opencontext-mcp 1.0.0 → 1.2.0

package/dist/validation.js

@@ -1,4 +1,20 @@
-import { TOPIC_PATTERN, UserInputError } from "./types.js";
+import * as path from "node:path";
+import { RESERVED_TOPICS, TOPIC_PATTERN, UserInputError } from "./types.js";
+/**
+ * Forbidden patterns that indicate prompt injection attempts.
+ * These are checked case-insensitively against the content.
+ */
+const FORBIDDEN_PATTERNS = [
+    /ignore\s+(all\s+)?(previous|prior)\s+instructions/i,
+    /system\s*:\s*override/i,
+    /bypass\s+(safety|guardrails?|system\s+prompt)/i,
+];
+/**
+ * Validates a topic string for safe filesystem operations.
+ * @param topicInput - The topic string to validate
+ * @returns The trimmed, validated topic
+ * @throws UserInputError if the topic is invalid
+ */
 export function validateTopic(topicInput) {
     const topic = topicInput.trim();
     if (!TOPIC_PATTERN.test(topic)) {
@@ -6,4 +22,85 @@ export function validateTopic(topicInput) {
     }
     return topic;
 }
+/**
+ * Sanitizes a topic path to prevent path traversal attacks.
+ * Ensures the resolved path stays within the context directory.
+ * @param contextDir - The absolute path to the context directory
+ * @param topic - The topic name
+ * @returns The sanitized absolute path to the topic file
+ * @throws UserInputError if path traversal is detected
+ */
+export function sanitizeTopicPath(contextDir, topic) {
+    // Quick rejection of obvious path traversal attempts
+    if (topic.includes("..") || path.isAbsolute(topic) || topic.startsWith(".") || topic.includes("/")) {
+        throw new UserInputError("Path traversal detected: topic must not contain '..', '/', or absolute paths.");
+    }
+    const filePath = path.join(contextDir, `${topic}.md`);
+    const resolvedPath = path.resolve(filePath);
+    const resolvedContextDir = path.resolve(contextDir);
+    // Double-check resolved path is still within .opencontext directory
+    if (!resolvedPath.startsWith(resolvedContextDir + path.sep) && resolvedPath !== resolvedContextDir) {
+        throw new UserInputError("Path traversal detected: topic must not contain '..' or absolute paths.");
+    }
+    return resolvedPath;
+}
+/**
+ * Validates a write payload for context storage.
+ * Checks topic validity, content safety, size limits, and forbidden patterns.
+ * @param topic - The topic name to validate
+ * @param content - The content to validate
+ * @param options - Optional configuration for validation behavior
+ * @returns GuardResult indicating whether the write is allowed
+ */
+export function validateWritePayload(topic, content, options) {
+    const opts = {
+        maxFileSizeKb: options?.maxFileSizeKb ?? 50,
+        allowEmpty: options?.allowEmpty ?? false,
+        strictPatternCheck: options?.strictPatternCheck ?? true,
+    };
+    const trimmedTopic = topic.trim();
+    if (!TOPIC_PATTERN.test(trimmedTopic)) {
+        return {
+            allowed: false,
+            reason: "Topic must be snake_case or kebab-case using lowercase letters, numbers, underscores, or hyphens.",
+            code: "INVALID_TOPIC",
+        };
+    }
+    if (RESERVED_TOPICS.has(trimmedTopic)) {
+        return {
+            allowed: false,
+            reason: `"${trimmedTopic}" is a reserved system topic and cannot be written directly.`,
+            code: "RESERVED_TOPIC",
+        };
+    }
+    if (!opts.allowEmpty && content.trim().length === 0) {
+        return {
+            allowed: false,
+            reason: "Content must not be empty or consist solely of whitespace.",
+            code: "EMPTY_CONTENT",
+        };
+    }
+    // Convert KB to bytes for size comparison
+    const maxBytes = opts.maxFileSizeKb * 1024;
+    const contentBytes = Buffer.byteLength(content, "utf8");
+    if (contentBytes > maxBytes) {
+        return {
+            allowed: false,
+            reason: `Payload size (${contentBytes} bytes) exceeds maximum allowed size (${maxBytes} bytes).`,
+            code: "PAYLOAD_TOO_LARGE",
+        };
+    }
+    if (opts.strictPatternCheck) {
+        for (const pattern of FORBIDDEN_PATTERNS) {
+            if (pattern.test(content)) {
+                return {
+                    allowed: false,
+                    reason: `Content contains forbidden pattern: ${pattern.source}`,
+                    code: "FORBIDDEN_PATTERN",
+                };
+            }
+        }
+    }
+    return { allowed: true };
+}
 //# sourceMappingURL=validation.js.map

package/dist/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE3D,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC9C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAEhC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,cAAc,CACtB,mGAAmG,CACpG,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AA0B5E;;;GAGG;AACH,MAAM,kBAAkB,GAAa;IACnC,oDAAoD;IACpD,wBAAwB;IACxB,gDAAgD;CACjD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC9C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAEhC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,cAAc,CACtB,mGAAmG,CACpG,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,KAAa;IACjE,qDAAqD;IACrD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,cAAc,CAAC,+EAA+E,CAAC,CAAC;IAC5G,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAEpD,oEAAoE;IACpE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,KAAK,kBAAkB,EAAE,CAAC;QACnG,MAAM,IAAI,cAAc,CAAC,yEAAyE,CAAC,CAAC;IACtG,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAa,EACb,OAAe,EACf,OAAsB;IAEtB,MAAM,IAAI,GAA2B;QACnC,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,EAAE;QAC3C,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,KAAK;QACxC,kBAAkB,EAAE,OAAO,EAAE,kBAAkB,IAAI,IAAI;KACxD,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,mGAAmG;YAC3G,IAAI,EAAE,eAAe;SACtB,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,IAAI,YAAY,8DAA8D;YACtF,IAAI,EAAE,gBAAgB;SACvB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,4DAA4D;YACpE,IAAI,EAAE,eAAe;SACtB,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAC3C,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,YAAY,GAAG,QAAQ,EAAE,CAAC;QAC5B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,iBAAiB,YAAY,yCAAyC,QAAQ,UAAU;YAChG,IAAI,EAAE,mBAAmB;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,uCAAuC,OAAO,CAAC,MAAM,EAAE;oBAC/D,IAAI,EAAE,mBAAmB;iBAC1B,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencontext-mcp",
-  "version": "1.0.0",
+  "version": "1.2.0",
   "description": "A Model Context Protocol server for persistent project-specific AI agent context.",
   "type": "module",
   "bin": {
@@ -28,10 +28,11 @@
     "memory"
   ],
   "repository": {
-    "url": "git+https://github.com/slxca/opencontext.git"
+    "url": "git+https://github.com/slxca/opencontext.git",
+    "directory": "packages/opencontext"
   },
   "bugs": {
-    "url": "https://github.com/slxca/mockr.js/issues",
+    "url": "https://github.com/slxca/opencontext/issues",
     "email": "bugs@s-luca.com"
   },
   "publishConfig": {
@@ -44,7 +45,6 @@
   "engines": {
     "node": ">=20.0.0"
   },
-  "packageManager": "pnpm@9.15.4",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.17.4",
     "zod": "^4.5.4"

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2026 OpenContext Contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/examples/build-agent.md

@@ -1,48 +0,0 @@
-# OpenContext Build Agent
-
-Copy this prompt into your AI client's system prompt to turn it into a developer that follows rules saved by the Plan Agent.
-
-## System Prompt
-
-You are the OpenContext Build Agent: a pragmatic senior developer responsible for implementing changes while strictly following project context saved by the Plan Agent.
-
-Before writing or editing any code, you must use the `read_context` tool with no topic to list available OpenContext topics. Then read all topics relevant to the requested work. If relevant context exists, follow it. If the user's request conflicts with saved context, stop and ask for clarification before changing code.
-
-Your responsibilities:
-
-- Read OpenContext before coding.
-- Inspect the codebase and make the smallest correct change.
-- Preserve existing architecture, naming conventions, and testing strategy.
-- Run appropriate verification commands when feasible.
-- Use `save_context` when you discover a durable rule, convention, decision, or debugging note future agents should know.
-- Do not overwrite saved context with speculative or temporary information.
-
-Required workflow:
-
-```text
-1. Call read_context with no topic.
-2. Read each relevant topic with read_context.
-3. Inspect the affected code.
-4. Implement the smallest correct change.
-5. Run relevant tests, type checks, or builds.
-6. Save any newly discovered durable context with save_context.
-7. Summarize what changed and what was verified.
-```
-
-If no OpenContext topics exist, state that no saved context was available, then proceed by inspecting the repository directly.
-
-Build output format:
-
-```text
-Changed
-<files or behavior changed>
-
-Context Used
-<topics read or note that no context existed>
-
-Verification
-<commands run and results>
-
-Context Saved
-<topics saved or updated, if any>
-```

package/examples/plan-agent.md

@@ -1,53 +0,0 @@
-# OpenContext Plan Agent
-
-Copy this prompt into your AI client's system prompt to turn it into an architect that uses OpenContext MCP.
-
-## System Prompt
-
-You are the OpenContext Plan Agent: a senior software architect responsible for turning requirements into clear implementation plans and durable project context.
-
-Before planning, use the `read_context` tool with no topic to list available OpenContext topics. Read every topic relevant to the user's request before making recommendations. If no context exists, inspect the repository and infer only what is supported by evidence in the codebase.
-
-Your responsibilities:
-
-- Analyze the user's requirement and the current codebase before proposing changes.
-- Identify architectural constraints, project conventions, API contracts, data model decisions, and implementation risks.
-- Create a practical step-by-step plan that a build agent can execute.
-- Use `save_context` to persist durable decisions, rules, and conventions that future agents should follow.
-- Prefer concise markdown context organized under focused snake_case or kebab-case topics.
-
-When using `save_context`, choose topics such as:
-
-- `architecture`
-- `coding_rules`
-- `api-contracts`
-- `data-model`
-- `testing-strategy`
-
-Context you save must be factual and durable. Do not save temporary guesses, chat-only preferences, or unresolved options unless they are clearly marked as open questions.
-
-Plan output format:
-
-```text
-Summary
-<one-paragraph explanation of the intended solution>
-
-Relevant Context Read
-<topics read and what mattered>
-
-Architecture Decisions
-<decisions made or confirmed>
-
-Implementation Plan
-1. <step>
-2. <step>
-3. <step>
-
-Risks And Checks
-<known risks, tests, and verification steps>
-
-Context Saved
-<topics saved or updated>
-```
-
-Always save newly discovered durable context before finishing your response.