drafter-mcp 0.25.0 → 0.25.1

package/drafter-mcp.js

@@ -23233,7 +23233,7 @@ function toError(value) {
 	return value instanceof Error ? value : new Error(String(value));
 }
 // package.json
-var version = "0.25.0";
+var version = "0.25.1";
 // ../fountain/src/inline.ts
 const MARKERS$1 = /[*_\\]/;
 const isSpace$10 = (code) => code === void 0 || /\s/.test(String.fromCharCode(code));
@@ -30174,12 +30174,44 @@ async function imported(run) {
 	return got;
 }
 /**
+* The most paragraphs (text between blank lines) a file may have to be read: a long feature
+* script has a few thousand. Past this, a file's parse can outgrow a reader's heap
+* (READER_HEAP_MB), and in list_scripts or search_scripts the reader stopping would fail the whole
+* folder; so the file is refused alone, as too long (red/blue audit, 2026-11-03: a 3 MB file of
+* 540,000 one-line scenes and actions stopped every listing, where 360,000 still listed).
+*/
+const MAX_PARAGRAPHS = 3e5;
+/** Whether `text` has more than `max` paragraphs (lines ending in LF, CR, or CRLF), in one pass. */
+function moreParagraphsThan(text, max) {
+	let paragraphs = 0;
+	let blank = true;
+	let lineBlank = true;
+	for (let i = 0; i < text.length; i++) {
+		const code = text.charCodeAt(i);
+		if (code === 10 || code === 13) {
+			if (code === 13 && text.charCodeAt(i + 1) === 10) i++;
+			blank = lineBlank;
+			lineBlank = true;
+		} else if (code !== 32 && code !== 9 && lineBlank) {
+			lineBlank = false;
+			if (blank && ++paragraphs > max) return true;
+			blank = false;
+		}
+	}
+	return false;
+}
+/**
 * The script inside `file`, named `name` (its shown name, which is all a refusal says), judged in
 * Open's order. Throws NotRead when its bytes couldn't be read, NotOpened in Open's words for a
 * file Open turns away, and Refused (the reader's own phrase) for text Open won't read: over 5 MB,
-* not UTF-8, more than text.
+* not UTF-8, more than text, or more than MAX_PARAGRAPHS paragraphs.
 */
 async function readInside(file, name) {
+	const inside = await readWhole(file, name);
+	if (moreParagraphsThan(inside.text, 3e5)) throw new Refused(`it has more than ${MAX_PARAGRAPHS.toLocaleString("en-US")} paragraphs`);
+	return inside;
+}
+async function readWhole(file, name) {
 	const kind = importKindOf(name);
 	const read = {
 		noFollow: true,
@@ -30894,12 +30926,13 @@ function signatureLines(candidates, used = () => false) {
 }
 // ../story-map/src/mailto.ts
 /** What a contact may never hold: spaces, controls, and anything that ends or reshapes a URL. */
-const REFUSED = /[\s?&"<>:\\/\u0000-\u001f\u007f]/;
+const REFUSED = /[\s?&"<>:\\/,;%\u0000-\u001f\u007f]/;
 /**
 * A `mailto:` link for a contact the page may link (design §10.8): one `@`, neither first nor
 * last; a dot in the part after it, with something on both sides of it; and no space, control
-* character, `?` or `&` (which would add headers or a body to the mail), quote, angle bracket,
-* colon, or slash (which could end the attribute or make it another kind of link). Else null, and
+* character, `?` or `&` (which would add headers or a body to the mail), comma, semicolon, or
+* `%` (which would add another address, plainly or encoded: red/blue audit, 2026-11-03), quote,
+* angle bracket, colon, or slash (which could end the attribute or make it another kind of link). Else null, and
 * the page shows the contact as text.
 */
 function mailtoOf(contact) {
@@ -34199,10 +34232,14 @@ function visibleMarkdownIn(text) {
 }
 // ../history/src/print.ts
 const SCREENPLAY$1 = builtins["us-screenplay"];
-/** The template `doc` names in its settings, else the screenplay. */
+/**
+* The template `doc` names in its settings, else the screenplay. Only a built-in's own name: a
+* script naming `constructor` or `__proto__` got the object's prototype, and Cuts and History
+* stopped reading it (red/blue audit, 2026-11-03).
+*/
 function templateOf(doc) {
 	const id = doc.meta?.template;
-	return (typeof id === "string" ? builtins[id] : void 0) ?? SCREENPLAY$1;
+	return typeof id === "string" && Object.hasOwn(builtins, id) ? builtins[id] : SCREENPLAY$1;
 }
 /**
 * A heading folded for matching: upper case, the locked number (`#12A#`) dropped, every dash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drafter-mcp",
-  "version": "0.25.0",
+  "version": "0.25.1",
   "description": "Drafter for Claude: a local, read-only MCP server that lets an AI app read the scripts in the folders the writer names.",
   "license": "MIT",
   "type": "module",