@hiai-gg/docsmint 0.8.6 → 0.8.8

package/README.md

@@ -10,15 +10,22 @@ agents access to the same documents through MCP, REST, the SDK, or CLI.
 operating the stack, or **[self-host with Docker](#quickstart)** to run the
 Apache-2.0 application on your own infrastructure.
 
-[![Apache-2.0 License](https://img.shields.io/badge/License-Apache--2.0-green.svg)](https://github.com/HiAi-gg/docsmint/blob/main/LICENSE)
+[![Apache-2.0 License](https://img.shields.io/badge/License-Apache--2.0-green.svg)](LICENSE)
 [![Release](https://img.shields.io/github/v/release/hiai-gg/docsmint?sort=semver)](https://github.com/hiai-gg/docsmint/releases)
 [![npm](https://img.shields.io/npm/v/@hiai-gg/docsmint?logo=npm)](https://www.npmjs.com/package/@hiai-gg/docsmint)
+[![Docker Pulls](https://img.shields.io/docker/pulls/vgalibov/docsmint?logo=docker)](https://hub.docker.com/r/vgalibov/docsmint)
+[![Stars](https://img.shields.io/github/stars/hiai-gg/docsmint)](https://github.com/hiai-gg/docsmint/stargazers)
 [![CI](https://github.com/hiai-gg/docsmint/actions/workflows/ci.yml/badge.svg)](https://github.com/hiai-gg/docsmint/actions/workflows/ci.yml)
-
-[GitHub](https://github.com/HiAi-gg/docsmint) ·
-[Docker Hub](https://hub.docker.com/r/vgalibov/docsmint) ·
-[npm](https://www.npmjs.com/package/@hiai-gg/docsmint) ·
-[LobeHub MCP](https://lobehub.com/mcp/hiai-gg-docsmint)
+[![Bun](https://img.shields.io/badge/Runtime-Bun_1.4-black?logo=bun&logoColor=white)](https://bun.sh)
+[![TypeScript](https://img.shields.io/badge/TypeScript-6.x-3178C6?logo=typescript&logoColor=white)](https://www.typescriptlang.org)
+[![Svelte](https://img.shields.io/badge/Svelte-5.x-FF3E00?logo=svelte&logoColor=white)](https://svelte.dev)
+[![Elysia](https://img.shields.io/badge/Elysia-1.4-lightgrey?logo=elysia&logoColor=white)](https://elysiajs.com)
+[![Tailwind_CSS](https://img.shields.io/badge/Tailwind_CSS-v4-06B6D4?logo=tailwindcss&logoColor=white)](https://tailwindcss.com)
+[![Drizzle_ORM](https://img.shields.io/badge/Drizzle_ORM-0.45-C5F74F?logo=drizzle&logoColor=black)](https://orm.drizzle.team)
+[![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg)](CONTRIBUTING.md)
+[![MCP Badge](https://lobehub.com/badge/mcp/hiai-gg-docsmint)](https://lobehub.com/mcp/hiai-gg-docsmint)
+[![DocsMint Cloud](https://img.shields.io/badge/DocsMint_Cloud-Connect-16a34a)](https://docsmint.com/mcp/connect?source=github_mcp)
+[![MCP Registry](https://img.shields.io/badge/MCP_Registry-Listed-0891b2)](https://registry.modelcontextprotocol.io/v0.1/servers/io.github.HiAi-gg%2Fdocsmint/versions/latest)
 
 <img width="1920" height="974" alt="DocsMint installable document workspace" src="https://github.com/user-attachments/assets/94701d01-a361-4ca1-b16d-de2a0c64d684" />
 
@@ -35,17 +42,21 @@ instructions, and verify the connection. Hosted MCP follows your plan and
 workspace permissions. Prefer workspace-bound or category-scoped credentials.
 
 The Cloud endpoint is `https://docsmint.com/mcp` (Streamable HTTP). OAuth-capable
-clients discover authorization and open DocsMint login and consent in the browser.
-Choose your workspace and explicit scopes; the authorization code uses PKCE S256.
-Access tokens expire after one hour; reconnect through browser authorization when
-they expire (no refresh tokens). API-key clients
-send `Authorization: Bearer <key>`. Credentials cannot create or elevate other
-credentials; lifecycle management belongs to the signed-in browser session.
+clients discover the hosted resource and authorization-server metadata; the current
+authorization metadata advertises client registration at
+`https://docsmint.com/oauth/register` (DCR). The hosted flow uses authorization-code
+PKCE S256; metadata advertises only the `authorization_code` grant and no token
+endpoint client authentication. CIMD is not part of the current contract. Browser consent binds the
+one-hour opaque access token to the selected workspace, optional category, and
+requested scopes. Refresh tokens are not issued. API-key clients can instead send
+`Authorization: Bearer <key>` with an MCP/API credential created in the authenticated
+browser UI. Credentials cannot create or elevate other credentials; lifecycle
+management belongs to the signed-in browser session.
 
 **Self-hosted alternative:** run [DocsMint with Docker](#quickstart), create an API
 key in its browser UI, and configure `HIAI_DOCS_URL` and `HIAI_DOCS_API_KEY` for
 `npx --yes --package @hiai-gg/docsmint docsmint-mcp`. The npm package is a stdio
-bridge to your running deployment, not a server installer. See the
+bridge to your own API, not a server installer or hosted OAuth server. See the
 [MCP guide](https://github.com/HiAi-gg/docsmint/blob/main/packages/mcp-server/README.md) for client configuration.
 
 ## Why DocsMint?
@@ -63,19 +74,20 @@ bridge to your running deployment, not a server installer. See the
 - **Choose how you run it.** Use [managed DocsMint](https://docsmint.com) or
   self-host the application, database, search, queues, and files.
 
-## What's new in 0.8.6?
-
-This patch completes the publication improvements from 0.8.5:
+## What's new in 0.8.8?
 
-- Corrected Docker Hub description updates and direct Docker links in LobeHub.
-- Clearer guides for choosing DocsMint Cloud or a self-hosted workspace.
-- One public package, `@hiai-gg/docsmint`, for the SDK, CLI, and MCP bridge.
-- A Docker image guide that distinguishes the API, web application, and Caddy proxy.
-- Consistent release notes and package documentation, with links that also work on npm.
+- Clarify that hosted MCP authorization belongs to DocsMint Cloud and that the
+  stdio bridge uses an API key to connect to your own DocsMint API.
+- Synchronize MCP Registry and LobeHub descriptions with the current Cloud
+  authorization contract and the self-hosted boundary.
+- Keep the published catalog aligned with the implementation: 21 tools,
+  2 prompts, and 3 resources, with regression checks for route and metadata drift.
+- Update vulnerability reporting details and clarify that OAuth protocol flaws
+  remain in scope for the product where they occur.
 
-No database migration or public API change is required. Read the
-[release notes](https://github.com/HiAi-gg/docsmint/releases/tag/v0.8.6),
-[changelog](https://github.com/HiAi-gg/docsmint/blob/main/CHANGELOG.md), or [roadmap](https://github.com/HiAi-gg/docsmint/blob/main/docs/ROADMAP.md).
+No MCP capabilities, existing integrations, or database schema change in this
+release. See the [release notes](https://github.com/HiAi-gg/docsmint/releases/tag/v0.8.8)
+and [changelog](https://github.com/HiAi-gg/docsmint/blob/main/CHANGELOG.md).
 
 ## Install with an AI agent
 
@@ -127,7 +139,7 @@ docker pull vgalibov/docsmint:web-latest
 docker pull vgalibov/docsmint:caddy-latest
 ```
 
-Use versioned tags `api-v0.8.6`, `web-v0.8.6`, and `caddy-v0.8.6` for
+Use versioned tags `api-v0.8.8`, `web-v0.8.8`, and `caddy-v0.8.8` for
 reproducible deploys. Caddy is the supporting reverse proxy with rate limiting;
 it is separate from the API and web application. The quickstart still builds the Compose stack from this repository so PostgreSQL,
 Redis, and SeaweedFS start together with the application.
@@ -212,7 +224,7 @@ command and configuration precedence.
 ## Connect an MCP client
 
 Give agents a secure path to search, read, and maintain your knowledge without
-database or filesystem access. DocsMint publishes 17 tools plus ready-made
+database or filesystem access. DocsMint publishes 21 tools plus ready-made
 research prompts, scoped resources, and a document-manager skill.
 
 ### Hosted DocsMint

package/dist/backend/index.js

@@ -231613,6 +231613,106 @@ function stripQuotes(value) {
   return trimmed;
 }
 
+// ../../backend/src/lib/graph/search-query.ts
+init_drizzle_orm();
+
+// ../../backend/src/search/query-analyzer.ts
+var CYRILLIC_LETTER = /\p{Script=Cyrillic}/u;
+var LATIN_LETTER = /\p{Script=Latin}/u;
+var LETTER2 = /\p{L}/u;
+function normalizeQuery(query) {
+  const normalized = query.normalize("NFC");
+  let result = "";
+  let inQuotedPhrase = false;
+  let escaped = false;
+  let pendingWhitespace = false;
+  for (const character of normalized) {
+    if (inQuotedPhrase) {
+      result += character;
+      if (escaped) {
+        escaped = false;
+      } else if (character === "\\") {
+        escaped = true;
+      } else if (character === '"') {
+        inQuotedPhrase = false;
+      }
+      continue;
+    }
+    if (character === '"') {
+      if (pendingWhitespace && result.length > 0)
+        result += " ";
+      pendingWhitespace = false;
+      result += character;
+      inQuotedPhrase = true;
+      continue;
+    }
+    if (/\s/u.test(character)) {
+      pendingWhitespace = true;
+      continue;
+    }
+    if (pendingWhitespace && result.length > 0)
+      result += " ";
+    pendingWhitespace = false;
+    result += character;
+  }
+  return result;
+}
+function detectLanguage(query) {
+  const normalized = normalizeQuery(query);
+  let cyrillic = 0;
+  let latin = 0;
+  for (const token of normalized.split(" ")) {
+    if (token.includes("/"))
+      continue;
+    for (const character of token) {
+      if (!LETTER2.test(character))
+        continue;
+      if (CYRILLIC_LETTER.test(character))
+        cyrillic += 1;
+      else if (LATIN_LETTER.test(character))
+        latin += 1;
+    }
+  }
+  if (cyrillic > 0 && latin > 0)
+    return "mixed";
+  if (cyrillic > 0)
+    return "ru";
+  if (latin > 0)
+    return "en";
+  return "und";
+}
+function analyzeQuery(query) {
+  return {
+    original: query,
+    normalized: normalizeQuery(query),
+    detectedLanguage: detectLanguage(query),
+    translations: [],
+    synonyms: [],
+    concepts: [],
+    namedEntities: []
+  };
+}
+
+// ../../backend/src/lib/graph/search-query.ts
+function graphSearchDocumentQuery(ctx, documentIds, query) {
+  const normalized = normalizeQuery(query ?? "");
+  const english = sql`websearch_to_tsquery('english', ${normalized})`;
+  const simple = sql`websearch_to_tsquery('simple', ${normalized})`;
+  const exact = sql`lower(trim(d.title)) = lower(${normalized})`;
+  const match2 = normalized ? sql`AND (${exact} OR d.search_vector @@ ${english} OR d.search_vector_simple @@ ${simple})` : sql``;
+  const order = normalized ? sql`${exact} DESC, GREATEST(ts_rank(d.search_vector, ${english}), ts_rank(d.search_vector_simple, ${simple})) DESC,` : sql``;
+  const allowed2 = documentIds.length ? sql`d.id IN (${sql.join(documentIds.map((id3) => sql`${id3}`), sql`, `)})` : sql`false`;
+  return sql`
+  SELECT d.id, d.title, d.content
+  FROM documents d
+  WHERE ${tenantOwnerSql("d", ctx)}
+   AND d.deleted_at IS NULL
+   AND ${allowed2}
+   ${match2}
+  ORDER BY ${order} d.id ASC
+ `;
+}
+
 // ../../backend/src/api/routes/graph.ts
 init_logger3();
 var entitiesQuerySchema = exports_external2.object({
@@ -231621,8 +231721,11 @@ var entitiesQuerySchema = exports_external2.object({
 var relatedParamsSchema = exports_external2.object({
   docId: exports_external2.string().min(1)
 });
+var relatedQuerySchema = exports_external2.object({
+  limit: exports_external2.coerce.number().int().min(1).max(100).default(20)
+});
 var graphSearchBodySchema = exports_external2.object({
-  query: exports_external2.string().optional(),
+  query: exports_external2.string().max(2000).optional(),
   docIds: exports_external2.array(exports_external2.string().min(1)).min(1).max(50),
   maxResults: exports_external2.number().int().min(1).max(100).optional()
 });
@@ -231668,7 +231771,7 @@ var graphRoutes = new Elysia({ prefix: "/api/graph" }).get("/entities", async ({
     tags: ["Graph"],
     summary: "List entities linked to a document"
   }
-}).get("/related/:docId", async ({ params: params2, set: set2, request }) => {
+}).get("/related/:docId", async ({ params: params2, query, set: set2, request }) => {
   const rl = await applyRateLimit(request, set2);
   if (!rl.ok)
     return rl.response;
@@ -231687,6 +231790,11 @@ var graphRoutes = new Elysia({ prefix: "/api/graph" }).get("/entities", async ({
     set2.status = 400;
     return { error: "Invalid params", details: parsed.error.flatten() };
   }
+  const parsedQuery = relatedQuerySchema.safeParse(query);
+  if (!parsedQuery.success) {
+    set2.status = 400;
+    return { error: "Invalid query", details: parsedQuery.error.flatten() };
+  }
   try {
     const seedIds = await allowedGraphDocumentIds(access, [
       parsed.data.docId
@@ -231698,7 +231806,7 @@ var graphRoutes = new Elysia({ prefix: "/api/graph" }).get("/entities", async ({
     if (!config3.GRAPH_SEARCH_ENABLED)
       return { related: [] };
     const related = await fetchRelatedDocuments(ctx, parsed.data.docId, access);
-    return { related };
+    return { related: related.slice(0, parsedQuery.data.limit) };
   } catch (err) {
     logger3.warn({ err, docId: parsed.data.docId }, "Graph related lookup failed \u2014 returning empty");
     return { related: [] };
@@ -231737,7 +231845,7 @@ var graphRoutes = new Elysia({ prefix: "/api/graph" }).get("/entities", async ({
     if (!config3.GRAPH_SEARCH_ENABLED) {
       return { query, entities: [], relatedDocs: [] };
     }
-    const result = await graphRagLookup(ctx, docIds, maxResults, access);
+    const result = await graphRagLookup(ctx, docIds, maxResults, access, query);
     return { query, ...result };
   } catch (err) {
     logger3.warn({ err, docIds: docIds.length }, "Graph RAG search failed \u2014 returning empty");
@@ -231805,7 +231913,7 @@ async function fetchRelatedDocuments(ctx, docId, access) {
   const allowedIds = access ? await allowedGraphDocumentIds(access, neighborIds) : await filterToOwnedDocuments(ctx, neighborIds);
   return current.filter((neighbor) => allowedIds.has(neighbor.docId));
 }
-async function graphRagLookup(ctx, docIds, maxResults, access) {
+async function graphRagLookup(ctx, docIds, maxResults, access, query) {
   const sql6 = await getGraphDb();
   if (!sql6)
     return { entities: [], relatedDocs: [] };
@@ -231838,12 +231946,13 @@ async function graphRagLookup(ctx, docIds, maxResults, access) {
   if (ownedNeighborIds.length === 0) {
     return { entities: Array.from(entityMap.values()), relatedDocs: [] };
   }
-  const rows = await loadDocumentSummaries(ctx, ownedNeighborIds);
+  const rows = await loadDocumentSummaries(ctx, ownedNeighborIds, query);
   const byId = new Map;
   for (const r4 of rows)
     byId.set(r4.id, r4);
   const relatedDocs = [];
-  for (const id3 of ownedNeighborIds) {
+  const rankedIds = query?.trim() ? rows.map((row) => row.id) : ownedNeighborIds;
+  for (const id3 of rankedIds) {
     const meta3 = neighborMap.get(id3);
     const row = byId.get(id3);
     if (!meta3 || !row)
@@ -231919,19 +232028,11 @@ function currentGraphNeighbors(expansion, activeGenerations) {
   }
   return [...current.values()].sort((left, right) => left.hopDistance - right.hopDistance || left.docId.localeCompare(right.docId));
 }
-async function loadDocumentSummaries(ctx, docIds) {
+async function loadDocumentSummaries(ctx, docIds, query) {
   if (docIds.length === 0)
     return [];
   return withTenant(ctx, async (tx) => {
-    return tx.select({
-      id: documents.id,
-      title: documents.title,
-      content: documents.content,
-      folderId: documents.folderId,
-      folderName: folders.name,
-      createdAt: documents.createdAt,
-      updatedAt: documents.updatedAt
-    }).from(documents).leftJoin(folders, eq(folders.id, documents.folderId)).where(and(tenantOwnerCondition(documents.ownerId, documents.workspaceId, ctx), inArray(documents.id, docIds), isNull(documents.deletedAt)));
+    return await tx.execute(graphSearchDocumentQuery(ctx, docIds, query));
   });
 }
 function cypherDocReplace(cypher, docId) {
@@ -231958,50 +232059,6 @@ function stripQuotes2(value) {
   return trimmed;
 }
 
-// ../../backend/src/api/routes/health.ts
-function createHealthRoutes(dependencies) {
-  return new Elysia().get("/api/health", async ({ request, set: set2 }) => {
-    const ip = request.headers.get("x-forwarded-for")?.split(",")[0]?.trim() ?? request.headers.get("x-real-ip") ?? "unknown";
-    const rateLimit = await dependencies.rateLimiter(ip, request);
-    set2.headers = {
-      "X-RateLimit-Remaining": String(rateLimit.remaining),
-      ...rateLimit.retryAfter ? { "Retry-After": String(rateLimit.retryAfter) } : {}
-    };
-    if (!rateLimit.allowed) {
-      set2.status = 429;
-      return { error: "Too many requests" };
-    }
-    const [databaseAvailable, redisAvailable, storageAvailable] = await Promise.all([
-      dependencies.databaseAvailable(),
-      dependencies.redisAvailable(),
-      dependencies.storageAvailable()
-    ]);
-    const queueAvailable = dependencies.queueAvailable();
-    const readiness = evaluatePipelineHealth({
-      databaseAvailable,
-      redisAvailable,
-      storageAvailable,
-      queueAvailable,
-      recoveryAvailable: true,
-      oldestInteractiveWaitMs: 0,
-      interactiveSloMs: Number.POSITIVE_INFINITY,
-      graphAvailable: true
-    });
-    if (readiness.status === "unhealthy")
-      set2.status = 503;
-    return {
-      status: readiness.status === "unhealthy" ? "unhealthy" : "ok",
-      service: "docsmint",
-      timestamp: new Date().toISOString(),
-      database: databaseAvailable ? "ok" : "error",
-      redis: redisAvailable ? "ok" : "error",
-      storage: storageAvailable ? "ok" : "error",
-      queue: queueAvailable ? "ok" : "error",
-      ...readiness.reasons.length ? { reasons: readiness.reasons } : {}
-    };
-  });
-}
-
 // ../../backend/src/api/routes/keys.ts
 init_schema2();
 init_drizzle_orm();
@@ -232493,83 +232550,6 @@ function evaluateConfidence(results, _plan, thresholds = { vectorMinSimilarity:
   return { confident: reasons.length === 0, reasons };
 }
 
-// ../../backend/src/search/query-analyzer.ts
-var CYRILLIC_LETTER = /\p{Script=Cyrillic}/u;
-var LATIN_LETTER = /\p{Script=Latin}/u;
-var LETTER2 = /\p{L}/u;
-function normalizeQuery(query) {
-  const normalized = query.normalize("NFC");
-  let result = "";
-  let inQuotedPhrase = false;
-  let escaped = false;
-  let pendingWhitespace = false;
-  for (const character of normalized) {
-    if (inQuotedPhrase) {
-      result += character;
-      if (escaped) {
-        escaped = false;
-      } else if (character === "\\") {
-        escaped = true;
-      } else if (character === '"') {
-        inQuotedPhrase = false;
-      }
-      continue;
-    }
-    if (character === '"') {
-      if (pendingWhitespace && result.length > 0)
-        result += " ";
-      pendingWhitespace = false;
-      result += character;
-      inQuotedPhrase = true;
-      continue;
-    }
-    if (/\s/u.test(character)) {
-      pendingWhitespace = true;
-      continue;
-    }
-    if (pendingWhitespace && result.length > 0)
-      result += " ";
-    pendingWhitespace = false;
-    result += character;
-  }
-  return result;
-}
-function detectLanguage(query) {
-  const normalized = normalizeQuery(query);
-  let cyrillic = 0;
-  let latin = 0;
-  for (const token of normalized.split(" ")) {
-    if (token.includes("/"))
-      continue;
-    for (const character of token) {
-      if (!LETTER2.test(character))
-        continue;
-      if (CYRILLIC_LETTER.test(character))
-        cyrillic += 1;
-      else if (LATIN_LETTER.test(character))
-        latin += 1;
-    }
-  }
-  if (cyrillic > 0 && latin > 0)
-    return "mixed";
-  if (cyrillic > 0)
-    return "ru";
-  if (latin > 0)
-    return "en";
-  return "und";
-}
-function analyzeQuery(query) {
-  return {
-    original: query,
-    normalized: normalizeQuery(query),
-    detectedLanguage: detectLanguage(query),
-    translations: [],
-    synonyms: [],
-    concepts: [],
-    namedEntities: []
-  };
-}
-
 // ../../backend/src/search/query-expander.ts
 init_zod();
 init_config();
@@ -235935,6 +235915,53 @@ var webhookRoutes = new Elysia({ prefix: "/api/webhooks" }).post("/storage", asy
   return { received: true };
 });
 
+// ../../backend/src/api/register-routes.ts
+var selfHostedApiRoutes = new Elysia().use(authRoutes).use(tagRoutes).use(categoryRoutes).use(attachmentRoutes).use(shareRoutes).use(searchRoutes).use(documentRoutes).use(folderRoutes).use(versionRoutes).use(webhookRoutes).use(collaborationRoutes).use(graphRoutes).use(keysRoutes).use(pluginsRoutes).use(visibilityRoutes).use(adminRoutes).use(metricsRoutes);
+
+// ../../backend/src/api/routes/health.ts
+function createHealthRoutes(dependencies) {
+  return new Elysia().get("/api/health", async ({ request, set: set2 }) => {
+    const ip = request.headers.get("x-forwarded-for")?.split(",")[0]?.trim() ?? request.headers.get("x-real-ip") ?? "unknown";
+    const rateLimit = await dependencies.rateLimiter(ip, request);
+    set2.headers = {
+      "X-RateLimit-Remaining": String(rateLimit.remaining),
+      ...rateLimit.retryAfter ? { "Retry-After": String(rateLimit.retryAfter) } : {}
+    };
+    if (!rateLimit.allowed) {
+      set2.status = 429;
+      return { error: "Too many requests" };
+    }
+    const [databaseAvailable, redisAvailable, storageAvailable] = await Promise.all([
+      dependencies.databaseAvailable(),
+      dependencies.redisAvailable(),
+      dependencies.storageAvailable()
+    ]);
+    const queueAvailable = dependencies.queueAvailable();
+    const readiness = evaluatePipelineHealth({
+      databaseAvailable,
+      redisAvailable,
+      storageAvailable,
+      queueAvailable,
+      recoveryAvailable: true,
+      oldestInteractiveWaitMs: 0,
+      interactiveSloMs: Number.POSITIVE_INFINITY,
+      graphAvailable: true
+    });
+    if (readiness.status === "unhealthy")
+      set2.status = 503;
+    return {
+      status: readiness.status === "unhealthy" ? "unhealthy" : "ok",
+      service: "docsmint",
+      timestamp: new Date().toISOString(),
+      database: databaseAvailable ? "ok" : "error",
+      redis: redisAvailable ? "ok" : "error",
+      storage: storageAvailable ? "ok" : "error",
+      queue: queueAvailable ? "ok" : "error",
+      ...readiness.reasons.length ? { reasons: readiness.reasons } : {}
+    };
+  });
+}
+
 // ../../backend/src/lib/api-key-owner.ts
 init_schema2();
 init_config();
@@ -238398,7 +238425,7 @@ var swaggerConfig = {
     },
     info: {
       title: "DocsMint API",
-      version: "0.8.6",
+      version: "0.8.8",
       description: "Self-hosted AI-native knowledge workspace and installable PWA with hybrid search, GraphRAG, REST, SDK, CLI, and MCP access for people and AI agents.",
       contact: { name: "HiAi-gg", url: "https://github.com/HiAi-gg/docsmint" },
       license: {
@@ -238452,7 +238479,7 @@ var app = new Elysia().use(bodySizeLimit).onError(({ error: error53, set: set2 }
   redisAvailable: () => redis.ping().then(() => true, () => false),
   storageAvailable: () => storage.send(new ListBucketsCommand({})).then(() => true, () => false),
   queueAvailable: () => pipelineRuntime.workers.size === PIPELINE_STAGES.length && [...pipelineRuntime.workers.values()].every((worker2) => worker2.isRunning?.() === true)
-})).use(csrfMiddleware).use(authMiddleware).use(authRoutes).use(tagRoutes).use(categoryRoutes).use(attachmentRoutes).use(shareRoutes).use(searchRoutes).use(documentRoutes).use(folderRoutes).use(versionRoutes).use(webhookRoutes).use(collaborationRoutes).use(graphRoutes).use(keysRoutes).use(pluginsRoutes).use(visibilityRoutes).use(adminRoutes).use(metricsRoutes);
+})).use(csrfMiddleware).use(authMiddleware).use(selfHostedApiRoutes);
 app.listen({
   port: config3.API_PORT,
   development: config3.NODE_ENV !== "production",