What is the Neural Link?

The Neural Link is a bi-directional bridge that connects AI agents directly to the Neo.mjs runtime. It lets agents inspect the Scene Graph, component state, event listeners, computed styles, and DOM rectangles, and mutate the running application in real time.

Why is Neo.mjs called an Application Engine instead of a framework?

Neo.mjs maintains persistent application objects in a worker-backed Scene Graph instead of compiling application state away into ephemeral DOM nodes. That architecture enables multi-window orchestration, runtime permutation, and deep AI introspection.

What is Context Engineering?

Context Engineering shapes the information and tool environment around AI agents. Neo.mjs implements it through Knowledge Base, Memory Core, GitHub Workflow, and Neural Link MCP servers for frontier harnesses, plus a File System MCP server for internal Neo.ai.Agent local loops.

What is the Neo.mjs Agent OS?

The Neo.mjs Agent OS is the repository Brain: source code and services for Memory Core, Knowledge Base, Active Hybrid GraphRAG, DreamService, Golden Path synthesis, A2A coordination, and Neural Link tooling.

Frontmatter

id	9743
title	Enforce path traversal boundaries for autonomous filesystem reads (DreamService)
state	Closed
labels	enhancementai
assignees	tobiu
createdAt	Apr 6, 2026, 9:07 PM
updatedAt	Apr 6, 2026, 9:08 PM
githubUrl	https://github.com/neomjs/neo/issues/9743
author	tobiu
commentsCount	1
parentIssue	null
subIssues	[]
subIssuesCompleted	0
subIssuesTotal	0
blockedBy	[]
blocking	[]
closedAt	Apr 6, 2026, 9:08 PM

Enforce path traversal boundaries for autonomous filesystem reads (DreamService)

Closed v13.0.0/archive-v13-0-0-chunk-2 enhancementai

tobiu commented on Apr 6, 2026, 9:07 PM

Description

The ReAct loop in DreamService natively loads raw files based on autonomous agent payloads via fs.readFileSync. To prevent capabilities from triggering unintended out-of-bounds reads (path traversal attacks like ../../../etc/passwd via hallucination), we must enforce a strict resolution boundary.

Implementation Overview

Apply path.relative against the designated neoRootDir and the payload's targetPath.
Intercept and reject any path that attempts to resolve outside the directory scope.
Return a "Security Error" to the model loop for self-correction instead of failing silently.

tobiu added the enhancement label on Apr 6, 2026, 9:07 PM

tobiu added the ai label on Apr 6, 2026, 9:07 PM

tobiu referenced in commit a2694ce - "feat: Enforce path traversal boundaries for autonomous filesystem reads (#9743)" on Apr 6, 2026, 9:08 PM

tobiu assigned to @tobiu on Apr 6, 2026, 9:08 PM

tobiu Apr 6, 2026, 9:08 PM

Successfully added strict path traversal checks using path.relative to enforce boundary limits during autonomous filesystem reads. Verified and pushed to dev.

tobiu closed this issue on Apr 6, 2026, 9:08 PM