specrails-core 1.7.1 → 1.7.2

package/bin/specrails-core.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-const { execSync } = require("child_process");
+const { spawnSync } = require("child_process");
 const { resolve } = require("path");
 
 const ROOT = resolve(__dirname, "..");
@@ -33,11 +33,28 @@ if (!script) {
   process.exit(1);
 }
 
-const forwarded = args.slice(1).join(" ");
-const cmd = `bash "${resolve(ROOT, script)}" ${forwarded}`.trim();
+// Allowlisted flags per subcommand (defense-in-depth — spawnSync already
+// prevents shell injection, but an explicit allowlist rejects unknown flags
+// before the shell script is ever invoked).
+const ALLOWED_FLAGS = {
+  init: ["--root-dir", "--yes", "-y"],
+  update: ["--only"],
+  doctor: [],
+};
+
+const subargs = args.slice(1);
+const allowed = ALLOWED_FLAGS[subcommand] ?? [];
 
-try {
-  execSync(cmd, { stdio: "inherit", cwd: process.cwd() });
-} catch (err) {
-  process.exit(err.status || 1);
+for (const arg of subargs) {
+  if (arg.startsWith("-") && !allowed.includes(arg)) {
+    console.error(`Unknown flag: ${arg}`);
+    process.exit(1);
+  }
 }
+
+const result = spawnSync("bash", [resolve(ROOT, script), ...subargs], {
+  stdio: "inherit",
+  cwd: process.cwd(),
+});
+
+process.exit(result.status ?? (result.error ? 1 : 0));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "specrails-core",
-  "version": "1.7.1",
+  "version": "1.7.2",
   "description": "AI agent workflow system for Claude Code — installs 12 specialized agents, orchestration commands, and persona-driven product discovery into any repository",
   "bin": {
     "specrails-core": "bin/specrails-core.js"

package/update.sh

@@ -390,7 +390,7 @@ do_migrate_sr_prefix() {
         if [[ -f "$src" ]] && [[ ! -f "$dst" ]]; then
             mv "$src" "$dst"
             info "Renamed: agents/${agent}.md → agents/sr-${agent}.md"
-            ((migrated_agents++))
+            migrated_agents=$(( migrated_agents + 1 ))
         fi
     done
 
@@ -408,7 +408,7 @@ do_migrate_sr_prefix() {
             if [[ ! -f "$persona_dst" ]]; then
                 mv "$persona_file" "$persona_dst"
                 info "Renamed: personas/${persona_basename} → personas/sr-${persona_basename}"
-                ((migrated_agents++))
+                migrated_agents=$(( migrated_agents + 1 ))
             fi
         done < <(find "$personas_dir" -maxdepth 1 -name "*.md" -not -name "sr-*.md" -print0 2>/dev/null)
     fi
@@ -433,7 +433,7 @@ do_migrate_sr_prefix() {
             if [[ -f "$src" ]] && [[ ! -f "$dst" ]]; then
                 mv "$src" "$dst"
                 info "Moved: commands/${cmd}.md → commands/sr/${cmd}.md"
-                ((migrated_commands++))
+                migrated_commands=$(( migrated_commands + 1 ))
             fi
         done
     fi
@@ -446,7 +446,7 @@ do_migrate_sr_prefix() {
             if [[ -d "$src" ]] && [[ ! -d "$dst" ]]; then
                 mv "$src" "$dst"
                 info "Renamed: agent-memory/${agent}/ → agent-memory/sr-${agent}/"
-                ((migrated_memory++))
+                migrated_memory=$(( migrated_memory + 1 ))
             fi
         done
     fi
@@ -501,7 +501,7 @@ except Exception:
     if _file_changed "$SCRIPT_DIR/commands/setup.md" "commands/setup.md"; then
         cp "$SCRIPT_DIR/commands/setup.md" "$REPO_ROOT/.claude/commands/setup.md"
         ok "Updated /setup command"
-        ((updated_count++))
+        updated_count=$(( updated_count + 1 ))
     fi
 
     # Update setup templates (selective — only copy changed/new files)
@@ -526,10 +526,10 @@ except Exception:
 " "$manifest_file" "$relpath" 2>/dev/null || echo "")"
             if [[ -z "$manifest_checksum" ]]; then
                 info "New: $relpath"
-                ((added_count++))
+                added_count=$(( added_count + 1 ))
             else
                 info "Changed: $relpath"
-                ((updated_count++))
+                updated_count=$(( updated_count + 1 ))
             fi
         fi
     done < <(find "$SCRIPT_DIR/templates" -type f -not -path '*/node_modules/*' -not -name 'package-lock.json' -print0 | sort -z)
@@ -556,10 +556,10 @@ except Exception:
 " "$manifest_file" "$relpath" 2>/dev/null || echo "")"
                 if [[ -z "$manifest_checksum" ]]; then
                     info "New: $relpath"
-                    ((added_count++))
+                    added_count=$(( added_count + 1 ))
                 else
                     info "Changed: $relpath"
-                    ((updated_count++))
+                    updated_count=$(( updated_count + 1 ))
                 fi
             fi
         done < <(find "$SCRIPT_DIR/prompts" -type f -print0 | sort -z)
@@ -587,10 +587,10 @@ except Exception:
 " "$manifest_file" "$relpath" 2>/dev/null || echo "")"
                 if [[ -z "$manifest_checksum" ]]; then
                     info "New: $relpath"
-                    ((added_count++))
+                    added_count=$(( added_count + 1 ))
                 else
                     info "Changed: $relpath"
-                    ((updated_count++))
+                    updated_count=$(( updated_count + 1 ))
                 fi
             fi
         done < <(find "$SCRIPT_DIR/.claude/skills" -type f -print0 | sort -z)