midnight-mcp 0.2.8 → 0.2.10

package/dist/{chunk-VQTI7YUU.js → chunk-C23TNY65.js}

@@ -851,7 +851,11 @@ var GitHubClient = class {
     }
   }
   /**
-   * Filter files by patterns
+   * Filter files by patterns (glob matching)
+   *
+   * SECURITY NOTE: Patterns come from trusted REPOSITORIES config, not user input.
+   * The glob-to-regex conversion only handles **, *, and . characters.
+   * This is safe because malicious patterns could only come from internal config.
    */
   filterFilesByPatterns(files, patterns, exclude) {
     const matchPattern = (file, pattern) => {
@@ -1016,6 +1020,20 @@ var GitHubClient = class {
 var githubClient = new GitHubClient();
 
 // src/pipeline/parser.ts
+var LANGUAGES = {
+  COMPACT: "compact",
+  TYPESCRIPT: "typescript",
+  MARKDOWN: "markdown"
+};
+var EXTENSION_LANGUAGE_MAP = {
+  compact: LANGUAGES.COMPACT,
+  ts: LANGUAGES.TYPESCRIPT,
+  tsx: LANGUAGES.TYPESCRIPT,
+  js: LANGUAGES.TYPESCRIPT,
+  jsx: LANGUAGES.TYPESCRIPT,
+  md: LANGUAGES.MARKDOWN,
+  mdx: LANGUAGES.MARKDOWN
+};
 function parseCompactFile(path, content) {
   const lines = content.split("\n");
   const codeUnits = [];
@@ -1024,10 +1042,19 @@ function parseCompactFile(path, content) {
   let hasLedger = false;
   let hasCircuits = false;
   let hasWitnesses = false;
-  const importRegex = /^include\s+["']([^"']+)["'];?/gm;
-  let importMatch;
-  while ((importMatch = importRegex.exec(content)) !== null) {
-    imports.push(importMatch[1]);
+  const importPatterns = [
+    /^import\s+([A-Za-z_][A-Za-z0-9_]*)\s*;/gm,
+    // import CompactStandardLibrary;
+    /^import\s+["']([^"']+)["']\s*(?:prefix\s+\w+_)?\s*;?/gm,
+    // import "path" prefix X_;
+    /^include\s+["']([^"']+)["'];?/gm
+    // legacy: include "std";
+  ];
+  for (const importRegex of importPatterns) {
+    let importMatch;
+    while ((importMatch = importRegex.exec(content)) !== null) {
+      imports.push(importMatch[1]);
+    }
   }
   const ledgerRegex = /ledger\s*\{([^}]*(?:\{[^}]*\}[^}]*)*)\}/gs;
   let ledgerMatch;
@@ -1161,7 +1188,7 @@ function parseCompactFile(path, content) {
   }
   return {
     path,
-    language: "compact",
+    language: LANGUAGES.COMPACT,
     content,
     codeUnits,
     imports,
@@ -1594,7 +1621,7 @@ async function checkGitHubAPI() {
 }
 async function checkVectorStore() {
   try {
-    const { vectorStore: vectorStore2 } = await import("./db-7F5YOZB7.js");
+    const { vectorStore: vectorStore2 } = await import("./db-BCMNMI6F.js");
     if (vectorStore2) {
       return {
         status: "pass",
@@ -2069,7 +2096,7 @@ function serialize(data) {
 }
 
 // src/utils/version.ts
-var CURRENT_VERSION = "0.2.8";
+var CURRENT_VERSION = "0.2.10";
 
 // src/db/vectorStore.ts
 var VectorStore = class {
@@ -2278,4 +2305,4 @@ export {
   serialize,
   CURRENT_VERSION
 };
-//# sourceMappingURL=chunk-VQTI7YUU.js.map
+//# sourceMappingURL=chunk-C23TNY65.js.map

package/dist/db-BCMNMI6F.js

@@ -0,0 +1,7 @@
+import {
+  vectorStore
+} from "./chunk-C23TNY65.js";
+export {
+  vectorStore
+};
+//# sourceMappingURL=db-BCMNMI6F.js.map

package/dist/index.d.ts

@@ -85,6 +85,13 @@ interface PropertySchema {
     properties?: Record<string, PropertySchema>;
     enum?: string[];
 }
+/**
+ * Extended tool definition with handler
+ *
+ * Note: Handler uses `unknown` for input to allow flexibility in tool implementations.
+ * Each tool module defines its own specific input/output types via Zod schemas.
+ * The MCP server validates inputs against the inputSchema before calling handlers.
+ */
 interface ExtendedToolDefinition {
     name: string;
     description: string;
@@ -95,7 +102,15 @@ interface ExtendedToolDefinition {
     };
     outputSchema?: OutputSchema;
     annotations?: ToolAnnotations;
-    handler: (input: any) => Promise<any>;
+    /**
+     * Handler function that processes tool inputs
+     * Input is validated against inputSchema before this is called
+     * Output should match outputSchema if defined
+     *
+     * Using `unknown` allows specific handler types to be assigned.
+     * Type safety is enforced by Zod schema validation at runtime.
+     */
+    handler: (input: any) => Promise<unknown>;
 }
 
 /**

package/dist/index.js

@@ -9,10 +9,10 @@ import {
   promptDefinitions,
   startHttpServer,
   startServer
-} from "./chunk-QPQOD3S6.js";
+} from "./chunk-7KJSVMFI.js";
 import {
   logger
-} from "./chunk-VQTI7YUU.js";
+} from "./chunk-C23TNY65.js";
 export {
   allResources,
   allTools,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "midnight-mcp",
-  "version": "0.2.8",
+  "version": "0.2.10",
   "description": "Model Context Protocol Server for Midnight Blockchain Development",
   "type": "module",
   "main": "dist/index.js",

package/dist/db-7F5YOZB7.js

@@ -1,7 +0,0 @@
-import {
-  vectorStore
-} from "./chunk-VQTI7YUU.js";
-export {
-  vectorStore
-};
-//# sourceMappingURL=db-7F5YOZB7.js.map