@hiai-gg/docsmint 0.6.7 → 0.6.8

package/README.md

@@ -40,7 +40,14 @@ server.
 - **Own the full stack**: application data, vectors, graph, queue, and files run
   on infrastructure you control.
 
-## What's new in DocsMint 0.6.7?
+## What's new in DocsMint 0.6.8?
+
+- **Workspace-safe recovery.** Explicit operator reindexing carries the
+  document's workspace into every durable pipeline stage, including RLS reads.
+- **Consistent operator authentication.** Both documented admin key headers
+  bypass interactive rate limits during maintenance operations.
+
+DocsMint 0.6.8 includes the self-host reliability fixes introduced in 0.6.7:
 
 - **Reliable HTTPS sessions.** Every protected SvelteKit route accepts Better
   Auth's secure production cookie as well as the local-development cookie.

package/dist/backend/index.js

@@ -193196,11 +193196,14 @@ function createRateLimiter(config4, redisClient) {
 }
 
 // ../../backend/src/api/middleware/rate-limit.ts
-function isInternalRequest(request) {
+function isInternalRequest(request, expected = config3.HIAI_DOCS_API_KEY) {
   if (!request)
     return false;
-  const apiKey = request.headers.get("x-api-key");
-  return apiKey === config3.HIAI_DOCS_API_KEY;
+  if (!expected)
+    return false;
+  const headerKey = request.headers.get("x-api-key")?.trim();
+  const bearer = /^Bearer\s+(.+)$/i.exec(request.headers.get("authorization")?.trim() ?? "")?.[1]?.trim();
+  return headerKey === expected || bearer === expected;
 }
 function _limiterWithBypass(config4) {
   const base = createRateLimiter(config4);
@@ -194513,6 +194516,25 @@ async function loadAdminFolderDocumentIds(folderId, limit) {
     return limit > 0 ? query.limit(limit) : query;
   });
 }
+async function loadAdminDocumentTarget(documentId) {
+  const rows = await withTenant(REEMBED_ADMIN_TENANT, (tx) => tx.select({ id: documents.id, workspaceId: documents.workspaceId }).from(documents).where(eq(documents.id, documentId)).limit(1));
+  const row = rows[0];
+  return row ? { id: row.id, workspaceId: row.workspaceId ?? undefined } : undefined;
+}
+async function reembedDocumentAdminWith(documentId, loadTarget) {
+  const target2 = await loadTarget(documentId);
+  if (!target2)
+    return { found: false, enqueued: 0 };
+  const enqueued = await enqueueReembed([target2.id], target2.workspaceId, {
+    bypassDedup: true,
+    forceNewGeneration: true,
+    source: "reindex"
+  });
+  return { found: true, enqueued };
+}
+function reembedDocumentAdmin(documentId) {
+  return reembedDocumentAdminWith(documentId, loadAdminDocumentTarget);
+}
 async function reembedDocsInFolderAdminWith(folderId, loadRows) {
   const limit = config3.FOLDER_REEMBED_BATCH_SIZE;
   const rows = await loadRows(folderId, limit);
@@ -194614,27 +194636,19 @@ var adminRoutes = new Elysia({ prefix: "/api/admin" }).post("/reindex/:docId", a
     return { error: "Invalid or missing admin API key" };
   }
   try {
-    const existing = await withTenant(adminTenantContextBound(), async (tx) => {
-      const rows = await tx.select({ id: documents.id }).from(documents).where(eq(documents.id, params.docId)).limit(1);
-      return rows.length > 0;
-    });
-    if (!existing) {
+    const result = await reembedDocumentAdmin(params.docId);
+    if (!result.found) {
       set2.status = 404;
       return { error: "Document not found" };
     }
-    const enqueued = await enqueueReembed([params.docId], undefined, {
-      bypassDedup: true,
-      forceNewGeneration: true,
-      source: "reindex"
-    });
-    if (enqueued !== 1) {
+    if (result.enqueued !== 1) {
       set2.status = 503;
       return { error: "Failed to queue document reindex" };
     }
     return {
       success: true,
       documentId: params.docId,
-      enqueued,
+      enqueued: result.enqueued,
       message: "Document reindex queued with a new generation"
     };
   } catch (err) {
@@ -234960,7 +234974,7 @@ var swaggerConfig = {
     },
     info: {
       title: "DocsMint API",
-      version: "0.6.7",
+      version: "0.6.8",
       description: "Self-hosted AI-first documentation platform. Full-text + semantic search, version history, sharing, and folder organization.",
       contact: { name: "HiAi-gg", url: "https://github.com/HiAi-gg/docsmint" },
       license: {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hiai-gg/docsmint",
   "mcpName": "io.github.HiAi-gg/docsmint",
-  "version": "0.6.7",
+  "version": "0.6.8",
   "type": "module",
   "browser": {
     "./dist/backend-launcher.js": false,

package/packages/cli/src/index.ts

@@ -24,7 +24,7 @@ import { registerSearch } from './commands/search.js';
 import { registerSnapshot } from './commands/snapshot.js';
 import { registerUpdate } from './commands/update.js';
 
-const VERSION = '0.6.7';
+const VERSION = '0.6.8';
 
 const program = new Command();
 program.name('hiai-docs').description('CLI for the hiai-docs knowledge base').version(VERSION);

package/packages/mcp-server/src/server.ts

@@ -81,7 +81,7 @@ export interface CreateDocsmintMcpServerOptions {
 }
 
 export function createDocsmintMcpServer(options: CreateDocsmintMcpServerOptions = {}): McpServer {
-  const server = new McpServer({ name: 'docsmint', version: '0.6.7' });
+  const server = new McpServer({ name: 'docsmint', version: '0.6.8' });
   registerDocsmintMcpCapabilities(server, options.client ?? defaultClient);
   return server;
 }

package/server.json

@@ -8,12 +8,12 @@
     "source": "github",
     "id": "1249550690"
   },
-  "version": "0.6.7",
+  "version": "0.6.8",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@hiai-gg/docsmint",
-      "version": "0.6.7",
+      "version": "0.6.8",
       "transport": {
         "type": "stdio"
       },