minutes-mcp 0.25.4 → 0.25.6

package/dist/corpus-lease.d.ts

@@ -133,6 +133,8 @@ export type CorpusLeaseHooks = {
 export declare function awaitDeferredCorpusReleasesForTests(timeoutMs?: number): Promise<boolean>;
 /** Test-only: the live retained-corpus charge, for leak assertions. */
 export declare function reservedCorpusMemoryBytesForTests(): number;
+/** @internal Pure policy seam for test-harness gate regression coverage. */
+export declare function resolveAuthorizationTimeoutMsForTest(timeoutMs: number | undefined, environment: Readonly<NodeJS.ProcessEnv>): number;
 export type CorpusLeaseWorkerRequest = Readonly<{
     root: string;
     budgets: Readonly<CorpusReadBudgets>;

package/dist/corpus-lease.js

@@ -9,6 +9,7 @@ import { nodeChildEnvironment } from "./node-child.js";
 const MAX_AUTHORIZATION_ATTEMPTS = 2;
 const DEFAULT_FENCE_TIMEOUT_MS = 5_000;
 const DEFAULT_AUTHORIZATION_TIMEOUT_MS = 15_000;
+const MAX_TEST_HARNESS_AUTHORIZATION_TIMEOUT_MS = 120_000;
 const MAX_ACTIVE_WATCHERS = 64;
 // Snapshot content is retained as JavaScript strings, whose backing storage
 // may require two bytes per source byte. Reserve that worst case for the full
@@ -185,12 +186,39 @@ function resolveFenceTimeout(timeoutMs) {
     }
     return Math.min(requested, DEFAULT_FENCE_TIMEOUT_MS);
 }
-function authorizationDeadline(timeoutMs) {
-    const requested = timeoutMs ?? DEFAULT_AUTHORIZATION_TIMEOUT_MS;
+function resolveAuthorizationTimeoutMs(timeoutMs, environment = process.env) {
+    const configuredOverride = environment.MINUTES_CORPUS_AUTH_TIMEOUT_MS;
+    // A longer deadline is test infrastructure, not application configuration.
+    // Requiring both markers keeps an ambient production environment variable
+    // from weakening the fail-closed 15 second cap. Only the repository's test
+    // harness sets this pair; the spawned lease worker inherits it from the
+    // parent. Invalid gated values fail closed instead of silently relaxing or
+    // changing the requested budget.
+    const testHarnessOverride = environment.NODE_ENV === "test" &&
+        environment.MINUTES_TEST_HARNESS === "1" &&
+        configuredOverride !== undefined
+        ? configuredOverride
+        : undefined;
+    if (testHarnessOverride !== undefined &&
+        !/^[1-9]\d*$/.test(testHarnessOverride)) {
+        throw new Error("Access denied: invalid meeting corpus authorization timeout");
+    }
+    const cap = testHarnessOverride === undefined
+        ? DEFAULT_AUTHORIZATION_TIMEOUT_MS
+        : Math.min(Number(testHarnessOverride), MAX_TEST_HARNESS_AUTHORIZATION_TIMEOUT_MS);
+    const requested = timeoutMs ?? cap;
     if (!Number.isSafeInteger(requested) || requested < 1) {
         throw new Error("Access denied: invalid meeting corpus authorization timeout");
     }
-    return process.hrtime.bigint() + BigInt(Math.min(requested, DEFAULT_AUTHORIZATION_TIMEOUT_MS)) * 1000000n;
+    return Math.min(requested, cap);
+}
+/** @internal Pure policy seam for test-harness gate regression coverage. */
+export function resolveAuthorizationTimeoutMsForTest(timeoutMs, environment) {
+    return resolveAuthorizationTimeoutMs(timeoutMs, environment);
+}
+function authorizationDeadline(timeoutMs) {
+    return (process.hrtime.bigint() +
+        BigInt(resolveAuthorizationTimeoutMs(timeoutMs)) * 1000000n);
 }
 function remainingAuthorizationMs(deadline) {
     const remainingNs = deadline - process.hrtime.bigint();
@@ -1358,8 +1386,16 @@ function parentControls(commands, pauses) {
  * those name a caller-actionable limit rather than an authorization outcome.
  */
 export async function withStableCorpusLease(root, operation, hooks = {}) {
+    const authorizationStarted = process.hrtime.bigint();
     try {
-        return await dispatchStableCorpusLease(root, operation, hooks);
+        const result = await dispatchStableCorpusLease(root, operation, hooks);
+        const durationMs = Number((process.hrtime.bigint() - authorizationStarted + 999999n) / 1000000n);
+        // Match denial diagnostics: content-free, operator-visible, deferred, and
+        // unable to turn an authorization result into an application failure.
+        setImmediate(() => {
+            writeOperatorDiagnostic(`[corpus-lease] authorized (authorization duration ${durationMs}ms)\n`);
+        });
+        return result;
     }
     catch (error) {
         if (error instanceof CorpusLeaseChangedError) {

package/dist/index.js

@@ -1570,7 +1570,7 @@ const COPILOT_SUPPORTED = hasFeature(CLI_CAPABILITIES, "copilot_realtime");
 // `./version.ts` (see issue #183). Hosted `.mcpb` bundles will run
 // against CLIs with different minor/patch numbers within the same
 // major; that is explicitly supported.
-const MCP_SERVER_VERSION = "0.25.4";
+const MCP_SERVER_VERSION = "0.25.6";
 export function parseKnowledgeConfig(configContent) {
     const knowledgeMatch = configContent.match(/\[knowledge\][\s\S]*?(?=\n\[|$)/);
     if (!knowledgeMatch) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "minutes-mcp",
-  "version": "0.25.4",
+  "version": "0.25.6",
   "description": "MCP server for minutes \u2014 conversation memory for AI assistants. Works with Claude Desktop, Mistral Vibe, Cursor, Windsurf, and any MCP client.",
   "main": "dist/index.js",
   "type": "module",
@@ -32,20 +32,21 @@
   "scripts": {
     "build": "tsc && vite build",
     "build:ui": "vite build",
-    "test": "npm run build && node test/mcp_tools_test.mjs && node test/copilot_mcp_contract.mjs && node test/mcp_http_transport_test.mjs && node test/surface_parity_test.mjs",
-    "test:unit": "vitest run",
+    "test": "npm run build && node ../../scripts/run_corpus_test_harness.mjs npm run test:integration",
+    "test:integration": "node test/mcp_tools_test.mjs && node test/copilot_mcp_contract.mjs && node test/mcp_http_transport_test.mjs && node test/surface_parity_test.mjs",
+    "test:unit": "node ../../scripts/run_corpus_test_harness.mjs npx vitest run",
     "test:host-compat": "node test/live_events_host_compat.mjs",
     "test:copilot": "node test/copilot_mcp_contract.mjs",
     "test:http": "node test/mcp_http_transport_test.mjs",
     "test:surface-parity": "node test/surface_parity_test.mjs",
-    "test:all": "vitest run && npm run build && node test/mcp_tools_test.mjs && node test/copilot_mcp_contract.mjs && node test/mcp_http_transport_test.mjs && node test/surface_parity_test.mjs",
+    "test:all": "npm run test:unit && npm test",
     "start": "node dist/index.js",
     "dev": "tsx src/index.ts"
   },
   "dependencies": {
     "@modelcontextprotocol/ext-apps": "^1.6.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "minutes-sdk": "0.25.4",
+    "minutes-sdk": "0.25.6",
     "yaml": "^2.8.3",
     "zod": "^3.25 || ^4.0"
   },