57b58a0d22
fix: allow ampersands in filenames while blocking command injection (v1.1.2)
...
Fixes #2 - Files with & in their names (e.g., 'Research & Development.md')
were being incorrectly sanitized, causing search and file-not-found errors.
Changes:
- Removed & from DANGEROUS_CHARS regex
- Single & is safe in quoted arguments passed to CLI
- Dangerous && patterns still blocked by COMMAND_INJECTION_PATTERNS
- Also allows (), [], {} which are safe in quoted args
Version: 1.1.2
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-04-14 17:05:18 -05:00
c5e42adac0
fix: correct manifest.json to pass MCPB validation
...
- Add required 'version' field (1.0.0)
- Change 'author' from string to object with name/url
- Move 'mcp_config' inside 'server' object
- Fix 'user_config' to use proper field-level structure
- Remove invalid 'compatibility' and 'capabilities' top-level fields
- Create bundle icon (512x512 PNG) to satisfy icon requirement
- Remove icon placeholder file
Validation: ✅ mcpb validate passes with warnings only
Tasks: T149 (icon), T158 (validate), T159 (build) marked complete
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-03-22 11:33:16 -05:00
622b28e42c
feat: implement Obsidian MCP Bundle MVP (Phase 1-3)
...
- Complete project setup with TypeScript, Jest, MCPB manifest
- Implement foundational infrastructure (CLI executor, logger, error handler)
- Add 9 file operation tools for User Story 1
- Full MCP protocol compliance with stdio transport
- Input validation and sanitization for security
- Comprehensive error handling with actionable messages
- Constitutional compliance: all 6 principles satisfied
MVP includes:
- obsidian_create_note, read, append, prepend, delete, move, rename, open, file_info
- Zod validation schemas for all parameters
- 30s timeout configuration with per-command overrides
- Stderr-only logging with sanitized output
- Graceful shutdown handling
Build: ✅ 0 errors, 0 vulnerabilities
Tasks: 48/167 complete (MVP milestone)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-03-22 11:21:38 -05:00