freshcontext-mcp 0.3.19 → 0.3.20

package/package-script-guard.mjs

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
-import { existsSync } from "node:fs";
-import { spawnSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import { spawnSync } from "node:child_process";
+import { join } from "node:path";
 
 const SOURCE_CHECKOUT_MESSAGE = [
   "This npm script is for the FreshContext source checkout.",
@@ -39,13 +40,19 @@ const commands = {
     command: "tsx",
     args: ["examples/evaluate-with-source-profile.ts"],
   },
-  "demo:evaluate:file": {
-    required: ["examples/evaluate-file.ts", "examples/sources.academic.example.json"],
-    command: "tsx",
-    args: ["examples/evaluate-file.ts", "examples/sources.academic.example.json"],
-    passThroughArgs: true,
-  },
-  "smoke:stdio": {
+  "demo:evaluate:file": {
+    required: ["examples/evaluate-file.ts", "examples/sources.academic.example.json"],
+    command: "tsx",
+    args: ["examples/evaluate-file.ts", "examples/sources.academic.example.json"],
+    passThroughArgs: true,
+  },
+  "batch:validate": {
+    required: ["examples/validate-signal-batch.ts"],
+    command: "tsx",
+    args: ["examples/validate-signal-batch.ts"],
+    passThroughArgs: true,
+  },
+  "smoke:stdio": {
     required: ["scripts/smoke-stdio.mjs"],
     command: "node",
     args: ["scripts/smoke-stdio.mjs"],
@@ -91,11 +98,17 @@ const commands = {
       "tests/freshnessStamp.test.ts",
       "tests/hackernews.test.ts",
       "tests/arxivSignals.test.ts",
-      "tests/arxivDecisionIntegration.test.ts",
-      "tests/core.test.ts",
-      "tests/rank.test.ts",
-      "tests/workerEnvelope.test.ts",
-      "tests/workerCoreEnvelopeParity.test.ts",
+      "tests/arxivDecisionIntegration.test.ts",
+      "tests/core.test.ts",
+      "tests/haPriV2GoldenVectors.test.ts",
+      "tests/signalContractExamples.test.ts",
+      "tests/batchValidationHarness.test.ts",
+      "tests/rank.test.ts",
+      "tests/workerEnvelope.test.ts",
+      "tests/packageScriptGuard.test.mjs",
+      "tests/adapterNetworkBoundary.test.ts",
+      "tests/workerRouteSecurity.test.ts",
+      "tests/workerCoreEnvelopeParity.test.ts",
       "tests/coreEnvelopeOptions.test.ts",
       "tests/mathSpine.test.ts",
       "tests/coreApiContract.test.ts",
@@ -118,20 +131,54 @@ if (!config) {
   process.exit(1);
 }
 
-const hasSourceCheckoutFiles = config.required.every((path) => existsSync(path));
-if (!hasSourceCheckoutFiles) {
-  console.log(SOURCE_CHECKOUT_MESSAGE);
-  process.exit(0);
-}
-
-const args = [
-  ...config.args,
-  ...(config.passThroughArgs ? process.argv.slice(3) : []),
-];
-const child = spawnSync(config.command, args, {
-  stdio: "inherit",
-  shell: process.platform === "win32",
-});
+const hasSourceCheckoutFiles = config.required.every((path) => existsSync(path));
+if (!hasSourceCheckoutFiles) {
+  console.log(SOURCE_CHECKOUT_MESSAGE);
+  process.exit(0);
+}
+
+function resolveCommand(command, args) {
+  if (command === "node") return { command: process.execPath, args };
+
+  const localNodeEntrypoints = {
+    tsx: join("node_modules", "tsx", "dist", "cli.mjs"),
+    tsc: join("node_modules", "typescript", "bin", "tsc"),
+  };
+  const nodeEntrypoint = localNodeEntrypoints[command];
+  if (nodeEntrypoint && existsSync(nodeEntrypoint)) {
+    return { command: process.execPath, args: [nodeEntrypoint, ...args] };
+  }
+
+  const localBin = process.platform === "win32"
+    ? join("node_modules", ".bin", `${command}.cmd`)
+    : join("node_modules", ".bin", command);
+
+  if (existsSync(localBin)) return { command: localBin, args };
+  if (process.platform === "win32" && !command.endsWith(".cmd")) {
+    return { command: `${command}.cmd`, args };
+  }
+  return { command, args };
+}
+
+function validatePassThroughArgs(args) {
+  for (const arg of args) {
+    if (arg.includes("\0")) {
+      console.error("FreshContext package script arguments cannot contain null bytes.");
+      process.exit(1);
+    }
+  }
+  return args;
+}
+
+const args = [
+  ...config.args,
+  ...(config.passThroughArgs ? validatePassThroughArgs(process.argv.slice(3)) : []),
+];
+const invocation = resolveCommand(config.command, args);
+const child = spawnSync(invocation.command, invocation.args, {
+  stdio: "inherit",
+  shell: false,
+});
 
 if (child.error) {
   console.error(child.error.message);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "freshcontext-mcp",
   "mcpName": "io.github.PrinceGabriel-lgtm/freshcontext",
-  "version": "0.3.19",
+  "version": "0.3.20",
   "description": "Context integrity infrastructure for AI agents and retrieval systems. Score, explain, and wrap candidate context before it reaches the model.",
   "keywords": [
     "mcp",
@@ -36,13 +36,17 @@
     ".env.example",
     "dist/",
     "!dist/apify.js",
+    "FRESHCONTEXT_SPEC.md",
+    "METHODOLOGY.md",
     "docs/API_DESIGN.md",
+    "docs/CLIENT_SETUP.md",
     "docs/CODEX_MCP_USAGE.md",
     "docs/CORE_MCP_BOUNDARY.md",
     "docs/CORE_API.md",
     "docs/DEPENDENCY_DILIGENCE.md",
     "docs/FUTURE_LANES.md",
     "docs/HA_PRI_V2_DESIGN.md",
+    "docs/HA_PRI_V2_PRODUCTION_ENFORCEMENT_PLAN.md",
     "docs/RELEASE_INTEGRITY.md",
     "docs/RELEASE_NOTES.md",
     "docs/SIGNAL_CONTRACT.md",
@@ -63,6 +67,7 @@
     "demo:arxiv": "node package-script-guard.mjs demo:arxiv",
     "demo:evaluate": "node package-script-guard.mjs demo:evaluate",
     "demo:evaluate:file": "node package-script-guard.mjs demo:evaluate:file",
+    "batch:validate": "node package-script-guard.mjs batch:validate",
     "smoke:stdio": "node package-script-guard.mjs smoke:stdio",
     "trust:gate": "node package-script-guard.mjs trust:gate",
     "trust:report": "node package-script-guard.mjs trust:report",

package/server.json

@@ -6,13 +6,13 @@
     "url": "https://github.com/PrinceGabriel-lgtm/freshcontext-mcp",
     "source": "github"
   },
-  "version": "0.3.19",
+  "version": "0.3.20",
   "website_url": "https://freshcontext-site.pages.dev",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "freshcontext-mcp",
-      "version": "0.3.19",
+      "version": "0.3.20",
       "transport": {
         "type": "stdio"
       }