oy-cli 0.14.11

Focused coding agent integrations with repeatable audits, reviews, and one-finding fixes
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

import { lstatSync } from "node:fs"
import { isAbsolute, join, relative, resolve, sep } from "node:path"

export const safeWorkspacePath = (directory, ...parts) => {
  const root = resolve(directory)
  const target = resolve(root, ...parts)
  const scoped = relative(root, target)
  if (scoped === ".." || scoped.startsWith(`..${sep}`) || isAbsolute(scoped)) {
    throw new Error(`path escapes workspace: ${target}`)
  }

  let current = root
  for (const part of scoped.split(sep).filter(Boolean)) {
    current = join(current, part)
    try {
      if (lstatSync(current).isSymbolicLink()) {
        throw new Error(`refusing symlinked workspace path: ${current}`)
      }
    } catch (error) {
      if (error?.code === "ENOENT") break
      throw error
    }
  }
  return target
}