openmagic 0.11.0 → 0.12.0

package/dist/cli.js

@@ -81,7 +81,8 @@ import {
   statSync,
   readdirSync,
   copyFileSync,
-  mkdirSync as mkdirSync2
+  mkdirSync as mkdirSync2,
+  realpathSync
 } from "fs";
 import { join as join2, resolve, relative, dirname, extname } from "path";
 var IGNORED_DIRS = /* @__PURE__ */ new Set([
@@ -117,10 +118,17 @@ var IGNORED_EXTENSIONS = /* @__PURE__ */ new Set([
 ]);
 function isPathSafe(filePath, roots) {
   const resolved = resolve(filePath);
+  let real;
+  try {
+    real = realpathSync(resolved);
+  } catch {
+    real = resolved;
+  }
   return roots.some((root) => {
     const resolvedRoot = resolve(root);
     const rel = relative(resolvedRoot, resolved);
-    return !rel.startsWith("..") && !rel.startsWith("/") && !rel.startsWith("\\");
+    const realRel = relative(resolvedRoot, real);
+    return !rel.startsWith("..") && !rel.startsWith("/") && !rel.startsWith("\\") && (!realRel.startsWith("..") && !realRel.startsWith("/") && !realRel.startsWith("\\"));
   });
 }
 function readFileSafe(filePath, roots) {
@@ -902,6 +910,18 @@ You MUST respond with valid JSON in this exact format:
 6. If the change involves multiple files, include all modifications in the array
 7. ALWAYS respond with the JSON format above, even for explanations (put them in the "explanation" field)
 8. If you cannot make the requested change, set modifications to an empty array and explain why`;
+function buildContextParts(context) {
+  const parts = {};
+  if (context.selectedElement) parts.selectedElement = context.selectedElement.outerHTML;
+  if (context.files?.length) {
+    parts.filePath = context.files[0].path;
+    parts.fileContent = context.files[0].content;
+  }
+  if (context.projectTree) parts.projectTree = context.projectTree;
+  if (context.networkLogs) parts.networkLogs = context.networkLogs.map((l) => `${l.method} ${l.url} \u2192 ${l.status || "pending"}`).join("\n");
+  if (context.consoleLogs) parts.consoleLogs = context.consoleLogs.map((l) => `[${l.level}] ${l.args.join(" ")}`).join("\n");
+  return parts;
+}
 function buildUserMessage(userPrompt, context) {
   const parts = [];
   if (context.projectTree) {
@@ -957,24 +977,7 @@ async function chatOpenAICompatible(provider, model, apiKey, messages, context,
   for (let i = 0; i < messages.length; i++) {
     const msg = messages[i];
     if (msg.role === "user" && typeof msg.content === "string" && i === lastUserIdx) {
-      const contextParts = {};
-      if (context.selectedElement) {
-        contextParts.selectedElement = context.selectedElement.outerHTML;
-      }
-      if (context.files && context.files.length > 0) {
-        contextParts.filePath = context.files[0].path;
-        contextParts.fileContent = context.files[0].content;
-      }
-      if (context.projectTree) {
-        contextParts.projectTree = context.projectTree;
-      }
-      if (context.networkLogs) {
-        contextParts.networkLogs = context.networkLogs.map((l) => `${l.method} ${l.url} \u2192 ${l.status || "pending"}`).join("\n");
-      }
-      if (context.consoleLogs) {
-        contextParts.consoleLogs = context.consoleLogs.map((l) => `[${l.level}] ${l.args.join(" ")}`).join("\n");
-      }
-      const enrichedContent = buildUserMessage(msg.content, contextParts);
+      const enrichedContent = buildUserMessage(msg.content, buildContextParts(context));
       const modelInfo2 = providerConfig.models.find((m) => m.id === model);
       if (context.screenshot && modelInfo2?.vision) {
         apiMessages.push({
@@ -1088,24 +1091,7 @@ async function chatAnthropic(model, apiKey, messages, context, onChunk, onDone,
     const msg = messages[i];
     if (msg.role === "system") continue;
     if (msg.role === "user" && typeof msg.content === "string" && i === lastUserIdx) {
-      const contextParts = {};
-      if (context.selectedElement) {
-        contextParts.selectedElement = context.selectedElement.outerHTML;
-      }
-      if (context.files && context.files.length > 0) {
-        contextParts.filePath = context.files[0].path;
-        contextParts.fileContent = context.files[0].content;
-      }
-      if (context.projectTree) {
-        contextParts.projectTree = context.projectTree;
-      }
-      if (context.networkLogs) {
-        contextParts.networkLogs = context.networkLogs.map((l) => `${l.method} ${l.url} \u2192 ${l.status || "pending"}`).join("\n");
-      }
-      if (context.consoleLogs) {
-        contextParts.consoleLogs = context.consoleLogs.map((l) => `[${l.level}] ${l.args.join(" ")}`).join("\n");
-      }
-      const enrichedContent = buildUserMessage(msg.content, contextParts);
+      const enrichedContent = buildUserMessage(msg.content, buildContextParts(context));
       if (context.screenshot) {
         const base64Data = context.screenshot.replace(
           /^data:image\/\w+;base64,/,
@@ -1218,18 +1204,7 @@ async function chatGoogle(model, apiKey, messages, context, onChunk, onDone, onE
     if (msg.role === "system") continue;
     const role = msg.role === "assistant" ? "model" : "user";
     if (msg.role === "user" && typeof msg.content === "string" && i === lastUserIdx) {
-      const contextParts = {};
-      if (context.selectedElement) {
-        contextParts.selectedElement = context.selectedElement.outerHTML;
-      }
-      if (context.files && context.files.length > 0) {
-        contextParts.filePath = context.files[0].path;
-        contextParts.fileContent = context.files[0].content;
-      }
-      if (context.projectTree) {
-        contextParts.projectTree = context.projectTree;
-      }
-      const enrichedContent = buildUserMessage(msg.content, contextParts);
+      const enrichedContent = buildUserMessage(msg.content, buildContextParts(context));
       const parts = [
         { text: enrichedContent }
       ];
@@ -1916,7 +1891,7 @@ process.on("uncaughtException", (err) => {
   process.exit(1);
 });
 var childProcesses = [];
-var VERSION2 = "0.11.0";
+var VERSION2 = "0.12.0";
 function ask(question) {
   const rl = createInterface({ input: process.stdin, output: process.stdout });
   return new Promise((resolve3) => {