@hiai-gg/docsmint 0.6.5 → 0.6.7

package/README.md

@@ -40,7 +40,32 @@ server.
 - **Own the full stack**: application data, vectors, graph, queue, and files run
   on infrastructure you control.
 
-## What's new in DocsMint 0.6.2?
+## What's new in DocsMint 0.6.7?
+
+- **Reliable HTTPS sessions.** Every protected SvelteKit route accepts Better
+  Auth's secure production cookie as well as the local-development cookie.
+- **Cleaner retrieval.** Deleted documents are excluded before exact, lexical,
+  fuzzy, vector, chunk, and graph ranking.
+- **Explicit GraphRAG providers.** Entity extraction requires its own
+  chat-completion URL and never sends chat requests to an embedding endpoint.
+- **Safer self-host defaults.** Auth origins are validated configuration, the
+  SeaweedFS Filer UI binds to loopback, folder moves refresh knowledge
+  metadata, and backups exclude `.env`.
+
+DocsMint 0.6.7 includes the safe index recovery introduced in 0.6.6:
+
+- **Safe explicit index recovery.** Admin document reindexing keeps the active
+  generation searchable until a new generation has passed embedding, graph,
+  summary, and finalize stages.
+- **Truthful queue admission.** Maintenance requests force a replacement
+  generation and report an error when durable enqueue fails instead of
+  returning a false-positive success.
+- **Verified MCP distribution.** The official MCP Registry manifest, npm stdio
+  package, hosted Streamable HTTP endpoint, bundled Skill, prompts, resources,
+  and 17-tool catalog remain one versioned contract.
+
+DocsMint 0.6.6 includes the registry metadata fixes released in 0.6.3-0.6.5
+and the complete MCP foundation introduced in 0.6.2:
 
 - **Official MCP identity.** DocsMint now publishes the verified
   `io.github.HiAi-gg/docsmint` registry identity for both the npm stdio server

package/dist/backend/index.js

@@ -77709,6 +77709,7 @@ var init_config_schema = __esm(() => {
     WEBHOOK_SECRET: exports_external2.string().min(1, "WEBHOOK_SECRET must not be empty").default("change-me-to-random-32-chars").refine((val) => val !== "change-me-to-random-32-chars", "WEBHOOK_SECRET must be set in production"),
     BETTER_AUTH_URL: exports_external2.string().default("http://localhost:50700"),
     CORS_ORIGINS: exports_external2.string().optional(),
+    TRUSTED_ORIGINS: exports_external2.string().optional(),
     WEB_PORT: exports_external2.coerce.number().default(50701),
     EMBEDDING_BASE_URL: exports_external2.string().optional(),
     EMBEDDING_API_KEY: exports_external2.string().optional(),
@@ -192960,7 +192961,7 @@ var auth = betterAuth({
   }),
   secret: config3.BETTER_AUTH_SECRET,
   baseURL: config3.BETTER_AUTH_URL,
-  trustedOrigins: process.env.TRUSTED_ORIGINS ? process.env.TRUSTED_ORIGINS.split(",").map((s2) => s2.trim()) : ["http://localhost:50701", "http://127.0.0.1:50701"],
+  trustedOrigins: config3.TRUSTED_ORIGINS ? config3.TRUSTED_ORIGINS.split(",").map((origin) => origin.trim()).filter(Boolean) : ["http://localhost:50701", "http://127.0.0.1:50701"],
   emailAndPassword: {
     enabled: true
   },
@@ -194473,7 +194474,7 @@ async function claimEnqueueSlot(docId, workspaceId) {
     return true;
   }
 }
-async function enqueueReembed(docIds, workspaceId) {
+async function enqueueReembed(docIds, workspaceId, options = {}) {
   const unique = new Set;
   for (const id2 of docIds) {
     if (typeof id2 !== "string" || id2.trim().length === 0)
@@ -194482,9 +194483,10 @@ async function enqueueReembed(docIds, workspaceId) {
   }
   let pushed = 0;
   for (const id2 of unique) {
-    if (await claimEnqueueSlot(id2, workspaceId)) {
-      enqueueEmbedding(id2, "interactive", workspaceId);
-      pushed += 1;
+    if (options.bypassDedup || await claimEnqueueSlot(id2, workspaceId)) {
+      const queued = await enqueueEmbedding(id2, options.source ?? "interactive", workspaceId, { forceNewGeneration: options.forceNewGeneration });
+      if (queued)
+        pushed += 1;
     }
   }
   return pushed;
@@ -194620,14 +194622,20 @@ var adminRoutes = new Elysia({ prefix: "/api/admin" }).post("/reindex/:docId", a
       set2.status = 404;
       return { error: "Document not found" };
     }
-    await withTenant(adminTenantContextBound(), async (tx) => {
-      await tx.delete(documentEmbeddings).where(eq(documentEmbeddings.documentId, params.docId));
+    const enqueued = await enqueueReembed([params.docId], undefined, {
+      bypassDedup: true,
+      forceNewGeneration: true,
+      source: "reindex"
     });
-    enqueueReembed([params.docId]);
+    if (enqueued !== 1) {
+      set2.status = 503;
+      return { error: "Failed to queue document reindex" };
+    }
     return {
       success: true,
       documentId: params.docId,
-      message: "Existing embeddings cleared and document re-queued"
+      enqueued,
+      message: "Document reindex queued with a new generation"
     };
   } catch (err) {
     logger3.error({ err, docId: params.docId }, "Admin reindex failed");
@@ -229059,8 +229067,8 @@ var folderRoutes = new Elysia({ prefix: "/api/folders" }).get("/:id", async ({ p
       set2.status = 404;
       return { error: "Folder not found" };
     }
-    if (parsed.data.name !== undefined) {
-      reembedDocsInFolder(params2.id, userId, ctx.workspaceId).catch((err) => logger3.warn({ err, folderId: params2.id }, "Failed to enqueue re-embedding for folder rename"));
+    if (parsed.data.name !== undefined || parsed.data.parentId !== undefined || parsed.data.categoryId !== undefined) {
+      reembedDocsInFolder(params2.id, userId, ctx.workspaceId).catch((err) => logger3.warn({ err, folderId: params2.id }, "Failed to enqueue re-embedding for folder metadata change"));
       invalidateDocListCache(userId);
     }
     return result.updated;
@@ -229912,7 +229920,7 @@ async function resolveVisibleIds(ctx, ids, adapter, scope = _buildGraphVisibilit
     id: documents.id,
     ownerId: documents.ownerId,
     visibility: documents.visibility
-  }).from(documents).where(and(inArray(documents.id, ids), scope.kind === "admin" ? undefined : scope.kind === "public" ? eq(documents.visibility, "public") : scope.kind === "share" ? inArray(documents.id, scope.allowedDocumentIds) : or(eq(documents.ownerId, scope.ownerId), eq(documents.visibility, "public")))));
+  }).from(documents).where(and(inArray(documents.id, ids), isNull(documents.deletedAt), scope.kind === "admin" ? undefined : scope.kind === "public" ? eq(documents.visibility, "public") : scope.kind === "share" ? inArray(documents.id, scope.allowedDocumentIds) : or(eq(documents.ownerId, scope.ownerId), eq(documents.visibility, "public")))));
   return new Set(rows.filter((row) => _isGraphDocumentVisible(scope, {
     id: row.id,
     ownerId: row.ownerId,
@@ -230354,6 +230362,7 @@ async function retrieveExact(ctx, plan, limit, execute, scope) {
 			1.0::double precision AS score
 		FROM documents d
 		WHERE d.owner_id = ${ctx.userId}
+			AND d.deleted_at IS NULL
 			${scope}
 			AND (
 				lower(trim(d.title)) = lower(trim(${plan.normalized}))
@@ -230381,6 +230390,7 @@ async function retrieveFts(ctx, plan, limit, execute, scope) {
 				ts_rank(d.search_vector, websearch_to_tsquery('english', ${plan.normalized})) AS score
 			FROM documents d
 			WHERE d.owner_id = ${ctx.userId}
+				AND d.deleted_at IS NULL
 				${scope}
 				AND d.search_vector @@ websearch_to_tsquery('english', ${plan.normalized})
 			UNION ALL
@@ -230388,6 +230398,7 @@ async function retrieveFts(ctx, plan, limit, execute, scope) {
 				ts_rank(d.search_vector_simple, websearch_to_tsquery('simple', ${plan.normalized})) AS score
 			FROM documents d
 			WHERE d.owner_id = ${ctx.userId}
+				AND d.deleted_at IS NULL
 				${scope}
 				AND d.search_vector_simple @@ websearch_to_tsquery('simple', ${plan.normalized})
 		)
@@ -230406,6 +230417,7 @@ async function retrieveFuzzy(ctx, plan, limit, minimum, execute, scope) {
 			similarity(d.title, ${plan.normalized})::double precision AS score
 		FROM documents d
 		WHERE d.owner_id = ${ctx.userId}
+			AND d.deleted_at IS NULL
 			${scope}
 			AND d.title % ${plan.normalized}
 			AND similarity(d.title, ${plan.normalized}) >= ${minimum}
@@ -230440,6 +230452,7 @@ async function retrieveVector(ctx, plan, limit, minimum, chunkLimit, execute, pr
 			FROM document_embeddings de
 			JOIN documents d ON d.id = de.document_id
 			WHERE d.owner_id = ${ctx.userId}
+				AND d.deleted_at IS NULL
 				${scope}
 				AND d.active_embedding_generation IS NOT NULL
 				AND de.generation_id = d.active_embedding_generation
@@ -231172,6 +231185,7 @@ async function hydrateResults(ctx, items, includeChunks, query, allowedDocumentI
 					JOIN documents d ON d.id = de.document_id
 					WHERE de.document_id IN (${sql.join(ids.map((id3) => sql`${id3}`), sql`, `)})
 						AND ${tenantOwnerSql("d", ctx)}
+						AND d.deleted_at IS NULL
 						AND d.active_embedding_generation IS NOT NULL
 						AND de.generation_id = d.active_embedding_generation
 						AND de.is_valid = true
@@ -233294,13 +233308,13 @@ var extractionOutputSchema = exports_external2.object({
   entities: exports_external2.array(exports_external2.unknown())
 });
 async function callEntityExtractionLLM(text4, options) {
-  const primaryBase = options.llmBaseUrl ?? config3.GRAPH_EXTRACT_BASE_URL ?? config3.EMBEDDING_BASE_URL;
+  const primaryBase = options.llmBaseUrl ?? config3.GRAPH_EXTRACT_BASE_URL;
   const primaryExplicitKey = options.llmApiKey ?? config3.GRAPH_EXTRACT_API_KEY;
-  const primaryModel = options.llmModel ?? config3.GRAPH_EXTRACT_MODEL ?? config3.EMBEDDING_MODEL ?? "gpt-4o-mini";
+  const primaryModel = options.llmModel ?? config3.GRAPH_EXTRACT_MODEL ?? "gpt-4o-mini";
   const primaryKey = primaryBase ? resolveGraphProviderKey(primaryBase, primaryExplicitKey) : "";
-  const fallbackBase = config3.GRAPH_EXTRACT_FALLBACK_BASE_URL ?? config3.EMBEDDING_FALLBACK_BASE_URL;
+  const fallbackBase = config3.GRAPH_EXTRACT_FALLBACK_BASE_URL;
   const fallbackExplicitKey = config3.GRAPH_EXTRACT_FALLBACK_API_KEY;
-  const fallbackModel = config3.GRAPH_EXTRACT_FALLBACK_MODEL ?? config3.EMBEDDING_FALLBACK_MODEL ?? primaryModel;
+  const fallbackModel = config3.GRAPH_EXTRACT_FALLBACK_MODEL ?? primaryModel;
   const fallbackKey = fallbackBase ? resolveGraphProviderKey(fallbackBase, fallbackExplicitKey) : "";
   const providers = [];
   if (primaryBase) {
@@ -234946,7 +234960,7 @@ var swaggerConfig = {
     },
     info: {
       title: "DocsMint API",
-      version: "0.6.5",
+      version: "0.6.7",
       description: "Self-hosted AI-first documentation platform. Full-text + semantic search, version history, sharing, and folder organization.",
       contact: { name: "HiAi-gg", url: "https://github.com/HiAi-gg/docsmint" },
       license: {
@@ -234988,7 +235002,7 @@ var app = new Elysia().use(bodySizeLimit).onError(({ error: error53, set: set2 }
   set2.headers["X-Content-Type-Options"] = "nosniff";
   set2.headers["X-Frame-Options"] = "DENY";
 }).use(cors({
-  origin: config3.CORS_ORIGINS?.split(",") ?? [config3.BETTER_AUTH_URL],
+  origin: config3.CORS_ORIGINS ? config3.CORS_ORIGINS.split(",").map((origin) => origin.trim()).filter(Boolean) : [config3.BETTER_AUTH_URL],
   credentials: true,
   maxAge: 86400
 })).use(config3.NODE_ENV !== "production" ? swagger(swaggerConfig) : (e3) => e3).get("/api/health", async ({ request }) => {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hiai-gg/docsmint",
   "mcpName": "io.github.HiAi-gg/docsmint",
-  "version": "0.6.5",
+  "version": "0.6.7",
   "type": "module",
   "browser": {
     "./dist/backend-launcher.js": false,

package/packages/cli/src/index.ts

@@ -24,7 +24,7 @@ import { registerSearch } from './commands/search.js';
 import { registerSnapshot } from './commands/snapshot.js';
 import { registerUpdate } from './commands/update.js';
 
-const VERSION = '0.6.5';
+const VERSION = '0.6.7';
 
 const program = new Command();
 program.name('hiai-docs').description('CLI for the hiai-docs knowledge base').version(VERSION);

package/packages/mcp-server/src/server.ts

@@ -81,7 +81,7 @@ export interface CreateDocsmintMcpServerOptions {
 }
 
 export function createDocsmintMcpServer(options: CreateDocsmintMcpServerOptions = {}): McpServer {
-  const server = new McpServer({ name: 'docsmint', version: '0.6.5' });
+  const server = new McpServer({ name: 'docsmint', version: '0.6.7' });
   registerDocsmintMcpCapabilities(server, options.client ?? defaultClient);
   return server;
 }

package/server.json

@@ -8,12 +8,12 @@
     "source": "github",
     "id": "1249550690"
   },
-  "version": "0.6.5",
+  "version": "0.6.7",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@hiai-gg/docsmint",
-      "version": "0.6.5",
+      "version": "0.6.7",
       "transport": {
         "type": "stdio"
       },