@mastra/mcp-docs-server 0.13.20 → 0.13.21-alpha.0

package/dist/stdio.js

@@ -844,7 +844,7 @@ async function readMdxContent(docPath, queryKeywords) {
   const fullPath = path3__default.resolve(path3__default.join(docsBaseDir, docPath));
   if (!fullPath.startsWith(path3__default.resolve(docsBaseDir))) {
     void logger.error(`Path traversal attempt detected`);
-    return { found: false };
+    return { found: false, isSecurityViolation: true };
   }
   void logger.debug(`Reading MDX content from: ${fullPath}`);
   try {
@@ -877,14 +877,14 @@ ${content2}`;
       }
       const contentBasedSuggestions = await getMatchingPaths(docPath, queryKeywords, docsBaseDir);
       const suggestions = ["---", "", contentBasedSuggestions, ""].join("\n");
-      return { found: true, content: dirListing + fileContents + suggestions };
+      return { found: true, content: dirListing + fileContents + suggestions, isSecurityViolation: false };
     }
     const content = await fs3.readFile(fullPath, "utf-8");
-    return { found: true, content };
+    return { found: true, content, isSecurityViolation: false };
   } catch (error) {
     void logger.error(`Failed to read MDX content: ${fullPath}`, error);
     if (error.code === "ENOENT") {
-      return { found: false };
+      return { found: false, isSecurityViolation: false };
     }
     throw error;
   }
@@ -979,6 +979,13 @@ var docsTool = {
                 error: null
               };
             }
+            if (result.isSecurityViolation) {
+              return {
+                path: path6,
+                content: null,
+                error: "Invalid path"
+              };
+            }
             const directorySuggestions = await findNearestDirectory(path6, availablePaths);
             const contentBasedSuggestions = await getMatchingPaths(path6, queryKeywords, docsBaseDir);
             return {

package/dist/tools/docs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"docs.d.ts","sourceRoot":"","sources":["../../src/tools/docs.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgKxB,eAAO,MAAM,eAAe;;;;;;;;;EAW1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,QAAQ;;;;;;;;;;;;;oBAkBG,SAAS;CAiDhC,CAAC"}
+{"version":3,"file":"docs.d.ts","sourceRoot":"","sources":["../../src/tools/docs.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAkKxB,eAAO,MAAM,eAAe;;;;;;;;;EAW1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,QAAQ;;;;;;;;;;;;;oBAkBG,SAAS;CAwDhC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mastra/mcp-docs-server",
-  "version": "0.13.20",
+  "version": "0.13.21-alpha.0",
   "description": "MCP server for accessing Mastra.ai documentation, changelogs, and news.",
   "type": "module",
   "main": "dist/index.js",
@@ -33,7 +33,7 @@
     "uuid": "^11.1.0",
     "zod": "^3.25.76",
     "zod-to-json-schema": "^3.24.6",
-    "@mastra/core": "0.16.2",
+    "@mastra/core": "0.16.3-alpha.0",
     "@mastra/mcp": "^0.12.0"
   },
   "devDependencies": {
@@ -44,13 +44,13 @@
     "@wong2/mcp-cli": "^1.10.0",
     "cross-env": "^7.0.3",
     "eslint": "^9.30.1",
-    "hono": "^4.8.12",
+    "hono": "^4.9.6",
     "tsup": "^8.5.0",
     "tsx": "^4.19.4",
     "typescript": "^5.8.3",
     "vitest": "^3.2.4",
     "@internal/lint": "0.0.38",
-    "@mastra/core": "0.16.2"
+    "@mastra/core": "0.16.3-alpha.0"
   },
   "homepage": "https://mastra.ai",
   "repository": {