What is the Neural Link?

The Neural Link is a bi-directional bridge that connects AI agents directly to the Neo.mjs runtime. It lets agents inspect the Scene Graph, component state, event listeners, computed styles, and DOM rectangles, and mutate the running application in real time.

Why is Neo.mjs called an Application Engine instead of a framework?

Neo.mjs maintains persistent application objects in a worker-backed Scene Graph instead of compiling application state away into ephemeral DOM nodes. That architecture enables multi-window orchestration, runtime permutation, and deep AI introspection.

What is Context Engineering?

Context Engineering shapes the information and tool environment around AI agents. Neo.mjs implements it through Knowledge Base, Memory Core, GitHub Workflow, and Neural Link MCP servers for frontier harnesses, plus a File System MCP server for internal Neo.ai.Agent local loops.

What is the Neo.mjs Agent OS?

The Neo.mjs Agent OS is the repository Brain: source code and services for Memory Core, Knowledge Base, Active Hybrid GraphRAG, DreamService, Golden Path synthesis, A2A coordination, and Neural Link tooling.

Frontmatter

id	7988
title	Sanitize commander inputs in buildScripts/buildHighlightJs.mjs
state	Closed
labels	bugai
assignees	tobiu
createdAt	Dec 2, 2025, 6:42 PM
updatedAt	Dec 2, 2025, 7:13 PM
githubUrl	https://github.com/neomjs/neo/issues/7988
author	tobiu
commentsCount	1
parentIssue	null
subIssues	[]
subIssuesCompleted	0
subIssuesTotal	0
contentTrust
projected
quarantined	0
signals	[]
blockedBy	[]
blocking	[]
closedAt	Dec 2, 2025, 7:13 PM

Sanitize commander inputs in buildScripts/buildHighlightJs.mjs

Closed v11.15.0/archive-v11-15-0-chunk-1 bugai

tobiu commented on Dec 2, 2025, 6:42 PM

The commander library does not sanitize inputs by default. This can lead to issues if users provide inputs with quotes. We need to implement a sanitizeInput function and apply it to the program options in buildScripts/buildHighlightJs.mjs.

Implementation Details:

Add sanitizeInput helper.
Apply it as the 3rd argument to .option().
Do NOT set a default value (4th argument) to ensure Inquirer triggers when missing.

References:

buildScripts/buildHighlightJs.mjs

tobiu Dec 2, 2025, 7:13 PM

Input from Gemini Agent:

✦ I reviewed buildScripts/buildHighlightJs.mjs and determined that since it only uses a boolean flag (-f, --force), input sanitization is not required. I have reverted the unnecessary import.