Function validateTextFile

pkg/aiusechat/tools_writefile.go:20–75

100KB

(expandedPath string, verb string, mustExist bool)

const MaxEditFileSize = 100 * 1024 // 100KB

func validateTextFile(expandedPath string, verb string, mustExist bool) (os.FileInfo, error) {
	if blocked, reason := isBlockedFile(expandedPath); blocked {
		return nil, fmt.Errorf("access denied: potentially sensitive file: %s", reason)
	}

	fileInfo, err := os.Lstat(expandedPath)
	if err != nil {
		if os.IsNotExist(err) {
			if mustExist {
				return nil, fmt.Errorf("file does not exist: %s", expandedPath)
			}
			return nil, nil
		}
		return nil, fmt.Errorf("failed to stat file: %w", err)
	}

	if fileInfo.Mode()&os.ModeSymlink != 0 {
		target, _ := os.Readlink(expandedPath)
		if target == "" {
			target = "(unknown)"
		}
		return nil, fmt.Errorf("cannot %s symlinks (target: %s). %s the target file directly if needed", verb, utilfn.MarshalJSONString(target), verb)
	}

	if fileInfo.IsDir() {
		return nil, fmt.Errorf("path is a directory, cannot %s it", verb)
	}

	if !fileInfo.Mode().IsRegular() {
		return nil, fmt.Errorf("path is not a regular file (devices, pipes, sockets not supported)")
	}

	if fileInfo.Size() > MaxEditFileSize {
		return nil, fmt.Errorf("file is too large (%d bytes, max %d bytes)", fileInfo.Size(), MaxEditFileSize)
	}

	fileData, err := os.ReadFile(expandedPath)
	if err != nil {
		return nil, fmt.Errorf("failed to read file: %w", err)
	}

	if utilfn.HasBinaryData(fileData) {
		return nil, fmt.Errorf("file appears to contain binary data")
	}

	dirPath := filepath.Dir(expandedPath)
	dirInfo, err := os.Stat(dirPath)
	if err != nil && !os.IsNotExist(err) {
		return nil, fmt.Errorf("failed to stat directory: %w", err)
	}
	if err == nil && dirInfo.Mode().Perm()&0222 == 0 {
		return nil, fmt.Errorf("directory is not writable (no write permission)")
	}

	return fileInfo, nil
}

type writeTextFileParams struct {