v0.5.1

What's Changed

• fix(mcp): production generation model for ask by Conrad Rockenhaus (@skyphusion) in #87
• docs(ops): CORPUS binding in MCP wrangler secret shape by Conrad Rockenhaus (@skyphusion) in #88
• chore(deps): bump nanoid to 3.3.18 in lockfile by Albini (@skyphusion-albini) in #89
• deps: bump the cloudflare-toolchain group with 2 updates by Dependabot (@dependabot)[bot] in #90
• deps: bump @aws-sdk/client-s3 from 3.1100.0 to 3.1105.0 in the npm-minor-patch group by Dependabot (@dependabot)[bot] in #91
• deps: bump @types/node from 22.20.1 to 26.2.0 by Dependabot (@dependabot)[bot] in #92
• chore(release): v0.5.1 by Conrad Rockenhaus (@skyphusion) in #93

Full Changelog: v0.5.0...v0.5.1

v0.5.0

Changelog

v0.5.0

MINOR: agent-facing MCP surface. Retrieval stays structured; agents can map the
corpus, filter paths, open files, ask grounded questions, and read sync status.

Features (MCP Worker)

• Tools: search (expanded), list_repos, get_file, ask, corpus_status.
• search knobs: path_prefix, retrieval_type (hybrid/keyword/vector),
  rewrite, min_score, rerank; richer tool description for agent routing.
• get_file: optional CORPUS R2 binding; size-capped reads; tries bare key and
  .txt remapped keys.
• ask: non-stream chatCompletions with source list from returned chunks.
• corpus_status: reads _meta/corpus-status.json written by scripts/sync.mjs.
• MCP resources: corpus://catalog, corpus://skill (resources/list +
  resources/read).
• list_repos: CORPUS_REPOS var (JSON/CSV) or R2 prefix scan when CORPUS bound.

Sync

• After upload+prune, write _meta/corpus-status.json and never prune _meta/*.

Config

• wrangler.mcp.toml.example: optional CORPUS R2 + CORPUS_REPOS / generation vars.

v0.4.0

MINOR: per-target path maps, dual typecheck gate, rockenhaus deployment surface, reindex
connect retry, operator escrow relocate, docs brought to parity with the tree.

Features

• Per-target includePaths / excludePaths (search-mcp#62). Nested maps under a
  target win per-repo over top-level maps so the same repo can be indexed at different
  granularities across targets. pathMapsForTarget, validation, and the additive guard
  all understand both layers.
• Rockenhaus court-record deployment (search-mcp#58). Committed
  wrangler.rockenhaus.toml, npm scripts deploy:rockenhaus / sync:rockenhaus, third
  product target (search.rockenhaus.net / rockenhaus-public / fail-closed _corpus/).
  Tag deploy ships all three Workers.
• Scripts typecheck gate (search-mcp#61). npm run typecheck is
  tsc --noEmit (Workers: src + index.test.ts) and
  tsc --noEmit -p tsconfig.scripts.json (Node: scripts/**/*.test.ts).

Fixes

• Reindex unable_to_connect_to_ai_search [7017] (search-mcp#73). Treated as
  transient alongside cooldown 7020 so a green R2 upload is not followed by a red
  reindex on a temporary AI Search blip.

Ops / custody

• Rockenhaus tag deploy: skyphusion-search-ci granted Zone Read + Workers Routes Write
  on rockenhaus.net (2026-08-05); tag deploy ships all three Workers. Token id unchanged;
  GitHub secret value unchanged.

• Escrow steady state (search-mcp#65). Org secret SKYPHUSION_TARGETS_JSON; preferred
  re-escrow is the private crew-secrets workflow escrow-search-mcp-targets. Public
  search-mcp escrow-targets publish defaults off; CREW_SECRETS_ESCROW_TOKEN retired.

• OPERATOR.md: topology is shape-only (no full repo lists); hybrid_search beta gap
  documented; rockenhaus is a first-class instance row.

Docs

• README, DEPLOY, CLAUDE, OPERATOR, and this CHANGELOG aligned with scripts, workflows,
  three-worker deploy, dual typecheck, reindex retries, and escrow path.

v0.3.0

MINOR: package.json already at 0.3.0 on main; this release documents the cut and ships
tag-gated deploy of public query + internal MCP Workers (deps + features since v0.2.1).

v0.2.1

Release sync bump (2026-07-21). No functional changes in this tag.

v0.4.0

v0.4.0

MINOR: per-target path maps, dual typecheck gate, rockenhaus deployment surface, reindex
connect retry, operator escrow relocate, docs brought to parity with the tree.

Features

• Per-target includePaths / excludePaths (search-mcp#62). Nested maps under a
  target win per-repo over top-level maps so the same repo can be indexed at different
  granularities across targets. pathMapsForTarget, validation, and the additive guard
  all understand both layers.
• Rockenhaus court-record deployment (search-mcp#58). Committed
  wrangler.rockenhaus.toml, npm scripts deploy:rockenhaus / sync:rockenhaus, third
  product target (search.rockenhaus.net / rockenhaus-public / fail-closed _corpus/).
  Tag deploy ships all three Workers.
• Scripts typecheck gate (search-mcp#61). npm run typecheck is
  tsc --noEmit (Workers: src + index.test.ts) and
  tsc --noEmit -p tsconfig.scripts.json (Node: scripts/**/*.test.ts).

Fixes

• Reindex unable_to_connect_to_ai_search [7017] (search-mcp#73). Treated as
  transient alongside cooldown 7020 so a green R2 upload is not followed by a red
  reindex on a temporary AI Search blip.

Ops / custody

• Escrow steady state (search-mcp#65). Org secret SKYPHUSION_TARGETS_JSON; preferred
  re-escrow is the private crew-secrets workflow escrow-search-mcp-targets. Public
  search-mcp escrow-targets publish defaults off; CREW_SECRETS_ESCROW_TOKEN retired.
• OPERATOR.md: topology is shape-only (no full repo lists); hybrid_search beta gap
  documented; rockenhaus is a first-class instance row.

Docs

• README, DEPLOY, CLAUDE, OPERATOR, and this CHANGELOG aligned with scripts, workflows,
  three-worker deploy, dual typecheck, reindex retries, and escrow path.

v0.3.0

What's Changed

• ci: add adversarial security audit workflow by Conrad Rockenhaus (@skyphusion) in #49
• fix(ci): use ADVERSARIAL_AUDIT_CF_API_TOKEN for audit by Conrad Rockenhaus (@skyphusion) in #50
• ci: add adversarial security audit workflow by Conrad Rockenhaus (@skyphusion) in #51
• ci: add adversarial security audit workflow by Mackaye (@skyphusion-mackaye) in #52
• deps: bump postcss from 8.5.16 to 8.5.22 by Dependabot (@dependabot)[bot] in #53
• ci(audit): repoint adversarial-audit workflow at public security-audit by Albini (@skyphusion-albini) in #54
• feat(sync,widget): fail-closed corpus allowlist, manifest citations, per-origin prompts by Joan (@skyphusion-joan) in #57
• deps: bump the cloudflare-toolchain group with 2 updates by Dependabot (@dependabot)[bot] in #55
• deps: bump @aws-sdk/client-s3 from 3.1090.0 to 3.1096.0 in the npm-minor-patch group across 1 directory by Dependabot (@dependabot)[bot] in #56
• feat(sync): make the includePaths allowlist fail loudly, not empty by Rollins (@skyphusion-rollins) in #60
• feat(escrow): escrow SKYPHUSION_TARGETS_JSON with a provable restore by Rollins (@skyphusion-rollins) in #64
• deps: bump @cloudflare/workers-types from 5.20260727.1 to 5.20260728.1 in the cloudflare-toolchain group by Dependabot (@dependabot)[bot] in #67
• deps: bump the cloudflare-toolchain group with 2 updates by Dependabot (@dependabot)[bot] in #68
• deps: bump @aws-sdk/client-s3 from 3.1096.0 to 3.1100.0 in the npm-minor-patch group by Dependabot (@dependabot)[bot] in #69
• deps: bump postcss from 8.5.22 to 8.5.25 by Dependabot (@dependabot)[bot] in #70
• docs(claude): document exact release/tag ship procedure by Conrad Rockenhaus (@skyphusion) in #71
• chore(release): v0.3.0 by Conrad Rockenhaus (@skyphusion) in #72

New Contributors

• Joan (@skyphusion-joan) made their first contribution in #57

Full Changelog: v0.2.1...v0.3.0

v0.2.1

Release sync bump (2026-07-21). No functional changes in this tag.

search-mcp v0.2.0

Summary

First npm + Worker tip past v0.1.3. Package version was already 0.2.0 on main (#39); this release tags that tip after Dependabot merges (#44–#46) and the tag-gated deploy guards (#41–#43).

Highlights since v0.1.3

• feat(mcp): repo filter, per-path dedup, recency surface; refresh targets (#39)
• fix(sync): reindex wait/cooldown budgets and in-flight guards (#33–#36)
• docs: AGPL NOTICE (#31); crew-bus reclassified into public search target (#40)
• ci: deploy on version tag only; fail closed if tag not on main; tag↔package.json assert (#41–#43)
• deps: actions/cache 4→6; cloudflare-toolchain group; @aws-sdk/client-s3 (#44–#46)

Install

npm install @skyphusion/search-mcp@0.2.0
# or
npx --package=@skyphusion/search-mcp@0.2.0 search-mcp-sync corpus --dry-run

npm publish is driven by Publish npm package on this release (idempotent if the version is already on the registry).

search-mcp v0.1.3

Production tip for skyphusion-search / skyphusion-search-internal-mcp Workers.

v0.1.2 — @skyphusion/search-mcp

npm: npm install @skyphusion/search-mcp (corpus sync CLIs + ask-widget assets).

v0.1.0 — @skyphusion/search-mcp

First npm release of the corpus sync CLIs and ask-widget assets.

Install: npm install @skyphusion/search-mcp

Bins: search-mcp-sync, search-mcp-sync-run