@remnic/core 9.3.583 → 9.3.585

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.3.583",
+  "version": "9.3.585",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",

package/src/projection/index.test.ts

@@ -159,6 +159,34 @@ test("generateContextTree rejects symlinked memory category roots", async () =>
   }
 });
 
+test("generateContextTree rejects symlinked memoryDir roots", async () => {
+  const root = await mkdtemp(path.join(os.tmpdir(), "remnic-projection-root-symlink-"));
+  try {
+    const outsideMemoryDir = path.join(root, "outside-memory");
+    const memoryDir = path.join(root, "memory");
+    const outputDir = path.join(root, "context-tree");
+    await writeFact(outsideMemoryDir);
+    await symlink(outsideMemoryDir, memoryDir, "dir");
+
+    await assert.rejects(
+      generateContextTree({
+        memoryDir,
+        outputDir,
+        categories: ["fact"],
+        includeEntities: false,
+        includeQuestions: false,
+      }),
+      /memoryDir must not be a symlink/,
+    );
+    await assert.rejects(
+      readFile(path.join(outputDir, "fact", "fact-1.md"), "utf-8"),
+      /ENOENT/,
+    );
+  } finally {
+    await rm(root, { recursive: true, force: true });
+  }
+});
+
 test("generateContextTree rejects symlinked output path components", async () => {
   const root = await mkdtemp(path.join(os.tmpdir(), "remnic-projection-output-symlink-"));
   try {

package/src/projection/index.ts

@@ -90,7 +90,7 @@ export async function generateContextTree(options: GenerateOptions): Promise<Gen
   const resolvedMemoryDir = path.resolve(memoryDir);
   const resolvedOutputDir = path.resolve(outputDir);
   const requestedCategories = validateProjectionCategories(filterCategories);
-  const realMemoryDir = fs.realpathSync(resolvedMemoryDir);
+  const realMemoryDir = assertSafeMemoryRoot(resolvedMemoryDir);
 
   // Ensure output directory exists
   assertNotSymlink(resolvedOutputDir, "context tree outputDir");
@@ -240,6 +240,17 @@ function assertNotSymlink(targetPath: string, label: string): void {
   }
 }
 
+function assertSafeMemoryRoot(targetPath: string): string {
+  const stat = fs.lstatSync(targetPath);
+  if (stat.isSymbolicLink()) {
+    throw new Error(`memoryDir must not be a symlink: ${targetPath}`);
+  }
+  if (!stat.isDirectory()) {
+    throw new Error(`memoryDir must be a directory: ${targetPath}`);
+  }
+  return fs.realpathSync(targetPath);
+}
+
 function assertSafeInputRoot(realMemoryDir: string, targetPath: string, label: string): void {
   const stat = fs.lstatSync(targetPath);
   if (stat.isSymbolicLink()) {