@pan-sec/notebooklm-mcp 2026.1.3 → 2026.1.5

package/dist/utils/file-permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-permissions.d.ts","sourceRoot":"","sources":["../../src/utils/file-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH;;GAEG;AACH,eAAO,MAAM,SAAS,SAA+B,CAAC;AACtD,eAAO,MAAM,OAAO,SAAgC,CAAC;AACrD,eAAO,MAAM,OAAO,SAA+B,CAAC;AACpD,eAAO,MAAM,MAAM,SAAa,CAAC;AAEjC;;GAEG;AACH,eAAO,MAAM,gBAAgB;IAC3B,wDAAwD;;IAExD,+DAA+D;;IAE/D,iEAAiE;;IAEjE,yEAAyE;;CAEjE,CAAC;AAEX;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,MAA0C,GAC/C,OAAO,CAYT;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,MAAoC,GACzC,OAAO,CAYT;AAqCD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAoC,GAAG,IAAI,CAU7F;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,IAAI,GAAE,MAA0C,GAC/C,IAAI,CAYN;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,IAAI,GAAE,MAA0C,GAC/C,IAAI,CAQN;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,uBAAuB,EAAE,OAAO,CAAC;IACjC,mBAAmB,EAAE,OAAO,CAAC;CAC9B,CASA"}
+{"version":3,"file":"file-permissions.d.ts","sourceRoot":"","sources":["../../src/utils/file-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH;;GAEG;AACH,eAAO,MAAM,SAAS,SAA+B,CAAC;AACtD,eAAO,MAAM,OAAO,SAAgC,CAAC;AACrD,eAAO,MAAM,OAAO,SAA+B,CAAC;AACpD,eAAO,MAAM,MAAM,SAAa,CAAC;AAEjC;;GAEG;AACH,eAAO,MAAM,gBAAgB;IAC3B,wDAAwD;;IAExD,+DAA+D;;IAE/D,iEAAiE;;IAEjE,yEAAyE;;CAEjE,CAAC;AAEX;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,MAA0C,GAC/C,OAAO,CAYT;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,MAAoC,GACzC,OAAO,CAYT;AAwGD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAoC,GAAG,IAAI,CAU7F;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,IAAI,GAAE,MAA0C,GAC/C,IAAI,CAYN;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,IAAI,GAAE,MAA0C,GAC/C,IAAI,CAQN;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,uBAAuB,EAAE,OAAO,CAAC;IACjC,mBAAmB,EAAE,OAAO,CAAC;CAC9B,CASA"}

package/dist/utils/file-permissions.js

@@ -79,6 +79,50 @@ export function setSecureDirectoryPermissions(dirPath, mode = PERMISSION_MODES.O
         return false;
     }
 }
+/**
+ * Validate path for safe use in shell commands (defense-in-depth)
+ *
+ * @param targetPath - Path to validate
+ * @returns true if path is safe for shell use
+ */
+function isPathSafeForShell(targetPath) {
+    if (!targetPath || typeof targetPath !== "string") {
+        return false;
+    }
+    // Block shell metacharacters that could enable command injection
+    const dangerousChars = /[;&|`$<>(){}[\]!*?~\n\r]/;
+    if (dangerousChars.test(targetPath)) {
+        return false;
+    }
+    // Block path traversal attempts
+    if (targetPath.includes("..")) {
+        return false;
+    }
+    // Block UNC paths that could access network resources unexpectedly
+    if (targetPath.startsWith("\\\\")) {
+        return false;
+    }
+    // Ensure path is within reasonable length (Windows MAX_PATH is 260)
+    if (targetPath.length > 32767) {
+        return false;
+    }
+    return true;
+}
+/**
+ * Validate username for safe use in shell commands
+ *
+ * @param username - Username to validate
+ * @returns true if username is safe
+ */
+function isUsernameSafe(username) {
+    if (!username || typeof username !== "string") {
+        return false;
+    }
+    // Usernames should only contain alphanumeric, underscore, hyphen, dot
+    // and be reasonably short
+    const safeUsername = /^[a-zA-Z0-9_.\-]{1,256}$/;
+    return safeUsername.test(username);
+}
 /**
  * Set Windows file/directory permissions using icacls
  *
@@ -90,8 +134,20 @@ function setWindowsFilePermissions(targetPath, ownerOnly) {
     if (!isWindows)
         return false;
     try {
+        // Defense-in-depth: Validate path before using in shell command
+        if (!isPathSafeForShell(targetPath)) {
+            // Log would be nice but we don't have logger imported here
+            // Silently fail for invalid paths
+            return false;
+        }
         const username = process.env.USERNAME || process.env.USER;
-        if (!username) {
+        if (!username || !isUsernameSafe(username)) {
+            return false;
+        }
+        // Normalize path to resolve any . or redundant separators
+        const normalizedPath = path.normalize(targetPath);
+        // Double-check normalized path is still safe
+        if (!isPathSafeForShell(normalizedPath)) {
             return false;
         }
         if (ownerOnly) {
@@ -99,7 +155,7 @@ function setWindowsFilePermissions(targetPath, ownerOnly) {
             // /inheritance:r - Remove inherited ACLs
             // /grant:r - Replace existing permissions with specified ones
             // (F) - Full control
-            execSync(`icacls "${targetPath}" /inheritance:r /grant:r "${username}:(F)" /q`, { stdio: "pipe" });
+            execSync(`icacls "${normalizedPath}" /inheritance:r /grant:r "${username}:(F)" /q`, { stdio: "pipe" });
         }
         return true;
     }

package/dist/utils/file-permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-permissions.js","sourceRoot":"","sources":["../../src/utils/file-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AACtD,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;AACrD,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AACpD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC;AAEjC;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,wDAAwD;IACxD,gBAAgB,EAAE,KAAK;IACvB,+DAA+D;IAC/D,UAAU,EAAE,KAAK;IACjB,iEAAiE;IACjE,oBAAoB,EAAE,KAAK;IAC3B,yEAAyE;IACzE,2BAA2B,EAAE,KAAK;CAC1B,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,OAAe,gBAAgB,CAAC,gBAAgB;IAEhD,IAAI,CAAC;QACH,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;QAC9D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAe,EACf,OAAe,gBAAgB,CAAC,UAAU;IAE1C,IAAI,CAAC;QACH,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;QAC9D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,yBAAyB,CAAC,UAAkB,EAAE,SAAkB;IACvE,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAE7B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAC1D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,2EAA2E;YAC3E,yCAAyC;YACzC,8DAA8D;YAC9D,qBAAqB;YACrB,QAAQ,CACN,WAAW,UAAU,8BAA8B,QAAQ,UAAU,EACrE,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;QACjE,iEAAiE;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,OAAe,gBAAgB,CAAC,UAAU;IACrF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,IAAI,SAAS,EAAE,CAAC;YACd,0DAA0D;YAC1D,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,OAAwB,EACxB,OAAe,gBAAgB,CAAC,gBAAgB;IAEhD,iCAAiC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,WAAW,CAAC,GAAG,CAAC,CAAC;IAEjB,IAAI,SAAS,EAAE,CAAC;QACd,oDAAoD;QACpD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpC,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,OAAwB,EACxB,OAAe,gBAAgB,CAAC,gBAAgB;IAEhD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,wDAAwD;QACxD,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,qDAAqD;QACrD,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAQ7B,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS;QACT,OAAO;QACP,OAAO;QACP,uBAAuB,EAAE,MAAM;QAC/B,mBAAmB,EAAE,SAAS;KAC/B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"file-permissions.js","sourceRoot":"","sources":["../../src/utils/file-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AACtD,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;AACrD,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AACpD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC;AAEjC;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,wDAAwD;IACxD,gBAAgB,EAAE,KAAK;IACvB,+DAA+D;IAC/D,UAAU,EAAE,KAAK;IACjB,iEAAiE;IACjE,oBAAoB,EAAE,KAAK;IAC3B,yEAAyE;IACzE,2BAA2B,EAAE,KAAK;CAC1B,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,OAAe,gBAAgB,CAAC,gBAAgB;IAEhD,IAAI,CAAC;QACH,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;QAC9D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAe,EACf,OAAe,gBAAgB,CAAC,UAAU;IAE1C,IAAI,CAAC;QACH,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;QAC9D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iEAAiE;IACjE,MAAM,cAAc,GAAG,0BAA0B,CAAC;IAClD,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gCAAgC;IAChC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mEAAmE;IACnE,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oEAAoE;IACpE,IAAI,UAAU,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,QAAgB;IACtC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sEAAsE;IACtE,0BAA0B;IAC1B,MAAM,YAAY,GAAG,0BAA0B,CAAC;IAChD,OAAO,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,yBAAyB,CAAC,UAAkB,EAAE,SAAkB;IACvE,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAE7B,IAAI,CAAC;QACH,gEAAgE;QAChE,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,2DAA2D;YAC3D,kCAAkC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAC1D,IAAI,CAAC,QAAQ,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,0DAA0D;QAC1D,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAElD,6CAA6C;QAC7C,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,2EAA2E;YAC3E,yCAAyC;YACzC,8DAA8D;YAC9D,qBAAqB;YACrB,QAAQ,CACN,WAAW,cAAc,8BAA8B,QAAQ,UAAU,EACzE,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;QACjE,iEAAiE;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,OAAe,gBAAgB,CAAC,UAAU;IACrF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,IAAI,SAAS,EAAE,CAAC;YACd,0DAA0D;YAC1D,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,OAAwB,EACxB,OAAe,gBAAgB,CAAC,gBAAgB;IAEhD,iCAAiC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,WAAW,CAAC,GAAG,CAAC,CAAC;IAEjB,IAAI,SAAS,EAAE,CAAC;QACd,oDAAoD;QACpD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpC,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,OAAwB,EACxB,OAAe,gBAAgB,CAAC,gBAAgB;IAEhD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,wDAAwD;QACxD,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,qDAAqD;QACrD,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAQ7B,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS;QACT,OAAO;QACP,OAAO;QACP,uBAAuB,EAAE,MAAM;QAC/B,mBAAmB,EAAE,SAAS;KAC/B,CAAC;AACJ,CAAC"}

package/docs/MCP-DIRECTORY-LISTINGS.md

@@ -0,0 +1,184 @@
+# MCP Directory Listings Tracker
+
+Track where `@pan-sec/notebooklm-mcp` is listed and submission progress.
+
+**Last Updated:** 2026-01-24
+
+---
+
+## Current Listings
+
+| Directory | Status | URL | Notes |
+|-----------|--------|-----|-------|
+| [Glama.ai](https://glama.ai/mcp/servers) | ✅ Listed | [View Listing](https://glama.ai/mcp/servers/@Pantheon-Security/notebooklm-mcp-secure) | Auto-indexed from GitHub |
+| [awesome-mcp-servers](https://github.com/punkpeye/awesome-mcp-servers) | ⚠️ Partial | chrome-mcp-secure only | Need to add notebooklm-mcp-secure |
+
+---
+
+## Pending Submissions
+
+### Priority 1: High Impact
+
+#### Official MCP Registry
+- **URL:** https://registry.modelcontextprotocol.io/
+- **Submit via:** PR to https://github.com/modelcontextprotocol/registry
+- **Status:** ⏳ Not submitted
+- **Notes:** Official registry backed by Anthropic, GitHub, Microsoft. High visibility.
+- **Submission Guide:** https://registry.modelcontextprotocol.io/docs
+
+#### awesome-mcp-servers (Add notebooklm)
+- **URL:** https://github.com/punkpeye/awesome-mcp-servers
+- **Submit via:** Pull Request
+- **Status:** ⏳ Not submitted
+- **Notes:** Already have chrome-mcp-secure listed. Add notebooklm under "Knowledge & Memory" section.
+- **Entry to add:**
+```markdown
+- [notebooklm-mcp-secure](https://github.com/Pantheon-Security/notebooklm-mcp-secure) - Security-hardened NotebookLM MCP with post-quantum encryption, GDPR/SOC2 compliance, and 14 security layers. Query Google's Gemini-grounded research from Claude/AI agents.
+```
+
+#### PulseMCP
+- **URL:** https://www.pulsemcp.com/servers
+- **Size:** 7,900+ servers (largest directory)
+- **Submit via:** Auto-indexed from npm/GitHub or manual submission
+- **Status:** ⏳ Not submitted
+- **Notes:** Check if auto-indexed. If not, contact for listing.
+
+### Priority 2: Good Visibility
+
+#### MCP.so
+- **URL:** https://mcp.so/
+- **Submit via:** https://github.com/chatmcp/mcpso
+- **Status:** ⏳ Not submitted
+- **Notes:** Popular directory with call ranking leaderboard.
+
+#### MCPServers.org
+- **URL:** https://mcpservers.org/
+- **Submit via:** Unknown - check site
+- **Status:** ⏳ Not submitted
+- **Notes:** Has original notebooklm-mcp, not secure fork.
+
+#### Smithery.ai
+- **URL:** https://smithery.ai/
+- **Submit via:** Smithery CLI or web submission
+- **Status:** ⏳ Not submitted
+- **CLI:** `npx @anthropic-ai/mcp-registry add`
+
+#### mcp-get.com
+- **URL:** https://mcp-get.com/
+- **Submit via:** Package registry submission
+- **Status:** ⏳ Not submitted
+- **Notes:** Package manager style directory.
+
+### Priority 3: Niche/Emerging
+
+#### Azure API Center
+- **URL:** https://learn.microsoft.com/en-us/azure/api-center/register-discover-mcp-server
+- **Submit via:** Azure portal
+- **Status:** ⏳ Not applicable yet
+- **Notes:** Enterprise Azure integration. Consider for enterprise customers.
+
+#### awesome-devops-mcp-servers
+- **URL:** https://github.com/rohitg00/awesome-devops-mcp-servers
+- **Submit via:** Pull Request
+- **Status:** ⏳ Not submitted
+- **Notes:** DevOps focused list. May not be relevant.
+
+---
+
+## Submission Templates
+
+### GitHub PR Template (awesome lists)
+
+```markdown
+## Add notebooklm-mcp-secure
+
+### Description
+Adding security-hardened NotebookLM MCP server to the Knowledge & Memory section.
+
+### Server Details
+- **Name:** notebooklm-mcp-secure
+- **GitHub:** https://github.com/Pantheon-Security/notebooklm-mcp-secure
+- **npm:** @pan-sec/notebooklm-mcp
+- **Category:** Knowledge & Memory / Research
+
+### Features
+- Query Google NotebookLM from Claude/AI agents
+- Post-quantum encryption (ML-KEM-768 + ChaCha20-Poly1305)
+- GDPR, SOC2, CSSF compliance tools
+- 14 security hardening layers
+- Gemini Deep Research API integration
+
+### Checklist
+- [x] Server is open source
+- [x] Server is actively maintained
+- [x] Server has documentation
+- [x] Server is published on npm
+```
+
+### Registry JSON Template
+
+```json
+{
+  "name": "@pan-sec/notebooklm-mcp",
+  "description": "Security-hardened MCP server for NotebookLM with post-quantum encryption and enterprise compliance",
+  "repository": "https://github.com/Pantheon-Security/notebooklm-mcp-secure",
+  "homepage": "https://github.com/Pantheon-Security/notebooklm-mcp-secure#readme",
+  "keywords": [
+    "mcp",
+    "notebooklm",
+    "gemini",
+    "security",
+    "post-quantum",
+    "gdpr",
+    "soc2",
+    "compliance",
+    "claude"
+  ],
+  "categories": ["research", "knowledge", "security"],
+  "author": "Pantheon Security",
+  "license": "MIT"
+}
+```
+
+---
+
+## Tracking Progress
+
+### Completed
+- [x] Glama.ai - Auto-listed
+
+### In Progress
+- [ ] awesome-mcp-servers PR
+- [ ] Official MCP Registry submission
+- [ ] PulseMCP check/submission
+
+### Backlog
+- [ ] MCP.so
+- [ ] MCPServers.org
+- [ ] Smithery.ai
+- [ ] mcp-get.com
+
+---
+
+## Tips for Submissions
+
+1. **Timing:** Submit after a notable release (like security updates)
+2. **Description:** Lead with security angle - differentiator from original
+3. **Keywords:** Include "security", "enterprise", "compliance", "post-quantum"
+4. **Screenshots:** Consider adding demo GIFs to README for visual directories
+5. **Stars:** 14 stars shows traction - mention in submissions
+
+---
+
+## Related Projects to Cross-List
+
+Also submit these Pantheon Security MCP servers:
+
+| Project | Directories Listed |
+|---------|-------------------|
+| [chrome-mcp-secure](https://github.com/Pantheon-Security/chrome-mcp-secure) | awesome-mcp-servers ✅ |
+| [notebooklm-mcp-secure](https://github.com/Pantheon-Security/notebooklm-mcp-secure) | Glama ✅ |
+
+---
+
+*This document tracks MCP directory listings for visibility and discoverability.*

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@pan-sec/notebooklm-mcp",
-  "version": "2026.1.3",
+  "version": "2026.1.5",
+  "mcpName": "io.github.Pantheon-Security/notebooklm-mcp-secure",
   "description": "Security-hardened MCP server for NotebookLM API with enterprise compliance (GDPR, SOC2, CSSF)",
   "type": "module",
   "bin": {
@@ -47,6 +48,7 @@
   },
   "files": [
     "dist",
+    "server.json",
     "README.md",
     "SECURITY.md",
     "LICENSE",

package/server.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.Pantheon-Security/notebooklm-mcp-secure",
+  "description": "Security-hardened NotebookLM MCP with post-quantum encryption",
+  "version": "2026.1.5",
+  "repository": {
+    "url": "https://github.com/Pantheon-Security/notebooklm-mcp-secure",
+    "source": "github"
+  },
+  "packages": [
+    {
+      "registryType": "npm",
+      "identifier": "@pan-sec/notebooklm-mcp",
+      "version": "2026.1.5",
+      "transport": {
+        "type": "stdio"
+      }
+    }
+  ]
+}