@hiai-gg/docsmint 0.8.3 → 0.8.4

package/README.md

@@ -6,7 +6,7 @@ Write and organize notes, guides, and project documentation in one workspace.
 Find answers with search that understands related concepts, then give your
 agents access to the same documents through MCP, REST, the SDK, or CLI.
 
-**[Try managed DocsMint](https://docsmint.com)** to get started without
+**[Connect DocsMint Cloud](https://docsmint.com/mcp/connect?source=github_mcp)** to get started without
 operating the stack, or **[self-host with Docker](#quickstart)** to run the
 Apache-2.0 application on your own infrastructure.
 
@@ -32,6 +32,32 @@ Apache-2.0 application on your own infrastructure.
 
 <img width="1920" height="974" alt="DocsMint installable document workspace" src="https://github.com/user-attachments/assets/94701d01-a361-4ca1-b16d-de2a0c64d684" />
 
+## Connect your AI agent
+
+Connect DocsMint Cloud instantly or use your own self-hosted deployment. Search,
+read, create, organize and update persistent knowledge through MCP with hybrid
+retrieval, reranking and GraphRAG.
+
+**Recommended: [DocsMint Cloud setup](https://docsmint.com/mcp/connect?source=github_mcp).**
+No server installation is required. Sign up or log in, choose your workspace,
+create an MCP/API credential in the authenticated browser UI, follow your client's
+instructions, and verify the connection. Hosted MCP follows your plan and
+workspace permissions. Prefer workspace-bound or category-scoped credentials.
+
+The Cloud endpoint is `https://docsmint.com/mcp` (Streamable HTTP). OAuth-capable
+clients discover authorization and open DocsMint login and consent in the browser.
+Choose your workspace and explicit scopes; the authorization code uses PKCE S256.
+Access tokens expire after one hour; reconnect through browser authorization when
+they expire (no refresh tokens). API-key clients
+send `Authorization: Bearer <key>`. Credentials cannot create or elevate other
+credentials; lifecycle management belongs to the signed-in browser session.
+
+**Self-hosted alternative:** run [DocsMint with Docker](#quickstart), create an API
+key in its browser UI, and configure `HIAI_DOCS_URL` and `HIAI_DOCS_API_KEY` for
+`npx --yes --package @hiai-gg/docsmint docsmint-mcp`. The npm package is a stdio
+bridge to your running deployment, not a server installer. See the
+[MCP guide](packages/mcp-server/README.md) for client configuration.
+
 ## Why DocsMint?
 
 - **Keep knowledge easy to edit.** Use a rich visual editor or Markdown;
@@ -47,25 +73,26 @@ Apache-2.0 application on your own infrastructure.
 - **Choose how you run it.** Use [managed DocsMint](https://docsmint.com) or
   self-host the application, database, search, queues, and files.
 
-## What's new in 0.8.3?
+## What's new in 0.8.4?
 
-This maintenance release focuses on reliable saves and integrations:
+MCP discovery now explains both supported deployment choices:
 
-- Pending editor saves stay attached to the document being edited, even when
-  you switch documents.
-- Navigation waits for pending content saves; overlapping saves are serialized
-  so an older request cannot overwrite a newer edit.
-- SDK document creation retries reuse an idempotency key to prevent duplicates
-  after a lost response.
-- Workspace-wide tag management requires full write access; read-only and
-  category-scoped credentials can no longer mutate the entire tag collection.
-- Partial category API-setting updates preserve omitted permissions.
-- Public workspace share links retain their workspace context when loading
-  folders and documents.
+- DocsMint Cloud is the recommended route for connecting without running a server.
+- Self-hosted DocsMint remains the complete Apache-2.0 alternative with the same
+  npm/stdio bridge, tools, prompts, resources and public contracts.
+- Registry, LobeHub and npm descriptions include hybrid search, reranking,
+  GraphRAG and scoped document access, with source-aware onboarding links.
+- The MCP guide explains Cloud browser authorization for OAuth-capable clients,
+  existing API-key configuration and the separate self-hosted setup.
+- Release checks now verify built public exports and MCP binaries before packaging.
+- Authorization regression coverage includes mixed category scopes, external tenant
+  assertions, scoped attachment deletion, workspace tags and partial category updates.
+- A deterministic offline retrieval baseline makes evaluation repeatable without
+  claiming a change to live retrieval quality.
 
-No schema migration is added. Existing public request and response shapes
-remain supported; the tag authorization fix intentionally rejects operations
-that exceeded the caller's permissions.
+No database migration, tool redesign or SDK contract change is added. Hosted
+OAuth is a DocsMint Cloud capability; this OSS release documents how to connect
+and does not embed Cloud accounts, billing or analytics in self-hosted installs.
 
 Read the complete release history in the [changelog](CHANGELOG.md) or
 [GitHub Releases](https://github.com/HiAi-gg/docsmint/releases). See the
@@ -121,7 +148,7 @@ docker pull vgalibov/docsmint:web-latest
 docker pull vgalibov/docsmint:caddy-latest
 ```
 
-Use versioned tags `api-v0.8.3`, `web-v0.8.3`, and `caddy-v0.8.3` for
+Use versioned tags `api-v0.8.4`, `web-v0.8.4`, and `caddy-v0.8.4` for
 reproducible deploys. The quickstart still builds the Compose stack from this repository so PostgreSQL,
 Redis, and SeaweedFS start together with the application.
 
@@ -227,7 +254,7 @@ Run the published stdio bridge against your own DocsMint API:
   "mcpServers": {
     "docsmint": {
       "command": "npx",
-      "args": ["-y", "@hiai-gg/docsmint", "docsmint-mcp"],
+      "args": ["--yes", "--package", "@hiai-gg/docsmint", "docsmint-mcp"],
       "env": {
         "HIAI_DOCS_URL": "http://localhost:50700",
         "HIAI_DOCS_API_KEY": "your-global-or-category-key"

package/dist/backend/index.js

@@ -197081,6 +197081,9 @@ function canAccessContent(access, action) {
 function canManageCategories(access) {
   return !access.restricted && canAccessContent(access, "write");
 }
+function canManageWorkspaceTags(access) {
+  return canManageCategories(access);
+}
 function isAuthorizedCategory(access, categoryId) {
   if (access.externalRole && !access.restricted)
     return true;
@@ -200601,26 +200604,8 @@ var authRoutes = new Elysia({ prefix: "/api/auth" }).all("/*", async ({ request,
 init_schema2();
 init_drizzle_orm();
 init_zod();
-init_logger3();
-var createCategorySchema = exports_external2.object({
-  name: exports_external2.string().trim().min(1).max(255),
-  apiMode: exports_external2.enum(["unavailable", "global", "category"]).optional(),
-  apiPermissionRead: exports_external2.boolean().optional(),
-  apiPermissionEdit: exports_external2.boolean().optional(),
-  apiPermissionWrite: exports_external2.boolean().optional()
-});
-var updateCategorySchema = exports_external2.object({
-  name: exports_external2.string().trim().min(1).max(255).optional(),
-  order: exports_external2.number().int().nonnegative().optional(),
-  apiMode: exports_external2.enum(["unavailable", "global", "category"]).optional(),
-  apiPermissionRead: exports_external2.boolean().optional(),
-  apiPermissionEdit: exports_external2.boolean().optional(),
-  apiPermissionWrite: exports_external2.boolean().optional()
-});
-var listQuerySchema = exports_external2.object({
-  page: exports_external2.coerce.number().int().min(1).default(1),
-  limit: exports_external2.coerce.number().int().min(1).max(100).default(20)
-});
+
+// ../../backend/src/lib/category-api-access.ts
 function normalizeApiMode(apiMode) {
   if (apiMode === "category")
     return "category";
@@ -200654,6 +200639,28 @@ function buildApiAccessValues(input) {
     apiPermissionWrite
   };
 }
+
+// ../../backend/src/api/routes/categories.ts
+init_logger3();
+var createCategorySchema = exports_external2.object({
+  name: exports_external2.string().trim().min(1).max(255),
+  apiMode: exports_external2.enum(["unavailable", "global", "category"]).optional(),
+  apiPermissionRead: exports_external2.boolean().optional(),
+  apiPermissionEdit: exports_external2.boolean().optional(),
+  apiPermissionWrite: exports_external2.boolean().optional()
+});
+var updateCategorySchema = exports_external2.object({
+  name: exports_external2.string().trim().min(1).max(255).optional(),
+  order: exports_external2.number().int().nonnegative().optional(),
+  apiMode: exports_external2.enum(["unavailable", "global", "category"]).optional(),
+  apiPermissionRead: exports_external2.boolean().optional(),
+  apiPermissionEdit: exports_external2.boolean().optional(),
+  apiPermissionWrite: exports_external2.boolean().optional()
+});
+var listQuerySchema = exports_external2.object({
+  page: exports_external2.coerce.number().int().min(1).default(1),
+  limit: exports_external2.coerce.number().int().min(1).max(100).default(20)
+});
 var categoryRoutes = new Elysia({ prefix: "/api" }).get("/categories", async ({ set: set2, request }) => {
   const access = await resolveContentAccess(request);
   const ctx = access.ctx;
@@ -235042,7 +235049,7 @@ var tagRoutes = new Elysia({ prefix: "/api" }).get("/tags", async ({ set: set2,
     set2.status = 401;
     return { error: "Unauthorized" };
   }
-  if (access.restricted || !canAccessContent(access, "write")) {
+  if (!canManageWorkspaceTags(access)) {
     set2.status = 403;
     return { error: "Full workspace write access required" };
   }
@@ -235092,7 +235099,7 @@ var tagRoutes = new Elysia({ prefix: "/api" }).get("/tags", async ({ set: set2,
     set2.status = 401;
     return { error: "Unauthorized" };
   }
-  if (access.restricted || !canAccessContent(access, "write")) {
+  if (!canManageWorkspaceTags(access)) {
     set2.status = 403;
     return { error: "Full workspace write access required" };
   }
@@ -235142,7 +235149,7 @@ var tagRoutes = new Elysia({ prefix: "/api" }).get("/tags", async ({ set: set2,
     set2.status = 401;
     return { error: "Unauthorized" };
   }
-  if (access.restricted || !canAccessContent(access, "write")) {
+  if (!canManageWorkspaceTags(access)) {
     set2.status = 403;
     return { error: "Full workspace write access required" };
   }
@@ -238391,7 +238398,7 @@ var swaggerConfig = {
     },
     info: {
       title: "DocsMint API",
-      version: "0.8.3",
+      version: "0.8.4",
       description: "Self-hosted AI-native knowledge workspace and installable PWA with hybrid search, GraphRAG, REST, SDK, CLI, and MCP access for people and AI agents.",
       contact: { name: "HiAi-gg", url: "https://github.com/HiAi-gg/docsmint" },
       license: {

package/dist/mcp-cli.js

@@ -1052,7 +1052,7 @@ function registerDocsmintMcpCapabilities(server, client2) {
   registerExtendedCapabilities(server, client2, (handler11) => wrapHandler("extended", handler11));
 }
 function createDocsmintMcpServer(options = {}) {
-  const server = new McpServer({ name: "docsmint", version: "0.8.3" });
+  const server = new McpServer({ name: "docsmint", version: "0.8.4" });
   const client2 = options.docsClient ? createMcpDocsClient(options.docsClient, options.requestContext) : options.client ?? createMcpDocsClient(createDefaultDocsClient(), options.requestContext);
   registerDocsmintMcpCapabilities(server, client2);
   return server;

package/dist/mcp-server.js

@@ -1048,7 +1048,7 @@ function registerDocsmintMcpCapabilities(server, client2) {
   registerExtendedCapabilities(server, client2, (handler11) => wrapHandler("extended", handler11));
 }
 function createDocsmintMcpServer(options = {}) {
-  const server = new McpServer({ name: "docsmint", version: "0.8.3" });
+  const server = new McpServer({ name: "docsmint", version: "0.8.4" });
   const client2 = options.docsClient ? createMcpDocsClient(options.docsClient, options.requestContext) : options.client ?? createMcpDocsClient(createDefaultDocsClient(), options.requestContext);
   registerDocsmintMcpCapabilities(server, client2);
   return server;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hiai-gg/docsmint",
   "mcpName": "io.github.HiAi-gg/docsmint",
-  "version": "0.8.3",
+  "version": "0.8.4",
   "type": "module",
   "browser": {
     "./dist/backend-launcher.js": false,
@@ -15,12 +15,12 @@
     "./dist/backend-account-runtime-cleanup.js": false
   },
   "license": "Apache-2.0",
-  "description": "Self-hosted AI-native knowledge workspace and installable PWA with hybrid search, GraphRAG, REST, SDK, CLI, and MCP access for people and AI agents.",
+  "description": "Managed or self-hosted knowledge workspace for AI agents with hybrid search, reranking, GraphRAG, and scoped document tools.",
   "repository": {
     "type": "git",
     "url": "https://github.com/HiAi-gg/docsmint"
   },
-  "homepage": "https://github.com/hiai-gg/docsmint#readme",
+  "homepage": "https://docsmint.com/mcp/connect?source=npm_mcp",
   "bugs": {
     "url": "https://github.com/hiai-gg/docsmint/issues"
   },

package/packages/cli/src/index.ts

@@ -25,7 +25,7 @@ import { registerSearch } from './commands/search.js';
 import { registerSnapshot } from './commands/snapshot.js';
 import { registerUpdate } from './commands/update.js';
 
-const VERSION = '0.8.3';
+const VERSION = '0.8.4';
 
 const program = new Command();
 program.name('docsmint').description('CLI for the DocsMint knowledge workspace').version(VERSION);

package/server.json

@@ -2,15 +2,15 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.HiAi-gg/docsmint",
   "title": "DocsMint",
-  "description": "Self-hosted AI-native knowledge workspace with hybrid search, GraphRAG, and MCP.",
-  "websiteUrl": "https://docsmint.com/docs/mcp",
+  "description": "Cloud or self-hosted knowledge for AI agents: hybrid search, reranking, GraphRAG, scoped MCP tools.",
+  "websiteUrl": "https://docsmint.com/mcp/connect?source=mcp_registry",
   "repository": {
     "url": "https://github.com/HiAi-gg/docsmint",
     "source": "github",
     "id": "1249550690",
     "subfolder": "packages/mcp-server"
   },
-  "version": "0.8.3",
+  "version": "0.8.4",
   "icons": [
     {
       "src": "https://raw.githubusercontent.com/HiAi-gg/docsmint/main/frontend/static/logo-dark.png",
@@ -30,7 +30,7 @@
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@hiai-gg/docsmint",
-      "version": "0.8.3",
+      "version": "0.8.4",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"
@@ -44,12 +44,12 @@
       "environmentVariables": [
         {
           "name": "HIAI_DOCS_URL",
-          "description": "Base URL of the DocsMint API.",
+          "description": "Base URL of your running self-hosted DocsMint API. For managed Cloud use https://docsmint.com/mcp.",
           "default": "http://localhost:50700"
         },
         {
           "name": "HIAI_DOCS_API_KEY",
-          "description": "Workspace or category scoped DocsMint API key.",
+          "description": "Create an API key in your self-hosted DocsMint browser UI. Prefer workspace-bound or category-scoped credentials.",
           "isRequired": true,
           "isSecret": true
         }
@@ -63,7 +63,7 @@
       "headers": [
         {
           "name": "Authorization",
-          "description": "Bearer DocsMint API key.",
+          "description": "DocsMint Cloud: no self-hosting required. OAuth-capable clients use browser authorization discovered at the hosted endpoint. API-key clients: sign up or log in at https://docsmint.com/mcp/connect?source=mcp_registry and create a workspace-bound or category-scoped MCP/API credential in the authenticated browser UI. Enter Bearer <key>. Credential management requires a browser session; MCP cannot create or elevate credentials. Self-hosted users should use the stdio package.",
           "isRequired": true,
           "isSecret": true
         },
@@ -81,7 +81,7 @@
       "license": "Apache-2.0",
       "licenseUrl": "https://www.apache.org/licenses/LICENSE-2.0",
       "licenseFile": "https://github.com/HiAi-gg/docsmint/blob/main/LICENSE",
-      "documentationUrl": "https://docsmint.com/docs/mcp",
+      "documentationUrl": "https://docsmint.com/mcp/connect?source=mcp_registry",
       "catalog": {
         "tools": 17,
         "prompts": 2,