drafter-mcp 0.24.3 → 0.25.1

package/drafter-mcp.js

@@ -23233,7 +23233,7 @@ function toError(value) {
 	return value instanceof Error ? value : new Error(String(value));
 }
 // package.json
-var version = "0.24.3";
+var version = "0.25.1";
 // ../fountain/src/inline.ts
 const MARKERS$1 = /[*_\\]/;
 const isSpace$10 = (code) => code === void 0 || /\s/.test(String.fromCharCode(code));
@@ -23395,11 +23395,11 @@ function jsonOf(meta) {
 	}).replaceAll("/", "\\/");
 }
 /**
-* Where the existing block is: the `/* drafter … *\/` boneyard that `parse` reads as `doc.meta`,
-* the last block and alone in it. Only the boneyard itself, so the blank lines and indent around
-* it stay as they were.
+* The `/* drafter … *\/` boneyard that `parse` reads as `doc.meta`, the last block and alone in it,
+* or null when there is none. Only the boneyard itself, so the blank lines and indent around it
+* stay as they were.
 */
-function existingBlock(doc) {
+function metadataSpan(doc) {
 	if (doc.meta === null) return null;
 	const last = doc.blocks[doc.blocks.length - 1];
 	if (last?.kind !== "boneyard") return null;
@@ -23428,7 +23428,7 @@ function setMeta(doc, meta) {
 	const json = jsonOf(meta);
 	const nl = lineBreakOf(source);
 	const block = `${OPENER$2}${nl}${json}${nl}*/`;
-	const existing = existingBlock(doc);
+	const existing = metadataSpan(doc);
 	if (existing) {
 		if (jsonOf(doc.meta) === json) return [];
 		return [{
@@ -30174,12 +30174,44 @@ async function imported(run) {
 	return got;
 }
 /**
+* The most paragraphs (text between blank lines) a file may have to be read: a long feature
+* script has a few thousand. Past this, a file's parse can outgrow a reader's heap
+* (READER_HEAP_MB), and in list_scripts or search_scripts the reader stopping would fail the whole
+* folder; so the file is refused alone, as too long (red/blue audit, 2026-11-03: a 3 MB file of
+* 540,000 one-line scenes and actions stopped every listing, where 360,000 still listed).
+*/
+const MAX_PARAGRAPHS = 3e5;
+/** Whether `text` has more than `max` paragraphs (lines ending in LF, CR, or CRLF), in one pass. */
+function moreParagraphsThan(text, max) {
+	let paragraphs = 0;
+	let blank = true;
+	let lineBlank = true;
+	for (let i = 0; i < text.length; i++) {
+		const code = text.charCodeAt(i);
+		if (code === 10 || code === 13) {
+			if (code === 13 && text.charCodeAt(i + 1) === 10) i++;
+			blank = lineBlank;
+			lineBlank = true;
+		} else if (code !== 32 && code !== 9 && lineBlank) {
+			lineBlank = false;
+			if (blank && ++paragraphs > max) return true;
+			blank = false;
+		}
+	}
+	return false;
+}
+/**
 * The script inside `file`, named `name` (its shown name, which is all a refusal says), judged in
 * Open's order. Throws NotRead when its bytes couldn't be read, NotOpened in Open's words for a
 * file Open turns away, and Refused (the reader's own phrase) for text Open won't read: over 5 MB,
-* not UTF-8, more than text.
+* not UTF-8, more than text, or more than MAX_PARAGRAPHS paragraphs.
 */
 async function readInside(file, name) {
+	const inside = await readWhole(file, name);
+	if (moreParagraphsThan(inside.text, 3e5)) throw new Refused(`it has more than ${MAX_PARAGRAPHS.toLocaleString("en-US")} paragraphs`);
+	return inside;
+}
+async function readWhole(file, name) {
 	const kind = importKindOf(name);
 	const read = {
 		noFollow: true,
@@ -30894,12 +30926,13 @@ function signatureLines(candidates, used = () => false) {
 }
 // ../story-map/src/mailto.ts
 /** What a contact may never hold: spaces, controls, and anything that ends or reshapes a URL. */
-const REFUSED = /[\s?&"<>:\\/\u0000-\u001f\u007f]/;
+const REFUSED = /[\s?&"<>:\\/,;%\u0000-\u001f\u007f]/;
 /**
 * A `mailto:` link for a contact the page may link (design §10.8): one `@`, neither first nor
 * last; a dot in the part after it, with something on both sides of it; and no space, control
-* character, `?` or `&` (which would add headers or a body to the mail), quote, angle bracket,
-* colon, or slash (which could end the attribute or make it another kind of link). Else null, and
+* character, `?` or `&` (which would add headers or a body to the mail), comma, semicolon, or
+* `%` (which would add another address, plainly or encoded: red/blue audit, 2026-11-03), quote,
+* angle bracket, colon, or slash (which could end the attribute or make it another kind of link). Else null, and
 * the page shows the contact as text.
 */
 function mailtoOf(contact) {
@@ -34199,10 +34232,14 @@ function visibleMarkdownIn(text) {
 }
 // ../history/src/print.ts
 const SCREENPLAY$1 = builtins["us-screenplay"];
-/** The template `doc` names in its settings, else the screenplay. */
+/**
+* The template `doc` names in its settings, else the screenplay. Only a built-in's own name: a
+* script naming `constructor` or `__proto__` got the object's prototype, and Cuts and History
+* stopped reading it (red/blue audit, 2026-11-03).
+*/
 function templateOf(doc) {
 	const id = doc.meta?.template;
-	return (typeof id === "string" ? builtins[id] : void 0) ?? SCREENPLAY$1;
+	return typeof id === "string" && Object.hasOwn(builtins, id) ? builtins[id] : SCREENPLAY$1;
 }
 /**
 * A heading folded for matching: upper case, the locked number (`#12A#`) dropped, every dash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drafter-mcp",
-  "version": "0.24.3",
+  "version": "0.25.1",
   "description": "Drafter for Claude: a local, read-only MCP server that lets an AI app read the scripts in the folders the writer names.",
   "license": "MIT",
   "type": "module",