@guardbee/mcp-prompt-leak-scanner 1.0.1 → 1.1.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @guardbee/mcp-prompt-leak-scanner
 
+## 1.1.0
+
+### Minor Changes
+
+- [#245](https://github.com/GuardBee/guardbee-mcp/pull/245) [`29bac2f`](https://github.com/GuardBee/guardbee-mcp/commit/29bac2f679cf97fd48d3d09eef80f328d77f5655) Thanks [@4hmetuyar](https://github.com/4hmetuyar)! - Move to the MCP TypeScript SDK v2: every server now speaks MCP 2026-07-28 as well as 2025-11-25, choosing per connection (`serveStdio`). Tools without arguments no longer declare an empty input schema. The rug-pull detector and owasp-scan connect to target servers with version negotiation, so they read servers on either revision. `instrumentServer` from `@guardbee/mcp-telemetry` accepts an SDK v1 or v2 server.
+
+### Patch Changes
+
+- Updated dependencies [[`29bac2f`](https://github.com/GuardBee/guardbee-mcp/commit/29bac2f679cf97fd48d3d09eef80f328d77f5655)]:
+  - @guardbee/mcp-telemetry@0.3.1
+
+## 1.0.2
+
+### Patch Changes
+
+- [#189](https://github.com/GuardBee/guardbee-mcp/pull/189) [`d6b75fe`](https://github.com/GuardBee/guardbee-mcp/commit/d6b75fe26af9f074d87d92d063b6f355fdcc61d3) Thanks [@4hmetuyar](https://github.com/4hmetuyar)! - - **Node 22 for the proxy, document-scanner and security-suite** (`engines.node: ">=22"`): ldapts 9 and unpdf, which they depend on, require it. Node 18 and 20 are past end of life; the other packages still run on Node 18.
+  - **`require()` works for every ESM package**: each `exports` entry gains a `default` condition next to `import` (Node 20.19+ / 22.12+ can `require()` ESM), so `require("@guardbee/mcp-secret-scanner")` no longer fails with ERR_PACKAGE_PATH_NOT_EXPORTED.
+  - **`guardbee-proxy --help` / `--version`** print usage and the version instead of failing with "No proxy target configured"; **`guardbee-gateway --help` / `--version`** no longer start the stdio server, and an unknown argument is an error.
+  - The proxy's npm description starts with "MCP security gateway" again.
+
 ## 1.0.1
 
 ### Patch Changes

package/dist/server.d.ts

@@ -1,4 +1,4 @@
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 export declare function startServer(): Promise<void>;
 /** This package's MCP tools on `server`; @guardbee/security-suite serves several packages' tools from one process this way. */
 export declare function registerTools(server: McpServer): void;

package/dist/server.js

@@ -1,5 +1,5 @@
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { McpServer } from "@modelcontextprotocol/server";
+import { serveStdio } from "@modelcontextprotocol/server/stdio";
 import { instrumentServer } from "@guardbee/mcp-telemetry";
 import { z } from "zod";
 import { scanText, scanBody, scanFile, scanDirectory } from "./scanner.js";
@@ -26,14 +26,15 @@ function formatFindings(findings, scannedFiles, durationMs) {
     return lines.join("\n");
 }
 export async function startServer() {
-    const server = new McpServer({
-        name: "guardbee-prompt-leak-scanner",
-        version: "0.1.0",
+    serveStdio(() => {
+        const server = new McpServer({
+            name: "guardbee-prompt-leak-scanner",
+            version: "0.1.0",
+        });
+        instrumentServer(server, "prompt-leak-scanner");
+        registerTools(server);
+        return server;
     });
-    instrumentServer(server, "prompt-leak-scanner");
-    registerTools(server);
-    const transport = new StdioServerTransport();
-    await server.connect(transport);
 }
 /** This package's MCP tools on `server`; @guardbee/security-suite serves several packages' tools from one process this way. */
 export function registerTools(server) {
@@ -82,7 +83,6 @@ export function registerTools(server) {
     });
     server.registerTool("list_patterns", {
         description: "List every credential/PII pattern this scanner detects, grouped by category",
-        inputSchema: {},
     }, async () => {
         const lines = ["Detected patterns:\n"];
         const byCategory = new Map();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guardbee/mcp-prompt-leak-scanner",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "mcpName": "io.github.GuardBee/prompt-leak-scanner",
   "description": "PII and secret leak scanner for LLM prompts: catches API keys, TC Kimlik No, cards and IBANs in outbound prompts before they leave your app; MCP server and reverse proxy",
   "type": "module",
@@ -11,8 +11,9 @@
   "types": "./dist/index.d.ts",
   "exports": {
     ".": {
+      "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
-      "types": "./dist/index.d.ts"
+      "default": "./dist/index.js"
     }
   },
   "files": [
@@ -24,10 +25,10 @@
     "!dist/**/__tests__"
   ],
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.32.1",
+    "@modelcontextprotocol/server": "^2.4.0",
     "zod": "^4.6.7",
-    "@guardbee/guard-core": "^1.0.1",
-    "@guardbee/mcp-telemetry": "^0.3.0"
+    "@guardbee/guard-core": "^1.4.0",
+    "@guardbee/mcp-telemetry": "^0.3.1"
   },
   "keywords": [
     "mcp",