@j0hanz/filesystem-context-mcp 1.0.8 → 1.0.9

package/dist/__tests__/security/filesystem-boundary.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=filesystem-boundary.test.d.ts.map

package/dist/__tests__/security/filesystem-boundary.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem-boundary.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/security/filesystem-boundary.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/security/filesystem-boundary.test.js

@@ -0,0 +1,51 @@
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import fg from 'fast-glob';
+import { describe, expect, it } from 'vitest';
+function getRepoRoot() {
+    const currentDir = path.dirname(fileURLToPath(import.meta.url));
+    // src/__tests__/security -> repo root
+    return path.resolve(currentDir, '../../../../');
+}
+function hasFsImport(source) {
+    return (/from\s+['"]node:fs\/promises['"]/u.test(source) ||
+        /from\s+['"]node:fs['"]/u.test(source));
+}
+describe('security boundary: filesystem access', () => {
+    it('keeps direct node:fs imports inside boundary modules', async () => {
+        const repoRoot = getRepoRoot();
+        const sourceFiles = await fg(['src/**/*.ts'], {
+            cwd: repoRoot,
+            ignore: ['src/__tests__/**'],
+            onlyFiles: true,
+            dot: false,
+        });
+        // These files are allowed to import node:fs*/ because they either:
+        // - implement the security boundary itself
+        // - centralize filesystem operations
+        // - bootstrap the server before allowed directories exist
+        const allowedFsImportFiles = new Set([
+            'src/server.ts',
+            'src/lib/path-validation.ts',
+            'src/lib/file-operations.ts',
+            'src/lib/fs-helpers.ts',
+            'src/lib/search-helpers.ts',
+        ]);
+        const offenders = [];
+        for (const relPath of sourceFiles) {
+            const absPath = path.join(repoRoot, relPath);
+            const content = await fs.readFile(absPath, 'utf-8');
+            if (!hasFsImport(content)) {
+                continue;
+            }
+            if (!allowedFsImportFiles.has(relPath.replace(/\\/gu, '/'))) {
+                offenders.push(relPath);
+            }
+        }
+        expect(offenders, `Unexpected node:fs imports detected outside boundary modules. ` +
+            `To keep "validate-before-access" auditable, route filesystem access through ` +
+            `src/lib/file-operations.ts and src/lib/fs-helpers.ts (and validate paths in src/lib/path-validation.ts).`).toEqual([]);
+    });
+});
+//# sourceMappingURL=filesystem-boundary.test.js.map

package/dist/__tests__/security/filesystem-boundary.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem-boundary.test.js","sourceRoot":"","sources":["../../../src/__tests__/security/filesystem-boundary.test.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,MAAM,WAAW,CAAC;AAC3B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,SAAS,WAAW;IAClB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,sCAAsC;IACtC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,CACL,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC;QAChD,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,CACvC,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAE/B,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE;YAC5C,GAAG,EAAE,QAAQ;YACb,MAAM,EAAE,CAAC,kBAAkB,CAAC;YAC5B,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,KAAK;SACX,CAAC,CAAC;QAEH,mEAAmE;QACnE,2CAA2C;QAC3C,qCAAqC;QACrC,0DAA0D;QAC1D,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS;YAC3C,eAAe;YACf,4BAA4B;YAC5B,4BAA4B;YAC5B,uBAAuB;YACvB,2BAA2B;SAC5B,CAAC,CAAC;QAEH,MAAM,SAAS,GAAa,EAAE,CAAC;QAE/B,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAEpD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,SAAS;YACX,CAAC;YAED,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC5D,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,MAAM,CACJ,SAAS,EACT,gEAAgE;YAC9D,8EAA8E;YAC9E,0GAA0G,CAC7G,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,20 +1,24 @@
 {
   "name": "@j0hanz/filesystem-context-mcp",
-  "version": "1.0.8",
-  "description": "MCP server for filesystem scanning, searching, and analysis with security validation",
+  "version": "1.0.9",
+  "mcpName": "io.github.j0hanz/filesystem-context",
+  "description": "🔍 Read-only MCP server for secure filesystem exploration, searching, and analysis",
   "type": "module",
   "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "sideEffects": false,
   "bin": {
     "filesystem-context-mcp": "dist/index.js"
   },
   "files": [
-    "dist"
+    "dist",
+    "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/j0hanz/filesystem-context-mcp-server.git"
-  },
   "scripts": {
+    "clean": "node -e \"require('fs').rmSync('dist', {recursive: true, force: true})\"",
     "build": "tsc && npm run copy:assets",
     "copy:assets": "node -e \"require('fs').copyFileSync('src/instructions.md', 'dist/instructions.md')\"",
     "dev": "tsx watch src/index.ts",
@@ -25,34 +29,42 @@
     "lint": "eslint .",
     "format": "prettier --write .",
     "type-check": "tsc --noEmit",
-    "inspector": "npx @modelcontextprotocol/inspector"
+    "inspector": "npx @modelcontextprotocol/inspector",
+    "prepublishOnly": "npm run lint && npm run type-check && npm run build"
   },
   "keywords": [
     "mcp",
     "model-context-protocol",
     "filesystem",
-    "scanner"
+    "scanner",
+    "search",
+    "analysis"
   ],
-  "author": "",
+  "author": "j0hanz",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/j0hanz/filesystem-context-mcp-server.git"
+  },
+  "homepage": "https://github.com/j0hanz/filesystem-context-mcp-server#readme",
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.12.0",
+    "@modelcontextprotocol/sdk": "^1.24.3",
     "fast-glob": "^3.3.3",
     "minimatch": "^10.1.1",
     "safe-regex2": "^5.0.0",
     "zod": "^3.24.0"
   },
   "devDependencies": {
-    "@eslint/js": "^9.23.0",
+    "@eslint/js": "^9.39.1",
     "@trivago/prettier-plugin-sort-imports": "^6.0.0",
     "@types/node": "^22.10.0",
     "@vitest/coverage-v8": "^4.0.15",
     "eslint": "^9.23.0",
-    "eslint-config-prettier": "^10.1.1",
+    "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-unused-imports": "^4.3.0",
-    "prettier": "^3",
-    "tsx": "^4.19.2",
-    "typescript": "^5.7.2",
+    "prettier": "^3.7.4",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3",
     "typescript-eslint": "^8.49.0",
     "vitest": "^4.0.15"
   },