeof event.input.path === "string" ? event.input.path : "";
             const strippedPath = inputPath.startsWith("@") ? inputPath.slice(1) : inputPath;
-            const targetPath = await canonicalPath(resolve(ctx.cwd, strippedPath));
+            // Same containment as the parent extension's hook (#223): follow the
+            // existing prefix through symlinks, then append the unborn tail.
+            const targetPath = await resolveExistingPrefix(strippedPath, ctx.cwd);
             const allowedRoot = await canonicalPath(join(ctx.cwd, ".codecarto"));
             if (!isWithinPath(targetPath, allowedRoot)) {
                 return {

package/dist/mcp-server/server.js

@@ -125,8 +125,11 @@ export async function handleInit(args) {
         // broadside state and results already on disk.
         await copyPackagedWorkspace(targetWorkspaceDir);
     }
+    // The template no longer carries a status.yaml (it is this repository's
+    // own project state); one is only present when init is re-run over an
+    // existing workspace, where its pipeline stays the default.
     const statusPath = join(targetWorkspaceDir, "workflow", "status.yaml");
-    const rawStatus = (await loadYamlFile(statusPath)) ?? {};
+    const rawStatus = (await pathExists(statusPath)) ? ((await loadYamlFile(statusPath)) ?? {}) : {};
     const selectedPipelinePath = pipelineChoice ?? rawStatus.pipeline?.trim() ?? DEFAULT_PIPELINE_PATH;
     const resolvedPipelinePath = join(targetWorkspaceDir, selectedPipelinePath);
     if (!(await pathExists(resolvedPipelinePath))) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codecartographer-pi",
-  "version": "0.19.5",
+  "version": "0.19.6",
   "mcpName": "io.github.HuginnIndustries/codecartographer",
   "description": "Turn an unfamiliar codebase into a validated reimplementation spec, then synthesize confirmed specs and a product vision into a traceable plan.",
   "type": "module",