chromeflow 0.1.60 → 0.1.62

package/dist/tools/capture.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import { appendFileSync, readFileSync, writeFileSync } from "fs";
 import { tmpdir } from "os";
-import { join } from "path";
+import { join, resolve, relative, isAbsolute } from "path";
 const PAGE_STATE_FILE = join(tmpdir(), "chromeflow_page_state.json");
 function registerCaptureTools(server, bridge) {
   server.tool(
@@ -161,6 +161,21 @@ ${lines.join("\n")}` }] };
     },
     async ({ key, value, envPath }) => {
       try {
+        const cwd = process.cwd();
+        const resolved = isAbsolute(envPath) ? envPath : resolve(cwd, envPath);
+        const rel = relative(cwd, resolved);
+        if (rel.startsWith("..") || isAbsolute(rel)) {
+          throw new Error(
+            `Refusing to write .env outside the project directory. Target "${resolved}" is not under "${cwd}". If this is intentional, move the project to include the target path.`
+          );
+        }
+        const filename = resolved.split("/").pop() ?? "";
+        if (!/^\.env(\.[\w-]+)?$/.test(filename)) {
+          throw new Error(
+            `Refusing to write: "${filename}" doesn't look like an env file. Expected .env, .env.local, .env.<name>, etc.`
+          );
+        }
+        envPath = resolved;
         let existing = "";
         try {
           existing = readFileSync(envPath, "utf-8");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chromeflow",
-  "version": "0.1.60",
+  "version": "0.1.62",
   "description": "Browser guidance MCP server for Claude Code — highlights, clicks, fills, and captures from the web so you don't have to.",
   "type": "module",
   "bin": {