flurryx-code-memory 0.6.1__tar.gz → 0.6.2__tar.gz

{flurryx_code_memory-0.6.1 → flurryx_code_memory-0.6.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: flurryx-code-memory
-Version: 0.6.1
+Version: 0.6.2
 Summary: Local lightweight memory layer for coding agents: FalkorDB + Qdrant + Ollama (BGE-M3) + tree-sitter
 Requires-Python: >=3.11
 Requires-Dist: anyio>=4.4

{flurryx_code_memory-0.6.1 → flurryx_code_memory-0.6.2}/plugins/claude-code/scripts/on-post-tool.js

@@ -51,6 +51,17 @@ function pickPath(obj) {
     return;
   }
 
+  // Guard: only reingest files that live inside the project root (cwd).
+  // Resolving against cwd handles relative paths; the sep-suffix check
+  // prevents false positives like /foo/bar matching the prefix of /foo/baz.
+  const projectRoot = path.resolve(cwd);
+  const absFilePath = path.resolve(cwd, filePath);
+  if (absFilePath !== projectRoot && !absFilePath.startsWith(projectRoot + path.sep)) {
+    // File is outside the project — silently skip ingestion.
+    done();
+    return;
+  }
+
   const mem = await createMemoryClient({ cwd, log: () => {} });
   if (!mem.available) {
     done();

{flurryx_code_memory-0.6.1 → flurryx_code_memory-0.6.2}/plugins/cursor/scripts/on-after-file-edit.js

@@ -32,6 +32,17 @@ const { touchResolverMarker } = require("./lib/state");
     process.env.CURSOR_PROJECT_DIR ||
     process.cwd();
 
+  // Guard: only reingest files that live inside the project root (cwd).
+  // Resolving against cwd handles relative paths; the sep-suffix check
+  // prevents false positives like /foo/bar matching the prefix of /foo/baz.
+  const projectRoot = path.resolve(cwd);
+  const absFilePath = path.resolve(cwd, filePath);
+  if (absFilePath !== projectRoot && !absFilePath.startsWith(projectRoot + path.sep)) {
+    // File is outside the project — silently skip ingestion.
+    done();
+    return;
+  }
+
   const mem = await createMemoryClient({ cwd, log: () => {} });
   if (!mem.available) {
     done();

{flurryx_code_memory-0.6.1 → flurryx_code_memory-0.6.2}/plugins/opencode/src/code-memory.ts

@@ -15,6 +15,7 @@
 
 import { execFile as execFileCb } from "node:child_process";
 import { promisify } from "node:util";
+import * as nodePath from "node:path";
 
 import type { Plugin } from "@opencode-ai/plugin";
 
@@ -324,6 +325,16 @@ const CodeMemoryPlugin: Plugin = async ({ client, directory, worktree }) => {
       const path = pickToolPath(output.args) ?? pickToolPath(output.metadata);
       if (!path) return;
 
+      // Guard: only reingest files that live inside the project root (cwd).
+      // Resolving against cwd handles relative paths; the sep-suffix check
+      // prevents false positives like /foo/bar matching the prefix of /foo/baz.
+      const projectRoot = nodePath.resolve(cwd);
+      const absPath = nodePath.resolve(cwd, path);
+      if (absPath !== projectRoot && !absPath.startsWith(projectRoot + nodePath.sep)) {
+        // File is outside the project — silently skip ingestion.
+        return;
+      }
+
       // 1. Re-ingest the single file (fast, background).
       void memory.reingest(path);
 

{flurryx_code_memory-0.6.1 → flurryx_code_memory-0.6.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "flurryx-code-memory"
-version = "0.6.1"
+version = "0.6.2"
 description = "Local lightweight memory layer for coding agents: FalkorDB + Qdrant + Ollama (BGE-M3) + tree-sitter"
 requires-python = ">=3.11"
 dependencies = [