Skip to content

Releases: var-gg/pindoc

Pindoc 0.2.0 — visibility tier, Cmd-K cross-project, OAuth lifecycle

05 May 07:32

Choose a tag to compare

First follow-up after the v0.1.0 OSS launch. Visibility tier model gets enforced end-to-end, OAuth gains DCR lifecycle controls, and the Reader picks up Cmd-K cross-project search.

Highlights

Visibility tier model end-to-end

  • Project list, MCP history reads, asset attachments, and inbox review queue now all gate on artifact visibility (public / org / private).
  • Project tier caps the per-artifact visibility ceiling so a private project cannot expose public artifacts above its own ceiling.
  • Cross-visibility asset warnings + local-path upload restrictions land the asset surface defaults on the safer side.

Reader UX

  • Cmd-K now searches across every project the caller can see, not just the active project.
  • Reader markdown rendering covers more block + inline cases.
  • Wiki list adds artifact pagination; sidebar area button nesting + inbox review queue both hardened.

Task template + propose

  • Task template gains an `## Outcome` slot so `pindoc.task.claim_done` evidence stays consistent across the corpus.
  • `pindoc.artifact.propose` validation noise toned down (legitimate writes no longer flagged).
  • Pin commit-evidence requirement now splits by lane (code-pin vs evidence-only artifacts).

OAuth + auth

  • DCR (Dynamic Client Registration) gains lifecycle pruning to bound stale clients.
  • OAuth consent flow secured + localized; admin UX cleanups.
  • First-run identity routes are guarded against bypass.

Compatibility

Backwards-compatible with v0.1.0 self-host installs. `docker compose pull && docker compose up -d` upgrades the daemon without DB rewrite. Existing artifacts are unchanged; new visibility filters only restrict reads — no data is dropped.

Install

```bash
git clone https://github.com/var-gg/pindoc.git
cd pindoc
docker compose up -d --build
```

Open http://localhost:5830/. License: Apache-2.0.

Pindoc 0.1.0 — first OSS release

03 May 13:29

Choose a tag to compare

Code-pinned team memory for AI coding agents. Self-host with Docker Compose.

Highlights

  • MCP-native workflowpindoc.context_for_task, pindoc.artifact.propose, pindoc.task.queue and 30+ tools regulate agent behaviour instead of acting as thin CRUD.
  • Typed artifacts — Decision, Analysis, Debug, Flow, Task, TC, Glossary, plus domain packs.
  • Code-pinned memory — every artifact links back to commits, files, line ranges, URLs, resources, and other artifacts.
  • Multi-project daemon — one /mcp endpoint serves multiple projects; each tool call carries project_slug.
  • Visibility modelpublic / org / private is a Day-1 OSS schema concept, not deferred to a paid tier.
  • Auth — loopback trust for the single operator, GitHub OAuth (DCR + consent) for external/team access.
  • Bundled embeddings — EmbeddingGemma Q4 ONNX runs in-process, so the default Docker path needs no embedding sidecar.

Quick start

```bash
git clone https://github.com/var-gg/pindoc.git
cd pindoc
docker compose up -d --build
```

Open http://localhost:5830/. On a fresh instance, `/` redirects to the new-project wizard.

See README.md for full setup, docs/ for architecture, SECURITY.md for the trust envelope, and CONTRIBUTING.md to file issues or PRs.

License: Apache-2.0.