sift-light 1.0.3-4 → 1.0.3-5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. package/CHANGELOG.md +5 -0
  2. package/package.json +3 -3
  3. package/plugins/sift-light/.claude-plugin/plugin.json +1 -1
  4. package/plugins/sift-light/.codex-plugin/plugin.json +1 -1
  5. package/plugins/sift-light/.mcp.json +1 -1
  6. package/plugins/sift-light/concept-worker.mjs +1 -1
  7. package/plugins/sift-light/kimi.plugin.json +2 -2
  8. package/plugins/sift-light/omp-extension.mjs +4 -4
  9. package/plugins/sift-light/package.json +1 -1
  10. package/src/concept-model.ts +2 -1
  11. package/src/concept-worker.mjs +1 -1
  12. package/src/mcp-server.mjs +4 -4
package/CHANGELOG.md CHANGED
@@ -1,5 +1,10 @@
1
1
  # Changelog
2
2
 
3
+ ## 1.0.3-5 — 2026-10-07
4
+
5
+ - Update the MCP SDK to 1.31.0 and Transformers.js to 4.3.1 to remove the dependency vulnerabilities reported in [#111](https://github.com/lightsifter/sift-light/issues/111), including the old ONNX proxy/logging dependency chain. Refresh compatible SDK transitive dependencies in the lockfile.
6
+ - Recompute cached text embeddings after the inference runtime upgrade; the pinned offline model and search interfaces remain unchanged.
7
+
3
8
  ## 1.0.3-4 — 2026-10-05
4
9
 
5
10
  - Allow recognized stdin-only filters at any pipeline position, including `cmd | grep pattern | head` and `cmd | grep pattern | wc -l`. Deny file operands, recursive search, file-sourced patterns, input redirection, and unsafe dynamic arguments even when a filter receives piped input ([#109](https://github.com/lightsifter/sift-light/issues/109)).
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "sift-light",
3
- "version": "1.0.3-4",
3
+ "version": "1.0.3-5",
4
4
  "description": "Context-efficient local search for files, documents, notes and logs across Pi, OMP and MCP clients",
5
5
  "keywords": [
6
6
  "ai-agent",
@@ -84,8 +84,8 @@
84
84
  "dependencies": {
85
85
  "@ast-grep/lang-go": "0.0.6",
86
86
  "@ast-grep/napi": "0.45.2",
87
- "@huggingface/transformers": "3.8.1",
88
- "@modelcontextprotocol/sdk": "1.30.0",
87
+ "@huggingface/transformers": "4.3.1",
88
+ "@modelcontextprotocol/sdk": "1.31.0",
89
89
  "@vscode/ripgrep": "1.18.0",
90
90
  "typebox": "1.3.19",
91
91
  "web-tree-sitter": "0.25.10",
package/plugins/sift-light/.claude-plugin/plugin.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "sift-light",
3
- "version": "1.0.3-4",
3
+ "version": "1.0.3-5",
4
4
  "description": "Require sift-light for conventional local searches while keeping development tools available.",
5
5
  "author": {
6
6
  "name": "baoer"
package/plugins/sift-light/.codex-plugin/plugin.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "sift-light",
3
- "version": "1.0.3-4",
3
+ "version": "1.0.3-5",
4
4
  "description": "Require sift-light for conventional local searches while keeping development tools available.",
5
5
  "author": {
6
6
  "name": "baoer"
package/plugins/sift-light/.mcp.json CHANGED
@@ -5,7 +5,7 @@
5
5
  "args": [
6
6
  "--yes",
7
7
  "--package",
8
- "sift-light-runtime@npm:sift-light@1.0.3-4",
8
+ "sift-light-runtime@npm:sift-light@1.0.3-5",
9
9
  "sift-light-mcp",
10
10
  "--stdio"
11
11
  ],
package/plugins/sift-light/concept-worker.mjs CHANGED
@@ -30,7 +30,7 @@ var MAX_CONCEPT_CHARS = 1000;
30
30
  var CONCEPT_MODEL_TOKENS = 256;
31
31
  var CONCEPT_WINDOW_OVERLAP_TOKENS = 64;
32
32
  var CONCEPT_EMBEDDING_DIMENSIONS = 384;
33
- var CONCEPT_CACHE_VERSION = 2;
33
+ var CONCEPT_CACHE_VERSION = 3;
34
34
  var CONCEPT_CACHE_MAX_BYTES = 512 * 1024 * 1024;
35
35
  var CONCEPT_TIMEOUT_MS = 10 * 60000;
36
36
  var MAX_CONCEPT_TIMEOUT_MS = 60 * 60000;
package/plugins/sift-light/kimi.plugin.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "sift-light",
3
- "version": "1.0.3-4",
3
+ "version": "1.0.3-5",
4
4
  "description": "Require sift-light for conventional local searches while keeping development tools available.",
5
5
  "author": {
6
6
  "name": "baoer"
@@ -13,7 +13,7 @@
13
13
  "args": [
14
14
  "--yes",
15
15
  "--package",
16
- "sift-light-runtime@npm:sift-light@1.0.3-4",
16
+ "sift-light-runtime@npm:sift-light@1.0.3-5",
17
17
  "sift-light-mcp",
18
18
  "--stdio"
19
19
  ],
package/plugins/sift-light/omp-extension.mjs CHANGED
@@ -1845,7 +1845,7 @@ function createCtagsStructureProvider(options = {}) {
1845
1845
  // package.json
1846
1846
  var package_default = {
1847
1847
  name: "sift-light",
1848
- version: "1.0.3-4",
1848
+ version: "1.0.3-5",
1849
1849
  description: "Context-efficient local search for files, documents, notes and logs across Pi, OMP and MCP clients",
1850
1850
  keywords: [
1851
1851
  "ai-agent",
@@ -1929,8 +1929,8 @@ var package_default = {
1929
1929
  dependencies: {
1930
1930
  "@ast-grep/lang-go": "0.0.6",
1931
1931
  "@ast-grep/napi": "0.45.2",
1932
- "@huggingface/transformers": "3.8.1",
1933
- "@modelcontextprotocol/sdk": "1.30.0",
1932
+ "@huggingface/transformers": "4.3.1",
1933
+ "@modelcontextprotocol/sdk": "1.31.0",
1934
1934
  "@vscode/ripgrep": "1.18.0",
1935
1935
  typebox: "1.3.19",
1936
1936
  "web-tree-sitter": "0.25.10",
@@ -2216,7 +2216,7 @@ var CONCEPT_MODEL = "Xenova/multilingual-e5-small";
2216
2216
  var CONCEPT_REVISION = "761b726dd34fb83930e26aab4e9ac3899aa1fa78";
2217
2217
  var MAX_CONCEPT_CHARS = 1000;
2218
2218
  var CONCEPT_PASSAGE_OVERLAP_CHARS = 160;
2219
- var CONCEPT_CACHE_VERSION = 2;
2219
+ var CONCEPT_CACHE_VERSION = 3;
2220
2220
  var CONCEPT_CACHE_MAX_BYTES = 512 * 1024 * 1024;
2221
2221
  var CONCEPT_TIMEOUT_MS = 10 * 60000;
2222
2222
  var MIN_CONCEPT_TIMEOUT_MS = 1000;
package/plugins/sift-light/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "sift-light",
3
- "version": "1.0.3-4",
3
+ "version": "1.0.3-5",
4
4
  "private": true,
5
5
  "type": "module",
6
6
  "omp": {
package/src/concept-model.ts CHANGED
@@ -11,7 +11,8 @@ export const CONCEPT_PASSAGE_OVERLAP_CHARS = 160;
11
11
  export const CONCEPT_MODEL_TOKENS = 256;
12
12
  export const CONCEPT_WINDOW_OVERLAP_TOKENS = 64;
13
13
  export const CONCEPT_EMBEDDING_DIMENSIONS = 384;
14
- export const CONCEPT_CACHE_VERSION = 2;
14
+ // Transformers 4 / ONNX 1.30 embeddings must not reuse the previous runtime's vectors.
15
+ export const CONCEPT_CACHE_VERSION = 3;
15
16
  export const CONCEPT_CACHE_MAX_BYTES = 512 * 1024 * 1024;
16
17
  export const CONCEPT_TIMEOUT_MS = 10 * 60_000;
17
18
  export const MIN_CONCEPT_TIMEOUT_MS = 1_000;
package/src/concept-worker.mjs CHANGED
@@ -30,7 +30,7 @@ var MAX_CONCEPT_CHARS = 1000;
30
30
  var CONCEPT_MODEL_TOKENS = 256;
31
31
  var CONCEPT_WINDOW_OVERLAP_TOKENS = 64;
32
32
  var CONCEPT_EMBEDDING_DIMENSIONS = 384;
33
- var CONCEPT_CACHE_VERSION = 2;
33
+ var CONCEPT_CACHE_VERSION = 3;
34
34
  var CONCEPT_CACHE_MAX_BYTES = 512 * 1024 * 1024;
35
35
  var CONCEPT_TIMEOUT_MS = 10 * 60000;
36
36
  var MAX_CONCEPT_TIMEOUT_MS = 60 * 60000;
package/src/mcp-server.mjs CHANGED
@@ -7,7 +7,7 @@ import { URL as URL2 } from "node:url";
7
7
  // package.json
8
8
  var package_default = {
9
9
  name: "sift-light",
10
- version: "1.0.3-4",
10
+ version: "1.0.3-5",
11
11
  description: "Context-efficient local search for files, documents, notes and logs across Pi, OMP and MCP clients",
12
12
  keywords: [
13
13
  "ai-agent",
@@ -91,8 +91,8 @@ var package_default = {
91
91
  dependencies: {
92
92
  "@ast-grep/lang-go": "0.0.6",
93
93
  "@ast-grep/napi": "0.45.2",
94
- "@huggingface/transformers": "3.8.1",
95
- "@modelcontextprotocol/sdk": "1.30.0",
94
+ "@huggingface/transformers": "4.3.1",
95
+ "@modelcontextprotocol/sdk": "1.31.0",
96
96
  "@vscode/ripgrep": "1.18.0",
97
97
  typebox: "1.3.19",
98
98
  "web-tree-sitter": "0.25.10",
@@ -2913,7 +2913,7 @@ var CONCEPT_MODEL = "Xenova/multilingual-e5-small";
2913
2913
  var CONCEPT_REVISION = "761b726dd34fb83930e26aab4e9ac3899aa1fa78";
2914
2914
  var MAX_CONCEPT_CHARS = 1000;
2915
2915
  var CONCEPT_PASSAGE_OVERLAP_CHARS = 160;
2916
- var CONCEPT_CACHE_VERSION = 2;
2916
+ var CONCEPT_CACHE_VERSION = 3;
2917
2917
  var CONCEPT_CACHE_MAX_BYTES = 512 * 1024 * 1024;
2918
2918
  var CONCEPT_TIMEOUT_MS = 10 * 60000;
2919
2919
  var MIN_CONCEPT_TIMEOUT_MS = 1000;