@apify/actors-mcp-server 0.11.1-beta.2 → 0.11.1-beta.4

package/dist/utils/ajv.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ajv.d.ts","sourceRoot":"","sources":["../../src/utils/ajv.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,KAAK,CAAC;AAC5C,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,eAAO,MAAM,GAAG,KAA2E,CAAC;AAE5F;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAe7F;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CAE/E"}
+{"version":3,"file":"ajv.d.ts","sourceRoot":"","sources":["../../src/utils/ajv.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,KAAK,CAAC;AAC5C,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,eAAO,MAAM,GAAG,KAA2E,CAAC;AAW5F;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAe7F;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CAE/E"}

package/dist/utils/ajv.js

@@ -1,5 +1,13 @@
 import Ajv from 'ajv';
 export const ajv = new Ajv({ coerceTypes: 'array', strict: false, removeAdditional: true });
+// `pattern`/`patternProperties` compile a RegExp from untrusted Actor / proxied-MCP input schemas;
+// a catastrophic-backtracking pattern freezes the single-threaded event loop (ReDoS). `format` is
+// inert today (ajv-formats is not registered) but would arm the same vector if it ever were. This
+// layer only sanitizes LLM args — the Actor re-validates its real input on the run — so dropping
+// regex enforcement removes the DoS surface with no loss of protection. No `src/` schema uses them.
+ajv.removeKeyword('pattern');
+ajv.removeKeyword('patternProperties');
+ajv.removeKeyword('format');
 /**
  * Removes the `$schema` property and drops fields with real `default` values from `required`.
  *

package/dist/utils/ajv.js.map

@@ -1 +1 @@
-{"version":3,"file":"ajv.js","sourceRoot":"","sources":["../../src/utils/ajv.ts"],"names":[],"mappings":"AACA,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;AAE5F;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA+B;IAChE,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAC9B,OAAO,OAAO,CAAC,OAAO,CAAC;IAEvB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC3G,MAAM,UAAU,GAAG,OAAO,CAAC,UAAqC,CAAC;QACjE,OAAO,CAAC,QAAQ,GAAI,OAAO,CAAC,QAAqB,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;YACnE,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACzE,wEAAwE;YACxE,OAAQ,WAAqC,CAAC,OAAO,KAAK,SAAS,CAAC;QACxE,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAAC,MAA+B;IACzD,OAAO,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;AACrD,CAAC"}
+{"version":3,"file":"ajv.js","sourceRoot":"","sources":["../../src/utils/ajv.ts"],"names":[],"mappings":"AACA,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;AAE5F,mGAAmG;AACnG,kGAAkG;AAClG,kGAAkG;AAClG,iGAAiG;AACjG,oGAAoG;AACpG,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;AAC7B,GAAG,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;AACvC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;AAE5B;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA+B;IAChE,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAC9B,OAAO,OAAO,CAAC,OAAO,CAAC;IAEvB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC3G,MAAM,UAAU,GAAG,OAAO,CAAC,UAAqC,CAAC;QACjE,OAAO,CAAC,QAAQ,GAAI,OAAO,CAAC,QAAqB,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;YACnE,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACzE,wEAAwE;YACxE,OAAQ,WAAqC,CAAC,OAAO,KAAK,SAAS,CAAC;QACxE,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAAC,MAA+B;IACzD,OAAO,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;AACrD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@apify/actors-mcp-server",
-  "version": "0.11.1-beta.2",
+  "version": "0.11.1-beta.4",
   "type": "module",
   "description": "Apify MCP Server",
   "mcpName": "com.apify/apify-mcp-server",

package/dist/tools/apps/call_actor.d.ts

@@ -1,7 +0,0 @@
-import type { ToolEntry } from '../../types.js';
-/**
- * Apps mode call-actor tool.
- * Renders no widget; for a live progress UI, use the call-actor-widget sibling.
- */
-export declare const appsCallActor: ToolEntry;
-//# sourceMappingURL=call_actor.d.ts.map

package/dist/tools/apps/call_actor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"call_actor.d.ts","sourceRoot":"","sources":["../../../src/tools/apps/call_actor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAoB,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAYlE;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,SAoBjB,CAAC"}

package/dist/tools/apps/call_actor.js

@@ -1,31 +0,0 @@
-import { HelperTools } from '../../const.js';
-import { TOOL_TYPE } from '../../types.js';
-import { buildCallActorAppsDescription, callActorAjvValidate, callActorInputSchema, executeCallActor, } from '../core/call_actor_common.js';
-import { getActorRunOutputSchema } from '../structured_output_schemas.js';
-const CALL_ACTOR_APPS_DESCRIPTION = buildCallActorAppsDescription();
-/**
- * Apps mode call-actor tool.
- * Renders no widget; for a live progress UI, use the call-actor-widget sibling.
- */
-export const appsCallActor = Object.freeze({
-    type: TOOL_TYPE.INTERNAL,
-    name: HelperTools.ACTOR_CALL,
-    description: CALL_ACTOR_APPS_DESCRIPTION,
-    inputSchema: callActorInputSchema,
-    outputSchema: getActorRunOutputSchema,
-    ajvValidate: callActorAjvValidate,
-    paymentRequired: true,
-    annotations: {
-        title: 'Call Actor',
-        readOnlyHint: false,
-        destructiveHint: true,
-        idempotentHint: false,
-        openWorldHint: true,
-    },
-    execution: {
-        // Support long-running tasks
-        taskSupport: 'optional',
-    },
-    call: async (toolArgs) => executeCallActor(toolArgs),
-});
-//# sourceMappingURL=call_actor.js.map

package/dist/tools/apps/call_actor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"call_actor.js","sourceRoot":"","sources":["../../../src/tools/apps/call_actor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EACH,6BAA6B,EAC7B,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,GACnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE1E,MAAM,2BAA2B,GAAG,6BAA6B,EAAE,CAAC;AAEpE;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAc,MAAM,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,SAAS,CAAC,QAAQ;IACxB,IAAI,EAAE,WAAW,CAAC,UAAU;IAC5B,WAAW,EAAE,2BAA2B;IACxC,WAAW,EAAE,oBAAoB;IACjC,YAAY,EAAE,uBAAuB;IACrC,WAAW,EAAE,oBAAoB;IACjC,eAAe,EAAE,IAAI;IACrB,WAAW,EAAE;QACT,KAAK,EAAE,YAAY;QACnB,YAAY,EAAE,KAAK;QACnB,eAAe,EAAE,IAAI;QACrB,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,IAAI;KACtB;IACD,SAAS,EAAE;QACP,6BAA6B;QAC7B,WAAW,EAAE,UAAU;KAC1B;IACD,IAAI,EAAE,KAAK,EAAE,QAA0B,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC;CAChE,CAAC,CAAC"}