codecartographer-pi 0.12.10 → 0.12.11

package/dist/mcp-server/server.js

@@ -15,7 +15,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { CallToolRequestSchema, ErrorCode, ListToolsRequestSchema, McpError, } from "@modelcontextprotocol/sdk/types.js";
 import { cp, mkdir, readFile, rename, writeFile } from "node:fs/promises";
 import { basename, isAbsolute, join } from "node:path";
-import { buildPhasePrompt, buildSkillPrompt, buildValidationSummary, canonicalPath, completeValidatedPhase, computePerPhaseTotals, computeTotals, createEmptyStatus, DEFAULT_PIPELINE_PATH, deriveSlug, discoverLibrary, getNextEligiblePhase, getPipelineLabel, getWorkspaceState, isValidSlug, listEntries, listSkillNames, loadCodecartoConfig, loadUsage, loadYamlFile, normalizeForComparison, PACKAGE_VERSION, packagedWorkspaceDir, pathExists, PhasePreflightError, publishEntry, reindex as libraryReindex, resolvePhase, resolvePipelineChoice, stringifySimpleYaml, switchPipeline, validatePhaseOutput, writeLibraryConfig, } from "../core/index.js";
+import { buildPhasePrompt, buildSkillPrompt, buildValidationSummary, canonicalPath, completeValidatedPhase, computePerPhaseTotals, computeTotals, createEmptyStatus, DEFAULT_PIPELINE_PATH, deriveSlug, discoverLibrary, getNextEligiblePhase, getPipelineLabel, getWorkspaceState, isValidSlug, isWithinPathResolved, listEntries, listSkillNames, loadCodecartoConfig, loadUsage, loadYamlFile, normalizeForComparison, PACKAGE_VERSION, packagedWorkspaceDir, pathExists, PhasePreflightError, publishEntry, reindex as libraryReindex, resolvePhase, resolvePipelineChoice, stringifySimpleYaml, switchPipeline, validatePhaseOutput, writeLibraryConfig, } from "../core/index.js";
 import { initLibrary } from "../core/library.js";
 import { loadUserConfig, resolveUserConfigPath } from "../core/orchestrator-config.js";
 import { writeDashboard } from "../extensions/codecarto/dashboard-writer.js";
@@ -325,7 +325,7 @@ function buildGenerationFromArg(model_metadata) {
         out.notes = m.notes;
     return out;
 }
-async function readSpecArg(args) {
+async function readSpecArg(args, allowedRoots = []) {
     if (typeof args.spec === "string" && args.spec.length > 0)
         return args.spec;
     if (typeof args.spec_path === "string" && args.spec_path.length > 0) {
@@ -335,6 +335,16 @@ async function readSpecArg(args) {
         if (!(await pathExists(args.spec_path))) {
             throw new McpError(ErrorCode.InvalidParams, `spec_path does not exist: ${args.spec_path}`);
         }
+        // Enforce path containment: spec_path must be within an allowed root
+        // (cwd's .codecarto/ or the configured library path) to prevent
+        // arbitrary file reads.
+        if (allowedRoots.length > 0) {
+            const resolvedSpecPath = await canonicalPath(args.spec_path);
+            const withinAllowed = await Promise.all(allowedRoots.map((root) => isWithinPathResolved(resolvedSpecPath, root)));
+            if (!withinAllowed.some((result) => result)) {
+                throw new McpError(ErrorCode.InvalidParams, `spec_path must be within the workspace (.codecarto/) or the configured library path. Got: ${args.spec_path}`);
+            }
+        }
         return readFile(args.spec_path, "utf8");
     }
     throw new McpError(ErrorCode.InvalidParams, "Either spec (inline content) or spec_path (absolute file path) is required");
@@ -375,7 +385,12 @@ export async function handlePublish(args) {
     if (!marker) {
         throw new McpError(ErrorCode.InvalidParams, `No CodeCartographer library at ${libraryPath} (missing .codecarto-library marker). Create one before publishing.`);
     }
-    const spec = await readSpecArg(args);
+    // Build allowed roots for spec_path containment: workspace .codecarto/ and library path
+    const allowedRoots = [libraryPath];
+    if (typeof args.cwd === "string" && args.cwd.trim() !== "") {
+        allowedRoots.push(join(args.cwd.trim(), ".codecarto"));
+    }
+    const spec = await readSpecArg(args, allowedRoots);
     if (typeof args.source_repo !== "string" || args.source_repo.trim() === "") {
         throw new McpError(ErrorCode.InvalidParams, "source_repo is required");
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codecartographer-pi",
-  "version": "0.12.10",
+  "version": "0.12.11",
   "mcpName": "io.github.HuginnIndustries/codecartographer",
   "description": "Evidence-backed reverse engineering and human-gated software planning for Pi and MCP coding agents.",
   "type": "module",