Shane McCarronandClaude Sonnet 4.6 a109e9753e fix(store,mcp): prevent ghost .db file creation for unknown projects ...

- Add cbm_store_open_path_query() that opens with SQLITE_OPEN_READWRITE
  only (no SQLITE_OPEN_CREATE); returns NULL when file is absent
- Declare cbm_store_open_path_query() in store.h
- Change resolve_store() in mcp.c to call cbm_store_open_path_query
  so querying a nonexistent project never creates a ghost .db file
- Indexing path (cbm_store_open_path) retains SQLITE_OPEN_CREATE

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-22 18:18:21 -05:00

..

cli

Add security defense tests + eliminate system() command injection

2026-03-21 23:02:34 +01:00

cypher

Fix 29 CodeQL alerts: command injection, snprintf overflow, TOCTOU races

2026-03-21 22:18:31 +01:00

discover

Full Windows portability: proper implementations, not stubs

2026-03-18 18:47:43 +01:00

foundation

Add security defense tests + eliminate system() command injection

2026-03-21 23:02:34 +01:00

graph_buffer

Add incremental reindex + ADR hints in index/schema/adr responses

2026-03-20 13:15:01 +01:00

mcp

fix(store,mcp): prevent ghost .db file creation for unknown projects

2026-03-22 18:18:21 -05:00

pipeline

Fix 29 CodeQL alerts: command injection, snprintf overflow, TOCTOU races

2026-03-21 22:18:31 +01:00

store

fix(store,mcp): prevent ghost .db file creation for unknown projects

2026-03-22 18:18:21 -05:00

traces

Replace vmem with mimalloc global allocator, add extraction-phase prescan, fix __init__.py QN collision

2026-03-17 22:05:57 +01:00

ui

Fix 29 CodeQL alerts: command injection, snprintf overflow, TOCTOU races

2026-03-21 22:18:31 +01:00

watcher

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

main.c

Restore session auto-detect + auto-index + config CLI from Go

2026-03-19 20:13:17 +01:00