🚀 What’s New
-
Added a built-in, read-only Model Context Protocol (MCP) server for connecting AI agents such as Claude Code and Cursor directly to local projects and opt-in remote Git repositories.
-
Added Smart Secrets and Hide Secrets — local, deterministic credential detection with opt-in masking that keeps the file and surrounding code intact.
-
Added Hide private data for optionally masking email addresses, routable IP addresses, local user paths, MAC addresses, and phone numbers.
-
Added manual redaction directly from Preview. Hide a value for the session or persistently for the project without storing the original.
-
Added syntax-aware Code Compression for 14 programming languages. Declarations, signatures, fields, and structure stay; implementation bodies collapse.
-
Added independent Strip comments and Strip blank lines transformations across 20 language packs.
-
Added Staged, Changes, and
diff:<ref>..<ref>Git scopes alongside the existing.gitignoreand tracked-files modes. -
Added direct Git URL project sources to CLI and Terminal Workspace through the managed repository cache.
-
Added estimated token budgets, maximum-file-size filtering, and largest-file reports for building bounded AI context.
-
Added Indonesian, Japanese, Korean, Polish, Turkish, Ukrainian, Vietnamese, Simplified Chinese, and Traditional Chinese. DevProjex now supports 20 interface languages.
-
Changed the project license from GPL-3.0 to the Apache License 2.0.
🤖 MCP Server
-
Seven deterministic, read-only tools:
list_projects,get_tree,analyze,search_project,get_file,pack_context, andread_pack. -
Secret redaction is always on in MCP mode and has no off switch. Private-data masking is opt-in via
--hide-private-data. -
Local access is pinned to configured roots with symlink, junction, and case-alias validation. Remote Git URLs stay disabled unless the server starts with
--allow-remote. -
Agents can narrow the configured selection through paths, globs, size limits, profiles, and Git scopes — never widen it.
-
Trees default to compact, token-efficient Markdown; plain text, JSON, and XML are available.
-
pack_contextsupports full, compact, and signatures detail plus amax_tokensbudget that reports included and skipped files. -
Oversized
pack_contextresults become session packs and are read back in bounded line ranges throughread_packinstead of flooding the agent’s context. -
Returned project content is wrapped in untrusted-data markers to resist prompt injection.
-
Long-running operations report standard MCP progress notifications.
⌨️ Command Line and Terminal Workspace
-
CLI commands now accept Git URLs for analysis, tree output, context export, project export, Desktop opening, and Terminal Workspace startup.
-
Added
recentcommands andcache path,cache list,cache update,cache remove, andcache clearfor shared history and managed clones. -
Added
--findingsand--fail-on-findingsfor using DevProjex as a secret pre-flight gate in CI pipelines. -
Added
--select-from FILE|-for composing selections with tools such asgit diff --name-only. -
Added
--max-file-bytes,--max-tokens, and configurable--top-filesfor large-project automation. -
Rebuilt the Terminal Workspace Parameters pane around independent Content Processing, Exclusions, and File Types panels.
-
Added the
:workspace command line with strict parsing, ghost completion, quoting-aware path completion, and persistent history. -
Workspace commands cover filters, search, Git modes, file types, content processing, preview formats, copy, export, profiles, branches, updates, diagnostics, and language.
-
Expanded the searchable Action Palette so important workflows do not require memorizing shortcuts.
-
:languagenow persists the Terminal Workspace language;--languageoverrides stay session-only. -
Improved responsive layouts from wide three-pane workspaces down to compact single-pane terminals.
✨ Improved
-
Added content search to Preview with next/previous navigation, result counts, and scrollbar markers for matches, secret findings, and private-data findings.
-
Added project-tree scrollbar markers for tree search results.
-
Added mouse side-button navigation through Preview locations; the sticky file header now jumps to the start of the current file.
-
Added a read-only project-tree context menu: reveal in the file manager, copy paths or transformed content, change selection, expand or collapse branches.
-
Added searchable in-app Help with highlighted results and navigation.
-
Added rolling status-counter animations and separate animation preferences for tree expansion, counters, and the initial reveal.
-
macOS now presents native Command-key shortcuts; Windows and Linux keep Ctrl.
-
Git controls are now hidden when Git filtering cannot affect the current project.
-
Recent history now keeps up to 32 local folders and 16 repository sources. Repository history stores network clone sources only.
-
Human-readable context now writes the project root once and uses project-relative headings instead of repeating absolute paths.
-
Remote repository output shows the safe repository URL and never exposes the physical cache directory.
-
Selection, profiles, Preview, exports, CLI, TUI, and MCP now share the same content-transformation and redaction pipeline.
-
Project-tree selection and expansion state survive refreshes and structural changes more reliably.
-
Large-project scanning, metrics, redaction, compression, and exports perform less repeated work; large documents use bounded streaming paths instead of full in-memory copies.
🛡️ Security and Reliability
-
Clone credentials are kept out of process arguments, recent history, diagnostics, and displayed repository URLs.
-
Unsupported, malformed, or credential-bearing repository sources are rejected before Git execution; option-like revisions and write-capable refspecs are refused.
-
Nested repositories and worktrees resolve Git state independently, and repository roots are revalidated before scoped output is trusted.
-
Missing, deleted, or renamed-away Git-scope paths are reported explicitly instead of being silently substituted.
-
Symlinks, junctions, and case-only path aliases are checked at physical access boundaries; unsafe entries are handled fail-closed.
-
Terminal output escapes control characters so project-controlled text cannot alter terminal presentation.
-
Context packs, previews, command history, profiles, and diagnostics use explicit size and lifetime bounds.
-
User-owned repositories remain read-only. Branch changes and network updates are limited to DevProjex-managed cached clones.
🐞 Fixed
-
Fixed project-tree checked and expanded state being lost during Desktop refreshes.
-
Fixed stale profile and parameter projections after files, extensions, exclusions, or repository state changed.
-
Fixed Preview search, redaction markers, sticky headers, and scroll geometry becoming unsynchronized after content updates.
-
Fixed selection behavior for case-distinct paths on case-sensitive filesystems.
-
Fixed Git filtering edge cases involving nested repositories, worktrees, shallow clones, deleted files, and empty scopes.
-
Fixed long-running operations leaving stale Preview, metrics, search, or progress work active after cancellation.
-
Fixed large structured trees relying on recursive projections that could become unsafe at extreme depth.
-
Fixed output inconsistencies between GUI, TUI, CLI, and MCP when the same profile and parameters were used.
-
Fixed transformed folder and ZIP exports mishandling unreadable content, cancellation, or destination changes.
⚙️ Technical
-
Updated the pinned .NET SDK from
10.0.300to10.0.303. -
Added the official Model Context Protocol C# SDK and a dedicated MCP application surface.
-
Added pinned Tree-sitter grammar delivery with integrity validation across all six release RIDs. Portable builds embed grammars into the single executable.
-
Added ReadyToRun packaging and release validation for Linux and macOS desktop artifacts.
-
Added shared content-processing, redaction, Git-scope, token-budget, and repository-cache infrastructure across all application surfaces.
-
Refreshed Store and WinGet release metadata for all supported locales.
🧪 Quality
-
DevProjex now contains more than 17,000 automated test cases across Unit, Integration, Terminal, and UI projects.
-
Added real-Git coverage for tracked, staged, changes, diff, nested repositories, worktrees, shallow clones, deletions, and case-sensitive filesystems.
-
Added in-process SDK and real-process JSON-RPC coverage for MCP schemas, security boundaries, packs, progress, and cancellation.
-
Expanded PTY-based Terminal Workspace testing for keyboard, mouse, command line, localization, responsive layout, and export.
📝 Notes
-
Hide Secrets, Hide private data, Code Compression, and the strip transformations are opt-in in GUI, TUI, and CLI. MCP is the exception: secret redaction is mandatory there.
-
Redaction is heuristic. No findings means the current rules found nothing — it is not a guarantee that the content contains no sensitive data.
-
Code Compression is conservative. Unsupported or unsafe-to-transform files remain complete instead of being partially rewritten.
-
Content transformations never modify the source project. A transformed folder or ZIP copy is intentionally not byte-for-byte identical and may not build or run.
-
Staged and Changes are available in Desktop, TUI, CLI, and MCP. Ref-to-ref Diff is available in CLI, TUI, and MCP and is not persisted in project profiles.
-
Token budgets use an estimate based on transformed character counts. Leave headroom when targeting a model with a strict context-window limit.