@mxf-dev/core 1.0.0 → 2.0.0

package/src/protocols/mcp/tools/shell/CommandSemantics.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/protocols/mcp/tools/shell/DestructiveCommandWarnings.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/protocols/mcp/tools/shell/LargeOutputHandler.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/protocols/mcp/tools/shell/ShellExecuteHandler.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 
@@ -47,6 +47,12 @@ import {
 } from '../../../../schemas/ShellExecutionEventPayloads.js';
 import { getSecurityGuard, SecurityContext } from '../../security/McpSecurityGuard.js';
 import { getConfirmationManager } from '../../security/McpConfirmationManager.js';
+import {
+    buildShellChildEnv,
+    getShellAllowedCommands,
+    hasShellAllowlist,
+    isShellSandboxEnabled
+} from '../../security/McpToolPolicy.js';
 import { Logger } from '../../../../utils/Logger.js';
 import { createStrictValidator } from '../../../../utils/validation.js';
 import { AgentId, ChannelId } from '../../../../types/ChannelContext.js';
@@ -56,6 +62,7 @@ import { getDestructiveWarnings } from './DestructiveCommandWarnings.js';
 import { interpretExitCode } from './CommandSemantics.js';
 import { processOutput } from './LargeOutputHandler.js';
 import { extractEffectiveCommands } from './ShellCommandParser.js';
+import { executeInSandbox } from './ShellSandbox.js';
 
 const logger = new Logger('info', 'ShellExecuteHandler', 'server');
 const validator = createStrictValidator('ShellExecuteHandler');
@@ -75,14 +82,16 @@ export interface ShellExecuteInput {
     args?: string[];
     /** Working directory for command execution */
     workingDirectory?: string;
-    /** Additional environment variables merged with process.env */
+    /**
+     * Additional environment variables for the child process. Layered on top of
+     * the minimal base environment from the tool policy — the server's own
+     * environment (secrets included) is never forwarded.
+     */
     environment?: Record<string, string>;
     /** Command timeout in milliseconds (default: 30000) */
     timeout?: number;
     /** Whether to capture and return stdout/stderr (default: true) */
     captureOutput?: boolean;
-    /** Whitelist of allowed base commands (checked before execution) */
-    allowedCommands?: string[];
     /** Human-readable description of the command's purpose */
     description?: string;
 }
@@ -307,14 +316,24 @@ export async function execute(
             );
         }
 
-        // ── 6. Check allowed commands whitelist ────────────────────────────
-        if (input.allowedCommands) {
+        // ── 6. Check the configured command allowlist ──────────────────────
+        // The allowlist comes from MXF_SHELL_ALLOWED_COMMANDS, not from the tool
+        // input. An allowlist passed as an argument is chosen by the model it is
+        // meant to restrict, which makes it decorative.
+        if (hasShellAllowlist()) {
+            const allowedCommands = getShellAllowedCommands();
             // Use the parser to extract the effective command, handling env
             // prefixes (FOO=bar cmd) and wrappers (sudo cmd, timeout 5 cmd)
             const effectiveCommands = extractEffectiveCommands(input.command);
             for (const effectiveCmd of effectiveCommands) {
-                if (!input.allowedCommands.includes(effectiveCmd)) {
-                    throw new Error(`Command '${effectiveCmd}' not in allowed commands list`);
+                // extractEffectiveCommands yields the full command line; compare
+                // on the base binary so `git status` matches an allowlisted `git`.
+                const baseCommand = effectiveCmd.trim().split(/\s+/)[0];
+                if (!allowedCommands.includes(baseCommand)) {
+                    throw new Error(
+                        `Command '${baseCommand}' is not in the configured allowlist ` +
+                        `(MXF_SHELL_ALLOWED_COMMANDS). Allowed: ${allowedCommands.join(', ')}`
+                    );
                 }
             }
         }
@@ -346,19 +365,39 @@ export async function execute(
             )
         );
 
-        // ── 9. Execute the command using spawn() ───────────────────────────
+        // ── 9. Execute the command ─────────────────────────────────────────
+        // The child gets a minimal environment built by the tool policy — PATH,
+        // HOME, locale, plus anything the caller declared. The server's own
+        // environment holds JWT_SECRET, MONGODB_URI and OPENROUTER_API_KEY and is
+        // never handed to a command an agent chose.
+        const childEnv = buildShellChildEnv(input.environment) as NodeJS.ProcessEnv;
+
         const startTime = Date.now();
         let stdout = '';
         let stderr = '';
         let exitCode = 0;
 
         try {
-            const result = await spawnCommand(
-                fullCommand,
-                input.workingDirectory || process.cwd(),
-                { ...process.env, ...input.environment } as NodeJS.ProcessEnv,
-                timeout
-            );
+            // When the sandbox is enabled the command runs inside a Docker
+            // container with no network, a read-only root, dropped capabilities
+            // and resource limits. If Docker is unavailable, executeInSandbox
+            // throws — it never falls back to running on the host.
+            const result = isShellSandboxEnabled()
+                ? await executeInSandbox(
+                    fullCommand,
+                    { enabled: true },
+                    {
+                        timeout,
+                        workingDirectory: input.workingDirectory,
+                        environment: childEnv as Record<string, string>
+                    }
+                )
+                : await spawnCommand(
+                    fullCommand,
+                    input.workingDirectory || process.cwd(),
+                    childEnv,
+                    timeout
+                );
             stdout = result.stdout;
             stderr = result.stderr;
             exitCode = result.exitCode;

package/src/protocols/mcp/tools/shell/ShellSandbox.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/protocols/mcp/tools/shell/index.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/protocols/mcp/utils/JsonRecovery.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/protocols/mcp/utils/MessageConverters.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/protocols/mcp/utils/NetworkRecovery.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/protocols/mcp/utils/ToolHandlers.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/repositories/interfaces/IAgentRepository.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/repositories/interfaces/IBaseRepository.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/repositories/interfaces/IChannelRepository.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/repositories/interfaces/IDagRepository.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/repositories/interfaces/IKnowledgeGraphRepository.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/repositories/interfaces/IMemoryRepository.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/repositories/interfaces/ITaskRepository.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/repositories/interfaces/index.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/repositories/types/FilterTypes.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/repositories/types/PaginationTypes.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/schemas/CodeExecutionEventPayloads.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/schemas/EventPayloadSchema.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 
@@ -41,6 +41,11 @@ import {
     PhaseChangedEventData,
     CycleCompletedEventData
 } from '../events/event-definitions/OrparMemoryEvents.js';
+import {
+    LlmBudgetEventData,
+    LLM_BUDGET_ACTOR_ID,
+    LLM_BUDGET_CHANNEL_ID
+} from '../events/event-definitions/LlmBudgetEvents.js';
 import {
     DagEvents,
     TaskDependenciesResolvedEventData,
@@ -2417,6 +2422,15 @@ export type ExternalMcpServerHealthStatusEventPayload = BaseEventPayload<Externa
  * Data for external MCP server tools discovered events
  */
 export interface ExternalMcpServerToolsDiscoveredEventData {
+    /**
+     * Which server these tools came from.
+     *
+     * Registration flows correlate on this. Without it, a caller awaiting its own server's
+     * tools had to assume any TOOLS_DISCOVERED event was its own — so two concurrent
+     * registrations could each resolve with the other's tools, and a channel-scoped
+     * registration could be completed by an unrelated external server's discovery.
+     */
+    serverId: string;
     name: string;
     version: string;
     tools: Array<{
@@ -4446,3 +4460,26 @@ export function createCompactionSummaryGeneratedPayload(
         options
     );
 }
+
+/**
+ * Build an LLM budget event payload.
+ *
+ * Budget events describe the server's own SystemLLM spend rather than an agent's activity,
+ * so they carry a fixed actor and the global channel.
+ *
+ * @param eventType - One of Events.LlmBudget
+ * @param data - Spend figures for the current budget day
+ * @returns A BaseEventPayload carrying the spend figures
+ */
+export function createLlmBudgetEventPayload(
+    eventType: string,
+    data: LlmBudgetEventData
+): BaseEventPayload<LlmBudgetEventData> {
+    return createBaseEventPayload<LlmBudgetEventData>(
+        eventType,
+        LLM_BUDGET_ACTOR_ID,
+        LLM_BUDGET_CHANNEL_ID,
+        data,
+        { source: 'SystemLlmBudgetService' }
+    );
+}

package/src/schemas/JsonResponseSchemas.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/schemas/MessageSchemas.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/schemas/MxpProtocolSchemas.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/schemas/ShellExecutionEventPayloads.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/services/AgentPerformanceService.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/services/AutoCorrectionIntegrationService.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/services/AutoCorrectionService.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/services/AutoMemoryCreator.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/services/BackgroundTaskManager.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 
@@ -39,6 +39,7 @@ import { AgentId, ChannelId } from '../types/ChannelContext.js';
 import { Logger } from '../utils/Logger.js';
 import { Events } from '../events/EventNames.js';
 import { EventBus } from '../events/EventBus.js';
+import { buildShellChildEnv } from '../protocols/mcp/security/McpToolPolicy.js';
 import {
     createShellExecutionProgressPayload,
     createShellBackgroundStartedPayload,
@@ -142,6 +143,10 @@ export class BackgroundTaskManager {
     private constructor() {
         // Start periodic cleanup of completed tasks older than cleanupIntervalMs
         this.cleanupTimer = setInterval(() => this.cleanupCompletedTasks(), this.cleanupIntervalMs);
+        // A periodic cleanup sweep must never be the reason a process stays alive. Without
+        // unref() this timer holds Node's event loop open, so any process that merely
+        // touched this singleton — a test worker, a one-shot CLI run — could not exit.
+        this.cleanupTimer.unref();
     }
 
     /** Get the singleton instance of BackgroundTaskManager */
@@ -183,13 +188,16 @@ export class BackgroundTaskManager {
 
         const taskId = crypto.randomUUID();
 
-        // Build spawn options
+        // Build spawn options.
+        //
+        // Background tasks are spawned directly rather than through the shell tool, so this
+        // path bypassed the security guard entirely and handed every child the full server
+        // environment — JWT_SECRET, MONGODB_URI, OPENROUTER_API_KEY and the rest. Children
+        // get the same stripped environment the guarded shell path builds.
         const spawnOptions: SpawnOptions = {
             shell: true,
             cwd: options.workingDirectory || process.cwd(),
-            env: options.environment
-                ? { ...process.env, ...options.environment }
-                : process.env,
+            env: buildShellChildEnv(options.environment),
         };
 
         const childProcess = spawn(command, [], spawnOptions);

package/src/services/BrowserManager.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 
@@ -23,7 +23,41 @@
  * Adapted from MCP-WWW server for internal MXF use
  */
 
-import puppeteer, { Browser, Page } from 'puppeteer';
+// puppeteer is an OPTIONAL peer dependency: it pulls down a ~170MB Chromium,
+// which no consumer who never opens a browser should pay for. The type import is
+// erased at compile time; the runtime module is loaded on first launch and
+// throws a clear install message if it is not present.
+import type { Browser, Page, LaunchOptions } from 'puppeteer';
+
+type PuppeteerModule = {
+    launch: (options?: LaunchOptions) => Promise<Browser>;
+};
+
+let puppeteerModule: PuppeteerModule | null = null;
+
+/**
+ * Load puppeteer on demand.
+ *
+ * @throws If puppeteer is not installed. There is no headless-less fallback —
+ *         a browser tool that quietly does nothing is worse than one that fails.
+ */
+const loadPuppeteer = async (): Promise<PuppeteerModule> => {
+    if (puppeteerModule) {
+        return puppeteerModule;
+    }
+
+    try {
+        const imported = await import('puppeteer');
+        puppeteerModule = (imported.default ?? imported) as unknown as PuppeteerModule;
+        return puppeteerModule;
+    } catch (error) {
+        throw new Error(
+            'Browser automation requires the optional peer dependency "puppeteer", which is not installed. ' +
+            'Install it with `bun add puppeteer` (or `npm install puppeteer`) to use BrowserManager. ' +
+            `Underlying error: ${error instanceof Error ? error.message : String(error)}`
+        );
+    }
+};
 
 export interface BrowserInstance {
     browser: Browser;
@@ -61,6 +95,11 @@ export class BrowserManager {
         this.cleanupInterval = setInterval(() => {
             this.cleanupIdleBrowsers();
         }, 60000); // Check every minute
+        // An idle-browser sweep must not be the reason a process stays alive. Without
+        // unref() this timer holds Node's event loop open, so anything that merely
+        // constructed this manager — including WebSearchService, which builds one — could
+        // never exit. A long-running server is kept alive by its listener, not by this.
+        this.cleanupInterval.unref();
     }
 
     async getBrowser(poolName: string = 'default'): Promise<BrowserInstance> {
@@ -134,6 +173,7 @@ export class BrowserManager {
     }
 
     private async createBrowser(): Promise<BrowserInstance> {
+        const puppeteer = await loadPuppeteer();
         const browser = await puppeteer.launch({
             headless: this.config.headless ?? true,
             args: [

package/src/services/ChannelContextMemoryOperations.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/services/ChannelContextMessageOperations.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/services/CodeExecutionSandboxService.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/services/ContainerExecutionManager.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/services/ContentProcessor.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */