@systemdox/mcp-server 0.1.55 → 0.1.56

package/dist/index.js

@@ -54,6 +54,17 @@ var SystemDoxApiError = class extends Error {
   code;
   body;
 };
+function unescapedPath(path) {
+  let current = path.split(/[?#]/, 1)[0];
+  for (; ; ) {
+    const next = current.replace(/[\t\n\r]/g, "").replace(/%(?:2e|2f|5c|25|09|0a|0d)/gi, (escape) => decodeURIComponent(escape));
+    if (next === current) return current;
+    current = next;
+  }
+}
+function walksThePath(path) {
+  return unescapedPath(path).split(/[/\\]/).some((segment) => segment === "." || segment === "..");
+}
 var TEAM_SETUP = "/v1/team-setup";
 var seg = (s) => encodeURIComponent(String(s));
 var SystemDoxApiClient = class {
@@ -89,7 +100,7 @@ var SystemDoxApiClient = class {
   }
   async mutate(method, path, body) {
     const url = this.buildUrl(path);
-    const res = await fetch(url, {
+    const res = await this.call(url, {
       method,
       headers: {
         // The API Gateway authorizer only reads the Authorization header;
@@ -139,7 +150,7 @@ var SystemDoxApiClient = class {
   /** getPluginZip: the zip's bytes as served, and its X-Content-SHA256
    * header. The caller checks the BYTES against the hash it was given. */
   async getPluginZip(workspace, version) {
-    const res = await fetch(
+    const res = await this.call(
       this.buildUrl(`${TEAM_SETUP}/${seg(workspace)}/plugin/versions/${seg(version)}/zip`),
       {
         headers: {
@@ -205,6 +216,10 @@ var SystemDoxApiClient = class {
   buildUrl(path, params) {
     const base = this.config.apiUrl.replace(/\/+$/, "");
     const url = new URL(`${base}${path.startsWith("/") ? "" : "/"}${path}`);
+    const { origin, pathname } = new URL(base);
+    if (walksThePath(path) || url.origin !== origin || !url.pathname.startsWith(`${pathname.replace(/\/+$/, "")}/`)) {
+      throw new Error("Refused: this id leaves the API's own path.");
+    }
     if (params) {
       for (const [key, value] of Object.entries(params)) {
         url.searchParams.set(key, value);
@@ -214,7 +229,7 @@ var SystemDoxApiClient = class {
   }
   async fetchRaw(path, params, signal) {
     const url = this.buildUrl(path, params);
-    return fetch(url, {
+    return this.call(url, {
       headers: {
         Authorization: `Bearer ${this.config.apiKey}`,
         "X-API-Key": this.config.apiKey,
@@ -223,6 +238,16 @@ var SystemDoxApiClient = class {
       signal
     });
   }
+  /** Every call of this client, so `onAnswer` hears each answer. */
+  async call(url, init) {
+    const res = await fetch(url, init);
+    const { onAnswer } = this.config;
+    if (onAnswer) {
+      const refused2 = res.ok ? void 0 : new SystemDoxApiError(res.status, await res.clone().text());
+      onAnswer({ status: res.status, code: refused2?.code });
+    }
+    return res;
+  }
 };
 
 // src/lib/config.ts
@@ -896,7 +921,7 @@ function registerGetSpecs(server, apiClient2) {
     async ({ draft_id, status, search }) => {
       if (draft_id) {
         const spec = await apiClient2.get(
-          `/v1/specs/${draft_id}`
+          `/v1/specs/${encodeURIComponent(draft_id)}`
         );
         const sections = [`# ${spec.name}
 
@@ -2546,7 +2571,8 @@ function registerUpdateSpec(server, apiClient2) {
       }
     },
     async ({ draft_id, section, content, requirement_name }) => {
-      const spec = await apiClient2.get(`/v1/specs/${draft_id}`);
+      const specPath = `/v1/specs/${encodeURIComponent(draft_id)}`;
+      const spec = await apiClient2.get(specPath);
       if (spec.status !== "draft") {
         return {
           content: [
@@ -2571,8 +2597,8 @@ function registerUpdateSpec(server, apiClient2) {
         };
         body.requirements = [...existing, newReq];
       }
-      await apiClient2.put(`/v1/specs/${draft_id}`, body);
-      apiClient2.invalidateCache(`/v1/specs/${draft_id}`);
+      await apiClient2.put(specPath, body);
+      apiClient2.invalidateCache(specPath);
       apiClient2.invalidateCache("/v1/specs");
       return {
         content: [
@@ -2631,7 +2657,7 @@ ${decision}
 ## Consequences
 
 ${consequences}` + relatedSection;
-      await apiClient2.put(`/v1/specs/${created.draftId}`, {
+      await apiClient2.put(`/v1/specs/${encodeURIComponent(created.draftId)}`, {
         proposalContent: adrContent
       });
       apiClient2.invalidateCache("/v1/specs");
@@ -4013,15 +4039,56 @@ function registerTeamSetupTools(server, apiClient2, { localFiles }) {
 }
 
 // src/server.ts
-var SERVER_VERSION = true ? "0.1.55" : "0.0.0-dev";
-function createServer(apiClient2, { localFiles = false, instructions, keyProblem: keyProblem2 } = {}) {
-  const server = new McpServer(
+var SERVER_VERSION = true ? "0.1.56" : "0.0.0-dev";
+var READ_TOOLS = [
+  "get_context",
+  "get_checks",
+  "get_guardrails",
+  "get_project_rules",
+  "get_prompt_templates",
+  "get_specs",
+  "get_docs",
+  "get_tech_stack",
+  "get_planning_context",
+  "get_plan_board",
+  "get_change",
+  "get_team_setup",
+  "get_document_links",
+  "trace_document_path",
+  "get_graph_stats",
+  "list_skills",
+  "install_skill",
+  "resolve_person"
+];
+var WRITE_TOOLS = [
+  "create_check",
+  "create_guardrail",
+  "create_project_rule",
+  "create_prompt_template",
+  "update_spec",
+  "report_decision",
+  "publish_skill",
+  "publish_setup_part"
+];
+function offering(server, access) {
+  const offered = new Set(access === "write" ? [...READ_TOOLS, ...WRITE_TOOLS] : READ_TOOLS);
+  return new Proxy(server, {
+    get(target, property) {
+      const value = Reflect.get(target, property, target);
+      if (property !== "registerTool") return typeof value === "function" ? value.bind(target) : value;
+      return (name, ...rest) => offered.has(name) ? target.registerTool(name, ...rest) : void 0;
+    }
+  });
+}
+function createServer(apiClient2, { localFiles = false, instructions, keyProblem: keyProblem2, access } = {}) {
+  const mcpServer = new McpServer(
     {
       name: "systemdox-mcp-server",
       version: SERVER_VERSION
     },
     instructions ? { instructions } : void 0
   );
+  const server = access ? offering(mcpServer, access) : mcpServer;
   registerGetGuardrails(server, apiClient2);
   registerGetSpecs(server, apiClient2);
   registerGetDocs(server, apiClient2);
@@ -4041,7 +4108,7 @@ function createServer(apiClient2, { localFiles = false, instructions, keyProblem
   registerCreatePromptTemplate(server, apiClient2);
   registerSkillTools(server, apiClient2, { localFiles });
   registerTeamSetupTools(server, apiClient2, { localFiles });
-  return server;
+  return mcpServer;
 }
 
 // src/index.ts

package/dist/install-skill.js

@@ -54,6 +54,17 @@ var SystemDoxApiError = class extends Error {
   code;
   body;
 };
+function unescapedPath(path) {
+  let current = path.split(/[?#]/, 1)[0];
+  for (; ; ) {
+    const next = current.replace(/[\t\n\r]/g, "").replace(/%(?:2e|2f|5c|25|09|0a|0d)/gi, (escape) => decodeURIComponent(escape));
+    if (next === current) return current;
+    current = next;
+  }
+}
+function walksThePath(path) {
+  return unescapedPath(path).split(/[/\\]/).some((segment) => segment === "." || segment === "..");
+}
 var TEAM_SETUP = "/v1/team-setup";
 var seg = (s) => encodeURIComponent(String(s));
 var SystemDoxApiClient = class {
@@ -89,7 +100,7 @@ var SystemDoxApiClient = class {
   }
   async mutate(method, path, body) {
     const url = this.buildUrl(path);
-    const res = await fetch(url, {
+    const res = await this.call(url, {
       method,
       headers: {
         // The API Gateway authorizer only reads the Authorization header;
@@ -139,7 +150,7 @@ var SystemDoxApiClient = class {
   /** getPluginZip: the zip's bytes as served, and its X-Content-SHA256
    * header. The caller checks the BYTES against the hash it was given. */
   async getPluginZip(workspace, version) {
-    const res = await fetch(
+    const res = await this.call(
       this.buildUrl(`${TEAM_SETUP}/${seg(workspace)}/plugin/versions/${seg(version)}/zip`),
       {
         headers: {
@@ -205,6 +216,10 @@ var SystemDoxApiClient = class {
   buildUrl(path, params) {
     const base = this.config.apiUrl.replace(/\/+$/, "");
     const url = new URL(`${base}${path.startsWith("/") ? "" : "/"}${path}`);
+    const { origin, pathname } = new URL(base);
+    if (walksThePath(path) || url.origin !== origin || !url.pathname.startsWith(`${pathname.replace(/\/+$/, "")}/`)) {
+      throw new Error("Refused: this id leaves the API's own path.");
+    }
     if (params) {
       for (const [key, value] of Object.entries(params)) {
         url.searchParams.set(key, value);
@@ -214,7 +229,7 @@ var SystemDoxApiClient = class {
   }
   async fetchRaw(path, params, signal) {
     const url = this.buildUrl(path, params);
-    return fetch(url, {
+    return this.call(url, {
       headers: {
         Authorization: `Bearer ${this.config.apiKey}`,
         "X-API-Key": this.config.apiKey,
@@ -223,6 +238,16 @@ var SystemDoxApiClient = class {
       signal
     });
   }
+  /** Every call of this client, so `onAnswer` hears each answer. */
+  async call(url, init) {
+    const res = await fetch(url, init);
+    const { onAnswer } = this.config;
+    if (onAnswer) {
+      const refused = res.ok ? void 0 : new SystemDoxApiError(res.status, await res.clone().text());
+      onAnswer({ status: res.status, code: refused?.code });
+    }
+    return res;
+  }
 };
 
 // src/lib/config.ts

package/dist/lib/api-client.d.ts

@@ -13,6 +13,8 @@ export declare class SystemDoxApiError extends Error {
     readonly body: unknown;
     constructor(status: number, text: string);
 }
+/** One answer of the REST API, with the `code` of a refusal that named one. */
+export type ApiAnswer = Parameters<NonNullable<ServerConfig["onAnswer"]>>[0];
 export declare class SystemDoxApiClient {
     private config;
     private cache;
@@ -94,4 +96,6 @@ export declare class SystemDoxApiClient {
     invalidateCache(path?: string): void;
     private buildUrl;
     private fetchRaw;
+    /** Every call of this client, so `onAnswer` hears each answer. */
+    private call;
 }

package/dist/lib/api-client.js

@@ -51,6 +51,17 @@ var SystemDoxApiError = class extends Error {
   code;
   body;
 };
+function unescapedPath(path) {
+  let current = path.split(/[?#]/, 1)[0];
+  for (; ; ) {
+    const next = current.replace(/[\t\n\r]/g, "").replace(/%(?:2e|2f|5c|25|09|0a|0d)/gi, (escape) => decodeURIComponent(escape));
+    if (next === current) return current;
+    current = next;
+  }
+}
+function walksThePath(path) {
+  return unescapedPath(path).split(/[/\\]/).some((segment) => segment === "." || segment === "..");
+}
 var TEAM_SETUP = "/v1/team-setup";
 var seg = (s) => encodeURIComponent(String(s));
 var SystemDoxApiClient = class {
@@ -86,7 +97,7 @@ var SystemDoxApiClient = class {
   }
   async mutate(method, path, body) {
     const url = this.buildUrl(path);
-    const res = await fetch(url, {
+    const res = await this.call(url, {
       method,
       headers: {
         // The API Gateway authorizer only reads the Authorization header;
@@ -136,7 +147,7 @@ var SystemDoxApiClient = class {
   /** getPluginZip: the zip's bytes as served, and its X-Content-SHA256
    * header. The caller checks the BYTES against the hash it was given. */
   async getPluginZip(workspace, version) {
-    const res = await fetch(
+    const res = await this.call(
       this.buildUrl(`${TEAM_SETUP}/${seg(workspace)}/plugin/versions/${seg(version)}/zip`),
       {
         headers: {
@@ -202,6 +213,10 @@ var SystemDoxApiClient = class {
   buildUrl(path, params) {
     const base = this.config.apiUrl.replace(/\/+$/, "");
     const url = new URL(`${base}${path.startsWith("/") ? "" : "/"}${path}`);
+    const { origin, pathname } = new URL(base);
+    if (walksThePath(path) || url.origin !== origin || !url.pathname.startsWith(`${pathname.replace(/\/+$/, "")}/`)) {
+      throw new Error("Refused: this id leaves the API's own path.");
+    }
     if (params) {
       for (const [key, value] of Object.entries(params)) {
         url.searchParams.set(key, value);
@@ -211,7 +226,7 @@ var SystemDoxApiClient = class {
   }
   async fetchRaw(path, params, signal) {
     const url = this.buildUrl(path, params);
-    return fetch(url, {
+    return this.call(url, {
       headers: {
         Authorization: `Bearer ${this.config.apiKey}`,
         "X-API-Key": this.config.apiKey,
@@ -220,6 +235,16 @@ var SystemDoxApiClient = class {
       signal
     });
   }
+  /** Every call of this client, so `onAnswer` hears each answer. */
+  async call(url, init) {
+    const res = await fetch(url, init);
+    const { onAnswer } = this.config;
+    if (onAnswer) {
+      const refused = res.ok ? void 0 : new SystemDoxApiError(res.status, await res.clone().text());
+      onAnswer({ status: res.status, code: refused?.code });
+    }
+    return res;
+  }
 };
 export {
   SystemDoxApiClient,

package/dist/lib/config.d.ts

@@ -3,6 +3,12 @@ export interface ServerConfig {
     apiUrl: string;
     cacheTtlMs: number;
     defaultOrg: string | undefined;
+    /** Hears every answer of the REST API, because a tool turns a refusal into a
+     * tool error and session-brief.ts hides it (ADR-229). */
+    onAnswer?: (answer: {
+        status: number;
+        code: string | undefined;
+    }) => void;
 }
 export declare const API_URL_DEFAULT = "https://api.puglieseweb.com/systemdox";
 /**

package/dist/lib/mcp-answer.d.ts

@@ -0,0 +1,18 @@
+/**
+ * One MCP request, answered by a fresh server over a web-standard transport (no
+ * sessions): what `POST /mcp` and `POST /connect` have in common. It fits Lambda's
+ * execution model, and each caller keeps its own way of proving who is asking.
+ */
+import { type ServerOptions } from "../server.js";
+import type { SystemDoxApiClient } from "./api-client.js";
+interface Answer {
+    statusCode: number;
+    headers: Record<string, string>;
+    body: string;
+}
+export declare function answerMcpRequest(apiClient: SystemDoxApiClient, request: {
+    url: string;
+    headers: Record<string, string>;
+    rawBody: string;
+}, options?: Pick<ServerOptions, "access">): Promise<Answer>;
+export {};

package/dist/plugin-path.js

@@ -58,6 +58,17 @@ var SystemDoxApiError = class extends Error {
   code;
   body;
 };
+function unescapedPath(path) {
+  let current = path.split(/[?#]/, 1)[0];
+  for (; ; ) {
+    const next = current.replace(/[\t\n\r]/g, "").replace(/%(?:2e|2f|5c|25|09|0a|0d)/gi, (escape) => decodeURIComponent(escape));
+    if (next === current) return current;
+    current = next;
+  }
+}
+function walksThePath(path) {
+  return unescapedPath(path).split(/[/\\]/).some((segment) => segment === "." || segment === "..");
+}
 var TEAM_SETUP = "/v1/team-setup";
 var seg = (s) => encodeURIComponent(String(s));
 var SystemDoxApiClient = class {
@@ -93,7 +104,7 @@ var SystemDoxApiClient = class {
   }
   async mutate(method, path, body) {
     const url = this.buildUrl(path);
-    const res = await fetch(url, {
+    const res = await this.call(url, {
       method,
       headers: {
         // The API Gateway authorizer only reads the Authorization header;
@@ -143,7 +154,7 @@ var SystemDoxApiClient = class {
   /** getPluginZip: the zip's bytes as served, and its X-Content-SHA256
    * header. The caller checks the BYTES against the hash it was given. */
   async getPluginZip(workspace, version) {
-    const res = await fetch(
+    const res = await this.call(
       this.buildUrl(`${TEAM_SETUP}/${seg(workspace)}/plugin/versions/${seg(version)}/zip`),
       {
         headers: {
@@ -209,6 +220,10 @@ var SystemDoxApiClient = class {
   buildUrl(path, params) {
     const base = this.config.apiUrl.replace(/\/+$/, "");
     const url = new URL(`${base}${path.startsWith("/") ? "" : "/"}${path}`);
+    const { origin, pathname } = new URL(base);
+    if (walksThePath(path) || url.origin !== origin || !url.pathname.startsWith(`${pathname.replace(/\/+$/, "")}/`)) {
+      throw new Error("Refused: this id leaves the API's own path.");
+    }
     if (params) {
       for (const [key, value] of Object.entries(params)) {
         url.searchParams.set(key, value);
@@ -218,7 +233,7 @@ var SystemDoxApiClient = class {
   }
   async fetchRaw(path, params, signal) {
     const url = this.buildUrl(path, params);
-    return fetch(url, {
+    return this.call(url, {
       headers: {
         Authorization: `Bearer ${this.config.apiKey}`,
         "X-API-Key": this.config.apiKey,
@@ -227,6 +242,16 @@ var SystemDoxApiClient = class {
       signal
     });
   }
+  /** Every call of this client, so `onAnswer` hears each answer. */
+  async call(url, init) {
+    const res = await fetch(url, init);
+    const { onAnswer } = this.config;
+    if (onAnswer) {
+      const refused = res.ok ? void 0 : new SystemDoxApiError(res.status, await res.clone().text());
+      onAnswer({ status: res.status, code: refused?.code });
+    }
+    return res;
+  }
 };
 
 // src/lib/team-setup-files.ts

package/dist/server.d.ts

@@ -1,5 +1,6 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import type { SystemDoxApiClient } from "./lib/api-client.js";
+export type ConnectionAccess = "read" | "write";
 export interface ServerOptions {
     /** True only on the user's own computer (stdio): the skill tools may read
      * and write the skill folder there. The hosted server never touches a disk
@@ -9,10 +10,13 @@ export interface ServerOptions {
     instructions?: string;
     /** Why the local server has no key, when it has none. */
     keyProblem?: string;
+    /** A connection's access (ADR-229): `tools/list` holds only these. Left out,
+     * every tool is offered, as on `/mcp` and the local server. */
+    access?: ConnectionAccess;
 }
 /**
  * Build a SystemDox MCP server with all tools registered against the given
  * API client. Shared by the stdio entry point (index.ts) and the hosted
  * Streamable HTTP entry point (http.ts).
  */
-export declare function createServer(apiClient: SystemDoxApiClient, { localFiles, instructions, keyProblem }?: ServerOptions): McpServer;
+export declare function createServer(apiClient: SystemDoxApiClient, { localFiles, instructions, keyProblem, access }?: ServerOptions): McpServer;

package/dist/server.js

@@ -214,7 +214,7 @@ function registerGetSpecs(server, apiClient) {
     async ({ draft_id, status, search }) => {
       if (draft_id) {
         const spec = await apiClient.get(
-          `/v1/specs/${draft_id}`
+          `/v1/specs/${encodeURIComponent(draft_id)}`
         );
         const sections = [`# ${spec.name}
 
@@ -2184,7 +2184,8 @@ function registerUpdateSpec(server, apiClient) {
       }
     },
     async ({ draft_id, section, content, requirement_name }) => {
-      const spec = await apiClient.get(`/v1/specs/${draft_id}`);
+      const specPath = `/v1/specs/${encodeURIComponent(draft_id)}`;
+      const spec = await apiClient.get(specPath);
       if (spec.status !== "draft") {
         return {
           content: [
@@ -2209,8 +2210,8 @@ function registerUpdateSpec(server, apiClient) {
         };
         body.requirements = [...existing, newReq];
       }
-      await apiClient.put(`/v1/specs/${draft_id}`, body);
-      apiClient.invalidateCache(`/v1/specs/${draft_id}`);
+      await apiClient.put(specPath, body);
+      apiClient.invalidateCache(specPath);
       apiClient.invalidateCache("/v1/specs");
       return {
         content: [
@@ -2269,7 +2270,7 @@ ${decision}
 ## Consequences
 
 ${consequences}` + relatedSection;
-      await apiClient.put(`/v1/specs/${created.draftId}`, {
+      await apiClient.put(`/v1/specs/${encodeURIComponent(created.draftId)}`, {
         proposalContent: adrContent
       });
       apiClient.invalidateCache("/v1/specs");
@@ -3651,15 +3652,56 @@ function registerTeamSetupTools(server, apiClient, { localFiles }) {
 }
 
 // src/server.ts
-var SERVER_VERSION = true ? "0.1.55" : "0.0.0-dev";
-function createServer(apiClient, { localFiles = false, instructions, keyProblem } = {}) {
-  const server = new McpServer(
+var SERVER_VERSION = true ? "0.1.56" : "0.0.0-dev";
+var READ_TOOLS = [
+  "get_context",
+  "get_checks",
+  "get_guardrails",
+  "get_project_rules",
+  "get_prompt_templates",
+  "get_specs",
+  "get_docs",
+  "get_tech_stack",
+  "get_planning_context",
+  "get_plan_board",
+  "get_change",
+  "get_team_setup",
+  "get_document_links",
+  "trace_document_path",
+  "get_graph_stats",
+  "list_skills",
+  "install_skill",
+  "resolve_person"
+];
+var WRITE_TOOLS = [
+  "create_check",
+  "create_guardrail",
+  "create_project_rule",
+  "create_prompt_template",
+  "update_spec",
+  "report_decision",
+  "publish_skill",
+  "publish_setup_part"
+];
+function offering(server, access) {
+  const offered = new Set(access === "write" ? [...READ_TOOLS, ...WRITE_TOOLS] : READ_TOOLS);
+  return new Proxy(server, {
+    get(target, property) {
+      const value = Reflect.get(target, property, target);
+      if (property !== "registerTool") return typeof value === "function" ? value.bind(target) : value;
+      return (name, ...rest) => offered.has(name) ? target.registerTool(name, ...rest) : void 0;
+    }
+  });
+}
+function createServer(apiClient, { localFiles = false, instructions, keyProblem, access } = {}) {
+  const mcpServer = new McpServer(
     {
       name: "systemdox-mcp-server",
       version: SERVER_VERSION
     },
     instructions ? { instructions } : void 0
   );
+  const server = access ? offering(mcpServer, access) : mcpServer;
   registerGetGuardrails(server, apiClient);
   registerGetSpecs(server, apiClient);
   registerGetDocs(server, apiClient);
@@ -3679,7 +3721,7 @@ function createServer(apiClient, { localFiles = false, instructions, keyProblem
   registerCreatePromptTemplate(server, apiClient);
   registerSkillTools(server, apiClient, { localFiles });
   registerTeamSetupTools(server, apiClient, { localFiles });
-  return server;
+  return mcpServer;
 }
 export {
   createServer

package/dist/setup-mcp.js

@@ -56,6 +56,17 @@ var SystemDoxApiError = class extends Error {
   code;
   body;
 };
+function unescapedPath(path) {
+  let current = path.split(/[?#]/, 1)[0];
+  for (; ; ) {
+    const next = current.replace(/[\t\n\r]/g, "").replace(/%(?:2e|2f|5c|25|09|0a|0d)/gi, (escape) => decodeURIComponent(escape));
+    if (next === current) return current;
+    current = next;
+  }
+}
+function walksThePath(path) {
+  return unescapedPath(path).split(/[/\\]/).some((segment) => segment === "." || segment === "..");
+}
 var TEAM_SETUP = "/v1/team-setup";
 var seg = (s) => encodeURIComponent(String(s));
 var SystemDoxApiClient = class {
@@ -91,7 +102,7 @@ var SystemDoxApiClient = class {
   }
   async mutate(method, path, body) {
     const url = this.buildUrl(path);
-    const res = await fetch(url, {
+    const res = await this.call(url, {
       method,
       headers: {
         // The API Gateway authorizer only reads the Authorization header;
@@ -141,7 +152,7 @@ var SystemDoxApiClient = class {
   /** getPluginZip: the zip's bytes as served, and its X-Content-SHA256
    * header. The caller checks the BYTES against the hash it was given. */
   async getPluginZip(workspace, version) {
-    const res = await fetch(
+    const res = await this.call(
       this.buildUrl(`${TEAM_SETUP}/${seg(workspace)}/plugin/versions/${seg(version)}/zip`),
       {
         headers: {
@@ -207,6 +218,10 @@ var SystemDoxApiClient = class {
   buildUrl(path, params) {
     const base = this.config.apiUrl.replace(/\/+$/, "");
     const url = new URL(`${base}${path.startsWith("/") ? "" : "/"}${path}`);
+    const { origin, pathname } = new URL(base);
+    if (walksThePath(path) || url.origin !== origin || !url.pathname.startsWith(`${pathname.replace(/\/+$/, "")}/`)) {
+      throw new Error("Refused: this id leaves the API's own path.");
+    }
     if (params) {
       for (const [key, value] of Object.entries(params)) {
         url.searchParams.set(key, value);
@@ -216,7 +231,7 @@ var SystemDoxApiClient = class {
   }
   async fetchRaw(path, params, signal) {
     const url = this.buildUrl(path, params);
-    return fetch(url, {
+    return this.call(url, {
       headers: {
         Authorization: `Bearer ${this.config.apiKey}`,
         "X-API-Key": this.config.apiKey,
@@ -225,6 +240,16 @@ var SystemDoxApiClient = class {
       signal
     });
   }
+  /** Every call of this client, so `onAnswer` hears each answer. */
+  async call(url, init) {
+    const res = await fetch(url, init);
+    const { onAnswer } = this.config;
+    if (onAnswer) {
+      const refused = res.ok ? void 0 : new SystemDoxApiError(res.status, await res.clone().text());
+      onAnswer({ status: res.status, code: refused?.code });
+    }
+    return res;
+  }
 };
 
 // src/lib/config.ts