{"record":{"id":"a848d75cfad5113c","repo":"github/spec-kit","slug":"shared-infrastructure-directory-escapes-project-ro","errorCode":null,"errorMessage":"Shared infrastructure directory escapes project root: {label}","messagePattern":"Shared infrastructure directory escapes project root: (.+?)","errorType":"exception","errorClass":"ValueError","httpStatus":null,"severity":"error","filePath":"src/specify_cli/shared_infra.py","lineNumber":233,"sourceCode":"def _validate_safe_shared_directory(project_path: Path, directory: Path) -> None:\n    \"\"\"Validate existing directory parents while allowing missing directories.\"\"\"\n    root = project_path.resolve()\n    rel = _shared_relative_path(project_path, directory)\n    current = project_path\n\n    for part in rel.parts:\n        current = current / part\n        label = _shared_destination_label(project_path, current)\n        if current.is_symlink():\n            raise SymlinkedSharedPathError(f\"Refusing to use symlinked shared infrastructure directory: {label}\")\n        if not current.exists():\n            continue\n        if not current.is_dir():\n            raise ValueError(f\"Shared infrastructure directory path is not a directory: {label}\")\n        try:\n            current.resolve().relative_to(root)\n        except (OSError, ValueError):\n            raise ValueError(f\"Shared infrastructure directory escapes project root: {label}\") from None\n\n\ndef _ensure_safe_shared_destination(\n    project_path: Path,\n    dest: Path,\n    *,\n    parent_must_exist: bool = True,\n) -> None:\n    \"\"\"Refuse shared infra writes that would escape or follow symlinks.\"\"\"\n    root = project_path.resolve()\n    _shared_relative_path(project_path, dest)\n    if parent_must_exist:\n        _ensure_safe_shared_directory(project_path, dest.parent, create=False)\n    else:\n        _validate_safe_shared_directory(project_path, dest.parent)\n    label = _shared_destination_label(project_path, dest)\n    if dest.is_symlink():\n        raise SymlinkedSharedPathError(f\"Refusing to overwrite symlinked shared infrastructure path: {label}\")","sourceCodeStart":215,"sourceCodeEnd":251,"githubUrl":"https://github.com/github/spec-kit/blob/bf88c9f9a82fa370c7a7257aa2b3cf10b457b65c/src/specify_cli/shared_infra.py#L215-L251","documentation":"Error \"Shared infrastructure directory escapes project root: {label}\" thrown in github/spec-kit.","triggerScenarios":"Thrown at src/specify_cli/shared_infra.py:233 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Keep the shared infrastructure directory within the project root."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"bf88c9f9a82fa370c7a7257aa2b3cf10b457b65c","analyzedAt":"2026-08-14T19:43:37.150Z","schemaVersion":2},"datasetVersion":"2026-08-15T17:31:12.345Z"}