vault-cortex 0.13.0 → 0.13.1

package/dist/env.js

@@ -15,7 +15,7 @@ const LOCAL_OPTIONAL_BLOCK = `# Optional ─────────────
 # "npx vault-cortex@latest restart" (plain docker restart does not
 # re-read this file).
 
-# Public URL for OAuth issuer URL in discovery metadata (default: http://localhost:8000).
+# Public URL for OAuth issuer and access-token binding (default: http://localhost:8000).
 # Override if you expose the server on a different URL (e.g. via a reverse proxy).
 PUBLIC_URL=http://localhost:8000
 
@@ -77,9 +77,10 @@ MEMORY_DIR=About Me
 # DAILY_NOTES_FOLDER=Journal
 # DAILY_NOTES_FORMAT=YYYY-MM-DD
 
-# Comma-separated folders protected from deletion (default: MEMORY_DIR plus
-# the daily notes folder — DAILY_NOTES_FOLDER when set, otherwise "Daily Notes").
-# A custom folder set only in daily-notes.json is not auto-protected.
+# Comma-separated folders protected from deletion and moves. Default: MEMORY_DIR plus
+# the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json
+# (default "Daily Notes"). When set, replaces the whole default — include the
+# daily notes folder in your list if needed.
 # PROTECTED_PATHS=About Me,Daily Notes
 
 # Comma-separated folders excluded from orphan detection (default: the daily
@@ -215,9 +216,10 @@ MEMORY_DIR=About Me
 # DAILY_NOTES_FOLDER=Journal
 # DAILY_NOTES_FORMAT=YYYY-MM-DD
 
-# Comma-separated folders protected from deletion (default: MEMORY_DIR plus
-# the daily notes folder — DAILY_NOTES_FOLDER when set, otherwise "Daily Notes").
-# A custom folder set only in daily-notes.json is not auto-protected.
+# Comma-separated folders protected from deletion and moves. Default: MEMORY_DIR plus
+# the daily notes folder, read from DAILY_NOTES_FOLDER or .obsidian/daily-notes.json
+# (default "Daily Notes"). When set, replaces the whole default — include the
+# daily notes folder in your list if needed.
 # PROTECTED_PATHS=About Me,Daily Notes
 
 # Comma-separated folders excluded from orphan detection (default: the daily
@@ -339,7 +341,8 @@ VAULT_PASSWORD=${answers.vaultPassword}`;
 MCP_AUTH_TOKEN=${answers.mcpAuthToken}
 
 # Public URL that MCP clients use to reach this server.
-# Used as the OAuth issuer URL in discovery metadata.
+# Used as the OAuth issuer URL in discovery metadata and stamped on every
+# access token; changing it invalidates connected clients' tokens.
 PUBLIC_URL=${answers.publicUrl}
 
 ${obsidianTokenComment}

package/dist/init.js

@@ -395,11 +395,8 @@ export const runInit = async (flags, deps) => {
     prompts.intro("vault-cortex init");
     // Mode resolution: explicit --mode wins; --yes implies local; otherwise
     // ask, defaulting to local — it's the simpler activation path.
-    const mode = flags.mode !== undefined && isMode(flags.mode)
-        ? flags.mode
-        : flags.yes
-            ? "local"
-            : await askMode(prompts);
+    const flagMode = flags.mode && isMode(flags.mode) ? flags.mode : undefined;
+    const mode = flagMode ?? (flags.yes ? "local" : await askMode(prompts));
     const exitCode = mode === "local"
         ? await runLocalInit(flags, deps)
         : await runRemoteInit(flags, deps);

package/dist/messages.js

@@ -126,11 +126,10 @@ const updateGuidance = (targetDir) => `Update to the latest release:
 export const buildLocalConnectMessage = (params) => {
     const { targetDir, token, startStatus, port, tokenWritten } = params;
     const baseUrl = `http://localhost:${port}`;
-    const startLine = startStatus === "running"
-        ? "The server is running."
-        : startStatus === "starting"
-            ? startingInBackgroundLine()
-            : startServerLine(targetDir);
+    const nonRunningLine = startStatus === "starting"
+        ? startingInBackgroundLine()
+        : startServerLine(targetDir);
+    const startLine = startStatus === "running" ? "The server is running." : nonRunningLine;
     const tokenLine = tokenBlock({ targetDir, token, tokenWritten });
     // Once the server is confirmed up, the smoke test is dropped — the CLI just
     // verified this exact URL, so re-printing it reads as leftover homework.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vault-cortex",
-  "version": "0.13.0",
+  "version": "0.13.1",
   "description": "Set up a Vault Cortex MCP server for your Obsidian vault in one command: npx vault-cortex@latest init",
   "license": "MIT",
   "type": "module",