@vorim/mcp-server 1.1.6 → 1.1.7

package/build/index.js

@@ -40,14 +40,22 @@ if (!API_KEY) {
     process.exit(1);
 }
 // ─── HTTP Client ──────────────────────────────────────────────────────────
-// Read the package version once so the User-Agent string and the MCP
-// server's advertised version stay in sync with package.json. The
-// hardcoded fallback is the last-known version — operators see a
-// loud-fail if it ever drifts in CI because `npm test` re-reads
-// package.json and compares.
+// Read the package version once so the User-Agent string and the
+// MCP server's advertised version stay in sync with package.json.
+//
+// Caveats:
+//   1. Bundlers (esbuild / webpack) that inline the source can break
+//      the readFileSync path because import.meta.url no longer points
+//      at the npm install layout. The fallback constant below is the
+//      last-known version and MUST be bumped in lockstep with
+//      package.json — there is NO CI assertion enforcing this today.
+//   2. If readFileSync succeeds but JSON.parse fails (corrupt file),
+//      we log a warning so operators see the silent drift rather
+//      than discovering it via a User-Agent grep weeks later.
 import { readFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { dirname, join } from "node:path";
+const MCP_VERSION_FALLBACK = "1.1.7";
 function readMcpVersion() {
     try {
         const here = dirname(fileURLToPath(import.meta.url));
@@ -55,9 +63,16 @@ function readMcpVersion() {
         const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
         if (typeof pkg.version === "string")
             return pkg.version;
+        // eslint-disable-next-line no-console
+        console.warn(`[vorim-mcp-server] package.json missing version field — using fallback ${MCP_VERSION_FALLBACK}`);
+    }
+    catch (err) {
+        // eslint-disable-next-line no-console
+        console.warn(`[vorim-mcp-server] could not read package.json (${err.message ?? err}) — ` +
+            `using fallback ${MCP_VERSION_FALLBACK}. If this is a bundled build, bump ` +
+            `MCP_VERSION_FALLBACK in lockstep with the published package.`);
     }
-    catch { /* fall through */ }
-    return "1.1.6"; // hardcoded fallback; bump alongside package.json
+    return MCP_VERSION_FALLBACK;
 }
 const MCP_VERSION = readMcpVersion();
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vorim/mcp-server",
-  "version": "1.1.6",
+  "version": "1.1.7",
   "mcpName": "io.github.Kzino/vorim-mcp-server",
   "description": "MCP server for Vorim AI — AI agent identity, permissions, and audit trails",
   "type": "module",