prism-mcp-server 20.2.4 → 20.2.6

package/dist/connect.js

@@ -1,4 +1,4 @@
-import { accessSync, constants, existsSync, lstatSync, mkdirSync, readFileSync, realpathSync, renameSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
+import { accessSync, closeSync, constants, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
 import { homedir } from "node:os";
 import { basename, dirname, isAbsolute, join, relative, resolve, sep, win32 as win32Path } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -69,6 +69,72 @@ const CODEX_LOCAL_FIRST_POLICY = {
 };
 const CODEX_POLICY_MARKER_PREFIX = "# >>> prism connect managed: local-first";
 const CODEX_POLICY_MARKER_SUFFIX = "# <<< prism connect managed: local-first";
+/**
+ * Read a host-owned text file through one descriptor, then verify that the
+ * pathname still identifies that same regular file. This prevents a path from
+ * being swapped between a metadata check and the read while retaining Prism's
+ * documented support for symlinked dotfiles.
+ */
+function readRegularTextSnapshot(filePath, allowSymlink = true) {
+    const nonBlocking = typeof constants.O_NONBLOCK === "number" ? constants.O_NONBLOCK : 0;
+    const noFollow = !allowSymlink && typeof constants.O_NOFOLLOW === "number"
+        ? constants.O_NOFOLLOW
+        : 0;
+    let descriptor;
+    try {
+        descriptor = openSync(filePath, constants.O_RDONLY | nonBlocking | noFollow);
+    }
+    catch (error) {
+        // A dangling symlink is an existing, unsafe entry rather than an absent
+        // config. Detect it only after the descriptor open failed, so this probe
+        // cannot become a check-then-read race.
+        if (isErrno(error, "ENOENT")) {
+            let pathInfo;
+            try {
+                pathInfo = lstatSync(filePath);
+            }
+            catch (probeError) {
+                if (!isErrno(probeError, "ENOENT"))
+                    throw probeError;
+            }
+            if (pathInfo?.isSymbolicLink()) {
+                throw new Error(`symlink target is unavailable: ${filePath}`);
+            }
+        }
+        throw error;
+    }
+    try {
+        const openedInfo = fstatSync(descriptor);
+        if (!openedInfo.isFile())
+            throw new Error("target is not a regular file");
+        const pathInfo = lstatSync(filePath);
+        let writePath = filePath;
+        let symlinkPath;
+        if (pathInfo.isSymbolicLink()) {
+            if (!allowSymlink)
+                throw new Error("symlink is not allowed");
+            writePath = realpathSync(filePath);
+            symlinkPath = filePath;
+        }
+        else if (!pathInfo.isFile()) {
+            throw new Error("target is not a regular file");
+        }
+        const currentInfo = statSync(writePath);
+        if (!currentInfo.isFile()
+            || currentInfo.dev !== openedInfo.dev
+            || currentInfo.ino !== openedInfo.ino) {
+            throw new Error("file changed while Prism was opening it; retry");
+        }
+        return {
+            text: readFileSync(descriptor, "utf8"),
+            writePath,
+            symlinkPath,
+        };
+    }
+    finally {
+        closeSync(descriptor);
+    }
+}
 export function normalizeHostName(value) {
     const normalized = value.trim().toLowerCase();
     const host = HOST_ALIASES[normalized];
@@ -188,11 +254,7 @@ export function writeInstallationReceipt(homeDir, receipt, beforeCommit) {
     }
     let originalText;
     try {
-        const receiptInfo = lstatSync(receiptPath);
-        if (receiptInfo.isSymbolicLink() || !receiptInfo.isFile()) {
-            throw new Error("receipt must be a regular Prism-owned file");
-        }
-        originalText = readFileSync(receiptPath, "utf8");
+        originalText = readRegularTextSnapshot(receiptPath, false).text;
         const current = JSON.parse(originalText);
         if (!isJsonObject(current)
             || current.schema_version !== INSTALLATION_RECEIPT_SCHEMA_VERSION
@@ -251,14 +313,10 @@ export function migrateLegacyClaudeProjectMcp(homeDir = homedir(), cwd = process
     let symlinkPath;
     let originalText;
     try {
-        const pathInfo = lstatSync(configPath);
-        if (pathInfo.isSymbolicLink()) {
-            writePath = realpathSync(configPath);
-            symlinkPath = configPath;
-        }
-        if (!statSync(writePath).isFile())
-            throw new Error("config is not a regular file");
-        originalText = readFileSync(writePath, "utf8");
+        const snapshot = readRegularTextSnapshot(configPath);
+        writePath = snapshot.writePath;
+        symlinkPath = snapshot.symlinkPath;
+        originalText = snapshot.text;
     }
     catch (error) {
         throw new Error(`Could not inspect Claude project MCP config: ${error instanceof Error ? error.message : String(error)}`);
@@ -321,14 +379,10 @@ export function migrateLegacyClaudeHooks(homeDir = homedir(), dryRun = false, be
     let symlinkPath;
     let originalText;
     try {
-        const pathInfo = lstatSync(configPath);
-        if (pathInfo.isSymbolicLink()) {
-            writePath = realpathSync(configPath);
-            symlinkPath = configPath;
-            if (!statSync(writePath).isFile())
-                throw new Error("target is not a regular file");
-        }
-        originalText = readFileSync(writePath, "utf8");
+        const snapshot = readRegularTextSnapshot(configPath);
+        writePath = snapshot.writePath;
+        symlinkPath = snapshot.symlinkPath;
+        originalText = snapshot.text;
     }
     catch (error) {
         if (isErrno(error, "ENOENT"))
@@ -403,15 +457,11 @@ export function migrateLegacyClaudeInstructions(homeDir = homedir(), dryRun = fa
     let originalText;
     let instructionEntryExists = false;
     try {
-        const pathInfo = lstatSync(instructionPath);
+        const snapshot = readRegularTextSnapshot(instructionPath);
         instructionEntryExists = true;
-        if (pathInfo.isSymbolicLink()) {
-            writePath = realpathSync(instructionPath);
-            symlinkPath = instructionPath;
-            if (!statSync(writePath).isFile())
-                throw new Error("target is not a regular file");
-        }
-        originalText = readFileSync(writePath, "utf8");
+        writePath = snapshot.writePath;
+        symlinkPath = snapshot.symlinkPath;
+        originalText = snapshot.text;
     }
     catch (error) {
         if (!instructionEntryExists && isErrno(error, "ENOENT")) {
@@ -447,15 +497,11 @@ export function migrateLegacyClaudeManagedStartup(homeDir = homedir(), dryRun =
     let originalText;
     let instructionEntryExists = false;
     try {
-        const pathInfo = lstatSync(instructionPath);
+        const snapshot = readRegularTextSnapshot(instructionPath);
         instructionEntryExists = true;
-        if (pathInfo.isSymbolicLink()) {
-            writePath = realpathSync(instructionPath);
-            symlinkPath = instructionPath;
-            if (!statSync(writePath).isFile())
-                throw new Error("target is not a regular file");
-        }
-        originalText = readFileSync(writePath, "utf8");
+        writePath = snapshot.writePath;
+        symlinkPath = snapshot.symlinkPath;
+        originalText = snapshot.text;
     }
     catch (error) {
         if (!instructionEntryExists && isErrno(error, "ENOENT")) {
@@ -508,15 +554,11 @@ export function configureClaudeNativeStartup(homeDir = homedir(), dryRun = false
     let originalText;
     let instructionEntryExists = false;
     try {
-        const pathInfo = lstatSync(instructionPath);
+        const snapshot = readRegularTextSnapshot(instructionPath);
         instructionEntryExists = true;
-        if (pathInfo.isSymbolicLink()) {
-            writePath = realpathSync(instructionPath);
-            symlinkPath = instructionPath;
-            if (!statSync(writePath).isFile())
-                throw new Error("target is not a regular file");
-        }
-        originalText = readFileSync(writePath, "utf8");
+        writePath = snapshot.writePath;
+        symlinkPath = snapshot.symlinkPath;
+        originalText = snapshot.text;
     }
     catch (error) {
         if (instructionEntryExists || !isErrno(error, "ENOENT")) {
@@ -604,15 +646,11 @@ export function configureGeminiNativeStartup(homeDir = homedir(), dryRun = false
     let originalText;
     let instructionEntryExists = false;
     try {
-        const pathInfo = lstatSync(instructionPath);
+        const snapshot = readRegularTextSnapshot(instructionPath);
         instructionEntryExists = true;
-        if (pathInfo.isSymbolicLink()) {
-            writePath = realpathSync(instructionPath);
-            symlinkPath = instructionPath;
-            if (!statSync(writePath).isFile())
-                throw new Error("target is not a regular file");
-        }
-        originalText = readFileSync(writePath, "utf8");
+        writePath = snapshot.writePath;
+        symlinkPath = snapshot.symlinkPath;
+        originalText = snapshot.text;
     }
     catch (error) {
         if (instructionEntryExists || !isErrno(error, "ENOENT")) {
@@ -680,15 +718,11 @@ export function configureCodexNativeStartup(homeDir, dryRun = false, beforeCommi
     let originalText;
     let instructionEntryExists = false;
     try {
-        const pathInfo = lstatSync(instructionPath);
+        const snapshot = readRegularTextSnapshot(instructionPath);
         instructionEntryExists = true;
-        if (pathInfo.isSymbolicLink()) {
-            writePath = realpathSync(instructionPath);
-            symlinkPath = instructionPath;
-            if (!statSync(writePath).isFile())
-                throw new Error("target is not a regular file");
-        }
-        originalText = readFileSync(writePath, "utf8");
+        writePath = snapshot.writePath;
+        symlinkPath = snapshot.symlinkPath;
+        originalText = snapshot.text;
     }
     catch (error) {
         if (instructionEntryExists || !isErrno(error, "ENOENT")) {
@@ -737,14 +771,10 @@ function configureJsonAgentPolicy(configPath, label, mutate, dryRun, beforeCommi
     let originalText;
     let config = {};
     try {
-        const pathInfo = lstatSync(configPath);
-        if (pathInfo.isSymbolicLink()) {
-            writePath = realpathSync(configPath);
-            symlinkPath = configPath;
-            if (!statSync(writePath).isFile())
-                throw new Error("target is not a regular file");
-        }
-        originalText = readFileSync(writePath, "utf8");
+        const snapshot = readRegularTextSnapshot(configPath);
+        writePath = snapshot.writePath;
+        symlinkPath = snapshot.symlinkPath;
+        originalText = snapshot.text;
         const parsed = JSON.parse(originalText);
         if (!isJsonObject(parsed))
             throw new Error("top-level JSON value must be an object");
@@ -858,14 +888,10 @@ export function configureCodexAgentPolicy(homeDir, dryRun = false, beforeCommit,
     let symlinkPath;
     let originalText;
     try {
-        const pathInfo = lstatSync(configPath);
-        if (pathInfo.isSymbolicLink()) {
-            writePath = realpathSync(configPath);
-            symlinkPath = configPath;
-            if (!statSync(writePath).isFile())
-                throw new Error("target is not a regular file");
-        }
-        originalText = readFileSync(writePath, "utf8");
+        const snapshot = readRegularTextSnapshot(configPath);
+        writePath = snapshot.writePath;
+        symlinkPath = snapshot.symlinkPath;
+        originalText = snapshot.text;
         parseToml(originalText);
     }
     catch (error) {
@@ -1063,18 +1089,18 @@ function registerJsonHost(definition, entry, dryRun, refresh, beforeCommit) {
     let writePath = configPath;
     let symlinkPath;
     try {
-        const pathInfo = lstatSync(configPath);
-        if (pathInfo.isSymbolicLink()) {
-            try {
-                writePath = realpathSync(configPath);
-                symlinkPath = configPath;
-            }
-            catch (error) {
-                return result(definition, "error", `config symlink target is unavailable: ${error instanceof Error ? error.message : String(error)}`);
-            }
+        const snapshot = readRegularTextSnapshot(configPath);
+        writePath = snapshot.writePath;
+        symlinkPath = snapshot.symlinkPath;
+        originalText = snapshot.text;
+    }
+    catch (error) {
+        if (!isErrno(error, "ENOENT")) {
+            return result(definition, "error", `could not inspect config: ${error instanceof Error ? error.message : String(error)}`);
         }
+    }
+    if (originalText !== undefined) {
         try {
-            originalText = readFileSync(writePath, "utf8");
             const parsed = JSON.parse(originalText);
             if (!isJsonObject(parsed)) {
                 throw new Error("top-level JSON value must be an object");
@@ -1085,11 +1111,6 @@ function registerJsonHost(definition, entry, dryRun, refresh, beforeCommit) {
             return result(definition, "error", `could not parse config: ${error instanceof Error ? error.message : String(error)}`);
         }
     }
-    catch (error) {
-        if (!isErrno(error, "ENOENT")) {
-            return result(definition, "error", `could not inspect config: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    }
     const currentServers = config.mcpServers;
     if (currentServers !== undefined && !isJsonObject(currentServers)) {
         return result(definition, "error", '"mcpServers" must be a JSON object');
@@ -1145,21 +1166,18 @@ function registerCodexTomlHost(definition, entry, dryRun, refresh, beforeCommit)
     let writePath = configPath;
     let symlinkPath;
     try {
-        const pathInfo = lstatSync(configPath);
-        if (pathInfo.isSymbolicLink()) {
-            try {
-                writePath = realpathSync(configPath);
-                symlinkPath = configPath;
-                if (!statSync(writePath).isFile()) {
-                    throw new Error("config symlink target is not a regular file");
-                }
-            }
-            catch (error) {
-                return result(definition, "error", `config symlink target is unavailable: ${error instanceof Error ? error.message : String(error)}`);
-            }
+        const snapshot = readRegularTextSnapshot(configPath);
+        writePath = snapshot.writePath;
+        symlinkPath = snapshot.symlinkPath;
+        originalText = snapshot.text;
+    }
+    catch (error) {
+        if (!isErrno(error, "ENOENT")) {
+            return result(definition, "error", `could not inspect config: ${error instanceof Error ? error.message : String(error)}`);
         }
+    }
+    if (originalText !== undefined) {
         try {
-            originalText = readFileSync(writePath, "utf8");
             const parsed = parseToml(originalText);
             if (!isJsonObject(parsed)) {
                 throw new Error("top-level TOML value must be a table");
@@ -1170,11 +1188,6 @@ function registerCodexTomlHost(definition, entry, dryRun, refresh, beforeCommit)
             return result(definition, "error", `could not parse config: ${error instanceof Error ? error.message : String(error)}`);
         }
     }
-    catch (error) {
-        if (!isErrno(error, "ENOENT")) {
-            return result(definition, "error", `could not inspect config: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    }
     let managedBlock;
     try {
         managedBlock = locateCodexManagedBlock(originalText ?? "");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prism-mcp-server",
-  "version": "20.2.4",
+  "version": "20.2.6",
   "mcpName": "io.github.dcostenco/prism-coder",
   "description": "Prism Coder — Cognitive memory + tool-calling intelligence for AI agents. Mind Palace persistent memory (BFCL Gold Certified, 100% Tool-Call Accuracy, 114 Agent Skills, PHI Guard, Tier Enforcement, Prompt-Based Skill Routing, Zero-Search HDC/HRR retrieval, HRR Semantic Drift Detection across BCBA/Coding/AAC domains, HIPAA-hardened local or subscription-gated Synalux storage, SLERP-optimized GRPO alignment) plus the prism-coder 1.7B–32B open-weights LLM fleet.",
   "module": "index.ts",
@@ -125,9 +125,14 @@
     }
   },
   "overrides": {
-    "hono": "^4.12.18",
-    "fast-uri": "^3.1.2",
-    "ip-address": "^10.2.0"
+    "@hono/node-server": "^2.0.5",
+    "body-parser": "^2.3.0",
+    "fast-uri": "^3.1.4",
+    "hono": "^4.12.27",
+    "ip-address": "^10.2.0",
+    "protobufjs": "^7.6.5",
+    "sharp": "^0.35.0",
+    "tar": "^7.5.19"
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.92.0",