@topazlabs/mcp 0.1.12 → 0.1.13
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -4,14 +4,8 @@
|
|
|
4
4
|
* /sessions/<id>/mnt/<folder>/ which maps to ~/<folder>/ on the host.
|
|
5
5
|
*/
|
|
6
6
|
export declare function translateSandboxPath(inputPath: string): string;
|
|
7
|
-
/**
|
|
8
|
-
* Validate a file path for reading. Returns the resolved absolute path.
|
|
9
|
-
* Expands ~, translates sandbox paths, blocks sensitive directories.
|
|
10
|
-
*/
|
|
7
|
+
/** Validate a file path for reading. */
|
|
11
8
|
export declare function validateReadPath(inputPath: string): string;
|
|
12
|
-
/**
|
|
13
|
-
* Validate a file path for writing. Returns the resolved absolute path.
|
|
14
|
-
* Expands ~, translates sandbox paths, restricts to CWD + temp + TOPAZ_ALLOWED_DIRS.
|
|
15
|
-
*/
|
|
9
|
+
/** Validate a file path for writing. */
|
|
16
10
|
export declare function validateWritePath(inputPath: string): string;
|
|
17
11
|
//# sourceMappingURL=path-security.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"path-security.d.ts","sourceRoot":"","sources":["../../src/lib/path-security.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"path-security.d.ts","sourceRoot":"","sources":["../../src/lib/path-security.ts"],"names":[],"mappings":"AAsEA;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAM9D;AAuBD,wCAAwC;AACxC,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wCAAwC;AACxC,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE3D"}
|
|
@@ -1,10 +1,7 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* Path security — validates file paths.
|
|
3
3
|
*
|
|
4
|
-
* -
|
|
5
|
-
* - Writes: CWD + temp + TOPAZ_ALLOWED_DIRS
|
|
6
|
-
* - Always blocks sensitive paths (/etc, ~/.ssh, etc.)
|
|
7
|
-
* - Blocks symlinks that escape allowed directories (writes only)
|
|
4
|
+
* - Blocks sensitive paths (/etc, ~/.ssh, ~/.aws, etc.)
|
|
8
5
|
* - Expands ~ to home directory
|
|
9
6
|
* - Translates Claude Cowork sandbox paths to real macOS paths
|
|
10
7
|
*/
|
|
@@ -41,14 +38,6 @@ function isSensitivePath(p) {
|
|
|
41
38
|
}
|
|
42
39
|
return false;
|
|
43
40
|
}
|
|
44
|
-
function resolveReal(p) {
|
|
45
|
-
try {
|
|
46
|
-
return fs.realpathSync(p);
|
|
47
|
-
}
|
|
48
|
-
catch {
|
|
49
|
-
return p;
|
|
50
|
-
}
|
|
51
|
-
}
|
|
52
41
|
/**
|
|
53
42
|
* Resolve a path safely, handling the case where the file doesn't exist yet.
|
|
54
43
|
* For non-existent files, resolves the parent directory (which must exist)
|
|
@@ -69,63 +58,6 @@ function resolveRealSafe(p) {
|
|
|
69
58
|
}
|
|
70
59
|
}
|
|
71
60
|
}
|
|
72
|
-
/**
|
|
73
|
-
* Walk every component of a path checking for symlinks that escape allowed dirs.
|
|
74
|
-
* Returns true if any symlink component resolves outside allowed directories.
|
|
75
|
-
*/
|
|
76
|
-
function hasSymlinkEscape(filePath) {
|
|
77
|
-
const allowed = getWriteAllowedDirs();
|
|
78
|
-
const parts = filePath.split(path.sep);
|
|
79
|
-
let current = parts[0] === "" ? path.sep : parts[0];
|
|
80
|
-
for (let i = 1; i < parts.length; i++) {
|
|
81
|
-
current = path.join(current, parts[i]);
|
|
82
|
-
try {
|
|
83
|
-
const stat = fs.lstatSync(current);
|
|
84
|
-
if (stat.isSymbolicLink()) {
|
|
85
|
-
const target = fs.realpathSync(current);
|
|
86
|
-
const isWithinAllowed = allowed.some((dir) => target === dir || target.startsWith(dir + path.sep));
|
|
87
|
-
const isAncestorOfAllowed = allowed.some((dir) => dir.startsWith(target + path.sep));
|
|
88
|
-
if (!isWithinAllowed && !isAncestorOfAllowed) {
|
|
89
|
-
return true;
|
|
90
|
-
}
|
|
91
|
-
}
|
|
92
|
-
}
|
|
93
|
-
catch {
|
|
94
|
-
break;
|
|
95
|
-
}
|
|
96
|
-
}
|
|
97
|
-
return false;
|
|
98
|
-
}
|
|
99
|
-
/** Directories where writes are allowed: CWD + temp + TOPAZ_ALLOWED_DIRS */
|
|
100
|
-
function getWriteAllowedDirs() {
|
|
101
|
-
const cwd = path.resolve(process.cwd());
|
|
102
|
-
const cwdReal = resolveReal(cwd);
|
|
103
|
-
const tmpDir = path.resolve(os.tmpdir());
|
|
104
|
-
const tmpDirReal = resolveReal(tmpDir);
|
|
105
|
-
const dirs = [cwd, tmpDir];
|
|
106
|
-
if (cwdReal !== cwd)
|
|
107
|
-
dirs.push(cwdReal);
|
|
108
|
-
if (tmpDirReal !== tmpDir)
|
|
109
|
-
dirs.push(tmpDirReal);
|
|
110
|
-
const envDirs = process.env.TOPAZ_ALLOWED_DIRS;
|
|
111
|
-
if (envDirs) {
|
|
112
|
-
for (const d of envDirs.split(",")) {
|
|
113
|
-
const trimmed = d.trim();
|
|
114
|
-
if (trimmed) {
|
|
115
|
-
const resolved = path.resolve(trimmed);
|
|
116
|
-
dirs.push(resolved);
|
|
117
|
-
const real = resolveReal(resolved);
|
|
118
|
-
if (real !== resolved)
|
|
119
|
-
dirs.push(real);
|
|
120
|
-
}
|
|
121
|
-
}
|
|
122
|
-
}
|
|
123
|
-
return dirs;
|
|
124
|
-
}
|
|
125
|
-
function isWithinWriteAllowedDirs(realPath) {
|
|
126
|
-
const allowed = getWriteAllowedDirs();
|
|
127
|
-
return allowed.some((dir) => realPath === dir || realPath.startsWith(dir + path.sep));
|
|
128
|
-
}
|
|
129
61
|
/** Expand ~ to the user's home directory */
|
|
130
62
|
function expandTilde(p) {
|
|
131
63
|
if (p === "~")
|
|
@@ -151,10 +83,10 @@ function normalizePath(inputPath) {
|
|
|
151
83
|
return translateSandboxPath(expandTilde(inputPath));
|
|
152
84
|
}
|
|
153
85
|
/**
|
|
154
|
-
* Validate a
|
|
86
|
+
* Validate a path and return the resolved absolute path.
|
|
155
87
|
* Expands ~, translates sandbox paths, blocks sensitive directories.
|
|
156
88
|
*/
|
|
157
|
-
|
|
89
|
+
function validatePath(inputPath) {
|
|
158
90
|
const normalized = normalizePath(inputPath);
|
|
159
91
|
const resolved = path.resolve(normalized);
|
|
160
92
|
const realPath = resolveRealSafe(resolved);
|
|
@@ -163,23 +95,12 @@ export function validateReadPath(inputPath) {
|
|
|
163
95
|
}
|
|
164
96
|
return resolved;
|
|
165
97
|
}
|
|
166
|
-
/**
|
|
167
|
-
|
|
168
|
-
|
|
169
|
-
|
|
98
|
+
/** Validate a file path for reading. */
|
|
99
|
+
export function validateReadPath(inputPath) {
|
|
100
|
+
return validatePath(inputPath);
|
|
101
|
+
}
|
|
102
|
+
/** Validate a file path for writing. */
|
|
170
103
|
export function validateWritePath(inputPath) {
|
|
171
|
-
|
|
172
|
-
const resolved = path.resolve(normalized);
|
|
173
|
-
const realPath = resolveRealSafe(resolved);
|
|
174
|
-
if (isSensitivePath(resolved) || isSensitivePath(realPath)) {
|
|
175
|
-
throw new Error("Access denied: path is in a restricted location");
|
|
176
|
-
}
|
|
177
|
-
if (!isWithinWriteAllowedDirs(realPath)) {
|
|
178
|
-
throw new Error("Access denied: path is outside allowed directories");
|
|
179
|
-
}
|
|
180
|
-
if (hasSymlinkEscape(resolved)) {
|
|
181
|
-
throw new Error("Access denied: path contains a symlink that escapes allowed directories");
|
|
182
|
-
}
|
|
183
|
-
return resolved;
|
|
104
|
+
return validatePath(inputPath);
|
|
184
105
|
}
|
|
185
106
|
//# sourceMappingURL=path-security.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"path-security.js","sourceRoot":"","sources":["../../src/lib/path-security.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"path-security.js","sourceRoot":"","sources":["../../src/lib/path-security.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,iEAAiE;AACjE,MAAM,kBAAkB,GAAG;IACzB,OAAO;IACP,eAAe;IACf,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,OAAO;IACP,WAAW;IACX,mBAAmB;CACpB,CAAC;AAEF,SAAS,oBAAoB;IAC3B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,OAAO;QACL,GAAG,kBAAkB;QACrB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,GAAG;QAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,GAAG;QAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,GAAG;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,YAAY,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;IACnD,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,CAAS;IAChC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;AACH,CAAC;AAED,4CAA4C;AAC5C,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAChE,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,wEAAwE;AACxE,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,oBAAoB,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,SAAiB;IACrC,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE3C,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;AACjC,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;AACjC,CAAC"}
|