context-mode 1.0.92 → 1.0.94

package/.claude-plugin/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Claude Code plugins by Mert Koseoğlu",
-    "version": "1.0.92"
+    "version": "1.0.94"
   },
   "plugins": [
     {
       "name": "context-mode",
       "source": "./",
       "description": "Claude Code MCP plugin that saves 98% of your context window. Sandboxed code execution in 11 languages, FTS5 knowledge base with BM25 ranking, and intent-driven search.",
-      "version": "1.0.92",
+      "version": "1.0.94",
       "author": {
         "name": "Mert Koseoğlu"
       },

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "context-mode",
-  "version": "1.0.92",
+  "version": "1.0.94",
   "description": "MCP server that saves 98% of your context window with session continuity. Sandboxed code execution in 11 languages, FTS5 knowledge base with BM25 ranking, and automatic state restore across compactions.",
   "author": {
     "name": "Mert Koseoğlu",

package/.openclaw-plugin/openclaw.plugin.json

@@ -3,7 +3,7 @@
   "name": "Context Mode",
   "kind": "tool",
   "description": "OpenClaw plugin that saves 98% of your context window. Sandboxed code execution in 11 languages, FTS5 knowledge base with BM25 ranking, and intent-driven search.",
-  "version": "1.0.92",
+  "version": "1.0.94",
   "sandbox": {
     "mode": "permissive",
     "filesystem_access": "full",

package/.openclaw-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "context-mode",
-  "version": "1.0.92",
+  "version": "1.0.94",
   "description": "OpenClaw plugin that saves 98% of your context window. Sandboxed code execution in 11 languages, FTS5 knowledge base with BM25 ranking, and intent-driven search.",
   "author": {
     "name": "Mert Koseoğlu",

package/build/cli.d.ts

@@ -13,3 +13,5 @@
  */
 /** Normalize Windows backslash paths to forward slashes for Bash (MSYS2) compatibility. */
 export declare function toUnixPath(p: string): string;
+export declare function npmExecFile(args: string[], opts?: Record<string, unknown>): void;
+export declare function npmExec(command: string, opts?: Record<string, unknown>): void;

package/build/cli.js

@@ -120,6 +120,26 @@ else {
 export function toUnixPath(p) {
     return p.replace(/\\/g, "/");
 }
+/**
+ * Windows-safe npm execution. On Windows:
+ * - "npm" → "npm.cmd" (Node won't resolve via PATHEXT in execFile)
+ * - shell: true required (Node v20+ CVE-2024-27980 mitigation)
+ * See: https://github.com/mksglu/context-mode/issues/344
+ */
+const isWin = process.platform === "win32";
+export function npmExecFile(args, opts = {}) {
+    execFileSync(isWin ? "npm.cmd" : "npm", args, {
+        ...opts,
+        ...(isWin ? { shell: true } : {}),
+    });
+}
+export function npmExec(command, opts = {}) {
+    const { execSync: es } = require("node:child_process");
+    es(isWin ? command.replace(/^npm /, "npm.cmd ") : command, {
+        ...opts,
+        ...(isWin ? { shell: true } : {}),
+    });
+}
 function defaultPluginRoot() {
     const __filename = fileURLToPath(import.meta.url);
     const __dirname = dirname(__filename);
@@ -400,7 +420,7 @@ async function insight(port) {
         if (!existsSync(join(cacheDir, "node_modules"))) {
             console.log("Installing dependencies (first run)...");
             try {
-                execSync("npm install --production=false", { cwd: cacheDir, stdio: "inherit", timeout: 300000 });
+                npmExec("npm install --production=false", { cwd: cacheDir, stdio: "inherit", timeout: 300000 });
             }
             catch {
                 // Clean up partial install so next run retries fresh
@@ -512,12 +532,12 @@ async function upgrade() {
         }
         // Step 2: Install dependencies + build
         s.start("Installing dependencies & building");
-        execFileSync("npm", ["install", "--no-audit", "--no-fund"], {
+        npmExecFile(["install", "--no-audit", "--no-fund"], {
             cwd: srcDir,
             stdio: "pipe",
             timeout: 120000,
         });
-        execFileSync("npm", ["run", "build"], {
+        npmExecFile(["run", "build"], {
             cwd: srcDir,
             stdio: "pipe",
             timeout: 60000,
@@ -558,7 +578,7 @@ async function upgrade() {
         p.log.info(color.dim("  Registry synced to " + pluginRoot));
         // Install production deps
         s.start("Installing production dependencies");
-        execFileSync("npm", ["install", "--production", "--no-audit", "--no-fund"], {
+        npmExecFile(["install", "--production", "--no-audit", "--no-fund"], {
             cwd: pluginRoot,
             stdio: "pipe",
             timeout: 60000,
@@ -568,7 +588,7 @@ async function upgrade() {
             // Rebuild native addons for current Node.js ABI (fixes #131)
             s.start("Rebuilding native addons");
             try {
-                execFileSync("npm", ["rebuild", "better-sqlite3"], {
+                npmExecFile(["rebuild", "better-sqlite3"], {
                     cwd: pluginRoot,
                     stdio: "pipe",
                     timeout: 60000,
@@ -587,7 +607,7 @@ async function upgrade() {
         // Update global npm
         s.start("Updating npm global package");
         try {
-            execFileSync("npm", ["install", "-g", pluginRoot, "--no-audit", "--no-fund"], {
+            npmExecFile(["install", "-g", pluginRoot, "--no-audit", "--no-fund"], {
                 stdio: "pipe",
                 timeout: 30000,
             });

package/build/server.js

@@ -1700,6 +1700,25 @@ server.registerTool("ctx_upgrade", {
     const pluginRoot = existsSync(resolve(__pkg_dir, "package.json")) ? __pkg_dir : dirname(__pkg_dir);
     const bundlePath = resolve(pluginRoot, "cli.bundle.mjs");
     const fallbackPath = resolve(pluginRoot, "build", "cli.js");
+    // Clean up insight-cache on upgrade so next ctx_insight does fresh build
+    try {
+        const sessDir = getSessionDir();
+        const insightCacheDir = join(dirname(sessDir), "insight-cache");
+        if (existsSync(insightCacheDir)) {
+            // Kill any running insight server first
+            try {
+                if (process.platform === "win32") {
+                    execSync('for /f "tokens=5" %a in (\'netstat -ano ^| findstr :4747\') do taskkill /F /PID %a', { stdio: "pipe" });
+                }
+                else {
+                    execSync("lsof -ti:4747 | xargs kill 2>/dev/null", { stdio: "pipe" });
+                }
+            }
+            catch { /* no process to kill */ }
+            rmSync(insightCacheDir, { recursive: true, force: true });
+        }
+    }
+    catch { /* best effort — don't block upgrade */ }
     let cmd;
     if (existsSync(bundlePath)) {
         cmd = `node "${bundlePath}" upgrade`;
@@ -1726,13 +1745,13 @@ server.registerTool("ctx_upgrade", {
             `console.log("- [x] Starting inline upgrade (no CLI found)");`,
             `execFileSync("git",["clone","--depth","1","${repoUrl}",T],{stdio:"inherit"});`,
             `console.log("- [x] Cloned latest source");`,
-            `execFileSync("npm",["install"],{cwd:T,stdio:"inherit"});`,
-            `execFileSync("npm",["run","build"],{cwd:T,stdio:"inherit"});`,
+            `execFileSync(process.platform==="win32"?"npm.cmd":"npm",["install"],{cwd:T,stdio:"inherit",shell:process.platform==="win32"});`,
+            `execFileSync(process.platform==="win32"?"npm.cmd":"npm",["run","build"],{cwd:T,stdio:"inherit",shell:process.platform==="win32"});`,
             `console.log("- [x] Built from source");`,
             ...copyDirs.map((d) => `if(existsSync(join(T,${JSON.stringify(d)})))cpSync(join(T,${JSON.stringify(d)}),join(P,${JSON.stringify(d)}),{recursive:true,force:true});`),
             ...copyFiles.map((f) => `if(existsSync(join(T,${JSON.stringify(f)})))cpSync(join(T,${JSON.stringify(f)}),join(P,${JSON.stringify(f)}),{force:true});`),
             `console.log("- [x] Copied build artifacts");`,
-            `execFileSync("npm",["install","--production"],{cwd:P,stdio:"inherit"});`,
+            `execFileSync(process.platform==="win32"?"npm.cmd":"npm",["install","--production"],{cwd:P,stdio:"inherit",shell:process.platform==="win32"});`,
             `console.log("- [x] Installed production dependencies");`,
             `console.log("## context-mode upgrade complete");`,
             `}catch(e){`,
@@ -1904,6 +1923,7 @@ server.registerTool("ctx_insight", {
     }
     try {
         const steps = [];
+        let sourceUpdated = false;
         // Ensure cache dir
         mkdirSync(cacheDir, { recursive: true });
         // Copy source files if needed (check by comparing server.mjs mtime)
@@ -1914,13 +1934,14 @@ server.registerTool("ctx_insight", {
             steps.push("Copying source files...");
             cpSync(insightSource, cacheDir, { recursive: true, force: true });
             steps.push("Source files copied.");
+            sourceUpdated = true;
         }
-        // Install deps if needed
+        // Install deps if needed (also reinstall when source updated and package.json may have changed)
         const hasNodeModules = existsSync(join(cacheDir, "node_modules"));
-        if (!hasNodeModules) {
+        if (!hasNodeModules || sourceUpdated) {
             steps.push("Installing dependencies (first run, ~30s)...");
             try {
-                execSync("npm install --production=false", {
+                execSync(process.platform === "win32" ? "npm.cmd install --production=false" : "npm install --production=false", {
                     cwd: cacheDir,
                     stdio: "pipe",
                     timeout: 300000,
@@ -1949,7 +1970,8 @@ server.registerTool("ctx_insight", {
             timeout: 60000,
         });
         steps.push("Build complete.");
-        // Pre-check: is port already in use? (prevents orphan zombie processes)
+        // Pre-check: is port already in use?
+        let portOccupied = false;
         try {
             const { request } = await import("node:http");
             await new Promise((resolve, reject) => {
@@ -1961,9 +1983,29 @@ server.registerTool("ctx_insight", {
                 req.on("timeout", () => { req.destroy(); reject(); });
                 req.end();
             });
-            // If we get here, port is already responding
+            portOccupied = true;
+        }
+        catch {
+            // Port is free, proceed with spawn
+        }
+        if (portOccupied && sourceUpdated) {
+            // Source was updated but stale server is running on port — kill it so fresh code runs
+            steps.push("Killing stale dashboard server (source updated)...");
+            try {
+                if (process.platform === "win32") {
+                    execSync(`for /f "tokens=5" %a in ('netstat -ano ^| findstr :${port}') do taskkill /F /PID %a`, { stdio: "pipe" });
+                }
+                else {
+                    execSync(`lsof -ti:${port} | xargs kill 2>/dev/null`, { stdio: "pipe" });
+                }
+                await new Promise(r => setTimeout(r, 500)); // Wait for port to free
+            }
+            catch { /* no process to kill — proceed anyway */ }
+            steps.push("Stale server killed.");
+        }
+        else if (portOccupied) {
+            // Source unchanged, server is running fine — just open browser
             steps.push("Dashboard already running.");
-            // Open browser anyway
             const url = `http://localhost:${port}`;
             const platform = process.platform;
             try {
@@ -1979,9 +2021,6 @@ server.registerTool("ctx_insight", {
                 content: [{ type: "text", text: `Dashboard already running at http://localhost:${port}` }],
             });
         }
-        catch {
-            // Port is free, proceed with spawn
-        }
         // Kill any previous insight child this MCP spawned (e.g. re-invocation).
         if (_insightChild && _insightChild.pid && !_insightChild.killed) {
             try {