fix(mcp): prevent security bypass in run_script tool (issue #835)

packages/corsair/index.ts

@@ -6,6 +6,7 @@ export { CorsairClientError, createCorsairClient } from './client';
 export type { ResolveConnectLinkResult } from './core';
 export {
 	AuthMissingError,
+	assertReadonlyAllowed,
 	createCorsair,
 	PermissionRequiredError,
 	ReadonlyForbiddenError,

packages/mcp/__mocks__/corsair.ts

@@ -0,0 +1,28 @@
+let isReadonlyScopeActive = false;
+
+export const runReadonly = async (fn: () => any) => {
+	const prev = isReadonlyScopeActive;
+	isReadonlyScopeActive = true;
+	try {
+		return await fn();
+	} finally {
+		isReadonlyScopeActive = prev;
+	}
+};
+
+export class AuthMissingError extends Error {}
+export class PermissionRequiredError extends Error {}
+export class ReadonlyForbiddenError extends Error {
+	constructor() {
+		super('ReadonlyForbiddenError');
+		this.name = 'ReadonlyForbiddenError';
+	}
+}
+
+export const assertReadonlyAllowed = (path: string, type: string) => {
+	if (isReadonlyScopeActive) {
+		throw new ReadonlyForbiddenError();
+	}
+};
+
+export const listOperations = (_corsair: any) => [];

packages/mcp/package.json

@@ -19,7 +19,8 @@
   "scripts": {
     "build": "tsup && tsc -p tsconfig.build.json",
     "build:watch": "tsup --watch",
-    "typecheck": "tsc --noEmit"
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
   },
   "dependencies": {
     "@ai-sdk/mcp": "^1.0.0",
@@ -57,7 +58,8 @@
     "@types/express": "^4.17.21",
     "@types/node": "^22.0.0",
     "tsup": "^8.0.1",
-    "typescript": "^5.8.0"
+    "typescript": "^5.8.0",
+    "vitest": "^4.1.11"
   },
   "files": [
     "dist"