rulesync 7.6.2 → 7.7.0

package/dist/cli/index.js

@@ -60,7 +60,7 @@ import {
   removeTempDirectory,
   stringifyFrontmatter,
   writeFileContent
-} from "../chunk-MG4OE47A.js";
+} from "../chunk-KDYNNWMK.js";
 
 // src/cli/index.ts
 import { Command } from "commander";
@@ -69,8 +69,8 @@ import { Command } from "commander";
 var ANNOUNCEMENT = "".trim();
 
 // src/lib/fetch.ts
-import { Semaphore } from "es-toolkit/promise";
 import { join } from "path";
+import { Semaphore } from "es-toolkit/promise";
 
 // src/lib/github-client.ts
 import { RequestError } from "@octokit/request-error";
@@ -1608,8 +1608,8 @@ async function initCommand() {
 }
 
 // src/lib/sources.ts
-import { Semaphore as Semaphore2 } from "es-toolkit/promise";
 import { join as join5, resolve, sep } from "path";
+import { Semaphore as Semaphore2 } from "es-toolkit/promise";
 
 // src/lib/sources-lock.ts
 import { createHash } from "crypto";
@@ -2040,6 +2040,10 @@ async function listCommands() {
     const commands = await Promise.all(
       mdFiles.map(async (file) => {
         try {
+          checkPathTraversal({
+            relativePath: file,
+            intendedRootDir: commandsDir
+          });
           const command = await RulesyncCommand.fromFile({
             relativeFilePath: file
           });
@@ -3795,7 +3799,7 @@ async function updateCommand(currentVersion, options) {
 }
 
 // src/cli/index.ts
-var getVersion = () => "7.6.2";
+var getVersion = () => "7.7.0";
 var main = async () => {
   const program = new Command();
   const version = getVersion();