kiri-mcp-server 0.6.0 → 0.8.0

package/dist/src/server/handlers.js

@@ -2,6 +2,155 @@ import path from "node:path";
 import { generateEmbedding, structuralSimilarity } from "../shared/embedding.js";
 import { encode as encodeGPT, tokenizeText } from "../shared/tokenizer.js";
 import { coerceProfileName, loadScoringProfile } from "./scoring.js";
+// Configuration file patterns (v0.8.0+: consolidated to avoid duplication)
+// Comprehensive list covering multiple languages and tools
+const CONFIG_FILES = [
+    // JavaScript/TypeScript/Node.js
+    "package.json",
+    "package-lock.json",
+    "npm-shrinkwrap.json",
+    "tsconfig.json",
+    "jsconfig.json",
+    "pnpm-lock.yaml",
+    "yarn.lock",
+    "bun.lockb",
+    // Python
+    "requirements.txt",
+    "pyproject.toml",
+    "setup.py",
+    "setup.cfg",
+    "Pipfile",
+    "Pipfile.lock",
+    "poetry.lock",
+    "pytest.ini",
+    "tox.ini",
+    ".python-version",
+    // Ruby
+    "Gemfile",
+    "Gemfile.lock",
+    ".ruby-version",
+    "Rakefile",
+    // Go
+    "go.mod",
+    "go.sum",
+    "Makefile",
+    // PHP
+    "composer.json",
+    "composer.lock",
+    "phpunit.xml",
+    // Java/Kotlin/Gradle/Maven
+    "pom.xml",
+    "build.gradle",
+    "build.gradle.kts",
+    "settings.gradle",
+    "settings.gradle.kts",
+    "gradle.properties",
+    // Rust
+    "Cargo.toml",
+    "Cargo.lock",
+    // Swift
+    "Package.swift",
+    "Package.resolved",
+    // .NET
+    "packages.lock.json",
+    "global.json",
+    // C/C++
+    "CMakeLists.txt",
+    "Makefile.am",
+    "configure.ac",
+    // Docker
+    "Dockerfile",
+    "docker-compose.yml",
+    "docker-compose.yaml",
+    ".dockerignore",
+    // CI/CD
+    ".travis.yml",
+    ".gitlab-ci.yml",
+    "Jenkinsfile",
+    "azure-pipelines.yml",
+    // Git
+    ".gitignore",
+    ".gitattributes",
+    ".gitmodules",
+    // Editor config
+    ".editorconfig",
+    // Webserver config
+    "Caddyfile",
+    "nginx.conf",
+    ".htaccess",
+    "httpd.conf",
+    "apache2.conf",
+    "lighttpd.conf",
+];
+// Configuration directories (files inside these directories are treated as config)
+// Note: No trailing slashes - exact segment matching prevents false positives
+const CONFIG_DIRECTORIES = [
+    "bootstrap", // Laravel/Symfony framework bootstrap
+    "config", // Generic config directory (all frameworks)
+    "migrations", // Database migrations
+    "db/migrate", // Ruby on Rails migrations
+    "alembic/versions", // Python Alembic migrations
+    "seeds", // Database seeds
+    "fixtures", // Test fixtures
+    "test-data", // Test data
+    "locales", // i18n translations
+    "i18n", // i18n translations
+    "translations", // i18n translations
+    "lang", // i18n translations
+    ".terraform", // Terraform state
+    "terraform", // Terraform configs
+    "k8s", // Kubernetes manifests
+    "kubernetes", // Kubernetes manifests
+    "ansible", // Ansible playbooks
+    "cloudformation", // CloudFormation templates
+    "pulumi", // Pulumi infrastructure
+];
+const CONFIG_EXTENSIONS = [".lock", ".env", ".conf"];
+const CONFIG_PATTERNS = [
+    // Generic config patterns (any language)
+    ".config.js",
+    ".config.ts",
+    ".config.mjs",
+    ".config.cjs",
+    ".config.json",
+    ".config.yaml",
+    ".config.yml",
+    ".config.toml",
+    // Linter/Formatter configs
+    ".eslintrc",
+    ".prettierrc",
+    ".stylelintrc",
+    ".pylintrc",
+    ".flake8",
+    ".rubocop.yml",
+    // CI config files
+    ".circleci/config.yml",
+    ".github/workflows",
+];
+/**
+ * Check if a file path represents a configuration file
+ * Supports multiple languages: JS/TS, Python, Ruby, Go, PHP, Java, Rust, C/C++, Docker, CI/CD
+ * Also checks if file is in a config directory (bootstrap/, config/, migrations/, etc.)
+ * Uses exact path segment matching to prevent false positives (e.g., "myconfig/" won't match "config/")
+ * @param path - Full file path
+ * @param fileName - File name only (extracted from path)
+ * @returns true if the file is a configuration file
+ */
+function isConfigFile(path, fileName) {
+    // Normalize path separators (Windows compatibility)
+    const normalizedPath = path.replace(/\\/g, "/");
+    // Check if file is in a config directory using exact path segment matching
+    // Split path into segments and check for exact matches to prevent false positives
+    // e.g., "bootstrap" won't match "my-bootstrap-theme" in path segments
+    // Filter empty strings to handle absolute paths (e.g., "/src/app" → ["", "src", "app"] → ["src", "app"])
+    const pathSegments = new Set(normalizedPath.split("/").filter(Boolean));
+    const isInConfigDirectory = CONFIG_DIRECTORIES.some((dir) => pathSegments.has(dir));
+    return (CONFIG_FILES.includes(fileName) ||
+        CONFIG_EXTENSIONS.some((ce) => path.endsWith(ce)) ||
+        CONFIG_PATTERNS.some((pattern) => path.includes(pattern)) ||
+        fileName.startsWith(".env") ||
+        isInConfigDirectory);
+}
 const DEFAULT_SEARCH_LIMIT = 50;
 const DEFAULT_SNIPPET_WINDOW = 150;
 const DEFAULT_BUNDLE_LIMIT = 7; // Reduced from 12 to optimize token usage
@@ -93,7 +242,6 @@ function extractQuotedPhrases(text) {
     const quotePattern = /"([^"]+)"|'([^']+)'/g;
     let match;
     let remaining = text;
-    // eslint-disable-next-line no-cond-assign
     while ((match = quotePattern.exec(text)) !== null) {
         const phrase = (match[1] || match[2] || "").trim().toLowerCase();
         if (phrase.length >= 3) {
@@ -200,6 +348,7 @@ function ensureCandidate(map, filePath) {
         candidate = {
             path: filePath,
             score: 0,
+            scoreMultiplier: 1.0, // Default: no boost or penalty
             reasons: new Set(),
             matchLine: null,
             content: null,
@@ -361,14 +510,15 @@ function splitQueryWords(query) {
     return words.length > 0 ? words : [query]; // 全て除外された場合は元のクエリを使用
 }
 /**
- * ファイルタイプに基づいてスコアをブーストする
- * プロファイルに応じて実装ファイルまたはドキュメントを優遇
+ * files_search専用のファイルタイプブースト適用（v0.7.0+: 設定可能な乗算的ペナルティ）
+ * context_bundleと同じ乗算的ペナルティロジックを使用
  * @param path - ファイルパス
- * @param baseScore - 元のスコア
- * @param profile - ブーストプロファイル ("default" | "docs" | "none")
+ * @param baseScore - 基本スコア（FTS BM25スコアまたは1.0）
+ * @param profile - ブーストプロファイル
+ * @param weights - スコアリングウェイト設定（乗算的ペナルティに使用）
  * @returns ブースト適用後のスコア
  */
-function applyFileTypeBoost(path, baseScore, profile = "default") {
+function applyFileTypeBoost(path, baseScore, profile = "default", weights) {
     // Blacklisted directories that are almost always irrelevant for code context
     const blacklistedDirs = [
         ".cursor/",
@@ -385,82 +535,97 @@ function applyFileTypeBoost(path, baseScore, profile = "default") {
     if (profile === "none") {
         return baseScore;
     }
+    // Extract file extension for type detection
+    const ext = path.includes(".") ? path.substring(path.lastIndexOf(".")) : null;
+    // ✅ UNIFIED LOGIC: Use same multiplicative penalties as context_bundle
     if (profile === "docs") {
+        // Boost documentation files
         if (path.endsWith(".md") || path.endsWith(".yaml") || path.endsWith(".yml")) {
-            return baseScore * 1.8; // Stronger boost for docs
+            return baseScore * 1.5; // 50% boost (same as context_bundle)
         }
+        // Penalty for implementation files in docs mode
         if (path.startsWith("src/") &&
             (path.endsWith(".ts") || path.endsWith(".js") || path.endsWith(".tsx"))) {
-            return baseScore * 0.5; // Stronger penalty for implementation files
+            return baseScore * 0.5; // 50% penalty
         }
         return baseScore;
     }
-    // Default profile: prioritize implementation files, heavily penalize docs
-    const docExtensions = [".md", ".yaml", ".yml", ".mdc", ".json"];
-    if (docExtensions.some((ext) => path.endsWith(ext))) {
-        return baseScore * 0.1; // Heavy penalty for docs
-    }
+    // Default profile: Use configurable multiplicative penalties
+    let multiplier = 1.0;
+    const fileName = path.split("/").pop() ?? "";
+    // ✅ Step 1: Config files get strongest penalty (95% reduction)
+    if (isConfigFile(path, fileName)) {
+        multiplier *= weights.configPenaltyMultiplier; // 0.05 = 95% reduction
+        return baseScore * multiplier;
+    }
+    // ✅ Step 2: Documentation files get moderate penalty (50% reduction)
+    const docExtensions = [".md", ".yaml", ".yml", ".mdc"];
+    if (docExtensions.some((docExt) => path.endsWith(docExt))) {
+        multiplier *= weights.docPenaltyMultiplier; // 0.5 = 50% reduction
+        return baseScore * multiplier;
+    }
+    // ✅ Step 3: Implementation file boosts
     if (path.startsWith("src/app/")) {
-        return baseScore * 1.8;
+        multiplier *= weights.implBoostMultiplier * 1.4; // Extra boost for app files
     }
-    if (path.startsWith("src/components/")) {
-        return baseScore * 1.7;
+    else if (path.startsWith("src/components/")) {
+        multiplier *= weights.implBoostMultiplier * 1.3;
     }
-    if (path.startsWith("src/lib/")) {
-        return baseScore * 1.6;
+    else if (path.startsWith("src/lib/")) {
+        multiplier *= weights.implBoostMultiplier * 1.2;
     }
-    if (path.startsWith("src/") &&
-        (path.endsWith(".ts") || path.endsWith(".js") || path.endsWith(".tsx"))) {
-        return baseScore * 1.5;
+    else if (path.startsWith("src/")) {
+        if (ext === ".ts" || ext === ".tsx" || ext === ".js") {
+            multiplier *= weights.implBoostMultiplier; // Base impl boost
+        }
     }
+    // Test files: additive penalty (keep strong for files_search)
     if (path.startsWith("tests/") || path.startsWith("test/")) {
-        return baseScore * 0.2; // Also penalize tests in default mode
+        return baseScore * 0.2; // Strong penalty for tests
     }
-    return baseScore;
+    return baseScore * multiplier;
 }
 /**
- * contextBundle専用のブーストプロファイル適用
- * candidateのスコアと理由を直接変更する
- * @param candidate - スコアリング対象の候補
- * @param row - ファイル情報（path, ext）
- * @param profile - ブーストプロファイル
+ * パスベースのスコアリングを適用（加算的ブースト）
+ * goalのキーワード/フレーズがファイルパスに含まれる場合にスコアを加算
  */
-function applyBoostProfile(candidate, row, profile, extractedTerms, pathMatchWeight) {
-    if (profile === "none") {
+function applyPathBasedScoring(candidate, lowerPath, weights, extractedTerms) {
+    if (!extractedTerms || weights.pathMatch <= 0) {
         return;
     }
-    const { path, ext } = row;
-    const lowerPath = path.toLowerCase();
-    const fileName = path.split("/").pop() ?? "";
-    // パスベースのスコアリング: goalのキーワード/フレーズがファイルパスに含まれる場合にブースト
-    if (extractedTerms && pathMatchWeight && pathMatchWeight > 0) {
-        // フレーズがパスに完全一致する場合（最高の重み）
-        for (const phrase of extractedTerms.phrases) {
-            if (lowerPath.includes(phrase)) {
-                candidate.score += pathMatchWeight * 1.5; // 1.5倍のブースト
-                candidate.reasons.add(`path-phrase:${phrase}`);
-                break; // 最初のマッチのみ適用
-            }
+    // フレーズがパスに完全一致する場合（最高の重み）
+    for (const phrase of extractedTerms.phrases) {
+        if (lowerPath.includes(phrase)) {
+            candidate.score += weights.pathMatch * 1.5; // 1.5倍のブースト
+            candidate.reasons.add(`path-phrase:${phrase}`);
+            return; // 最初のマッチのみ適用
         }
-        // パスセグメントがマッチする場合（中程度の重み）
-        const pathParts = lowerPath.split("/");
-        for (const segment of extractedTerms.pathSegments) {
-            if (pathParts.includes(segment)) {
-                candidate.score += pathMatchWeight;
-                candidate.reasons.add(`path-segment:${segment}`);
-                break; // 最初のマッチのみ適用
-            }
+    }
+    // パスセグメントがマッチする場合（中程度の重み）
+    const pathParts = lowerPath.split("/");
+    for (const segment of extractedTerms.pathSegments) {
+        if (pathParts.includes(segment)) {
+            candidate.score += weights.pathMatch;
+            candidate.reasons.add(`path-segment:${segment}`);
+            return; // 最初のマッチのみ適用
         }
-        // 通常のキーワードがパスに含まれる場合（低い重み）
-        for (const keyword of extractedTerms.keywords) {
-            if (lowerPath.includes(keyword)) {
-                candidate.score += pathMatchWeight * 0.5; // 0.5倍のブースト
-                candidate.reasons.add(`path-keyword:${keyword}`);
-                break; // 最初のマッチのみ適用
-            }
+    }
+    // 通常のキーワードがパスに含まれる場合（低い重み）
+    for (const keyword of extractedTerms.keywords) {
+        if (lowerPath.includes(keyword)) {
+            candidate.score += weights.pathMatch * 0.5; // 0.5倍のブースト
+            candidate.reasons.add(`path-keyword:${keyword}`);
+            return; // 最初のマッチのみ適用
         }
     }
-    // Blacklisted directories that are almost always irrelevant for code context
+}
+/**
+ * 加算的ファイルペナルティを適用
+ * ブラックリストディレクトリ、テストファイル、lockファイル、設定ファイル、マイグレーションファイルに強いペナルティ
+ * @returns true if penalty was applied and processing should stop
+ */
+function applyAdditiveFilePenalties(candidate, path, lowerPath, fileName) {
+    // Blacklisted directories - effectively remove
     const blacklistedDirs = [
         ".cursor/",
         ".devcontainer/",
@@ -484,18 +649,18 @@ function applyBoostProfile(candidate, row, profile, extractedTerms, pathMatchWei
         "temp/",
     ];
     if (blacklistedDirs.some((dir) => path.startsWith(dir))) {
-        candidate.score = -100; // Effectively remove it
+        candidate.score = -100;
         candidate.reasons.add("penalty:blacklisted-dir");
-        return;
+        return true;
     }
-    // Penalize test files explicitly (even if outside test directories)
+    // Test files - strong penalty
     const testPatterns = [".spec.ts", ".spec.js", ".test.ts", ".test.js", ".spec.tsx", ".test.tsx"];
     if (testPatterns.some((pattern) => lowerPath.endsWith(pattern))) {
-        candidate.score -= 2.0; // Strong penalty for test files
+        candidate.score -= 2.0;
         candidate.reasons.add("penalty:test-file");
-        return;
+        return true;
     }
-    // Penalize lock files and package manifests
+    // Lock files - very strong penalty
     const lockFiles = [
         "package-lock.json",
         "pnpm-lock.yaml",
@@ -506,11 +671,11 @@ function applyBoostProfile(candidate, row, profile, extractedTerms, pathMatchWei
         "poetry.lock",
     ];
     if (lockFiles.some((lockFile) => fileName === lockFile)) {
-        candidate.score -= 3.0; // Very strong penalty for lock files
+        candidate.score -= 3.0;
         candidate.reasons.add("penalty:lock-file");
-        return;
+        return true;
     }
-    // Penalize configuration files
+    // Configuration files - strong penalty
     const configPatterns = [
         ".config.js",
         ".config.ts",
@@ -531,56 +696,103 @@ function applyBoostProfile(candidate, row, profile, extractedTerms, pathMatchWei
         fileName === "Dockerfile" ||
         fileName === "docker-compose.yml" ||
         fileName === "docker-compose.yaml") {
-        candidate.score -= 1.5; // Strong penalty for config files
+        candidate.score -= 1.5;
         candidate.reasons.add("penalty:config-file");
-        return;
+        return true;
     }
-    // Penalize migration files (by path content)
+    // Migration files - strong penalty
     if (lowerPath.includes("migrate") || lowerPath.includes("migration")) {
-        candidate.score -= 2.0; // Strong penalty for migrations
+        candidate.score -= 2.0;
         candidate.reasons.add("penalty:migration-file");
+        return true;
+    }
+    return false; // No penalty applied, continue processing
+}
+/**
+ * ファイルタイプ別の乗算的ペナルティ/ブーストを適用（v0.7.0+）
+ * profile="docs": ドキュメントファイルをブースト
+ * profile="default": ドキュメントファイルにペナルティ、実装ファイルをブースト
+ */
+function applyFileTypeMultipliers(candidate, path, ext, profile, weights) {
+    if (profile === "none") {
         return;
     }
+    // ✅ CRITICAL SAFETY: profile="docs" mode boosts docs, skips penalties
     if (profile === "docs") {
-        // DOCS PROFILE: Boost docs, penalize code
-        if (path.endsWith(".md") || path.endsWith(".yaml") || path.endsWith(".yml")) {
-            candidate.score += 0.8;
+        const docExtensions = [".md", ".yaml", ".yml", ".mdc"];
+        if (docExtensions.some((docExt) => path.endsWith(docExt))) {
+            candidate.scoreMultiplier *= 1.5; // 50% boost for docs
             candidate.reasons.add("boost:doc-file");
         }
-        else if (path.startsWith("src/") && (ext === ".ts" || ext === ".tsx" || ext === ".js")) {
-            candidate.score -= 0.5;
-            candidate.reasons.add("penalty:impl-file");
-        }
+        // No penalty for implementation files in "docs" mode
+        return;
     }
-    else if (profile === "default") {
-        // DEFAULT PROFILE: Penalize docs heavily, boost implementation files.
-        // Penalize documentation and other non-code files
-        const docExtensions = [".md", ".yaml", ".yml", ".mdc", ".json"];
+    // DEFAULT PROFILE: Use MULTIPLICATIVE penalties for config/docs, MULTIPLICATIVE boosts for impl files
+    if (profile === "default") {
+        const fileName = path.split("/").pop() ?? "";
+        // ✅ Step 1: Config files get strongest penalty (95% reduction)
+        if (isConfigFile(path, fileName)) {
+            candidate.scoreMultiplier *= weights.configPenaltyMultiplier; // 0.05 = 95% reduction
+            candidate.reasons.add("penalty:config-file");
+            return; // Don't apply impl boosts to config files
+        }
+        // ✅ Step 2: Documentation files get moderate penalty (50% reduction)
+        const docExtensions = [".md", ".yaml", ".yml", ".mdc"];
         if (docExtensions.some((docExt) => path.endsWith(docExt))) {
-            candidate.score -= 2.0; // Strong penalty to overcome doc-heavy keyword matches
+            candidate.scoreMultiplier *= weights.docPenaltyMultiplier; // 0.5 = 50% reduction
             candidate.reasons.add("penalty:doc-file");
+            return; // Don't apply impl boosts to docs
         }
-        // Boost implementation files, with more specific paths getting higher scores
+        // ✅ Step 3: Implementation files get multiplicative boost
         if (path.startsWith("src/app/")) {
-            candidate.score += 0.8;
+            candidate.scoreMultiplier *= weights.implBoostMultiplier * 1.4; // Extra boost for app files
             candidate.reasons.add("boost:app-file");
         }
         else if (path.startsWith("src/components/")) {
-            candidate.score += 0.7;
+            candidate.scoreMultiplier *= weights.implBoostMultiplier * 1.3;
             candidate.reasons.add("boost:component-file");
         }
         else if (path.startsWith("src/lib/")) {
-            candidate.score += 0.6;
+            candidate.scoreMultiplier *= weights.implBoostMultiplier * 1.2;
             candidate.reasons.add("boost:lib-file");
         }
         else if (path.startsWith("src/")) {
             if (ext === ".ts" || ext === ".tsx" || ext === ".js") {
-                candidate.score += 0.5;
+                candidate.scoreMultiplier *= weights.implBoostMultiplier;
                 candidate.reasons.add("boost:impl-file");
             }
         }
     }
 }
+/**
+ * contextBundle専用のブーストプロファイル適用（v0.7.0+: リファクタリング版）
+ * 複雑度を削減するために3つのヘルパー関数に分割：
+ * 1. applyPathBasedScoring: パスベースの加算的スコアリング
+ * 2. applyAdditiveFilePenalties: 強力な加算的ペナルティ
+ * 3. applyFileTypeMultipliers: 乗算的ペナルティ/ブースト
+ *
+ * CRITICAL SAFETY RULES:
+ * 1. Multipliers are stored in candidate.scoreMultiplier, applied AFTER all additive scoring
+ * 2. profile="docs" skips documentation penalties (allows doc-focused queries)
+ * 3. Blacklist/test/lock/config files keep additive penalties (already very strong)
+ */
+function applyBoostProfile(candidate, row, profile, weights, extractedTerms) {
+    if (profile === "none") {
+        return;
+    }
+    const { path, ext } = row;
+    const lowerPath = path.toLowerCase();
+    const fileName = path.split("/").pop() ?? "";
+    // Step 1: パスベースのスコアリング（加算的ブースト）
+    applyPathBasedScoring(candidate, lowerPath, weights, extractedTerms);
+    // Step 2: 加算的ペナルティ（ブラックリスト、テスト、lock、設定、マイグレーション）
+    const shouldStop = applyAdditiveFilePenalties(candidate, path, lowerPath, fileName);
+    if (shouldStop) {
+        return; // ペナルティが適用された場合は処理終了
+    }
+    // Step 3: ファイルタイプ別の乗算的ペナルティ/ブースト
+    applyFileTypeMultipliers(candidate, path, ext, profile, weights);
+}
 export async function filesSearch(context, params) {
     const { db, repoId } = context;
     const { query } = params;
@@ -663,11 +875,14 @@ export async function filesSearch(context, params) {
     }
     const rows = await db.all(sql, values);
     const boostProfile = params.boost_profile ?? "default";
+    // ✅ v0.7.0+: Load configurable scoring weights for unified boosting logic
+    // Note: filesSearch doesn't have a separate profile parameter, uses default weights
+    const weights = loadScoringProfile(null);
     return rows
         .map((row) => {
         const { preview, line } = buildPreview(row.content ?? "", query);
         const baseScore = row.score ?? 1.0; // FTS時はBM25スコア、ILIKE時は1.0
-        const boostedScore = applyFileTypeBoost(row.path, baseScore, boostProfile);
+        const boostedScore = applyFileTypeBoost(row.path, baseScore, boostProfile, weights);
         return {
             path: row.path,
             preview,
@@ -832,7 +1047,7 @@ export async function contextBundle(context, params) {
                 candidate.reasons.add(`phrase:${phrase}`);
             }
             // Apply boost profile once per file
-            applyBoostProfile(candidate, row, boostProfile, extractedTerms, weights.pathMatch);
+            applyBoostProfile(candidate, row, boostProfile, weights, extractedTerms);
             // Use first matched phrase for preview (guaranteed to exist due to length check above)
             const { line } = buildPreview(row.content, matchedPhrases[0]);
             candidate.matchLine =
@@ -890,7 +1105,7 @@ export async function contextBundle(context, params) {
                 candidate.reasons.add(`text:${keyword}`);
             }
             // Apply boost profile once per file
-            applyBoostProfile(candidate, row, boostProfile, extractedTerms, weights.pathMatch);
+            applyBoostProfile(candidate, row, boostProfile, weights, extractedTerms);
             // Use first matched keyword for preview (guaranteed to exist due to length check above)
             const { line } = buildPreview(row.content, matchedKeywords[0]);
             candidate.matchLine =
@@ -1011,9 +1226,22 @@ export async function contextBundle(context, params) {
         materializedCandidates.push(candidate);
     }
     if (materializedCandidates.length === 0) {
-        return { context: [], tokens_estimate: 0 };
+        // Get warnings from WarningManager (includes breaking change notification if applicable)
+        const warnings = [...context.warningManager.responseWarnings];
+        return {
+            context: [],
+            tokens_estimate: 0,
+            ...(warnings.length > 0 && { warnings }),
+        };
     }
     applyStructuralScores(materializedCandidates, queryEmbedding, weights.structural);
+    // ✅ CRITICAL SAFETY: Apply multipliers AFTER all additive scoring (v0.7.0)
+    // Only apply to positive scores to prevent negative score inversion
+    for (const candidate of materializedCandidates) {
+        if (candidate.scoreMultiplier !== 1.0 && candidate.score > 0) {
+            candidate.score *= candidate.scoreMultiplier;
+        }
+    }
     const sortedCandidates = materializedCandidates
         .filter((candidate) => candidate.score > 0) // Filter out candidates with negative or zero scores
         .sort((a, b) => {
@@ -1083,7 +1311,13 @@ export async function contextBundle(context, params) {
         const lineCount = Math.max(1, item.range[1] - item.range[0] + 1);
         return acc + lineCount * 4;
     }, 0);
-    return { context: results, tokens_estimate: tokensEstimate };
+    // Get warnings from WarningManager (includes breaking change notification if applicable)
+    const warnings = [...context.warningManager.responseWarnings];
+    return {
+        context: results,
+        tokens_estimate: tokensEstimate,
+        ...(warnings.length > 0 && { warnings }),
+    };
 }
 export async function semanticRerank(context, params) {
     const text = params.text?.trim() ?? "";