pindex 1.2.2 → 1.3.0

package/dist/tools/search_symbols.js

@@ -1,6 +1,7 @@
 import { readFileSync, existsSync } from 'node:fs';
-import { join } from 'node:path';
+import { basename } from 'node:path';
 import { searchSymbolsFts } from '../db/queries.js';
+import { resolveWithinRoot } from '../util/paths.js';
 export function searchSymbols(db, input, federatedDbs = [], projectRoot) {
     const limit = input.limit ?? 20;
     const filters = {
@@ -19,15 +20,15 @@ export function searchSymbols(db, input, federatedDbs = [], projectRoot) {
             hasTryCatch: row.has_try_catch === 1,
         };
         if (input.snippet && root) {
-            const absPath = join(root, row.file_path);
-            if (existsSync(absPath)) {
+            const absPath = resolveWithinRoot(root, row.file_path);
+            if (absPath && existsSync(absPath)) {
                 try {
                     const lines = readFileSync(absPath, 'utf-8').split('\n');
                     const startIdx = Math.max(0, row.start_line - 1);
                     result.snippet = lines.slice(startIdx, startIdx + 5).join('\n');
                 }
-                catch {
-                    // ignore read errors
+                catch (err) {
+                    process.stderr.write(`[pindex] search_symbols snippet read failed for ${absPath}: ${String(err)}\n`);
                 }
             }
         }
@@ -42,10 +43,11 @@ export function searchSymbols(db, input, federatedDbs = [], projectRoot) {
         try {
             return searchSymbolsFts(fedDb, input.query, limit, filters).map((row) => ({
                 ...mapRow(row),
-                project: path.split('/').pop() ?? path,
+                project: basename(path),
             }));
         }
-        catch {
+        catch (err) {
+            process.stderr.write(`[pindex] Federated search failed for ${path}: ${err}\n`);
             return [];
         }
     });

package/dist/tools/search_symbols.js.map

@@ -1 +1 @@
-{"version":3,"file":"search_symbols.js","sourceRoot":"","sources":["../../src/tools/search_symbols.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGpD,MAAM,UAAU,aAAa,CAC3B,EAAqB,EACrB,KAAyB,EACzB,eAA8B,EAAE,EAChC,WAAoB;IAEpB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;IAEF,SAAS,MAAM,CAAC,GAAgD,EAAE,IAAa;QAC7E,MAAM,MAAM,GAAuB;YACjC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,SAAS;YACnB,IAAI,EAAE,GAAG,CAAC,UAAU;YACpB,OAAO,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;YAC3B,WAAW,EAAE,GAAG,CAAC,aAAa,KAAK,CAAC;SACrC,CAAC;QAEF,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;oBACjD,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClE,CAAC;gBAAC,MAAM,CAAC;oBACP,qBAAqB;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,oBAAoB;IACpB,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC5E,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,CACzB,CAAC;IAEF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAE9C,6DAA6D;IAC7D,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC7D,IAAI,CAAC;YACH,OAAO,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxE,GAAG,MAAM,CAAC,GAAG,CAAC;gBACd,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI;aACvC,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,mDAAmD;IACnD,OAAO,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;AAChF,CAAC"}
+{"version":3,"file":"search_symbols.js","sourceRoot":"","sources":["../../src/tools/search_symbols.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,UAAU,aAAa,CAC3B,EAAqB,EACrB,KAAyB,EACzB,eAA8B,EAAE,EAChC,WAAoB;IAEpB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;IAEF,SAAS,MAAM,CAAC,GAAgD,EAAE,IAAa;QAC7E,MAAM,MAAM,GAAuB;YACjC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,SAAS;YACnB,IAAI,EAAE,GAAG,CAAC,UAAU;YACpB,OAAO,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;YAC3B,WAAW,EAAE,GAAG,CAAC,aAAa,KAAK,CAAC;SACrC,CAAC;QAEF,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;oBACjD,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,OAAO,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvG,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,oBAAoB;IACpB,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC5E,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,CACzB,CAAC;IAEF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAE9C,6DAA6D;IAC7D,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC7D,IAAI,CAAC;YACH,OAAO,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxE,GAAG,MAAM,CAAC,GAAG,CAAC;gBACd,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC;aACxB,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC;YAC/E,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,mDAAmD;IACnD,OAAO,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;AAChF,CAAC"}

package/dist/util/paths.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Resolves `relative` against `projectRoot` and returns the absolute path
+ * ONLY if it stays within the root. Prevents path traversal attacks via
+ * tainted tool inputs (e.g. `file: "../../etc/passwd"`).
+ *
+ * Returns `null` when the resolved path escapes `projectRoot`.
+ */
+export declare function resolveWithinRoot(projectRoot: string, relative: string): string | null;
+//# sourceMappingURL=paths.d.ts.map

package/dist/util/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/util/paths.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMtF"}

package/dist/util/paths.js

@@ -0,0 +1,18 @@
+import { resolve, sep } from 'node:path';
+/**
+ * Resolves `relative` against `projectRoot` and returns the absolute path
+ * ONLY if it stays within the root. Prevents path traversal attacks via
+ * tainted tool inputs (e.g. `file: "../../etc/passwd"`).
+ *
+ * Returns `null` when the resolved path escapes `projectRoot`.
+ */
+export function resolveWithinRoot(projectRoot, relative) {
+    const normalizedRoot = resolve(projectRoot);
+    const candidate = resolve(normalizedRoot, relative);
+    if (candidate === normalizedRoot)
+        return candidate;
+    if (candidate.startsWith(normalizedRoot + sep))
+        return candidate;
+    return null;
+}
+//# sourceMappingURL=paths.js.map

package/dist/util/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/util/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB,EAAE,QAAgB;IACrE,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACpD,IAAI,SAAS,KAAK,cAAc;QAAE,OAAO,SAAS,CAAC;IACnD,IAAI,SAAS,CAAC,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pindex",
-  "version": "1.2.2",
-  "description": "MCP Server that structurally indexes a codebase for 80-90% token reduction",
+  "version": "1.3.0",
+  "description": "MCP server providing structural codebase indexing for token-efficient AI coding assistants on medium-to-large projects",
   "type": "module",
   "bin": {
     "pindex": "./dist/cli/index.js",
@@ -20,6 +20,8 @@
     "test": "vitest run",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
+    "test:integration": "npm run build && vitest run --config vitest.integration.config.ts",
+    "bench:index": "npm run build && node scripts/bench-index.mjs",
     "lint": "tsc --noEmit",
     "prepublishOnly": "npm run build",
     "start": "node dist/index.js",
@@ -36,7 +38,7 @@
   "license": "MIT",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
-    "better-sqlite3": "^9.0.0",
+    "better-sqlite3": "^11.5.0",
     "chokidar": "^3.6.0",
     "express": "^4.18.0",
     "glob": "^10.0.0",
@@ -44,19 +46,20 @@
     "tree-sitter": "^0.21.0",
     "tree-sitter-typescript": "^0.21.0",
     "uuid": "^9.0.0",
-    "ws": "^8.16.0"
+    "ws": "^8.16.0",
+    "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@types/better-sqlite3": "^7.6.0",
+    "@types/better-sqlite3": "^7.6.11",
     "@types/express": "^4.17.0",
     "@types/node": "^20.0.0",
     "@types/supertest": "^6.0.0",
     "@types/uuid": "^9.0.0",
     "@types/ws": "^8.5.0",
-    "@vitest/coverage-v8": "^1.0.0",
+    "@vitest/coverage-v8": "^4.0.18",
     "supertest": "^6.0.0",
     "typescript": "^5.0.0",
-    "vitest": "^1.0.0"
+    "vitest": "^4.0.18"
   },
   "engines": {
     "node": ">=18.0.0"