Roadmap
Roadmap: MCP Filesystem Ultra
Section titled “Roadmap: MCP Filesystem Ultra”Last updated: 2026-07-20 Current version: v4.5.29 Go version: 1.26.5 Status: Production-ready
Current Version: v4.5.29
Section titled “Current Version: v4.5.29”Tool Inventory (20 tools)
Section titled “Tool Inventory (20 tools)”CORE (5): read_file, write_file, edit_file, list_directory, search_filesEDIT+ (2): multi_edit, project_replace (project_replace added v4.5.0)FILES (4): move_file, copy_file, delete_file, create_directory (delete_file is soft-delete by default since v4.5.11)BATCH (1): batch_operations (pipelines + batch rename; 8 batch-op types v4.5.14+)BACKUP (1): backup (10 actions: list/info/compare/cleanup/restore/undo_last/undo_chain/list_trash/restore_trash/purge_trash)ANALYSIS (1): analyze_operation (file, optimize, write, edit, delete, compare)WSL (1): wsl (sync + status — auto-sync is env-var driven)UTIL (1): server_info (help, stats, artifact via action param)INFO (1): get_file_infoGIT (1): git (v4.5.2+ — 9 actions since v4.5.25: init, status, diff, log, show, add, commit, restore, branch)MINIFY (1): minify_js (v4.5.7+ — pure-Go JS minifier; no Node)HELP (1): help (discovery — standalone tool, no params)Consolidated from 59 tools in v3.x to 17 core tools at v4.0.0; +3 standalone tools (git, minify_js, help) shipped between v4.5.2 and v4.5.7. Aliases and the fs super-tool are intentionally disabled (tools_core.go:103-105).
Pipeline System (12 actions)
Section titled “Pipeline System (12 actions)”| Action | Type | Description |
|---|---|---|
search | Read | Search files by pattern |
read_ranges | Read | Read file contents |
count_occurrences | Read | Count pattern occurrences |
edit | Write | Search-and-replace |
multi_edit | Write | Multiple edits per file |
regex_transform | Write | Regex with capture groups |
copy | Write | Copy files |
rename | Write | Rename/move files |
delete | Write | Soft-delete files |
aggregate | Meta | Combine content from steps |
diff | Meta | Unified diff between files |
merge | Meta | Union/intersection of file lists |
Features: conditional steps (9 condition types), template variables ({{step_id.field}}), DAG-based parallel execution, structured error reporting.
Metrics
Section titled “Metrics”| Metric | Value |
|---|---|
| MCP Tools | 20 (17 core + git + minify_js + help) |
| Pipeline Actions | 12 |
| Batch operation types | 8 (incl. extract v4.5.14) |
| Backup actions | 10 |
| Git actions | 9 |
| Normalizer Rules | 14 built-in |
| CVEs resolved (Go toolchain) | 10+ (Go 1.26.4 fixed GO-2026-5039 / GO-2026-5037 in v4.5.8; current baseline is Go 1.26.5 as of v4.5.29) |
| Security vulnerabilities fixed | 13 (5 Critical + 3 High + 5 Medium) + post-v4.1.4 hardening |
| Bugs fixed | 28+ (plus v4.5.x fix-list) |
| Passing tests | 100+ |
Recent Releases
Section titled “Recent Releases”| Version | Date | Theme |
|---|---|---|
| v4.5.29 | 2026-07-13 | Fase 1–4 hardening: Go 1.26.5, git cmd.exe fallback removed, ripgrep flag-injection fix, dashboard CSRF guard, output-schema conformance sweep, E2E smoke battery, experimental-feature policy; project_replace snapshot backup before writes; verified post-write evidence; host/sandbox mismatch diagnostics; centralized cache invalidation |
| v4.5.28 | 2026-07-13 | git tool: native-array paths, show action, rev param, output enum, 4-layer diff guardrail |
| v4.5.27 | 2026-07-13 | search_files output auto-detect (ripgrep/legacy) |
| v4.5.26 | 2026-07-11 | structuredContent + outputSchema on read_file / write_file / edit_file / multi_edit; write_file RecordWriteHash fix; parent_backup_id for step-through undo |
| v4.5.25 | 2026-07-04 | list_directory output_format (compact/json/tree); multi_edit aggregate diff_format |
| v4.5.24 | 2026-07-03 | search_files false-negative fix (path-is-file → content search; content-only params imply content search) |
| v4.5.23 | 2026-07-02 | git restore command construction + option-injection guards + branch -d/-D |
| v4.5.22 | 2026-07-02 | git restore validation order + staged/dry_run non-destructive |
| v4.5.21 | 2026-07-02 | git restore no longer fails with exec: Stderr already set |
| v4.5.20 | 2026-07-02 | git add respects paths, refuses silent -A |
| v4.5.19 | 2026-06-15 | Pipeline writes refresh auto-OCC baseline |
| v4.5.18 | 2026-06-15 | Auto-OCC structured payload + batch writes refresh baseline |
| v4.5.17 | 2026-06-15 | --auto-occ off|warn|block (automatic OCC) |
| v4.5.16 | 2026-06-15 | edit_file mode replace_range |
| v4.5.15 | 2026-06-15 | Go AST post-edit check + post-edit content_hash + structured edit responses |
| v4.5.14 | 2026-06-15 | Reliability: 6 items (diff_format, atomic extract, structural brace delta, content_hash on partial read, allow_rewrite, req_id) |
| v4.5.13 | 2026-06-12 | Hooks examples + 16-event fix (12 → 16); read_file content_hash into structuredContent; multi_edit accepts expected_hash |
| v4.5.12 | 2026-06-11 | Dashboard Trash tab (soft-delete recovery UI) |
| v4.5.11 | 2026-06-11 | Soft-delete backup integration (SD-ID flow; list_trash/restore_trash/purge_trash) |
| v4.5.10 | 2026-06-11 | edit_file accidental-rewrite guard (allow_rewrite:true to override) |
| v4.5.9 | 2026-06-09 | Read deduplication (singleflight) + ReadFileRange cache path |
| v4.5.8 | 2026-06-09 | Go 1.26.4 stdlib CVE fixes (GO-2026-5039, GO-2026-5037); TOCTOU junction fix |
| v4.5.7 | 2026-06-07 | minify_js tool (pure-Go); tolerant_whitespace: true |
| v4.5.6 | 2026-06-07 | Log-driven: search output cap, expected_hash, cache_hit, SetError |
| v4.5.5 | 2026-06-04 | Adaptive write_file (size mismatch → backup + warn, not block) + hooks coverage + git hardening + WSL security |
| v4.5.4 | 2026-05-30 | Fix git tool: “Stderr already set” on Windows with path |
| v4.5.3 | 2026-05-27 | return_lines accepts bool |
| v4.5.2 | 2026-05-27 | git tool — 8 actions |
| v4.5.1 | 2026-05-21 | search_replace $ escape; backup/restore fixes (backup-of-modified, hash verify, dry_run, silent failure) |
| v4.5.0 | 2026-05-20 | project_replace — project-wide find/replace in one call |
| v4.4.1 | 2026-05-19 | Unified backup system for batch_operations |
| v4.4.0 | 2026-05-11 | Claude-Code-name aliases + ripgrep backend |
| v4.1.0 | 2026-03-06 | Pipeline System v2 (12 actions, conditions, templates, parallel) |
| v4.0.2 | 2026-03-16 | Self-Learning Normalizer (14 rules) + Bug #23 CRLF fix |
| v4.0.1 | 2026-03-04 | Bug #18-21 hotfixes |
| v4.0.0 | 2026-03-03 | Tool Consolidation (59 → 16) + MCP spec annotations |
See Changelog for the high-level index and the repository CHANGELOG.md for the canonical, detailed release notes.
Completed Features
Section titled “Completed Features”Core Operations
Section titled “Core Operations”- Read/write/edit files with automatic I/O strategy selection based on file size
- Streaming writes and chunked reads for large files
- Range reads (
start_line/end_line), base64 encoding - Multi-edit with per-edit status tracking
Search
Section titled “Search”- Regex and literal search with content, file type, and context filters
- Count occurrences (
count_only: true) - Character-level coordinate tracking
Editing
Section titled “Editing”- Intelligent edit with multi-level fallback matching
- Search-and-replace mode, nth occurrence replacement
- Regex transformations with capture groups
- Risk assessment (LOW/MEDIUM/HIGH/CRITICAL)
- Edit safety validation with context checks
Batch & Pipelines
Section titled “Batch & Pipelines”- 12-action pipeline system with step chaining (
input_from) - Conditional steps, template variables, parallel execution
- Batch rename with preview mode
- Automatic backup and rollback on failure
Backup System
Section titled “Backup System”- Automatic backup before edits
- Restore, compare, list, cleanup via unified
backuptool - Dashboard with enterprise search/filter/recovery UI
WSL Integration
Section titled “WSL Integration”- Bidirectional WSL/Windows path conversion
- Workspace sync, auto-sync configuration
NormalizePath()on all tool handlers
Security
Section titled “Security”- Go 1.26.0 (8 CVEs resolved in stdlib)
- 13 vulnerability fixes (symlink traversal, access control, TOCTOU)
crypto/randfor all temp files and backup IDs- Backup ID sanitization against path traversal
Observability
Section titled “Observability”- Audit logging (
--log-dir) with JSON Lines rotation - Dashboard binary with real-time SSE updates
- Normalizer stats and error pattern tracking
- Per-step pipeline progress in dashboard
Completed (since v4.0.0)
Section titled “Completed (since v4.0.0)”- Diff-based editing (v4.5.14:
diff_formatonedit_fileandmulti_edit; v4.5.25: aggregate batch diff) - AST-aware code search (v4.5.15: Go AST post-edit validation in
core/structure_check.go) - Tool titles with
WithTitleAnnotation()(every tool in source — registered in v4.5.x) - Structured edit responses (v4.5.15:
content_hash,replacements,lines_added/removed,backup_id,risk_warning,structure_warning,integrity) - MCP
outputSchema+structuredContent(v4.5.26: 4 I/O core tools publish JSON Schema and return typed payloads — interop for any MCP client, not just Claude with CLAUDE.md)
Pending Improvements
Section titled “Pending Improvements”- Output schemas for the remaining tools (governed by the Fase 3 experimental-feature policy: new schemas must pass the handler-level conformance sweep before graduation)
- Continuous test coverage growth (tracked by the Fase 2 release gate:
go test ./...,go test -tags e2e ./tests/e2e/,govulncheck)
Evolution
Section titled “Evolution”Tool Count
Section titled “Tool Count”v2.0.0 ████████░░ (32 tools)v3.7.0 █████████░ (50 tools)v3.13.2 █████████░ (56 tools)v4.0.0 ████░░░░░░ (17 core tools, consolidated)v4.5.25 ████░░░░░░ (20 tools: 17 core + git + minify_js + help)v4.5.26 █████░░░░░ (20 tools: 4 publish outputSchema / structuredContent for third-party MCP clients)v4.5.29 █████░░░░░ (20 tools: verified writes + host/sandbox mismatch diagnostics) ← CurrentSecurity
Section titled “Security”v3.8.0 ████░░░░░░ (Risk assessment, backups)v3.10.0 ███████░░░ (Edit safety layer)v3.13.0 ██████████ (Full audit, 13 fixes, crypto/rand)v4.1.4 ██████████+ (AI-era hardening — 5 attack vectors)v4.5.23 ██████████+ (git option-injection + branch -d/-D safety)Architectural Decisions
Section titled “Architectural Decisions”Maintain
Section titled “Maintain”- MCP protocol 2025-11-25 compliant (mcp-go v0.54.1)
- BigCache for file content caching (3-tier cache)
- ants/v2 worker pool for concurrency
- crypto/rand for secure ID generation
- Windows/WSL compatibility layer
Completed
Section titled “Completed”- Custom error types with Go 1.13+ wrapping (v3.11.0)
- slog structured logging (v3.11.0)
- Full security audit with 13 fixes (v3.13.0)
- Tool consolidation 59 → 16 (v4.0.0)
- Self-Learning Normalizer (v4.0.2)
- Pipeline System v2 with 12 actions (v4.1.0)
gittool — 9 actions with hardened command construction (v4.5.2; schema made agent-usable in v4.5.25; hardened through v4.5.29)minify_jstool — pure-Go JS minifier (v4.5.7)--auto-occautomatic OCC (v4.5.17)- Edit rewrite guard (v4.5.10) + Go AST post-edit check (v4.5.15) + structured edit responses (v4.5.15)
- Soft-delete SD-ID integration + trash actions (v4.5.11)
- Dashboard Trash tab (v4.5.12)
- MCP
outputSchema+structuredContenton the 4 I/O core tools (v4.5.26)
How to Contribute
Section titled “How to Contribute”- Report issues as GitHub issues
- Feature requests with: use case, expected impact, estimated effort
- Security issues through Security Policy
Maintained By: David Prats