@pathmode/mcp-server 1.20.0 → 1.20.1

package/dist/index.js

@@ -39615,6 +39615,9 @@ async function exchangeCode(code, origin, existing) {
 }
 /** Add cloud identity to the existing frontmatter without reformatting the user's spec body. */
 function patchAdoptedIntentFrontmatter(filePath, values) {
+    if (fs_1.default.lstatSync(filePath).isSymbolicLink()) {
+        throw new Error('Refusing to update a symbolic-link intent.md. Use a regular file inside the repository.');
+    }
     const raw = fs_1.default.readFileSync(filePath, 'utf8');
     const newline = raw.includes('\r\n') ? '\r\n' : '\n';
     if (!raw.startsWith(`---${newline}`)) {
@@ -39646,6 +39649,9 @@ async function runAdopt(argv = process.argv) {
     if (!code)
         throw new Error('Usage: npx @pathmode/mcp-server@latest adopt pm_adopt_…');
     const filePath = path_1.default.join(process.cwd(), 'intent.md');
+    if (fs_1.default.existsSync(filePath) && fs_1.default.lstatSync(filePath).isSymbolicLink()) {
+        throw new Error('Refusing to adopt a symbolic-link intent.md. Use a regular file inside the repository.');
+    }
     const intent = (0, local_reader_1.readIntentFile)(filePath);
     const meta = (0, local_reader_1.readIntentMeta)(filePath);
     if (!intent || !meta?.id) {
@@ -39654,7 +39660,7 @@ async function runAdopt(argv = process.argv) {
     console.log('');
     console.log('Pathmode repo adoption');
     console.log('──────────────────────');
-    console.log(`  Found: ${intent.title}`);
+    console.log(`  ✓ Read intent.md — ${intent.title}`);
     process.stdout.write('  Connecting…');
     const origin = apiOrigin(argv);
     const current = (0, api_client_1.loadConfig)();
@@ -39674,6 +39680,8 @@ async function runAdopt(argv = process.argv) {
             throw error;
         }
     }
+    console.log(' ✓');
+    console.log(`  ✓ Destination confirmed — ${exchange.workspaceName} / ${exchange.productName}`);
     const apiKey = exchange.apiKey || current?.apiKey;
     if (!apiKey)
         throw new Error('No repository credential is available after adoption exchange.');
@@ -39686,7 +39694,10 @@ async function runAdopt(argv = process.argv) {
     // credential remains recoverable from this repo without minting a duplicate key.
     (0, project_config_1.saveProjectConnection)(config);
     (0, project_config_1.ensureProjectMcpConfig)();
+    console.log('  ✓ Credential stored outside the repository');
+    console.log('  ✓ Pathmode project entries added without the credential');
     const client = new api_client_1.PathmodeClient(config);
+    console.log('  • Creating and linking the hosted intent…');
     const pushed = await (0, push_spec_1.pushSpec)({
         client,
         id: meta.id,
@@ -39717,11 +39728,17 @@ async function runAdopt(argv = process.argv) {
     if (!pushed.ok)
         throw new Error(pushed.error);
     await client.completeRepoOnboarding(exchange.sessionId, pushed.canonicalId);
-    console.log(' ✓');
-    console.log(`  Adopted into ${exchange.workspaceName} / ${exchange.productName}`);
+    console.log('  ✓ Hosted intent linked');
     console.log(`  ${pushed.sourceUrl}`);
     console.log('');
-    console.log('Restart your coding tool once so it reloads the connected Pathmode server.');
+    console.log('What changed');
+    console.log('  • intent.md remains authoritative; only its cloud identity frontmatter changed');
+    console.log('  • Project connection files contain no Pathmode credential');
+    console.log('  • The hosted record is ready for human review and authorization');
+    console.log('');
+    console.log('Next');
+    console.log('  Keep the browser page open; it finishes automatically.');
+    console.log('  Restart your coding tool once so it reloads .mcp.json and discovers Pathmode.');
     console.log('');
 }
 
@@ -41490,9 +41507,11 @@ function extractVerification(sections) {
     const result = {};
     let currentKind = null;
     let currentLegacy = null;
+    let sawLabel = false;
     for (const line of lines) {
         const label = parseVerificationLabel(line);
         if (label) {
+            sawLabel = true;
             const kind = VERIFICATION_LABEL_TO_KIND[label.toLowerCase()];
             if (kind) {
                 currentKind = kind;
@@ -41531,6 +41550,11 @@ function extractVerification(sections) {
         else if (currentLegacy) {
             result[currentLegacy].push(text);
         }
+        else if (!sawLabel) {
+            // IntentSpec labels are optional. Treat an ungrouped list as manual checks so a valid
+            // flat `## Verification` section survives adoption instead of silently disappearing.
+            (result.manualChecks ||= []).push(text);
+        }
     }
     return result;
 }
@@ -42216,6 +42240,7 @@ exports.ensureProjectMcpConfig = ensureProjectMcpConfig;
 const fs_1 = __importDefault(__nccwpck_require__(9896));
 const os_1 = __importDefault(__nccwpck_require__(857));
 const path_1 = __importDefault(__nccwpck_require__(6928));
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 const homeWorkspaceFile = (workspaceId, homeDir = os_1.default.homedir()) => path_1.default.join(homeDir, '.pathmode', 'workspaces', `${workspaceId}.json`);
 function projectBindingFile(cwd = process.cwd()) {
     return path_1.default.join(cwd, '.pathmode', 'config.json');
@@ -42228,32 +42253,73 @@ function readJson(filePath) {
         return null;
     }
 }
+function normalizeApiUrl(raw) {
+    if (typeof raw !== 'string' || !raw.trim())
+        return null;
+    try {
+        const url = new URL(raw.trim());
+        if (url.protocol !== 'https:' && url.protocol !== 'http:')
+            return null;
+        return url.origin;
+    }
+    catch {
+        return null;
+    }
+}
+/** Repository files are attacker-controlled when a project or branch is first opened. */
+function assertSafeProjectWrite(cwd, filePath) {
+    const root = path_1.default.resolve(cwd);
+    const target = path_1.default.resolve(filePath);
+    const relative = path_1.default.relative(root, target);
+    if (!relative || relative.startsWith('..') || path_1.default.isAbsolute(relative)) {
+        throw new Error(`Refusing to write outside the repository: ${filePath}`);
+    }
+    let current = root;
+    for (const segment of relative.split(path_1.default.sep)) {
+        current = path_1.default.join(current, segment);
+        if (fs_1.default.existsSync(current) && fs_1.default.lstatSync(current).isSymbolicLink()) {
+            throw new Error(`Refusing to write through a symbolic link: ${current}`);
+        }
+    }
+}
+function writeProjectFile(cwd, filePath, contents) {
+    assertSafeProjectWrite(cwd, filePath);
+    fs_1.default.mkdirSync(path_1.default.dirname(filePath), { recursive: true });
+    // Re-check after creating a missing parent so a checked-in symlink is never followed.
+    assertSafeProjectWrite(cwd, filePath);
+    fs_1.default.writeFileSync(filePath, contents, 'utf8');
+}
 function loadProjectConnection(cwd = process.cwd(), homeDir = os_1.default.homedir()) {
     const binding = readJson(projectBindingFile(cwd));
     const workspaceId = typeof binding?.workspaceId === 'string' ? binding.workspaceId.trim() : '';
-    if (!workspaceId)
+    if (!UUID_RE.test(workspaceId))
         return null;
     const secret = readJson(homeWorkspaceFile(workspaceId, homeDir));
     const apiKey = typeof secret?.apiKey === 'string' ? secret.apiKey.trim() : '';
     if (!apiKey)
         return null;
-    const apiUrl = typeof binding?.apiUrl === 'string' && binding.apiUrl.trim()
-        ? binding.apiUrl.trim()
-        : (typeof secret?.apiUrl === 'string' && secret.apiUrl.trim() ? secret.apiUrl.trim() : 'https://pathmode.io');
+    // The repository chooses only which workspace to use. The protected home secret
+    // chooses where that credential may be sent, so a malicious branch cannot redirect it.
+    const apiUrl = normalizeApiUrl(secret?.apiUrl);
+    if (!apiUrl)
+        return null;
     return { apiKey, apiUrl, workspaceId };
 }
 function saveProjectConnection(config, cwd = process.cwd(), homeDir = os_1.default.homedir()) {
+    if (!UUID_RE.test(config.workspaceId))
+        throw new Error('Cannot save a project connection with an invalid workspace id.');
+    const apiUrl = normalizeApiUrl(config.apiUrl);
+    if (!apiUrl)
+        throw new Error('Cannot save a project connection with an invalid API URL.');
     const bindingPath = projectBindingFile(cwd);
-    fs_1.default.mkdirSync(path_1.default.dirname(bindingPath), { recursive: true });
-    fs_1.default.writeFileSync(bindingPath, JSON.stringify({
+    writeProjectFile(cwd, bindingPath, JSON.stringify({
         workspaceId: config.workspaceId,
-        apiUrl: config.apiUrl,
-    }, null, 2) + '\n', 'utf8');
+    }, null, 2) + '\n');
     const secretPath = homeWorkspaceFile(config.workspaceId, homeDir);
     fs_1.default.mkdirSync(path_1.default.dirname(secretPath), { recursive: true });
     fs_1.default.writeFileSync(secretPath, JSON.stringify({
         apiKey: config.apiKey,
-        apiUrl: config.apiUrl,
+        apiUrl,
     }, null, 2) + '\n', { encoding: 'utf8', mode: 0o600 });
     try {
         fs_1.default.chmodSync(secretPath, 0o600);
@@ -42264,6 +42330,7 @@ function saveProjectConnection(config, cwd = process.cwd(), homeDir = os_1.defau
  * from the project binding at runtime and is never written into a committable file. */
 function ensureProjectMcpConfig(cwd = process.cwd()) {
     const configPath = path_1.default.join(cwd, '.mcp.json');
+    assertSafeProjectWrite(cwd, configPath);
     const existing = fs_1.default.existsSync(configPath) ? readJson(configPath) : {};
     if (!existing)
         throw new Error(`${configPath} is not valid JSON; fix it before adopting.`);
@@ -42271,7 +42338,7 @@ function ensureProjectMcpConfig(cwd = process.cwd()) {
         ? existing.mcpServers
         : {};
     servers.pathmode = { command: 'npx', args: ['@pathmode/mcp-server'] };
-    fs_1.default.writeFileSync(configPath, JSON.stringify({ ...existing, mcpServers: servers }, null, 2) + '\n', 'utf8');
+    writeProjectFile(cwd, configPath, JSON.stringify({ ...existing, mcpServers: servers }, null, 2) + '\n');
 }
 
 
@@ -71946,7 +72013,7 @@ module.exports = /*#__PURE__*/JSON.parse('{"$schema":"http://json-schema.org/dra
 /***/ ((module) => {
 
 "use strict";
-module.exports = /*#__PURE__*/JSON.parse('{"name":"@pathmode/mcp-server","version":"1.20.0","publishConfig":{"access":"public"},"mcpName":"io.github.pathmodeio/mcp-server","description":"Deterministic intent preflight before your agent builds: six calibrated gates, keyless, no model call. Draft and sharpen specs in conversation, or connect a Pathmode workspace to sync intent and evidence across a team.","main":"dist/index.js","bin":{"pathmode-mcp":"dist/index.js"},"files":["dist/","manifest.json","icon.svg","README.md","skills/"],"scripts":{"build":"rm -rf dist && ncc build src/index.ts -o dist","dev":"ts-node src/index.ts","prepublishOnly":"npm run build"},"keywords":["pathmode","mcp","model-context-protocol","claude-code","claude-code-skills","agent-skills","cursor","windsurf","intent-engineering","intent-compiler","ai-agents","product-development","dependency-graph","strategic-planning"],"author":"Pathmode","license":"MIT","type":"commonjs","engines":{"node":">=18.0.0"},"homepage":"https://pathmode.io","dependencies":{"@modelcontextprotocol/sdk":"^1.12.1","gray-matter":"^4.0.3","zod":"^3.24.0"},"devDependencies":{"@types/node":"^25.1.0","@vercel/ncc":"^0.38.4","ts-node":"^10.9.2","typescript":"^5.9.3"}}');
+module.exports = /*#__PURE__*/JSON.parse('{"name":"@pathmode/mcp-server","version":"1.20.1","publishConfig":{"access":"public"},"mcpName":"io.github.pathmodeio/mcp-server","description":"Deterministic intent preflight before your agent builds: six calibrated gates, keyless, no model call. Draft and sharpen specs in conversation, or connect a Pathmode workspace to sync intent and evidence across a team.","main":"dist/index.js","bin":{"pathmode-mcp":"dist/index.js"},"files":["dist/","manifest.json","icon.svg","README.md","skills/"],"scripts":{"build":"rm -rf dist && ncc build src/index.ts -o dist","dev":"ts-node src/index.ts","prepublishOnly":"npm run build"},"keywords":["pathmode","mcp","model-context-protocol","claude-code","claude-code-skills","agent-skills","cursor","windsurf","intent-engineering","intent-compiler","ai-agents","product-development","dependency-graph","strategic-planning"],"author":"Pathmode","license":"MIT","type":"commonjs","engines":{"node":">=18.0.0"},"homepage":"https://pathmode.io","dependencies":{"@modelcontextprotocol/sdk":"^1.12.1","gray-matter":"^4.0.3","zod":"^3.24.0"},"devDependencies":{"@types/node":"^25.1.0","@vercel/ncc":"^0.38.4","ts-node":"^10.9.2","typescript":"^5.9.3"}}');
 
 /***/ })
 

package/dist/packages/mcp-server/src/adopt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adopt.d.ts","sourceRoot":"","sources":["file:///Users/jannelammi/code/Pathmode/packages/mcp-server/src/adopt.ts"],"names":[],"mappings":"AAoBA,wBAAgB,cAAc,CAAC,IAAI,WAAe,GAAG,OAAO,CAE3D;AA8BD,gGAAgG;AAChG,wBAAgB,6BAA6B,CACzC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC1J,IAAI,CA0BN;AAED,wBAAsB,QAAQ,CAAC,IAAI,WAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAoFjE"}
+{"version":3,"file":"adopt.d.ts","sourceRoot":"","sources":["file:///Users/jannelammi/code/Pathmode/packages/mcp-server/src/adopt.ts"],"names":[],"mappings":"AAoBA,wBAAgB,cAAc,CAAC,IAAI,WAAe,GAAG,OAAO,CAE3D;AA8BD,gGAAgG;AAChG,wBAAgB,6BAA6B,CACzC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC1J,IAAI,CA6BN;AAED,wBAAsB,QAAQ,CAAC,IAAI,WAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAkGjE"}

package/dist/packages/mcp-server/src/project-config.d.ts

@@ -1,7 +1,6 @@
 import type { PathmodeConfig } from './api-client';
 export interface ProjectBinding {
     workspaceId: string;
-    apiUrl: string;
 }
 export declare function projectBindingFile(cwd?: string): string;
 export declare function loadProjectConnection(cwd?: string, homeDir?: string): PathmodeConfig | null;

package/dist/packages/mcp-server/src/project-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-config.d.ts","sourceRoot":"","sources":["file:///Users/jannelammi/code/Pathmode/packages/mcp-server/src/project-config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAClB;AAKD,wBAAgB,kBAAkB,CAAC,GAAG,SAAgB,GAAG,MAAM,CAE9D;AAUD,wBAAgB,qBAAqB,CAAC,GAAG,SAAgB,EAAE,OAAO,SAAe,GAAG,cAAc,GAAG,IAAI,CAaxG;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,SAAgB,EAAE,OAAO,SAAe,GAAG,IAAI,CAe/G;AAED;uFACuF;AACvF,wBAAgB,sBAAsB,CAAC,GAAG,SAAgB,GAAG,IAAI,CAShE"}
+{"version":3,"file":"project-config.d.ts","sourceRoot":"","sources":["file:///Users/jannelammi/code/Pathmode/packages/mcp-server/src/project-config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC3B,WAAW,EAAE,MAAM,CAAC;CACvB;AAOD,wBAAgB,kBAAkB,CAAC,GAAG,SAAgB,GAAG,MAAM,CAE9D;AA+CD,wBAAgB,qBAAqB,CAAC,GAAG,SAAgB,EAAE,OAAO,SAAe,GAAG,cAAc,GAAG,IAAI,CAcxG;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,SAAgB,EAAE,OAAO,SAAe,GAAG,IAAI,CAiB/G;AAED;uFACuF;AACvF,wBAAgB,sBAAsB,CAAC,GAAG,SAAgB,GAAG,IAAI,CAUhE"}

package/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": "0.3",
   "name": "pathmode",
   "display_name": "Pathmode",
-  "version": "1.20.0",
+  "version": "1.20.1",
   "description": "Deterministic preflight for the intent you hand to a coding agent: six calibrated gates, the exact blockers named, no model call, no key needed.",
   "long_description": "Pathmode MCP Server runs a deterministic preflight before your coding agent builds: check_intent_readiness scores an intent spec against six calibrated gates (title, objective, outcomes, constraints, edge cases, verification) and names the exact blockers, with no model call and no account. Keyless local mode works out of the box; specs live in intent.md in your repo, plain markdown you own, and skills for drafting, pressure-testing, and handing off intent ride along. Connect a Pathmode workspace with an API key to sync intent and evidence across a team, analyze dependency graphs, and verify pull requests against the outcomes you agreed to.",
   "author": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pathmode/mcp-server",
-  "version": "1.20.0",
+  "version": "1.20.1",
   "publishConfig": {
     "access": "public"
   },