lavish-axi 0.1.48 → 0.1.49

package/dist/cli.mjs

@@ -4496,7 +4496,7 @@ function attrValue(attrs, name) {
 import crypto4 from "node:crypto";
 import { EventEmitter } from "node:events";
 import { existsSync as existsSync2 } from "node:fs";
-import { readFile as readFile4 } from "node:fs/promises";
+import { readFile as readFile4, realpath as realpath3 } from "node:fs/promises";
 import { homedir } from "node:os";
 import path6 from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
@@ -7811,7 +7811,7 @@ async function serve({
         return;
       }
       const root = path6.dirname(session.file);
-      const file = resolveArtifactAsset(root, assetPath);
+      const file = await resolveArtifactAsset(root, assetPath);
       if (!file) {
         res.status(403).send("Forbidden");
         return;
@@ -7936,9 +7936,9 @@ data: ${JSON.stringify({ state: computePresence(req.params.key, activePolls, del
     res.setHeader("cache-control", "no-store");
     res.type("html").send(createWhiteboardFrameHtml(createWhiteboardChannelToken(whiteboardChannelSecret)));
   });
-  app.get(/^\/whiteboard-assets\/(.+)$/, (req, res, next) => {
+  app.get(/^\/whiteboard-assets\/(.+)$/, async (req, res, next) => {
     try {
-      const file = resolveArtifactAsset(whiteboardAssetsDir, req.params[0]);
+      const file = await resolveArtifactAsset(whiteboardAssetsDir, req.params[0]);
       if (!file) {
         res.status(403).send("Forbidden");
         return;
@@ -8234,13 +8234,32 @@ function optionalBodyString(value) {
   const trimmed = String(value ?? "").trim();
   return trimmed || void 0;
 }
-function resolveArtifactAsset(root, assetPath) {
+async function resolveArtifactAsset(root, assetPath) {
   const file = path6.resolve(root, assetPath);
   const relative = path6.relative(root, file);
   if (relative.startsWith("..") || path6.isAbsolute(relative)) {
     return null;
   }
-  return file;
+  let real;
+  try {
+    real = await realpath3(file);
+  } catch (error) {
+    if (error?.code === "ENOENT" || error?.code === "ENOTDIR") {
+      return file;
+    }
+    throw error;
+  }
+  let realRoot;
+  try {
+    realRoot = await realpath3(root);
+  } catch {
+    realRoot = path6.resolve(root);
+  }
+  const relativeReal = path6.relative(realRoot, real);
+  if (relativeReal === ".." || relativeReal.startsWith(`..${path6.sep}`) || path6.isAbsolute(relativeReal)) {
+    return null;
+  }
+  return real;
 }
 async function watchSession(session, watchers, events, logEvent, reloadDebounceMs = () => RELOAD_DEBOUNCE_MS) {
   if (watchers.has(session.key)) {
@@ -8716,7 +8735,7 @@ var POLL_WAKE_PATH_RULES = Object.freeze([
 ]);
 var POLL_SEND_AND_END_RULE = "`Send & End` ends the session. Its final feedback is still delivered once. After that response, polling stops, and the agent must not reopen the session uninvited.";
 var CODEX_POLL_WAKE_PATH_GUIDANCE = "Codex detected: completed background tasks may not resume Codex automatically, so keep the poll attached to the active turn.";
-var VERSION = "0.1.48";
+var VERSION = "0.1.49";
 function detectInvokingAgent(env = process.env) {
   return ["CODEX_SANDBOX", "CODEX_THREAD_ID"].some((key) => Object.hasOwn(env, key)) ? "codex" : "generic";
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lavish-axi",
-  "version": "0.1.48",
+  "version": "0.1.49",
   "packageManager": "pnpm@11.1.1",
   "description": "HTML is the new markdown. Lavish is the new editor for your HTML artifacts.",
   "type": "module",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "lavish-axi",
-  "version": "0.1.48",
+  "version": "0.1.49",
   "description": "HTML is the new markdown. Lavish is the new editor for your HTML artifacts.",
   "author": {
     "name": "Kun Chen",