vibe-gate-mcp 0.1.0 → 0.1.2

package/CHANGELOG.md

@@ -5,6 +5,29 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.1.2] - 2026-09-02
+
+### Fixed
+
+- Reject malformed cited line ranges with non-positive or reversed line numbers.
+
+### Tests
+
+- Added configuration loading and effective model resolution coverage.
+- Added critical snippet extraction coverage for matching, ignored directories, limits, missing roots, and case-insensitive paths.
+
+## [0.1.1] - 2026-08-31
+
+### Fixed
+
+- Added a 30-second timeout to OpenCode external fetch calls.
+- Stopped logging `CRITIC_PROVIDER` in debug output.
+- Added safe fallback handling for invalid, unreadable, or oversized `rules.json` files.
+
+### Tests
+
+- Added unit coverage for token estimation, error handling, debug logging, configuration, and OpenCode timeout behavior.
+
 ## [0.1.0] - 2026-08-28
 
 Initial release of `vibe-gate-mcp`.

package/dist/index.mjs

@@ -47,7 +47,6 @@ function loadEnvironmentVariables(packageRoot) {
 		});
 		debugLog$1("Loaded package .env");
 	}
-	debugLog$1(`Env check after load -> CRITIC_PROVIDER: ${process.env.CRITIC_PROVIDER || "none"}`);
 }
 //#endregion
 //#region src/constants.ts
@@ -173,6 +172,8 @@ const OPENCODE_ZEN_URLS = {
 	RESPONSES: `${OPENCODE_ZEN.BASE_URL}/${OPENCODE_ZEN.PATHS.RESPONSES}`,
 	MODELS_LIST: `${OPENCODE_ZEN.BASE_URL}/${OPENCODE_ZEN.PATHS.MODELS}`
 };
+/** Default timeout for external fetch calls in OpenCode API integrations (30 seconds) */
+const OPENCODE_FETCH_TIMEOUT_MS = 3e4;
 /** OpenCode Go gateway — @see https://opencode.ai/docs/go/ */
 const OPENCODE_GO = {
 	BASE_URL: "https://opencode.ai/zen/go/v1",
@@ -1542,9 +1543,11 @@ const DEFAULT_RULES = {
 	hardRules: [],
 	softRules: []
 };
+const MAX_RULES_FILE_BYTES = 1048576;
 async function loadRules(workspaceRoot) {
 	const path = join(workspaceRoot, PATHS.RULES_JSON);
 	try {
+		if ((await stat(path)).size > MAX_RULES_FILE_BYTES) return DEFAULT_RULES;
 		const raw = await readFile(path, "utf-8");
 		const parsed = JSON.parse(raw);
 		const result = rulesConfigSchema.safeParse(parsed);
@@ -2306,7 +2309,8 @@ async function completeViaResponses(apiKey, model, messages) {
 			model: normalizeOpenCodeModelId(model),
 			input: toRoleContentMessages(messages),
 			max_output_tokens: LLM_MAX_TOKENS
-		})
+		}),
+		signal: AbortSignal.timeout(OPENCODE_FETCH_TIMEOUT_MS)
 	});
 	if (!response.ok) {
 		const errorBody = await response.text();
@@ -2331,7 +2335,8 @@ async function completeViaGemini(apiKey, model, messages, plan) {
 		body: JSON.stringify({
 			contents: toGeminiContents(messages),
 			generationConfig: { maxOutputTokens: LLM_MAX_TOKENS }
-		})
+		}),
+		signal: AbortSignal.timeout(OPENCODE_FETCH_TIMEOUT_MS)
 	});
 	if (!response.ok) {
 		const errorBody = await response.text();
@@ -2751,6 +2756,14 @@ function validateLineNumbers(fileInfo, evidence) {
 	if (!fileInfo) return false;
 	const lineRange = extractLineRangeFromEvidence(evidence);
 	if (!lineRange) return true;
+	if (lineRange.start <= 0 || lineRange.end <= 0) {
+		debugLog(`[DEBUG] validateLineNumbers: REJECTING - invalid line numbers (start: ${lineRange.start}, end: ${lineRange.end})`);
+		return false;
+	}
+	if (lineRange.start > lineRange.end) {
+		debugLog(`[DEBUG] validateLineNumbers: REJECTING - start line ${lineRange.start} exceeds end line ${lineRange.end}`);
+		return false;
+	}
 	if (lineRange.start > fileInfo.totalLines) {
 		debugLog(`[DEBUG] validateLineNumbers: REJECTING - start line ${lineRange.start} exceeds total lines ${fileInfo.totalLines}`);
 		return false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibe-gate-mcp",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "type": "module",
   "description": "Adversarial Quality Gate MCP for vibe-coding: IDE AI vs Critic AI, human decides on deadlock",
   "license": "MIT",
@@ -23,7 +23,9 @@
   "engines": {
     "node": ">=24"
   },
-  "bin": "dist/index.mjs",
+  "bin": {
+    "vibe-gate-mcp": "dist/index.mjs"
+  },
   "files": [
     "dist",
     "rules.json",