@senoldogann/context-manager 0.1.31 → 0.2.0

package/bin/ccm.js

@@ -37,9 +37,12 @@ let checksumCache = null;
 
 const MCP_SERVER_NAME = 'context-manager';
 const MCP_COMMAND = 'npx';
-const MCP_ARGS = ['-y', '@senoldogann/context-manager', 'mcp'];
+const MCP_ARGS = ['-y', `@senoldogann/context-manager@${VERSION}`, 'mcp'];
 const MCP_ENV = {
-    RUST_LOG: 'info'
+    RUST_LOG: 'info',
+    CCM_PROJECT_ROOT: process.cwd(),
+    CCM_ALLOWED_ROOTS: process.cwd(),
+    CCM_REQUIRE_ALLOWED_ROOTS: '1'
 };
 const ALLOWED_REDIRECT_HOSTS = new Set([
     'github.com',
@@ -114,12 +117,15 @@ function installJsonConfig(configPath, mcpConfig) {
 
     let config = { mcpServers: {} };
     if (fs.existsSync(configPath)) {
+        const backupPath = `${configPath}.bak`;
+        fs.copyFileSync(configPath, backupPath);
         try {
             const content = fs.readFileSync(configPath, 'utf8');
             config = JSON.parse(content);
-            fs.copyFileSync(configPath, `${configPath}.bak`);
         } catch (e) {
-            console.warn(`[CCM] Could not parse ${configPath}, creating backup and starting fresh section.`);
+            throw new Error(
+                `Could not parse ${configPath}. The original file was preserved and copied to ${backupPath}.`
+            );
         }
     }
 
@@ -128,11 +134,27 @@ function installJsonConfig(configPath, mcpConfig) {
     }
 
     config.mcpServers[MCP_SERVER_NAME] = mcpConfig;
-    fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
+    writeJsonAtomic(configPath, config);
     console.log(`[CCM] ✓ Successfully updated: ${configPath}`);
     return true;
 }
 
+function writeJsonAtomic(configPath, value) {
+    const tempPath = `${configPath}.${process.pid}.${Date.now()}.tmp`;
+    try {
+        fs.writeFileSync(tempPath, `${JSON.stringify(value, null, 2)}\n`, {
+            encoding: 'utf8',
+            mode: 0o600
+        });
+        fs.renameSync(tempPath, configPath);
+    } catch (error) {
+        if (fs.existsSync(tempPath)) {
+            fs.unlinkSync(tempPath);
+        }
+        throw error;
+    }
+}
+
 function installCodexConfig() {
     const listResult = spawnSync('codex', ['mcp', 'list', '--json'], {
         encoding: 'utf8'
@@ -157,17 +179,26 @@ function installCodexConfig() {
 
     const existing = existingServers.find((server) => server.name === MCP_SERVER_NAME);
     if (existing) {
-        const removeResult = spawnSync('codex', ['mcp', 'remove', MCP_SERVER_NAME], {
-            encoding: 'utf8'
-        });
-
-        if (removeResult.status !== 0) {
-            console.warn(`[CCM] Codex MCP removal failed: ${removeResult.stderr.trim()}`);
-            return false;
-        }
+        console.log('[CCM] Codex MCP entry already exists; leaving it unchanged.');
+        return true;
     }
 
-    const addArgs = ['mcp', 'add', MCP_SERVER_NAME, '--env', 'RUST_LOG=info', '--', MCP_COMMAND, ...MCP_ARGS];
+    const addArgs = [
+        'mcp',
+        'add',
+        MCP_SERVER_NAME,
+        '--env',
+        'RUST_LOG=info',
+        '--env',
+        `CCM_PROJECT_ROOT=${process.cwd()}`,
+        '--env',
+        `CCM_ALLOWED_ROOTS=${process.cwd()}`,
+        '--env',
+        'CCM_REQUIRE_ALLOWED_ROOTS=1',
+        '--',
+        MCP_COMMAND,
+        ...MCP_ARGS
+    ];
     const addResult = spawnSync('codex', addArgs, {
         encoding: 'utf8'
     });
@@ -415,4 +446,16 @@ async function main() {
     }
 }
 
-main();
+if (require.main === module) {
+    main();
+}
+
+module.exports = {
+    MCP_ARGS,
+    MCP_ENV,
+    installJsonConfig,
+    parseChecksums,
+    resolveRedirectUrl,
+    verifyChecksum,
+    writeJsonAtomic
+};

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@senoldogann/context-manager",
-    "version": "0.1.31",
+    "version": "0.2.0",
     "description": "LLM Context Manager MCP Server & CLI wrapper using npx",
     "repository": "https://github.com/senoldogann/LLM-Context-Manager",
     "homepage": "https://github.com/senoldogann/LLM-Context-Manager",
@@ -13,7 +13,7 @@
         "ccm-mcp": "bin/ccm.js"
     },
     "scripts": {
-        "test": "echo \"Error: no test specified\" && exit 1"
+        "test": "node --test test/*.test.js"
     },
     "keywords": [
         "mcp",

package/test/installer.test.js

@@ -0,0 +1,69 @@
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const test = require('node:test');
+
+const {
+    MCP_ARGS,
+    MCP_ENV,
+    installJsonConfig,
+    writeJsonAtomic
+} = require('../bin/ccm.js');
+
+function tempConfig() {
+    const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'ccm-installer-'));
+    return {
+        directory,
+        configPath: path.join(directory, 'mcp.json')
+    };
+}
+
+test('installer merges MCP config and preserves existing settings', () => {
+    const { configPath } = tempConfig();
+    fs.writeFileSync(
+        configPath,
+        JSON.stringify({ theme: 'dark', mcpServers: { existing: { command: 'safe' } } })
+    );
+
+    const changed = installJsonConfig(configPath, {
+        command: 'npx',
+        args: MCP_ARGS,
+        env: MCP_ENV
+    });
+
+    assert.equal(changed, true);
+    const config = JSON.parse(fs.readFileSync(configPath, 'utf8'));
+    assert.equal(config.theme, 'dark');
+    assert.equal(config.mcpServers.existing.command, 'safe');
+    assert.equal(config.mcpServers['context-manager'].env.CCM_REQUIRE_ALLOWED_ROOTS, '1');
+    assert.ok(fs.existsSync(`${configPath}.bak`));
+});
+
+test('installer never overwrites malformed JSON', () => {
+    const { configPath } = tempConfig();
+    const malformed = '{"mcpServers":';
+    fs.writeFileSync(configPath, malformed);
+
+    assert.throws(
+        () => installJsonConfig(configPath, { command: 'npx', args: [], env: {} }),
+        /Could not parse/
+    );
+    assert.equal(fs.readFileSync(configPath, 'utf8'), malformed);
+    assert.equal(fs.readFileSync(`${configPath}.bak`, 'utf8'), malformed);
+});
+
+test('atomic writer leaves valid JSON and no temporary file', () => {
+    const { directory, configPath } = tempConfig();
+    writeJsonAtomic(configPath, { ok: true });
+
+    assert.deepEqual(JSON.parse(fs.readFileSync(configPath, 'utf8')), { ok: true });
+    assert.deepEqual(fs.readdirSync(directory), ['mcp.json']);
+});
+
+test('generated MCP command pins package version and narrows project access', () => {
+    assert.match(MCP_ARGS[1], /^@senoldogann\/context-manager@\d+\.\d+\.\d+$/);
+    assert.equal(MCP_ENV.CCM_REQUIRE_ALLOWED_ROOTS, '1');
+    assert.equal(MCP_ENV.CCM_ALLOWED_ROOTS, process.cwd());
+    assert.equal(MCP_ENV.CCM_PROJECT_ROOT, process.cwd());
+});