Merge branch 'main' into fix/sidebar-show-node-and-details

Author: Maystern

.github/pr-acknowledgement.md

@@ -0,0 +1,34 @@
+<!--
+  Posted automatically on every newly opened pull request by
+  .github/workflows/pr-acknowledgement.yml
+
+  EDIT THIS FILE to change what contributors are told. Blank it out to stop
+  posting acknowledgements entirely — no workflow change needed.
+
+  Keep it short, and keep it honest about what happens next. A promise of a
+  timeline you will not meet is worse than no acknowledgement at all.
+  Remove the review-status section below the moment it stops being true.
+-->
+
+Thanks for opening this — it has been seen, and it is queued.
+
+This note is automated, but it is not a brush-off: it exists so you know where your PR stands instead of having to guess from silence.
+
+**Current review status: working through a backlog.** `0.9.1-rc.1` is out, so the release freeze that held reviews is over — but it left a large queue of open pull requests behind it, and we are reading through them oldest-first. The background is in [discussion #1144](https://github.com/DeusData/codebase-memory-mcp/discussions/1144).
+
+What that means for this PR, concretely:
+
+- **It will not be closed for inactivity.** No stale bot touches pull requests here.
+- It may still sit a while before a human reads it. That is on us, not on you.
+- Older PRs are read first, so a recent one is not being skipped — it is behind a queue.
+
+Things that will genuinely speed it up whenever review does happen:
+
+- **Keep it rebased** on `main` — the tree is moving quickly right now, and a conflicting branch cannot be reviewed as the diff you intended.
+- **Get CI green**, or say which failures you believe are pre-existing.
+- **Keep the change to one claim.** Bundled features and refactors get split before they get merged, which costs you a round trip.
+- Every commit needs a sign-off (`git commit -s`) — CI enforces DCO.
+
+If this fixes a bug, a reproduction we can run is worth more than a description of the symptom.
+
+Thanks for contributing, and sorry in advance for the wait.

.github/workflows/_build.yml

@@ -59,7 +59,7 @@ jobs:
         if: startsWith(matrix.os, 'ubuntu')
         run: sudo apt-get update && sudo apt-get install -y zlib1g-dev
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "22"
 
@@ -79,15 +79,10 @@ jobs:
         if: startsWith(matrix.os, 'macos')
         run: codesign --sign - --force build/c/codebase-memory-mcp
 
-      - name: Archive standard binary
-        env:
-          GOOS: ${{ matrix.goos }}
-          GOARCH: ${{ matrix.goarch }}
-        run: |
-          cp LICENSE install.sh build/c/
-          scripts/gen-third-party-notices.sh build/c/THIRD_PARTY_NOTICES.md
-          tar -czf "codebase-memory-mcp-${GOOS}-${GOARCH}.tar.gz" \
-            -C build/c codebase-memory-mcp LICENSE install.sh THIRD_PARTY_NOTICES.md
+      # Archive layout/name live in the ONE canonical script the local
+      # artifact-flow smoke lane also runs (venue-parity contract).
+      - name: Archive standard binary (canonical package-release.sh)
+        run: scripts/package-release.sh ${{ matrix.goos }} ${{ matrix.goarch }}
 
       - name: Attest standard binary provenance
         if: ${{ inputs.attest }}
@@ -115,15 +110,8 @@ jobs:
         if: matrix.goos == 'linux' && matrix.goarch == 'amd64'
         run: scripts/security-ui.sh
 
-      - name: Archive UI binary
-        env:
-          GOOS: ${{ matrix.goos }}
-          GOARCH: ${{ matrix.goarch }}
-        run: |
-          cp LICENSE install.sh build/c/
-          scripts/gen-third-party-notices.sh build/c/THIRD_PARTY_NOTICES.md
-          tar -czf "codebase-memory-mcp-ui-${GOOS}-${GOARCH}.tar.gz" \
-            -C build/c codebase-memory-mcp LICENSE install.sh THIRD_PARTY_NOTICES.md
+      - name: Archive UI binary (canonical package-release.sh)
+        run: scripts/package-release.sh ${{ matrix.goos }} ${{ matrix.goarch }} --variant ui
 
       - name: Attest UI binary provenance
         if: ${{ inputs.attest }}
@@ -152,7 +140,7 @@ jobs:
             make
             zip
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "22"
 
@@ -167,18 +155,11 @@ jobs:
             scripts/build.sh CC=clang CXX=clang++
           fi
 
-      - name: Archive standard binary
+      # Archive layout/name live in the ONE canonical script the local
+      # artifact-flow smoke lane also runs (venue-parity contract).
+      - name: Archive standard binary (canonical package-release.sh)
         shell: msys2 {0}
-        run: |
-          make -f Makefile.cbm build/c/codebase-memory-mcp-launcher.exe CC=clang CXX=clang++
-          PAYLOAD=build/c/codebase-memory-mcp
-          [ -f "${PAYLOAD}.exe" ] && PAYLOAD="${PAYLOAD}.exe"
-          cp build/c/codebase-memory-mcp-launcher.exe codebase-memory-mcp.exe
-          cp "$PAYLOAD" codebase-memory-mcp.payload.exe
-          scripts/gen-third-party-notices.sh THIRD_PARTY_NOTICES.md
-          zip codebase-memory-mcp-windows-amd64.zip \
-            codebase-memory-mcp.exe codebase-memory-mcp.payload.exe \
-            LICENSE install.ps1 THIRD_PARTY_NOTICES.md
+        run: scripts/package-release.sh windows amd64 CC=clang CXX=clang++
 
       - name: Attest standard binary provenance
         if: ${{ inputs.attest }}
@@ -197,18 +178,9 @@ jobs:
             scripts/build.sh --with-ui CC=clang CXX=clang++
           fi
 
-      - name: Archive UI binary
+      - name: Archive UI binary (canonical package-release.sh)
         shell: msys2 {0}
-        run: |
-          make -f Makefile.cbm build/c/codebase-memory-mcp-launcher.exe CC=clang CXX=clang++
-          PAYLOAD=build/c/codebase-memory-mcp
-          [ -f "${PAYLOAD}.exe" ] && PAYLOAD="${PAYLOAD}.exe"
-          cp build/c/codebase-memory-mcp-launcher.exe codebase-memory-mcp.exe
-          cp "$PAYLOAD" codebase-memory-mcp.payload.exe
-          scripts/gen-third-party-notices.sh THIRD_PARTY_NOTICES.md
-          zip codebase-memory-mcp-ui-windows-amd64.zip \
-            codebase-memory-mcp.exe codebase-memory-mcp.payload.exe \
-            LICENSE install.ps1 THIRD_PARTY_NOTICES.md
+        run: scripts/package-release.sh windows amd64 --variant ui CC=clang CXX=clang++
 
       - name: Attest UI binary provenance
         if: ${{ inputs.attest }}
@@ -241,7 +213,7 @@ jobs:
             make
             zip
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "22"
 
@@ -256,18 +228,9 @@ jobs:
             scripts/build.sh CC=clang CXX=clang++
           fi
 
-      - name: Archive standard binary
+      - name: Archive standard binary (canonical package-release.sh)
         shell: msys2 {0}
-        run: |
-          make -f Makefile.cbm build/c/codebase-memory-mcp-launcher.exe CC=clang CXX=clang++
-          PAYLOAD=build/c/codebase-memory-mcp
-          [ -f "${PAYLOAD}.exe" ] && PAYLOAD="${PAYLOAD}.exe"
-          cp build/c/codebase-memory-mcp-launcher.exe codebase-memory-mcp.exe
-          cp "$PAYLOAD" codebase-memory-mcp.payload.exe
-          scripts/gen-third-party-notices.sh THIRD_PARTY_NOTICES.md
-          zip codebase-memory-mcp-windows-arm64.zip \
-            codebase-memory-mcp.exe codebase-memory-mcp.payload.exe \
-            LICENSE install.ps1 THIRD_PARTY_NOTICES.md
+        run: scripts/package-release.sh windows arm64 CC=clang CXX=clang++
 
       - name: Attest standard binary provenance
         if: ${{ inputs.attest }}
@@ -286,18 +249,9 @@ jobs:
             scripts/build.sh --with-ui CC=clang CXX=clang++
           fi
 
-      - name: Archive UI binary
+      - name: Archive UI binary (canonical package-release.sh)
         shell: msys2 {0}
-        run: |
-          make -f Makefile.cbm build/c/codebase-memory-mcp-launcher.exe CC=clang CXX=clang++
-          PAYLOAD=build/c/codebase-memory-mcp
-          [ -f "${PAYLOAD}.exe" ] && PAYLOAD="${PAYLOAD}.exe"
-          cp build/c/codebase-memory-mcp-launcher.exe codebase-memory-mcp.exe
-          cp "$PAYLOAD" codebase-memory-mcp.payload.exe
-          scripts/gen-third-party-notices.sh THIRD_PARTY_NOTICES.md
-          zip codebase-memory-mcp-ui-windows-arm64.zip \
-            codebase-memory-mcp.exe codebase-memory-mcp.payload.exe \
-            LICENSE install.ps1 THIRD_PARTY_NOTICES.md
+        run: scripts/package-release.sh windows arm64 --variant ui CC=clang CXX=clang++
 
       - name: Attest UI binary provenance
         if: ${{ inputs.attest }}
@@ -329,7 +283,7 @@ jobs:
       - name: Install deps
         run: sudo apt-get update && sudo apt-get install -y zlib1g-dev
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "22"
 
@@ -348,14 +302,8 @@ jobs:
           file build/c/codebase-memory-mcp
           ldd build/c/codebase-memory-mcp 2>&1 | grep -q "not a dynamic executable" || ldd build/c/codebase-memory-mcp 2>&1 | grep -q "statically linked"
 
-      - name: Archive standard binary
-        env:
-          ARCH: ${{ matrix.arch }}
-        run: |
-          cp LICENSE install.sh build/c/
-          scripts/gen-third-party-notices.sh build/c/THIRD_PARTY_NOTICES.md
-          tar -czf "codebase-memory-mcp-linux-${ARCH}-portable.tar.gz" \
-            -C build/c codebase-memory-mcp LICENSE install.sh THIRD_PARTY_NOTICES.md
+      - name: Archive standard binary (canonical package-release.sh)
+        run: scripts/package-release.sh linux ${{ matrix.arch }}-portable
 
       - name: Attest standard binary provenance
         if: ${{ inputs.attest }}
@@ -373,14 +321,8 @@ jobs:
             scripts/build.sh --with-ui CC=gcc CXX=g++ STATIC=1
           fi
 
-      - name: Archive UI binary
-        env:
-          ARCH: ${{ matrix.arch }}
-        run: |
-          cp LICENSE install.sh build/c/
-          scripts/gen-third-party-notices.sh build/c/THIRD_PARTY_NOTICES.md
-          tar -czf "codebase-memory-mcp-ui-linux-${ARCH}-portable.tar.gz" \
-            -C build/c codebase-memory-mcp LICENSE install.sh THIRD_PARTY_NOTICES.md
+      - name: Archive UI binary (canonical package-release.sh)
+        run: scripts/package-release.sh linux ${{ matrix.arch }}-portable --variant ui
 
       - name: Attest UI binary provenance
         if: ${{ inputs.attest }}