@papercraneai/sandbox-agent 0.1.6 → 0.1.8

package/dist/index.js

@@ -4,7 +4,7 @@ import { createServer } from "http";
 import { WebSocketServer, WebSocket } from "ws";
 import { Tail } from "tail";
 import { query, tool, createSdkMcpServer } from "@anthropic-ai/claude-agent-sdk";
-import { readdir, stat, mkdir, readFile, writeFile, access, unlink } from "fs/promises";
+import { readdir, stat, mkdir, readFile, writeFile, access, unlink, rm } from "fs/promises";
 import { join, dirname, resolve } from "path";
 import { fileURLToPath } from "url";
 import { spawn, execSync } from "child_process";
@@ -383,11 +383,14 @@ const showPreviewTool = tool("ShowPreview", "Shows the preview iframe for a spec
             }]
     };
 });
-// Create MCP server for client-side tools
-const clientToolsServer = createSdkMcpServer({
-    name: "client-tools",
-    tools: [showPreviewTool]
-});
+// Factory to create a fresh MCP server per chat session
+// (each Protocol instance can only be connected to one transport at a time)
+function createClientToolsServer() {
+    return createSdkMcpServer({
+        name: "client-tools",
+        tools: [showPreviewTool]
+    });
+}
 // Recursively build file tree
 async function buildFileTree(dirPath) {
     const entries = await readdir(dirPath, { withFileTypes: true });
@@ -837,13 +840,17 @@ app.delete("/files/delete", async (req, res) => {
             res.status(403).json({ error: "Access denied: path outside project directory" });
             return;
         }
-        // Check if file exists and is not a directory
+        // Prevent deleting the project root itself
+        if (resolvedPath === resolvedProject) {
+            res.status(400).json({ error: "Cannot delete the project root directory" });
+            return;
+        }
+        const recursive = req.query.recursive === "true" || req.body?.recursive === true;
+        // Check if path exists
+        let isDirectory = false;
         try {
             const stats = await stat(fullPath);
-            if (stats.isDirectory()) {
-                res.status(400).json({ error: "Cannot delete a directory, only files", path: sanitizedPath });
-                return;
-            }
+            isDirectory = stats.isDirectory();
         }
         catch (error) {
             if (error.code === "ENOENT") {
@@ -852,8 +859,17 @@ app.delete("/files/delete", async (req, res) => {
             }
             throw error;
         }
-        // Delete the file
-        await unlink(fullPath);
+        if (isDirectory && !recursive) {
+            res.status(400).json({ error: "Cannot delete a directory without recursive flag", path: sanitizedPath });
+            return;
+        }
+        // Delete file or directory
+        if (isDirectory) {
+            await rm(fullPath, { recursive: true });
+        }
+        else {
+            await unlink(fullPath);
+        }
         log.info({ path: sanitizedPath }, "File deleted");
         res.json({
             success: true,
@@ -1167,13 +1183,14 @@ app.post("/chat", async (req, res) => {
         "KillShell",
         "mcp__client-tools__ShowPreview"
     ];
+    const clientTools = createClientToolsServer();
     const options = {
         maxTurns,
         cwd,
         permissionMode: "bypassPermissions",
         allowDangerouslySkipPermissions: true,
         mcpServers: {
-            "client-tools": clientToolsServer
+            "client-tools": clientTools
         },
         allowedTools: allowedTools || defaultTools,
         settingSources: ["project"],
@@ -1254,6 +1271,10 @@ app.post("/chat", async (req, res) => {
             res.end();
         }
     }
+    finally {
+        // Close the per-session MCP server to free resources
+        await clientTools.instance?.close().catch(() => { });
+    }
 });
 // =============================================================================
 // Registration & Heartbeat

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@papercraneai/sandbox-agent",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "Claude Agent SDK server for sandbox environments",
   "license": "MIT",
   "type": "module",