tarsk 0.3.28 → 0.3.29

package/dist/index.js

@@ -2433,7 +2433,7 @@ function generateDiffString(oldContent, newContent, contextLines = 4) {
 // src/tools/path-utils.ts
 import { accessSync, constants } from "node:fs";
 import * as os from "node:os";
-import { isAbsolute, resolve as resolvePath } from "node:path";
+import { isAbsolute, resolve as resolvePath, relative as relative2 } from "node:path";
 var UNICODE_SPACES = /[\u00A0\u2000-\u200A\u202F\u205F\u3000]/g;
 var NARROW_NO_BREAK_SPACE = " ";
 function normalizeUnicodeSpaces(str) {
@@ -2476,6 +2476,12 @@ function resolveToCwd(filePath, cwd) {
   }
   return resolvePath(cwd, expanded);
 }
+function validatePathWithinCwd(resolvedPath, cwd) {
+  const relativePath = relative2(cwd, resolvedPath);
+  if (relativePath.startsWith("..") || isAbsolute(relativePath)) {
+    throw new Error(`Access denied: Path is outside the allowed directory. ` + `Requested: ${resolvedPath}, Allowed root: ${cwd}`);
+  }
+}
 function resolveReadPath(filePath, cwd) {
   const resolved = resolveToCwd(filePath, cwd);
   if (fileExists(resolved)) {
@@ -2520,6 +2526,7 @@ function createEditTool(cwd, options) {
     parameters: editSchema,
     execute: async (_toolCallId, { path, oldText, newText }, signal) => {
       const absolutePath = resolveToCwd(path, cwd);
+      validatePathWithinCwd(absolutePath, cwd);
       return new Promise((resolve, reject) => {
         if (signal?.aborted) {
           reject(new Error("Operation aborted"));
@@ -2652,6 +2659,7 @@ function createFindTool(cwd, options) {
         (async () => {
           try {
             const searchPath = resolveToCwd(searchDir || ".", cwd);
+            validatePathWithinCwd(searchPath, cwd);
             const effectiveLimit = limit ?? DEFAULT_LIMIT;
             const ops = customOps ?? defaultFindOperations;
             if (!await ops.exists(searchPath)) {
@@ -2780,6 +2788,7 @@ function createGrepTool(cwd, options) {
               return;
             }
             const searchPath = resolveToCwd(searchDir || ".", cwd);
+            validatePathWithinCwd(searchPath, cwd);
             const ops = customOps ?? defaultGrepOperations;
             let isDirectory;
             try {
@@ -2792,9 +2801,9 @@ function createGrepTool(cwd, options) {
             const effectiveLimit = Math.max(1, limit ?? DEFAULT_LIMIT2);
             const formatPath = (filePath) => {
               if (isDirectory) {
-                const relative2 = path2.relative(searchPath, filePath);
-                if (relative2 && !relative2.startsWith("..")) {
-                  return relative2.replace(/\\/g, "/");
+                const relative3 = path2.relative(searchPath, filePath);
+                if (relative3 && !relative3.startsWith("..")) {
+                  return relative3.replace(/\\/g, "/");
                 }
               }
               return path2.basename(filePath);
@@ -2986,6 +2995,7 @@ function createLsTool(cwd, options) {
         (async () => {
           try {
             const dirPath = resolveToCwd(dirPathArg || ".", cwd);
+            validatePathWithinCwd(dirPath, cwd);
             const effectiveLimit = limit ?? DEFAULT_LIMIT3;
             if (!await ops.exists(dirPath)) {
               reject(new Error(`Path not found: ${dirPath}`));
@@ -3079,6 +3089,7 @@ function createReadTool(cwd, options) {
     parameters: readSchema,
     execute: async (_toolCallId, { path: path3, offset, limit }, signal) => {
       const absolutePath = resolveReadPath(path3, cwd);
+      validatePathWithinCwd(absolutePath, cwd);
       return new Promise((resolve, reject) => {
         if (signal?.aborted) {
           reject(new Error("Operation aborted"));
@@ -3187,6 +3198,7 @@ function createWriteTool(cwd, options) {
     parameters: writeSchema,
     execute: async (_toolCallId, { path: path3, content }, signal) => {
       const absolutePath = resolveToCwd(path3, cwd);
+      validatePathWithinCwd(absolutePath, cwd);
       const dir = dirname4(absolutePath);
       return new Promise((resolve, reject) => {
         if (signal?.aborted) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tarsk",
-  "version": "0.3.28",
+  "version": "0.3.29",
   "description": "CLI for Tarsk - Project Threads Manager",
   "type": "module",
   "main": "dist/index.js",