openfused 0.3.14 → 0.3.16

package/README.md

@@ -67,11 +67,11 @@ history/       — archived [DONE] context
 openfuse context
 openfuse context --append "## Update\nFinished the research phase."
 
-# Mark work as done, then compact to history/
+# Mark work as done, then compact to history/ (TS CLI only)
 # (edit CONTEXT.md, add [DONE] to the header, then:)
 openfuse compact
 
-# Add validity windows to time-sensitive context
+# Add validity windows to time-sensitive context (TS CLI only)
 # <!-- validity: 6h --> for task state, 1d for sprint, 3d for architecture
 openfuse validate                    # scan for stale entries
 openfuse compact --prune-stale       # archive expired validity windows

package/dist/cli.js

@@ -9,7 +9,18 @@ import { fingerprint } from "./crypto.js";
 import { resolve, join } from "node:path";
 import { readFile } from "node:fs/promises";
 import { parseValiditySections, buildValidityReport } from "./validity.js";
-const VERSION = "0.3.13";
+import { createRequire } from "node:module";
+const VERSION = createRequire(import.meta.url)("../package.json").version;
+// Enable proxy support: Node.js built-in fetch doesn't respect HTTP_PROXY env vars.
+// Setting a global EnvHttpProxyAgent makes all fetch() calls proxy-aware —
+// essential for corporate networks, containers, and tunneled environments.
+if (process.env.https_proxy || process.env.HTTPS_PROXY || process.env.http_proxy || process.env.HTTP_PROXY) {
+    try {
+        const { EnvHttpProxyAgent, setGlobalDispatcher } = await import("undici");
+        setGlobalDispatcher(new EnvHttpProxyAgent());
+    }
+    catch { }
+}
 const program = new Command();
 program
     .name("openfuse")

package/dist/mcp.js

@@ -10,6 +10,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { z } from "zod";
 import { ContextStore, validateName } from "./store.js";
 import { resolve } from "node:path";
+import { createRequire } from "node:module";
 // LLMs will pass whatever filenames users ask for — including "../../etc/shadow".
 // This is the trust boundary between the AI and the filesystem.
 function sanitizeFilename(name) {
@@ -23,7 +24,7 @@ const storeDir = process.env.OPENFUSE_DIR || process.argv[3] || ".";
 const store = new ContextStore(resolve(storeDir));
 const server = new McpServer({
     name: "openfuse",
-    version: "0.3.13",
+    version: createRequire(import.meta.url)("../package.json").version,
 });
 // --- Context ---
 server.tool("context_read", "Read the agent's CONTEXT.md (working memory)", async () => {

package/dist/sync.js

@@ -140,17 +140,25 @@ async function syncHttp(store, peer, baseUrl, peerDir) {
     const errors = [];
     // SSRF check: block requests to private/reserved IPs
     await checkSsrf(baseUrl);
+    // Try /read/{file} (full mode) then /profile (public mode) for PROFILE.md.
+    // CONTEXT.md 404s are silently skipped — peers in public mode don't serve it.
     for (const file of ["CONTEXT.md", "PROFILE.md"]) {
         try {
-            const resp = await fetch(`${baseUrl}/read/${file}`);
+            const url = file === "PROFILE.md"
+                ? `${baseUrl}/profile` // public mode serves /profile not /read/PROFILE.md
+                : `${baseUrl}/read/${file}`;
+            let resp = await fetch(url);
+            // Fallback: try /read/ path if /profile didn't work (full mode daemon)
+            if (!resp.ok && file === "PROFILE.md") {
+                resp = await fetch(`${baseUrl}/read/${file}`);
+            }
             if (resp.ok) {
                 await writeFile(join(peerDir, file), await resp.text());
                 pulled.push(file);
             }
+            // Don't report 404s as errors — peer may be in public mode
         }
-        catch (e) {
-            errors.push(`${file}: ${e.message}`);
-        }
+        catch { }
     }
     for (const dir of ["shared", "knowledge"]) {
         try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openfused",
-  "version": "0.3.14",
+  "version": "0.3.16",
   "description": "The file protocol for AI agent context. Encrypted, signed, peer-to-peer.",
   "license": "MIT",
   "type": "module",
@@ -29,6 +29,7 @@
     "chokidar": "^5.0.0",
     "commander": "^14.0.0",
     "nanoid": "^5.1.7",
+    "undici": "^7.24.5",
     "zod": "^4.3.6"
   },
   "devDependencies": {