file-share-mcp 1.0.17 → 1.0.19

package/README.md

@@ -126,9 +126,9 @@ Nothing to configure.
 the server runs on the gateway machine, and neither path means anything there. MCP has no
 file-transfer primitive — only the bytes a message carries actually travel — so the relay,
 which runs next to the agent in `--mcp` mode, fills the gap in both directions. Configure it
-with `GATEWAY_INLINE_ROOTS` (reading, for `copy_file`), `GATEWAY_INLINE_WRITE_ROOTS`
-(writing, for `download_file`) and `GATEWAY_INLINE_EXTENSIONS: "*"` — its default only covers
-spreadsheets, which a general file share has no reason to be limited to.
+with `GATEWAY_INLINE_ROOTS` (reading, for `copy_file`) and `GATEWAY_INLINE_WRITE_ROOTS`
+(writing, for `download_file`). Those two directory lists are the whole configuration: every
+file type is allowed by default.
 
 Neither direction has a fallback. With the relay in the chain but the matching root
 unconfigured, the call fails and names the variable to set; nothing is read, written, or
@@ -182,6 +182,21 @@ where `MCP_DATA_DIR` and a custom `shared_folder_path` sit on different volumes.
 
 ---
 
+## Network exposure
+
+The GUI server listens on `127.0.0.1` only. Other machines reach it through the proxy or
+the gateway manager, which relay to `localhost`.
+
+Every GUI request goes through the request guard of `@imenam/mcp-gui-interface`: it
+refuses (HTTP 403) a `Host` header other than `localhost` / `127.0.0.1` / `::1`, and any
+modifying request (other than GET, HEAD, OPTIONS) that the browser marks as coming from
+another site (`Sec-Fetch-Site`, or `Origin` outside this machine and the proxy).
+
+The GUI sends no CORS headers: the frontend is served by the same server, and other
+websites cannot read the shared files through the browser.
+
+---
+
 ## Development
 
 ```bash

package/dist/gui.js

@@ -1,10 +1,9 @@
 import express from 'express';
 import multer from 'multer';
-import cors from 'cors';
 import path from 'path';
 import { fileURLToPath } from 'url';
 import fs from 'fs';
-import { setupLogging, createLogger, ProxyClient } from '@imenam/mcp-gui-interface';
+import { setupLogging, createLogger, ProxyClient, GUI_LISTEN_HOST, expressGuiGuard } from '@imenam/mcp-gui-interface';
 import { getConfig, saveConfig } from './utils/config-manager.js';
 import { getSharedFiles, validateSafePath, deleteFile, createDirectory, moveFile, deleteDirectory, movePath, UPLOAD_TMP_DIRNAME } from './utils/file-manager.js';
 const __filename = fileURLToPath(import.meta.url);
@@ -12,7 +11,7 @@ const __dirname = path.dirname(__filename);
 setupLogging({ processLabel: 'GUI', logDir: path.join(getConfig().MCP_DATA_DIR, 'logs') });
 const logger = createLogger('GUI');
 const app = express();
-app.use(cors());
+app.use(expressGuiGuard());
 app.use(express.json());
 // Stage uploads inside the shared folder: the destination always lives there, so
 // the final rename stays within one mount. os.tmpdir() cannot promise that — under
@@ -257,7 +256,7 @@ async function startServer() {
     if (process.send && process.connected) {
         process.send({ type: 'READY', data: { url: result.url } });
     }
-    server = app.listen(port, () => {
+    server = app.listen(port, GUI_LISTEN_HOST, () => {
         logger.info(`GUI API server listening on port ${port}`);
     });
     server.on('error', (err) => {

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = '1.0.17';
+export const VERSION = '1.0.19';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "file-share-mcp",
-  "version": "1.0.17",
+  "version": "1.0.19",
   "description": "MCP server for bidirectional file sharing between AI agents and users, with a built-in web GUI",
   "author": "",
   "license": "ISC",
@@ -37,17 +37,15 @@
     "test": "echo \"Error: no test specified\" && exit 1"
   },
   "dependencies": {
-    "@imenam/mcp-gui-interface": "^1.0.12",
+    "@imenam/mcp-gui-interface": "^1.0.14",
     "@modelcontextprotocol/sdk": "^1.26.0",
     "axios": "^1.13.5",
-    "cors": "^2.8.6",
     "dotenv": "^17.3.1",
     "express": "^5.2.1",
     "multer": "^2.0.2",
     "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@types/cors": "^2.8.19",
     "@types/express": "^5.0.6",
     "@types/multer": "^2.0.0",
     "@types/node": "^25.2.3",