@get-technology-inc/jamf-docs-mcp-server 1.1.0 → 1.2.0

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AA8JH,cAAc;AACd,MAAM,OAAO,aAAc,SAAQ,KAAK;IAGpB;IACA;IACA;IAJlB,YACE,OAAe,EACC,IAAuB,EACvB,GAAY,EACZ,UAAmB;QAEnC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAmB;QACvB,QAAG,GAAH,GAAG,CAAS;QACZ,eAAU,GAAV,UAAU,CAAS;QAGnC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,CAAN,IAAY,iBASX;AATD,WAAY,iBAAiB;IAC3B,4CAAuB,CAAA;IACvB,kDAA6B,CAAA;IAC7B,gDAA2B,CAAA;IAC3B,oDAA+B,CAAA;IAC/B,gDAA2B,CAAA;IAC3B,wDAAmC,CAAA;IACnC,gDAA2B,CAAA;IAC3B,wCAAmB,CAAA;AACrB,CAAC,EATW,iBAAiB,KAAjB,iBAAiB,QAS5B"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAgKH,cAAc;AACd,MAAM,OAAO,aAAc,SAAQ,KAAK;IAGpB;IACA;IACA;IAJlB,YACE,OAAe,EACC,IAAuB,EACvB,GAAY,EACZ,UAAmB;QAEnC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAmB;QACvB,QAAG,GAAH,GAAG,CAAS;QACZ,eAAU,GAAV,UAAU,CAAS;QAGnC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,CAAN,IAAY,iBASX;AATD,WAAY,iBAAiB;IAC3B,4CAAuB,CAAA;IACvB,kDAA6B,CAAA;IAC7B,gDAA2B,CAAA;IAC3B,oDAA+B,CAAA;IAC/B,gDAA2B,CAAA;IAC3B,wDAAmC,CAAA;IACnC,gDAA2B,CAAA;IAC3B,wCAAmB,CAAA;AACrB,CAAC,EATW,iBAAiB,KAAjB,iBAAiB,QAS5B"}

package/dist/utils/doc-type.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Document type inference utility
+ */
+import { type DocTypeId } from '../constants.js';
+/**
+ * Infer document type from bundle ID using pattern matching
+ */
+export declare function inferDocType(bundleId: string): DocTypeId;
+//# sourceMappingURL=doc-type.d.ts.map

package/dist/utils/doc-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doc-type.d.ts","sourceRoot":"","sources":["../../src/utils/doc-type.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5D;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAOxD"}

package/dist/utils/doc-type.js

@@ -0,0 +1,16 @@
+/**
+ * Document type inference utility
+ */
+import { DOC_TYPES } from '../constants.js';
+/**
+ * Infer document type from bundle ID using pattern matching
+ */
+export function inferDocType(bundleId) {
+    for (const [id, docType] of Object.entries(DOC_TYPES)) {
+        if ('bundlePattern' in docType && docType.bundlePattern.test(bundleId)) {
+            return id;
+        }
+    }
+    return 'documentation';
+}
+//# sourceMappingURL=doc-type.js.map

package/dist/utils/doc-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doc-type.js","sourceRoot":"","sources":["../../src/utils/doc-type.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAkB,MAAM,iBAAiB,CAAC;AAE5D;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,IAAI,eAAe,IAAI,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvE,OAAO,EAAe,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC"}

package/dist/utils/progress.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Progress notification utility
+ */
+import type { ServerNotification, ServerRequest } from '@modelcontextprotocol/sdk/types.js';
+import type { RequestHandlerExtra } from '@modelcontextprotocol/sdk/shared/protocol.js';
+type Extra = RequestHandlerExtra<ServerRequest, ServerNotification>;
+/**
+ * Report progress to the client if a progressToken was provided.
+ * No-op if the client didn't request progress notifications.
+ */
+export declare function reportProgress(extra: Extra, progress: number, total: number): Promise<void>;
+export {};
+//# sourceMappingURL=progress.d.ts.map

package/dist/utils/progress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"progress.d.ts","sourceRoot":"","sources":["../../src/utils/progress.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAExF,KAAK,KAAK,GAAG,mBAAmB,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;AAEpE;;;GAGG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAUf"}

package/dist/utils/progress.js

@@ -0,0 +1,18 @@
+/**
+ * Progress notification utility
+ */
+/**
+ * Report progress to the client if a progressToken was provided.
+ * No-op if the client didn't request progress notifications.
+ */
+export async function reportProgress(extra, progress, total) {
+    const progressToken = extra._meta?.progressToken;
+    if (progressToken === undefined) {
+        return;
+    }
+    await extra.sendNotification({
+        method: 'notifications/progress',
+        params: { progressToken, progress, total },
+    });
+}
+//# sourceMappingURL=progress.js.map

package/dist/utils/progress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"progress.js","sourceRoot":"","sources":["../../src/utils/progress.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAY,EACZ,QAAgB,EAChB,KAAa;IAEb,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC;IACjD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO;IACT,CAAC;IAED,MAAM,KAAK,CAAC,gBAAgB,CAAC;QAC3B,MAAM,EAAE,wBAAwB;QAChC,MAAM,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE;KAC3C,CAAC,CAAC;AACL,CAAC"}

package/dist/utils/sanitize.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Security sanitization utilities
+ *
+ * Functions for sanitizing user-controlled or externally-sourced content
+ * before interpolation into Markdown output or client-facing error messages.
+ */
+/**
+ * Escape Markdown special characters in text to prevent Markdown injection.
+ * Use this for titles, snippets, and other text interpolated into Markdown.
+ */
+export declare function sanitizeMarkdownText(text: string): string;
+/**
+ * Sanitize a URL for use in Markdown link syntax.
+ * - Only allows https: protocol
+ * - Percent-encodes parentheses to prevent breaking Markdown links
+ * - Returns '#' for invalid or non-https URLs
+ */
+export declare function sanitizeMarkdownUrl(url: string): string;
+/**
+ * Extract and sanitize an error message from an unknown thrown value.
+ */
+export declare function getSafeErrorMessage(error: unknown): string;
+/**
+ * Sanitize error messages before returning to clients.
+ * - Replaces backend hostnames with frontend equivalents
+ * - Removes absolute file paths
+ * - Removes stack traces
+ */
+export declare function sanitizeErrorMessage(message: string): string;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/utils/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/utils/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAWvD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAG1D;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAc5D"}

package/dist/utils/sanitize.js

@@ -0,0 +1,57 @@
+/**
+ * Security sanitization utilities
+ *
+ * Functions for sanitizing user-controlled or externally-sourced content
+ * before interpolation into Markdown output or client-facing error messages.
+ */
+/**
+ * Escape Markdown special characters in text to prevent Markdown injection.
+ * Use this for titles, snippets, and other text interpolated into Markdown.
+ */
+export function sanitizeMarkdownText(text) {
+    return text.replace(/[[\]()#*_`~>!|\\]/g, '\\$&');
+}
+/**
+ * Sanitize a URL for use in Markdown link syntax.
+ * - Only allows https: protocol
+ * - Percent-encodes parentheses to prevent breaking Markdown links
+ * - Returns '#' for invalid or non-https URLs
+ */
+export function sanitizeMarkdownUrl(url) {
+    try {
+        const parsed = new URL(url);
+        if (parsed.protocol !== 'https:') {
+            return '#';
+        }
+        // Percent-encode parentheses in the URL to prevent breaking Markdown link syntax
+        return url.replace(/\(/g, '%28').replace(/\)/g, '%29');
+    }
+    catch {
+        return '#';
+    }
+}
+/**
+ * Extract and sanitize an error message from an unknown thrown value.
+ */
+export function getSafeErrorMessage(error) {
+    const raw = error instanceof Error ? error.message : 'Unknown error occurred';
+    return sanitizeErrorMessage(raw);
+}
+/**
+ * Sanitize error messages before returning to clients.
+ * - Replaces backend hostnames with frontend equivalents
+ * - Removes absolute file paths
+ * - Removes stack traces
+ */
+export function sanitizeErrorMessage(message) {
+    let sanitized = message;
+    // Replace backend hostname with frontend (hostnames extracted from DOCS_API_URL / DOCS_BASE_URL)
+    sanitized = sanitized.replaceAll('learn-be.jamf.com', 'learn.jamf.com');
+    // Remove absolute file paths (Unix and Windows)
+    sanitized = sanitized.replace(/\/[\w./-]+\.\w{1,4}/g, '<path>');
+    sanitized = sanitized.replace(/[A-Z]:\\[\w.\\-]+\.\w{1,4}/g, '<path>');
+    // Remove stack traces (lines starting with "at ")
+    sanitized = sanitized.replace(/\n\s*at\s+.+/g, '');
+    return sanitized;
+}
+//# sourceMappingURL=sanitize.js.map

package/dist/utils/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/utils/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,GAAG,CAAC;QACb,CAAC;QACD,iFAAiF;QACjF,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;IAC9E,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,IAAI,SAAS,GAAG,OAAO,CAAC;IAExB,iGAAiG;IACjG,SAAS,GAAG,SAAS,CAAC,UAAU,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IAExE,gDAAgD;IAChD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC;IAChE,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC;IAEvE,kDAAkD;IAClD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAEnD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/utils/url.d.ts

@@ -0,0 +1,11 @@
+/**
+ * URL validation utilities
+ *
+ * Hostname allowlist and validation for Jamf documentation URLs.
+ * Shared by both the schema layer and the scraper service.
+ */
+/** Allowed hostnames for URL validation. */
+export declare const ALLOWED_HOSTNAMES: Set<string>;
+/** Check whether a URL string points to an allowed Jamf documentation hostname. */
+export declare function isAllowedHostname(urlStr: string): boolean;
+//# sourceMappingURL=url.d.ts.map

package/dist/utils/url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../src/utils/url.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,4CAA4C;AAC5C,eAAO,MAAM,iBAAiB,aAI5B,CAAC;AAEH,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAOzD"}

package/dist/utils/url.js

@@ -0,0 +1,23 @@
+/**
+ * URL validation utilities
+ *
+ * Hostname allowlist and validation for Jamf documentation URLs.
+ * Shared by both the schema layer and the scraper service.
+ */
+/** Allowed hostnames for URL validation. */
+export const ALLOWED_HOSTNAMES = new Set([
+    'learn.jamf.com',
+    'learn-be.jamf.com',
+    'docs.jamf.com',
+]);
+/** Check whether a URL string points to an allowed Jamf documentation hostname. */
+export function isAllowedHostname(urlStr) {
+    try {
+        const url = new URL(urlStr);
+        return ALLOWED_HOSTNAMES.has(url.hostname);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=url.js.map

package/dist/utils/url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.js","sourceRoot":"","sources":["../../src/utils/url.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,4CAA4C;AAC5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IACvC,gBAAgB;IAChB,mBAAmB;IACnB,eAAe;CAChB,CAAC,CAAC;AAEH,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@get-technology-inc/jamf-docs-mcp-server",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "MCP Server for accessing Jamf Documentation (learn.jamf.com)",
   "main": "dist/index.js",
   "type": "module",
@@ -11,10 +11,13 @@
     "build": "tsc",
     "dev": "tsx watch src/index.ts",
     "start": "node dist/index.js",
+    "start:http": "node dist/index.js --transport http",
     "test": "vitest run",
     "test:watch": "vitest",
     "test:unit": "vitest run test/unit",
     "test:integration": "vitest run test/integration",
+    "test:e2e": "vitest run test/e2e",
+    "test:all": "vitest run test/unit && vitest run test/integration && vitest run test/e2e",
     "test:coverage": "vitest run --coverage",
     "test:inspector": "npx @modelcontextprotocol/inspector node dist/index.js",
     "lint": "eslint src/**/*.ts",
@@ -37,8 +40,8 @@
   "author": "GET Technology Inc.",
   "license": "MIT",
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.0",
-    "axios": "^1.7.0",
+    "@modelcontextprotocol/sdk": "^1.27.1",
+    "axios": "^1.13.6",
     "cheerio": "^1.0.0",
     "turndown": "^7.2.0",
     "zod": "^4.3.6"
@@ -48,7 +51,7 @@
     "@types/node": "^25.0.9",
     "@types/turndown": "^5.0.5",
     "@vitest/coverage-v8": "^4.0.17",
-    "eslint": "^9.17.0",
+    "eslint": "^9.39.4",
     "tsx": "^4.19.0",
     "typescript": "^5.6.0",
     "typescript-eslint": "^8.18.0",