@_davideast/stitch-mcp 0.5.2 → 0.5.3

package/dist/commands/doctor/command.js

@@ -57,7 +57,7 @@ var command = {
   action: async (_args, options) => {
     try {
       const parsedOptions = DoctorOptionsSchema.parse(options);
-      const { DoctorHandler } = await import("../../chunk-d0ffvq20.js");
+      const { DoctorHandler } = await import("../../chunk-9nzbvp6r.js");
       const handler = new DoctorHandler;
       const result = await handler.execute({
         verbose: parsedOptions.verbose,

package/dist/commands/doctor/steps/AdcProjectCheckStep.d.ts

@@ -0,0 +1,8 @@
+import { type CommandStep, type StepResult } from '../../../framework/CommandStep.js';
+import { type DoctorContext } from '../context.js';
+export declare class AdcProjectCheckStep implements CommandStep<DoctorContext> {
+    id: string;
+    name: string;
+    shouldRun(context: DoctorContext): Promise<boolean>;
+    run(context: DoctorContext): Promise<StepResult>;
+}

package/dist/commands/init/command.js

@@ -69,7 +69,7 @@ var command = {
   action: async (_args, options) => {
     try {
       const parsedOptions = InitOptionsSchema.parse(options);
-      const { InitHandler } = await import("../../chunk-s2d39pkr.js");
+      const { InitHandler } = await import("../../chunk-8nv4wwv0.js");
       const handler = new InitHandler;
       const result = await handler.execute({
         local: parsedOptions.local,

package/dist/commands/logout/command.js

@@ -53,7 +53,7 @@ var command = {
   action: async (_args, options) => {
     try {
       const parsedOptions = LogoutOptionsSchema.parse(options);
-      const { LogoutHandler } = await import("../../chunk-yej34vkc.js");
+      const { LogoutHandler } = await import("../../chunk-5jjt7tgw.js");
       const handler = new LogoutHandler;
       const result = await handler.execute({
         force: parsedOptions.force,

package/dist/commands/proxy/command.js

@@ -29,7 +29,7 @@ var command = {
   action: async (_args, options) => {
     try {
       const parsedOptions = ProxyOptionsSchema.parse(options);
-      const { ProxyCommandHandler } = await import("../../chunk-nnep362g.js");
+      const { ProxyCommandHandler } = await import("../../chunk-6wvst7z8.js");
       const handler = new ProxyCommandHandler;
       const result = await handler.execute({
         port: parsedOptions.port,

package/dist/commands/screens/command.js

@@ -26,8 +26,8 @@ var command = {
     try {
       const parsedOptions = ScreensOptionsSchema.parse(options);
       const { ScreensHandler } = await import("../../chunk-mbt1wx7n.js");
-      const { ScreensView } = await import("../../chunk-9g1t32qk.js");
-      const { stitch } = await import("../../chunk-sv2nt87j.js");
+      const { ScreensView } = await import("../../chunk-5t2h8z2n.js");
+      const { stitch } = await import("../../chunk-pz31v3ma.js");
       const { render } = await import("../../chunk-t092ehvp.js");
       const React = await import("../../chunk-edp6faw2.js");
       const handler = new ScreensHandler(stitch);

package/dist/commands/serve/command.js

@@ -51,7 +51,7 @@ var command = {
   action: async (_args, options) => {
     try {
       const parsedOptions = ServeOptionsSchema.parse(options);
-      const { stitch } = await import("../../chunk-sv2nt87j.js");
+      const { stitch } = await import("../../chunk-pz31v3ma.js");
       if (parsedOptions.listScreens) {
         const input = ListScreensInputSchema.safeParse({ projectId: parsedOptions.project });
         if (!input.success) {
@@ -69,7 +69,7 @@ var command = {
           console.log(JSON.stringify({ success: false, error: { code: "INVALID_INPUT", message: input.error.issues[0]?.message } }, null, 2));
           process.exit(1);
         }
-        const { JsonServerHandler } = await import("../../chunk-t2razx5k.js");
+        const { JsonServerHandler } = await import("../../chunk-efd0rm6g.js");
         const result2 = await new JsonServerHandler(stitch).execute(input.data);
         console.log(JSON.stringify(result2, null, 2));
         if (!result2.success)
@@ -78,7 +78,7 @@ var command = {
         return;
       }
       const { ServeHandler } = await import("../../chunk-w8075wyx.js");
-      const { ServeView } = await import("../../chunk-m4fp3pqc.js");
+      const { ServeView } = await import("../../chunk-wq60thjn.js");
       const { render } = await import("../../chunk-t092ehvp.js");
       const React = await import("../../chunk-edp6faw2.js");
       const handler = new ServeHandler(stitch);

package/dist/commands/site/command.js

@@ -35,7 +35,7 @@ var command = {
   action: async (_args, options) => {
     try {
       const parsedOptions = SiteOptionsSchema.parse(options);
-      const { SiteCommandHandler } = await import("../../chunk-4zqw9exz.js");
+      const { SiteCommandHandler } = await import("../../chunk-ywax1akt.js");
       const handler = new SiteCommandHandler;
       await handler.execute({
         projectId: parsedOptions.project,

package/dist/commands/snapshot/command.js

@@ -34,7 +34,7 @@ var command = {
   action: async (_args, options) => {
     try {
       const parsedOptions = SnapshotInputSchema.parse(options);
-      const { SnapshotHandler } = await import("../../chunk-f89ve6pt.js");
+      const { SnapshotHandler } = await import("../../chunk-8mm08arm.js");
       const handler = new SnapshotHandler;
       const result = await handler.execute({
         command: parsedOptions.command,

package/dist/commands/tool/command.js

@@ -34,7 +34,7 @@ var command = {
   action: async (toolName, options) => {
     try {
       const parsedOptions = ToolOptionsSchema.parse(options);
-      const { ToolCommandHandler } = await import("../../chunk-q8cr9t2z.js");
+      const { ToolCommandHandler } = await import("../../chunk-a0gmbh8e.js");
       const handler = new ToolCommandHandler;
       const result = await handler.execute({
         toolName,

package/dist/commands/view/command.js

@@ -35,7 +35,7 @@ var command = {
   action: async (_args, options) => {
     try {
       const parsedOptions = ViewOptionsSchema.parse(options);
-      const { ViewCommandHandler } = await import("../../chunk-1fbzpreg.js");
+      const { ViewCommandHandler } = await import("../../chunk-fmewhfh3.js");
       const handler = new ViewCommandHandler;
       await handler.execute(parsedOptions);
     } catch (error) {

package/dist/index.js

@@ -2,16 +2,16 @@ import {
   InitHandler,
   McpConfigHandler,
   ProjectHandler
-} from "./chunk-etcps0m5.js";
+} from "./chunk-yjnj35q8.js";
 import {
   DoctorHandler
-} from "./chunk-aa5ptn4s.js";
+} from "./chunk-5zy3et1m.js";
 import {
   StitchHandler
-} from "./chunk-py8fhw0k.js";
+} from "./chunk-psmw9zpa.js";
 import {
   GcloudHandler
-} from "./chunk-jyem6j6k.js";
+} from "./chunk-zakq9pc0.js";
 import"./chunk-nq68kghz.js";
 import"./chunk-q6sv0243.js";
 import"./chunk-f2hq6bfv.js";

package/dist/lib/server/AssetGateway.d.ts

@@ -1,6 +1,18 @@
 import { Readable } from 'stream';
 export declare class AssetGateway {
     private cacheDir;
+    /**
+     * Allowlist of hostname patterns for asset fetching.
+     * Only HTTPS URLs matching these patterns are permitted.
+     * Expand as needed for additional CDNs used in Stitch designs.
+     */
+    private static ALLOWED_HOST_PATTERNS;
+    /**
+     * Validates that a URL is safe to fetch:
+     * - Must be HTTPS
+     * - Hostname must match the allowlist
+     */
+    static validateAssetUrl(url: string): boolean;
     constructor(projectRoot?: string);
     init(): Promise<void>;
     private getHash;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@_davideast/stitch-mcp",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "description": "Stitch MCP CLI helper. Automates Google Cloud authentication. Generates MCP config for your client. Sets up a proxy server.",
   "type": "module",
   "publishConfig": {