prism-mcp-server 15.5.1 → 15.5.2

package/dist/storage/sqlite.js

@@ -732,6 +732,16 @@ export class SqliteStorage {
     // (e.g., { project: "eq.my-app", archived_at: "is.null" }).
     // This parser converts those into SQL WHERE clauses + args so
     // handlers work identically with both Supabase and SQLite.
+    // Bug 8.1: column names in WHERE clauses are interpolated directly into SQL.
+    // Values are parameterized (safe), but an unvalidated key like
+    // "1=1 OR summary" would inject arbitrary SQL into the condition.
+    // This allowlist is the same defense-in-depth pattern used in patchLedger.
+    static ALLOWED_FILTER_COLUMNS = new Set([
+        "id", "project", "user_id", "conversation_id", "summary",
+        "archived_at", "deleted_at", "is_rollup", "role", "event_type",
+        "created_at", "updated_at", "session_date", "importance", "title",
+        "agent_name", "last_accessed_at", "confidence_score", "rollup_count",
+    ]);
     parsePostgRESTFilters(params) {
         const conditions = [];
         const args = [];
@@ -779,6 +789,12 @@ export class SqliteStorage {
                 limit = parseInt(value, 10);
                 continue;
             }
+            // Bug 8.1 guard: reject any key that isn't in the known column allowlist.
+            // Prevents SQL injection via column-name interpolation.
+            if (!SqliteStorage.ALLOWED_FILTER_COLUMNS.has(key)) {
+                throw new Error(`[SqliteStorage] parsePostgRESTFilters: rejected unknown filter column "${key}". ` +
+                    `Allowed: ${[...SqliteStorage.ALLOWED_FILTER_COLUMNS].join(", ")}`);
+            }
             // PostgREST filter operators
             if (value.startsWith("eq.")) {
                 // Handle boolean mapping: SQLite uses 0/1 for booleans

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prism-mcp-server",
-  "version": "15.5.1",
+  "version": "15.5.2",
   "mcpName": "io.github.dcostenco/prism-coder",
   "description": "Prism Coder — Cognitive memory + tool-calling intelligence for AI agents. Mind Palace persistent memory (BFCL Gold Certified, 100% Tool-Call Accuracy, 54 Agent Skills, Zero-Search HDC/HRR retrieval, HIPAA-hardened local-first storage, SLERP-optimized GRPO alignment) plus the prism-coder:7b / 14b open-weights LLM fleet.",
   "module": "index.ts",