@segosolutions/mcp-server 1.0.0

package/dist/lib/claude-file-resolver.js

@@ -0,0 +1,176 @@
+/**
+ * CLAUDE.md File Resolver Service
+ *
+ * Handles secure file path resolution and CLAUDE.md file discovery
+ * with path traversal prevention and validation.
+ */
+import fs from 'fs/promises';
+import path from 'path';
+// Constants
+const MAX_FILE_SIZE_BYTES = 10 * 1024 * 1024; // 10MB hard limit
+/**
+ * Resolve and read CLAUDE.md file
+ *
+ * @param options - Resolution options
+ * @returns Resolved file with content and metadata
+ * @throws Error if file not found or validation fails
+ *
+ * @example
+ * // Auto-detect
+ * const file = await resolveClaudeFile()
+ *
+ * @example
+ * // Explicit path
+ * const file = await resolveClaudeFile({ explicitPath: 'docs/CLAUDE.md' })
+ */
+export async function resolveClaudeFile(options = {}) {
+    const baseDir = options.baseDir || process.cwd();
+    // Strategy 1: Explicit path provided
+    if (options.explicitPath) {
+        const resolvedPath = await resolveExplicitPath(options.explicitPath, baseDir);
+        const stats = await fs.stat(resolvedPath);
+        const content = await fs.readFile(resolvedPath, 'utf-8');
+        return {
+            path: resolvedPath,
+            content,
+            foundMethod: 'explicit',
+            sizeBytes: stats.size,
+        };
+    }
+    // Strategy 2: Auto-detect
+    const autoDetectedPath = await autoDetectClaudeFile(baseDir, options.searchDirs);
+    if (!autoDetectedPath) {
+        const searchPaths = getSearchPaths(baseDir, options.searchDirs);
+        throw new ClaudeFileNotFoundError(searchPaths);
+    }
+    const stats = await fs.stat(autoDetectedPath);
+    const content = await fs.readFile(autoDetectedPath, 'utf-8');
+    return {
+        path: autoDetectedPath,
+        content,
+        foundMethod: 'auto-detect',
+        sizeBytes: stats.size,
+    };
+}
+/**
+ * Resolve explicit path with security checks
+ *
+ * Prevents path traversal attacks by ensuring the resolved path
+ * stays within the allowed baseDir.
+ *
+ * @param explicitPath - User-provided file path
+ * @param baseDir - Base directory to restrict access to
+ * @returns Absolute path to file
+ * @throws Error if path is invalid or escapes baseDir
+ */
+export async function resolveExplicitPath(explicitPath, baseDir) {
+    // Resolve to absolute path
+    const absolutePath = path.resolve(baseDir, explicitPath);
+    // Security: ensure path doesn't escape baseDir
+    const normalizedBase = path.normalize(baseDir);
+    const normalizedPath = path.normalize(absolutePath);
+    if (!normalizedPath.startsWith(normalizedBase)) {
+        throw new SecurityError(`Path "${explicitPath}" attempts to access files outside allowed directory`);
+    }
+    // Check file exists and is readable
+    try {
+        await fs.access(absolutePath, fs.constants.R_OK);
+    }
+    catch (error) {
+        throw new Error(`File not found or not readable: ${explicitPath}`);
+    }
+    // Check it's a file (not directory)
+    const stats = await fs.stat(absolutePath);
+    if (!stats.isFile()) {
+        throw new Error(`Path is not a file: ${explicitPath}`);
+    }
+    // Check file size
+    if (stats.size > MAX_FILE_SIZE_BYTES) {
+        const sizeMB = (stats.size / (1024 * 1024)).toFixed(2);
+        const maxMB = (MAX_FILE_SIZE_BYTES / (1024 * 1024)).toFixed(0);
+        throw new Error(`File size (${sizeMB}MB) exceeds maximum allowed size (${maxMB}MB)`);
+    }
+    return absolutePath;
+}
+/**
+ * Auto-detect CLAUDE.md in common locations
+ *
+ * Searches for CLAUDE.md in standard locations:
+ * 1. ./CLAUDE.md
+ * 2. ./.claude/CLAUDE.md
+ * 3. ./claude.md (lowercase variant)
+ * 4. ./.claude/claude.md
+ *
+ * @param baseDir - Base directory to search from
+ * @param additionalDirs - Additional directories to search
+ * @returns Absolute path to CLAUDE.md or null if not found
+ */
+export async function autoDetectClaudeFile(baseDir, additionalDirs = []) {
+    const searchPaths = getSearchPaths(baseDir, additionalDirs);
+    for (const searchPath of searchPaths) {
+        try {
+            await fs.access(searchPath, fs.constants.R_OK);
+            const stats = await fs.stat(searchPath);
+            if (stats.isFile()) {
+                // Check file size
+                if (stats.size > MAX_FILE_SIZE_BYTES) {
+                    console.warn(`Found ${searchPath} but file is too large (${(stats.size / (1024 * 1024)).toFixed(2)}MB)`);
+                    continue;
+                }
+                return searchPath;
+            }
+        }
+        catch {
+            // File doesn't exist, continue searching
+            continue;
+        }
+    }
+    return null;
+}
+/**
+ * Get list of paths to search for CLAUDE.md
+ *
+ * @param baseDir - Base directory
+ * @param additionalDirs - Additional directories to search
+ * @returns Array of paths to search
+ */
+function getSearchPaths(baseDir, additionalDirs = []) {
+    return [
+        path.join(baseDir, 'CLAUDE.md'),
+        path.join(baseDir, '.claude', 'CLAUDE.md'),
+        path.join(baseDir, 'claude.md'), // lowercase variant
+        path.join(baseDir, '.claude', 'claude.md'),
+        ...additionalDirs.map(dir => path.join(baseDir, dir, 'CLAUDE.md')),
+    ];
+}
+/**
+ * Get relative path for display purposes
+ *
+ * @param absolutePath - Absolute path to file
+ * @param baseDir - Base directory (defaults to CWD)
+ * @returns Relative path from baseDir
+ */
+export function getDisplayPath(absolutePath, baseDir) {
+    const base = baseDir || process.cwd();
+    const relativePath = path.relative(base, absolutePath);
+    return relativePath || absolutePath;
+}
+// Custom Error Classes
+export class SecurityError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'SecurityError';
+    }
+}
+export class ClaudeFileNotFoundError extends Error {
+    constructor(searchedPaths) {
+        const pathList = searchedPaths.map(p => `  - ${p}`).join('\n');
+        super(`Could not find CLAUDE.md in the following locations:\n${pathList}\n\n` +
+            `Please either:\n` +
+            `  1. Create a CLAUDE.md file in your project root, or\n` +
+            `  2. Create one in a .claude/ subdirectory, or\n` +
+            `  3. Provide explicit path using 'claudePath' parameter`);
+        this.name = 'ClaudeFileNotFoundError';
+    }
+}
+//# sourceMappingURL=claude-file-resolver.js.map

package/dist/lib/claude-file-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-file-resolver.js","sourceRoot":"","sources":["../../src/lib/claude-file-resolver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,aAAa,CAAA;AAC5B,OAAO,IAAI,MAAM,MAAM,CAAA;AAEvB,YAAY;AACZ,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA,CAAC,kBAAkB;AAe/D;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAA+B,EAAE;IAEjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IAEhD,qCAAqC;IACrC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QAC7E,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACzC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QAExD,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,OAAO;YACP,WAAW,EAAE,UAAU;YACvB,SAAS,EAAE,KAAK,CAAC,IAAI;SACtB,CAAA;IACH,CAAC;IAED,0BAA0B;IAC1B,MAAM,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;IAEhF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;QAC/D,MAAM,IAAI,uBAAuB,CAAC,WAAW,CAAC,CAAA;IAChD,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;IAE5D,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,OAAO;QACP,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK,CAAC,IAAI;KACtB,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,YAAoB,EACpB,OAAe;IAEf,2BAA2B;IAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;IAExD,+CAA+C;IAC/C,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAC9C,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;IAEnD,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,aAAa,CACrB,SAAS,YAAY,sDAAsD,CAC5E,CAAA;IACH,CAAC;IAED,oCAAoC;IACpC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,mCAAmC,YAAY,EAAE,CAAC,CAAA;IACpE,CAAC;IAED,oCAAoC;IACpC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACzC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,uBAAuB,YAAY,EAAE,CAAC,CAAA;IACxD,CAAC;IAED,kBAAkB;IAClB,IAAI,KAAK,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACtD,MAAM,KAAK,GAAG,CAAC,mBAAmB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QAC9D,MAAM,IAAI,KAAK,CACb,cAAc,MAAM,qCAAqC,KAAK,KAAK,CACpE,CAAA;IACH,CAAC;IAED,OAAO,YAAY,CAAA;AACrB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAe,EACf,iBAA2B,EAAE;IAE7B,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;IAE3D,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;YAC9C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAEvC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,kBAAkB;gBAClB,IAAI,KAAK,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;oBACrC,OAAO,CAAC,IAAI,CACV,SAAS,UAAU,2BAA2B,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC3F,CAAA;oBACD,SAAQ;gBACV,CAAC;gBAED,OAAO,UAAU,CAAA;YACnB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;YACzC,SAAQ;QACV,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,iBAA2B,EAAE;IACpE,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,oBAAoB;QACrD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC;QAC1C,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;KACnE,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,YAAoB,EAAE,OAAgB;IACnE,MAAM,IAAI,GAAG,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACrC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IACtD,OAAO,YAAY,IAAI,YAAY,CAAA;AACrC,CAAC;AAED,uBAAuB;AAEvB,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,aAAuB;QACjC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9D,KAAK,CACH,yDAAyD,QAAQ,MAAM;YACrE,kBAAkB;YAClB,yDAAyD;YACzD,kDAAkD;YAClD,yDAAyD,CAC5D,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IACvC,CAAC;CACF"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@segosolutions/mcp-server",
+  "version": "1.0.0",
+  "description": "MCP server for Sego PM - enables Claude to manage tasks via API",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "type": "module",
+  "bin": {
+    "sego-mcp": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx watch src/index.ts",
+    "start": "node dist/index.js",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "claude",
+    "task-management",
+    "project-management",
+    "sego"
+  ],
+  "author": "Sego Solutions",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/sego-solutions/sego-pm"
+  },
+  "bugs": {
+    "url": "https://github.com/sego-solutions/sego-pm/issues"
+  },
+  "homepage": "https://sego.pm",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "dotenv": "^16.4.5"
+  },
+  "devDependencies": {
+    "@types/node": "^20.12.0",
+    "tsx": "^4.10.0",
+    "typescript": "^5.4.0"
+  }
+}