@wrongstack/sdd 0.308.7 → 0.309.1

package/dist/index.js

@@ -935,8 +935,26 @@ var TaskGraphStore = class {
   async deleteGraph(id) {
     await this.delete(id);
   }
+  /**
+   * Resolve a graph id to its file, refusing anything that escapes `baseDir`.
+   *
+   * `id` arrives straight from a WebSocket payload (`specs.taskStatus` casts it
+   * with no validation), and this used to be a bare `path.join` — so
+   * `../../../Users/me/secret` resolved outside the store and `load()` returned
+   * its contents to the caller. Mirrors the containment `kanban/storage.ts`
+   * already applies to board ids.
+   */
   filePath(id) {
-    return path2.join(this.baseDir, `${id}.json`);
+    if (typeof id !== "string" || id.length === 0 || id.length > 200 || /[\0]/.test(id)) {
+      throw new Error(`Invalid task-graph id: ${JSON.stringify(id)}`);
+    }
+    const dir = path2.resolve(this.baseDir);
+    const resolved = path2.resolve(dir, `${id}.json`);
+    const rel = path2.relative(dir, resolved);
+    if (rel.startsWith("..") || path2.isAbsolute(rel) || rel.includes(path2.sep)) {
+      throw new Error(`Invalid task-graph id: ${JSON.stringify(id)}`);
+    }
+    return resolved;
   }
   async readIndex() {
     try {
@@ -5479,7 +5497,7 @@ function makeCommandVerifier(options = {}) {
       return { ok: false, reason: `verification command is malformed: ${rawCommand}` };
     }
     const [executable, ...args] = argv;
-    return await new Promise((resolve) => {
+    return await new Promise((resolve2) => {
       const child = spawn(executable, args, {
         cwd: info.cwd,
         shell: false,
@@ -5490,18 +5508,18 @@ function makeCommandVerifier(options = {}) {
       const timer = setTimeout(() => {
         timedOut = true;
         child.kill();
-        resolve({ ok: false, reason: `verification timed out: ${rawCommand}` });
+        resolve2({ ok: false, reason: `verification timed out: ${rawCommand}` });
       }, timeoutMs);
       child.on("exit", (code) => {
         clearTimeout(timer);
         if (timedOut) return;
-        resolve(
+        resolve2(
           code === 0 ? { ok: true } : { ok: false, reason: `verification failed (exit ${code}): ${rawCommand}` }
         );
       });
       child.on("error", (err) => {
         clearTimeout(timer);
-        resolve({ ok: false, reason: `verification spawn error: ${String(err)}` });
+        resolve2({ ok: false, reason: `verification spawn error: ${String(err)}` });
       });
     });
   };
@@ -5662,7 +5680,7 @@ async function decomposeNonAtomicTasks(opts) {
 
 // src/conflict-resolver.ts
 import { readFile as readFile6, writeFile } from "node:fs/promises";
-import { isAbsolute, join as join6 } from "node:path";
+import { isAbsolute as isAbsolute2, join as join6 } from "node:path";
 import { readBundledInstructionText as readBundledInstructionText2, renderInstructionTemplate as renderInstructionTemplate2 } from "@wrongstack/core/utils";
 var defaultFileIO = {
   read: (path6) => readFile6(path6, "utf8"),
@@ -5711,7 +5729,7 @@ function makePreferSideConflictResolver(side, io = defaultFileIO) {
   return async function conflictResolver(info) {
     if (info.conflictFiles.length === 0) return false;
     for (const rel of info.conflictFiles) {
-      const abs = isAbsolute(rel) ? rel : join6(info.cwd, rel);
+      const abs = isAbsolute2(rel) ? rel : join6(info.cwd, rel);
       let content;
       try {
         content = await io.read(abs);
@@ -5745,7 +5763,7 @@ function makeLlmConflictResolver(opts) {
   return async function conflictResolver(info) {
     if (info.conflictFiles.length === 0) return false;
     for (const rel of info.conflictFiles) {
-      const abs = isAbsolute(rel) ? rel : join6(info.cwd, rel);
+      const abs = isAbsolute2(rel) ? rel : join6(info.cwd, rel);
       let content;
       try {
         content = await io.read(abs);

package/dist/task-graph-store.d.ts

@@ -35,6 +35,15 @@ export declare class TaskGraphStore implements TaskStore {
         updatedAt: number;
     }>>;
     deleteGraph(id: string): Promise<void>;
+    /**
+     * Resolve a graph id to its file, refusing anything that escapes `baseDir`.
+     *
+     * `id` arrives straight from a WebSocket payload (`specs.taskStatus` casts it
+     * with no validation), and this used to be a bare `path.join` — so
+     * `../../../Users/me/secret` resolved outside the store and `load()` returned
+     * its contents to the caller. Mirrors the containment `kanban/storage.ts`
+     * already applies to board ids.
+     */
     private filePath;
     private readIndex;
     private updateIndex;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/sdd",
-  "version": "0.308.7",
+  "version": "0.309.1",
   "license": "MIT",
   "description": "WrongStack Spec-Driven Development engine — standalone package extracted from @wrongstack/core. Task graph generation, tracking, execution, lifecycle management, and AI-driven spec building for SDD workflows.",
   "repository": {
@@ -27,9 +27,9 @@
     "!dist/**/*.map"
   ],
   "dependencies": {
-    "@wrongstack/kanban": "0.308.7",
-    "@wrongstack/requirement-intake": "0.308.7",
-    "@wrongstack/core": "0.308.7"
+    "@wrongstack/requirement-intake": "0.309.1",
+    "@wrongstack/core": "0.309.1",
+    "@wrongstack/kanban": "0.309.1"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",