@bitbonsai/mcpvault 0.18.1 → 0.18.3

package/README.md

@@ -998,7 +998,7 @@ Only grant write access to clients and conversations you trust. Use `--read-only
 - `server.ts` - MCP server entry point
 - `src/cli.ts` - CLI option parsing for vault path, read-only mode, and default exclusions
 - `src/createServer.ts` - MCP tool registration, request routing, and discovery defaults
-- `src/frontmatter.ts` - YAML frontmatter handling with gray-matter
+- `src/frontmatter.ts` - YAML frontmatter handling with gray-matter, preserving formatting and CRLF line endings; executable JavaScript frontmatter stays inert as note content
 - `src/filesystem.ts` - File operations with path validation
 - `src/pathfilter.ts` - Directory and file filtering
 - `src/search.ts` - Note search functionality with content and frontmatter support

package/dist/src/filesystem.js

@@ -896,7 +896,7 @@ export class FileSystemService {
             // Quick check for frontmatter without reading full content
             const file = await readFile(fullPath, 'utf-8');
             const firstChunk = file.slice(0, 100);
-            const hasFrontmatter = firstChunk.startsWith('---\n');
+            const hasFrontmatter = /^---\r?\n/.test(firstChunk);
             return {
                 path,
                 size,

package/dist/src/frontmatter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"frontmatter.d.ts","sourceRoot":"","sources":["../../src/frontmatter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAkB1E;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAmB5E;AAED,qBAAa,kBAAkB;IAC7B,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAkBjC;IAED,SAAS,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAWvE;IAED,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,2BAA2B,CAmB1E;IAED,OAAO,CAAC,yBAAyB;IAmDjC,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAuB1F;IAED,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAGvD;IAED,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAUvE;CACF"}
+{"version":3,"file":"frontmatter.d.ts","sourceRoot":"","sources":["../../src/frontmatter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AA0C1E;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAmB5E;AAED,qBAAa,kBAAkB;IAC7B,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAkBjC;IAED,SAAS,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAcvE;IAED,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,2BAA2B,CAmB1E;IAED,OAAO,CAAC,yBAAyB;IAmDjC,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAyB1F;IAED,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAGvD;IAED,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAUvE;CACF"}

package/dist/src/frontmatter.js

@@ -8,11 +8,32 @@ const yamlEngine = {
     // YAML 1.2 schema (default). Dates stay as strings, but this avoids the
     // yaml-1.1 bug where single-letter keys like 'y'/'n' become booleans.
     // Merge keys (<<) are not resolved, which is fine for Obsidian frontmatter.
-    parse: (str) => parse(str),
+    parse: (str) => parse(toLf(str)),
     stringify: (data) => stringify(data),
 };
 function withYamlEngine(options = {}) {
-    return { ...options, engines: { yaml: yamlEngine } };
+    return {
+        ...options,
+        engines: {
+            yaml: yamlEngine,
+            // gray-matter merges default engines; override JavaScript to prevent eval, including its js alias.
+            javascript: {
+                parse: () => { throw new Error('JavaScript frontmatter is not supported'); },
+            },
+        },
+    };
+}
+/** Use CRLF when present, otherwise LF. */
+function detectEol(text) {
+    return text.includes('\r\n') ? '\r\n' : '\n';
+}
+// gray-matter leaves a trailing CR before the closing delimiter; normalize before YAML parsing.
+function toLf(text) {
+    return text.replace(/\r\n?/g, '\n');
+}
+/** Re-apply CRLF to LF-only text. */
+function applyEol(text, eol) {
+    return eol === '\r\n' ? text.replace(/\n/g, '\r\n') : text;
 }
 /**
  * Parse a frontmatter value that may be a JSON string (LLM clients sometimes
@@ -67,7 +88,10 @@ export class FrontmatterHandler {
             if (!frontmatterData || Object.keys(frontmatterData).length === 0) {
                 return content;
             }
-            return matter.stringify(content, frontmatterData, withYamlEngine());
+            const eol = detectEol(content);
+            // Serialize only the header so body bytes stay untouched; drop gray-matter's empty-body newline.
+            const header = matter.stringify('', frontmatterData, withYamlEngine()).slice(0, -1);
+            return applyEol(header, eol) + content + (content.endsWith('\n') ? '' : eol);
         }
         catch (error) {
             throw new Error(`Failed to stringify frontmatter: ${error instanceof Error ? error.message : 'Unknown error'}`);
@@ -137,9 +161,11 @@ export class FrontmatterHandler {
                 if (!updates || Object.keys(updates).length === 0) {
                     return content;
                 }
-                return matter.stringify(content, updates, withYamlEngine());
+                return this.stringify(updates, content);
             }
-            const doc = parseDocument(rawMatter.trimStart());
+            // Normalize only YAML; preserve the body's original bytes.
+            const eol = rawMatter.includes('\r\n') ? '\r\n' : detectEol(content);
+            const doc = parseDocument(toLf(rawMatter).trimStart());
             for (const [key, value] of Object.entries(updates)) {
                 if (value === undefined) {
                     doc.delete(key);
@@ -148,8 +174,8 @@ export class FrontmatterHandler {
                     doc.set(key, value);
                 }
             }
-            const yamlContent = doc.toString();
-            return `---\n${yamlContent}---\n${content}`;
+            const yamlContent = applyEol(doc.toString(), eol);
+            return `---${eol}${yamlContent}---${eol}${content}`;
         }
         catch (error) {
             throw new Error(`Failed to stringify frontmatter: ${error instanceof Error ? error.message : 'Unknown error'}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bitbonsai/mcpvault",
-  "version": "0.18.1",
+  "version": "0.18.3",
   "description": "Universal AI bridge for Obsidian vaults - connect any MCP-compatible assistant",
   "homepage": "https://mcpvault.org",
   "author": "bitbonsai",