@chrischall/mcp-utils 2.6.1 → 2.7.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +7 -0
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -474,6 +474,13 @@ path is resolved through symlinks and refused unless it is inside one of the
|
|
|
474
474
|
roots (for `resolveOutputDir`, only the per-call dir is confined). Omitting it
|
|
475
475
|
keeps the unconfined behaviour.
|
|
476
476
|
|
|
477
|
+
The fleet CI enforces the opt-in: `scripts/audit-fs-confinement.mjs` (run by
|
|
478
|
+
chrischall/workflows' `reusable-mcp-ci.yml`) fails a server whose source calls
|
|
479
|
+
one of these three helpers, imported from this package, without `allowedRoots`
|
|
480
|
+
in the call's own arguments. `resolveOutputDir(undefined, …)` is exempt (no
|
|
481
|
+
per-call path). The scripts are not in the npm package, so run it from a
|
|
482
|
+
clone of this repo: `node scripts/audit-fs-confinement.mjs ../your-mcp`.
|
|
483
|
+
|
|
477
484
|
### `http` — bearer API-client kit
|
|
478
485
|
|
|
479
486
|
`createApiClient` plus building blocks: `buildQueryString`, `buildOptionalBody`,
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@chrischall/mcp-utils",
|
|
3
|
-
"version": "2.
|
|
3
|
+
"version": "2.7.0",
|
|
4
4
|
"description": "Shared scaffolding for the chrischall MCP fleet — server bootstrap, tool-result formatting, helpful errors, hardened env/config, a bearer API-client kit, zod atoms, session registries, a fetchproxy transport adapter, auth resolver skeletons, an in-memory test harness, and opt-in HTML helpers. The generic MCP glue hoisted out of ~19 sibling servers.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "MIT",
|