@gopherine/obsidian-mcp 0.1.1

package/dist/lib/safe-external-path.js

@@ -0,0 +1,46 @@
+import { homedir } from "os";
+import { resolve } from "path";
+import { realpath } from "fs/promises";
+import { execFile } from "child_process";
+import { promisify } from "util";
+const execFileAsync = promisify(execFile);
+/**
+ * Validate that a path is safe to read from outside the vault.
+ * Used only by vault_init to scan git repos.
+ *
+ * Enforces:
+ * - Must be under $HOME
+ * - Must not contain .. or symlinks escaping home
+ * - Must be a git repository
+ */
+export async function safeExternalPath(rawPath) {
+    const home = homedir();
+    const resolved = resolve(rawPath.startsWith("~") ? rawPath.replace("~", home) : rawPath);
+    // Must be under home directory (after resolution, this catches traversal attacks)
+    if (resolved !== home && !resolved.startsWith(home + "/")) {
+        throw new Error(`Path must be under home directory. Got: ${resolved}`);
+    }
+    // Verify real path doesn't escape home (symlink check)
+    try {
+        const real = await realpath(resolved);
+        if (real !== home && !real.startsWith(home + "/")) {
+            throw new Error(`Symlink escapes home directory: ${rawPath}`);
+        }
+    }
+    catch (e) {
+        if (e.code === "ENOENT")
+            throw new Error(`Path does not exist: ${rawPath}`);
+        if (e.message?.includes("Symlink"))
+            throw e;
+        throw e;
+    }
+    // Must be a git repo
+    try {
+        await execFileAsync("git", ["rev-parse", "--git-dir"], { cwd: resolved, timeout: 3000 });
+    }
+    catch {
+        throw new Error(`Not a git repository: ${rawPath}`);
+    }
+    return resolved;
+}
+//# sourceMappingURL=safe-external-path.js.map

package/dist/lib/safe-external-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-external-path.js","sourceRoot":"","sources":["../../src/lib/safe-external-path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAe;IACpD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAEzF,kFAAkF;IAClF,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,uDAAuD;IACvD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC;YAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC;IACV,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/lib/safe-external-path.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/lib/safe-external-path.test.js

@@ -0,0 +1,99 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { mkdir, rm, symlink } from "fs/promises";
+import { tmpdir, homedir } from "os";
+import { join } from "path";
+import { safeExternalPath } from "./safe-external-path.js";
+import { execFile } from "child_process";
+import { promisify } from "util";
+const execFileAsync = promisify(execFile);
+describe("safeExternalPath", () => {
+    let testDir;
+    const home = homedir();
+    beforeEach(async () => {
+        testDir = join(tmpdir(), `safe-path-test-${Date.now()}-${Math.random().toString(36).slice(2)}`);
+        await mkdir(testDir, { recursive: true });
+        await execFileAsync("git", ["init"], { cwd: testDir });
+    });
+    afterEach(async () => {
+        await rm(testDir, { recursive: true, force: true });
+    });
+    describe("valid paths", () => {
+        it("accepts path under home directory", async () => {
+            const homeTestDir = join(home, `.safe-path-test-${Date.now()}`);
+            await mkdir(homeTestDir, { recursive: true });
+            await execFileAsync("git", ["init"], { cwd: homeTestDir });
+            const result = await safeExternalPath(homeTestDir);
+            expect(result).toBe(homeTestDir);
+            await rm(homeTestDir, { recursive: true, force: true });
+        });
+        it("accepts path with ~ prefix", async () => {
+            const homeTestDir = join(home, `.safe-path-test-tilde-${Date.now()}`);
+            await mkdir(homeTestDir, { recursive: true });
+            await execFileAsync("git", ["init"], { cwd: homeTestDir });
+            const result = await safeExternalPath(homeTestDir.replace(home, "~"));
+            expect(result).toBe(homeTestDir);
+            await rm(homeTestDir, { recursive: true, force: true });
+        });
+        it("resolves relative path segments", async () => {
+            const homeTestDir = join(home, `.safe-path-test-rel-${Date.now()}`);
+            await mkdir(homeTestDir, { recursive: true });
+            await execFileAsync("git", ["init"], { cwd: homeTestDir });
+            const result = await safeExternalPath(`${homeTestDir}/./subdir/..`);
+            expect(result).toBe(homeTestDir);
+            await rm(homeTestDir, { recursive: true, force: true });
+        });
+    });
+    describe("traversal attack prevention", () => {
+        it("rejects path with .. traversal", async () => {
+            await expect(safeExternalPath("/Users/../../../etc/passwd")).rejects.toThrow("Path must be under home directory");
+        });
+    });
+    describe("symlink escape prevention", () => {
+        it("rejects symlink escaping home directory", async () => {
+            const outsideDir = join(tmpdir(), `outside-safe-${Date.now()}`);
+            await mkdir(outsideDir, { recursive: true });
+            const linkPath = join(testDir, "escape-link");
+            try {
+                await symlink(outsideDir, linkPath);
+                await expect(safeExternalPath(linkPath)).rejects.toThrow();
+            }
+            finally {
+                await rm(outsideDir, { recursive: true, force: true });
+            }
+        });
+        it("accepts symlink within home directory", async () => {
+            const homeTestDir = join(home, `.safe-path-test-link-${Date.now()}`);
+            await mkdir(homeTestDir, { recursive: true });
+            await execFileAsync("git", ["init"], { cwd: homeTestDir });
+            const linkPath = join(home, `.safe-path-link-${Date.now()}`);
+            await symlink(homeTestDir, linkPath);
+            const result = await safeExternalPath(linkPath);
+            expect(result).toBeDefined();
+            await rm(linkPath, { force: true });
+            await rm(homeTestDir, { recursive: true, force: true });
+        });
+    });
+    describe("non-home directory rejection", () => {
+        it("rejects path outside home directory", async () => {
+            await expect(safeExternalPath("/etc/passwd")).rejects.toThrow("Path must be under home directory");
+        });
+        it("rejects /tmp directly (outside home)", async () => {
+            await expect(safeExternalPath("/tmp")).rejects.toThrow("Path must be under home directory");
+        });
+    });
+    describe("git repository check", () => {
+        it("rejects non-git directory", async () => {
+            const homeNonGit = join(home, `.safe-path-non-git-${Date.now()}`);
+            await mkdir(homeNonGit, { recursive: true });
+            await expect(safeExternalPath(homeNonGit)).rejects.toThrow("Not a git repository");
+            await rm(homeNonGit, { recursive: true, force: true });
+        });
+    });
+    describe("nonexistent path handling", () => {
+        it("rejects nonexistent path", async () => {
+            const nonexistent = join(home, `.nonexistent-path-${Date.now()}`);
+            await expect(safeExternalPath(nonexistent)).rejects.toThrow("Path does not exist");
+        });
+    });
+});
+//# sourceMappingURL=safe-external-path.test.js.map

package/dist/lib/safe-external-path.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-external-path.test.js","sourceRoot":"","sources":["../../src/lib/safe-external-path.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,KAAK,EAAa,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,IAAI,OAAe,CAAC;IACpB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IAEvB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1C,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAChE,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;YAE3D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAEjC,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,yBAAyB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACtE,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;YAE3D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YACtE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAEjC,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,uBAAuB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACpE,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;YAE3D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,WAAW,cAAc,CAAC,CAAC;YACpE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAEjC,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,MAAM,CAAC,gBAAgB,CAAC,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;QACpH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACzC,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAChE,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE7C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAE9C,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBACpC,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC7D,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,wBAAwB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACrE,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;YAE3D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC7D,MAAM,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAErC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YAE7B,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;QACrG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;QAC9F,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,sBAAsB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAClE,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE7C,MAAM,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;YAEnF,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACzC,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,qBAAqB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAClE,MAAM,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/search-engine.d.ts

@@ -0,0 +1,19 @@
+export interface SearchResult {
+    path: string;
+    snippet: string;
+    line: number;
+}
+/**
+ * Full-text search using ripgrep.
+ */
+export declare function searchText(vaultPath: string, query: string, options?: {
+    pathFilter?: string;
+    limit?: number;
+}): Promise<SearchResult[]>;
+/**
+ * Structured search by frontmatter properties.
+ * Scans files and filters by frontmatter fields.
+ */
+export declare function searchStructured(vaultPath: string, filters: Record<string, string>, options?: {
+    limit?: number;
+}): Promise<SearchResult[]>;

package/dist/lib/search-engine.js

@@ -0,0 +1,157 @@
+import { execFile } from "child_process";
+import { promisify } from "util";
+import { resolve, relative } from "path";
+import { readFile, stat } from "fs/promises";
+import { parseFrontmatter } from "./frontmatter.js";
+import { escapeRegex } from "./escape-regex.js";
+const execFileAsync = promisify(execFile);
+/**
+ * Validate that a search path stays within the vault root.
+ * Throws if the path escapes the vault boundary.
+ */
+function validateSearchPath(vaultPath, searchPath) {
+    const resolved = resolve(vaultPath, searchPath);
+    const rel = relative(vaultPath, resolved);
+    if (rel.startsWith("..") || rel.startsWith("/")) {
+        throw new Error(`Search path escapes vault: ${searchPath}`);
+    }
+    return resolved;
+}
+/**
+ * Convert an absolute path from rg output to a vault-relative path.
+ * Uses path.relative for correctness instead of string replacement.
+ */
+function toRelativePath(vaultPath, absPath) {
+    return relative(vaultPath, absPath);
+}
+/**
+ * Full-text search using ripgrep.
+ */
+export async function searchText(vaultPath, query, options = {}) {
+    const { pathFilter, limit = 10 } = options;
+    const args = [
+        "--json",
+        "--max-count", "1", // one match per file
+        "--type", "md",
+        "--ignore-case",
+        "--fixed-strings",
+        query,
+    ];
+    // Validate pathFilter stays within vault
+    const searchPath = pathFilter
+        ? validateSearchPath(vaultPath, pathFilter)
+        : vaultPath;
+    try {
+        const { stdout } = await execFileAsync("rg", [...args, searchPath], {
+            timeout: 10_000,
+            maxBuffer: 1024 * 1024,
+        });
+        const results = [];
+        for (const line of stdout.split("\n").filter(Boolean)) {
+            try {
+                const parsed = JSON.parse(line);
+                if (parsed.type === "match") {
+                    const absPath = parsed.data.path.text;
+                    const relPath = toRelativePath(vaultPath, absPath);
+                    const snippet = parsed.data.lines.text.trim().slice(0, 200);
+                    const lineNum = parsed.data.line_number;
+                    // Skip hidden dirs and paths escaping vault
+                    if (relPath.startsWith(".") || relPath.startsWith(".."))
+                        continue;
+                    results.push({ path: relPath, snippet, line: lineNum });
+                    if (results.length >= limit)
+                        break;
+                }
+            }
+            catch (e) {
+                if (e.code !== "ENOENT") {
+                    console.error("[search] Skipping malformed rg line:", e.message);
+                }
+            }
+        }
+        return results;
+    }
+    catch (e) {
+        // rg exits with code 1 when no matches found
+        if (e.code === 1 || e.status === 1)
+            return [];
+        throw e;
+    }
+}
+/**
+ * Structured search by frontmatter properties.
+ * Scans files and filters by frontmatter fields.
+ */
+export async function searchStructured(vaultPath, filters, options = {}) {
+    const { limit = 10 } = options;
+    const results = [];
+    // Build grep patterns to narrow candidates (search for both key and value)
+    // SECURITY: escape both key and value to prevent regex injection
+    // Note: We search separately because YAML arrays span multiple lines
+    const firstKey = Object.keys(filters)[0];
+    const firstValue = filters[firstKey];
+    const keyPattern = escapeRegex(firstKey) + ":";
+    const valuePattern = escapeRegex(firstValue);
+    let candidates;
+    try {
+        const { stdout } = await execFileAsync("rg", [
+            "--files-with-matches",
+            "--type", "md",
+            "--regexp", keyPattern,
+            "--regexp", valuePattern,
+            vaultPath,
+        ], { timeout: 10_000, maxBuffer: 1024 * 1024 });
+        candidates = stdout.trim().split("\n").filter(Boolean);
+    }
+    catch (e) {
+        if (e.code === 1 || e.status === 1)
+            return [];
+        throw e;
+    }
+    const MAX_FILE_SIZE = 100_000; // 100 KB — skip large files in structured search
+    for (const absPath of candidates) {
+        if (results.length >= limit)
+            break;
+        const relPath = toRelativePath(vaultPath, absPath);
+        if (relPath.startsWith(".") || relPath.startsWith(".."))
+            continue;
+        try {
+            const fileStat = await stat(absPath);
+            if (fileStat.size > MAX_FILE_SIZE)
+                continue;
+            const content = await readFile(absPath, "utf-8");
+            const { data } = parseFrontmatter(content);
+            // Check all filters match
+            let match = true;
+            for (const [key, value] of Object.entries(filters)) {
+                const fieldValue = data[key];
+                if (Array.isArray(fieldValue)) {
+                    if (!fieldValue.includes(value)) {
+                        match = false;
+                        break;
+                    }
+                }
+                else if (String(fieldValue) !== value) {
+                    match = false;
+                    break;
+                }
+            }
+            if (match) {
+                const lines = content.split("\n");
+                const firstContentLine = lines.find((l) => l.startsWith("# ") || (l.trim() && !l.startsWith("---") && !l.match(/^\w+:\s/)));
+                results.push({
+                    path: relPath,
+                    snippet: firstContentLine?.trim().slice(0, 200) ?? "",
+                    line: 1,
+                });
+            }
+        }
+        catch (e) {
+            if (e.code !== "ENOENT") {
+                console.error(`[search] Skipping unreadable file ${absPath}:`, e.message);
+            }
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=search-engine.js.map

package/dist/lib/search-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-engine.js","sourceRoot":"","sources":["../../src/lib/search-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAQ1C;;;GAGG;AACH,SAAS,kBAAkB,CAAC,SAAiB,EAAE,UAAkB;IAC/D,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,8BAA8B,UAAU,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,SAAiB,EAAE,OAAe;IACxD,OAAO,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAAiB,EACjB,KAAa,EACb,UAGI,EAAE;IAEN,MAAM,EAAE,UAAU,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;IAE3C,MAAM,IAAI,GAAG;QACX,QAAQ;QACR,aAAa,EAAE,GAAG,EAAE,qBAAqB;QACzC,QAAQ,EAAE,IAAI;QACd,eAAe;QACf,iBAAiB;QACjB,KAAK;KACN,CAAC;IAEF,yCAAyC;IACzC,MAAM,UAAU,GAAG,UAAU;QAC3B,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC;QAC3C,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,EAAE;YAClE,OAAO,EAAE,MAAM;YACf,SAAS,EAAE,IAAI,GAAG,IAAI;SACvB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAmB,EAAE,CAAC;QAEnC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;oBACtC,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;oBACnD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;oBAExC,4CAA4C;oBAC5C,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;wBAAE,SAAS;oBAElE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;oBACxD,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK;wBAAE,MAAM;gBACrC,CAAC;YACH,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACxB,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,6CAA6C;QAC7C,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9C,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,OAA+B,EAC/B,UAA8B,EAAE;IAEhC,MAAM,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;IAE/B,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,2EAA2E;IAC3E,iEAAiE;IACjE,qEAAqE;IACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC;IAC/C,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAE7C,IAAI,UAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE;YAC3C,sBAAsB;YACtB,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,UAAU;YACtB,UAAU,EAAE,YAAY;YACxB,SAAS;SACV,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;QAChD,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9C,MAAM,CAAC,CAAC;IACV,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,iDAAiD;IAEhF,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK;YAAE,MAAM;QAEnC,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAElE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,QAAQ,CAAC,IAAI,GAAG,aAAa;gBAAE,SAAS;YAE5C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAE3C,0BAA0B;YAC1B,IAAI,KAAK,GAAG,IAAI,CAAC;YACjB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC9B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBAAC,KAAK,GAAG,KAAK,CAAC;wBAAC,MAAM;oBAAC,CAAC;gBAC5D,CAAC;qBAAM,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,KAAK,EAAE,CAAC;oBACxC,KAAK,GAAG,KAAK,CAAC;oBACd,MAAM;gBACR,CAAC;YACH,CAAC;YAED,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CACvF,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE;oBACrD,IAAI,EAAE,CAAC;iBACR,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxB,OAAO,CAAC,KAAK,CAAC,qCAAqC,OAAO,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/search-engine.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/lib/search-engine.test.js

@@ -0,0 +1,120 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { mkdir, writeFile, rm } from "fs/promises";
+import { tmpdir } from "os";
+import { join } from "path";
+import { searchText, searchStructured } from "./search-engine.js";
+describe("search-engine", () => {
+    let vaultRoot;
+    beforeEach(async () => {
+        vaultRoot = join(tmpdir(), `search-test-${Date.now()}-${Math.random().toString(36).slice(2)}`);
+        await mkdir(vaultRoot, { recursive: true });
+    });
+    afterEach(async () => {
+        await rm(vaultRoot, { recursive: true, force: true });
+    });
+    describe("searchText", () => {
+        beforeEach(async () => {
+            await writeFile(join(vaultRoot, "doc1.md"), "# Hello World\n\nThis is a test document.");
+            await writeFile(join(vaultRoot, "doc2.md"), "# Another Doc\n\nNo matching content here.");
+            await mkdir(join(vaultRoot, "subdir"), { recursive: true });
+            await writeFile(join(vaultRoot, "subdir/nested.md"), "# Nested Hello\n\nHello from nested path.");
+            await mkdir(join(vaultRoot, ".obsidian"), { recursive: true });
+            await writeFile(join(vaultRoot, ".obsidian/config"), "hello in hidden");
+        });
+        it("finds matching documents", async () => {
+            const results = await searchText(vaultRoot, "Hello");
+            expect(results.length).toBeGreaterThan(0);
+            expect(results.some(r => r.path === "doc1.md")).toBe(true);
+        });
+        it("is case insensitive", async () => {
+            const results = await searchText(vaultRoot, "HELLO");
+            expect(results.length).toBeGreaterThan(0);
+        });
+        it("respects limit parameter", async () => {
+            const results = await searchText(vaultRoot, "Hello", { limit: 1 });
+            expect(results.length).toBeLessThanOrEqual(1);
+        });
+        it("filters by path", async () => {
+            const results = await searchText(vaultRoot, "Hello", { pathFilter: "subdir" });
+            expect(results.every(r => r.path.startsWith("subdir"))).toBe(true);
+        });
+        it("excludes hidden directories", async () => {
+            const results = await searchText(vaultRoot, "hello");
+            expect(results.every(r => !r.path.startsWith(".obsidian"))).toBe(true);
+        });
+        it("returns empty array for no matches", async () => {
+            const results = await searchText(vaultRoot, "zzzznomatchxxxx");
+            expect(results).toEqual([]);
+        });
+        it("rejects traversal attack in pathFilter", async () => {
+            await expect(searchText(vaultRoot, "test", { pathFilter: "../outside" })).rejects.toThrow();
+        });
+        it("rejects absolute path in pathFilter", async () => {
+            await expect(searchText(vaultRoot, "test", { pathFilter: "/etc/passwd" })).rejects.toThrow();
+        });
+        it("returns path, snippet, and line number", async () => {
+            const results = await searchText(vaultRoot, "World");
+            expect(results.length).toBeGreaterThan(0);
+            expect(results[0].path).toBeDefined();
+            expect(results[0].snippet).toBeDefined();
+            expect(results[0].line).toBeGreaterThan(0);
+        });
+        it("handles special regex characters safely", async () => {
+            await writeFile(join(vaultRoot, "special.md"), "Content with $pecial ch@rs");
+            const results = await searchText(vaultRoot, "$pecial");
+            expect(results.length).toBeGreaterThan(0);
+        });
+    });
+    describe("searchStructured", () => {
+        beforeEach(async () => {
+            await writeFile(join(vaultRoot, "task1.md"), "---\ntype: task\nstatus: in-progress\nproject: test-project\ntags:\n  - urgent\n  - backend\n---\n\n# Task 1\n\nTask one content.");
+            await writeFile(join(vaultRoot, "task2.md"), "---\ntype: task\nstatus: done\nproject: other-project\ntags:\n  - frontend\n---\n\n# Task 2\n\nTask two content.");
+            await writeFile(join(vaultRoot, "note.md"), "---\ntype: index\n---\n\n# Note\n\nJust a note.");
+        });
+        it("filters by single frontmatter field", async () => {
+            const results = await searchStructured(vaultRoot, { type: "task" });
+            expect(results.length).toBe(2);
+        });
+        it("filters by multiple fields", async () => {
+            const results = await searchStructured(vaultRoot, { type: "task", status: "done" });
+            expect(results.length).toBe(1);
+            expect(results[0].path).toBe("task2.md");
+        });
+        it("filters by array field value", async () => {
+            const results = await searchStructured(vaultRoot, { tags: "urgent" });
+            expect(results.length).toBe(1);
+            expect(results[0].path).toBe("task1.md");
+        });
+        it("respects limit parameter", async () => {
+            const results = await searchStructured(vaultRoot, { type: "task" }, { limit: 1 });
+            expect(results.length).toBeLessThanOrEqual(1);
+        });
+        it("returns empty array for no matches", async () => {
+            const results = await searchStructured(vaultRoot, { type: "nonexistent" });
+            expect(results).toEqual([]);
+        });
+        it("excludes hidden directories", async () => {
+            await mkdir(join(vaultRoot, ".hidden"), { recursive: true });
+            await writeFile(join(vaultRoot, ".hidden/secret.md"), "---\ntype: secret\n---\n\n# Secret");
+            const results = await searchStructured(vaultRoot, { type: "secret" });
+            expect(results.every(r => !r.path.startsWith("."))).toBe(true);
+        });
+        it("returns path and snippet", async () => {
+            const results = await searchStructured(vaultRoot, { type: "task" });
+            expect(results.length).toBeGreaterThan(0);
+            expect(results[0].path).toBeDefined();
+            expect(results[0].snippet).toBeDefined();
+        });
+        it("handles files without frontmatter", async () => {
+            await writeFile(join(vaultRoot, "plain.md"), "Just plain text");
+            const results = await searchStructured(vaultRoot, { type: "task" });
+            expect(results.every(r => r.path !== "plain.md")).toBe(true);
+        });
+        it("handles malformed YAML gracefully", async () => {
+            await writeFile(join(vaultRoot, "bad.md"), "---\ninvalid: yaml: content\n---\n\n# Bad");
+            const results = await searchStructured(vaultRoot, { type: "task" });
+            expect(results.every(r => r.path !== "bad.md")).toBe(true);
+        });
+    });
+});
+//# sourceMappingURL=search-engine.test.js.map

package/dist/lib/search-engine.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-engine.test.js","sourceRoot":"","sources":["../../src/lib/search-engine.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAElE,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,SAAiB,CAAC;IAEtB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/F,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,2CAA2C,CAAC,CAAC;YACzF,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,4CAA4C,CAAC,CAAC;YAC1F,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,EAAE,2CAA2C,CAAC,CAAC;YAClG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;YACnC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YACnE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;YAC/B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/E,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;YAC/D,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC9F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YACzC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,4BAA4B,CAAC,CAAC;YAC7E,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACvD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,MAAM,SAAS,CACb,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAC3B,mIAAmI,CACpI,CAAC;YACF,MAAM,SAAS,CACb,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAC3B,kHAAkH,CACnH,CAAC;YACF,MAAM,SAAS,CACb,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAC1B,iDAAiD,CAClD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACpE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACpF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACtE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAClF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;YAC3E,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,MAAM,SAAS,CACb,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,EACpC,oCAAoC,CACrC,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACtE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACpE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,iBAAiB,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACpE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,2CAA2C,CAAC,CAAC;YACxF,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACpE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/session-registry.d.ts

@@ -0,0 +1,59 @@
+export interface Session {
+    id: string;
+    tool: string;
+    project: string | null;
+    task_summary: string | null;
+    files_touched: string[];
+    started_at: string;
+    last_heartbeat: string;
+    completed_at: string | null;
+    status: "active" | "stale" | "completed";
+}
+export interface SessionRegistry {
+    sessions: Session[];
+}
+interface Conflict {
+    session_id: string;
+    tool: string;
+    overlapping_files: string[];
+    task_summary: string | null;
+}
+/**
+ * Manages the session registry for multi-agent coordination.
+ * Uses PID lockfiles for safe concurrent access.
+ */
+export declare class SessionRegistryManager {
+    private readonly ttlHours;
+    private readonly registryPath;
+    private readonly locksDir;
+    constructor(vaultPath: string, ttlHours: number);
+    /**
+     * Register a new session. Returns session ID and any conflicts.
+     */
+    register(tool: string, project: string | null, taskSummary?: string | null, filesTouched?: string[]): Promise<{
+        session_id: string;
+        conflicts: Conflict[];
+    }>;
+    /**
+     * Update heartbeat for a session. Returns false if session not found.
+     */
+    heartbeat(sessionId: string): Promise<boolean>;
+    /**
+     * Mark a session as completed.
+     */
+    complete(sessionId: string, summary?: string): Promise<void>;
+    /**
+     * List active sessions. Persists stale status changes.
+     */
+    listActive(): Promise<Session[]>;
+    private cleanOldCompleted;
+    private cleanStale;
+    private readRegistry;
+    private writeRegistry;
+    /**
+     * PID-based lockfile for safe concurrent writes.
+     * Times out after 2 seconds with retry.
+     */
+    private withLock;
+}
+export {};