Bump version to 0.2.18 — file-level summaries

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: jgravelle

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "jcodemunch-mcp"
-version = "0.2.17"
+version = "0.2.18"
 description = "Token-efficient MCP server for source code exploration via tree-sitter AST parsing"
 readme = "README.md"
 requires-python = ">=3.10"

src/jcodemunch_mcp/storage/index_store.py

@@ -174,7 +174,11 @@ def _content_dir(self, owner: str, name: str) -> Path:
         return self.base_path / self._repo_slug(owner, name)
 
     def _safe_content_path(self, content_dir: Path, relative_path: str) -> Optional[Path]:
-        """Resolve a content path and ensure it stays within content_dir."""
+        """Resolve a content path and ensure it stays within content_dir.
+
+        Prevents path traversal when writing/reading cached raw files from
+        untrusted repository paths.
+        """
         try:
             base = content_dir.resolve()
             candidate = (content_dir / relative_path).resolve()

src/jcodemunch_mcp/tools/get_file_outline.py

@@ -73,12 +73,7 @@ def get_file_outline(
     tokens_saved = estimate_savings(raw_bytes, response_bytes)
     total_saved = record_savings(tokens_saved)
 
-    # File-level summary
-    file_summary = ""
-    if hasattr(index, "file_summaries") and index.file_summaries:
-        file_summary = index.file_summaries.get(file_path, "")
-    elif isinstance(getattr(index, "file_summaries", None), dict):
-        file_summary = index.file_summaries.get(file_path, "")
+    file_summary = index.file_summaries.get(file_path, "")
 
     return {
         "repo": f"{owner}/{name}",