@kakedashi/md-to-article-mcp 1.0.1 → 1.0.4

package/dist/clipboard.js

@@ -15,14 +15,27 @@ function copyHtmlToClipboard(html) {
     }
 }
 function copyHtmlMacOS(html) {
+    // HTML バイト列を hex に変換して AppleScript リテラルとして埋め込む。
+    // hex は [0-9A-F] のみで構成されるためインジェクション不可。
     const hex = Buffer.from(html, "utf-8").toString("hex").toUpperCase();
     const script = `set the clipboard to «data HTML${hex}»`;
-    (0, child_process_1.execSync)(`osascript -e '${script.replace(/'/g, "'\"'\"'")}'`);
+    // osascript に配列で渡すことでシェル展開を経由しない。
+    const result = (0, child_process_1.spawnSync)("osascript", ["-e", script]);
+    if (result.status !== 0) {
+        throw new Error(result.stderr?.toString() ?? "osascript failed");
+    }
 }
 function copyHtmlWindows(html) {
-    const escaped = html.replace(/"/g, '\\"');
-    (0, child_process_1.execSync)(`powershell -Command "Set-Clipboard -Value \\"${escaped}\\" -AsHtml"`, { shell: "powershell.exe" });
+    // PowerShell に HTML を stdin 経由で渡し、コマンド文字列への展開を避ける。
+    const result = (0, child_process_1.spawnSync)("powershell", ["-NoProfile", "-Command", "$input | Set-Clipboard -AsHtml"], { input: html, encoding: "utf-8", shell: false });
+    if (result.status !== 0) {
+        throw new Error(result.stderr?.toString() ?? "Set-Clipboard failed");
+    }
 }
 function copyHtmlLinux(html) {
-    (0, child_process_1.execSync)(`echo ${JSON.stringify(html)} | xclip -selection clipboard -t text/html`);
+    // xclip に HTML を stdin 経由で渡す。シェルを介さないので展開なし。
+    const result = (0, child_process_1.spawnSync)("xclip", ["-selection", "clipboard", "-t", "text/html"], { input: html, encoding: "utf-8", shell: false });
+    if (result.status !== 0) {
+        throw new Error(result.stderr?.toString() ?? "xclip failed");
+    }
 }

package/dist/index.js

@@ -70,6 +70,12 @@ server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
     }
     const { filepath } = request.params.arguments;
     const resolvedPath = path.resolve(filepath.replace(/^~/, os_1.default.homedir()));
+    if (path.extname(resolvedPath) !== ".md") {
+        return {
+            content: [{ type: "text", text: `ファイルの拡張子が .md ではありません: ${filepath}` }],
+            isError: true,
+        };
+    }
     // ファイル読み込み
     let markdown;
     try {
@@ -130,6 +136,19 @@ server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
     };
 });
 async function main() {
+    const filepath = process.argv[2];
+    if (filepath) {
+        const resolvedPath = path.resolve(filepath.replace(/^~/, os_1.default.homedir()));
+        if (path.extname(resolvedPath) !== ".md") {
+            console.error(`ファイルの拡張子が .md ではありません: ${filepath}`);
+            process.exit(1);
+        }
+        const markdown = fs.readFileSync(resolvedPath, "utf-8");
+        const html = (0, converter_js_1.convertMarkdownToHtml)(markdown);
+        (0, clipboard_js_1.copyHtmlToClipboard)(html);
+        console.log(`コピーしました: ${filepath}`);
+        process.exit(0);
+    }
     const transport = new stdio_js_1.StdioServerTransport();
     await server.connect(transport);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kakedashi/md-to-article-mcp",
-  "version": "1.0.1",
+  "version": "1.0.4",
   "description": "MCP tool to convert Markdown files to rich text and copy to clipboard for X Article editor",
   "main": "dist/index.js",
   "bin": {