cf-memory-mcp 3.9.8 → 3.9.10

package/bin/cf-memory-mcp.js

@@ -102,7 +102,8 @@ const TOOLS_LIST = [
             properties: {
                 project_path: { type: 'string', description: 'Absolute path to the project root directory' },
                 project_name: { type: 'string', description: 'Display name for the project (defaults to directory basename)' },
-                force_reindex: { type: 'boolean', description: 'If true, wipes existing chunks and rebuilds from scratch. Use only when needed; incremental is much faster.' }
+                force_reindex: { type: 'boolean', description: 'If true, wipes existing chunks and rebuilds from scratch. Use only when needed; incremental is much faster.' },
+                allow_system_path: { type: 'boolean', description: 'Allow indexing a path outside the current workspace root. Defaults false for safety.' }
             },
             required: ['project_path']
         }
@@ -370,14 +371,6 @@ class CFMemoryMCP {
         this.useStreamableHttp = true; // Try Streamable HTTP first
         this.autoWatcher = null; // Background file watcher
 
-        // Handle process termination gracefully
-        process.on('SIGINT', () => this.shutdown('SIGINT'));
-        process.on('SIGTERM', () => this.shutdown('SIGTERM'));
-        process.on('uncaughtException', (error) => {
-            this.logError('Uncaught exception:', error);
-            this.shutdown('ERROR');
-        });
-
         // Set up stdio encoding
         process.stdin.setEncoding('utf8');
         // Note: stdout.setEncoding doesn't exist on writable streams
@@ -414,6 +407,7 @@ class CFMemoryMCP {
     async start() {
         try {
             this.logDebug('Starting MCP message processing...');
+            this.installProcessHandlers();
 
             // Pre-warm the HTTPS connection in the background so the first
             // real tool call doesn't pay the TLS handshake cost.
@@ -436,6 +430,18 @@ class CFMemoryMCP {
         }
     }
 
+    installProcessHandlers() {
+        if (CFMemoryMCP._processHandlersInstalled) return;
+        CFMemoryMCP._processHandlersInstalled = true;
+
+        process.on('SIGINT', () => this.shutdown('SIGINT'));
+        process.on('SIGTERM', () => this.shutdown('SIGTERM'));
+        process.on('uncaughtException', (error) => {
+            this.logError('Uncaught exception:', error);
+            this.shutdown('ERROR');
+        });
+    }
+
     /**
      * Resolve the current cwd to a project_id in the background and
      * cache the result, so the first retrieve_context query that
@@ -1169,7 +1175,7 @@ class CFMemoryMCP {
 
     async handleIndexProject(message) {
         const args = message.params?.arguments || {};
-        const { project_path, project_name, include_patterns, exclude_patterns, force_reindex } = args;
+        const { project_path, project_name, include_patterns, exclude_patterns, force_reindex, allow_system_path } = args;
 
         // Boundary validation: bad inputs were producing unhelpful Node errors
         // ("path must be string"). Return a clean MCP error with the hint
@@ -1188,6 +1194,32 @@ class CFMemoryMCP {
 
         const resolvedPath = path.resolve(project_path);
         const name = project_name || path.basename(resolvedPath);
+        const workspaceRoot = (() => {
+            const root = process.env.CF_MEMORY_WATCH_PATH || process.cwd();
+            try { return fs.realpathSync(path.resolve(root)); }
+            catch (_) { return path.resolve(root); }
+        })();
+        const resolvedRealPath = (() => {
+            try { return fs.realpathSync(resolvedPath); }
+            catch (_) { return resolvedPath; }
+        })();
+        const relativeToWorkspace = path.relative(workspaceRoot, resolvedRealPath);
+        const insideWorkspace = relativeToWorkspace && !relativeToWorkspace.startsWith('..') && !path.isAbsolute(relativeToWorkspace);
+        const sameAsWorkspace = relativeToWorkspace === '';
+
+        if (!allow_system_path && !insideWorkspace && !sameAsWorkspace) {
+            process.stdout.write(JSON.stringify({
+                jsonrpc: '2.0',
+                id: message.id,
+                result: { content: [{ type: 'text', text: JSON.stringify({
+                    error: 'project_path_outside_workspace',
+                    project_path: resolvedPath,
+                    workspace_root: workspaceRoot,
+                    hint: 'index_project is confined to the current workspace root by default. Run the bridge from that project directory, set CF_MEMORY_WATCH_PATH to that root, or pass allow_system_path:true if you intentionally want to index another readable local directory.',
+                }, null, 2) }] },
+            }) + '\n');
+            return;
+        }
 
         this.logDebug(`Intercepted index_project for: ${resolvedPath} (${name})`);
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "cf-memory-mcp",
-	"version": "3.9.8",
+	"version": "3.9.10",
 	"description": "Cloudflare-hosted MCP server for code indexing, retrieval, and assistant memory with a direct remote MCP endpoint and local stdio bridge.",
 	"main": "bin/cf-memory-mcp.js",
 	"bin": {