@sprid/scout 0.1.1 → 0.1.3

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.1.3 - 2026-10-25
+
+- Update the Zod dependency to version 4.
+
+## 0.1.2 - 2026-10-23
+
+- `job_results` refuses a run id that is not one scout issued. A crafted id could read any JSON file on the machine.
+
 ## 0.1.1 - 2026-10-19
 
 - Remove automatic likes from TikTok discovery. Research no longer clicks like controls while collecting accounts.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sprid/scout",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Local MCP server that researches a niche over your own Chrome: the accounts winning it, and the ads running in it.",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://sprid.studio/agents",
@@ -25,7 +25,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
     "playwright-core": "^1.58.0",
-    "zod": "^3.25.76"
+    "zod": "^4.6.6"
   },
   "publishConfig": {
     "access": "public"

package/src/store.js

@@ -23,16 +23,25 @@ function readJson(file, fallback) {
   }
 }
 
+// A run id is `${tool}-${8 hex}` (jobs.js). It arrives from a tool argument,
+// so anything else is refused before it reaches a path: `../` in it read any
+// JSON file on the machine.
+const RUN_ID = /^[a-z]+-[0-9a-f]{8}$/;
+
 function runFile(runId) {
+  if (!RUN_ID.test(String(runId))) return null;
   return path.join(RUNS_DIR, `${runId}.json`);
 }
 
 function saveRun(run) {
-  writeAtomic(runFile(run.id), run);
+  const file = runFile(run.id);
+  if (!file) throw new Error(`Invalid run id: ${run.id}`);
+  writeAtomic(file, run);
 }
 
 function loadRun(runId) {
-  return readJson(runFile(runId), null);
+  const file = runFile(runId);
+  return file ? readJson(file, null) : null;
 }
 
 function listRuns() {