opencontext-mcp 1.2.1 → 1.3.0

package/dist/store/index-builder.js

@@ -0,0 +1,162 @@
+import { readdir, readFile, stat, writeFile } from "node:fs/promises";
+import * as path from "node:path";
+import { INDEX_FILENAME, STATUS_BADGES } from "../shared/constants.js";
+import { isNodeError } from "../shared/errors.js";
+/**
+ * Parses YAML frontmatter from markdown content.
+ * Returns extracted fields or an empty object when no frontmatter is present.
+ * Uses simple line-by-line parsing — no external YAML dependency.
+ */
+export function parseFrontmatter(content) {
+    const trimmed = content.trim();
+    if (!trimmed.startsWith("---")) {
+        return {};
+    }
+    const endIdx = trimmed.indexOf("---", 3);
+    if (endIdx === -1) {
+        return {};
+    }
+    const block = trimmed.slice(3, endIdx);
+    const result = {};
+    for (const line of block.split("\n")) {
+        const trimmedLine = line.trim();
+        if (!trimmedLine || trimmedLine.startsWith("#"))
+            continue;
+        const colonIdx = trimmedLine.indexOf(":");
+        if (colonIdx === -1)
+            continue;
+        const key = trimmedLine.slice(0, colonIdx).trim();
+        let value = trimmedLine.slice(colonIdx + 1).trim();
+        // Strip surrounding quotes
+        if ((value.startsWith('"') && value.endsWith('"')) ||
+            (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        if (key === "description") {
+            result.description = value;
+        }
+        else if (key === "status" &&
+            (value === "active" || value === "deprecated" || value === "superseded")) {
+            result.status = value;
+        }
+        else if (key === "supersedes") {
+            result.supersedes = value;
+        }
+        else if (key === "superseded_by") {
+            result.superseded_by = value;
+        }
+    }
+    return result;
+}
+/**
+ * Extracts a short description from markdown content.
+ * Strategy: frontmatter description → first heading → first paragraph → fallback.
+ * @param content - Raw markdown content
+ * @returns Truncated description (max 120 chars)
+ */
+export function extractDescription(content) {
+    const trimmed = content.trim();
+    if (!trimmed) {
+        return "No summary available.";
+    }
+    const fm = parseFrontmatter(content);
+    if (fm.description) {
+        return fm.description.slice(0, 120);
+    }
+    const lines = trimmed.split("\n");
+    // Fall back to the first heading, then the first paragraph line.
+    for (const line of lines) {
+        const headingMatch = line.match(/^#\s+(.+)$/);
+        if (headingMatch?.[1]) {
+            return headingMatch[1].slice(0, 120);
+        }
+    }
+    for (const line of lines) {
+        const stripped = line.trim();
+        if (stripped && !stripped.startsWith("#")) {
+            return stripped.length > 120 ? stripped.slice(0, 120) + "..." : stripped;
+        }
+    }
+    return "No summary available.";
+}
+/** Formats a byte count as a compact human-readable size string. */
+function formatSize(sizeBytes) {
+    return sizeBytes >= 1024
+        ? `${(sizeBytes / 1024).toFixed(1)} KB`
+        : `${sizeBytes} B`;
+}
+/**
+ * Rebuilds the auto-generated index.md file in the context directory.
+ * Scans all topic files, extracts metadata, and writes a compact index.
+ * @param contextDir - Absolute path to the .opencontext directory
+ * @returns The generated index markdown content ("" when no topics exist)
+ */
+export async function buildContextIndex(contextDir) {
+    let entries;
+    try {
+        entries = await readdir(contextDir, { withFileTypes: true });
+    }
+    catch (error) {
+        if (isNodeError(error) && error.code === "ENOENT") {
+            return "";
+        }
+        throw error;
+    }
+    const topicFiles = entries
+        .filter((entry) => entry.isFile() &&
+        entry.name.endsWith(".md") &&
+        entry.name !== INDEX_FILENAME &&
+        entry.name !== "README.md")
+        .sort((a, b) => a.name.localeCompare(b.name));
+    if (topicFiles.length === 0) {
+        return "";
+    }
+    const topicEntries = [];
+    for (const entry of topicFiles) {
+        const filePath = path.join(contextDir, entry.name);
+        const content = await readFile(filePath, "utf8");
+        const fileStat = await stat(filePath);
+        const topic = entry.name.slice(0, -".md".length);
+        const fm = parseFrontmatter(content);
+        topicEntries.push({
+            topic,
+            filename: entry.name,
+            description: extractDescription(content),
+            date: fileStat.mtime.toISOString().slice(0, 10),
+            sizeBytes: Buffer.byteLength(content, "utf8"),
+            status: fm.status,
+            supersedes: fm.supersedes,
+            superseded_by: fm.superseded_by,
+        });
+    }
+    const lines = [
+        "# Project Context Index",
+        "<!-- AUTO-GENERATED BY OPENCONTEXT - DO NOT EDIT MANUALLY -->",
+        "",
+        "Available context topics in this project:",
+        "",
+    ];
+    for (const t of topicEntries) {
+        const badge = t.status && t.status !== "active"
+            ? ` ${STATUS_BADGES.get(t.status) ?? `[${t.status.toUpperCase()}]`}`
+            : "";
+        const supersedesNote = t.supersedes
+            ? ` (supersedes: \`${t.supersedes}\`)`
+            : "";
+        const supersededByNote = t.superseded_by
+            ? ` (superseded by: \`${t.superseded_by}\`)`
+            : "";
+        lines.push(`- **${t.topic}**${badge} (\`${t.filename}\`) - Updated: ${t.date} (${formatSize(t.sizeBytes)})${supersedesNote}${supersededByNote}`);
+        lines.push(`  > ${t.description}`);
+    }
+    lines.push("");
+    lines.push("---");
+    lines.push("*To read a specific context topic, call `read_context` with the topic name.*");
+    lines.push("");
+    lines.push("*OpenContext is open-source. Consider starring on [GitHub](https://github.com/slxca/opencontext).*");
+    const indexContent = lines.join("\n");
+    const indexPath = path.join(contextDir, INDEX_FILENAME);
+    await writeFile(indexPath, indexContent, "utf8");
+    return indexContent;
+}
+//# sourceMappingURL=index-builder.js.map

package/dist/store/index-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-builder.js","sourceRoot":"","sources":["../../src/store/index-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAoB,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAclD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,MAAM,GAAqB,EAAE,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAE1D,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,SAAS;QAE9B,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEnD,2BAA2B;QAC3B,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC1B,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC;QAC7B,CAAC;aAAM,IACL,GAAG,KAAK,QAAQ;YAChB,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,YAAY,CAAC,EACxE,CAAC;YACD,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;QACxB,CAAC;aAAM,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;YAChC,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC;QAC5B,CAAC;aAAM,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YACnC,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,uBAAuB,CAAC;IACjC,CAAC;IAED,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,iEAAiE;IACjE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED,oEAAoE;AACpE,SAAS,UAAU,CAAC,SAAiB;IACnC,OAAO,SAAS,IAAI,IAAI;QACtB,CAAC,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;QACvC,CAAC,CAAC,GAAG,SAAS,IAAI,CAAC;AACvB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACxD,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,OAAO;SACvB,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,EAAE;QACd,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC1B,KAAK,CAAC,IAAI,KAAK,cAAc;QAC7B,KAAK,CAAC,IAAI,KAAK,WAAW,CAC7B;SACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,YAAY,GAAsB,EAAE,CAAC;IAE3C,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAErC,YAAY,CAAC,IAAI,CAAC;YAChB,KAAK;YACL,QAAQ,EAAE,KAAK,CAAC,IAAI;YACpB,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC;YACxC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAC/C,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;YAC7C,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,UAAU,EAAE,EAAE,CAAC,UAAU;YACzB,aAAa,EAAE,EAAE,CAAC,aAAa;SAChC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAa;QACtB,yBAAyB;QACzB,+DAA+D;QAC/D,EAAE;QACF,2CAA2C;QAC3C,EAAE;KACH,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;YAC7C,CAAC,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE;YACpE,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,cAAc,GAAG,CAAC,CAAC,UAAU;YACjC,CAAC,CAAC,mBAAmB,CAAC,CAAC,UAAU,KAAK;YACtC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,gBAAgB,GAAG,CAAC,CAAC,aAAa;YACtC,CAAC,CAAC,sBAAsB,CAAC,CAAC,aAAa,KAAK;YAC5C,CAAC,CAAC,EAAE,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,KAAK,OAAO,CAAC,CAAC,QAAQ,kBAAkB,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,cAAc,GAAG,gBAAgB,EAAE,CAAC,CAAC;QACjJ,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;IAC3F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,oGAAoG,CAAC,CAAC;IAEjH,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,SAAS,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IAEjD,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/validation/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Validates a topic string for safe filesystem operations.
+ * @param topicInput - The topic string to validate
+ * @returns The trimmed, validated topic
+ * @throws UserInputError if the topic is invalid
+ */
+export declare function validateTopic(topicInput: string): string;
+/**
+ * Sanitizes a topic path to prevent path traversal attacks.
+ * Ensures the resolved path stays within the context directory.
+ * @param contextDir - The absolute path to the context directory
+ * @param topic - The topic name
+ * @returns The sanitized absolute path to the topic file
+ * @throws UserInputError if path traversal is detected
+ */
+export declare function sanitizeTopicPath(contextDir: string, topic: string): string;

package/dist/validation/index.js

@@ -0,0 +1,39 @@
+import * as path from "node:path";
+import { TOPIC_PATTERN } from "../shared/constants.js";
+import { UserInputError } from "../shared/errors.js";
+/**
+ * Validates a topic string for safe filesystem operations.
+ * @param topicInput - The topic string to validate
+ * @returns The trimmed, validated topic
+ * @throws UserInputError if the topic is invalid
+ */
+export function validateTopic(topicInput) {
+    const topic = topicInput.trim();
+    if (!TOPIC_PATTERN.test(topic)) {
+        throw new UserInputError("Topic must be snake_case or kebab-case using lowercase letters, numbers, underscores, or hyphens.");
+    }
+    return topic;
+}
+/**
+ * Sanitizes a topic path to prevent path traversal attacks.
+ * Ensures the resolved path stays within the context directory.
+ * @param contextDir - The absolute path to the context directory
+ * @param topic - The topic name
+ * @returns The sanitized absolute path to the topic file
+ * @throws UserInputError if path traversal is detected
+ */
+export function sanitizeTopicPath(contextDir, topic) {
+    // Quick rejection of obvious path traversal attempts
+    if (topic.includes("..") || path.isAbsolute(topic) || topic.startsWith(".") || topic.includes("/")) {
+        throw new UserInputError("Path traversal detected: topic must not contain '..', '/', or absolute paths.");
+    }
+    const filePath = path.join(contextDir, `${topic}.md`);
+    const resolvedPath = path.resolve(filePath);
+    const resolvedContextDir = path.resolve(contextDir);
+    // Double-check resolved path is still within .opencontext directory
+    if (!resolvedPath.startsWith(resolvedContextDir + path.sep) && resolvedPath !== resolvedContextDir) {
+        throw new UserInputError("Path traversal detected: topic must not contain '..' or absolute paths.");
+    }
+    return resolvedPath;
+}
+//# sourceMappingURL=index.js.map

package/dist/validation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/validation/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC9C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAEhC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,cAAc,CACtB,mGAAmG,CACpG,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,KAAa;IACjE,qDAAqD;IACrD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,cAAc,CAAC,+EAA+E,CAAC,CAAC;IAC5G,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAEpD,oEAAoE;IACpE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,KAAK,kBAAkB,EAAE,CAAC;QACnG,MAAM,IAAI,cAAc,CAAC,yEAAyE,CAAC,CAAC;IACtG,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/{validation.d.ts → validation/write-guard.d.ts}

@@ -20,22 +20,6 @@ export interface GuardResult {
     /** Error code for programmatic handling */
     code?: "EMPTY_CONTENT" | "PAYLOAD_TOO_LARGE" | "INVALID_TOPIC" | "PATH_TRAVERSAL" | "FORBIDDEN_PATTERN" | "RESERVED_TOPIC";
 }
-/**
- * Validates a topic string for safe filesystem operations.
- * @param topicInput - The topic string to validate
- * @returns The trimmed, validated topic
- * @throws UserInputError if the topic is invalid
- */
-export declare function validateTopic(topicInput: string): string;
-/**
- * Sanitizes a topic path to prevent path traversal attacks.
- * Ensures the resolved path stays within the context directory.
- * @param contextDir - The absolute path to the context directory
- * @param topic - The topic name
- * @returns The sanitized absolute path to the topic file
- * @throws UserInputError if path traversal is detected
- */
-export declare function sanitizeTopicPath(contextDir: string, topic: string): string;
 /**
  * Validates a write payload for context storage.
  * Checks topic validity, content safety, size limits, and forbidden patterns.

package/dist/{validation.js → validation/write-guard.js}

@@ -1,5 +1,4 @@
-import * as path from "node:path";
-import { RESERVED_TOPICS, TOPIC_PATTERN, UserInputError } from "./types.js";
+import { RESERVED_TOPICS, TOPIC_PATTERN } from "../shared/constants.js";
 /**
  * Forbidden patterns that indicate prompt injection attempts.
  * These are checked case-insensitively against the content.
@@ -9,41 +8,6 @@ const FORBIDDEN_PATTERNS = [
     /system\s*:\s*override/i,
     /bypass\s+(safety|guardrails?|system\s+prompt)/i,
 ];
-/**
- * Validates a topic string for safe filesystem operations.
- * @param topicInput - The topic string to validate
- * @returns The trimmed, validated topic
- * @throws UserInputError if the topic is invalid
- */
-export function validateTopic(topicInput) {
-    const topic = topicInput.trim();
-    if (!TOPIC_PATTERN.test(topic)) {
-        throw new UserInputError("Topic must be snake_case or kebab-case using lowercase letters, numbers, underscores, or hyphens.");
-    }
-    return topic;
-}
-/**
- * Sanitizes a topic path to prevent path traversal attacks.
- * Ensures the resolved path stays within the context directory.
- * @param contextDir - The absolute path to the context directory
- * @param topic - The topic name
- * @returns The sanitized absolute path to the topic file
- * @throws UserInputError if path traversal is detected
- */
-export function sanitizeTopicPath(contextDir, topic) {
-    // Quick rejection of obvious path traversal attempts
-    if (topic.includes("..") || path.isAbsolute(topic) || topic.startsWith(".") || topic.includes("/")) {
-        throw new UserInputError("Path traversal detected: topic must not contain '..', '/', or absolute paths.");
-    }
-    const filePath = path.join(contextDir, `${topic}.md`);
-    const resolvedPath = path.resolve(filePath);
-    const resolvedContextDir = path.resolve(contextDir);
-    // Double-check resolved path is still within .opencontext directory
-    if (!resolvedPath.startsWith(resolvedContextDir + path.sep) && resolvedPath !== resolvedContextDir) {
-        throw new UserInputError("Path traversal detected: topic must not contain '..' or absolute paths.");
-    }
-    return resolvedPath;
-}
 /**
  * Validates a write payload for context storage.
  * Checks topic validity, content safety, size limits, and forbidden patterns.
@@ -103,4 +67,4 @@ export function validateWritePayload(topic, content, options) {
     }
     return { allowed: true };
 }
-//# sourceMappingURL=validation.js.map
+//# sourceMappingURL=write-guard.js.map

package/dist/validation/write-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-guard.js","sourceRoot":"","sources":["../../src/validation/write-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AA0BxE;;;GAGG;AACH,MAAM,kBAAkB,GAAa;IACnC,oDAAoD;IACpD,wBAAwB;IACxB,gDAAgD;CACjD,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAa,EACb,OAAe,EACf,OAAsB;IAEtB,MAAM,IAAI,GAA2B;QACnC,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,EAAE;QAC3C,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,KAAK;QACxC,kBAAkB,EAAE,OAAO,EAAE,kBAAkB,IAAI,IAAI;KACxD,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,mGAAmG;YAC3G,IAAI,EAAE,eAAe;SACtB,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,IAAI,YAAY,8DAA8D;YACtF,IAAI,EAAE,gBAAgB;SACvB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,4DAA4D;YACpE,IAAI,EAAE,eAAe;SACtB,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAC3C,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,YAAY,GAAG,QAAQ,EAAE,CAAC;QAC5B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,iBAAiB,YAAY,yCAAyC,QAAQ,UAAU;YAChG,IAAI,EAAE,mBAAmB;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,uCAAuC,OAAO,CAAC,MAAM,EAAE;oBAC/D,IAAI,EAAE,mBAAmB;iBAC1B,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencontext-mcp",
-  "version": "1.2.1",
+  "version": "1.3.0",
   "description": "A Model Context Protocol server for persistent project-specific AI agent context.",
   "type": "module",
   "bin": {
@@ -12,7 +12,7 @@
     "examples"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "tsc -p tsconfig.json && chmod +x dist/index.js",
     "typecheck": "tsc --noEmit -p tsconfig.json",
     "test": "vitest run",
     "test:watch": "vitest",

package/dist/config.js

@@ -1,145 +0,0 @@
-import { readFile } from "node:fs/promises";
-import * as path from "node:path";
-export const DEFAULT_CONFIG = {
-    path: ".opencontext",
-    readOnly: false,
-    disabled: false,
-    autoIndex: true,
-    history: {
-        enabled: false,
-        maxBackupsPerTopic: 5,
-        retentionDays: 7,
-    },
-    guard: {
-        enabled: true,
-        maxFileSizeKb: 50,
-        strictPatternCheck: true,
-    },
-};
-const CONFIG_CANDIDATES = [".opencontext.jsonc", ".opencontext.json"];
-/**
- * Strips JSONC content into parseable JSON by removing comments and trailing commas.
- * Handles single-line (//), multi-line (/* * /), and trailing commas.
- * Trailing comma removal is token-aware to avoid modifying string literals.
- */
-function stripJsonComments(raw) {
-    let result = "";
-    let i = 0;
-    const len = raw.length;
-    while (i < len) {
-        const ch = raw[i];
-        // Strings: copy verbatim (including escaped characters)
-        if (ch === '"') {
-            result += ch;
-            i++;
-            while (i < len && raw[i] !== '"') {
-                if (raw[i] === "\\") {
-                    result += raw[i];
-                    i++;
-                }
-                if (i < len) {
-                    result += raw[i];
-                    i++;
-                }
-            }
-            if (i < len) {
-                result += raw[i]; // closing quote
-                i++;
-            }
-            continue;
-        }
-        // Single-line comment: skip until newline
-        if (ch === "/" && i + 1 < len && raw[i + 1] === "/") {
-            while (i < len && raw[i] !== "\n") {
-                i++;
-            }
-            continue;
-        }
-        // Multi-line comment: skip until */
-        if (ch === "/" && i + 1 < len && raw[i + 1] === "*") {
-            i += 2;
-            while (i < len - 1 && !(raw[i] === "*" && raw[i + 1] === "/")) {
-                i++;
-            }
-            i += 2; // skip */
-            continue;
-        }
-        // Trailing comma: skip comma if followed by optional whitespace/comments then } or ]
-        if (ch === ",") {
-            let j = i + 1;
-            // Skip whitespace and comments to find the next meaningful token
-            while (j < len) {
-                if (raw[j] === " " || raw[j] === "\t" || raw[j] === "\n" || raw[j] === "\r") {
-                    j++;
-                }
-                else if (raw[j] === "/" && j + 1 < len && raw[j + 1] === "/") {
-                    while (j < len && raw[j] !== "\n")
-                        j++;
-                }
-                else if (raw[j] === "/" && j + 1 < len && raw[j + 1] === "*") {
-                    j += 2;
-                    while (j < len - 1 && !(raw[j] === "*" && raw[j + 1] === "/"))
-                        j++;
-                    j += 2;
-                }
-                else {
-                    break;
-                }
-            }
-            if (j < len && (raw[j] === "}" || raw[j] === "]")) {
-                i = j; // skip comma and whitespace/comments, continue from closing bracket
-                continue;
-            }
-            // Not a trailing comma — keep it
-            result += ch;
-            i++;
-            continue;
-        }
-        result += ch;
-        i++;
-    }
-    return result;
-}
-function deepMerge(target, source) {
-    const result = { ...target };
-    for (const key of Object.keys(source)) {
-        const sourceVal = source[key];
-        const targetVal = result[key];
-        if (sourceVal !== null &&
-            typeof sourceVal === "object" &&
-            !Array.isArray(sourceVal) &&
-            targetVal !== null &&
-            typeof targetVal === "object" &&
-            !Array.isArray(targetVal)) {
-            result[key] = deepMerge(targetVal, sourceVal);
-        }
-        else if (sourceVal !== undefined) {
-            result[key] = sourceVal;
-        }
-    }
-    return result;
-}
-/**
- * Loads configuration from .opencontext.jsonc or .opencontext.json in the given directory.
- * Falls back to DEFAULT_CONFIG if no file exists or parsing fails.
- */
-export async function loadConfig(cwd = process.cwd()) {
-    for (const filename of CONFIG_CANDIDATES) {
-        const filePath = path.join(cwd, filename);
-        try {
-            const raw = await readFile(filePath, "utf8");
-            const cleaned = stripJsonComments(raw);
-            const parsed = JSON.parse(cleaned);
-            return deepMerge(DEFAULT_CONFIG, parsed);
-        }
-        catch (error) {
-            if (error.code === "ENOENT") {
-                continue; // file doesn't exist, try next candidate
-            }
-            console.error(`OpenContext: failed to parse ${filename}: ${error.message}`);
-            return DEFAULT_CONFIG;
-        }
-    }
-    return DEFAULT_CONFIG;
-}
-//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAsBlC,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,IAAI;IACf,OAAO,EAAE;QACP,OAAO,EAAE,KAAK;QACd,kBAAkB,EAAE,CAAC;QACrB,aAAa,EAAE,CAAC;KACjB;IACD,KAAK,EAAE;QACL,OAAO,EAAE,IAAI;QACb,aAAa,EAAE,EAAE;QACjB,kBAAkB,EAAE,IAAI;KACzB;CACF,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,oBAAoB,EAAE,mBAAmB,CAAU,CAAC;AAE/E;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IAEvB,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC;QACf,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAElB,wDAAwD;QACxD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,IAAI,EAAE,CAAC;YACb,CAAC,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACjC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBACpB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;oBACjB,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;oBACZ,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;oBACjB,CAAC,EAAE,CAAC;gBACN,CAAC;YACH,CAAC;YACD,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB;gBAClC,CAAC,EAAE,CAAC;YACN,CAAC;YACD,SAAS;QACX,CAAC;QAED,0CAA0C;QAC1C,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAClC,CAAC,EAAE,CAAC;YACN,CAAC;YACD,SAAS;QACX,CAAC;QAED,oCAAoC;QACpC,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACpD,CAAC,IAAI,CAAC,CAAC;YACP,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC9D,CAAC,EAAE,CAAC;YACN,CAAC;YACD,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;YAClB,SAAS;QACX,CAAC;QAED,qFAAqF;QACrF,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,iEAAiE;YACjE,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC;gBACf,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC5E,CAAC,EAAE,CAAC;gBACN,CAAC;qBAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAC/D,OAAO,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;wBAAE,CAAC,EAAE,CAAC;gBACzC,CAAC;qBAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAC/D,CAAC,IAAI,CAAC,CAAC;oBACP,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;wBAAE,CAAC,EAAE,CAAC;oBACnE,CAAC,IAAI,CAAC,CAAC;gBACT,CAAC;qBAAM,CAAC;oBACN,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;gBAClD,CAAC,GAAG,CAAC,CAAC,CAAC,oEAAoE;gBAC3E,SAAS;YACX,CAAC;YACD,iCAAiC;YACjC,MAAM,IAAI,EAAE,CAAC;YACb,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;QACb,CAAC,EAAE,CAAC;IACN,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAoC,MAAS,EAAE,MAAkB;IACjF,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAmB,EAAE,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,IACE,SAAS,KAAK,IAAI;YAClB,OAAO,SAAS,KAAK,QAAQ;YAC7B,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YACzB,SAAS,KAAK,IAAI;YAClB,OAAO,SAAS,KAAK,QAAQ;YAC7B,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EACzB,CAAC;YACA,MAAkC,CAAC,GAAa,CAAC,GAAG,SAAS,CAC5D,SAAoC,EACpC,SAAoC,CACrC,CAAC;QACJ,CAAC;aAAM,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,CAAC,GAAG,SAA0B,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC1D,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsB,CAAC;YACxD,OAAO,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,SAAS,CAAC,yCAAyC;YACrD,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,gCAAgC,QAAQ,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACvF,OAAO,cAAc,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC"}