Skip to content

Commit 0796e1e

Browse files
magyargergomagyargergo
committed
chore: bump version to 1.3.10 and add CHANGELOG
Add CHANGELOG.md with release notes for v1.3.10 covering MCP transport security hardening, dual-framing compatibility, lazy CLI loading, and bug fixes from recent PRs.
1 parent 9d5ec5d commit 0796e1e

File tree

4 files changed

+55
-13
lines changed

4 files changed

+55
-13
lines changed

‎AGENTS.md‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
<!-- gitnexus:start -->
22
# GitNexus — Code Intelligence
33

4-
This project is indexed by GitNexus as **GitnexusV2** (1588 symbols, 4161 relationships, 120 execution flows). Use the GitNexus MCP tools to understand code, assess impact, and navigate safely.
4+
This project is indexed by GitNexus as **GitNexus** (1573 symbols, 4146 relationships, 120 execution flows). Use the GitNexus MCP tools to understand code, assess impact, and navigate safely.
55

66
> If any GitNexus tool warns the index is stale, run `npx gitnexus analyze` in terminal first.
77
@@ -17,7 +17,7 @@ This project is indexed by GitNexus as **GitnexusV2** (1588 symbols, 4161 relati
1717

1818
1. `gitnexus_query({query: "<error or symptom>"})` — find execution flows related to the issue
1919
2. `gitnexus_context({name: "<suspect function>"})` — see all callers, callees, and process participation
20-
3. `READ gitnexus://repo/GitnexusV2/process/{processName}` — trace the full execution flow step by step
20+
3. `READ gitnexus://repo/GitNexus/process/{processName}` — trace the full execution flow step by step
2121
4. For regressions: `gitnexus_detect_changes({scope: "compare", base_ref: "main"})` — see what your branch changed
2222

2323
## When Refactoring
@@ -56,10 +56,10 @@ This project is indexed by GitNexus as **GitnexusV2** (1588 symbols, 4161 relati
5656

5757
| Resource | Use for |
5858
|----------|---------|
59-
| `gitnexus://repo/GitnexusV2/context` | Codebase overview, check index freshness |
60-
| `gitnexus://repo/GitnexusV2/clusters` | All functional areas |
61-
| `gitnexus://repo/GitnexusV2/processes` | All execution flows |
62-
| `gitnexus://repo/GitnexusV2/process/{name}` | Step-by-step execution trace |
59+
| `gitnexus://repo/GitNexus/context` | Codebase overview, check index freshness |
60+
| `gitnexus://repo/GitNexus/clusters` | All functional areas |
61+
| `gitnexus://repo/GitNexus/processes` | All execution flows |
62+
| `gitnexus://repo/GitNexus/process/{name}` | Step-by-step execution trace |
6363

6464
## Self-Check Before Finishing
6565

‎CHANGELOG.md‎

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
# Changelog
2+
3+
All notable changes to GitNexus will be documented in this file.
4+
5+
## [1.3.10] - 2026-03-07
6+
7+
### Security
8+
9+
- **MCP transport buffer cap**: Added 10 MB `MAX_BUFFER_SIZE` limit to prevent out-of-memory attacks via oversized `Content-Length` headers or unbounded newline-delimited input
10+
- **Content-Length validation**: Reject `Content-Length` values exceeding the buffer cap before allocating memory
11+
- **Stack overflow prevention**: Replaced recursive `readNewlineMessage` with iterative loop to prevent stack overflow from consecutive empty lines
12+
- **Ambiguous prefix hardening**: Tightened `looksLikeContentLength` to require 14+ bytes before matching, preventing false framing detection on short input
13+
- **Closed transport guard**: `send()` now rejects with a clear error when called after `close()`, with proper write-error propagation
14+
15+
### Added
16+
17+
- **Dual-framing MCP transport** (`CompatibleStdioServerTransport`): Auto-detects Content-Length (Codex/OpenCode) and newline-delimited JSON (Cursor/Claude Code) framing on the first message, responds in the same format (#207)
18+
- **Lazy CLI module loading**: All CLI subcommands now use `createLazyAction()` to defer heavy imports (tree-sitter, ONNX, KuzuDB) until invocation, significantly improving `gitnexus mcp` startup time (#207)
19+
- **Type-safe lazy actions**: `createLazyAction` uses constrained generics to validate export names against module types at compile time
20+
- **Regression test suite**: 13 unit tests covering transport framing, security hardening, buffer limits, and lazy action loading
21+
22+
### Fixed
23+
24+
- **CALLS edge sourceId alignment**: `findEnclosingFunctionId` now generates IDs with `:startLine` suffix matching node creation format, fixing process detector finding 0 entry points (#194)
25+
- **LRU cache zero maxSize crash**: Guard `createASTCache` against `maxSize=0` when repos have no parseable files (#144)
26+
27+
### Changed
28+
29+
- Transport constructor accepts `NodeJS.ReadableStream` / `NodeJS.WritableStream` (widened from concrete `ReadStream`/`WriteStream`)
30+
- `processReadBuffer` simplified to break on first error instead of stale-buffer retry loop
31+
32+
## [1.3.9] - 2026-03-06
33+
34+
### Fixed
35+
36+
- Aligned CALLS edge sourceId with node ID format in parse worker (#194)
37+
38+
## [1.3.8] - 2026-03-05
39+
40+
### Fixed
41+
42+
- Force-exit after analyze to prevent KuzuDB native cleanup hang (#192)

‎CLAUDE.md‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
<!-- gitnexus:start -->
22
# GitNexus — Code Intelligence
33

4-
This project is indexed by GitNexus as **GitnexusV2** (1588 symbols, 4161 relationships, 120 execution flows). Use the GitNexus MCP tools to understand code, assess impact, and navigate safely.
4+
This project is indexed by GitNexus as **GitNexus** (1573 symbols, 4146 relationships, 120 execution flows). Use the GitNexus MCP tools to understand code, assess impact, and navigate safely.
55

66
> If any GitNexus tool warns the index is stale, run `npx gitnexus analyze` in terminal first.
77
@@ -17,7 +17,7 @@ This project is indexed by GitNexus as **GitnexusV2** (1588 symbols, 4161 relati
1717

1818
1. `gitnexus_query({query: "<error or symptom>"})` — find execution flows related to the issue
1919
2. `gitnexus_context({name: "<suspect function>"})` — see all callers, callees, and process participation
20-
3. `READ gitnexus://repo/GitnexusV2/process/{processName}` — trace the full execution flow step by step
20+
3. `READ gitnexus://repo/GitNexus/process/{processName}` — trace the full execution flow step by step
2121
4. For regressions: `gitnexus_detect_changes({scope: "compare", base_ref: "main"})` — see what your branch changed
2222

2323
## When Refactoring
@@ -56,10 +56,10 @@ This project is indexed by GitNexus as **GitnexusV2** (1588 symbols, 4161 relati
5656

5757
| Resource | Use for |
5858
|----------|---------|
59-
| `gitnexus://repo/GitnexusV2/context` | Codebase overview, check index freshness |
60-
| `gitnexus://repo/GitnexusV2/clusters` | All functional areas |
61-
| `gitnexus://repo/GitnexusV2/processes` | All execution flows |
62-
| `gitnexus://repo/GitnexusV2/process/{name}` | Step-by-step execution trace |
59+
| `gitnexus://repo/GitNexus/context` | Codebase overview, check index freshness |
60+
| `gitnexus://repo/GitNexus/clusters` | All functional areas |
61+
| `gitnexus://repo/GitNexus/processes` | All execution flows |
62+
| `gitnexus://repo/GitNexus/process/{name}` | Step-by-step execution trace |
6363

6464
## Self-Check Before Finishing
6565

‎gitnexus/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "gitnexus",
3-
"version": "1.3.9",
3+
"version": "1.3.10",
44
"description": "Graph-powered code intelligence for AI agents. Index any codebase, query via MCP or CLI.",
55
"author": "Abhigyan Patwari",
66
"license": "PolyForm-Noncommercial-1.0.0",

0 commit comments

Comments
 (0)