@cursor/july 0.1.78 → 0.1.80

package/templates/agentic-owners/agent/lib/owners/parse.ts

@@ -120,6 +120,18 @@ function parsePaths(
     issues.push(`${label}: paths must not be empty`);
     return undefined;
   }
+  let hasInvalidPath = false;
+  for (const [index, path] of paths.entries()) {
+    if (path.startsWith("/")) {
+      issues.push(
+        `${label}[${index}]: path must be relative to the policy directory (no leading /)`
+      );
+      hasInvalidPath = true;
+    }
+  }
+  if (hasInvalidPath) {
+    return undefined;
+  }
   return paths;
 }
 
@@ -141,7 +153,15 @@ function parseGlobalExclusions({
     );
     return [];
   }
-  return parsePaths(value, `${sourcePath}: global_exclusions`, issues) ?? [];
+  const label = `${sourcePath}: global_exclusions`;
+  const paths = parsePaths(value, label, issues) ?? [];
+  validatePathsStayWithinRepository({
+    paths,
+    sourcePath,
+    label,
+    issues,
+  });
+  return paths;
 }
 
 function parsePromptPath(
@@ -335,6 +355,34 @@ function scopeDepthForConfigPath(configPath: string): number {
   return prefix.split("/").filter((segment) => segment !== "").length;
 }
 
+function validatePathsStayWithinRepository({
+  paths,
+  sourcePath,
+  label,
+  issues,
+}: {
+  paths: readonly string[];
+  sourcePath: string;
+  label: string;
+  issues: string[];
+}): void {
+  const scopeDepth = scopeDepthForConfigPath(sourcePath);
+  for (const [index, path] of paths.entries()) {
+    const segments = path.split("/");
+    let parentSegments = 0;
+    while (segments[parentSegments] === "..") {
+      parentSegments += 1;
+    }
+    if (segments.slice(parentSegments).includes("..")) {
+      issues.push(
+        `${label}[${index}]: .. segments must precede the path pattern`
+      );
+    } else if (parentSegments > scopeDepth) {
+      issues.push(`${label}[${index}]: path escapes the repository root`);
+    }
+  }
+}
+
 function parsePolicyRecord({
   record,
   sourcePath,
@@ -417,6 +465,12 @@ function parsePolicyRecord({
   }
 
   const scopeDepth = scopeDepthForConfigPath(sourcePath);
+  validatePathsStayWithinRepository({
+    paths,
+    sourcePath,
+    label: `${label}.paths`,
+    issues,
+  });
 
   if (
     alwaysApprove &&

package/templates/agentic-owners/agent/lib/owners/types.ts

@@ -12,6 +12,11 @@ export type AgenticOwnersPathRule = {
    * no owners, so they never enroll a review.
    */
   readonly globalExclusion?: boolean;
+  /**
+   * Glob patterns relative to the directory containing `.agentic-owners`.
+   * Root-policy paths are relative to the repository root.
+   * Leading `../` segments may address sibling trees but cannot leave the repo.
+   */
   readonly paths: readonly string[];
   /**
    * Team slugs (or `org/team` handles) that own these paths. A policy may