@apmantza/greedysearch-pi 1.7.7 → 1.8.1

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## v1.8.0 (2026-04-16)
+
+### Fixes
+- **`cdpAvailable()` missing `baseDir` argument** — two callsites in `index.ts` (session_start handler and coding_task handler) were calling `cdpAvailable()` without the required `baseDir` parameter, producing an incorrect path (`join(undefined, "bin", "cdp.mjs")`). Both now pass `__dir` so the CDP check resolves against the correct package directory.
+- **Duplicated `ENGINES` map removed** — `ENGINES` was defined identically in both `src/search/constants.mjs` and `src/search/engines.mjs`. Now `engines.mjs` imports and re-exports from `constants.mjs`, keeping a single canonical source and eliminating sync drift risk.
+- **`ALL_ENGINES` sync comment** — added a `// Keep in sync with src/search/constants.mjs` comment on the `ALL_ENGINES` tuple in `shared.ts` so future maintainers know where the canonical definition lives.
+
+## v1.7.7 (2026-04-14)
+
+### Fixes
+- **`--deep` flag leaking into queries** — `depth: "deep"` was passing `--deep` as a bare flag to `search.mjs`, which didn't recognize it and appended it to the query string. Fixed by passing `--depth deep` instead; also added `--deep` as a recognized flag in `search.mjs` for backward compatibility with the legacy `deep_research` tool.
+- **GitHub fetch always failing** — `git clone` was being `await`-ed on a non-Promise `ChildProcess` object (Node `execFile` is callback-based), so the clone never actually completed and content was always empty. Replaced git clone entirely with GitHub REST API calls: repo info + README + file tree fetched via parallel HTTP requests (~2-5s vs 30-60s, no git dependency). Non-existent repos now correctly return `ok: false`.
+- **`--inline` test false negative** — smoke test was interpolating multiline JSON stdout into a `node -e` string, always producing `PARSE_ERROR`. Fixed to write stdout to a temp file and parse from file.
+
+### Features
+- **Rich source metadata** — HTTP-fetched sources now include `publishedTime`, `lastModified`, `byline`, `siteName`, and `lang`. `publishedTime` is extracted from Readability's parser plus a fallback chain of 8 `<meta>` selectors (Open Graph, schema.org, Dublin Core). All fields flow through to the Gemini synthesis prompt. Gemini is instructed to flag sources older than 2 years as potentially stale in caveats.
+- **GitHub Fetch Tests** — smoke/edge/quick test modes now include 4 GitHub-specific tests: root repo API fetch (README + tree), blob file via raw URL, blob via HTTP fetcher pipeline, and graceful failure on non-existent repo.
+
 ## v1.7.6 (2026-04-11)
 
 ### Fixes

package/bin/coding-task.mjs

@@ -9,12 +9,16 @@
 // Output (stdout): JSON { engine, task, code: [{language, code}], explanation, raw }
 // Errors go to stderr only.
 
-import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { existsSync, readFileSync, statSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
+import { dirname, isAbsolute, join, relative } from "node:path";
 import { fileURLToPath } from "node:url";
 import { cdp, injectClipboardInterceptor, waitForCopyButton } from "../extractors/common.mjs";
 import { dismissConsent, handleVerification } from "../extractors/consent.mjs";
 
+const MAX_FILE_SIZE = 50 * 1024; // 50KB per file
+const MAX_FILES = 5;
+
 const __dir = fileURLToPath(new URL(".", import.meta.url));
 const PAGES_CACHE = `${tmpdir().replace(/\\/g, "/")}/cdp-pages.json`;
 
@@ -309,6 +313,28 @@ async function main() {
 			filePaths.push(args[i + 1]);
 		}
 	}
+
+	// Validate file paths: limit count, check readability, enforce size
+	if (filePaths.length > MAX_FILES) {
+		process.stderr.write(`Error: too many --file arguments (max ${MAX_FILES})\n`);
+		process.exit(1);
+	}
+	for (const p of filePaths) {
+		if (!existsSync(p)) {
+			process.stderr.write(`Error: file not found: ${p}\n`);
+			process.exit(1);
+		}
+		if (isAbsolute(p) && !p.startsWith(process.cwd())) {
+			process.stderr.write(`Error: file must be within project directory: ${p}\n`);
+			process.exit(1);
+		}
+		const stat = statSync(p);
+		if (stat.size > MAX_FILE_SIZE) {
+			process.stderr.write(`Error: file too large (${Math.round(stat.size / 1024)}KB, max ${MAX_FILE_SIZE / 1024}KB): ${p}\n`);
+			process.exit(1);
+		}
+	}
+
 	const fileContext =
 		filePaths.length > 0
 			? filePaths