Function readFile

src/main/lib/git/security/secure-fs.ts:283–295

* Read a file within a worktree. * * SECURITY: Enforces symlink-escape check. If the file is a symlink * pointing outside the worktree, this will throw PathValidationError. * * @throws PathValidationError with code "SYMLINK_ESCAPE" if file escapes worktree

(
		worktreePath: string,
		filePath: string,
		encoding: BufferEncoding = "utf-8",
	)

	 * @throws PathValidationError with code "SYMLINK_ESCAPE" if file escapes worktree
	 */
	async readFile(
		worktreePath: string,
		filePath: string,
		encoding: BufferEncoding = "utf-8",
	): Promise<string> {
		assertRegisteredWorktree(worktreePath);
		const fullPath = resolvePathInWorktree(worktreePath, filePath);

		// Block reads through symlinks that escape the worktree
		await assertRealpathInWorktree(worktreePath, fullPath);

		return readFile(fullPath, encoding);
	},

	/**
	 * Read a file as a Buffer within a worktree.