AIKIDO-2026-404435

TL;DR

The @intellectronica/ruler CLI generates coding-agent configuration files and writes them to output paths derived from a repository's .ruler configuration. Before the fix, configured output paths (output_path, output_path_instructions, output_path_config) were resolved with path.resolve without confirming they stayed inside the project root, and generated writes, backups, and reverts followed symlinks present at the target path. A repository configuration using ../ traversal, an absolute path, or a symlink at a default output location could redirect writes to files outside the project directory when the tool ran. The fix resolves real paths and rejects output targets that escape the project root or point through symlinks.