Avazbek22/DevProjex v5.1

DevProjex v5.1

on GitHub

🚀 What’s New

• Added a built-in, read-only Model Context Protocol (MCP) server for connecting AI agents such as Claude Code and Cursor directly to local projects and opt-in remote Git repositories.

• Added Smart Secrets and Hide Secrets — local, deterministic credential detection with opt-in masking that keeps the file and surrounding code intact.

• Added Hide private data for optionally masking email addresses, routable IP addresses, local user paths, MAC addresses, and phone numbers.

• Added manual redaction directly from Preview. Hide a value for the session or persistently for the project without storing the original.

• Added syntax-aware Code Compression for 14 programming languages. Declarations, signatures, fields, and structure stay; implementation bodies collapse.

• Added independent Strip comments and Strip blank lines transformations across 20 language packs.

• Added Staged, Changes, and diff:<ref>..<ref> Git scopes alongside the existing .gitignore and tracked-files modes.

• Added direct Git URL project sources to CLI and Terminal Workspace through the managed repository cache.

• Added estimated token budgets, maximum-file-size filtering, and largest-file reports for building bounded AI context.

• Added Indonesian, Japanese, Korean, Polish, Turkish, Ukrainian, Vietnamese, Simplified Chinese, and Traditional Chinese. DevProjex now supports 20 interface languages.

• Changed the project license from GPL-3.0 to the Apache License 2.0.

🤖 MCP Server

• Seven deterministic, read-only tools: list_projects, get_tree, analyze, search_project, get_file, pack_context, and read_pack.

• Secret redaction is always on in MCP mode and has no off switch. Private-data masking is opt-in via --hide-private-data.

• Local access is pinned to configured roots with symlink, junction, and case-alias validation. Remote Git URLs stay disabled unless the server starts with --allow-remote.

• Agents can narrow the configured selection through paths, globs, size limits, profiles, and Git scopes — never widen it.

• Trees default to compact, token-efficient Markdown; plain text, JSON, and XML are available.

• pack_context supports full, compact, and signatures detail plus a max_tokens budget that reports included and skipped files.

• Oversized pack_context results become session packs and are read back in bounded line ranges through read_pack instead of flooding the agent’s context.

• Returned project content is wrapped in untrusted-data markers to resist prompt injection.

• Long-running operations report standard MCP progress notifications.

⌨️ Command Line and Terminal Workspace

• CLI commands now accept Git URLs for analysis, tree output, context export, project export, Desktop opening, and Terminal Workspace startup.

• Added recent commands and cache path, cache list, cache update, cache remove, and cache clear for shared history and managed clones.

• Added --findings and --fail-on-findings for using DevProjex as a secret pre-flight gate in CI pipelines.

• Added --select-from FILE|- for composing selections with tools such as git diff --name-only.

• Added --max-file-bytes, --max-tokens, and configurable --top-files for large-project automation.

• Rebuilt the Terminal Workspace Parameters pane around independent Content Processing, Exclusions, and File Types panels.

• Added the : workspace command line with strict parsing, ghost completion, quoting-aware path completion, and persistent history.

• Workspace commands cover filters, search, Git modes, file types, content processing, preview formats, copy, export, profiles, branches, updates, diagnostics, and language.

• Expanded the searchable Action Palette so important workflows do not require memorizing shortcuts.

• :language now persists the Terminal Workspace language; --language overrides stay session-only.

• Improved responsive layouts from wide three-pane workspaces down to compact single-pane terminals.

✨ Improved

• Added content search to Preview with next/previous navigation, result counts, and scrollbar markers for matches, secret findings, and private-data findings.

• Added project-tree scrollbar markers for tree search results.

• Added mouse side-button navigation through Preview locations; the sticky file header now jumps to the start of the current file.

• Added a read-only project-tree context menu: reveal in the file manager, copy paths or transformed content, change selection, expand or collapse branches.

• Added searchable in-app Help with highlighted results and navigation.

• Added rolling status-counter animations and separate animation preferences for tree expansion, counters, and the initial reveal.

• macOS now presents native Command-key shortcuts; Windows and Linux keep Ctrl.

• Git controls are now hidden when Git filtering cannot affect the current project.

• Recent history now keeps up to 32 local folders and 16 repository sources. Repository history stores network clone sources only.

• Human-readable context now writes the project root once and uses project-relative headings instead of repeating absolute paths.

• Remote repository output shows the safe repository URL and never exposes the physical cache directory.

• Selection, profiles, Preview, exports, CLI, TUI, and MCP now share the same content-transformation and redaction pipeline.

• Project-tree selection and expansion state survive refreshes and structural changes more reliably.

• Large-project scanning, metrics, redaction, compression, and exports perform less repeated work; large documents use bounded streaming paths instead of full in-memory copies.

🛡️ Security and Reliability

• Clone credentials are kept out of process arguments, recent history, diagnostics, and displayed repository URLs.

• Unsupported, malformed, or credential-bearing repository sources are rejected before Git execution; option-like revisions and write-capable refspecs are refused.

• Nested repositories and worktrees resolve Git state independently, and repository roots are revalidated before scoped output is trusted.

• Missing, deleted, or renamed-away Git-scope paths are reported explicitly instead of being silently substituted.

• Symlinks, junctions, and case-only path aliases are checked at physical access boundaries; unsafe entries are handled fail-closed.

• Terminal output escapes control characters so project-controlled text cannot alter terminal presentation.

• Context packs, previews, command history, profiles, and diagnostics use explicit size and lifetime bounds.

• User-owned repositories remain read-only. Branch changes and network updates are limited to DevProjex-managed cached clones.

🐞 Fixed

• Fixed project-tree checked and expanded state being lost during Desktop refreshes.

• Fixed stale profile and parameter projections after files, extensions, exclusions, or repository state changed.

• Fixed Preview search, redaction markers, sticky headers, and scroll geometry becoming unsynchronized after content updates.

• Fixed selection behavior for case-distinct paths on case-sensitive filesystems.

• Fixed Git filtering edge cases involving nested repositories, worktrees, shallow clones, deleted files, and empty scopes.

• Fixed long-running operations leaving stale Preview, metrics, search, or progress work active after cancellation.

• Fixed large structured trees relying on recursive projections that could become unsafe at extreme depth.

• Fixed output inconsistencies between GUI, TUI, CLI, and MCP when the same profile and parameters were used.

• Fixed transformed folder and ZIP exports mishandling unreadable content, cancellation, or destination changes.

⚙️ Technical

• Updated the pinned .NET SDK from 10.0.300 to 10.0.303.

• Added the official Model Context Protocol C# SDK and a dedicated MCP application surface.

• Added pinned Tree-sitter grammar delivery with integrity validation across all six release RIDs. Portable builds embed grammars into the single executable.

• Added ReadyToRun packaging and release validation for Linux and macOS desktop artifacts.

• Added shared content-processing, redaction, Git-scope, token-budget, and repository-cache infrastructure across all application surfaces.

• Refreshed Store and WinGet release metadata for all supported locales.

🧪 Quality

• DevProjex now contains more than 17,000 automated test cases across Unit, Integration, Terminal, and UI projects.

• Added real-Git coverage for tracked, staged, changes, diff, nested repositories, worktrees, shallow clones, deletions, and case-sensitive filesystems.

• Added in-process SDK and real-process JSON-RPC coverage for MCP schemas, security boundaries, packs, progress, and cancellation.

• Expanded PTY-based Terminal Workspace testing for keyboard, mouse, command line, localization, responsive layout, and export.

📝 Notes

• Hide Secrets, Hide private data, Code Compression, and the strip transformations are opt-in in GUI, TUI, and CLI. MCP is the exception: secret redaction is mandatory there.

• Redaction is heuristic. No findings means the current rules found nothing — it is not a guarantee that the content contains no sensitive data.

• Code Compression is conservative. Unsupported or unsafe-to-transform files remain complete instead of being partially rewritten.

• Content transformations never modify the source project. A transformed folder or ZIP copy is intentionally not byte-for-byte identical and may not build or run.

• Staged and Changes are available in Desktop, TUI, CLI, and MCP. Ref-to-ref Diff is available in CLI, TUI, and MCP and is not persisted in project profiles.

• Token budgets use an estimate based on transformed character counts. Leave headroom when targeting a model with a strict context-window limit.