mcp-code-context 3.6.3 → 3.7.0

package/dist/src/core/indexManagerQueries.js

@@ -0,0 +1,95 @@
+/**
+ * Index Manager query operations
+ */
+import * as fs from "node:fs/promises";
+import { existsSync } from "fs";
+export function searchSymbolsInDb(db, query, options = {}) {
+    const { fuzzy = false, types, maxResults = 50 } = options;
+    const results = [];
+    const typeFilter = types && types.length > 0 ? `AND type IN (${types.map(() => "?").join(",")})` : "";
+    let sql;
+    let params;
+    if (fuzzy) {
+        sql = `
+      SELECT file_path, name, type, start_line, end_line, class_name
+      FROM symbols WHERE LOWER(name) LIKE LOWER(?) ${typeFilter}
+      ORDER BY CASE WHEN LOWER(name) = LOWER(?) THEN 0 WHEN LOWER(name) LIKE LOWER(?) THEN 1 ELSE 2 END, name
+      LIMIT ?`;
+        params = [`%${query}%`, ...(types ?? []), query, `${query}%`, maxResults];
+    }
+    else {
+        sql = `
+      SELECT file_path, name, type, start_line, end_line, class_name
+      FROM symbols WHERE LOWER(name) = LOWER(?) ${typeFilter} ORDER BY name LIMIT ?`;
+        params = [query, ...(types ?? []), maxResults];
+    }
+    const stmt = db.prepare(sql);
+    stmt.bind(params);
+    while (stmt.step()) {
+        const row = stmt.getAsObject();
+        results.push({
+            filePath: row.file_path,
+            name: row.name,
+            type: row.type,
+            startLine: row.start_line,
+            endLine: row.end_line,
+            className: row.class_name ?? undefined,
+        });
+    }
+    stmt.free();
+    return results;
+}
+export function getDependentsFromDb(db, filePath) {
+    const results = [];
+    const stmt = db.prepare("SELECT from_file FROM dependencies WHERE to_file = ?");
+    stmt.bind([filePath]);
+    while (stmt.step()) {
+        results.push(stmt.getAsObject().from_file);
+    }
+    stmt.free();
+    return results;
+}
+export function getDependenciesFromDb(db, filePath) {
+    const results = [];
+    const stmt = db.prepare("SELECT to_file FROM dependencies WHERE from_file = ?");
+    stmt.bind([filePath]);
+    while (stmt.step()) {
+        results.push(stmt.getAsObject().to_file);
+    }
+    stmt.free();
+    return results;
+}
+export function hasIndexInDb(db) {
+    const stmt = db.prepare("SELECT COUNT(*) as count FROM files");
+    stmt.step();
+    const count = stmt.getAsObject().count;
+    stmt.free();
+    return count > 0;
+}
+export async function getIndexStatsFromDb(db, dbPath) {
+    const files = db.prepare("SELECT COUNT(*) as c FROM files");
+    files.step();
+    const filesCount = files.getAsObject().c;
+    files.free();
+    const syms = db.prepare("SELECT COUNT(*) as c FROM symbols");
+    syms.step();
+    const symsCount = syms.getAsObject().c;
+    syms.free();
+    const deps = db.prepare("SELECT COUNT(*) as c FROM dependencies");
+    deps.step();
+    const depsCount = deps.getAsObject().c;
+    deps.free();
+    const last = db.prepare("SELECT MAX(indexed_at) as t FROM files");
+    last.step();
+    const lastAt = last.getAsObject().t;
+    last.free();
+    const dbSize = existsSync(dbPath) ? (await fs.stat(dbPath)).size : 0;
+    return {
+        filesIndexed: filesCount,
+        symbolsIndexed: symsCount,
+        dependenciesIndexed: depsCount,
+        dbSizeBytes: dbSize,
+        lastIndexedAt: lastAt,
+    };
+}
+//# sourceMappingURL=indexManagerQueries.js.map

package/dist/src/core/indexManagerQueries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexManagerQueries.js","sourceRoot":"","sources":["../../../src/core/indexManagerQueries.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAGhC,MAAM,UAAU,iBAAiB,CAC/B,EAAY,EACZ,KAAa,EACb,UAAsE,EAAE;IAExE,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,EAAE,UAAU,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;IAC1D,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,UAAU,GACd,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAErF,IAAI,GAAW,CAAC;IAChB,IAAI,MAA2B,CAAC;IAEhC,IAAI,KAAK,EAAE,CAAC;QACV,GAAG,GAAG;;qDAE2C,UAAU;;cAEjD,CAAC;QACX,MAAM,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,KAAK,GAAG,EAAE,UAAU,CAAC,CAAC;IAC5E,CAAC;SAAM,CAAC;QACN,GAAG,GAAG;;kDAEwC,UAAU,wBAAwB,CAAC;QACjF,MAAM,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClB,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAO3B,CAAC;QACF,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;SACvC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;IACZ,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAAY,EAAE,QAAgB;IAChE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC;IAChF,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAE,IAAI,CAAC,WAAW,EAA4B,CAAC,SAAS,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;IACZ,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,EAAY,EAAE,QAAgB;IAClE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC;IAChF,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAE,IAAI,CAAC,WAAW,EAA0B,CAAC,OAAO,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;IACZ,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAY;IACvC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,EAAE,CAAC;IACZ,MAAM,KAAK,GAAI,IAAI,CAAC,WAAW,EAAwB,CAAC,KAAK,CAAC;IAC9D,IAAI,CAAC,IAAI,EAAE,CAAC;IACZ,OAAO,KAAK,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAY,EAAE,MAAc;IACpE,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,EAAE,CAAC;IACb,MAAM,UAAU,GAAI,KAAK,CAAC,WAAW,EAAoB,CAAC,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,EAAE,CAAC;IAEb,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI,EAAE,CAAC;IACZ,MAAM,SAAS,GAAI,IAAI,CAAC,WAAW,EAAoB,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;IAEZ,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;IAClE,IAAI,CAAC,IAAI,EAAE,CAAC;IACZ,MAAM,SAAS,GAAI,IAAI,CAAC,WAAW,EAAoB,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;IAEZ,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;IAClE,IAAI,CAAC,IAAI,EAAE,CAAC;IACZ,MAAM,MAAM,GAAI,IAAI,CAAC,WAAW,EAA2B,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,IAAI,EAAE,CAAC;IAEZ,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAErE,OAAO;QACL,YAAY,EAAE,UAAU;QACxB,cAAc,EAAE,SAAS;QACzB,mBAAmB,EAAE,SAAS;QAC9B,WAAW,EAAE,MAAM;QACnB,aAAa,EAAE,MAAM;KACtB,CAAC;AACJ,CAAC"}

package/dist/src/core/sessionManager.d.ts

@@ -0,0 +1,117 @@
+/**
+ * Session Manager - v3.7.0
+ * Manages per-MCP-client state isolation
+ * Prevents state leakage between concurrent clients
+ */
+import { FileLockManager } from "../utils/fileLock.js";
+import { ConfirmationStore } from "../operations/confirmationStore.js";
+import { RateLimiter } from "../utils/rateLimiter.js";
+import { CacheManager } from "./cacheManager.js";
+interface CacheEntry {
+    cache: CacheManager;
+    lastUsed: number;
+}
+interface SessionState {
+    sessionId: string;
+    lockManager: FileLockManager;
+    confirmationStore: ConfirmationStore;
+    rateLimiter: RateLimiter;
+    cacheManagers: Map<string, CacheEntry>;
+    createdAt: number;
+    lastActivity: number;
+}
+export interface SessionStats {
+    exists: boolean;
+    sessionId?: string;
+    createdAt?: number;
+    lastActivity?: number;
+    pendingOperations: number;
+    locksHeld: number;
+    rateLimiterTokens: number;
+    cacheManagers: number;
+}
+export interface PendingOperationSummary {
+    token: string;
+    filePath: string;
+    operation: string;
+    createdAt: number;
+    expiresAt: number;
+}
+/**
+ * SessionManager - Manages isolated state per MCP client connection
+ *
+ * Each MCP client connection gets:
+ * - Dedicated FileLockManager (no lock conflicts)
+ * - Dedicated ConfirmationStore (no token leakage)
+ * - Dedicated RateLimiter bucket (fair quota)
+ * - Dedicated CacheManager pool (no cache pollution)
+ */
+export declare class SessionManager {
+    private sessions;
+    private cleanupTimer;
+    constructor();
+    /**
+     * Get or create session state for a client
+     *
+     * @param sessionId - Unique identifier for MCP client connection
+     * @returns Isolated session state
+     */
+    getOrCreate(sessionId: string, projectRoot?: string): SessionState;
+    /**
+     * Get CacheManager for a project within this session
+     *
+     * @param sessionId - Session identifier
+     * @param projectRoot - Project root path
+     * @returns CacheManager instance
+     */
+    getCacheManager(sessionId: string, projectRoot: string): CacheManager;
+    /**
+     * Cleanup session and release all resources
+     *
+     * @param sessionId - Session to cleanup
+     */
+    cleanup(sessionId: string): Promise<void>;
+    /**
+     * Get stats for a specific session
+     *
+     * @param sessionId - Session identifier
+     * @returns Session statistics
+     */
+    getSessionStats(sessionId: string): SessionStats;
+    /**
+     * Clear cache for a specific session
+     *
+     * @param sessionId - Session identifier
+     * @param projectRoot - Project root path
+     * @returns Number of cache entries cleared
+     */
+    clearSessionCache(sessionId: string, projectRoot?: string): Promise<number>;
+    /**
+     * List all pending operations for a session
+     *
+     * @param sessionId - Session identifier
+     * @returns Array of pending operations
+     */
+    listPendingOperations(sessionId: string): PendingOperationSummary[];
+    /**
+     * Get count of active sessions
+     */
+    getActiveSessionCount(): number;
+    /**
+     * Auto-cleanup inactive sessions
+     */
+    private startCleanupTimer;
+    /**
+     * Stop cleanup timer
+     */
+    stop(): void;
+    /**
+     * Cleanup all sessions on shutdown
+     */
+    shutdownAll(): Promise<void>;
+}
+/**
+ * Global session manager instance
+ */
+export declare const globalSessionManager: SessionManager;
+export {};

package/dist/src/core/sessionManager.js

@@ -0,0 +1,231 @@
+/**
+ * Session Manager - v3.7.0
+ * Manages per-MCP-client state isolation
+ * Prevents state leakage between concurrent clients
+ */
+import { FileLockManager } from "../utils/fileLock.js";
+import { ConfirmationStore } from "../operations/confirmationStore.js";
+import { RateLimiter } from "../utils/rateLimiter.js";
+import { CacheManager } from "./cacheManager.js";
+const MAX_CACHE_MANAGERS = 10;
+const SESSION_TIMEOUT_MS = 30 * 60 * 1000; // 30 minutes
+/**
+ * SessionManager - Manages isolated state per MCP client connection
+ *
+ * Each MCP client connection gets:
+ * - Dedicated FileLockManager (no lock conflicts)
+ * - Dedicated ConfirmationStore (no token leakage)
+ * - Dedicated RateLimiter bucket (fair quota)
+ * - Dedicated CacheManager pool (no cache pollution)
+ */
+export class SessionManager {
+    sessions = new Map();
+    cleanupTimer = null;
+    constructor() {
+        this.startCleanupTimer();
+    }
+    /**
+     * Get or create session state for a client
+     *
+     * @param sessionId - Unique identifier for MCP client connection
+     * @returns Isolated session state
+     */
+    getOrCreate(sessionId, projectRoot) {
+        let session = this.sessions.get(sessionId);
+        if (!session) {
+            session = {
+                sessionId,
+                lockManager: new FileLockManager(),
+                // Pass sessionId + projectRoot so SQLite crash recovery activates
+                confirmationStore: new ConfirmationStore(sessionId, projectRoot),
+                rateLimiter: new RateLimiter(),
+                cacheManagers: new Map(),
+                createdAt: Date.now(),
+                lastActivity: Date.now(),
+            };
+            this.sessions.set(sessionId, session);
+        }
+        else if (projectRoot && !session.confirmationStore.hasPersistentStore()) {
+            // Session existed but was created without projectRoot — activate SQLite now
+            session.confirmationStore.activatePersistence(sessionId, projectRoot);
+        }
+        session.lastActivity = Date.now();
+        return session;
+    }
+    /**
+     * Get CacheManager for a project within this session
+     *
+     * @param sessionId - Session identifier
+     * @param projectRoot - Project root path
+     * @returns CacheManager instance
+     */
+    getCacheManager(sessionId, projectRoot) {
+        // Pass projectRoot so crash recovery SQLite activates on first real tool call
+        const session = this.getOrCreate(sessionId, projectRoot);
+        const now = Date.now();
+        if (session.cacheManagers.has(projectRoot)) {
+            const entry = session.cacheManagers.get(projectRoot);
+            entry.lastUsed = now;
+            return entry.cache;
+        }
+        // Evict LRU if at capacity
+        if (session.cacheManagers.size >= MAX_CACHE_MANAGERS) {
+            let oldestKey = null;
+            let oldestTime = Infinity;
+            for (const [key, entry] of session.cacheManagers.entries()) {
+                if (entry.lastUsed < oldestTime) {
+                    oldestTime = entry.lastUsed;
+                    oldestKey = key;
+                }
+            }
+            if (oldestKey) {
+                const evicted = session.cacheManagers.get(oldestKey);
+                evicted.cache.persistOnExit();
+                evicted.cache.close();
+                session.cacheManagers.delete(oldestKey);
+            }
+        }
+        const cache = new CacheManager(projectRoot);
+        session.cacheManagers.set(projectRoot, { cache, lastUsed: now });
+        return cache;
+    }
+    /**
+     * Cleanup session and release all resources
+     *
+     * @param sessionId - Session to cleanup
+     */
+    async cleanup(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session)
+            return;
+        // Release all file locks
+        await session.lockManager.releaseAll();
+        // Stop rate limiter timer
+        session.rateLimiter.stop();
+        // Close all cache managers (persist + stop watchers + free WASM heap)
+        for (const entry of session.cacheManagers.values()) {
+            entry.cache.persistOnExit();
+            entry.cache.close();
+        }
+        session.cacheManagers.clear();
+        // Clear confirmation store
+        session.confirmationStore.clearAll();
+        this.sessions.delete(sessionId);
+    }
+    /**
+     * Get stats for a specific session
+     *
+     * @param sessionId - Session identifier
+     * @returns Session statistics
+     */
+    getSessionStats(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session) {
+            return {
+                exists: false,
+                pendingOperations: 0,
+                locksHeld: 0,
+                rateLimiterTokens: 0,
+                cacheManagers: 0,
+            };
+        }
+        return {
+            exists: true,
+            sessionId: session.sessionId,
+            createdAt: session.createdAt,
+            lastActivity: session.lastActivity,
+            pendingOperations: session.confirmationStore.getPendingCount(),
+            locksHeld: session.lockManager.getActiveLockCount(),
+            rateLimiterTokens: session.rateLimiter.getTokens(sessionId),
+            cacheManagers: session.cacheManagers.size,
+        };
+    }
+    /**
+     * Clear cache for a specific session
+     *
+     * @param sessionId - Session identifier
+     * @param projectRoot - Project root path
+     * @returns Number of cache entries cleared
+     */
+    async clearSessionCache(sessionId, projectRoot) {
+        const session = this.sessions.get(sessionId);
+        if (!session)
+            return 0;
+        if (projectRoot) {
+            const entry = session.cacheManagers.get(projectRoot);
+            if (entry) {
+                await entry.cache.clear();
+                return 1;
+            }
+            return 0;
+        }
+        // Clear all caches for this session
+        let cleared = 0;
+        for (const entry of session.cacheManagers.values()) {
+            await entry.cache.clear();
+            cleared++;
+        }
+        return cleared;
+    }
+    /**
+     * List all pending operations for a session
+     *
+     * @param sessionId - Session identifier
+     * @returns Array of pending operations
+     */
+    listPendingOperations(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session)
+            return [];
+        return session.confirmationStore.listAll();
+    }
+    /**
+     * Get count of active sessions
+     */
+    getActiveSessionCount() {
+        return this.sessions.size;
+    }
+    /**
+     * Auto-cleanup inactive sessions
+     */
+    startCleanupTimer() {
+        this.cleanupTimer = setInterval(async () => {
+            const now = Date.now();
+            const toCleanup = [];
+            for (const [sessionId, session] of this.sessions.entries()) {
+                const inactive = now - session.lastActivity;
+                if (inactive > SESSION_TIMEOUT_MS) {
+                    toCleanup.push(sessionId);
+                }
+            }
+            for (const sessionId of toCleanup) {
+                await this.cleanup(sessionId);
+            }
+        }, 60 * 1000); // Check every minute
+        if (this.cleanupTimer.unref) {
+            this.cleanupTimer.unref();
+        }
+    }
+    /**
+     * Stop cleanup timer
+     */
+    stop() {
+        if (this.cleanupTimer) {
+            clearInterval(this.cleanupTimer);
+            this.cleanupTimer = null;
+        }
+    }
+    /**
+     * Cleanup all sessions on shutdown
+     */
+    async shutdownAll() {
+        this.stop();
+        const sessionIds = Array.from(this.sessions.keys());
+        await Promise.all(sessionIds.map(id => this.cleanup(id)));
+    }
+}
+/**
+ * Global session manager instance
+ */
+export const globalSessionManager = new SessionManager();
+//# sourceMappingURL=sessionManager.js.map

package/dist/src/core/sessionManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionManager.js","sourceRoot":"","sources":["../../../src/core/sessionManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAqCjD,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AAExD;;;;;;;;GAQG;AACH,MAAM,OAAO,cAAc;IACjB,QAAQ,GAA8B,IAAI,GAAG,EAAE,CAAC;IAChD,YAAY,GAA0B,IAAI,CAAC;IAEnD;QACE,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,SAAiB,EAAE,WAAoB;QACjD,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAE3C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG;gBACR,SAAS;gBACT,WAAW,EAAE,IAAI,eAAe,EAAE;gBAClC,kEAAkE;gBAClE,iBAAiB,EAAE,IAAI,iBAAiB,CAAC,SAAS,EAAE,WAAW,CAAC;gBAChE,WAAW,EAAE,IAAI,WAAW,EAAE;gBAC9B,aAAa,EAAE,IAAI,GAAG,EAAE;gBACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;aACzB,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;aAAM,IAAI,WAAW,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAC1E,4EAA4E;YAC5E,OAAO,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;OAMG;IACH,eAAe,CAAC,SAAiB,EAAE,WAAmB;QACpD,8EAA8E;QAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;YACtD,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC;YACrB,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QAED,2BAA2B;QAC3B,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,IAAI,kBAAkB,EAAE,CAAC;YACrD,IAAI,SAAS,GAAkB,IAAI,CAAC;YACpC,IAAI,UAAU,GAAG,QAAQ,CAAC;YAE1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC3D,IAAI,KAAK,CAAC,QAAQ,GAAG,UAAU,EAAE,CAAC;oBAChC,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC;oBAC5B,SAAS,GAAG,GAAG,CAAC;gBAClB,CAAC;YACH,CAAC;YAED,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;gBACtD,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;gBAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACtB,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,WAAW,CAAC,CAAC;QAC5C,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,yBAAyB;QACzB,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QAEvC,0BAA0B;QAC1B,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAE3B,sEAAsE;QACtE,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;YACnD,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YAC5B,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QACD,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAE9B,2BAA2B;QAC3B,OAAO,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC;QAErC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,SAAiB;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,iBAAiB,EAAE,CAAC;gBACpB,SAAS,EAAE,CAAC;gBACZ,iBAAiB,EAAE,CAAC;gBACpB,aAAa,EAAE,CAAC;aACjB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,CAAC,eAAe,EAAE;YAC9D,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,kBAAkB,EAAE;YACnD,iBAAiB,EAAE,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC;YAC3D,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,IAAI;SAC1C,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,WAAoB;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC;QAEvB,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrD,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC1B,OAAO,CAAC,CAAC;YACX,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,oCAAoC;QACpC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;YACnD,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,qBAAqB,CAAC,SAAiB;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAExB,OAAO,OAAO,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;YACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,SAAS,GAAa,EAAE,CAAC;YAE/B,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC3D,MAAM,QAAQ,GAAG,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC;gBAC5C,IAAI,QAAQ,GAAG,kBAAkB,EAAE,CAAC;oBAClC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YAED,KAAK,MAAM,SAAS,IAAI,SAAS,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,CAAC;QACH,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,qBAAqB;QACpC,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,cAAc,EAAE,CAAC"}

package/dist/src/core/validator.d.ts

@@ -1,5 +1,5 @@
 /**
- * Security Validator - v3.6.3
+ * Security Validator - v3.7.0
  * CRITICAL FIX: Path traversal check AFTER normalization
  */
 export interface ValidationResult {

package/dist/src/core/validator.js

@@ -1,5 +1,5 @@
 /**
- * Security Validator - v3.6.3
+ * Security Validator - v3.7.0
  * CRITICAL FIX: Path traversal check AFTER normalization
  */
 import * as path from "node:path";
@@ -7,29 +7,37 @@ import * as fs from "node:fs/promises";
 export class SecurityValidator {
     projectRoot;
     constructor(projectRoot) {
-        this.projectRoot = path.resolve(projectRoot);
+        // normalize: resolve + lowercase for case-insensitive Windows FS comparison
+        this.projectRoot = path.resolve(projectRoot).toLowerCase();
     }
     async validateFilePath(filePath) {
-        // Resolve FIRST, then check
         const resolved = path.resolve(filePath);
-        // CRITICAL: Check boundary AFTER normalization (with path separator)
-        if (resolved !== this.projectRoot && !resolved.startsWith(this.projectRoot + path.sep)) {
+        const resolvedNorm = resolved.toLowerCase();
+        if (resolvedNorm !== this.projectRoot && !resolvedNorm.startsWith(this.projectRoot + path.sep)) {
             return {
                 valid: false,
-                error: `Security: Path "${filePath}" is outside project boundary "${this.projectRoot}"`
+                error: `Security: Path "${filePath}" is outside project boundary "${this.projectRoot}"`,
             };
         }
-        // Existence check
         try {
-            await fs.access(resolved);
+            const realPath = await fs.realpath(resolved);
+            const realPathNorm = realPath.toLowerCase();
+            if (realPathNorm !== this.projectRoot && !realPathNorm.startsWith(this.projectRoot + path.sep)) {
+                return {
+                    valid: false,
+                    error: `Security: Symlink "${filePath}" resolves outside project boundary "${this.projectRoot}"`,
+                };
+            }
+            await fs.access(realPath);
+            return { valid: true, resolvedPath: realPath };
         }
         catch {
+            // fs.realpath or fs.access failed — file does not exist or is inaccessible
             return {
                 valid: false,
-                error: `File not found: "${filePath}" (resolved to "${resolved}")`
+                error: `File not found: "${filePath}" (resolved to "${resolved}")`,
             };
         }
-        return { valid: true, resolvedPath: resolved };
     }
     async validateFileSize(filePath, maxSize = 10 * 1024 * 1024) {
         try {

package/dist/src/core/validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../src/core/validator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAQvC,MAAM,OAAO,iBAAiB;IACpB,WAAW,CAAS;IAE5B,YAAY,WAAmB;QAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QACrC,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAExC,qEAAqE;QACrE,IAAI,QAAQ,KAAK,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACvF,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,mBAAmB,QAAQ,kCAAkC,IAAI,CAAC,WAAW,GAAG;aACxF,CAAC;QACJ,CAAC;QAED,kBAAkB;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,oBAAoB,QAAQ,mBAAmB,QAAQ,IAAI;aACnE,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,UAAkB,EAAE,GAAG,IAAI,GAAG,IAAI;QACzE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACpD,MAAM,KAAK,GAAG,CAAC,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACjD,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,mBAAmB,MAAM,sBAAsB,KAAK,IAAI;iBAChE,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,kCAAkC,QAAQ,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aAChH,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../src/core/validator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAQvC,MAAM,OAAO,iBAAiB;IACpB,WAAW,CAAS;IAE5B,YAAY,WAAmB;QAC7B,4EAA4E;QAC5E,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAE5C,IAAI,YAAY,KAAK,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/F,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,mBAAmB,QAAQ,kCAAkC,IAAI,CAAC,WAAW,GAAG;aACxF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;YAE5C,IAAI,YAAY,KAAK,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/F,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,sBAAsB,QAAQ,wCAAwC,IAAI,CAAC,WAAW,GAAG;iBACjG,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;YAC3E,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,oBAAoB,QAAQ,mBAAmB,QAAQ,IAAI;aACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,UAAkB,EAAE,GAAG,IAAI,GAAG,IAAI;QACzE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACpD,MAAM,KAAK,GAAG,CAAC,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACjD,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,mBAAmB,MAAM,sBAAsB,KAAK,IAAI;iBAChE,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,kCAAkC,QAAQ,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aAChH,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/src/index.d.ts

@@ -1,17 +1,5 @@
 #!/usr/bin/env node
 /**
- * mcp-code-context v3.6.3 - Tree-sitter WASM Edition
- *
- * Production-ready with:
- * - Tree-sitter WASM for 100% AST accuracy (TypeScript, Python, PHP, Dart)
- * - Zero native dependencies — 100% portable across Windows/Mac/Linux
- * - Two-phase write workflow (dry-run + confirmation token)
- * - Middleware pipeline: rate limiting, file locking, audit logging, telemetry
- * - Mandatory security boundaries on ALL handlers
- * - Persistent WASM SQLite cache with <100ms hits
- * - Structured logging with pino (JSON to stderr, MCP-safe)
- * - File watcher with chokidar for auto cache invalidation
- * - Fuzzy search with fuse.js + pagination
- * - Token optimization: compact diffs, auto-optimize output
+ * mcp-code-context v3.7.0 - Tree-sitter WASM Edition (thin bootstrap)
  */
 export {};