memorix 1.8.1 → 1.8.3

package/dist/vector-backfill-runner.js

@@ -104,8 +104,10 @@ function loadEnvFile(filePath) {
   loadedEnvFiles.push(filePath);
 }
 function loadDotenv(projectRoot, options = {}) {
-  if (dotenvLoaded && dotenvProjectRoot === (projectRoot ?? null)) return;
-  if (dotenvLoaded && dotenvProjectRoot !== (projectRoot ?? null)) {
+  const userHomeDir = options.userHomeDir ?? homedir();
+  const normalizedProjectRoot = projectRoot ?? null;
+  if (dotenvLoaded && dotenvProjectRoot === normalizedProjectRoot && dotenvHomeDir === userHomeDir) return;
+  if (dotenvLoaded && (dotenvProjectRoot !== normalizedProjectRoot || dotenvHomeDir !== userHomeDir)) {
     resetDotenv();
   }
   loadedEnvFiles.length = 0;
@@ -114,9 +116,10 @@ function loadDotenv(projectRoot, options = {}) {
   if (projectRoot) {
     loadEnvFile(getProjectDotenvPath(projectRoot));
   }
-  loadEnvFile(getGlobalDotenvPath(options.userHomeDir ?? homedir()));
+  loadEnvFile(getGlobalDotenvPath(userHomeDir));
   dotenvLoaded = true;
-  dotenvProjectRoot = projectRoot ?? null;
+  dotenvProjectRoot = normalizedProjectRoot;
+  dotenvHomeDir = userHomeDir;
 }
 function resetDotenv() {
   for (const key of injectedKeys) {
@@ -125,13 +128,14 @@ function resetDotenv() {
   injectedKeys.clear();
   dotenvLoaded = false;
   dotenvProjectRoot = null;
+  dotenvHomeDir = null;
   loadedEnvFiles.length = 0;
   loadedEnvKeys.clear();
 }
 function getLoadedEnvFiles() {
   return loadedEnvFiles;
 }
-var dotenvLoaded, dotenvProjectRoot, loadedEnvFiles, loadedEnvKeys, loadedEnvValues, injectedKeys;
+var dotenvLoaded, dotenvProjectRoot, dotenvHomeDir, loadedEnvFiles, loadedEnvKeys, loadedEnvValues, injectedKeys;
 var init_dotenv_loader = __esm({
   "src/config/dotenv-loader.ts"() {
     "use strict";
@@ -139,6 +143,7 @@ var init_dotenv_loader = __esm({
     init_config_paths();
     dotenvLoaded = false;
     dotenvProjectRoot = null;
+    dotenvHomeDir = null;
     loadedEnvFiles = [];
     loadedEnvKeys = /* @__PURE__ */ new Set();
     loadedEnvValues = /* @__PURE__ */ new Map();
@@ -2372,33 +2377,33 @@ __export(config_exports, {
   resetConfigCache: () => resetConfigCache,
   resetDotenv: () => resetDotenv
 });
-function getLLMApiKey() {
-  return getResolvedMemoryLane().llm.apiKey;
+function getLLMApiKey(options = {}) {
+  return getResolvedMemoryLane(options).llm.apiKey;
 }
-function getLLMProvider() {
-  const provider2 = getResolvedMemoryLane().llm.provider;
+function getLLMProvider(options = {}) {
+  const provider2 = getResolvedMemoryLane(options).llm.provider;
   if (provider2) return provider2;
   if (process.env.ANTHROPIC_API_KEY && !process.env.OPENAI_API_KEY) return "anthropic";
   if (process.env.OPENROUTER_API_KEY && !process.env.OPENAI_API_KEY) return "openrouter";
   return "openai";
 }
-function getLLMModel(providerDefault) {
-  return getResolvedMemoryLane().llm.model || providerDefault;
+function getLLMModel(providerDefault, options = {}) {
+  return getResolvedMemoryLane(options).llm.model || providerDefault;
 }
-function getLLMBaseUrl(providerDefault) {
-  return getResolvedMemoryLane().llm.baseUrl || providerDefault;
+function getLLMBaseUrl(providerDefault, options = {}) {
+  return getResolvedMemoryLane(options).llm.baseUrl || providerDefault;
 }
-function getAgentLLMApiKey() {
-  return getResolvedAgentLane().apiKey;
+function getAgentLLMApiKey(options = {}) {
+  return getResolvedAgentLane(options).apiKey;
 }
-function getAgentLLMProvider() {
-  return getResolvedAgentLane().provider || getLLMProvider();
+function getAgentLLMProvider(options = {}) {
+  return getResolvedAgentLane(options).provider || getLLMProvider(options);
 }
-function getAgentLLMModel(providerDefault) {
-  return getResolvedAgentLane().model || getLLMModel(providerDefault);
+function getAgentLLMModel(providerDefault, options = {}) {
+  return getResolvedAgentLane(options).model || getLLMModel(providerDefault, options);
 }
-function getAgentLLMBaseUrl(providerDefault) {
-  return getResolvedAgentLane().baseUrl || getLLMBaseUrl(providerDefault);
+function getAgentLLMBaseUrl(providerDefault, options = {}) {
+  return getResolvedAgentLane(options).baseUrl || getLLMBaseUrl(providerDefault, options);
 }
 function getEmbeddingMode() {
   const provider2 = getResolvedEmbeddingLane().provider?.toLowerCase()?.trim();
@@ -4657,18 +4662,19 @@ async function* callLLMWithToolsStream(messages, tools) {
 }
 function initLLM(options = {}) {
   const scope = options.scope ?? "memory";
-  const apiKey = scope === "agent" ? getAgentLLMApiKey() : getLLMApiKey();
+  const configOptions = { projectRoot: options.projectRoot, homeDir: options.homeDir };
+  const apiKey = scope === "agent" ? getAgentLLMApiKey(configOptions) : getLLMApiKey(configOptions);
   if (!apiKey) {
     currentConfig = null;
     return null;
   }
-  const provider2 = scope === "agent" ? getAgentLLMProvider() : getLLMProvider();
+  const provider2 = scope === "agent" ? getAgentLLMProvider(configOptions) : getLLMProvider(configOptions);
   const defaults2 = PROVIDER_DEFAULTS[provider2] ?? PROVIDER_DEFAULTS.openai;
   currentConfig = {
     provider: provider2,
     apiKey,
-    model: scope === "agent" ? getAgentLLMModel(defaults2.model) : getLLMModel(defaults2.model),
-    baseUrl: scope === "agent" ? getAgentLLMBaseUrl(defaults2.baseUrl) : getLLMBaseUrl(defaults2.baseUrl)
+    model: scope === "agent" ? getAgentLLMModel(defaults2.model, configOptions) : getLLMModel(defaults2.model, configOptions),
+    baseUrl: scope === "agent" ? getAgentLLMBaseUrl(defaults2.baseUrl, configOptions) : getLLMBaseUrl(defaults2.baseUrl, configOptions)
   };
   return currentConfig;
 }

package/docs/1.2.0-PROVIDER-QUALITY.md

@@ -58,8 +58,9 @@ Memorix only considers the external provider when all of these are true:
    root;
 4. the index has no reported pending changes or worktree mismatch;
 5. the bounded command completes before its configured timeout; and
-6. the returned JSON passes Memorix's schema, path, count, and output-size
-   validation.
+6. the returned context JSON, or the official v1.5.0 `explore` output after a
+   context-command failure, passes Memorix's schema, path, relation, count,
+   and output-size validation.
 
 Memorix never runs `codegraph init`, `index`, or `sync` on the user's behalf.
 It does not transmit the repository to a remote service. Its default request is
@@ -90,7 +91,7 @@ external_context = "auto"
 # external_command = "C:\\tools\\codegraph.cmd"
 
 # A bounded local query. Values outside the safe range are clamped.
-external_timeout_ms = 1200
+external_timeout_ms = 3000
 ~~~
 
 The equivalent YAML keys are `externalContext`, `externalCommand`, and
@@ -114,12 +115,19 @@ The status is visible through `memorix codegraph status --json`, `memorix
 doctor --json`, and Project Context JSON. Prompt output keeps it compact: it
 adds semantic start points only when a valid external outline is available, and
 adds one caution when a requested external outline was not safe to use.
+An external status of `ready` means only that the index is initialized and
+current; it does not prove that the installed CLI exposes `context`. The task
+diagnostics therefore record `context` and `explore` independently.
 
 ## Validation and Fallback
 
 The external adapter executes without a shell, pins the working directory to
-the actual project root, uses a bounded timeout and stdout limit, and accepts
-JSON only. It rejects a result when:
+the actual project root, uses a bounded timeout and stdout limit, and tries
+`context` first. CodeGraph v1.5.0 does not register that command, so a failed
+or invalid context result triggers the official `explore --path <root>
+--max-files 4 <task>` command. JSON context output and the stable explore
+outline/relationship markers are accepted only after the same strict path and
+relation validation. It rejects a result when:
 
 - the status belongs to another project root;
 - the index is uninitialized, has pending changes, or reports a worktree
@@ -145,7 +153,8 @@ runner. It verifies:
 3. Stale, mismatched, malformed, timed-out, and oversized external output
    safely falls back to Lite.
 4. Raw code blocks and credentials do not enter the default Workset.
-5. `codegraph status` and `doctor` identify the active/fallback provider.
+5. `codegraph status` and `doctor` identify the active/fallback provider, and
+   distinguish a healthy index from a usable task-query command.
 
 The optional real smoke can be run on a Windows project that already has an
 indexed CodeGraph installation:

package/docs/1.3.3-MULTIMODAL-MEDIA-AND-MCP-COMPAT.md

@@ -158,15 +158,16 @@ layer, not Memorix product identity.
 - Product operations receive a resolved project/workspace binding and explicit
   actor metadata; they do not read an HTTP session map directly.
 - The old `Mcp-Session-Id` map remains isolated in `serve-http` as a legacy
-  adapter until the current SDK has a stable released implementation of the
-  2026-07-28 protocol.
+  adapter. A low-level `server/discover` adapter now covers the required
+  2026-07-28 discovery result without upgrading the pinned v1 SDK.
 - Asset IDs, media job IDs, project IDs, and attachment targets are explicit
   durable identifiers. They are never inferred from a live MCP connection.
 - New media tools work through stdio, legacy streamable HTTP, and direct CLI
   invocation with identical project binding behavior.
-- No release depends on an unreleased MCP SDK 2.x alpha. The current server
-  remains compatible with existing Codex, Claude Code, OpenCode, and other
-  configured clients.
+- No release depends on the MCP TypeScript SDK v2. The current server remains
+  compatible with existing legacy clients and supports versionless list/call
+  through the v1 SDK's legacy envelopes. The adapter does not claim modern
+  result caching, Tasks, subscriptions, or complete 2026 conformance.
 
 ## Non-goals
 
@@ -177,7 +178,7 @@ layer, not Memorix product identity.
 - No automatic audio/video transcription, frame extraction, or arbitrary media
   understanding in 1.3.3. The asset model makes those future derivations safe.
 - No forced migration to a protocol version that the published MCP TypeScript
-  SDK does not yet support.
+  SDK does not yet support; discovery is a narrow compatibility adapter.
 - No additional swarm of low-level MCP tools; CLI is the complete management
   surface and MCP exposes only small agent-facing operations.
 

package/docs/1.8.0-RELEASE-CANDIDATE-SPEC.md

@@ -17,14 +17,19 @@ Status: accepted implementation contract for Memorix 1.8.0.
 
 ## Compatibility Contract
 
-The MCP 2026-07-28 protocol is the external stateless request contract.
-Memorix also accepts the legacy stateful Streamable HTTP contract with
-`Mcp-Session-Id`. Stateless requests carry an explicit `Mcp-Project-Handle`
-that is persisted in SQLite and survives service restart; the handle, rather
-than a transport session id, owns project routing. The pinned SDK's accepted
-wire version is normalized internally at the HTTP boundary, while responses
-continue to advertise current protocol metadata. Unsupported Tasks/polling is
-reported by capability diagnostics rather than simulated.
+Memorix preserves the legacy 2025-era initialize contract, including stdio and
+stateful Streamable HTTP with `Mcp-Session-Id`. Memorix 1.8.3 also registers a
+low-level `server/discover` compatibility adapter for the 2026-07-28 request.
+Its `DiscoverResult` is complete for the required identity, versions,
+capabilities, and private zero-TTL cache hint. Versionless `tools/list` and
+`tools/call` are accepted by the pinned v1 SDK and retain its legacy result
+envelopes. The stdio startup gate reads bounded newline-delimited input before
+project initialization, answers discovery immediately, and replays all other
+messages in order; EOF is deferred until the queued input is released. HTTP
+stateless project handles remain a compatibility adapter: they
+own project routing, but do not turn the v1 SDK into a complete 2026 runtime.
+Tasks, subscriptions, and list-response caching are unsupported and are not
+advertised or simulated.
 
 Antigravity is the primary setup target. Gemini CLI remains a compatibility and
 migration path. GitHub issue #204 (WorkBuddy) is intentionally not merged or

package/docs/API_REFERENCE.md

@@ -147,17 +147,20 @@ preserved. A memory without explicit feedback keeps the legacy relevance and
 retention score. The first feedback event opts that candidate into the
 feedback projection.
 
-### HTTP MCP Compatibility
-
-Legacy clients use stateful Streamable HTTP with `Mcp-Session-Id`. Current
-stateless clients send `Mcp-Protocol-Version: 2026-07-28` and receive a durable
-`Mcp-Project-Handle`. Send that handle on subsequent requests; it is persisted
-in SQLite and remains valid across service restart until its TTL expires.
-`/protocol-diagnostics` reports the current/legacy contract and explicitly
-reports Tasks and polling as unsupported when the pinned SDK cannot provide a
-durable implementation. When MCP discovery is unavailable, use one bounded
-`memorix context --fallback` request for a task; repeated fallback probing is
-rejected by the local budget.
+### MCP Compatibility
+
+Legacy clients use stateful Streamable HTTP with `Mcp-Session-Id` and the
+2025-era `initialize` handshake. The 1.8.3 stdio server starts a bounded
+newline-delimited JSON-RPC gate before project initialization: it answers the
+2026-07-28 `server/discover` request before `initialize`, then replays other
+requests, notifications, and responses in order into the pinned SDK transport.
+Versionless `tools/list` and `tools/call` use the SDK's legacy result envelopes.
+HTTP stateless clients may use a durable
+`Mcp-Project-Handle`; `/protocol-diagnostics` labels this as compatibility-only.
+Modern result metadata is discovery-only with a private zero-TTL hint. Tasks,
+subscriptions, and list-response caching are unsupported. When MCP discovery
+is unavailable, use one bounded `memorix context --fallback` request for a
+task; repeated fallback probing is rejected by the local budget.
 
 The built-in Lite provider indexes common code files with lightweight file, symbol, and import facts. It is a structural fallback, not a language-server-quality graph. When a project already has a healthy local CodeGraph index, `[codegraph].external_context = "auto"` may add a validated, bounded semantic outline to the Workset. Memorix never initializes, syncs, or exports that external index, and never stores its raw source output. `memorix codegraph status --json`, `memorix doctor --json`, and Project Context JSON identify the actual provider quality.
 

package/docs/CONFIGURATION.md

@@ -74,7 +74,7 @@ max_file_bytes = 2097152
 # Optional: use an already-indexed local CodeGraph only when it is healthy.
 external_context = "auto"
 # external_command = "C:\\tools\\codegraph.cmd"
-external_timeout_ms = 1200
+external_timeout_ms = 3000
 
 [server]
 transport = "stdio"
@@ -334,7 +334,7 @@ Common keys:
 - `max_file_bytes = 2097152` (2 MiB per source file by default)
 - `external_context = "auto"` (`"off"` keeps the built-in Lite provider only)
 - `external_command = "C:\\tools\\codegraph.cmd"` (optional path when CodeGraph is not on `PATH`)
-- `external_timeout_ms = 1200` (bounded local semantic-query timeout)
+- `external_timeout_ms = 3000` (bounded local semantic-query timeout; values are clamped to 5 seconds)
 
 Legacy YAML uses `codegraph.excludePatterns`, `codegraph.maxFileBytes`,
 `codegraph.externalContext`, `codegraph.externalCommand`, and

package/docs/DEVELOPMENT.md

@@ -13,8 +13,8 @@ Memorix is a TypeScript project built around:
 
 ## Current Development Baseline
 
-The current release work targets the **1.8.1 release line** and package metadata
-is kept at `1.8.1` for this release commit.
+The current release work targets the **1.8.3 release line** and package metadata
+is kept at `1.8.3` for this release commit.
 
 Contributors should assume the following areas are part of the current release line:
 
@@ -96,6 +96,7 @@ npm run test:watch
 
 ```bash
 memorix serve
+node scripts/mcp-stdio-smoke.mjs
 memorix background start
 memorix status
 ```

package/docs/README.md

@@ -63,6 +63,7 @@ The public docs are organized by user intent:
 | Topic | Document |
 | --- | --- |
 | MCP / CLI commands | [API_REFERENCE.md](API_REFERENCE.md) |
+| MCP protocol discovery and compatibility boundaries | [API_REFERENCE.md](API_REFERENCE.md), [1.3.3 MCP Compatibility](1.3.3-MULTIMODAL-MEDIA-AND-MCP-COMPAT.md), and [1.8.0 Release Specification](1.8.0-RELEASE-CANDIDATE-SPEC.md) |
 | Plugin, rules, hooks, skills, and MCP support matrix | [INTEGRATIONS.md](INTEGRATIONS.md) |
 | TypeScript SDK | [../README.md#sdk](../README.md#sdk) |
 | Workspace and rules sync | [API_REFERENCE.md § Workspace and Rules](API_REFERENCE.md#8-workspace-and-rules-tools) |
@@ -93,7 +94,7 @@ The public docs are organized by user intent:
 | 1.2 honest Lite and optional semantic CodeGraph provider contract | [1.2 Provider Quality](1.2.0-PROVIDER-QUALITY.md) |
 | 1.3 long-term memory model, source boundary, and lifecycle | [1.3 Memory Architecture](1.3-MEMORY-ARCHITECTURE.md) |
 | Active context-control work | [1.2.2 Memory Control Plane](1.2.2-MEMORY-CONTROL-PLANE.md) |
-| 1.8 context-control acceptance contract | [1.8.0 Release Specification](1.8.0-RELEASE-CANDIDATE-SPEC.md) |
+| 1.8.3 stdio discovery startup and compatibility acceptance contract | [1.8.0 Release Specification](1.8.0-RELEASE-CANDIDATE-SPEC.md) |
 | Historical cloud sync and multi-agent research | [CLOUD_SYNC_AND_MULTI_AGENT_RESEARCH.md](CLOUD_SYNC_AND_MULTI_AGENT_RESEARCH.md) |
 | Known issues and old roadmap notes | [KNOWN_ISSUES_AND_ROADMAP.md](KNOWN_ISSUES_AND_ROADMAP.md) |
 
@@ -121,7 +122,7 @@ Historical/deep-reference documents may describe older designs. If they conflict
 
 ## Current Product Line
 
-The current product line is **1.8.1**. The authoritative acceptance contract is
+The current product line is **1.8.3**. The authoritative acceptance contract is
 [1.8.0 Release Specification](1.8.0-RELEASE-CANDIDATE-SPEC.md).
 The current baseline has:
 
@@ -140,8 +141,13 @@ The current baseline has:
 - `~/.memorix/config.toml` and project `memorix.toml` are the user-facing configuration model
 - legacy `memorix.yml`, `.env`, and `config.json` files are still read for compatibility, but new setups should use TOML
 
-For MCP compatibility, 1.8 preserves legacy stateful Streamable HTTP and
-supports 2026-07-28 stateless requests with durable project handles. Tasks and
-polling are reported as unsupported when the pinned SDK cannot provide a real
-durable implementation. Antigravity is the primary setup target; Gemini CLI is
-the compatibility path. See the release specification for the exact contract.
+For MCP compatibility, 1.8.3 preserves legacy 2025-era initialize and
+stateful Streamable HTTP behavior. `memorix serve` starts a bounded stdio
+startup gate: pre-initialize 2026-07-28 `server/discover` is answered with a
+complete discovery result, and other early JSON-RPC messages replay in order
+through the pinned SDK transport. Versionless `tools/list` and `tools/call`
+continue through the SDK's legacy result envelopes. Modern result metadata is
+limited to the discovery response (`ttlMs: 0`, private cache scope); Tasks,
+subscriptions, and list-response caching are unsupported. Stateless HTTP
+project handles are a compatibility adapter, not a claim of complete 2026
+conformance.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "memorix",
   "mcpName": "io.github.AVIDS2/memorix",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "description": "Local-first shared memory layer for AI coding agents across MCP clients, Git history, reasoning context, and project sessions.",
   "type": "module",
   "sideEffects": false,
@@ -62,6 +62,7 @@
     "update-models": "npm --workspace @memorix/ai run update-models",
     "start": "node dist/index.js",
     "test": "vitest run --no-file-parallelism --maxWorkers=1 --minWorkers=1",
+    "test:mcp-stdio-smoke": "node scripts/mcp-stdio-smoke.mjs",
     "test:watch": "vitest",
     "test:llm-live": "MEMORIX_RUN_LIVE_LLM_TESTS=1 vitest run tests/integration/formation-llm-quality.test.ts",
     "test:e2e": "vitest run tests/e2e/",

package/plugins/antigravity/memorix/plugin.json

@@ -1,3 +1,4 @@
 {
-  "name": "memorix"
+  "name": "memorix",
+  "version": "1.8.3"
 }

package/plugins/claude/memorix/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "memorix",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "description": "Shared workspace memory for Claude Code and other AI coding agents.",
   "author": {
     "name": "AVIDS2",

package/plugins/codebuddy/memorix/.codebuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "description": "Local-first project memory for CodeBuddy Code and other coding agents.",
   "author": {
     "name": "AVIDS2",

package/plugins/codex/memorix/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "description": "Shared workspace memory for Codex and other AI coding agents.",
   "author": {
     "name": "AVIDS2",

package/plugins/copilot/memorix/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "description": "Shared local workspace memory for GitHub Copilot CLI and other AI coding agents.",
   "author": {
     "name": "AVIDS2",

package/plugins/gemini/memorix/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "mcpServers": {
     "memorix": {
       "command": "memorix",

package/plugins/hermes/memorix/plugin.yaml

@@ -1,5 +1,5 @@
 name: memorix
-version: "1.1.1"
+version: "1.8.3"
 description: Shared workspace memory bridge for Hermes Agent.
 author: AVIDS2
 license: Apache-2.0

package/plugins/omp/memorix/package.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix-omp-package",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "description": "Memorix shared workspace memory package for Oh-my-Pi.",
   "license": "Apache-2.0",
   "keywords": [

package/plugins/openclaw/memorix/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "description": "Shared workspace memory for OpenClaw and other AI coding agents.",
   "author": {
     "name": "AVIDS2",

package/plugins/pi/memorix/package.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix-pi-package",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "description": "Memorix shared workspace memory package for Pi coding agent.",
   "license": "Apache-2.0",
   "keywords": [

package/server.json

@@ -2,12 +2,12 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.AVIDS2/memorix",
   "title": "Memorix",
-  "description": "Local-first persistent project memory for AI coding agents across MCP clients and sessions.",
+  "description": "Local-first project memory with legacy MCP and 2026 discovery compatibility.",
   "repository": {
     "url": "https://github.com/AVIDS2/memorix",
     "source": "github"
   },
-  "version": "1.8.1",
+  "version": "1.8.3",
   "websiteUrl": "https://github.com/AVIDS2/memorix#readme",
   "icons": [
     {
@@ -22,7 +22,7 @@
     {
       "registryType": "npm",
       "identifier": "memorix",
-      "version": "1.8.1",
+      "version": "1.8.3",
       "runtimeHint": "npx",
       "packageArguments": [
         {

package/src/cli/commands/serve-http.ts

@@ -40,6 +40,12 @@ export const EXPIRED_SESSION_TTL_MS = 10 * 60 * 1000;
 /** Pinned SDK protocol accepted internally while the HTTP boundary speaks the current stateless contract. */
 export const MCP_SDK_COMPAT_PROTOCOL_VERSION = '2025-11-25';
 
+/** Modern discovery is allowed before a durable project handle exists. */
+export function isServerDiscoverRequest(body: unknown): boolean {
+  return Boolean(body && typeof body === 'object' && !Array.isArray(body)
+    && (body as { method?: unknown }).method === 'server/discover');
+}
+
 export function parseSessionTimeoutMs(raw: string | undefined): number {
   const value = raw?.trim();
   if (!value) return DEFAULT_SESSION_TIMEOUT_MS;
@@ -427,7 +433,7 @@ export default defineCommand({
         ? req.headers['mcp-project-root']
         : undefined;
       const root = persisted?.projectRoot ?? requestedRoot ?? projectRoot;
-      if (!persisted && !isInitializeRequest(body)) {
+      if (!persisted && !isInitializeRequest(body) && !isServerDiscoverRequest(body)) {
         res.writeHead(400, { 'Content-Type': 'application/json' });
         res.end(JSON.stringify({ jsonrpc: '2.0', error: { code: -32000, message: 'Stateless MCP requests require Mcp-Project-Handle; initialize first.' }, id: null }));
         return;
@@ -505,7 +511,9 @@ export default defineCommand({
 
       const requestedProtocol = req.headers['mcp-protocol-version'];
       const statelessRequested = req.headers['mcp-stateless'] === 'true'
-        || requestedProtocol === CURRENT_MCP_PROTOCOL_VERSION;
+        || requestedProtocol === CURRENT_MCP_PROTOCOL_VERSION
+        || typeof req.headers['mcp-project-handle'] === 'string'
+        || isServerDiscoverRequest(body);
       if (!sessionId && statelessRequested) {
         await handleStatelessPost(req, res, body);
         return;

package/src/cli/commands/serve.ts

@@ -4,6 +4,8 @@
 
 import { defineCommand } from 'citty';
 import { resolveToolProfile } from '../../server/tool-profile.js';
+import { getMcpServerInfo } from '../../server/mcp-discovery.js';
+import { StdioStartupGate } from '../../server/stdio-startup-gate.js';
 import { mcpFileUriToPath } from '../mcp-root-path.js';
 
 export default defineCommand({
@@ -29,6 +31,28 @@ export default defineCommand({
     },
   },
   run: async ({ args }) => {
+    // Take ownership of stdin before project/config/runtime initialization. The
+    // gate answers handshake-free discovery and queues every other JSON-RPC line
+    // until the SDK transport is connected, so cold starts cannot lose requests.
+    const startupGate = new StdioStartupGate({
+      stdin: process.stdin,
+      stdout: process.stdout,
+      serverInfo: getMcpServerInfo(),
+      onError: (error) => {
+        console.error(`[memorix] stdio startup gate error: ${error.message}`);
+        // The stream is no longer safe to replay after an input-limit or I/O
+        // failure. Exit instead of leaving a half-connected MCP process alive.
+        process.exit(1);
+      },
+      onEnd: () => {
+        console.error('[memorix] stdin closed — exiting');
+        // The gate has already ended the transport input when ready. Set the
+        // exit code and let pending JSON-RPC stdout writes drain naturally.
+        process.exitCode = 0;
+      },
+    });
+    startupGate.start();
+
     const { StdioServerTransport } = await import(
       '@modelcontextprotocol/sdk/server/stdio.js'
     );
@@ -37,12 +61,6 @@ export default defineCommand({
     const { homedir } = await import('node:os');
     const { resolveServeProject } = await import('./serve-shared.js');
 
-    // Auto-exit when stdio pipe breaks (IDE closed) to prevent orphaned processes
-    process.stdin.on('end', () => {
-      console.error('[memorix] stdin closed — exiting');
-      process.exit(0);
-    });
-
     // Priority: explicit --cwd arg > MEMORIX_PROJECT_ROOT env > INIT_CWD (npm lifecycle) > process.cwd()
     let safeCwd: string;
     try { safeCwd = process.cwd(); } catch { safeCwd = homedir(); }
@@ -85,8 +103,9 @@ export default defineCommand({
       ? { toolProfile, deferProjectRuntimeInit: true }
       : { allowUntrackedFallback: allowUntracked, deferProjectInitUntilBound: !allowUntracked, deferProjectRuntimeInit: true, toolProfile };
     const { server, projectId, deferredInit, switchProject } = await createMemorixServer(projectRoot, undefined, undefined, serverOptions);
-    const transport = new StdioServerTransport();
+    const transport = new StdioServerTransport(startupGate.input, process.stdout);
     await server.connect(transport);
+    startupGate.markReady();
 
     console.error(`[memorix] MCP Server running on stdio (project: ${projectId})`);
     console.error(`[memorix] Project root: ${detected?.rootPath ?? projectRoot}`);