codesift-mcp 0.5.30 → 0.8.2

package/dist/utils/tsconfig-paths.js

@@ -3,9 +3,10 @@
  * `tsconfig.json`, using `get-tsconfig` for `extends`-chain + paths handling.
  *
  * Two-level cache keeps long-running MCP server processes happy:
- *   - `dirToConfigCache`: importer directory absolute path → nearest tsconfig.json path
- *     (or null when none found up to repoRoot). Entries are per queried dir only
- *     so adding/removing tsconfig is visible after `clearTsconfigCache()`.
+ *   - `dirToConfigCache`: `${repoRoot}::${importerDir}` → nearest tsconfig.json path
+ *     (or null when none found up to repoRoot). Includes repoRoot so the same
+ *     importer directory analyzed under different root boundaries does not reuse
+ *     a stale tsconfig from another indexing scope.
  *   - `configCache`: tsconfig.json absolute path → parsed { matcher, baseUrl }.
  *
  * Both caches are cleared on `clearTsconfigCache()`. The graph builder calls
@@ -34,10 +35,18 @@ const TS_EXTENSIONS = [
     ".d.ts",
     ".js",
     ".jsx",
+    ".mts",
+    ".cts",
+    ".mjs",
+    ".cjs",
     "/index.ts",
     "/index.tsx",
     "/index.d.ts",
     "/index.js",
+    "/index.mts",
+    "/index.cts",
+    "/index.mjs",
+    "/index.cjs",
 ];
 /** Clear both caches. Called at the start of `index_folder`. */
 export function clearTsconfigCache() {
@@ -52,20 +61,37 @@ function isDirInsideRepo(repoRootAbs, dir) {
     const rel = relative(repoRootAbs, abs);
     return rel !== "" && !isAbsolute(rel) && !rel.startsWith(`..${sep}`) && !rel.startsWith("..");
 }
+/** True when `resolvedFileAbs` is a file path inside `repoRootAbs` (no `..` escape). */
+function isResolvedFileInsideRepo(repoRootAbs, resolvedFileAbs) {
+    const abs = resolve(resolvedFileAbs);
+    const rel = relative(repoRootAbs, abs);
+    return (rel !== "" &&
+        !isAbsolute(rel) &&
+        !rel.startsWith(`..${sep}`) &&
+        !rel.startsWith(".."));
+}
+function dirToConfigCacheKey(importerDir, repoRoot) {
+    return `${resolve(repoRoot)}::${resolve(importerDir)}`;
+}
 /** Walk up from `dir` to `repoRoot`, find nearest `tsconfig.json`.
  * Returns absolute path of the config file, or null if none found.
- * Caches result only for the requested `dir` (not every ancestor) so late-added
- * or removed tsconfig files are visible on the next lookup after cache clear. */
+ * Caches every ancestor visited during the walk under the compound `(repoRoot, dir)`
+ * key — sibling lookups under the same parent are O(1) after the first hit. */
 function findNearestTsconfig(dir, repoRoot) {
-    const cached = dirToConfigCache.get(dir);
+    const cacheKey = dirToConfigCacheKey(dir, repoRoot);
+    const cached = dirToConfigCache.get(cacheKey);
     if (cached !== undefined)
         return cached;
     const repoRootAbs = resolve(repoRoot);
+    const visited = [];
     let cur = resolve(dir);
     while (isDirInsideRepo(repoRootAbs, cur)) {
+        visited.push(cur);
         const candidate = join(cur, "tsconfig.json");
         if (existsSync(candidate)) {
-            dirToConfigCache.set(dir, candidate);
+            for (const v of visited) {
+                dirToConfigCache.set(dirToConfigCacheKey(v, repoRoot), candidate);
+            }
             return candidate;
         }
         const parent = dirname(cur);
@@ -73,7 +99,9 @@ function findNearestTsconfig(dir, repoRoot) {
             break;
         cur = parent;
     }
-    dirToConfigCache.set(dir, null);
+    for (const v of visited) {
+        dirToConfigCache.set(dirToConfigCacheKey(v, repoRoot), null);
+    }
     return null;
 }
 /** Parse a tsconfig.json (with `extends` chain) and build a paths matcher.
@@ -141,6 +169,11 @@ export function resolveTsAliasedImport(importerFile, importPath, repoRoot) {
     // Relative paths are not aliases — short-circuit.
     if (importPath.startsWith("."))
         return null;
+    // Absolute POSIX/Windows specifiers must not join against baseUrl/paths targets
+    // (would escape intended repo scope).
+    if (isAbsolute(importPath))
+        return null;
+    const repoRootAbs = resolve(repoRoot);
     const importerDir = dirname(resolve(importerFile));
     const configPath = findNearestTsconfig(importerDir, repoRoot);
     if (!configPath)
@@ -148,21 +181,26 @@ export function resolveTsAliasedImport(importerFile, importPath, repoRoot) {
     const config = loadTsconfig(configPath);
     if (!config)
         return null;
+    const acceptResolved = (hit) => {
+        if (!hit)
+            return null;
+        return isResolvedFileInsideRepo(repoRootAbs, hit) ? hit : null;
+    };
     // Try paths matcher first (alias mappings).
     if (config.pathsMatcher) {
         const candidates = config.pathsMatcher(importPath);
         for (const candidate of candidates) {
-            const hit = probeFile(candidate);
-            if (hit)
-                return hit;
+            const accepted = acceptResolved(probeFile(candidate));
+            if (accepted)
+                return accepted;
         }
     }
     // Fallback: bare specifier resolved against baseUrl.
     if (config.baseUrl) {
         const candidate = join(config.baseUrl, importPath);
-        const hit = probeFile(candidate);
-        if (hit)
-            return hit;
+        const accepted = acceptResolved(probeFile(candidate));
+        if (accepted)
+            return accepted;
     }
     return null;
 }

package/dist/utils/tsconfig-paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"tsconfig-paths.js","sourceRoot":"","sources":["../../src/utils/tsconfig-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAQ/D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmC,CAAC;AAC/D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAyB,CAAC;AAE1D,gFAAgF;AAChF,sDAAsD;AACtD,MAAM,aAAa,GAAG;IACpB,EAAE;IACF,KAAK;IACL,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,WAAW;IACX,YAAY;IACZ,aAAa;IACb,WAAW;CACZ,CAAC;AAEF,gEAAgE;AAChE,MAAM,UAAU,kBAAkB;IAChC,WAAW,CAAC,KAAK,EAAE,CAAC;IACpB,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,sEAAsE;AACtE,SAAS,eAAe,CAAC,WAAmB,EAAE,GAAW;IACvD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,GAAG,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACvC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAChG,CAAC;AAED;;;iFAGiF;AACjF,SAAS,mBAAmB,CAAC,GAAW,EAAE,QAAgB;IACxD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACrC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;mDAGmD;AACnD,SAAS,YAAY,CAAC,UAAkB;IACtC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,iDAAiD;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC;QAC1D,MAAM,OAAO,GAAG,UAAU;YACxB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;YAC3C,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,QAAQ,GAAqB;YACjC,YAAY,EAAE,OAAO;YACrB,OAAO;YACP,UAAU,EAAE,MAAM,CAAC,IAAI;SACxB,CAAC;QACF,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACtC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,oCAAoC,UAAU,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtG,CAAC;QACF,qEAAqE;QACrE,8BAA8B;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;qCACqC;AACrC,SAAS,SAAS,CAAC,SAAiB;IAClC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,SAAS,GAAG,GAAG,CAAC;QAC9B,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS;QACjC,mEAAmE;QACnE,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,CAAC;YACH,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,KAAK,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;mEAMmE;AACnE,MAAM,UAAU,sBAAsB,CACpC,YAAoB,EACpB,UAAkB,EAClB,QAAgB;IAEhB,kDAAkD;IAClD,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,mBAAmB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,4CAA4C;IAC5C,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACnD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;YACjC,IAAI,GAAG;gBAAE,OAAO,GAAG,CAAC;QACtB,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;IACtB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,mBAAmB;IACnB,YAAY;IACZ,SAAS;IACT,aAAa;IACb,iEAAiE;IACjE,kBAAkB,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI;IAC1C,eAAe,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI;CAC7C,CAAC"}
+{"version":3,"file":"tsconfig-paths.js","sourceRoot":"","sources":["../../src/utils/tsconfig-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAQ/D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmC,CAAC;AAC/D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAyB,CAAC;AAE1D,gFAAgF;AAChF,sDAAsD;AACtD,MAAM,aAAa,GAAG;IACpB,EAAE;IACF,KAAK;IACL,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,WAAW;IACX,YAAY;IACZ,aAAa;IACb,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,YAAY;CACb,CAAC;AAEF,gEAAgE;AAChE,MAAM,UAAU,kBAAkB;IAChC,WAAW,CAAC,KAAK,EAAE,CAAC;IACpB,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,sEAAsE;AACtE,SAAS,eAAe,CAAC,WAAmB,EAAE,GAAW;IACvD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,GAAG,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACvC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAChG,CAAC;AAED,wFAAwF;AACxF,SAAS,wBAAwB,CAAC,WAAmB,EAAE,eAAuB;IAC5E,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACvC,OAAO,CACL,GAAG,KAAK,EAAE;QACV,CAAC,UAAU,CAAC,GAAG,CAAC;QAChB,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;QAC3B,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CACtB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAmB,EAAE,QAAgB;IAChE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;AACzD,CAAC;AAED;;;+EAG+E;AAC/E,SAAS,mBAAmB,CAAC,GAAW,EAAE,QAAgB;IACxD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,gBAAgB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,gBAAgB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;mDAGmD;AACnD,SAAS,YAAY,CAAC,UAAkB;IACtC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,iDAAiD;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC;QAC1D,MAAM,OAAO,GAAG,UAAU;YACxB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;YAC3C,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,QAAQ,GAAqB;YACjC,YAAY,EAAE,OAAO;YACrB,OAAO;YACP,UAAU,EAAE,MAAM,CAAC,IAAI;SACxB,CAAC;QACF,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACtC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,oCAAoC,UAAU,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtG,CAAC;QACF,qEAAqE;QACrE,8BAA8B;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;qCACqC;AACrC,SAAS,SAAS,CAAC,SAAiB;IAClC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,SAAS,GAAG,GAAG,CAAC;QAC9B,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS;QACjC,mEAAmE;QACnE,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,CAAC;YACH,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,KAAK,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;mEAMmE;AACnE,MAAM,UAAU,sBAAsB,CACpC,YAAoB,EACpB,UAAkB,EAClB,QAAgB;IAEhB,kDAAkD;IAClD,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,gFAAgF;IAChF,sCAAsC;IACtC,IAAI,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAExC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,mBAAmB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,cAAc,GAAG,CAAC,GAAkB,EAAiB,EAAE;QAC3D,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,wBAAwB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,CAAC,CAAC;IAEF,4CAA4C;IAC5C,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACnD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;YACtD,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;QAChC,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACtD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAChC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,mBAAmB;IACnB,YAAY;IACZ,SAAS;IACT,aAAa;IACb,iEAAiE;IACjE,kBAAkB,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI;IAC1C,eAAe,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI;CAC7C,CAAC"}

package/dist/utils/wall-clock.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Race a promise against a wall-clock timer. On timeout, resolves to the
+ * sentinel returned by `onTimeout`. The original work continues to completion
+ * and is discarded — there is no cancellation token plumbed through the
+ * search pipeline. That is intentional: cancellation would require touching
+ * every async leaf in the codebase. Discarding the result is sufficient.
+ */
+export declare function raceWallClock<T, R>(work: Promise<T>, ms: number, onTimeout: () => R): Promise<T | R>;
+//# sourceMappingURL=wall-clock.d.ts.map

package/dist/utils/wall-clock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wall-clock.d.ts","sourceRoot":"","sources":["../../src/utils/wall-clock.ts"],"names":[],"mappings":"AAOA;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,CAAC,EAChC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAChB,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,CAAC,GACjB,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAKhB"}

package/dist/utils/wall-clock.js

@@ -0,0 +1,19 @@
+// Shared wall-clock cap helpers. Used by hot search paths whose telemetry
+// shows occasional 5-15 minute runaway calls (broad queries on huge repos,
+// cold semantic embeddings). The cap returns control to the agent quickly
+// with an actionable hint instead of hanging the conversation.
+const TIMEOUT = Symbol("codesift.wall-clock.timeout");
+/**
+ * Race a promise against a wall-clock timer. On timeout, resolves to the
+ * sentinel returned by `onTimeout`. The original work continues to completion
+ * and is discarded — there is no cancellation token plumbed through the
+ * search pipeline. That is intentional: cancellation would require touching
+ * every async leaf in the codebase. Discarding the result is sufficient.
+ */
+export function raceWallClock(work, ms, onTimeout) {
+    return Promise.race([
+        work,
+        new Promise((resolve) => setTimeout(() => resolve(TIMEOUT), ms)),
+    ]).then((v) => (v === TIMEOUT ? onTimeout() : v));
+}
+//# sourceMappingURL=wall-clock.js.map

package/dist/utils/wall-clock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wall-clock.js","sourceRoot":"","sources":["../../src/utils/wall-clock.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,+DAA+D;AAE/D,MAAM,OAAO,GAAG,MAAM,CAAC,6BAA6B,CAAC,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAgB,EAChB,EAAU,EACV,SAAkB;IAElB,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,IAAI;QACJ,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;KACjF,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAE,CAAO,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codesift-mcp",
-  "version": "0.5.30",
+  "version": "0.8.2",
   "description": "MCP server for code intelligence — 146 tools for symbol search, call graph, semantic search, route tracing, community detection, LSP bridge, secret detection, conversation search, and Hono framework intelligence",
   "license": "BSL-1.1",
   "author": "Greg Laskowski",

package/rules/codesift.md

@@ -159,11 +159,14 @@ Use this table to pick the right tool for each task:
 | starting a task, want tool recommendations | `plan_turn(query=...)` |
 | React codebase | `trace_component_tree("App")` + `analyze_hooks` |
 | React anti-patterns | `search_patterns("hook-in-condition")` |
-| React derived state | `search_patterns("derived-state")` |
-| React stale closure | `search_patterns("stale-closure-setstate")` |
-| React context perf trap | `search_patterns("context-provider-value-inline")` |
+| React derived state | `search_patterns("derived-state")` (T5) / `derived-state-reducer` / `derived-state-custom-setter` (T6) |
+| React stale closure | `search_patterns("stale-closure-setstate")` (T5) / `stale-closure-toggle` / `stale-closure-broken-functional` (T6) |
+| React context perf trap | `search_patterns("context-provider-value-inline")` (T5) / `context-provider-value-via-variable` / `context-provider-value-inline-destructured` (T6) |
 | React tabnabbing security | `search_patterns("jsx-no-target-blank")` |
 | React button submit foot-gun | `search_patterns("button-no-type")` |
+| React lazy without Suspense | `search_patterns("react-lazy-no-suspense-same-file")` (T6 single-file) |
+| React RSC non-serializable | `search_patterns("rsc-non-serializable-prop")` / `rsc-non-serializable-prop-deep` (T6 — Map/Set/Class) |
+| React ErrorBoundary incomplete | `search_patterns("error-boundary-incomplete")` (T6) |
 | React render-tree depth | `analyze_renders` → `entry.prop_chain_depth` (NOT prop-flow depth) |
 | React call graph (clean) | `trace_call_chain(filter_react_hooks=true)` |
 | new Next.js project (first look) | `framework_audit` |
@@ -188,10 +191,17 @@ Use this table to pick the right tool for each task:
 - `include_source=true` — include source code in results
 
 ### search_text
-- `group_by_file=true` — ~80% output reduction on many matches
-- `auto_group=true` — auto-switch to grouped above 50 matches
+**Decision tree (read first):**
+- **Identifier-only query** (e.g. `OrganizationService`, `useAuth`, `handleLogin`) → use `ranked=true`. Returns symbol-grouped, centrality-ranked hits with `containing_symbol`. Saves 1-3 follow-up `get_symbol` calls. **Auto-applied server-side** when caller passes no grouping options and the query matches `^[A-Za-z_][A-Za-z0-9_]{2,}$`.
+- **Error string / unknown phrase** (e.g. `"connection refused"`, `"is not a function"`) → omit grouping options. Server auto-groups by file above 30 matches.
+- **Already passing `top_k≥30`** → set `group_by_file=true` explicitly.
+- **ALWAYS** pass `file_pattern=` when scope is known.
+
+**Param reference:**
 - `ranked=true` — classifies hits by containing function, deduplicates (max 2/function), ranks by centrality. Returns `containing_symbol` field. Takes precedence over `auto_group`.
-- `file_pattern=` — always pass when scope is known
+- `group_by_file=true` — ~80% output reduction on many matches.
+- `auto_group=true` — auto-switch to grouped above 50 matches.
+- `file_pattern=` — required scope filter for repos > 500 files.
 
 ### assemble_context levels
 - `L0` — full source (use when editing)

package/rules/codesift.mdc

@@ -174,10 +174,17 @@ Use this table to pick the right tool for each task:
 - `include_source=true` — include source code in results
 
 ### search_text
-- `group_by_file=true` — ~80% output reduction on many matches
-- `auto_group=true` — auto-switch to grouped above 50 matches
+**Decision tree (read first):**
+- **Identifier-only query** (e.g. `OrganizationService`, `useAuth`, `handleLogin`) → use `ranked=true`. Returns symbol-grouped, centrality-ranked hits with `containing_symbol`. Saves 1-3 follow-up `get_symbol` calls. **Auto-applied server-side** when caller passes no grouping options and the query matches `^[A-Za-z_][A-Za-z0-9_]{2,}$`.
+- **Error string / unknown phrase** (e.g. `"connection refused"`, `"is not a function"`) → omit grouping options. Server auto-groups by file above 30 matches.
+- **Already passing `top_k≥30`** → set `group_by_file=true` explicitly.
+- **ALWAYS** pass `file_pattern=` when scope is known.
+
+**Param reference:**
 - `ranked=true` — classifies hits by containing function, deduplicates (max 2/function), ranks by centrality. Returns `containing_symbol` field. Takes precedence over `auto_group`.
-- `file_pattern=` — always pass when scope is known
+- `group_by_file=true` — ~80% output reduction on many matches.
+- `auto_group=true` — auto-switch to grouped above 50 matches.
+- `file_pattern=` — required scope filter for repos > 500 files.
 
 ### assemble_context levels
 - `L0` — full source (use when editing)

package/rules/codex.md

@@ -169,10 +169,17 @@ Use this table to pick the right tool for each task:
 - `include_source=true` — include source code in results
 
 ### search_text
-- `group_by_file=true` — ~80% output reduction on many matches
-- `auto_group=true` — auto-switch to grouped above 50 matches
+**Decision tree (read first):**
+- **Identifier-only query** (e.g. `OrganizationService`, `useAuth`, `handleLogin`) → use `ranked=true`. Returns symbol-grouped, centrality-ranked hits with `containing_symbol`. Saves 1-3 follow-up `get_symbol` calls. **Auto-applied server-side** when caller passes no grouping options and the query matches `^[A-Za-z_][A-Za-z0-9_]{2,}$`.
+- **Error string / unknown phrase** (e.g. `"connection refused"`, `"is not a function"`) → omit grouping options. Server auto-groups by file above 30 matches.
+- **Already passing `top_k≥30`** → set `group_by_file=true` explicitly.
+- **ALWAYS** pass `file_pattern=` when scope is known.
+
+**Param reference:**
 - `ranked=true` — classifies hits by containing function, deduplicates (max 2/function), ranks by centrality. Returns `containing_symbol` field. Takes precedence over `auto_group`.
-- `file_pattern=` — always pass when scope is known
+- `group_by_file=true` — ~80% output reduction on many matches.
+- `auto_group=true` — auto-switch to grouped above 50 matches.
+- `file_pattern=` — required scope filter for repos > 500 files.
 
 ### assemble_context levels
 - `L0` — full source (use when editing)

package/rules/gemini.md

@@ -170,10 +170,17 @@ Use this table to pick the right tool for each task:
 - `include_source=true` — include source code in results
 
 ### search_text
-- `group_by_file=true` — ~80% output reduction on many matches
-- `auto_group=true` — auto-switch to grouped above 50 matches
+**Decision tree (read first):**
+- **Identifier-only query** (e.g. `OrganizationService`, `useAuth`, `handleLogin`) → use `ranked=true`. Returns symbol-grouped, centrality-ranked hits with `containing_symbol`. Saves 1-3 follow-up `get_symbol` calls. **Auto-applied server-side** when caller passes no grouping options and the query matches `^[A-Za-z_][A-Za-z0-9_]{2,}$`.
+- **Error string / unknown phrase** (e.g. `"connection refused"`, `"is not a function"`) → omit grouping options. Server auto-groups by file above 30 matches.
+- **Already passing `top_k≥30`** → set `group_by_file=true` explicitly.
+- **ALWAYS** pass `file_pattern=` when scope is known.
+
+**Param reference:**
 - `ranked=true` — classifies hits by containing function, deduplicates (max 2/function), ranks by centrality. Returns `containing_symbol` field. Takes precedence over `auto_group`.
-- `file_pattern=` — always pass when scope is known
+- `group_by_file=true` — ~80% output reduction on many matches.
+- `auto_group=true` — auto-switch to grouped above 50 matches.
+- `file_pattern=` — required scope filter for repos > 500 files.
 
 ### assemble_context levels
 - `L0` — full source (use when editing)