@vaultcompass/vault-guard-mcp 1.4.6 → 1.5.0

package/dist/index.js

@@ -86,7 +86,7 @@ async function scanWorkspaceDirectory(root, scanner, concurrency = 10, configIgn
 }
 
 // src/server.ts
-var SERVER_VERSION = true ? "1.4.6" : "0.0.0-dev";
+var SERVER_VERSION = true ? "1.5.0" : "0.0.0-dev";
 function loadMcpConfig(workspaceRoot) {
   let cfg;
   try {
@@ -107,6 +107,7 @@ function loadMcpConfig(workspaceRoot) {
 function makeScanner(config) {
   return new import_vault_guard_core2.SecretScanner(config);
 }
+var MAX_SCAN_BYTES = 10 * 1024 * 1024;
 function toolPayload(obj) {
   return {
     content: [{ type: "text", text: JSON.stringify(obj, null, 2) }]
@@ -247,9 +248,12 @@ function createMcpServer(options = {}) {
       if (!import_fs2.default.existsSync(fp) || !import_fs2.default.statSync(fp).isFile()) {
         return toolPayload({ error: "not_a_file", path: fp });
       }
+      const st = import_fs2.default.statSync(fp);
+      if (st.size > MAX_SCAN_BYTES) {
+        return toolPayload({ error: "file_too_large", path: fp, bytes: st.size, max_bytes: MAX_SCAN_BYTES });
+      }
       const t0 = Date.now();
       const matches = scanner.scan(fp);
-      const st = import_fs2.default.statSync(fp);
       const run = {
         duration_ms: Date.now() - t0,
         files_scanned: 1,
@@ -275,12 +279,15 @@ function createMcpServer(options = {}) {
       }
     },
     async ({ text, virtual_path }) => {
+      const bytes = Buffer.byteLength(text, "utf8");
+      if (bytes > MAX_SCAN_BYTES) {
+        return toolPayload({ error: "text_too_large", bytes, max_bytes: MAX_SCAN_BYTES });
+      }
       const scanner = makeScanner(loadMcpConfig(workspaceRoot));
       const t0 = Date.now();
       const matches = scanner.scanContent(text);
       const label = virtual_path ?? "inline://snippet";
       const results = matches.length ? [{ file: label, matches }] : [];
-      const bytes = Buffer.byteLength(text, "utf8");
       const run = {
         duration_ms: Date.now() - t0,
         files_scanned: 1,
@@ -308,16 +315,20 @@ function createMcpServer(options = {}) {
       const targets = paths && paths.length > 0 ? paths : ["."];
       let total = 0;
       const breakdown = {};
+      const visited = /* @__PURE__ */ new Set();
       const walkFile = (file) => {
         try {
-          if (!import_fs2.default.existsSync(file)) return;
-          const st = import_fs2.default.statSync(file);
-          if (st.isFile()) {
+          const lst = import_fs2.default.lstatSync(file);
+          if (lst.isSymbolicLink()) return;
+          if (lst.isFile()) {
             const n = tokenCounter.countTokensInFile(file);
             total += n;
             const ext = import_path2.default.extname(file) || "(no-ext)";
             breakdown[ext] = (breakdown[ext] ?? 0) + n;
-          } else if (st.isDirectory()) {
+          } else if (lst.isDirectory()) {
+            const real = import_fs2.default.realpathSync(file);
+            if (visited.has(real)) return;
+            visited.add(real);
             const entries = import_fs2.default.readdirSync(file, { withFileTypes: true });
             for (const e of entries) {
               if (e.name === "node_modules" || e.name === ".git") continue;
@@ -332,7 +343,12 @@ function createMcpServer(options = {}) {
         if (!resolved.ok) {
           return toolPayload({ error: resolved.error, path: resolved.path });
         }
-        walkFile(resolved.path);
+        let start = resolved.path;
+        try {
+          start = import_fs2.default.realpathSync(resolved.path);
+        } catch {
+        }
+        walkFile(start);
       }
       const estCostAnthropic = tokenCounter.calculateCost("anthropic", total, 0);
       return toolPayload({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vaultcompass/vault-guard-mcp",
-  "version": "1.4.6",
+  "version": "1.5.0",
   "description": "Let Cursor and Claude scan AI-proposed edits for secrets before applying. Local MCP server.",
   "main": "dist/index.js",
   "bin": {
@@ -26,8 +26,8 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
     "zod": "^4.4.3",
-    "@vaultcompass/vault-guard-core": "1.4.6",
-    "@vaultcompass/vault-guard-telemetry": "1.4.6"
+    "@vaultcompass/vault-guard-core": "1.5.0",
+    "@vaultcompass/vault-guard-telemetry": "1.5.0"
   },
   "devDependencies": {
     "@types/jest": "^30.0.0",