mcp-code-context 3.9.1 → 3.9.2

package/dist/src/utils/fuzzySearch.js

@@ -1,5 +1,5 @@
 /**
- * Fuzzy Search - v3.9.1
+ * Fuzzy Search - v3.9.2
  * Typo-tolerant search with fuse.js
  */
 import Fuse from 'fuse.js';

package/dist/src/utils/gemfileParser.d.ts

@@ -1,5 +1,5 @@
 /**
- * Gemfile Parser - v3.9.1
+ * Gemfile Parser - v3.9.2
  * Parses Ruby Gemfile to extract gem dependencies and infer implicit behavior.
  * Uses a JSON data file for gem descriptions so they can be updated without recompile.
  */

package/dist/src/utils/gemfileParser.js

@@ -1,5 +1,5 @@
 /**
- * Gemfile Parser - v3.9.1
+ * Gemfile Parser - v3.9.2
  * Parses Ruby Gemfile to extract gem dependencies and infer implicit behavior.
  * Uses a JSON data file for gem descriptions so they can be updated without recompile.
  */

package/dist/src/utils/logger.d.ts

@@ -1,5 +1,5 @@
 /**
- * Logger - v3.9.1
+ * Logger - v3.9.2
  * Structured logging with pino (JSON to stderr, MCP-safe)
  */
 import pino from 'pino';

package/dist/src/utils/logger.js

@@ -1,5 +1,5 @@
 /**
- * Logger - v3.9.1
+ * Logger - v3.9.2
  * Structured logging with pino (JSON to stderr, MCP-safe)
  */
 import pino from 'pino';

package/dist/src/utils/metaprogramming.d.ts

@@ -1,5 +1,5 @@
 /**
- * Metaprogramming Entry Point Scanner - v3.9.1
+ * Metaprogramming Entry Point Scanner - v3.9.2
  * Identifies where Ruby's "magic" methods are generated in a codebase.
  * Does not resolve what methods are created — it surfaces WHERE to look.
  */

package/dist/src/utils/metaprogramming.js

@@ -1,5 +1,5 @@
 /**
- * Metaprogramming Entry Point Scanner - v3.9.1
+ * Metaprogramming Entry Point Scanner - v3.9.2
  * Identifies where Ruby's "magic" methods are generated in a codebase.
  * Does not resolve what methods are created — it surfaces WHERE to look.
  */

package/dist/src/utils/projectRoot.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Searches upward from startPath to find the nearest project root directory marked by common indicators.
+ */
+export declare function findProjectRoot(startPath: string): string;
+/**
+ * Resolves the effective projectRoot from tool arguments, candidate paths, or process.cwd().
+ * Eliminates the bug where undefined projectRoot was stringified as literal "undefined".
+ */
+export declare function resolveProjectRoot(args?: Record<string, unknown>, fallbackPath?: string): string;

package/dist/src/utils/projectRoot.js

@@ -0,0 +1,94 @@
+import * as path from "node:path";
+import * as fs from "node:fs";
+const ROOT_MARKERS = [
+    ".git",
+    "package.json",
+    "composer.json",
+    "pyproject.toml",
+    "requirements.txt",
+    "Cargo.toml",
+    "go.mod",
+    "Gemfile",
+    "pom.xml",
+    "build.gradle",
+];
+/**
+ * Searches upward from startPath to find the nearest project root directory marked by common indicators.
+ */
+export function findProjectRoot(startPath) {
+    try {
+        let current = path.resolve(startPath);
+        if (fs.existsSync(current)) {
+            const stat = fs.statSync(current);
+            if (stat.isFile()) {
+                current = path.dirname(current);
+            }
+        }
+        else {
+            // If path does not exist yet, start from dirname
+            current = path.dirname(current);
+        }
+        while (true) {
+            for (const marker of ROOT_MARKERS) {
+                if (fs.existsSync(path.join(current, marker))) {
+                    return current;
+                }
+            }
+            const parent = path.dirname(current);
+            if (parent === current) {
+                break;
+            }
+            current = parent;
+        }
+    }
+    catch {
+        // Fallback if filesystem access fails
+    }
+    return path.resolve(startPath);
+}
+/**
+ * Resolves the effective projectRoot from tool arguments, candidate paths, or process.cwd().
+ * Eliminates the bug where undefined projectRoot was stringified as literal "undefined".
+ */
+export function resolveProjectRoot(args, fallbackPath) {
+    if (args) {
+        if (typeof args.projectRoot === "string" &&
+            args.projectRoot.trim().length > 0 &&
+            args.projectRoot !== "undefined" &&
+            args.projectRoot !== "null") {
+            return path.resolve(args.projectRoot.trim());
+        }
+        if (typeof args.rootDir === "string" &&
+            args.rootDir.trim().length > 0 &&
+            args.rootDir !== "undefined" &&
+            args.rootDir !== "null") {
+            return findProjectRoot(args.rootDir.trim());
+        }
+        if (typeof args.directoryPath === "string" &&
+            args.directoryPath.trim().length > 0 &&
+            args.directoryPath !== "undefined" &&
+            args.directoryPath !== "null") {
+            return findProjectRoot(args.directoryPath.trim());
+        }
+        if (typeof args.filePath === "string" &&
+            args.filePath.trim().length > 0 &&
+            args.filePath !== "undefined" &&
+            args.filePath !== "null") {
+            return findProjectRoot(args.filePath.trim());
+        }
+        if (Array.isArray(args.reads) && args.reads.length > 0) {
+            const first = args.reads[0];
+            if (first && typeof first === "object" && typeof first.filePath === "string") {
+                return findProjectRoot(first.filePath);
+            }
+        }
+    }
+    if (typeof fallbackPath === "string" &&
+        fallbackPath.trim().length > 0 &&
+        fallbackPath !== "undefined" &&
+        fallbackPath !== "null") {
+        return findProjectRoot(fallbackPath.trim());
+    }
+    return process.cwd();
+}
+//# sourceMappingURL=projectRoot.js.map

package/dist/src/utils/projectRoot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectRoot.js","sourceRoot":"","sources":["../../../src/utils/projectRoot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,MAAM,YAAY,GAAG;IACnB,MAAM;IACN,cAAc;IACd,eAAe;IACf,gBAAgB;IAChB,kBAAkB;IAClB,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,SAAS;IACT,cAAc;CACf,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,IAAI,CAAC;QACH,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBAClB,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,iDAAiD;YACjD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;YACZ,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;gBAClC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;oBAC9C,OAAO,OAAO,CAAC;gBACjB,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,MAAM;YACR,CAAC;YACD,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAA8B,EAC9B,YAAqB;IAErB,IAAI,IAAI,EAAE,CAAC;QACT,IACE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;YACpC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAClC,IAAI,CAAC,WAAW,KAAK,WAAW;YAChC,IAAI,CAAC,WAAW,KAAK,MAAM,EAC3B,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,IACE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAChC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAC9B,IAAI,CAAC,OAAO,KAAK,WAAW;YAC5B,IAAI,CAAC,OAAO,KAAK,MAAM,EACvB,CAAC;YACD,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,IACE,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;YACtC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACpC,IAAI,CAAC,aAAa,KAAK,WAAW;YAClC,IAAI,CAAC,aAAa,KAAK,MAAM,EAC7B,CAAC;YACD,OAAO,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,IACE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;YACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAC/B,IAAI,CAAC,QAAQ,KAAK,WAAW;YAC7B,IAAI,CAAC,QAAQ,KAAK,MAAM,EACxB,CAAC;YACD,OAAO,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAAa,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACtF,OAAO,eAAe,CAAE,KAAa,CAAC,QAAQ,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAED,IACE,OAAO,YAAY,KAAK,QAAQ;QAChC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC9B,YAAY,KAAK,WAAW;QAC5B,YAAY,KAAK,MAAM,EACvB,CAAC;QACD,OAAO,eAAe,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;AACvB,CAAC"}

package/dist/src/utils/railsRoutes.d.ts

@@ -1,5 +1,5 @@
 /**
- * Rails Routes Parser - v3.9.1
+ * Rails Routes Parser - v3.9.2
  * Parses config/routes.rb to map HTTP routes to controller actions.
  * Uses indentation-based namespace tracking (immune to do/end counting errors).
  * Supports: resources, resource, explicit HTTP verbs, namespace/scope, root.

package/dist/src/utils/railsRoutes.js

@@ -1,5 +1,5 @@
 /**
- * Rails Routes Parser - v3.9.1
+ * Rails Routes Parser - v3.9.2
  * Parses config/routes.rb to map HTTP routes to controller actions.
  * Uses indentation-based namespace tracking (immune to do/end counting errors).
  * Supports: resources, resource, explicit HTTP verbs, namespace/scope, root.

package/dist/src/utils/rateLimiter.d.ts

@@ -1,5 +1,5 @@
 /**
- * Rate Limiter - v3.9.1
+ * Rate Limiter - v3.9.2
  * Token bucket algorithm for DoS protection
  */
 interface RateLimitConfig {

package/dist/src/utils/rateLimiter.js

@@ -1,5 +1,5 @@
 /**
- * Rate Limiter - v3.9.1
+ * Rate Limiter - v3.9.2
  * Token bucket algorithm for DoS protection
  */
 export class RateLimiter {

package/dist/src/utils/streaming.d.ts

@@ -1,5 +1,5 @@
 /**
- * File Streaming - v3.9.1
+ * File Streaming - v3.9.2
  * Stream large files in chunks to avoid memory exhaustion
  */
 import type { BaseParser, SymbolInfo } from "../parsers/base.js";

package/dist/src/utils/streaming.js

@@ -1,5 +1,5 @@
 /**
- * File Streaming - v3.9.1
+ * File Streaming - v3.9.2
  * Stream large files in chunks to avoid memory exhaustion
  */
 import * as fs from "node:fs";

package/dist/src/utils/telemetry.d.ts

@@ -1,5 +1,5 @@
 /**
- * Telemetry - v3.9.1
+ * Telemetry - v3.9.2
  * Metrics collection and monitoring
  */
 export interface Metric {

package/dist/src/utils/telemetry.js

@@ -1,5 +1,5 @@
 /**
- * Telemetry - v3.9.1
+ * Telemetry - v3.9.2
  * Metrics collection and monitoring
  */
 export class TelemetryCollector {

package/llms.txt

@@ -1,8 +1,16 @@
-# mcp-code-context v3.9.1
+# mcp-code-context v3.9.2
 
 > A Model Context Protocol (MCP) server with **Tree-sitter WASM parsers** for 100% AST accuracy. Zero native dependencies. Production-ready with middleware pipeline, session-scoped state, and crash recovery.
 
-## What's New in v3.9.1
+## What's New in v3.9.2
+
+🛡️ **Project Root Fallback & Schema Freedom Release**:
+- ✅ **Smart Project Root Discovery**: `resolveProjectRoot` & `findProjectRoot` walk up directory trees detecting `.git`, `package.json`, `composer.json`, `pyproject.toml`, etc. Eliminates false-positive `outside project boundary ".../undefined"` security errors.
+- ✅ **Optional Schema Requirements**: `projectRoot` is now optional across all tools in `CORE_TOOLS` and `ADMIN_TOOLS`. LLM agents can perform surgical operations with just `filePath` or `rootDir`.
+- ✅ **SecurityValidator Guard**: `SecurityValidator` safely defaults `undefined`/`null` roots to `process.cwd()`.
+- ✅ **Startup Diagnostics Signature**: Emits `[mcp-code-context] v3.9.2 running on stdio` on startup.
+
+## Previously Added in v3.9.1
 
 🐛 **Bug Fix Release**:
 - ✅ **`get_rails_routes` namespace fix**: Routes inside `namespace :admin do` now produce `/admin/users` (was `/users`). Controllers correctly namespaced as `admin/users`. Fixed regex that captured `admin do` instead of `admin` with symbol syntax.
@@ -159,13 +167,13 @@ This MCP server solves two problems:
 - `steps` (optional): Number of versions to go back (1-5, default: 1).
 **What it does:** Reverts the file to the state it was in before the last 1-5 modifications.
 
-### Write Tools (v3.9.1 Two-Phase Workflow)
+### Write Tools (Two-Phase Workflow)
 
 All write tools follow a **Two-Phase Workflow**:
 1. **Phase 1 (Preview)**: Call without a token to get a unified `diff` and a `confirmationToken`.
 2. **Phase 2 (Apply)**: Call with `confirmationToken` and `confirm: true` to apply the changes.
 
-**Important Notes (v3.9.1):**
+**Important Safety Features:**
 - ✅ **Windows CRLF Support**: Fully resolved. All operations work correctly on Windows files with CRLF line endings.
 - ✅ **Parameter Brace Handling**: Methods with braces in parameters (e.g., `{int? cart}`) are now handled correctly.
 - ✅ **Session-scoped state**: Each MCP client gets isolated state (locks, confirmation store, rate limiter).
@@ -344,7 +352,7 @@ All write tools follow a **Two-Phase Workflow**:
 5. **Phase 2: Apply Edit** → Verify the diff, then call with the token and `confirm: true`.
 6. **Recovery** → Use `rollback_file` if needed.
 
-## Session State Configuration (v3.9.1+)
+## Session State Configuration (v3.8.0+)
 
 ### Critical: Session-Scoped State
 
@@ -460,6 +468,6 @@ No additional configuration is needed beyond adding the MCP server definition. S
 
 ---
 
-**Version**: 3.9.1  
+**Version**: 3.9.2  
 **Last Updated**: June 8, 2026  
 **Status**: Production-ready with session-scoped state and crash recovery

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-code-context",
-  "version": "3.9.1",
+  "version": "3.9.2",
   "description": "Powerful MCP server with Tree-sitter WASM parsers for 100% AST accuracy. Zero native dependencies. Production-ready with persistent caching, structured logging, file watching, fuzzy search, rate limiting, file locking, and ReDoS protection. Supports TypeScript, JavaScript, PHP, Dart, Python, and Ruby (with ActiveRecord Virtual Schema extraction).",
   "type": "module",
   "main": "dist/src/index.js",

package/vitest.config.ts

@@ -1,37 +0,0 @@
-import { defineConfig } from 'vitest/config';
-import path from 'path';
-
-export default defineConfig({
-  test: {
-    globals: true,
-    environment: 'node',
-    reporters: ['default'],
-    coverage: {
-      provider: 'v8',
-      reporter: ['text', 'json', 'html'],
-      exclude: [
-        'node_modules/',
-        'dist/',
-        'dist-tests/',
-        '**/*.spec.ts',
-        '**/*.test.ts',
-        'tests/',
-        'scripts/'
-      ],
-      thresholds: {
-        lines: 80,
-        functions: 80,
-        branches: 75,
-        statements: 80
-      }
-    },
-    testTimeout: 60000,
-    hookTimeout: 60000,
-    outputTruncateLength: 80
-  },
-  resolve: {
-    alias: {
-      '@': path.resolve(__dirname, './src')
-    }
-  }
-});