@tenonhq/dovetail-mcp 0.0.14 → 0.0.16

package/dist/registry.js

@@ -191,7 +191,7 @@ function buildDescriptors(deps) {
         },
         {
             name: "servicenow_query_table",
-            description: "Read-only GET against the ServiceNow Table API. Required: table (lower-case identifier), sysparm_query (ServiceNow encoded query). Optional: fields[] limits the columns returned, limit caps row count (default 100, max 1000). Tables on the deny list (sys_user_password, sys_credential, etc.) are rejected unless SINC_MCP_SN_TABLE_OVERRIDE=<table> is set.",
+            description: "Read-only GET against the ServiceNow Table API. Required: table (lower-case identifier), sysparm_query (ServiceNow encoded query). Optional: fields[] limits the columns returned, limit caps row count (default 100, max 1000), env retargets a single call to a different instance by naming an env file in the server's working directory ('prod' or '.env.prod' → reads creds from .env.prod; omit to use the startup instance). Tables on the deny list (sys_user_password, sys_credential, etc.) are rejected unless SINC_MCP_SN_TABLE_OVERRIDE=<table> is set.",
             shape: servicenow_1.servicenowQueryTableSchema.shape,
             annotations: dovetail_mcp_kit_1.READ_ONLY,
             handler: function (args) {

package/dist/schemas/servicenow.d.ts

@@ -4,15 +4,18 @@ export declare var servicenowQueryTableSchema: z.ZodObject<{
     sysparm_query: z.ZodString;
     fields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     limit: z.ZodOptional<z.ZodNumber>;
+    env: z.ZodOptional<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
     table: string;
     sysparm_query: string;
     fields?: string[] | undefined;
     limit?: number | undefined;
+    env?: string | undefined;
 }, {
     table: string;
     sysparm_query: string;
     fields?: string[] | undefined;
     limit?: number | undefined;
+    env?: string | undefined;
 }>;
 export type ServicenowQueryTableInput = z.infer<typeof servicenowQueryTableSchema>;

package/dist/schemas/servicenow.js

@@ -6,5 +6,17 @@ exports.servicenowQueryTableSchema = zod_1.z.object({
     table: zod_1.z.string().regex(/^[a-z][a-z0-9_]*$/, "Table name must match /^[a-z][a-z0-9_]*$/"),
     sysparm_query: zod_1.z.string(),
     fields: zod_1.z.array(zod_1.z.string().min(1)).optional(),
-    limit: zod_1.z.number().int().min(1).max(1000).optional()
+    limit: zod_1.z.number().int().min(1).max(1000).optional(),
+    // Optional per-call instance retarget. Names an env file in the server's
+    // working directory: a bare token like "prod" or "workshop" resolves to
+    // ".env.<token>", or pass the full ".env.<name>" basename. Path separators
+    // and traversal are rejected (no arbitrary filesystem reads) — see
+    // resolveEnvFilePath in tools/servicenow.ts. Omit to use the instance the
+    // server was started with.
+    env: zod_1.z
+        .string()
+        .min(1)
+        .max(100)
+        .regex(/^(\.env(\.[A-Za-z0-9_-]+)?|[A-Za-z0-9_-]+)$/, "env must be an env-file name like 'prod' or '.env.prod' — no path separators or '..'")
+        .optional()
 }).strict();

package/dist/tools/servicenow.d.ts

@@ -14,7 +14,17 @@ import { ServicenowQueryTableInput } from "../schemas/servicenow";
 export interface ServiceNowDeps {
     safety: ServiceNowSafetyConfig;
     clientFactory?: () => ServiceNowClient;
+    /** Injectable for tests — defaults to the real createClientFromEnvFile. */
+    clientFromEnvFile?: (envPath: string) => ServiceNowClient;
 }
+/**
+ * Resolve the caller-supplied `env` token to an absolute env-file path inside
+ * the server's working directory. The token is untrusted tool input, so this
+ * is defense-in-depth on top of the schema regex: reject anything with a path
+ * separator or traversal, accept only a `.env` basename (or a bare token that
+ * maps to `.env.<token>`), and confirm the resolved path stays within cwd.
+ */
+export declare function resolveEnvFilePath(env: string): string;
 export declare function servicenowQueryTable(args: ServicenowQueryTableInput, deps: ServiceNowDeps): Promise<{
     table: string;
     count: number;

package/dist/tools/servicenow.js

@@ -9,10 +9,43 @@
  * Tables on the deny list (sys_user_password, sys_credential, sys_audit, …)
  * are rejected unless the operator opts in via SINC_MCP_SN_TABLE_OVERRIDE.
  */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveEnvFilePath = resolveEnvFilePath;
 exports.servicenowQueryTable = servicenowQueryTable;
+const path_1 = __importDefault(require("path"));
 const dovetail_servicenow_1 = require("@tenonhq/dovetail-servicenow");
-function resolveClient(deps) {
+/**
+ * Resolve the caller-supplied `env` token to an absolute env-file path inside
+ * the server's working directory. The token is untrusted tool input, so this
+ * is defense-in-depth on top of the schema regex: reject anything with a path
+ * separator or traversal, accept only a `.env` basename (or a bare token that
+ * maps to `.env.<token>`), and confirm the resolved path stays within cwd.
+ */
+function resolveEnvFilePath(env) {
+    if (typeof env !== "string" || env.length === 0) {
+        throw new Error("env must be a non-empty string.");
+    }
+    if (/[\\/]/.test(env) || env.indexOf("..") !== -1) {
+        throw new Error("env '" + env + "' is invalid — no path separators or '..'; " +
+            "pass a name like 'prod' or '.env.prod'.");
+    }
+    var basename = env.indexOf(".env") === 0 ? env : ".env." + env;
+    var cwd = process.cwd();
+    var resolved = path_1.default.resolve(cwd, basename);
+    // path.resolve collapses any residual traversal; verify containment.
+    if (resolved !== path_1.default.join(cwd, basename) || path_1.default.dirname(resolved) !== cwd) {
+        throw new Error("env '" + env + "' resolves outside the working directory.");
+    }
+    return resolved;
+}
+function resolveClient(deps, env) {
+    if (env) {
+        var fromEnvFile = deps.clientFromEnvFile || dovetail_servicenow_1.createClientFromEnvFile;
+        return fromEnvFile(resolveEnvFilePath(env));
+    }
     if (deps.clientFactory) {
         return deps.clientFactory();
     }
@@ -29,7 +62,7 @@ async function servicenowQueryTable(args, deps) {
         throw new Error("Table '" + args.table + "' is in the default deny list. " +
             "Set SINC_MCP_SN_TABLE_OVERRIDE=" + args.table + " (comma-separated for multiple) to enable.");
     }
-    var client = resolveClient(deps);
+    var client = resolveClient(deps, args.env);
     var limit = args.limit !== undefined ? args.limit : 100;
     var records;
     if (args.fields && args.fields.length > 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tenonhq/dovetail-mcp",
-  "version": "0.0.14",
+  "version": "0.0.16",
   "description": "MCP server exposing read tools for ClickUp / Gmail / Calendar / ServiceNow plus gated ClickUp writes, backed by the Dovetail integration packages.",
   "main": "./dist/index.js",
   "bin": {
@@ -22,7 +22,7 @@
     "@tenonhq/dovetail-google-auth": "~0.0.12",
     "@tenonhq/dovetail-google-calendar": "~0.0.11",
     "@tenonhq/dovetail-mcp-kit": "~0.0.1",
-    "@tenonhq/dovetail-servicenow": "~0.0.19",
+    "@tenonhq/dovetail-servicenow": "~0.0.21",
     "dotenv": "^16.3.1",
     "zod": "^3.23.0"
   },