context-mode 1.0.118 → 1.0.119

package/hooks/core/routing.mjs

@@ -157,6 +157,12 @@ const SAFE_COMMAND_PATTERNS = [
   /^pwd$/,
   /^whoami$/,
   /^hostname(?:\s+-[a-zA-Z]+)?$/,
+  // uname (#517): short-flag probes only (`-a`, `-srm`). No path operands —
+  // uname doesn't take any, and refusing them keeps the pattern strict.
+  /^uname(?:\s+-[a-zA-Z]+)?$/,
+  // id (#517): bare `id`, single short flag (`-u`, `-g`), or single user
+  // operand (`id mksglu`). Output is one line — bounded by definition.
+  /^id(?:\s+\S+)?$/,
   /^date(?:\s+[^\r\n]+)?$/,
   /^echo\s/,
   /^printf\s/,
@@ -166,6 +172,10 @@ const SAFE_COMMAND_PATTERNS = [
   /^readlink(?:\s+[^\r\n]+)?$/,
   /^basename(?:\s+[^\r\n]+)?$/,
   /^dirname(?:\s+[^\r\n]+)?$/,
+  // realpath (#517): canonical path resolution prints one line per operand.
+  // Same shape as readlink — single-line `[^\r\n]+` to mirror the operator-gate
+  // defense-in-depth from #470.
+  /^realpath(?:\s+[^\r\n]+)?$/,
   // Filesystem ops (silent on success, errors on stderr only).
   // For cp / mv / rm we explicitly refuse `-v` / `--verbose`: verbose
   // mode prints one line per file and can flood on big trees
@@ -177,6 +187,9 @@ const SAFE_COMMAND_PATTERNS = [
   /^mv(?!\s+-[a-zA-Z]*v\b)(?!\s+--verbose\b)\s+[^\r\n]+$/,
   /^cp(?!\s+-[a-zA-Z]*v\b)(?!\s+--verbose\b)\s+[^\r\n]+$/,
   /^rm(?!\s+-[a-zA-Z]*v\b)(?!\s+--verbose\b)\s+[^\r\n]+$/,
+  // ln (#517): silent on success — same `-v` / `--verbose` carve-out as
+  // cp/mv/rm. Bulk symlink operations with -v flood one line per link.
+  /^ln(?!\s+-[a-zA-Z]*v\b)(?!\s+--verbose\b)\s+[^\r\n]+$/,
   // ls — refuse recursive (-R / --recursive) to keep output bounded.
   /^ls(?!\s+-[a-zA-Z]*R)(?!\s+--recursive)(?:\s+[^\r\n]+)?$/,
   // git read-only / status subcommands

package/openclaw.plugin.json

@@ -3,7 +3,7 @@
   "name": "Context Mode",
   "kind": "tool",
   "description": "OpenClaw plugin that saves 98% of your context window. Sandboxed code execution in 11 languages, FTS5 knowledge base with BM25 ranking, and intent-driven search.",
-  "version": "1.0.118",
+  "version": "1.0.119",
   "sandbox": {
     "mode": "permissive",
     "filesystem_access": "full",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "context-mode",
-  "version": "1.0.118",
+  "version": "1.0.119",
   "type": "module",
   "description": "MCP plugin that saves 98% of your context window. Works with Claude Code, Gemini CLI, VS Code Copilot, OpenCode, and Codex CLI. Sandboxed code execution, FTS5 knowledge base, and intent-driven search.",
   "author": "Mert Koseoğlu",
@@ -84,10 +84,11 @@
     "LICENSE"
   ],
   "scripts": {
-    "build": "tsc && node -e \"if(process.platform!=='win32'){require('fs').chmodSync('build/cli.js',0o755)}\" && npm run bundle",
+    "build": "tsc && node -e \"if(process.platform!=='win32'){require('fs').chmodSync('build/cli.js',0o755)}\" && npm run bundle && npm run assert-bundle",
+    "assert-bundle": "node scripts/assert-bundle.mjs server.bundle.mjs cli.bundle.mjs hooks/session-extract.bundle.mjs hooks/session-snapshot.bundle.mjs hooks/session-db.bundle.mjs",
     "bundle": "esbuild src/server.ts --bundle --platform=node --target=node18 --format=esm --outfile=server.bundle.mjs --external:better-sqlite3 --external:turndown --external:turndown-plugin-gfm --external:@mixmark-io/domino --minify && esbuild src/cli.ts --bundle --platform=node --target=node18 --format=esm --outfile=cli.bundle.mjs --external:better-sqlite3 --minify && esbuild src/session/extract.ts --bundle --platform=node --target=node18 --format=esm --outfile=hooks/session-extract.bundle.mjs --minify && esbuild src/session/snapshot.ts --bundle --platform=node --target=node18 --format=esm --outfile=hooks/session-snapshot.bundle.mjs --minify && esbuild src/session/db.ts --bundle --platform=node --target=node18 --format=esm --outfile=hooks/session-db.bundle.mjs --external:better-sqlite3 --minify",
     "version-sync": "node scripts/version-sync.mjs",
-    "version": "node scripts/version-sync.mjs && git add package.json .claude-plugin/plugin.json .claude-plugin/marketplace.json .openclaw-plugin/openclaw.plugin.json .openclaw-plugin/package.json openclaw.plugin.json .pi/extensions/context-mode/package.json",
+    "version": "node scripts/version-sync.mjs && git add package.json .claude-plugin/plugin.json .claude-plugin/marketplace.json .cursor-plugin/plugin.json .codex-plugin/plugin.json .codex-plugin/marketplace.json .openclaw-plugin/openclaw.plugin.json .openclaw-plugin/package.json openclaw.plugin.json .pi/extensions/context-mode/package.json",
     "prepublishOnly": "npm run build",
     "dev": "npx tsx src/server.ts",
     "setup": "npx tsx src/cli.ts setup",
@@ -107,14 +108,12 @@
     "@clack/prompts": "^1.0.1",
     "@mixmark-io/domino": "^2.2.0",
     "@modelcontextprotocol/sdk": "^1.26.0",
+    "better-sqlite3": "^12.6.2",
     "picocolors": "^1.1.1",
     "turndown": "^7.2.0",
     "turndown-plugin-gfm": "^1.0.2",
     "zod": "^3.25.0"
   },
-  "optionalDependencies": {
-    "better-sqlite3": "^12.6.2"
-  },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.13",
     "@types/node": "^22.19.11",

package/scripts/heal-better-sqlite3.mjs

@@ -26,7 +26,7 @@
  */
 
 import { existsSync } from "node:fs";
-import { execSync, spawnSync } from "node:child_process";
+import { execSync, execFileSync, spawnSync } from "node:child_process";
 import { resolve } from "node:path";
 import { createRequire } from "node:module";
 
@@ -39,17 +39,64 @@ import { createRequire } from "node:module";
 export function healBetterSqlite3Binding(pkgRoot) {
   try {
     const bsqRoot = resolve(pkgRoot, "node_modules", "better-sqlite3");
+    const bindingPath = resolve(bsqRoot, "build", "Release", "better_sqlite3.node");
+    const npmBin = process.platform === "win32" ? "npm.cmd" : "npm";
+
     if (!existsSync(bsqRoot)) {
-      // No package at all — caller (ensure-deps install branch) handles this.
-      return { healed: false, reason: "package-missing" };
+      // ── Package itself missing (#514) ───────────────────────────────
+      // npm@7+ silently drops optionalDependencies whose engines field
+      // does not match the running Node version (Node 26 vs
+      // better-sqlite3@12.x → silent skip, package never written).
+      // Even after promoting the package back to dependencies, an
+      // existing install where the package directory was previously
+      // skipped will still have an empty slot. Take ownership and
+      // install the package by name with --no-optional, which forces
+      // npm to install the named package even if it would otherwise
+      // be filtered out as an optional dep.
+      try {
+        execFileSync(
+          npmBin,
+          [
+            "install",
+            "better-sqlite3",
+            "--no-optional",
+            "--no-save",
+            "--no-audit",
+            "--no-fund",
+          ],
+          {
+            cwd: pkgRoot,
+            stdio: "pipe",
+            timeout: 180000,
+            shell: process.platform === "win32",
+          },
+        );
+      } catch {
+        // Install failed — surface the cause via the manual-required
+        // exit so the caller (cli.ts upgrade verifier) reports it.
+        return { healed: false, reason: "package-missing" };
+      }
+      // Re-check after install. If npm wrote the package AND its
+      // postinstall produced the binding, we're done. Otherwise fall
+      // through into the binding-missing flow below.
+      if (existsSync(bindingPath)) {
+        return { healed: true, reason: "package-installed" };
+      }
+      if (!existsSync(bsqRoot)) {
+        // npm reported success but the directory is still absent.
+        // This indicates the engine-mismatch silent-skip is still in
+        // effect (e.g. npm < 7 or pnpm without --shamefully-hoist).
+        return { healed: false, reason: "package-missing" };
+      }
+      // Package present but binding still missing — recurse into
+      // the existing 3-layer heal that owns prebuild-install / npm
+      // install / actionable-stderr.
     }
-    const bindingPath = resolve(bsqRoot, "build", "Release", "better_sqlite3.node");
+
     if (existsSync(bindingPath)) {
       return { healed: true, reason: "binding-present" };
     }
 
-    const npmBin = process.platform === "win32" ? "npm.cmd" : "npm";
-
     // ── Layer A: spawn prebuild-install directly via process.execPath ──
     // Bypasses cmd.exe PATH and MSVC requirement.
     try {

package/scripts/heal-installed-plugins.mjs

@@ -179,3 +179,107 @@ export function healSettingsEnabledPlugins({ settingsPath, pluginKey }) {
 
   return { healed };
 }
+
+// ─────────────────────────────────────────────────────────────────────────
+// Issue #523 (v1.0.119) — Layer 5 heal: plugin.json mcpServers args
+//
+// /ctx-upgrade in v1.0.118 wrote `.mcp.json` with the literal
+// `${CLAUDE_PLUGIN_ROOT}` placeholder (#411) but did NOT touch
+// `.claude-plugin/plugin.json`. On Windows, start.mjs's `normalizeHooksOnStartup`
+// (#378) rewrites that file's `mcpServers["context-mode"].args[0]` to an
+// absolute path. If `pluginRoot` happens to be the upgrade tmpdir at the time
+// of normalization (or an earlier upgrade left absolute paths in place), the
+// resulting plugin.json carries a `<tmpdir>/context-mode-upgrade-<epoch>/start.mjs`
+// path. After Node tmpdir cleanup, MCP fails to spawn with ENOENT and the user
+// has no /ctx-upgrade escape hatch.
+//
+// This heal is the sibling of #411's `.mcp.json` fix:
+//   - Detects tmpdir-prefixed args[0] (epoch-pattern, OS-agnostic)
+//   - Rewrites to literal `${CLAUDE_PLUGIN_ROOT}/start.mjs` placeholder
+//   - Never touches sibling mcpServers entries (only `pluginKey`'s server)
+//   - Refuses to write outside `pluginCacheRoot` (path-traversal guard)
+//
+// Single source of truth shared by:
+//   - `start.mjs` HEAL 5b (every MCP boot)
+//   - `scripts/postinstall.mjs` (every `npm install -g context-mode`)
+//   - `src/cli.ts` upgrade() (post-bump)
+// ─────────────────────────────────────────────────────────────────────────
+
+/** Matches `<sep>context-mode-upgrade-<digits><sep>`. OS-agnostic. */
+const TMPDIR_UPGRADE_RE = /[/\\]context-mode-upgrade-\d+[/\\]/;
+const PLACEHOLDER_ARG = "${CLAUDE_PLUGIN_ROOT}/start.mjs";
+
+/**
+ * Heal `<pluginRoot>/.claude-plugin/plugin.json` mcpServers args.
+ *
+ * @param {{
+ *   pluginRoot: string,
+ *   pluginCacheRoot: string,
+ *   pluginKey: string,
+ * }} opts
+ * @returns {HealResult}
+ */
+export function healPluginJsonMcpServers({ pluginRoot, pluginCacheRoot, pluginKey }) {
+  if (!pluginRoot || !pluginCacheRoot || !pluginKey) {
+    return { healed: [], skipped: "missing-args" };
+  }
+
+  // Path-traversal guard: refuse to touch a plugin root that escapes the
+  // declared cache root. Mirrors HEAL 3's guard.
+  const resolvedRoot = resolve(pluginRoot);
+  const cacheRootWithSep = resolve(pluginCacheRoot) + sep;
+  if (!resolvedRoot.startsWith(cacheRootWithSep)) {
+    return { healed: [], skipped: "outside-cache-root" };
+  }
+
+  const pluginJsonPath = resolve(pluginRoot, ".claude-plugin", "plugin.json");
+  if (!existsSync(pluginJsonPath)) {
+    return { healed: [], skipped: "no-plugin-json" };
+  }
+
+  let raw;
+  try { raw = readFileSync(pluginJsonPath, "utf-8"); }
+  catch (err) { return { healed: [], error: `read-failed: ${(err && err.message) || err}` }; }
+
+  let parsed;
+  try { parsed = JSON.parse(raw); }
+  catch (err) { return { healed: [], error: `parse-failed: ${(err && err.message) || err}` }; }
+
+  const servers = parsed && parsed.mcpServers;
+  if (!servers || typeof servers !== "object") {
+    return { healed: [], skipped: "no-mcp-servers" };
+  }
+
+  // Derive our server name from pluginKey ("context-mode@context-mode" → "context-mode").
+  const ourServerName = pluginKey.split("@")[0];
+  const ours = servers[ourServerName];
+  if (!ours || typeof ours !== "object" || !Array.isArray(ours.args)) {
+    return { healed: [], skipped: "no-our-server" };
+  }
+
+  /** @type {string[]} */
+  const healed = [];
+  const before = ours.args;
+  const after = before.map((a) => {
+    if (typeof a !== "string") return a;
+    // Detect tmpdir-prefixed `context-mode-upgrade-<digits>` paths and
+    // rewrite to the literal placeholder that survives upgrades. Only
+    // rewrites when the trailing component is `start.mjs` (our entrypoint).
+    if (TMPDIR_UPGRADE_RE.test(a) && /[/\\]start\.mjs$/.test(a)) {
+      return PLACEHOLDER_ARG;
+    }
+    return a;
+  });
+  const changed = after.some((v, i) => v !== before[i]);
+  if (changed) {
+    ours.args = after;
+    healed.push("plugin-json-args");
+    try {
+      writeFileSync(pluginJsonPath, JSON.stringify(parsed, null, 2) + "\n", "utf-8");
+    } catch (err) {
+      return { healed: [], error: `write-failed: ${(err && err.message) || err}` };
+    }
+  }
+
+  return { healed };
+}

package/scripts/postinstall.mjs

@@ -14,7 +14,7 @@ import { dirname, resolve, join, sep } from "node:path";
 import { fileURLToPath } from "node:url";
 import { homedir } from "node:os";
 import { healBetterSqlite3Binding } from "./heal-better-sqlite3.mjs";
-import { healInstalledPlugins, healSettingsEnabledPlugins } from "./heal-installed-plugins.mjs";
+import { healInstalledPlugins, healSettingsEnabledPlugins, healPluginJsonMcpServers } from "./heal-installed-plugins.mjs";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const pkgRoot = resolve(__dirname, "..");
@@ -96,6 +96,40 @@ if (isGlobalInstall()) {
     }
     // skipped/error: silent — already covered by the prior heal's stderr line.
   } catch { /* never block install */ }
+
+  // v1.0.119: Layer 5b (Issue #523). Heal .claude-plugin/plugin.json's
+  // mcpServers["context-mode"].args[0] when /ctx-upgrade left a tmpdir-prefixed
+  // path baked in. Iterates EVERY installed cache entry's installPath so
+  // already-broken users self-recover the next time `npm install -g context-mode`
+  // runs. Best effort, never blocks install.
+  try {
+    const ipPath = resolve(homedir(), ".claude", "plugins", "installed_plugins.json");
+    const cacheRoot = resolve(homedir(), ".claude", "plugins", "cache");
+    if (existsSync(ipPath)) {
+      const ip = JSON.parse(readFileSync(ipPath, "utf-8"));
+      const entries = (ip && ip.plugins && ip.plugins["context-mode@context-mode"]) || [];
+      let healedAny = false;
+      if (Array.isArray(entries)) {
+        for (const entry of entries) {
+          const installPath = entry && entry.installPath;
+          if (typeof installPath !== "string" || !installPath) continue;
+          try {
+            const r = healPluginJsonMcpServers({
+              pluginRoot: installPath,
+              pluginCacheRoot: cacheRoot,
+              pluginKey: "context-mode@context-mode",
+            });
+            if (r && Array.isArray(r.healed) && r.healed.length > 0) {
+              healedAny = true;
+            }
+          } catch { /* per-entry best effort */ }
+        }
+      }
+      if (healedAny) {
+        process.stderr.write("context-mode: healed plugin.json mcpServers args (Issue #523)\n");
+      }
+    }
+  } catch { /* never block install */ }
 }
 
 // ── 0. Self-heal Layer 3: Backward symlink for stale registry (anthropics/claude-code#46915) ──