splitwise-mcp 3.2.0 → 3.2.2

package/dist/index.js

@@ -19,7 +19,7 @@ import { registerUtilityTools } from './tools/utilities.js';
 // client into the same registrars instead of this singleton.
 await runMcp({
     name: 'splitwise-mcp',
-    version: '3.2.0', // x-release-please-version
+    version: '3.2.2', // x-release-please-version
     deps: client,
     banner: '[splitwise-mcp] This project was developed and is maintained by AI (Claude Sonnet 4.6). Use at your own discretion.',
     tools: [

package/dist/tools/receipts.js

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { minifiedResult, imageResult, resolveOutputDir, writeBinaryOutput, sniffMimeBytes, } from '@chrischall/mcp-utils';
+import { minifiedResult, imageResult, readEnvVar, resolveOutputDir, writeBinaryOutput, sniffMimeBytes, } from '@chrischall/mcp-utils';
 /** Cap on bytes returned as base64 in the tool result. */
 const MAX_INLINE_BYTES = 4 * 1024 * 1024;
 /** Cap on extracted characters, so a long PDF can't flood the result. */
@@ -97,7 +97,7 @@ export function registerReceiptTools(server, client) {
                 .optional(),
             output_dir: z
                 .string()
-                .describe('Directory to write the receipt into. Defaults to $SPLITWISE_OUTPUT_DIR, else the current working directory.')
+                .describe('Directory to write the receipt into. Defaults to $SPLITWISE_OUTPUT_DIR, else the current working directory. When SPLITWISE_OUTPUT_DIR is set, this must be inside it.')
                 .optional(),
             write: z
                 .boolean()
@@ -128,8 +128,15 @@ export function registerReceiptTools(server, client) {
         let writeError;
         if (write !== false) {
             try {
+                // output_dir is model-chosen: once the operator configures
+                // SPLITWISE_OUTPUT_DIR, a per-call directory must stay inside it
+                // (an escape throws, landing in writeError below). Unset keeps the
+                // old, unconfined behaviour.
+                const configuredDir = readEnvVar('SPLITWISE_OUTPUT_DIR');
                 path = writeBinaryOutput({
-                    dir: resolveOutputDir(output_dir, 'SPLITWISE_OUTPUT_DIR'),
+                    dir: resolveOutputDir(output_dir, 'SPLITWISE_OUTPUT_DIR', {
+                        ...(configuredDir ? { allowedRoots: [configuredDir] } : {}),
+                    }),
                     baseName: `splitwise-receipt-${id}`,
                     base64,
                     extension: extensionFor(mimeType, url),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "splitwise-mcp",
-  "version": "3.2.0",
+  "version": "3.2.2",
   "mcpName": "io.github.chrischall/splitwise-mcp",
   "description": "Splitwise MCP server for Claude — developed and maintained by AI (Claude Code)",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",
@@ -45,14 +45,14 @@
     "typecheck": "tsc -p tsconfig.json --noEmit"
   },
   "dependencies": {
-    "@chrischall/mcp-utils": "^2.6.0",
-    "@modelcontextprotocol/server": "^2.0.0",
-    "dotenv": "^17.4.0",
+    "@chrischall/mcp-utils": "^2.13.0",
+    "@modelcontextprotocol/server": "^2.2.0",
+    "dotenv": "^18.0.2",
     "unpdf": "^1.8.1",
     "zod": "^4.6.5"
   },
   "devDependencies": {
-    "@modelcontextprotocol/client": "^2.0.0",
+    "@modelcontextprotocol/client": "^2.2.0",
     "@types/node": "^26.0.0",
     "@vitest/coverage-v8": "^5.0.0",
     "esbuild": "^0.28.0",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/splitwise-mcp",
     "source": "github"
   },
-  "version": "3.2.0",
+  "version": "3.2.2",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "splitwise-mcp",
-      "version": "3.2.0",
+      "version": "3.2.2",
       "transport": {
         "type": "stdio"
       },