trueline-mcp 2.0.5 → 2.1.0

package/INSTALL.md

@@ -26,7 +26,7 @@ Add to `~/.gemini/settings.json`:
   "mcpServers": {
     "trueline": {
       "command": "npx",
-      "args": ["-y", "trueline-mcp"]
+      "args": ["-y", "trueline-mcp@latest"]
     }
   }
 }
@@ -73,7 +73,7 @@ Add to `.vscode/mcp.json` in your project:
   "servers": {
     "trueline": {
       "command": "npx",
-      "args": ["-y", "trueline-mcp"]
+      "args": ["-y", "trueline-mcp@latest"]
     }
   }
 }
@@ -109,7 +109,7 @@ Add to your `opencode.json`:
   "mcp": {
     "trueline": {
       "command": "npx",
-      "args": ["-y", "trueline-mcp"]
+      "args": ["-y", "trueline-mcp@latest"]
     }
   }
 }
@@ -135,7 +135,7 @@ Add to `~/.codex/config.toml`:
 ```toml
 [mcp_servers.trueline]
 command = "npx"
-args = ["-y", "trueline-mcp"]
+args = ["-y", "trueline-mcp@latest"]
 ```
 
 ### 2. Add the instruction file
@@ -173,9 +173,11 @@ npm i -g trueline-mcp
 
 ## Path access
 
-By default, trueline tools can access files inside the project directory and
-`~/.claude/`. To allow additional directories, set `TRUELINE_ALLOWED_DIRS` to
-a colon-separated list of paths (semicolon-separated on Windows).
+By default, trueline tools can access files inside the project directory.
+When running under Claude Code, `~/.claude/` is also allowed (it stores
+plans, memory, and settings). To allow additional directories on any
+platform, set `TRUELINE_ALLOWED_DIRS` to a colon-separated list of paths
+(semicolon-separated on Windows).
 
 ## Platform detection
 
@@ -184,7 +186,18 @@ The hook dispatcher auto-detects the platform from environment variables:
 | Env var                | Platform       |
 |------------------------|----------------|
 | `GEMINI_PROJECT_DIR`   | gemini-cli     |
-| `OPENCODE_PROJECT_DIR` | opencode       |
 | `CLAUDE_PROJECT_DIR`   | claude-code    |
 
 Override with `TRUELINE_PLATFORM=<platform>` if auto-detection doesn't work.
+
+## Keeping trueline up to date
+
+The recommended `npx -y trueline-mcp@latest` configuration checks the npm
+registry on each launch and always runs the newest version. If you prefer
+faster startup and offline resilience, drop the `@latest` suffix — npx will
+use whichever version it cached on first install. You can update manually at
+any time with `npm i -g trueline-mcp`.
+
+Regardless of configuration, the server prints a notice to stderr when a newer
+version is available (checked at most once every 24 hours). This notice is
+never sent to the agent — it only appears in MCP server logs.

package/README.md

@@ -171,9 +171,10 @@ are available via the `trueline-hook` CLI dispatcher — see
 
 ## Path access
 
-By default, trueline tools can access files inside the project directory
-and `~/.claude/`. To allow additional directories, set
-`TRUELINE_ALLOWED_DIRS` to a colon-separated list of paths
+By default, trueline tools can access files inside the project directory.
+When running under Claude Code, `~/.claude/` is also allowed (it stores
+plans, memory, and settings). To allow additional directories on any
+platform, set `TRUELINE_ALLOWED_DIRS` to a colon-separated list of paths
 (semicolon-separated on Windows).
 
 ## Development

package/bin/trueline-hook.js

@@ -9,7 +9,6 @@
 //   trueline-hook gemini-cli beforetool    # Gemini CLI BeforeTool hook
 //   trueline-hook gemini-cli session-start # Gemini CLI session instructions
 //   trueline-hook vscode-copilot pretooluse
-//   trueline-hook claude-code pretooluse
 //
 // Reads hook event JSON from stdin (for tool-use hooks), writes platform-
 // formatted JSON to stdout.
@@ -21,13 +20,13 @@ const hooksDir = resolve(dirname(fileURLToPath(import.meta.url)), "..", "hooks")
 
 const USAGE = `Usage: trueline-hook <platform> <event>
 
-Platforms: claude-code, gemini-cli, vscode-copilot
+Platforms: gemini-cli, vscode-copilot
 Events:    pretooluse, beforetool, session-start
 
 Examples:
   trueline-hook gemini-cli beforetool
   trueline-hook vscode-copilot pretooluse
-  trueline-hook claude-code session-start`;
+  trueline-hook gemini-cli session-start`;
 
 // ==============================================================================
 // Argument Parsing
@@ -42,8 +41,8 @@ if (!platform || !event || process.argv.includes("--help") || process.argv.inclu
 }
 
 // Normalize event names across platforms.
-// Gemini calls it "beforetool", Claude Code calls it "pretooluse" — both map
-// to the same routing logic.
+// Gemini calls it "beforetool", VS Code Copilot calls it "pretooluse" — both
+// map to the same routing logic.
 const EVENT_ALIASES = {
   beforetool: "pretooluse",
   before_tool: "pretooluse",

package/dist/server.js

@@ -9393,7 +9393,7 @@ ${JSON.stringify(symbolNames, null, 2)}`);
 // src/server.ts
 import { mkdir, realpath as realpath2 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
-import { delimiter, join } from "node:path";
+import { delimiter, join as join2 } from "node:path";
 
 // node_modules/zod/v3/external.js
 var exports_external = {};
@@ -22353,7 +22353,7 @@ class StdioServerTransport {
 // package.json
 var package_default = {
   name: "trueline-mcp",
-  version: "2.0.5",
+  version: "2.1.0",
   type: "module",
   description: "Truth-verified file editing for AI coding agents via MCP",
   license: "Apache-2.0",
@@ -23905,9 +23905,6 @@ var LANGUAGES = {
 function getLanguageConfig(ext) {
   return LANGUAGES[ext];
 }
-function supportedExtensions() {
-  return Object.keys(LANGUAGES);
-}
 
 // src/tools/outline.ts
 async function handleOutline(params) {
@@ -23918,7 +23915,7 @@ async function handleOutline(params) {
   const ext = extname(validated.resolvedPath).toLowerCase();
   const config2 = getLanguageConfig(ext);
   if (!config2) {
-    return errorResult(`No outline support for "${ext}" files. Supported: ${supportedExtensions().join(", ")}`);
+    return textResult(`No outline support for "${ext}" files — use trueline_read to read this file directly.`);
   }
   let source;
   try {
@@ -23939,6 +23936,75 @@ async function handleOutline(params) {
   }
 }
 
+// src/update-check.ts
+import { readFile as readFile2, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+var PACKAGE_NAME = "trueline-mcp";
+var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000;
+var CACHE_FILE = join(tmpdir(), "trueline-mcp-update-check.json");
+var REGISTRY_TIMEOUT_MS = 3000;
+async function readCache() {
+  try {
+    const raw = await readFile2(CACHE_FILE, "utf-8");
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+async function writeCache(entry) {
+  await writeFile(CACHE_FILE, JSON.stringify(entry)).catch(() => {});
+}
+async function fetchLatestVersion() {
+  try {
+    const controller = new AbortController;
+    const timeout = setTimeout(() => controller.abort(), REGISTRY_TIMEOUT_MS);
+    const res = await fetch(`https://registry.npmjs.org/${PACKAGE_NAME}/latest`, {
+      signal: controller.signal
+    });
+    clearTimeout(timeout);
+    if (!res.ok)
+      return null;
+    const data = await res.json();
+    return data.version ?? null;
+  } catch {
+    return null;
+  }
+}
+function scheduleUpdateCheck(currentVersion, onUpdate) {
+  const notify = onUpdate ?? defaultNotify;
+  (async () => {
+    const cached2 = await readCache();
+    if (cached2 && Date.now() - cached2.timestamp < CHECK_INTERVAL_MS) {
+      if (compareVersions(cached2.latestVersion, currentVersion) > 0) {
+        notify({ current: currentVersion, latest: cached2.latestVersion });
+      }
+      return;
+    }
+    const latest = await fetchLatestVersion();
+    if (!latest)
+      return;
+    await writeCache({ timestamp: Date.now(), latestVersion: latest });
+    if (compareVersions(latest, currentVersion) > 0) {
+      notify({ current: currentVersion, latest });
+    }
+  })();
+}
+function defaultNotify({ current, latest }) {
+  process.stderr.write(`[trueline-mcp] update available: ${current} → ${latest} (npm i -g trueline-mcp)
+`);
+}
+function compareVersions(a, b) {
+  const pa = a.split(".").map(Number);
+  const pb = b.split(".").map(Number);
+  for (let i2 = 0;i2 < Math.max(pa.length, pb.length); i2++) {
+    const diff = (pa[i2] ?? 0) - (pb[i2] ?? 0);
+    if (diff !== 0)
+      return diff;
+  }
+  return 0;
+}
+
 // src/server.ts
 var VERSION2 = package_default.version;
 var server = new McpServer({
@@ -23949,11 +24015,13 @@ var rawProjectDir = process.env.CLAUDE_PROJECT_DIR ?? process.cwd();
 var projectDir = await realpath2(rawProjectDir).catch(() => rawProjectDir);
 async function resolveAllowedDirs() {
   const dirs = [];
-  const claudeDir = join(homedir2(), ".claude");
-  await mkdir(claudeDir, { recursive: true }).catch(() => {});
-  const realClaudeDir = await realpath2(claudeDir).catch(() => null);
-  if (realClaudeDir)
-    dirs.push(realClaudeDir);
+  if (process.env.CLAUDE_PROJECT_DIR) {
+    const claudeDir = join2(homedir2(), ".claude");
+    await mkdir(claudeDir, { recursive: true }).catch(() => {});
+    const realClaudeDir = await realpath2(claudeDir).catch(() => null);
+    if (realClaudeDir)
+      dirs.push(realClaudeDir);
+  }
   const extra = process.env.TRUELINE_ALLOWED_DIRS;
   if (extra) {
     for (const raw of extra.split(delimiter).filter(Boolean)) {
@@ -23969,10 +24037,10 @@ server.registerTool("trueline_read", {
   description: "Read a file; returns N:hash|content per line plus a checksum per range.",
   inputSchema: exports_external.object({
     file_path: exports_external.string(),
-    ranges: exports_external.array(exports_external.object({
-      start: exports_external.number().int().positive().optional(),
-      end: exports_external.number().int().positive().optional()
-    })).optional(),
+    ranges: exports_external.preprocess((val) => typeof val === "string" ? JSON.parse(val) : val, exports_external.array(exports_external.object({
+      start: exports_external.number().int().positive().describe("First line to read (1-based).").optional(),
+      end: exports_external.number().int().positive().describe("Last line to read (1-based, inclusive).").optional()
+    })).describe("Line ranges to read. Omit to read the whole file. Example: [{start: 10, end: 25}] or [{start: 1, end: 50}, {start: 200, end: 220}] for disjoint ranges. Each range gets its own checksum.")).optional(),
     encoding: exports_external.string().describe("File encoding. Defaults to utf-8. Supported: utf-8, ascii, latin1.").optional()
   })
 }, async (params) => {
@@ -23982,11 +24050,11 @@ server.registerTool("trueline_edit", {
   description: "Apply hash-verified edits to a file. Each edit carries its own checksum.",
   inputSchema: exports_external.object({
     file_path: exports_external.string(),
-    edits: exports_external.array(exports_external.object({
+    edits: exports_external.preprocess((val) => typeof val === "string" ? JSON.parse(val) : val, exports_external.array(exports_external.object({
       checksum: exports_external.string().describe("Checksum from trueline_read for the covering range"),
       range: exports_external.string().describe("startLine:hash..endLine:hash or startLine:hash; prefix + for insert-after"),
       content: exports_external.string().describe("Replacement lines, newline-separated. Empty string to delete.")
-    })).min(1),
+    })).min(1)),
     encoding: exports_external.string().describe("File encoding. Defaults to utf-8. Supported: utf-8, ascii, latin1.").optional()
   })
 }, async (params) => {
@@ -23996,11 +24064,11 @@ server.registerTool("trueline_diff", {
   description: "Preview edits as a unified diff without writing to disk. Each edit carries its own checksum.",
   inputSchema: exports_external.object({
     file_path: exports_external.string(),
-    edits: exports_external.array(exports_external.object({
+    edits: exports_external.preprocess((val) => typeof val === "string" ? JSON.parse(val) : val, exports_external.array(exports_external.object({
       checksum: exports_external.string().describe("Checksum from trueline_read for the covering range"),
       range: exports_external.string().describe("startLine:hash..endLine:hash or startLine:hash; prefix + for insert-after"),
       content: exports_external.string().describe("Replacement lines, newline-separated. Empty string to delete.")
-    })).min(1),
+    })).min(1)),
     encoding: exports_external.string().describe("File encoding. Defaults to utf-8. Supported: utf-8, ascii, latin1.").optional()
   })
 }, async (params) => {
@@ -24021,3 +24089,9 @@ try {
   console.error("Failed to start trueline-mcp server:", err2);
   process.exit(1);
 }
+scheduleUpdateCheck(VERSION2, ({ current, latest }) => {
+  const message = `update available: ${current} → ${latest} (npm i -g trueline-mcp)`;
+  process.stderr.write(`[trueline-mcp] ${message}
+`);
+  server.sendLoggingMessage({ level: "warning", logger: "trueline-mcp", data: message }).catch(() => {});
+});

package/hooks/core/access.js

@@ -30,9 +30,13 @@ export async function createAccessChecker(projectDir) {
 
   // Build allowed dirs list (same logic as server.ts).
   const allowedBases = [realBase];
-  try {
-    allowedBases.push(await realpath(resolve(homedir(), ".claude")));
-  } catch {}
+
+  // ~/.claude/ — only relevant when running under Claude Code.
+  if (process.env.CLAUDE_PROJECT_DIR) {
+    try {
+      allowedBases.push(await realpath(resolve(homedir(), ".claude")));
+    } catch {}
+  }
 
   const extraDirs = process.env.TRUELINE_ALLOWED_DIRS;
   if (extraDirs) {

package/hooks/core/platform.js

@@ -8,7 +8,6 @@
 
 const PLATFORM_ENV_VARS = {
   "gemini-cli": "GEMINI_PROJECT_DIR",
-  opencode: "OPENCODE_PROJECT_DIR",
   // claude-code and vscode-copilot both use CLAUDE_PROJECT_DIR, so we can't
   // distinguish them by env var alone. VS Code Copilot detection would need
   // an additional signal (e.g. VSCODE_PID). For now, both default to
@@ -26,7 +25,6 @@ export function detectPlatform() {
 
   // Check unique env vars first, then fall back to shared ones.
   if (process.env.GEMINI_PROJECT_DIR) return "gemini-cli";
-  if (process.env.OPENCODE_PROJECT_DIR) return "opencode";
   if (process.env.CLAUDE_PROJECT_DIR) return "claude-code";
 
   return "claude-code";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trueline-mcp",
-  "version": "2.0.5",
+  "version": "2.1.0",
   "type": "module",
   "description": "Truth-verified file editing for AI coding agents via MCP",
   "license": "Apache-2.0",