files v0.2.0
·
4 commits
to main
since this release
@abhishekmcp/files v0.2.0 — production hardening
No new tools; this makes the filesystem server trustworthy under real use.
Added
- Secret protection: reads of (and discovery of) common secret files (
.env,*.pem,*.key,.ssh/**,.aws/**,.npmrc,credentials, …) are blocked by default, plus a per-root.mcpignore. Override withFS_ALLOW_SECRETS=1. - Audit log: every mutation is recorded to
FS_AUDIT_LOG(JSON lines) and stderr. - Resilience: per-operation timeout (
FS_OP_TIMEOUT_MS) and a concurrency cap (FS_MAX_CONCURRENCY). - Streaming + encoding: head reads and hashing stream (no whole-file loads); edits preserve line endings (CRLF stays CRLF) and BOM; binary files give a clean error.
- Committed test suite (node:test) — sandbox/runtime unit tests + integration/security tests, now run in CI.
Published with provenance via OIDC.