20e679bb1f* fix: teach sdk-watch the `app/` author spelling so suppression works again `normalizeLogin` lowercased a login and stripped a trailing `[bot]`, but the installed `gh` reports this account as `app/github-actions` from `gh issue list --json author`. The `app/` prefix survived, so `isSweepAuthored()` returned false for every issue the sweep itself wrote, the marker was never trusted, and the re-file check found nothing to suppress against. The sweep filed the same ext-apps 2.0.0 issue three nights running (#2325, #2332, #2348) before anyone noticed by hand. The same predicate gates analysis-retry suppression and supersession notes, so both were affected too — an analyzed issue could be re-queued for a fresh Opus run every night. Strip the prefix alongside the suffix. That widens nothing an outsider can claim: `/` is not legal in a GitHub username, so no human account can normalize onto `github-actions`, and the labels half of the check (`chore` + `dependencies`, both write-access-only) is independent regardless. Because the failure mode is silence, also guard the class rather than only its instance: `sweepIssues` now reports any issue carrying this sweep's marker AND its write-access-only labels whose author does not normalize onto `AUTOMATION_LOGIN`. That combination cannot be produced by an outsider, and it is exactly the signature a fourth spelling would present. It warns rather than throws, so a cosmetic upstream rename does not take the nightly sweep down. Tests cover all three known spellings plus a mixed-case form, five near-miss logins that must stay rejected, and both halves of the split predicate. Closes #2377 Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Signed-off-by: cliffhall <cliff@futurescale.com> * chore(release): bump version to 2.7.0 Step 1 of the v2.7.0 release. The bump goes on `v2/main` before the milestone merge (#2010), so the release lands on `main` with the version already correct and `v2/main` is never left behind `main`. `npm version minor --no-git-tag-version` — no tag here deliberately. The release tag has to point at the merge commit on `main`, so tagging on `v2/main` would create a tag on a commit that is never released. `npm audit --audit-level=high` was run first across all five installs (root, web, cli, tui, launcher) and reported zero vulnerabilities at every severity — info through critical — so the bump sits on a tree that was checked and no audit fixes were forced. Closes #2378 Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Signed-off-by: cliffhall <cliff@futurescale.com> * test: cover the drift guard through main(), not only as a unit (#2379 review) `warnOnUnrecognizedAuthors` was unit-tested, but its call from `sweepIssues` was not: deleting that line left all 65 tests green. So the guard against a silent normalization drift could itself have become disconnected silently — the exact failure mode it exists to prevent. Two main-level cases, driven through the injected spawn: - an issue carrying our marker and our write-access-only labels whose author is `apps/github-actions` (a spelling `normalizeLogin` has never seen) must produce the warning, and the refile it causes is asserted alongside it so the test shows the consequence rather than only the message; - the three readable spellings must produce no warning AND must suppress the refile, because a guard that fires on the ordinary path is noise. Deleting the `sweepIssues` call now fails 1 test rather than 0, and restoring the original `app/` bug fails 5 rather than 4. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Signed-off-by: cliffhall <cliff@futurescale.com> --------- Signed-off-by: cliffhall <cliff@futurescale.com> Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
135 lines
7.1 KiB
JSON
135 lines
7.1 KiB
JSON
{
|
|
"name": "@modelcontextprotocol/inspector",
|
|
"version": "2.7.0",
|
|
"description": "The Model Context Protocol Inspector",
|
|
"keywords": [
|
|
"MCP",
|
|
"inspector"
|
|
],
|
|
"homepage": "https://github.com/modelcontextprotocol/inspector#readme",
|
|
"bugs": {
|
|
"url": "https://github.com/modelcontextprotocol/inspector/issues"
|
|
},
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git+https://github.com/modelcontextprotocol/inspector.git"
|
|
},
|
|
"license": "MIT",
|
|
"author": "The MCP Maintainers and Community",
|
|
"type": "module",
|
|
"bin": {
|
|
"mcp-inspector": "./clients/launcher/build/index.js"
|
|
},
|
|
"files": [
|
|
"clients/launcher/build",
|
|
"clients/web/build",
|
|
"clients/web/dist",
|
|
"clients/web/static",
|
|
"clients/cli/build",
|
|
"clients/tui/build",
|
|
"scripts/install-clients.mjs"
|
|
],
|
|
"scripts": {
|
|
"web": "node clients/launcher/build/index.js --web",
|
|
"build:web:runner": "cd clients/web && npm run build:runner",
|
|
"web:dev": "npm run build:web:runner && node clients/launcher/build/index.js --web --dev",
|
|
"build": "npm run build:web && npm run build:cli && npm run build:tui && npm run build:launcher",
|
|
"build:cli": "cd clients/cli && npm run build",
|
|
"build:tui": "cd clients/tui && npm run build",
|
|
"build:web": "cd clients/web && npm run build",
|
|
"build:launcher": "cd clients/launcher && npm run build",
|
|
"local:gate": "node scripts/gate-lease.mjs npm run local:gate:stages",
|
|
"local:gate:stages": "npm run local:validate && npm run verify:skills:cli && npm run coverage && npm run verify:build-gate && npm run verify:bundle-externals && npm run smoke && npm run smoke:web:firefox && npm run local:storybook",
|
|
"local:validate": "npm run validate:guards && npm run validate:core && cd clients/web && npm run check && cd ../cli && npm run check && cd ../tui && npm run check && cd ../launcher && npm run check",
|
|
"local:storybook": "cd clients/web && npx playwright install chromium && npm run test:storybook",
|
|
"verify:build-gate": "node scripts/verify-build-gate.mjs",
|
|
"verify:bundle-externals": "node scripts/verify-bundle-externals.mjs",
|
|
"verify:typecheck-coverage": "node scripts/verify-typecheck-coverage.mjs",
|
|
"verify:skills": "node scripts/verify-skills.mjs",
|
|
"verify:skills:cli": "node scripts/verify-skills-cli.mjs",
|
|
"test:scripts": "node --test \"scripts/**/*.test.mjs\"",
|
|
"validate": "npm run validate:guards && npm run validate:core && npm run validate:web && npm run validate:cli && npm run validate:tui && npm run validate:launcher",
|
|
"validate:guards": "npm run verify:format-coverage && npm run verify:skills && npm run verify:typecheck-coverage && npm run verify:dep-lockstep && npm run verify:test-timeouts && npm run test:scripts",
|
|
"verify:format-coverage": "node scripts/verify-format-coverage.mjs",
|
|
"verify:dep-lockstep": "node scripts/verify-dep-lockstep.mjs",
|
|
"verify:test-timeouts": "node scripts/verify-test-timeouts.mjs",
|
|
"validate:core": "npm run format:check:core && npm run format:check:scripts && npm run format:check:shared && npm run lint:core && npm run lint:shared",
|
|
"lint:core": "eslint \"core/**/*.{ts,tsx}\" --max-warnings 0",
|
|
"lint:shared": "eslint \"test-servers/src/**/*.{ts,tsx,mts,cts}\" vitest.shared.mts vitest.setup.shared.mts eslint.config.js --max-warnings 0",
|
|
"format:core": "prettier --write \"core/**/*.{ts,tsx}\"",
|
|
"format:check:core": "prettier --check \"core/**/*.{ts,tsx}\"",
|
|
"format:scripts": "prettier --write \"scripts/**/*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}\"",
|
|
"format:check:scripts": "prettier --check \"scripts/**/*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}\"",
|
|
"format:shared": "prettier --write \"test-servers/src/**/*.{ts,tsx,mts,cts}\" vitest.shared.mts vitest.setup.shared.mts eslint.config.js",
|
|
"format:check:shared": "prettier --check \"test-servers/src/**/*.{ts,tsx,mts,cts}\" vitest.shared.mts vitest.setup.shared.mts eslint.config.js",
|
|
"format": "npm run format:core && npm run format:scripts && npm run format:shared && cd clients/web && npm run format && cd ../cli && npm run format && cd ../tui && npm run format && cd ../launcher && npm run format",
|
|
"validate:cli": "cd clients/cli && npm run validate",
|
|
"validate:tui": "cd clients/tui && npm run validate",
|
|
"validate:web": "cd clients/web && npm run validate",
|
|
"validate:launcher": "cd clients/launcher && npm run validate",
|
|
"coverage": "npm run coverage:web && npm run coverage:cli && npm run coverage:tui && npm run coverage:launcher",
|
|
"coverage:cli": "cd clients/cli && npm run test:coverage",
|
|
"coverage:tui": "cd clients/tui && npm run test:coverage",
|
|
"coverage:web": "cd clients/web && npm run test:coverage",
|
|
"coverage:launcher": "cd clients/launcher && npm run test:coverage",
|
|
"smoke": "npm run smoke:launcher && npm run smoke:cli && npm run smoke:tui && npm run smoke:web && npm run smoke:web:chromium && npm run smoke:web:tabs",
|
|
"smoke:cli": "node scripts/smoke-cli.mjs",
|
|
"smoke:tui": "node scripts/smoke-tui.mjs",
|
|
"smoke:web": "node scripts/smoke-web.mjs",
|
|
"smoke:web:browser": "node scripts/install-smoke-browser.mjs && node scripts/smoke-web-browser.mjs",
|
|
"smoke:web:app": "node scripts/install-smoke-browser.mjs && node scripts/smoke-web-app.mjs",
|
|
"smoke:web:elicit": "node scripts/install-smoke-browser.mjs && node scripts/smoke-web-elicitation.mjs",
|
|
"smoke:web:tabs": "node scripts/install-smoke-browser.mjs chromium && node scripts/smoke-web-tabs.mjs chromium",
|
|
"smoke:web:engine": "node scripts/run-engine-smokes.mjs",
|
|
"smoke:web:chromium": "node scripts/run-engine-smokes.mjs chromium",
|
|
"smoke:web:firefox": "node scripts/run-engine-smokes.mjs firefox",
|
|
"smoke:web:webkit": "node scripts/run-engine-smokes.mjs webkit",
|
|
"smoke:launcher": "node scripts/smoke-launcher.mjs",
|
|
"pack:verify": "node scripts/install-smoke-browser.mjs chromium && node scripts/pack-and-verify.mjs",
|
|
"prepack": "npm run build",
|
|
"postinstall": "node scripts/install-clients.mjs",
|
|
"skills:eval": "node scripts/skill-eval.mjs"
|
|
},
|
|
"dependencies": {
|
|
"@hono/node-server": "^2.0.12",
|
|
"@modelcontextprotocol/client": "2.0.0",
|
|
"@modelcontextprotocol/core": "2.0.0",
|
|
"@modelcontextprotocol/ext-apps": "^2.0.0",
|
|
"@modelcontextprotocol/server": "2.0.0",
|
|
"@modelcontextprotocol/server-legacy": "2.0.0",
|
|
"@napi-rs/keyring": "^1.3.0",
|
|
"@vitejs/plugin-react": "^6.0.0",
|
|
"ajv": "^8.17.1",
|
|
"atomically": "^2.1.1",
|
|
"chokidar": "^4.0.3",
|
|
"commander": "^13.1.0",
|
|
"hono": "^4.13.7",
|
|
"ink": "^6.0.0",
|
|
"open": "^10.2.0",
|
|
"pino": "^9.14.0",
|
|
"proper-lockfile": "^4.1.2",
|
|
"react": "^19.0.0",
|
|
"undici": "^8.5.0",
|
|
"vite": "^8.1.5",
|
|
"yaml": "^2.9.0",
|
|
"zod": "^4.4.3"
|
|
},
|
|
"engines": {
|
|
"node": ">=22.19.0"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/js": "^10.0.1",
|
|
"@types/node": "^24.12.4",
|
|
"@types/proper-lockfile": "^4.1.4",
|
|
"@vitest/coverage-v8": "4.1.11",
|
|
"eslint": "^10.8.0",
|
|
"eslint-plugin-react-hooks": "^7.1.1",
|
|
"express": "^5.2.1",
|
|
"globals": "^17.7.0",
|
|
"prettier": "3.8.4",
|
|
"semver": "^7.8.5",
|
|
"typescript": "~5.9.3",
|
|
"typescript-eslint": "^8.65.0",
|
|
"vitest": "4.1.11"
|
|
}
|
|
}
|