fix(test): unblock 1.0.10 publish

Author: AVIDS2

CHANGELOG.md

@@ -15,6 +15,7 @@ All notable changes to this project will be documented in this file.
 - **Agent Team wording tightened** -- Public docs now frame Agent Team as optional autonomous-agent/subagent coordination state rather than an IDE-window chat room. Existing `team_*` APIs and CLI namespaces are unchanged.
 
 ### Fixed
+- **Release publish blocker** -- `tests/integration/release-blockers.test.ts` now reserves an ephemeral local TCP port for the real `memorix serve-http` smoke test instead of assuming port `19879` is free. This removes a CI-only `EADDRINUSE` failure that blocked the npm publish workflow.
 - **Standalone dashboard embedding config (#46 follow-up)** -- `memorix dashboard` now loads project `.env` / project YAML before dashboard status routes initialize embedding provider state, matching `status`, `doctor`, and TUI behavior.
 
 ### Documentation

README.md

@@ -436,7 +436,7 @@ Additional deep references:
 
 ## What's New in 1.0.10
 
-Version `1.0.10` tightens Memorix's low-intrusion operator story: privacy-safe handoff diagnostics, clearer cross-agent memory boundaries, optional session semantics in generated rules, independent TUI agent LLM config, a better fresh-project cold-start path, and safer update behavior.
+Version `1.0.10` tightens Memorix's low-intrusion operator story: privacy-safe handoff diagnostics, clearer cross-agent memory boundaries, optional session semantics in generated rules, independent TUI agent LLM config, a better fresh-project cold-start path, safer update behavior, and a release-gate fix so the real `serve-http` smoke test no longer depends on port `19879` being free on the runner.
 
 - **Privacy-Safe Handoff Receipt**: `memorix receipt --json` and `memorix doctor --receipt` expose hashes/counts for project identity, writes, and optional probe results without leaking raw chat, memory text, queries, tool payloads, or local paths.
 - **Lower-Intrusion Agent Guidance**: Generated rules now treat `memorix_session_start` as optional and avoid repeating `memorix_search` in the same turn after a confirmed fresh-project cold start.

README.zh-CN.md

@@ -433,7 +433,7 @@ Memorix 不是一条单线流水线。它从多个入口接收记忆，把内容
 
 ## 1.0.10 更新亮点
 
-`1.0.10` 继续把 Memorix 往更低侵入、更容易排障的 operator 体验上收紧：跨 agent 交接诊断更安全、共享记忆边界更清晰、生成规则更克制、TUI agent LLM 配置更独立，同时修复了 fresh project 和更新检查里的几个易误解路径。
+`1.0.10` 继续把 Memorix 往更低侵入、更容易排障的 operator 体验上收紧：跨 agent 交接诊断更安全、共享记忆边界更清晰、生成规则更克制、TUI agent LLM 配置更独立，同时补上了一个发版阻断修复：真实 `serve-http` 冒烟测试改为运行时申请空闲本地端口，不再依赖 CI 机器上的 `19879` 端口必须空闲。
 
 - **隐私安全的交接 Receipt**：`memorix receipt --json` 和 `memorix doctor --receipt` 提供项目身份哈希、写入/检索计数、最近 observation ID 哈希和可选 probe 结果计数，用于跨 agent memory 排障；不暴露原始 chat、记忆文本、查询、tool payload 或本地路径。
 - **更低侵入的 Agent 指南**：生成规则现在把 `memorix_session_start` 视为可选动作，只在 handoff、长任务、session 恢复、team 协调或 HTTP 项目绑定时推荐使用。

tests/integration/release-blockers.test.ts

@@ -12,6 +12,7 @@
 import { describe, it, expect, beforeEach, afterEach, beforeAll, afterAll, vi } from 'vitest';
 import { writeFileSync, unlinkSync, mkdirSync, existsSync } from 'node:fs';
 import { spawn, type ChildProcess } from 'node:child_process';
+import { createServer as createNetServer } from 'node:net';
 
 vi.mock('../../src/embedding/provider.js', () => ({
   getEmbeddingProvider: async () => null,
@@ -34,6 +35,26 @@ import { compactDetail } from '../../src/compact/engine.js';
 import { storeObservation, initObservations, getObservationCount } from '../../src/memory/observations.js';
 import { getLastSearchMode, resetDb, searchObservations } from '../../src/store/orama-store.js';
 
+async function reserveEphemeralPort(): Promise<number> {
+  const probe = createNetServer();
+  await new Promise<void>((resolve, reject) => {
+    probe.once('error', reject);
+    probe.listen(0, '127.0.0.1', () => resolve());
+  });
+  const address = probe.address();
+  if (!address || typeof address === 'string') {
+    await new Promise<void>((resolve, reject) => {
+      probe.close(err => (err ? reject(err) : resolve()));
+    });
+    throw new Error('Failed to reserve an ephemeral TCP port');
+  }
+  const { port } = address;
+  await new Promise<void>((resolve, reject) => {
+    probe.close(err => (err ? reject(err) : resolve()));
+  });
+  return port;
+}
+
 // ================================================================
 // B2: /api/config startup project YAML leak via global fallback
 // ================================================================
@@ -259,6 +280,22 @@ describe('B5: search mode is project-scoped', () => {
   });
 });
 
+describe('release-blocker test helpers', () => {
+  it('allocates a reusable local TCP port', async () => {
+    const port = await reserveEphemeralPort();
+    expect(port).toBeGreaterThan(0);
+
+    const probe = createNetServer();
+    await new Promise<void>((resolve, reject) => {
+      probe.once('error', reject);
+      probe.listen(port, '127.0.0.1', () => resolve());
+    });
+    await new Promise<void>((resolve, reject) => {
+      probe.close(err => (err ? reject(err) : resolve()));
+    });
+  });
+});
+
 // ================================================================
 // B1 + B2: Real embedded serve-http route tests
 //
@@ -269,8 +306,8 @@ describe('B5: search mode is project-scoped', () => {
 // Requires: `npm run build` must have been run first.
 // ================================================================
 describe('B1+B2: Real embedded serve-http route tests', () => {
-  const REAL_PORT = 19879;
-  const REAL_BASE = `http://127.0.0.1:${REAL_PORT}`;
+  let REAL_PORT = 0;
+  let REAL_BASE = '';
   const STARTUP_PROJECT_ID = 'test/real-http-blocker';
   const SECONDARY_PROJECT_ID = 'other/secondary';
   const originalHome = process.env.HOME;
@@ -284,6 +321,8 @@ describe('B1+B2: Real embedded serve-http route tests', () => {
     if (!existsSync(distCli)) {
       throw new Error(`dist/cli/index.js not found at ${distCli}. Run \`npm run build\` first.`);
     }
+    REAL_PORT = await reserveEphemeralPort();
+    REAL_BASE = `http://127.0.0.1:${REAL_PORT}`;
 
     // Create temp dir with fake git repo + memorix.yml containing canary values
     startupDir = await fs.mkdtemp(path.join(os.tmpdir(), 'memorix-real-http-'));