@layerporter/image-optimizer-mcp 0.1.0 → 0.1.1

package/README.md

@@ -4,7 +4,7 @@ Technical candidate for page-aware website image optimization through Model Cont
 
 ## Status
 
-The package is release-prepared but is **not yet claimed as a public npm or Official MCP Registry release**. Publication status changes only after the exact npm version and Registry entry are externally verified.
+Version 0.1.0 is already public on npm. Version 0.1.1 is the security-hardening release candidate. Official MCP Registry publication is a separate step and is not implied by npm publication.
 
 Registry identity:
 
@@ -57,9 +57,7 @@ node src/server.js
 
 The last command starts the stdio MCP server and waits for a client connection. `npm pack` also runs `sync:core` through `prepack`; source setup and packed-artifact setup are verified separately.
 
-## Installation after public release
-
-Do not treat this command as available until the npm package has actually been published and verified:
+## Installation
 
 ```bash
 npx -y @layerporter/image-optimizer-mcp
@@ -81,6 +79,8 @@ Official MCP Registry publication happens only **after** the matching npm versio
 
 The current MCP package:
 
+- accepts untrusted image input only as JPEG, PNG, or WebP; HEIF/AVIF, TIFF, GIF, SVG and unknown input decoders are fail-closed blocked; AVIF remains available as an output format;
+
 - performs bounded public HTTP(S) reads only through `analyze_url_images` and `optimize_url_images`;
 - blocks unsafe URL schemes, URL credentials, localhost/private/link-local/reserved targets, unsafe DNS answers and redirects to prohibited addresses;
 - caps page bytes, per-image bytes, accepted total image bytes, redirects, image count, timeouts and concurrency;
@@ -116,7 +116,6 @@ Canonical product pages after site release:
 
 ## Not yet included
 
-- confirmed public npm release;
 - confirmed Official MCP Registry publication;
 - hosted endpoint;
 - full browser crawler/runtime metrics collection;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@layerporter/image-optimizer-mcp",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Page-aware MCP server for deterministic website image analysis and safe optimization.",
   "mcpName": "com.layerporter/website-image-optimizer",
   "type": "module",
@@ -30,12 +30,12 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/OlegStrateg/layerporter-site.git",
+    "url": "git+https://github.com/OlegStrateg/lp-site.git",
     "directory": "packages/image-optimizer-mcp"
   },
   "homepage": "https://layerporter.com/mcp/website-image-optimizer/",
   "bugs": {
-    "url": "https://github.com/OlegStrateg/layerporter-site/issues"
+    "url": "https://github.com/OlegStrateg/lp-site/issues"
   },
   "keywords": [
     "mcp",

package/server.json

@@ -5,16 +5,16 @@
   "description": "Page-aware website image analysis and safe optimization MCP server.",
   "websiteUrl": "https://layerporter.com/mcp/website-image-optimizer/",
   "repository": {
-    "url": "https://github.com/OlegStrateg/layerporter-site",
+    "url": "https://github.com/OlegStrateg/lp-site",
     "source": "github",
     "subfolder": "packages/image-optimizer-mcp"
   },
-  "version": "0.1.0",
+  "version": "0.1.1",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@layerporter/image-optimizer-mcp",
-      "version": "0.1.0",
+      "version": "0.1.1",
       "transport": {
         "type": "stdio"
       }

package/src/image-core/index.js

@@ -1,12 +1,48 @@
 import sharp from 'sharp';
 import { chooseOutputFormat, validatePolicy } from './policy.js';
 
+const ALLOWED_UNTRUSTED_BUFFER_LOADERS = Object.freeze([
+  'VipsForeignLoadJpegBuffer',
+  'VipsForeignLoadPngBuffer',
+  'VipsForeignLoadWebpBuffer',
+]);
+
+const PNG_SIGNATURE = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);
+
+// Native decoder boundary: fail closed for all foreign input, then reopen only
+// Buffer loaders that are part of LayerPorter's supported input contract.
+// HEIF/AVIF decoding stays disabled until the bundled runtime is independently
+// verified with libheif >=1.23.4, the current advisory set is re-reviewed, and
+// input support is explicitly re-approved.
+sharp.block({ operation: ['VipsForeignLoad'] });
+sharp.unblock({ operation: ALLOWED_UNTRUSTED_BUFFER_LOADERS });
+
 function assertBuffer(input) {
   if (!Buffer.isBuffer(input) || input.length === 0) {
     throw new TypeError('input must be a non-empty Buffer');
   }
 }
 
+function detectAllowedInputFormat(input) {
+  if (input.length >= 2 && input[0] === 0xff && input[1] === 0xd8) return 'jpeg';
+  if (input.length >= PNG_SIGNATURE.length && input.subarray(0, PNG_SIGNATURE.length).equals(PNG_SIGNATURE)) return 'png';
+  if (
+    input.length >= 12
+    && input.toString('ascii', 0, 4) === 'RIFF'
+    && input.toString('ascii', 8, 12) === 'WEBP'
+  ) return 'webp';
+  return null;
+}
+
+function assertAllowedInputFormat(input) {
+  const format = detectAllowedInputFormat(input);
+  if (format) return format;
+
+  const error = new TypeError('Unsupported or security-blocked input format; allowed input formats: JPEG, PNG, WebP');
+  error.code = 'INPUT_FORMAT_NOT_ALLOWED';
+  throw error;
+}
+
 function assertTarget(target = {}) {
   for (const key of ['width', 'height']) {
     if (target[key] !== undefined && (!Number.isInteger(target[key]) || target[key] < 1)) {
@@ -42,8 +78,32 @@ function encoder(pipeline, format, policy) {
   }
 }
 
+async function inspectEncodedOutput(data, info, outputFormat, policy) {
+  // HEIF/AVIF input is intentionally blocked in this process. For an AVIF we
+  // just encoded from an already validated input, use Sharp's encode result
+  // metadata instead of reopening the HEIF decoder. Independent fresh-process
+  // decode remains part of the regression/release gate.
+  if (outputFormat === 'avif') {
+    return {
+      format: 'avif',
+      hasAlpha: info.channels === 4,
+      orientation: null,
+      space: info.space ?? null,
+    };
+  }
+
+  const metadata = await sharp(data, { limitInputPixels: policy.maxPixels }).metadata();
+  return {
+    format: normalizeFormat(metadata.format, metadata.compression),
+    hasAlpha: Boolean(metadata.hasAlpha),
+    orientation: metadata.orientation ?? null,
+    space: metadata.space ?? null,
+  };
+}
+
 export async function inspectImage(input, options = {}) {
   assertBuffer(input);
+  assertAllowedInputFormat(input);
   const policy = validatePolicy(options.policy);
   const metadata = await sharp(input, { limitInputPixels: policy.maxPixels }).metadata();
 
@@ -139,7 +199,7 @@ export async function optimizeImage(input, options = {}) {
     };
   }
 
-  const outputMetadata = await sharp(data, { limitInputPixels: policy.maxPixels }).metadata();
+  const outputMetadata = await inspectEncodedOutput(data, info, outputFormat, policy);
   if (policy.preserveAlpha && original.hasAlpha && !outputMetadata.hasAlpha) {
     throw new Error('alpha preservation guard failed');
   }
@@ -150,12 +210,12 @@ export async function optimizeImage(input, options = {}) {
     original,
     output: {
       bytes: data.length,
-      format: normalizeFormat(outputMetadata.format, outputMetadata.compression),
+      format: outputMetadata.format,
       width: info.width,
       height: info.height,
-      hasAlpha: Boolean(outputMetadata.hasAlpha),
-      orientation: outputMetadata.orientation ?? null,
-      space: outputMetadata.space ?? null,
+      hasAlpha: outputMetadata.hasAlpha,
+      orientation: outputMetadata.orientation,
+      space: outputMetadata.space,
     },
     outputFormat,
     savingsBytes,

package/src/server.js

@@ -24,7 +24,7 @@ const OPEN_WORLD_READ_ANNOTATIONS = Object.freeze({
 export function createServer({ artifactStore = new ArtifactStore() } = {}) {
   const server = new McpServer({
     name: 'layerporter-image-optimizer',
-    version: '0.1.0',
+    version: '0.1.1',
     title: 'LayerPorter Website Image Optimizer',
     websiteUrl: 'https://layerporter.com/mcp/website-image-optimizer/',
   });