mcp-code-context 3.4.1 → 3.5.1

package/dist/src/utils/safeRegex.js

@@ -1,76 +1,201 @@
 /**
- * Safe Regex - v3.4.1
- * Regex execution with timeout to prevent ReDoS
+ * Safe Regex - v3.5.1
+ * CRITICAL FIX: Real ReDoS protection via worker_threads
+ *
+ * Problem: setTimeout cannot interrupt regex.test() in Node.js single-threaded event loop.
+ * Solution: Execute regex in a Worker thread. If it exceeds timeout, worker.terminate() kills it.
+ *
+ * This file serves dual purpose:
+ * - Main thread: exports safe regex functions that delegate to workers
+ * - Worker thread: executes regex operations when loaded as a worker
  */
+import { Worker, isMainThread, parentPort, workerData } from "node:worker_threads";
+import { fileURLToPath } from "node:url";
 import { REGEX_TIMEOUT_MS } from './constants.js';
-/**
- * Execute regex with timeout protection
- */
-export async function safeRegexTest(pattern, input, timeoutMs = REGEX_TIMEOUT_MS) {
-    return new Promise((resolve) => {
-        const regex = typeof pattern === 'string' ? new RegExp(pattern) : pattern;
-        let timedOut = false;
-        const timeout = setTimeout(() => {
-            timedOut = true;
-            resolve({
-                success: false,
-                matched: false,
-                error: `Regex execution exceeded ${timeoutMs}ms (potential ReDoS)`,
-                timedOut: true,
-            });
-        }, timeoutMs);
-        try {
-            const matched = regex.test(input);
-            clearTimeout(timeout);
-            if (timedOut)
-                return; // Already resolved
-            resolve({ success: true, matched });
+// ─────────────────────────────────────────────────────────────────────────
+// WORKER THREAD EXECUTION
+// Runs when this file is loaded as a Worker via new Worker(thisFile, { workerData })
+// ─────────────────────────────────────────────────────────────────────────
+if (!isMainThread && workerData) {
+    const { pattern, flags, input, mode, lines } = workerData;
+    const regex = new RegExp(pattern, flags);
+    switch (mode) {
+        case "test":
+            parentPort?.postMessage({ matched: regex.test(input) });
+            break;
+        case "match":
+            parentPort?.postMessage({ matches: input.match(regex) });
+            break;
+        case "batch_test": {
+            // One worker per file: test each line, return matching indices
+            const matches = [];
+            for (let i = 0; i < lines.length; i++) {
+                regex.lastIndex = 0;
+                if (regex.test(lines[i])) {
+                    matches.push({ index: i, content: lines[i].trim() });
+                }
+            }
+            parentPort?.postMessage({ matches });
+            break;
         }
-        catch (error) {
-            clearTimeout(timeout);
-            if (timedOut)
-                return;
-            resolve({
-                success: false,
-                matched: false,
-                error: error instanceof Error ? error.message : String(error),
-            });
+        case "batch_find_first": {
+            // Find first matching line index
+            let matchIndex = -1;
+            for (let i = 0; i < lines.length; i++) {
+                regex.lastIndex = 0;
+                if (regex.test(lines[i])) {
+                    matchIndex = i;
+                    break;
+                }
+            }
+            parentPort?.postMessage({ matchIndex });
+            break;
         }
-    });
+        case "batch_multi_file": {
+            // All files in one worker — eliminates N worker spawns in searchPattern
+            // files: Array<{ path: string, lines: string[] }>
+            const { files } = workerData;
+            const fileResults = [];
+            for (const file of files) {
+                for (let i = 0; i < file.lines.length; i++) {
+                    regex.lastIndex = 0;
+                    if (regex.test(file.lines[i])) {
+                        fileResults.push({ file: file.path, index: i, content: file.lines[i].trim() });
+                    }
+                }
+            }
+            parentPort?.postMessage({ results: fileResults });
+            break;
+        }
+    }
 }
-/**
- * Execute regex match with timeout protection
- */
-export async function safeRegexMatch(pattern, input, timeoutMs = REGEX_TIMEOUT_MS) {
+// ─────────────────────────────────────────────────────────────────────────
+// MAIN THREAD: Worker execution helper
+// ─────────────────────────────────────────────────────────────────────────
+const WORKER_FILE = fileURLToPath(import.meta.url);
+function runInWorker(data, timeoutMs) {
+    if (!isMainThread) {
+        throw new Error("safeRegex: runInWorker called from worker thread — this is a bug");
+    }
     return new Promise((resolve) => {
-        const regex = typeof pattern === 'string' ? new RegExp(pattern) : pattern;
-        let timedOut = false;
-        const timeout = setTimeout(() => {
-            timedOut = true;
-            resolve({
-                success: false,
-                error: `Regex execution exceeded ${timeoutMs}ms (potential ReDoS)`,
-                timedOut: true,
-            });
+        const worker = new Worker(WORKER_FILE, { workerData: data });
+        let settled = false;
+        const timer = setTimeout(() => {
+            if (settled)
+                return;
+            settled = true;
+            worker.terminate();
+            resolve({ timedOut: true });
         }, timeoutMs);
-        try {
-            const matches = input.match(regex);
-            clearTimeout(timeout);
-            if (timedOut)
+        worker.on("message", (msg) => {
+            if (settled)
                 return;
-            resolve({ success: true, matches });
-        }
-        catch (error) {
-            clearTimeout(timeout);
-            if (timedOut)
+            settled = true;
+            clearTimeout(timer);
+            worker.terminate();
+            resolve({ result: msg });
+        });
+        worker.on("error", (err) => {
+            if (settled)
                 return;
-            resolve({
-                success: false,
-                error: error instanceof Error ? error.message : String(error),
-            });
-        }
+            settled = true;
+            clearTimeout(timer);
+            resolve({ error: err.message });
+        });
     });
 }
+function extractPatternInfo(pattern) {
+    return {
+        source: pattern instanceof RegExp ? pattern.source : pattern,
+        flags: pattern instanceof RegExp ? pattern.flags : "",
+    };
+}
+// ─────────────────────────────────────────────────────────────────────────
+// PUBLIC API — Single operations
+// ─────────────────────────────────────────────────────────────────────────
+/**
+ * Execute regex test with real timeout via worker_threads.
+ * worker.terminate() can actually kill a stuck regex, unlike setTimeout.
+ */
+export async function safeRegexTest(pattern, input, timeoutMs = REGEX_TIMEOUT_MS) {
+    if (!isMainThread)
+        return { success: false, matched: false };
+    const { source, flags } = extractPatternInfo(pattern);
+    const { result, timedOut, error } = await runInWorker({ pattern: source, flags, input, mode: "test" }, timeoutMs);
+    if (timedOut)
+        return { success: false, matched: false, timedOut: true, error: `Regex exceeded ${timeoutMs}ms (ReDoS prevented)` };
+    if (error)
+        return { success: false, matched: false, error };
+    return { success: true, matched: result.matched };
+}
+/**
+ * Execute regex match with real timeout via worker_threads.
+ */
+export async function safeRegexMatch(pattern, input, timeoutMs = REGEX_TIMEOUT_MS) {
+    if (!isMainThread)
+        return { success: false };
+    const { source, flags } = extractPatternInfo(pattern);
+    const { result, timedOut, error } = await runInWorker({ pattern: source, flags, input, mode: "match" }, timeoutMs);
+    if (timedOut)
+        return { success: false, timedOut: true, error: `Regex exceeded ${timeoutMs}ms (ReDoS prevented)` };
+    if (error)
+        return { success: false, error };
+    return { success: true, matches: result.matches };
+}
+// ─────────────────────────────────────────────────────────────────────────
+// PUBLIC API — Batch operations (one worker per file, loop inside worker)
+// ─────────────────────────────────────────────────────────────────────────
+/**
+ * Batch regex test: sends all lines to one worker, loops inside.
+ * Returns matching line indices and trimmed content.
+ * Use this for searchPattern — one worker per file, not per line.
+ */
+export async function safeRegexBatchTest(pattern, lines, timeoutMs = REGEX_TIMEOUT_MS) {
+    if (!isMainThread)
+        return { success: false };
+    const { source, flags } = extractPatternInfo(pattern);
+    const { result, timedOut, error } = await runInWorker({ pattern: source, flags, lines, mode: "batch_test" }, timeoutMs);
+    if (timedOut)
+        return { success: false, timedOut: true, error: `Regex batch exceeded ${timeoutMs}ms (ReDoS prevented)` };
+    if (error)
+        return { success: false, error };
+    return { success: true, matches: result.matches };
+}
+/**
+ * Batch find first matching line: one worker, returns index of first match.
+ * Use this for readLines aroundPattern — avoids N worker spawns.
+ */
+export async function safeRegexFindFirst(pattern, lines, timeoutMs = REGEX_TIMEOUT_MS) {
+    if (!isMainThread)
+        return { success: false };
+    const { source, flags } = extractPatternInfo(pattern);
+    const { result, timedOut, error } = await runInWorker({ pattern: source, flags, lines, mode: "batch_find_first" }, timeoutMs);
+    if (timedOut)
+        return { success: false, timedOut: true, error: `Regex search exceeded ${timeoutMs}ms (ReDoS prevented)` };
+    if (error)
+        return { success: false, error };
+    return { success: true, matchIndex: result.matchIndex };
+}
+/**
+ * Multi-file batch regex test: ALL files processed in ONE worker spawn.
+ * Eliminates N worker spawns for N files in searchPattern.
+ * The worker loops all files×lines internally. If any line causes ReDoS,
+ * the worker is terminated and the entire search times out safely.
+ */
+export async function safeRegexMultiFileBatchTest(pattern, files, timeoutMs = REGEX_TIMEOUT_MS) {
+    if (!isMainThread)
+        return { success: false };
+    const { source, flags } = extractPatternInfo(pattern);
+    const { result, timedOut, error } = await runInWorker({ pattern: source, flags, files, mode: "batch_multi_file" }, timeoutMs);
+    if (timedOut)
+        return { success: false, timedOut: true, error: `Multi-file regex scan exceeded ${timeoutMs}ms (ReDoS prevented)` };
+    if (error)
+        return { success: false, error };
+    return { success: true, results: result.results };
+}
+// ─────────────────────────────────────────────────────────────────────────
+// Pattern validation and sanitization (synchronous — no worker needed)
+// ─────────────────────────────────────────────────────────────────────────
 /**
  * Validate regex pattern for safety
  */

package/dist/src/utils/safeRegex.js.map

@@ -1 +1 @@
-{"version":3,"file":"safeRegex.js","sourceRoot":"","sources":["../../../src/utils/safeRegex.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AASlD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAwB,EACxB,KAAa,EACb,YAAoB,gBAAgB;IAEpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1E,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,CAAC;gBACN,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,4BAA4B,SAAS,sBAAsB;gBAClE,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClC,YAAY,CAAC,OAAO,CAAC,CAAC;YAEtB,IAAI,QAAQ;gBAAE,OAAO,CAAC,mBAAmB;YAEzC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,QAAQ;gBAAE,OAAO;YAErB,OAAO,CAAC;gBACN,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAwB,EACxB,KAAa,EACb,YAAoB,gBAAgB;IAEpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1E,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,CAAC;gBACN,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,4BAA4B,SAAS,sBAAsB;gBAClE,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnC,YAAY,CAAC,OAAO,CAAC,CAAC;YAEtB,IAAI,QAAQ;gBAAE,OAAO;YAErB,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,QAAQ;gBAAE,OAAO;YAErB,OAAO,CAAC;gBACN,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,+CAA+C;IAC/C,MAAM,iBAAiB,GAAG;QACxB,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,mCAAmC,EAAE;QAC1E,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,mCAAmC,EAAE;QAC1E,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,mCAAmC,EAAE;QAC1E,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,mCAAmC,EAAE;QAC1E,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,uCAAuC,EAAE;QACnF,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,uCAAuC,EAAE;KACpF,CAAC;IAEF,KAAK,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,iBAAiB,EAAE,CAAC;QACvE,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAChD,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACzB,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,KAAc;IAEd,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAEjD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACrB,OAAO;YACL,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,yBAAyB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC/D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACzC,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"safeRegex.js","sourceRoot":"","sources":["../../../src/utils/safeRegex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AASlD,4EAA4E;AAC5E,0BAA0B;AAC1B,qFAAqF;AACrF,4EAA4E;AAE5E,IAAI,CAAC,YAAY,IAAI,UAAU,EAAE,CAAC;IAChC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEzC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM;YACT,UAAU,EAAE,WAAW,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACxD,MAAM;QAER,KAAK,OAAO;YACV,UAAU,EAAE,WAAW,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzD,MAAM;QAER,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,+DAA+D;YAC/D,MAAM,OAAO,GAA8C,EAAE,CAAC;YAC9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;gBACpB,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzB,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;YACD,UAAU,EAAE,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YACrC,MAAM;QACR,CAAC;QAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,iCAAiC;YACjC,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC;YACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;gBACpB,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzB,UAAU,GAAG,CAAC,CAAC;oBACf,MAAM;gBACR,CAAC;YACH,CAAC;YACD,UAAU,EAAE,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;YACxC,MAAM;QACR,CAAC;QAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,wEAAwE;YACxE,kDAAkD;YAClD,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;YAC7B,MAAM,WAAW,GAA4D,EAAE,CAAC;YAChF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC3C,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;oBACpB,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9B,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBACjF,CAAC;gBACH,CAAC;YACH,CAAC;YACD,UAAU,EAAE,WAAW,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAClD,MAAM;QACR,CAAC;IACH,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,uCAAuC;AACvC,4EAA4E;AAE5E,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEnD,SAAS,WAAW,CAAI,IAAyB,EAAE,SAAiB;IAClE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAM,EAAE,EAAE;YAC9B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAwB;IAClD,OAAO;QACL,MAAM,EAAE,OAAO,YAAY,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QAC5D,KAAK,EAAE,OAAO,YAAY,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;KACtD,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,iCAAiC;AACjC,4EAA4E;AAE5E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAwB,EACxB,KAAa,EACb,YAAoB,gBAAgB;IAEpC,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE7D,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CACnD,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAC/C,SAAS,CACV,CAAC;IAEF,IAAI,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,kBAAkB,SAAS,sBAAsB,EAAE,CAAC;IAClI,IAAI,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAO,CAAC,OAAO,EAAE,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAwB,EACxB,KAAa,EACb,YAAoB,gBAAgB;IAEpC,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE7C,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CACnD,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAChD,SAAS,CACV,CAAC;IAEF,IAAI,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,kBAAkB,SAAS,sBAAsB,EAAE,CAAC;IAClH,IAAI,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAO,CAAC,OAAO,EAAE,CAAC;AACrD,CAAC;AAED,4EAA4E;AAC5E,0EAA0E;AAC1E,4EAA4E;AAE5E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAwB,EACxB,KAAe,EACf,YAAoB,gBAAgB;IAEpC,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE7C,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CACnD,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,EACrD,SAAS,CACV,CAAC;IAEF,IAAI,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,wBAAwB,SAAS,sBAAsB,EAAE,CAAC;IACxH,IAAI,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAO,CAAC,OAAO,EAAE,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAwB,EACxB,KAAe,EACf,YAAoB,gBAAgB;IAEpC,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE7C,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CACnD,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAC3D,SAAS,CACV,CAAC;IAEF,IAAI,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,yBAAyB,SAAS,sBAAsB,EAAE,CAAC;IACzH,IAAI,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAO,CAAC,UAAU,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAwB,EACxB,KAA+C,EAC/C,YAAoB,gBAAgB;IAEpC,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE7C,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CACnD,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAC3D,SAAS,CACV,CAAC;IAEF,IAAI,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,kCAAkC,SAAS,sBAAsB,EAAE,CAAC;IAClI,IAAI,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAO,CAAC,OAAO,EAAE,CAAC;AACrD,CAAC;AAED,4EAA4E;AAC5E,uEAAuE;AACvE,4EAA4E;AAE5E;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,+CAA+C;IAC/C,MAAM,iBAAiB,GAAG;QACxB,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,mCAAmC,EAAE;QAC1E,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,mCAAmC,EAAE;QAC1E,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,mCAAmC,EAAE;QAC1E,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,mCAAmC,EAAE;QAC1E,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,uCAAuC,EAAE;QACnF,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,uCAAuC,EAAE;KACpF,CAAC;IAEF,KAAK,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,iBAAiB,EAAE,CAAC;QACvE,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAChD,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACzB,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,KAAc;IAEd,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAEjD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACrB,OAAO;YACL,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,yBAAyB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC/D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACzC,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/src/utils/streaming.d.ts

@@ -1,5 +1,5 @@
 /**
- * File Streaming - v3.4.1
+ * File Streaming - v3.5.1
  * Stream large files in chunks to avoid memory exhaustion
  */
 export interface StreamOptions {

package/dist/src/utils/streaming.js

@@ -1,5 +1,5 @@
 /**
- * File Streaming - v3.4.1
+ * File Streaming - v3.5.1
  * Stream large files in chunks to avoid memory exhaustion
  */
 import * as fs from "node:fs";

package/dist/src/utils/telemetry.d.ts

@@ -1,5 +1,5 @@
 /**
- * Telemetry - v3.4.1
+ * Telemetry - v3.5.1
  * Metrics collection and monitoring
  */
 export interface Metric {

package/dist/src/utils/telemetry.js

@@ -1,5 +1,5 @@
 /**
- * Telemetry - v3.4.1
+ * Telemetry - v3.5.1
  * Metrics collection and monitoring
  */
 export class TelemetryCollector {

package/llms.txt

@@ -1,8 +1,8 @@
-# mcp-code-context v3.4.1
+# mcp-code-context v3.5.1
 
 > A Model Context Protocol (MCP) server with **Tree-sitter WASM parsers** for 100% AST accuracy. Zero native dependencies. Production-ready with middleware pipeline.
 
-## What's New in v3.4.1
+## What's New in v3.5.1
 
 🔒 **Production Hardening**:
 - ✅ Two-phase write workflow (dry-run + confirmation token)
@@ -142,13 +142,13 @@ This MCP server solves two problems:
 - `steps` (optional): Number of versions to go back (1-5, default: 1).
 **What it does:** Reverts the file to the state it was in before the last 1-5 modifications.
 
-### Write Tools (v3.4.1 Two-Phase Workflow)
+### Write Tools (v3.5.1 Two-Phase Workflow)
 
 All write tools follow a **Two-Phase Workflow**:
 1. **Phase 1 (Preview)**: Call without a token to get a unified `diff` and a `confirmationToken`.
 2. **Phase 2 (Apply)**: Call with `confirmationToken` and `confirm: true` to apply the changes.
 
-**Important Notes (v3.4.1):**
+**Important Notes (v3.5.1):**
 - ✅ **Windows CRLF Support**: Fully resolved. All operations work correctly on Windows files with CRLF line endings.
 - ✅ **Parameter Brace Handling**: Methods with braces in parameters (e.g., `{int? cart}`) are now handled correctly.
 
@@ -236,7 +236,7 @@ All write tools follow a **Two-Phase Workflow**:
 5. **Phase 2: Apply Edit** → Verify the diff, then call with the token and `confirm: true`.
 6. **Recovery** → Use `rollback_file` if needed.
 
-### Additional Tools (v3.4.1)
+### Additional Tools (v3.5.1)
 
 #### 11. `parse_file`
 **Purpose:** Parse a file using Tree-sitter and extract all symbols.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-code-context",
-  "version": "3.4.1",
+  "version": "3.5.1",
   "description": "Powerful MCP server with Tree-sitter WASM parsers for 100% AST accuracy. Zero native dependencies. Production-ready with streaming, telemetry, audit logging, rate limiting, file locking, and ReDoS protection. Supports TypeScript, JavaScript, PHP, Dart, and Python.",
   "type": "module",
   "main": "dist/src/index.js",