@uluops/registry-mcp 0.2.5 → 0.2.7

package/CHANGELOG.md

@@ -7,6 +7,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.2.7] - 2026-06-07
+
+### Fixed
+
+- **Bumped `mcp-secure-server` 0.0.14-security → 0.0.15-security** (`package.json:67`) to pick up the `top`/`whoami` false-positive fix. The 0.0.14-security `command.systemInfo` regexes used `\b<cmd>\s*` — the `\s*` quantifier matches zero whitespace, so any identifier beginning with those letters tripped the COMMAND_INJECTION layer (`topPerformers`, `topology`, `topic`, `whoamiHandler`, etc.). Surfaced on 2026-06-07 when Codex called `get_ecosystem_overview({ fields: ["topPerformers"] })` and the request was rejected by layer 2 as `Top Process Monitor` before reaching the registry's subscription-tier check. Every other `fields` value reached the intended 403 — the field name was the sole trigger. The bidirectional `\b<cmd>\b` form in 0.0.15-security continues to block real shell invocations (`top`, `top -o cpu`, `top | head`, `top; ls`, `whoami`, `whoami | grep root`) but rejects identifier substrings cleanly. Verified via Verdaccio publish + install + live regex probe before npm promotion.
+
+## [0.2.6] - 2026-06-07
+
+### Fixed
+
+- **Entry-point guard now resolves symlinks before comparing** (`src/index.ts:187-208`). The 0.2.5 guard compared `process.argv[1]` against `fileURLToPath(import.meta.url)` by literal string equality. That works under `node dist/index.js` but breaks silently under `npx -y @uluops/registry-mcp` — npx creates a `node_modules/.bin/<name>` symlink in a temp dir and execs that, so `argv[1]` is the symlink path while `import.meta.url` resolves to the symlink's target. The two strings never match, `isEntryPoint` returns false, `main()` never runs, and the process exits 0 with **no output on stdout or stderr** — not a "version mismatch" or a "couldn't find binary" — pure silence. Every Codex/Claude harness that pinned this package via `npx -y @uluops/registry-mcp@<v>` got a server that started, immediately exited, and produced no diagnostic the user could grep on. The new `resolvedEqualsModule()` helper calls `realpathSync` on both sides before comparing, normalizing the npx-symlink case while preserving the test-isolation property (vitest's runner is `argv[1]` during tests, not this file). Caught on 2026-06-07 after the 0.2.5 ship — the `definition-factory` fix made the package installable but didn't surface this second-layer bug because `node dist/index.js` (the diff probe used to verify 0.2.5) always matched argv[1] to the real path.
+
+### Internal
+
+- Added `realpathSync` import from `node:fs` to support the new guard. No new runtime dependencies — `realpathSync` ships with Node.
+
 ## [0.2.5] - 2026-06-07
 
 ### Fixed

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAaH,iBAAe,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CA4JnC;AAED,OAAO,EAAE,IAAI,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAcH,iBAAe,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CA4JnC;AAED,OAAO,EAAE,IAAI,EAAE,CAAC"}

package/dist/index.js

@@ -5,6 +5,7 @@
  * Thin protocol adapter that enables Claude Code to interact with
  * the UluOps Registry API via MCP, using @uluops/registry-sdk.
  */
+import { realpathSync } from 'node:fs';
 import { fileURLToPath } from 'node:url';
 import { SecureMcpServer } from 'mcp-secure-server';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
@@ -157,11 +158,29 @@ export { main };
 // Auto-run main() only when this module is the program entry point.
 // Tests import `{ main }` directly and call it themselves; they do not
 // need (and previously relied on a fragile `NODE_ENV=test` guard to
-// suppress) auto-execution. The ESM-standard entry-point check below is
-// stable across NODE_ENV values, so a stray `NODE_ENV=test` in the user's
-// shell no longer silently stops the server from starting.
-const isEntryPoint = typeof process.argv[1] === 'string' &&
-    process.argv[1] === fileURLToPath(import.meta.url);
+// suppress) auto-execution.
+//
+// `process.argv[1]` may be a symlink (this is exactly how `npx -y` invokes
+// scoped bins — npx creates a `node_modules/.bin/<name>` symlink in a temp
+// dir and exec's that), while `import.meta.url` always resolves to the
+// real on-disk path of THIS file. A literal string equality would silently
+// return false under npx and main() would never run — the server would
+// exit 0 with no output, breaking every Codex/Claude harness that pins
+// this package via `npx -y @uluops/registry-mcp@<v>`. Resolving both sides
+// through realpath normalizes that case while preserving the test-import
+// path (which leaves argv[1] pointing at vitest's runner, not at this
+// file — the comparison still correctly returns false).
+function resolvedEqualsModule() {
+    if (typeof process.argv[1] !== 'string')
+        return false;
+    try {
+        return (realpathSync(process.argv[1]) === realpathSync(fileURLToPath(import.meta.url)));
+    }
+    catch {
+        return false;
+    }
+}
+const isEntryPoint = resolvedEqualsModule();
 if (isEntryPoint) {
     main().catch((error) => {
         // console.error is intentional here — logger may not be initialized yet at startup

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,KAAK,UAAU,IAAI;IACjB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,uFAAuF;QACvF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAE5D,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;QAC/B,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa;QAChD,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;KAC/B,CAAC,CAAC;IAEH,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;QACjD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;QAC9B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,eAAe;KAC9C,CAAC,CAAC;IAEH,+EAA+E;IAC/E,uEAAuE;IACvE,uFAAuF;IACvF,sEAAsE;IACtE,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IAChE,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;QACxC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;QAC3B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACnF,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;QAC3B,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;QAC3B,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;KAC5B,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;QACzD,aAAa,EAAE,OAAO;QACtB,oBAAoB,EAAE,GAAG;QACzB,cAAc,EAAE,GAAG,GAAG,IAAI;QAC1B,aAAa,EAAE,GAAG;QAElB,cAAc,EAAE,EAAE;QAClB,aAAa,EAAE,IAAI;QACnB,6EAA6E;QAC7E,uDAAuD;QACvD,mBAAmB,EAAE;YACnB,OAAO,EAAE,KAAK;SACf;QAED,YAAY;QAEZ,aAAa,EAAE;YACb,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,IAAI;SACnB;QAED,cAAc,EAAE;YACd,cAAc,EAAE,CAAC,UAAU,CAAC;SAC7B;QAED,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa;QAC5C,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;QAC9C,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CAAC,qBAAqB;KAC7D,CAAC,CAAC;IAEH,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzC,oBAAoB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAE7C,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAQ,EAAE;QACxC,MAAM,CAAC,IAAI,CAAC,YAAY,MAAM,4BAA4B,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;QACxC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;YACjC,KAAK,EAAE,KAAK,CAAC,OAAO;SACrB,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,iFAAiF;IACjF,uFAAuF;IACvF,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,UAAU,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAiD,CAAC,CAAC;IAExE,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;QAC5C,KAAK,EAAE;YACL,OAAO,EAAE,CAAC,kBAAkB,CAAC;YAC7B,OAAO,EAAE;gBACP,kBAAkB;gBAClB,gBAAgB;gBAChB,oBAAoB;gBACpB,aAAa;gBACb,eAAe;gBACf,qBAAqB;gBACrB,mBAAmB;aACpB;YACD,WAAW,EAAE;gBACX,mBAAmB;gBACnB,mBAAmB;gBACnB,oBAAoB;gBACpB,sBAAsB;gBACtB,mBAAmB;gBACnB,oBAAoB;gBACpB,eAAe;gBACf,eAAe;gBACf,eAAe;gBACf,kBAAkB;gBAClB,gBAAgB;gBAChB,qBAAqB;gBACrB,YAAY;aACb;YACD,QAAQ,EAAE;gBACR,iBAAiB;gBACjB,aAAa;gBACb,kBAAkB;gBAClB,kBAAkB;gBAClB,wBAAwB;gBACxB,oBAAoB;gBACpB,WAAW;gBACX,gBAAgB;gBAChB,cAAc;gBACd,wBAAwB;gBACxB,UAAU;gBACV,aAAa;gBACb,gBAAgB;gBAChB,cAAc;aACf;SACF;QACD,SAAS,EAAE;YACT,wBAAwB;YACxB,mBAAmB;YACnB,6BAA6B;YAC7B,sBAAsB;SACvB;KACF,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,IAAI,EAAE,CAAC;AAEhB,oEAAoE;AACpE,uEAAuE;AACvE,oEAAoE;AACpE,wEAAwE;AACxE,0EAA0E;AAC1E,2DAA2D;AAC3D,MAAM,YAAY,GAChB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAErD,IAAI,YAAY,EAAE,CAAC;IACjB,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC9B,mFAAmF;QACnF,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,KAAK,UAAU,IAAI;IACjB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,uFAAuF;QACvF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAE5D,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;QAC/B,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa;QAChD,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;KAC/B,CAAC,CAAC;IAEH,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;QACjD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;QAC9B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,eAAe;KAC9C,CAAC,CAAC;IAEH,+EAA+E;IAC/E,uEAAuE;IACvE,uFAAuF;IACvF,sEAAsE;IACtE,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IAChE,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;QACxC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;QAC3B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACnF,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;QAC3B,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;QAC3B,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;KAC5B,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;QACzD,aAAa,EAAE,OAAO;QACtB,oBAAoB,EAAE,GAAG;QACzB,cAAc,EAAE,GAAG,GAAG,IAAI;QAC1B,aAAa,EAAE,GAAG;QAElB,cAAc,EAAE,EAAE;QAClB,aAAa,EAAE,IAAI;QACnB,6EAA6E;QAC7E,uDAAuD;QACvD,mBAAmB,EAAE;YACnB,OAAO,EAAE,KAAK;SACf;QAED,YAAY;QAEZ,aAAa,EAAE;YACb,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,IAAI;SACnB;QAED,cAAc,EAAE;YACd,cAAc,EAAE,CAAC,UAAU,CAAC;SAC7B;QAED,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa;QAC5C,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;QAC9C,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CAAC,qBAAqB;KAC7D,CAAC,CAAC;IAEH,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzC,oBAAoB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAE7C,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAQ,EAAE;QACxC,MAAM,CAAC,IAAI,CAAC,YAAY,MAAM,4BAA4B,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;QACxC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;YACjC,KAAK,EAAE,KAAK,CAAC,OAAO;SACrB,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,iFAAiF;IACjF,uFAAuF;IACvF,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,UAAU,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAiD,CAAC,CAAC;IAExE,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;QAC5C,KAAK,EAAE;YACL,OAAO,EAAE,CAAC,kBAAkB,CAAC;YAC7B,OAAO,EAAE;gBACP,kBAAkB;gBAClB,gBAAgB;gBAChB,oBAAoB;gBACpB,aAAa;gBACb,eAAe;gBACf,qBAAqB;gBACrB,mBAAmB;aACpB;YACD,WAAW,EAAE;gBACX,mBAAmB;gBACnB,mBAAmB;gBACnB,oBAAoB;gBACpB,sBAAsB;gBACtB,mBAAmB;gBACnB,oBAAoB;gBACpB,eAAe;gBACf,eAAe;gBACf,eAAe;gBACf,kBAAkB;gBAClB,gBAAgB;gBAChB,qBAAqB;gBACrB,YAAY;aACb;YACD,QAAQ,EAAE;gBACR,iBAAiB;gBACjB,aAAa;gBACb,kBAAkB;gBAClB,kBAAkB;gBAClB,wBAAwB;gBACxB,oBAAoB;gBACpB,WAAW;gBACX,gBAAgB;gBAChB,cAAc;gBACd,wBAAwB;gBACxB,UAAU;gBACV,aAAa;gBACb,gBAAgB;gBAChB,cAAc;aACf;SACF;QACD,SAAS,EAAE;YACT,wBAAwB;YACxB,mBAAmB;YACnB,6BAA6B;YAC7B,sBAAsB;SACvB;KACF,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,IAAI,EAAE,CAAC;AAEhB,oEAAoE;AACpE,uEAAuE;AACvE,oEAAoE;AACpE,4BAA4B;AAC5B,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,uEAAuE;AACvE,2EAA2E;AAC3E,uEAAuE;AACvE,uEAAuE;AACvE,2EAA2E;AAC3E,yEAAyE;AACzE,sEAAsE;AACtE,wDAAwD;AACxD,SAAS,oBAAoB;IAC3B,IAAI,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,IAAI,CAAC;QACH,OAAO,CACL,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAC/E,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;AAE5C,IAAI,YAAY,EAAE,CAAC;IACjB,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC9B,mFAAmF;QACnF,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uluops/registry-mcp",
-  "version": "0.2.5",
+  "version": "0.2.7",
   "description": "MCP server for the UluOps Registry API — definition management, versioning, and analytics",
   "type": "module",
   "main": "dist/index.js",
@@ -64,7 +64,7 @@
     "@modelcontextprotocol/sdk": "1.29.0",
     "@uluops/registry-sdk": "0.30.2",
     "@uluops/sdk-core": "0.11.1",
-    "mcp-secure-server": "0.0.14-security",
+    "mcp-secure-server": "0.0.15-security",
     "zod": "3.25.76"
   },
   "devDependencies": {