feat(mcp): timestamp search, delete-by-query, slash-command docs; chore: untrack local build/venv dirs

[jose-compu]

Summary

Ships 0.7.8 MCP improvements: optional ISO timestamp bounds on logosdb_search (wired to Node searchTsRange), semantic delete via logosdb_delete with query / search_top_k / match_rank, and root README + .claude/commands docs for Claude Code slash flows. Stops tracking accidentally committed build-san/, build-fuzz/, and .venv-test/ and ignores them going forward.

Closes #94, closes #95, closes #96

Changes

• MCP logosdb_search: optional ts_from, ts_to, candidate_k for timestamp-window search (feat(mcp): expose timestamp-range search (search_ts_range / from_ts, to_ts) #94)
• MCP logosdb_delete: delete by id or by natural-language query with optional search_top_k / match_rank (feat(mcp) or docs: semantic delete / forget-by-query vs ID-only logosdb_delete #96)
• mcp/src/store.ts: declare searchTsRange on the local LogosDB typing
• README: slash-commands subsection, MCP “Available tools” table, roadmap 0.7.8, repository contents (.claude/commands/) (docs: document Claude Code slash commands (/index, /search, /forget) in main README #95)
• .claude/commands/search.md and forget.md updated for new parameters
• mcp/README.md: tool table aligned with new parameters
• Version 0.7.8 across CMake, logosdb.h, pyproject.toml, mcp / nodejs / n8n packages; CHANGELOG entry
• .gitignore: build-san/, build-fuzz/, .venv-test/; remove those trees from the git index (files remain on disk)

Type of Change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update
• Performance improvement
• Refactoring (no functional changes)

Testing

• Unit tests added/updated
• Integration tests pass
• Manual testing performed

Describe the tests you ran:

• mcp/: npm install --ignore-scripts, npm run build (tsc)
• (Recommended before merge): ctest --output-on-failure, pytest from a clean build/ as in CI

Checklist

• Code compiles without warnings on GCC and Clang
• Tests pass (ctest --output-on-failure, pytest)
• Benchmarks run if performance-related
• CHANGELOG updated for user-facing changes
• Documentation updated (README, headers, guides)
• PR title follows conventional commit style (feat:, fix:, docs:, etc.)

Additional Notes

• logosdb_delete: callers must supply either id or query, not both. By-id delete still requires the namespace handle to be open (same as before); query-based delete can open an existing on-disk namespace using the embedding dimension from the query vector.
• logosdb_search: timestamp filtering is active when ts_from and/or ts_to is non-empty; otherwise behavior matches the previous plain semantic search.
• Repo hygiene: git rm --cached only untracks paths; contributors may still have local build-san, build-fuzz, .venv-test folders until they delete them manually if desired.
• If this PR does not include the gitignore / index cleanup, drop those bullets and narrow the title to the MCP/docs/version slice only.

[jose-compu]

@copilot resolve the merge conflicts in this pull request

[Copilot]

@copilot resolve the merge conflicts in this pull request

Merged main (0.7.7 security hardening) into this branch and resolved all conflicts in commit 452e63a:

• Version files (CMakeLists.txt, logosdb.h, package.json × 3, pyproject.toml, package-lock.json): kept 0.7.8
• CHANGELOG: 0.7.8 entry first, followed by the 0.7.7 entry from main
• mcp/src/index.ts: applied clampTopK from the 0.7.7 security import while keeping the 0.7.8 timestamp-range search logic intact
• New files from main: mcp/src/security.ts, mcp/src/security.test.ts, mcp/.npmignore, tools/fuzz_jsonl_metadata.cpp

Also added permissions: contents: read to the fuzz-smoke-jsonl CI job (CodeQL finding, b133e44). TypeScript builds cleanly (tsc exits 0).