@impetik/xeer-mcp 0.2.18 → 0.2.19

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@impetik/xeer-mcp",
3
- "version": "0.2.18",
3
+ "version": "0.2.19",
4
4
  "type": "module",
5
5
  "description": "Model Context Protocol server for Xeer: the scaffold, check, dev, build, and deploy loop as agent tools.",
6
6
  "license": "MIT",
@@ -47,7 +47,7 @@
47
47
  "dependencies": {
48
48
  "@modelcontextprotocol/sdk": "^1.29.0",
49
49
  "zod": "^4.0.10",
50
- "@impetik/xeer": "0.2.18"
50
+ "@impetik/xeer": "0.2.19"
51
51
  },
52
52
  "devDependencies": {
53
53
  "@types/node": "^24.1.0"
@@ -7,6 +7,9 @@ export declare const TUNNEL_TICKET_HEADER: "x-xeer-tunnel-ticket";
7
7
  export declare const TUNNEL_CONTROL_HEADER: "x-xeer-tunnel-control";
8
8
  export declare const TUNNEL_SHARED_HEADER: "x-xeer-shared-dev";
9
9
  export declare const TUNNEL_SHARED_HOST_HEADER: "x-xeer-shared-host";
10
+ /** Builder-only routes that a public shared-dev tunnel must hide at the relay boundary. */
11
+ export declare const TUNNEL_SHARED_BLOCKED_PREFIXES: readonly ["/__admin", "/__xeer/admin", "/__xeer/manifest", "/__xeer/state", "/__xeer/logs", "/__xeer/export", "/__xeer/import", "/__open-in-editor", "/_xeer/auth/sign-in", "/_xeer/auth/sign-out", "/__vite", "/__inspect"];
12
+ export declare function tunnelSharedPathBlocked(pathname: string): boolean;
10
13
  export declare const TUNNEL_PROFILES: readonly ["shared-dev", "raw-http"];
11
14
  export type TunnelProfile = (typeof TUNNEL_PROFILES)[number];
12
15
  export declare const TUNNEL_BINARY_HEADER_BYTES = 12;
@@ -7,6 +7,24 @@ export const TUNNEL_TICKET_HEADER = 'x-xeer-tunnel-ticket';
7
7
  export const TUNNEL_CONTROL_HEADER = 'x-xeer-tunnel-control';
8
8
  export const TUNNEL_SHARED_HEADER = 'x-xeer-shared-dev';
9
9
  export const TUNNEL_SHARED_HOST_HEADER = 'x-xeer-shared-host';
10
+ /** Builder-only routes that a public shared-dev tunnel must hide at the relay boundary. */
11
+ export const TUNNEL_SHARED_BLOCKED_PREFIXES = Object.freeze([
12
+ '/__admin',
13
+ '/__xeer/admin',
14
+ '/__xeer/manifest',
15
+ '/__xeer/state',
16
+ '/__xeer/logs',
17
+ '/__xeer/export',
18
+ '/__xeer/import',
19
+ '/__open-in-editor',
20
+ '/_xeer/auth/sign-in',
21
+ '/_xeer/auth/sign-out',
22
+ '/__vite',
23
+ '/__inspect',
24
+ ]);
25
+ export function tunnelSharedPathBlocked(pathname) {
26
+ return TUNNEL_SHARED_BLOCKED_PREFIXES.some((prefix) => pathname === prefix || pathname.startsWith(`${prefix}/`));
27
+ }
10
28
  export const TUNNEL_PROFILES = ['shared-dev', 'raw-http'];
11
29
  export const TUNNEL_BINARY_HEADER_BYTES = 12;
12
30
  export const TUNNEL_MAX_FRAME_PAYLOAD = 65_536;