mason-context 0.3.4 → 0.3.6

package/dist/src/cli.js

@@ -1789,10 +1789,23 @@ async function fullAnalysis(dir) {
   }
   return JSON.stringify(output, null, 2);
 }
+function sanitizePaths(rootDir, files) {
+  return files.filter((f) => {
+    const resolved = path6.resolve(rootDir, f);
+    return resolved.startsWith(rootDir) && !f.startsWith("/") && !f.includes("..");
+  });
+}
 async function saveSnapshotData(dir, features, flows) {
   const rootDir = path6.resolve(dir);
   const gitHash = await getCurrentGitHash(rootDir);
   const now = (/* @__PURE__ */ new Date()).toISOString();
+  for (const feat of Object.values(features)) {
+    feat.files = sanitizePaths(rootDir, feat.files);
+    if (feat.tests) feat.tests = sanitizePaths(rootDir, feat.tests);
+  }
+  for (const flow of Object.values(flows)) {
+    flow.chain = sanitizePaths(rootDir, flow.chain);
+  }
   const existing = await loadSnapshot(rootDir);
   if (existing) {
     existing.features = { ...existing.features, ...features };
@@ -1866,7 +1879,7 @@ function createMcpServer() {
   const server = new McpServer(
     {
       name: "mason",
-      version: "0.3.4"
+      version: "0.3.6"
     },
     {
       instructions: "Mason is a context engineering tool. Always call get_snapshot before using Explore agents, Glob, or Grep to understand the codebase. The snapshot is a concept map that maps features and flows to their implementing files \u2014 it eliminates the need to search. This applies to ANY question about architecture, features, flows, how things work, cross-feature interactions, or bug investigation. Workflow: 1) Call get_snapshot first. 2) If no snapshot, call full_analysis and then save_snapshot to create one. 3) If the snapshot is stale, tell the user and offer to update it. 4) Use your native file reading tool to read files the snapshot points to. 5) Before modifying a file, call get_impact to check what else might be affected. 6) After making significant changes (new features, refactors, architecture changes), call save_snapshot to update the concept map."
@@ -2051,7 +2064,7 @@ function createCLI() {
   const program = new Command();
   program.name("mason").description(
     "Context engineering CLI & MCP server \u2014 generates intelligent CLAUDE.md files"
-  ).version("0.3.4");
+  ).version("0.3.6");
   program.command("setup").description("Register Mason as an MCP server with Claude Code").option("--scope <scope>", "Config scope: user or project", "user").action(async (opts) => {
     const { execFile: execFile9 } = await import("child_process");
     const { promisify: promisify9 } = await import("util");