@n0zer0d4y/vulcan-file-ops 1.1.1 → 1.1.2

package/CHANGELOG.md

@@ -5,6 +5,22 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.1.2] - 2025-01-12
+
+### Fixed
+
+- Added defensive string-to-array parsing for `make_directory` tool to handle MCP clients that incorrectly serialize array parameters as stringified JSON
+  - Workaround for Claude Desktop serialization issue
+  - Zero impact on correctly-functioning MCP clients (Cursor IDE verified)
+  - Includes diagnostic logging to identify problematic clients
+  - Comprehensive test coverage for stringified arrays and edge cases
+
+### Added
+
+- 4 new test cases for MCP client serialization workaround
+- Diagnostic logging when stringified array parameters are detected
+- Root Cause Analysis document in `local_docs/make_directory_batch_failure_rca.md`
+
 ## [1.1.1] - 2025-11-11
 
 ### Fixed

package/README.md

@@ -6,6 +6,7 @@
 [![MCP Server with Tools](https://badge.mcpx.dev?type=server&features=tools "MCP server with tools")](https://modelcontextprotocol.io)
 [![standard-readme compliant](https://img.shields.io/badge/readme%20style-standard-brightgreen.svg?style=flat-square)](https://github.com/RichardLitt/standard-readme)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![MseeP.ai Security Assessment Badge](https://mseep.net/pr/n0zer0d4y-vulcan-file-ops-badge.png)](https://mseep.ai/app/n0zer0d4y-vulcan-file-ops)
 
 **Transform your desktop AI assistants into powerful development partners.** Vulcan File Ops bridges the gap between conversational AI (Claude Desktop, ChatGPT Desktop, etc.) and your local filesystem, unlocking the same file manipulation capabilities found in AI-powered IDEs like Cursor and Cline. Write code, refactor projects, manage documentation, and perform complex file operations—matching the power of dedicated AI coding assistants. With enterprise-grade security controls, dynamic directory registration, and intelligent tool filtering, you maintain complete control while your AI assistant handles the heavy lifting.
 
@@ -442,6 +443,8 @@ The AI will use the `register_directory` tool to gain access, then perform opera
 
 Read file contents with flexible modes (full, head, tail, range)
 
+**Note:** This tool is limited to single-file operations only. **RECOMMENDED:** Use `read_multiple_files` instead, which supports both single and batch file operations for greater flexibility.
+
 **Input:**
 
 - `path` (string): File path
@@ -482,6 +485,8 @@ Batch read multiple files concurrently
 
 Create or replace file content
 
+**Note:** This tool is limited to single-file operations only. **RECOMMENDED:** Use `write_multiple_files` instead, which supports both single and batch file operations for greater flexibility.
+
 **Input:**
 
 - `path` (string): File path
@@ -577,6 +582,8 @@ List directory contents with multiple output formats
 
 Relocate or rename files and directories
 
+**Note:** This tool is limited to single-file operations only. **RECOMMENDED:** Use `file_operations` instead, which supports move, copy, and rename operations for both single and batch files with greater flexibility.
+
 **Input:**
 
 - `source` (string): Source path

package/dist/tools/filesystem-tools.js

@@ -433,10 +433,29 @@ export async function handleFileSystemTool(name, args) {
             if (!parsed.success) {
                 throw new Error(`Invalid arguments for make_directory: ${parsed.error}`);
             }
+            // Defensive handling for MCP clients that may stringify arrays
+            // Some MCP clients (e.g., Claude Desktop) incorrectly serialize array parameters
+            // as stringified JSON instead of proper arrays. This workaround detects and fixes that.
+            let pathsInput = parsed.data.paths;
+            // If paths is a string that looks like a JSON array, try to parse it
+            if (typeof pathsInput === "string" && pathsInput.trim().startsWith("[")) {
+                try {
+                    const parsedArray = JSON.parse(pathsInput);
+                    if (Array.isArray(parsedArray)) {
+                        pathsInput = parsedArray;
+                        // Log for diagnostics - helps identify which clients have serialization issues
+                        console.error("[INFO] make_directory: Detected and corrected stringified array parameter");
+                    }
+                }
+                catch {
+                    // If parsing fails, treat as single path (existing behavior)
+                    // This handles edge cases like paths literally named "[something]"
+                }
+            }
             // Normalize to array (single path or multiple paths)
-            const pathsToCreate = Array.isArray(parsed.data.paths)
-                ? parsed.data.paths
-                : [parsed.data.paths];
+            const pathsToCreate = Array.isArray(pathsInput)
+                ? pathsInput
+                : [pathsInput];
             // Validate all paths first (atomic - fail before any creation)
             const allowedDirs = getAllowedDirectories();
             const validatedPaths = pathsToCreate.map((dirPath) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@n0zer0d4y/vulcan-file-ops",
-  "version": "1.1.1",
+  "version": "1.1.2",
   "description": "MCP server that gives Claude Desktop and other AI assistants filesystem superpowers—read, write, edit, and manage files like AI coding assistants",
   "license": "MIT",
   "author": "Lloyd Barcatan",