Release v1.14.0 — AI Guidelines, Security Fixes, Viewer Improvements · CSCSoftware/AiDex

What's New

aidex_global_guideline — Persistent key-value store for AI guidelines and coding conventions. Store named instructions like "review" → review checklist, "release-prep" → release steps. Actions: set, get, list, delete. Works without prior global_init.
Viewer file size limit: getFileContent() now refuses files larger than 1 MB — prevents browser from freezing on large binary or generated files

Command injection in Linux screenshot tools: All execSync calls with shell string interpolation replaced with execFileSync using argument arrays
Global query cache grows unbounded: Cache entries evicted on write when they exceed the 5-minute TTL — prevents memory leak in long-running sessions
Viewer race condition on file change: pendingChanges set is now snapshotted and cleared before processing
Viewer buildTree() N+1 queries: Correlated subqueries replaced with LEFT JOIN — single query instead of one subquery per file
WebSocket unknown message type: Viewer now sends an error response for unrecognized message types
Viewer taskId not validated: updateTaskStatus now checks Number.isInteger(taskId) before processing
Viewer mode not whitelisted: getTree message mode constrained to 'code' | 'all'
getProjects() SQL injection via tag/namePattern: escapeLikeTerm() now applied to both filter parameters
Silent fails in viewer and global DB: catch {} blocks now log errors via console.error
Git status refresh on every file event: Added 5-second minimum interval between git status refreshes
Global query cache not invalidated after init/update: aidex_init and aidex_update now call invalidateGlobalCache()

screenshot/shared.ts: New module with centralized hasTool() and runPowerShell() — both use execFileSync (no shell)
normalizePath(): Private duplicates removed — both now import from commands/shared.ts
escapeLikeTerm(): Exported from commands/shared.ts and used consistently across all LIKE queries
macOS sips output parsing: Replaced shell pipe with regex on direct sips output