@jagilber-org/index-server 1.28.10 → 1.28.19

package/dist/services/handlers.instructionSchema.js

@@ -49,6 +49,9 @@ const registry_1 = require("../server/registry");
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const runtimeConfig_1 = require("../config/runtimeConfig");
+const instructionSchema_1 = require("../schemas/instructionSchema");
+const instruction_1 = require("../models/instruction");
+const schemaVersion_1 = require("../versioning/schemaVersion");
 const SCHEMA_VERSION = '1.0.0';
 /**
  * Load the canonical instruction.schema.json from disk
@@ -58,7 +61,14 @@ function loadInstructionSchema() {
     return JSON.parse(fs.readFileSync(schemaPath, 'utf-8'));
 }
 /**
- * Build a minimal valid instruction entry template
+ * Build a minimal valid instruction entry template.
+ *
+ * INPUT-ONLY: every property below must be a member of INPUT_KEYS (the
+ * canonical input surface). Server-managed fields like `schemaVersion`,
+ * `sourceHash`, `createdAt`, `updatedAt` are NEVER part of this example
+ * because the canonical INPUT_SCHEMA rejects them
+ * (additionalProperties:false). For the full on-disk record shape see
+ * `buildRecordExample()`.
  */
 function buildMinimalExample() {
     return {
@@ -70,8 +80,45 @@ function buildMinimalExample() {
         requirement: "recommended",
         categories: ["example", "documentation"],
         primaryCategory: "example",
+        contentType: "instruction"
+    };
+}
+/**
+ * Build a record-shape example showing the FULL on-disk shape, including
+ * server-managed fields. Documentation-only — do NOT submit this payload
+ * to `index_add` / `index_import`; the canonical INPUT_SCHEMA strips
+ * server-managed keys.
+ */
+function buildRecordExample() {
+    const now = new Date().toISOString();
+    return {
+        // ── caller-supplied (INPUT_KEYS) ────────────────────────────────
+        id: "example-instruction-id",
+        title: "Example Instruction Title",
+        body: "Full record example with all governance metadata.",
+        priority: 50,
+        audience: "all",
+        requirement: "recommended",
+        categories: ["example", "documentation"],
+        primaryCategory: "example",
         contentType: "instruction",
-        schemaVersion: "5"
+        semanticSummary: "Example instruction demonstrating full record shape.",
+        version: "1.0.0",
+        status: "approved",
+        owner: "platform-team",
+        priorityTier: "P2",
+        classification: "internal",
+        reviewIntervalDays: 90,
+        lastReviewedAt: now,
+        nextReviewDue: now,
+        // ── server-managed (SERVER_MANAGED_KEYS) ────────────────────────
+        schemaVersion: schemaVersion_1.SCHEMA_VERSION,
+        sourceHash: "a".repeat(64),
+        createdAt: now,
+        updatedAt: now,
+        usageCount: 0,
+        firstSeenTs: now,
+        lastUsedAt: now
     };
 }
 /**
@@ -89,7 +136,7 @@ function _buildComprehensiveExample() {
         categories: ["example", "documentation", "governance"],
         primaryCategory: "governance",
         contentType: "instruction",
-        schemaVersion: "5",
+        schemaVersion: schemaVersion_1.SCHEMA_VERSION,
         version: "1.0.0",
         status: "approved",
         owner: "platform-team",
@@ -156,11 +203,15 @@ function definePromotionWorkflow() {
     ];
 }
 /**
- * Define key validation rules
+ * Define key validation rules.
+ *
+ * Each rule is annotated with `fieldClass` derived from the canonical
+ * SERVER_MANAGED_KEYS set. Callers can filter to `fieldClass === 'input'`
+ * to see only properties they may submit on `index_add` / `index_import`.
  */
 function defineValidationRules() {
     const bodyWarnLength = (0, runtimeConfig_1.getRuntimeConfig)().index.bodyWarnLength.toLocaleString('en-US');
-    return [
+    const raw = [
         { field: 'id', rule: 'Pattern', constraint: '^[a-z0-9](?:[a-z0-9-_]{0,118}[a-z0-9])?$ (120 chars max, lowercase, no leading/trailing hyphen/underscore)' },
         { field: 'id', rule: 'Uniqueness', constraint: 'Must be unique across the index' },
         { field: 'title', rule: 'Length', constraint: '1-200 characters, non-empty' },
@@ -170,8 +221,8 @@ function defineValidationRules() {
         { field: 'requirement', rule: 'Enum', constraint: 'One of: mandatory, critical, recommended, optional, deprecated' },
         { field: 'categories', rule: 'Array', constraint: '0-25 items, each 1-49 chars, lowercase, pattern: ^[a-z0-9][a-z0-9-_]{0,48}$' },
         { field: 'primaryCategory', rule: 'Reference', constraint: 'Must be a member of categories array if present' },
-        { field: 'contentType', rule: 'Enum', constraint: 'One of: instruction (default), template, workflow, reference, example, agent' },
-        { field: 'schemaVersion', rule: 'Enum', constraint: 'Currently "5"' },
+        { field: 'contentType', rule: 'Enum', constraint: `One of: ${instruction_1.CONTENT_TYPES.join(', ')}` },
+        { field: 'schemaVersion', rule: 'Enum', constraint: `Currently "${schemaVersion_1.SCHEMA_VERSION}"` },
         { field: 'sourceHash', rule: 'Pattern', constraint: 'SHA256 hex string (64 chars) when present' },
         { field: 'version', rule: 'Pattern', constraint: 'Semantic version: ^\\d+\\.\\d+\\.\\d+$ (e.g., "1.0.0")' },
         { field: 'status', rule: 'Enum', constraint: 'One of: draft, review, approved, deprecated' },
@@ -179,39 +230,30 @@ function defineValidationRules() {
         { field: 'classification', rule: 'Enum', constraint: 'One of: public, internal, restricted' },
         { field: 'reviewIntervalDays', rule: 'Range', constraint: '1-365 days' }
     ];
+    return raw.map((r) => ({
+        ...r,
+        fieldClass: instructionSchema_1.SERVER_MANAGED_KEYS.has(r.field) ? 'server-managed' : 'input',
+    }));
 }
 (0, registry_1.registerHandler)('index_schema', () => {
     const schema = loadInstructionSchema();
+    // Derive field lists from the canonical source of truth so this self-doc
+    // tool cannot drift from the validation surface. The "common optional"
+    // surface is every input-accepted property that isn't required and isn't
+    // server-managed.
+    const requiredFields = [...instructionSchema_1.REQUIRED_INPUT_KEYS];
+    const optionalFieldsCommon = [...instructionSchema_1.INPUT_KEYS]
+        .filter((k) => !instructionSchema_1.REQUIRED_INPUT_KEYS.has(k) && !instructionSchema_1.SERVER_MANAGED_KEYS.has(k))
+        .sort();
     const response = {
         generatedAt: new Date().toISOString(),
         version: SCHEMA_VERSION,
         summary: 'Instruction schema template with validation rules, examples, and promotion workflow guidance.',
         schema,
         minimalExample: buildMinimalExample(),
-        requiredFields: [
-            'id',
-            'title',
-            'body',
-            'priority',
-            'audience',
-            'requirement',
-            'categories'
-        ],
-        optionalFieldsCommon: [
-            'rationale',
-            'primaryCategory',
-            'contentType',
-            'schemaVersion',
-            'version',
-            'status',
-            'owner',
-            'priorityTier',
-            'classification',
-            'semanticSummary',
-            'reviewIntervalDays',
-            'lastReviewedAt',
-            'nextReviewDue'
-        ],
+        recordExample: buildRecordExample(),
+        requiredFields,
+        optionalFieldsCommon,
         promotionWorkflow: definePromotionWorkflow(),
         validationRules: defineValidationRules(),
         nextSteps: [

package/dist/services/handlers.search.js

@@ -32,6 +32,7 @@ const errors_1 = require("./errors");
 const runtimeConfig_1 = require("../config/runtimeConfig");
 const embeddingService_1 = require("./embeddingService");
 const safe_regex2_1 = __importDefault(require("safe-regex2"));
+const instruction_1 = require("../models/instruction");
 const SEARCH_SCHEMA = {
     type: 'object',
     required: ['keywords'],
@@ -41,7 +42,7 @@ const SEARCH_SCHEMA = {
         limit: { type: 'number', minimum: 1, maximum: 100, default: 50 },
         includeCategories: { type: 'boolean', default: false },
         caseSensitive: { type: 'boolean', default: false },
-        contentType: { type: 'string', enum: ['instruction', 'template', 'workflow', 'reference', 'example', 'agent'] }
+        contentType: { type: 'string', enum: [...instruction_1.CONTENT_TYPES] }
     },
     example: { keywords: ['build', 'validate', 'discipline'], limit: 10, includeCategories: true }
 };
@@ -242,7 +243,7 @@ function calculateRelevance(instruction, keywords, caseSensitive, includeCategor
                 score += calculateOrderedProximityBonus(normalizedCategoryText, normalizedKeywords, 4);
             }
         }
-        return { score, matchedFields: Array.from(matchedFieldSet) };
+        return { score, matchedFields: Array.from(matchedFieldSet), keywordsMatched: uniqueMatches.size };
     }
     const countMatches = (text, keyword) => {
         if (mode === 'regex') {
@@ -316,7 +317,7 @@ function calculateRelevance(instruction, keywords, caseSensitive, includeCategor
     if (uniqueMatches.size > 1) {
         score += (uniqueMatches.size - 1) * 5;
     }
-    return { score, matchedFields: Array.from(matchedFieldSet) };
+    return { score, matchedFields: Array.from(matchedFieldSet), keywordsMatched: uniqueMatches.size };
 }
 /**
  * Escape special regex characters
@@ -394,7 +395,7 @@ function performSearch(params) {
     const caseSensitive = params.caseSensitive ?? false;
     const contentType = params.contentType;
     // Validate contentType if provided
-    const validContentTypes = ['instruction', 'template', 'workflow', 'reference', 'example', 'agent'];
+    const validContentTypes = [...instruction_1.CONTENT_TYPES];
     if (contentType && !validContentTypes.includes(contentType)) {
         throw new Error(`Invalid contentType: must be one of ${validContentTypes.join(', ')}`);
     }
@@ -422,8 +423,12 @@ function performSearch(params) {
                 continue; // Skip instructions that don't match the contentType filter
             }
         }
-        const { score, matchedFields } = calculateRelevance(instruction, sanitizedKeywords, caseSensitive, includeCategories, mode, keywordContext, params.compiledRegexKeywords);
+        const { score, matchedFields, keywordsMatched } = calculateRelevance(instruction, sanitizedKeywords, caseSensitive, includeCategories, mode, keywordContext, params.compiledRegexKeywords);
         if (score > 0) {
+            // Enforce AND semantics in keyword mode: every normalized keyword must have matched
+            if (mode === 'keyword' && keywordContext && keywordsMatched < keywordContext.normalizedKeywords.length) {
+                continue;
+            }
             results.push({
                 instructionId: instruction.id,
                 relevanceScore: score,
@@ -556,7 +561,7 @@ async function handleInstructionsSearch(params) {
             if (typeof params.contentType !== 'string') {
                 throw new Error('contentType must be a string');
             }
-            const validContentTypes = ['instruction', 'template', 'workflow', 'reference', 'example', 'agent'];
+            const validContentTypes = [...instruction_1.CONTENT_TYPES];
             if (!validContentTypes.includes(params.contentType)) {
                 throw new Error(`contentType must be one of: ${validContentTypes.join(', ')}`);
             }

package/dist/services/indexLoader.js

@@ -160,6 +160,13 @@ class IndexLoader {
         // Exclude internal manifest file if present
         const MANIFEST_NAME = '_manifest.json';
         files = files.filter(f => f !== MANIFEST_NAME);
+        // Exclude bootstrap gating state files (owned by bootstrapGating.ts). These
+        // co-reside with instruction JSON in the instructions dir but are runtime
+        // state, NOT instructions. Without this filter they leak into the loader
+        // (rejected as schema-invalid) and into index_repair's disk-scan path
+        // (reported as 'missing required fields'). RCA 2026-05-07.
+        const STATE_FILES = new Set(['bootstrap.confirmed.json', 'bootstrap.pending.json']);
+        files = files.filter(f => !STATE_FILES.has(f));
         // Optional index size limit for performance (INDEX_SERVER_MAX_FILES)
         const maxFiles = IndexConfig.maxFiles;
         if (maxFiles && maxFiles > 0 && files.length > maxFiles) {

package/dist/services/instructionRecordValidation.js

@@ -1,7 +1,4 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.INSTRUCTION_INPUT_SCHEMA_REF = exports.INSTRUCTION_ID_PATTERN = exports.INSTRUCTION_ID_MAX_LENGTH = exports.InstructionValidationError = void 0;
 exports.validateInstructionIdSurface = validateInstructionIdSurface;
@@ -12,76 +9,24 @@ exports.assertValidInstructionRecord = assertValidInstructionRecord;
 exports.isInstructionValidationError = isInstructionValidationError;
 exports.sanitizeErrorDetail = sanitizeErrorDetail;
 exports.sanitizeLoadError = sanitizeLoadError;
-const ajv_1 = __importDefault(require("ajv"));
-const ajv_formats_1 = __importDefault(require("ajv-formats"));
-const json_schema_draft_07_json_1 = __importDefault(require("ajv/dist/refs/json-schema-draft-07.json"));
-const schemas_1 = require("../schemas");
+const instruction_1 = require("../models/instruction");
+const instructionSchema_1 = require("../schemas/instructionSchema");
 const classificationService_1 = require("./classificationService");
-const INPUT_SCHEMA_REF = 'index_add#input';
+const INPUT_SCHEMA_REF = instructionSchema_1.INSTRUCTION_INPUT_SCHEMA_REF;
 exports.INSTRUCTION_INPUT_SCHEMA_REF = INPUT_SCHEMA_REF;
-const REQUIRED_RECORD_KEYS = new Set([
-    'id',
-    'title',
-    'body',
-    'priority',
-    'audience',
-    'requirement',
-    'categories',
-    'sourceHash',
-    'schemaVersion',
-    'createdAt',
-    'updatedAt',
-    'version',
-    'status',
-    'owner',
-    'priorityTier',
-    'classification',
-    'lastReviewedAt',
-    'nextReviewDue',
-    'changeLog',
-    'semanticSummary',
-]);
-const ALLOWED_INPUT_KEYS = new Set([
-    'id',
-    'title',
-    'body',
-    'rationale',
-    'priority',
-    'audience',
-    'requirement',
-    'categories',
-    'primaryCategory',
-    'deprecatedBy',
-    'riskScore',
-    'reviewIntervalDays',
-    'version',
-    'owner',
-    'status',
-    'priorityTier',
-    'classification',
-    'lastReviewedAt',
-    'nextReviewDue',
-    'changeLog',
-    'semanticSummary',
-    'contentType',
-    'extensions',
-    'supersedes',
-    'createdByAgent',
-    'sourceWorkspace',
-    'mode',
-    'lax',
-]);
-const ajv = new ajv_1.default({ allErrors: true, strict: false });
-(0, ajv_formats_1.default)(ajv);
-try {
-    if (!ajv.getSchema('https://json-schema.org/draft-07/schema')) {
-        ajv.addMetaSchema(json_schema_draft_07_json_1.default, 'https://json-schema.org/draft-07/schema');
-    }
-}
-catch {
-    // Non-fatal; loader uses the same best-effort registration pattern.
-}
-const validateInstructionSchema = ajv.compile(JSON.parse(JSON.stringify(schemas_1.instructionEntry)));
+// REQUIRED_RECORD_KEYS, ALLOWED_INPUT_KEYS, and the compiled
+// validateInstructionSchema are imported from src/schemas/instructionSchema.ts,
+// which derives them from schemas/instruction.schema.json. Do not restate the
+// schema here — the prior hand-maintained copies drifted (they required 21
+// fields while the canonical schema required 8) and broke export→import
+// round-trips.
+//
+// CONTROL_KEYS are transport-layer flags that callers historically inlined
+// into the entry object as a convenience (instead of into the RPC params
+// bag). They are not data fields and are deliberately not part of the
+// canonical schema. The surface validator tolerates them but does not
+// forward them to record validation.
+const CONTROL_KEYS = new Set(['mode', 'lax']);
 class InstructionValidationError extends Error {
     validationErrors;
     hints;
@@ -164,11 +109,11 @@ function stripUndefinedAndOptionalNulls(value, key, depth = 0) {
     for (const [childKey, childValue] of Object.entries(value)) {
         if (childValue === undefined)
             continue;
-        if (childValue === null && depth === 0 && !REQUIRED_RECORD_KEYS.has(childKey))
+        if (childValue === null && depth === 0 && !instructionSchema_1.REQUIRED_RECORD_KEYS.has(childKey))
             continue;
         out[childKey] = stripUndefinedAndOptionalNulls(childValue, childKey, depth + 1); // lgtm[js/remote-property-injection] — childKey is own-property of caller-controlled entry; schema rejects unknown top-level keys downstream
     }
-    if (key && Object.keys(out).length === 0 && !REQUIRED_RECORD_KEYS.has(key))
+    if (key && Object.keys(out).length === 0 && !instructionSchema_1.REQUIRED_RECORD_KEYS.has(key))
         return undefined;
     return out;
 }
@@ -220,9 +165,6 @@ function applyWriteCompatibility(entry) {
         else if (legacyRequirementMap[upper])
             next.requirement = legacyRequirementMap[upper];
     }
-    if (next.contentType === 'chat-session') {
-        next.contentType = 'workflow';
-    }
     if (typeof next.priority !== 'number' || next.priority < 1 || next.priority > 100)
         next.priority = 50;
     return next;
@@ -268,8 +210,7 @@ const VALID_STATUS = ['approved', 'draft', 'review', 'deprecated'];
 const COERCIBLE_STATUS = ['active'];
 const VALID_PRIORITY_TIER = ['P1', 'P2', 'P3', 'P4'];
 const VALID_CLASSIFICATION = ['public', 'internal', 'restricted'];
-const VALID_CONTENT_TYPE = ['instruction', 'template', 'workflow', 'reference', 'example', 'agent'];
-const COERCIBLE_CONTENT_TYPE = ['chat-session'];
+const VALID_CONTENT_TYPE = instruction_1.CONTENT_TYPES;
 const VALID_AUDIENCE = ['individual', 'group', 'all'];
 const COERCIBLE_AUDIENCE = ['system', 'developers', 'developer', 'team', 'teams', 'users', 'dev', 'devs', 'testers', 'administrators', 'admins', 'agents', 'powershell script authors'];
 const VALID_REQUIREMENT = ['mandatory', 'critical', 'recommended', 'optional', 'deprecated'];
@@ -285,7 +226,7 @@ function validateInstructionInputEnumMembership(entry) {
     if (typeof entry.classification === 'string' && !VALID_CLASSIFICATION.includes(entry.classification)) {
         errs.push(`/classification: must be one of ${VALID_CLASSIFICATION.join(', ')}`);
     }
-    if (typeof entry.contentType === 'string' && !VALID_CONTENT_TYPE.includes(entry.contentType) && !COERCIBLE_CONTENT_TYPE.includes(entry.contentType)) {
+    if (typeof entry.contentType === 'string' && !VALID_CONTENT_TYPE.includes(entry.contentType)) {
         errs.push(`/contentType: must be one of ${VALID_CONTENT_TYPE.join(', ')}`);
     }
     if (typeof entry.audience === 'string' && !VALID_AUDIENCE.includes(entry.audience) && !COERCIBLE_AUDIENCE.includes(entry.audience.toLowerCase())) {
@@ -314,11 +255,16 @@ function validateTypedInputShape(entry) {
             if (typeof category !== 'string') {
                 errs.push(`/categories/${index}: must be a string, received ${typeof category}`);
             }
-            else if (!/^[a-z0-9][a-z0-9-_]{0,48}$/.test(category.toLowerCase())) {
+            else if (!/^[a-z0-9][a-z0-9-_]{0,48}$/.test(category)) {
                 errs.push(`/categories/${index}: must match /^[a-z0-9][a-z0-9-_]{0,48}$/`);
             }
         }
     }
+    if (typeof entry.primaryCategory === 'string' && Array.isArray(entry.categories) && entry.categories.length > 0) {
+        if (!entry.categories.includes(entry.primaryCategory)) {
+            errs.push(`/primaryCategory: must be a member of categories[]`);
+        }
+    }
     if (entry.audience !== undefined && typeof entry.audience !== 'string') {
         errs.push(`/audience: must be a string, received ${typeof entry.audience}`);
     }
@@ -343,7 +289,9 @@ function validateInstructionInputSurface(entry) {
     const validationErrors = [];
     validationErrors.push(...validateInstructionIdSurface(entry.id));
     for (const key of Object.keys(entry)) {
-        if (!ALLOWED_INPUT_KEYS.has(key)) {
+        if (CONTROL_KEYS.has(key))
+            continue; // transport flags; tolerated, not forwarded
+        if (!instructionSchema_1.INPUT_KEYS.has(key)) {
             validationErrors.push(`/: unexpected property "${key}"`);
             continue;
         }
@@ -371,11 +319,11 @@ function validateInstructionRecord(entry) {
     if (record.classification !== undefined && !['public', 'internal', 'restricted'].includes(record.classification)) {
         validationErrors.push(`/classification: invalid value "${String(record.classification)}"`);
     }
-    if (record.contentType !== undefined && !['instruction', 'template', 'workflow', 'reference', 'example', 'agent'].includes(record.contentType)) {
+    if (record.contentType !== undefined && !instruction_1.CONTENT_TYPES.includes(record.contentType)) {
         validationErrors.push(`/contentType: invalid value "${String(record.contentType)}"`);
     }
-    if (!validateInstructionSchema(record)) {
-        validationErrors.push(...(validateInstructionSchema.errors ?? []).map(formatAjvError));
+    if (!(0, instructionSchema_1.validateRecord)(record)) {
+        validationErrors.push(...(instructionSchema_1.validateRecord.errors ?? []).map(formatAjvError));
     }
     const classifierIssues = new classificationService_1.ClassificationService().validate(record);
     validationErrors.push(...classifierIssues.map((issue) => `/: ${issue}`));

package/dist/services/mcpConfig/flagCatalog.d.ts

@@ -37,7 +37,7 @@ export interface McpProfileConfig {
     mutation: boolean;
     logLevel: string;
 }
-export declare const DOCUMENTED_INDEX_SERVER_FLAGS: readonly ["INDEX_SERVER_ADD_TIMING", "INDEX_SERVER_ADMIN_API_KEY", "INDEX_SERVER_ADMIN_MAX_SESSION_HISTORY", "INDEX_SERVER_AGENT_ID", "INDEX_SERVER_ALWAYS_RELOAD", "INDEX_SERVER_ATOMIC_WRITE_BACKOFF_MS", "INDEX_SERVER_ATOMIC_WRITE_RETRIES", "INDEX_SERVER_AUDIT_LOG", "INDEX_SERVER_AUTH_KEY", "INDEX_SERVER_AUTO_BACKUP", "INDEX_SERVER_AUTO_BACKUP_INTERVAL_MS", "INDEX_SERVER_AUTO_BACKUP_MAX_COUNT", "INDEX_SERVER_AUTO_EMBED_ON_IMPORT", "INDEX_SERVER_AUTO_SEED", "INDEX_SERVER_AUTO_SPLIT_OVERSIZED", "INDEX_SERVER_AUTO_USAGE_TRACK", "INDEX_SERVER_BACKUP_BEFORE_BULK_DELETE", "INDEX_SERVER_BACKUPS_DIR", "INDEX_SERVER_BODY_MAX_LENGTH", "INDEX_SERVER_BODY_WARN_LENGTH", "INDEX_SERVER_BOOTSTRAP_AUTOCONFIRM", "INDEX_SERVER_BOOTSTRAP_TOKEN_TTL_SEC", "INDEX_SERVER_BUFFER_RING_APPEND", "INDEX_SERVER_BUFFER_RING_PRELOAD", "INDEX_SERVER_CACHE_MODE", "INDEX_SERVER_CANONICAL_DISABLE", "INDEX_SERVER_DASHBOARD", "INDEX_SERVER_DASHBOARD_GRAPH", "INDEX_SERVER_DASHBOARD_HOST", "INDEX_SERVER_DASHBOARD_PORT", "INDEX_SERVER_DASHBOARD_TLS", "INDEX_SERVER_DASHBOARD_TLS_CA", "INDEX_SERVER_DASHBOARD_TLS_CERT", "INDEX_SERVER_DASHBOARD_TLS_KEY", "INDEX_SERVER_DASHBOARD_TRIES", "INDEX_SERVER_DEBUG", "INDEX_SERVER_DIR", "INDEX_SERVER_DISABLE_EARLY_STDIN_BUFFER", "INDEX_SERVER_DISABLE_STDERR_BRIDGE", "INDEX_SERVER_DISABLE_USAGE_CLAMP", "INDEX_SERVER_EMBEDDING_PATH", "INDEX_SERVER_ENABLE_INDEX_SERVER_POLLER", "INDEX_SERVER_ENABLE_STDERR_BRIDGE", "INDEX_SERVER_EVENT_BUFFER_SIZE", "INDEX_SERVER_EVENT_SILENT", "INDEX_SERVER_FATAL_EXIT_DELAY_MS", "INDEX_SERVER_FEATURES", "INDEX_SERVER_FEEDBACK_DIR", "INDEX_SERVER_FEEDBACK_MAX_ENTRIES", "INDEX_SERVER_FILE_TRACE", "INDEX_SERVER_FLAG_TOOLS_ADMIN", "INDEX_SERVER_FLAG_TOOLS_EXTENDED", "INDEX_SERVER_FLAGS", "INDEX_SERVER_FLAGS_FILE", "INDEX_SERVER_FORCE_REBUILD", "INDEX_SERVER_GOV_HASH_CANON_VARIANTS", "INDEX_SERVER_GOV_HASH_HARDENING", "INDEX_SERVER_GOV_HASH_IMPORT_SET_SIZE", "INDEX_SERVER_GRAPH_INCLUDE_PRIMARY_EDGES", "INDEX_SERVER_GRAPH_LARGE_CATEGORY_CAP", "INDEX_SERVER_HEALTH_ERROR_THRESHOLD", "INDEX_SERVER_HEALTH_MEMORY_THRESHOLD", "INDEX_SERVER_HEALTH_MIN_UPTIME", "INDEX_SERVER_HEARTBEAT_MS", "INDEX_SERVER_HTTP_METRICS", "INDEX_SERVER_IDLE_KEEPALIVE_MS", "INDEX_SERVER_IDLE_READY_SENTINEL", "INDEX_SERVER_INIT_FEATURES", "INDEX_SERVER_ISSUE_317_COUNTER", "INDEX_SERVER_LEADER_PORT", "INDEX_SERVER_LEADER_URL", "INDEX_SERVER_LOAD_WARN_MS", "INDEX_SERVER_LOG_DIAG", "INDEX_SERVER_LOG_FILE", "INDEX_SERVER_LOG_JSON", "INDEX_SERVER_LOG_LEVEL", "INDEX_SERVER_LOG_MUTATION", "INDEX_SERVER_LOG_PROTOCOL", "INDEX_SERVER_LOG_SEARCH", "INDEX_SERVER_LOG_SYNC", "INDEX_SERVER_LOG_TOOLS", "INDEX_SERVER_MANIFEST_FASTLOAD", "INDEX_SERVER_MANIFEST_PATH", "INDEX_SERVER_MANIFEST_WRITE", "INDEX_SERVER_MAX_BULK_DELETE", "INDEX_SERVER_MAX_CONNECTIONS", "INDEX_SERVER_MAX_FILES", "INDEX_SERVER_MCP_BACKUP_RETAIN", "INDEX_SERVER_MCP_CONFIG_ROOT", "INDEX_SERVER_MEMOIZE", "INDEX_SERVER_MEMOIZE_HASH", "INDEX_SERVER_MEMORY_MONITOR", "INDEX_SERVER_MESSAGING_DIR", "INDEX_SERVER_MESSAGING_MAX", "INDEX_SERVER_MESSAGING_SWEEP_MS", "INDEX_SERVER_METRICS_DIR", "INDEX_SERVER_METRICS_FILE_STORAGE", "INDEX_SERVER_METRICS_MAX_FILES", "INDEX_SERVER_MINIMAL_DEBUG", "INDEX_SERVER_MODE", "INDEX_SERVER_MUTATION", "INDEX_SERVER_NORMALIZATION_LOG", "INDEX_SERVER_POLL_MS", "INDEX_SERVER_POLL_PROACTIVE", "INDEX_SERVER_PREFLIGHT_MODULES", "INDEX_SERVER_PREFLIGHT_STRICT", "INDEX_SERVER_PROFILE", "INDEX_SERVER_PWS_EXIT_MS", "INDEX_SERVER_RATE_LIMIT", "INDEX_SERVER_READ_BACKOFF_MS", "INDEX_SERVER_READ_RETRIES", "INDEX_SERVER_REFERENCE_MODE", "INDEX_SERVER_REQUEST_TIMEOUT", "INDEX_SERVER_REQUIRE_AUTH_ALL", "INDEX_SERVER_REQUIRE_CATEGORY", "INDEX_SERVER_RESOURCE_CAPACITY", "INDEX_SERVER_RESOURCE_SAMPLE_INTERVAL_MS", "INDEX_SERVER_SEED_VERBOSE", "INDEX_SERVER_SEMANTIC_CACHE_DIR", "INDEX_SERVER_SEMANTIC_DEVICE", "INDEX_SERVER_SEMANTIC_ENABLED", "INDEX_SERVER_SEMANTIC_LOCAL_ONLY", "INDEX_SERVER_SEMANTIC_MODEL", "INDEX_SERVER_SEARCH_OMIT_ZERO_QUERY", "INDEX_SERVER_SESSION_BACKUP_INTEGRATION", "INDEX_SERVER_SESSION_DEDUPLICATION_ENABLED", "INDEX_SERVER_SESSION_MAX_CONNECTION_HISTORY_DAYS", "INDEX_SERVER_SESSION_MAX_HISTORY_DAYS", "INDEX_SERVER_SESSION_MAX_HISTORY_ENTRIES", "INDEX_SERVER_SESSION_PERSISTENCE_DIR", "INDEX_SERVER_SESSION_PERSISTENCE_ENABLED", "INDEX_SERVER_SESSION_PERSISTENCE_INTERVAL_MS", "INDEX_SERVER_SHARED_SERVER_SENTINEL", "INDEX_SERVER_SQLITE_MIGRATE_ON_START", "INDEX_SERVER_SQLITE_PATH", "INDEX_SERVER_SQLITE_VEC_ENABLED", "INDEX_SERVER_SQLITE_VEC_PATH", "INDEX_SERVER_SQLITE_WAL", "INDEX_SERVER_STALE_THRESHOLD_MS", "INDEX_SERVER_STATE_DIR", "INDEX_SERVER_STORAGE_BACKEND", "INDEX_SERVER_STRESS_DIAG", "INDEX_SERVER_STRESS_MODE", "INDEX_SERVER_STRICT_", "INDEX_SERVER_STRICT_CREATE", "INDEX_SERVER_STRICT_REMOVE", "INDEX_SERVER_TEST_MODE", "INDEX_SERVER_TEST_STRICT_VISIBILITY", "INDEX_SERVER_TIMING_JSON", "INDEX_SERVER_TOOLCALL_APPEND_LOG", "INDEX_SERVER_TOOLCALL_CHUNK_SIZE", "INDEX_SERVER_TOOLCALL_COMPACT_MS", "INDEX_SERVER_TOOLCALL_FLUSH_MS", "INDEX_SERVER_TRACE", "INDEX_SERVER_TRACE_", "INDEX_SERVER_TRACE_ALL", "INDEX_SERVER_TRACE_BUFFER_", "INDEX_SERVER_TRACE_BUFFER_DUMP_ON_EXIT", "INDEX_SERVER_TRACE_BUFFER_FILE", "INDEX_SERVER_TRACE_BUFFER_SIZE", "INDEX_SERVER_TRACE_CALLSITE", "INDEX_SERVER_TRACE_CATEGORIES", "INDEX_SERVER_TRACE_DIR", "INDEX_SERVER_TRACE_DISPATCH_DIAG", "INDEX_SERVER_TRACE_FILE", "INDEX_SERVER_TRACE_FSYNC", "INDEX_SERVER_TRACE_LEVEL", "INDEX_SERVER_TRACE_MAX_FILE_SIZE", "INDEX_SERVER_TRACE_PERSIST", "INDEX_SERVER_TRACE_QUERY_DIAG", "INDEX_SERVER_TRACE_SESSION", "INDEX_SERVER_USAGE_FLUSH_MS", "INDEX_SERVER_USAGE_SNAPSHOT_PATH", "INDEX_SERVER_VALIDATION_MODE", "INDEX_SERVER_VERBOSE_LOGGING", "INDEX_SERVER_VISIBILITY_DIAG", "INDEX_SERVER_WARN_BUDGET", "INDEX_SERVER_WORKSPACE"];
+export declare const DOCUMENTED_INDEX_SERVER_FLAGS: readonly ["INDEX_SERVER_ADD_TIMING", "INDEX_SERVER_ADMIN_API_KEY", "INDEX_SERVER_ADMIN_MAX_SESSION_HISTORY", "INDEX_SERVER_AGENT_ID", "INDEX_SERVER_ALWAYS_RELOAD", "INDEX_SERVER_ATOMIC_WRITE_BACKOFF_MS", "INDEX_SERVER_ATOMIC_WRITE_RETRIES", "INDEX_SERVER_AUDIT_LOG", "INDEX_SERVER_AUTH_KEY", "INDEX_SERVER_AUTO_BACKUP", "INDEX_SERVER_AUTO_BACKUP_INTERVAL_MS", "INDEX_SERVER_AUTO_BACKUP_MAX_COUNT", "INDEX_SERVER_AUTO_EMBED_ON_IMPORT", "INDEX_SERVER_AUTO_SEED", "INDEX_SERVER_AUTO_SPLIT_OVERSIZED", "INDEX_SERVER_AUTO_USAGE_TRACK", "INDEX_SERVER_BACKUP_BEFORE_BULK_DELETE", "INDEX_SERVER_BACKUPS_DIR", "INDEX_SERVER_BODY_MAX_LENGTH", "INDEX_SERVER_BODY_WARN_LENGTH", "INDEX_SERVER_BOOTSTRAP_AUTOCONFIRM", "INDEX_SERVER_BOOTSTRAP_TOKEN_TTL_SEC", "INDEX_SERVER_BUFFER_RING_APPEND", "INDEX_SERVER_BUFFER_RING_PRELOAD", "INDEX_SERVER_CACHE_MODE", "INDEX_SERVER_CANONICAL_DISABLE", "INDEX_SERVER_DASHBOARD", "INDEX_SERVER_DASHBOARD_GRAPH", "INDEX_SERVER_DASHBOARD_HOST", "INDEX_SERVER_DASHBOARD_PORT", "INDEX_SERVER_DASHBOARD_TLS", "INDEX_SERVER_DASHBOARD_TLS_CA", "INDEX_SERVER_DASHBOARD_TLS_CERT", "INDEX_SERVER_DASHBOARD_TLS_KEY", "INDEX_SERVER_DASHBOARD_TRIES", "INDEX_SERVER_DEBUG", "INDEX_SERVER_DIR", "INDEX_SERVER_DISABLE_EARLY_STDIN_BUFFER", "INDEX_SERVER_DISABLE_PPID_WATCHDOG", "INDEX_SERVER_DISABLE_STDERR_BRIDGE", "INDEX_SERVER_DISABLE_USAGE_CLAMP", "INDEX_SERVER_EMBEDDING_PATH", "INDEX_SERVER_ENABLE_INDEX_SERVER_POLLER", "INDEX_SERVER_ENABLE_STDERR_BRIDGE", "INDEX_SERVER_EVENT_BUFFER_SIZE", "INDEX_SERVER_EVENT_SILENT", "INDEX_SERVER_FATAL_EXIT_DELAY_MS", "INDEX_SERVER_FEATURES", "INDEX_SERVER_FEEDBACK_DIR", "INDEX_SERVER_FEEDBACK_MAX_ENTRIES", "INDEX_SERVER_FILE_TRACE", "INDEX_SERVER_FLAG_TOOLS_ADMIN", "INDEX_SERVER_FLAG_TOOLS_EXTENDED", "INDEX_SERVER_FLAGS", "INDEX_SERVER_FLAGS_FILE", "INDEX_SERVER_FORCE_REBUILD", "INDEX_SERVER_GOV_HASH_CANON_VARIANTS", "INDEX_SERVER_GOV_HASH_HARDENING", "INDEX_SERVER_GOV_HASH_IMPORT_SET_SIZE", "INDEX_SERVER_GRAPH_INCLUDE_PRIMARY_EDGES", "INDEX_SERVER_GRAPH_LARGE_CATEGORY_CAP", "INDEX_SERVER_HEALTH_ERROR_THRESHOLD", "INDEX_SERVER_HEALTH_MEMORY_THRESHOLD", "INDEX_SERVER_HEALTH_MIN_UPTIME", "INDEX_SERVER_HEARTBEAT_MS", "INDEX_SERVER_HTTP_METRICS", "INDEX_SERVER_IDLE_KEEPALIVE_MS", "INDEX_SERVER_IDLE_READY_SENTINEL", "INDEX_SERVER_INIT_FEATURES", "INDEX_SERVER_ISSUE_317_COUNTER", "INDEX_SERVER_LEADER_PORT", "INDEX_SERVER_LEADER_URL", "INDEX_SERVER_LOAD_WARN_MS", "INDEX_SERVER_LOG_DIAG", "INDEX_SERVER_LOG_FILE", "INDEX_SERVER_LOG_JSON", "INDEX_SERVER_LOG_LEVEL", "INDEX_SERVER_LOG_MUTATION", "INDEX_SERVER_LOG_PROTOCOL", "INDEX_SERVER_LOG_SEARCH", "INDEX_SERVER_LOG_SYNC", "INDEX_SERVER_LOG_TOOLS", "INDEX_SERVER_MANIFEST_FASTLOAD", "INDEX_SERVER_MANIFEST_PATH", "INDEX_SERVER_MANIFEST_WRITE", "INDEX_SERVER_MAX_BULK_DELETE", "INDEX_SERVER_MAX_CONNECTIONS", "INDEX_SERVER_MAX_FILES", "INDEX_SERVER_MCP_BACKUP_RETAIN", "INDEX_SERVER_MCP_CONFIG_ROOT", "INDEX_SERVER_MEMOIZE", "INDEX_SERVER_MEMOIZE_HASH", "INDEX_SERVER_MEMORY_MONITOR", "INDEX_SERVER_MESSAGING_DIR", "INDEX_SERVER_MESSAGING_MAX", "INDEX_SERVER_MESSAGING_SWEEP_MS", "INDEX_SERVER_METRICS_DIR", "INDEX_SERVER_METRICS_FILE_STORAGE", "INDEX_SERVER_METRICS_MAX_FILES", "INDEX_SERVER_MINIMAL_DEBUG", "INDEX_SERVER_MODE", "INDEX_SERVER_MUTATION", "INDEX_SERVER_NORMALIZATION_LOG", "INDEX_SERVER_POLL_MS", "INDEX_SERVER_POLL_PROACTIVE", "INDEX_SERVER_PREFLIGHT_MODULES", "INDEX_SERVER_PREFLIGHT_STRICT", "INDEX_SERVER_PROFILE", "INDEX_SERVER_PWS_EXIT_MS", "INDEX_SERVER_RATE_LIMIT", "INDEX_SERVER_READ_BACKOFF_MS", "INDEX_SERVER_READ_RETRIES", "INDEX_SERVER_REFERENCE_MODE", "INDEX_SERVER_REQUEST_TIMEOUT", "INDEX_SERVER_REQUIRE_AUTH_ALL", "INDEX_SERVER_REQUIRE_CATEGORY", "INDEX_SERVER_RESOURCE_CAPACITY", "INDEX_SERVER_RESOURCE_SAMPLE_INTERVAL_MS", "INDEX_SERVER_SEED_VERBOSE", "INDEX_SERVER_SEMANTIC_CACHE_DIR", "INDEX_SERVER_SEMANTIC_DEVICE", "INDEX_SERVER_SEMANTIC_ENABLED", "INDEX_SERVER_SEMANTIC_LOCAL_ONLY", "INDEX_SERVER_SEMANTIC_MODEL", "INDEX_SERVER_SEARCH_OMIT_ZERO_QUERY", "INDEX_SERVER_SESSION_BACKUP_INTEGRATION", "INDEX_SERVER_SESSION_DEDUPLICATION_ENABLED", "INDEX_SERVER_SESSION_MAX_CONNECTION_HISTORY_DAYS", "INDEX_SERVER_SESSION_MAX_HISTORY_DAYS", "INDEX_SERVER_SESSION_MAX_HISTORY_ENTRIES", "INDEX_SERVER_SESSION_PERSISTENCE_DIR", "INDEX_SERVER_SESSION_PERSISTENCE_ENABLED", "INDEX_SERVER_SESSION_PERSISTENCE_INTERVAL_MS", "INDEX_SERVER_SHARED_SERVER_SENTINEL", "INDEX_SERVER_SQLITE_MIGRATE_ON_START", "INDEX_SERVER_SQLITE_PATH", "INDEX_SERVER_SQLITE_VEC_ENABLED", "INDEX_SERVER_SQLITE_VEC_PATH", "INDEX_SERVER_SQLITE_WAL", "INDEX_SERVER_STALE_THRESHOLD_MS", "INDEX_SERVER_STATE_DIR", "INDEX_SERVER_STORAGE_BACKEND", "INDEX_SERVER_STRESS_DIAG", "INDEX_SERVER_STRESS_MODE", "INDEX_SERVER_STRICT_", "INDEX_SERVER_STRICT_CREATE", "INDEX_SERVER_STRICT_REMOVE", "INDEX_SERVER_TEST_MODE", "INDEX_SERVER_TEST_STRICT_VISIBILITY", "INDEX_SERVER_TIMING_JSON", "INDEX_SERVER_TOOLCALL_APPEND_LOG", "INDEX_SERVER_TOOLCALL_CHUNK_SIZE", "INDEX_SERVER_TOOLCALL_COMPACT_MS", "INDEX_SERVER_TOOLCALL_FLUSH_MS", "INDEX_SERVER_TRACE", "INDEX_SERVER_TRACE_", "INDEX_SERVER_TRACE_ALL", "INDEX_SERVER_TRACE_BUFFER_", "INDEX_SERVER_TRACE_BUFFER_DUMP_ON_EXIT", "INDEX_SERVER_TRACE_BUFFER_FILE", "INDEX_SERVER_TRACE_BUFFER_SIZE", "INDEX_SERVER_TRACE_CALLSITE", "INDEX_SERVER_TRACE_CATEGORIES", "INDEX_SERVER_TRACE_DIR", "INDEX_SERVER_TRACE_DISPATCH_DIAG", "INDEX_SERVER_TRACE_FILE", "INDEX_SERVER_TRACE_FSYNC", "INDEX_SERVER_TRACE_LEVEL", "INDEX_SERVER_TRACE_MAX_FILE_SIZE", "INDEX_SERVER_TRACE_PERSIST", "INDEX_SERVER_TRACE_QUERY_DIAG", "INDEX_SERVER_TRACE_SESSION", "INDEX_SERVER_USAGE_FLUSH_MS", "INDEX_SERVER_USAGE_SNAPSHOT_PATH", "INDEX_SERVER_VALIDATION_MODE", "INDEX_SERVER_VERBOSE_LOGGING", "INDEX_SERVER_VISIBILITY_DIAG", "INDEX_SERVER_WARN_BUDGET", "INDEX_SERVER_WORKSPACE"];
 export declare function toForwardSlashes(value: string): string;
 export declare function resolveDataPaths(root: string): McpDataPaths;
 export declare function buildEnvCatalog(config: McpProfileConfig, paths: McpDataPaths): McpEnvCatalogEntry[];

package/dist/services/mcpConfig/flagCatalog.js

@@ -48,6 +48,7 @@ exports.DOCUMENTED_INDEX_SERVER_FLAGS = [
     'INDEX_SERVER_DEBUG',
     'INDEX_SERVER_DIR',
     'INDEX_SERVER_DISABLE_EARLY_STDIN_BUFFER',
+    'INDEX_SERVER_DISABLE_PPID_WATCHDOG',
     'INDEX_SERVER_DISABLE_STDERR_BRIDGE',
     'INDEX_SERVER_DISABLE_USAGE_CLAMP',
     'INDEX_SERVER_EMBEDDING_PATH',
@@ -268,6 +269,7 @@ function buildEnvCatalog(config, paths) {
         { section: 'Server and transport' },
         { key: 'INDEX_SERVER_MODE', desc: 'Instance mode', active: false, value: 'standalone' },
         { key: 'INDEX_SERVER_DISABLE_EARLY_STDIN_BUFFER', desc: 'Disable stdin handshake hardening', active: false, value: '0' },
+        { key: 'INDEX_SERVER_DISABLE_PPID_WATCHDOG', desc: 'Disable parent-process watchdog (dev sandbox launchers)', active: false, value: '0' },
         { key: 'INDEX_SERVER_IDLE_KEEPALIVE_MS', desc: 'Keepalive interval in ms', active: false, value: '30000' },
         { key: 'INDEX_SERVER_POLL_MS', desc: 'Index filesystem poll interval', active: false, value: '10000' },
         { section: 'Advanced tuning' },

package/dist/services/mcpConfig/formats.js

@@ -77,12 +77,8 @@ function buildServerEntry(format, config, paths, envOverrides = {}) {
         entry.cwd = (0, flagCatalog_1.toForwardSlashes)(launch.cwd);
     if (format === 'vscode-global' && launch.command === 'node') {
         const firstArg = launch.args[0] ?? '';
-        const baseCwd = launch.cwd ?? config.root;
-        entry.args = [path_1.default.isAbsolute(firstArg) ? (0, flagCatalog_1.toForwardSlashes)(firstArg) : (0, flagCatalog_1.toForwardSlashes)(path_1.default.resolve(baseCwd, firstArg))];
-        // Prefer the launch cwd (config.root for 'local' source — a stable user-scope
-        // directory). Fall back to package root only when the runtime hasn't been
-        // self-deployed under config.root (e.g. 'packaged' source straight out of npm-global).
-        entry.cwd = (0, flagCatalog_1.toForwardSlashes)(launch.cwd ?? path_1.default.resolve(__dirname, '..', '..', '..'));
+        entry.args = [path_1.default.isAbsolute(firstArg) ? (0, flagCatalog_1.toForwardSlashes)(firstArg) : (0, flagCatalog_1.toForwardSlashes)(path_1.default.resolve(launch.cwd ?? config.root, firstArg))];
+        entry.cwd = (0, flagCatalog_1.toForwardSlashes)(path_1.default.resolve(__dirname, '..', '..', '..'));
     }
     return entry;
 }

package/dist/services/seedBootstrap.contentModel.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Build the canonical seed object for `002-content-model` from the schema.
+ *
+ * The function is pure: same schema input → same seed output. Tests rely on
+ * this determinism to assert drift-safety.
+ *
+ * @returns Canonical seed `{ file, id, json }` ready to push into CANONICAL_SEEDS.
+ */
+export declare function buildContentModelSeed(): {
+    file: string;
+    id: string;
+    json: Record<string, unknown>;
+};