@ankimcp/anki-mcp-server 0.15.0 → 0.16.0

package/dist/mcp/utils/media-validation.utils.js

@@ -0,0 +1,208 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MediaUrlInvalidError = exports.MediaUrlSchemeError = exports.MediaUrlBlockedError = exports.MediaImportDirError = exports.MediaFileTypeError = void 0;
+exports.validateMediaFilePath = validateMediaFilePath;
+exports.validateMediaUrl = validateMediaUrl;
+exports.sanitizeMediaFilename = sanitizeMediaFilename;
+exports.getMediaFilePathConfigFromEnv = getMediaFilePathConfigFromEnv;
+exports.getMediaUrlConfigFromEnv = getMediaUrlConfigFromEnv;
+const path = __importStar(require("node:path"));
+const dns = __importStar(require("node:dns"));
+const mime_1 = __importDefault(require("mime"));
+const ipaddr = __importStar(require("ipaddr.js"));
+class MediaFileTypeError extends Error {
+    constructor() {
+        super("File type not allowed. Only media files (images, audio, video) are accepted. " +
+            "To allow additional file types, set the MEDIA_ALLOWED_TYPES environment variable.");
+        this.name = "MediaFileTypeError";
+    }
+}
+exports.MediaFileTypeError = MediaFileTypeError;
+class MediaImportDirError extends Error {
+    constructor(configuredDir) {
+        super(`File path is outside the allowed import directory (${configuredDir}). ` +
+            "Update MEDIA_IMPORT_DIR to change the allowed directory.");
+        this.name = "MediaImportDirError";
+    }
+}
+exports.MediaImportDirError = MediaImportDirError;
+class MediaUrlBlockedError extends Error {
+    constructor() {
+        super("URL blocked: requests to private/internal networks are not allowed. " +
+            "To allow specific hosts, set the MEDIA_ALLOWED_HOSTS environment variable.");
+        this.name = "MediaUrlBlockedError";
+    }
+}
+exports.MediaUrlBlockedError = MediaUrlBlockedError;
+class MediaUrlSchemeError extends Error {
+    constructor(scheme) {
+        super(`URL scheme "${scheme}" is not allowed. Only http: and https: URLs are accepted.`);
+        this.name = "MediaUrlSchemeError";
+    }
+}
+exports.MediaUrlSchemeError = MediaUrlSchemeError;
+class MediaUrlInvalidError extends Error {
+    constructor() {
+        super("Invalid URL provided.");
+        this.name = "MediaUrlInvalidError";
+    }
+}
+exports.MediaUrlInvalidError = MediaUrlInvalidError;
+const DEFAULT_ALLOWED_PREFIXES = ["image/", "audio/", "video/"];
+const BLOCKED_RANGES = new Set([
+    "private",
+    "loopback",
+    "linkLocal",
+    "reserved",
+    "unspecified",
+    "uniqueLocal",
+    "carrierGradeNat",
+    "multicast",
+    "broadcast",
+]);
+function validateMediaFilePath(filePath, config = {}) {
+    if (filePath.includes("\0")) {
+        throw new MediaFileTypeError();
+    }
+    const resolvedPath = path.resolve(filePath);
+    const detectedMime = mime_1.default.getType(resolvedPath);
+    const isDefaultAllowed = detectedMime !== null &&
+        DEFAULT_ALLOWED_PREFIXES.some((prefix) => detectedMime.startsWith(prefix));
+    const isExtraAllowed = detectedMime !== null &&
+        config.allowedTypes !== undefined &&
+        config.allowedTypes.includes(detectedMime);
+    if (!isDefaultAllowed && !isExtraAllowed) {
+        throw new MediaFileTypeError();
+    }
+    if (config.importDir) {
+        const resolvedImportDir = path.resolve(config.importDir);
+        const normalizedImportDir = resolvedImportDir.endsWith(path.sep)
+            ? resolvedImportDir
+            : resolvedImportDir + path.sep;
+        if (!resolvedPath.startsWith(normalizedImportDir)) {
+            throw new MediaImportDirError(config.importDir);
+        }
+    }
+    return { resolvedPath, mimeType: detectedMime };
+}
+async function validateMediaUrl(input, config = {}) {
+    let parsed;
+    try {
+        parsed = new URL(input);
+    }
+    catch {
+        throw new MediaUrlInvalidError();
+    }
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+        throw new MediaUrlSchemeError(parsed.protocol.replace(":", ""));
+    }
+    const hostname = parsed.hostname;
+    const hostnameForLookup = hostname.startsWith("[") && hostname.endsWith("]")
+        ? hostname.slice(1, -1)
+        : hostname;
+    let resolvedIp;
+    try {
+        const result = await dns.promises.lookup(hostnameForLookup);
+        resolvedIp = result.address;
+    }
+    catch {
+        throw new MediaUrlInvalidError();
+    }
+    if (config.allowedHosts && config.allowedHosts.length > 0) {
+        const isAllowed = config.allowedHosts.some((allowed) => allowed === hostname || allowed === resolvedIp);
+        if (isAllowed) {
+            return { hostname, resolvedIp };
+        }
+    }
+    let addr;
+    try {
+        addr = ipaddr.parse(resolvedIp);
+    }
+    catch {
+        throw new MediaUrlBlockedError();
+    }
+    if (addr.kind() === "ipv6") {
+        const ipv6 = addr;
+        if (ipv6.isIPv4MappedAddress()) {
+            addr = ipv6.toIPv4Address();
+        }
+    }
+    const range = addr.range();
+    if (BLOCKED_RANGES.has(range)) {
+        throw new MediaUrlBlockedError();
+    }
+    return { hostname, resolvedIp };
+}
+function sanitizeMediaFilename(filename) {
+    let sanitized = filename.replace(/\0/g, "");
+    sanitized = sanitized.replace(/\.\./g, "");
+    sanitized = sanitized.replace(/[/\\]/g, "");
+    sanitized = path.basename(sanitized);
+    if (!sanitized || sanitized.trim() === "" || sanitized === ".") {
+        return "unnamed";
+    }
+    return sanitized;
+}
+function getMediaFilePathConfigFromEnv() {
+    const config = {};
+    const allowedTypes = process.env.MEDIA_ALLOWED_TYPES;
+    if (allowedTypes) {
+        config.allowedTypes = allowedTypes
+            .split(",")
+            .map((t) => t.trim())
+            .filter(Boolean);
+    }
+    const importDir = process.env.MEDIA_IMPORT_DIR;
+    if (importDir) {
+        config.importDir = importDir;
+    }
+    return config;
+}
+function getMediaUrlConfigFromEnv() {
+    const config = {};
+    const allowedHosts = process.env.MEDIA_ALLOWED_HOSTS;
+    if (allowedHosts) {
+        config.allowedHosts = allowedHosts
+            .split(",")
+            .map((h) => h.trim())
+            .filter(Boolean);
+    }
+    return config;
+}
+//# sourceMappingURL=media-validation.utils.js.map

package/dist/mcp/utils/media-validation.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-validation.utils.js","sourceRoot":"","sources":["../../../src/mcp/utils/media-validation.utils.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4GA,sDAwCC;AAqBD,4CAkEC;AAaD,sDAmBC;AAWD,sEAiBC;AAQD,4DAYC;AAlTD,gDAAkC;AAClC,8CAAgC;AAChC,gDAAwB;AACxB,kDAAoC;AAIpC,MAAa,kBAAmB,SAAQ,KAAK;IAC3C;QACE,KAAK,CACH,+EAA+E;YAC7E,mFAAmF,CACtF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AARD,gDAQC;AAED,MAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,aAAqB;QAC/B,KAAK,CACH,sDAAsD,aAAa,KAAK;YACtE,0DAA0D,CAC7D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AARD,kDAQC;AAED,MAAa,oBAAqB,SAAQ,KAAK;IAC7C;QACE,KAAK,CACH,sEAAsE;YACpE,4EAA4E,CAC/E,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AARD,oDAQC;AAED,MAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,MAAc;QACxB,KAAK,CACH,eAAe,MAAM,4DAA4D,CAClF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAPD,kDAOC;AAED,MAAa,oBAAqB,SAAQ,KAAK;IAC7C;QACE,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AALD,oDAKC;AAkBD,MAAM,wBAAwB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAIhE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,SAAS;IACT,UAAU;IACV,WAAW;IACX,UAAU;IACV,aAAa;IAEb,aAAa;IAEb,iBAAiB;IACjB,WAAW;IACX,WAAW;CACZ,CAAC,CAAC;AAcH,SAAgB,qBAAqB,CACnC,QAAgB,EAChB,SAA8B,EAAE;IAGhC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,kBAAkB,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,cAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAGhD,MAAM,gBAAgB,GACpB,YAAY,KAAK,IAAI;QACrB,wBAAwB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAE7E,MAAM,cAAc,GAClB,YAAY,KAAK,IAAI;QACrB,MAAM,CAAC,YAAY,KAAK,SAAS;QACjC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAE7C,IAAI,CAAC,gBAAgB,IAAI,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,IAAI,kBAAkB,EAAE,CAAC;IACjC,CAAC;IAGD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEzD,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;YAC9D,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC;QAEjC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AAClD,CAAC;AAqBM,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,SAAyB,EAAE;IAG3B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAoB,EAAE,CAAC;IACnC,CAAC;IAGD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAGjC,MAAM,iBAAiB,GACrB,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAChD,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,CAAC,CAAC,QAAQ,CAAC;IAGf,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC5D,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAoB,EAAE,CAAC;IACnC,CAAC;IAGD,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CACxC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,UAAU,CAC5D,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IAGD,IAAI,IAA+B,CAAC;IACpC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAoB,EAAE,CAAC;IACnC,CAAC;IAGD,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAmB,CAAC;QACjC,IAAI,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC/B,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,oBAAoB,EAAE,CAAC;IACnC,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC;AAaD,SAAgB,qBAAqB,CAAC,QAAgB;IAEpD,IAAI,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAG5C,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAG3C,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAG5C,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAGrC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QAC/D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAWD,SAAgB,6BAA6B;IAC3C,MAAM,MAAM,GAAwB,EAAE,CAAC;IAEvC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACrD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,YAAY,GAAG,YAAY;aAC/B,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC/C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAQD,SAAgB,wBAAwB;IACtC,MAAM,MAAM,GAAmB,EAAE,CAAC;IAElC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACrD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,YAAY,GAAG,YAAY;aAC/B,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}