Function readFileBuffer

src/main/lib/git/security/secure-fs.ts:305–316

* Read a file as a Buffer within a worktree. * * SECURITY: Enforces symlink-escape check. If the file is a symlink * pointing outside the worktree, this will throw PathValidationError. * * @throws PathValidationError with code "SYMLINK_ESCAPE" if file escapes worktree

(
		worktreePath: string,
		filePath: string,
	)

	 * @throws PathValidationError with code "SYMLINK_ESCAPE" if file escapes worktree
	 */
	async readFileBuffer(
		worktreePath: string,
		filePath: string,
	): Promise<Buffer> {
		assertRegisteredWorktree(worktreePath);
		const fullPath = resolvePathInWorktree(worktreePath, filePath);

		// Block reads through symlinks that escape the worktree
		await assertRealpathInWorktree(worktreePath, fullPath);

		return readFile(fullPath);
	},

	/**
	 * Write content to a file within a worktree.