context-loader 0.1.8__tar.gz → 1.0.0__tar.gz

{context_loader-0.1.8 → context_loader-1.0.0}/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.3
 Name: context-loader
-Version: 0.1.8
-Summary: Render deterministic local Git context for Codex
+Version: 1.0.0
+Summary: Render deterministic local Git context for any executor
 License:                                  Apache License
                                     Version 2.0, January 2004
                                  http://www.apache.org/licenses/
@@ -231,16 +231,16 @@ pip install context-loader
 ```
 
 ```bash
-codex-project-context --repo /path/to/repo
+project-context --repo /path/to/repo
 ```
 
 ```bash
-codex-project-context --repo /path/to/repo --format json
+project-context --repo /path/to/repo --format json
 ```
 
 ## Install
 
-Public stable release on PyPI: `0.1.8`.
+Source version: `1.0.0`. Install its matching published release or an exact source commit.
 
 Install via `uv`:
 
@@ -254,25 +254,24 @@ Install via `pip`:
 pip install context-loader
 ```
 
-For development or source-based installs tracking current repository (`0.1.8`):
+For development or source-based installs tracking current repository (`1.0.0`):
 
 ```bash
 uv tool install git+https://github.com/xuanheng-tech/context-loader.git
 ```
 
-The repository also retains `./codex-project-context` as a direct development entry point.
+The repository also retains `./project-context` as a direct development entry point.
 
 ### Distributions
 
-From `0.1.8` the canonical PyPI distribution is **`context-loader`**. It carries the
-`context_loader` runtime and installs the `codex-project-context` console script; the CLI name,
-the JSON schema version and the public contract are unchanged by the rename.
+The sole distribution is **`context-loader`**, containing the `context_loader` runtime
+and the `project-context` console script. Version `1.0.0` breaks the CLI name and Markdown
+heading contract. The JSON schema is unchanged. Terminal and any executor call this same
+entry point with explicit repository and focus arguments; no provider adapter or private
+session state is involved.
 
-**`codex-project-context-loader`** remains published as a compatibility distribution. From
-`0.1.8` it contains no runtime and no console script and only depends on `context-loader==0.1.8`,
-so installing either name yields exactly one implementation and one CLI. Existing pins keep
-working, and releases `0.1.5`-`0.1.7` of the old name are unchanged. New integrations should
-depend on `context-loader`.
+Previously published packages and historical release records remain unchanged. The new
+release publishes no compatibility distribution or legacy executable alias.
 
 The wheel installs the runtime package only. The source distribution additionally carries
 `tool_cli_contract.json`, so a package-only consumer can pin the declared public CLI contract
@@ -302,11 +301,11 @@ automatic redaction**. Inspect the output before sharing it with a person or ext
 ## Usage
 
 ```bash
-codex-project-context --version
-codex-project-context --repo /home/user/projects/example
-codex-project-context --repo /home/user/projects/example --format markdown
-codex-project-context --repo /home/user/projects/example --format json
-codex-project-context --repo /home/user/projects/example \
+project-context --version
+project-context --repo /home/user/projects/example
+project-context --repo /home/user/projects/example --format markdown
+project-context --repo /home/user/projects/example --format json
+project-context --repo /home/user/projects/example \
   --focus "Authentication and session management" \
   --path auth/session.py
 ```
@@ -346,7 +345,7 @@ Keys are serialized in sorted order with `ensure_ascii=False`. The declared cont
   "schema_version": 1,
   "tool": {
     "name": "context-loader",
-    "version": "0.1.8"
+    "version": "1.0.0"
   },
   "repository": {
     "requested_path": "/canonical/requested/path",
@@ -382,7 +381,7 @@ Keys are serialized in sorted order with `ensure_ascii=False`. The declared cont
 `context_sha256` hashes the UTF-8 bytes of `context`; each `content_sha256` does the same for that
 source's `content`. `sources` contains only file bodies that actually enter the final context, in
 assembly order, after the existing newline normalization and truncation rules. `scope` distinguishes
-`repository` from `global`; version 0.1.8's fixed root-file selection currently emits only
+`repository` from `global`; version 1.0.0's fixed root-file selection currently emits only
 `repository` sources and does not add any global-file discovery.
 
 The optional `selection` object is present only on a rendered `AGENTS.md` source. Its section entries
@@ -390,7 +389,7 @@ contain heading, heading level, and fixed selection reasons; it never contains t
 target path. Existing source fields and schema version 1 remain unchanged.
 
 The JSON schema version and package version are independent: `schema_version` is currently the
-integer `1`, while `tool.version` is `0.1.8`. Callers must depend only on fields declared above.
+integer `1`, while `tool.version` is `1.0.0`. Callers must depend only on fields declared above.
 The document contains no generated time or random identifier, so unchanged input produces identical
 JSON bytes. On failure, stdout remains empty and stderr contains only a short diagnostic.
 
@@ -447,11 +446,15 @@ scan that ends before EOF still reports the characters it could not select.
 - Directory tree: 12 KiB, 300 entries, and depth 2
 - Working-tree changes: 100 paths and 4 KiB
 - Recent commits: 8
+- Git subprocess output: 16 MiB (bounded while reading)
+- Candidate file validation: 16 MiB hard read bound
 
 Truncation occurs only at complete UTF-8 and line boundaries and is marked explicitly.
-These are output/capture limits. Eligible regular files are still streamed to EOF to validate UTF-8
-and reject NUL bytes, including beyond the captured prefix; a large file can therefore take longer
-to read. Symlinked candidate files are skipped, and directory symlinks are not traversed.
+These are output/capture limits. Eligible regular files are streamed up to a hard safety limit of
+16 MiB to validate UTF-8 and reject NUL bytes, including beyond the captured prefix. A file exceeding
+this limit or failing validation fails closed and is skipped (`Skipped: unreadable.` /
+`Skipped: unsupported text encoding.`); pathological files cannot require unbounded scanning.
+Symlinked candidate files are skipped, and directory symlinks are not traversed.
 
 ## Git State Semantics
 
@@ -479,7 +482,7 @@ or candidate-file content.
 
 ## Not Included
 
-Version 0.1.8 does not provide AI summaries, project-type detection, nested `AGENTS.md` handling,
+Version 1.0.0 does not provide AI summaries, project-type detection, nested `AGENTS.md` handling,
 Memory retrieval, semantic ranking, ignore-rule parsing, plugins, profiles, caches, databases,
 network services, MCP, daemons, GUIs, CI/CD, telemetry, or automatic updates.
 

{context_loader-0.1.8 → context_loader-1.0.0}/README.md

@@ -20,16 +20,16 @@ pip install context-loader
 ```
 
 ```bash
-codex-project-context --repo /path/to/repo
+project-context --repo /path/to/repo
 ```
 
 ```bash
-codex-project-context --repo /path/to/repo --format json
+project-context --repo /path/to/repo --format json
 ```
 
 ## Install
 
-Public stable release on PyPI: `0.1.8`.
+Source version: `1.0.0`. Install its matching published release or an exact source commit.
 
 Install via `uv`:
 
@@ -43,25 +43,24 @@ Install via `pip`:
 pip install context-loader
 ```
 
-For development or source-based installs tracking current repository (`0.1.8`):
+For development or source-based installs tracking current repository (`1.0.0`):
 
 ```bash
 uv tool install git+https://github.com/xuanheng-tech/context-loader.git
 ```
 
-The repository also retains `./codex-project-context` as a direct development entry point.
+The repository also retains `./project-context` as a direct development entry point.
 
 ### Distributions
 
-From `0.1.8` the canonical PyPI distribution is **`context-loader`**. It carries the
-`context_loader` runtime and installs the `codex-project-context` console script; the CLI name,
-the JSON schema version and the public contract are unchanged by the rename.
+The sole distribution is **`context-loader`**, containing the `context_loader` runtime
+and the `project-context` console script. Version `1.0.0` breaks the CLI name and Markdown
+heading contract. The JSON schema is unchanged. Terminal and any executor call this same
+entry point with explicit repository and focus arguments; no provider adapter or private
+session state is involved.
 
-**`codex-project-context-loader`** remains published as a compatibility distribution. From
-`0.1.8` it contains no runtime and no console script and only depends on `context-loader==0.1.8`,
-so installing either name yields exactly one implementation and one CLI. Existing pins keep
-working, and releases `0.1.5`-`0.1.7` of the old name are unchanged. New integrations should
-depend on `context-loader`.
+Previously published packages and historical release records remain unchanged. The new
+release publishes no compatibility distribution or legacy executable alias.
 
 The wheel installs the runtime package only. The source distribution additionally carries
 `tool_cli_contract.json`, so a package-only consumer can pin the declared public CLI contract
@@ -91,11 +90,11 @@ automatic redaction**. Inspect the output before sharing it with a person or ext
 ## Usage
 
 ```bash
-codex-project-context --version
-codex-project-context --repo /home/user/projects/example
-codex-project-context --repo /home/user/projects/example --format markdown
-codex-project-context --repo /home/user/projects/example --format json
-codex-project-context --repo /home/user/projects/example \
+project-context --version
+project-context --repo /home/user/projects/example
+project-context --repo /home/user/projects/example --format markdown
+project-context --repo /home/user/projects/example --format json
+project-context --repo /home/user/projects/example \
   --focus "Authentication and session management" \
   --path auth/session.py
 ```
@@ -135,7 +134,7 @@ Keys are serialized in sorted order with `ensure_ascii=False`. The declared cont
   "schema_version": 1,
   "tool": {
     "name": "context-loader",
-    "version": "0.1.8"
+    "version": "1.0.0"
   },
   "repository": {
     "requested_path": "/canonical/requested/path",
@@ -171,7 +170,7 @@ Keys are serialized in sorted order with `ensure_ascii=False`. The declared cont
 `context_sha256` hashes the UTF-8 bytes of `context`; each `content_sha256` does the same for that
 source's `content`. `sources` contains only file bodies that actually enter the final context, in
 assembly order, after the existing newline normalization and truncation rules. `scope` distinguishes
-`repository` from `global`; version 0.1.8's fixed root-file selection currently emits only
+`repository` from `global`; version 1.0.0's fixed root-file selection currently emits only
 `repository` sources and does not add any global-file discovery.
 
 The optional `selection` object is present only on a rendered `AGENTS.md` source. Its section entries
@@ -179,7 +178,7 @@ contain heading, heading level, and fixed selection reasons; it never contains t
 target path. Existing source fields and schema version 1 remain unchanged.
 
 The JSON schema version and package version are independent: `schema_version` is currently the
-integer `1`, while `tool.version` is `0.1.8`. Callers must depend only on fields declared above.
+integer `1`, while `tool.version` is `1.0.0`. Callers must depend only on fields declared above.
 The document contains no generated time or random identifier, so unchanged input produces identical
 JSON bytes. On failure, stdout remains empty and stderr contains only a short diagnostic.
 
@@ -236,11 +235,15 @@ scan that ends before EOF still reports the characters it could not select.
 - Directory tree: 12 KiB, 300 entries, and depth 2
 - Working-tree changes: 100 paths and 4 KiB
 - Recent commits: 8
+- Git subprocess output: 16 MiB (bounded while reading)
+- Candidate file validation: 16 MiB hard read bound
 
 Truncation occurs only at complete UTF-8 and line boundaries and is marked explicitly.
-These are output/capture limits. Eligible regular files are still streamed to EOF to validate UTF-8
-and reject NUL bytes, including beyond the captured prefix; a large file can therefore take longer
-to read. Symlinked candidate files are skipped, and directory symlinks are not traversed.
+These are output/capture limits. Eligible regular files are streamed up to a hard safety limit of
+16 MiB to validate UTF-8 and reject NUL bytes, including beyond the captured prefix. A file exceeding
+this limit or failing validation fails closed and is skipped (`Skipped: unreadable.` /
+`Skipped: unsupported text encoding.`); pathological files cannot require unbounded scanning.
+Symlinked candidate files are skipped, and directory symlinks are not traversed.
 
 ## Git State Semantics
 
@@ -268,7 +271,7 @@ or candidate-file content.
 
 ## Not Included
 
-Version 0.1.8 does not provide AI summaries, project-type detection, nested `AGENTS.md` handling,
+Version 1.0.0 does not provide AI summaries, project-type detection, nested `AGENTS.md` handling,
 Memory retrieval, semantic ranking, ignore-rule parsing, plugins, profiles, caches, databases,
 network services, MCP, daemons, GUIs, CI/CD, telemetry, or automatic updates.
 

context_loader-1.0.0/context_loader/__init__.py

@@ -0,0 +1,3 @@
+"""Project Context Loader."""
+
+__version__ = "1.0.0"

{context_loader-0.1.8 → context_loader-1.0.0}/context_loader/cli.py

@@ -1,4 +1,4 @@
-"""Command-line interface for deterministic Codex project context."""
+"""Command-line interface for deterministic project context."""
 
 from __future__ import annotations
 
@@ -19,7 +19,7 @@ class SafeArgumentParser(argparse.ArgumentParser):
 
 def _parser() -> argparse.ArgumentParser:
     parser = SafeArgumentParser(
-        prog="codex-project-context",
+        prog="project-context",
         description="Render deterministic local Git context as Markdown or JSON.",
         allow_abbrev=False,
     )

{context_loader-0.1.8 → context_loader-1.0.0}/context_loader/collect.py

@@ -26,6 +26,8 @@ DECLARED_COMMANDS_LIMIT_BYTES = 8 * 1024
 DIRECTORY_TREE_LIMIT_BYTES = 12 * 1024
 DIRECTORY_TREE_MAX_ITEMS = 300
 DIRECTORY_TREE_MAX_DEPTH = 2
+FILE_SCAN_LIMIT_BYTES = 16 * 1024 * 1024
+MAX_FILE_SCAN_BYTES = FILE_SCAN_LIMIT_BYTES
 TRUNCATION_MARKER = "… truncated by context-loader …"
 
 NOT_PRESENT = "Not present."
@@ -705,11 +707,15 @@ def _read_validated_text(file_descriptor: int, limit: int) -> tuple[str, bool, s
             source_characters += 1
             append(character)
 
+    total_bytes_read = 0
     try:
         while True:
             raw = os.read(file_descriptor, 64 * 1024)
             if not raw:
                 break
+            total_bytes_read += len(raw)
+            if total_bytes_read > FILE_SCAN_LIMIT_BYTES:
+                return "", False, SKIPPED_UNREADABLE, 0
             if b"\0" in raw:
                 return "", False, SKIPPED_ENCODING, 0
             consume(decoder.decode(raw, final=False))
@@ -743,6 +749,8 @@ def _collect_root_file(root: Path, name: str, language: str, limit: int) -> Coll
         return CollectedFile(name, language, SKIPPED_SYMLINK)
     if not stat.S_ISREG(metadata.st_mode):
         return CollectedFile(name, language, SKIPPED_NOT_REGULAR)
+    if metadata.st_size > FILE_SCAN_LIMIT_BYTES:
+        return CollectedFile(name, language, SKIPPED_UNREADABLE)
 
     flags = os.O_RDONLY | os.O_CLOEXEC | os.O_NONBLOCK | getattr(os, "O_NOFOLLOW", 0)
     try:
@@ -752,8 +760,11 @@ def _collect_root_file(root: Path, name: str, language: str, limit: int) -> Coll
             return CollectedFile(name, language, SKIPPED_SYMLINK)
         return CollectedFile(name, language, SKIPPED_UNREADABLE)
     try:
-        if not stat.S_ISREG(os.fstat(file_descriptor).st_mode):
+        stat_result = os.fstat(file_descriptor)
+        if not stat.S_ISREG(stat_result.st_mode):
             return CollectedFile(name, language, SKIPPED_NOT_REGULAR)
+        if stat_result.st_size > FILE_SCAN_LIMIT_BYTES:
+            return CollectedFile(name, language, SKIPPED_UNREADABLE)
         content, truncated, error_status, source_characters = _read_validated_text(
             file_descriptor, limit
         )

{context_loader-0.1.8 → context_loader-1.0.0}/context_loader/git.py

@@ -4,7 +4,9 @@ from __future__ import annotations
 
 import os
 import re
+import selectors
 import subprocess
+import time
 from dataclasses import dataclass
 from pathlib import Path
 from types import MappingProxyType
@@ -108,25 +110,81 @@ class RepositoryLocation:
     canonical_root: Path
 
 
+def _read_bounded_process_stdout(
+    proc: subprocess.Popen[bytes],
+    max_bytes: int,
+    timeout_seconds: float,
+) -> bytes:
+    deadline = time.monotonic() + timeout_seconds
+    buffer = bytearray()
+    assert proc.stdout is not None
+    os.set_blocking(proc.stdout.fileno(), False)
+    selector = selectors.DefaultSelector()
+    selector.register(proc.stdout, selectors.EVENT_READ)
+    try:
+        while True:
+            remaining = deadline - time.monotonic()
+            if remaining <= 0:
+                proc.kill()
+                proc.wait()
+                raise subprocess.TimeoutExpired(proc.args, timeout_seconds)
+            events = selector.select(timeout=max(0.0, remaining))
+            if not events:
+                proc.kill()
+                proc.wait()
+                raise subprocess.TimeoutExpired(proc.args, timeout_seconds)
+            try:
+                chunk = os.read(proc.stdout.fileno(), 64 * 1024)
+            except BlockingIOError:
+                continue
+            if not chunk:
+                break
+            buffer.extend(chunk)
+            if len(buffer) > max_bytes:
+                proc.kill()
+                proc.wait()
+                raise ContextLoaderError("repository Git output exceeded the safety limit")
+    except Exception:
+        try:
+            proc.kill()
+            proc.wait()
+        except OSError:
+            pass
+        raise
+    finally:
+        selector.close()
+
+    remaining = max(0.0, deadline - time.monotonic())
+    try:
+        proc.wait(timeout=remaining)
+    except subprocess.TimeoutExpired:
+        proc.kill()
+        proc.wait()
+        raise
+    return bytes(buffer)
+
+
 def _run_git(repo: Path, arguments: tuple[str, ...], *, check: bool = True) -> GitResult:
     argv = [GIT_EXECUTABLE, *_GIT_PREFIX, "-C", os.fspath(repo), *arguments]
     try:
-        completed = subprocess.run(  # noqa: S603 - executable and every command are fixed here.
+        with subprocess.Popen(  # noqa: S603 - executable and every command are fixed here.
             argv,
             cwd="/",
             env=dict(_GIT_ENVIRONMENT),
             stdin=subprocess.DEVNULL,
-            capture_output=True,
-            timeout=GIT_TIMEOUT_SECONDS,
-            check=False,
-        )
+            stdout=subprocess.PIPE,
+            stderr=subprocess.DEVNULL,
+        ) as proc:
+            stdout = _read_bounded_process_stdout(proc, MAX_GIT_OUTPUT_BYTES, GIT_TIMEOUT_SECONDS)
+            returncode = proc.returncode
+    except ContextLoaderError:
+        raise
     except (OSError, subprocess.TimeoutExpired) as exc:
         raise ContextLoaderError("unable to read repository Git state") from exc
-    if len(completed.stdout) > MAX_GIT_OUTPUT_BYTES:
-        raise ContextLoaderError("repository Git output exceeded the safety limit")
-    if check and completed.returncode != 0:
+
+    if check and returncode != 0:
         raise ContextLoaderError("unable to read repository Git state")
-    return GitResult(completed.stdout, completed.returncode)
+    return GitResult(stdout, returncode)
 
 
 def _without_one_line_ending(raw: bytes) -> bytes:

{context_loader-0.1.8 → context_loader-1.0.0}/context_loader/render.py

@@ -292,7 +292,7 @@ def render_markdown_with_details(state: RepositoryState, project: ProjectContext
     """Render all sections in fixed order without exceeding the global byte limit."""
     header = "\n".join(
         (
-            "# Codex Project Context",
+            "# Project Context",
             "",
             f"- Schema: `{SCHEMA}`",
             f"- Repository: `{_display(os.fspath(state.repository))}`",

{context_loader-0.1.8 → context_loader-1.0.0}/pyproject.toml

@@ -4,8 +4,8 @@ build-backend = "uv_build"
 
 [project]
 name = "context-loader"
-version = "0.1.8"
-description = "Render deterministic local Git context for Codex"
+version = "1.0.0"
+description = "Render deterministic local Git context for any executor"
 readme = "README.md"
 requires-python = ">=3.12,<3.13"
 dependencies = []
@@ -14,7 +14,7 @@ dependencies = []
 file = "LICENSE"
 
 [project.scripts]
-codex-project-context = "context_loader.cli:main"
+project-context = "context_loader.cli:main"
 
 [project.urls]
 Repository = "https://github.com/xuanheng-tech/context-loader"

{context_loader-0.1.8 → context_loader-1.0.0}/pyproject.toml.orig

@@ -4,15 +4,15 @@ build-backend = "uv_build"
 
 [project]
 name = "context-loader"
-version = "0.1.8"
-description = "Render deterministic local Git context for Codex"
+version = "1.0.0"
+description = "Render deterministic local Git context for any executor"
 license = { file = "LICENSE" }
 readme = "README.md"
 requires-python = ">=3.12,<3.13"
 dependencies = []
 
 [project.scripts]
-codex-project-context = "context_loader.cli:main"
+project-context = "context_loader.cli:main"
 
 [project.urls]
 Repository = "https://github.com/xuanheng-tech/context-loader"

{context_loader-0.1.8 → context_loader-1.0.0}/tool_cli_contract.json

@@ -9,7 +9,7 @@
         "--version",
         "--help"
       ],
-      "name": "codex-project-context",
+      "name": "project-context",
       "operation_class": "read_only",
       "preconditions": [
         "repo_is_absolute_git_worktree",
@@ -24,7 +24,7 @@
       ]
     }
   ],
-  "contract_version": 1,
+  "contract_version": 2,
   "flags": {
     "format": [
       "markdown",
@@ -44,5 +44,5 @@
   ],
   "schema_version": 1,
   "tool_name": "context-loader",
-  "tool_version": "0.1.8"
+  "tool_version": "1.0.0"
 }

context_loader-0.1.8/context_loader/__init__.py

@@ -1,3 +0,0 @@
-"""Codex Project Context Loader."""
-
-__version__ = "0.1.8"