registry / drafted / 1.14.8

drafted@1.14.8

⚠ Under review

Drafted — visual thinking surface for humans and AI agents. Renders HTML, markdown, images, and code as frames on a zoomable canvas, with MCP tools for AI agents and real-time sync for humans.

Static Scan Results

scanned 1h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 12 file(s), 374 KB of source, external domains: drafted.live, fonts.googleapis.com, fonts.gstatic.com

Source & flagged code

7 flagged

mcp/server.mjsView file

Lines 1-56javascript

1#!/usr/bin/env node

3/**

4 * Drafted MCP Server

5 * Filesystem-style tools for agents to read/write/edit frames on the canvas.

6 * Calls the Drafted HTTP API directly (no CLI subprocess).

7 */

9import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';

10import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';

11import { execFile } from 'child_process';

12import { createHash } from 'node:crypto';

High

Child Process

Package source references child process execution.

mcp/server.mjsView on unpkg · L10

13import { readFileSync, existsSync, realpathSync, writeFileSync, mkdirSync, unlinkSync, appendFileSync, readdirSync, statSync } from 'fs';

14import { join, dirname, basename, extname, resolve } from 'path';

15import { homedir, platform, release as osRelease, arch as osArch } from 'os';

16import { fileURLToPath } from 'url';

17import { AsyncLocalStorage } from 'node:async_hooks';

18import { z } from 'zod';

19import { registerAppResource, RESOURCE_MIME_TYPE } from '@modelcontextprotocol/ext-apps/server';

20import WebSocket from 'ws';

21import { LAYERS } from '../src/shared/constants.mjs';

22import { emptyExcalidrawScene, stringifyExcalidrawScene } from '../src/shared/excalidraw.mjs';

23import { formatOkfLogEntry, appendOkfLogEntry } from '../src/shared/okf-log.mjs';

24import { createGateState, markSearched, g1Block, g2Block, g3Block, selectWithinBudget, wouldExceedBudget, budgetError, formatWikiIndex, PROJECT_CONTEXT_BUDGET_CHARS } from './gates.mjs';

25import { loadPersistedProject, savePersistedProject } from './active-project-store.mjs';

27// Frame actions that mutate content — gated by G1 (wiki search before editing).

28// Read-style actions (read, search, versions, get_*/read_*) are exempt.

29const G1_MUTATING_FRAME_ACTIONS = new Set([

30 'write', 'write_excalidraw', 'edit', 'mv', 'anchor', 'restore_version',

31 'write_sheet_values', 'append_sheet_rows', 'clear_sheet_range', 'update_sheet',

32 'write_doc_content', 'append_doc_content', 'clear_doc_content', 'update_doc',

33 'write_slide_content', 'append_slides', 'clear_slides', 'update_slide',

34]);

35const { UMAMI_EVENTS, trackUmamiEvent } = await (async () => {

36 try {

37 return await import('../server/lib/umami.mjs');

38 } catch {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

mcp/server.mjsView on unpkg · L36

39 return {

40 UMAMI_EVENTS: Object.freeze({

41 MCP_CONNECTED: 'mcp_connected',

42 MCP_TOOL_CALLED: 'mcp_tool_called',

43 DRAFTED_MCP_REQUEST: 'drafted_mcp_request',

44 DRAFTED_MCP_ERROR: 'drafted_mcp_error',

45 }),

46 trackUmamiEvent: () => {},

47 };

48 }

49})();

51const __dirname = dirname(fileURLToPath(import.meta.url));

53// Read the npm package version once so the MCP server, get_org, and the

54// `drafted://info` resource all report the same number — and it stays in

55// sync with package.json automatically (no hardcoded duplicate).

56const PACKAGE_VERSION = (() => {

Lines 2386-2426javascript

2386 action: 'update_mcp',

2387 started: false,

2388 updateSupported: false,

2389 mode,

2390 currentVersion: updateMetadata?.currentVersion || PACKAGE_VERSION,

2391 latestVersion: updateMetadata?.latestVersion || null,

2392 updateAvailable

cli/drafted.mjsView file

Lines 144-184javascript

144function readConfigServer() {

145 try {

146 if (existsSync(DEFAULT_CONFIG_FILE)) {

147 const cfg = JSON.parse(readFileSync(DEFAULT_CONFIG_FILE, 'utf8'));

148

install-mcp.shView file

•path = install-mcp.sh kind = build_helper sizeBytes = 53879 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install-mcp.shView on unpkg

Source & flagged code

7 flagged · loading source

mcp/server.mjsView file

10import { StdioServerTransport } from '@[redacted].js'; L11: import { execFile } from 'child_process'; L12: import { createHash } from 'node:crypto';

High

Child Process

Package source references child process execution.

mcp/server.mjsView on unpkg · L10

2406const manualCommand = platform() === 'win32' L2407: ? `$tmp = Join-Path $env:TEMP "drafted-install.ps1"; Invoke-WebRequest -UseBasicParsing "${server}/install.ps1" -OutFile $tmp; powershell -NoProfile -ExecutionPolicy Bypass -File $... L2408: : `tmp=$(mktemp); curl -fsSL ${server}/install.sh -o "$tmp" && bash "$tmp"`;

High

Shell

Package source references shell execution.

mcp/server.mjsView on unpkg · L2406

36try { L37: return await import('../server/lib/umami.mjs'); L38: } catch {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

mcp/server.mjsView on unpkg · L36

cli/drafted.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = drafted@1.14.2 matchedIdentity = npm:ZHJhZnRlZA:1.14.2 similarity = 0.800 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

cli/drafted.mjsView on unpkg

164function getServerUrl() { L165: if (process.env.DRAFTED_SERVER) { L166: return process.env.DRAFTED_SERVER.replace(/\/$/, ''); ... L171: if (fromConfig) return String(fromConfig).replace(/\/$/, ''); L172: return `http://localhost:${process.env.DRAFTED_PORT || DEFAULT_PORT}`; L173: } ... L177: if (platform() === 'win32') { L178: const script = `$tmp = Join-Path $env:TEMP "drafted-install.ps1"; Invoke-WebRequest -UseBasicParsing "${server}/install.ps1" -OutFile $tmp; powershell -NoProfile -ExecutionPolicy B... L179: return {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

cli/drafted.mjsView on unpkg · L164

590const instrumentPath = join(__dirname, '../server/instrument.mjs'); L591: // A global `npm install -g drafted` only ships the CLI/MCP client (see L592: // package.json "files") — the Express server and its src/db, src/auth, ... L604: const outLog = openSync(join(DEFAULT_STATE_DIR, 'server.log'), 'w'); L605: const child = spawn(tsxPath, ['--import', instrumentPath, serverPath], { L606: detached: true,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

cli/drafted.mjsView on unpkg · L590

install-mcp.shView file

•path = install-mcp.sh kind = build_helper sizeBytes = 53879 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install-mcp.shView on unpkg

Findings

1 Critical4 High5 Medium5 Low

CriticalPrevious Version Dangerous Deltacli/drafted.mjs

HighChild Processmcp/server.mjs

HighShellmcp/server.mjs

HighSame File Env Network Executioncli/drafted.mjs

HighRuntime Package Installcli/drafted.mjs

MediumDynamic Requiremcp/server.mjs

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperinstall-mcp.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

mcp/server.mjsView file

Lines 1-56javascript

1#!/usr/bin/env node

3/**

4 * Drafted MCP Server

5 * Filesystem-style tools for agents to read/write/edit frames on the canvas.

6 * Calls the Drafted HTTP API directly (no CLI subprocess).

7 */

9import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';

10import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';

11import { execFile } from 'child_process';

12import { createHash } from 'node:crypto';

High

Child Process

Package source references child process execution.

mcp/server.mjsView on unpkg · L10

13import { readFileSync, existsSync, realpathSync, writeFileSync, mkdirSync, unlinkSync, appendFileSync, readdirSync, statSync } from 'fs';

14import { join, dirname, basename, extname, resolve } from 'path';

15import { homedir, platform, release as osRelease, arch as osArch } from 'os';

16import { fileURLToPath } from 'url';

17import { AsyncLocalStorage } from 'node:async_hooks';

18import { z } from 'zod';

19import { registerAppResource, RESOURCE_MIME_TYPE } from '@modelcontextprotocol/ext-apps/server';

20import WebSocket from 'ws';

21import { LAYERS } from '../src/shared/constants.mjs';

22import { emptyExcalidrawScene, stringifyExcalidrawScene } from '../src/shared/excalidraw.mjs';

23import { formatOkfLogEntry, appendOkfLogEntry } from '../src/shared/okf-log.mjs';

24import { createGateState, markSearched, g1Block, g2Block, g3Block, selectWithinBudget, wouldExceedBudget, budgetError, formatWikiIndex, PROJECT_CONTEXT_BUDGET_CHARS } from './gates.mjs';

25import { loadPersistedProject, savePersistedProject } from './active-project-store.mjs';

27// Frame actions that mutate content — gated by G1 (wiki search before editing).

28// Read-style actions (read, search, versions, get_*/read_*) are exempt.

29const G1_MUTATING_FRAME_ACTIONS = new Set([

30 'write', 'write_excalidraw', 'edit', 'mv', 'anchor', 'restore_version',

31 'write_sheet_values', 'append_sheet_rows', 'clear_sheet_range', 'update_sheet',

32 'write_doc_content', 'append_doc_content', 'clear_doc_content', 'update_doc',

33 'write_slide_content', 'append_slides', 'clear_slides', 'update_slide',

34]);

35const { UMAMI_EVENTS, trackUmamiEvent } = await (async () => {

36 try {

37 return await import('../server/lib/umami.mjs');

38 } catch {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

mcp/server.mjsView on unpkg · L36

39 return {

40 UMAMI_EVENTS: Object.freeze({

41 MCP_CONNECTED: 'mcp_connected',

42 MCP_TOOL_CALLED: 'mcp_tool_called',

43 DRAFTED_MCP_REQUEST: 'drafted_mcp_request',

44 DRAFTED_MCP_ERROR: 'drafted_mcp_error',

45 }),

46 trackUmamiEvent: () => {},

47 };

48 }

49})();

51const __dirname = dirname(fileURLToPath(import.meta.url));

53// Read the npm package version once so the MCP server, get_org, and the

54// `drafted://info` resource all report the same number — and it stays in

55// sync with package.json automatically (no hardcoded duplicate).

56const PACKAGE_VERSION = (() => {

Lines 2386-2426javascript

2386 action: 'update_mcp',

2387 started: false,

2388 updateSupported: false,

2389 mode,

2390 currentVersion: updateMetadata?.currentVersion || PACKAGE_VERSION,

2391 latestVersion: updateMetadata?.latestVersion || null,

2392 updateAvailable

cli/drafted.mjsView file

Lines 144-184javascript

144function readConfigServer() {

145 try {

146 if (existsSync(DEFAULT_CONFIG_FILE)) {

147 const cfg = JSON.parse(readFileSync(DEFAULT_CONFIG_FILE, 'utf8'));

148

install-mcp.shView file

•path = install-mcp.sh kind = build_helper sizeBytes = 53879 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install-mcp.shView on unpkg

Lines 570-610javascript

570program

571 .command('start')

572 .description('Start Drafted server')

573 .option('--port <port>', 'Server port', DEFAULT_PORT.toString())

574 .action(async (options) => {

575 if (isServerRunning()) {

576 jsonOut(false, 'start', 'Server already running');

577 console.log('✅ Drafted server is already running');

578 console.log(` URL: ${getServerUrl()}`);

579 return;

580 }

581

582 // Auto-discover any unregistered projects

583 discoverProjects();

584

585 const port = parseInt(options.port);

586

587 // Start server in background

588 const serverPath = join(__dirname, '../server/server.mjs');

589 const tsxPath = join(__dirname, '../node_modules/.bin/tsx');

590 const instrumentPath = join(__dirname, '../server/instrument.mjs');

591 // A global `npm install -g drafted` only ships the CLI/MCP client (see

592 // package.json "files") — the Express server and its src/db, src/auth,

593 // src/middleware sources, plus the tsx devDependency needed to run them,

594 // are not part of that install. This only works from a full git checkout.

595 if (!existsSync(tsxPath) || !existsSync(serverPath)) {

596 console.error('Error: cannot start the server from this installation.');

597 console.error('This looks like a global `npm install -g drafted` install, which ships only the CLI/MCP client, not the full server.');

598 console.error('To bring the local server back up, either:');

599 console.error(' - reopen the Drafted desktop app, or');

600 console.error(' - run from a full source checkout: git clone the drafted repo, then `npm install && npm run dev`');

601 process.exit(1);

602 }

603 const { openSync } = await import('fs');

604 const outLog = openSync(join(DEFAULT_STATE_DIR, 'server.log'), 'w');

605 const child = spawn(tsxPath, ['--import', instrumentPath, serverPath], {

606 detached: true,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

cli/drafted.mjsView on unpkg · L590

607 stdio: ['ignore', outLog, outLog],

608 env: {

609 ...process.env,

610 DRAFTED_PORT: port.toString()