Skip to content

draft: locked down siteinfo#437

Draft
kyanha wants to merge 2 commits into
ProfessionalWiki:masterfrom
kyanha:locked-down-siteinfo
Draft

draft: locked down siteinfo#437
kyanha wants to merge 2 commits into
ProfessionalWiki:masterfrom
kyanha:locked-down-siteinfo

Conversation

@kyanha

@kyanha kyanha commented Jul 3, 2026

Copy link
Copy Markdown
  • feat: Make siteinfo query work on private wikis
  • feat: I can't push with any failing tests. Can you address them? Edits applied in response to user prompt.

kyanha added 2 commits July 3, 2026 04:23
Edits applied in response to user prompt.

Original prompt:
I can't push with any failing tests. Can you address them?

```
❯ tests/auth/paths.test.ts (4 tests | 1 failed) 21ms
     ✓ returns MCP_OAUTH_CREDENTIALS_FILE verbatim when set 4ms
     ✓ uses XDG_CONFIG_HOME on Linux/macOS when set 1ms
     × falls back to ~/.config on Linux/macOS when XDG unset 11ms
     ✓ uses %APPDATA% on win32 1ms
 ❯ tests/transport/uploadGuard.test.ts (9 tests | 2 failed) 23ms
     ✓ rejects when allowedDirs is empty 7ms
     ✓ rejects a relative filepath 1ms
     ✓ rejects a non-existent filepath with a clear message 1ms
     × accepts and returns the canonical path for a file inside an allowed dir 7ms
     ✓ rejects when a symlink resolves outside the allowlist 1ms
     ✓ rejects a `..` traversal whose realpath escapes the allowlist 1ms
     ✓ does not match a sibling directory with a similar prefix 0ms
     ✓ accepts when the resolved path equals the allowlist entry exactly 0ms
     × accepts when the file is under any of several allowlist entries 1ms
 ```
The "falls back to ~/.config for Linux and MacOS" should be skipped on Windows, at the least.
```
@kyanha kyanha changed the title locked down siteinfo draft: locked down siteinfo Jul 3, 2026
@kyanha
kyanha marked this pull request as draft July 3, 2026 11:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant