@dollhousemcp/mcp-server 1.7.3 → 1.8.0

package/dist/utils/TemplateRenderer.d.ts

@@ -0,0 +1,63 @@
+/**
+ * TemplateRenderer - Utility class for rendering templates with comprehensive validation
+ *
+ * IMPROVEMENTS IMPLEMENTED (per Debug Detective recommendations):
+ * 1. instanceof Template verification for type safety
+ * 2. Performance logging to track render times
+ * 3. Validation of render() return value
+ * 4. Clear separation of concerns from index.ts
+ *
+ * This addresses Issues #913 and #914 from the v1.7.3 hotfix
+ */
+import { TemplateManager } from '../elements/templates/TemplateManager.js';
+export interface RenderResult {
+    success: boolean;
+    content?: string;
+    error?: string;
+    performance?: {
+        lookupTime: number;
+        renderTime: number;
+        totalTime: number;
+    };
+}
+export declare class TemplateRenderer {
+    private templateManager;
+    constructor(templateManager: TemplateManager);
+    /**
+     * Render a template with comprehensive validation and performance tracking
+     *
+     * VALIDATION CHAIN:
+     * 1. Unicode normalization of template name
+     * 2. Template exists in manager
+     * 3. Template is proper Template instance
+     * 4. Template has render() method
+     * 5. render() returns a string
+     *
+     * SECURITY:
+     * - Unicode normalization prevents homograph attacks
+     * - Variables are normalized by Template.render() internally
+     *
+     * PERFORMANCE TRACKING:
+     * - Lookup time (finding template)
+     * - Render time (actual rendering)
+     * - Total time (complete operation)
+     */
+    render(name: string, variables?: Record<string, any>): Promise<RenderResult>;
+    /**
+     * Batch render multiple templates (useful for testing)
+     * SECURITY: Each template name is normalized individually
+     */
+    renderBatch(templates: Array<{
+        name: string;
+        variables: Record<string, any>;
+    }>): Promise<Map<string, RenderResult>>;
+    /**
+     * Validate that a template can be rendered without actually rendering it
+     * SECURITY: Template name is normalized to prevent Unicode attacks
+     */
+    validate(name: string): Promise<{
+        valid: boolean;
+        reason?: string;
+    }>;
+}
+//# sourceMappingURL=TemplateRenderer.d.ts.map

package/dist/utils/TemplateRenderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TemplateRenderer.d.ts","sourceRoot":"","sources":["../../src/utils/TemplateRenderer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAI3E,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE;QACZ,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,qBAAa,gBAAgB;IACf,OAAO,CAAC,eAAe;gBAAf,eAAe,EAAE,eAAe;IAEpD;;;;;;;;;;;;;;;;;;OAkBG;IACG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAkGtF;;;OAGG;IACG,WAAW,CACf,SAAS,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,GACjE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAWrC;;;OAGG;IACG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CA4B3E"}

package/dist/utils/TemplateRenderer.js

@@ -0,0 +1,154 @@
+/**
+ * TemplateRenderer - Utility class for rendering templates with comprehensive validation
+ *
+ * IMPROVEMENTS IMPLEMENTED (per Debug Detective recommendations):
+ * 1. instanceof Template verification for type safety
+ * 2. Performance logging to track render times
+ * 3. Validation of render() return value
+ * 4. Clear separation of concerns from index.ts
+ *
+ * This addresses Issues #913 and #914 from the v1.7.3 hotfix
+ */
+import { Template } from '../elements/templates/Template.js';
+import { logger } from '../utils/logger.js';
+import { UnicodeValidator } from '../security/validators/unicodeValidator.js';
+export class TemplateRenderer {
+    templateManager;
+    constructor(templateManager) {
+        this.templateManager = templateManager;
+    }
+    /**
+     * Render a template with comprehensive validation and performance tracking
+     *
+     * VALIDATION CHAIN:
+     * 1. Unicode normalization of template name
+     * 2. Template exists in manager
+     * 3. Template is proper Template instance
+     * 4. Template has render() method
+     * 5. render() returns a string
+     *
+     * SECURITY:
+     * - Unicode normalization prevents homograph attacks
+     * - Variables are normalized by Template.render() internally
+     *
+     * PERFORMANCE TRACKING:
+     * - Lookup time (finding template)
+     * - Render time (actual rendering)
+     * - Total time (complete operation)
+     */
+    async render(name, variables = {}) {
+        const startTime = performance.now();
+        try {
+            // SECURITY: Normalize template name to prevent Unicode attacks
+            const normalizedName = UnicodeValidator.normalize(name).normalizedContent;
+            // STEP 1: Find template with performance tracking
+            const lookupStart = performance.now();
+            const template = await this.templateManager.find(t => t.metadata.name === normalizedName);
+            const lookupTime = performance.now() - lookupStart;
+            logger.debug(`Template lookup for '${normalizedName}' completed in ${lookupTime.toFixed(2)}ms`);
+            // VALIDATION 1: Template exists
+            if (!template) {
+                const totalTime = performance.now() - startTime;
+                logger.warn(`Template '${normalizedName}' not found after ${lookupTime.toFixed(2)}ms lookup`);
+                return {
+                    success: false,
+                    error: `Template '${normalizedName}' not found`,
+                    performance: { lookupTime, renderTime: 0, totalTime }
+                };
+            }
+            // VALIDATION 2: Verify template is proper Template instance with render method
+            if (!(template instanceof Template) || typeof template.render !== 'function') {
+                const totalTime = performance.now() - startTime;
+                const isInstance = template instanceof Template;
+                const hasRender = typeof template?.render === 'function';
+                logger.error(`Template '${normalizedName}' validation failed. ` +
+                    `Is Template instance: ${isInstance}, Has render method: ${hasRender}`);
+                return {
+                    success: false,
+                    error: `Template '${normalizedName}' is not a valid Template instance`,
+                    performance: { lookupTime, renderTime: 0, totalTime }
+                };
+            }
+            // STEP 2: Render template with performance tracking
+            // Note: Template.render() internally handles Unicode normalization for variables
+            logger.debug(`Starting render for template '${normalizedName}': ` +
+                `variables=${JSON.stringify(Object.keys(variables))}, template.id=${template.id}`);
+            const renderStart = performance.now();
+            const rendered = await template.render(variables);
+            const renderTime = performance.now() - renderStart;
+            // VALIDATION 3: Verify render() returned a string
+            if (typeof rendered !== 'string') {
+                const totalTime = performance.now() - startTime;
+                logger.error(`Template '${normalizedName}' render() returned non-string: ${typeof rendered}`);
+                return {
+                    success: false,
+                    error: `Template render failed: invalid return type (${typeof rendered})`,
+                    performance: { lookupTime, renderTime, totalTime }
+                };
+            }
+            // SUCCESS: Log performance metrics
+            const totalTime = performance.now() - startTime;
+            logger.info(`Template '${normalizedName}' rendered successfully: ` +
+                `lookup=${lookupTime.toFixed(2)}ms, ` +
+                `render=${renderTime.toFixed(2)}ms, ` +
+                `total=${totalTime.toFixed(2)}ms, ` +
+                `output_length=${rendered.length}`);
+            return {
+                success: true,
+                content: rendered,
+                performance: { lookupTime, renderTime, totalTime }
+            };
+        }
+        catch (error) {
+            const totalTime = performance.now() - startTime;
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            // Use original name in error message for clarity
+            logger.error(`Failed to render template '${name}' after ${totalTime.toFixed(2)}ms:`, error);
+            return {
+                success: false,
+                error: `Failed to render template: ${errorMessage}`,
+                performance: { lookupTime: 0, renderTime: 0, totalTime }
+            };
+        }
+    }
+    /**
+     * Batch render multiple templates (useful for testing)
+     * SECURITY: Each template name is normalized individually
+     */
+    async renderBatch(templates) {
+        const results = new Map();
+        for (const { name, variables } of templates) {
+            // Each render call handles its own Unicode normalization
+            results.set(name, await this.render(name, variables));
+        }
+        return results;
+    }
+    /**
+     * Validate that a template can be rendered without actually rendering it
+     * SECURITY: Template name is normalized to prevent Unicode attacks
+     */
+    async validate(name) {
+        try {
+            // SECURITY: Normalize template name
+            const normalizedName = UnicodeValidator.normalize(name).normalizedContent;
+            const template = await this.templateManager.find(t => t.metadata.name === normalizedName);
+            if (!template) {
+                return { valid: false, reason: 'Template not found' };
+            }
+            if (!(template instanceof Template)) {
+                return { valid: false, reason: 'Not a valid Template instance' };
+            }
+            if (typeof template.render !== 'function') {
+                return { valid: false, reason: 'Missing render method' };
+            }
+            return { valid: true };
+        }
+        catch (error) {
+            return {
+                valid: false,
+                reason: `Validation error: ${error instanceof Error ? error.message : 'Unknown error'}`
+            };
+        }
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dollhousemcp/mcp-server",
-  "version": "1.7.3",
+  "version": "1.8.0",
   "description": "DollhouseMCP - A Model Context Protocol (MCP) server that enables dynamic AI persona management from markdown files, allowing Claude and other compatible AI assistants to activate and switch between different behavioral personas.",
   "type": "module",
   "main": "dist/index.js",
@@ -121,25 +121,26 @@
     "url": "https://github.com/sponsors/mickdarling"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.17.3",
+    "@modelcontextprotocol/sdk": "^1.18.0",
     "@types/dompurify": "^3.0.5",
     "@types/uuid": "^10.0.0",
+    "chalk": "^5.6.2",
     "dompurify": "^3.2.6",
     "express": "^5.1.0",
     "gray-matter": "^4.0.3",
     "js-yaml": "^4.1.0",
-    "jsdom": "^26.1.0",
+    "jsdom": "^27.0.0",
     "node-fetch": "^3.3.2",
     "uuid": "^11.1.0",
-    "zod": "^4.0.5"
+    "zod": "^4.1.8"
   },
   "devDependencies": {
     "@jest/globals": "^30.0.4",
-    "@modelcontextprotocol/inspector": "^0.16.5",
+    "@modelcontextprotocol/inspector": "^0.16.7",
     "@types/jest": "^30.0.0",
     "@types/js-yaml": "^4.0.9",
     "@types/jsdom": "^21.1.7",
-    "@types/node": "^24.0.15",
+    "@types/node": "^24.4.0",
     "cross-env": "^7.0.3",
     "dotenv": "^17.2.1",
     "jest": "^30.0.4",