gamecode-mcp2 0.7.0

Minimal, auditable Model Context Protocol server for safe LLM-to-system interaction
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100

use gamecode_mcp2::tools::ToolManager;
use serde_json::json;
use std::collections::HashMap;
use std::path::PathBuf;

#[tokio::test]
async fn test_path_validation_rejection() {
    let mut tool_manager = ToolManager::new();
    let path = PathBuf::from("../examples/tools/secured.yaml");
    tool_manager.load_from_file(&path).await.unwrap();

    // Try path traversal - should be rejected
    let args = json!({
        "file": "../../../etc/passwd"
    });

    let result = tool_manager.execute_tool("safe_file_reader", args, &HashMap::new()).await;
    assert!(result.is_err());
    assert!(result
        .unwrap_err()
        .to_string()
        .contains("Path traversal detected"));
}

#[tokio::test]
async fn test_absolute_path_rejection() {
    let mut tool_manager = ToolManager::new();
    let path = PathBuf::from("../examples/tools/secured.yaml");
    tool_manager.load_from_file(&path).await.unwrap();

    // Try absolute path - should be rejected
    let args = json!({
        "file": "/etc/passwd"
    });

    let result = tool_manager.execute_tool("safe_file_reader", args, &HashMap::new()).await;
    assert!(result.is_err());
    assert!(result
        .unwrap_err()
        .to_string()
        .contains("Absolute paths not allowed"));
}

#[tokio::test]
async fn test_validation_allows_safe_paths() {
    let mut tool_manager = ToolManager::new();
    let path = PathBuf::from("../examples/tools/secured.yaml");
    tool_manager.load_from_file(&path).await.unwrap();

    // Safe relative path should work
    let args = json!({
        "file": "README.md"
    });

    let result = tool_manager.execute_tool("safe_file_reader", args, &HashMap::new()).await;
    // This might fail if README.md doesn't exist, but shouldn't fail validation
    if result.is_err() {
        let err = result.unwrap_err().to_string();
        assert!(!err.contains("Path traversal"));
        assert!(!err.contains("Absolute paths"));
    }
}

#[tokio::test]
async fn test_unrestricted_tool_works() {
    let mut tool_manager = ToolManager::new();
    let path = PathBuf::from("../examples/tools/secured.yaml");
    tool_manager.load_from_file(&path).await.unwrap();

    // Unrestricted echo should accept anything
    let args = json!({
        "message": "../../../etc/passwd; cat /etc/shadow"
    });

    let result = tool_manager.execute_tool("unrestricted_echo", args, &HashMap::new()).await;
    assert!(result.is_ok());

    // But the content should be literal (no execution)
    let output = result.unwrap();
    assert!(output["output"]
        .as_str()
        .unwrap()
        .contains("../../../etc/passwd; cat /etc/shadow"));
}

#[tokio::test]
async fn test_null_byte_rejection() {
    let mut tool_manager = ToolManager::new();
    let path = PathBuf::from("../examples/tools/secured.yaml");
    tool_manager.load_from_file(&path).await.unwrap();

    // Try null byte injection
    let args = json!({
        "file": "file.txt\0.bypass"
    });

    let result = tool_manager.execute_tool("safe_file_reader", args, &HashMap::new()).await;
    assert!(result.is_err());
    assert!(result.unwrap_err().to_string().contains("null byte"));
}