fix(core): prevent workspace deletion in cleanOutput method (Fixes #57) (#60)

Author: michaelbe812

packages/core/src/lib/base-generator.spec.ts

@@ -64,12 +64,12 @@ describe('BaseGenerator', () => {
       });
     });
 
-    it('should handle root directory paths', () => {
-      const relOutputPath = '/';
+    it('should handle valid nested paths', () => {
+      const relOutputPath = 'src/generated/api';
 
       generator.testCleanOutput(mockContext, relOutputPath);
 
-      expect(rmSync).toHaveBeenCalledWith('/workspace/', {
+      expect(rmSync).toHaveBeenCalledWith('/workspace/src/generated/api', {
         recursive: true,
         force: true,
       });
@@ -116,15 +116,44 @@ describe('BaseGenerator', () => {
       );
     });
 
-    it('should handle empty path', () => {
+    it('should throw error for empty path', () => {
       const relOutputPath = '';
 
-      generator.testCleanOutput(mockContext, relOutputPath);
+      expect(() => {
+        generator.testCleanOutput(mockContext, relOutputPath);
+      }).toThrow('Cannot clean empty or root output path for safety reasons');
 
-      expect(rmSync).toHaveBeenCalledWith('/workspace', {
-        recursive: true,
-        force: true,
-      });
+      expect(rmSync).not.toHaveBeenCalled();
+    });
+
+    it('should throw error for whitespace-only path', () => {
+      const relOutputPath = '   ';
+
+      expect(() => {
+        generator.testCleanOutput(mockContext, relOutputPath);
+      }).toThrow('Cannot clean empty or root output path for safety reasons');
+
+      expect(rmSync).not.toHaveBeenCalled();
+    });
+
+    it('should throw error for root path', () => {
+      const relOutputPath = '/';
+
+      expect(() => {
+        generator.testCleanOutput(mockContext, relOutputPath);
+      }).toThrow('Cannot clean empty or root output path for safety reasons');
+
+      expect(rmSync).not.toHaveBeenCalled();
+    });
+
+    it('should throw error for current directory path', () => {
+      const relOutputPath = '.';
+
+      expect(() => {
+        generator.testCleanOutput(mockContext, relOutputPath);
+      }).toThrow('Cannot clean empty or root output path for safety reasons');
+
+      expect(rmSync).not.toHaveBeenCalled();
     });
   });
 });

packages/core/src/lib/base-generator.ts

@@ -4,6 +4,11 @@ import { GeneratorContext } from './interfaces';
 
 export abstract class BaseGenerator {
   protected cleanOutput(ctx: GeneratorContext, relOutputPath: string) {
+    // Validate input path is not empty or dangerous
+    if (!relOutputPath || relOutputPath.trim() === '' || relOutputPath === '/' || relOutputPath === '.') {
+      throw new Error('Cannot clean empty or root output path for safety reasons');
+    }
+
     const full = join(ctx.root, relOutputPath);
     rmSync(full, { recursive: true, force: true });
   }