@openparachute/vault 0.4.8-rc.4 → 0.4.8-rc.6

package/.parachute/module.json

@@ -3,7 +3,6 @@
   "manifestName": "parachute-vault",
   "displayName": "Vault",
   "tagline": "Your owner-authenticated MCP knowledge store.",
-  "kind": "api",
   "port": 1940,
   "paths": ["/vault/default"],
   "health": "/vault/default/health",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openparachute/vault",
-  "version": "0.4.8-rc.4",
+  "version": "0.4.8-rc.6",
   "description": "Agent-native knowledge graph. Notes, tags, links over MCP.",
   "module": "src/cli.ts",
   "type": "module",

package/src/module-manifest.test.ts

@@ -40,14 +40,13 @@ describe("module-manifest", () => {
     });
   });
 
-  test("readSelfManifest parses a valid manifest", () => {
+  test("readSelfManifest parses a valid manifest (no kind — hub#301 Phase B)", () => {
     withTempPackageRoot(
       {
         name: "vault",
         manifestName: "parachute-vault",
         displayName: "Vault",
         tagline: "Test tagline",
-        kind: "api",
         port: 1940,
         paths: ["/vault/default"],
         health: "/vault/default/health",
@@ -58,13 +57,34 @@ describe("module-manifest", () => {
         expect(m?.name).toBe("vault");
         expect(m?.manifestName).toBe("parachute-vault");
         expect(m?.displayName).toBe("Vault");
-        expect(m?.kind).toBe("api");
+        expect(m?.kind).toBeUndefined();
         expect(m?.port).toBe(1940);
         expect(m?.paths).toEqual(["/vault/default"]);
       },
     );
   });
 
+  test("readSelfManifest tolerates a legacy manifest that still includes kind", () => {
+    // hub#301 Phase B retired the `kind` field, but legacy manifests on
+    // pinned installs may still include it. The reader accepts it without
+    // erroring; the field is never branched on.
+    withTempPackageRoot(
+      {
+        name: "vault",
+        manifestName: "parachute-vault",
+        kind: "api",
+        port: 1940,
+        paths: ["/vault/default"],
+        health: "/vault/default/health",
+      },
+      (root) => {
+        const m = readSelfManifest(root);
+        expect(m).not.toBeNull();
+        expect(m?.kind).toBe("api");
+      },
+    );
+  });
+
   test("readSelfManifest throws on malformed JSON", () => {
     withTempPackageRoot("{ not valid json", (root) => {
       expect(() => readSelfManifest(root)).toThrow();
@@ -73,7 +93,7 @@ describe("module-manifest", () => {
 
   test("readSelfManifest throws when required field missing", () => {
     withTempPackageRoot(
-      { name: "vault" /* missing manifestName / port / paths / health / kind */ },
+      { name: "vault" /* missing manifestName / port / paths / health */ },
       (root) => {
         expect(() => readSelfManifest(root)).toThrow(/missing required/);
       },
@@ -83,11 +103,12 @@ describe("module-manifest", () => {
   test("readSelfManifest reads the actual shipped manifest in the repo", () => {
     // Smoke test the real shipped file — guards against ever shipping a
     // malformed manifest. Uses the real resolvePackageRoot (which finds
-    // the repo root in tests).
+    // the repo root in tests). Post hub#301 Phase B, the shipped manifest
+    // no longer includes `kind`.
     const m = readSelfManifest();
     expect(m).not.toBeNull();
     expect(m?.manifestName).toBe("parachute-vault");
-    expect(m?.kind).toBe("api");
+    expect(m?.kind).toBeUndefined();
     expect(m?.port).toBe(1940);
   });
 });

package/src/module-manifest.ts

@@ -36,7 +36,14 @@ export interface VaultModuleManifest {
   readonly manifestName: string;
   readonly displayName?: string;
   readonly tagline?: string;
-  readonly kind: ModuleKind;
+  /**
+   * Deprecated as of hub#301 Phase B (kind retirement, 2026-05-23). Hub's
+   * validator dropped `kind` from required-fields in hub#327; vault no
+   * longer ships the field in `.parachute/module.json`. Kept here as
+   * optional only so an older shipped manifest (pinned legacy install)
+   * still parses without throwing — the field is never branched on.
+   */
+  readonly kind?: ModuleKind;
   readonly port: number;
   readonly paths: readonly string[];
   readonly health: string;
@@ -87,8 +94,11 @@ export function readSelfManifest(
   if (typeof parsed.port !== "number" || !Array.isArray(parsed.paths)) {
     throw new Error(`${path}: manifest missing required "port" / "paths"`);
   }
-  if (typeof parsed.health !== "string" || typeof parsed.kind !== "string") {
-    throw new Error(`${path}: manifest missing required "health" / "kind"`);
+  if (typeof parsed.health !== "string") {
+    throw new Error(`${path}: manifest missing required "health"`);
   }
+  // `kind` is retired as of hub#301 Phase B — hub#327 made it optional in
+  // the hub-side validator, and vault no longer ships it. If a legacy
+  // manifest still includes the field, accept it; just don't require it.
   return parsed as unknown as VaultModuleManifest;
 }

package/src/routes.ts

@@ -1308,7 +1308,7 @@ async function handleNotesInner(
     }
   }
 
-  // DELETE /notes/:idOrPath — admin only (enforced at server level)
+  // DELETE /notes/:idOrPath — vault:write (no admin gate; consistent with verbForMethod)
   if (method === "DELETE") {
     const note = await resolveNote(store, idOrPath);
     if (!note) return json({ error: "Not found" }, 404);

package/src/routing.test.ts

@@ -911,7 +911,6 @@ describe("/.parachute/info + /.parachute/icon.svg", () => {
       tagline: string;
       version: string;
       iconUrl: string;
-      kind: string;
     };
     expect(body).toEqual({
       name: "parachute-vault",
@@ -919,8 +918,11 @@ describe("/.parachute/info + /.parachute/icon.svg", () => {
       tagline: expect.stringContaining("knowledge graph"),
       version: pkg.version,
       iconUrl: "/vault/journal/.parachute/icon.svg",
-      kind: "api",
     });
+    // `kind` retired from the info-endpoint response per hub#330 (companion
+    // to vault#359's module.json drop). Pin its absence so regressions are
+    // surfaced — the shape is a locked contract with the hub.
+    expect(body).not.toHaveProperty("kind");
   });
 
   test("info iconUrl is vault-scoped and points at a live icon handler", async () => {

package/src/routing.ts

@@ -132,11 +132,11 @@ function handleParachuteInfo(vaultName: string): Response {
     tagline: "Agent-native knowledge graph — notes, tags, links, attachments over REST + MCP",
     version: pkg.version,
     iconUrl: `/vault/${vaultName}/.parachute/icon.svg`,
-    // Hub renders `kind: "api"` cards as an expandable detail panel (MCP URL,
-    // OAuth link, version) rather than navigating to the API's root. Vault
-    // has no browser UI, so navigating to it shows raw JSON — not useful.
-    kind: "api",
   };
+  // `kind` was previously emitted here (and matched module.json) to let the
+  // hub branch its card rendering on api vs ui. Retired per hub#330 — the hub
+  // now infers presentation from the response shape itself. Companion to
+  // vault#359 (manifest drop); closes part of hub#340.
   return Response.json(body, {
     headers: { "Access-Control-Allow-Origin": "*" },
   });

package/src/self-register.test.ts

@@ -39,7 +39,6 @@ const TEST_MANIFEST: VaultModuleManifest = {
   manifestName: "parachute-vault",
   displayName: "Vault",
   tagline: "Test tagline",
-  kind: "api",
   port: 1940,
   paths: ["/vault/default"],
   health: "/vault/default/health",