Tracker: Filesystem v2.3.0 #5269

Summary

Tracks the filesystem server work that ships in v2.3.0.

Sub-issues

• filesystem: a dangling symlink is reported as "Parent directory does not exist" #5191 filesystem: a dangling symlink is reported as "Parent directory does not exist"
• filesystem: list_directory_with_sizes reports an entry it could not stat as 0 B #5190 filesystem: list_directory_with_sizes reports an entry it could not stat as 0 B
• filesystem: search_files silently skips a subdirectory it cannot read #5189 filesystem: search_files silently skips a subdirectory it cannot read
• filesystem: remove the unused glob dependency #5186 filesystem: remove the unused glob dependency
• filesystem: read_text_file with head: 0 or tail: 0 returns the whole file #5184 filesystem: read_text_file with head: 0 or tail: 0 returns the whole file
• filesystem: expandHome() does not handle Windows backslash separator (~\path) #5180 filesystem: expandHome() does not handle Windows backslash separator (~\path)
• filesystem: clarify effective root state after initialization #4912 filesystem: clarify effective root state after initialization
• filesystem: FS_SEARCH_EXCLUDE_PREFIXES is lexical; should excludes be canonical/symlink-aware? #4208 filesystem: FS_SEARCH_EXCLUDE_PREFIXES is lexical; should excludes be canonical/symlink-aware?
• Security: filesystem server path parameters lack traversal constraints enabling prompt injection → arbitrary file read/write #3752 Security: filesystem server path parameters lack traversal constraints enabling prompt injection → arbitrary file read/write
• fix(filesystem): improve search_files description and performance #3419 fix(filesystem): improve search_files description and performance
• Add missing idempotentHint and openWorldHint to server-filesystem #3402 Add missing idempotentHint and openWorldHint to server-filesystem
• Security Audit: 2 finding(s) in mcp-server-filesystem #3317 Security Audit: 2 finding(s) in mcp-server-filesystem
• Filesystem server: Restrict access: Configure a base directory and allowed directories inside that. #3133 Filesystem server: Restrict access: Configure a base directory and allowed directories inside that.
• edit_file tool fails when exact text match not found due to whitespace differences #2034 edit_file tool fails when exact text match not found due to whitespace differences
• [Filesystem] add append tools #1208 [Filesystem] add append tools
• Support read-only paths in filesystem MCP with npx #1160 Support read-only paths in filesystem MCP with npx
• Add depth parameter to directory_tree function in filesystem server #1077 Add depth parameter to directory_tree function in filesystem server
• Confusing search_files function description leads to misunderstanding of its purpose #896 Confusing search_files function description leads to misunderstanding of its purpose
• Configurable write permissions for filesystem server #632 Configurable write permissions for filesystem server
• filesystem in the directory mounted with rclone does not work #531 filesystem in the directory mounted with rclone does not work
• Copy for Filesystem #519 Copy for Filesystem
• Improvment: Use resources and resource urls with the filesystem MCP server #297 Improvment: Use resources and resource urls with the filesystem MCP server