deusdata--codebase-memory-mcp

github-featured/deusdata--codebase-memory-mcp

Fork 0

Commit Graph

Author	SHA1	Message	Date
Martin Vogel	c371e9f07d	Add time-bomb + MCP file read audit, tracked pre-commit hooks Security audit (Layer 1) new checks: - Time-bomb scan: flags time()/sleep()/clock() near dangerous calls - MCP file read audit: tracks fopen/fread count in mcp.c against expected max (detects data exfiltration through tool responses) Pre-commit hooks now tracked in scripts/hooks/: - Contributors activate with: git config core.hooksPath scripts/hooks - Runs: lint → security audit → build + test - setup.sh already configures this automatically	2026-03-21 16:43:48 +01:00
Martin Vogel	6f0910278b	Remove all Go code — project is now pure C Delete Go MCP server, CGo bridges, Go pipeline, store, tools, watcher, cypher engine, language specs, and all Go tests. Replace Go pre-commit hook with C-only linting (clang-tidy, cppcheck, clang-format, tests). Tree-sitter extraction engine (internal/cbm/*.c) retained for C pipeline.	2026-03-15 20:32:19 +01:00
Martin Vogel	02bc3b7352	Release v0.3.0: 25 languages, install/update CLI, skills, benchmark Language expansion (13 → 25): Add Ruby, C, Bash, Zig, Elixir, Haskell, OCaml, HTML, CSS, YAML, TOML, HCL with tree-sitter grammars and language specs. Restore Erlang and SQL with extraction fixes. CLI install/update/uninstall commands: Auto-detect Claude Code and Codex CLI, register MCP server, install task-specific skills, self-update with SHA-256 verification. Embedded skills (4): exploring, tracing, quality, reference — auto-trigger in Claude Code for graph-first code discovery. Pipeline improvements: Docstring extraction, enrichment pass for params/returns/complexity, graceful context cancellation, improved test detection. 35-language benchmark (BENCHMARK.md): 12 questions × 35 repos, 91.8% overall score, Linux kernel stress test (20K nodes, zero timeouts). Replaces old benchmark artifacts.	2026-03-01 18:01:52 +01:00

Author

SHA1

Message

Date

Martin Vogel

c371e9f07d

Add time-bomb + MCP file read audit, tracked pre-commit hooks

Security audit (Layer 1) new checks:
- Time-bomb scan: flags time()/sleep()/clock() near dangerous calls
- MCP file read audit: tracks fopen/fread count in mcp.c against
  expected max (detects data exfiltration through tool responses)

Pre-commit hooks now tracked in scripts/hooks/:
- Contributors activate with: git config core.hooksPath scripts/hooks
- Runs: lint → security audit → build + test
- setup.sh already configures this automatically

2026-03-21 16:43:48 +01:00

Martin Vogel

6f0910278b

Remove all Go code — project is now pure C

Delete Go MCP server, CGo bridges, Go pipeline, store, tools, watcher,
cypher engine, language specs, and all Go tests. Replace Go pre-commit
hook with C-only linting (clang-tidy, cppcheck, clang-format, tests).
Tree-sitter extraction engine (internal/cbm/*.c) retained for C pipeline.

2026-03-15 20:32:19 +01:00

Martin Vogel

02bc3b7352

Release v0.3.0: 25 languages, install/update CLI, skills, benchmark

Language expansion (13 → 25):
  Add Ruby, C, Bash, Zig, Elixir, Haskell, OCaml, HTML, CSS, YAML,
  TOML, HCL with tree-sitter grammars and language specs.
  Restore Erlang and SQL with extraction fixes.

CLI install/update/uninstall commands:
  Auto-detect Claude Code and Codex CLI, register MCP server,
  install task-specific skills, self-update with SHA-256 verification.

Embedded skills (4):
  exploring, tracing, quality, reference — auto-trigger in Claude Code
  for graph-first code discovery.

Pipeline improvements:
  Docstring extraction, enrichment pass for params/returns/complexity,
  graceful context cancellation, improved test detection.

35-language benchmark (BENCHMARK.md):
  12 questions × 35 repos, 91.8% overall score, Linux kernel stress
  test (20K nodes, zero timeouts). Replaces old benchmark artifacts.

2026-03-01 18:01:52 +01:00

3 Commits