evrex-mcp 0.9.0 → 0.9.1

package/dist/capture.js

@@ -3500,11 +3500,13 @@ evrex will not fall back to writing the credential in a plain file.`
         if (!await this.available()) throw new NoKeychainError(this.runner.platform);
         switch (this.runner.platform) {
           case "darwin": {
+            if (/["\\\r\n]/.test(secret)) {
+              throw new Error("Keychain write refused: the credential has a character `security -i` cannot carry.");
+            }
             const result = await this.runner.run(
               "security",
-              ["add-generic-password", "-a", ACCOUNT, "-s", SERVICE, "-U", "-w"],
-              `${secret}
-${secret}
+              ["-i"],
+              `add-generic-password -a "${ACCOUNT}" -s "${SERVICE}" -U -w "${secret}"
 `
             );
             if (result.code !== 0) throw new Error(`Keychain write failed: ${result.stderr.trim()}`);

package/dist/import.js

@@ -3500,11 +3500,13 @@ evrex will not fall back to writing the credential in a plain file.`
         if (!await this.available()) throw new NoKeychainError(this.runner.platform);
         switch (this.runner.platform) {
           case "darwin": {
+            if (/["\\\r\n]/.test(secret)) {
+              throw new Error("Keychain write refused: the credential has a character `security -i` cannot carry.");
+            }
             const result = await this.runner.run(
               "security",
-              ["add-generic-password", "-a", ACCOUNT, "-s", SERVICE, "-U", "-w"],
-              `${secret}
-${secret}
+              ["-i"],
+              `add-generic-password -a "${ACCOUNT}" -s "${SERVICE}" -U -w "${secret}"
 `
             );
             if (result.code !== 0) throw new Error(`Keychain write failed: ${result.stderr.trim()}`);

package/dist/index.js

@@ -141,11 +141,13 @@ evrex will not fall back to writing the credential in a plain file.`
         if (!await this.available()) throw new NoKeychainError(this.runner.platform);
         switch (this.runner.platform) {
           case "darwin": {
+            if (/["\\\r\n]/.test(secret)) {
+              throw new Error("Keychain write refused: the credential has a character `security -i` cannot carry.");
+            }
             const result = await this.runner.run(
               "security",
-              ["add-generic-password", "-a", ACCOUNT, "-s", SERVICE, "-U", "-w"],
-              `${secret}
-${secret}
+              ["-i"],
+              `add-generic-password -a "${ACCOUNT}" -s "${SERVICE}" -U -w "${secret}"
 `
             );
             if (result.code !== 0) throw new Error(`Keychain write failed: ${result.stderr.trim()}`);

package/dist/tickets.js

@@ -141,11 +141,13 @@ evrex will not fall back to writing the credential in a plain file.`
         if (!await this.available()) throw new NoKeychainError(this.runner.platform);
         switch (this.runner.platform) {
           case "darwin": {
+            if (/["\\\r\n]/.test(secret)) {
+              throw new Error("Keychain write refused: the credential has a character `security -i` cannot carry.");
+            }
             const result = await this.runner.run(
               "security",
-              ["add-generic-password", "-a", ACCOUNT, "-s", SERVICE, "-U", "-w"],
-              `${secret}
-${secret}
+              ["-i"],
+              `add-generic-password -a "${ACCOUNT}" -s "${SERVICE}" -U -w "${secret}"
 `
             );
             if (result.code !== 0) throw new Error(`Keychain write failed: ${result.stderr.trim()}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "evrex-mcp",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "MCP server that gives coding agents the recorded reasoning behind a repo: prior decisions, hard constraints, and approaches already rejected.",
   "keywords": [
     "mcp",
@@ -48,8 +48,8 @@
     "typescript": "^5.9.2",
     "@repo/eslint-config": "0.0.0",
     "@repo/ingest-core": "0.0.0",
-    "@repo/typescript-config": "0.0.0",
-    "@repo/llm-core": "0.0.0"
+    "@repo/llm-core": "0.0.0",
+    "@repo/typescript-config": "0.0.0"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",