woods 1.6.1 → 1.6.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4a3bf50a7ad421cc52a336375446c4e08c2583dbf2ce96e4a3038bd8dca7a0ae
-  data.tar.gz: fe9a6512787372c3f3d0cbe4038720f123349b9961c548b1584d21b8b4cbd0fb
+  metadata.gz: 135a4869f2fdd230990dc723a96d62f19447e51295768392d25bd0125dd4e25a
+  data.tar.gz: bdce75a6b653bd5da5f3a7f4e7c9180020235f5a232daa5e58a4d439824e9a34
 SHA512:
-  metadata.gz: 7070f985d4a9bab191593599e4f4f8c807d0378c8345a9aa8a73c2ac4de0200b7959ffd6bb6a823bb12fd67a4afe90ad6d3475eb16bbb60ac320ead1de114b77
-  data.tar.gz: 3c0cd27167baa9cd7e0245894527760e12bf2d038e57819ffa78468e6f0e6e4122dd144129bcfd769bd89965caad7c997299dfc5de9c1c38dfddb88bab8f2f78
+  metadata.gz: 7dbe8d5460b1775c4f785954c88539fb29a76ad2878ee58e5e8ca11616787c87a058b9e9a774867f3cff4afe0c1b8ade137fd657f5249995d594e2ce2d7dfd8e
+  data.tar.gz: 99db15fe718972172398fcf1574b33e26e94869beeb0d90c95e7adcb6b41b4a53ad3b3c4fe34067ba01df7e485dec61e73cda5b739dda89dab665f9c6bfb3282

data/CHANGELOG.md

@@ -7,6 +7,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.6.2] - 2026-09-18
+
+### Fixed
+
+- Refresh encrypted Rails credentials from disk when rebuilding the Console credential index, update every live scanner, and preserve the last valid index if refresh fails. Each response uses one consistent index snapshot.
+Keep credential scanner refresh snapshots limited to live weakly referenced
+scanners on older Ruby versions, avoiding unsafe receiver access after garbage
+collection while preserving updates to every live Console server.
+Keep JSON on `>= 2.19.9, < 3` so supported Rails encoders can serialize metadata after a fresh bundle resolution; JSON 3 removes their `quirks_mode` option. Bound MessagePack below 2 and Railties below 9, retaining their existing minimum versions and the strict package-build gate.
+- Preserve version-aware missing-tool guidance with MCP 0.23 by installing its dispatch override before the SDK captures request handlers.
+
+### Build
+
+- Add a no-publish, one-off 1.6.2 maintenance preparation flow and installed-package CI. Disable the legacy automatic publisher; publication requires the trusted main maintenance profile and its reviewed candidate SHA.
+
+### Security
+
+- Require MCP 0.23.0 or newer within the 0.x line for upstream transport security fixes; run `bundle update woods mcp` when upgrading. Ruby 3.0 remains supported. The newer SDK removes the old json-schema/addressable dependency chain. Existing Index and Console HTTP origin settings now reach the SDK Host/Origin guards; cross-origin browser access requires the actual configured port.
+
 ## [1.6.1] - 2026-07-22
 
 ### Fixed

data/CONTRIBUTING.md

@@ -125,3 +125,52 @@ Woods uses runtime introspection, not static parsing. If your feature requires a
 ## License
 
 By contributing, you agree that your contributions will be licensed under the MIT License.
+
+## Maintenance release
+
+This tree has a one-off, no-publish preparation adapter for the reviewed 1.6.2
+security patch while `main` carries the newer 2.0 prerelease line. It does not
+establish a permanent stable branch or authorize another maintenance version.
+The approved target is `release/1.6.2`, based on immutable `v1.6.1`. Create that
+remote target only after the trusted main maintenance policy is reviewed.
+
+From a clean checkout, the only supported transitions are:
+
+```sh
+bin/rake "release:reopen[1.6.2.alpha]"
+# Review and commit the generated development-state diff.
+bin/rake "release:prepare[1.6.2]"
+```
+
+The tasks never commit, tag, push, dispatch or publish. Never edit VERSION or the
+README maintenance `release-state` banner manually. The first reopen creates that
+banner; prepare updates it and folds classified Unreleased notes and optional
+`changelog/<type>_<slug>.md` entries into a dated release heading. Entry files are
+nonempty Markdown without headings; supported types include `fixed`, `security`,
+`build`, and `documentation`. Invalid transitions, dirty trees, malformed notes,
+and missing/duplicate/unknown fences refuse before writes. This legacy profile
+has no v2 migration guide or v2 surface inventory requirement.
+
+Validate the full suite, lint, booted extraction, real Console credential rotation,
+and installed maintenance package tests. CI builds one gem plus its SHA-256
+sidecar into `woods-release-<commit SHA>` and tests that artifact on Ruby 3.0/Rails
+6.0 with exactly MCP 0.23.0 and Ruby 4.0/Rails 8.1 with the latest compatible 0.x SDK.
+MCP >=0.23.0 is required for upstream transport security fixes; update Woods and
+MCP together (`bundle update woods mcp`). Ruby 3.0 remains supported.
+The optional package specs require `WOODS_GEM_PATH` and
+run standalone, without the repository's `spec_helper` or implementation path:
+
+```sh
+ruby -rrubygems -e 'load Gem.bin_path("rspec-core", "rspec")' -- \
+  --options /dev/null spec/integration/maintenance_packaged_gem_spec.rb
+```
+
+Preparation is not publication; check RubyGems before describing 1.6.2 as released.
+The legacy automatic tag publisher is disabled, and Bundler's `release`,
+`release:rubygem_push`, and `release:source_control_push` tasks abort. Only a
+maintainer may later tag the reviewed merge commit and dispatch the trusted
+**main** workflow. That workflow must explicitly allow the exact tag, protected
+maintenance branch, immutable 1.6.1 base, reviewed final candidate SHA, required
+CI jobs, and immutable artifact. An unpinned candidate remains blocked. First merge a reviewed trusted-main profile update pinning `approved_sha` to that
+exact maintenance merge SHA; only then may the maintainer tag it. The
+workflow publishes the already tested gem bytes; never rebuild or publish locally.

data/README.md

@@ -4,6 +4,12 @@
 
 # Woods
 
+<!-- release-state:maintenance-banner -->
+> **Woods 1.6.2: prepared maintenance candidate.** This tree remains on the 1.6 maintenance line.
+> Preparation does not establish publication. Check [RubyGems versions](https://rubygems.org/gems/woods/versions)
+> before selecting an install version. See [maintenance release policy](CONTRIBUTING.md#maintenance-release).
+<!-- release-state:end -->
+
 **Your AI coding assistant is guessing about your Rails app. Woods gives it the real answers.**
 
 Rails hides enormous amounts of behavior behind conventions, concerns, and runtime magic. When you ask an AI assistant "what callbacks fire when a User saves?" or "what routes map to this controller?", it guesses from training data — and gets it wrong. Woods runs *inside* your Rails app, extracts what's actually happening at runtime, and serves that context directly to your AI tools via [MCP](https://modelcontextprotocol.io/).

data/exe/woods-mcp-http

@@ -28,6 +28,7 @@ require_relative '../lib/woods/mcp/server'
 require_relative '../lib/woods/mcp/bootstrapper'
 require_relative '../lib/woods/mcp/bearer_auth'
 require_relative '../lib/woods/mcp/origin_guard'
+require_relative '../lib/woods/mcp/http_transport_options'
 require_relative '../lib/woods/embedding/text_preparer'
 require_relative '../lib/woods/embedding/indexer'
 
@@ -63,10 +64,11 @@ server = Woods::MCP::Server.build(
   index_dir: index_dir, retriever: retriever, snapshot_store: snapshot_store,
   bootstrap_state: bootstrap_state, retriever_reloader: retriever_reloader
 )
-transport = MCP::Server::Transports::StreamableHTTPTransport.new(server)
-server.transport = transport
-
 allowed_origins = ENV.fetch('WOODS_MCP_HTTP_ALLOWED_ORIGINS', '').split(',').map(&:strip).reject(&:empty?)
+transport = MCP::Server::Transports::StreamableHTTPTransport.new(
+  server, **Woods::MCP::HttpTransportOptions.for(allowed_origins)
+)
+server.transport = transport
 
 inner = proc { |env| transport.handle_request(Rack::Request.new(env)) }
 app = token ? Woods::MCP::BearerAuth.new(inner, token: token) : inner

data/lib/woods/console/credential_index.rb

@@ -68,6 +68,7 @@ module Woods
       MISSING_KEY_ERRORS = %w[
         ActiveSupport::EncryptedConfiguration::MissingKeyError
         ActiveSupport::EncryptedFile::MissingKeyError
+        ActiveSupport::EncryptedFile::MissingContentError
         ActiveSupport::MessageEncryptor::InvalidMessage
       ].freeze
 
@@ -90,13 +91,19 @@ module Woods
         # @return [CredentialIndex] populated index, or an empty index when
         #   the credentials store can't be opened.
         def build(rails_app:)
-          new(secrets: collect_secrets(rails_app))
+          refresh(rails_app: rails_app)
         rescue StandardError => e
           raise unless missing_key_error?(e)
 
           new(secrets: [])
         end
 
+        # Strict refresh: construct the replacement completely before a caller
+        # installs it. Unlike boot-time .build, errors must preserve the old index.
+        def refresh(rails_app:)
+          new(secrets: collect_secrets(rails_app))
+        end
+
         # Emit a structured log warning when any of the given credentials
         # files has a modification time newer than `process_start`. This
         # catches the common "rotated credentials but forgot to restart"
@@ -136,12 +143,23 @@ module Woods
         private
 
         def collect_secrets(rails_app)
-          config = rails_app.credentials.config
+          config = fresh_credentials(rails_app.credentials).config
           collected = []
           walk(config, collected)
           collected
         end
 
+        def fresh_credentials(credentials)
+          return credentials unless defined?(ActiveSupport::EncryptedConfiguration) &&
+                                    credentials.is_a?(ActiveSupport::EncryptedConfiguration)
+
+          require_relative 'encrypted_credential_snapshot'
+          EncryptedCredentialSnapshot.new(
+            config_path: credentials.content_path, key_path: credentials.key_path,
+            env_key: credentials.env_key, raise_if_missing_key: true
+          )
+        end
+
         def walk(node, collected)
           case node
           when Hash  then node.each_value { |v| walk(v, collected) }

data/lib/woods/console/credential_scanner.rb

@@ -155,17 +155,17 @@ module Woods
       #   for patterns that fired — callers should treat a missing key as zero.
       def scan(value)
         counts = {}
-        scanned = walk(value, counts)
+        scanned = walk(value, counts, @secret_index)
         [scanned, counts]
       end
 
       private
 
-      def walk(value, counts)
+      def walk(value, counts, index)
         case value
-        when String then scan_string(value, counts)
-        when Hash   then walk_hash(value, counts)
-        when Array  then value.map { |item| walk(item, counts) }
+        when String then scan_string(value, counts, index)
+        when Hash   then walk_hash(value, counts, index)
+        when Array  then value.map { |item| walk(item, counts, index) }
         else value
         end
       end
@@ -177,19 +177,19 @@ module Woods
       # credential-shaped string is emitted as a Symbol after redaction
       # (e.g. `:"[REDACTED]"`). String keys stay Strings. Non-String,
       # non-Symbol keys (Integer, etc.) pass through unchanged.
-      def walk_hash(hash, counts)
+      def walk_hash(hash, counts, index)
         hash.each_with_object({}) do |(key, val), out|
           scanned_key = case key
-                        when String then scan_string(key, counts)
-                        when Symbol then scan_string(key.to_s, counts).to_sym
+                        when String then scan_string(key, counts, index)
+                        when Symbol then scan_string(key.to_s, counts, index).to_sym
                         else             key
                         end
-          out[scanned_key] = walk(val, counts)
+          out[scanned_key] = walk(val, counts, index)
         end
       end
 
-      def scan_string(str, counts)
-        result = redact_indexed_secrets(str, counts)
+      def scan_string(str, counts, index)
+        result = redact_indexed_secrets(str, counts, index)
         result = scan_encoded_forms(result, counts)
         @active_patterns.inject(result) do |acc, (name, pattern)|
           acc.gsub(pattern) do
@@ -290,10 +290,10 @@ module Woods
         printable.to_f / str.length >= PRINTABLE_RATIO_THRESHOLD
       end
 
-      def redact_indexed_secrets(str, counts)
-        return str unless @secret_index&.match?(str)
+      def redact_indexed_secrets(str, counts, index)
+        return str unless index&.match?(str)
 
-        redacted = @secret_index.redact(str)
+        redacted = index.redact(str)
         counts[INDEX_HIT] = (counts[INDEX_HIT] || 0) + redacted.scan(CredentialIndex::REDACTED).size
         redacted
       end

data/lib/woods/console/credential_scanner_registry.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+module Woods
+  module Console
+    # Coordinates scanner construction and rotation without retaining servers
+    # after their transports release them. Requests keep their own index snapshot.
+    class CredentialScannerRegistry
+      def initialize
+        @scanners = ObjectSpace::WeakMap.new
+        @mutex = Mutex.new
+      end
+
+      def register
+        @mutex.synchronize do
+          scanner = yield
+          # Older Ruby WeakMap implementations validate the value's liveness
+          # when enumerating. Keep the scanner in both weak positions so an
+          # immortal sentinel cannot make an abandoned scanner look live.
+          @scanners[scanner] = scanner
+          scanner
+        end
+      end
+
+      def rebuild
+        @mutex.synchronize do
+          scanners = @scanners.values
+          return nil if scanners.empty?
+
+          index = yield
+          scanners.each { |scanner| scanner.replace_index!(index) }
+          index
+        end
+      end
+    end
+  end
+end

data/lib/woods/console/encrypted_credential_snapshot.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+require 'active_support/encrypted_configuration'
+
+module Woods
+  module Console
+    # A private, uncached Rails configuration for one credential-index build.
+    # Unlike Rails' permissive configuration reader, a missing encrypted file
+    # must raise during an explicit refresh rather than erase the last index.
+    class EncryptedCredentialSnapshot < ActiveSupport::EncryptedConfiguration
+      def read
+        ActiveSupport::EncryptedFile.instance_method(:read).bind(self).call
+      end
+    end
+  end
+end

data/lib/woods/console/rack_middleware.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require 'json'
+require 'woods/mcp/http_transport_options'
 require 'woods/observability/structured_logger'
 
 module Woods
@@ -131,7 +132,9 @@ module Woods
           Rails.application.eager_load!
 
           server = build_embedded_server
-          @transport = ::MCP::Server::Transports::StreamableHTTPTransport.new(server)
+          @transport = ::MCP::Server::Transports::StreamableHTTPTransport.new(
+            server, **Woods::MCP::HttpTransportOptions.for(Woods.configuration.console_mcp_allowed_origins)
+          )
           server.transport = @transport
           @transport
         end

data/lib/woods/console/server.rb

@@ -13,6 +13,7 @@ require_relative 'audit_logger'
 require_relative 'confirmation'
 require_relative 'console_response_renderer'
 require_relative 'credential_scanner'
+require_relative 'credential_scanner_registry'
 require_relative 'eval_guard'
 require_relative 'table_gate'
 require_relative 'redactor'
@@ -34,10 +35,14 @@ module Woods
     #   transport.open
     #
     module Server # rubocop:disable Metrics/ModuleLength
+      SCANNERS = CredentialScannerRegistry.new
+      private_constant :SCANNERS
+
       class << self # rubocop:disable Metrics/ClassLength
         # Rebuild the boot-time credential index from fresh Rails credentials
-        # and hot-swap it into the active scanner without restarting the process.
+        # and hot-swap it into every live scanner without restarting the process.
         #
+        # Refresh failures propagate without replacing any live index.
         # Host rotation jobs should call this immediately after `rails credentials:edit`
         # changes are deployed. The swap is atomic on MRI (GVL) — in-flight scans see
         # either the old or the new index, never a partial one.
@@ -57,14 +62,11 @@ module Woods
         #   the rebuild was skipped.
         def rebuild_credential_index(rails_app: nil)
           return nil unless credential_defense_enabled?
-          return nil unless @active_scanner
 
           target_app = rails_app || default_rails_app
           return nil unless target_app
 
-          new_index = CredentialIndex.build(rails_app: target_app)
-          @active_scanner.replace_index!(new_index)
-          new_index
+          SCANNERS.rebuild { CredentialIndex.refresh(rails_app: target_app) }
         end
 
         # True when Woods is configured and credential defense is on.
@@ -399,21 +401,21 @@ module Woods
                                        model_reflections: model_reflections)
                        end
 
-          secret_index = build_credential_index(config)
-          disabled_patterns = Array(config&.console_disabled_scanner_patterns)
-          scanner = if disabled_patterns.include?(:all)
-                      nil
-                    else
-                      CredentialScanner.new(
-                        disabled_patterns: disabled_patterns,
-                        secret_index: secret_index
-                      )
-                    end
-          @active_scanner = scanner
+          scanner = build_scanner(config)
 
           ResponseContext.build(safe_ctx: safe_ctx, table_gate: table_gate, credential_scanner: scanner)
         end
 
+        def build_scanner(config)
+          disabled_patterns = Array(config&.console_disabled_scanner_patterns)
+          return nil if disabled_patterns.include?(:all)
+
+          SCANNERS.register do
+            CredentialScanner.new(disabled_patterns: disabled_patterns,
+                                  secret_index: build_credential_index(config))
+          end
+        end
+
         # Build the boot-time credential index from Rails.application's encrypted
         # credentials. Returns nil when credential defense is disabled or when no
         # Rails application is reachable (specs, non-Rails hosts) — the scanner

data/lib/woods/console/tool_specs.rb

@@ -5,7 +5,7 @@
 # Metrics/ModuleLength is disabled here because the module body is almost
 # entirely declarative data, not imperative logic. Decomposition would just
 # scatter the tool catalogue across many files with no readability gain.
-# rubocop:disable Metrics/ModuleLength
+# rubocop:disable-next Metrics/ModuleLength
 module Woods
   module Console
     module Server
@@ -549,4 +549,3 @@ module Woods
     end
   end
 end
-# rubocop:enable Metrics/ModuleLength

data/lib/woods/console/tools/tier1.rb

@@ -98,13 +98,12 @@ module Woods
         # @param scope [Hash, nil] Filter conditions
         # @param columns [Array<String>, nil] Columns to include
         # @return [Hash] Bridge request
-        # rubocop:disable Metrics/ParameterLists
+        # rubocop:disable-next Metrics/ParameterLists
         def console_recent(model:, order_by: 'created_at', direction: 'desc', limit: 10, scope: nil, columns: nil)
           limit = [limit, 50].min
           { tool: 'recent', params: { model: model, order_by: order_by, direction: direction,
                                       limit: limit, scope: scope, columns: columns }.compact }
         end
-        # rubocop:enable Metrics/ParameterLists
 
         # System health check.
         #

data/lib/woods/console/tools/tier4.rb

@@ -61,7 +61,7 @@ module Woods
         # @param scope [Hash, nil] Filter conditions
         # @param limit [Integer, nil] Row limit (max 10000)
         # @return [Hash] Bridge request
-        # rubocop:disable Metrics/ParameterLists
+        # rubocop:disable-next Metrics/ParameterLists
         def console_query(model:, select:, joins: nil, group_by: nil, having: nil, order: nil, scope: nil, limit: nil)
           limit = [limit, MAX_QUERY_LIMIT].min if limit
           {
@@ -78,7 +78,6 @@ module Woods
             }.compact
           }
         end
-        # rubocop:enable Metrics/ParameterLists
       end
     end
   end

data/lib/woods/mcp/http_transport_options.rb

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+require 'uri'
+
+module Woods
+  module MCP
+    # Keep the SDK DNS-rebinding guard aligned with Woods' explicit allowlist.
+    # Empty configuration retains the SDK's strict loopback defaults.
+    module HttpTransportOptions
+      def self.for(origins)
+        normalized = Array(origins).map { |origin| origin.strip.downcase.delete_suffix('/') }.reject(&:empty?)
+        return {} if normalized.empty?
+
+        hosts = normalized.filter_map do |origin|
+          uri = URI.parse(origin)
+          uri.host if %w[http https].include?(uri.scheme)
+        rescue URI::InvalidURIError
+          nil
+        end
+        { allowed_origins: normalized, allowed_hosts: hosts.uniq }
+      end
+    end
+  end
+end

data/lib/woods/mcp/server.rb

@@ -93,15 +93,12 @@ module Woods
             )
           end
 
-          server = ::MCP::Server.new(
+          server = VersionAwareServer.new(
             name: 'woods',
             version: Woods::VERSION,
             resources: resources,
             resource_templates: resource_templates
           )
-          # Rewrite "Tool not found" into version-aware update guidance for agents
-          # running against an older gem than the skill they're following assumes.
-          server.singleton_class.prepend(VersionAwareToolDispatch)
 
           define_lookup_tool(server, reader, respond, respond_err, renderer)
           define_search_tool(server, reader, respond, respond_err, renderer)
@@ -200,11 +197,7 @@ module Woods
           meta[:config_key] = config_key if config_key
           meta[:doc_link] = doc_link if doc_link
           meta.merge!(extra) unless extra.empty?
-          ::MCP::Tool::Response.new(
-            [{ type: 'text', text: message }],
-            error: true,
-            meta: meta
-          )
+          ::MCP::Tool::Response.new([{ type: 'text', text: message }], error: true, meta: meta)
         end
 
         def truncate_section(array, limit)

data/lib/woods/mcp/version_aware_tool_dispatch.rb

@@ -1,10 +1,11 @@
 # frozen_string_literal: true
 
+require 'mcp'
 require_relative '../update_check'
 
 module Woods
   module MCP
-    # Prepended onto a built +MCP::Server+ instance so that a call to a tool the
+    # Prepended before +MCP::Server+ initialization so that a call to a tool the
     # installed gem does not define produces version-aware, self-healing
     # guidance instead of a bare "Tool not found".
     #
@@ -12,8 +13,7 @@ module Woods
     # to call a tool that only exists in a later Woods release. The upstream
     # +mcp+ gem raises +RequestHandlerError("Tool not found: X")+ with no seam to
     # customize the message, so we intercept the built server's +call_tool+
-    # (dispatched directly by +handle_request+, so a prepend on the instance is
-    # honored on both the stdio and HTTP transports) and re-raise with the
+    # before the SDK captures its bound handler method and re-raise with the
     # installed version plus an update hint the agent can relay to the user.
     #
     # Only the genuine tool-not-found case is rewritten; every other
@@ -43,5 +43,11 @@ module Woods
         error.error_type == :invalid_params && error.message.to_s.start_with?('Tool not found:')
       end
     end
+
+    # MCP 0.23 captures method(:call_tool) during initialization. The override
+    # must already exist then; a later singleton prepend misses that handler.
+    class VersionAwareServer < ::MCP::Server
+      prepend VersionAwareToolDispatch
+    end
   end
 end

data/lib/woods/retrieval/query_classifier.rb

@@ -30,9 +30,8 @@ module Woods
         debug: /\b(bug|error|fix|broken|failing|wrong|issue|problem|crash|exception)\b/i,
         implement: /\b(implement|add|create|build|write|make|generate)\b/i,
         compare: /\b(compare|difference|vs|versus|between|contrast)\b/i,
-        # rubocop:disable Layout/LineLength
+        # rubocop:disable-next Layout/LineLength
         framework: /\b(how does rails|what does rails|rails .+ work|work.+\brails\b|in rails\b|activerecord|actioncontroller|activejob|actionmailer|actioncable|actiontext|activestorage|solid_queue|solid_cache|solid_cable|kamal|propshaft|importmap|hotwire|turbo|stimulus|zeitwerk)\b/i,
-        # rubocop:enable Layout/LineLength
         reference: /\b(show me|what is|what are|list|options for|api|interface|signature)\b/i,
         understand: /\b(how|why|explain|understand|what happens|describe|overview)\b/i
       }.freeze

data/lib/woods/session_tracer/middleware.rb

@@ -85,7 +85,7 @@ module Woods
       # @param env [Hash] Rack environment
       # @param status [Integer] HTTP response status
       # @param duration_ms [Integer] Request duration in milliseconds
-      # rubocop:disable Metrics/MethodLength
+      # rubocop:disable-next Metrics/MethodLength
       def record_request(env, status, duration_ms)
         path = env['PATH_INFO'] || ''
         return if excluded?(path)
@@ -116,7 +116,6 @@ module Woods
 
         @store.record(session_id, request_data)
       end
-      # rubocop:enable Metrics/MethodLength
 
       # Extract session ID: X-Trace-Session header first, then session cookie, then fallback.
       #

data/lib/woods/session_tracer/session_flow_assembler.rb

@@ -24,7 +24,7 @@ module Woods
     #   doc = assembler.assemble("abc123", budget: 8000, depth: 1)
     #   puts doc.to_context
     #
-    # rubocop:disable Metrics/ClassLength
+    # rubocop:disable-next Metrics/ClassLength
     class SessionFlowAssembler
       ASYNC_TYPES = %w[job mailer].to_set.freeze
 
@@ -41,7 +41,7 @@ module Woods
       # @param budget [Integer] Maximum token budget (default: 8000)
       # @param depth [Integer] Expansion depth (0=metadata only, 1=direct deps, 2+=full flow)
       # @return [SessionFlowDocument] The assembled document
-      # rubocop:disable Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength
+      # rubocop:disable-next Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength
       def assemble(session_id, budget: 8000, depth: 1)
         requests = @store.read(session_id)
         return empty_document(session_id) if requests.empty?
@@ -89,7 +89,6 @@ module Woods
           token_count: token_count
         )
       end
-      # rubocop:enable Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength
 
       private
 
@@ -115,7 +114,7 @@ module Woods
       # Resolve dependencies for a unit, separating sync deps from async side effects.
       #
       # @return [Array<String>] Non-async dependency identifiers added
-      # rubocop:disable Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength, Metrics/ParameterLists, Metrics/PerceivedComplexity
+      # rubocop:disable-next Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength, Metrics/ParameterLists, Metrics/PerceivedComplexity
       def resolve_dependencies(unit_id, seen_units, context_pool,
                                side_effects, step, dependency_map, depth)
         graph = @reader.dependency_graph
@@ -154,7 +153,6 @@ module Woods
 
         added
       end
-      # rubocop:enable Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength, Metrics/ParameterLists, Metrics/PerceivedComplexity
 
       # Expand transitive dependencies (depth 2+).
       #
@@ -249,6 +247,5 @@ module Woods
         SessionFlowDocument.new(session_id: session_id)
       end
     end
-    # rubocop:enable Metrics/ClassLength
   end
 end

data/lib/woods/session_tracer/session_flow_document.rb

@@ -23,7 +23,7 @@ module Woods
     #   doc.to_markdown   # => human-readable document
     #   doc.to_context    # => LLM XML format
     #
-    # rubocop:disable Metrics/ClassLength
+    # rubocop:disable-next Metrics/ClassLength
     class SessionFlowDocument
       attr_reader :session_id, :steps, :context_pool, :side_effects,
                   :dependency_map, :token_count, :generated_at
@@ -35,7 +35,7 @@ module Woods
       # @param dependency_map [Hash<String, Array<String>>] Unit -> dependency identifiers
       # @param token_count [Integer] Estimated total tokens
       # @param generated_at [String, nil] ISO8601 timestamp (defaults to now)
-      # rubocop:disable Metrics/ParameterLists
+      # rubocop:disable-next Metrics/ParameterLists
       def initialize(session_id:, steps: [], context_pool: {}, side_effects: [],
                      dependency_map: {}, token_count: 0, generated_at: nil)
         @session_id = session_id
@@ -46,7 +46,6 @@ module Woods
         @token_count = token_count
         @generated_at = generated_at || Time.now.utc.iso8601
       end
-      # rubocop:enable Metrics/ParameterLists
 
       # Serialize to a JSON-compatible Hash.
       #
@@ -86,7 +85,7 @@ module Woods
       # Render as human-readable Markdown.
       #
       # @return [String]
-      # rubocop:disable Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength, Metrics/PerceivedComplexity
+      # rubocop:disable-next Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength, Metrics/PerceivedComplexity
       def to_markdown
         lines = []
         lines << "## Session: #{@session_id}"
@@ -146,14 +145,13 @@ module Woods
 
         lines.join("\n")
       end
-      # rubocop:enable Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength, Metrics/PerceivedComplexity
 
       # Render as LLM-consumable XML context.
       #
       # Follows the format from docs/CONTEXT_AND_CHUNKING.md.
       #
       # @return [String]
-      # rubocop:disable Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength, Metrics/PerceivedComplexity
+      # rubocop:disable-next Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength, Metrics/PerceivedComplexity
       def to_context
         lines = []
         header = "<session_context session_id=\"#{@session_id}\" requests=\"#{@steps.size}\" " \
@@ -201,7 +199,6 @@ module Woods
         lines << '</session_context>'
         lines.join("\n")
       end
-      # rubocop:enable Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength, Metrics/PerceivedComplexity
 
       # @api private
       def self.deep_symbolize_keys(obj)
@@ -218,6 +215,5 @@ module Woods
       end
       private_class_method :deep_symbolize_keys
     end
-    # rubocop:enable Metrics/ClassLength
   end
 end

data/lib/woods/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Woods
-  VERSION = '1.6.1'
+  VERSION = '1.6.2'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: woods
 version: !ruby/object:Gem::Version
-  version: 1.6.1
+  version: 1.6.2
 platform: ruby
 authors:
 - Leah Armstrong
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-07-22 00:00:00.000000000 Z
+date: 2026-09-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: mcp
@@ -16,7 +16,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.9.2
+        version: 0.23.0
     - - "<"
       - !ruby/object:Gem::Version
         version: '1.0'
@@ -26,10 +26,30 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.9.2
+        version: 0.23.0
     - - "<"
       - !ruby/object:Gem::Version
         version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.19.9
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.19.9
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
 - !ruby/object:Gem::Dependency
   name: msgpack
   requirement: !ruby/object:Gem::Requirement
@@ -37,6 +57,9 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '1.5'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -44,6 +67,9 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '1.5'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2'
 - !ruby/object:Gem::Dependency
   name: prism
   requirement: !ruby/object:Gem::Requirement
@@ -65,6 +91,9 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '6.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '9'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -72,6 +101,9 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '6.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '9'
 description: |
   Woods extracts structured data from Rails applications for use in
   AI-assisted development tooling. It provides version-specific context by
@@ -133,8 +165,10 @@ files:
 - lib/woods/console/console_response_renderer.rb
 - lib/woods/console/credential_index.rb
 - lib/woods/console/credential_scanner.rb
+- lib/woods/console/credential_scanner_registry.rb
 - lib/woods/console/dispatch_pipeline.rb
 - lib/woods/console/embedded_executor.rb
+- lib/woods/console/encrypted_credential_snapshot.rb
 - lib/woods/console/eval_guard.rb
 - lib/woods/console/model_validator.rb
 - lib/woods/console/rack_middleware.rb
@@ -243,6 +277,7 @@ files:
 - lib/woods/mcp/bootstrapper.rb
 - lib/woods/mcp/config_resolver.rb
 - lib/woods/mcp/errors.rb
+- lib/woods/mcp/http_transport_options.rb
 - lib/woods/mcp/index_reader.rb
 - lib/woods/mcp/origin_guard.rb
 - lib/woods/mcp/provider_probe.rb
@@ -324,10 +359,10 @@ licenses:
 - MIT
 metadata:
   homepage_uri: https://github.com/lost-in-the/woods
-  source_code_uri: https://github.com/lost-in-the/woods/tree/main
-  changelog_uri: https://github.com/lost-in-the/woods/blob/main/CHANGELOG.md
+  source_code_uri: https://github.com/lost-in-the/woods/tree/v1.6.2
+  changelog_uri: https://github.com/lost-in-the/woods/blob/v1.6.2/CHANGELOG.md
   bug_tracker_uri: https://github.com/lost-in-the/woods/issues
-  documentation_uri: https://github.com/lost-in-the/woods/tree/main/docs
+  documentation_uri: https://github.com/lost-in-the/woods/tree/v1.6.2/docs
   rubygems_mfa_required: 'true'
 post_install_message:
 rdoc_options: []