pi-roundtable-sandbox 0.12.1 → 0.13.0

package/CHANGELOG.md

@@ -2,6 +2,11 @@
 
 ## Unreleased
 
+## 0.13.0
+
+- Release in lockstep with pi-roundtable 0.13.0. The core peer range moves to `>=0.13.0 <0.14.0`.
+- A failed attachment download is reported as `download failed: <code>` (the error's `code` or `name`, else `error`) instead of the error's text, which could quote a path in the guest-writable directory.
+
 ## 0.12.1
 
 - Release in lockstep with pi-roundtable 0.12.1; no package-specific behavior changes. The core peer range stays `>=0.12.0 <0.13.0`.

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-roundtable-sandbox",
-	"version": "0.12.1",
+	"version": "0.13.0",
 	"description": "Sealed guest channels and an allow-listed credential broker for pi-roundtable",
 	"type": "module",
 	"license": "MIT",
@@ -36,7 +36,7 @@
 	},
 	"peerDependencies": {
 		"@earendil-works/pi-coding-agent": ">=1.0.0 <2",
-		"pi-roundtable": ">=0.12.0 <0.13.0",
+		"pi-roundtable": ">=0.13.0 <0.14.0",
 		"typebox": ">=1.3.34 <2"
 	},
 	"peerDependenciesMeta": {
@@ -52,7 +52,7 @@
 		"@biomejs/biome": "2.5.15",
 		"@types/bun": "1.4.2",
 		"discord.js": "14.27.0",
-		"pi-roundtable": "0.12.1",
+		"pi-roundtable": "0.13.0",
 		"typebox": "1.3.34",
 		"typescript": "7.0.2"
 	}

package/src/pi-attachments.ts

@@ -14,6 +14,16 @@ export interface PiAttachmentOptions {
 	/** Trusted presentation adapter for a failure; return undefined to keep the default wording. */
 	describeFailure?(error: unknown): string | undefined;
 }
+/** An error's `code` or `name` and never its message, which can quote the directory a file was written to. */
+function failureCode(error: unknown): string {
+	const word = /^[A-Za-z][A-Za-z0-9_]{0,40}$/;
+	if (typeof error !== "object" || error === null) return "error";
+	const { code, name } = error as { code?: unknown; name?: unknown };
+	if (typeof code === "string" && word.test(code)) return code;
+	if (typeof name === "string" && name !== "Error" && word.test(name))
+		return name;
+	return "error";
+}
 /** A failure whose message is already safe to show, matching the core's attachment wording. */
 class AttachmentRefused extends Error {}
 /** Bounded downloads and no-follow, descriptor-anchored writes into a guest-writable directory. */
@@ -147,7 +157,7 @@ export async function collectPiAttachments(
 						options.describeFailure?.(error) ??
 						(error instanceof AttachmentRefused
 							? error.message
-							: `download failed: ${String(error)}`),
+							: `download failed: ${failureCode(error)}`),
 					fromReference,
 				});
 			}