| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-05-24 | 962 Bytes | |
| v1.0.149 source code.tar.gz | 2026-05-24 | 1.8 MB | |
| v1.0.149 source code.zip | 2026-05-24 | 2.1 MB | |
| Totals: 3 Items | 4.0 MB | 0 | |
Fixed
-
#687
ctx_indexnow supports directory paths with bounded traversal — addsinclude/exclude/maxDepth/maxFiles/extensions/respectGitignore/followSymlinksopts. Security gate atsrc/store.ts:845preserved (#442 round-3 TOCTOU defense; each discovered file runs the per-file gate). Thanks to @matiasduartee for the clear repro across 4 clients x Windows 11. -
#45 (comment 4529042182) Codex MCP server now recovers the project directory from the Codex session log when no workspace env is set. Mirrors the v1.0.119 Claude transcript heuristic, gated on
strictPlatform === "codex". Defense-in-depth:src/executor.tsnow accepts an explicitcwdoverride onExecuteOptions. Thanks to @Demir-Utku for catching this within hours of v1.0.148.
Tests
- 18 new vitest cases (10 for [#687] directory traversal, 8 for [#45] Codex session-log resolution)
- Full suite green; security invariants preserved