feat: integrate Pi backend and Pi Web

2026-10-03 02:59:35 +00:00 · 2026-07-30 19:37:53 +08:00
commit 7392ab9dd7
1390 changed files with 337197 additions and 0 deletions
@@ -0,0 +1,91 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+async function loadSubject() {
+  return import("./session-file-references-core.ts");
+}
+
+test("detects exact external file paths referenced in session entries", async () => {
+  const { isFilePathReferencedByEntries } = await loadSubject();
+  const entries = [
+    {
+      type: "message",
+      id: "entry-1",
+      parentId: null,
+      timestamp: "2026-01-01T00:00:00.000Z",
+      message: {
+        role: "assistant",
+        content: [
+          {
+            type: "text",
+            text: "See [/home/me/.codex/config.toml:12](/home/me/.codex/config.toml:12)",
+          },
+        ],
+      },
+    },
+  ];
+
+  assert.equal(isFilePathReferencedByEntries("/home/me/.codex/config.toml", entries), true);
+});
+
+test("does not authorize sibling files by prefix match", async () => {
+  const { isFilePathReferencedByEntries } = await loadSubject();
+  const entries = [
+    {
+      type: "message",
+      id: "entry-1",
+      parentId: null,
+      timestamp: "2026-01-01T00:00:00.000Z",
+      message: {
+        role: "assistant",
+        content: [
+          {
+            type: "text",
+            text: "See /home/me/.codex/config.toml.bak",
+          },
+        ],
+      },
+    },
+  ];
+
+  assert.equal(isFilePathReferencedByEntries("/home/me/.codex/config.toml", entries), false);
+});
+
+test("authorizes full output only from a bash execution message", async () => {
+  const { isBashOutputPathReferencedByEntries } = await loadSubject();
+  const outputPath = "/tmp/pi-bash-ab12.log";
+  const bashEntry = {
+    type: "message",
+    id: "entry-1",
+    parentId: null,
+    timestamp: "2026-01-01T00:00:00.000Z",
+    message: {
+      role: "bashExecution",
+      command: "printf test",
+      output: "test",
+      fullOutputPath: outputPath,
+    },
+  };
+  const assistantEntry = {
+    type: "message",
+    id: "entry-2",
+    parentId: "entry-1",
+    timestamp: "2026-01-01T00:00:01.000Z",
+    message: {
+      role: "assistant",
+      content: [{ type: "text", text: `mentioned ${outputPath}` }],
+    },
+  };
+
+  assert.equal(isBashOutputPathReferencedByEntries(outputPath, [bashEntry]), true);
+  assert.equal(isBashOutputPathReferencedByEntries(outputPath, [assistantEntry]), false);
+  assert.equal(isBashOutputPathReferencedByEntries("/tmp/pi-bash-other.log", [bashEntry]), false);
+});
+
+test("validates session ids before resolving session paths", async () => {
+  const { isValidSessionId } = await loadSubject();
+
+  assert.equal(isValidSessionId("not-a-session-id"), false);
+  assert.equal(isValidSessionId("../../sessions/foo"), false);
+  assert.equal(isValidSessionId("550e8400-e29b-41d4-a716-446655440000"), true);
+});