fix(tests): Address skipped/failing tests for copyItems and searchFiles

Author: shtse8

.eslintcache

@@ -11,4 +11,4 @@ issuehunt: # Replace with a single IssueHunt username
 otechie: # Replace with a single Otechie username
 lfx_crowdfunding: # Replace with a single LFX Crowdfunding project-name e.g., cloud-foundry
 custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2']
-buy_me_a_coffee: shtse8
+buy_me_a_coffee: shtse8

.github/FUNDING.yml

@@ -0,0 +1,26 @@
+# .github/dependabot.yml
+version: 2
+updates:
+  # Dependency updates for npm
+  - package-ecosystem: 'npm'
+    directory: '/' # Location of package manifests
+    schedule:
+      interval: 'weekly' # Check for updates weekly
+    open-pull-requests-limit: 10 # Limit open PRs
+    versioning-strategy: 'auto' # Use default strategy
+    commit-message:
+      prefix: 'chore' # Use 'chore' for dependency updates
+      prefix-development: 'chore(dev)' # Use 'chore(dev)' for devDependencies
+      include: 'scope'
+    rebase-strategy: 'auto' # Automatically rebase PRs
+
+  # GitHub Actions updates
+  - package-ecosystem: 'github-actions'
+    directory: '/' # Location of workflow files
+    schedule:
+      interval: 'weekly' # Check for updates weekly
+    open-pull-requests-limit: 5 # Limit open PRs for actions
+    commit-message:
+      prefix: 'chore(ci)' # Use 'chore(ci)' for action updates
+      include: 'scope'
+    rebase-strategy: 'auto'

.github/dependabot.yml

@@ -6,22 +6,68 @@ on:
       - main # Trigger on push to main branch
     tags:
       - 'v*.*.*' # Trigger on push of version tags (e.g., v0.5.5)
+  pull_request: # Added PR trigger
+    branches:
+      - main
+
+# Prevent concurrent runs for the same PR or branch
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
+  validate: # New validation job
+    name: Validate Code
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4.1.7 # Specific version
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4.0.3 # Specific version
+        with:
+          node-version: '20'
+          cache: 'npm' # Added caching
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Check formatting
+        run: npm run check-format
+
+      - name: Lint code
+        run: npm run lint
+
+      - name: Perform type checking
+        run: npm run typecheck
+
+      - name: Run tests with coverage
+        run: npm run test:cov
+
+      - name: Upload coverage to Coveralls
+        uses: coverallsapp/github-action@v2.3.0 # Specific version
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          path-to-lcov: ./coverage/lcov.info # Verify path exists after test:cov
+          flag-name: run-${{ matrix.node-version || 'node-20' }} # Use matrix or default
+          parallel: false # Set to true if using parallel matrix later
+
   build:
+    needs: validate # Depends on validation passing
     runs-on: ubuntu-latest
     outputs:
       version: ${{ steps.get_version.outputs.version }}
       artifact_name: build-artifacts-archive # Consistent name for upload/download
       archive_filename: ${{ steps.archive_build.outputs.archive_name }} # Actual .tar.gz filename
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.1.7 # Specific version
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v4.0.3 # Specific version
         with:
           node-version: '20'
+          cache: 'npm' # Added caching
 
       - name: Install dependencies
         run: npm ci
@@ -31,7 +77,6 @@ jobs:
 
       - name: Get package version
         id: get_version
-        # Use tag name if available, otherwise use package.json version
         run: |
           VERSION=""
           if [[ "${{ github.ref_type }}" == "tag" && "${{ github.ref }}" == refs/tags/v* ]]; then
@@ -46,23 +91,27 @@ jobs:
         if: startsWith(github.ref, 'refs/tags/v') # Condition: Only run for tags
         id: archive_build
         run: |
-          tar -czf build-artifacts.tar.gz build package.json package-lock.json README.md CHANGELOG.md Dockerfile .dockerignore
+          # Ensure scripts directory is included if postbuild.js is needed
+          tar -czf build-artifacts.tar.gz build package.json package-lock.json README.md CHANGELOG.md LICENSE Dockerfile .dockerignore scripts/postbuild.js
           echo "archive_name=build-artifacts.tar.gz" >> $GITHUB_OUTPUT
 
       - name: Upload build artifacts (only on tag push)
         if: startsWith(github.ref, 'refs/tags/v') # Condition: Only run for tags
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v4.3.4 # Specific version
         with:
           name: build-artifacts-archive # Use consistent name
           path: ${{ steps.archive_build.outputs.archive_name }}
 
   publish-npm:
-    needs: build
+    needs: [validate, build] # Depends on validate and build
     runs-on: ubuntu-latest
     if: startsWith(github.ref, 'refs/tags/v') # Condition: Only run for tags
+    permissions: # Added permissions for trusted publishing (recommended)
+      contents: read
+      id-token: write
     steps:
       - name: Download build artifacts archive
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v4.1.8 # Specific version
         with:
           name: ${{ needs.build.outputs.artifact_name }} # Use consistent artifact name
           path: .
@@ -71,23 +120,31 @@ jobs:
         run: tar -xzf build-artifacts.tar.gz # Use the correct archive filename
 
       - name: Set up Node.js for npm publish
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v4.0.3 # Specific version
         with:
           node-version: '20'
           registry-url: 'https://registry.npmjs.org/'
+          cache: 'npm' # Added caching
+
+      # Install only production dependencies before publishing (optional but good practice)
+      # - name: Install production dependencies
+      #   run: npm ci --omit=dev
 
-      - name: Publish to npm
-        run: npm publish --access public
+      - name: Publish to npm with provenance
+        run: npm publish --access public --provenance # Added provenance
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} # Still needed for non-provenance or fallback
 
   publish-docker:
-    needs: build
+    needs: [validate, build] # Depends on validate and build
     runs-on: ubuntu-latest
     if: startsWith(github.ref, 'refs/tags/v') # Condition: Only run for tags
+    permissions: # Added permissions for docker login
+      contents: read
+      packages: write
     steps:
       - name: Download build artifacts archive
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v4.1.8 # Specific version
         with:
           name: ${{ needs.build.outputs.artifact_name }} # Use consistent artifact name
           path: .
@@ -102,31 +159,30 @@ jobs:
         run: ls -la
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v3.2.0 # Specific version
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v3.5.0 # Specific version
 
       - name: Log in to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v3.2.0 # Specific version
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v5.5.1 # Specific version
         with:
           images: sylphlab/filesystem-mcp
-          # Use version from the build job output (which is derived from the tag)
           tags: |
             type=semver,pattern={{version}},value=${{ needs.build.outputs.version }}
             type=semver,pattern={{major}}.{{minor}},value=${{ needs.build.outputs.version }}
             type=sha,prefix=,suffix=,event=tag
-            type=raw,value=latest
+            type=raw,value=latest,enable=${{ github.ref_type == 'tag' }} # Only tag latest on actual tag pushes
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v6.5.0 # Specific version
         with:
           context: .
           push: true
@@ -136,15 +192,14 @@ jobs:
           cache-to: type=gha,mode=max
 
   create-release:
-    needs: [build, publish-npm, publish-docker] # Depend on build and both publish jobs
+    needs: [validate, build, publish-npm, publish-docker] # Depend on validate, build and both publish jobs
     runs-on: ubuntu-latest
     if: startsWith(github.ref, 'refs/tags/v') # Condition: Only run for tags
     permissions:
-      contents: write
+      contents: write # Keep write permission
     steps:
-      # No need to checkout repo again if CHANGELOG is in artifact
       - name: Download build artifacts archive
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v4.1.8 # Specific version
         with:
           name: ${{ needs.build.outputs.artifact_name }} # Use consistent artifact name
           path: .
@@ -153,11 +208,11 @@ jobs:
         run: tar -xzf build-artifacts.tar.gz # Use the correct archive filename
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v2.0.6 # Specific version
         with:
           tag_name: ${{ github.ref_name }}
           name: Release ${{ github.ref_name }}
           body_path: CHANGELOG.md # Assumes CHANGELOG.md is in the artifact
-          # files: ${{ needs.build.outputs.archive_filename }} # Attach the actual archive file
+          # files: ${{ needs.build.outputs.archive_filename }} # Optionally attach the archive
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/publish.yml

@@ -1,4 +1,27 @@
 node_modules/
 build/
 *.log
-.env*
+.env*
+
+# Test Coverage
+coverage/
+
+# Build output
+dist/
+
+# IDE files
+.vscode/
+.idea/
+
+# OS generated files
+.DS_Store
+Thumbs.db
+
+# NPM debug logs
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# VitePress cache
+.vitepress/cache
+.vitepress/dist

.gitignore

@@ -0,0 +1,10 @@
+// .prettierrc.cjs
+module.exports = {
+  semi: true,
+  trailingComma: 'all',
+  singleQuote: true,
+  printWidth: 80,
+  tabWidth: 2,
+  endOfLine: 'lf',
+  arrowParens: 'always',
+};

.prettierrc.cjs

@@ -8,56 +8,61 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [0.5.9] - 2025-06-04
 
 ### Changed
+
 - Updated project ownership to `sylphlab`.
 - Updated package name to `@sylphlab/filesystem-mcp`.
 - Updated `README.md`, `LICENSE`, and GitHub Actions workflow (`publish.yml`) to reflect new ownership and package name.
 
-
 ## [0.5.8] - 2025-04-05
 
 ### Fixed
-- Removed `build` directory exclusion from `.dockerignore` to fix Docker build context error where `COPY build ./build` failed.
 
+- Removed `build` directory exclusion from `.dockerignore` to fix Docker build context error where `COPY build ./build` failed.
 
 ## [0.5.7] - 2025-04-05
 
 ### Fixed
-- Corrected artifact archiving in CI/CD workflow (`.github/workflows/publish.yml`) to include the `build` directory itself, resolving Docker build context errors (5f5c7c4).
 
+- Corrected artifact archiving in CI/CD workflow (`.github/workflows/publish.yml`) to include the `build` directory itself, resolving Docker build context errors (5f5c7c4).
 
 ## [0.5.6] - 2025-05-04
 
 ### Fixed
+
 - Corrected CI/CD artifact handling (`package-lock.json` inclusion, extraction paths) in `publish.yml` to ensure successful npm and Docker publishing (4372afa).
 - Simplified CI/CD structure back to a single workflow (`publish.yml`) with conditional artifact upload, removing `ci.yml` and `build-reusable.yml` (38029ca).
 
 ### Changed
-- Bumped version to 0.5.6 due to previous failed release attempt of 0.5.5.
 
+- Bumped version to 0.5.6 due to previous failed release attempt of 0.5.5.
 
 ## [0.5.5] - 2025-05-04
 
 ### Changed
-- Refined GitHub Actions workflow (`publish.yml`) triggers: publishing jobs (`publish-npm`, `publish-docker`, `create-release`) now run *only* on version tag pushes (`v*.*.*`), not on pushes to `main` (9c0df99).
+
+- Refined GitHub Actions workflow (`publish.yml`) triggers: publishing jobs (`publish-npm`, `publish-docker`, `create-release`) now run _only_ on version tag pushes (`v*.*.*`), not on pushes to `main` (9c0df99).
 
 ### Fixed
-- Corrected artifact extraction path in the `publish-docker` CI/CD job to resolve "Dockerfile not found" error (708d3f5).
 
+- Corrected artifact extraction path in the `publish-docker` CI/CD job to resolve "Dockerfile not found" error (708d3f5).
 
 ## [0.5.3] - 2025-05-04
 
 ### Added
+
 - Enhanced path error reporting in `resolvePath` to include original path, resolved path, and project root for better debugging context (3810f14).
 - Created `.clinerules` file to document project-specific patterns and preferences, starting with tool usage recommendations (3810f14).
 - Enhanced `ENOENT` (File not found) error reporting in `readContent` handler to include resolved path, relative path, and project root (8b82e1c).
 
 ### Changed
+
 - Updated `write_content` tool description to recommend using edit tools (`edit_file`, `replace_content`) for modifications (5521102).
 - Updated `edit_file` tool description to reinforce its recommendation for modifications (5e44ef2).
 - Refactored GitHub Actions workflow (`publish.yml`) to parallelize npm and Docker publishing using separate jobs dependent on a shared build job, improving release speed (3b51c2b).
 - Bumped version to 0.5.3.
 
 ### Fixed
+
 - Corrected TypeScript errors in `readContent.ts` related to variable scope and imports during error reporting enhancement (8b82e1c).
 
-<!-- Previous versions can be added below -->
+<!-- Previous versions can be added below -->