You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Summary:
When I index a specific repository in codebase-memory-mcp from VS Code, it appears to index C:/Users/{USERNAME} instead of the selected repository directory.
Why this matters:
This can unintentionally ingest unrelated local files outside the target repository, which is a privacy/security concern.
Environment:
OS: Windows
Install method: PowerShell installer
Client: VS Code (MCP integration)
Repository intended for indexing: specific workspace folder only
Steps to reproduce:
Install codebase-memory-mcp via PowerShell setup on Windows.
Verified fixed on v0.7.0. Indexing C:/cbmrepo in Windows CI (run) registers the project with root_path: "C:/cbmrepo" (the path I gave) and file nodes src/server.mjs / src/sub/calc.js — notC:/Users/.... The wrong-path scoping is gone (wide-char path handling, #386). Closing — this also removes the privacy concern of ingesting the home directory. Reopen if a specific path still resolves to the home dir on v0.7.0. 🙏
Activity
fix: security and correctness hardening from codebase audit
ci(temp): Windows repro harness for #394 group
DeusData commentedon May 31, 2026
Verified fixed on v0.7.0. Indexing
C:/cbmrepoin Windows CI (run) registers the project withroot_path: "C:/cbmrepo"(the path I gave) and file nodessrc/server.mjs/src/sub/calc.js— notC:/Users/.... The wrong-path scoping is gone (wide-char path handling, #386). Closing — this also removes the privacy concern of ingesting the home directory. Reopen if a specific path still resolves to the home dir on v0.7.0. 🙏ci: remove temporary Windows repro harness
fix: security and correctness hardening from codebase audit