Decouple build configuration & Update command path resolution logic (#47)

* chore: bump version to 0.1.6 and disable composite in tsconfig files

* refactor: decouple build configuration from source compilation and update command path resolution logic

* fix: improve path resolution, directory traversal security, and dynamic stdout messaging in mkdir handler

* test: update mkdir test expectations to use double quotes for path arguments

* feat: add package build steps to release workflow prior to publication

* refactor: reorder build steps and consolidate WASM sandbox generation in release workflow

* chore: add tsup build configuration for wasm assets to mcp

* feat: add shebang to index.ts to enable direct script execution

* refactor: move internal dependencies to dependencies and update tsup configuration to exclude internal packages from bundling

* chore: update pnpm lockfile dependencies

Author: mavdol

.github/workflows/release.yml

@@ -41,8 +41,13 @@ jobs:
       - name: Install dependencies
         run: pnpm install
 
-      - name: Build WASM sandboxes
-        run: pnpm prebuild-wasm
+      - name: Build packages
+        run: |
+          pnpm --filter @capsule-run/bash-types build
+          pnpm --filter @capsule-run/bash build
+          pnpm --filter @capsule-run/bash-wasm build
+          pnpm prebuild-wasm
+          pnpm --filter @capsule-run/bash-mcp build
 
       - name: Publish packages in dependency order
         env:

package.json

@@ -1,6 +1,6 @@
 {
   "name": "capsulerun-bash-monorepo",
-  "version": "0.1.5",
+  "version": "0.1.11",
   "private": true,
   "description": "Sandboxed bash for untrusted command execution",
   "license": "Apache-2.0",

packages/bash-mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capsule-run/bash-mcp",
-  "version": "0.1.5",
+  "version": "0.1.11",
   "description": "MCP server exposing sandboxed bash for untrusted command execution",
   "type": "module",
   "bin": {
@@ -12,7 +12,7 @@
   "scripts": {
     "start": "node --conditions source --import tsx/esm src/index.ts",
     "dev": "tsx --conditions source watch src/index.ts",
-    "build": "tsup src/index.ts --format esm"
+    "build": "tsup"
   },
   "homepage": "https://github.com/capsulerun/bash/tree/main/packages/bash-mcp",
   "repository": {
@@ -24,13 +24,13 @@
   "packageManager": "pnpm@10.21.0",
   "devDependencies": {
     "tsup": "^8.0.0",
-    "tsx": "^4.0.0"
+    "tsx": "^4.0.0",
+    "@modelcontextprotocol/sdk": "^1.10.2",
+    "zod": "^3.25.0",
+    "@capsule-run/bash-types": "workspace:*"
   },
   "dependencies": {
     "@capsule-run/bash": "workspace:*",
-    "@capsule-run/bash-types": "workspace:*",
-    "@capsule-run/bash-wasm": "workspace:*",
-    "@modelcontextprotocol/sdk": "^1.10.2",
-    "zod": "^3.25.0"
+    "@capsule-run/bash-wasm": "workspace:*"
   }
 }

packages/bash-mcp/src/index.ts

@@ -1,3 +1,4 @@
+#!/usr/bin/env node
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { z } from 'zod';
@@ -23,7 +24,7 @@ function getSession(sessionId: string): Bash {
 const server = new McpServer(
   {
     name: '@capsule-run/bash-mcp',
-    version: '0.1.5',
+    version: '0.1.11',
   },
   {
     instructions: `

packages/bash-mcp/tsup.config.ts

@@ -0,0 +1,11 @@
+import { defineConfig } from 'tsup';
+
+export default defineConfig({
+  entry: ['src/index.ts'],
+  format: ['esm'],
+  dts: false,
+  clean: true,
+  treeshake: true,
+  noExternal: [/^(?!@capsule-run\/).*/],
+  tsconfig: 'tsconfig.json',
+});

packages/bash-types/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capsule-run/bash-types",
-  "version": "0.1.5",
+  "version": "0.1.11",
   "description": "",
   "type": "module",
   "homepage": "https://github.com/capsulerun/bash",
@@ -25,7 +25,7 @@
     }
   },
   "scripts": {
-    "build": "tsc --project tsconfig.json",
+    "build": "tsc --project tsconfig.build.json",
     "test": "echo \"Error: no test specified\" && exit 1"
   },
   "keywords": [],

packages/bash-types/tsconfig.build.json

@@ -0,0 +1,8 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "composite": false,
+    "declaration": true,
+    "emitDeclarationOnly": true
+  }
+}

packages/bash-types/tsconfig.json

@@ -2,9 +2,7 @@
   "extends": "../../tsconfig.json",
   "compilerOptions": {
     "outDir": "dist",
-    "rootDir": "src",
-    "declaration": true,
-    "emitDeclarationOnly": true
+    "rootDir": "src"
   },
   "include": ["src/**/*"]
 }

packages/bash-wasm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capsule-run/bash-wasm",
-  "version": "0.1.5",
+  "version": "0.1.11",
   "description": "Sandboxed bash for untrusted command execution",
   "type": "module",
   "homepage": "https://github.com/capsulerun/bash",
@@ -35,7 +35,7 @@
     "dist"
   ],
   "scripts": {
-    "build": "tsup && tsc --project tsconfig.json",
+    "build": "tsup && tsc --project tsconfig.build.json",
     "pretest": "pip install -r sandboxes/python/requirements.txt -q",
     "test": "vitest run"
   },

packages/bash-wasm/tsconfig.build.json

@@ -0,0 +1,8 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "composite": false,
+    "declaration": true,
+    "emitDeclarationOnly": true
+  }
+}