orca/src/main/runtime/runtime-relative-paths.ts

import { posix, win32 } from 'path'
import { isWindowsAbsolutePathLike } from '../../shared/cross-platform-path'

export function joinWorktreeRelativePath(rootPath: string, relativePath: string): string {
  const normalizedRelativePath = relativePath.replace(/\\/g, '/')
  if (isWindowsAbsolutePathLike(rootPath)) {
    return win32.join(rootPath.replace(/\//g, '\\'), ...normalizedRelativePath.split('/'))
  }
  return posix.join(rootPath, ...normalizedRelativePath.split('/'))
}

export function normalizeRuntimeRelativePath(relativePath: string): string {
  const normalized = relativePath.replace(/\\/g, '/').replace(/\/+$/, '')
  if (normalized === '') {
    return ''
  }
  if (!isSafeRuntimeRelativePath(normalized)) {
    throw new Error('invalid_relative_path')
  }
  return normalized
}

function isSafeRuntimeRelativePath(relativePath: string): boolean {
  if (relativePath.startsWith('/') || /^[a-zA-Z]:[\\/]/.test(relativePath)) {
    return false
  }
  const parts = relativePath.split('/')
  return parts.every((part) => part !== '' && part !== '.' && part !== '..')
}