Context-Persistance

The server uses `better-sqlite3` with prepared statements for database operations, which effectively prevents common SQL injection vulnerabilities. Communication occurs via standard I/O (`StdioServerTransport`), meaning no network ports are directly exposed by this server instance. Entity extraction and search queries rely on regex and FTS5 `MATCH` clauses, treating user input as literal search terms rather than executable code. The database is stored locally in the user's home directory. While FTS5 queries with very complex syntax could potentially be used for local resource exhaustion, the overall design for a local-only server interacting with Copilot appears robust against common remote attack vectors and data manipulation.