Skip to content

MCP Rigor 1.0.0-rc.3

Pre-release
Pre-release

Choose a tag to compare

View all tags
@ashwin-kondapalli ashwin-kondapalli released this 29 Aug 03:39
· 19 commits to main since this release
v1.0.0-rc.3
59aeb1e

MCP Rigor 1.0.0-rc.3

Security hardening release for the plain-language flow-import resolver, responding to a supply-chain scan finding. Recommended for all users.

Security

Flow imports are now confined to the test-suite directory. Previously, Import flows from "..." accepted absolute paths, ../ traversal, and symlink targets outside the suite, allowing a crafted .mcpr file to read arbitrary local files into the compiled suite. Imports are now validated after path canonicalization, with new stable error codes:

  • MCPLANG304 — absolute import paths rejected
  • MCPLANG307 — imports resolving outside the suite directory rejected (covers .. traversal and symlink escapes)
  • MCPLANG303 — recursion depth limited (8)
  • MCPLANG305 — imported file size limited (1 MB)
  • MCPLANG306 — import count limited (64)

No user-facing change for documented usage: relative in-suite imports (Import flows from "./shared-flows.mcpr") work exactly as before.

Verification

  • 21 test files / 80 tests passing (2 new confinement regression tests)
  • Full CI matrix green: Ubuntu / macOS / Windows × Node 20 / 22 + security suite
  • npm audit: 0 vulnerabilities

Install

npm install --save-dev mcprigor

Tarball SHA-256: cd2899a856607bd3954a2d7d9ca0fe0cd1f6013787376b14b03f6ec7c7d788c4

Assets 3
Loading