@hiai-gg/hiai-docs 0.0.1 → 0.0.6

package/.github/workflows/ci.yml

@@ -29,6 +29,22 @@ jobs:
       - uses: oven-sh/setup-bun@v2
         with:
           bun-version: latest
+      - name: Configure workspaces for CI
+        run: |
+          bun -e "
+            const fs = require('fs');
+            const pkg = JSON.parse(fs.readFileSync('package.json', 'utf8'));
+            pkg.workspaces = pkg.workspaces.filter(w => !w.includes('hiai-ui'));
+            fs.writeFileSync('package.json', JSON.stringify(pkg, null, 2));
+          "
+          bun -e "
+            const fs = require('fs');
+            const pkg = JSON.parse(fs.readFileSync('frontend/package.json', 'utf8'));
+            if (pkg.dependencies && pkg.dependencies['@hiai-gg/hiai-ui']) {
+              pkg.dependencies['@hiai-gg/hiai-ui'] = '^0.0.1';
+            }
+            fs.writeFileSync('frontend/package.json', JSON.stringify(pkg, null, 2));
+          "
       - run: bun install
       - run: bun run lint
 
@@ -43,6 +59,22 @@ jobs:
       - uses: oven-sh/setup-bun@v2
         with:
           bun-version: latest
+      - name: Configure workspaces for CI
+        run: |
+          bun -e "
+            const fs = require('fs');
+            const pkg = JSON.parse(fs.readFileSync('package.json', 'utf8'));
+            pkg.workspaces = pkg.workspaces.filter(w => !w.includes('hiai-ui'));
+            fs.writeFileSync('package.json', JSON.stringify(pkg, null, 2));
+          "
+          bun -e "
+            const fs = require('fs');
+            const pkg = JSON.parse(fs.readFileSync('frontend/package.json', 'utf8'));
+            if (pkg.dependencies && pkg.dependencies['@hiai-gg/hiai-ui']) {
+              pkg.dependencies['@hiai-gg/hiai-ui'] = '^0.0.1';
+            }
+            fs.writeFileSync('frontend/package.json', JSON.stringify(pkg, null, 2));
+          "
       - run: bun install
       - run: bun run typecheck
 
@@ -86,6 +118,22 @@ jobs:
       - uses: oven-sh/setup-bun@v2
         with:
           bun-version: latest
+      - name: Configure workspaces for CI
+        run: |
+          bun -e "
+            const fs = require('fs');
+            const pkg = JSON.parse(fs.readFileSync('package.json', 'utf8'));
+            pkg.workspaces = pkg.workspaces.filter(w => !w.includes('hiai-ui'));
+            fs.writeFileSync('package.json', JSON.stringify(pkg, null, 2));
+          "
+          bun -e "
+            const fs = require('fs');
+            const pkg = JSON.parse(fs.readFileSync('frontend/package.json', 'utf8'));
+            if (pkg.dependencies && pkg.dependencies['@hiai-gg/hiai-ui']) {
+              pkg.dependencies['@hiai-gg/hiai-ui'] = '^0.0.1';
+            }
+            fs.writeFileSync('frontend/package.json', JSON.stringify(pkg, null, 2));
+          "
       - run: bun install
       - run: cd packages/db && bun run db:migrate
       - run: bun run test
@@ -96,9 +144,32 @@ jobs:
   docker-build:
     name: Docker Build & Scan
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+      - name: Configure workspaces for CI
+        run: |
+          bun -e "
+            const fs = require('fs');
+            const pkg = JSON.parse(fs.readFileSync('package.json', 'utf8'));
+            pkg.workspaces = pkg.workspaces.filter(w => !w.includes('hiai-ui'));
+            fs.writeFileSync('package.json', JSON.stringify(pkg, null, 2));
+          "
+          bun -e "
+            const fs = require('fs');
+            const pkg = JSON.parse(fs.readFileSync('frontend/package.json', 'utf8'));
+            if (pkg.dependencies && pkg.dependencies['@hiai-gg/hiai-ui']) {
+              pkg.dependencies['@hiai-gg/hiai-ui'] = '^0.0.1';
+            }
+            fs.writeFileSync('frontend/package.json', JSON.stringify(pkg, null, 2));
+          "
 
       # Materialise a synthetic .env so `docker compose config` resolves vars
       - name: Prepare .env for compose validation
@@ -185,34 +256,32 @@ jobs:
 
       # F) Security scan — Trivy (preferred; Docker Scout as fallback)
       - name: Security scan with Trivy
-        uses: aquasecurity/trivy-action@0.24.0
+        uses: aquasecurity/trivy-action@v0.24.0
         with:
           image-ref: hiai-docs/api:ci-${{ github.sha }}
-          format: "table"
+          format: "sarif"
           exit-code: "0"   # warn-only on PRs; tighten to "1" on protected branches
           ignore-unfixed: true
           vuln-type: "os,library"
           severity: "CRITICAL,HIGH"
           output: "trivy-api.sarif"
       - name: Upload Trivy SARIF (backend)
-        if: always()
         uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: trivy-api.sarif
           category: trivy-api
 
       - name: Security scan frontend with Trivy
-        uses: aquasecurity/trivy-action@0.24.0
+        uses: aquasecurity/trivy-action@v0.24.0
         with:
           image-ref: hiai-docs/web:ci-${{ github.sha }}
-          format: "table"
+          format: "sarif"
           exit-code: "0"
           ignore-unfixed: true
           vuln-type: "os,library"
           severity: "CRITICAL,HIGH"
           output: "trivy-web.sarif"
       - name: Upload Trivy SARIF (frontend)
-        if: always()
         uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: trivy-web.sarif
@@ -245,19 +314,49 @@ jobs:
           docker push vgalibov/hiai-docs:web-${{ github.ref_name }}
 
   # ---------------------------------------------------------------------------
-  # 5. Publish NPM — publish package `@hiai-gg/hiai-docs` to NPM
+  # 5. Publish NPM — publish package `@hiai-gg/hiai-docs` to NPM (Tokenless OIDC)
   # ---------------------------------------------------------------------------
   publish-npm:
     name: Publish NPM Package
     needs: [lint, typecheck, test, docker-build]
     if: startsWith(github.ref, 'refs/tags/v')
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
     steps:
       - uses: actions/checkout@v4
+
       - uses: oven-sh/setup-bun@v2
         with:
           bun-version: latest
 
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          registry-url: "https://registry.npmjs.org"
+
+      # npm OIDC trusted publishing (tokenless) requires npm >= 11.5.1.
+      - name: Upgrade npm for OIDC trusted publishing
+        run: npm install -g npm@latest
+
+      - name: Configure workspaces for CI
+        run: |
+          bun -e "
+            const fs = require('fs');
+            const pkg = JSON.parse(fs.readFileSync('package.json', 'utf8'));
+            pkg.workspaces = pkg.workspaces.filter(w => !w.includes('hiai-ui'));
+            fs.writeFileSync('package.json', JSON.stringify(pkg, null, 2));
+          "
+          bun -e "
+            const fs = require('fs');
+            const pkg = JSON.parse(fs.readFileSync('frontend/package.json', 'utf8'));
+            if (pkg.dependencies && pkg.dependencies['@hiai-gg/hiai-ui']) {
+              pkg.dependencies['@hiai-gg/hiai-ui'] = '^0.0.1';
+            }
+            fs.writeFileSync('frontend/package.json', JSON.stringify(pkg, null, 2));
+          "
+
       - name: Install dependencies
         run: bun install
 
@@ -277,7 +376,11 @@ jobs:
             fs.writeFileSync('package.json', JSON.stringify(pkg, null, 2));
           "
 
-      - name: Publish to NPM
-        run: bun publish --no-git-checks --access public
-        env:
-          NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }}
+      - name: Publish to npm
+        run: |
+          version=$(node -p "require('./package.json').version")
+          if npm view "@hiai-gg/hiai-docs@${version}" version >/dev/null 2>&1; then
+            echo "::notice::@hiai-gg/hiai-docs@${version} already on npm — skipping."
+          else
+            npm publish --access public --provenance --ignore-scripts
+          fi

package/Dockerfile.backend

@@ -2,17 +2,19 @@ FROM oven/bun:1.3.14-alpine AS base
 WORKDIR /app
 
 # --- Install dependencies ---
-# A root install creates /app/node_modules with hoisted deps. Then per-workspace
-# installs populate each package's local node_modules. This is required because
-# bun's resolver, when run from a workspace package, only looks in that
-# package's own node_modules (not the parent's) — and the build runs from
-# /app/backend/, so it needs backend/node_modules with workspace symlinks.
+# A single root install creates /app/node_modules with hoisted deps and
+# populates the workspace symlinks for backend/, frontend/, and packages/db/.
+# We then run per-workspace `bun install` for backend and packages/db so each
+# package gets its own local node_modules. Bun's bundler looks in the
+# workspace's own node_modules first when running from that directory, so the
+# per-workspace installs are what the build/runtime actually resolve against
+# (with the root node_modules providing hoisted fallback for shared deps and
+# workspace:* links like @hiai-docs/db).
 FROM base AS deps
 COPY package.json bun.lock* ./
 COPY backend/package.json ./backend/
 COPY frontend/package.json ./frontend/
 COPY packages/db/package.json ./packages/db/
-COPY .packages/hiai-ui /packages/hiai-ui
 ENV BUN_INSTALL_CONCURRENCY=1
 RUN bun install --no-verify
 RUN bun install --cwd backend --no-verify
@@ -24,10 +26,10 @@ RUN bun install --cwd packages/db --no-verify
 # pull packages/db from the build context because the deps stage only has
 # its package.json (just enough for `bun install` to discover it).
 FROM base AS build
+COPY package.json tsconfig.json ./
 COPY --from=deps /app/node_modules ./node_modules
 COPY --from=deps /app/backend/node_modules ./backend/node_modules
 COPY --from=deps /app/packages/db/node_modules ./packages/db/node_modules
-COPY --from=deps /packages/hiai-ui /packages/hiai-ui
 COPY packages/db/ ./packages/db/
 COPY backend/src ./backend/src
 COPY backend/tsconfig.json ./backend/

package/backend/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@hiai-docs/backend",
-  "version": "0.1.0",
+  "version": "0.0.6",
   "private": true,
   "type": "module",
   "license": "MIT",
   "scripts": {
     "dev": "bun run --watch src/index.ts",
-    "build": "bun build src/index.ts --outdir dist --target bun",
+    "build": "bun build src/index.ts --outdir dist --target bun --external drizzle-orm --external drizzle-orm/* --external postgres",
     "start": "bun run dist/index.js",
     "lint": "biome check src/",
     "lint:fix": "biome check --fix src/",

package/backend/src/index.ts

@@ -69,7 +69,7 @@ const swaggerConfig = {
 	documentation: {
 		info: {
 			title: "hiai-docs API",
-			version: "0.1.0",
+			version: "0.0.6",
 			description:
 				"Self-hosted AI-first documentation platform. Full-text + semantic search, version history, sharing, and folder organization.",
 			contact: { name: "hiai-gg", url: "https://github.com/hiai-gg/hiai-docs" },

package/frontend/Dockerfile

@@ -6,18 +6,16 @@ COPY package.json bun.lock* ./
 COPY frontend/package.json ./frontend/
 COPY backend/package.json ./backend/
 COPY packages/db/package.json ./packages/db/
-COPY .packages/hiai-ui /packages/hiai-ui
 ENV BUN_INSTALL_CONCURRENCY=1
 RUN bun install --no-verify
-RUN cd /packages/hiai-ui && bunx svelte-kit sync
 
 # Build
 FROM base AS build
+COPY package.json tsconfig.json ./
 COPY --from=deps /app/node_modules ./node_modules
 COPY --from=deps /app/frontend/node_modules ./frontend/node_modules
 COPY --from=deps /app/backend/node_modules ./backend/node_modules
 COPY --from=deps /app/packages/db/node_modules ./packages/db/node_modules
-COPY --from=deps /packages/hiai-ui /packages/hiai-ui
 COPY frontend/ ./frontend/
 COPY packages/db/ ./packages/db/
 

package/frontend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hiai-docs/frontend",
-  "version": "0.1.0",
+  "version": "0.0.6",
   "private": true,
   "type": "module",
   "license": "MIT",
@@ -10,11 +10,11 @@
     "preview": "vite preview",
     "lint": "biome check src/",
     "lint:fix": "biome check --fix src/",
-    "typecheck": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json",
-    "test": "bun test --path-ignore-patterns='*node_modules*' src/"
+    "typecheck": "paraglide-js compile --project ./project.inlang --outdir ./src/lib/paraglide && svelte-kit sync && svelte-check --tsconfig ./tsconfig.json",
+    "test": "paraglide-js compile --project ./project.inlang --outdir ./src/lib/paraglide && svelte-kit sync && bun test --path-ignore-patterns='*node_modules*' src/"
   },
   "dependencies": {
-    "@hiai-gg/hiai-ui": "workspace:*",
+    "@hiai-gg/hiai-ui": "^0.0.1",
     "@inlang/paraglide-js": "^2.19.0",
     "@tiptap/core": "^3.26.1",
     "@tiptap/extension-code-block-lowlight": "^3.26.1",
@@ -67,4 +67,4 @@
     "typescript": "^5.8.0",
     "vite": "^8.0.16"
   }
-}
+}

package/frontend/project.inlang/settings.json

@@ -5,7 +5,7 @@
     "./node_modules/@inlang/plugin-m-function-matcher/dist/index.js"
   ],
   "plugin.inlang.messageFormat": {
-    "pathPattern": "/mnt/ai_data/projects/hiai-docs/frontend/messages/{languageTag}.json"
+    "pathPattern": "./messages/{languageTag}.json"
   },
   "sourceLanguageTag": "en",
   "languageTags": ["en"]

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@hiai-gg/hiai-docs",
-  "version": "0.0.1",
+  "version": "0.0.6",
   "type": "module",
   "license": "MIT",
   "description": "The lightweight, AI-native self-hosted knowledge base — built-in RAG, hybrid semantic search, and a clean REST API for AI agents.",
   "repository": {
     "type": "git",
-    "url": "https://github.com/hiai-gg/hiai-docs.git"
+    "url": "https://github.com/HiAi-gg/hiai-docs"
   },
   "homepage": "https://github.com/hiai-gg/hiai-docs#readme",
   "bugs": {
@@ -36,4 +36,4 @@
     "start": "docker compose up -d",
     "stop": "docker compose down"
   }
-}
+}

package/package.public.json

@@ -1,12 +1,12 @@
 {
   "name": "@hiai-gg/hiai-docs",
-  "version": "0.0.1",
+  "version": "0.0.6",
   "type": "module",
   "license": "MIT",
   "description": "The lightweight, AI-native self-hosted knowledge base — built-in RAG, hybrid semantic search, and a clean REST API for AI agents.",
   "repository": {
     "type": "git",
-    "url": "https://github.com/hiai-gg/hiai-docs.git"
+    "url": "https://github.com/HiAi-gg/hiai-docs"
   },
   "homepage": "https://github.com/hiai-gg/hiai-docs#readme",
   "bugs": {

package/packages/db/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hiai-docs/db",
-  "version": "0.1.0",
+  "version": "0.0.6",
   "private": true,
   "type": "module",
   "license": "MIT",

package/packages/db/src/migrations/0000_nice_bedlam.sql

@@ -1,3 +1,6 @@
+CREATE EXTENSION IF NOT EXISTS vector;
+CREATE EXTENSION IF NOT EXISTS pg_trgm;
+--> statement-breakpoint
 CREATE TABLE "accounts" (
 	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
 	"user_id" uuid NOT NULL,

package/run_ci.sh

@@ -0,0 +1,17 @@
+cd /mnt/ai_data/projects/hiai-docs
+bun -e "
+  const fs = require('fs');
+  const pkg = JSON.parse(fs.readFileSync('package.json', 'utf8'));
+  pkg.workspaces = pkg.workspaces.filter(w => !w.includes('hiai-ui'));
+  fs.writeFileSync('package.json', JSON.stringify(pkg, null, 2));
+"
+bun -e "
+  const fs = require('fs');
+  const pkg = JSON.parse(fs.readFileSync('frontend/package.json', 'utf8'));
+  if (pkg.dependencies && pkg.dependencies['@hiai-gg/hiai-ui']) {
+    pkg.dependencies['@hiai-gg/hiai-ui'] = '^0.0.1';
+  }
+  fs.writeFileSync('frontend/package.json', JSON.stringify(pkg, null, 2));
+"
+bun install
+bun run test

package/.claude/settings.local.json

@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(git mv *)",
-      "Bash(echo \"rm exit: $?\")",
-      "Bash(sudo rm -rf .svelte-kit/types)",
-      "Bash(echo \"exit $?\")",
-      "Bash(docker exec *)",
-      "Bash(curl -fsS -o /dev/null -w \"frontend:%{http_code}\\\\n\" http://localhost:50701/)",
-      "Bash(curl -fsS -o /dev/null -w \"api-health:%{http_code}\\\\n\" http://localhost:50700/api/health)",
-      "Bash(bunx @biomejs/biome check --max-diagnostics=none 'frontend/src/routes/\\(app\\)/+page.svelte' 'frontend/src/routes/\\(app\\)/docs/[id]/+page.svelte' frontend/src/lib/components/sidebar/TagList.svelte frontend/src/lib/components/sidebar/RecentDocs.svelte frontend/src/lib/stores/tag-store.svelte.ts frontend/src/lib/components/editor/EditorToolbar.svelte frontend/src/lib/components/editor/LinkDialog.svelte frontend/src/lib/api/settings.ts backend/src/api/routes/attachments.ts backend/src/api/routes/documents.ts)",
-      "mcp__plugin_playwright_playwright__browser_navigate",
-      "Bash(timeout 300 bunx playwright install chromium)",
-      "Bash(timeout 300 bunx playwright install chrome)",
-      "Bash(curl -s -o /dev/null -w \"GET /api/health -> %{http_code}\\\\n\" http://localhost:50700/api/health)",
-      "Bash(curl -s -o /dev/null -w \"GET /api/auth/get-session -> %{http_code}\\\\n\" http://localhost:50700/api/auth/get-session)",
-      "Bash(curl -s -o /dev/null -w \"GET /api/attachments/00000000-0000-0000-0000-000000000000/raw -> %{http_code} \\(404=route exists, no such id\\)\\\\n\" http://localhost:50700/api/attachments/00000000-0000-0000-0000-000000000000/raw)",
-      "Bash(curl -s -o /dev/null -w \"GET /api/documents \\(no auth\\) -> %{http_code} \\(401 expected\\)\\\\n\" http://localhost:50700/api/documents)",
-      "Bash(timeout 180 bun add --cwd frontend @tiptap/extension-table@^3.26.1)",
-      "Bash(timeout 180 bun add --cwd frontend @tiptap/extension-table@3.26.1)",
-      "Bash(curl -s -o /dev/null -w \"/register -> %{http_code}\\\\n\" http://localhost:50701/register)",
-      "Bash(curl -s -o /dev/null -w \"/docs/probe -> %{http_code}\\\\n\" http://localhost:50701/docs/00000000-0000-0000-0000-000000000000)",
-      "Bash(rm -f cj.txt img.png got_proxy.bin got_direct.bin)",
-      "Bash(curl -s -c cj.txt -b cj.txt -X POST http://localhost:50701/api/auth/sign-up/email -H 'Content-Type: application/json' -d '{\"name\":\"Img Test\",\"email\":\"__TRACKED_VAR__\",\"password\":\"password12345\"}' -w '\\\\nHTTP %{http_code}\\\\n')",
-      "Bash(curl -s -o /dev/null -w \"/search -> %{http_code}\\\\n\" \"http://localhost:50701/search?q=test\")",
-      "Bash(curl -s -o /dev/null -w \"/ \\(dash\\) -> %{http_code}\\\\n\" http://localhost:50701/)",
-      "Bash(curl -s -o /dev/null -w \"/ -> %{http_code}\\\\n\" http://localhost:50701/)",
-      "Bash(curl -s -o /dev/null -w \"/login -> %{http_code}\\\\n\" http://localhost:50701/login)",
-      "Bash(curl -s \"http://localhost:50701/api/share/PnWzf7hNeAZA_Aqdntkl3\")",
-      "Bash(python3 -c ' *)",
-      "Bash(git checkout *)",
-      "Bash(grep -n '>Import<\\\\|Import$\\\\|>All<\\\\|All$\\\\|<Upload' \"frontend/src/routes/\\(app\\)/+page.svelte\")",
-      "Bash(git --no-pager diff stash@{0} -- \"frontend/src/routes/\\(app\\)/docs/[id]/+page.svelte\")",
-      "Bash(git --no-pager diff \"stash@{0}\" -- \":\\(literal\\)frontend/src/routes/\\(app\\)/docs/[id]/+page.svelte\")",
-      "Bash(git --no-pager diff \"stash@{0}\" -- backend/src/api/routes/documents.ts)",
-      "Bash(git --no-pager diff \"stash@{0}\" -- frontend/package.json)",
-      "Bash(git --no-pager diff \"stash@{0}\" -- backend/src/lib/auth.ts)",
-      "Bash(git --no-pager diff \"stash@{0}\" -- backend/src/lib/config.ts)",
-      "Bash(git --no-pager diff \"stash@{0}\" -- frontend/src/routes/+layout.svelte)",
-      "Bash(git --no-pager diff \"stash@{0}\" -- frontend/src/routes/settings/+page.svelte)",
-      "Bash(grep -iE \"\\\\.env|secret|credential|\\\\.pem|\\\\.key$|id_rsa\")",
-      "Bash(git rm *)",
-      "Bash(awk '{print $NF}')",
-      "Bash(grep -ivE \"change-me|process\\\\.env|envSchema|z\\\\.string|placeholder|example|//|\\\\*|_SECRET=|_KEY=|_PASSWORD=|aipassword|minioadmin|description:|api-key-user|API_KEY=$|SECRET=change\")",
-      "Bash(grep -iE \"\\\\.env$|secret|\\\\.pem|\\\\.key$|credential\")",
-      "Bash(curl -s -o /dev/null -w \"/docs test -> %{http_code}\\\\n\" \"http://localhost:50701/docs/test\")",
-      "Bash(grep -n \"^## \\\\|^---$\" README.md)"
-    ]
-  },
-  "enabledMcpjsonServers": [
-    "playwright",
-    "stitch",
-    "sequential-thinking",
-    "firecrawl",
-    "rag",
-    "context7",
-    "mempalace",
-    "websearch",
-    "grep_app"
-  ]
-}