@lousy-agents/mcp 5.9.6 → 5.11.0

package/dist/mcp-server.js

@@ -42426,11 +42426,14 @@ var external_node_path_ = __webpack_require__(6760);
  * List of known action names for convenience
  */ const KNOWN_ACTIONS = Object.keys(DEFAULT_ACTION_VERSIONS);
 
+// EXTERNAL MODULE: external "node:fs"
+var external_node_fs_ = __webpack_require__(3024);
 ;// CONCATENATED MODULE: ../core/src/gateways/file-system-utils.ts
 /**
  * Shared file system utilities for gateways.
  */ 
 
+
 /**
  * Checks if a file or directory exists.
  */ async function file_system_utils_fileExists(path) {
@@ -42500,6 +42503,44 @@ function isPathWithinRoot(rootPath, candidatePath) {
         throw new Error(`${context} exceeds size limit (${fileStats.size} bytes > ${maxBytes} bytes)`);
     }
 }
+/**
+ * Reads a file atomically with symlink and size protection.
+ *
+ * Uses `O_NOFOLLOW` (where available) to atomically reject symlinks at
+ * the kernel level, eliminating the TOCTOU window between `lstat()` and
+ * `readFile()`. Falls back to `lstat()` on platforms without `O_NOFOLLOW`.
+ * Validates file size via `fstat()` on the opened file descriptor so the
+ * size check and the read operate on the same inode.
+ */ async function file_system_utils_readFileNoFollow(filePath, maxBytes) {
+    const hasNoFollow = typeof external_node_fs_.constants.O_NOFOLLOW === "number" && external_node_fs_.constants.O_NOFOLLOW !== 0;
+    const safePath = JSON.stringify(filePath);
+    let fh;
+    if (hasNoFollow) {
+        try {
+            fh = await (0,promises_.open)(filePath, external_node_fs_.constants.O_RDONLY | external_node_fs_.constants.O_NOFOLLOW);
+        } catch (error) {
+            if (error instanceof Error && "code" in error && error.code === "ELOOP") {
+                throw new Error(`Symlinks are not allowed: ${safePath}`);
+            }
+            throw error;
+        }
+    } else {
+        const stats = await (0,promises_.lstat)(filePath);
+        if (stats.isSymbolicLink()) {
+            throw new Error(`Symlinks are not allowed: ${safePath}`);
+        }
+        fh = await (0,promises_.open)(filePath, external_node_fs_.constants.O_RDONLY);
+    }
+    try {
+        const fdStats = await fh.stat();
+        if (fdStats.size > maxBytes) {
+            throw new Error(`File ${safePath} exceeds size limit (${fdStats.size} bytes > ${maxBytes} bytes)`);
+        }
+        return await fh.readFile("utf-8");
+    } finally{
+        await fh.close();
+    }
+}
 
 ;// CONCATENATED MODULE: ../core/src/gateways/agent-file-gateway.ts
 /**
@@ -42611,8 +42652,6 @@ function isPathWithinRoot(rootPath, candidatePath) {
     "pip"
 ];
 
-// EXTERNAL MODULE: external "node:fs"
-var external_node_fs_ = __webpack_require__(3024);
 ;// CONCATENATED MODULE: ../../node_modules/pathe/dist/shared/pathe.M-eThtNZ.mjs
 let _lazyMatch = () => { var __lib__=(()=>{var m=Object.defineProperty,V=Object.getOwnPropertyDescriptor,G=Object.getOwnPropertyNames,T=Object.prototype.hasOwnProperty,q=(r,e)=>{for(var n in e)m(r,n,{get:e[n],enumerable:true});},H=(r,e,n,a)=>{if(e&&typeof e=="object"||typeof e=="function")for(let t of G(e))!T.call(r,t)&&t!==n&&m(r,t,{get:()=>e[t],enumerable:!(a=V(e,t))||a.enumerable});return r},J=r=>H(m({},"__esModule",{value:true}),r),w={};q(w,{default:()=>re});var A=r=>Array.isArray(r),d=r=>typeof r=="function",Q=r=>r.length===0,W=r=>typeof r=="number",K=r=>typeof r=="object"&&r!==null,X=r=>r instanceof RegExp,b=r=>typeof r=="string",h=r=>r===void 0,Y=r=>{const e=new Map;return n=>{const a=e.get(n);if(a)return a;const t=r(n);return e.set(n,t),t}},rr=(r,e,n={})=>{const a={cache:{},input:r,index:0,indexMax:0,options:n,output:[]};if(v(e)(a)&&a.index===r.length)return a.output;throw new Error(`Failed to parse at index ${a.indexMax}`)},i=(r,e)=>A(r)?er(r,e):b(r)?ar(r,e):nr(r,e),er=(r,e)=>{const n={};for(const a of r){if(a.length!==1)throw new Error(`Invalid character: "${a}"`);const t=a.charCodeAt(0);n[t]=true;}return a=>{const t=a.index,o=a.input;for(;a.index<o.length&&o.charCodeAt(a.index)in n;)a.index+=1;const u=a.index;if(u>t){if(!h(e)&&!a.options.silent){const s=a.input.slice(t,u),c=d(e)?e(s,o,String(t)):e;h(c)||a.output.push(c);}a.indexMax=Math.max(a.indexMax,a.index);}return  true}},nr=(r,e)=>{const n=r.source,a=r.flags.replace(/y|$/,"y"),t=new RegExp(n,a);return g(o=>{t.lastIndex=o.index;const u=t.exec(o.input);if(u){if(!h(e)&&!o.options.silent){const s=d(e)?e(...u,o.input,String(o.index)):e;h(s)||o.output.push(s);}return o.index+=u[0].length,o.indexMax=Math.max(o.indexMax,o.index),true}else return  false})},ar=(r,e)=>n=>{if(n.input.startsWith(r,n.index)){if(!h(e)&&!n.options.silent){const t=d(e)?e(r,n.input,String(n.index)):e;h(t)||n.output.push(t);}return n.index+=r.length,n.indexMax=Math.max(n.indexMax,n.index),true}else return  false},C=(r,e,n,a)=>{const t=v(r);return g(_(M(o=>{let u=0;for(;u<n;){const s=o.index;if(!t(o)||(u+=1,o.index===s))break}return u>=e})))},tr=(r,e)=>C(r,0,1),f=(r,e)=>C(r,0,1/0),x=(r,e)=>{const n=r.map(v);return g(_(M(a=>{for(let t=0,o=n.length;t<o;t++)if(!n[t](a))return  false;return  true})))},l=(r,e)=>{const n=r.map(v);return g(_(a=>{for(let t=0,o=n.length;t<o;t++)if(n[t](a))return  true;return  false}))},M=(r,e=false)=>{const n=v(r);return a=>{const t=a.index,o=a.output.length,u=n(a);return (!u||e)&&(a.index=t,a.output.length!==o&&(a.output.length=o)),u}},_=(r,e)=>{const n=v(r);return n},g=(()=>{let r=0;return e=>{const n=v(e),a=r+=1;return t=>{var o;if(t.options.memoization===false)return n(t);const u=t.index,s=(o=t.cache)[a]||(o[a]=new Map),c=s.get(u);if(c===false)return  false;if(W(c))return t.index=c,true;if(c)return t.index=c.index,c.output?.length&&t.output.push(...c.output),true;{const Z=t.output.length;if(n(t)){const D=t.index,U=t.output.length;if(U>Z){const ee=t.output.slice(Z,U);s.set(u,{index:D,output:ee});}else s.set(u,D);return  true}else return s.set(u,false),false}}}})(),E=r=>{let e;return n=>(e||(e=v(r())),e(n))},v=Y(r=>{if(d(r))return Q(r)?E(r):r;if(b(r)||X(r))return i(r);if(A(r))return x(r);if(K(r))return l(Object.values(r));throw new Error("Invalid rule")}),P="abcdefghijklmnopqrstuvwxyz",ir=r=>{let e="";for(;r>0;){const n=(r-1)%26;e=P[n]+e,r=Math.floor((r-1)/26);}return e},O=r=>{let e=0;for(let n=0,a=r.length;n<a;n++)e=e*26+P.indexOf(r[n])+1;return e},S=(r,e)=>{if(e<r)return S(e,r);const n=[];for(;r<=e;)n.push(r++);return n},or=(r,e,n)=>S(r,e).map(a=>String(a).padStart(n,"0")),R=(r,e)=>S(O(r),O(e)).map(ir),p=r=>r,z=r=>ur(e=>rr(e,r,{memoization:false}).join("")),ur=r=>{const e={};return n=>e[n]??(e[n]=r(n))},sr=i(/^\*\*\/\*$/,".*"),cr=i(/^\*\*\/(\*)?([ a-zA-Z0-9._-]+)$/,(r,e,n)=>`.*${e?"":"(?:^|/)"}${n.replaceAll(".","\\.")}`),lr=i(/^\*\*\/(\*)?([ a-zA-Z0-9._-]*)\{([ a-zA-Z0-9._-]+(?:,[ a-zA-Z0-9._-]+)*)\}$/,(r,e,n,a)=>`.*${e?"":"(?:^|/)"}${n.replaceAll(".","\\.")}(?:${a.replaceAll(",","|").replaceAll(".","\\.")})`),y=i(/\\./,p),pr=i(/[$.*+?^(){}[\]\|]/,r=>`\\${r}`),vr=i(/./,p),hr=i(/^(?:!!)*!(.*)$/,(r,e)=>`(?!^${L(e)}$).*?`),dr=i(/^(!!)+/,""),fr=l([hr,dr]),xr=i(/\/(\*\*\/)+/,"(?:/.+/|/)"),gr=i(/^(\*\*\/)+/,"(?:^|.*/)"),mr=i(/\/(\*\*)$/,"(?:/.*|$)"),_r=i(/\*\*/,".*"),j=l([xr,gr,mr,_r]),Sr=i(/\*\/(?!\*\*\/)/,"[^/]*/"),yr=i(/\*/,"[^/]*"),N=l([Sr,yr]),k=i("?","[^/]"),$r=i("[",p),wr=i("]",p),Ar=i(/[!^]/,"^/"),br=i(/[a-z]-[a-z]|[0-9]-[0-9]/i,p),Cr=i(/[$.*+?^(){}[\|]/,r=>`\\${r}`),Mr=i(/[^\]]/,p),Er=l([y,Cr,br,Mr]),B=x([$r,tr(Ar),f(Er),wr]),Pr=i("{","(?:"),Or=i("}",")"),Rr=i(/(\d+)\.\.(\d+)/,(r,e,n)=>or(+e,+n,Math.min(e.length,n.length)).join("|")),zr=i(/([a-z]+)\.\.([a-z]+)/,(r,e,n)=>R(e,n).join("|")),jr=i(/([A-Z]+)\.\.([A-Z]+)/,(r,e,n)=>R(e.toLowerCase(),n.toLowerCase()).join("|").toUpperCase()),Nr=l([Rr,zr,jr]),I=x([Pr,Nr,Or]),kr=i("{","(?:"),Br=i("}",")"),Ir=i(",","|"),Fr=i(/[$.*+?^(){[\]\|]/,r=>`\\${r}`),Lr=i(/[^}]/,p),Zr=E(()=>F),Dr=l([j,N,k,B,I,Zr,y,Fr,Ir,Lr]),F=x([kr,f(Dr),Br]),Ur=f(l([sr,cr,lr,fr,j,N,k,B,I,F,y,pr,vr])),Vr=Ur,Gr=z(Vr),L=Gr,Tr=i(/\\./,p),qr=i(/./,p),Hr=i(/\*\*\*+/,"*"),Jr=i(/([^/{[(!])\*\*/,(r,e)=>`${e}*`),Qr=i(/(^|.)\*\*(?=[^*/)\]}])/,(r,e)=>`${e}*`),Wr=f(l([Tr,Hr,Jr,Qr,qr])),Kr=Wr,Xr=z(Kr),Yr=Xr,$=(r,e)=>{const n=Array.isArray(r)?r:[r];if(!n.length)return  false;const a=n.map($.compile),t=n.every(s=>/(\/(?:\*\*)?|\[\/\])$/.test(s)),o=e.replace(/[\\\/]+/g,"/").replace(/\/$/,t?"/":"");return a.some(s=>s.test(o))};$.compile=r=>new RegExp(`^${L(Yr(r))}$`,"s");var re=$;return J(w)})();
  return __lib__.default || __lib__; };
@@ -47728,6 +47767,7 @@ var yaml_dist = __webpack_require__(3519);
 
 
 
+/** Maximum skill file size: 1 MB */ const MAX_SKILL_FILE_BYTES = 1_048_576;
 /**
  * Skill directory locations to search for SKILL.md files.
  */ const SKILL_DIRECTORIES = [
@@ -47747,12 +47787,29 @@ var yaml_dist = __webpack_require__(3519);
         return skills;
     }
     async discoverSkillsInDir(skillsDir) {
-        if (!await fileExists(skillsDir)) {
+        let dirStats;
+        try {
+            dirStats = await lstat(skillsDir);
+        } catch (error) {
+            if (error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR")) {
+                return [];
+            }
+            throw error;
+        }
+        if (dirStats.isSymbolicLink() || !dirStats.isDirectory()) {
             return [];
         }
-        const entries = await readdir(skillsDir, {
-            withFileTypes: true
-        });
+        let entries;
+        try {
+            entries = await readdir(skillsDir, {
+                withFileTypes: true
+            });
+        } catch (error) {
+            if (error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR")) {
+                return [];
+            }
+            throw error;
+        }
         const skills = [];
         for (const entry of entries){
             if (!entry.isDirectory()) {
@@ -47762,7 +47819,17 @@ var yaml_dist = __webpack_require__(3519);
                 continue;
             }
             const skillFilePath = join(skillsDir, entry.name, "SKILL.md");
-            if (await fileExists(skillFilePath)) {
+            let skillStat;
+            try {
+                skillStat = await lstat(skillFilePath);
+            } catch (error) {
+                if (error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR")) {
+                    skillStat = null;
+                } else {
+                    throw error;
+                }
+            }
+            if (skillStat && !skillStat.isSymbolicLink() && skillStat.isFile()) {
                 skills.push({
                     filePath: skillFilePath,
                     skillName: entry.name
@@ -47772,7 +47839,7 @@ var yaml_dist = __webpack_require__(3519);
         return skills;
     }
     async readSkillFileContent(filePath) {
-        return readFile(filePath, "utf-8");
+        return readFileNoFollow(filePath, MAX_SKILL_FILE_BYTES);
     }
     parseFrontmatter(content) {
         const lines = content.split("\n");
@@ -67314,11 +67381,12 @@ const remark = unified().use(remarkParse).use(remarkStringify).freeze()
  */ 
 
 
+/** Maximum instruction file size: 1 MB */ const MAX_INSTRUCTION_FILE_BYTES = 1_048_576;
 /**
  * Remark-based implementation of the Markdown AST gateway.
  */ class RemarkMarkdownAstGateway {
     async parseFile(filePath) {
-        const content = await (0,promises_.readFile)(filePath, "utf-8");
+        const content = await file_system_utils_readFileNoFollow(filePath, MAX_INSTRUCTION_FILE_BYTES);
         return this.parseContent(content);
     }
     parseContent(content) {