@nifrajs/cli 2.8.1 → 2.9.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nifrajs/cli",
-  "version": "2.8.1",
+  "version": "2.9.0",
   "description": "The nifra CLI - zero-config dev/build/start for a nifra app (`nifra dev`, `nifra build`, `nifra start`).",
   "keywords": [
     "bun",
@@ -41,14 +41,14 @@
     "access": "public"
   },
   "dependencies": {
-    "@nifrajs/client": "2.8.1",
-    "@nifrajs/core": "2.8.1",
-    "@nifrajs/mcp": "2.8.1",
-    "@nifrajs/runner": "2.8.1",
-    "@nifrajs/schema": "2.8.1",
-    "@nifrajs/testing": "2.8.1",
-    "@nifrajs/web": "2.8.1",
-    "create-nifra": "2.8.1"
+    "@nifrajs/client": "2.9.0",
+    "@nifrajs/core": "2.9.0",
+    "@nifrajs/mcp": "2.9.0",
+    "@nifrajs/runner": "2.9.0",
+    "@nifrajs/schema": "2.9.0",
+    "@nifrajs/testing": "2.9.0",
+    "@nifrajs/web": "2.9.0",
+    "create-nifra": "2.9.0"
   },
   "repository": {
     "type": "git",

package/src/cli.ts

@@ -148,7 +148,7 @@ Port: \`dev\` and \`start\` share the default ${DEFAULT_DEV_PORT}. Override with
 \`PORT\` env var (\`--port\` wins over \`PORT\`, which wins over the default).`
 
 // Kept in lockstep with packages/cli/package.json by check:publish's version-consistency gate.
-const CLI_VERSION = "2.8.1"
+const CLI_VERSION = "2.9.0"
 
 // A render adapter + nifra server are opaque to the CLI (it just forwards them); cast at the seam.
 const asAdapter = (v: unknown): RenderAdapter => v as RenderAdapter

package/src/mcp-http.ts

@@ -29,7 +29,7 @@ export { docsTools } from "./mcp-docs-tools.ts"
 export type { TypeEntry } from "./types-search.ts"
 
 // Kept in lockstep with packages/cli/package.json by check:publish's version-consistency gate.
-const VERSION = "2.8.1"
+const VERSION = "2.9.0"
 const SERVER_INFO = { name: "nifra-docs", version: VERSION }
 // Derive the GET/health tool list from the tools actually served, so the line can never drift from them.
 const docsHealth = (tools: McpTool[]): string =>

package/src/scaffold.ts

@@ -9,7 +9,7 @@
  * `nifra_example` for the body, rather than hand-writing an SFC we can't typecheck here.
  */
 
-import { mkdir, writeFile } from "node:fs/promises"
+import { lstat, mkdir, realpath, writeFile } from "node:fs/promises"
 import { dirname, resolve, sep } from "node:path"
 
 export type Framework = "react" | "preact" | "solid" | "vue" | "svelte" | "vanilla"
@@ -122,6 +122,37 @@ function resolveInsideCwd(cwd: string, relativeFile: string): string {
   return target
 }
 
+/** Lexical containment is not enough when an existing route directory is a symlink. Check every
+ * existing ancestor and its real path before scaffolding so an agent cannot redirect a write outside
+ * the selected project. The target itself is created with `wx`, so an existing target symlink is also
+ * never followed/overwritten. */
+async function assertNoSymlinkedAncestors(root: string, target: string): Promise<void> {
+  const rootPath = resolve(root)
+  const realRoot = await realpath(rootPath)
+  let current = dirname(target)
+  while (current !== rootPath) {
+    if (!current.startsWith(`${rootPath}${sep}`)) {
+      throw new Error(`refusing to write outside project root: ${target}`)
+    }
+    try {
+      if ((await lstat(current)).isSymbolicLink()) {
+        throw new Error(`refusing to write through symlinked directory: ${current}`)
+      }
+      const actual = await realpath(current)
+      if (actual !== realRoot && !actual.startsWith(`${realRoot}${sep}`)) {
+        throw new Error(`refusing to write outside project root through: ${current}`)
+      }
+    } catch (err) {
+      if (err && typeof err === "object" && (err as { code?: string }).code === "ENOENT") {
+        current = dirname(current)
+        continue
+      }
+      throw err
+    }
+    current = dirname(current)
+  }
+}
+
 /** Write a scaffolded route stub when the framework has a verified ready-to-write body. The write is
  * intentionally conservative: it refuses non-JSX stubs (where we only return contract guidance) and
  * uses `wx`, so an agent cannot overwrite user work by accident. */
@@ -139,7 +170,9 @@ export async function writeScaffoldRoute(
     }
   }
   const target = resolveInsideCwd(cwd, result.file)
+  await assertNoSymlinkedAncestors(cwd, target)
   await mkdir(dirname(target), { recursive: true })
+  await assertNoSymlinkedAncestors(cwd, target)
   try {
     await writeFile(target, result.content, { flag: "wx" })
   } catch (err) {