Repository navigation
fix(server): removing a worktree on Windows no longer leaves junctions behind #15833
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
SunkenInTime
wants to merge
7
commits into
pingdotgg:main
Choose a base branch
from
SunkenInTime:t3code/worktree-remove-junction-leftovers
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
+133
−1
Open
Changes from all commits
Commits
Show all changes
7 commits
Select commit
Hold shift + click to select a range
5596196
fix(server): removing a worktree on Windows no longer leaves junction…
SunkenInTime 15b753d
fix(server): only remove leftover worktree folders while they are empty
SunkenInTime f6d3251
Merge branch 'main' into t3code/worktree-remove-junction-leftovers
SunkenInTime 77ff621
fix(server): keep unexpected rmdir errors in worktree removal warnings
SunkenInTime 344b395
fix(server): clean up the same worktree path Git removed
SunkenInTime a419c22
Merge remote-tracking branch 'origin/main' into t3code/worktree-remov…
SunkenInTime 919ecce
Merge remote-tracking branch 'origin/main' into t3code/worktree-remov…
SunkenInTime File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,18 @@ | ||
| // @effect-diagnostics nodeBuiltinImport:off - Effect's FileSystem has no rmdir. | ||
| import * as NodeFSP from "node:fs/promises"; | ||
|
|
||
| import * as Effect from "effect/Effect"; | ||
|
|
||
| /** | ||
| * Removes `path` only while it is an empty directory. Succeeds with false when | ||
| * anything else is there, including files written after the caller looked. | ||
| * Other failures, such as a permission error, stay errors. | ||
| */ | ||
| export const removeEmptyDirectory = (path: string) => | ||
| Effect.tryPromise(() => NodeFSP.rmdir(path)).pipe( | ||
| Effect.as(true), | ||
| Effect.catchIf( | ||
| (error) => (error.cause as NodeJS.ErrnoException | undefined)?.code === "ENOTEMPTY", | ||
| () => Effect.succeed(false), | ||
| ), | ||
| ); |
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🟠 High
vcs/GitVcsDriverCore.ts:3659removeLeftoverLinkscan delete content outside the removed worktree and can delete a newly written regular file: a link can be replaced afterreadLink(target)but beforeremove,stat, orreadDirectory, and those operations then act on the replacement or follow it into an external directory. The cleanup needs no-follow, object-bound filesystem operations (or equivalent revalidation) for both deletion and traversal so it only removes the entries that were inspected.🤖 Copy this AI Prompt to have your agent fix this:
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Not changing this; same reasoning as the CodeRabbit thread above (resolved). The swap has to land inside the stub folder of a worktree Git just unregistered, under the user's own T3 worktrees directory, within the microseconds between
readLinkandremove. Only a process running as the same user can do that, and it could already delete anything this pass touches, so there is no privilege boundary to defend. Node has noopenat/unlinkat-style handle-bound operations, so object-bound traversal would need native code. Folders are only removed withrmdir, so a file written into a folder after the listing is kept.There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sorry, I'm unable to act on this request because you do not have permissions within this repository.