kontexta 4.3.1

package/LICENSE

@@ -0,0 +1,191 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to the Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by the Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding any notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2026 Safiyu
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,58 @@
+# kontexta
+
+> One-click local dashboard + MCP server for AI coding agents
+
+The Kontexta CLI brings the full dashboard and MCP server to your machine with a single `npx` command—no Docker, no build, no setup.
+
+## Quick Start
+
+```bash
+npx kontexta start
+```
+
+Boots the dashboard on `http://localhost:3000` (opens in your browser) and starts the MCP server. First run walks you through setup: master password, data location, and project registration.
+
+## Subcommands
+
+- **`kontexta start`** — boot dashboard + MCP server on port 3000 (or `$PORT`)
+- **`kontexta mcp`** — run stdio MCP server (for AI client config)
+- **`kontexta doctor`** — print environment diagnostics
+
+### MCP-only (no dashboard)
+
+If you only want the MCP server (no dashboard), point your AI client at:
+
+```json
+{
+  "mcpServers": {
+    "kxta": {
+      "command": "npx",
+      "args": ["-y", "kontexta", "mcp"]
+    }
+  }
+}
+```
+
+## Requirements
+
+- **Node.js 22.x LTS** — the CLI detects your Node version and warns if it's incompatible
+- Nothing else — the CLI bundles all dependencies and prebuilt native modules
+
+## What it bundles
+
+The `kontexta` package includes:
+
+- The full Next.js dashboard (standalone server)
+- The MCP server (stdio, for use with AI agents)
+- Prebuilt native modules (`better-sqlite3`, `re2`) for Linux, macOS, and Windows
+- All runtime dependencies, bundled into a single ~28 MB tarball
+
+No Docker, no pnpm, no build step.
+
+## More information
+
+Full documentation: [github.com/safiyu/kontexta](https://github.com/safiyu/kontexta)
+
+## License
+
+Apache-2.0

package/bundle/standalone/CHANGELOG.md

@@ -0,0 +1,382 @@
+# Changelog
+
+## 4.3.1 — One command, and Kontexta is running
+
+Installing Kontexta no longer requires Docker, pnpm, or a build step. If you have Node 22, you have Kontexta.
+
+### Added
+
+- **`npx kontexta start` — the new one-click install.** One cross-platform command boots the full dashboard and MCP server, picks a free port, and opens your browser. First-run setup (master password, data location, projects) happens in the browser. Also ships `kontexta mcp` (stdio MCP server for your AI client config) and `kontexta doctor` (environment diagnostics: Node version, data directory, native-module health).
+- **Contributor bootstrap in one step.** `./bootstrap` (macOS/Linux) and `bootstrap.ps1` (Windows) check your Node version, activate the pinned pnpm via corepack, probe for a C/C++ toolchain, install dependencies, and build the core — then tell you exactly what to run next.
+- **Per-OS CI smoke tests.** Every change to the CLI is verified on Ubuntu, macOS, and Windows: the published tarball is installed fresh, the dashboard boots and passes its health check, and the MCP server completes a real handshake — all without a compiler on the machine.
+- **Optional shared vault for Docker.** The compose file now documents a same-path mount so the container can share the exact vault used by `npx kontexta` and local dev — with a clear warning about never running both against it at once.
+
+### Changed
+
+- **README and install docs lead with `npx kontexta start`.** Docker remains a first-class alternative; the source build is now framed as the contributor path (`./bootstrap && pnpm dev`).
+- **Installing via npm no longer requires pnpm on your machine.** `apps/mcp` dropped its `postinstall: pnpm rebuild re2` hook; native modules load from prebuilt binaries matched to your OS and Node version.
+
+### Fixed
+
+- **`npm install kontexta-mcp` works again.** The published package carried an unresolvable internal `workspace:*` dependency, so installing it outside the monorepo failed with `EUNSUPPORTEDPROTOCOL`. The internal core is now compiled into the published build and its runtime dependencies are declared properly — verified end-to-end by CI on every release.
+- **One vault everywhere, including Windows.** The new CLI now resolves the default data directory identically to the server core on every platform (`%APPDATA%\kontexta` on Windows), so `npx kontexta start` and `npx kontexta-mcp` always read and write the same vault.
+
+## 4.2.0 — Export any file as Markdown, Text, or PDF
+
+You can now save any file straight from the viewer, in whatever format suits you.
+
+### Added
+
+- **Export button in the file viewer.** Open any file and download it as a plain Markdown file, a clean plain-text file (no `#`, `**`, or other markdown symbols cluttering it up — code snippets and tables are kept intact), or a ready-to-share PDF, all with one click.
+
+### Improved
+
+- **Every action now tells you what happened.** Creating, deleting, saving, syncing, and publishing all show a clear confirmation or error message on screen — no more silent failures, and no more jarring browser pop-ups for confirmations.
+- **Dialogs and menus across the app are more consistent and keyboard-friendly.** Escape closes them, clicking outside dismisses them, the same way everywhere.
+- **The calendar page has a close button** and its toolbar no longer crowds or overlaps when the Conflicts panel is open.
+- **Light mode is easier on the eyes.** Fixed several spots — the file browser, search results, and calendar event colors — where text could become hard to read against the light background.
+
+### Fixed
+
+- **A startup warning about a missing search component** that showed up in some setups. It's now installed correctly every time, automatically.
+- **Clicking a scheduling conflict in the calendar now actually jumps you to it**, in Month and Week view, not just Agenda view.
+- **The calendar's conflict-buffer setting now always shows the value you actually saved**, instead of a stale default.
+- **The file search box could disappear while still filtering**, making a folder look empty for no obvious reason. Fixed.
+- **A failed "New file" or "New folder" no longer discards what you typed.** You can fix the problem and try again without retyping.
+- **Fixed a brief flash of the wrong layout** on tablets and phones right after the page loads.
+- **Fixed dialogs and menus occasionally flashing in the wrong spot** before settling into place.
+
+## 4.1.0 — Journal notes now write themselves, everywhere
+
+Kontexta's journal turns your day-to-day work into readable notes automatically — but until now, only for projects it already knew about. Work done anywhere else (your home folder, a quick script, a repo you hadn't registered yet) just piled up as raw activity, waiting.
+
+### Added
+
+- **Journal notes now generate everywhere, automatically.** A background process periodically turns accumulated activity into readable notes for every project it sees — including folders you haven't formally registered yet. That work lands in a shared "unregistered work" bucket so nothing is lost while you decide whether to register the project properly.
+- **Register a project later without losing its history.** If you eventually register a project that already has notes sitting in the shared bucket, Kontexta links your existing notes to the new project instead of starting over.
+- **Fewer unnecessary reminders.** Kontexta now only nudges you to catch up the journal when there's a meaningful backlog, not after every single action.
+
+### Fixed
+
+- **Some journal activity from unregistered folders was silently never turned into notes.** It just accumulated forever without anyone noticing. It's now caught and processed automatically.
+- **A rare timing gap could permanently skip a few journal entries** written right as notes were being generated for that same project. Fixed.
+
+## 4.0.0 — Calendar: schedule anything, catch conflicts automatically
+
+A brand new module for scheduling and tracking events across whatever you manage — servers, delivery vehicles, store locations, equipment, rooms, anything you name. Works both through chat and as a full visual calendar in the dashboard.
+
+### Added
+
+- **Calendar module.** Add "entities" for anything you want to schedule against — a server, a vehicle, a location, a piece of equipment — draw dependency links between them, and log one-off events like downtime, maintenance, deliveries, or shifts.
+- **Automatic conflict detection.** Kontexta flags overlapping events on the same entity, overlapping events on linked entities, and events scheduled too close together — with a configurable minimum buffer — so scheduling clashes get caught before they happen.
+- **A full Calendar page in the dashboard.** Month, week, and agenda views in the same look and feel as the rest of the app. Add and edit events with a click, manage your entities and their dependencies, and see conflicts highlighted as you plan.
+- **Export to your everyday calendar.** Download any date range as a standard calendar file to import into Outlook, Google Calendar, or Apple Calendar.
+- **New chat tools for calendar management,** so an agent can add an event straight from a pasted email, check what's scheduled this week, or flag conflicts — no need to open the dashboard.
+
+### Updated
+
+- Agent rules guidance refreshed to cover the new calendar tools — re-run the onboarding step on your projects to pick it up.
+
+## 3.3.0 — Publish theme expansion & journal auto-slug
+
+### Added
+
+- **Six new publish themes.** Choose from `flat`, `terminal`, `paper`, `solarized`, `brutalist`, and `ocean` in addition to the original three, each with a live preview in the publish dialog.
+- **Custom tagline for published sites.** Add an optional subtitle under your site's hero title.
+- **Option to hide the hero section** when publishing a site, if you'd rather start straight with content.
+- **"Last built" indicator.** The publish dialog now shows how long ago your site was generated and how big it is.
+- **Smarter project detection in the journal.** Kontexta now figures out which project you're working in automatically in more cases, instead of falling back to a generic bucket.
+
+### Changed
+
+- **Faster first-time setup.** Installing dependencies now compiles the database driver automatically, so there's no separate rebuild step after cloning the repo.
+
+## 3.2.2
+
+### Fixed
+
+- **MCP server could crash on startup in some environments.** A missing dependency caused failures on certain CI/CD and other strict setups. Fixed.
+
+## 3.2.1
+
+### Fixed
+
+- **Docker builds could fail on some platforms.** Native components now always compile correctly for the target platform during a Docker build.
+- **Docker build could fail before a database existed yet.** Build steps that don't need a live database now skip that requirement.
+- **The publish tool sometimes showed the wrong version number.** It now always reflects the actual installed version.
+- **MCP server could hit import errors at startup.** Fixed a bundling issue affecting certain Node.js built-ins.
+
+## 3.2.0 — Security hardening, journal reliability, and publish resilience
+
+### Added
+
+- **One-click reindex in the dashboard.** Refresh the search index across every project and your knowledge base at once; only one refresh runs at a time.
+- **More reliable journal housekeeping.** Coordination across multiple running processes now happens through the database itself, preventing rare race conditions.
+- **Safer handling of requests behind a proxy.** Rate limiting can now correctly identify real visitor addresses behind a trusted proxy, without being spoofable by default.
+- **Stronger file-path safety checks** across the app, guarding against symlink tricks and access to sensitive system folders.
+- **Bigger search results on request,** for when you need more than the default 50 matches in one go.
+
+### Fixed
+
+- **Logging out could be triggered from another site.** Closed this cross-site request vulnerability.
+- **Old session tokens no longer expired.** Sessions now correctly time out after 30 days.
+- **Publish pages were reachable without logging in.** Now require authentication.
+- **A path-traversal weakness in project registration and publishing.** Fixed with stricter checks.
+- **Exporting files as a ZIP could include files outside the intended scope.** Fixed.
+- **A rare timing issue when editing project settings** could let a missing file go undetected. Fixed.
+- **Occasional lost or duplicated journal entries** when two things happened in the exact same instant. Fixed.
+- **Journal entries could lose their original start date** when re-summarized. Fixed.
+- **Archiving old journal files could fail when moving across drives.** Now falls back to a copy instead of erroring.
+- **A rare crash right after the journal shut down.** Now handled gracefully.
+- **Ambiguous timestamps were silently misinterpreted.** A timestamp with no timezone is now rejected with a clear error instead of being guessed.
+- **One broken document could stop an entire publish run.** It's now skipped with a warning instead.
+- **Broken navigation for nested folders when publishing.** Fixed.
+- **Duplicate page elements when publishing docs with matching names.** Now kept unique.
+- **Broken links for folders with special characters when publishing.** Fixed.
+- **Rough edges in the publish dialog.** The folder is now auto-selected, and a successful publish closes the dialog with a clear confirmation instead of updating silently.
+- **Switching files quickly could briefly show stale content.** Fixed.
+- **The project list could occasionally show outdated data after fast changes.** Fixed.
+
+### Changed
+
+- **Sturdier startup and build scripts,** reducing the chance of partial failures.
+- **Test and lint runs no longer get cached incorrectly.**
+
+---
+
+## 3.1.1 — Publish template fixes & build repair
+
+### Fixed
+
+- **Broken diagrams showed an ugly error block.** Invalid diagrams are now hidden gracefully instead of displaying a large error message.
+- **A build failure was blocking releases.** Fixed a type mismatch in the onboarding setup.
+
+---
+
+## 3.1.0 — User profile, security hardening, and reliability
+
+### Added
+
+- **User profile.** Kontexta can now store a short profile about you — name, role, goals, and preferences — so agents understand your context from the start. Missing sections are filled in automatically.
+- **A tool for agents to read your profile,** so they can check it at the start of a session.
+- **Profile prompts in the dashboard,** with a first-run wizard to help new users fill theirs in.
+- **Login rate limiting.** Repeated failed login attempts from the same address are now temporarily locked out to block brute-force attempts.
+
+### Fixed
+
+- **Stronger protection against credential and command injection during git operations.**
+- **A Windows-specific bug** that could misidentify normal folders as temporary or test paths.
+- **Small reliability improvements to journal task tracking.**
+
+### Changed
+
+- **More robust journal entry parsing.**
+
+---
+
+## 3.0.1 — Stability & reliability fixes
+
+### Fixed
+
+- **Duplicate page elements in published docs** when two items shared the same name. Fixed.
+- **Stronger protection against malformed content** breaking published pages.
+- **Invalid values in API documentation badges** are now handled gracefully instead of breaking the page.
+- **Glossary and API entries can now be linked to directly** with their own web addresses.
+
+---
+
+## 3.0.0 — Documentation publishing & developer experience
+
+### Added
+
+- **Publish your knowledge base as a documentation site.** A brand new publishing tool turns your vault into a browsable site, complete with API references, a glossary, and diagrams.
+- **Projects now scan for files automatically the moment you register them,** instead of requiring a manual step.
+
+### Fixed
+
+- **Minor internal test and strict-mode reliability fixes.**
+
+### Changed
+
+- **Version bump to 3.0.0** for this major release.
+
+---
+
+## 2.0.10 — Reliability & developer experience improvements
+
+### Fixed
+
+- **WebSocket works on Cloud Workstations and reverse proxies.** The real-time connection for the status bar and file-watcher now shares the same port as the web app. Previously it needed its own port (3001), which is unreachable in many hosting environments. No config changes needed — it just works now.
+- **Stray "WebSocket failed" error on page reload.** A one-time flicker on fresh page loads is gone. The connection is now properly torn down when React remounts components, so you'll no longer see a ghost error in the console after refreshing.
+- **Dev server sometimes starting on port 3001 instead of 3000.** When you Ctrl-C out of the dev server, the background process could linger and hold port 3000. `pnpm dev:lite` now clears any leftover processes before starting, so it always binds port 3000.
+- **Crash ("Module did not self-register") when running `pnpm dev:lite`.** The database driver was being loaded twice by webpack's hot-reload, causing it to fail on startup. Fixed — the dev server now starts cleanly.
+- **ReferenceError: require is not defined.** Resolved Tailwind CSS typography import issue when running the dev server under Webpack (`pnpm dev:lite`).
+
+### Added
+
+- **`pnpm dev:lite` — a low-memory dev server.** Recommended for Cloud Workstations, small VMs, or any machine where `pnpm dev` crashes or feels sluggish. Uses less memory (capped at 1.5 GB), takes about the same time to start, and handles cleanup automatically. Run it with `pnpm dev:lite` from the repo root.
+
+### Changed
+
+- **Simpler Docker setup — one port instead of two.** The compose files no longer publish a separate WebSocket port. Only port 3000 needs to be exposed. Existing setups that mapped `3001` can drop that mapping.
+- **Faster installs.** Removed 8 unused editor packages and deduplicated the database driver (was installed twice). `pnpm install` is faster and the installed footprint is smaller.
+- **Node.js 22 is now the pinned version.** A `.nvmrc` file is included — run `nvm use` in the repo and you're on the right version automatically. This prevents a class of "native module" errors that happen when you switch Node versions mid-project.
+
+---
+
+## 2.0.8 — Login reliability
+
+### Fixed
+
+- **Login errors showed nothing.** If something went wrong during login or first-time setup, the form would silently reset with no feedback. Errors are now surfaced to the user with a clear message.
+- **Config generation method updated.** Internal improvement to how config files are generated.
+
+---
+
+## 2.0.7 — Docker health check fix
+
+### Fixed
+
+- **Container marked unhealthy on startup.** The health check endpoint was requiring authentication even for localhost requests inside the container, causing Docker to think the app was down. Fixed — health checks from inside the container now work without a session.
+
+---
+
+## 2.0.6 — Glama MCP registry
+
+### Added
+
+- **Listed on Glama.** Kontexta is now discoverable on [Glama's MCP registry](https://glama.ai) with live status badges in the README and MCP manifest.
+
+---
+
+## 2.0.5 — Docker improvements & auth fixes
+
+### Added
+
+- **Configurable Docker setup via environment variables.** No more editing compose files directly:
+  - `HOST_PORT` — which port to expose the web UI on
+  - `DATA_DIR` — where to store your vault on the host
+  - `PROJECT_DIR` — which folder on your machine to mount as projects (required)
+- **Two Docker modes:** `docker-compose.yml` for building from source, `docker-compose.hub.yml` for pulling the pre-built image.
+
+### Fixed
+
+- **Login broken behind a reverse proxy (HTTP).** Sessions weren't sticking when the app was served over plain HTTP behind a proxy. Fixed.
+- **First-run setup got stuck in a loop.** The setup page now loads on demand instead of being pre-built, so you can complete initial configuration without restarting the container.
+- **Database setup failed in some Docker environments.** Auth migrations now always run on startup.
+
+### Changed
+
+- **`PROJECT_DIR` is required.** The container checks for it on startup and gives a clear error if missing, rather than silently misconfiguring paths.
+
+---
+
+## 2.0.4 — GitHub Copilot support
+
+### Added
+
+- **GitHub Copilot is now a supported agent.** Kontexta can onboard Copilot by scaffolding `.github/copilot-instructions.md` with the workflow rules block. No MCP config needed for Copilot — it's file-based.
+
+---
+
+## 2.0.3 — Stability & test suite
+
+### Fixed
+
+- **Several internal tests were broken** after UI and template changes. All 104 web tests are now passing, along with the full core and MCP suites.
+- **`comprehensive-example` Hands template** had an invalid command format. Fixed.
+
+---
+
+## 2.0.2 — Journal data safety
+
+### Fixed
+
+- **Raw journal events could be deleted before being processed.** If housekeeping ran aggressively while distillation was stalled, unprocessed events could be permanently lost. Housekeeping now refuses to delete any log file that contains events newer than the last distillation checkpoint.
+
+---
+
+## 2.0.1 — Clean shutdown
+
+### Fixed
+
+- **In-progress work could be cut short on shutdown.** When the MCP server received a stop signal (Ctrl-C, Docker stop, etc.), it would exit immediately and potentially truncate an in-flight file write or database operation. The server now waits up to 10 seconds for any active work to complete before exiting.
+
+---
+
+## 2.0.0 — Journaling: persistent memory across sessions
+
+The biggest release since launch. Kontexta now maintains a persistent, auto-updating journal of everything your agents do — automatically, with no changes to your workflow.
+
+### What's new
+
+- **Automatic session capture.** Every MCP tool call is silently recorded to a per-project event log. Nothing to configure, nothing to remember to call. Survives crashes and power loss.
+- **Automatic distillation.** Raw events are periodically condensed into structured markdown summaries, organized by task or topic, and indexed alongside your knowledge base so agents can search them.
+- **10 built-in activity patterns** are detected automatically: feature development, refactor, test cycles, error recovery, incident response, exploration, and more.
+- **Voluntary annotations.** Agents can call `journal_note(text)` or `journal_intent(summary)` to mark decisions, pivots, or context worth preserving.
+- **Git-aware.** Branch changes and new commits are captured automatically, with ticket IDs (e.g. `PROJ-123`) extracted and indexed for cross-referencing.
+- **Journal panel in the dashboard.** Configure retention, distillation mode, and scheduling. View open tasks and live distillation status.
+- **Enforcement modes.** `lenient` (default) — nudges agents when a backlog builds up. `strict` — blocks read tools until the backlog is distilled. `mechanical-only` — distillation runs in-process, no LLM involved.
+- **Housekeeping tool.** `housekeep_journal` prunes old raw logs and archives cold tasks according to your retention settings.
+- **Background scheduler.** When the dashboard is running, distillation runs every 15 minutes and housekeeping every 24 hours, deferring automatically when the MCP server is active.
+
+### Removed
+
+- **`journal_append` tool removed.** Replaced by automatic Layer 1 capture and the new `journal_note` / `journal_intent` tools. The manual journaling rule in agent context files is also gone — it's all automatic now.
+
+### Updated
+
+- Agent rules block bumped to `1.3.0` — re-run `onboard_agent` on your projects to get the updated guidance.
+- MCP tool count: 50 → 52 (two new journal tools).
+
+---
+
+## 1.0.0 — Initial release (Brain + Hands + Eyes)
+
+The first public release of Kontexta following the rename from mnexis. This entry summarizes everything shipped across ~30 pre-rename releases.
+
+### Brain — knowledge vault
+
+- Local markdown vault with two-way git sync.
+- SQLite full-text search with stemming (`porter unicode61`) — searches titles and content across all your files.
+- ~50 MCP tools covering read, write, search, organize, tag, history, and discovery.
+- Every tool response includes a token estimate so agents can budget context.
+- Web clipping via `clip_url` with auth-wall detection and SSRF protection.
+
+### Hands — sandboxed commands
+
+- Per-project `kontexta.json` registers shell commands as MCP tools.
+- Strict sandbox: verified working directory, stripped environment, hard timeouts, no shell execution.
+- Cryptographic confirmation tokens for high-risk commands.
+- ReDoS-proof parameter validation.
+
+### Eyes — feedback loop
+
+- `whats_new` — catch up on what changed since your last session.
+- `diff_against_disk` + `refresh_index` — detect and reconcile out-of-band changes.
+- `journal_append` — manual session journaling (replaced by auto-capture in 2.0.0).
+
+### Dashboard
+
+- Three-pane layout (folders / files / content), light/dark theme.
+- In-app tool catalogue at `/docs` with search.
+- Visual `kontexta.json` editor with live validation.
+- Real-time git sync status via WebSockets.
+- Favorites, tags, web clipping, ZIP export, KB import.
+
+### Distribution
+
+- `npx -y kontexta-mcp` — zero-install MCP server with prebuilt binaries for Linux/macOS/Windows.
+- `safiyu/kontexta:latest` — Docker image for the full dashboard.
+- Listed on [Glama MCP Registry](https://glama.ai).
+
+### Security
+
+- SSRF protection blocks private/loopback IPs, cloud metadata endpoints, and redirect chains.
+- Path containment checks on all file operations.
+- Credential redaction strips secrets from git error output.
+- Symlink-safe directory walkers.
+
+### Naming
+
+Renamed from **mnexis** → **kontexta**. Versioning reset to `1.0.0`. Pre-rename history (~30 releases, 0.1.0 → 9.5.2) is preserved in git.

package/bundle/standalone/apps/web/.next/BUILD_ID

@@ -0,0 +1 @@
+TwaiLte1NHCp3gRYUc-go