@genwave/svgmaker-mcp
Version:
MCP server for generating, editing, and converting SVG images using SVGMaker API
64 lines • 2.42 kB
JavaScript
import fs from 'fs/promises';
import path from 'path';
// Helper to check if a child path is within a parent root URI
// Currently not used, but will be needed for more robust root validation in future
// eslint-disable-next-line @typescript-eslint/no-unused-vars
function isPathWithinRoot(filePath, rootUri) {
const rootPath = new URL(rootUri).pathname;
const relative = path.relative(rootPath, filePath);
return relative !== '' && !relative.startsWith('..') && !path.isAbsolute(relative);
}
export async function resolveAndValidatePath(rawPath, clientRoots, // Roots from server.getRoots()
accessType) {
const absolutePath = path.resolve(rawPath);
// Simplified validation - for Phase 1, we'll do basic security checks
// In a production environment, you'd want more robust root validation
// Basic security: prevent access to system directories
const normalizedPath = path.normalize(absolutePath);
const dangerousPaths = ['/etc', '/bin', '/usr/bin', '/var', '/sys', '/proc'];
const isDangerous = dangerousPaths.some((dangerous) => normalizedPath.startsWith(dangerous));
if (isDangerous) {
throw new Error(`Access to system directory "${normalizedPath}" is not allowed.`);
}
if (accessType === 'write') {
const dir = path.dirname(absolutePath);
try {
await fs.access(dir, fs.constants.W_OK);
}
catch {
// Try to create the directory if it doesn't exist
try {
await fs.mkdir(dir, { recursive: true });
}
catch {
throw new Error(`Directory "${dir}" is not writable and could not be created.`);
}
}
}
else if (accessType === 'read') {
try {
await fs.access(absolutePath, fs.constants.R_OK);
}
catch {
throw new Error(`File "${absolutePath}" is not readable or does not exist.`);
}
}
return absolutePath;
}
export async function writeFile(filePath, content) {
try {
await fs.writeFile(filePath, content, 'utf8');
}
catch {
throw new Error(`Failed to write file: ${filePath}`);
}
}
export async function readFileToBuffer(filePath) {
try {
return await fs.readFile(filePath);
}
catch {
throw new Error(`Failed to read file: ${filePath}`);
}
}
//# sourceMappingURL=fileUtils.js.map