@contextai-core/cli 0.1.2 → 0.1.3

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@contextai-core/cli",
-    "version": "0.1.2",
+    "version": "0.1.3",
     "description": "Give your AI agents persistent memory. Install pre-built context packs for Cursor, Windsurf, Copilot & more.",
     "author": "ContextAI",
     "license": "ISC",

package/src/logic/file-ops.js

@@ -8,6 +8,14 @@ import chalk from 'chalk';
  */
 export async function smartWriteFile(filePath, content, reason) {
     const fullPath = path.resolve(process.cwd(), filePath);
+
+    // SAFETY: Restrict usage to .ai directory (and context folders)
+    // This prevents the tool from conflicting with the Agent's native coding capabilities.
+    const relPath = path.relative(process.cwd(), fullPath);
+    if (!relPath.startsWith('.ai') && !relPath.startsWith('.context')) {
+        throw new Error(`ACCESS DENIED: 'contextai write' is restricted to the .ai/ directory.\nUse your native 'write_file' tool for application code.`);
+    }
+
     const dir = path.dirname(fullPath);
 
     // 1. Write the file
@@ -16,19 +24,23 @@ export async function smartWriteFile(filePath, content, reason) {
     }
     fs.writeFileSync(fullPath, content, 'utf8');
 
-    // 2. Update Changelog
-    const aiDir = path.join(process.cwd(), '.ai', 'context');
-    const changelogPath = path.join(aiDir, 'changelog.md');
+    // 2. System Audit Log (Immutable)
+    // Tracks "What happened" for safety/replay.
+    // Agent cannot modify this directly; it's a side-effect of the tool.
+    const aiDir = path.join(process.cwd(), '.ai');
+    const auditPath = path.join(aiDir, 'audit.log');
 
-    if (fs.existsSync(changelogPath)) {
-        const today = new Date().toISOString().split('T')[0];
-        const entry = `| ${today} | Agent | ${reason} |`;
+    if (!fs.existsSync(aiDir)) {
+        try { fs.mkdirSync(aiDir); } catch (e) { }
+    }
 
-        let changelog = fs.readFileSync(changelogPath, 'utf8');
-        // append to table (simplistic approach: append before last empty line or at end)
-        changelog += `\n${entry}`;
+    const timestamp = new Date().toISOString();
+    const logEntry = `[${timestamp}] ACTION:WRITE file="${filePath}" reason="${reason}"\n`;
 
-        fs.writeFileSync(changelogPath, changelog, 'utf8');
+    try {
+        fs.appendFileSync(auditPath, logEntry, 'utf8');
+    } catch (e) {
+        // Silently fail logging rather than breaking the build
     }
 
     return { success: true, path: fullPath };