[Naoray]

MCP searches now try relative paths against every configured root and accept a root’s final name. A unique allowed match is used; missing matches list the roots, and ambiguous matches return AMBIGUITY with candidate paths. Existing confinement and local-content checks still apply. Unavailable and outside-root paths share a refusal message that never reveals the canonical target, including through broken symlinks.

Search accepts query as a single-phrasing alternative to queries; the deserializer rejects both together. Search and extract advertise flat object schemas with optional selection properties for client compatibility. Extract’s strict selection decision table remains enforced in code.

The tools/list integration assertion intentionally checks optional queries/query properties instead of a top-level oneOf. It also rejects top-level oneOf, anyOf and allOf for every advertised tool. This covers extract as well as search.

Documentation explains these inputs, ambiguity for . with multiple roots, exact case and Unicode spelling for root-name shortcuts, text-only startup, and the observed indexing memory peak. The unsupported query-memory figure is removed; existing absolute setup paths and three-tool documentation are retained.

Validation:

• Tests cover root-name collisions, case and Unicode spelling, second-root matches, ambiguity, missing paths, traversal, symlinks, hidden local-content paths, non-disclosing errors, query parsing, strict extraction selections, and the public tools/list schemas.
• cargo fmt --all
• cargo clippy --workspace --all-targets --offline -- -D warnings
• cargo test --workspace --offline --no-fail-fast --quiet

Tests requiring real model weights and timing measurements remain ignored; no model weights were downloaded.