signetai 0.214.21 → 0.214.24

package/dist/mcp-stdio.js

@@ -26310,7 +26310,7 @@ function getDbAccessor() {
   }
   return accessor;
 }
-var isBun, require3, Database, accessor = null, MIGRATION_BACKUP_CHUNK_BYTES, MIGRATION_BACKUP_SPACE_MARGIN_BYTES, migrationBackupDeps;
+var isBun, require3, accessor = null, MIGRATION_BACKUP_CHUNK_BYTES, MIGRATION_BACKUP_SPACE_MARGIN_BYTES, migrationBackupDeps;
 var init_db_accessor = __esm(() => {
   init_dist();
   init_db_vacuum();
@@ -26321,12 +26321,6 @@ var init_db_accessor = __esm(() => {
   init_sync_db_attribution();
   isBun = typeof globalThis.Bun !== "undefined";
   require3 = createRequire4(import.meta.url);
-  if (isBun) {
-    const mod = require3("bun:sqlite");
-    Database = mod.Database;
-  } else {
-    Database = require3("better-sqlite3");
-  }
   MIGRATION_BACKUP_CHUNK_BYTES = 64 * 1024 * 1024;
   MIGRATION_BACKUP_SPACE_MARGIN_BYTES = MIGRATION_BACKUP_CHUNK_BYTES * 2;
   migrationBackupDeps = {
@@ -26437,7 +26431,7 @@ var require_base64_js = __commonJS((exports) => {
   }
 });
 
-// ../../platform/daemon/src/mcp-stdio.ts
+// ../../platform/daemon/src/mcp-stdio-runtime.ts
 import { existsSync as existsSync15, statSync as statSync4 } from "node:fs";
 import { isAbsolute } from "node:path";
 
@@ -59525,8 +59519,7 @@ function resolveMcpDaemonUrl(env = process.env) {
   return resolveSignetDaemonUrl({ env });
 }
 
-// ../../platform/daemon/src/mcp-stdio.ts
-var DAEMON_URL = resolveMcpDaemonUrl();
+// ../../platform/daemon/src/mcp-stdio-runtime.ts
 function isLocalDaemonUrl(url2) {
   let parsed;
   try {
@@ -59559,46 +59552,52 @@ async function resolveAgentsDir(daemonUrl) {
   } catch {}
   return;
 }
-var resolvedAgentsDir = await resolveAgentsDir(DAEMON_URL);
-if (resolvedAgentsDir) {
-  process.env.SIGNET_PATH = resolvedAgentsDir;
-} else if (process.env.SIGNET_PATH && !isValidAgentsDir(process.env.SIGNET_PATH)) {
-  delete process.env.SIGNET_PATH;
-}
-var dreamingAgentId = process.env.SIGNET_DREAMING_AGENT_ID?.trim();
-var dreamingPassId = process.env.SIGNET_DREAMING_PASS_ID?.trim();
-var server = dreamingAgentId ? createDreamingMcpServer({
-  daemonUrl: DAEMON_URL,
-  agentId: dreamingAgentId,
-  passId: dreamingPassId,
-  version: "0.1.0"
-}) : await createMcpServer({
-  daemonUrl: DAEMON_URL,
-  version: "0.1.0",
-  context: {
-    harness: process.env.SIGNET_HARNESS,
-    workspace: process.env.SIGNET_WORKSPACE ?? process.cwd(),
-    channel: process.env.SIGNET_CHANNEL
-  }
-});
-var transport = new StdioServerTransport;
-await server.connect(transport);
-var refreshMsRaw = Number(process.env.SIGNET_MCP_PROXY_REFRESH_MS ?? "15000");
-var refreshMs = Number.isFinite(refreshMsRaw) && refreshMsRaw >= 1000 ? refreshMsRaw : 15000;
-var refreshTimer = dreamingAgentId ? null : setInterval(() => {
-  refreshMarketplaceProxyTools(server, { notify: true });
-}, refreshMs);
-var closing = false;
-var shutdown = () => {
-  if (closing)
-    return;
-  closing = true;
-  if (refreshTimer)
-    clearInterval(refreshTimer);
-  const deadline = setTimeout(() => process.exit(0), 3000);
-  deadline.unref();
-  server.close().finally(() => process.exit(0));
-};
-process.on("SIGINT", shutdown);
-process.on("SIGTERM", shutdown);
-process.stdin.on("end", shutdown);
+async function runMcpStdio() {
+  const daemonUrl = resolveMcpDaemonUrl();
+  const resolvedAgentsDir = await resolveAgentsDir(daemonUrl);
+  if (resolvedAgentsDir) {
+    process.env.SIGNET_PATH = resolvedAgentsDir;
+  } else if (process.env.SIGNET_PATH && !isValidAgentsDir(process.env.SIGNET_PATH)) {
+    delete process.env.SIGNET_PATH;
+  }
+  const dreamingAgentId = process.env.SIGNET_DREAMING_AGENT_ID?.trim();
+  const dreamingPassId = process.env.SIGNET_DREAMING_PASS_ID?.trim();
+  const server = dreamingAgentId ? createDreamingMcpServer({
+    daemonUrl,
+    agentId: dreamingAgentId,
+    passId: dreamingPassId,
+    version: "0.1.0"
+  }) : await createMcpServer({
+    daemonUrl,
+    version: "0.1.0",
+    context: {
+      harness: process.env.SIGNET_HARNESS,
+      workspace: process.env.SIGNET_WORKSPACE ?? process.cwd(),
+      channel: process.env.SIGNET_CHANNEL
+    }
+  });
+  const transport = new StdioServerTransport;
+  await server.connect(transport);
+  const refreshMsRaw = Number(process.env.SIGNET_MCP_PROXY_REFRESH_MS ?? "15000");
+  const refreshMs = Number.isFinite(refreshMsRaw) && refreshMsRaw >= 1000 ? refreshMsRaw : 15000;
+  const refreshTimer = dreamingAgentId ? null : setInterval(() => {
+    refreshMarketplaceProxyTools(server, { notify: true });
+  }, refreshMs);
+  let closing = false;
+  const shutdown = () => {
+    if (closing)
+      return;
+    closing = true;
+    if (refreshTimer)
+      clearInterval(refreshTimer);
+    const deadline = setTimeout(() => process.exit(0), 3000);
+    deadline.unref();
+    server.close().finally(() => process.exit(0));
+  };
+  process.on("SIGINT", shutdown);
+  process.on("SIGTERM", shutdown);
+  process.stdin.on("end", shutdown);
+}
+
+// ../../platform/daemon/src/mcp-stdio.ts
+await runMcpStdio();

package/native-manifest.json

@@ -1,43 +1,43 @@
 {
   "schemaVersion": 1,
-  "version": "0.214.21",
+  "version": "0.214.24",
   "assets": [
     {
       "name": "signet-darwin-arm64",
       "platform": "darwin-arm64",
-      "sha256": "d0e68f095b511c1574e27699520a09a2c81f52e7db5cb4e276d6f4ab98135959",
-      "size": 163724320
+      "sha256": "1e4e3c649941f2f1bb3fa699d0adb16dac6c49e7900ac84697b486fbefab471c",
+      "size": 163757344
     },
     {
       "name": "signet-darwin-x64",
       "platform": "darwin-x64",
-      "sha256": "5248fbfd43871eb90c6c0a9f8766539ddbc2020a25e424c96ab0b89343a2af46",
-      "size": 168430144
+      "sha256": "a36c8039575248a8553181f36f4dd011bda7379827b42a524f255189df24edb4",
+      "size": 168462912
     },
     {
       "name": "signet-linux-arm64",
       "platform": "linux-arm64",
-      "sha256": "18156212eb3c04c0817ba84c8fa8ca531669ab9c86141dbf1087748ab84639b7",
-      "size": 210996398
+      "sha256": "65af3e93b005502be1018159fb5e812558204657de11d4feaaa60b7a9637abff",
+      "size": 211035903
     },
     {
       "name": "signet-linux-x64",
       "platform": "linux-x64",
-      "sha256": "2cb2d44aba6369933dd86dc0befd5e8640470364e538a5f5ede820729a1250fb",
-      "size": 213785117
+      "sha256": "33f5b45de85196ab0d60d520e9cf119c0c44b417c833ee5618b5a12ffa25e8e2",
+      "size": 213824622
     },
     {
       "name": "signet-win32-x64.exe",
       "platform": "win32-x64",
-      "sha256": "976c18d7f30c50092c4b302e32b0abb49d949001a48c50934976158a17fbefa6",
-      "size": 220270080
+      "sha256": "b419b010fca6237d36a00db69b20be581a16f73cada6a6dfca7f1127a7271046",
+      "size": 220310016
     }
   ],
   "components": {
     "connectors": {
-      "url": "signet-connectors-0.214.21.tar.gz",
-      "sha256": "45d4c57c355b0403235509dd61575d432a0a6413753fdcdf7aca41d7766bed45",
-      "size": 21940
+      "url": "signet-connectors-0.214.24.tar.gz",
+      "sha256": "ad55bfe3b76bf8b961a49bc956da3bd34f6c35d25cb0741759840adb404155ff",
+      "size": 21944
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "signetai",
-  "version": "0.214.21",
+  "version": "0.214.24",
   "description": "Signet native CLI installer wrapper",
   "type": "module",
   "bin": {
@@ -13,14 +13,14 @@
     "bin/signet.js",
     "dist/mcp-stdio.js",
     "native-manifest.json",
-    "scripts/install-native.js",
-    "scripts/verify-wrapper.js",
+    "scripts",
     "README.md",
     "LICENSE"
   ],
   "scripts": {
     "// prebuild": "Release-only: rebuilds dist/mcp-stdio.js from the daemon's MCP stdio source. Runs on `bun run build:signetai` during the release pipeline, NOT on `npm install` — consumers receive whatever the publisher shipped. The npm tarball is built from a tree where this prebuild has already run.",
-    "prebuild": "bun ../../scripts/build-signet-mcp.ts",
+    "copy:scripts": "mkdir -p scripts && cp ../../scripts/install-graphiq.sh scripts/install-graphiq.sh",
+    "prebuild": "bun run copy:scripts && bun ../../scripts/build-signet-mcp.ts",
     "build": "node scripts/verify-wrapper.js",
     "postinstall": "node scripts/install-native.js"
   },
@@ -65,10 +65,10 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "signetai-darwin-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.214.21/signetai-darwin-arm64-0.214.21.tgz",
-    "signetai-darwin-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.214.21/signetai-darwin-x64-0.214.21.tgz",
-    "signetai-linux-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.214.21/signetai-linux-arm64-0.214.21.tgz",
-    "signetai-linux-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.214.21/signetai-linux-x64-0.214.21.tgz",
-    "signetai-win32-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.214.21/signetai-win32-x64-0.214.21.tgz"
+    "signetai-darwin-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.214.24/signetai-darwin-arm64-0.214.24.tgz",
+    "signetai-darwin-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.214.24/signetai-darwin-x64-0.214.24.tgz",
+    "signetai-linux-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.214.24/signetai-linux-arm64-0.214.24.tgz",
+    "signetai-linux-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.214.24/signetai-linux-x64-0.214.24.tgz",
+    "signetai-win32-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.214.24/signetai-win32-x64-0.214.24.tgz"
   }
 }

package/scripts/install-graphiq.sh

@@ -0,0 +1,332 @@
+#!/usr/bin/env bash
+# GraphIQ install/uninstall script
+#
+# Usage:
+#   curl -fsSL https://raw.githubusercontent.com/aaf2tbz/graphiq/main/install.sh | bash
+#   curl -fsSL https://raw.githubusercontent.com/aaf2tbz/graphiq/main/install.sh | bash -s -- uninstall
+#
+# Environment variables:
+#   GRAPHIQ_INSTALL_DIR  — installation directory (default: existing graphiq dir, then /usr/local/bin)
+#   GRAPHIQ_VERSION      — specific version to install (default: latest)
+set -euo pipefail
+
+REPO="aaf2tbz/graphiq"
+COMMAND="${1:-install}"
+
+if [ -n "${GRAPHIQ_INSTALL_DIR:-}" ]; then
+    INSTALL_DIR="$GRAPHIQ_INSTALL_DIR"
+elif command -v graphiq >/dev/null 2>&1; then
+    INSTALL_DIR="$(dirname "$(command -v graphiq)")"
+else
+    INSTALL_DIR="/usr/local/bin"
+fi
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BOLD='\033[1m'
+RESET='\033[0m'
+
+info()  { echo "${GREEN}  ✓${RESET} $*"; }
+warn()  { echo "${YELLOW}  ⚠${RESET} $*"; }
+_GRAPHIQ_TMPDIR=""
+
+cleanup() {
+    if [ -n "$_GRAPHIQ_TMPDIR" ] && [ -d "$_GRAPHIQ_TMPDIR" ]; then
+        rm -rf "$_GRAPHIQ_TMPDIR"
+    fi
+}
+trap cleanup EXIT
+
+error() { echo "${RED}  ✗${RESET} $*" >&2; }
+
+confirm() {
+    printf "  %s [y/N] " "$1"
+    read -r reply
+    [ "$reply" = "y" ] || [ "$reply" = "Y" ] || [ "$reply" = "yes" ]
+}
+
+need_cmd() {
+    if ! command -v "$1" >/dev/null 2>&1; then
+        error "requires '$1' but it is not installed"
+        if [ -n "${2:-}" ]; then
+            echo "  Install: $2" >&2
+        fi
+        exit 1
+    fi
+}
+
+install_file() {
+    local src="$1"
+    local dst="$2"
+    local tmp="${dst}.tmp.$$"
+    local need_sudo="${3:-}"
+
+    $need_sudo cp "$src" "$tmp"
+    $need_sudo chmod 755 "$tmp"
+    $need_sudo mv "$tmp" "$dst"
+}
+
+detect_platform() {
+    OS="$(uname -s | tr '[:upper:]' '[:lower:]')"
+    ARCH="$(uname -m)"
+
+    case "$OS" in
+        darwin)
+            if [ "$ARCH" = "arm64" ]; then
+                echo "aarch64-apple-darwin"
+            elif [ "$ARCH" = "x86_64" ]; then
+                echo "x86_64-apple-darwin"
+            else
+                error "unsupported macOS architecture: $ARCH"
+                exit 1
+            fi
+            ;;
+        linux)
+            if [ "$ARCH" = "x86_64" ]; then
+                echo "x86_64-unknown-linux-gnu"
+            elif [ "$ARCH" = "aarch64" ]; then
+                echo "aarch64-unknown-linux-gnu"
+            else
+                error "unsupported Linux architecture: $ARCH"
+                exit 1
+            fi
+            ;;
+        *)
+            error "unsupported OS: $OS (supported: macOS, Linux)"
+            exit 1
+            ;;
+    esac
+}
+
+fetch_latest_version() {
+    local version
+    version=$(curl -fsSL --max-time 10 "https://api.github.com/repos/${REPO}/releases/latest" \
+        | grep '"tag_name"' | head -1 | sed -E 's/.*"v([^"]+)".*/\1/')
+    if [ -z "$version" ]; then
+        error "could not determine latest version from GitHub"
+        error "check your internet connection or set GRAPHIQ_VERSION manually"
+        exit 1
+    fi
+    echo "$version"
+}
+
+verify_checksum() {
+    local archive="$1"
+    local version="$2"
+    local expected=""
+
+    if command -v jq >/dev/null 2>&1; then
+        expected=$(curl -fsSL --max-time 10 "https://api.github.com/repos/${REPO}/releases/tags/v${version}" \
+            | jq -r --arg name "$(basename "$archive")" '.assets[] | select(.name == $name) | .digest // ""' \
+            | sed -E 's/^sha256://')
+    else
+        expected=$(curl -fsSL --max-time 10 "https://api.github.com/repos/${REPO}/releases/tags/v${version}" \
+            | awk -v name="$(basename "$archive")" '
+                BEGIN { RS = "{"; in_asset = 0; asset_name = "" }
+                /"name"\s*:\s*"/ { gsub(/.*"name"\s*:\s*"/, ""); gsub(/".*/, ""); asset_name = $0 }
+                /"digest"\s*:\s*"/ && asset_name == name {
+                    gsub(/.*"digest"\s*:\s*"/, ""); gsub(/".*/, "");
+                    gsub(/^sha256:/, ""); print; found = 1; exit
+                }
+            ' 2>/dev/null)
+    fi
+
+    if [ -z "$expected" ]; then
+        error "no checksum found in release metadata — cannot verify integrity"
+        error "this may indicate a corrupted or incomplete release"
+        exit 1
+    fi
+
+    local actual
+    if command -v sha256sum >/dev/null 2>&1; then
+        actual=$(sha256sum "$archive" | awk '{print $1}')
+    elif command -v shasum >/dev/null 2>&1; then
+        actual=$(shasum -a 256 "$archive" | awk '{print $1}')
+    else
+        error "no sha256sum or shasum found — cannot verify integrity"
+        error "install coreutils (Linux) or Xcode Command Line Tools (macOS)"
+        exit 1
+    fi
+
+    if [ "$expected" != "$actual" ]; then
+        error "SHA256 checksum mismatch"
+        echo "    expected: ${expected}" >&2
+        echo "    actual:   ${actual}" >&2
+        exit 1
+    fi
+    info "checksum verified"
+}
+
+do_install() {
+    echo ""
+    echo "${BOLD}  GraphIQ Installer${RESET}"
+    echo ""
+
+    # Prerequisites
+    need_cmd curl "https://curl.se/"
+    need_cmd tar  "system package manager"
+
+    if [ "$(uname -s)" = "Linux" ]; then
+        # graphiq's binaries load Vulkan lazily at runtime (wgpu dlopens it), so
+        # the binary STARTS and runs on CPU+rayon even with no Vulkan installed.
+        # This prompt only offers the loader+driver for optional GPU acceleration.
+        if ! ldconfig -p 2>/dev/null | grep -q "libvulkan.so.1" && \
+           ! [ -f /usr/lib/x86_64-linux-gnu/libvulkan.so.1 ] && \
+           ! [ -f /usr/lib/aarch64-linux-gnu/libvulkan.so.1 ]; then
+            info "No Vulkan loader found — graphiq will run on CPU; install Vulkan for optional GPU acceleration."
+            if confirm "Install Vulkan (loader + Mesa driver) now?"; then
+                if command -v apt >/dev/null 2>&1; then
+                    sudo apt install -y libvulkan1 mesa-vulkan-drivers
+                elif command -v dnf >/dev/null 2>&1; then
+                    sudo dnf install -y vulkan-loader mesa-vulkan-drivers
+                elif command -v pacman >/dev/null 2>&1; then
+                    sudo pacman -S --noconfirm vulkan-driver
+                else
+                    echo "  Optional for GPU accel: libvulkan1 + mesa-vulkan-drivers (apt), vulkan-loader+mesa-vulkan-drivers (dnf), vulkan-driver (pacman)"
+                fi
+            fi
+        else
+            info "Vulkan loader found"
+        fi
+    fi
+
+    local platform
+    platform="$(detect_platform)"
+    local version="${GRAPHIQ_VERSION:-$(fetch_latest_version)}"
+
+    local archive="graphiq-${platform}.tar.gz"
+    local url="https://github.com/${REPO}/releases/download/v${version}/${archive}"
+
+    _GRAPHIQ_TMPDIR="$(mktemp -d)"
+
+    echo "  version:  ${version}"
+    echo "  platform: ${platform}"
+    echo "  target:   ${INSTALL_DIR}"
+    echo ""
+
+    # Check for existing installation
+    if command -v graphiq >/dev/null 2>&1; then
+        local existing
+        existing=$(graphiq --version 2>/dev/null || echo "unknown")
+        echo "  existing: graphiq ${existing} at $(command -v graphiq)"
+        echo ""
+    fi
+
+    echo "  downloading ${archive}..."
+    if ! curl -fsSL --max-time 60 --retry 3 "$url" -o "${_GRAPHIQ_TMPDIR}/${archive}"; then
+        error "failed to download ${url}"
+        echo "  The release may not include a binary for ${platform}." >&2
+        echo "  Check available releases at:" >&2
+        echo "    https://github.com/${REPO}/releases" >&2
+        exit 1
+    fi
+
+    verify_checksum "${_GRAPHIQ_TMPDIR}/${archive}" "$version"
+
+    echo "  extracting..."
+    tar xzf "${_GRAPHIQ_TMPDIR}/${archive}" -C "$_GRAPHIQ_TMPDIR"
+
+    local need_sudo=""
+    if [ -d "$INSTALL_DIR" ]; then
+        if [ ! -w "$INSTALL_DIR" ]; then
+            need_sudo="sudo"
+        fi
+    else
+        local parent
+        parent="$(dirname "$INSTALL_DIR")"
+        if [ ! -w "$parent" ]; then
+            need_sudo="sudo"
+        fi
+        echo "  creating ${INSTALL_DIR}..."
+        $need_sudo mkdir -p "$INSTALL_DIR"
+    fi
+
+    local installed=0
+    for bin in graphiq graphiq-mcp graphiq-bench; do
+        if [ -f "${_GRAPHIQ_TMPDIR}/${bin}" ]; then
+            install_file "${_GRAPHIQ_TMPDIR}/${bin}" "${INSTALL_DIR}/${bin}" "$need_sudo"
+            info "${bin} -> ${INSTALL_DIR}/${bin}"
+            installed=$((installed + 1))
+        else
+            warn "${bin} not found in archive (may not be built for this platform)"
+        fi
+    done
+
+    if [ "$installed" -eq 0 ]; then
+        error "no binaries were installed"
+        exit 1
+    fi
+
+    echo ""
+
+    # Verify installation — run the binary we just installed, not whatever is on PATH
+    local fail=0
+    local ver
+    ver=$("${INSTALL_DIR}/graphiq" --version 2>/dev/null || echo "?")
+    info "graphiq ${ver} at ${INSTALL_DIR}/graphiq"
+
+    # Detect shadowing without deleting user-managed binaries.
+    if command -v graphiq >/dev/null 2>&1; then
+        local on_path
+        on_path="$(command -v graphiq)"
+        if [ "$on_path" != "${INSTALL_DIR}/graphiq" ]; then
+            warn "another graphiq at ${on_path} shadows the new install"
+            echo "  Put ${INSTALL_DIR} earlier in PATH or remove the old binary manually." >&2
+        fi
+    else
+        warn "${INSTALL_DIR} is not on PATH"
+        fail=1
+    fi
+
+    if [ -x "${INSTALL_DIR}/graphiq-mcp" ]; then
+        info "graphiq-mcp available"
+    else
+        warn "graphiq-mcp not found in ${INSTALL_DIR}"
+        fail=1
+    fi
+
+    if [ "$fail" -eq 1 ]; then
+        echo ""
+        echo "  Add to your shell profile:"
+        echo "    export PATH=\"${INSTALL_DIR}:\$PATH\""
+    fi
+
+    echo ""
+    echo "${BOLD}  Next steps:${RESET}"
+    echo "    graphiq setup --project /path/to/project"
+    echo "    graphiq index /path/to/project"
+    echo "    graphiq search \"rate limit middleware\""
+    echo "    graphiq impact --project /path/to/project"
+    echo "    graphiq doctor"
+    echo ""
+}
+
+do_uninstall() {
+    echo "uninstalling graphiq..."
+    for bin in graphiq graphiq-mcp graphiq-bench; do
+        local target="${INSTALL_DIR}/${bin}"
+        if [ -f "$target" ]; then
+            local need_sudo=""
+            if [ ! -w "$target" ]; then
+                need_sudo="sudo"
+            fi
+            $need_sudo rm -f "$target"
+            info "removed ${target}"
+        fi
+    done
+    info "done"
+}
+
+case "$COMMAND" in
+    install)
+        do_install
+        ;;
+    uninstall)
+        do_uninstall
+        ;;
+    *)
+        echo "usage: $0 [install|uninstall]" >&2
+        exit 1
+        ;;
+esac