@dollhousemcp/mcp-server 1.5.2 → 1.6.0

package/dist/portfolio/DefaultElementProvider.d.ts

@@ -20,13 +20,27 @@ export interface DefaultElementProviderConfig {
     customDataPaths?: string[];
     /** Whether to use default search paths after custom paths */
     useDefaultPaths?: boolean;
+    /** Whether to load test/example data from repository (default: false in dev mode) */
+    loadTestData?: boolean;
 }
 export declare class DefaultElementProvider {
     private readonly __dirname;
     private static cachedDataDir;
     private static populateInProgress;
     private readonly config;
+    private static metadataCache;
+    private static readonly MAX_CACHE_SIZE;
     constructor(config?: DefaultElementProviderConfig);
+    /**
+     * Get the current loadTestData configuration value
+     * @returns Whether test data loading is enabled
+     */
+    get isTestDataLoadingEnabled(): boolean;
+    /**
+     * Get whether the system is in development mode
+     * @returns Whether running in development mode
+     */
+    get isDevelopmentMode(): boolean;
     /**
      * Search paths for bundled data directory
      * Ordered by priority - custom paths first, then development/git, then NPM locations
@@ -41,6 +55,82 @@ export declare class DefaultElementProvider {
      * Helper to check if a directory exists
      */
     private directoryExists;
+    /**
+     * Validate file path to prevent path traversal attacks
+     * SECURITY FIX: Added file path validation to prevent directory traversal
+     * Previously: File paths were used without validation, allowing potential ../../../ attacks
+     * Now: Strict validation ensures paths stay within allowed directories
+     * @param filePath The file path to validate
+     * @param allowedBasePaths Array of allowed base paths (optional)
+     * @returns true if path is safe, false otherwise
+     */
+    private validateFilePath;
+    /**
+     * Cached compiled regex patterns for performance optimization
+     * @deprecated Use metadata-based detection instead
+     */
+    /**
+     * Get compiled test patterns with caching for better performance
+     * @deprecated Use metadata-based detection instead
+     * @returns Array of compiled regex patterns
+     */
+    /**
+     * Check if a filename matches test data patterns that should never be copied to production
+     * @deprecated Use isDollhouseMCPTestElement() for metadata-based detection instead
+     * @param filename The filename to check
+     * @returns true if the filename matches test patterns that should be blocked
+     */
+    /**
+     * Read metadata from YAML frontmatter only (never reads content body)
+     * Uses a small buffer to safely extract only the frontmatter between --- markers
+     * @param filePath Path to the file to read metadata from
+     * @returns Parsed metadata object or null if no frontmatter found
+     */
+    private static readonly bufferPool;
+    private static readonly MAX_POOL_SIZE;
+    private static bufferPoolStats;
+    private getBuffer;
+    private releaseBuffer;
+    /**
+     * Clean up buffer pool and cache to free memory
+     * PERFORMANCE FIX: Added cleanup method to prevent memory leaks
+     * This should be called during application shutdown or periodic cleanup
+     */
+    static cleanup(): void;
+    /**
+     * Get performance statistics for monitoring
+     * PERFORMANCE MONITORING: Added statistics method for performance tracking
+     * This provides insights into buffer pool efficiency and cache performance
+     * @returns Object containing performance metrics
+     */
+    static getPerformanceStats(): {
+        bufferPool: {
+            hits: number;
+            misses: number;
+            created: number;
+            hitRate: number;
+            poolSize: number;
+            maxPoolSize: number;
+        };
+        metadataCache: {
+            size: number;
+            maxSize: number;
+        };
+    };
+    private readMetadataOnly;
+    /**
+     * Check if a file is a DollhouseMCP test element based on metadata
+     * This replaces filename pattern detection with accurate metadata-based detection
+     * @param filePath Path to the file to check
+     * @returns true if the file contains _dollhouseMCPTest: true metadata
+     */
+    private isDollhouseMCPTestElement;
+    /**
+     * Detect if we're in a production environment by checking for production indicators
+     * Uses a confidence-based approach requiring multiple indicators for better accuracy
+     * @returns true if this appears to be a production environment
+     */
+    private isProductionEnvironment;
     /**
      * Copy all files from source directory to destination directory
      * Skips files that already exist to preserve user modifications

package/dist/portfolio/DefaultElementProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DefaultElementProvider.d.ts","sourceRoot":"","sources":["../../src/portfolio/DefaultElementProvider.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH,eAAO,MAAM,cAAc;;;;;;;;;CASjB,CAAC;AAOX,MAAM,WAAW,4BAA4B;IAC3C,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,6DAA6D;IAC7D,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAuB;IACnD,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAyC;IAC1E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;gBAE1C,MAAM,CAAC,EAAE,4BAA4B;IASjD;;;OAGG;IACH,OAAO,KAAK,eAAe,GAmC1B;IAED;;;OAGG;YACW,iBAAiB;IAyC/B;;OAEG;YACW,eAAe;IAS7B;;;OAGG;YACW,gBAAgB;IAmG9B;;;OAGG;IACH;;;;OAIG;YACW,iBAAiB;IAuB/B;;;;;OAKG;YACW,wBAAwB;IA8EtC;;;;OAIG;IACU,gBAAgB,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBtE;;;OAGG;YACW,iBAAiB;CA2EhC"}
+{"version":3,"file":"DefaultElementProvider.d.ts","sourceRoot":"","sources":["../../src/portfolio/DefaultElementProvider.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAeH,eAAO,MAAM,cAAc;;;;;;;;;CASjB,CAAC;AAmBX,MAAM,WAAW,4BAA4B;IAC3C,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,6DAA6D;IAC7D,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,qFAAqF;IACrF,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AASD,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAuB;IACnD,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAyC;IAC1E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IAGtD,OAAO,CAAC,MAAM,CAAC,aAAa,CAA8C;IAC1E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAM;gBAEhC,MAAM,CAAC,EAAE,4BAA4B;IAgDjD;;;OAGG;IACH,IAAW,wBAAwB,IAAI,OAAO,CAE7C;IAED;;;OAGG;IACH,IAAW,iBAAiB,IAAI,OAAO,CAEtC;IAED;;;OAGG;IACH,OAAO,KAAK,eAAe,GAwC1B;IAED;;;OAGG;YACW,iBAAiB;IAyC/B;;OAEG;YACW,eAAe;IAS7B;;;;;;;;OAQG;IACH,OAAO,CAAC,gBAAgB;IA8CxB;;;OAGG;IAGH;;;;OAIG;IA+BH;;;;;OAKG;IAMH;;;;;OAKG;IAEH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAClD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAM;IAC3C,OAAO,CAAC,MAAM,CAAC,eAAe,CAAsC;IAEpE,OAAO,CAAC,SAAS;IAejB,OAAO,CAAC,aAAa;IAYrB;;;;OAIG;WACW,OAAO,IAAI,IAAI;IAsB7B;;;;;OAKG;WACW,mBAAmB,IAAI;QACnC,UAAU,EAAE;YACV,IAAI,EAAE,MAAM,CAAC;YACb,MAAM,EAAE,MAAM,CAAC;YACf,OAAO,EAAE,MAAM,CAAC;YAChB,OAAO,EAAE,MAAM,CAAC;YAChB,QAAQ,EAAE,MAAM,CAAC;YACjB,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC;QACF,aAAa,EAAE;YACb,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,MAAM,CAAC;SACjB,CAAC;KACH;YAqBa,gBAAgB;IAuH9B;;;;;OAKG;YACW,yBAAyB;IAcvC;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IA2D/B;;;OAGG;YACW,gBAAgB;IAuJ9B;;;OAGG;IACH;;;;OAIG;YACW,iBAAiB;IAuB/B;;;;;OAKG;YACW,wBAAwB;IA8EtC;;;;OAIG;IACU,gBAAgB,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBtE;;;OAGG;YACW,iBAAiB;CA8FhC"}