@remnic/core 9.3.619 → 9.3.621

package/dist/transfer/types.d.ts

@@ -313,13 +313,13 @@ declare const CapsuleBlockSchema: z.ZodObject<{
         peerProfiles: boolean;
     }>;
 }, "strip", z.ZodTypeAny, {
+    schemaVersion: string;
     includes: {
         procedural: boolean;
         taxonomy: boolean;
         identityAnchors: boolean;
         peerProfiles: boolean;
     };
-    schemaVersion: string;
     id: string;
     description: string;
     version: string;
@@ -334,13 +334,13 @@ declare const CapsuleBlockSchema: z.ZodObject<{
         directAnswerEnabled: boolean;
     };
 }, {
+    schemaVersion: string;
     includes: {
         procedural: boolean;
         taxonomy: boolean;
         identityAnchors: boolean;
         peerProfiles: boolean;
     };
-    schemaVersion: string;
     id: string;
     description: string;
     version: string;
@@ -464,13 +464,13 @@ declare const ExportManifestV2Schema: z.ZodObject<{
             peerProfiles: boolean;
         }>;
     }, "strip", z.ZodTypeAny, {
+        schemaVersion: string;
         includes: {
             procedural: boolean;
             taxonomy: boolean;
             identityAnchors: boolean;
             peerProfiles: boolean;
         };
-        schemaVersion: string;
         id: string;
         description: string;
         version: string;
@@ -485,13 +485,13 @@ declare const ExportManifestV2Schema: z.ZodObject<{
             directAnswerEnabled: boolean;
         };
     }, {
+        schemaVersion: string;
         includes: {
             procedural: boolean;
             taxonomy: boolean;
             identityAnchors: boolean;
             peerProfiles: boolean;
         };
-        schemaVersion: string;
         id: string;
         description: string;
         version: string;
@@ -518,13 +518,13 @@ declare const ExportManifestV2Schema: z.ZodObject<{
     pluginVersion: string;
     includesTranscripts: boolean;
     capsule: {
+        schemaVersion: string;
         includes: {
             procedural: boolean;
             taxonomy: boolean;
             identityAnchors: boolean;
             peerProfiles: boolean;
         };
-        schemaVersion: string;
         id: string;
         description: string;
         version: string;
@@ -551,13 +551,13 @@ declare const ExportManifestV2Schema: z.ZodObject<{
     pluginVersion: string;
     includesTranscripts: boolean;
     capsule: {
+        schemaVersion: string;
         includes: {
             procedural: boolean;
             taxonomy: boolean;
             identityAnchors: boolean;
             peerProfiles: boolean;
         };
-        schemaVersion: string;
         id: string;
         description: string;
         version: string;
@@ -683,13 +683,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
                 peerProfiles: boolean;
             }>;
         }, "strip", z.ZodTypeAny, {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             description: string;
             version: string;
@@ -704,13 +704,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
                 directAnswerEnabled: boolean;
             };
         }, {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             description: string;
             version: string;
@@ -737,13 +737,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
         pluginVersion: string;
         includesTranscripts: boolean;
         capsule: {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             description: string;
             version: string;
@@ -770,13 +770,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
         pluginVersion: string;
         includesTranscripts: boolean;
         capsule: {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             description: string;
             version: string;
@@ -815,13 +815,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
         pluginVersion: string;
         includesTranscripts: boolean;
         capsule: {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             description: string;
             version: string;
@@ -854,13 +854,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
         pluginVersion: string;
         includesTranscripts: boolean;
         capsule: {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             description: string;
             version: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.3.619",
+  "version": "9.3.621",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",

package/src/config.ts

@@ -2537,6 +2537,11 @@ export function parseConfig(raw: unknown): PluginConfig {
 
     // v3.0 namespaces (default off)
     namespacesEnabled: cfg.namespacesEnabled === true,
+    // NOTE: namespace identifiers are intentionally NOT sanitized here — the
+    // codebase rejects unsafe namespaces at the point of use (see
+    // codex-materialize-runner and NamespaceStorageRouter / resolveNamespaceDir),
+    // so a "../x" value is surfaced as an explicit error rather than silently
+    // rewritten. Containment is enforced at the filesystem sinks.
     defaultNamespace:
       typeof cfg.defaultNamespace === "string" && cfg.defaultNamespace.length > 0 ? cfg.defaultNamespace : "default",
     sharedNamespace:

package/src/namespaces/storage.ts

@@ -32,6 +32,28 @@ async function hasStoredEntries(p: string): Promise<boolean> {
   }
 }
 
+// Build a per-namespace directory under `<memoryDir>/namespaces` and assert the
+// resolved path stays inside that base. Namespace identifiers can originate from
+// operator config (config.defaultNamespace) and request-derived routing, so this
+// containment check prevents directory traversal (CodeQL js/path-injection).
+// For safe segments this returns exactly `path.join(base, segment)`, so there is
+// no behavioral change for valid namespaces.
+function resolveNamespaceDir(memoryDir: string, segment: string): string {
+  // Mirror isSafeRouteNamespace's separator/parent-ref rejection (without its
+  // 64-char cap, so identity tokens still pass). Rejecting separators and ".."
+  // up front keeps the value a single contained child of <memoryDir>/namespaces.
+  if (
+    segment.length === 0 ||
+    segment.includes("/") ||
+    segment.includes("\\") ||
+    segment.includes("..") ||
+    path.isAbsolute(segment)
+  ) {
+    throw new Error(`unsafe namespace path segment: ${segment}`);
+  }
+  return path.join(memoryDir, "namespaces", segment);
+}
+
 const LEGACY_NAMESPACE_CONTENT_CHILDREN = [
   ...ALL_CATEGORY_DIRS,
   "entities",
@@ -94,10 +116,9 @@ export class NamespaceStorageRouter {
       return this.defaultNsRootResolved;
     }
 
-    const legacyNsDir = path.join(this.config.memoryDir, "namespaces", this.config.defaultNamespace);
-    const tokenizedNsDir = path.join(
+    const legacyNsDir = resolveNamespaceDir(this.config.memoryDir, this.config.defaultNamespace);
+    const tokenizedNsDir = resolveNamespaceDir(
       this.config.memoryDir,
-      "namespaces",
       namespaceIdentityToken(this.config.defaultNamespace),
     );
     const tokenizedHasData =
@@ -118,8 +139,8 @@ export class NamespaceStorageRouter {
     if (namespace === this.config.defaultNamespace) {
       return this.defaultNsRootResolved ?? this.config.memoryDir;
     }
-    const legacyRoot = path.join(this.config.memoryDir, "namespaces", namespace);
-    const tokenizedRoot = path.join(this.config.memoryDir, "namespaces", namespaceIdentityToken(namespace));
+    const legacyRoot = resolveNamespaceDir(this.config.memoryDir, namespace);
+    const tokenizedRoot = resolveNamespaceDir(this.config.memoryDir, namespaceIdentityToken(namespace));
     if ((await exists(tokenizedRoot)) && (await hasAnyNamespaceStorageMarker(tokenizedRoot, { includeRuntimeState: true }))) {
       return tokenizedRoot;
     }
@@ -131,6 +152,10 @@ export class NamespaceStorageRouter {
     if (ns !== this.config.defaultNamespace && !isSafeRouteNamespace(ns)) {
       throw new Error(`unsafe namespace: ${ns}`);
     }
+    // Even when the default namespace is exempt from the check above, every
+    // on-disk path is built through resolveNamespaceDir(), which rejects
+    // traversal segments — so an unsafe configured default still cannot escape
+    // <memoryDir>/namespaces (CodeQL js/path-injection).
 
     let root: string;
     if (ns === this.config.defaultNamespace) {

package/src/objective-state.ts

@@ -86,6 +86,20 @@ function validateMetadata(raw: unknown): Record<string, string> | undefined {
   return validateStringRecord(raw, "metadata");
 }
 
+// Assert that a built path stays inside the expected base directory before it is
+// used in a filesystem write. snapshotId/recordedAt are already validated by
+// validateObjectiveStateSnapshot, so for valid data this is a defense-in-depth
+// barrier (and makes the containment provable to CodeQL js/path-injection).
+function assertWithinDir(baseDir: string, candidate: string): string {
+  const resolvedBase = path.resolve(baseDir);
+  const resolved = path.resolve(candidate);
+  const rel = path.relative(resolvedBase, resolved);
+  if (rel === ".." || rel.startsWith(`..${path.sep}`) || path.isAbsolute(rel)) {
+    throw new Error("objective-state path escapes the snapshots directory");
+  }
+  return resolved;
+}
+
 export function resolveObjectiveStateStoreDir(memoryDir: string, overrideDir?: string): string {
   if (typeof overrideDir === "string" && overrideDir.trim().length > 0) {
     return overrideDir.trim();
@@ -163,8 +177,9 @@ export async function recordObjectiveStateSnapshot(options: {
   const rootDir = resolveObjectiveStateStoreDir(options.memoryDir, options.objectiveStateStoreDir);
   const validated = validateObjectiveStateSnapshot(options.snapshot);
   const day = recordStoreDay(validated.recordedAt);
-  const snapshotsDir = path.join(rootDir, "snapshots", day);
-  const filePath = path.join(snapshotsDir, `${validated.snapshotId}.json`);
+  const snapshotsRoot = path.join(rootDir, "snapshots");
+  const snapshotsDir = assertWithinDir(snapshotsRoot, path.join(snapshotsRoot, day));
+  const filePath = assertWithinDir(snapshotsDir, path.join(snapshotsDir, `${validated.snapshotId}.json`));
   await mkdir(snapshotsDir, { recursive: true });
   await writeFile(filePath, JSON.stringify(validated, null, 2), "utf8");
   return filePath;