Skip to content

Conversation

@viratatwebflow
Copy link
Collaborator

No description provided.

Added TypeScript types for text and image content, along with a unified ToolResponse type. Introduced utility functions for creating text and image content, and for formatting tool responses. This improves type safety and clarity in handling different response formats.
Updated the CMS tool to enhance TypeScript type definitions for function arguments and responses, ensuring better clarity and maintainability. Consolidated import statements and improved formatting for better readability. This refactor aligns with recent updates across other tools for a unified codebase.
pulling latest changes from main
…nsistency

- Updated dependencies in package.json and package-lock.json, including @modelcontextprotocol/sdk to version 1.21.1 and webflow-api to version 3.2.1.
- Refactored various tools to use registerTool method for better consistency across the codebase.
- Enhanced input schemas and descriptions for several tools, including data scripts, pages, and styles, to improve clarity and maintainability.
- Removed deprecated or unnecessary code segments to streamline functionality.
… tools registration

- Updated the @modelcontextprotocol/sdk dependency in package.json to version 1.23.0.
- Added registration for new tools: registerCommentsTools and registerEnterpriseTools in mcp.ts.
- Exported new tools from index.ts for better modularity.
- Enhanced the rules.ts file with additional guidance on localizations.
- Introduced new script management functions in scripts.ts for handling custom scripts on pages.
- Removed the --clean flag from the build script for a more straightforward build process.
- Maintained the watch functionality in the build:watch script for continuous development.
chore: update @modelcontextprotocol/sdk to version 1.23.0 and enhance…
- Introduced the element_snapshot_tool to capture visual snapshots of elements, sections, or components.
- Enhanced the rules documentation with usage instructions for the new tool, emphasizing its utility for debugging and visual validation.
- Implemented RPC call handling for the snapshot tool, returning PNG images for specified elements.
- Updated the image data handling in the registerDEElementTools function to remove the "data:image/png;base64," prefix, ensuring cleaner data processing for PNG images.
@viratatwebflow viratatwebflow requested a review from a team as a code owner January 16, 2026 17:51
@viratatwebflow viratatwebflow requested review from memo-pineda and removed request for a team January 16, 2026 17:51
- Added openWorldHint to the annotations in the registerCommentsTools function for improved user guidance.
- Updated zod import to version 3 in enterprise.ts for consistency with other schema files.
@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​modelcontextprotocol/​sdk@​1.24.0 ⏵ 1.21.199 +179 -510099 +1100
Updatednpm/​webflow-api@​3.1.1 ⏵ 3.2.199 +1100100 +188100

View full report

@socket-security
Copy link

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
High CVE: Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default in npm @modelcontextprotocol/sdk

CVE: GHSA-w48q-cv73-mx4w Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default (HIGH)

Affected versions: < 1.24.0

Patched version: 1.24.0

From: package-lock.jsonnpm/@modelcontextprotocol/[email protected]

ℹ Read more on: This package | This alert | What is a CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@modelcontextprotocol/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@viratatwebflow viratatwebflow removed the request for review from memo-pineda January 16, 2026 19:29
@viratatwebflow viratatwebflow merged commit 4b192e6 into main Jan 16, 2026
6 checks passed
@viratatwebflow viratatwebflow deleted the sai branch January 16, 2026 19:30
@viratatwebflow viratatwebflow restored the sai branch January 16, 2026 19:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants