apple-notes-mcp 1.4.4 → 2.0.1

package/build/utils/jxa.test.js

@@ -3,7 +3,7 @@
  *
  * These tests verify the JXA executor and compare behavior with AppleScript.
  */
-import { describe, it, expect, vi, beforeEach } from "vitest";
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
 import { executeJXA, escapeForJXA, buildNotesJXA } from "./jxa.js";
 // Mock execSync to avoid actual osascript calls
 vi.mock("child_process", () => ({
@@ -68,6 +68,25 @@ describe("executeJXA", () => {
         expect(result.success).toBe(false);
         expect(result.error).toContain("Cannot find note");
     });
+    describe("hardened executor (#16/#17)", () => {
+        afterEach(() => {
+            delete process.env.APPLE_NOTES_MCP_MAX_BUFFER;
+        });
+        it("passes SIGKILL and a large maxBuffer to execSync", () => {
+            mockExecSync.mockReturnValue("ok");
+            executeJXA("JSON.stringify({})");
+            const opts = mockExecSync.mock.calls[0][1];
+            expect(opts.killSignal).toBe("SIGKILL");
+            expect(opts.maxBuffer).toBe(64 * 1024 * 1024);
+        });
+        it("honors APPLE_NOTES_MCP_MAX_BUFFER override", () => {
+            process.env.APPLE_NOTES_MCP_MAX_BUFFER = "2097152";
+            mockExecSync.mockReturnValue("ok");
+            executeJXA("JSON.stringify({})");
+            const opts = mockExecSync.mock.calls[0][1];
+            expect(opts.maxBuffer).toBe(2097152);
+        });
+    });
     it("handles timeout errors", () => {
         const error = new Error("Command failed");
         error.killed = true;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apple-notes-mcp",
-  "version": "1.4.4",
+  "version": "2.0.1",
   "description": "MCP server for Apple Notes - create, search, update, and manage notes via Claude",
   "type": "module",
   "main": "build/index.js",