@vaultcompass/vault-guard-mcp 1.1.0 → 1.1.2

package/README.md

@@ -29,6 +29,9 @@ Restart the editor. Vault Guard tools are now available to your AI agent.
 
 ## Tools
 
+File and directory paths are resolved under the server's `cwd`. Paths outside
+that workspace are rejected.
+
 | Tool | Purpose |
 |------|---------|
 | `scan_workspace` | Scan a directory (`.gitignore`-aware). Returns JSON, SARIF, and summary. |

package/dist/index.js

@@ -59,8 +59,8 @@ var BINARY_EXTENSIONS = /* @__PURE__ */ new Set([
 function isBinaryFile(filePath) {
   return BINARY_EXTENSIONS.has(import_path.default.extname(filePath).toLowerCase());
 }
-async function scanWorkspaceDirectory(root, scanner, concurrency = 10) {
-  const files = await (0, import_vault_guard_core.getFilesToScanAsync)(root, false);
+async function scanWorkspaceDirectory(root, scanner, concurrency = 10, configIgnorePatterns2 = []) {
+  const files = await (0, import_vault_guard_core.getFilesToScanAsync)(root, false, void 0, configIgnorePatterns2);
   const results = [];
   let filesScanned = 0;
   let bytesScanned = 0;
@@ -86,12 +86,11 @@ async function scanWorkspaceDirectory(root, scanner, concurrency = 10) {
 }
 
 // src/server.ts
-var SERVER_VERSION = true ? "1.1.0" : "0.0.0-dev";
-function makeScanner() {
-  const cwd = process.cwd();
+var SERVER_VERSION = true ? "1.1.2" : "0.0.0-dev";
+function loadMcpConfig(workspaceRoot) {
   let cfg;
   try {
-    cfg = (0, import_vault_guard_core2.loadConfig)(cwd);
+    cfg = (0, import_vault_guard_core2.loadConfig)(workspaceRoot);
   } catch (e) {
     if (e instanceof import_vault_guard_core2.ConfigError) {
       process.stderr.write(
@@ -103,14 +102,48 @@ function makeScanner() {
       throw e;
     }
   }
-  return new import_vault_guard_core2.SecretScanner(cfg);
+  return cfg;
+}
+function makeScanner(config) {
+  return new import_vault_guard_core2.SecretScanner(config);
 }
 function toolPayload(obj) {
   return {
     content: [{ type: "text", text: JSON.stringify(obj, null, 2) }]
   };
 }
+function isPathInside(root, candidate) {
+  const rel = import_path2.default.relative(root, candidate);
+  return rel === "" || !rel.startsWith("..") && !import_path2.default.isAbsolute(rel);
+}
+function realpathIfExists(p) {
+  try {
+    return import_fs2.default.realpathSync(p);
+  } catch {
+    return p;
+  }
+}
+function resolveWorkspacePath(workspaceRoot, input) {
+  const root = import_path2.default.resolve(workspaceRoot);
+  const requested = import_path2.default.resolve(root, input);
+  if (!isPathInside(root, requested)) {
+    return { ok: false, error: "path_outside_workspace", path: requested };
+  }
+  const realRoot = realpathIfExists(root);
+  const realRequested = realpathIfExists(requested);
+  if (!isPathInside(realRoot, realRequested)) {
+    return { ok: false, error: "path_outside_workspace", path: requested };
+  }
+  return { ok: true, path: requested };
+}
+function configIgnorePatterns(config) {
+  return [
+    ...config.ignore?.paths ?? [],
+    ...config.ignore?.patterns ?? []
+  ];
+}
 function createMcpServer(options = {}) {
+  const workspaceRoot = import_path2.default.resolve(options.workspaceRoot ?? process.cwd());
   const server = new import_mcp.McpServer(
     { name: "vault-guard", version: SERVER_VERSION },
     {
@@ -152,10 +185,20 @@ function createMcpServer(options = {}) {
       }
     },
     async ({ root }) => {
-      const scanner = makeScanner();
-      const dir = import_path2.default.resolve(process.cwd(), root ?? ".");
+      const config = loadMcpConfig(workspaceRoot);
+      const scanner = makeScanner(config);
+      const resolved = resolveWorkspacePath(workspaceRoot, root ?? ".");
+      if (!resolved.ok) {
+        return toolPayload({ error: resolved.error, path: resolved.path });
+      }
+      const dir = resolved.path;
       const t0 = Date.now();
-      const { results, filesScanned, bytesScanned } = await scanWorkspaceDirectory(dir, scanner);
+      const { results, filesScanned, bytesScanned } = await scanWorkspaceDirectory(
+        dir,
+        scanner,
+        10,
+        configIgnorePatterns(config)
+      );
       const run = {
         duration_ms: Date.now() - t0,
         files_scanned: filesScanned,
@@ -183,8 +226,13 @@ function createMcpServer(options = {}) {
       }
     },
     async ({ file_path }) => {
-      const scanner = makeScanner();
-      const fp = import_path2.default.resolve(process.cwd(), file_path);
+      const config = loadMcpConfig(workspaceRoot);
+      const scanner = makeScanner(config);
+      const resolved = resolveWorkspacePath(workspaceRoot, file_path);
+      if (!resolved.ok) {
+        return toolPayload({ error: resolved.error, path: resolved.path });
+      }
+      const fp = resolved.path;
       if (!import_fs2.default.existsSync(fp) || !import_fs2.default.statSync(fp).isFile()) {
         return toolPayload({ error: "not_a_file", path: fp });
       }
@@ -200,8 +248,8 @@ function createMcpServer(options = {}) {
       const results = matches.length ? [{ file: fp, matches }] : [];
       return toolPayload({
         summary: { files_with_secrets: results.length, total_matches: matches.length },
-        json: JSON.parse((0, import_vault_guard_core2.formatJson)(results, { cwd: process.cwd(), run })),
-        sarif: (0, import_vault_guard_core2.formatSarif)(results, { cwd: process.cwd(), run })
+        json: JSON.parse((0, import_vault_guard_core2.formatJson)(results, { cwd: workspaceRoot, run })),
+        sarif: (0, import_vault_guard_core2.formatSarif)(results, { cwd: workspaceRoot, run })
       });
     }
   );
@@ -216,7 +264,7 @@ function createMcpServer(options = {}) {
       }
     },
     async ({ text, virtual_path }) => {
-      const scanner = makeScanner();
+      const scanner = makeScanner(loadMcpConfig(workspaceRoot));
       const t0 = Date.now();
       const matches = scanner.scanContent(text);
       const label = virtual_path ?? "inline://snippet";
@@ -246,7 +294,7 @@ function createMcpServer(options = {}) {
       }
     },
     async ({ paths }) => {
-      const targets = paths && paths.length > 0 ? paths : [process.cwd()];
+      const targets = paths && paths.length > 0 ? paths : ["."];
       let total = 0;
       const breakdown = {};
       const walkFile = (file) => {
@@ -269,7 +317,11 @@ function createMcpServer(options = {}) {
         }
       };
       for (const t of targets) {
-        walkFile(import_path2.default.resolve(process.cwd(), t));
+        const resolved = resolveWorkspacePath(workspaceRoot, t);
+        if (!resolved.ok) {
+          return toolPayload({ error: resolved.error, path: resolved.path });
+        }
+        walkFile(resolved.path);
       }
       const estCostAnthropic = tokenCounter.calculateCost("anthropic", total, 0);
       return toolPayload({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vaultcompass/vault-guard-mcp",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "description": "Let Cursor and Claude scan AI-proposed edits for secrets before applying. Local MCP server.",
   "main": "dist/index.js",
   "bin": {
@@ -26,13 +26,13 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^4.4.3",
-    "@vaultcompass/vault-guard-core": "1.1.0",
-    "@vaultcompass/vault-guard-telemetry": "1.1.0"
+    "@vaultcompass/vault-guard-core": "1.1.2",
+    "@vaultcompass/vault-guard-telemetry": "1.1.2"
   },
   "devDependencies": {
     "@types/jest": "^30.0.0",
-    "@types/node": "^25.9.1",
-    "esbuild": "^0.25.0",
+    "@types/node": "^25.9.3",
+    "esbuild": "^0.28.1",
     "jest": "^30.4.2",
     "ts-jest": "^29.4.11",
     "typescript": "^5.3.3"