docdex 0.2.85 → 0.2.90

package/CHANGELOG.md

@@ -2,6 +2,38 @@
 
 ## Unreleased
 
+## 0.2.90
+- Fix packaged Streamable HTTP MCP startup for multi-repo daemons without a default repo by allowing unbound initialize/tool discovery and binding a repo only when repo-scoped tools run.
+- Preserve packaged fail-closed behavior for repo tool calls that still omit `project_root` or `repo_path`, returning `missing_repo` instead of leaking an arbitrary mounted repo.
+- Bump packaged release metadata to 0.2.90.
+
+## 0.2.89
+- Let the packaged tag-triggered release asset job publish with the workflow `GITHUB_TOKEN` by removing an admin-only immutable-release repository API precheck while retaining remote-tag and asset verification.
+- Bump packaged release metadata to 0.2.89.
+
+## 0.2.88
+- Keep packaged tag-triggered release publication from failing when optional external feature-matrix adapters are not configured, while still recording blocked external lanes in the uploaded evidence ledger.
+- Retain the stricter external `--release-gate` for explicitly configured validation runs.
+- Bump packaged release metadata to 0.2.88.
+
+## 0.2.87
+- Harden packaged profile, DAG, conversation, knowledge, repo-memory, and personal-preferences SQLite connection setup behind a shared 5-second busy-timeout policy so concurrent agents tolerate transient local database writer contention.
+- Move packaged DAG logging to WAL mode and add regression coverage for memory-adjacent stores that previously opened SQLite with no busy timeout.
+- Bump packaged release metadata to 0.2.87.
+
+## 0.2.86
+- Enforce a packaged fail-closed outbound web policy across HTTP, CLI, discovery, and Chromium paths, keep browser sandboxing enabled by default, cap responses, restore bounded transient discovery retries, and shut down owned browser processes deterministically.
+- Pin packaged Chromium TCP egress through a bounded host/IP allowlisting proxy, secure DevTools with an owned ephemeral endpoint and recursive target interception, deny service-worker/cache/download bypasses, and make managed-browser refresh, rollback, locking, and Windows process identity fail safe.
+- Make packaged stale/read-only index handling non-destructive, report accurate paginated document totals, move public indexing work off async executors, and serialize rebuilds with a panic-safe gate.
+- Isolate packaged MCP runtime options and per-session authentication/agent state, remove cross-session head-of-line blocking, bound in-flight work, and fail closed for ambiguous multi-repo initialization.
+- Single-flight packaged concurrent repository mounts, preserve read-only watcher invariants, and bound/coalesce watcher queues with full reconciliation after overflow or directory-level events.
+- Merge packaged repository and library search results deterministically and refill pages after stale-file filtering with a bounded second lookup.
+- Update packaged vulnerable compatible dependencies and document the temporary `ring` advisory exception pending a coordinated Tree-sitter grammar migration.
+- Harden packaged release publication around one tested npm tarball, synchronized version checks, integrity/SBOM evidence, resumable registry verification, and manual-only production deployment with pinned SSH host trust.
+- Replace packaged false-positive-prone aggregate smoke coverage with isolated, locked, evidence-producing feature gates and explicit external-provider blockers.
+- Make packaged release reruns immutable and resumable with SHA-256 asset comparison, fully pinned Actions, split least-privilege npm/MCP/GitHub publication jobs, strict feature-ledger/version/audit validation, and ephemeral pinned-host SSH credentials.
+- Bump packaged release metadata to 0.2.86.
+
 ## 0.2.85
 - Add a packaged disabled-by-default encrypted user-memory sync preview with config/status/dry-run support, bundle generation, and server-store register, push, feed, apply, and ack endpoints.
 - Scope packaged hosted user-memory sync requests through external API-key introspection, including user-memory sync scope checks and a canonical hashed principal so multiple API keys for one user merge into one feed.
@@ -15,7 +47,9 @@
 - Distinguish packaged daemon startup-in-progress locks from healthy already-running daemons so `docdexd daemon` tells clients to wait for `/healthz` and `/v1/mcp` readiness instead of advertising an unavailable MCP endpoint.
 - Harden packaged npm postinstall daemon readiness checks by requiring both `/healthz` and the streamable MCP `/v1/mcp` route before treating a started or reused daemon as ready.
 - Make packaged daemon singleton and mcoda registry tests deterministic by using a bounded full health response read, disabling cloud refresh for registry-only assertions, and allowing slower daemon binds in local/CI environments with `DOCDEX_DAEMON_AUTO_START_TIMEOUT_SECS`.
-- Pin packaged GitHub Actions npm upgrades to npm 11.18.0 so trusted publishing remains compatible with the workflow's Node 20 runtime.
+- Pin packaged GitHub Actions npm upgrades to npm 11.18.0 so trusted publishing remains compatible with the workflow's Node 24 runtime.
+- Box packaged MCP service dispatch futures at the proxy boundary so Rust 1.97 debug builds remain well below Linux's default test-thread stack while preserving per-session fairness, cancellation, and timeouts.
+- Pin the Rust 1.97.0 toolchain and Node 24 GitHub Actions by immutable commit across CI, nightly, release, and deployment workflows.
 - Bump packaged release metadata to 0.2.84.
 
 ## 0.2.81

package/assets/agents.md

@@ -1,4 +1,4 @@
----- START OF DOCDEX INFO V0.2.85 ----
+---- START OF DOCDEX INFO V0.2.90 ----
 Docdex URL: http://127.0.0.1:28491
 Use this base URL for Docdex HTTP endpoints.
 Health check endpoint: `GET /healthz` (not `/v1/health`).

package/lib/install.js

@@ -2785,6 +2785,8 @@ if (require.main === module) {
 }
 
 module.exports = {
+  parseRepoSlug,
+  getVersion,
   checksumCandidateNames,
   manifestCandidateNames,
   tryResolveAssetViaManifest,

package/lib/postinstall_setup.js

@@ -83,6 +83,20 @@ function configStreamableUrlForPort(port) {
   return `http://${DEFAULT_HOST}:${port}/v1/mcp`;
 }
 
+function resolveDaemonPort(env = process.env) {
+  const raw = env?.DOCDEX_DAEMON_PORT;
+  if (raw == null || String(raw).trim() === "") {
+    return DEFAULT_DAEMON_PORT;
+  }
+
+  const normalized = String(raw).trim();
+  const port = Number(normalized);
+  if (!/^[0-9]+$/.test(normalized) || !Number.isSafeInteger(port) || port < 1 || port > 65535) {
+    throw new Error("DOCDEX_DAEMON_PORT must be a base-10 integer between 1 and 65535");
+  }
+  return port;
+}
+
 function isPortAvailable(port, host) {
   return new Promise((resolve) => {
     const server = net.createServer();
@@ -2991,9 +3005,26 @@ function launchSetupWizard({
   return { ok: false, reason: "unsupported_platform" };
 }
 
-async function runPostInstallSetup({ binaryPath, logger, env, skipDaemon, distBaseDir } = {}) {
+async function runPostInstallSetup({
+  binaryPath,
+  logger,
+  env,
+  skipDaemon,
+  distBaseDir,
+  isolatedDaemonLifecycle = false,
+  deps
+} = {}) {
   const log = logger || console;
   const effectiveEnv = env || process.env;
+  const lifecycle = {
+    cleanupExistingDaemon,
+    resolveDaemonPortState,
+    isPortAvailable,
+    startDaemonWithHealthCheck
+  };
+  if (deps && typeof deps === "object") {
+    Object.assign(lifecycle, deps);
+  }
   const isNpm = isNpmLifecycle(effectiveEnv);
   const distCandidates = resolveDistBaseCandidates({ env: effectiveEnv });
   const resolvedDistBaseDir = distBaseDir || resolveDistBaseDir({ env: effectiveEnv, fsModule: fs });
@@ -3003,10 +3034,18 @@ async function runPostInstallSetup({ binaryPath, logger, env, skipDaemon, distBa
   if (fs.existsSync(configPath)) {
     existingConfig = fs.readFileSync(configPath, "utf8");
   }
-  const port = DEFAULT_DAEMON_PORT;
+  const port = resolveDaemonPort(effectiveEnv);
   let portState = { available: true, reuseExisting: false };
-  if (allowDaemon) {
-    const cleaned = await cleanupExistingDaemon({
+  if (allowDaemon && isolatedDaemonLifecycle) {
+    const available = await lifecycle.isPortAvailable(port, DEFAULT_HOST);
+    if (!available) {
+      throw new Error(
+        `[docdex] ${DEFAULT_HOST}:${port} is unavailable for the isolated daemon lifecycle`
+      );
+    }
+  }
+  if (allowDaemon && !isolatedDaemonLifecycle) {
+    const cleaned = await lifecycle.cleanupExistingDaemon({
       logger: log,
       env: effectiveEnv,
       distBaseDir: resolvedDistBaseDir,
@@ -3021,8 +3060,8 @@ async function runPostInstallSetup({ binaryPath, logger, env, skipDaemon, distBa
       allowDaemon = false;
     }
   }
-  if (allowDaemon) {
-    portState = await resolveDaemonPortState({
+  if (allowDaemon && !isolatedDaemonLifecycle) {
+    portState = await lifecycle.resolveDaemonPortState({
       host: DEFAULT_HOST,
       port,
       logger: log
@@ -3050,7 +3089,7 @@ async function runPostInstallSetup({ binaryPath, logger, env, skipDaemon, distBa
     distBaseDir: resolvedDistBaseDir
   });
   let reuseExisting = allowDaemon ? portState.reuseExisting : false;
-  if (reuseExisting && allowDaemon) {
+  if (reuseExisting && allowDaemon && !isolatedDaemonLifecycle) {
     const daemonInfo = await fetchDaemonInfo({ host: DEFAULT_HOST, port });
     const daemonVersion = normalizeVersion(daemonInfo?.version);
     const packageVersion = normalizeVersion(resolvePackageVersion());
@@ -3077,9 +3116,9 @@ async function runPostInstallSetup({ binaryPath, logger, env, skipDaemon, distBa
     }
   }
   let startupOk = false;
-  if (allowDaemon) {
+  if (allowDaemon && !isolatedDaemonLifecycle) {
     const allowStartNow = !(process.platform === "win32" && isNpm);
-    const result = await startDaemonWithHealthCheck({
+    const result = await lifecycle.startDaemonWithHealthCheck({
       binaryPath: startupBinaries.binaryPath,
       port,
       host: DEFAULT_HOST,
@@ -3168,6 +3207,7 @@ module.exports = {
   warnCodexRestart,
   configUrlForPort,
   configStreamableUrlForPort,
+  resolveDaemonPort,
   parseEnvBool,
   resolveOllamaInstallMode,
   resolveOllamaModelPromptMode,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "docdex",
-  "version": "0.2.85",
+  "version": "0.2.90",
   "mcpName": "io.github.bekirdag/docdex",
   "description": "Local-first documentation and code indexer with HTTP/MCP search, AST, and agent memory.",
   "bin": {