apple-notes-mcp 2.5.0 → 2.5.1

package/build/services/appleNotesManager.js

@@ -2056,10 +2056,11 @@ export class AppleNotesManager {
      */
     listAttachments(title, account) {
         const targetAccount = this.resolveAccount(account);
+        const safeAccount = escapePlainStringForAppleScript(targetAccount);
         const safeTitle = escapePlainStringForAppleScript(title);
         const script = `
       tell application "Notes"
-        tell account "${targetAccount}"
+        tell account "${safeAccount}"
           set theNote to note "${safeTitle}"
         set attachmentList to {}
         repeat with a in attachments of theNote

package/build/services/appleNotesManager.test.js

@@ -315,6 +315,17 @@ describe("AppleNotesManager", () => {
         manager = new AppleNotesManager();
         vi.clearAllMocks();
     });
+    describe("listAttachments — security", () => {
+        it("escapes the account name so it cannot break out of the AppleScript literal (injection regression)", () => {
+            mockExecuteAppleScript.mockReturnValue({ success: true, output: "" });
+            manager.listAttachments("My Note", 'evil" injected');
+            const script = String(mockExecuteAppleScript.mock.calls.at(-1)?.[0]);
+            // The account's double-quote must be escaped (\\") — a raw quote would
+            // terminate the tell-account string literal and allow `do shell script` injection.
+            expect(script).toContain('tell account "evil\\" injected"');
+            expect(script).not.toContain('tell account "evil" injected"');
+        });
+    });
     // ---------------------------------------------------------------------------
     // Note Creation
     // ---------------------------------------------------------------------------

package/build/utils/checklistParser.js

@@ -24,7 +24,7 @@
  * @module utils/checklistParser
  * @see https://github.com/sweetrb/apple-notes-mcp/issues/2
  */
-import { execSync } from "child_process";
+import { execFileSync } from "child_process";
 import * as zlib from "zlib";
 import * as fs from "fs";
 import * as path from "path";
@@ -43,7 +43,7 @@ export function hasFullDiskAccess() {
         if (!fs.existsSync(NOTES_DB_PATH))
             return false;
         // Try to open the database with a simple query
-        execSync(`sqlite3 -readonly "${NOTES_DB_PATH}" "SELECT 1;"`, {
+        execFileSync("sqlite3", ["-readonly", NOTES_DB_PATH, "SELECT 1;"], {
             encoding: "utf8",
             timeout: 3000,
             stdio: ["pipe", "pipe", "pipe"],
@@ -75,7 +75,7 @@ function queryNoteData(noteId) {
     // Query for the gzipped protobuf data, output as hex for safe transport
     const query = `SELECT hex(nd.ZDATA) FROM ZICNOTEDATA nd JOIN ZICCLOUDSYNCINGOBJECT n ON nd.ZNOTE = n.Z_PK WHERE n.Z_PK = ${pk};`;
     try {
-        const result = execSync(`sqlite3 -readonly "${NOTES_DB_PATH}" "${query}"`, {
+        const result = execFileSync("sqlite3", ["-readonly", NOTES_DB_PATH, query], {
             encoding: "utf8",
             timeout: 5000,
             stdio: ["pipe", "pipe", "pipe"],

package/build/utils/checklistParser.test.js

@@ -9,7 +9,7 @@ import * as zlib from "zlib";
 import { getChecklistItems, hasFullDiskAccess } from "./checklistParser.js";
 // Mock child_process to avoid actual database access
 vi.mock("child_process", () => ({
-    execSync: vi.fn(),
+    execFileSync: vi.fn(),
     spawnSync: vi.fn(() => ({ error: null })),
 }));
 // Mock fs for database existence checks
@@ -17,9 +17,9 @@ vi.mock("fs", () => ({
     existsSync: vi.fn(() => true),
     statSync: vi.fn(() => ({ mtimeMs: Date.now() })),
 }));
-import { execSync } from "child_process";
+import { execFileSync } from "child_process";
 import { existsSync } from "fs";
-const mockExecSync = vi.mocked(execSync);
+const mockExecSync = vi.mocked(execFileSync);
 const mockExistsSync = vi.mocked(existsSync);
 /**
  * Builds a minimal Apple Notes protobuf structure with checklist items.
@@ -225,6 +225,6 @@ describe("getChecklistItems", () => {
     it("extracts correct primary key from note ID", () => {
         mockExecSync.mockReturnValue("");
         getChecklistItems("x-coredata://12345-ABCDE/ICNote/p42");
-        expect(mockExecSync).toHaveBeenCalledWith(expect.stringContaining("Z_PK = 42"), expect.any(Object));
+        expect(mockExecSync).toHaveBeenCalledWith("sqlite3", expect.arrayContaining([expect.stringContaining("Z_PK = 42")]), expect.any(Object));
     });
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apple-notes-mcp",
-  "version": "2.5.0",
+  "version": "2.5.1",
   "description": "MCP server for Apple Notes - create, search, update, and manage notes via Claude and other AI assistants",
   "type": "module",
   "main": "build/index.js",
@@ -68,7 +68,7 @@
     "@types/turndown": "^5.0.6",
     "@typescript-eslint/eslint-plugin": "^8.0.0",
     "@typescript-eslint/parser": "^8.0.0",
-    "@vitest/coverage-v8": "^2.1.9",
+    "@vitest/coverage-v8": "^3.2.6",
     "eslint": "^9.0.0",
     "globals": "^17.0.0",
     "husky": "^9.1.7",
@@ -78,7 +78,7 @@
     "tsconfig-paths": "^4.2.0",
     "typescript": "^5.0.0",
     "typescript-eslint": "^8.51.0",
-    "vitest": "^2.0.0"
+    "vitest": "^3.2.6"
   },
   "volta": {
     "node": "24.17.0"