@kage-core/kage-graph-mcp 1.1.14 → 1.1.16

package/README.md

@@ -9,6 +9,28 @@ This package exposes two surfaces:
 
 ## Latest Release
 
+`1.1.16` fixes the guarded release helper's npm verification step:
+
+- exact-version `npm view` checks now retry with backoff after publish so npm
+  registry propagation does not make a successful publish look failed.
+- the release helper is maintainer-only repo tooling: public package metadata no
+  longer exposes npm release scripts, and `dist/release.js` is excluded from the
+  published tarball.
+
+`1.1.15` hardened the npm release path and memory-only review flow:
+
+- the source-repo maintainer helper can run the guarded release checks without
+  publishing, or push/publish/smoke-test when explicitly invoked from a built
+  checkout.
+- it requires a clean worktree, fetches the remote branch, verifies local `HEAD`
+  contains `origin/<branch>`, runs tests and `npm pack --dry-run`, pushes the
+  branch before publishing, publishes with `--access public`, verifies npm
+  registry metadata, and performs a smoke install.
+- all git steps run with `GIT_EDITOR=true` so agent sessions cannot get stuck in
+  an interactive commit or rebase editor.
+- `kage propose --from-diff` now includes repo memory packet-only changes from
+  `.agent_memory/packets/*.json` and `.agent_memory/pending/*.json`.
+
 `1.1.14` publishes the memory/code graph trust and retrieval pass:
 
 - recall now uses vectorless BM25 lexical ranking with graph, path/type/tag,
@@ -42,6 +64,21 @@ npm install
 npm run build
 ```
 
+Publishing from the source repo should use the guarded maintainer helper after
+the release commit is ready. It is intentionally not exposed as a public npm
+script or included in the published tarball:
+
+```bash
+npm run build --prefix mcp
+cd mcp
+node dist/release.js --dry-run
+node dist/release.js --publish --push --smoke
+```
+
+The script fetches the current branch and blocks if the remote branch is not an
+ancestor of local `HEAD`, which prevents publishing an npm version from a branch
+that cannot be pushed cleanly.
+
 ## CLI
 
 ```bash

package/dist/kernel.js

@@ -911,7 +911,12 @@ const NOISE_PATH_PREFIXES = [
     ".pub-cache/",
     "elm-stuff/",
 ];
+function isReviewableMemoryPath(filePath) {
+    return /^\.agent_memory\/(?:packets|pending)\/[^/]+\.json$/.test(filePath);
+}
 function isNoisePath(filePath) {
+    if (isReviewableMemoryPath(filePath))
+        return false;
     return NOISE_PATH_PREFIXES.some((prefix) => filePath.startsWith(prefix));
 }
 function parsePorcelainStatus(status) {
@@ -926,7 +931,26 @@ function parsePorcelainPath(line) {
     const raw = line.length > 2 && line[2] === " " ? line.slice(3) : line.slice(2);
     return raw.trim();
 }
+function branchDiffStat(projectDir, changedFiles) {
+    const diffStats = [
+        readGit(projectDir, ["diff", "--stat"]),
+        readGit(projectDir, ["diff", "--cached", "--stat"]),
+    ].filter(Boolean).join("\n").trim();
+    const untracked = new Set((readGit(projectDir, ["ls-files", "--others", "--exclude-standard"]) ?? "")
+        .split(/\r?\n/)
+        .map((path) => path.trim())
+        .filter(Boolean)
+        .filter((path) => changedFiles.includes(path)));
+    const untrackedStats = [...untracked]
+        .filter((file) => !diffStats.includes(file))
+        .map((file) => `${file} | untracked`)
+        .join("\n");
+    return [diffStats, untrackedStats].filter(Boolean).join("\n").trim()
+        || changedFiles.map((file) => `${file} | changed`).join("\n");
+}
 function shouldSkipRepoMemoryPath(relativePath) {
+    if (isReviewableMemoryPath(relativePath))
+        return false;
     return isNoisePath(relativePath) || shouldSkipCodePath(relativePath);
 }
 function migrateLegacyMarkdown(projectDir) {
@@ -4822,7 +4846,7 @@ function proposeFromDiff(projectDir) {
     const changedFiles = parsePorcelainStatus(status);
     if (changedFiles.length === 0)
         return { ok: false, changedFiles: [], errors: ["No changed files found."] };
-    const stat = readGit(projectDir, ["diff", "--stat"]) || "Untracked or staged files changed; inspect git status for details.";
+    const stat = branchDiffStat(projectDir, changedFiles);
     const branch = gitBranch(projectDir);
     const summary = {
         schema_version: 1,

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@kage-core/kage-graph-mcp",
-  "version": "1.1.14",
+  "version": "1.1.16",
   "description": "Local-first repo memory, code graph, and recall MCP server for coding agents",
   "main": "dist/index.js",
   "files": [
     "dist/**/*.js",
     "!dist/**/*.test.js",
+    "!dist/release.js",
     "viewer/**/*",
     "!viewer/graphs/*.json",
     "README.md"