mksglu/context-mode v1.0.149 on GitHub

Fixed

#687 ctx_index now supports directory paths with bounded traversal — adds include / exclude / maxDepth / maxFiles / extensions / respectGitignore / followSymlinks opts. Security gate at src/store.ts:845 preserved (#442 round-3 TOCTOU defense; each discovered file runs the per-file gate). Thanks to @matiasduartee for the clear repro across 4 clients x Windows 11.
#45 (comment 4529042182) Codex MCP server now recovers the project directory from the Codex session log when no workspace env is set. Mirrors the v1.0.119 Claude transcript heuristic, gated on strictPlatform === "codex". Defense-in-depth: src/executor.ts now accepts an explicit cwd override on ExecuteOptions. Thanks to @Demir-Utku for catching this within hours of v1.0.148.

18 new vitest cases (10 for #687 directory traversal, 8 for #45 Codex session-log resolution)
Full suite green; security invariants preserved