Function resolveContainedSkillFilePath

src/node/services/tools/skillFileUtils.ts:133–164

(
  skillDir: string,
  filePath: string,
  options?: { allowMissingLeaf?: boolean }
)

}

export async function resolveContainedSkillFilePath(
  skillDir: string,
  filePath: string,
  options?: { allowMissingLeaf?: boolean }
): Promise<{ resolvedPath: string; normalizedRelativePath: string }> {
  const { resolvedPath: requestedPath, normalizedRelativePath } = resolveSkillFilePath(
    skillDir,
    filePath
  );

  const rootReal = options?.allowMissingLeaf
    ? await resolveRealPathAllowMissing(skillDir)
    : await fsPromises.realpath(skillDir);
  const rootPrefix = rootReal.endsWith(path.sep) ? rootReal : `${rootReal}${path.sep}`;

  const targetReal = options?.allowMissingLeaf
    ? await resolveRealPathAllowMissing(requestedPath)
    : await fsPromises.realpath(requestedPath);

  if (targetReal !== rootReal && !targetReal.startsWith(rootPrefix)) {
    throw new Error(
      `Invalid filePath (path escapes skill directory after symlink resolution): ${filePath}`
    );
  }

  // Use the resolved real path only for containment checks; callers must mutate the lexical
  // requested path so lstat-based leaf symlink rejection checks inspect the requested alias.
  return {
    resolvedPath: requestedPath,
    normalizedRelativePath,
  };
}

/**
 * Unified directory-scope validation for local skill operations (write / delete).