@kody-ade/kody-engine 0.4.578 → 0.4.579
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/bin/kody.js +3 -2
- package/package.json +1 -1
package/dist/bin/kody.js
CHANGED
|
@@ -15,7 +15,7 @@ var init_package = __esm({
|
|
|
15
15
|
"package.json"() {
|
|
16
16
|
package_default = {
|
|
17
17
|
name: "@kody-ade/kody-engine",
|
|
18
|
-
version: "0.4.
|
|
18
|
+
version: "0.4.579",
|
|
19
19
|
description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
|
|
20
20
|
license: "MIT",
|
|
21
21
|
type: "module",
|
|
@@ -2269,7 +2269,8 @@ function parseDeliveryPathAllowlist(raw) {
|
|
|
2269
2269
|
const subtree = value.endsWith("/**");
|
|
2270
2270
|
const base = subtree ? value.slice(0, -3) : value;
|
|
2271
2271
|
const segments = base.split("/");
|
|
2272
|
-
|
|
2272
|
+
const trustedRepositoryDefinitions = base === ".kody-engine/definitions/loops";
|
|
2273
|
+
if (!base || base.startsWith("/") || base.startsWith(".") && !base.startsWith(".github/") && !trustedRepositoryDefinitions || base.includes("\\") || base.includes("..") || base.includes("*") || segments.some((segment) => !segment) || subtree && segments.length < 2 || value === ".github/**") {
|
|
2273
2274
|
throw new Error(`contract.json deliveryPathAllowlist contains an unsafe path: ${value}`);
|
|
2274
2275
|
}
|
|
2275
2276
|
}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@kody-ade/kody-engine",
|
|
3
|
-
"version": "0.4.
|
|
3
|
+
"version": "0.4.579",
|
|
4
4
|
"description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|