context-mode 1.0.143 → 1.0.145

package/build/adapters/vscode-copilot/index.js

@@ -13,6 +13,7 @@ import { readFileSync, mkdirSync, accessSync, existsSync, constants, } from "nod
 import { resolve, join } from "node:path";
 import { homedir } from "node:os";
 import { CopilotBaseAdapter } from "../copilot-base.js";
+import { resolveContextModeDataRoot } from "../base.js";
 // ─────────────────────────────────────────────────────────
 // Hook constants (re-exported from hooks.ts)
 // ─────────────────────────────────────────────────────────
@@ -45,6 +46,16 @@ export class VSCodeCopilotAdapter extends CopilotBaseAdapter {
         return process.env.CLAUDE_PROJECT_DIR || process.cwd();
     }
     getSessionDir() {
+        // Issue #649: CONTEXT_MODE_DATA_DIR wins over both the .github project
+        // dir and the ~/.vscode fallback so dev-container/CI users can pin
+        // storage to a writable volume regardless of whether a .github tree
+        // happens to exist in cwd.
+        const override = resolveContextModeDataRoot();
+        if (override) {
+            const overrideDir = join(override, "context-mode", "sessions");
+            mkdirSync(overrideDir, { recursive: true });
+            return overrideDir;
+        }
         // Prefer .github/context-mode/sessions/ if .github exists,
         // otherwise fall back to ~/.vscode/context-mode/sessions/
         const githubDir = resolve(".github", "context-mode", "sessions");

package/build/server.d.ts

@@ -21,6 +21,41 @@ export declare function emitSuppressionDiagnostic(opts?: {
 }): void;
 /** Test-only: reset the one-shot emission flag so suites can re-exercise. */
 export declare function __resetSuppressionDiagnosticForTests(): void;
+/**
+ * Issue #637 — register an explicit empty `tools/list` handler on the McpServer.
+ *
+ * Background: when `suppressMcpToolsForNativePluginHost` is true, every
+ * `server.registerTool()` call is short-circuited (returns `undefined` above).
+ * The MCP SDK only installs the SDK-default `tools/list` handler when at least
+ * one `registerTool()` reaches `setToolRequestHandlers()` internally
+ * (mcp.js:56-67). Suppressing every registration leaves `tools/list`
+ * unregistered, and the framework's RPC layer answers it with
+ * `-32601 "Method not found"`.
+ *
+ * The reporter of #637 (SquirrelRat) inspected the suppressed child via
+ * `tools/list` and read the JSON-RPC error as "the plugin never registers any
+ * ctx_* tools" — when in fact the plugin DOES register all 11 tools natively
+ * (verified at `src/adapters/opencode/plugin.ts:469` and
+ * `tests/opencode-plugin.test.ts:88`). The misleading -32601 is the seed of
+ * the #637 perception.
+ *
+ * This helper installs an explicit handler that returns `{tools: []}` — a
+ * spec-compliant empty list. Paired with the existing #623 stderr diagnostic,
+ * an operator now sees:
+ *   - wire response: `{tools: []}` (matches expectation, no JSON-RPC error)
+ *   - stderr: `[context-mode] ctx_* tools/list intentionally empty… (#623)`
+ *
+ * Idempotent: throws inside SDK if called twice on the same server because
+ * `assertCanSetRequestHandler` (mcp.js:60) rejects duplicate registrations;
+ * we therefore install the SDK's default tool handlers FIRST (via a no-op
+ * registerTool of a fake tool, immediately removed) only if needed. To keep
+ * the public surface minimal, we just call `server.server.setRequestHandler`
+ * directly — that is the same low-level call used for prompts/resources at
+ * server.ts:259-261 and avoids the SDK guard entirely.
+ *
+ * Exported for test (#637 in-memory regression guard).
+ */
+export declare function registerEmptyToolsListHandler(target?: McpServer): void;
 type ToolContextOverride = {
     projectDir: string;
     sessionId?: string;

package/build/server.js

@@ -186,6 +186,44 @@ export function emitSuppressionDiagnostic(opts = {}) {
 export function __resetSuppressionDiagnosticForTests() {
     __suppressionDiagnosticEmitted = false;
 }
+/**
+ * Issue #637 — register an explicit empty `tools/list` handler on the McpServer.
+ *
+ * Background: when `suppressMcpToolsForNativePluginHost` is true, every
+ * `server.registerTool()` call is short-circuited (returns `undefined` above).
+ * The MCP SDK only installs the SDK-default `tools/list` handler when at least
+ * one `registerTool()` reaches `setToolRequestHandlers()` internally
+ * (mcp.js:56-67). Suppressing every registration leaves `tools/list`
+ * unregistered, and the framework's RPC layer answers it with
+ * `-32601 "Method not found"`.
+ *
+ * The reporter of #637 (SquirrelRat) inspected the suppressed child via
+ * `tools/list` and read the JSON-RPC error as "the plugin never registers any
+ * ctx_* tools" — when in fact the plugin DOES register all 11 tools natively
+ * (verified at `src/adapters/opencode/plugin.ts:469` and
+ * `tests/opencode-plugin.test.ts:88`). The misleading -32601 is the seed of
+ * the #637 perception.
+ *
+ * This helper installs an explicit handler that returns `{tools: []}` — a
+ * spec-compliant empty list. Paired with the existing #623 stderr diagnostic,
+ * an operator now sees:
+ *   - wire response: `{tools: []}` (matches expectation, no JSON-RPC error)
+ *   - stderr: `[context-mode] ctx_* tools/list intentionally empty… (#623)`
+ *
+ * Idempotent: throws inside SDK if called twice on the same server because
+ * `assertCanSetRequestHandler` (mcp.js:60) rejects duplicate registrations;
+ * we therefore install the SDK's default tool handlers FIRST (via a no-op
+ * registerTool of a fake tool, immediately removed) only if needed. To keep
+ * the public surface minimal, we just call `server.server.setRequestHandler`
+ * directly — that is the same low-level call used for prompts/resources at
+ * server.ts:259-261 and avoids the SDK guard entirely.
+ *
+ * Exported for test (#637 in-memory regression guard).
+ */
+export function registerEmptyToolsListHandler(target = server) {
+    target.server.registerCapabilities({ tools: { listChanged: false } });
+    target.server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: [] }));
+}
 const originalRegisterTool = server.registerTool.bind(server);
 server.registerTool = (...args) => {
     const [name, config, handler] = args;
@@ -196,6 +234,16 @@ server.registerTool = (...args) => {
     REGISTERED_CTX_TOOLS.push({ name, config, handler });
     return originalRegisterTool(...args);
 };
+// Issue #637 — when suppression is active, install the empty tools/list handler
+// once at module-init time so the suppressed MCP child responds with
+// `{tools: []}` instead of JSON-RPC `-32601 Method not found`. Pair with the
+// #623 stderr diagnostic that explains WHY the list is empty. Skipped for the
+// embedded plugin-import path because the embedded process is not the stdio
+// MCP child an operator would inspect — it lives inside the OpenCode/Kilo
+// host and never speaks JSON-RPC over stdio.
+if (suppressMcpToolsForNativePluginHost && process.env.CONTEXT_MODE_EMBEDDED_PLUGIN_TOOLS !== "1") {
+    registerEmptyToolsListHandler(server);
+}
 const projectDirOverride = new AsyncLocalStorage();
 export async function withProjectDirOverride(projectDir, fn) {
     const ctx = typeof projectDir === "string" ? { projectDir } : projectDir;
@@ -204,7 +252,7 @@ export async function withProjectDirOverride(projectDir, fn) {
 // Register empty prompts/resources handlers so MCP clients don't get -32601 (#168).
 // OpenCode calls listPrompts()/listResources() unconditionally — the error can poison
 // the SDK transport layer, causing subsequent listTools() calls to fail permanently.
-import { ListPromptsRequestSchema, ListResourcesRequestSchema, ListResourceTemplatesRequestSchema } from "@modelcontextprotocol/sdk/types.js";
+import { ListPromptsRequestSchema, ListResourcesRequestSchema, ListResourceTemplatesRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
 server.server.registerCapabilities({ prompts: { listChanged: false }, resources: { listChanged: false } });
 server.server.setRequestHandler(ListPromptsRequestSchema, async () => ({ prompts: [] }));
 server.server.setRequestHandler(ListResourcesRequestSchema, async () => ({ resources: [] }));

package/build/store.js

@@ -524,7 +524,7 @@ export class ContentStore {
         highlight(chunks, 1, char(2), char(3)) AS highlighted
       FROM chunks
       JOIN sources ON sources.id = chunks.source_id
-      WHERE chunks MATCH ? AND sources.label LIKE ?
+      WHERE chunks MATCH ? AND sources.label LIKE ? ESCAPE '\\'
       ORDER BY rank
       LIMIT ?
     `);
@@ -569,7 +569,7 @@ export class ContentStore {
         highlight(chunks_trigram, 1, char(2), char(3)) AS highlighted
       FROM chunks_trigram
       JOIN sources ON sources.id = chunks_trigram.source_id
-      WHERE chunks_trigram MATCH ? AND sources.label LIKE ?
+      WHERE chunks_trigram MATCH ? AND sources.label LIKE ? ESCAPE '\\'
       ORDER BY rank
       LIMIT ?
     `);
@@ -615,7 +615,7 @@ export class ContentStore {
         highlight(chunks, 1, char(2), char(3)) AS highlighted
       FROM chunks
       JOIN sources ON sources.id = chunks.source_id
-      WHERE chunks MATCH ? AND sources.label LIKE ? AND chunks.content_type = ?
+      WHERE chunks MATCH ? AND sources.label LIKE ? ESCAPE '\\' AND chunks.content_type = ?
       ORDER BY rank
       LIMIT ?
     `);
@@ -660,7 +660,7 @@ export class ContentStore {
         highlight(chunks_trigram, 1, char(2), char(3)) AS highlighted
       FROM chunks_trigram
       JOIN sources ON sources.id = chunks_trigram.source_id
-      WHERE chunks_trigram MATCH ? AND sources.label LIKE ? AND chunks_trigram.content_type = ?
+      WHERE chunks_trigram MATCH ? AND sources.label LIKE ? ESCAPE '\\' AND chunks_trigram.content_type = ?
       ORDER BY rank
       LIMIT ?
     `);
@@ -859,7 +859,19 @@ export class ContentStore {
         }));
     }
     #sourceFilterParam(source, sourceMatchMode) {
-        return sourceMatchMode === "exact" ? source : `%${source}%`;
+        if (sourceMatchMode === "exact")
+            return source;
+        // Escape SQLite LIKE metacharacters so user-supplied source labels
+        // containing `_`, `%`, or `\` are matched literally rather than as
+        // wildcards. Backslash must be replaced first (otherwise subsequent
+        // escapes would themselves be re-escaped). Paired with `ESCAPE '\'`
+        // in the four prepared LIKE statements (#stmtSearchPorter*,
+        // #stmtSearchTrigram*). Regression: #646.
+        const escaped = source
+            .replace(/\\/g, "\\\\")
+            .replace(/%/g, "\\%")
+            .replace(/_/g, "\\_");
+        return `%${escaped}%`;
     }
     search(query, limit = 3, source, mode = "AND", contentType, sourceMatchMode = "like") {
         const sanitized = sanitizeQuery(query, mode);