@securityreviewai/securityreview-kit 0.1.47 → 0.1.48

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@securityreviewai/securityreview-kit",
-  "version": "0.1.47",
+  "version": "0.1.48",
   "description": "Bootstrap security-review-mcp for AI IDEs and CLI tools",
   "author": "Debarshi Das <debarshi.das@we45.com>",
   "license": "UNLICENSED",

package/src/generators/mcp/vscode.js

@@ -2,19 +2,6 @@ import { join } from 'node:path';
 import { readJson, writeJson } from '../../utils/fs-helpers.js';
 import { MCP_SERVER_NAME, MCP_SERVER_PACKAGE } from '../../utils/constants.js';
 
-function getSandboxAllowedDomains(apiUrl) {
-    const domains = ['registry.npmjs.org'];
-    try {
-        const hostname = new URL(apiUrl).hostname;
-        if (hostname) {
-            domains.push(hostname);
-        }
-    } catch {
-        // Keep the documented sandbox shape even if the URL is supplied later through another workflow.
-    }
-    return [...new Set(domains)];
-}
-
 /**
  * Generate VS Code Copilot MCP config at .vscode/mcp.json
  * Uses the VS Code input variable pattern for secure credential prompting.
@@ -35,12 +22,6 @@ export function generate(cwd, envVars) {
             SECURITY_REVIEW_API_URL: envVars.apiUrl,
             SECURITY_REVIEW_API_TOKEN: envVars.apiToken,
         },
-        sandboxEnabled: true,
-        sandbox: {
-            network: {
-                allowedDomains: getSandboxAllowedDomains(envVars.apiUrl),
-            },
-        },
     };
 
     writeJson(filePath, existing);

package/src/generators/mcp/vscode.test.js

@@ -1,21 +0,0 @@
-import { mkdtempSync, readFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { test } from 'node:test';
-import assert from 'node:assert/strict';
-import { generate } from './vscode.js';
-
-test('VS Code MCP generator enables sandbox auto-approval for the SRAI server', () => {
-    const cwd = mkdtempSync(join(tmpdir(), 'securityreview-kit-vscode-mcp-'));
-
-    generate(cwd, {
-        apiUrl: 'https://api.example.test/v1',
-        apiToken: 'secret-token',
-    });
-
-    const config = JSON.parse(readFileSync(join(cwd, '.vscode', 'mcp.json'), 'utf8'));
-    const server = config.servers['security-review-mcp'];
-    assert.equal(server.type, 'stdio');
-    assert.equal(server.sandboxEnabled, true);
-    assert.deepEqual(server.sandbox.network.allowedDomains, ['registry.npmjs.org', 'api.example.test']);
-});