v0.30.0 — index self-heal (foreign writer + embeddings backfill) + MCP warm-on-boot

[hamr0]

What

Three index-integrity fixes, released as v0.30.0.

Added

• MCP warm-on-boot. An MCP-only host has no SessionStart hook to build the index, so the model could recall against an empty/stale one. The server now kicks a background index() right after the initialize handshake — fire-and-forget (the handshake never waits), rejections logged to stderr (never the JSON-RPC stdout stream). Opt out with LITECTX_NO_WARM_INDEX.

Fixed

• Foreign-writer subset poisoning. The whole-index PRAGMA user_version stamp (0.29.0) is blind to a different writer (old global CLI, stale node_modules) re-chunking some files — it never touches user_version. Each node now carries the stamp of the litectx that wrote it (additive nodes.stamp, DEFAULT 0 = "rebuild me"); a poisoned file self-identifies and re-chunks on the next unforced pass even when its bytes are unchanged. Existing indexes migrate on open.
• Embeddings backfill on off→on. A file first indexed with the tier off (library default) has no vector; the content diff fast-skips it as "unchanged" on a later on pass (CLI/MCP default), leaving semantic recall silently dead on it. index() now embeds any indexed-but-vectorless file (read + embed only, no re-chunk), idempotently.

Verification

• node --test → 409 pass / 0 fail / 1 env-skip, exit 0
• tsc --noEmit → exit 0
• Adversarial 4-agent diff review → 0 confirmed findings; embed-input parity (backfill vs normal path) independently verified
• Security: all new SQL parameterized; methods are file-axis (no tenant surface); background rejection caught → stderr

Scope

5 files (+167/−8 code) + docs (CHANGELOG, litectx.context.md, PRD self-heal section).

🤖 Generated with Claude Code

https://claude.ai/code/session_014c3EffnCPFetsv41LhZcJx