splitwise-mcp 3.2.0 → 3.2.1

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Splitwise — natural-language expense and group management via the Splitwise API",
-    "version": "3.2.0"
+    "version": "3.2.1"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "Splitwise",
       "source": "./",
       "description": "MCP server for Splitwise — manage expenses, groups, and friends via natural language",
-      "version": "3.2.0",
+      "version": "3.2.1",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "splitwise-mcp",
   "displayName": "Splitwise",
-  "version": "3.2.0",
+  "version": "3.2.1",
   "description": "MCP server for Splitwise — natural-language expense and group management via the Splitwise API",
   "author": {
     "name": "Chris Hall",

package/README.md

@@ -113,7 +113,7 @@ Add to Claude Desktop config:
 | Env var | Required | Notes |
 |---------|----------|-------|
 | `SPLITWISE_API_KEY` | Yes | API key from [splitwise.com/apps/register](https://secure.splitwise.com/apps/register) |
-| `SPLITWISE_OUTPUT_DIR` | No | Where `sw_get_receipt` writes downloaded receipts. Defaults to the current working directory. |
+| `SPLITWISE_OUTPUT_DIR` | No | Where `sw_get_receipt` writes downloaded receipts. Defaults to the current working directory. When set, a per-call `output_dir` must be inside it. |
 
 ## Confirmations
 

package/dist/bundle.js

@@ -99758,7 +99758,7 @@ function registerReceiptTools(server, client2) {
           "Also return the PDF's text layer as `text`. Ideal for looking up line items or totals without transferring the file. PDFs only; a scanned receipt has no text layer to extract."
         ).optional(),
         output_dir: external_exports.string().describe(
-          "Directory to write the receipt into. Defaults to $SPLITWISE_OUTPUT_DIR, else the current working directory."
+          "Directory to write the receipt into. Defaults to $SPLITWISE_OUTPUT_DIR, else the current working directory. When SPLITWISE_OUTPUT_DIR is set, this must be inside it."
         ).optional(),
         write: external_exports.boolean().describe(
           "Write the receipt to disk. Defaults to true. Pass false when the caller cannot reach this server's filesystem, or when the server runs read-only."
@@ -99785,8 +99785,11 @@ function registerReceiptTools(server, client2) {
       let writeError;
       if (write !== false) {
         try {
+          const configuredDir = readEnvVar("SPLITWISE_OUTPUT_DIR");
           path = writeBinaryOutput({
-            dir: resolveOutputDir(output_dir, "SPLITWISE_OUTPUT_DIR"),
+            dir: resolveOutputDir(output_dir, "SPLITWISE_OUTPUT_DIR", {
+              ...configuredDir ? { allowedRoots: [configuredDir] } : {}
+            }),
             baseName: `splitwise-receipt-${id}`,
             base64: base643,
             extension: extensionFor(mimeType, url4)
@@ -99989,7 +99992,7 @@ function registerUtilityTools(server, client2) {
 // src/index.ts
 await runMcp({
   name: "splitwise-mcp",
-  version: "3.2.0",
+  version: "3.2.1",
   // x-release-please-version
   deps: client,
   banner: "[splitwise-mcp] This project was developed and is maintained by AI (Claude Sonnet 4.6). Use at your own discretion.",

package/dist/index.js

@@ -19,7 +19,7 @@ import { registerUtilityTools } from './tools/utilities.js';
 // client into the same registrars instead of this singleton.
 await runMcp({
     name: 'splitwise-mcp',
-    version: '3.2.0', // x-release-please-version
+    version: '3.2.1', // x-release-please-version
     deps: client,
     banner: '[splitwise-mcp] This project was developed and is maintained by AI (Claude Sonnet 4.6). Use at your own discretion.',
     tools: [

package/dist/tools/receipts.js

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { minifiedResult, imageResult, resolveOutputDir, writeBinaryOutput, sniffMimeBytes, } from '@chrischall/mcp-utils';
+import { minifiedResult, imageResult, readEnvVar, resolveOutputDir, writeBinaryOutput, sniffMimeBytes, } from '@chrischall/mcp-utils';
 /** Cap on bytes returned as base64 in the tool result. */
 const MAX_INLINE_BYTES = 4 * 1024 * 1024;
 /** Cap on extracted characters, so a long PDF can't flood the result. */
@@ -97,7 +97,7 @@ export function registerReceiptTools(server, client) {
                 .optional(),
             output_dir: z
                 .string()
-                .describe('Directory to write the receipt into. Defaults to $SPLITWISE_OUTPUT_DIR, else the current working directory.')
+                .describe('Directory to write the receipt into. Defaults to $SPLITWISE_OUTPUT_DIR, else the current working directory. When SPLITWISE_OUTPUT_DIR is set, this must be inside it.')
                 .optional(),
             write: z
                 .boolean()
@@ -128,8 +128,15 @@ export function registerReceiptTools(server, client) {
         let writeError;
         if (write !== false) {
             try {
+                // output_dir is model-chosen: once the operator configures
+                // SPLITWISE_OUTPUT_DIR, a per-call directory must stay inside it
+                // (an escape throws, landing in writeError below). Unset keeps the
+                // old, unconfined behaviour.
+                const configuredDir = readEnvVar('SPLITWISE_OUTPUT_DIR');
                 path = writeBinaryOutput({
-                    dir: resolveOutputDir(output_dir, 'SPLITWISE_OUTPUT_DIR'),
+                    dir: resolveOutputDir(output_dir, 'SPLITWISE_OUTPUT_DIR', {
+                        ...(configuredDir ? { allowedRoots: [configuredDir] } : {}),
+                    }),
                     baseName: `splitwise-receipt-${id}`,
                     base64,
                     extension: extensionFor(mimeType, url),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "splitwise-mcp",
-  "version": "3.2.0",
+  "version": "3.2.1",
   "mcpName": "io.github.chrischall/splitwise-mcp",
   "description": "Splitwise MCP server for Claude — developed and maintained by AI (Claude Code)",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",
@@ -47,7 +47,7 @@
   "dependencies": {
     "@chrischall/mcp-utils": "^2.6.0",
     "@modelcontextprotocol/server": "^2.0.0",
-    "dotenv": "^17.4.0",
+    "dotenv": "^18.0.2",
     "unpdf": "^1.8.1",
     "zod": "^4.6.5"
   },

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/splitwise-mcp",
     "source": "github"
   },
-  "version": "3.2.0",
+  "version": "3.2.1",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "splitwise-mcp",
-      "version": "3.2.0",
+      "version": "3.2.1",
       "transport": {
         "type": "stdio"
       },