vestige

79 commits 2 branches 18 tags 10 MiB

Author	SHA1	Message	Date
Sam Valladares	c6090dc2ba	fix: v2.0.1 release — fix broken installs, CI, security, and docs Critical fixes: - npm postinstall.js: BINARY_VERSION '1.1.3' → '2.0.1' (every install was 404ing) - npm package name: corrected error messages to 'vestige-mcp-server' - README: npm install command pointed to wrong package - MSRV: bumped from 1.85 to 1.91 (uses floor_char_boundary from 1.91) - CI: removed stale 'develop' branch from test.yml triggers Security hardening: - CSP: restricted connect-src from wildcard 'ws: wss:' to localhost-only - Added X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy headers - Added frame-ancestors 'none', base-uri 'self', form-action 'self' to CSP - Capped retention_distribution endpoint from 10k to 1k nodes - Added debug logging for WebSocket connections without Origin header Maintenance: - All clippy warnings fixed (58 total: redundant closures, collapsible ifs, no-op casts) - All versions harmonized to 2.0.1 across Cargo.toml and package.json - CLAUDE.md updated to match v2.0.1 (21 tools, 29 modules, 1238 tests) - docs/CLAUDE-SETUP.md updated deprecated function names - License corrected to AGPL-3.0-only in root package.json 1,238 tests passing, 0 clippy warnings. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-01 20:20:14 -06:00
Sam Valladares	1e06344319	fix(npm): download binaries during postinstall The npm package was missing the actual binary download step - users got wrapper scripts pointing to non-existent binaries. Changes: - postinstall.js now downloads correct binary from GitHub releases - Added vestige.js wrapper for CLI binary - Exposed both vestige-mcp and vestige commands in package.json - Updated README with troubleshooting, storage info, CLI docs - Added .gitignore for downloaded binaries Fixes fresh install issues where Claude Desktop couldn't attach and vestige CLI wasn't found. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-26 23:48:23 -06:00
Sam Valladares	449d60754a	Replace all engram references with vestige Updated TypeScript packages, npm package, and config files. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-25 01:44:11 -06:00

Author

SHA1

Message

Date

Sam Valladares

c6090dc2ba

fix: v2.0.1 release — fix broken installs, CI, security, and docs

Critical fixes:
- npm postinstall.js: BINARY_VERSION '1.1.3' → '2.0.1' (every install was 404ing)
- npm package name: corrected error messages to 'vestige-mcp-server'
- README: npm install command pointed to wrong package
- MSRV: bumped from 1.85 to 1.91 (uses floor_char_boundary from 1.91)
- CI: removed stale 'develop' branch from test.yml triggers

Security hardening:
- CSP: restricted connect-src from wildcard 'ws: wss:' to localhost-only
- Added X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy headers
- Added frame-ancestors 'none', base-uri 'self', form-action 'self' to CSP
- Capped retention_distribution endpoint from 10k to 1k nodes
- Added debug logging for WebSocket connections without Origin header

Maintenance:
- All clippy warnings fixed (58 total: redundant closures, collapsible ifs, no-op casts)
- All versions harmonized to 2.0.1 across Cargo.toml and package.json
- CLAUDE.md updated to match v2.0.1 (21 tools, 29 modules, 1238 tests)
- docs/CLAUDE-SETUP.md updated deprecated function names
- License corrected to AGPL-3.0-only in root package.json

1,238 tests passing, 0 clippy warnings.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-01 20:20:14 -06:00

Sam Valladares

1e06344319

fix(npm): download binaries during postinstall

The npm package was missing the actual binary download step - users got
wrapper scripts pointing to non-existent binaries.

Changes:
- postinstall.js now downloads correct binary from GitHub releases
- Added vestige.js wrapper for CLI binary
- Exposed both vestige-mcp and vestige commands in package.json
- Updated README with troubleshooting, storage info, CLI docs
- Added .gitignore for downloaded binaries

Fixes fresh install issues where Claude Desktop couldn't attach and
vestige CLI wasn't found.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-26 23:48:23 -06:00

Sam Valladares

449d60754a

Replace all engram references with vestige

Updated TypeScript packages, npm package, and config files.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-25 01:44:11 -06:00

Renamed from packages/vestige-mcp-npm/bin/engram-mcp.js (Browse further)

3 commits