Function resolveAndValidate

src/util/agent/fsOperations.ts:27–33

* Resolve a requested path relative to rootDir and validate it is within * the sandbox (symlink-safe). Returns the resolved absolute path.

(requested: string, rootDir: string)

 * the sandbox (symlink-safe). Returns the resolved absolute path.
 */
async function resolveAndValidate(requested: string, rootDir: string): Promise<string> {
  const resolved = path.resolve(rootDir, requested);
  if (!(await isPathWithinDir(resolved, rootDir))) {
    throw new Error(`Path traversal rejected: ${requested}`);
  }
  return resolved;
}

/**
 * Write a file relative to rootDir.